WmipProcessLegacyEtwCallback
CHAR __fastcall WmipProcessLegacyEtwCallback(INT64 a1, INT64 a2){
CHAR result;
__int64 v5;
UINT8 i;
__int64 v7;
__int128 v8;
__int64 v9;
IO_STATUS_BLOCK Iosb;
int Buffer[2];
__int64 v12;
__int64 v13;
__int128 DataPath;
int v15;
int v16;
__int64 v17;
__int64 v18;
result = -*(_BYTE *)(a1 + 36);
v5 = 0i64;
for( i = 5 - (*(_BYTE *)(a1 + 36) != 0); (unsigned int)v5 < *(_DWORD *)(a1 + 32); v5 = (unsigned int)(v5 + 1) )
{
v7 = *(_QWORD *)(a1 + 24);
v8 = *(_OWORD *)(a2 + 72);
v9 = *(_QWORD *)(a1 + 8 * v5 + 40);
Buffer[1] = 0;
v13 = 0i64;
v15 = 0;
v18 = 0i64;
v12 = v7;
v17 = v7;
DataPath = v8;
Buffer[0] = 64;
v16 = 0x20000;
WmipSendWmiIrp(i, *(unsigned int *)(v9 + 56), &DataPath, 0x40ui64, Buffer, &Iosb);
result = WmipUnreferenceEntry((__int64)&WmipDSChunkInfo, (volatile signed __int64 *)v9);
}
return result;
}Referenced by:
WmipLegacyEtwWorker