EtwpCCSwapFlush
VOID __fastcall EtwpCCSwapFlush(){
int v0;
_DWORD *v1;
int v2;
unsigned int v3;
unsigned int v4;
unsigned int v6;
__int64 v7;
__int64 v8;
int v9;
unsigned int v10;
INT64 v11;
UINT64 Flag;
UINT64 v13;
char a3[8];
EVENT_DATA_DESCRIPTOR EventData;
a3[0] = 0;
EventData.Ptr = (unsigned __int64)(v1 + 4);
v2 = v0;
v3 = *v1 - 16;
EventData.Reserved = 0;
EventData.Size = v3;
v4 = *(_DWORD *)(EtwpHostSiloState + 4224);
while( _BitScanForward(&v6, v4) )
{
v4 &= v4 - 1;
v7 = v6;
v8 = 32i64 * v6 + EtwpHostSiloState + 4260;
if( v8 )
{
v9 = *(_DWORD *)(v8 + 4);
if( (v9 & 4) != 0 && (v9 & 0x100) != 0 )
{
v10 = *(unsigned __int8 *)(EtwpHostSiloState + 2 * v7 + 4208);
v11 = EtwpOpenLogger(*(unsigned __int8 *)(EtwpHostSiloState + 2 * v7 + 4208), EtwpHostSiloState, 0, a3);
if( v11 )
{
if( *(_DWORD *)(v11 + 216) == v2 )
{
LODWORD(v13) = 514;
LOWORD(Flag) = 1317;
EtwpLogKernelEvent(&EventData, EtwpHostSiloState, v10, 1u, Flag, v13);
}
EtwpCloseLogger(v10, EtwpHostSiloState, a3[0]);
}
}
}
}
}Referenced by:
EtwpCCSwapTrace