EtwpCCSwapFlush

VOID __fastcall EtwpCCSwapFlush(){
  int v0; 
  _DWORD *v1; 
  int v2; 
  unsigned int v3; 
  unsigned int v4; 
  unsigned int v6; 
  __int64 v7; 
  __int64 v8; 
  int v9; 
  unsigned int v10; 
  INT64 v11; 
  UINT64 Flag; 
  UINT64 v13; 
  char a3[8]; 
  EVENT_DATA_DESCRIPTOR EventData; 
  a3[0] = 0;
  EventData.Ptr = (unsigned __int64)(v1 + 4);
  v2 = v0;
  v3 = *v1 - 16;
  EventData.Reserved = 0;
  EventData.Size = v3;
  v4 = *(_DWORD *)(EtwpHostSiloState + 4224);
  while( _BitScanForward(&v6, v4) )
  {
    v4 &= v4 - 1;
    v7 = v6;
    v8 = 32i64 * v6 + EtwpHostSiloState + 4260;
    if( v8 )
    {
      v9 = *(_DWORD *)(v8 + 4);
      if( (v9 & 4) != 0 && (v9 & 0x100) != 0 )
      {
        v10 = *(unsigned __int8 *)(EtwpHostSiloState + 2 * v7 + 4208);
        v11 = EtwpOpenLogger(*(unsigned __int8 *)(EtwpHostSiloState + 2 * v7 + 4208), EtwpHostSiloState, 0, a3);
        if( v11 )
        {
          if( *(_DWORD *)(v11 + 216) == v2 )
          {
            LODWORD(v13) = 514;
            LOWORD(Flag) = 1317;
            EtwpLogKernelEvent(&EventData, EtwpHostSiloState, v10, 1u, Flag, v13);
          }
          EtwpCloseLogger(v10, EtwpHostSiloState, a3[0]);
        }
      }
    }
  }
}

Referenced by:

EtwpCCSwapTrace