EtwpClockSourceRunDown
VOID __stdcall EtwpClockSourceRunDown(UINT64 LoggerId, UINT8 Start){
UINT8 DynamicTickDisableReason;
unsigned int v4;
_ETW_SILODRIVERSTATE *v5;
__int64 v6;
int v7;
__int128 v8[2];
__int64 *v9;
int v10;
int v11;
if( Start )
{
memset(v8, 0, sizeof(v8));
((void(__fastcall *)(__int128 *))off_140C00870[0])(v8);
v6 = *(_QWORD *)((char *)v8 + 4);
DynamicTickDisableReason = KeGetDynamicTickDisableReason();
v11 = 0;
v4 = *(_DWORD *)LoggerId;
v5 = *(_ETW_SILODRIVERSTATE **)(LoggerId + 1080);
v9 = &v6;
v7 = DynamicTickDisableReason;
v10 = 12;
EtwpLogKernelEvent((__int64)&v9, v5, v4, 1u, 0xF5Au, 0x401802u);
}
}Referenced by:
EtwpKernelTraceRundown