EtwpClockSourceRunDown

VOID __stdcall EtwpClockSourceRunDown(UINT64 LoggerId, UINT8 Start){
  UINT8 DynamicTickDisableReason; 
  unsigned int v4; 
  _ETW_SILODRIVERSTATE *v5; 
  __int64 v6; 
  int v7; 
  __int128 v8[2]; 
  __int64 *v9; 
  int v10; 
  int v11; 

  if( Start )
  {
    memset(v8, 0, sizeof(v8));
    ((void(__fastcall *)(__int128 *))off_140C00870[0])(v8);
    v6 = *(_QWORD *)((char *)v8 + 4);
    DynamicTickDisableReason = KeGetDynamicTickDisableReason();
    v11 = 0;
    v4 = *(_DWORD *)LoggerId;
    v5 = *(_ETW_SILODRIVERSTATE **)(LoggerId + 1080);
    v9 = &v6;
    v7 = DynamicTickDisableReason;
    v10 = 12;
    EtwpLogKernelEvent((__int64)&v9, v5, v4, 1u, 0xF5Au, 0x401802u);
  }
}

Referenced by:

EtwpKernelTraceRundown