EtwpPerfectHashFunctionSearch

VOID __fastcall EtwpPerfectHashFunctionSearch(){
  __int64 v0; 
  __int16 v1; 
  __int64 v2; 
  __int64 v3; 

  v2 = (unsigned __int16)(*(_WORD *)(v0 + 2) & __ROR2__(v1, *(_BYTE *)(v0 + 1)));
  if( v1 != *(_WORD *)(v0 + 4 * v2 + 8) )
  {
    do
    {
      v3 = *(unsigned __int8 *)(v0 + 4 * v2 + 6);
      if( (_BYTE)v3 == 0xFF )
        break;
      v2 = *(unsigned __int8 *)(v0 + 4 * v2 + 6);
    }
    while( v1 != *(_WORD *)(v0 + 4 * v3 + 8) );
  }
}

Referenced by:

EtwpApplyEventIdPayloadFilter
EtwpApplyStackWalkIdFilter