EtwpCovSampCaptureContextSetPaused

NTSTATUS __fastcall EtwpCovSampCaptureContextSetPaused(__int64 a1, __int64 a2, int a3){
  NTSTATUS result; 
  __int64 *i; 

  if( *(_DWORD *)(a2 + 916) != a3 )
  {
    if( a3 )
    {
      if( (*(_DWORD *)(a1 + 24) & 0x100) == 0 )
      {
        *(_DWORD *)(a2 + 916) = 1;
        result = KeSetEvent(*(PRKEVENT *)(a1 + 1160), 0, 0);
      }
    }
    else
    {
      *(_DWORD *)(a2 + 916) = 0;
    }
    for( i = *(__int64 **)(a2 + 576); i != (__int64 *)(a2 + 576); i = (__int64 *)*i )
    {
      result = *(_DWORD *)(a2 + 916);
      *((_DWORD *)i + 7) = result;
    }
  }
  return result;
}

Referenced by: