EtwKernelMemoryRundown

VOID __stdcall EtwKernelMemoryRundown(){
  unsigned int v0; 
  __int64 v1; 
  __int64 v2; 
  unsigned int v4; 
  PERFINFO_GROUPMASK GroupMasks[4]; 
  __int128 v6; 

  *(_OWORD *)GroupMasks = 0i64;
  GroupMasks[1] = 8;
  v6 = 0i64;
  v0 = *(_DWORD *)(EtwpHostSiloState + 4224);
  while( _BitScanForward(&v4, v0) )
  {
    v0 &= v0 - 1;
    v1 = v4;
    v2 = 32i64 * v4 + EtwpHostSiloState + 4260;
    if( v2 )
    {
      if( (*(_DWORD *)(v2 + 20) & 1) != 0 )
        EtwpKernelTraceRundown(GroupMasks, EtwpHostSiloState, *(_BYTE *)(EtwpHostSiloState + 2 * v1 + 4208));
    }
  }
}

Referenced by: