PopDiagTraceIrpFinishTelemetry
CHAR __stdcall PopDiagTraceIrpFinishTelemetry(INT64 a1){
const WCHAR *v1;
__int64 v2;
int v3;
unsigned __int128 v4;
_IRP *v5;
__int64 v6;
__int64 v7;
__int64 v8;
_DEVICE_OBJECT *DeviceThatFailedIrp;
UINT64 v10;
NTSTATUS v11;
wchar_t *v12;
int v13;
int v14;
int v16;
int v17;
int v18;
int v19;
int v20;
__int64 v21;
__int64 v22;
__int64 v23;
_EVENT_DATA_DESCRIPTOR v24;
int *v25;
int v26;
int v27;
__int64 *v28;
int v29;
int v30;
__int64 *v31;
int v32;
int v33;
char v34[16];
int *v35;
int v36;
int v37;
int *v38;
int v39;
int v40;
int *v41;
int v42;
int v43;
int *v44;
int v45;
int v46;
__int64 *v47;
int v48;
int v49;
wchar_t DriverName[64];
v1 = &ppszDestEnd;
v2 = *(_QWORD *)(a1 + 72i64 * *(char *)(a1 + 66) + 200);
v3 = *(_DWORD *)(a1 + 48);
*(_QWORD *)&v4 = KiQueryUnbiasedInterruptTime(1u);
v6 = *(_QWORD *)(v2 + 48);
v7 = v4;
if( v6 )
{
if( *(_BYTE *)(v2 + 196) )
{
v4 = (unsigned __int64)(v4 - v6) * (unsigned __int128)0x346DC5D63886594Bui64;
v8 = *((_QWORD *)&v4 + 1) >> 11;
if( (unsigned int)(*((_QWORD *)&v4 + 1) >> 11) >= 0x1388 )
{
if( v3 < 0 && !*(_DWORD *)(v2 + 188) )
{
DeviceThatFailedIrp = IoFindDeviceThatFailedIrp(v5);
v11 = PopDiagGetDriverName(DeviceThatFailedIrp, DriverName, v10);
v12 = DriverName;
if( v11 < 0 )
v12 = (wchar_t *)&ppszDestEnd;
v1 = v12;
}
LOBYTE(v4) = PopComputeWatchdogTimeout((_POP_IRP_DATA *)v2);
if( *(&stru_140C00F40 + 1194) > 5u )
{
LOBYTE(v4) = tlgKeywordOn((__int64)&stru_140C00F40 + 4776, 0x400000000000i64);
if( (_BYTE)v4 )
{
v27 = 0;
v30 = 0;
v33 = 0;
v25 = &v16;
v21 = *(_QWORD *)(v2 + 48);
v28 = &v21;
v16 = v8;
v31 = &v22;
v26 = 4;
v29 = 8;
v22 = v7;
v32 = 8;
tlgCreate1Sz_wchar_t((__int64)v34, v1);
v37 = 0;
v40 = 0;
v43 = 0;
v46 = 0;
v49 = 0;
v35 = &v17;
v18 = *(_DWORD *)(v2 + 188);
v38 = &v18;
v41 = &v19;
v44 = &v20;
v47 = &v23;
v17 = v13;
v36 = 4;
v39 = 4;
v19 = v14;
v42 = 4;
v20 = v3;
v45 = 4;
v23 = 0x1000000i64;
v48 = 8;
LOBYTE(v4) = tlgWriteTransfer_EtwWriteTransfer(
(__int64)&stru_140C00F40 + 4776,
(unsigned __int8 *)byte_140027E11,
0i64,
0i64,
0xBu,
&v24);
}
}
}
}
}
return v4;
}Referenced by:
PopDiagTraceIrpFinish