EtwpCoverageRecordAtHighIrql

NTSTATUS __stdcall EtwpCoverageRecordAtHighIrql(INT64 a1){
  NTSTATUS result; 
  __int64 v3; 
  unsigned __int8 CurrentIrql; 
  int v5; 
  INT64 v6[2]; 
  __int64 v7; 
  char pszDest[64]; 

  v5 = 0;
  result = EtwpCoverageValidateCP((_BYTE **)a1, &v5);
  if( result )
  {
    v3 = *(_QWORD *)(a1 + 16);
    *(_OWORD *)v6 = *(_OWORD *)a1;
    v7 = v3;
    RtlStringCchCopyA(pszDest, 0x40ui64, (CHAR *)v6[0]);
    HIDWORD(v6[1]) = 0;
    v6[0] = (INT64)pszDest;
    CurrentIrql = KeGetCurrentIrql();
    __writecr8(2ui64);
    EtwTelemetryCoverageReport((INT64)v6);
    __writecr8(CurrentIrql);
    result = HIDWORD(v6[1]);
    *(_DWORD *)(a1 + 12) = HIDWORD(v6[1]);
  }
  return result;
}

Referenced by: