IopLiveDumpTraceCaptureHvlCollectLiveDumpDuration
CHAR __fastcall IopLiveDumpTraceCaptureHvlCollectLiveDumpDuration(GUID *a1){
int v2;
__int64 v3;
__int64 *v4;
__int64 v5;
UINT64 UserDataCount;
__int64 v8;
EVENT_DATA_DESCRIPTOR UserData;
struct _EVENT_DATA_DESCRIPTOR v10;
__int64 *v11;
int v12;
int v13;
LOBYTE(v2) = IopLiveDumpIsTracingEnabled();
if( (_BYTE)v2 )
{
if( !*(_DWORD *)(v3 + 416) )
{
v2 = *(_DWORD *)(v3 + 312);
if( (v2 & 1) != 0 )
{
UserData.Reserved = 0;
v4 = (__int64 *)(v3 + 528);
LODWORD(UserDataCount) = 1;
UserData.Ptr = v3 + 528;
UserData.Size = 8;
LOBYTE(v2) = EtwWriteEx(
IopLiveDumpEtwRegHandle,
(EVENT_DESCRIPTOR *)&LIVEDUMP_EVENT_CAPTURE_PAGES_WORKFLOW_SYSTEM_QUISCED_HVL_COLLECT_LIVEDUMP,
0i64,
0i64,
0i64,
0i64,
UserDataCount,
&UserData);
if( (unsigned int)dword_140C04498 > 5 )
{
LOBYTE(v2) = tlgKeywordOn((__int64)&dword_140C04498, 0x200000000000i64);
if( (_BYTE)v2 )
{
v5 = *v4;
v13 = 0;
v8 = v5;
v12 = 8;
v11 = &v8;
LOBYTE(v2) = tlgWriteTransfer_EtwWriteTransfer(
(__int64)&dword_140C04498,
(unsigned __int8 *)&word_14002394E,
a1 + 54,
a1 + 53,
3u,
&v10);
}
}
}
}
}
return v2;
}Referenced by:
IopLiveDumpEndMirroringCallback