IopLiveDumpTracePopulateBitmapForDumpDuration
CHAR __stdcall IopLiveDumpTracePopulateBitmapForDumpDuration(_GUID *a1, INT64 a2, INT64 a3){
int v4;
_DWORD *v5;
const _EVENT_DESCRIPTOR *v6;
INT64 v8;
INT64 v9;
_EVENT_DATA_DESCRIPTOR UserData;
INT64 *v11;
int v12;
int v13;
_EVENT_DATA_DESCRIPTOR v14;
INT64 *v15;
int v16;
int v17;
INT64 *v18;
int v19;
int v20;
INT64 v21;
INT64 v22;
v22 = a3;
v21 = a2;
LOBYTE(v4) = IopLiveDumpIsTracingEnabled();
if( (_BYTE)v4 )
{
if( !v5[104] )
{
v4 = v5[78];
if( (v4 & 1) != 0 )
{
UserData.Reserved = 0;
v13 = 0;
v6 = (const _EVENT_DESCRIPTOR *)LIVEDUMP_EVENT_SIZING_WORKFLOW_SYSTEM_QUISCED_POPULATE_BITMAP_FOR_DUMP;
UserData.Ptr = (unsigned __int64)&v21;
v11 = &v22;
if( (v5[20] & 1) == 0 )
v6 = &LIVEDUMP_EVENT_CAPTURE_PAGES_WORKFLOW_SYSTEM_QUISCED_POPULATE_BITMAP_FOR_DUMP;
UserData.Size = 8;
v12 = 8;
LOBYTE(v4) = EtwWriteEx(*(&stru_140CF2E80 + 602), v6, 0i64, 0, 0, 0, 2u, &UserData);
if( (unsigned int)dword_140C04498 > 5 )
{
LOBYTE(v4) = tlgKeywordOn((__int64)&dword_140C04498, 0x200000000000i64);
if( (_BYTE)v4 )
{
v17 = 0;
v20 = 0;
v8 = v21;
v16 = 8;
v15 = &v8;
v9 = v22;
v18 = &v9;
v19 = 8;
LOBYTE(v4) = tlgWriteTransfer_EtwWriteTransfer(
(__int64)&dword_140C04498,
(unsigned __int8 *)byte_140023990,
a1 + 54,
a1 + 53,
4u,
&v14);
}
}
}
}
}
return v4;
}Referenced by:
IopLiveDumpPopulateBitmapForDump