IopLiveDumpTraceMarkRequiredDumpDataDuration
CHAR __fastcall IopLiveDumpTraceMarkRequiredDumpDataDuration(GUID *a1, INT64 a2){
int v3;
_DWORD *v4;
EVENT_DESCRIPTOR *v5;
UINT64 UserDataCount;
INT64 v8;
EVENT_DATA_DESCRIPTOR UserData;
struct _EVENT_DATA_DESCRIPTOR v10;
INT64 *v11;
int v12;
int v13;
INT64 v14;
v14 = a2;
LOBYTE(v3) = IopLiveDumpIsTracingEnabled();
if( (_BYTE)v3 )
{
if( !v4[104] )
{
v3 = v4[78];
if( (v3 & 1) != 0 )
{
UserData.Reserved = 0;
UserData.Ptr = (unsigned __int64)&v14;
v5 = (EVENT_DESCRIPTOR *)LIVEDUMP_EVENT_SIZING_WORKFLOW_SYSTEM_QUISCED_MARK_REQUIRED_DUMP_DATA;
if( (v4[20] & 1) == 0 )
v5 = (EVENT_DESCRIPTOR *)&LIVEDUMP_EVENT_CAPTURE_PAGES_WORKFLOW_SYSTEM_QUISCED_MARK_REQUIRED_DUMP_DATA;
UserData.Size = 8;
LODWORD(UserDataCount) = 1;
LOBYTE(v3) = EtwWriteEx(IopLiveDumpEtwRegHandle, v5, 0i64, 0i64, 0i64, 0i64, UserDataCount, &UserData);
if( (unsigned int)dword_140C04498 > 5 )
{
LOBYTE(v3) = tlgKeywordOn((__int64)&dword_140C04498, 0x200000000000i64);
if( (_BYTE)v3 )
{
v13 = 0;
v8 = v14;
v12 = 8;
v11 = &v8;
LOBYTE(v3) = tlgWriteTransfer_EtwWriteTransfer(
(__int64)&dword_140C04498,
(unsigned __int8 *)byte_140023BB0,
a1 + 54,
a1 + 53,
3u,
&v10);
}
}
}
}
}
return v3;
}Referenced by:
IopLiveDumpMarkRequiredDumpData