PopBootLoaderTraceProcess
VOID __stdcall PopBootLoaderTraceProcess(){
UINT32 v0;
_FILE_OBJECT *v1;
void *v2;
ULONG *v3;
ULONG_PTR v4;
UINT64 v5;
__int64 v6;
CHAR *v7;
UINT64 v8;
v4 = HiberContext;
if( HiberContext )
{
BapdRecordFirmwareBootStats(v1, v0, v2, v3);
v5 = qword_140C02E50;
qword_140C02E50 = 0i64;
LODWORD(dword_140C02E30) = 0;
EtwUnregister(v5);
v6 = *(_QWORD *)(v4 + 216);
if( v6 )
{
v7 = *(CHAR **)(v6 + 32);
if( *(_DWORD *)v7 == 1281517896 )
{
v8 = *((unsigned int *)v7 + 3);
if( (_DWORD)v8 )
BapdWriteEtwEvents(&v7[*((unsigned int *)v7 + 2)], v8);
}
}
}
}Referenced by:
PopTransitionSystemPowerStateEx