IopLiveDumpTraceInterfaceEnd
VOID __stdcall IopLiveDumpTraceInterfaceEnd(UINT64 Interface, INT64 Status, INT64 a3){
int v3;
int v4;
const _EVENT_DESCRIPTOR *v5;
_EVENT_DATA_DESCRIPTOR UserData;
int v7;
v7 = a3;
if( IopLiveDumpIsTracingEnabled() )
{
if( v3 )
{
v5 = (const _EVENT_DESCRIPTOR *)LIVEDUMP_EVENT_WRITE_DEFERRED_DATA_API_END;
if( v4 != 1 )
v5 = &LIVEDUMP_EVENT_DISCARD_DEFERRED_DATA_API_END;
}
else
{
v5 = (const _EVENT_DESCRIPTOR *)LIVEDUMP_EVENT_CAPTURE_API_END;
}
*(_QWORD *)&UserData.Size = 4i64;
UserData.Ptr = (unsigned __int64)&v7;
EtwWriteEx(*(&stru_140CF2E80 + 602), v5, 0i64, 0, 0, 0, 1u, &UserData);
}
}Referenced by:
DbgkpWerCleanupContext
IoCaptureLiveDump
IoWriteDeferredLiveDumpData