IopLiveDumpTraceCaptureMemoryPages

UINT8 __stdcall IopLiveDumpTraceCaptureMemoryPages(){
  UINT8 result; 
  __int64 v1; 
  _EVENT_DATA_DESCRIPTOR UserData; 
  __int64 v3; 
  __int64 v4; 
  __int64 v5; 
  __int64 v6; 
  __int64 v7; 
  __int64 v8; 
  __int64 v9; 
  __int64 v10; 
  __int64 v11; 
  __int64 v12; 
  __int64 v13; 
  __int64 v14; 

  result = IopLiveDumpIsTracingEnabled();
  if( result )
  {
    *(_QWORD *)&UserData.Size = 8i64;
    UserData.Ptr = v1 + 480;
    v4 = 8i64;
    v3 = v1 + 488;
    v6 = 8i64;
    v5 = v1 + 496;
    v7 = v1 + 512;
    v9 = v1 + 520;
    v11 = v1 + 528;
    v13 = v1 + 536;
    v8 = 8i64;
    v10 = 8i64;
    v12 = 8i64;
    v14 = 8i64;
    return EtwWriteEx(
             *(&stru_140CF2E80 + 602),
             &LIVEDUMP_EVENT_CAPTURE_WORKFLOW_CAPTURE_MEMORY_PAGES,
             0i64,
             0,
             0,
             0,
             7u,
             &UserData);
  }
  return result;
}

Referenced by:

IopLiveDumpCaptureMemoryPages