IopLiveDumpTraceCaptureMemoryPages
UINT8 __stdcall IopLiveDumpTraceCaptureMemoryPages(){
UINT8 result;
__int64 v1;
_EVENT_DATA_DESCRIPTOR UserData;
__int64 v3;
__int64 v4;
__int64 v5;
__int64 v6;
__int64 v7;
__int64 v8;
__int64 v9;
__int64 v10;
__int64 v11;
__int64 v12;
__int64 v13;
__int64 v14;
result = IopLiveDumpIsTracingEnabled();
if( result )
{
*(_QWORD *)&UserData.Size = 8i64;
UserData.Ptr = v1 + 480;
v4 = 8i64;
v3 = v1 + 488;
v6 = 8i64;
v5 = v1 + 496;
v7 = v1 + 512;
v9 = v1 + 520;
v11 = v1 + 528;
v13 = v1 + 536;
v8 = 8i64;
v10 = 8i64;
v12 = 8i64;
v14 = 8i64;
return EtwWriteEx(
*(&stru_140CF2E80 + 602),
&LIVEDUMP_EVENT_CAPTURE_WORKFLOW_CAPTURE_MEMORY_PAGES,
0i64,
0,
0,
0,
7u,
&UserData);
}
return result;
}Referenced by:
IopLiveDumpCaptureMemoryPages