IopLiveDumpTraceInterfaceStart
VOID __stdcall IopLiveDumpTraceInterfaceStart(UINT64 Interface){
int v1;
const _EVENT_DESCRIPTOR *v2;
if( IopLiveDumpIsTracingEnabled() )
{
if( v1 )
{
v2 = (const _EVENT_DESCRIPTOR *)LIVEDUMP_EVENT_WRITE_DEFERRED_DATA_API_START;
if( v1 != 1 )
v2 = &LIVEDUMP_EVENT_DISCARD_DEFERRED_DATA_API_START;
}
else
{
v2 = (const _EVENT_DESCRIPTOR *)LIVEDUMP_EVENT_CAPTURE_API_START;
}
EtwWriteEx(*(&stru_140CF2E80 + 602), v2, 0i64, 0, 0, 0, 0, 0i64);
}
}Referenced by:
DbgkpWerCleanupContext
IoCaptureLiveDump
IoWriteDeferredLiveDumpData