IopLiveDumpTraceMirroringStart
NTSTATUS __stdcall IopLiveDumpTraceMirroringStart(){
NTSTATUS result;
__int64 v1;
EVENT_DESCRIPTOR *v2;
UINT64 UserDataCount;
LOBYTE(result) = IopLiveDumpIsTracingEnabled();
if( (_BYTE)result )
{
v2 = (EVENT_DESCRIPTOR *)LIVEDUMP_EVENT_SIZING_WORKFLOW_MIRRORING_START;
LODWORD(UserDataCount) = 0;
if( (*(_DWORD *)(v1 + 80) & 1) == 0 )
v2 = (EVENT_DESCRIPTOR *)&LIVEDUMP_EVENT_CAPTURE_PAGES_WORKFLOW_MIRRORING_START;
return EtwWriteEx(IopLiveDumpEtwRegHandle, v2, 0i64, 0i64, 0i64, 0i64, UserDataCount, 0i64);
}
return result;
}Referenced by:
No references.