PoDiagCaptureUsermodeStack
_PO_DIAG_STACK_RECORD *__stdcall PoDiagCaptureUsermodeStack(){
VOID **PoolWithTag;
_PO_DIAG_STACK_RECORD *v1;
NTSTATUS v2;
PoolWithTag = ExAllocatePoolWithTag(1ui64, 0x108ui64, 1346721364i64);
v1 = (_PO_DIAG_STACK_RECORD *)PoolWithTag;
if( PoolWithTag )
{
memset(PoolWithTag, 0i64, 0x108u);
v2 = RtlWalkFrameChain((INT64)v1->Stack, 32i64, 1ui64);
if( v2 )
{
v1->StackDepth = v2;
}
else
{
ExFreePoolWithTag(v1, 0x50455654u);
return 0i64;
}
}
return v1;
}Referenced by:
NtSetTimerResolution