IopLiveDumpTraceEstimatedAndAllocatedPageCount
CHAR __fastcall IopLiveDumpTraceEstimatedAndAllocatedPageCount(INT64 a1, INT64 a2){
int v2;
CHAR result;
__int64 v4;
UINT64 UserDataCount;
int v6;
int v7;
EVENT_DATA_DESCRIPTOR UserData;
__int64 v9;
__int64 v10;
int *v11;
__int64 v12;
__int64 v13;
__int64 v14;
int *v15;
__int64 v16;
INT64 v17;
v17 = a2;
v2 = (*(_DWORD *)(a1 + 80) >> 10) & 1;
v6 = (*(_DWORD *)(a1 + 80) >> 9) & 1;
v7 = v2;
result = IopLiveDumpIsTracingEnabled();
if( result )
{
*(_QWORD *)&UserData.Size = 8i64;
UserData.Ptr = (unsigned __int64)&v17;
v10 = 8i64;
v9 = v4 + 680;
v12 = 4i64;
v11 = &v6;
v13 = v4 + 1048;
v15 = &v7;
LODWORD(UserDataCount) = 5;
v14 = 8i64;
v16 = 4i64;
return EtwWriteEx(
IopLiveDumpEtwRegHandle,
(EVENT_DESCRIPTOR *)&LIVEDUMP_EVENT_ESTIMATED_AND_ALLOCATED_MEMORY_PAGES,
0i64,
0i64,
0i64,
0i64,
UserDataCount,
&UserData);
}
return result;
}Referenced by:
IopLiveDumpAllocateDumpBuffers