IopLiveDumpTraceBufferAllocation
UINT8 IopLiveDumpTraceBufferAllocation(){
UINT8 result;
__int64 v1;
UINT64 UserDataCount;
__int64 v3;
__int64 v4;
__int64 v5;
__int64 v6;
EVENT_DATA_DESCRIPTOR UserData;
__int64 *v8;
__int64 v9;
__int64 *v10;
__int64 v11;
__int64 *v12;
__int64 v13;
__int64 v14;
__int64 v15;
__int64 v16;
__int64 v17;
__int64 v18;
__int64 v19;
result = IopLiveDumpIsTracingEnabled();
if( result )
{
v3 = *(_QWORD *)(v1 + 688) << 12;
v4 = *(_QWORD *)(v1 + 696) << 12;
v6 = *(_QWORD *)(v1 + 704) << 12;
v5 = *(unsigned int *)(v1 + 152);
UserData.Ptr = (unsigned __int64)&v3;
v8 = &v4;
v10 = &v5;
v12 = &v6;
v14 = v1 + 768;
v16 = v1 + 776;
v18 = v1 + 296;
LODWORD(UserDataCount) = 7;
*(_QWORD *)&UserData.Size = 8i64;
v9 = 8i64;
v11 = 8i64;
v13 = 8i64;
v15 = 8i64;
v17 = 8i64;
v19 = 8i64;
return EtwWriteEx(
IopLiveDumpEtwRegHandle,
(EVENT_DESCRIPTOR *)&LIVEDUMP_EVENT_SIZING_WORKFLOW_BUFFER_ALLOCATION,
0i64,
0i64,
0i64,
0i64,
UserDataCount,
&UserData);
}
return result;
}Referenced by:
IopLiveDumpAllocAndInitResources