IopLiveDumpTraceBufferAllocation
VOID __stdcall IopLiveDumpTraceBufferAllocation(_LIVEDUMP_CONTEXT *Context){
__int64 v1;
__int64 v2;
__int64 v3;
__int64 v4;
__int64 v5;
_EVENT_DATA_DESCRIPTOR UserData;
__int64 *v7;
__int64 v8;
__int64 *v9;
__int64 v10;
__int64 *v11;
__int64 v12;
__int64 v13;
__int64 v14;
__int64 v15;
__int64 v16;
__int64 v17;
__int64 v18;
if( IopLiveDumpIsTracingEnabled() )
{
v2 = *(_QWORD *)(v1 + 688) << 12;
v3 = *(_QWORD *)(v1 + 696) << 12;
v5 = *(_QWORD *)(v1 + 704) << 12;
v4 = *(unsigned int *)(v1 + 152);
UserData.Ptr = (unsigned __int64)&v2;
v7 = &v3;
v9 = &v4;
v11 = &v5;
v13 = v1 + 768;
v15 = v1 + 776;
v17 = v1 + 296;
*(_QWORD *)&UserData.Size = 8i64;
v8 = 8i64;
v10 = 8i64;
v12 = 8i64;
v14 = 8i64;
v16 = 8i64;
v18 = 8i64;
EtwWriteEx(
*(&stru_140CF2E80 + 602),
&LIVEDUMP_EVENT_SIZING_WORKFLOW_BUFFER_ALLOCATION,
0i64,
0,
0,
0,
7u,
&UserData);
}
}Referenced by:
IopLiveDumpAllocAndInitResources