IopLiveDumpTraceAllocationFromVMMemoryPartitionFailure
NTSTATUS __stdcall IopLiveDumpTraceAllocationFromVMMemoryPartitionFailure(){
NTSTATUS result;
__int64 v1;
UINT64 UserDataCount;
int v3;
EVENT_DATA_DESCRIPTOR UserData;
int *v5;
__int64 v6;
v3 = -1073741801;
LOBYTE(result) = IopLiveDumpIsTracingEnabled();
if( (_BYTE)result )
{
*(_QWORD *)&UserData.Size = 4i64;
UserData.Ptr = v1 + 1040;
v6 = 4i64;
v5 = &v3;
LODWORD(UserDataCount) = 2;
return EtwWriteEx(
IopLiveDumpEtwRegHandle,
(EVENT_DESCRIPTOR *)&LIVEDUMP_EVENT_SIZING_WORKFLOW_BUFFER_ALLOCATION_FROM_VM_MEMORY_PARTITION_FAILURE,
0i64,
0i64,
0i64,
0i64,
UserDataCount,
&UserData);
}
return result;
}Referenced by:
IopLiveDumpAllocateFromVMMemoryPartition