EtwEnableTrace
NTSTATUS __stdcall EtwEnableTrace(
const _GUID *ProviderId,
const _GUID *SourceId,
UINT64 TraceHandle,
UINT64 ControlCode,
UINT8 Level,
UINT64 OrKeywordMask,
UINT64 AndKeywordMask,
UINT64 EnableProperty){
int v8;
__int16 v9;
_ETW_SILODRIVERSTATE *EtwSiloState;
v8 = ControlCode;
v9 = TraceHandle;
EtwSiloState = PsGetCurrentServerSiloGlobals((_KSPIN_LOCK *)ProviderId)->EtwSiloState;
return EtwpEnableTrace(
EtwSiloState,
(__int128 *)ProviderId,
SourceId,
v9,
v8,
Level,
OrKeywordMask,
AndKeywordMask,
EnableProperty,
0i64,
0i64,
0i64,
0,
0i64,
0,
0i64,
0,
0i64);
}Referenced by:
EtwWmitraceWorker
WdipSemEnableDisableTrace