PnpDiagnosticTraceObject
NTSTATUS __fastcall PnpDiagnosticTraceObject(PCEVENT_DESCRIPTOR EventDescriptor, unsigned __int16 *a2){
REGHANDLE v2;
int v6;
__int16 v7;
_EVENT_DATA_DESCRIPTOR UserData;
__int64 v9;
int v10;
int v11;
v2 = RegHandle;
if( !RegHandle || !EtwEventEnabled(RegHandle, EventDescriptor) )
return 0;
v6 = *a2;
UserData.Reserved = 0;
v11 = 0;
v7 = (unsigned __int16)v6 >> 1;
UserData.Ptr = (unsigned __int64)&v7;
v9 = *((_QWORD *)a2 + 1);
UserData.Size = 2;
v10 = v6;
return EtwWriteEx(v2, EventDescriptor, 0i64, 0, 0, 0, 2u, &UserData);
}Referenced by:
IopLoadDriver
IopUnloadDriver
PiDevCfgProcessDevice
PiDrvDbLoadNodeWorkerCallback
PiDrvDbUnloadNodeWorkerCallback
PipEnumerateDevice
PnpDeviceCompletionRoutine
PnpEarlyLaunchImageNotificationPostProcess
PnpEarlyLaunchImageNotificationPreProcess
PnpInitializeBootStartDriver
PnpQueueQueryAndRemoveEvent
PnpRebalance
PnpStartDeviceNode