EtwpTraceNetwork
VOID __stdcall EtwpTraceNetwork(UINT64 GroupType, PVOID EventInfo, UINT64 EventInfoLen, PVOID Reserved){
UINT16 v4;
UINT64 Flag;
struct _EVENT_DATA_DESCRIPTOR UserData;
UserData.Reserved = 0;
v4 = GroupType;
UserData.Ptr = (unsigned __int64)EventInfo;
UserData.Size = EventInfoLen;
if( EtwpHostSiloState != -4516 && (*(_DWORD *)(EtwpHostSiloState + 4516) & 0x10000) != 0 )
EtwpNetProvTraceNetwork(&UserData, GroupType);
LODWORD(Flag) = 4200450;
EtwTraceKernelEvent(&UserData, 1ui64, 0x10000ui64, v4, Flag);
}Referenced by:
No references.