tlgWriteEx_EtwWriteEx
NTSTATUS __fastcall tlgWriteEx_EtwWriteEx(
__int64 a1,
unsigned __int8 *a2,
__int64 a3,
UINT64 a4,
int a5,
int a6,
ULONG UserDataCount,
__int64 a8){
UINT64 UserDataCounta;
EVENT_DESCRIPTOR v10;
*(_DWORD *)&v10.Id = *a2 << 24;
*(_DWORD *)&v10.Level = *(unsigned __int16 *)(a2 + 1);
v10.Keyword = *(_QWORD *)(a2 + 3);
*(_QWORD *)a8 = *(_QWORD *)(a1 + 8);
*(_DWORD *)(a8 + 8) = **(unsigned __int16 **)(a1 + 8);
*(_QWORD *)(a8 + 16) = a2 + 11;
*(_DWORD *)(a8 + 12) = 2;
*(_DWORD *)(a8 + 24) = *(unsigned __int16 *)(a2 + 11);
*(_DWORD *)(a8 + 28) = 1;
LODWORD(UserDataCounta) = UserDataCount;
return EtwWriteEx(*(_QWORD *)(a1 + 32), &v10, 0i64, a4, 0i64, 0i64, UserDataCounta, (EVENT_DATA_DESCRIPTOR *)a8);
}Referenced by:
HalpTimerQueryAndResetRtcErrors
MiAgeWorkingSet
MiFlushStrongCodeDriverLoadFailures
MiLogCommitRequestFailed
MiLogCreateImageFileMapFailure
MiLogHotPatchManagement
MiLogHotPatchOperation
MiLogHotPatchOperationStatus
MiLogHotPatchPagesLocked
MiLogHotPatchRundown
MiLogNotifyPageHeat
MiLogOutswappedProcessCommitReacquire
MiLogOutswappedProcessCommitRelease
MiLogProcessWorkingSetsStart
MiLogProcessWorkingSetsStop
MiLogReserveVaFailed
MiLogResetPagesCommitRelease
MiLogStrongCodeDriverLoadFailure
MiLogTrimWs
MiLogWsEmptyControl
MiStoreLogFullPagefile
MiStoreLogNotCandidate
MiStoreLogWriteCompleteFailure
MiStoreLogWriteDisabled
MiStoreLogWriteIssueFailure
MiStoreLogWriteIssueRetry
MmNotifyProcessInSwapTrigger
MmStoreLogCorruptionFixed
PopDiagTraceFxDefaultPepWorkerEnd
PopPlNotifyDeviceDState
PopPlNotifyDeviceFState
PopPlPublishInitialPowerDraw
PopPlPublishSystemPowerChange
PopPlRegisterComponent
PopPlRegisterDevice
PopPlRegisterDeviceIterator
PopPlRegisterPowerPlane
PopPlTraceLogPowerPlane
VmpLogAccessFault
VmpLogColdHint
VmpLogLargeSlatFill
VmpLogSparseSlatFill
VmpLogTbFlushSlatInvalidate