EtwpTraceFileIo
VOID __fastcall EtwpTraceFileIo(
EVENT_DATA_DESCRIPTOR *EventData,
UINT64 DataCount,
UINT64 GroupMask,
INT64 HookId,
GUID *ActivityId){
unsigned int v5;
unsigned int v6;
INT64 ThreadServerSilo;
INT64 a6;
GUID *v10;
v5 = HookId;
v6 = GroupMask;
if( EventData )
ThreadServerSilo = PsGetThreadServerSilo((INT64)EventData);
else
ThreadServerSilo = 0i64;
if( EtwpHostSiloState != -4516 && (*(_DWORD *)(EtwpHostSiloState + 4516) & 0x6000000) != 0 )
EtwpFileProvTrace((EVENT_DATA_DESCRIPTOR *)DataCount, v6, (UINT16)ActivityId, v10);
if( (_WORD)ActivityId != 1102 )
{
LODWORD(a6) = 5249283;
EtwTraceSiloKernelEvent(ThreadServerSilo, (EVENT_DATA_DESCRIPTOR *)DataCount, v6, v5, (INT16)ActivityId, a6);
}
}Referenced by:
No references.