EtwTraceJobSendNotification
VOID __stdcall EtwTraceJobSendNotification(_EJOB *Job, UINT64 NotificationId){
int v2;
__int64 v3;
int v4;
UINT64 Flag;
GUID GuidOut;
__int64 v7;
EVENT_DATA_DESCRIPTOR EventData;
v7 = 0i64;
GuidOut = 0i64;
EtwpCopyJobGuidSafe(&GuidOut, Job);
if( v3 )
LODWORD(v7) = *(_DWORD *)(v3 + 1236);
else
LODWORD(v7) = v2 & v7;
EventData.Reserved = 0;
HIDWORD(v7) = v4;
EventData.Ptr = (unsigned __int64)&GuidOut;
EventData.Size = 24;
LODWORD(Flag) = 5249284;
EtwTraceKernelEvent(&EventData, 1ui64, 0x80000ui64, 0x72Au, Flag);
}Referenced by:
No references.