EtwpEventWriteTemplateBackingFile
VOID __stdcall EtwpEventWriteTemplateBackingFile(
UNICODE_STRING *SessionName,
UINT64 LoggingMode,
EVENT_DESCRIPTOR *Descriptor){
unsigned __int16 *v3;
int v4;
EVENT_DATA_DESCRIPTOR UserData;
__int64 *v6;
__int64 v7;
int *v8;
__int64 v9;
char *v10;
__int64 v11;
char v12;
UserData.Ptr = *((_QWORD *)v3 + 1);
UserData.Size = *v3;
v6 = &EtwpNull;
v8 = &v4;
UserData.Reserved = 0;
v10 = &v12;
v4 = -1073741432;
v7 = 2i64;
v9 = 4i64;
v11 = 4i64;
EtwWrite(EtwpEventTracingProvRegHandle, (EVENT_DESCRIPTOR *)&ETW_EVENT_BACKING_FILE_FULL, 0i64, 4ui64, &UserData);
}Referenced by:
EtwpRealtimeRestoreState
EtwpRealtimeSaveBuffer