EtwpLevelKeywordEnabled
BOOL __fastcall EtwpLevelKeywordEnabled(INT64 a1, UINT8 a2, INT64 a3){
INT64 v3;
LOBYTE(v3) = *(_DWORD *)a1
&& ((LODWORD(v3) = *(unsigned __int8 *)(a1 + 4), a2 <= (unsigned __int8)v3) || !(_BYTE)v3)
&& ((LODWORD(v3) = *(_DWORD *)(a1 + 8), (v3 & 0x40) != 0) && !a3
|| (a3 & *(_QWORD *)(a1 + 16)) != 0 && (v3 = a3 & *(_QWORD *)(a1 + 24), v3 == *(_QWORD *)(a1 + 24)));
return v3;
}Referenced by:
EtwEventEnabled
EtwProviderEnabled
EtwTraceThreadWorkOnBehalfUpdate
EtwWriteEx
EtwWriteString
EtwpDiskProvTraceDisk
EtwpEventWriteFull
EtwpFailLogging
EtwpWriteUserEvent
IopfCompleteRequest
KiIntSteerEtwEventEnabled
PpmCheckSnapAllDeliveredPerformance
PpmPerfRecordUtility
PpmPerfSelectProcessorState
PpmPerfSnapDeliveredPerformance