EtwWriteEndScenario
NTSTATUS __fastcall EtwWriteEndScenario(
REGHANDLE RegHandle,
PCEVENT_DESCRIPTOR EventDescriptor,
_LPCGUID ActivityId,
ULONG UserDataCount,
PEVENT_DATA_DESCRIPTOR UserData){
const _GUID *v6;
NTSTATUS result;
_GUID ProviderId;
v6 = *(const _GUID **)&ActivityId;
ProviderId = 0i64;
if( !EventDescriptor || !*(_QWORD *)&ActivityId )
return -1073741811;
if( !EtwEventEnabled(RegHandle, EventDescriptor) )
return -1073741816;
result = EtwGetProviderIdFromHandle(RegHandle, 0, &ProviderId);
if( result >= 0 )
{
WdipStartEndScenario(&ProviderId, v6, &EventDescriptor->Id, 11);
return EtwWrite(RegHandle, EventDescriptor, (_LPCGUID)v6, UserDataCount, UserData);
}
return result;
}Referenced by:
PnpCompleteSystemStartProcess
PopDiagTracePowerTransitionEnd
PopGracefulShutdown