EtwTraceLpacAccessFailure
NTSTATUS __fastcall EtwTraceLpacAccessFailure(int a1){
NTSTATUS result;
_LARGE_INTEGER CurrentTime;
_EVENT_DATA_DESCRIPTOR UserData;
int *v4;
int v5;
int v6;
int v7;
v7 = a1;
CurrentTime.QuadPart = 0i64;
if( *(&ExBootDevicesRemovedEvent + 249) )
{
KeQuerySystemTimePrecise(&CurrentTime);
UserData.Reserved = 0;
v6 = 0;
UserData.Ptr = (unsigned __int64)&CurrentTime;
UserData.Size = 8;
v4 = &v7;
v5 = 4;
return EtwWrite(*(&ExBootDevicesRemovedEvent + 249), &LpacAccessFailureLog, 0, 2u, &UserData);
}
return result;
}Referenced by:
SepLogLpacAccessFailure