KsepEvntLogFlagsApplied
VOID __stdcall KsepEvntLogFlagsApplied(
_UNICODE_STRING *DeviceName,
_UNICODE_STRING *DeviceClass,
UINT64 SettingSource,
UINT64 Flags){
REGHANDLE v4;
wchar_t *Buffer;
_EVENT_DATA_DESCRIPTOR UserData;
wchar_t *v9;
int v10;
int v11;
int *v12;
int v13;
int v14;
UINT64 *v15;
int v16;
int v17;
int v18;
UINT64 v19;
v19 = Flags;
v18 = SettingSource;
v4 = *(&stru_140CF2E80 + 627);
if( *(&stru_140CF2E80 + 627) && EtwEventEnabled(*(&stru_140CF2E80 + 627), &KseFlagsApplied) && DeviceName )
{
if( DeviceClass )
{
Buffer = DeviceName->Buffer;
UserData.Reserved = 0;
v11 = 0;
v14 = 0;
v17 = 0;
UserData.Ptr = (unsigned __int64)Buffer;
LODWORD(Buffer) = DeviceName->Length + 2;
v13 = 4;
UserData.Size = (unsigned int)Buffer;
v9 = DeviceClass->Buffer;
LODWORD(Buffer) = DeviceClass->Length + 2;
v16 = 8;
v10 = (int)Buffer;
v12 = &v18;
v15 = &v19;
EtwWriteEx(v4, &KseFlagsApplied, 0i64, 0, 0, 0, 4u, &UserData);
}
}
}Referenced by:
KseQueryDeviceFlags