CmpTraceHiveLoadStart
BOOLEAN __fastcall CmpTraceHiveLoadStart(unsigned __int16 *a1, int a2){
REGHANDLE v2;
BOOLEAN result;
__int16 v5;
_EVENT_DESCRIPTOR EventDescriptor;
_EVENT_DATA_DESCRIPTOR UserData;
__int16 *v8;
__int64 v9;
int *v10;
__int64 v11;
int v12;
v12 = a2;
v2 = EtwpRegTraceHandle;
EventDescriptor = (_EVENT_DESCRIPTOR)REGISTRY_PERF_EVENT_HIVE_LOAD_START;
result = EtwEventEnabled(EtwpRegTraceHandle, &EventDescriptor);
if( result )
{
UserData.Ptr = *((_QWORD *)a1 + 1);
UserData.Size = *a1;
v8 = &v5;
v10 = &v12;
v5 = 0;
UserData.Reserved = 0;
v9 = 2i64;
v11 = 4i64;
return EtwWrite(v2, &EventDescriptor, 0, 3u, &UserData);
}
return result;
}Referenced by:
CmLoadDifferencingKey