McTemplateK0zdq_EtwWriteTransfer
NTSTATUS __fastcall McTemplateK0zdq_EtwWriteTransfer(
INT64 a1,
const EVENT_DESCRIPTOR *a2,
INT64 a3,
const WCHAR *a4,
CHAR a5,
CHAR a6){
__int64 v6;
int v7;
EVENT_DATA_DESCRIPTOR EventData;
const WCHAR *v10;
int v11;
int v12;
CHAR *v13;
__int64 v14;
CHAR *v15;
__int64 v16;
if( a4 )
{
v6 = -1i64;
do
++v6;
while( a4[v6] );
v7 = 2 * v6 + 2;
}
else
{
v7 = 10;
}
v11 = v7;
v12 = 0;
if( !a4 )
a4 = L"NULL";
v10 = a4;
v13 = &a5;
v14 = 4i64;
v15 = &a6;
v16 = 4i64;
return McGenEventWrite_EtwWriteTransfer(
&MS_KernelPnP_Provider_Context,
(EVENT_DESCRIPTOR *)a2,
0i64,
4ui64,
&EventData);
}Referenced by:
PnpLogActionQueueEvent