McTemplateK0dz_EtwWriteTransfer
NTSTATUS __fastcall McTemplateK0dz_EtwWriteTransfer(
INT64 a1,
const EVENT_DESCRIPTOR *a2,
INT64 a3,
INT64 a4,
const WCHAR *a5){
const WCHAR *v5;
__int64 v7;
int v8;
EVENT_DATA_DESCRIPTOR EventData;
int *v11;
__int64 v12;
const WCHAR *v13;
int v14;
int v15;
int v16;
v16 = a4;
v5 = a5;
v11 = &v16;
v12 = 4i64;
if( a5 )
{
v7 = -1i64;
do
++v7;
while( a5[v7] );
v8 = 2 * v7 + 2;
}
else
{
v8 = 10;
}
v14 = v8;
v15 = 0;
if( !a5 )
v5 = L"NULL";
v13 = v5;
return McGenEventWrite_EtwWriteTransfer(
&MS_KernelPnP_Provider_Context,
(EVENT_DESCRIPTOR *)a2,
0i64,
3ui64,
&EventData);
}Referenced by:
PiCMQueryRemove
PipProcessRestartPhase1
PipProcessRestartPhase2
PipProcessStartPhase1
PipProcessStartPhase2
PipProcessStartPhase3