EtwQueryTraceHandleByLoggerName
INT64 __stdcall EtwQueryTraceHandleByLoggerName(UNICODE_STRING *LoggerName, UINT64 *TraceHandle){
__int64 *CurrentServerSiloGlobals;
unsigned int *v5;
__int16 v6;
if( !LoggerName || !LoggerName->Buffer || !LoggerName->Length || !TraceHandle )
return 3221225485i64;
CurrentServerSiloGlobals = PsGetCurrentServerSiloGlobals();
v5 = EtwpAcquireLoggerContextByLoggerName(CurrentServerSiloGlobals[108], LoggerName, 0);
if( !v5 )
return 3221226134i64;
*TraceHandle = 0i64;
if( *v5 )
v6 = *(_WORD *)v5;
else
v6 = -1;
*(_WORD *)TraceHandle = v6;
EtwpReleaseLoggerContext(v5, 0);
return 0i64;
}Referenced by:
IopErrorLogThread
WdipSemGetLoggerIds
WmiQueryTraceInformation