McTemplateK0zjdd_EtwWriteTransfer
NTSTATUS __fastcall McTemplateK0zjdd_EtwWriteTransfer(
INT64 a1,
const EVENT_DESCRIPTOR *a2,
INT64 a3,
const WCHAR *a4,
INT64 a5,
CHAR a6,
CHAR a7){
__int64 v7;
int v8;
EVENT_DATA_DESCRIPTOR EventData;
const WCHAR *v11;
int v12;
int v13;
INT64 v14;
__int64 v15;
CHAR *v16;
__int64 v17;
CHAR *v18;
__int64 v19;
if( a4 )
{
v7 = -1i64;
do
++v7;
while( a4[v7] );
v8 = 2 * v7 + 2;
}
else
{
v8 = 10;
}
v12 = v8;
v13 = 0;
if( !a4 )
a4 = L"NULL";
v15 = 16i64;
v14 = a5;
v16 = &a6;
v18 = &a7;
v11 = a4;
v17 = 4i64;
v19 = 4i64;
return McGenEventWrite_EtwWriteTransfer(
&MS_KernelPnP_Provider_Context,
(EVENT_DESCRIPTOR *)a2,
0i64,
5ui64,
&EventData);
}Referenced by:
PiPnpRtlCmActionCallback