KsepEvntLogFlagsApplied
VOID __stdcall KsepEvntLogFlagsApplied(
_UNICODE_STRING *DeviceName,
_UNICODE_STRING *DeviceClass,
UINT64 SettingSource,
UINT64 Flags){
UINT64 v4;
wchar_t *Buffer;
UINT64 UserDataCount;
struct _EVENT_DATA_DESCRIPTOR UserData;
wchar_t *v10;
int v11;
int v12;
int *v13;
int v14;
int v15;
UINT64 *v16;
int v17;
int v18;
int v19;
UINT64 v20;
v20 = Flags;
v19 = SettingSource;
v4 = *(_QWORD *)KseEtwHandle;
if( *(_QWORD *)KseEtwHandle
&& EtwEventEnabled(*(UINT64 *)KseEtwHandle, (EVENT_DESCRIPTOR *)&KseFlagsApplied, (EVENT_DESCRIPTOR *)SettingSource)
&& DeviceName )
{
if( DeviceClass )
{
Buffer = DeviceName->Buffer;
UserData.Reserved = 0;
v12 = 0;
v15 = 0;
v18 = 0;
UserData.Ptr = (unsigned __int64)Buffer;
LODWORD(Buffer) = DeviceName->Length + 2;
v14 = 4;
UserData.Size = (unsigned int)Buffer;
v10 = DeviceClass->Buffer;
LODWORD(Buffer) = DeviceClass->Length + 2;
v17 = 8;
v11 = (int)Buffer;
v13 = &v19;
v16 = &v20;
LODWORD(UserDataCount) = 4;
EtwWriteEx(v4, (EVENT_DESCRIPTOR *)&KseFlagsApplied, 0i64, 0i64, 0i64, 0i64, UserDataCount, &UserData);
}
}
}Referenced by:
KseQueryDeviceFlags