EtwpQueryReferenceTime
NTSTATUS __stdcall EtwpQueryReferenceTime(
_ETW_SILODRIVERSTATE *SiloState,
UINT64 LoggerId,
_OBJECT_TYPE *ReferenceTime){
_ETHREAD *CurrentThread;
_WMI_LOGGER_CONTEXT *v5;
NTSTATUS v6;
if( (_DWORD)LoggerId == 0xFFFF )
LoggerId = SiloState->SystemLoggerSettings.EtwpSystemLogger[0].LoggerId;
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
--CurrentThread->Tcb.KernelApcDisable;
v5 = EtwpAcquireLoggerContextByLoggerId(SiloState, LoggerId, 0);
v6 = 0;
if( v5 )
{
ReferenceTime->TypeList = (_LIST_ENTRY)v5->ReferenceTime;
EtwpReleaseLoggerContext(v5, 0);
}
else
{
v6 = -1073741162;
}
KeLeaveCriticalRegionThread(KeGetCurrentThread());
return v6;
}Referenced by:
NtTraceControl