EtwpSendSessionNotification
VOID __stdcall EtwpSendSessionNotification(
_WMI_LOGGER_CONTEXT *LoggerContext,
_ETW_SESSION_NOTIFICATION_TYPE Type,
UINT64 Status){
unsigned __int16 LoggerId;
unsigned int v4;
_ETW_SILODRIVERSTATE *SiloState;
_GUID InstanceGuid;
_QWORD v9[12];
LoggerId = LoggerContext->LoggerId;
v4 = Status;
if( !LOWORD(LoggerContext->LoggerId) )
LoggerId = -1;
memset(v9, 0i64, sizeof(v9));
SiloState = LoggerContext->SiloState;
InstanceGuid = LoggerContext->InstanceGuid;
*(_OWORD *)&v9[5] = SessionNotificationGuid;
*(_GUID *)&v9[7] = InstanceGuid;
v9[0] = 0x6000000007i64;
v9[10] = LoggerId;
v9[9] = __PAIR64__(v4, Type);
EtwpNotifyGuid(SiloState, (_ETWP_NOTIFICATION_HEADER *)v9, 0);
}Referenced by:
EtwpCreateLogFile
EtwpFlushBuffer
EtwpRealtimeCreateLogfile
EtwpRealtimeFlushSavedBuffers
EtwpStartLogger
EtwpStopLoggerInstance