VOID __stdcall EtwpTraceFltIo(PVOID EventData, UINT64 Size, UINT64 GroupMask, UINT16 HookId){
UINT64 Flag;
EVENT_DATA_DESCRIPTOR EventDataa;
EventDataa.Reserved = 0;
EventDataa.Ptr = (unsigned __int64)EventData;
EventDataa.Size = Size;
LODWORD(Flag) = 5249283;
EtwTraceKernelEvent(&EventDataa, 1ui64, GroupMask, HookId, Flag);
}