IopLogEventIoMgrMountSucceeded
VOID __stdcall IopLogEventIoMgrMountSucceeded(GUID *ActivityId, GUID *VolumeGuid, UNICODE_STRING *VolumeName){
int Length;
UINT64 v7;
UINT64 UserDataCount;
__int16 v9;
EVENT_DATA_DESCRIPTOR UserData;
__int16 *v11;
int v12;
int v13;
wchar_t *Buffer;
int v15;
int v16;
Length = VolumeName->Length;
v9 = (unsigned __int16)Length >> 1;
if( (_BYTE)dword_140CFA19C )
{
v7 = IoMgrTraceHandle;
if( EtwEventEnabled(IoMgrTraceHandle, (EVENT_DESCRIPTOR *)&IoMgr_MountSucceeded, (EVENT_DESCRIPTOR *)VolumeName) )
{
UserData.Reserved = 0;
v13 = 0;
v16 = 0;
v11 = &v9;
Buffer = VolumeName->Buffer;
LODWORD(UserDataCount) = 3;
UserData.Ptr = (unsigned __int64)VolumeGuid;
UserData.Size = 16;
v12 = 2;
v15 = Length;
EtwWriteEx(v7, (EVENT_DESCRIPTOR *)&IoMgr_MountSucceeded, 0i64, 0i64, ActivityId, 0i64, UserDataCount, &UserData);
}
}
}Referenced by:
IopMountVolume