EtwpInvokeEventCallback
INT64 __fastcall EtwpInvokeEventCallback(INT64 a1, INT64 a2, INT64 a3){
unsigned int *v3;
unsigned int v5;
INT64 result;
CHAR v7;
__int64 v8;
unsigned int v9;
v3 = *(unsigned int **)a2;
v5 = *(_DWORD *)(a2 + 16);
v9 = 0;
result = EtwpGetNextEventOffsetType(v3, v5, &v9);
if( (_DWORD)result )
{
LODWORD(result) = KeIsTraceCallbackAllowed(v7);
if( (_DWORD)result )
return((__int64(__fastcall *)(char *, _QWORD, INT64))qword_140CFBB98)((char *)v3 + v8, v9, a3);
}
return result;
}Referenced by:
EtwTraceEvent
EtwTraceRaw
EtwpEventWriteFull
EtwpLogKernelEvent
EtwpLogSystemEventUnsafe
EtwpTraceMessageVa
EtwpWriteUserEvent