PopDiagTraceSessionStates
VOID __stdcall PopDiagTraceSessionStates(_EVENT_DESCRIPTOR *EventDescriptor, UINT64 SessionId, UINT64 Console){
UINT64 v4;
EVENT_DATA_DESCRIPTOR UserData;
int *v6;
int v7;
int v8;
int v9;
int v10;
v10 = Console;
v9 = SessionId;
if( PopDiagHandleRegistered )
{
v4 = PopDiagHandle;
if( EtwEventEnabled(PopDiagHandle, EventDescriptor, (EVENT_DESCRIPTOR *)Console) )
{
UserData.Reserved = 0;
v8 = 0;
UserData.Ptr = (unsigned __int64)&v9;
UserData.Size = 4;
v6 = &v10;
v7 = 4;
EtwWrite(v4, EventDescriptor, 0i64, 2ui64, &UserData);
}
}
}Referenced by:
NtPowerInformation
PopSessionConnected
PopSessionDisconnected
PopSessionInputChange
PopSessionWinlogonNotification
PopSetSessionDisplayStatus
PopSetSessionUserStatus