28 #define EVNTAPI __stdcall 30 #define EVNTAPI DECLSPEC_IMPORT __stdcall 39 #define EVENT_MIN_LEVEL (0) 40 #define EVENT_MAX_LEVEL (0xff) 42 #define EVENT_ACTIVITY_CTRL_GET_ID (1) 43 #define EVENT_ACTIVITY_CTRL_SET_ID (2) 44 #define EVENT_ACTIVITY_CTRL_CREATE_ID (3) 45 #define EVENT_ACTIVITY_CTRL_GET_SET_ID (4) 46 #define EVENT_ACTIVITY_CTRL_CREATE_SET_ID (5) 50 #define MAX_EVENT_DATA_DESCRIPTORS (128) 51 #define MAX_EVENT_FILTER_DATA_SIZE (1024) 53 #define EVENT_FILTER_TYPE_SCHEMATIZED (0x80000000) 101 #if (WINVER >= _WIN32_WINNT_VISTA) 162 #if (WINVER >= _WIN32_WINNT_WIN7) 186 EventDataDescriptor->Size =
DataSize;
187 EventDataDescriptor->Reserved = 0;
FORCEINLINE UCHAR EventDescGetLevel(_In_ PCEVENT_DESCRIPTOR EventDescriptor)
struct _EVENT_FILTER_HEADER * PEVENT_FILTER_HEADER
FORCEINLINE UCHAR EventDescGetVersion(_In_ PCEVENT_DESCRIPTOR EventDescriptor)
FORCEINLINE USHORT EventDescGetId(_In_ PCEVENT_DESCRIPTOR EventDescriptor)
_In_ PVOID _In_ ULONG Opcode
ULONG EVNTAPI EventWriteEx(_In_ REGHANDLE RegHandle, _In_ PCEVENT_DESCRIPTOR EventDescriptor, _In_ ULONG64 Filter, _In_ ULONG Flags, _In_opt_ LPCGUID ActivityId, _In_opt_ LPCGUID RelatedActivityId, _In_ ULONG UserDataCount, _In_reads_opt_(UserDataCount) PEVENT_DATA_DESCRIPTOR UserData)
_IRQL_requires_same_ typedef _In_ ULONG _In_ UCHAR _In_ ULONGLONG _In_ ULONGLONG _In_opt_ PEVENT_FILTER_DESCRIPTOR _Inout_opt_ PVOID CallbackContext
#define _In_reads_bytes_(s)
FORCEINLINE VOID EventDescZero(_Out_ PEVENT_DESCRIPTOR EventDescriptor)
struct _EVENT_DESCRIPTOR EVENT_DESCRIPTOR
_In_ PCEVENT_DESCRIPTOR _In_opt_ LPCGUID _In_ ULONG UserDataCount
ULONG EVNTAPI EventWrite(_In_ REGHANDLE RegHandle, _In_ PCEVENT_DESCRIPTOR EventDescriptor, _In_ ULONG UserDataCount, _In_reads_opt_(UserDataCount) PEVENT_DATA_DESCRIPTOR UserData)
_In_ PCEVENT_DESCRIPTOR _In_opt_ LPCGUID ActivityId
FORCEINLINE USHORT EventDescGetTask(_In_ PCEVENT_DESCRIPTOR EventDescriptor)
VOID(NTAPI * PENABLECALLBACK)(_In_ LPCGUID SourceId, _In_ ULONG IsEnabled, _In_ UCHAR Level, _In_ ULONGLONG MatchAnyKeyword, _In_ ULONGLONG MatchAllKeyword, _In_opt_ PEVENT_FILTER_DESCRIPTOR FilterData, _Inout_opt_ PVOID CallbackContext)
struct _EVENT_FILTER_DESCRIPTOR * PEVENT_FILTER_DESCRIPTOR
_IRQL_requires_same_ typedef _In_ ULONG _In_ UCHAR Level
ULONG EVNTAPI EventUnregister(_In_ REGHANDLE RegHandle)
BOOLEAN EVNTAPI EventEnabled(_In_ REGHANDLE RegHandle, _In_ PCEVENT_DESCRIPTOR EventDescriptor)
struct _EVENT_DATA_DESCRIPTOR * PEVENT_DATA_DESCRIPTOR
FORCEINLINE PEVENT_DESCRIPTOR EventDescSetKeyword(_In_ PEVENT_DESCRIPTOR EventDescriptor, _In_ ULONGLONG Keyword)
FORCEINLINE PEVENT_DESCRIPTOR EventDescOrKeyword(_In_ PEVENT_DESCRIPTOR EventDescriptor, _In_ ULONGLONG Keyword)
FORCEINLINE ULONGLONG EventDescGetKeyword(_In_ PCEVENT_DESCRIPTOR EventDescriptor)
const EVENT_DESCRIPTOR * PCEVENT_DESCRIPTOR
_In_opt_ PETWENABLECALLBACK EnableCallback
FORCEINLINE PEVENT_DESCRIPTOR EventDescSetId(_In_ PEVENT_DESCRIPTOR EventDescriptor, _In_ USHORT Id)
FORCEINLINE PEVENT_DESCRIPTOR EventDescSetLevel(_In_ PEVENT_DESCRIPTOR EventDescriptor, _In_ UCHAR Level)
FORCEINLINE PEVENT_DESCRIPTOR EventDescSetOpcode(_In_ PEVENT_DESCRIPTOR EventDescriptor, _In_ UCHAR Opcode)
_Must_inspect_result_ _In_ WDFDEVICE _In_ WDFSTRING String
NTSTATUS(* NTAPI)(IN PFILE_FULL_EA_INFORMATION EaBuffer, IN ULONG EaLength, OUT PULONG ErrorOffset)
struct _EVENT_FILTER_HEADER EVENT_FILTER_HEADER
_In_ PCEVENT_DESCRIPTOR _In_opt_ LPCGUID _In_opt_ LPCGUID RelatedActivityId
_Must_inspect_result_ _In_opt_ PFLT_FILTER Filter
struct _EVENT_FILTER_DESCRIPTOR EVENT_FILTER_DESCRIPTOR
_Reserved_ PVOID Reserved
_IRQL_requires_same_ typedef _In_ ULONG ControlCode
_In_opt_ PETWENABLECALLBACK _In_opt_ PVOID _Out_ PREGHANDLE RegHandle
BOOLEAN EVNTAPI EventProviderEnabled(_In_ REGHANDLE RegHandle, _In_ UCHAR Level, _In_ ULONGLONG Keyword)
_Must_inspect_result_ _In_ ULONG Flags
FORCEINLINE UCHAR EventDescGetChannel(_In_ PCEVENT_DESCRIPTOR EventDescriptor)
FORCEINLINE UCHAR EventDescGetOpcode(_In_ PCEVENT_DESCRIPTOR EventDescriptor)
struct _EVENT_DESCRIPTOR * PEVENT_DESCRIPTOR
ULONG EVNTAPI EventActivityIdControl(_In_ ULONG ControlCode, _Inout_ LPGUID ActivityId)
IN PVOID IN PVOID IN USHORT Version
ULONG EVNTAPI EventWriteTransfer(_In_ REGHANDLE RegHandle, _In_ PCEVENT_DESCRIPTOR EventDescriptor, _In_opt_ LPCGUID ActivityId, _In_opt_ LPCGUID RelatedActivityId, _In_ ULONG UserDataCount, _In_reads_opt_(UserDataCount) PEVENT_DATA_DESCRIPTOR UserData)
return pProvider IsEnabled(ProviderControl)
#define _In_reads_opt_(s)
_IRQL_requires_same_ typedef _In_ ULONG _In_ UCHAR _In_ ULONGLONG MatchAnyKeyword
_IRQL_requires_same_ typedef _In_ ULONG _In_ UCHAR _In_ ULONGLONG _In_ ULONGLONG MatchAllKeyword
_IRQL_requires_same_ typedef _In_ ULONG _In_ UCHAR _In_ ULONGLONG _In_ ULONGLONG _In_opt_ PEVENT_FILTER_DESCRIPTOR FilterData
_In_ PCEVENT_DESCRIPTOR EventDescriptor
ULONG EVNTAPI EventWriteString(_In_ REGHANDLE RegHandle, _In_ UCHAR Level, _In_ ULONGLONG Keyword, _In_ PCWSTR String)
struct _EVENT_DATA_DESCRIPTOR EVENT_DATA_DESCRIPTOR
FORCEINLINE VOID EventDescCreate(_Out_ PEVENT_DESCRIPTOR EventDescriptor, _In_ USHORT Id, _In_ UCHAR Version, _In_ UCHAR Channel, _In_ UCHAR Level, _In_ USHORT Task, _In_ UCHAR Opcode, _In_ ULONGLONG Keyword)
FORCEINLINE PEVENT_DESCRIPTOR EventDescSetVersion(_In_ PEVENT_DESCRIPTOR EventDescriptor, _In_ UCHAR Version)
ULONG EVNTAPI EventRegister(_In_ LPCGUID ProviderId, _In_opt_ PENABLECALLBACK EnableCallback, _In_opt_ PVOID CallbackContext, _Out_ PREGHANDLE RegHandle)
FORCEINLINE PEVENT_DESCRIPTOR EventDescSetChannel(_In_ PEVENT_DESCRIPTOR EventDescriptor, _In_ UCHAR Channel)
_In_ NDIS_STATUS _In_ ULONG _In_ USHORT _In_opt_ PVOID _In_ ULONG DataSize
FORCEINLINE VOID EventDataDescCreate(_Out_ PEVENT_DATA_DESCRIPTOR EventDataDescriptor, _In_reads_bytes_(DataSize) const VOID *DataPtr, _In_ ULONG DataSize)
FORCEINLINE PEVENT_DESCRIPTOR EventDescSetTask(_In_ PEVENT_DESCRIPTOR EventDescriptor, _In_ USHORT Task)