Skip to content

Commit 2779bc8

Browse files
committed
ExtendedTools: Add EnableTraceEx2
1 parent 64ef0e3 commit 2779bc8

File tree

1 file changed

+16
-1
lines changed

1 file changed

+16
-1
lines changed

plugins/ExtendedTools/etwmon.c

Lines changed: 16 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -629,7 +629,22 @@ NTSTATUS EtpRundownEtwMonitorThreadStart(
629629
// into EtpEtwEventCallback and enable after the first IO_READ/IO_WRITE event. (dmex)
630630
if (!EtpRundownEnabled && EtpRundownSessionHandle != INVALID_PROCESSTRACE_HANDLE)
631631
{
632-
EnableTraceEx(&KernelRundownGuid_I, NULL, EtpRundownSessionHandle, 1, 0, 0x10, 0, 0, NULL);
632+
ENABLE_TRACE_PARAMETERS enableParameters;
633+
634+
memset(&enableParameters, 0, sizeof(ENABLE_TRACE_PARAMETERS));
635+
enableParameters.Version = ENABLE_TRACE_PARAMETERS_VERSION_2;
636+
637+
EnableTraceEx2(
638+
EtpRundownSessionHandle,
639+
&KernelRundownGuid_I,
640+
EVENT_CONTROL_CODE_ENABLE_PROVIDER,
641+
TRACE_LEVEL_NONE,
642+
0x10,
643+
0,
644+
0,
645+
&enableParameters
646+
);
647+
633648
EtpRundownEnabled = TRUE;
634649
}
635650

0 commit comments

Comments
 (0)