Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
237 events across 1 channel
Event ID 10 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_stackSize Int32 | — |
A11_oldStackSize Int32 | — |
Event ID 11 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_IrpCtrlCompletionStackLength Int32 | — |
A11_newStackSize Int32 | — |
A12_IrpCtrl Pointer | — |
Event ID 12 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_newCNodeIrpCtrl Pointer | — |
A11_newCNode Pointer | — |
A12_newCNodeDataSnapshotMajorFunction Int32 | — |
Event ID 13 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_newCNodeIrpCtrl Pointer | — |
A11_newCNode Pointer | — |
A12_newCNodeDataSnapshotMajorFunction Int32 | — |
Event ID 14 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_IrpCtrl Pointer | — |
A11_CHARnewCNodeDataSnapshotMajorFunction Int32 | — |
A12_CHARnewCNodeDataSnapshotMinorFunction Int32 | — |
Event ID 15 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 16 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_OpType Int32 | — |
A11_irpCtrl Pointer | — |
A12_FrameReserveIrpCtrlsStaticOwningThreadOpType Pointer | — |
Event ID 17 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_OpType Int32 | — |
A11_IrpCtrl Pointer | — |
A12_FrameReserveIrpCtrlsStaticOwningThreadOpType Pointer | — |
Event ID 18 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_irpCtrl Pointer | — |
A11_th Pointer | — |
A12_FrameReserveIrpCtrlsEntriesiCount Int32 | — |
A13_i Int32 | — |
Event ID 19 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_irpCtrl Pointer | — |
A11_th Pointer | — |
A12_FrameReserveIrpCtrlsEntriesiCount Int32 | — |
A13_i Int32 | — |
Event ID 20 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_IrpCtrl Pointer | — |
A11_IrpCtrlDataThread Pointer | — |
A12_FrameReserveIrpCtrlsEntriesiCount Int32 | — |
A13_i Int32 | — |
Event ID 21 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FsControlDeviceObject Pointer | — |
A11_NULL Pointer | — |
A12_ControlDeviceName CountedUtf16String | — |
A13_GET_DEVICE_TYPE_NAMEFsControlDeviceObjectDeviceType AnsiString | — |
Event ID 22 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 23 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 24 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 25 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_NewDeviceObject Pointer | — |
A11_NULL Pointer | — |
A12__cdoDevExtControlDeviceName CountedUtf16String | — |
A13_GET_DEVICE_TYPE_NAMENewDeviceObjectDeviceType AnsiString | — |
Event ID 26 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_NewDeviceObject Pointer | — |
A11_volume Pointer | — |
A12__volumeDeviceName CountedUtf16String | — |
A13_GET_DEVICE_TYPE_NAMENewDeviceObjectDeviceType AnsiString | — |
A14_DeviceObjectToAttachTo Pointer | — |
Event ID 27 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_DeviceObject Pointer | — |
A11_NULL Pointer | — |
A12__cdoDevExtControlDeviceName CountedUtf16String | — |
A13_GET_DEVICE_TYPE_NAMEDeviceObjectDeviceType AnsiString | — |
A14_NotifyFlags HexInt32 | — |
Event ID 28 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_DeviceObject Pointer | — |
A11_volume Pointer | — |
A12__volumeDeviceName CountedUtf16String | — |
A13_GET_DEVICE_TYPE_NAMEDeviceObjectDeviceType AnsiString | — |
A14_NotifyFlags HexInt32 | — |
A15_devExtHeaderAttachedToDeviceObject Pointer | — |
Event ID 29 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10__VolumeDeviceName CountedUtf16String | — |
Event ID 30 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10__VolumeDeviceName CountedUtf16String | — |
Event ID 31 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_origBufferPtr Pointer | — |
A11_origMdlAddressPtrorigMdlAddressPtrNULL Pointer | — |
A12_newBufferPtr Pointer | — |
A13_newMdlAddressPtrnewMdlAddressPtrNULL Pointer | — |
Event ID 32 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_eventIrpPtr Pointer | — |
A11_eventMajorFunction UInt32 | — |
A12_CallbackNodeInstance Pointer | — |
A13__CallbackNodeInstanceAltitude CountedUtf16String | — |
A14_CallbackNodeInstanceFilter Pointer | — |
A15__CallbackNodeInstanceFilterName CountedUtf16String | — |
A16_IrpCtrlInitiatingInstance Pointer | — |
A17_eventFileObject Pointer | — |
A18_eventFsContext Pointer | — |
A19_status HexInt32 | — |
A20_IrpCtrlTraceStatus HexInt32 | — |
Event ID 33 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_eventIrpPtr Pointer | — |
A11_eventMajorFunction UInt32 | — |
A12_CallbackNodeInstance Pointer | — |
A13__CallbackNodeInstanceAltitude CountedUtf16String | — |
A14_CallbackNodeInstanceFilter Pointer | — |
A15__CallbackNodeInstanceFilterName CountedUtf16String | — |
A16_IrpCtrlInitiatingInstance Pointer | — |
A17_eventFileObject Pointer | — |
A18_eventFsContext Pointer | — |
A19_status HexInt32 | — |
A20_IrpCtrlTraceStatus HexInt32 | — |
Event ID 34 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_eventIrpPtr Pointer | — |
A11_eventMajorFunction UInt32 | — |
A12_CallbackNodeInstance Pointer | — |
A13__CallbackNodeInstanceAltitude CountedUtf16String | — |
A14_CallbackNodeInstanceFilter Pointer | — |
A15__CallbackNodeInstanceFilterName CountedUtf16String | — |
A16_IrpCtrlInitiatingInstance Pointer | — |
A17_eventFileObject Pointer | — |
A18_eventFsContext Pointer | — |
A19_status HexInt32 | — |
Event ID 35 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_eventIrpPtr Pointer | — |
A11_eventMajorFunction UInt32 | — |
A12_CallbackNodeInstance Pointer | — |
A13__CallbackNodeInstanceAltitude CountedUtf16String | — |
A14_CallbackNodeInstanceFilter Pointer | — |
A15__CallbackNodeInstanceFilterName CountedUtf16String | — |
A16_IrpCtrlInitiatingInstance Pointer | — |
A17_eventFileObject Pointer | — |
A18_eventFsContext Pointer | — |
A19_status HexInt32 | — |
Event ID 36 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_eventIrpPtr Pointer | — |
A11_eventMajorFunction UInt32 | — |
A12_IrpCtrlInitiatingInstance Pointer | — |
A13_eventFileObject Pointer | — |
A14_eventFsContext Pointer | — |
A15_status HexInt32 | — |
Event ID 37 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_eventIrpPtr Pointer | — |
A11_eventMajorFunction UInt32 | — |
A12_IrpCtrlInitiatingInstance Pointer | — |
A13_eventFileObject Pointer | — |
A14_eventFsContext Pointer | — |
A15_status HexInt32 | — |
Event ID 38 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_KeGetCurrentThread Pointer | — |
A11_irpCtrlFileObject Pointer | — |
A12_volume Pointer | — |
A13_CHARirpMajorId Int32 | — |
A14_FltGetIrpNameirpMajorId AnsiString | — |
Event ID 39 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_irpMajorId HexInt32 | — |
A11_irpCtrl Pointer | — |
A12_callbackNode Pointer | — |
A13_FlagOnirpCtrlFlagsIRPCTRFL_SYNCHRONIZESYNCNotSYNC AnsiString | — |
Event ID 40 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_TrackingCtrlPointerToFree Pointer | — |
Event ID 41 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CompNodeIrpCtrl Pointer | — |
A11_CompNode Pointer | — |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 | — |
Event ID 42 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CompNodeIrpCtrl Pointer | — |
A11_CompNode Pointer | — |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 | — |
Event ID 43 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_irpCtrl Pointer | — |
A11_CompNode Pointer | — |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 | — |
Event ID 44 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | — |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | — |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString | — |
Event ID 45 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | — |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | — |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString | — |
Event ID 46 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_irpCtrl Pointer | — |
A11_CompNode Pointer | — |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 | — |
Event ID 47 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | — |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | — |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString | — |
A13_irpCtrl Pointer | — |
Event ID 48 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CompNodeIrpCtrl Pointer | — |
A11_CompNode Pointer | — |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 | — |
Event ID 49 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_irpCtrl Pointer | — |
A11_CompNode Pointer | — |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 | — |
Event ID 50 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | — |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | — |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString | — |
Event ID 51 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | — |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | — |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString | — |
Event ID 52 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_irpCtrl Pointer | — |
A11_CompNode Pointer | — |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 | — |
Event ID 53 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | — |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | — |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString | — |
A13_irpCtrl Pointer | — |
Event ID 54 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CompNodeIrpCtrl Pointer | — |
A11_CompNode Pointer | — |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 | — |
Event ID 55 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 56 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CHARlocalIrpCtrlDataIopbMajorFunction Int32 | — |
A11_CHARlocalIrpCtrlDataIopbMinorFunction Int32 | — |
A12_FltGetIrpNamelocalIrpCtrlDataIopbMajorFunction AnsiString | — |
A13_localCompNodeIrpCtrl Pointer | — |
Event ID 57 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_completionNodeIrpCtrl Pointer | — |
A11_completionNode Pointer | — |
A12_CHARcompletionNodeDataSnapshotMajorFunction Int32 | — |
Event ID 58 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | — |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | — |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString | — |
A13_irpCtrl Pointer | — |
Event ID 59 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | — |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | — |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString | — |
A13_irpCtrl Pointer | — |
Event ID 60 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_completionNodeIrpCtrl Pointer | — |
A11_completionNode Pointer | — |
A12_CHARcompletionNodeDataSnapshotMajorFunction Int32 | — |
Event ID 61 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | — |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | — |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString | — |
A13_irpCtrl Pointer | — |
Event ID 62 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_DeviceObject Pointer | — |
Event ID 63 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_DeviceObject Pointer | — |
Event ID 64 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_ExceptionPointerExceptionRecordExceptionCode HexInt32 | — |
A11_ExceptionPointerContextRecord Pointer | — |
A12_ExceptionPointerExceptionRecord Pointer | — |
A13_ExceptionPointerExceptionRecordExceptionAddress Pointer | — |
Event ID 65 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 66 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 67 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 68 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 69 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 70 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 71 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 72 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 73 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 74 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 75 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 76 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 77 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 78 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 79 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 80 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 81 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10__localHead Pointer | — |
Event ID 82 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10__VolumeDeviceName CountedUtf16String | — |
Event ID 83 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_fileList Pointer | — |
A11_fileListFlags HexInt32 | — |
A12_fileListUseCount Int32 | — |
Event ID 84 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_fileList Pointer | — |
A11_fileListFlags HexInt32 | — |
A12_fileListUseCount Int32 | — |
Event ID 85 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_newFileList Pointer | — |
A11_newFileListFlags HexInt32 | — |
A12_newFileListUseCount Int32 | — |
Event ID 86 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_fileList Pointer | — |
A11_fileListFlags HexInt32 | — |
A12_fileListUseCount Int32 | — |
Event ID 87 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_newFileList Pointer | — |
A11_newFileListFlags HexInt32 | — |
A12_newFileListUseCount Int32 | — |
Event ID 88 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FileList Pointer | — |
A11_FileListFlags HexInt32 | — |
A12_FileListUseCount Int32 | — |
Event ID 89 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FileList Pointer | — |
A11_FileListFlags HexInt32 | — |
A12_FileListUseCount Int32 | — |
Event ID 90 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FileList Pointer | — |
A11_FileListFlags HexInt32 | — |
A12_FileListUseCount Int32 | — |
Event ID 91 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 92 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 93 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FltGlobalsNumProcessors Int32 | — |
Event ID 94 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_KeQueryMaximumProcessorCountExALL_PROCESSOR_GROUPS Int32 | — |
Event ID 95 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FltGlobalsCacheLineSize Int32 | — |
A11_FltGlobalsCacheLineSize HexInt32 | — |
Event ID 96 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 97 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 98 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 99 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 100 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 101 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 102 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 103 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 104 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_DriverObject Pointer | — |
Event ID 105 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_i Int32 | — |
Event ID 106 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 107 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_i Int32 | — |
Event ID 108 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 109 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FsActiveActivatingfilesystemDeactivatingfilesystem AnsiString | — |
A11_FsControlDeviceObject Pointer | — |
A12_NULL Pointer | — |
A13__controlDeviceNameCtrlName CountedUtf16String | — |
A14_GET_DEVICE_TYPE_NAMEFsControlDeviceObjectDeviceType AnsiString | — |
Event ID 110 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FltGetIrpNameirpSpMajorFunction AnsiString | — |
A11_irpSpMajorFunction Int32 | — |
Event ID 111 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_irpSpFileObject Pointer | — |
A11__irpSpFileObjectFileName CountedUtf16String | — |
Event ID 112 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_IrpCtrlIrp Pointer | — |
A11_IrpCtrlDataIopbMajorFunction Int32 | — |
Event ID 113 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_Irp Pointer | — |
Event ID 114 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_irpSpMajorFunction HexInt32 | — |
Event ID 115 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_KeGetCurrentThread Pointer | — |
A11_fileObject Pointer | — |
A12_iccVolume Pointer | — |
A13_fileObjectFileName CountedUtf16String | — |
Event ID 116 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 117 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_fileObject Pointer | — |
A11__fileObjectFileName CountedUtf16String | — |
Event ID 118 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_KeGetCurrentThread Pointer | — |
A11_IrpCtrlFileObject Pointer | — |
A12_volume Pointer | — |
A13_IrpCtrlDataIoStatusStatus HexInt32 | — |
Event ID 119 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_KeGetCurrentThread Pointer | — |
A11_IrpCtrlFileObject Pointer | — |
A12_volume Pointer | — |
A13_IrpCtrlDataIoStatusStatus HexInt32 | — |
Event ID 120 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 121 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_newDeviceObject Pointer | — |
A11_volume Pointer | — |
A12__volumeDeviceName CountedUtf16String | — |
A13_status HexInt32 | — |
A14_FltpGetFsDeviceObjectAfterMountdiskDeviceObject Pointer | — |
A15_FsControlDeviceObject Pointer | — |
Event ID 122 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_DeviceObject Pointer | — |
A11__devExtControlDeviceName CountedUtf16String | — |
Event ID 123 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_DeviceObject Pointer | — |
A11_NULL Pointer | — |
A12__devExtControlDeviceName CountedUtf16String | — |
A13_IrpIoStatusStatus HexInt32 | — |
Event ID 124 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 125 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_Context Pointer | — |
A11_regWatchContextNotificationStatus HexInt32 | — |
Event ID 126 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_regWatchContext Pointer | — |
A11_regWatchContextNotificationStatus HexInt32 | — |
Event ID 127 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 128 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
A11__tempString CountedUtf16String | — |
Event ID 129 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
A11__tempString CountedUtf16String | — |
Event ID 130 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_frameFrameID Int32 | — |
A11__frameAltitudeIntervalLow CountedUtf16String | — |
A12__frameAltitudeIntervalHigh CountedUtf16String | — |
Event ID 131 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 132 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 133 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_ctxFlags Pointer | — |
A11_FltGlobalsManualAttachDelayCounter Int32 | — |
A12_FltGlobalsManualDeviceAttachLimit Int32 | — |
Event ID 134 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_ctxFlags Pointer | — |
A11_FltGlobalsManualAttachDelayCounter Int32 | — |
A12_FltGlobalsManualDeviceAttachLimit Int32 | — |
Event ID 135 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_TopFrameFrameID Int32 | — |
A11__TopFrameAltitudeIntervalLow CountedUtf16String | — |
A12__TopFrameAltitudeIntervalHigh CountedUtf16String | — |
A13__TopFrameAltitudeIntervalLow CountedUtf16String | — |
A14_legacyAltitude CountedUtf16String | — |
Event ID 136 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10__DriverObjDriverExtensionServiceKeyName CountedUtf16String | — |
A11_PCWCHARvalueInfoData UnicodeString | — |
Event ID 137 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_Filter Pointer | — |
A11__FilterName CountedUtf16String | — |
A12_instance Pointer | — |
A13_Volume Pointer | — |
A14__VolumeDeviceName CountedUtf16String | — |
Event ID 138 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_Filter Pointer | — |
A11__FilterName CountedUtf16String | — |
A12_instance Pointer | — |
A13_Volume Pointer | — |
A14__VolumeDeviceName CountedUtf16String | — |
Event ID 139 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_InstanceFilter Pointer | — |
A11__InstanceFilterName CountedUtf16String | — |
A12__InstanceAltitude CountedUtf16String | — |
A13_Volume Pointer | — |
A14__VolumeDeviceName CountedUtf16String | — |
Event ID 140 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_currentInstance Pointer | — |
A11_currentInstanceFilter Pointer | — |
A12__currentInstanceFilterName CountedUtf16String | — |
A13__InstanceAltitude CountedUtf16String | — |
Event ID 141 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_filter Pointer | — |
A11__filterName CountedUtf16String | — |
A12_Instance Pointer | — |
A13_volume Pointer | — |
A14__volumeDeviceName CountedUtf16String | — |
A15_Reason HexInt32 | — |
Event ID 142 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_Buffer Pointer | — |
A11_fileOffsetQuadPart HexInt64 | — |
A12_Length HexInt32 | — |
Event ID 143 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_Buffer Pointer | — |
A11_fileOffsetQuadPart HexInt64 | — |
A12_Length HexInt32 | — |
Event ID 144 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 145 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_Buffer Pointer | — |
A11_fileOffsetQuadPart HexInt64 | — |
A12_Length HexInt32 | — |
Event ID 146 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_Buffer Pointer | — |
A11_fileOffsetQuadPart HexInt64 | — |
A12_Length HexInt32 | — |
Event ID 147 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 148 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 149 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 150 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_MdlChain Pointer | — |
A11_FileOffsetQuadPart HexInt64 | — |
A12_Length HexInt32 | — |
Event ID 151 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 152 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_MdlChain Pointer | — |
Event ID 153 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 154 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_MdlChain Pointer | — |
A11_FileOffsetQuadPart HexInt64 | — |
A12_Length HexInt32 | — |
Event ID 155 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 156 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_MdlChain Pointer | — |
A11_FileOffsetQuadPart HexInt64 | — |
Event ID 157 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 158 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 159 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 160 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 161 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 162 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 163 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 164 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_irp Pointer | — |
Event ID 165 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_irp Pointer | — |
Event ID 166 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10__replyWaiter Pointer | — |
Event ID 167 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 168 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 169 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_currentWaiter Pointer | — |
Event ID 170 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 171 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_ULONGreplyMessageId HexInt32 | — |
Event ID 172 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_Irp Pointer | — |
Event ID 173 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_irp Pointer | — |
Event ID 174 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_Queue Pointer | — |
Event ID 175 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_currentLink Pointer | — |
Event ID 176 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 177 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 178 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 179 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 180 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 181 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 182 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_Irp Pointer | — |
Event ID 183 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_Irp Pointer | — |
Event ID 184 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_nameCacheNode Pointer | — |
A11_GenCtxFileObject Pointer | — |
A12_nameCacheNodeTreeLinkFlags HexInt32 | — |
A13_nameCacheNodeUseCount Int32 | — |
A14__nameCacheNodeNameInfoName CountedUtf16String | — |
Event ID 185 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_nameCacheNode Pointer | — |
A11_nameCacheNodeTreeLinkFlagsflagToClear HexInt32 | — |
A12_nameCacheNodeUseCount Int32 | — |
A13__nameCacheNodeNameInfoName CountedUtf16String | — |
Event ID 186 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_nameCacheNode Pointer | — |
A11_FlagOnnameCacheNodeTreeLinkFlags0x0ffff HexInt32 | — |
A12__nameCacheNodeNameInfoName CountedUtf16String | — |
Event ID 187 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_GenCtxFileObject Pointer | — |
Event ID 188 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_GenCtxFileObject Pointer | — |
Event ID 189 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_GenCtxFileObject Pointer | — |
Event ID 190 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_nameCacheNode Pointer | — |
A11_GenCtxFileObject Pointer | — |
A12_nameCacheNodeTreeLinkFlags HexInt32 | — |
A13_nameCacheNodeUseCount Int32 | — |
A14__nameCacheNodeNameInfoName CountedUtf16String | — |
Event ID 191 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_nameCacheNode Pointer | — |
A11_GenCtxFileObject Pointer | — |
A12_nameCacheNodeTreeLinkFlags HexInt32 | — |
A13_nameCacheNodeUseCount Int32 | — |
A14__nameCacheNodeNameInfoName CountedUtf16String | — |
Event ID 192 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_nameCacheNode Pointer | — |
A11_GenCtxFileObject Pointer | — |
A12_nameCacheNodeTreeLinkFlags HexInt32 | — |
A13_nameCacheNodeUseCount Int32 | — |
A14__nameCacheNodeNameInfoName CountedUtf16String | — |
Event ID 193 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_foundNameCacheNode Pointer | — |
A11_GenCtxFileObject Pointer | — |
A12_foundNameCacheNodeTreeLinkFlags HexInt32 | — |
A13_foundNameCacheNodeUseCount Int32 | — |
A14__foundNameCacheNodeNameInfoName CountedUtf16String | — |
Event ID 194 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_nameCacheNode Pointer | — |
A11_GenCtxFileObject Pointer | — |
A12_nameCacheNodeTreeLinkFlags HexInt32 | — |
A13_nameCacheNodeUseCount Int32 | — |
A14__nameCacheNodeNameInfoName CountedUtf16String | — |
Event ID 195 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_IrpCtrlNULLIrpCtrlDataIopbMajorFunction0xff HexInt32 | — |
A11_IrpCtrlNULLIrpCtrlDataIopbMinorFunction0xff HexInt32 | — |
A12__VolumeDeviceName CountedUtf16String | — |
A13__FileObjectFileName CountedUtf16String | — |
A14_FileObject Pointer | — |
Event ID 196 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_IrpCtrlNULLIrpCtrlDataIopbMajorFunction0xff HexInt32 | — |
A11_IrpCtrlNULLIrpCtrlDataIopbMinorFunction0xff HexInt32 | — |
A12__VolumeDeviceName CountedUtf16String | — |
A13__FileObjectFileName CountedUtf16String | — |
A14_FileObject Pointer | — |
Event ID 197 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FileNameInformation Pointer | — |
A11_nameCacheNodeUseCount Int32 | — |
Event ID 198 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FileNameInformation Pointer | — |
Event ID 199 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 200 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
Event ID 201 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10__GenCtxShortFileName CountedUtf16String | — |
A11__localGenCtxFileNameInformationName CountedUtf16String | — |
Event ID 202 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10__VolumeDeviceName CountedUtf16String | — |
A11__FileObjectFileName CountedUtf16String | — |
A12_FileObject Pointer | — |
Event ID 203 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
Event ID 204 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_NameCtrl Pointer | — |
A11_NameCtrlNameGenerationFlags HexInt32 | — |
A12_NameCtrlError HexInt32 | — |
A13_NameCtrlShareNameLength HexInt32 | — |
A14_NameCtrlStreamNameLength HexInt32 | — |
A15__NameCtrlName CountedUtf16String | — |
A16__NameCtrlCurrentShortName CountedUtf16String | — |
Event ID 205 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_NameCtrl Pointer | — |
A11_NameCtrlBufferSize HexInt32 | — |
A12_NewSize HexInt32 | — |
A13__NameCtrlName CountedUtf16String | — |
A14_NameCtrlFlags HexInt32 | — |
A15_FlagsToSet HexInt32 | — |
Event ID 206 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_GET_NAME_SUPPORT_VOLUME_DEVICE_NAMEGenCtx CountedUtf16String | — |
A11_GenCtxFileObjectFileNameBuffer0 HexInt32 | — |
A12_GenCtxFileObjectFileNameBuffer1 HexInt32 | — |
A13_GenCtxFileObjectFileNameBuffer2 HexInt32 | — |
A14_GenCtxFileObjectFileNameBuffer3 HexInt32 | — |
Event ID 207 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10__GenCtxShortFileName CountedUtf16String | — |
A11__GenCtxExpandedFileName CountedUtf16String | — |
Event ID 208 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10__GenCtxNameCtrlName CountedUtf16String | — |
Event ID 209 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_GenCtxFileObject Pointer | — |
Event ID 210 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FileNameInformation Pointer | — |
A11__FileNameInformationName CountedUtf16String | — |
A12__FileNameInformationVolume CountedUtf16String | — |
A13__FileNameInformationFinalComponent CountedUtf16String | — |
A14__FileNameInformationExtension CountedUtf16String | — |
A15__FileNameInformationStream CountedUtf16String | — |
A16__FileNameInformationParentDir CountedUtf16String | — |
Event ID 211 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FileNameInformation Pointer | — |
A11__FileNameInformationName CountedUtf16String | — |
A12__FileNameInformationVolume CountedUtf16String | — |
A13__FileNameInformationFinalComponent CountedUtf16String | — |
A14__FileNameInformationExtension CountedUtf16String | — |
A15__FileNameInformationStream CountedUtf16String | — |
A16__FileNameInformationParentDir CountedUtf16String | — |
Event ID 212 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FileNameInformation Pointer | — |
A11__FileNameInformationName CountedUtf16String | — |
A12__FileNameInformationVolume CountedUtf16String | — |
A13__FileNameInformationFinalComponent CountedUtf16String | — |
A14__FileNameInformationExtension CountedUtf16String | — |
A15__FileNameInformationStream CountedUtf16String | — |
A16__FileNameInformationParentDir CountedUtf16String | — |
Event ID 213 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FileNameInformation Pointer | — |
Event ID 214 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CallbackDataIopbMajorFunction HexInt32 | — |
A11_iccIrpCtrl Pointer | — |
A12_iccIrpCtrlPendingCallbackNode Pointer | — |
A13_FlagOniccIrpCtrlFlagsIRPCTRFL_SYNCHRONIZESYNCNotSYNC AnsiString | — |
Event ID 215 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_irpCtrlIrp Pointer | — |
A11_irpCtrlDataIopbMajorFunction Int32 | — |
Event ID 216 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_irpCtrlIrp Pointer | — |
A11_irpCtrlDataIopbMajorFunction Int32 | — |
Event ID 217 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_irpCtrlIrp Pointer | — |
A11_irpCtrlDataIopbMajorFunction Int32 | — |
Event ID 218 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_status HexInt32 | — |
A11__filterName CountedUtf16String | — |
Event ID 219 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10__filterName CountedUtf16String | — |
A11__filterDefaultAltitude CountedUtf16String | — |
Event ID 220 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10__FilterName CountedUtf16String | — |
Event ID 221 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10__localHead Pointer | — |
Event ID 222 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10__VolumeDeviceName CountedUtf16String | — |
Event ID 223 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_streamList Pointer | — |
A11_streamListFlags HexInt32 | — |
A12_streamListUseCount Int32 | — |
Event ID 224 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_streamList Pointer | — |
A11_streamListFlags HexInt32 | — |
A12_streamListUseCount Int32 | — |
Event ID 225 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_newStreamList Pointer | — |
A11_newStreamListFlags HexInt32 | — |
A12_newStreamListUseCount Int32 | — |
Event ID 226 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_streamList Pointer | — |
A11_streamListFlags HexInt32 | — |
A12_streamListUseCount Int32 | — |
Event ID 227 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_newStreamList Pointer | — |
A11_newStreamListFlags HexInt32 | — |
A12_newStreamListUseCount Int32 | — |
Event ID 228 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_StreamList Pointer | — |
A11_StreamListFlags HexInt32 | — |
A12_StreamListUseCount Int32 | — |
Event ID 229 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_StreamList Pointer | — |
A11_StreamListFlags HexInt32 | — |
A12_StreamListUseCount Int32 | — |
Event ID 230 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_StreamList Pointer | — |
A11_StreamListFlags HexInt32 | — |
A12_StreamListUseCount Int32 | — |
Event ID 231 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FltObject Pointer | — |
A11_PFLT_OBJECTFltObjectPointerCount Int32 | — |
A12_reason AnsiString | — |
Event ID 232 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FltObject Pointer | — |
A11_PFLT_OBJECTFltObjectPointerCount Int32 | — |
A12_reason AnsiString | — |
Event ID 233 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_deviceObject Pointer | — |
Event ID 234 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_CDODriverName CountedUtf16String | — |
Event ID 235 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_Volume Pointer | — |
A11__VolumeDeviceName CountedUtf16String | — |
Event ID 236 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_KeGetCurrentThread Pointer | — |
A11_FileObject Pointer | — |
A12_Volume Pointer | — |
A13_IrpMajor Int32 | — |
Event ID 237 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FltWork Pointer | — |
A11_QueueType Int32 | — |
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount Int32 | — |
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit Int32 | — |
Event ID 238 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FltWork Pointer | — |
A11_QueueType Int32 | — |
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount Int32 | — |
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit Int32 | — |
Event ID 239 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_fltWork Pointer | — |
A11_QueueType Int32 | — |
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount Int32 | — |
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit Int32 | — |
Event ID 240 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_NULL Pointer | — |
A11_QueueType Int32 | — |
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount Int32 | — |
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit Int32 | — |
Event ID 241 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_GenericWorkItem Pointer | — |
A11_qtype Int32 | — |
A12_fltObject Pointer | — |
A13_GenericWorkItemGenericWorkerRoutine Pointer | — |
A14_GenericWorkItemContext Pointer | — |
A15_GenericWorkItemIoPriorityInfoIoPriority Int32 | — |
Event ID 242 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_DeferredWorkItem Pointer | — |
A11_qtype Int32 | — |
A12_instance Pointer | — |
A13_DeferredWorkItemDeferredWorkerRoutine Pointer | — |
A14_DeferredWorkItemContext Pointer | — |
A15_DeferredWorkItemIoPriorityInfoIoPriority Int32 | — |
Event ID 243 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FltWorkItem Pointer | — |
A11_FltWorkItemQueueType Int32 | — |
A12_FltWorkItemFltObject Pointer | — |
A13_FltWorkItemGenericWorkerRoutine Pointer | — |
A14_FltWorkItemContext Pointer | — |
Event ID 244 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FltWorkItem Pointer | — |
A11_FltWorkItemQueueType Int32 | — |
A12_FltWorkItemInstance Pointer | — |
A13_FltWorkItemDeferredWorkerRoutine Pointer | — |
A14_FltWorkItemContext Pointer | — |
Event ID 245 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FltWorkItem Pointer | — |
A11_QueueType Int32 | — |
A12_FltObject Pointer | — |
A13_WorkerRoutine Pointer | — |
A14_Context Pointer | — |
A15_FltWorkItemIoPriorityInfoIoPriority Int32 | — |
Event ID 246 —
Fields #
| Name | Description |
|---|---|
FUNC AnsiString | — |
A10_FltWorkItem Pointer | — |
A11_QueueType Int32 | — |
A12_FltWorkItemInstance Pointer | — |
A13_WorkerRoutine Pointer | — |
A14_Context Pointer | — |
A15_FltWorkItemIoPriorityInfoIoPriority Int32 | — |