Geoff Chappell, Software Analyst
PLACEHOLDER FOR WORK THAT MAY NEVER BE DONE - PREVIEW ONLY
When given 0x16 as its FunctionCode argument, the NtTraceControl function gets information about an event provider. Microsoft’s name for this function code is not known. This note deals only with the function’s behaviour that is specific to this function code. The function’s general behaviour is here taken as assumed knowledge.
This function code supports the EnumerateTraceGuidsEx function for its information class TraceGuidQueryInfo (1). If the input buffer does not provide exactly the 0x10 bytes of a GUID, the function returns STATUS_INVALID_PARAMETER.
TO BE DONE?