niko
223 lines
7.6 KiB
C#
223 lines
7.6 KiB
C#
using System;
|
|
using System.Diagnostics.Tracing;
|
|
using System.Runtime.InteropServices;
|
|
using Cpp2IlInjected;
|
|
|
|
namespace Microsoft.Win32
|
|
{
|
|
// Token: 0x02000059 RID: 89
|
|
[Token(Token = "0x2000059")]
|
|
internal static class UnsafeNativeMethods
|
|
{
|
|
// Token: 0x0200005A RID: 90
|
|
[Token(Token = "0x200005A")]
|
|
internal static class ManifestEtw
|
|
{
|
|
// Token: 0x0600027F RID: 639
|
|
[Token(Token = "0x600027F")]
|
|
[Address(RVA = "0x2AB1220", Offset = "0x2AB0020", VA = "0x182AB1220")]
|
|
internal unsafe static extern uint EventRegister([In] ref Guid providerId, [In] UnsafeNativeMethods.ManifestEtw.EtwEnableCallback enableCallback, [In] void* callbackContext, [In] [Out] ref long registrationHandle);
|
|
|
|
// Token: 0x06000280 RID: 640
|
|
[Token(Token = "0x6000280")]
|
|
[Address(RVA = "0x2AB1370", Offset = "0x2AB0170", VA = "0x182AB1370")]
|
|
internal static extern uint EventUnregister([In] long registrationHandle);
|
|
|
|
// Token: 0x06000281 RID: 641 RVA: 0x000031B0 File Offset: 0x000013B0
|
|
[Token(Token = "0x6000281")]
|
|
[Address(RVA = "0x2AB13F0", Offset = "0x2AB01F0", VA = "0x182AB13F0")]
|
|
internal unsafe static int EventWriteTransferWrapper(long registrationHandle, ref EventDescriptor eventDescriptor, Guid* activityId, Guid* relatedActivityId, int userDataCount, EventProvider.EventData* userData)
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
// Token: 0x06000282 RID: 642
|
|
[Token(Token = "0x6000282")]
|
|
[Address(RVA = "0x2AB14F0", Offset = "0x2AB02F0", VA = "0x182AB14F0")]
|
|
private unsafe static extern int EventWriteTransfer([In] long registrationHandle, [In] ref EventDescriptor eventDescriptor, [In] Guid* activityId, [In] Guid* relatedActivityId, [In] int userDataCount, [In] EventProvider.EventData* userData);
|
|
|
|
// Token: 0x06000283 RID: 643
|
|
[Token(Token = "0x6000283")]
|
|
[Address(RVA = "0x2AB1190", Offset = "0x2AAFF90", VA = "0x182AB1190")]
|
|
internal static extern int EventActivityIdControl([In] UnsafeNativeMethods.ManifestEtw.ActivityControl ControlCode, [In] [Out] ref Guid ActivityId);
|
|
|
|
// Token: 0x06000284 RID: 644
|
|
[Token(Token = "0x6000284")]
|
|
[Address(RVA = "0x2AB12D0", Offset = "0x2AB00D0", VA = "0x182AB12D0")]
|
|
internal unsafe static extern int EventSetInformation([In] long registrationHandle, [In] UnsafeNativeMethods.ManifestEtw.EVENT_INFO_CLASS informationClass, [In] void* eventInformation, [In] int informationLength);
|
|
|
|
// Token: 0x06000285 RID: 645
|
|
[Token(Token = "0x6000285")]
|
|
[Address(RVA = "0x2AB10D0", Offset = "0x2AAFED0", VA = "0x182AB10D0")]
|
|
internal unsafe static extern int EnumerateTraceGuidsEx(UnsafeNativeMethods.ManifestEtw.TRACE_QUERY_INFO_CLASS TraceQueryInfoClass, void* InBuffer, int InBufferSize, void* OutBuffer, int OutBufferSize, ref int ReturnLength);
|
|
|
|
// Token: 0x0200005B RID: 91
|
|
// (Invoke) Token: 0x06000287 RID: 647
|
|
[Token(Token = "0x200005B")]
|
|
internal unsafe delegate void EtwEnableCallback([In] ref Guid sourceId, [In] int isEnabled, [In] byte level, [In] long matchAnyKeywords, [In] long matchAllKeywords, [In] UnsafeNativeMethods.ManifestEtw.EVENT_FILTER_DESCRIPTOR* filterData, [In] void* callbackContext);
|
|
|
|
// Token: 0x0200005C RID: 92
|
|
[Token(Token = "0x200005C")]
|
|
internal struct EVENT_FILTER_DESCRIPTOR
|
|
{
|
|
// Token: 0x04000160 RID: 352
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0x0")]
|
|
[Token(Token = "0x4000160")]
|
|
public long Ptr;
|
|
|
|
// Token: 0x04000161 RID: 353
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0x8")]
|
|
[Token(Token = "0x4000161")]
|
|
public int Size;
|
|
|
|
// Token: 0x04000162 RID: 354
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0xC")]
|
|
[Token(Token = "0x4000162")]
|
|
public int Type;
|
|
}
|
|
|
|
// Token: 0x0200005D RID: 93
|
|
[Token(Token = "0x200005D")]
|
|
internal enum ActivityControl : uint
|
|
{
|
|
// Token: 0x04000164 RID: 356
|
|
[Token(Token = "0x4000164")]
|
|
EVENT_ACTIVITY_CTRL_GET_ID = 1U,
|
|
// Token: 0x04000165 RID: 357
|
|
[Token(Token = "0x4000165")]
|
|
EVENT_ACTIVITY_CTRL_SET_ID,
|
|
// Token: 0x04000166 RID: 358
|
|
[Token(Token = "0x4000166")]
|
|
EVENT_ACTIVITY_CTRL_CREATE_ID,
|
|
// Token: 0x04000167 RID: 359
|
|
[Token(Token = "0x4000167")]
|
|
EVENT_ACTIVITY_CTRL_GET_SET_ID,
|
|
// Token: 0x04000168 RID: 360
|
|
[Token(Token = "0x4000168")]
|
|
EVENT_ACTIVITY_CTRL_CREATE_SET_ID
|
|
}
|
|
|
|
// Token: 0x0200005E RID: 94
|
|
[Token(Token = "0x200005E")]
|
|
internal enum EVENT_INFO_CLASS
|
|
{
|
|
// Token: 0x0400016A RID: 362
|
|
[Token(Token = "0x400016A")]
|
|
BinaryTrackInfo,
|
|
// Token: 0x0400016B RID: 363
|
|
[Token(Token = "0x400016B")]
|
|
SetEnableAllKeywords,
|
|
// Token: 0x0400016C RID: 364
|
|
[Token(Token = "0x400016C")]
|
|
SetTraits
|
|
}
|
|
|
|
// Token: 0x0200005F RID: 95
|
|
[Token(Token = "0x200005F")]
|
|
internal enum TRACE_QUERY_INFO_CLASS
|
|
{
|
|
// Token: 0x0400016E RID: 366
|
|
[Token(Token = "0x400016E")]
|
|
TraceGuidQueryList,
|
|
// Token: 0x0400016F RID: 367
|
|
[Token(Token = "0x400016F")]
|
|
TraceGuidQueryInfo,
|
|
// Token: 0x04000170 RID: 368
|
|
[Token(Token = "0x4000170")]
|
|
TraceGuidQueryProcess,
|
|
// Token: 0x04000171 RID: 369
|
|
[Token(Token = "0x4000171")]
|
|
TraceStackTracingInfo,
|
|
// Token: 0x04000172 RID: 370
|
|
[Token(Token = "0x4000172")]
|
|
MaxTraceSetInfoClass
|
|
}
|
|
|
|
// Token: 0x02000060 RID: 96
|
|
[Token(Token = "0x2000060")]
|
|
internal struct TRACE_GUID_INFO
|
|
{
|
|
// Token: 0x04000173 RID: 371
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0x0")]
|
|
[Token(Token = "0x4000173")]
|
|
public int InstanceCount;
|
|
|
|
// Token: 0x04000174 RID: 372
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0x4")]
|
|
[Token(Token = "0x4000174")]
|
|
public int Reserved;
|
|
}
|
|
|
|
// Token: 0x02000061 RID: 97
|
|
[Token(Token = "0x2000061")]
|
|
internal struct TRACE_PROVIDER_INSTANCE_INFO
|
|
{
|
|
// Token: 0x04000175 RID: 373
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0x0")]
|
|
[Token(Token = "0x4000175")]
|
|
public int NextOffset;
|
|
|
|
// Token: 0x04000176 RID: 374
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0x4")]
|
|
[Token(Token = "0x4000176")]
|
|
public int EnableCount;
|
|
|
|
// Token: 0x04000177 RID: 375
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0x8")]
|
|
[Token(Token = "0x4000177")]
|
|
public int Pid;
|
|
|
|
// Token: 0x04000178 RID: 376
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0xC")]
|
|
[Token(Token = "0x4000178")]
|
|
public int Flags;
|
|
}
|
|
|
|
// Token: 0x02000062 RID: 98
|
|
[Token(Token = "0x2000062")]
|
|
internal struct TRACE_ENABLE_INFO
|
|
{
|
|
// Token: 0x04000179 RID: 377
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0x0")]
|
|
[Token(Token = "0x4000179")]
|
|
public int IsEnabled;
|
|
|
|
// Token: 0x0400017A RID: 378
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0x4")]
|
|
[Token(Token = "0x400017A")]
|
|
public byte Level;
|
|
|
|
// Token: 0x0400017B RID: 379
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0x5")]
|
|
[Token(Token = "0x400017B")]
|
|
public byte Reserved1;
|
|
|
|
// Token: 0x0400017C RID: 380
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0x6")]
|
|
[Token(Token = "0x400017C")]
|
|
public ushort LoggerId;
|
|
|
|
// Token: 0x0400017D RID: 381
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0x8")]
|
|
[Token(Token = "0x400017D")]
|
|
public int EnableProperty;
|
|
|
|
// Token: 0x0400017E RID: 382
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0xC")]
|
|
[Token(Token = "0x400017E")]
|
|
public int Reserved2;
|
|
|
|
// Token: 0x0400017F RID: 383
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0x10")]
|
|
[Token(Token = "0x400017F")]
|
|
public long MatchAnyKeyword;
|
|
|
|
// Token: 0x04000180 RID: 384
|
|
[global::Cpp2IlInjected.FieldOffset(Offset = "0x18")]
|
|
[Token(Token = "0x4000180")]
|
|
public long MatchAllKeyword;
|
|
}
|
|
}
|
|
}
|
|
}
|