PLACEHOLDER FOR WORK THAT MAY NEVER BE DONE - PREVIEW ONLY

Enumerate Trace GUIDs

When given 0x17 as its FunctionCode argument, the NtTraceControl function gets a list of event providers. Microsoft’s name for this function code is not known. This note deals only with the function’s behaviour that is specific to this function code. The function’s general behaviour is here taken as assumed knowledge.

This function code supports the EnumerateTraceGuids function. It has no immediate buffer validation.

TO BE DONE?