NTKERNELAPI
NTSTATUS
WmiTraceLongEvent(
  IN  ULONG GroupType,
  IN  PMOF_FIELD EventFields,
  IN  ULONG FieldCount,
  IN  PETHREAD Thread
  );

Routine Description:

    This routine is used by trace kernel events with long traces only.
    These events can be charged to the given thread instead of the running
    thread. Because it can be called by I/O events at DPC level, this routine
    cannot be pageable when tracing is on.

    This routine is used to trace filenames.

    This routine works at IRQL <= DISPATCH_LEVEL

Arguments:

    GroupType       a ULONG key to indicate the action to be taken

    EventFields     an array of structures describing each field
                    to be attached to event trace

    FieldCount      number of array entries in EventFields

    Thread          Pointer to thread where event is to be charged.

Return Value:

    The status of performing the action requested