Writes a user-mode event to an ETW session via a registered trace handle.
Multiplexed control IOCTL for the ETW subsystem — start, stop, query, flush sessions and enable/disable providers.