add functions to etwpatch

Author: SolitudePy

volatility3/framework/plugins/windows/etwpatch.py

@@ -30,10 +30,17 @@ class EtwPatch(interfaces.plugins.PluginInterface):
                 "EtwEventWrite",
                 "EtwEventWriteFull",
                 "NtTraceEvent",
+                "NtTraceEvent",
+                "ZwTraceEvent",
+                "NtTraceControl",
+                "ZwTraceControl",
+                "EtwpEventWriteFull"
             ],
         },
         "advapi32.dll": {
-            pe_symbols.wanted_names_identifier: ["EventWrite"],
+            pe_symbols.wanted_names_identifier: [
+                "EventWrite", 
+                "TraceEvent"],
         },
     }