EtwpRegTraceEnableCallback

void __fastcall EtwpRegTraceEnableCallback(
        const _GUID *a1,
        int a2,
        __int64 a3,
        __int64 a4,
        unsigned __int64 a5,
        _EVENT_FILTER_DESCRIPTOR *a6){
  _UNICODE_STRING DestinationString; 

  DestinationString = 0i64;
  if( a6 && a6->Size == 4 )
    EtwpRegTraceOptions = *(unsigned int *)a6->Ptr;
  if( a2 )
  {
    if( a2 == 1 && !EtwpRegTracingEnabled )
    {
      RtlInitUnicodeString(&DestinationString, L"425500");
      if( CmRegisterCallbackEx(
             (PEX_CALLBACK_FUNCTION)EtwpRegTraceCallback,
             &DestinationString,
             &DestinationString,
             0i64,
             &EtwpRegTraceCookie,
             0i64) >= 0 )
        EtwpRegTracingEnabled = 1;
    }
  }
  else if( EtwpRegTracingEnabled )
  {
    CmUnRegisterCallback(EtwpRegTraceCookie);
    EtwpRegTracingEnabled = 0;
  }
}

Referenced by: