EtwpInitializeProcessorTrace

NTSTATUS __stdcall EtwpInitializeProcessorTrace(INT64 a1, INT64 a2){
  NTSTATUS result; 
  int v3[2]; 
  __int64 v4; 
  __int64(__fastcall **v5)(); 
  __int64 v6; 
  __int64 v7; 

  v3[1] = 3;
  v4 = 512i64;
  v3[0] = 65547;
  v5 = &off_140005A00;
  v6 = 0i64;
  v7 = 0i64;
  result = ExRegisterHost((_EX_HOST **)&ExBootDevicesRemovedEvent + 147, a2, v3);
  if( result < 0 )
    *(&ExBootDevicesRemovedEvent + 147) = 0i64;
  return result;
}

Referenced by:

EtwpInitialize