EtwRegister

NTSTATUS __stdcall EtwRegister(
        LPCGUID ProviderId,
        PETWENABLECALLBACK EnableCallback,
        PVOID CallbackContext,
        PREGHANDLE RegHandle){
  __int64 v8; 
  __int64 retaddr; 
  v8 = PsGetCurrentServerSiloGlobals()[108];
  return EtwpRegisterProvider(
           v8,
           (unsigned __int64)ProviderId,
           3,
           (void(__fastcall *)(_QWORD *, __int64, __int16 *, __int64))EnableCallback,
           (__int64)CallbackContext,
           retaddr,
           RegHandle);
}

Referenced by: