NTSTATUS __stdcall EtwpComparePfn(VOID *a1, VOID *a2){ return *(_QWORD *)a1 < *(_QWORD *)a2 ? -1 : 1; }