void __fastcall EtwpTraceLoggingProvEnableCallback(
__int64 a1,
int a2,
__int64 a3,
UINT64 a4,
__int64 a5,
__int64 a6,
__int64 *ProviderGuid){
if( a2 == 2 && ProviderGuid == PsProvTraceLoggingGuid )
EtwpPsProvCaptureState(ProviderGuid, a4);
}