EtwpIsGuidAllowed

UINT8 __stdcall EtwpIsGuidAllowed(_WMI_LOGGER_CONTEXT *LoggerContext, const VOID *Guid, _GUID *a3){
  _EX_PUSH_LOCK *p_LoggerLock; 
  bool v6; 

  p_LoggerLock = &LoggerContext->LoggerLock;
  ExAcquirePushLockSharedEx(&LoggerContext->LoggerLock, 0i64);
  if( LoggerContext->DisallowedGuids.Count )
    v6 = bsearch(
           Guid,
           LoggerContext->DisallowedGuids.Guids,
           LoggerContext->DisallowedGuids.Count,
           0x10u,
           (int(__cdecl *)(const void *, const void *))EtwpCompareGuid) == 0i64;
  else
    v6 = 1;
  if( _InterlockedCompareExchange64(&p_LoggerLock->_bf_0, 0i64, 17i64) != 17 )
    ExfReleasePushLockShared(p_LoggerLock);
  KeAbPostRelease(p_LoggerLock);
  return v6;
}

Referenced by:

EtwpAddRegEntryToGroup
EtwpDisallowedGuidAddition
EtwpDisallowedGuidRemoval
EtwpIsRegEntryAllowed