EtwpLogFileNameRundown

NTSTATUS __stdcall EtwpLogFileNameRundown(UINT64 TargetLoggerId){
  unsigned int v1; 
  unsigned int v2; 
  NTSTATUS result; 

  v2 = v1;
  result = EtwpCheckGuidAccess(&FileProvGuid, 0x80ui64, 0i64);
  if( result >= 0 )
  {
    result = WmiTraceRundownNotify(*(_QWORD *)TargetLoggerId, v2);
    if( result >= 0 )
      return 0;
  }
  return result;
}

Referenced by:

EtwpEnableDisableSpecialGuids