EtwpRegisterSecurityProvider

__int64 __fastcall EtwpRegisterSecurityProvider(__int64 a1){
  unsigned int v1; 
  v1 = 0;
  if( *(_DWORD *)(a1 + 4072) )
    return(unsigned int)-1073741790;
  else
    *(_DWORD *)(a1 + 4072) = (unsigned int)PsGetCurrentThreadProcessId();
  return v1;
}

Referenced by:

NtTraceControl