#ifndef _NTDBG_H

/**
 * Registers an ETW event provider.
 *
 * \param ProviderId A pointer to the provider ID.
 * \param EnableCallback Optional. A pointer to the enable callback function.
 * \param CallbackContext Optional. A pointer to the callback context.
 * \param RegHandle A pointer to a variable that receives the registration handle.
 * \return NTSTATUS Successful or errant status.
 */
NTSYSAPI
NTSTATUS
NTAPI
EtwEventRegister(
    _In_ LPCGUID ProviderId,
    _In_opt_ PENABLECALLBACK EnableCallback,
    _In_opt_ PVOID CallbackContext,
    _Out_ PREGHANDLE RegHandle
    );

#endif
View code on GitHub