PfLogDeleteHelper

NTSTATUS __stdcall PfLogDeleteHelper(PFNL_ENTRY_TYPE EntryType, UINT64 Key, UINT64 SequenceNumber, UINT64 Flags){
  int v4; 
  int v5; 
  char v7; 
  INT64 v8; 
  int v9; 
  NTSTATUS v10; 
  __int64 v11; 
  _SLIST_ENTRY *v12; 
  __int64 v13; 
  INT64 v14; 
  _SLIST_ENTRY *v15; 
  __int64 v17; 
  void *ListEntry[2]; 

  v4 = Flags;
  v5 = SequenceNumber;
  v7 = EntryType;
  PfFbLogEntryReserve((INT64)&stru_140C4DB30 + 7856, ListEntry, (INT64)&v17, 32i64, 0i64, 0i64);
  v10 = v9;
  if( v9 < 0 )
  {
    v15 = (_SLIST_ENTRY *)ListEntry[0];
  }
  else
  {
    v11 = v17;
    *(_DWORD *)(v17 + 16) = (4 * v4) | v7 & 3;
    *(_QWORD *)(v11 + 24) = Key;
    *(_DWORD *)v11 = *(_DWORD *)v11 & 0x80000000 | 0x103;
    v12 = (_SLIST_ENTRY *)ListEntry[0];
    v13 = v17;
    v14 = dword_140C5001C
        + (unsigned int)((((KUSER_SHARED_DATA.TickCountMultiplier
                          * (unsigned __int64)KUSER_SHARED_DATA.ReservedTickCountOverlay[1]) << 8)
                        + ((KUSER_SHARED_DATA.TickCountMultiplier * (unsigned __int64)KUSER_SHARED_DATA.TickCount.LowPart) >> 24)) >> 10);
    *(_DWORD *)(v17 + 4) = v14;
    *(_DWORD *)(v13 + 8) = v5;
    PfFbLogEntryComplete(v12, v14, 32i64);
    v15 = 0i64;
    v10 = 0;
  }
  if( v15 )
    PfFbLogEntryComplete(v15, v8, 0i64);
  return v10;
}

Referenced by: