PfLogDeleteHelper

INT64 __fastcall PfLogDeleteHelper(CHAR a1, INT64 a2, INT64 a3, INT64 a4){
  int v4; 
  int v5; 
  INT64 v8; 
  int v9; 
  unsigned int v10; 
  __int64 v11; 
  struct _SLIST_ENTRY *v12; 
  __int64 v13; 
  INT64 v14; 
  struct _SLIST_ENTRY *v15; 
  __int64 v17; 
  PSLIST_ENTRY ListEntry[2]; 
  v4 = a4;
  v5 = a3;
  PfFbLogEntryReserve((INT64)&BufferList, ListEntry, (INT64)&v17, 32i64, 0i64, 0i64);
  v10 = v9;
  if( v9 < 0 )
  {
    v15 = ListEntry[0];
  }
  else
  {
    v11 = v17;
    *(_DWORD *)(v17 + 16) = (4 * v4) | a1 & 3;
    *(_QWORD *)(v11 + 24) = a2;
    *(_DWORD *)v11 = *(_DWORD *)v11 & 0x80000000 | 0x103;
    v12 = ListEntry[0];
    v13 = v17;
    v14 = dword_140C5001C
        + (unsigned int)((((KUSER_SHARED_DATA.TickCountMultiplier
                          * (unsigned __int64)KUSER_SHARED_DATA.ReservedTickCountOverlay[1]) << 8)
                        + ((KUSER_SHARED_DATA.TickCountMultiplier * (unsigned __int64)KUSER_SHARED_DATA.TickCount.LowPart) >> 24)) >> 10);
    *(_DWORD *)(v17 + 4) = v14;
    *(_DWORD *)(v13 + 8) = v5;
    PfFbLogEntryComplete(v12, v14, 32i64);
    v15 = 0i64;
    v10 = 0;
  }
  if( v15 )
    PfFbLogEntryComplete(v15, v8, 0i64);
  return v10;
}

Referenced by:

PfFileInfoNotify