EtwpCheckForPoolTagFilterExtension

__int64 __fastcall EtwpCheckForPoolTagFilterExtension(__int64 a1, __int64 a2, char a3){
  unsigned __int16 *FlagExtension; 
  __int64 v5; 
  __int64 v6; 
  unsigned __int16 v8; 
  FlagExtension = EtwpGetFlagExtension(a2, 4);
  if( !FlagExtension )
  {
    if( a3 )
    {
      v6 = 5 * v5;
      *((_DWORD *)EtwpPoolTagFilter + v6 + 1) = 42;
      *((_WORD *)EtwpPoolTagFilter + 2 * v6) = 1;
    }
    return 0i64;
  }
  v8 = (unsigned __int16)(4 * *FlagExtension - 4) >> 2;
  if( v8 <= 4u )
  {
    EtwpUpdateTagFilter((_DWORD *)FlagExtension + 1, v8, (__int64)EtwpPoolTagFilter + 20 * v5);
    return 0i64;
  }
  return 3221225485i64;
}

Referenced by: