EtwpPrepareHeader

__int64 __fastcall EtwpPrepareHeader(__int64 a1, __int64 a2, __int16 a3){
  int v3; 
  __int64 v5; 
  v3 = *(_DWORD *)(a2 + 4);
  if( !v3 )
    v3 = *(_DWORD *)(a2 + 8);
  *(_DWORD *)(a2 + 48) = v3;
  if( a3 != 1 && v3 == 72 )
    return 2147483682i64;
  *(_WORD *)(a2 + 52) = a3 | 0x20;
  if( *(_QWORD *)(a1 + 816) || (a3 & 0x40) == 0 )
  {
    v5 = *(unsigned int *)(a2 + 48);
    if( *(_DWORD *)a2 - (int)v5 > 0 )
      memset(a2 + v5, 255i64);
  }
  if( *(_DWORD *)(a2 + 48) == 72 )
    return 2147483682i64;
  else
    return 0i64;
}

Referenced by:

EtwpAddLogHeader
EtwpBufferingModeFlush
EtwpFlushBuffer