EtwpPrepareHeader
__int64 __fastcall EtwpPrepareHeader(__int64 a1, __int64 a2, __int16 a3){
int v3;
__int64 v5;
v3 = *(_DWORD *)(a2 + 4);
if( !v3 )
v3 = *(_DWORD *)(a2 + 8);
*(_DWORD *)(a2 + 48) = v3;
if( a3 != 1 && v3 == 72 )
return 2147483682i64;
*(_WORD *)(a2 + 52) = a3 | 0x20;
if( *(_QWORD *)(a1 + 816) || (a3 & 0x40) == 0 )
{
v5 = *(unsigned int *)(a2 + 48);
if( *(_DWORD *)a2 - (int)v5 > 0 )
memset(a2 + v5, 255i64);
}
if( *(_DWORD *)(a2 + 48) == 72 )
return 2147483682i64;
else
return 0i64;
}Referenced by:
EtwpAddLogHeader
EtwpBufferingModeFlush
EtwpFlushBuffer