EtwpRealtimeUpdateReferenceTime
NTSTATUS __stdcall EtwpRealtimeUpdateReferenceTime(
_WMI_LOGGER_CONTEXT *LoggerContext,
_ETW_REF_CLOCK *RealtimeReferenceTime){
bool v4;
_ETW_REF_CLOCK v5;
_QWORD v7[11];
memset(v7, 0i64, 0x48u);
EtwpInitializeBufferHeader(LoggerContext, (_WMI_BUFFER_HEADER *)v7);
WORD2(v7[6]) &= ~0x100u;
EtwpResetBufferHeader((_WMI_BUFFER_HEADER *)v7, 3u);
v4 = LoggerContext->RealtimeBuffersSaved == 0;
v5 = *RealtimeReferenceTime;
HIDWORD(v7[5]) = 3;
LODWORD(v7[6]) = 72;
*(_ETW_REF_CLOCK *)&v7[7] = v5;
WORD2(v7[6]) = 1;
if( v4 )
return EtwpRealtimeDeliverBuffer(LoggerContext, (_WMI_BUFFER_HEADER *)v7);
else
return EtwpRealtimeSaveBuffer(LoggerContext, (_WMI_BUFFER_HEADER *)v7);
}Referenced by:
EtwpRealtimeCreateLogfile
EtwpRealtimeResetReferenceTime