pub unsafe extern "system" fn ProcessTraceAddBufferToBufferStream(
    tracehandle: u64,
    buffer: *const ETW_BUFFER_HEADER,
    buffersize: u32,
) -> u32