pub unsafe extern "system" fn ProcessTraceBufferIncrementReference(
    tracehandle: u64,
    buffer: *const ETW_BUFFER_HEADER,
) -> u32