EtwpQuerySessionDemuxObject

INT64 __fastcall EtwpQuerySessionDemuxObject(VOID *a1, UINT16 *a2){
  NTSTATUS v3; 
  struct _DMA_ADAPTER *v4; 
  unsigned int v5; 
  unsigned __int16 Size; 
  PADAPTER_OBJECT DmaAdapter; 
  DmaAdapter = 0i64;
  v3 = ObReferenceObjectByHandle(a1, 0, EtwpSessionDemuxObjectType, 1, (PVOID *)&DmaAdapter, 0i64);
  v4 = DmaAdapter;
  v5 = v3;
  if( v3 >= 0 )
  {
    Size = DmaAdapter[1].Size;
    if( Size )
    {
      *a2 = Size;
      v5 = 0;
    }
    else
    {
      v5 = -1073741162;
    }
  }
  if( v4 )
    HalPutDmaAdapter(v4);
  return v5;
}

Referenced by: