EtwpEventWriteTemplateSessAndProv

NTSTATUS __fastcall EtwpEventWriteTemplateSessAndProv(
        __int64 a1,
        const _EVENT_DESCRIPTOR *a2,
        __int64 a3,
        __int16 a4,
        unsigned __int16 *a5,
        unsigned __int64 a6){
  ULONG v6; 
  _EVENT_DATA_DESCRIPTOR UserData; 
  __int64 *v9; 
  __int64 v10; 
  __int64 *v11; 
  __int64 v12; 

  v6 = 2;
  if( a4 == 2 )
  {
    UserData.Ptr = a6;
    v9 = (__int64 *)*((_QWORD *)a5 + 1);
    v10 = *a5;
    v12 = 2i64;
    v6 = 3;
    v11 = &EtwpNull;
LABEL_7:
    *(_QWORD *)&UserData.Size = 16i64;
    return EtwWrite(*(&ExBootDevicesRemovedEvent + 241), a2, 0, v6, &UserData);
  }
  if( a5 )
  {
    UserData.Ptr = *((_QWORD *)a5 + 1);
    UserData.Size = *a5;
    v9 = &EtwpNull;
    UserData.Reserved = 0;
    v10 = 2i64;
  }
  else
  {
    v6 = 0;
    if( a6 )
    {
      UserData.Ptr = a6;
      v6 = 1;
      goto LABEL_7;
    }
  }
  return EtwWrite(*(&ExBootDevicesRemovedEvent + 241), a2, 0, v6, &UserData);
}

Referenced by: