EtwpQuerySessionDemuxObject
NTSTATUS __stdcall EtwpQuerySessionDemuxObject(VOID *a1, UINT16 *a2){
NTSTATUS v3;
_ADAPTER_OBJECT *v4;
NTSTATUS v5;
UINT16 v6;
PADAPTER_OBJECT DmaAdapter;
DmaAdapter = 0i64;
v3 = ObReferenceObjectByHandle(a1, 0i64, EtwpSessionDemuxObjectType, 1, (VOID **)&DmaAdapter, 0i64);
v4 = DmaAdapter;
v5 = v3;
if( v3 >= 0 )
{
v6 = WORD1(DmaAdapter->AdapterObject.ContiguousMapRegisters);
if( v6 )
{
*a2 = v6;
v5 = 0;
}
else
{
v5 = -1073741162;
}
}
if( v4 )
HalPutDmaAdapter(v4);
return v5;
}Referenced by:
NtTraceControl