McGenEventWrite_EtwWriteTransfer

NTSTATUS __fastcall McGenEventWrite_EtwWriteTransfer(
        REGHANDLE *a1,
        const _EVENT_DESCRIPTOR *a2,
        const _GUID *ActivityId,
        ULONG a4,
        PEVENT_DATA_DESCRIPTOR UserData){
  unsigned __int16 *v5; 
  unsigned int v7; 
  unsigned int v8; 

  v5 = (unsigned __int16 *)a1[1];
  if( v5 )
  {
    UserData->Ptr = (unsigned __int64)v5;
    v7 = 2;
    v8 = *v5;
  }
  else
  {
    UserData->Ptr = 0i64;
    v7 = 0;
    v8 = 0;
  }
  UserData->Size = v8;
  UserData->Reserved = v7;
  return EtwWriteEx(*a1, a2, 0i64, 0, (_LPCGUID)ActivityId, 0, a4, UserData);
}

Referenced by: