TtmiLogCalloutStart

VOID __stdcall TtmiLogCalloutStart(_TERMINAL_DEVICE_PROVIDER Provider, UINT64 Token, UINT64 CalloutTag, UINT64 Data){
  int v4; 
  NTSTATUS ProcessSessionId; 
  NTSTATUS v8; 
  _TERMINAL_DEVICE_PROVIDER v9; 
  int v10; 
  UINT64 v11; 
  _EVENT_DATA_DESCRIPTOR v12; 
  int *v13; 
  int v14; 
  int v15; 
  _TERMINAL_DEVICE_PROVIDER *v16; 
  int v17; 
  int v18; 
  UINT64 *v19; 
  int v20; 
  int v21; 
  int *v22; 
  int v23; 
  int v24; 
  int *v25; 
  int v26[2]; 
  int *v27; 
  int v28; 
  int v29; 
  int v30; 

  v30 = CalloutTag;
  v4 = Data;
  if( (unsigned int)dword_140D2C8E8 > 5 )
  {
    if( tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64) )
    {
      ProcessSessionId = PsGetProcessSessionIdEx((INT64)KeGetCurrentThread()->ApcState.Process);
      v15 = 0;
      v18 = 0;
      v21 = 0;
      v24 = 0;
      v26[1] = 0;
      v29 = 0;
      v8 = ProcessSessionId;
      v13 = &v8;
      v16 = &v9;
      v19 = &v11;
      v22 = v26;
      v25 = &v30;
      v27 = &v10;
      v14 = 4;
      v17 = 4;
      v20 = 8;
      v26[0] = 4;
      v28 = 4;
      v9 = Provider;
      v11 = Token;
      v23 = 2;
      v10 = v4;
      tlgWriteTransfer_EtwWriteTransfer(
        (__int64)&dword_140D2C8E8,
        (unsigned __int8 *)&unk_140029E50,
        0i64,
        0i64,
        8u,
        &v12);
    }
  }
}

Referenced by: