TtmiLogProximityPowerPress
VOID __stdcall TtmiLogProximityPowerPress(
UINT8 Escaped,
UINT64 SpanSinceLastPress,
UINT64 PowerPressCount,
UINT64 ScenarioCount,
UINT64 EscapeCount){
int v5;
int v6;
NTSTATUS ProcessSessionId;
UINT8 v10;
NTSTATUS v11;
int v12;
int v13;
int v14;
UINT64 v15;
_EVENT_DATA_DESCRIPTOR v16;
int *v17;
int v18;
int v19;
UINT8 *v20;
int v21;
int v22;
UINT64 *v23;
int v24;
int v25;
int *v26;
int v27;
int v28;
int *v29;
int v30;
int v31;
int *v32;
int v33;
int v34;
v5 = ScenarioCount;
v6 = PowerPressCount;
if( (unsigned int)dword_140D2C8E8 > 5 )
{
if( tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64) )
{
ProcessSessionId = PsGetProcessSessionIdEx((INT64)KeGetCurrentThread()->ApcState.Process);
v19 = 0;
v22 = 0;
v25 = 0;
v28 = 0;
v31 = 0;
v34 = 0;
v11 = ProcessSessionId;
v17 = &v11;
v20 = &v10;
v23 = &v15;
v26 = &v12;
v29 = &v13;
v14 = EscapeCount;
v32 = &v14;
v18 = 4;
v24 = 8;
v27 = 4;
v30 = 4;
v33 = 4;
v10 = Escaped;
v21 = 1;
v15 = SpanSinceLastPress;
v12 = v6;
v13 = v5;
tlgWriteTransfer_EtwWriteTransfer(
(__int64)&dword_140D2C8E8,
(unsigned __int8 *)&dword_140029D41 + 1,
0i64,
0i64,
8u,
&v16);
}
}
}Referenced by:
TtmpShouldEscapeProximity