TtmiLogSessionPowerStateChange

VOID __stdcall TtmiLogSessionPowerStateChange(UINT8 On){
  NTSTATUS ProcessSessionId; 
  UINT8 v3; 
  NTSTATUS v4; 
  _EVENT_DATA_DESCRIPTOR v5; 
  int *v6; 
  int v7; 
  int v8; 
  UINT8 *v9; 
  int v10; 
  int v11; 

  if( (unsigned int)dword_140D2C8E8 > 5 )
  {
    if( tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64) )
    {
      ProcessSessionId = PsGetProcessSessionIdEx((INT64)KeGetCurrentThread()->ApcState.Process);
      v8 = 0;
      v11 = 0;
      v4 = ProcessSessionId;
      v7 = 4;
      v6 = &v4;
      v3 = On;
      v9 = &v3;
      v10 = 1;
      tlgWriteTransfer_EtwWriteTransfer(
        (__int64)&dword_140D2C8E8,
        (unsigned __int8 *)byte_14002B0EB,
        0i64,
        0i64,
        4u,
        &v5);
    }
  }
}

Referenced by:

TtmNotifySessionPowerStateChange