TtmiLogDeviceEnumeratedTerminalEvent

char __fastcall TtmiLogDeviceEnumeratedTerminalEvent(int a1, int a2, int a3, int a4, const WCHAR *a5){
  void **v5; 
  NTSTATUS ProcessSessionId; 
  NTSTATUS v12; 
  int v13; 
  int v14; 
  int v15; 
  int v16; 
  _EVENT_DATA_DESCRIPTOR v17; 
  int *v18; 
  int v19; 
  int v20; 
  int *v21; 
  int v22; 
  int v23; 
  int *v24; 
  int v25; 
  int v26; 
  int *v27; 
  int v28; 
  int v29; 
  int *v30; 
  int v31; 
  int v32; 
  char v33[16]; 
  void *retaddr; 

  v5 = &retaddr;
  if( (unsigned int)dword_140D2C8E8 > 5 )
  {
    LOBYTE(v5) = tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64);
    if( (_BYTE)v5 )
    {
      ProcessSessionId = PsGetProcessSessionIdEx((INT64)KeGetCurrentThread()->ApcState.Process);
      v20 = 0;
      v23 = 0;
      v26 = 0;
      v29 = 0;
      v32 = 0;
      v12 = ProcessSessionId;
      v18 = &v12;
      v21 = &v13;
      v24 = &v14;
      v27 = &v15;
      v19 = 4;
      v22 = 4;
      v25 = 4;
      v28 = 4;
      v31 = 4;
      v30 = &v16;
      v13 = a1;
      v14 = a2;
      v15 = a3;
      v16 = a4;
      tlgCreate1Sz_wchar_t((__int64)v33, a5);
      LOBYTE(v5) = tlgWriteTransfer_EtwWriteTransfer(
                     (__int64)&dword_140D2C8E8,
                     (unsigned __int8 *)byte_14002A3EF,
                     0i64,
                     0i64,
                     8u,
                     &v17);
    }
  }
  return(char)v5;
}

Referenced by: