TtmiLogTerminalOffRequest

VOID __stdcall TtmiLogTerminalOffRequest(UINT64 TerminalId, POWER_MONITOR_REQUEST_REASON Reason, UINT64 PathTag){
  int v4; 
  NTSTATUS ProcessSessionId; 
  NTSTATUS v6; 
  int v7; 
  POWER_MONITOR_REQUEST_REASON v8; 
  _EVENT_DATA_DESCRIPTOR v9; 
  int *v10; 
  int v11; 
  int v12; 
  int *v13; 
  int v14; 
  int v15; 
  POWER_MONITOR_REQUEST_REASON *v16; 
  int v17; 
  int v18; 
  int *v19; 
  int v20; 
  int v21; 
  int *v22; 
  int v23[2]; 
  int v24; 

  v24 = PathTag;
  v4 = TerminalId;
  if( (unsigned int)dword_140D2C8E8 > 5 )
  {
    if( tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64) )
    {
      ProcessSessionId = PsGetProcessSessionIdEx((INT64)KeGetCurrentThread()->ApcState.Process);
      v12 = 0;
      v15 = 0;
      v18 = 0;
      v21 = 0;
      v23[1] = 0;
      v6 = ProcessSessionId;
      v10 = &v6;
      v13 = &v7;
      v16 = &v8;
      v19 = v23;
      v22 = &v24;
      v11 = 4;
      v14 = 4;
      v17 = 4;
      v23[0] = 4;
      v7 = v4;
      v8 = Reason;
      v20 = 2;
      tlgWriteTransfer_EtwWriteTransfer(
        (__int64)&dword_140D2C8E8,
        (unsigned __int8 *)&dword_14002A2EC,
        0i64,
        0i64,
        7u,
        &v9);
    }
  }
}

Referenced by: