TtmiLogTerminalDisplayStateChangedEvent
NTSTATUS __stdcall TtmiLogTerminalDisplayStateChangedEvent(_ACPI_REAL_TIME *AcpiRealTime){
int v1;
int v2;
void **v3;
int v4;
int v5;
int v6;
NTSTATUS ProcessSessionId;
NTSTATUS v9;
int v10;
int v11;
int v12;
_EVENT_DATA_DESCRIPTOR v13;
int *v14;
int v15;
int v16;
int *v17;
int v18;
int v19;
int *v20;
int v21;
int v22;
int *v23;
int v24;
int v25;
void *retaddr;
v3 = &retaddr;
v4 = v2;
v5 = v1;
v6 = (int)AcpiRealTime;
if( (unsigned int)dword_140D2C8E8 > 5 )
{
LOBYTE(v3) = tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64);
if( (_BYTE)v3 )
{
ProcessSessionId = PsGetProcessSessionIdEx((INT64)KeGetCurrentThread()->ApcState.Process);
v16 = 0;
v19 = 0;
v22 = 0;
v25 = 0;
v9 = ProcessSessionId;
v14 = &v9;
v17 = &v10;
v20 = &v11;
v23 = &v12;
v15 = 4;
v18 = 4;
v21 = 4;
v24 = 4;
v10 = v6;
v11 = v5;
v12 = v4;
LODWORD(v3) = tlgWriteTransfer_EtwWriteTransfer(
(__int64)&dword_140D2C8E8,
(unsigned __int8 *)byte_140029CA3,
0i64,
0i64,
6u,
&v13);
}
}
return(int)v3;
}Referenced by:
TtmpWriteDisplayStateChangedEvent