TtmiLogQueueHandleClosed
VOID __stdcall TtmiLogQueueHandleClosed(PVOID Queue, PVOID ProcessId, UINT64 SystemHandleCount){
__int64 v3;
__int64 v4;
__int64 v5;
__int64 v6;
__int64 v7;
__int64 v8;
struct _EVENT_DATA_DESCRIPTOR v9;
__int64 *v10;
__int64 v11;
__int64 *v12;
__int64 v13;
__int64 *v14;
__int64 v15;
if( (unsigned int)dword_140D2C8E8 > 5 )
{
if( tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64) )
{
v8 = v3;
v10 = &v6;
v6 = v5;
v12 = &v7;
v11 = 8i64;
v14 = &v8;
v7 = v4;
v13 = 8i64;
v15 = 8i64;
tlgWriteTransfer_EtwWriteTransfer(
(__int64)&dword_140D2C8E8,
(unsigned __int8 *)byte_140029E05,
0i64,
0i64,
5u,
&v9);
}
}
}Referenced by:
TtmpCloseQueueHandle