TtmiLogSessionPowerControlStop
VOID __stdcall TtmiLogSessionPowerControlStop(){
int ProcessSessionId;
int v1;
struct _EVENT_DATA_DESCRIPTOR v2;
int *v3;
int v4;
int v5;
if( (unsigned int)dword_140D2C8E8 > 5 )
{
if( tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64) )
{
ProcessSessionId = PsGetProcessSessionIdEx(*((_QWORD *)KeGetCurrentThread() + 23));
v5 = 0;
v1 = ProcessSessionId;
v4 = 4;
v3 = &v1;
tlgWriteTransfer_EtwWriteTransfer(
(__int64)&dword_140D2C8E8,
(unsigned __int8 *)byte_14002ADCF,
0i64,
0i64,
3u,
&v2);
}
}
}Referenced by:
TtmpSessionPowerControl