TtmiLogDeviceAssignedTerminalEvent
VOID __fastcall TtmiLogDeviceAssignedTerminalEvent(INT64 a1, INT64 a2){
int v2;
int v3;
int ProcessSessionId;
int v5;
int v6;
int v7;
struct _EVENT_DATA_DESCRIPTOR v8;
int *v9;
int v10;
int v11;
int *v12;
int v13;
int v14;
int *v15;
int v16;
int v17;
v2 = a2;
v3 = a1;
if( (unsigned int)dword_140D2C8E8 > 5 )
{
if( tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64) )
{
ProcessSessionId = PsGetProcessSessionIdEx(*((_QWORD *)KeGetCurrentThread() + 23));
v11 = 0;
v14 = 0;
v17 = 0;
v5 = ProcessSessionId;
v10 = 4;
v9 = &v5;
v12 = &v6;
v15 = &v7;
v13 = 4;
v16 = 4;
v6 = v3;
v7 = v2;
tlgWriteTransfer_EtwWriteTransfer(
(__int64)&dword_140D2C8E8,
(unsigned __int8 *)word_140029BE2,
0i64,
0i64,
5u,
&v8);
}
}
}Referenced by:
TtmpPublishDeviceEvent