TtmiLogDeviceArrivalNotified

CHAR __fastcall TtmiLogDeviceArrivalNotified(INT64 a1, INT64 a2, INT64 a3, INT64 a4, INT64 a5){
  void **v5; 
  int v6; 
  int v7; 
  int v9; 
  int ProcessSessionId; 
  int v12; 
  int v13; 
  int v14; 
  int v15; 
  int v16; 
  INT64 v17; 
  struct _EVENT_DATA_DESCRIPTOR v18; 
  int *v19; 
  int v20; 
  int v21; 
  int *v22; 
  int v23; 
  int v24; 
  INT64 *v25; 
  int v26; 
  int v27; 
  int *v28; 
  int v29; 
  int v30; 
  int *v31; 
  int v32; 
  int v33; 
  int *v34; 
  int v35; 
  int v36; 
  void *retaddr; 
  v5 = &retaddr;
  v6 = a4;
  v7 = a3;
  v9 = a1;
  if( (unsigned int)dword_140D2C8E8 > 5 )
  {
    LOBYTE(v5) = tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64);
    if( (_BYTE)v5 )
    {
      ProcessSessionId = PsGetProcessSessionIdEx(*((_QWORD *)KeGetCurrentThread() + 23));
      v21 = 0;
      v24 = 0;
      v27 = 0;
      v30 = 0;
      v33 = 0;
      v36 = 0;
      v12 = ProcessSessionId;
      v19 = &v12;
      v22 = &v13;
      v25 = &v17;
      v28 = &v14;
      v31 = &v15;
      v16 = a5;
      v34 = &v16;
      v20 = 4;
      v23 = 4;
      v26 = 8;
      v29 = 4;
      v32 = 4;
      v35 = 4;
      v13 = v9;
      v17 = a2;
      v14 = v7;
      v15 = v6;
      LOBYTE(v5) = tlgWriteTransfer_EtwWriteTransfer(
                     (__int64)&dword_140D2C8E8,
                     (unsigned __int8 *)byte_140029C3B,
                     0i64,
                     0i64,
                     8u,
                     &v18);
    }
  }
  return(char)v5;
}

Referenced by: