TtmiLogDeviceEnumeratedTerminalEvent
CHAR __fastcall TtmiLogDeviceEnumeratedTerminalEvent(INT64 a1, INT64 a2, INT64 a3, INT64 a4, WCHAR *a5){
void **v5;
int v6;
int v7;
int v8;
int v9;
int ProcessSessionId;
int v12;
int v13;
int v14;
int v15;
int v16;
struct _EVENT_DATA_DESCRIPTOR v17;
int *v18;
int v19;
int v20;
int *v21;
int v22;
int v23;
int *v24;
int v25;
int v26;
int *v27;
int v28;
int v29;
int *v30;
int v31;
int v32;
char v33[16];
void *retaddr;
v5 = &retaddr;
v6 = a4;
v7 = a3;
v8 = a2;
v9 = a1;
if( (unsigned int)dword_140D2C8E8 > 5 )
{
LOBYTE(v5) = tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64);
if( (_BYTE)v5 )
{
ProcessSessionId = PsGetProcessSessionIdEx(*((_QWORD *)KeGetCurrentThread() + 23));
v20 = 0;
v23 = 0;
v26 = 0;
v29 = 0;
v32 = 0;
v12 = ProcessSessionId;
v18 = &v12;
v21 = &v13;
v24 = &v14;
v27 = &v15;
v19 = 4;
v22 = 4;
v25 = 4;
v28 = 4;
v31 = 4;
v30 = &v16;
v13 = v9;
v14 = v8;
v15 = v7;
v16 = v6;
tlgCreate1Sz_wchar_t((__int64)v33, a5);
LOBYTE(v5) = tlgWriteTransfer_EtwWriteTransfer(
(__int64)&dword_140D2C8E8,
(unsigned __int8 *)byte_14002A3EF,
0i64,
0i64,
8u,
&v17);
}
}
return(char)v5;
}Referenced by:
TtmpPublishDeviceEvent