TtmiLogCalloutWatchdogCrashSkipped
CHAR __fastcall TtmiLogCalloutWatchdogCrashSkipped(INT64 a1, INT64 a2, INT64 a3, INT64 a4, INT64 a5, INT64 a6){
void **v6;
int v9;
int v10;
int ProcessSessionId;
int v13;
int v14;
int v15;
INT64 v16;
INT64 v17;
INT64 v18;
INT64 v19;
struct _EVENT_DATA_DESCRIPTOR v20;
int *v21;
int v22;
int v23;
int *v24;
int v25;
int v26;
int *v27;
int v28;
int v29;
INT64 *v30;
int v31;
int v32;
INT64 *v33;
int v34;
int v35;
INT64 *v36;
int v37;
int v38;
INT64 *v39;
int v40;
int v41;
void *retaddr;
v6 = &retaddr;
v9 = a2;
v10 = a1;
if( (unsigned int)dword_140D2C8B0 > 5 )
{
LOBYTE(v6) = tlgKeywordOn((__int64)&dword_140D2C8B0, 0x400000000001i64);
if( (_BYTE)v6 )
{
ProcessSessionId = PsGetProcessSessionIdEx(*((_QWORD *)KeGetCurrentThread() + 23));
v23 = 0;
v26 = 0;
v29 = 0;
v32 = 0;
v35 = 0;
v38 = 0;
v41 = 0;
v13 = ProcessSessionId;
v21 = &v13;
v24 = &v14;
v27 = &v15;
v30 = &v16;
v33 = &v17;
v18 = a5;
v36 = &v18;
v19 = a6;
v39 = &v19;
v22 = 4;
v25 = 4;
v28 = 4;
v31 = 8;
v34 = 8;
v37 = 8;
v40 = 8;
v14 = v10;
v15 = v9;
v16 = a3;
v17 = a4;
LOBYTE(v6) = tlgWriteTransfer_EtwWriteTransfer(
(__int64)&dword_140D2C8B0,
(unsigned __int8 *)byte_140029F9B,
0i64,
0i64,
9u,
&v20);
}
}
return(char)v6;
}Referenced by:
TtmpCalloutWatchdogCallback