TtmiLogDeviceInputNotified
VOID __stdcall TtmiLogDeviceInputNotified(
_TERMINAL_DEVICE_PROVIDER Provider,
UINT64 Token,
UINT64 InputFlags,
UINT8 DeviceFound,
UINT8 WillEvaluate){
int v6;
NTSTATUS ProcessSessionId;
UINT8 v10;
UINT8 v11;
char v12;
NTSTATUS v13;
_TERMINAL_DEVICE_PROVIDER v14;
int v15;
UINT64 v16;
_EVENT_DATA_DESCRIPTOR v17;
int *v18;
int v19;
int v20;
_TERMINAL_DEVICE_PROVIDER *v21;
int v22;
int v23;
UINT64 *v24;
int v25;
int v26;
int *v27;
int v28;
int v29;
UINT8 *v30;
int v31;
int v32;
UINT8 *v33;
int v34;
int v35;
char *v36;
int v37;
int v38;
char v39;
v6 = InputFlags;
if( (unsigned int)dword_140D2C8E8 > 5 )
{
if( tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64) )
{
ProcessSessionId = PsGetProcessSessionIdEx((INT64)KeGetCurrentThread()->ApcState.Process);
v20 = 0;
v23 = 0;
v26 = 0;
v29 = 0;
v32 = 0;
v35 = 0;
v38 = 0;
v13 = ProcessSessionId;
v18 = &v13;
v21 = &v14;
v24 = &v16;
v27 = &v15;
v30 = &v10;
v11 = WillEvaluate;
v33 = &v11;
v12 = v39;
v36 = &v12;
v19 = 4;
v22 = 4;
v28 = 4;
v14 = Provider;
v16 = Token;
v25 = 8;
v15 = v6;
v10 = DeviceFound;
v31 = 1;
v34 = 1;
v37 = 1;
tlgWriteTransfer_EtwWriteTransfer(
(__int64)&dword_140D2C8E8,
(unsigned __int8 *)&dword_14002AD34 + 2,
0i64,
0i64,
9u,
&v17);
}
}
}Referenced by:
TtmNotifyDeviceInput