TtmiLogCalloutStop

CHAR __fastcall TtmiLogCalloutStop(INT64 a1, INT64 a2, INT64 a3, INT64 a4, INT64 a5, UINT64 a6){
  void **v6; 
  UINT64 v7; 
  int v9; 
  int v10; 
  unsigned __int8 *v11; 
  int *v12; 
  char *v13; 
  int v15; 
  int v16; 
  int v17; 
  int v18; 
  int ProcessSessionId; 
  int v20; 
  int v21; 
  int v22; 
  INT64 v23; 
  UINT64 v24; 
  INT64 v25; 
  UINT64 v26; 
  char v27; 
  int *v28; 
  __int64 v29; 
  int *v30; 
  __int64 v31; 
  int *v32; 
  __int64 v33; 
  INT64 *v34; 
  __int64 v35; 
  __int64 *v36; 
  __int64 v37; 
  int *v38; 
  __int64 v39[5]; 
  char v40; 
  int *p_ProcessSessionId; 
  __int64 v42; 
  int *v43; 
  __int64 v44; 
  int *v45; 
  __int64 v46; 
  INT64 *v47; 
  __int64 v48; 
  __int64 *v49; 
  __int64 v50; 
  int *v51; 
  __int64 v52[5]; 
  void *retaddr; 
  int v54; 
  v6 = &retaddr;
  v54 = a4;
  v7 = a6;
  v9 = a2;
  v10 = a1;
  if( a6 > 0x1312D00 )
  {
    if( (unsigned int)dword_140D2C8B0 > 5 )
    {
      LOBYTE(v6) = tlgKeywordOn((__int64)&dword_140D2C8B0, 0x400000000001i64);
      if( (_BYTE)v6 )
      {
        ProcessSessionId = PsGetProcessSessionIdEx(*((_QWORD *)KeGetCurrentThread() + 23));
        v11 = (unsigned __int8 *)byte_14002A9E3;
        v42 = 4i64;
        p_ProcessSessionId = &ProcessSessionId;
        v12 = &dword_140D2C8B0;
        v20 = v10;
        v43 = &v20;
        v45 = &v21;
        v47 = &v25;
        v49 = v52;
        v51 = &v54;
        v22 = a5;
        v52[1] = (__int64)&v22;
        v52[3] = (__int64)&v26;
        v13 = &v40;
        v44 = 4i64;
        v21 = v9;
        v46 = 4i64;
        v25 = a3;
        v48 = 8i64;
        v50 = 2i64;
        v52[0] = 4i64;
        v52[2] = 4i64;
        v26 = v7;
        v52[4] = 8i64;
        goto LABEL_8;
      }
    }
  }
  else if( (unsigned int)dword_140D2C8E8 > 5 )
  {
    LOBYTE(v6) = tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64);
    if( (_BYTE)v6 )
    {
      v15 = PsGetProcessSessionIdEx(*((_QWORD *)KeGetCurrentThread() + 23));
      v11 = (unsigned __int8 *)&unk_14002AE38;
      v29 = 4i64;
      v28 = &v15;
      v12 = &dword_140D2C8E8;
      v16 = v10;
      v30 = &v16;
      v32 = &v17;
      v34 = &v23;
      v36 = v39;
      v38 = &v54;
      v18 = a5;
      v39[1] = (__int64)&v18;
      v39[3] = (__int64)&v24;
      v13 = &v27;
      v31 = 4i64;
      v17 = v9;
      v33 = 4i64;
      v23 = a3;
      v35 = 8i64;
      v37 = 2i64;
      v39[0] = 4i64;
      v39[2] = 4i64;
      v24 = v7;
      v39[4] = 8i64;
LABEL_8:
      LOBYTE(v6) = tlgWriteTransfer_EtwWriteTransfer((__int64)v12, v11, 0i64, 0i64, 0xAu, (PEVENT_DATA_DESCRIPTOR)v13);
    }
  }
  return(char)v6;
}

Referenced by: