TtmiLogCleanupCurrentSessionStart
VOID __stdcall TtmiLogCleanupCurrentSessionStart(
UINT32 BugCheckCode,
PVOID BugCheckParameter1,
PVOID BugCheckParameter2,
PVOID BugCheckParameter3,
PVOID BugCheckParameter4,
UINT64 a6){
int ProcessSessionId;
int v7;
struct _EVENT_DATA_DESCRIPTOR v8;
int *v9;
int v10;
int v11;
if( (unsigned int)dword_140D2C8E8 > 5 )
{
if( tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64) )
{
ProcessSessionId = PsGetProcessSessionIdEx(*((_QWORD *)KeGetCurrentThread() + 23));
v11 = 0;
v7 = ProcessSessionId;
v10 = 4;
v9 = &v7;
tlgWriteTransfer_EtwWriteTransfer(
(__int64)&dword_140D2C8E8,
(unsigned __int8 *)byte_14002A16F,
0i64,
0i64,
3u,
&v8);
}
}
}Referenced by:
No references.