TtmiLogTerminalCreated

VOID __stdcall TtmiLogTerminalCreated(PVOID Terminal, UINT64 TerminalId){
  int v2; 
  int ProcessSessionId; 
  int v5; 
  int v6; 
  PVOID v7; 
  struct _EVENT_DATA_DESCRIPTOR v8; 
  int *v9; 
  int v10; 
  int v11; 
  int *v12; 
  int v13; 
  int v14; 
  PVOID *v15; 
  int v16; 
  int v17; 
  v2 = TerminalId;
  if( (unsigned int)dword_140D2C8E8 > 5 )
  {
    if( tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64) )
    {
      ProcessSessionId = PsGetProcessSessionIdEx(*((_QWORD *)KeGetCurrentThread() + 23));
      v11 = 0;
      v14 = 0;
      v17 = 0;
      v5 = ProcessSessionId;
      v10 = 4;
      v9 = &v5;
      v12 = &v6;
      v15 = &v7;
      v13 = 4;
      v6 = v2;
      v7 = Terminal;
      v16 = 8;
      tlgWriteTransfer_EtwWriteTransfer(
        (__int64)&dword_140D2C8E8,
        (unsigned __int8 *)&word_14002AC2E,
        0i64,
        0i64,
        5u,
        &v8);
    }
  }
}

Referenced by: