TtmiLogDeviceInputNotified
CHAR __fastcall TtmiLogDeviceInputNotified(INT64 a1, INT64 a2, INT64 a3, CHAR a4, CHAR a5, CHAR a6){
void **v6;
int v8;
int v10;
int ProcessSessionId;
CHAR v13;
CHAR v14;
CHAR v15;
int v16;
int v17;
int v18;
INT64 v19;
struct _EVENT_DATA_DESCRIPTOR v20;
int *v21;
int v22;
int v23;
int *v24;
int v25;
int v26;
INT64 *v27;
int v28;
int v29;
int *v30;
int v31;
int v32;
CHAR *v33;
int v34;
int v35;
CHAR *v36;
int v37;
int v38;
CHAR *v39;
int v40;
int v41;
void *retaddr;
v6 = &retaddr;
v8 = a3;
v10 = a1;
if( (unsigned int)dword_140D2C8E8 > 5 )
{
LOBYTE(v6) = tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64);
if( (_BYTE)v6 )
{
ProcessSessionId = PsGetProcessSessionIdEx(*((_QWORD *)KeGetCurrentThread() + 23));
v23 = 0;
v26 = 0;
v29 = 0;
v32 = 0;
v35 = 0;
v38 = 0;
v41 = 0;
v16 = ProcessSessionId;
v21 = &v16;
v24 = &v17;
v27 = &v19;
v30 = &v18;
v33 = &v13;
v14 = a5;
v36 = &v14;
v15 = a6;
v39 = &v15;
v22 = 4;
v25 = 4;
v31 = 4;
v17 = v10;
v19 = a2;
v28 = 8;
v18 = v8;
v13 = a4;
v34 = 1;
v37 = 1;
v40 = 1;
LOBYTE(v6) = tlgWriteTransfer_EtwWriteTransfer(
(__int64)&dword_140D2C8E8,
(unsigned __int8 *)&dword_14002AD34 + 2,
0i64,
0i64,
9u,
&v20);
}
}
return(char)v6;
}Referenced by:
TtmNotifyDeviceInput