TtmiLogDispatchApiStart

VOID __fastcall TtmiLogDispatchApiStart(INT64 a1){
  int v1; 
  int ProcessSessionId; 
  int v3; 
  int v4; 
  struct _EVENT_DATA_DESCRIPTOR v5; 
  int *v6; 
  int v7; 
  int v8; 
  int *v9; 
  int v10; 
  int v11; 
  v1 = a1;
  if( (unsigned int)dword_140D2C8E8 > 5 )
  {
    if( tlgKeywordOn((__int64)&dword_140D2C8E8, 1i64) )
    {
      ProcessSessionId = PsGetProcessSessionIdEx(*((_QWORD *)KeGetCurrentThread() + 23));
      v8 = 0;
      v11 = 0;
      v3 = ProcessSessionId;
      v7 = 4;
      v6 = &v3;
      v10 = 4;
      v9 = &v4;
      v4 = v1;
      tlgWriteTransfer_EtwWriteTransfer(
        (__int64)&dword_140D2C8E8,
        (unsigned __int8 *)&word_14002AE06,
        0i64,
        0i64,
        4u,
        &v5);
    }
  }
}

Referenced by: