EtwpTraceRegistryTransaction

void __fastcall EtwpTraceRegistryTransaction(unsigned __int8 a1, __int64 a2, __int128 *a3, int a4, int a5, __int64 a6){
  unsigned int v10; 
  bool i; 
  __int64 v12; 
  _DWORD *v13; 
  UINT64 UowCount; 
  v10 = *(_DWORD *)(EtwpHostSiloState + 4224);
  for( i = !_BitScanForward((unsigned int *)&v12, v10); !i; i = !_BitScanForward((unsigned int *)&v12, v10) )
  {
    v10 &= v10 - 1;
    v13 = (_DWORD *)(32i64 * (unsigned int)v12 + EtwpHostSiloState + 4260);
    if( v13 )
    {
      if( (*v13 & 0x20000) != 0 )
      {
        LODWORD(UowCount) = a5;
        EtwpLogTxREvent(
          *(unsigned __int8 *)(EtwpHostSiloState + 2 * v12 + 4208),
          a1,
          (GUID *)a3,
          (unsigned int)a4,
          UowCount,
          (LARGE_INTEGER *)(a2 + 8 * (*(unsigned __int8 *)(EtwpHostSiloState + 2 * v12 + 4209) - 1i64)),
          (UNICODE_STRING *)a6);
      }
    }
  }
}

Referenced by: