EtwpTraceRegistry

VOID __stdcall EtwpTraceRegistry(
        UINT8 Type,
        _ETW_KERNEL_TRACE_TIMESTAMP *StartTime,
        INT64 Status,
        UINT64 KeyIndex,
        VOID *Kcb,
        _UNICODE_STRING *KeyName){
  unsigned int v6; 
  unsigned int v7; 
  unsigned int v10; 
  bool i; 
  __int64 v12; 
  _DWORD *v13; 

  v6 = KeyIndex;
  v7 = Status;
  v10 = *(_DWORD *)(EtwpHostSiloState + 4224);
  for( i = !_BitScanForward((unsigned int *)&v12, v10); !i; i = !_BitScanForward((unsigned int *)&v12, v10) )
  {
    v10 &= v10 - 1;
    v13 = (_DWORD *)(32i64 * (unsigned int)v12 + EtwpHostSiloState + 4260);
    if( v13 )
    {
      if( (*v13 & 0x20000) != 0 )
        EtwpLogRegistryEvent(
          *(unsigned __int8 *)(EtwpHostSiloState + 2 * v12 + 4208),
          Type,
          v7,
          v6,
          Kcb,
          &StartTime->KernelTraceTimeStamp[*(unsigned __int8 *)(EtwpHostSiloState + 2 * v12 + 4209) - 1],
          KeyName);
    }
  }
}

Referenced by: