EtwpTraceRegistry
void __fastcall EtwpTraceRegistry(unsigned __int8 a1, __int64 a2, int a3, int a4, __int64 a5, __int64 a6){
unsigned int v10;
bool i;
__int64 v12;
_DWORD *v13;
v10 = *(_DWORD *)(EtwpHostSiloState + 4224);
for( i = !_BitScanForward((unsigned int *)&v12, v10); !i; i = !_BitScanForward((unsigned int *)&v12, v10) )
{
v10 &= v10 - 1;
v13 = (_DWORD *)(32i64 * (unsigned int)v12 + EtwpHostSiloState + 4260);
if( v13 )
{
if( (*v13 & 0x20000) != 0 )
EtwpLogRegistryEvent(
*(unsigned __int8 *)(EtwpHostSiloState + 2 * v12 + 4208),
a1,
(unsigned int)a3,
(unsigned int)a4,
(PVOID)a5,
(LARGE_INTEGER *)(a2 + 8 * (*(unsigned __int8 *)(EtwpHostSiloState + 2 * v12 + 4209) - 1i64)),
(UNICODE_STRING *)a6);
}
}
}Referenced by:
No references.