VrpPreFlushKey
NTSTATUS __stdcall VrpPreFlushKey(_VRP_JOB_CONTEXT *JobContext){
__int64 v1;
__int64 v2;
_LPGUID ActivityId[4];
_EVENT_DATA_DESCRIPTOR v5;
_EVENT_DATA_DESCRIPTOR v6;
v2 = v1;
*(_OWORD *)ActivityId = 0i64;
EtwActivityIdControl(3ui64, (_GUID *)ActivityId);
if( (*(_DWORD *)(v2 + 80) & 1) != 0 )
{
if( *(&stru_140C00F40 + 1162) > 5u )
tlgWriteTransfer_EtwWriteTransfer(
(__int64)&stru_140C00F40 + 4648,
(unsigned __int8 *)byte_1400234F8,
(const _GUID *)ActivityId,
0i64,
2u,
&v5);
return -1073740541;
}
else
{
if( *(&stru_140C00F40 + 1162) > 5u )
tlgWriteTransfer_EtwWriteTransfer(
(__int64)&stru_140C00F40 + 4648,
(unsigned __int8 *)&byte_1400234D7,
(const _GUID *)ActivityId,
0i64,
2u,
&v6);
return 0;
}
}Referenced by:
VrpRegistryCallback