VrpPreFlushKey

NTSTATUS __stdcall VrpPreFlushKey(_VRP_JOB_CONTEXT *JobContext){
  __int64 v1; 
  __int64 v2; 
  _LPGUID ActivityId[4]; 
  _EVENT_DATA_DESCRIPTOR v5; 
  _EVENT_DATA_DESCRIPTOR v6; 

  v2 = v1;
  *(_OWORD *)ActivityId = 0i64;
  EtwActivityIdControl(3ui64, (_GUID *)ActivityId);
  if( (*(_DWORD *)(v2 + 80) & 1) != 0 )
  {
    if( *(&stru_140C00F40 + 1162) > 5u )
      tlgWriteTransfer_EtwWriteTransfer(
        (__int64)&stru_140C00F40 + 4648,
        (unsigned __int8 *)byte_1400234F8,
        (const _GUID *)ActivityId,
        0i64,
        2u,
        &v5);
    return -1073740541;
  }
  else
  {
    if( *(&stru_140C00F40 + 1162) > 5u )
      tlgWriteTransfer_EtwWriteTransfer(
        (__int64)&stru_140C00F40 + 4648,
        (unsigned __int8 *)&byte_1400234D7,
        (const _GUID *)ActivityId,
        0i64,
        2u,
        &v6);
    return 0;
  }
}

Referenced by:

VrpRegistryCallback