VOID __stdcall EtwpCloseRealTimeConnectionObject( _EPROCESS *Process, VOID *Object, UINT64 ProcessHandleCount, UINT64 SystemHandleCount){ EtwpRealtimeDisconnectConsumer((_ETW_REALTIME_CONSUMER *)Object); }