EtwpUnreferenceDataBlock
VOID __fastcall EtwpUnreferenceDataBlock(volatile INT32 *a1){
if( _InterlockedExchangeAdd(a1 + 2, 0xFFFFFFFF) == 1 )
ExFreePoolWithTag((PVOID)a1, 0);
}Referenced by:
EtwpClearSessionAndUnreferenceEntry
EtwpDeleteRegistrationObject
EtwpDisallowedGuidAddition
EtwpDisallowedGuidRemoval
EtwpEnableGuid
EtwpNotifyGuid
EtwpQueueReply
EtwpReceiveNotification
EtwpReceiveReplyDataBlock
EtwpRundownNotifications
SendCaptureStateNotificationsWorker