EtwpCancelMemoryPreservation

VOID __fastcall EtwpCancelMemoryPreservation(_WMI_LOGGER_CONTEXT *LoggerContext){
  __int64 v1; 
  CHAR *v3; 
  v1 = *((_QWORD *)LoggerContext + 134);
  if( *(_BYTE *)(v1 + 33) )
  {
    KsrFreePersistedMemoryBlock(EtwpKsrGuid, *(_QWORD *)v1, 0i64);
    v3 = *(CHAR **)(v1 + 8);
    *(_QWORD *)v1 = 0i64;
    if( v3 )
    {
      EtwpFreeTraceBuffer((INT64)LoggerContext, v3);
      *(_QWORD *)(v1 + 8) = 0i64;
    }
    *(_BYTE *)(v1 + 33) = 0;
  }
}

Referenced by: