VOID *__fastcall EtwpFreeEventNameFilter(PVOID P){ void *v2; v2 = (void *)*((_QWORD *)P + 4); if( v2 ) ExFreePoolWithTag(v2, 0); return ExFreePoolWithTag(P, 0); }