WmipUnregisterEtwProvider

VOID __stdcall WmipUnregisterEtwProvider(tagInstanceSet *InstanceSet){
  INT64 v1; 
  VOID **PoolWithTag; 

  v1 = *((_QWORD *)InstanceSet + 7);
  if( (*(_DWORD *)(v1 + 152))-- == 1 )
  {
    *(_QWORD *)(v1 + 112) = 0i64;
    *(_QWORD *)(v1 + 120) = 0i64;
    PoolWithTag = ExAllocatePoolWithTag(1ui64, 0x18ui64, 1885957463i64);
    if( PoolWithTag )
    {
      *((_DWORD *)PoolWithTag + 4) = 1;
      WmipQueueLegacyEtwWork(PoolWithTag, v1, 0i64);
    }
  }
}

Referenced by:

WmipUnlinkInstanceSetFromGuidEntry