VOID __stdcall WdipSemCleanupGroupPolicy(){ if( *(&ExBootDevicesRemovedEvent + 557) ) { ExFreePoolWithTag(*(&ExBootDevicesRemovedEvent + 557), 0); *(&ExBootDevicesRemovedEvent + 557) = 0i64; } }