EtwpCancelMemoryPreservation
VOID __stdcall EtwpCancelMemoryPreservation(_WMI_LOGGER_CONTEXT *LoggerContext){
struct _ETW_SOFT_RESTART_CONTEXT *SoftRestartContext;
CHAR *v3;
SoftRestartContext = LoggerContext->SoftRestartContext;
if( *((_BYTE *)SoftRestartContext + 33) )
{
KsrFreePersistedMemoryBlock(EtwpKsrGuid, *(_QWORD *)SoftRestartContext, 0i64);
v3 = (CHAR *)*((_QWORD *)SoftRestartContext + 1);
*(_QWORD *)SoftRestartContext = 0i64;
if( v3 )
{
EtwpFreeTraceBuffer((INT64)LoggerContext, v3);
*((_QWORD *)SoftRestartContext + 1) = 0i64;
}
*((_BYTE *)SoftRestartContext + 33) = 0;
}
}Referenced by:
EtwpFreeLoggerContext
EtwpKsrCallback
EtwpSetSoftRestartInformation