EtwpRealtimeDisconnectConsumerByHandle

NTSTATUS __stdcall EtwpRealtimeDisconnectConsumerByHandle(PVOID Handle){
  int v1; 
  PADAPTER_OBJECT DmaAdapter; 
  DmaAdapter = 0i64;
  v1 = ObReferenceObjectByHandle(
         Handle,
         0x400u,
         EtwpRealTimeConnectionObjectType,
         *((_BYTE *)KeGetCurrentThread() + 562),
         (PVOID *)&DmaAdapter,
         0i64);
  if( v1 >= 0 )
  {
    EtwpRealtimeDisconnectConsumer((_ETW_REALTIME_CONSUMER *)DmaAdapter);
    HalPutDmaAdapter(DmaAdapter);
  }
  return v1;
}

Referenced by:

NtTraceControl