RtlpPopUserShadowStack

CHAR *__fastcall RtlpPopUserShadowStack(INT64 a1){
  CHAR *result; 
  result = (CHAR *)(*(_DWORD *)(a1 + 48) & 0x100040);
  if( (_DWORD)result == 1048640 )
  {
    result = RtlLocateExtendedFeature2((_DWORD *)(a1 + 1232), 0xBui64, 0xFFFFF780000003D8ui64, 0i64);
    if( result )
    {
      if( (*result & 1) != 0 )
        *((_QWORD *)result + 1) += 8i64;
    }
  }
  return result;
}

Referenced by:

RtlDispatchException
RtlUnwindEx
RtlpUnwindEpilogue
RtlpxVirtualUnwind