HalFreeCommonBufferThin

VOID __stdcall HalFreeCommonBufferThin(
        INT64 a1,
        _XSTATE_CONFIGURATION *a2,
        _KAPC_STATE *a3,
        PFNKSESETCOMPLETIONHOOK *a4){
  PFNKSESETCOMPLETIONHOOK *v4; 
  unsigned __int64 v6; 
  INT64 v7; 
  UINT64 v8; 
  _QWORD *v9; 
  unsigned __int64 v10; 
  __int64 v11; 
  UINT64 v12; 
  INT64 v13; 
  UINT64 *v14; 
  __int64 v15; 
  UINT64 v16; 
  _MDL *v17; 
  UINT64 v18; 

  v4 = a4;
  LOBYTE(v6) = KeGetCurrentIrql();
  v7 = *(_QWORD *)(a1 + 504);
  v8 = 0i64;
  v9 = 0i64;
  v10 = (unsigned __int8)KeAcquireSpinLockRaiseToDpc(&stru_140C49BB0.Lock);
  if( !v7 )
    goto LABEL_19;
  v6 = (unsigned __int8)KeAcquireSpinLockRaiseToDpc((UINT64 *)(v7 + 96));
  v8 = *(_QWORD *)(v7 + 80);
  if( (*(_BYTE *)(v7 + 88) & 1) != 0 && v8 )
    v8 ^= v7 + 80;
  while( v8 )
  {
    v11 = *(_QWORD *)(v8 + 24);
    if( *(PFNKSESETCOMPLETIONHOOK **)(v11 + 24) == v4 )
      break;
    if( *(_QWORD *)(v11 + 24) <= (unsigned __int64)v4 )
      v12 = *(_QWORD *)(v8 + 8);
    else
      v12 = *(_QWORD *)v8;
    if( (*(_BYTE *)(v7 + 88) & 1) != 0 && v12 )
      v8 ^= v12;
    else
      v8 = v12;
  }
  if( v8 )
  {
    v9 = (_QWORD *)v8;
  }
  else
  {
    KxReleaseSpinLock((UINT64 *)(v7 + 96));
    __writecr8(v6);
    v7 = 0i64;
  }
  if( !v7 )
  {
LABEL_19:
    v13 = qword_140C49BD0;
    if( (_QWORD *)qword_140C49BD0 != &qword_140C49BD0 )
    {
      while( 1 )
      {
        v14 = (UINT64 *)(v13 + 96);
        v7 = v13;
        v6 = (unsigned __int8)KeAcquireSpinLockRaiseToDpc((UINT64 *)(v13 + 96));
        v8 = *(_QWORD *)(v13 + 80);
        if( (*(_BYTE *)(v13 + 88) & 1) != 0 && v8 )
          v8 ^= v13 + 80;
        if( v8 )
        {
          do
          {
            v15 = *(_QWORD *)(v8 + 24);
            if( *(PFNKSESETCOMPLETIONHOOK **)(v15 + 24) == a4 )
              break;
            v16 = *(_QWORD *)(v15 + 24) <= (unsigned __int64)a4 ? *(_QWORD *)(v8 + 8) : *(_QWORD *)v8;
            if( (*(_BYTE *)(v13 + 88) & 1) != 0 && v16 )
              v8 ^= v16;
            else
              v8 = v16;
          }
          while( v8 );
          v14 = (UINT64 *)(v13 + 96);
          if( v8 )
            break;
        }
        KxReleaseSpinLock(v14);
        __writecr8(v6);
        v13 = *(_QWORD *)v13;
        if( (_QWORD *)v13 == &qword_140C49BD0 )
          goto LABEL_38;
      }
      v9 = (_QWORD *)v8;
    }
    if( !v7 )
    {
LABEL_38:
      KxReleaseSpinLock(&stru_140C49BB0.Lock);
      __writecr8(v10);
      return;
    }
    v4 = a4;
  }
  HalpIommuDomainUnmapLogicalRange(*(PVOID *)(v7 + 40), a3);
  HalpDomainLaDelete(v7, (UINT64)a3);
  RtlRbRemoveNode((UINT64 *)(v7 + 80), v8);
  KxReleaseSpinLock((UINT64 *)(v7 + 96));
  __writecr8((unsigned __int8)v6);
  KxReleaseSpinLock(&stru_140C49BB0.Lock);
  __writecr8(v10);
  HalpDmaDereferenceDomainObject((PVOID)v7);
  v17 = (_MDL *)v9[3];
  ExFreePoolWithTag(v9, 0);
  MmUnmapLockedPages(v4, v17);
  MiFreePagesFromMdl(v17, 0i64, v18);
}

Referenced by: