MiRemoveSystemCacheReferences

VOID __fastcall MiRemoveSystemCacheReferences(_SUBSECTION *Subsection, UINT64 LastPteOffset, INT64 a3, CHAR a4){
  __int64 v4; 
  volatile INT64 *v7; 
  KIRQL v8; 
  __int64 v9; 
  UINT64 v10; 
  v4 = *(_QWORD *)Subsection;
  v7 = *(volatile INT64 **)(qword_140C4E388 + 8i64 * (*(_WORD *)(*(_QWORD *)Subsection + 60i64) & 0x3FF));
  v8 = ExAcquireSpinLockExclusive((PEX_SPIN_LOCK)(*(_QWORD *)Subsection + 72i64));
  v9 = MiRemoveViewsFromSection((ULONG_PTR)Subsection, LastPteOffset, 4u);
  --*(_QWORD *)(v4 + 40);
  --*(_DWORD *)(v4 + 88);
  v10 = v9;
  MiCheckControlArea((_CONTROL_AREA *)v4, v8);
  if( v10 )
    MiReturnCrossPartitionSectionCharges(v7, 1i64, v10);
}

Referenced by:

MmMapViewInSystemCache