MiRemoveSystemCacheReferences
VOID __fastcall MiRemoveSystemCacheReferences(_SUBSECTION *Subsection, UINT64 LastPteOffset, INT64 a3, CHAR a4){
__int64 v4;
volatile INT64 *v7;
KIRQL v8;
__int64 v9;
UINT64 v10;
v4 = *(_QWORD *)Subsection;
v7 = *(volatile INT64 **)(qword_140C4E388 + 8i64 * (*(_WORD *)(*(_QWORD *)Subsection + 60i64) & 0x3FF));
v8 = ExAcquireSpinLockExclusive((PEX_SPIN_LOCK)(*(_QWORD *)Subsection + 72i64));
v9 = MiRemoveViewsFromSection((ULONG_PTR)Subsection, LastPteOffset, 4u);
--*(_QWORD *)(v4 + 40);
--*(_DWORD *)(v4 + 88);
v10 = v9;
MiCheckControlArea((_CONTROL_AREA *)v4, v8);
if( v10 )
MiReturnCrossPartitionSectionCharges(v7, 1i64, v10);
}Referenced by:
MmMapViewInSystemCache