MiUnlockWorkingSetExclusive

VOID __fastcall MiUnlockWorkingSetExclusive(INT64 a1, UINT8 a2){
  int v3; 
  RTL_BALANCED_NODE *v4; 
  unsigned __int64 v5; 
  LONG *v6; 
  INT64 v7; 
  RTL_BALANCED_NODE *v8; 
  int v9; 
  v3 = 0;
  v4 = 0i64;
  v9 = *(_DWORD *)(a1 + 184);
  v5 = a2;
  if( (v9 & 7) == 2 )
    v6 = &dword_140C4F4C0;
  else
    v6 = (LONG *)(a1 + 192);
  if( (v9 & 7) == 0 )
  {
    if( *(_QWORD *)(a1 + 16) )
    {
      v7 = *((_QWORD *)KeGetCurrentThread() + 23);
      if( *(_WORD *)(*(_QWORD *)(v7 + 1680) + 368i64) )
        v4 = MiDeleteDeferredCloneDescriptors(v7);
    }
  }
  if( (*((_DWORD *)KeGetCurrentThread() + 324) & 0x400000) != 0 )
    v3 = 1;
  MiCheckProcessShadow();
  *v6 = 0;
  __writecr8(v5);
  if( v4 )
  {
    do
    {
      v8 = v4->Children[0];
      ExFreePoolWithTag(v4, 0);
      v4 = v8;
    }
    while( v8 );
  }
  if( !v3 && ((v9 & 0x8000000) != 0 || (v9 & 0x4000000) != 0 || (v9 & 0x10000000) != 0) )
  {
    MiLockWorkingSetShared(a1);
    MiUnlockWorkingSetShared(a1, v5);
  }
}

Referenced by: