MiLocateOldestSecure

_QWORD *__fastcall MiLocateOldestSecure(INT64 a1){
  _QWORD *v2; 
  __int64 v3; 
  INT64 *SharedVm; 
  KIRQL v5; 
  _QWORD *i; 
  v2 = 0i64;
  v3 = *((_QWORD *)KeGetCurrentThread() + 23);
  SharedVm = MiGetSharedVm(v3 + 1664);
  v5 = ExAcquireSpinLockExclusive((PEX_SPIN_LOCK)SharedVm);
  *((_DWORD *)SharedVm + 1) = 0;
  for( i = *(_QWORD **)(a1 + 56); i; i = (_QWORD *)*i )
    v2 = i;
  MiUnlockWorkingSetExclusive(v3 + 1664, v5);
  return v2;
}

Referenced by:

MiUnmapLockedPagesInUserSpace