VOID __fastcall MmSynchronizeAddressPolicy(UINT64 a1){ if( (PEPROCESS)a1 != PsInitialSystemProcess ) MiDeleteProcessShadow(); }