PnpDisableUserModeNotifications

void __fastcall PnpDisableUserModeNotifications(__int64 a1, __int64 a2){
  __int64 *v4; 
  __int64 v5; 
  __int64 *v6; 
  __int64 i; 
  ExAcquireFastMutex(&PiUEventClientRegistrationListLock);
  v4 = PiUEventDevHandleClientList;
  v5 = 14i64;
  v6 = PiUEventDevHandleClientList;
  do
  {
    for( i = *v4; (__int64 *)i != v6; i = *(_QWORD *)i )
    {
      ExAcquireFastMutex(*(FAST_MUTEX **)(i + 16));
      if( *(_QWORD *)(i + 48) == *(_QWORD *)(a2 + 1088) && *(_QWORD *)(i + 32) == a1 )
        *(_BYTE *)(i + 40) = 1;
      KeReleaseGuardedMutex(*(_FAST_MUTEX **)(i + 16));
    }
    v6 += 2;
    v4 += 2;
    --v5;
  }
  while( v5 );
  KeReleaseGuardedMutex(&PiUEventClientRegistrationListLock);
}

Referenced by:

IoRevokeHandlesForProcess