MiInitializeMirroring

INT64 __fastcall MiInitializeMirroring(){
  INT64 v0; 
  INT64 v1; 
  INT64 v2; 
  INT64 v3; 
  __int64 v4; 
  RTL_BITMAP *v5; 
  _ETHREAD *CurrentThread; 
  unsigned int v7; 
  INT64 v8; 
  INT64 *v10; 
  _ETHREAD *v11; 
  unsigned int SessionId; 
  char v13; 
  int v14; 
  bool v15; 
  __int64 v16; 
  unsigned __int64 v17; 
  __int64 v18; 
  UINT16 *v19; 
  INT64 v20; 
  RTL_BITMAP BitMap; 
  INT64 v22; 
  INT64 v23; 
  INT64 v24; 
  int v25; 
  stru_140C4E428.List.Flink = 0i64;
  stru_140C4E410.Header.WaitListHead.Blink = &stru_140C4E410.Header.WaitListHead;
  stru_140C4E410.Header.WaitListHead.Flink = &stru_140C4E410.Header.WaitListHead;
  stru_140C4E428.WorkerRoutine = (void(__fastcall *)(void *))MiFinishResume;
  LOWORD(stru_140C4E410.Header.Lock) = 1;
  stru_140C4E410.Header.Size = 6;
  stru_140C4E410.Header.SignalState = 1;
  stru_140C4E428.Parameter = (void *)-1i64;
  MiSizeMemoryListLocks(v1, v0, v2, v3, v19, v20, *(INT64 *)&BitMap.SizeOfBitMap, 0i64, v22, v23, v24);
  LODWORD(v4) = MiAllocatePool((struct _SLIST_ENTRY *)0x40);
  if( v4 )
  {
    qword_140C51E68 = v4;
    v5 = (RTL_BITMAP *)qword_140C4E450;
    CurrentThread = (_ETHREAD *)KeGetCurrentThread();
    v7 = 0;
    while( 1 )
    {
      v8 = MiReservePtes((INT64)&qword_140C4EC80, 0x200000ui64);
      if( !v8
        || !(unsigned int)MiInitializeDynamicBitmap(
                            &BitMap,
                            (PVOID)(((v8 << 25) - ((_QWORD)MmGetPteBase() << 25)) >> 16),
                            0x1000000000ui64,
                            0xCui64) )
      {
        break;
      }
      *(_QWORD *)&BitMap.SizeOfBitMap = 0i64;
      ++v7;
      *v5++ = BitMap;
      if( v7 >= 2 )
      {
        if( (dword_140CFA184 & 1) != 0 )
        {
          --*((_WORD *)CurrentThread + 243);
          ExAcquirePushLockExclusiveEx((UINT64)&qword_140C50B80, 0i64);
          MiUpdateMirrorBitmaps(v10);
          if( (_InterlockedExchangeAdd64((volatile signed __int64 *)&qword_140C50B80, 0xFFFFFFFFFFFFFFFFui64) & 6) == 2 )
            ExfTryToWakePushLock((volatile INT64 *)&qword_140C50B80);
          v25 = 0;
          v11 = (_ETHREAD *)KeGetCurrentThread();
          if( (unsigned int)MiGetSystemRegionType((UINT64)&qword_140C50B80) == 1 )
            SessionId = MmGetSessionIdEx(*((_QWORD *)v11 + 23));
          else
            SessionId = -1;
          --*((_WORD *)v11 + 243);
          v13 = ++*((_BYTE *)v11 + 794);
          v14 = (*((char *)v11 + 792) | *((char *)v11 + 870)) ^ 0x3F;
          while( 1 )
          {
            v15 = !_BitScanReverse((unsigned int *)&v16, v14);
            if( v15 )
              goto LABEL_16;
            v17 = *((_QWORD *)v11 + 100) + 96 * v16;
            v14 &= ~(1 << v16);
            if( (*(_BYTE *)(v17 + 26) & 1) != 0
              && (*(_DWORD *)(v17 + 32) & 1) == 0
              && (*(_QWORD *)(v17 + 32) & 0x7FFFFFFFFFFFFFFCi64) == ((unsigned __int64)&qword_140C50B80 & 0x7FFFFFFFFFFFFFFCi64)
              && *(_DWORD *)(v17 + 40) == SessionId )
            {
              *(_BYTE *)(v17 + 26) &= ~1u;
              if( *(_QWORD *)(v17 + 32) )
                break;
            }
          }
          if( !v17 )
          {
LABEL_16:
            if( (*((_DWORD *)v11 + 30) & 0x10000) == 0 )
              KeBugCheckEx(0x162u, (ULONG_PTR)v11, (ULONG_PTR)&qword_140C50B80, SessionId, 0i64);
            goto LABEL_28;
          }
          *(_BYTE *)(v17 + 32) |= 2u;
          if( *(__int64 *)(v17 + 32) < 0 )
            KiAbEntryRemoveFromTree(v17);
          v25 = *(_DWORD *)(v17 + 88) & 0x1FFFF;
          *(_DWORD *)(v17 + 88) &= 0xFFFE0000;
          *(_BYTE *)(v17 + 25) &= ~1u;
          *(_QWORD *)(v17 + 32) = 0i64;
          v18 = (__int64)(v17 - *((_QWORD *)v11 + 100)) / 96;
          if( v13 == 1 )
            *((_BYTE *)v11 + 792) |= 1 << v18;
          else
            _InterlockedOr8((volatile signed __int8 *)v11 + 870, 1 << v18);
LABEL_28:
          --*((_BYTE *)v11 + 794);
          KiAbThreadRemoveBoosts((ULONG_PTR)v11, (__int64)&qword_140C50B80, (unsigned int *)&v25);
          v15 = (*((_WORD *)v11 + 243))++ == 0xFFFF;
          if( v15 && *((_ETHREAD **)v11 + 19) != (_ETHREAD *)((char *)v11 + 152) )
            KiCheckForKernelApcDelivery();
          KiLeaveGuardedRegionUnsafe((__int64)CurrentThread);
        }
        return 1i64;
      }
    }
  }
  return 0i64;
}

Referenced by: