MiRemoveVadEvent

void __fastcall MiRemoveVadEvent(__int64 a1, _QWORD *a2){
  _EPROCESS *Process; 
  _MMSUPPORT_SHARED *SharedVm; 
  UINT8 v6; 
  _QWORD **v7; 
  _QWORD *i; 

  Process = KeGetCurrentThread()->ApcState.Process;
  SharedVm = MiGetSharedVm(&Process->Vm.Instance);
  v6 = ExAcquireSpinLockExclusive((INT64 *)&SharedVm->WorkingSetLock);
  SharedVm->GoodCitizenWaiting = 0;
  v7 = (_QWORD **)(a1 + 56);
  for( i = *v7; i != a2; i = (_QWORD *)*i )
    v7 = (_QWORD **)i;
  *v7 = (_QWORD *)*a2;
  MiUnlockWorkingSetExclusive(&Process->Vm.Instance, v6);
}

Referenced by: