_MI_PARTITION *__stdcall MiGetThreadPartition(VOID *InputPartitionObject, _EPROCESS *NewProcess){
return *(_MI_PARTITION **)(*(&stru_140C4DB30 + 267)
+ 8i64 * *(unsigned __int16 *)(*((_QWORD *)InputPartitionObject + 23) + 1838i64));
}