PspGetMemoryPartitionContext
__int64 __fastcall PspGetMemoryPartitionContext(__int64 a1, INT16 a2, INT64 r8_0, UINT64 a4, _XSTATE_FEATURE *a3){
NTSTATUS MemoryPartitionImplicit;
MemoryPartitionImplicit = 0;
*a3 = 0i64;
if( !a1
|| !*(_QWORD *)(a1 + 1296)
|| (MemoryPartitionImplicit = PspGetMemoryPartitionImplicit(*(_EJOB **)(a1 + 1296), a2, (_LIST_ENTRY **)a3),
MemoryPartitionImplicit >= 0) )
{
if( !*(_QWORD *)a3 && a4 )
return(unsigned int)PspGetMemoryPartitionFromJobList(r8_0, a4, a3);
}
return(unsigned int)MemoryPartitionImplicit;
}Referenced by:
NtCreateUserProcess
PsCreateMinimalProcess