ExpHpIsSpecialPoolHeap
INT64 __fastcall ExpHpIsSpecialPoolHeap(UINT64 a1){
unsigned int v1;
unsigned int v2;
__int64 v3;
unsigned int v4;
__int64 *v5;
v1 = MiDeterminePoolType(a1);
v4 = v2;
if( v1 != 32 )
v4 = v1;
if( v4 == 33 )
{
LOBYTE(v2) = v3 == *(_QWORD *)(*(_QWORD *)(*(_QWORD *)(*((_QWORD *)KeGetCurrentThread() + 23) + 1368i64) + 672i64)
+ 14568i64);
}
else
{
v5 = qword_140CDAE00;
while( v3 != *v5 )
{
if( (__int64)++v5 >= (__int64)qword_140CDAE20 )
return v2;
}
return 1;
}
return v2;
}Referenced by:
ExAllocatePoolWithQuotaTag
ExFreeHeapPool
ExIsSpecialPoolAddress
ExQueryPoolBlockSize
ExReturnPoolQuota
IopVerifierExAllocatePoolWithQuota_1