PspGetMemoryPartitionContext
INT64 __fastcall PspGetMemoryPartitionContext(INT64 a1, INT16 a2, INT64 a3, UINT64 a4, PVOID *a5){
int MemoryPartitionImplicit;
MemoryPartitionImplicit = 0;
*a5 = 0i64;
if( !a1
|| !*(_QWORD *)(a1 + 1296)
|| (MemoryPartitionImplicit = PspGetMemoryPartitionImplicit(*(_EJOB **)(a1 + 1296), a2), MemoryPartitionImplicit >= 0) )
{
if( !*a5 && a4 )
return(unsigned int)PspGetMemoryPartitionFromJobList(a3, a4, a5);
}
return(unsigned int)MemoryPartitionImplicit;
}Referenced by:
NtCreateUserProcess
PsCreateMinimalProcess