ExpHpIsSpecialPoolHeap
NTSTATUS __stdcall ExpHpIsSpecialPoolHeap(UINT64 a1){
NTSTATUS v1;
NTSTATUS v2;
__int64 v3;
NTSTATUS v4;
__int64 *v5;
v1 = MiDeterminePoolType(a1);
v4 = v2;
if( v1 != 32 )
v4 = v1;
if( v4 == 33 )
{
LOBYTE(v2) = v3 == *(_QWORD *)(*((_QWORD *)KeGetCurrentThread()->ApcState.Process->Session + 84) + 14568i64);
}
else
{
v5 = qword_140CDAE00;
while( v3 != *v5 )
{
if( (__int64)++v5 >= (__int64)&unk_140CDAE20 )
return v2;
}
return 1;
}
return v2;
}Referenced by:
ExAllocatePoolWithQuotaTag
ExFreeHeapPool
ExIsSpecialPoolAddress
ExQueryPoolBlockSize
ExReturnPoolQuota
IopVerifierExAllocatePoolWithQuota_1