MiGetAweInfoPartition
NTSTATUS __stdcall MiGetAweInfoPartition(INT64 a1){
__int64 v1;
v1 = *(_QWORD *)(a1 + 32);
if( v1 )
return *(_QWORD *)(*(&stru_140C4DB30 + 267) + 8i64 * (*(_WORD *)(v1 + 60) & 0x3FF));
else
return *(_QWORD *)(*(&stru_140C4DB30 + 267) + 8i64 * KeGetCurrentThread()->ApcState.Process->Vm.Instance.PartitionId);
}Referenced by:
MiAllocateAweInfo
MiAllocateUserPhysicalPages
MiCreateAweInfoBitMap
MiCreateUserPhysicalView
MiDeleteAweInfoPages
MiFreePhysicalPageChain
MiGetAweVadPartition
MiReleaseVadEventBlocks
NtFreeUserPhysicalPages