MiSelectCfgBitMap

NTSTATUS __stdcall MiSelectCfgBitMap(_EPROCESS *CurrentProcess, VOID *Address, _SEGMENT *Segment){
  _EWOW64PROCESS *WoW64Process; 
  unsigned __int16 Machine; 

  WoW64Process = CurrentProcess->WoW64Process;
  if( WoW64Process
    && ((Machine = WoW64Process->Machine, Machine == 332) || Machine == 452)
    && (unsigned __int64)Address < 0x100000000i64
    && (!Segment || (Segment->SegmentFlags.UChar1 & 0x40) != 0) )
  {
    return(NTSTATUS)&CurrentProcess->Vm.Instance.VmWorkingSetList[11].LockedEntries;
  }
  else
  {
    return(NTSTATUS)&CurrentProcess->Vm.Instance.VmWorkingSetList[11];
  }
}

Referenced by: