MiGetSharedVm

_MMSUPPORT_SHARED *__stdcall MiGetSharedVm(_MMSUPPORT_INSTANCE *Vm){
  if( (Vm->Flags._bf_0 & 7) == 2 )
    return(_MMSUPPORT_SHARED *)((char *)&stru_140C4DB30 + 6544);
  else
    return(_MMSUPPORT_SHARED *)&Vm[1];
}

Referenced by:

MiBeginHoldingDirtyFaults
MiBeginProcessClean
MiBuildForkPte
MiCheckHoldFaultForHotPatch
MiCleanWorkingSet
MiClearCommitReleaseState
MiCloneCaptureVadCommit
MiCloneVads
MiCommitExistingVad
MiCountSystemImageCommitment
MiCreateCloneChain
MiCreateForkWsles
MiCreateInitialSystemWsles
MiDeleteBootRange
MiDeleteCloneZombies
MiDeletePagablePteRange
MiDeletePartialVad
MiDeleteRotateAndStopFaults
MiDeleteSessionAddressSpace
MiDoneWithThisPageGetAnother
MiDuplicateCloneLeaf
MiEmptyAccessLogs
MiFinishHoldingDirtyFaults
MiFreePhysicalView
MiFreeUnusedPfnPagesDpc
MiGetWorkingSetSwapSupport
MiHandleForkTransitionPte
MiInsertInSystemSpace
MiInsertLargeVadMapping
MiIssueHardFault
MiLocateOldestSecure
MiLockDownWorkingSet
MiLockWorkingSetCoreExclusive
MiLockWorkingSetExclusive
MiLockWorkingSetForLargeMapping
MiMakeHyperRangeAccessible
MiMakeSecureExclusive
MiMakeSystemAddressValid
MiMakeZeroedPageTablesEx
MiMapWithLargePages
MiOutSwapWorkingSet
MiOutlawInswaps
MiPreUnlockWorkingSetShared
MiProcessCommitIntact
MiReAcquireOutSwappedProcessCommit
MiReleaseCommitForResetPages
MiReleaseOutSwappedProcessCommit
MiRelockFaultState
MiRemoveFromSystemSpace
MiRemovePlaceholderVad
MiRemoveSecureEntry
MiRemoveVadCharges
MiRemoveVadEvent
MiRotateComplete
MiSessionInsertImage
MiSessionRemoveImage
MiSetTrimWhileAgingState
MiSynchronizeSystemVa
MiUpdateChargedWsles
MiUpdateWorkingSetPrivateSize
MiWaitForInPageComplete
MiWaitForRotateToComplete
MiWalkPageTablesRecursively
MmAdjustWorkingSetSizeEx
MmDeleteProcessAddressSpace
MmEnableProcessSvm
MmEnforceWorkingSetLimit
MmInSwapWorkingSet
MmInitializeHandBuiltProcess
MmOutSwapWorkingSet
MmQueryCommitReleaseState
MmQuerySystemWorkingSetInformation
MmReleaseCommitForMemResetPages
MmRemoveSystemCacheFromDump
MmSetCommitReleaseEligibility
MmStealTopLevelPage