RtlpHpEnvGetHeapManager

union _RTL_RUN_ONCE *__fastcall RtlpHpEnvGetHeapManager(_DWORD *a1){
  if( (*a1 & 6) == 4 )
    return *(union _RTL_RUN_ONCE **)(*(_QWORD *)(*((_QWORD *)KeGetCurrentThread() + 23) + 1368i64) + 672i64);
  else
    return &ExPoolState;
}

Referenced by:

ExFreeHeapPool
RtlpHpAllocVA
RtlpHpExtrasSetPresent
RtlpHpFreeHeap
RtlpHpFreeVA
RtlpHpGetOwnerHeap
RtlpHpHeapCreate
RtlpHpMetadataCommit
RtlpHpMetadataHeapCtxGet
RtlpHpQueryVA
RtlpHpRegisterEnvironment
RtlpHpSegMgrCommit
RtlpHpSegMgrVaCtxAlloc
RtlpHpSegSegmentAllocate
RtlpHpSegSegmentFree
RtlpHpSizeHeapInternal