MiInSwapSharedWorkingSetWorker
VOID __stdcall MiInSwapSharedWorkingSetWorker(VOID *Context){
_EPROCESS *v1;
_EPROCESS *v3;
_MI_PARTITION *ProcessPartition;
__int128 EventParameters[2];
__int64 v6;
_KAPC_STATE ApcState;
v1 = (_EPROCESS *)*((_QWORD *)Context + 6);
v6 = 0i64;
memset(&ApcState, 0, sizeof(ApcState));
memset(EventParameters, 0, sizeof(EventParameters));
KiStackAttachProcess(v1, 0i64, &ApcState);
LODWORD(EventParameters[0]) = 1;
EtwTraceWorkingSetSwap(v1, 3ui64, EventParameters);
_InterlockedExchange((volatile __int32 *)&v1->HighPriorityFaultsAllowed, 1000);
MiProcessWsInSwapSupport(*((_QWORD *)Context + 1), 1);
_InterlockedExchange((volatile __int32 *)&v1->HighPriorityFaultsAllowed, 0);
LODWORD(v6) = -1;
EtwTraceWorkingSetSwap(v1, 1ui64, EventParameters);
KiUnstackDetachProcess(&ApcState, 0i64);
ProcessPartition = MiGetProcessPartition(v1, v3);
*((_QWORD *)Context + 6) = 0i64;
MiFreeWorkingSetSwapContext(ProcessPartition, Context);
ObfDereferenceObjectWithTag(v1, 0x73576D4Dui64);
}Referenced by:
No references.