MmInSwapVirtualAddresses
NTSTATUS __stdcall MmInSwapVirtualAddresses(_EPROCESS *Process, VOID *OpaqueSwapSupport){
_EPROCESS *v4;
_MI_PARTITION *ProcessPartition;
__int128 EventParameters[2];
__int64 v8;
memset(EventParameters, 0, sizeof(EventParameters));
v8 = 0i64;
LODWORD(EventParameters[0]) = 2;
EtwTraceWorkingSetSwap(Process, 3ui64, EventParameters);
ProcessPartition = MiGetProcessPartition(Process, v4);
MiProcessWsInSwapSupport((__int64)OpaqueSwapSupport, 2);
ExFreePoolWithTag(OpaqueSwapSupport, 0);
MiContractWsSwapPageFile(ProcessPartition);
LODWORD(v8) = 0;
EtwTraceWorkingSetSwap(Process, 1ui64, EventParameters);
return 0;
}Referenced by:
SmPerformStoreSwapOperation