MiInSwapStore
__int64 __fastcall MiInSwapStore(PVOID Object){
__int64 v2;
__int64 v3;
LODWORD(v2) = MiAllocatePool((struct _SLIST_ENTRY *)0x40);
v3 = v2;
if( !v2 )
return 3221225626i64;
KeInitializeEvent((_KEVENT *)(v2 + 40), NotificationEvent, 0);
*(_QWORD *)v3 = 0i64;
*(_QWORD *)(v3 + 16) = MiInSwapStoreWorker;
*(_QWORD *)(v3 + 24) = v3;
ObfReferenceObjectWithTag(Object, 0x73576D4Du);
*(_QWORD *)(v3 + 32) = Object;
*(_DWORD *)(v3 + 64) = 2;
KeQueryPriorityThread(KeGetCurrentThread());
MiGetProcessPartition((_EPROCESS *)Object);
ExQueueWorkItemToPartition((PVOID)v3);
KeWaitForSingleObject((PVOID)(v3 + 40), WrKernel, 0, 0, (PLARGE_INTEGER)&Mi30Milliseconds);
MiInSwapStoreContextDereference((volatile INT32 *)v3);
return 0i64;
}Referenced by:
MmInSwapWorkingSet