MmInSwapVirtualAddresses
__int64 __fastcall MmInSwapVirtualAddresses(_EPROCESS *Process, PVOID P){
_MI_PARTITION *v4;
_MI_PARTITION *v5;
__int128 v7[2];
__int64 v8;
memset(v7, 0, sizeof(v7));
v8 = 0i64;
LODWORD(v7[0]) = 2;
EtwTraceWorkingSetSwap(Process, 3, (__int64)v7);
MiGetProcessPartition(Process);
v5 = v4;
MiProcessWsInSwapSupport((INT64)P, 2);
ExFreePoolWithTag(P, 0);
MiContractWsSwapPageFile(v5);
LODWORD(v8) = 0;
EtwTraceWorkingSetSwap(Process, 1, (__int64)v7);
return 0i64;
}Referenced by:
SmPerformStoreSwapOperation