VmCheckLargePageInswap

NTSTATUS __stdcall VmCheckLargePageInswap(INT64 Process){
  __int64 v1; 
  int v2; 
  NTSTATUS result; 

  v1 = *(_QWORD *)(Process + 2288);
  if( !v1 )
    return 0;
  v2 = *(_DWORD *)(v1 + 88);
  result = 1;
  if( (v2 & 1) == 0 )
    return 0;
  return result;
}

Referenced by:

MmInSwapWorkingSet
MmOutSwapWorkingSet