MiOutlawInswaps
VOID *__stdcall MiOutlawInswaps(_EPROCESS *Process){
_MMSUPPORT_FULL *p_Vm;
__int64 v2;
unsigned __int64 v3;
VOID *WorkingSetSwapSupport;
_MMSUPPORT_INSTANCE *v5;
p_Vm = &Process->Vm;
v2 = *(_QWORD *)(*(&stru_140C4DB30 + 267) + 8i64 * Process->Vm.Instance.PartitionId);
v3 = (unsigned __int8)ExAcquireSpinLockExclusive((INT64 *)(v2 + 1136));
WorkingSetSwapSupport = MiGetWorkingSetSwapSupport(&p_Vm->Instance);
MiGetSharedVm(v5)->WsSwapSupport = (void *)2;
ExReleaseSpinLockExclusiveFromDpcLevel((INT64 *)(v2 + 1136));
__writecr8(v3);
return WorkingSetSwapSupport;
}Referenced by:
MiBeginProcessClean