MiOutlawInswaps

VOID *__stdcall MiOutlawInswaps(_EPROCESS *Process){
  _MMSUPPORT_FULL *p_Vm; 
  __int64 v2; 
  unsigned __int64 v3; 
  VOID *WorkingSetSwapSupport; 
  _MMSUPPORT_INSTANCE *v5; 

  p_Vm = &Process->Vm;
  v2 = *(_QWORD *)(*(&stru_140C4DB30 + 267) + 8i64 * Process->Vm.Instance.PartitionId);
  v3 = (unsigned __int8)ExAcquireSpinLockExclusive((INT64 *)(v2 + 1136));
  WorkingSetSwapSupport = MiGetWorkingSetSwapSupport(&p_Vm->Instance);
  MiGetSharedVm(v5)->WsSwapSupport = (void *)2;
  ExReleaseSpinLockExclusiveFromDpcLevel((INT64 *)(v2 + 1136));
  __writecr8(v3);
  return WorkingSetSwapSupport;
}

Referenced by:

MiBeginProcessClean