MiInSwapSharedWorkingSetWorker
VOID __stdcall MiInSwapSharedWorkingSetWorker(PVOID Context){
__int64 v1;
_MI_PARTITION *v3;
__int128 v4[2];
__int64 v5;
_KAPC_STATE ApcState;
v1 = *((_QWORD *)Context + 6);
v5 = 0i64;
memset(&ApcState, 0, sizeof(ApcState));
memset(v4, 0, sizeof(v4));
KiStackAttachProcess((_KPROCESS *)v1, 0i64, &ApcState);
LODWORD(v4[0]) = 1;
EtwTraceWorkingSetSwap((_EPROCESS *)v1, 3, (__int64)v4);
_InterlockedExchange((volatile __int32 *)(v1 + 2272), 1000);
MiProcessWsInSwapSupport(*((_QWORD *)Context + 1), 1);
_InterlockedExchange((volatile __int32 *)(v1 + 2272), 0);
LODWORD(v5) = -1;
EtwTraceWorkingSetSwap((_EPROCESS *)v1, 1, (__int64)v4);
KiUnstackDetachProcess(&ApcState, 0i64);
MiGetProcessPartition((_EPROCESS *)v1);
*((_QWORD *)Context + 6) = 0i64;
MiFreeWorkingSetSwapContext(v3, Context);
ObfDereferenceObjectWithTag((PVOID)v1, 0x73576D4Dui64);
}Referenced by:
No references.