MiGetVaAge
CHAR __fastcall MiGetVaAge(INT64 a1, UINT64 a2){
_MMPTE *PteBase;
unsigned __int64 *v4;
unsigned __int64 v5;
PteBase = MmGetPteBase();
if( a2 < (unsigned __int64)PteBase || a2 > (unsigned __int64)MmGetPteLimit() )
return HIBYTE(*(_QWORD *)((char *)PteBase + ((a2 >> 9) & 0x7FFFFFFFF8i64))) & 0xF;
v4 = (unsigned __int64 *)((char *)PteBase + ((a2 >> 9) & 0x7FFFFFFFF8i64));
v5 = *v4;
MiPteInShadowRange((UINT64)v4);
return(*((_BYTE *)MmGetPfnDb() + 48 * ((v5 >> 12) & 0xFFFFFFFFFi64)) >> 1) & 7;
}Referenced by:
MI_WSLE_LOG_ACCESS
MiActOnPte
MiResetAccessBitPte
MiResetAccessBitPteWorker
MiSimpleAgePte
MiUpdateOldPte
MiUpdateWsleAge