MiGetVaAge

CHAR __fastcall MiGetVaAge(INT64 a1, UINT64 a2){
  _MMPTE *PteBase; 
  unsigned __int64 *v4; 
  unsigned __int64 v5; 
  PteBase = MmGetPteBase();
  if( a2 < (unsigned __int64)PteBase || a2 > (unsigned __int64)MmGetPteLimit() )
    return HIBYTE(*(_QWORD *)((char *)PteBase + ((a2 >> 9) & 0x7FFFFFFFF8i64))) & 0xF;
  v4 = (unsigned __int64 *)((char *)PteBase + ((a2 >> 9) & 0x7FFFFFFFF8i64));
  v5 = *v4;
  MiPteInShadowRange((UINT64)v4);
  return(*((_BYTE *)MmGetPfnDb() + 48 * ((v5 >> 12) & 0xFFFFFFFFFi64)) >> 1) & 7;
}

Referenced by:

MI_WSLE_LOG_ACCESS
MiActOnPte
MiResetAccessBitPte
MiResetAccessBitPteWorker
MiSimpleAgePte
MiUpdateOldPte
MiUpdateWsleAge