MI_WSLE_LOG_ACCESS
VOID __fastcall MI_WSLE_LOG_ACCESS(INT64 a1, UINT64 a2){
unsigned __int64 PteBase;
unsigned __int64 v5;
PteBase = (unsigned __int64)MmGetPteBase();
v5 = (__int64)((a2 << 25) - (PteBase << 25)) >> 16;
if( (v5 >= PteBase && v5 <= (unsigned __int64)MmGetPteLimit() || MiGetVaAge(PteBase, v5) != 7)
&& (*(_BYTE *)a2 & 0x20) != 0 )
{
MiLogPageAccess(a1, a2);
}
}Referenced by:
MiConvertPrivateToProto
MiDeleteSystemPagableVm
MiDeprioritizeVirtualAddresses
MiEmptyWorkingSetHelper
MiRemoveMappedPtes
MiTrimPte
MiTrimPteWorker
MiTrimSharedPageFromViews
MmProtectPool