MiQueryEPTAccessedState

INT64 __fastcall MiQueryEPTAccessedState(INT64 a1, _DWORD *a2){
  MMPTE *v2; 
  INT64 result; 
  v2 = *(MMPTE **)(a1 + 48);
  MiReleaseWalkLocks(a1);
  VmpQueryAccessedState(*(PEX_SPIN_LOCK *)(*((_QWORD *)KeGetCurrentThread() + 23) + 2288i64));
  result = MiReacquireWalkLocks(a1, v2, 0i64);
  if( !(_DWORD)result )
    *a2 = 0;
  return result;
}

Referenced by:

MiAgeWorkingSetTail
MiResetAccessBitsTail
MiSimpleAgeWorkingSetTail
MiTrimWorkingSetTail
MiUpdateOldWorkingSetPagesTail