MiQueryEPTAccessedState

NTSTATUS __fastcall MiQueryEPTAccessedState(INT64 a1, _DWORD *a2){
  _MMPTE *v2; 
  NTSTATUS result; 

  v2 = *(_MMPTE **)(a1 + 48);
  MiReleaseWalkLocks(a1);
  VmpQueryAccessedState((PEX_SPIN_LOCK)KeGetCurrentThread()->ApcState.Process->VmContext);
  result = MiReacquireWalkLocks(a1, v2, 0i64);
  if( !result )
    *a2 = 0;
  return result;
}

Referenced by:

MiAgeWorkingSetTail
MiResetAccessBitsTail
MiSimpleAgeWorkingSetTail
MiTrimWorkingSetTail
MiUpdateOldWorkingSetPagesTail