MiGetWsleContents

NTSTATUS __stdcall MiGetWsleContents(INT64 a1, UINT64 a2){
  unsigned __int64 v2; 
  unsigned __int64 v3; 

  v2 = *(unsigned __int64 *)((char *)&MmGetPteBase()->u.Long + ((a2 >> 9) & 0x7FFFFFFFF8i64));
  v3 = v2 >> 60;
  LOBYTE(v3) = HIBYTE(v2) & 0xF | (16 * ((v2 >> 60) & 7));
  return v3;
}

Referenced by:

MiBuildForkPte
MiConvertAndFlushWsleVas
MiConvertPrivateToProto
MiCountSystemImageCommitment
MiCrcStillIntact
MiDeleteVa
MiDemoteCombinedPte
MiDeprioritizeVirtualAddresses
MiGetPfnProtection
MiGetWorkingSetInfoList
MiLockCode
MiMakeDriverPageStayResident
MiMakeVaRangeNoAccess
MiMoveDirtyBitsToPfns
MiProcessVmAccessedInfo
MiSetPagingOfDriver
MiSetProtectionOnSection
MiSetWsleProtection
MiSharePages
MiTerminateWsle
MiTrimSharedPageFromViews
MiUnmapRetpolineStubs
MmFreeLoaderBlock
MmProtectPool
MmUnmapViewInSystemCache
NtLockVirtualMemory
NtUnlockVirtualMemory