MiGetWsleContents
NTSTATUS __stdcall MiGetWsleContents(INT64 a1, UINT64 a2){
unsigned __int64 v2;
unsigned __int64 v3;
v2 = *(unsigned __int64 *)((char *)&MmGetPteBase()->u.Long + ((a2 >> 9) & 0x7FFFFFFFF8i64));
v3 = v2 >> 60;
LOBYTE(v3) = HIBYTE(v2) & 0xF | (16 * ((v2 >> 60) & 7));
return v3;
}Referenced by:
MiBuildForkPte
MiConvertAndFlushWsleVas
MiConvertPrivateToProto
MiCountSystemImageCommitment
MiCrcStillIntact
MiDeleteVa
MiDemoteCombinedPte
MiDeprioritizeVirtualAddresses
MiGetPfnProtection
MiGetWorkingSetInfoList
MiLockCode
MiMakeDriverPageStayResident
MiMakeVaRangeNoAccess
MiMoveDirtyBitsToPfns
MiProcessVmAccessedInfo
MiSetPagingOfDriver
MiSetProtectionOnSection
MiSetWsleProtection
MiSharePages
MiTerminateWsle
MiTrimSharedPageFromViews
MiUnmapRetpolineStubs
MmFreeLoaderBlock
MmProtectPool
MmUnmapViewInSystemCache
NtLockVirtualMemory
NtUnlockVirtualMemory