MI_WSLE_LOG_ACCESS
VOID __stdcall MI_WSLE_LOG_ACCESS(_MMSUPPORT_INSTANCE *Vm, _MMWSLE *Wsle, _MMPTE *PointerPte){
unsigned __int64 PteBase;
unsigned __int64 v6;
PteBase = (unsigned __int64)MmGetPteBase();
v6 = (__int64)(((_QWORD)Wsle << 25) - (PteBase << 25)) >> 16;
if( (v6 >= PteBase && v6 <= (unsigned __int64)MmGetPteLimit() || MiGetVaAge(PteBase, v6) != 7)
&& (*(_BYTE *)Wsle & 0x20) != 0 )
{
MiLogPageAccess(Vm, (_MMPTE *)Wsle);
}
}Referenced by:
MiConvertPrivateToProto
MiDeleteSystemPagableVm
MiDeprioritizeVirtualAddresses
MiEmptyWorkingSetHelper
MiRemoveMappedPtes
MiTrimPte
MiTrimPteWorker
MiTrimSharedPageFromViews
MmProtectPool