MiGetWsleProtection

NTSTATUS __fastcall MiGetWsleProtection(UINT64 a1, UINT8 a2){
  NTSTATUS result; 
  __int64 v3; 

  result = (a2 >> 4) & 7;
  if( result )
  {
    v3 = *(__int64 *)((char *)&MmGetPteBase()->u.Hard._bf_0 + ((a1 >> 9) & 0x7FFFFFFFF8i64));
    if( (v3 & 0x18) == 8 )
    {
      return result | 0x18;
    }
    else if( (v3 & 0x10) != 0 )
    {
      return result | 8;
    }
  }
  return result;
}

Referenced by: