MiCaptureSecureImageBaseAddress
NTSTATUS __stdcall MiCaptureSecureImageBaseAddress(_CONTROL_AREA *ControlArea){
_MI_IMAGE_SECURITY_REFERENCE *SeImageStub;
_ETHREAD *CurrentThread;
_MI_DYNAMIC_RELOCATIONS *DynamicRelocations;
unsigned __int64 v5;
NTSTATUS v6;
SeImageStub = ControlArea->u2.SeImageStub;
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
DynamicRelocations = (_MI_DYNAMIC_RELOCATIONS *)SeImageStub->DynamicRelocations;
v5 = SeImageStub->SecurityContext.Value & 0xFFFFFFFFFFFFFFF8ui64;
MI_LOCK_RELOCATIONS_EXCLUSIVE(CurrentThread, DynamicRelocations);
if( qword_140C1D940 )
v6 = qword_140C1D940(v5, ControlArea->Segment->ExtendInfo);
else
v6 = -1073741637;
MI_UNLOCK_RELOCATIONS_EXCLUSIVE(CurrentThread, DynamicRelocations);
return v6;
}Referenced by:
MiValidateSectionCreate