MiCaptureSecureImageBaseAddress
__int64 __fastcall MiCaptureSecureImageBaseAddress(_QWORD *a1){
__int64 v1;
_ETHREAD *CurrentThread;
__int64 v4;
unsigned __int64 v5;
unsigned int v6;
v1 = a1[12];
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
v4 = *(_QWORD *)(v1 + 32);
v5 = *(_QWORD *)(v1 + 40) & 0xFFFFFFFFFFFFFFF8ui64;
MI_LOCK_RELOCATIONS_EXCLUSIVE((__int64)CurrentThread, v4);
if( qword_140C1D940 )
v6 = qword_140C1D940(v5, *(_QWORD *)(*a1 + 32i64));
else
v6 = -1073741637;
MI_UNLOCK_RELOCATIONS_EXCLUSIVE((__int64)CurrentThread, v4);
return v6;
}Referenced by:
MiValidateSectionCreate