MiUnmapImageInSystemSpace
VOID __stdcall MiUnmapImageInSystemSpace(_MI_SYSTEM_SPACE_IMAGE *SystemImageInfo){
VOID *v1;
INT64 v3;
v1 = *(VOID **)SystemImageInfo;
if( *(_QWORD *)SystemImageInfo <= 0x7FFFFFFEFFFFui64 )
{
MiUnmapViewOfSection(KeGetCurrentThread()->ApcState.Process, v1, 0i64);
KiUnstackDetachProcess((_KAPC_STATE *)(SystemImageInfo + 8), 0i64);
}
else
{
MiRemoveFromSystemSpace(&Session, v1, 1ui64);
}
v3 = *((_QWORD *)SystemImageInfo + 1);
if( v3 )
MiReturnCrossPartitionControlAreaCharges(v3);
}Referenced by:
MiCreateSessionDriverProtos
MiGetSystemAddressForImage
MiOpenHotPatchFile
MiParseComAndCetHeaders
MiPerformImageHotPatch
MiRelocateImage
MiSetPagesModified
MiValidateSectionCreate