MiBootImageRelocated
NTSTATUS __fastcall MiBootImageRelocated(
_LOADER_PARAMETER_BLOCK *a1,
__int64 a2,
_BYTE *a3,
_BYTE *a4,
__int64 a5,
int a6){
signed __int64 v8;
NTSTATUS result;
*(_QWORD *)(a2 + 48) = a4;
v8 = a4 - a3 + a5;
*(_QWORD *)(v8 + 48) = a4;
MiUpdateThunks(a1, a3, a4, *(unsigned int *)(a2 + 64));
*(_DWORD *)(a2 + 104) |= 0x1000000u;
*(_QWORD *)(a2 + 56) = &a4[*(unsigned int *)(v8 + 40)];
result = a6 << 12;
*(_DWORD *)(a2 + 64) = a6 << 12;
if( (MiFlags & 0x8000) != 0 )
return VslReserveProtectedPages(0i64, (INT64)a3, 0i64, 2ui64);
return result;
}Referenced by:
MiHandleBootImage