MiProcessKernelCfgImage
NTSTATUS __fastcall MiProcessKernelCfgImage(_KLDR_DATA_TABLE_ENTRY *DataTableEntry, CHAR a2, INT64 a3){
NTSTATUS result;
INT64 a2a;
a2a = 0i64;
if( (MiFlags & 0x80000) == 0 )
return 0;
RtlImageNtHeaderEx(1, (unsigned __int64)DataTableEntry->DllBase, 0i64, &a2a);
if( (DataTableEntry->Flags & 0x2000) == 0 )
{
result = MiMarkKernelImageCfgBits(DataTableEntry, a2a);
if( result < 0 )
return result;
DataTableEntry->Flags |= 0x2000u;
}
if( !a3 )
return 0;
if( (a2 & 8) != 0 )
return 0;
result = MiProcessKernelCfgAddressTakenImports((__int64)DataTableEntry);
if( result >= 0 )
return 0;
return result;
}Referenced by:
MiFinalizeDriverCfgState
MiInitializeKernelCfg