MmTriageActiveInLastCrash
NTSTATUS __stdcall MmTriageActiveInLastCrash(_LOADER_PARAMETER_BLOCK *LoaderBlock){
_LOADER_PARAMETER_EXTENSION *Extension;
char *TriageDumpBlock;
char *v3;
char *v4;
NTSTATUS result;
UINT64 v6;
UINT64 v7;
UINT64 v8;
UINT64 v9;
__int64 v10[3];
Extension = LoaderBlock->Extension;
result = 0;
if( Extension )
{
if( Extension->Size >= 0xE38 )
{
TriageDumpBlock = (char *)Extension->TriageDumpBlock;
if( TriageGetBugcheckData(TriageDumpBlock, &v6, &v7, &v8, &v9, (UINT64 *)v10) >= 0 )
{
if( TriagepVerifyDump(TriageDumpBlock) )
{
v3 = &TriageDumpBlock[TriageImagePageSize];
if( v3 )
{
v4 = &TriageDumpBlock[*((unsigned int *)v3 + 5)];
if( v4 )
{
if( *((_DWORD *)v4 + 3) )
return 1;
}
}
}
}
}
}
return result;
}Referenced by:
VfTriageSystem