MiAddUnicodeStringToCrashDump
NTSTATUS __stdcall MiAddUnicodeStringToCrashDump(_MM_KERNEL_DUMP_CONTEXT *Context, INT64 a2){
UINT64 v2;
unsigned __int64 v4;
unsigned __int64 v6;
unsigned __int64 v7;
v2 = *(unsigned __int16 *)(a2 + 2);
v4 = *(_QWORD *)(a2 + 8);
v6 = v4 & 0xFFFFFFFFFFFFF000ui64;
v7 = (v4 & 0xFFFFFFFFFFFFF000ui64) + (((v4 & 0xFFF) + v2 + 4095) & 0xFFFFFFFFFFFFF000ui64);
if( (v4 & 0xFFFFFFFFFFFFF000ui64) >= v7 )
{
LABEL_5:
MmAddRangeToCrashDump(Context, (VOID *)v4, v2);
return 0;
}
else
{
while( MmIsAddressValidEx(v6) )
{
v6 += 4096i64;
if( v6 >= v7 )
{
v4 = *(_QWORD *)(a2 + 8);
goto LABEL_5;
}
}
return -1073741823;
}
}Referenced by:
No references.