MiAddUnicodeStringToCrashDump

NTSTATUS __stdcall MiAddUnicodeStringToCrashDump(_MM_KERNEL_DUMP_CONTEXT *Context, INT64 a2){
  UINT64 v2; 
  unsigned __int64 v4; 
  unsigned __int64 v6; 
  unsigned __int64 v7; 

  v2 = *(unsigned __int16 *)(a2 + 2);
  v4 = *(_QWORD *)(a2 + 8);
  v6 = v4 & 0xFFFFFFFFFFFFF000ui64;
  v7 = (v4 & 0xFFFFFFFFFFFFF000ui64) + (((v4 & 0xFFF) + v2 + 4095) & 0xFFFFFFFFFFFFF000ui64);
  if( (v4 & 0xFFFFFFFFFFFFF000ui64) >= v7 )
  {
LABEL_5:
    MmAddRangeToCrashDump(Context, (VOID *)v4, v2);
    return 0;
  }
  else
  {
    while( MmIsAddressValidEx(v6) )
    {
      v6 += 4096i64;
      if( v6 >= v7 )
      {
        v4 = *(_QWORD *)(a2 + 8);
        goto LABEL_5;
      }
    }
    return -1073741823;
  }
}

Referenced by:

No references.