IoAddPagesForPartialKernelDump
NTSTATUS __stdcall IoAddPagesForPartialKernelDump(
UINT64 BugCheckCode,
INT64 a2,
INT64 *a3,
UINT64 a4,
INT64 a5,
INT64 a6,
INT64 a7){
unsigned int v9;
INT64 v10;
NTSTATUS v11;
NTSTATUS v12;
unsigned __int64 v13;
INT64 v15;
v9 = BugCheckCode;
AvailablePagesForPartialDump = *(_QWORD *)(qword_140C50960 + 1424i64);
v11 = 0;
if( IopAddMiniDumpPagesToPartialKernelDump(
BugCheckCode,
a2,
(UINT64)a3,
a4,
a5,
(_CONTEXT *)a6,
(_KTRAP_FRAME *)a7,
v15) >= 0 )
{
v12 = IopAddLiveDumpPagesToPartialKernelDump(v9, a2, (UINT64)a3, v10, a5);
if( v12 < 0 )
v12 = 0;
v11 = v12;
}
IopDumpCallRemovePagesCallbacks(v9);
IoSaveBugCheckProgress(0x22ui64);
v13 = *(_QWORD *)(qword_140C50960 + 1424i64);
if( v13 > AvailablePagesForPartialDump )
*(_QWORD *)(*(_QWORD *)(qword_140C50960 + 8i64) + 40i64) = v13 - AvailablePagesForPartialDump;
return v11;
}Referenced by:
IoWriteCrashDump