MmAddUnloadedDriverInformationToCrashDump
__int64 __fastcall MmAddUnloadedDriverInformationToCrashDump(__int64 (__fastcall **a1)(_QWORD, __int64, __int64)){
__int64 result;
int v3;
unsigned int v4;
unsigned int i;
unsigned __int64 v6;
if( !MmUnloadedDrivers )
return 0i64;
result = MmAddRangeToCrashDump(a1, (unsigned __int64)MmUnloadedDrivers, 2000i64);
v3 = result;
if( (int)result >= 0 )
{
v4 = MmLastUnloadedDriver;
for( i = 0; i < v4; ++i )
{
v6 = *((_QWORD *)MmUnloadedDrivers + 5 * (v4 - i) - 4);
if( !v6 )
break;
v3 = MmAddRangeToCrashDump(a1, v6, *((unsigned __int16 *)MmUnloadedDrivers + 20 * (v4 - i) - 19));
if( v3 < 0 )
break;
}
return(unsigned int)v3;
}
return result;
}Referenced by:
IopAddMiniDumpPagesToPartialKernelDump