MmAddUnloadedDriverInformationToCrashDump
NTSTATUS __stdcall MmAddUnloadedDriverInformationToCrashDump(_MM_KERNEL_DUMP_CONTEXT *Context){
NTSTATUS result;
int v3;
unsigned int v4;
unsigned int i;
VOID *v6;
if( !MmUnloadedDrivers )
return 0;
result = MmAddRangeToCrashDump(Context, MmUnloadedDrivers, 0x7D0ui64);
v3 = result;
if( result >= 0 )
{
v4 = MmLastUnloadedDriver;
for( i = 0; i < v4; ++i )
{
v6 = (VOID *)*((_QWORD *)MmUnloadedDrivers + 5 * (v4 - i) - 4);
if( !v6 )
break;
v3 = MmAddRangeToCrashDump(Context, v6, *((unsigned __int16 *)MmUnloadedDrivers + 20 * (v4 - i) - 19));
if( v3 < 0 )
break;
}
return v3;
}
return result;
}Referenced by:
IopAddMiniDumpPagesToPartialKernelDump