MmSnapTriageDumpInformation
VOID __stdcall MmSnapTriageDumpInformation(CONTEXT *TriageContext, UINT64 *BugCheckParameters){
__int64 v4;
char *v5;
__int64 v6;
dword_140C2A15C = 0;
MiTriageDumpData = qword_140C51AC0;
dword_140C2A148 = dword_140C4E514;
dword_140C2A14C = dword_140C4E510;
dword_140C2A150 = dword_140C4E518;
dword_140C2A154 = dword_140C4E51C;
dword_140C2A158 = dword_140C4E508;
qword_140C2A160 = KeFeatureBits;
xmmword_140C2A168 = 0i64;
LODWORD(xmmword_140C2A168) = KUSER_SHARED_DATA.TimeZoneId;
DWORD1(xmmword_140C2A168) = MiFlags;
HvlQueryVsmConnection((_QWORD *)&xmmword_140C2A168 + 1);
v4 = 4i64;
do
{
MiAddTriageDumpPtes((PVOID)*BugCheckParameters++);
--v4;
}
while( v4 );
v5 = &IopRunTimeContextOffsets;
v6 = 15i64;
do
{
MiAddTriageDumpPtes(*(PVOID *)((char *)&TriageContext->P1Home + *(unsigned __int16 *)v5));
v5 += 2;
--v6;
}
while( v6 );
IoAddTriageDumpDataBlock(&MiTriageDumpData, 0x38ui64);
}Referenced by:
IoWriteCrashDump
IopWriteCapsuleTriageDumpToFirmware