IoLoadCrashDumpDriver

NTSTATUS __fastcall IoLoadCrashDumpDriver(UNICODE_STRING *a1, INT64 a2, INT64 a3){
  NTSTATUS result; 
  UNICODE_STRING *v5; 
  UNICODE_STRING *v6; 
  void *ImageBaseAddress[3]; 
  PVOID ImageHandle; 
  ImageHandle = 0i64;
  ImageBaseAddress[0] = 0i64;
  if( !IopAllowLoadCrashDumpDriver )
    return -1073741822;
  if( *(_DWORD *)a2 != 24 )
    return -1073741811;
  if( *(_DWORD *)a3 != 24 )
    return -1073741811;
  v5 = *(UNICODE_STRING **)(a2 + 8);
  if( !v5 )
    return -1073741811;
  v6 = *(UNICODE_STRING **)(a2 + 16);
  if( !v6 )
    return -1073741811;
  result = MmLoadSystemImage(a1, v5, v6, 2ui64, &ImageHandle, ImageBaseAddress);
  if( result >= 0 )
  {
    *(_QWORD *)(a3 + 8) = ImageHandle;
    *(void **)(a3 + 16) = ImageBaseAddress[0];
  }
  return result;
}

Referenced by: