MmSnapTriageDumpInformation
VOID __stdcall MmSnapTriageDumpInformation(
_CONTEXT *TriageContext,
UINT64 *BugCheckParameters,
const UINT16 *ContextOffsets,
UINT64 ContextOffsetCount){
__int64 v6;
char *v7;
__int64 v8;
dword_140C2A15C = 0;
MiTriageDumpData = *(&stru_140C50B28 + 499);
dword_140C2A148 = *(&stru_140C4DB30 + 633);
dword_140C2A14C = *(&stru_140C4DB30 + 632);
qword_140C2A150 = *(&stru_140C4DB30 + 317);
dword_140C2A158 = *(&stru_140C4DB30 + 630);
qword_140C2A160 = (__int64)KeFeatureBits;
xmmword_140C2A168 = 0i64;
LODWORD(xmmword_140C2A168) = KUSER_SHARED_DATA.TimeZoneId;
DWORD1(xmmword_140C2A168) = MiFlags;
HvlQueryVsmConnection((_QWORD *)&xmmword_140C2A168 + 1);
v6 = 4i64;
do
{
MiAddTriageDumpPtes((VOID *)*BugCheckParameters++);
--v6;
}
while( v6 );
v7 = &IopRunTimeContextOffsets;
v8 = 15i64;
do
{
MiAddTriageDumpPtes(*(VOID **)((char *)&TriageContext->P1Home + *(unsigned __int16 *)v7));
v7 += 2;
--v8;
}
while( v8 );
IoAddTriageDumpDataBlock(&MiTriageDumpData, (_BYTE *)0x38);
}Referenced by:
IoWriteCrashDump
IopWriteCapsuleTriageDumpToFirmware