IoLoadCrashDumpDriver

NTSTATUS __fastcall IoLoadCrashDumpDriver(UINT16 *a1, INT64 a2, INT64 a3){
  NTSTATUS result; 
  _UNICODE_STRING *v5; 
  _UNICODE_STRING *v6; 
  PVOID ImageBaseAddress; 
  PVOID ImageHandle; 

  ImageHandle = 0i64;
  ImageBaseAddress = 0i64;
  if( !*(&stru_140CF2E80 + 1872) )
    return -1073741822;
  if( *(_DWORD *)a2 != 24 )
    return -1073741811;
  if( *(_DWORD *)a3 != 24 )
    return -1073741811;
  v5 = *(_UNICODE_STRING **)(a2 + 8);
  if( !v5 )
    return -1073741811;
  v6 = *(_UNICODE_STRING **)(a2 + 16);
  if( !v6 )
    return -1073741811;
  result = MmLoadSystemImage((_UNICODE_STRING *)a1, v5, v6, 2ui64, &ImageHandle, &ImageBaseAddress);
  if( result >= 0 )
  {
    *(_QWORD *)(a3 + 8) = ImageHandle;
    *(_QWORD *)(a3 + 16) = ImageBaseAddress;
  }
  return result;
}

Referenced by: