WheapCreateLiveDumpFromPreviousSession

NTSTATUS __stdcall WheapCreateLiveDumpFromPreviousSession(INT64 a1){
  bool v3; 
  __int64 v4[2]; 
  int v5; 
  int v6; 
  INT64 v7; 

  v4[0] = 0i64;
  v4[1] = 0i64;
  v6 = 0;
  if( _InterlockedIncrement(&WheapLiveDumpsCreated) > 8 )
    return -1073741823;
  ExAcquireFastMutex((PFAST_MUTEX)((char *)&SbiVmbusArrivalEvent + 2976));
  v3 = *(&WheapErrorSourceTable + 59) != 0;
  KeReleaseGuardedMutex((PKGUARDED_MUTEX)((char *)&SbiVmbusArrivalEvent + 2976));
  if( !v3 )
    return WheapSaveRecordForLiveDump(a1);
  v7 = a1 + 40;
  v5 = *(_DWORD *)(*(_QWORD *)(a1 + 32) + 40i64);
  return WheapReportLiveDump((INT64)v4);
}

Referenced by:

WheapProcessWorkQueueItem