WheapCreateLiveDumpFromPreviousSession
NTSTATUS __stdcall WheapCreateLiveDumpFromPreviousSession(INT64 a1){
bool v3;
__int64 v4[2];
int v5;
int v6;
INT64 v7;
v4[0] = 0i64;
v4[1] = 0i64;
v6 = 0;
if( _InterlockedIncrement(&WheapLiveDumpsCreated) > 8 )
return -1073741823;
ExAcquireFastMutex((PFAST_MUTEX)((char *)&SbiVmbusArrivalEvent + 2976));
v3 = *(&WheapErrorSourceTable + 59) != 0;
KeReleaseGuardedMutex((PKGUARDED_MUTEX)((char *)&SbiVmbusArrivalEvent + 2976));
if( !v3 )
return WheapSaveRecordForLiveDump(a1);
v7 = a1 + 40;
v5 = *(_DWORD *)(*(_QWORD *)(a1 + 32) + 40i64);
return WheapReportLiveDump((INT64)v4);
}Referenced by:
WheapProcessWorkQueueItem