NtAcquireCrossVmMutant

NTSTATUS __stdcall NtAcquireCrossVmMutant(VOID *a1, UINT64 a2){
  char PreviousMode; 
  __int64 *v4; 
  UINT64 v5; 
  int v6; 
  PVOID Object; 
  __int64 v8; 

  v8 = 0i64;
  if( !*(&WheapDeferredInternalLogsEventLock + 56) )
    return -1073741788;
  PreviousMode = KeGetCurrentThread()->PreviousMode;
  v4 = (__int64 *)a2;
  if( a2 && PreviousMode )
  {
    v5 = 0x7FFFFFFF0000i64;
    if( a2 < 0x7FFFFFFF0000i64 )
      v5 = a2;
    v8 = *(_QWORD *)v5;
    v4 = &v8;
  }
  Object = 0i64;
  v6 = ObReferenceObjectByHandle(
         a1,
         0x100000ui64,
         *(&WheapDeferredInternalLogsEventLock + 56),
         PreviousMode,
         &Object,
         0i64);
  if( v6 >= 0 )
  {
    v6 = ExpAcquireCrossVmMutant((INT64)Object, (INT64)v4, PreviousMode);
    HalPutDmaAdapter((PADAPTER_OBJECT)Object);
  }
  return v6;
}

Referenced by: