IoInitializeCrashDump
UINT8 __stdcall IoInitializeCrashDump(PVOID hPageFile, UNICODE_STRING *PagingFileName){
_ETHREAD *CurrentThread;
UINT8 v5;
UNICODE_STRING PagingFileNamea;
if( ForceDumpDisabled )
return 0;
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
--*((_WORD *)CurrentThread + 242);
ExAcquireResourceExclusiveLite(&IopCrashDumpLock, 1u);
PagingFileNamea = *PagingFileName;
v5 = IopInitializeCrashDump(hPageFile, &PagingFileNamea);
if( v5 )
{
IopRemoveDumpCapsuleSupport();
}
else if( CapsuleDumpAllowed )
{
IopInitDumpCapsuleSupport();
}
ExReleaseResourceLite(&IopCrashDumpLock);
KeLeaveCriticalRegionThread((__int64)CurrentThread);
return v5;
}Referenced by:
IopInitCrashDumpDuringSysInit
MiCreatePagingFile