IoInitializeCrashDump

UINT8 __stdcall IoInitializeCrashDump(PVOID hPageFile, _UNICODE_STRING *PagingFileName){
  INT64 v2; 
  _ETHREAD *CurrentThread; 
  UINT8 v6; 
  _UNICODE_STRING PagingFileNamea; 

  if( *(&stru_140CF2E80 + 4800) )
    return 0;
  CurrentThread = (_ETHREAD *)KeGetCurrentThread();
  --CurrentThread->Tcb.KernelApcDisable;
  ExAcquireResourceExclusiveLite((UINT64)&stru_140C452E0 + 6976, 1, v2);
  PagingFileNamea = *PagingFileName;
  v6 = IopInitializeCrashDump(hPageFile, &PagingFileNamea);
  if( v6 )
  {
    IopRemoveDumpCapsuleSupport();
  }
  else if( CapsuleDumpAllowed )
  {
    IopInitDumpCapsuleSupport();
  }
  ExReleaseResourceLite((PERESOURCE)((char *)&stru_140C452E0 + 6976));
  KeLeaveCriticalRegionThread(&CurrentThread->Tcb);
  return v6;
}

Referenced by: