PopFxSetGlobalDeviceAccountingEnabled
NTSTATUS __stdcall PopFxSetGlobalDeviceAccountingEnabled(CHAR a1){
unsigned __int64 v2;
NTSTATUS result;
v2 = (unsigned __int8)KeAcquireSpinLockRaiseToDpc((UINT64 *)&stru_140C23628 + 549);
if( a1 )
{
if( *(&stru_140C23628 + 4280) )
*(&stru_140C23628 + 536) = *(_QWORD *)&KUSER_SHARED_DATA.InterruptTime.LowPart;
else
++*(&stru_140C23628 + 539);
}
else if( *(&stru_140C23628 + 4280) )
{
PopFxUpdateGlobalDeviceAccountingInfo(*(UINT64 *)&KUSER_SHARED_DATA.InterruptTime.LowPart, 0x47868C00ui64);
}
*(&stru_140C23628 + 4281) = a1;
KxReleaseSpinLock((UINT64 *)&stru_140C23628 + 549);
result = KiIrqlFlags;
__writecr8(v2);
return result;
}Referenced by:
PopFxPauseDeviceAccounting
PopFxResumeDeviceAccounting