PopFxSetGlobalDeviceAccountingEnabled

NTSTATUS __stdcall PopFxSetGlobalDeviceAccountingEnabled(CHAR a1){
  unsigned __int64 v2; 
  NTSTATUS result; 

  v2 = (unsigned __int8)KeAcquireSpinLockRaiseToDpc((UINT64 *)&stru_140C23628 + 549);
  if( a1 )
  {
    if( *(&stru_140C23628 + 4280) )
      *(&stru_140C23628 + 536) = *(_QWORD *)&KUSER_SHARED_DATA.InterruptTime.LowPart;
    else
      ++*(&stru_140C23628 + 539);
  }
  else if( *(&stru_140C23628 + 4280) )
  {
    PopFxUpdateGlobalDeviceAccountingInfo(*(UINT64 *)&KUSER_SHARED_DATA.InterruptTime.LowPart, 0x47868C00ui64);
  }
  *(&stru_140C23628 + 4281) = a1;
  KxReleaseSpinLock((UINT64 *)&stru_140C23628 + 549);
  result = KiIrqlFlags;
  __writecr8(v2);
  return result;
}

Referenced by:

PopFxPauseDeviceAccounting
PopFxResumeDeviceAccounting