PspQueryProcessAccountingInformationCallback
__int64 __fastcall PspQueryProcessAccountingInformationCallback(__int64 a1, __int64 a2){
_QWORD *v4;
INT64 result[54];
memset((INT64)result, 0i64);
if( (*(_DWORD *)(a1 + 1120) & 2) == 0 )
{
PsQueryStatisticsProcess((_EPROCESS *)a1, (_EPROCESS_VALUES *)a2);
PspAddAccountingValues((_QWORD *)(a2 + 104), (CHAR *)a2);
*(_DWORD *)(a2 + 248) += *(_DWORD *)(a1 + 1668);
v4 = *(_QWORD **)(a1 + 2232);
if( v4 )
{
*(_QWORD *)(a2 + 208) += *v4;
*(_QWORD *)(a2 + 216) += v4[1];
*(_QWORD *)(a2 + 224) += v4[2];
*(_QWORD *)(a2 + 232) += v4[3];
*(_QWORD *)(a2 + 240) += v4[4];
}
if( PoEnergyEstimationEnabled() )
{
PsQueryProcessEnergyValues((_EPROCESS *)a1, (_PROCESS_ENERGY_VALUES *)result);
PsAddProcessEnergyValues(a2 + 256, (INT64)result);
}
}
return 0i64;
}Referenced by:
No references.