PspQueryProcessAccountingInformationCallback

__int64 __fastcall PspQueryProcessAccountingInformationCallback(__int64 a1, __int64 a2){
  _QWORD *v4; 
  INT64 result[54]; 
  memset((INT64)result, 0i64);
  if( (*(_DWORD *)(a1 + 1120) & 2) == 0 )
  {
    PsQueryStatisticsProcess((_EPROCESS *)a1, (_EPROCESS_VALUES *)a2);
    PspAddAccountingValues((_QWORD *)(a2 + 104), (CHAR *)a2);
    *(_DWORD *)(a2 + 248) += *(_DWORD *)(a1 + 1668);
    v4 = *(_QWORD **)(a1 + 2232);
    if( v4 )
    {
      *(_QWORD *)(a2 + 208) += *v4;
      *(_QWORD *)(a2 + 216) += v4[1];
      *(_QWORD *)(a2 + 224) += v4[2];
      *(_QWORD *)(a2 + 232) += v4[3];
      *(_QWORD *)(a2 + 240) += v4[4];
    }
    if( PoEnergyEstimationEnabled() )
    {
      PsQueryProcessEnergyValues((_EPROCESS *)a1, (_PROCESS_ENERGY_VALUES *)result);
      PsAddProcessEnergyValues(a2 + 256, (INT64)result);
    }
  }
  return 0i64;
}

Referenced by:

No references.