PspQueryJobIoAttribution

INT64 __fastcall PspQueryJobIoAttribution(INT64 a1, INT64 a2){
  unsigned int v2; 
  __int64 v4; 
  __int64 v5; 
  __int64 v6; 
  __int128 v8; 
  __int128 v9; 
  __int128 v10; 
  __int128 v11; 
  v2 = 0;
  v8 = 0i64;
  v9 = 0i64;
  v10 = 0i64;
  v11 = 0i64;
  if( *(_DWORD *)(a1 + 1344) )
  {
    IoDiskIoAttributionQuery(*(_QWORD *)(a1 + 1352), &v8, &v10);
    v4 = *((_QWORD *)&v9 + 1);
    *(_QWORD *)(a2 + 24) = *((_QWORD *)&v8 + 1);
    *(_QWORD *)(a2 + 32) = v9;
    *(_QWORD *)(a2 + 40) = *((_QWORD *)&v11 + 1);
    *(_OWORD *)(a2 + 48) = v10;
    v5 = v11;
    *(_QWORD *)(a2 + 8) = v4;
    v6 = v8;
    *(_QWORD *)(a2 + 64) = v5;
    *(_QWORD *)(a2 + 16) = v6;
  }
  else
  {
    return(unsigned int)-1073741275;
  }
  return v2;
}

Referenced by:

NtQueryInformationJobObject