PspQueryJobIoAttribution
INT64 __fastcall PspQueryJobIoAttribution(INT64 a1, INT64 a2){
unsigned int v2;
__int64 v4;
__int64 v5;
__int64 v6;
__int128 v8;
__int128 v9;
__int128 v10;
__int128 v11;
v2 = 0;
v8 = 0i64;
v9 = 0i64;
v10 = 0i64;
v11 = 0i64;
if( *(_DWORD *)(a1 + 1344) )
{
IoDiskIoAttributionQuery(*(_QWORD *)(a1 + 1352), &v8, &v10);
v4 = *((_QWORD *)&v9 + 1);
*(_QWORD *)(a2 + 24) = *((_QWORD *)&v8 + 1);
*(_QWORD *)(a2 + 32) = v9;
*(_QWORD *)(a2 + 40) = *((_QWORD *)&v11 + 1);
*(_OWORD *)(a2 + 48) = v10;
v5 = v11;
*(_QWORD *)(a2 + 8) = v4;
v6 = v8;
*(_QWORD *)(a2 + 64) = v5;
*(_QWORD *)(a2 + 16) = v6;
}
else
{
return(unsigned int)-1073741275;
}
return v2;
}Referenced by:
NtQueryInformationJobObject