IoSetIoAttributionIrp

NTSTATUS __stdcall IoSetIoAttributionIrp(_IRP *Irp, VOID *AttributionSource, UINT64 Flags){
  NTSTATUS result; 

  if( (_DWORD)Flags && (Flags & 0xFFFFFFFC) == 0 )
  {
    if( (Flags & 1) == 0 )
    {
      IopSetDiskIoAttributionFromProcess(Irp, (_EPROCESS *)AttributionSource);
      return result;
    }
    if( (Flags & 2) == 0 )
      return IoSetDiskIoAttributionFromThread(Irp, (_ETHREAD *)AttributionSource);
  }
  return -1073741811;
}

Referenced by:

No references.