PspAddAccountingValues
VOID __stdcall PspAddAccountingValues(_EPROCESS_VALUES *Values1, _EPROCESS_VALUES *Values2){
unsigned __int64 ContextSwitches;
__int64 *p_ReadOperationCount;
signed __int64 v5;
__int64 v6;
Values1->KernelTime += Values2->KernelTime;
Values1->UserTime += Values2->UserTime;
Values1->CycleTime += Values2->CycleTime;
Values1->ReadyTime += Values2->ReadyTime;
Values1->KernelWaitTime += Values2->KernelWaitTime;
Values1->UserWaitTime += Values2->UserWaitTime;
ContextSwitches = Values2->ContextSwitches;
p_ReadOperationCount = &Values1->ReadOperationCount;
Values1->ContextSwitches += ContextSwitches;
v5 = (char *)Values2 - (char *)Values1;
v6 = 6i64;
do
{
*p_ReadOperationCount += *(__int64 *)((char *)p_ReadOperationCount + v5);
++p_ReadOperationCount;
--v6;
}
while( v6 );
}Referenced by:
PspEnforceLimitsJobPostCallback
PspEnforceLimitsProcessCallback
PspQueryProcessAccountingInformationCallback