PspSubtractAccountingValues

VOID __stdcall PspSubtractAccountingValues(_EPROCESS_VALUES *Values1, _EPROCESS_VALUES *Values2){
  unsigned __int64 v2; 
  unsigned __int64 UserTime; 
  unsigned __int64 v4; 
  unsigned __int64 v5; 
  unsigned __int64 CycleTime; 
  unsigned __int64 v7; 
  unsigned __int64 v8; 
  __int64 ReadOperationCount; 
  __int64 v10; 
  __int64 v11; 
  __int64 WriteOperationCount; 
  __int64 v13; 
  __int64 v14; 
  __int64 OtherOperationCount; 
  __int64 v16; 
  __int64 v17; 
  __int64 ReadTransferCount; 
  __int64 v19; 
  __int64 v20; 
  __int64 WriteTransferCount; 
  __int64 v22; 
  __int64 v23; 
  __int64 OtherTransferCount; 
  __int64 v25; 
  __int64 v26; 

  if( Values2->KernelTime > Values1->KernelTime )
    v2 = 0i64;
  else
    v2 = Values1->KernelTime - Values2->KernelTime;
  Values1->KernelTime = v2;
  UserTime = Values2->UserTime;
  v4 = Values1->UserTime;
  if( UserTime > v4 )
    v5 = 0i64;
  else
    v5 = v4 - UserTime;
  Values1->UserTime = v5;
  CycleTime = Values2->CycleTime;
  v7 = Values1->CycleTime;
  if( CycleTime > v7 )
    v8 = 0i64;
  else
    v8 = v7 - CycleTime;
  Values1->CycleTime = v8;
  ReadOperationCount = Values2->ReadOperationCount;
  v10 = Values1->ReadOperationCount;
  if( ReadOperationCount > v10 )
    v11 = 0i64;
  else
    v11 = v10 - ReadOperationCount;
  Values1->ReadOperationCount = v11;
  WriteOperationCount = Values2->WriteOperationCount;
  v13 = Values1->WriteOperationCount;
  if( WriteOperationCount > v13 )
    v14 = 0i64;
  else
    v14 = v13 - WriteOperationCount;
  Values1->WriteOperationCount = v14;
  OtherOperationCount = Values2->OtherOperationCount;
  v16 = Values1->OtherOperationCount;
  if( OtherOperationCount > v16 )
    v17 = 0i64;
  else
    v17 = v16 - OtherOperationCount;
  Values1->OtherOperationCount = v17;
  ReadTransferCount = Values2->ReadTransferCount;
  v19 = Values1->ReadTransferCount;
  if( ReadTransferCount > v19 )
    v20 = 0i64;
  else
    v20 = v19 - ReadTransferCount;
  Values1->ReadTransferCount = v20;
  WriteTransferCount = Values2->WriteTransferCount;
  v22 = Values1->WriteTransferCount;
  if( WriteTransferCount > v22 )
    v23 = 0i64;
  else
    v23 = v22 - WriteTransferCount;
  Values1->WriteTransferCount = v23;
  OtherTransferCount = Values2->OtherTransferCount;
  v25 = Values1->OtherTransferCount;
  if( OtherTransferCount > v25 )
    v26 = 0i64;
  else
    v26 = v25 - OtherTransferCount;
  Values1->OtherTransferCount = v26;
}

Referenced by:

PspRemoveProcessFromJobChain