MiSessionUpdateImageCharges

NTSTATUS __stdcall MiSessionUpdateImageCharges(_KLDR_DATA_TABLE_ENTRY *DataTableEntry){
  _RTL_BALANCED_NODE *v1; 
  _KLDR_DATA_TABLE_ENTRY *v2; 
  _RTL_BALANCED_NODE *v3; 
  _RTL_BALANCED_NODE *v4; 
  UINT64 v5; 
  _MM_SESSION_SPACE *Session; 

  v1 = MiSessionLookupImage((UINT64)DataTableEntry->DllBase);
  LODWORD(v3) = MiCountSystemImageCommitment(v2);
  v4 = v3;
  v5 = (char *)v1[3].Children[0] - (char *)v3;
  if( v5 )
  {
    Session = KeGetCurrentThread()->ApcState.Process->Session;
    MiReturnCommit(*(_MI_PARTITION **)(*(&stru_140C4DB30 + 267) + 8i64 * *((unsigned __int16 *)Session + 215)), v5);
    v1[3].Children[0] = v4;
    _InterlockedExchangeAdd64((volatile signed __int64 *)Session + 6, -(__int64)v5);
  }
  return 0;
}

Referenced by: