ExpGetBilledProcess

_EPROCESS *__stdcall ExpGetBilledProcess(_POOL_HEADER *Entry){
  _EPROCESS *BugCheckParameter4; 

  if( (Entry->Ulong1 & 0x8000000) == 0 )
    return 0i64;
  BugCheckParameter4 = (_EPROCESS *)((unsigned __int64)Entry ^ ExpPoolQuotaCookie ^ (__int64)Entry->ProcessBilled);
  if( BugCheckParameter4
    && ((unsigned __int64)BugCheckParameter4 < 0xFFFF800000000000ui64 || (BugCheckParameter4->Pcb.gap0[0] & 0x7F) != 3) )
  {
    KeBugCheckEx(0xC2u, (PVOID)0xD, &Entry[1], (PVOID)Entry->PoolTag, BugCheckParameter4);
  }
  return BugCheckParameter4;
}

Referenced by: