MiReturnFullProcessCharges
VOID __stdcall MiReturnFullProcessCharges(ULONG_PTR TargetProcess, ULONG_PTR QuotaCharge){
unsigned __int64 v2;
UINT64 v3;
_EPROCESS *v4;
v2 = -*(_QWORD *)&QuotaCharge;
v3 = *(_QWORD *)&QuotaCharge;
v4 = *(_EPROCESS **)&TargetProcess;
if( (*(_DWORD *)(*(_QWORD *)&TargetProcess + 1120i64) & 0x10) != 0 )
PspChangeJobMemoryUsageByProcess(2ui64, v2, *(_EPROCESS **)&TargetProcess, 0i64);
_InterlockedExchangeAdd64((volatile signed __int64 *)&v4->CommitCharge, v2);
PsReturnProcessPageFileQuota(v4, v3);
}Referenced by:
MiCloneVads
MiDecommitRegion
MiDeletePartialVad
MiDeleteVad
MiDeleteVadBitmap
MiRemoveVadCharges
MiReturnFullProcessCommitment
MiSetProtectionOnSection