MiReturnFullProcessCharges

UINT64 __fastcall MiReturnFullProcessCharges(ULONG_PTR a1, ULONG_PTR a2){
  __int64 v2; 
  v2 = -(__int64)a2;
  if( (*(_DWORD *)(a1 + 1120) & 0x10) != 0 )
    PspChangeJobMemoryUsageByProcess(2, v2, a1, 0i64);
  _InterlockedExchangeAdd64((volatile signed __int64 *)(a1 + 1608), v2);
  return PsReturnProcessPageFileQuota(a1, a2);
}

Referenced by: