ExpGetBilledProcess

BYTE *__fastcall ExpGetBilledProcess(INT64 a1){
  BYTE *BugCheckParameter4; 
  if( (*(_BYTE *)(a1 + 3) & 8) == 0 )
    return 0i64;
  BugCheckParameter4 = (BYTE *)(a1 ^ ExpPoolQuotaCookie ^ *(_QWORD *)(a1 + 8));
  if( BugCheckParameter4
    && ((unsigned __int64)BugCheckParameter4 < 0xFFFF800000000000ui64 || (*BugCheckParameter4 & 0x7F) != 3) )
  {
    KeBugCheckEx(0xC2u, 0xDui64, a1 + 16, *(unsigned int *)(a1 + 4), (ULONG_PTR)BugCheckParameter4);
  }
  return BugCheckParameter4;
}

Referenced by: