Geoff Chappell, Software Analyst
This function charges a process for its use of paged pool.
NTSTATUS PsChargeProcessPagedPoolQuota ( EPROCESS *Process, SIZE_T Amount);
The Process argument is the address of the process that is to be charged for its use of paged pool.
The Amount argument is the amount, in bytes, to charge.
The function returns STATUS_SUCCESS if successful, else a negative error code.
The PsChargeProcessPagedPoolQuota function is exported by name from the kernel in version 5.1 and higher.
The PsChargeProcessPagedPoolQuota function is not documented.
Microsoft published a C-language declaration of PsChargeProcessPagedPoolQuota in some editions of the Windows Driver Kit (WDK) for Windows 10. The declaration is in a header named NTOSP.H in a subdirectory named “minwin” of a directory named “um” as if for user-mode programming. Publication of this header may have been an oversight. It ceased with the WDK for the 1607 release.
The PsChargeProcessPagedPoolQuota function is essentially the PsChargeProcessPoolQuota function but with the latter’s PoolType argument specialised to PagedPool (1).