MiPreparePlaceholderVadReplacement

VOID __stdcall MiPreparePlaceholderVadReplacement(_RTL_BALANCED_NODE *Node, _EPROCESS *Process, INT64 a3){
  _InterlockedIncrement((volatile signed __int32 *)(a3 + 232));
  MiReferenceVad((_MMVAD_SHORT *)Node);
  MiRemovePlaceholderVad(Node);
  Process->VirtualSize += (((LODWORD(Node[1].Children[0]) | ((unsigned __int64)LOBYTE(Node[1].Right) << 32))
                          - (HIDWORD(Node[1].Left) | ((unsigned __int64)BYTE1(Node[1].Right) << 32))) << 12)
                        - 4096;
}

Referenced by: