MiPreparePlaceholderVadReplacement
__int64 __fastcall MiPreparePlaceholderVadReplacement(__int64 a1, __int64 a2, __int64 a3){
__int64 result;
_InterlockedIncrement((volatile signed __int32 *)(a3 + 232));
MiReferenceVad(a1);
MiRemovePlaceholderVad((RTL_BALANCED_NODE *)a1);
result = *(unsigned int *)(a1 + 28);
*(_QWORD *)(a2 + 1176) += (((*(unsigned int *)(a1 + 24) | ((unsigned __int64)*(unsigned __int8 *)(a1 + 32) << 32))
- (result | ((unsigned __int64)*(unsigned __int8 *)(a1 + 33) << 32))) << 12)
- 4096;
return result;
}Referenced by:
MiMapViewOfDataSection
MiReserveUserMemory