MiGetAweVadPartition

INT64 __fastcall MiGetAweVadPartition(INT64 a1){
  INT64 ***LockedVadEvent; 
  if( (*(_DWORD *)(a1 + 48) & 0x3100000) == 34603008 )
    return *(_QWORD *)(qword_140C4E388 + 8i64 * *(unsigned __int16 *)(*((_QWORD *)KeGetCurrentThread() + 23) + 1838i64));
  LockedVadEvent = MiLocateLockedVadEvent(a1, 256i64);
  return MiGetAweInfoPartition((INT64)LockedVadEvent[5]);
}

Referenced by:

MiQueryAddressState
MmQueryVirtualMemory