MmGetSessionId
NTSTATUS __stdcall MmGetSessionId(_EPROCESS *Process){
_MM_SESSION_SPACE *Session;
NTSTATUS v2;
NTSTATUS v3;
Session = Process->Session;
if( !Session || (Process->Flags3 & 0x1000) != 0 )
v2 = -1;
else
v2 = *((_DWORD *)Session + 2);
v3 = 0;
if( v2 != -1 )
return v2;
return v3;
}Referenced by:
EtwpPoolRunDown
EtwpPsProvTraceProcess
EtwpStartLogger
ExCallSessionCallBack
ExGetSessionBigPoolInformation
ExpGetProcessInformation
MmCreatePeb
MmGetSessionMappedViewInformation
NtQueryInformationProcess
NtSetInformationProcess
PopDirectedDripsSendSuspendResumeNotification
PopInputDisabled
PopInvokeWin32Callout
PsGetThreadSessionId
PsInvokeWin32Callout
PspBindProcessSessionToJob
PspInitializeProcessSecurity
SeExchangePrimaryToken