NTSTATUS __stdcall MmGetSessionGlobalVA(_EPROCESS *Process){ __int64 v1; if( (Process->Flags3 & 0x1000) != 0 ) LODWORD(v1) = 0; else return(NTSTATUS)Process->Session; return v1; }