VOID __stdcall MiGetSessionIdForVa(VOID *Va, INT16 DX){ if( (unsigned __int64)Va < 0xFFFF800000000000ui64 || MiGetSystemRegionType((UINT64)Va) == 1 ) MmGetSessionIdEx(KeGetCurrentThread()->ApcState.Process); }