NTSTATUS __stdcall MmGetSessionCreateTime(_EPROCESS *Process){
_MM_SESSION_SPACE *Session;
__int64 v2;
Session = Process->Session;
if( !Session || (Process->Flags3 & 0x1000) != 0 )
LODWORD(v2) = 0;
else
return *((_QWORD *)Session + 132);
return v2;
}