MiGetSessionVm

__int64 MiGetSessionVm(){
  __int64 result; 
  result = *(_QWORD *)(*((_QWORD *)KeGetCurrentThread() + 23) + 1368i64);
  if( result )
    result += 256i64;
  return result;
}

Referenced by: