NTSTATUS __stdcall CmGetBoundTransaction(LARGE_INTEGER *Cookie, PVOID Object){ __int64 v2; if( !Cookie ) return 0; v2 = *((_QWORD *)Object + 7); if( (v2 & 1) != 0 ) return 0; else return v2 & 0xFFFFFFFE; }