_IO_SESSION_STATE __stdcall MmGetIoSessionState(VOID *SessionObject, UINT64 *SessionId){ __int64 v2; v2 = *((_QWORD *)SessionObject + 3); if( SessionId ) *(_DWORD *)SessionId = *(_DWORD *)(v2 + 8); return *(_DWORD *)(v2 + 1016); }