UINT64 __stdcall PfpIsProcessInfoPresent(_EPROCESS *Process){ return Process->UniqueProcessId && Process->CreateTime.QuadPart; }