PsGetCurrentThreadProcess
_KPROCESS *__fastcall PsGetCurrentThreadProcess(){
return &KeGetCurrentThread()->Process->Pcb;
}Referenced by:
CmQueryKey
CmpCheckExeOwnerForPca
CmpCheckKeySecurityDescriptorAccess
CmpCheckOpenAccessOnKeyBody
CmpDoAccessCheckOnKCB
CmpDoParseKey
CmpIsSystemEntity
CmpPublishEventForPcaResolver
CmpReportAuditVirtualizationEvent
CmpVEExecuteParseLogic
PopDiagTracePolicyInitiatePowerActionApiCall
SeAdtRegistryValueChangedAuditAlarm
SeAuditFipsCryptoSelftests
SeAuditSystemTimeChange
SeAuditTransactionStateChange
SeCheckForCriticalAceRemoval
SeOperationAuditAlarm
SepAdtCloseObjectAuditAlarm
SepAdtDeleteObjectAuditAlarm
SepAdtOpenObjectAuditAlarm
SepAdtPrivilegeObjectAuditAlarm
SepAdtPrivilegedServiceAuditAlarm
SepAdtSecurityDescriptorChangedAuditAlarm
SepAdtStagingEvent
SepAdtTokenRightAdjusted
SepAuditAssignPrimaryToken