PspReadProcessSecurityDomain

NTSTATUS __stdcall PspReadProcessSecurityDomain(INT64 a1){
  return *(_QWORD *)(a1 + 2528);
}

Referenced by:

NtQueryInformationProcess