NTSTATUS __stdcall PsGetWin32KFilterSet(){ return KeGetCurrentThread()->ApcState.Process->Win32KFilterSet; }