PsGetCurrentProcess
__int64 PsGetCurrentProcess(){
return *((_QWORD *)KeGetCurrentThread() + 23);
}Referenced by:
CmFcpInitializeChangeSubscription
ExpQuerySystemInformation
KiLockExtendedServiceTable
MiGetPageProtection
MiInitSystem
MiInitializeMdlBatchPages
MmLoadSystemImageEx
NtLockFile
NtQueryInformationProcess
NtSetInformationProcess
NtSetSystemInformation
PopTransitionSystemPowerStateEx
SepCopyAnonymousTokenAndSetSilo
SepFilterToken