I believe this is wrong - IoGetCurrentProcess return pointer to kernel EPROCESS structure instance, and GetCurrentProcess return constant (HANDLE)-1 . The structure is declared opaque so drivers must not dereference it, but some drivers surely won't obey.
2008/12/20 Chris Wulff <crwu...@rochester.rr.com> > Redirect for IoGetCurrentProcess to kernel32.GetCurrentProcess > > -- Chris Wulff > > > >