I believe this is wrong - IoGetCurrentProcess return pointer to kernel EPROCESS structure instance, and GetCurrentProcess return constant (HANDLE)-1 . The structure is declared opaque so drivers must not dereference it, but some drivers surely won&#39;t obey.<br>
<br><div class="gmail_quote">2008/12/20 Chris Wulff <span dir="ltr">&lt;<a href="mailto:crwulff@rochester.rr.com">crwulff@rochester.rr.com</a>&gt;</span><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Redirect for IoGetCurrentProcess to kernel32.GetCurrentProcess<br>
<font color="#888888"><br>
 &nbsp;-- Chris Wulff<br>
</font><br><br>
<br></blockquote></div><br>