IoGetCurrentProcess - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// wdm.h
PEPROCESS IoGetCurrentProcess();
View the official Windows Driver Kit DDI referenceNo description available.
The IoGetCurrentProcess routine returns a pointer to the current process. Call PsGetCurrentProcess instead of IoGetCurrentProcess.
IoGetCurrentProcess returns a pointer to the current process.
This routine is identical to PsGetCurrentProcess:
#define PsGetCurrentProcess IoGetCurrentProcess
PsGetCurrentProcess (and IoGetCurrentProcess) retrieves the current process from the thread's APC state. This returns the process that the current thread is attached to, which might be different from the process that originally created the thread.
The process returned by PsGetCurrentProcess may differ from the process whose ID is returned by PsGetCurrentProcessId. Use PsGetCurrentProcessId to get the process ID of the process that created the current thread. Use PsGetProcessId(PsGetCurrentProcess()) to get the process ID of the process that the thread is currently attached to.