None
EN
What child is this?
['Yarden Shafir']
The Trail of Bits Blog
dx ((__int64(*)[64])&nt!PspCreateProcessNotifyRoutine)->Where(p => p)->Select(p => (void(*)())(*(((__int64*)(p & ~0xf)) + 1))) ((__int64(*)[64])&nt!PspCreateProcessNotifyRoutine)->Where(p => p)->Select(p => (void(*)())(*(((__int64*)(p & ~0xf)) + 1))) [0] : 0xfffff80673f78900 : cng!CngCreateProcessNotifyRoutine+0x0 [Type: void (*)()] [1] : 0xfffff80674b29f50 : WdFilter+0x49f50 [Type: void (*)()] [2] : 0xfffff80673dbb4b0 : ksecdd!KsecCreateProcessNotifyRoutine+0x0 [Type: void (*)()] [3] : 0xfffff8067510db70 : tcpip!CreateProcessNotifyRoutineEx+0x0 [Type: void (*)()] [4] : 0xfffff8067561d990 : iorate!IoRateProcessCreateNotify+0x0 [Type: void (*)()] [5] : 0xfffff80673eea160 : CI!I_PEProcessNotify+0x0 [Type: void (*)()] [6] : 0xfffff80678d6a590 : dxgkrnl!DxgkProcessNotify+0x0 [Type: void…