title: find base address of current procrss in kernel space
body: <p>hi i will dump the other process in kernel driver</p>
  
  <p>and use KeStackAttachProcess  to  change driver current context </p>
  
  <p>after user-mode address changed how can find base address of current process
  i need base address for cast it to PIMAGE_DOS_HEADER( and parse it to find sections) 
  can use PEB?</p>
  
  <p>any other solution?</p>