Open up ntoskrnl.exe in Ida Pro. In the functions window search for the function PspReferenceCidTableEntry (or any function that moves PspCidTable address into a register) Signature an instruction ...