阅读:2027回复:1
各位,请问如何得到NtCreateProcessEx的地址啊
各位,请问如何得到NtCreateProcessEx的地址啊
|
|
沙发#
发布于:2009-04-20 11:12
UNICODE_STRING NtCreateProcessExName;
RtlInitUnicodeString( &NtCreateProcessExName, L"NtCreateProcessEx" ); PVOID pNtCreateProcessExName = NULL; NtCreateProcessExName = MmGetSystemRoutineAddress( &NtCreateProcessExName ); |
|