RtlInitUnicodeString(&unistr, L"NtSetDebugFilterState"); Foo = MmGetSystemRoutineAddress(&unistr); RtlInitUnicodeString(&unistr, L"NtReadFile"); Foo = MmGetSystemRoutineAddress(&unistr);
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!