关于NtReadVirtualMemory

请问如何调用未在ntoskrnl.exe导出的函数?  

解决方案 »

  1.   

    typedef struct _SERVICE_DESCRIPTOR_TABLE
    {
      PVOID   ServiceTableBase;
      PULONG  ServiceCounterTableBase;
      ULONG   NumberOfService;
      ULONG   ParamTableBase;
    }SERVICE_DESCRIPTOR_TABLE,*PSERVICE_DESCRIPTOR_TABLE;extern PSERVICE_DESCRIPTOR_TABLE KeServiceDescriptorTable;address = (ULONG)(KeServiceDescriptorTable->ServiceTableBase) + 0xba * 4; // 0xba为xp NtReadVirtualMemory的服务号