Author: satan
Subject: Get address of NtGetContextThread in kernel mode
Posted: 19 April 2014 at 8:23am
hi ,
you can use this routine ,
MmGetSystemRoutineAddress(UNICODE_STRING SystemRoiutineName);
Drivers can use this routine to determine if a routine is available on a spesific version of Windows.It can only be used for routines exported by the kernel or HAL,not for any driver-defined routine.
http://msdn.microsoft.com/en-us/library/windows/hardware/ff554563%28v=vs.85%29.aspx
Subject: Get address of NtGetContextThread in kernel mode
Posted: 19 April 2014 at 8:23am
hi ,
you can use this routine ,
MmGetSystemRoutineAddress(UNICODE_STRING SystemRoiutineName);
Drivers can use this routine to determine if a routine is available on a spesific version of Windows.It can only be used for routines exported by the kernel or HAL,not for any driver-defined routine
http://msdn.microsoft.com/en-us/library/windows/hardware/ff554563%28v=vs.85%29.aspx