OK so I have the base address of ntoskrnl.exe and want to locate the address of an internal function that is neither exported or imported. How can this be done in kernel mode ?
↧
OK so I have the base address of ntoskrnl.exe and want to locate the address of an internal function that is neither exported or imported. How can this be done in kernel mode ?