typedef PVOID ( __fastcall * RtlFindExportedRoutineByName_t ) ( PVOID ImageBase , PCHAR RoutineName ) ;
RtlFindExportedRoutineByName_t RtlFindExportedRoutineByName ;

void GetAddress () {
    RtlFindExportedRoutineByName = MmGetSystemRoutineAddress ("tlFindExportedRoutineByName ") ;
}