*(FARPROC*)&ZwQuerySystemInformation = GetProcAddress(GetModuleHandle("ntdll.dll"),"ZwQuerySystemInformation");