过TP驱动1(SSDT部分)

#include <windef.h>
#include <stdio.h>
#include <string.h>



typedef struct _ServiceDescriptorTable {
	PVOID ServiceTableBase; 
	PVOID ServiceCounterTable;
	unsigned int NumberOfServices;
	PVOID ParamTableBase; 
}*PServiceDescriptorTable;  

extern "C" extern PServiceDescriptorTable KeServiceDescriptorTable;
extern "C" __declspec(dllimport) _stdcall KeAddSystemServiceTable(PVOID, PVOID, PVOID, PVOID, PVOID);


bool Hook_flag=false;


LONG * ssdt_No122;//NtOpenProcess
LONG * ssdt_No128;//NtOpenThread
LONG * ssdt_No186;//NtReadVirtualMemory
LONG * ssdt_No277;//NtWriteVirtualMemory

LONG * ObOpenObjectByPointerAddr;
LONG * KeAttachProcessAddr;
LONG * KiAttachProcessAddr;

DWORD ssdtReadReal;
DWORD readPush1;
DWORD readJump1;

DWORD ssdtWriteReal;
DWORD writePush1;
DWORD writeJump1;



VOID NtOpenProcessInlineResume();
VOID NtOpenThreadInlineResume();

VOID NtReadVirtualMemory()