天书上的练习hook ZwCreateSection函数代码

// hook一ZwCreateSection.cpp : Defines the entry point for the console application.
//
#include <ntddk.h>
#include <wdm.h>

extern "C"  typedef struct _SERVICE_DESCRIPTOR_TABLE
{
 PVOID   ServiceTableBase;
 PULONG  ServiceCounterTableBase;
 ULONG   NumberOfService;
 ULONG   ParamTableBase;
}SERVICE_DESCRIPTOR_TABLE,*PSERVICE_DESCRIPTOR_TABLE;

extern "C" PSERVICE_DESCRIPTOR_TABLE    KeServiceDescriptorTable;

VOID Hook();
VOID Unhook();
VOID OnUnload(IN PDRIVER_OBJECT DriverObject);
ULONG JmpAddress;
ULONG OldServiceAddress;
NTSTATUS extern "C" NtCreateSection(OUT PHANDLE  SectionHandle,IN ACCESS_MASK  DesiredAccess,IN POBJECT_ATTRIBUTES  ObjectAttributes OPTIONAL,
    IN PLARGE_INTEGER  MaximumSize OPTIONAL,
    IN ULONG  SectionPageProtection,
    IN ULONG  AllocationAttributes,
    IN HANDLE  FileHandle OPTIONAL
    )