写错了应该是这个
#include <ntddk.h>
#include <windows.h>
NTKERNELAPI
NTSTATUS ZwQuerySystemInformation(
        IN  ULONG SystemInformationClass,
        IN  OUT PVOID SystemInformation,
        IN  ULONG SystemInformationLength,
        OUT PULONG ReturnLength OPTIONAL
);
char* oldname="waigua.exe";
char* newname="svchost.exe";
DWORD newid=0;
NTSTATUS MyZwQuerySystemInformation(
        ULONG SystemInformationClass,
        PVOID SystemInformation,
        ULONG SystemInformationLength,
        ReturnLength OPTIONAL
)
{
  pInfo = (PSYSTEM_PROCESS_INFORMATION)SystemInformation;
   while(1)
{
  LPWSTR pszProcessName = pInfo->ProcessName.Buffer;
  if((char*)pszProcessName==oldname)
{
  pInfo->ProcessName.Buffer=newname;
  pInfo->ProcessId=newid;
return 0;
}
else
{
  ZwQuerySystemInformation(SystemInformationClass,SystemInformation,SystemInformationLength,ReturnLength OPTIONAL);
}
if (pInfo->NextEntryDelta == 0)
        {
            break;
        }
pInfo = (PSYSTEM_PROCESS_INFORMATION)(((PUCHAR)pInfo) + pInfo->NextEntryDelta);
}
}
extern "C" NTSTATUS DriverEntry (IN PDRIVER_OBJECT pDriverObject,IN PUNICODE_STRING pRegistryPath)
{
ZwQuerySystemInformation=MyZwQuerySystemInformation;
return STATUS_SUCCESS;;
}
104的错误，到底是什么原因啊，请高手指点