All pastes #87473 Raw Edit

Stuff

public text v1 · immutable
·published 2006-07-14 00:03 UTC
rendered paste body
#include "ntddk.h"


VOID OnUnload( IN PDRIVER_OBJECT DriverObject )

{
DbgPrint("OnUnload called\n");
}

NTSTATUS DriverEntry(IN PDRIVER_OBJECT theDriverObject, IN PUNICODE_STRING theRegistryPath)
{
ULONG Part1;
ULONG Part2;
PULONG pPart1 = 0x804f7638;
PULONG pPart2 = 0x804f763C;
Part1 = *pPart1;
Part2 = *pPart2;
DbgPrint("KeStackAttachProcess: %x %x",Part1,Part2);
pPart1 = 0x804f753C;
pPart2 = 0x804F7540;
Part1 = *pPart1;
Part2 = *pPart2;
DbgPrint("KeAttachProcess %x %x",Part1,Part2);

DbgPrint("Success!");
theDriverObject->DriverUnload= OnUnload;
return STATUS_SUCCESS;
}