#include "ntddk.h" VOID OnUnload( IN PDRIVER_OBJECT DriverObject ) { DbgPrint("OnUnload called\n"); } NTSTATUS DriverEntry(IN PDRIVER_OBJECT theDriverObject, IN PUNICODE_STRING theRegistryPath) { ULONG Part1; ULONG Part2; PULONG pPart1 = 0x804f7638; PULONG pPart2 = 0x804f763C; Part1 = *pPart1; Part2 = *pPart2; DbgPrint("KeStackAttachProcess: %x %x",Part1,Part2); pPart1 = 0x804f753C; pPart2 = 0x804F7540; Part1 = *pPart1; Part2 = *pPart2; DbgPrint("KeAttachProcess %x %x",Part1,Part2); DbgPrint("Success!"); theDriverObject->DriverUnload= OnUnload; return STATUS_SUCCESS; }