On Saturday 11 February 2006 18:41, Giridhar Pemmasani wrote:
> Carlos Mart=C3=ADn wrote:
> > Hi,
> > When I set debug to 6, I can see in the log where the NDIS driver=20
> > are loaded in memory. I'd like to see the address (or offset, or whatev=
> > want to call it) in the .sys file.
> When driver is loaded, its image address is printed (in load_sys_files). =
> can calculate the offset from that. You may also want to know driver's st=
> address. There is also addr_offset macro in ntoskernel.h to know from whe=
> the driver a Linux function is called.
Thanks. With the image address and knowing where the entry point is I've fo=
the addresses of the functions.
Carlos Mart=EDn Nieto | http://www.cmartin.tk
Hobbyist programmer |