[pso] NTCLOSE

[Mihai Iancu]

_asm mov new_stack, esp
log = IoAllocateErrorLogEntry(
drv,(UCHAR)(sizeof(IO_ERROR_LOG_PACKET) + 10));
	RtlCopyMemory( log->DumpData,"xxxx", 3);
	IoWriteErrorLogEntry(log);
memcpy(new_stack, old_stack, params);

asta am in interceptor ... exact inainte de apelul
functiei originale.

Merge perfect pt orice apel de sistem, chiar si la 
NtClose, dar cand inchid o fereastra
apare blue screen.

Nu se pot face logari in momentul inchiderii cu NtClose

__________________________________
Do you Yahoo!?
Yahoo! Finance Tax Center - File online. File on time.
http://taxes.yahoo.com/filing.html