Lulul nice. But if HD is right and you are hooking CreateDevice, I don't think it's always going to hook depending on the injector, your hook has to be injected and catch CreateDevice before the function is created, could be troublesome..
Kudos if you didn't hook CreateDevice, mind sharing how you did it?
Effyeaah Distured ftw.