Is there any Unload counterpart of PsSetLoadImageNotifyRoutine ?
...Mani

Re: Unload counterpart of PsSetLoadImageNotifyRoutine by 440gtx

440gtx
Thu Jan 13 02:44:54 CST 2005

> Is there any Unload counterpart of PsSetLoadImageNotifyRoutine ?

Yes, it is called PsRemoveLoadImageNotifyRoutine. But it only exists on
XP and later (cannot use if targeting Windows 2000). It is not in the
2003 DDK docs but it is in ntddk.h.


Re: Unload counterpart of PsSetLoadImageNotifyRoutine by Bajamani

Bajamani
Thu Jan 13 03:17:14 CST 2005

Thanks.

PsRemoveLoadImageNotifyRoutine !!!

Has anybody used this ?

Sorry !! But, by name it appears to me as if it is used for removing
the Load-Image Notify Routine.

Correct me, if i am wrong.

...Mani


Re: Unload counterpart of PsSetLoadImageNotifyRoutine by Eliyas

Eliyas
Thu Jan 13 13:52:36 CST 2005

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/kmarch/hh/kmarch/k108_50aeae5b-9276-4e93-8192-70a51bd87ab4.xml.asp

--
-Eliyas
This posting is provided "AS IS" with no warranties, and confers no rights.
http://www.microsoft.com/whdc/hwdev/driver/kb-drv.mspx



Re: Unload counterpart of PsSetLoadImageNotifyRoutine by Bajamani

Bajamani
Fri Jan 14 00:38:39 CST 2005

I wanted something like

PsSetUnLoadImageNotifyRoutine & not
PsRemoveLoadImageNotifyRoutine

i.e. I want the routine to be called whenever an image is unloaded.
Regards
...Mani