PsSetLoadImageNotifyRoutine(LoadImageNotifyCallBac k);
VOID LoadImageNotifyCallBack(
IN PUNICODE_STRING FullImageName,
IN HANDLE ProcessId, // where image is mapped
IN PIMAGE_INFO ImageInfo
);
https://msdn.microsof*****m/en-us/library/ff559957.aspx
Or
PHYSICAL_ADDRESS MmGetPhysicalAddress(
__in PVOID BaseAddress
);
https://msdn.microsof*****m/en-us/libr...=VS.85%29.aspx
This was one of the reasons I gave up on drivers cause the documentation sucks and google has few results