Results 1 to 3 of 3
  1. #1
    illinkerptdll's Avatar
    Join Date
    Jan 2019
    Gender
    male
    Posts
    2
    Reputation
    10
    Thanks
    0

    PLOAD_IMAGE_NOTIFY_ROUTINE Callback

    PLOAD_IMAGE_NOTIFY_ROUTINE can be used to help in get the driver image in kernel mode to hook the driver then?

  2. #2
    aimer1337's Avatar
    Join Date
    Apr 2019
    Gender
    male
    Posts
    4
    Reputation
    10
    Thanks
    1
    There is no need to use image notification callbacks, if you want to get the driver object of another driver you can use ObReferenceObjectByName, or you can ObOpenObject then ObReferenceObjectByHandle.

  3. #3
    TrackHawk's Avatar
    Join Date
    Mar 2020
    Gender
    female
    Posts
    12
    Reputation
    10
    Thanks
    0
    Ineresting.... Subcribed)

Similar Threads

  1. Remove 'name' CVar callback?
    By sethxi in forum Counter-Strike 2 Coding & Resources
    Replies: 2
    Last Post: 10-11-2015, 08:30 AM
  2. [Release] Interprocess Callback Class
    By .::SCHiM::. in forum C++/C Programming
    Replies: 2
    Last Post: 02-17-2012, 03:08 PM
  3. [Share] So TLS Callback
    By why06 in forum Coders Lounge
    Replies: 3
    Last Post: 03-10-2011, 02:24 PM