Results 1 to 2 of 2
  1. #1
    illinkerptdll's Avatar
    Join Date
    Jan 2019
    Gender
    male
    Posts
    3
    Reputation
    10
    Thanks
    0

    PLOAD_IMAGE_NOTIFY_ROUTINE Callback

    PLOAD_IMAGE_NOTIFY_ROUTINE can be used to help in get the driver image in kernel mode to hook the driver then?

  2. #2
    aimer1337's Avatar
    Join Date
    Apr 2019
    Gender
    male
    Posts
    4
    Reputation
    10
    Thanks
    1
    There is no need to use image notification callbacks, if you want to get the driver object of another driver you can use ObReferenceObjectByName, or you can ObOpenObject then ObReferenceObjectByHandle.

Similar Threads

  1. Remove 'name' CVar callback?
    By sethxi in forum Counter Strike: Global Offensive Coding & Resources
    Replies: 2
    Last Post: 10-11-2015, 08:30 AM
  2. [Release] Interprocess Callback Class
    By .::SCHiM::. in forum C++/C Programming
    Replies: 2
    Last Post: 02-17-2012, 03:08 PM
  3. [Share] So TLS Callback
    By why06 in forum Coders Lounge
    Replies: 3
    Last Post: 03-10-2011, 02:24 PM