PsRemoveLoadImageNotifyRoutine - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// ntddk.h
NTSTATUS PsRemoveLoadImageNotifyRoutine(
[in] PLOAD_IMAGE_NOTIFY_ROUTINE NotifyRoutine
);
View the official Windows Driver Kit DDI referenceNo description available.
The PsRemoveLoadImageNotifyRoutine routine removes a callback routine that was registered by the PsSetLoadImageNotifyRoutine routine.
NotifyRoutine [in]Pointer to the callback routine that the driver has previously registered through PsSetLoadImageNotifyRoutine.
PsRemoveLoadImageNotifyRoutine returns STATUS_SUCCESS if it successfully removes the callback routine, or STATUS_PROCEDURE_NOT_FOUND if the value of NotifyRoutine does not match any registered callback routine.
If the driver's callback routine is currently running, PsRemoveLoadImageNotifyRoutine waits until the callback routine exits before removing it. Therefore, the callback routine itself must not call PsRemoveLoadImageNotifyRoutine.