Edit

PsRemoveLoadImageNotifyRoutine function (ntddk.h)

  • Article

The PsRemoveLoadImageNotifyRoutine routine removes a callback routine that was registered by the PsSetLoadImageNotifyRoutine routine.

Syntax

NTSTATUS PsRemoveLoadImageNotifyRoutine(
  [in] PLOAD_IMAGE_NOTIFY_ROUTINE NotifyRoutine
);

Parameters

[in] NotifyRoutine

Pointer to the callback routine that the driver has previously registered through PsSetLoadImageNotifyRoutine.

Return value

PsRemoveLoadImageNotifyRoutine returns STATUS_SUCCESS if it successfully removes the callback routine, or STATUS_PROCEDURE_NOT_FOUND if the value of NotifyRoutine does not match any registered callback routine.

Remarks

If the driver's callback routine is currently running, PsRemoveLoadImageNotifyRoutine waits until the callback routine exits before removing it. Therefore, the callback routine itself must not call PsRemoveLoadImageNotifyRoutine.

Requirements

Requirement Value
Target Platform Universal
Header ntddk.h (include Ntddk.h)
Library NtosKrnl.lib
DLL NtosKrnl.exe
IRQL <=APC_LEVEL
DDI compliance rules HwStorPortProhibitedDDIs(storport), PowerIrpDDis(wdm)

See also

PsSetLoadImageNotifyRoutine