Skip to content

Instantly share code, notes, and snippets.

@swwwolf
Last active June 20, 2022 15:58
Show Gist options
  • Save swwwolf/a221e5fcf18403106680 to your computer and use it in GitHub Desktop.
Save swwwolf/a221e5fcf18403106680 to your computer and use it in GitHub Desktop.
NTSTATUS SetLoadImageNotifyRoutine(IN PLOAD_IMAGE_NOTIFY_ROUTINE Routine) {
PAGED_CODE();
if ( !Routine )
return STATUS_INVALID_PARAMETER;
return PsSetLoadImageNotifyRoutine( Routine );
}
VOID LoadImageNotifyRoutine(IN PUNICODE_STRING FullImageName, IN HANDLE ProcessId, IN PIMAGE_INFO ImageInfo) {
PAGED_CODE();
KdPrint(("LoadImageNotifyRoutine called with FullImageName = %wZ, ProcessId = 0x%08X\n", FullImageName, ProcessId));
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment