PsRemoveCreateThreadNotifyRoutine routine

The PsRemoveCreateThreadNotifyRoutine routine removes a callback routine that was registered by the PsSetCreateThreadNotifyRoutine routine.

Syntax


NTSTATUS PsRemoveCreateThreadNotifyRoutine(
  _In_ PCREATE_THREAD_NOTIFY_ROUTINE NotifyRoutine
);

Parameters

NotifyRoutine [in]

Pointer to the callback routine that the driver has previously registered through PsSetCreateThreadNotifyRoutine.

Return value

PsRemoveCreateThreadNotifyRoutine returns STATUS_SUCCESS if it successfully removes the callback routine, or STATUS_PROCEDURE_NOT_FOUND if the value of NotifyRoutine does not match any registered callback routine.

Remarks

If the driver's callback routine is currently running, PsRemoveCreateThreadNotifyRoutine waits until the callback routine exits before removing it. Therefore, the callback routine itself must not call PsRemoveCreateThreadNotifyRoutine.

Requirements

Target platform

Universal

Header

Ntddk.h (include Ntddk.h)

Library

NtosKrnl.lib

DLL

NtosKrnl.exe

IRQL

<=APC_LEVEL

See also

PsSetCreateThreadNotifyRoutine

 

 

Send comments about this topic to Microsoft

Show: