I have a kernel driver. My dll inside process(injected dll) send IRP request to this driver. How this driver could get this module handle?
Something like IoGetRequestorProcess(Irp)
but module handle instead of process.
Asked
Active
Viewed 289 times
0

Roman
- 1,377
- 2
- 11
- 12
-
@KeithMiller nothing, i didn't find something about it. – Roman Oct 10 '12 at 17:54
-
Don't think you will able to find out which function (dll API) sent an IRP. – Rohan Oct 11 '12 at 04:46