Hi,

I am using PSSetLoadImageNotifyRoutine() function to
notify the loading of an image from in kernel mode. After
getting the notification, the kernel mode sets a event
object, In User mode, the program waits for the event
object to be signaled. After the event object is signaled,
the user mode program uses DeviceIOControl() function to
get the information about Loaded image. The loaded image
name comes as a PUNICODE_STRING in the kernel mode call
back function. When I use the same data type in the user
mode program, I am able to get only the address value of
the loaded image. How can I get the name of the loaded
image in the user mode?