IFSMgr_RemoveFileSystemApiHook

IFSMgr_RemoveFileSystemApiHook(
 pIFSFileHookFunc HookFunc
 )
 

This service is called to remove a previously installed a file system API hook. This function will always succeed unless an invalid parameter is passed in. There is no situation in which a previously installed hook cannot be removed. However, hookers that provide basic functionality that the system depends upon should never unhook themselves until the system shuts down. Otherwise, the behavior of the entire system will be affected. However, the IFS manager does not do any explicit checking to prevent this case from happening.

HookFunc

Supplies the address of the hook function to be removed. This should the same as the function that was previously installed to hook the file system APIs.

• Returns 0 if the hook was successfully removed. Returns -1 if the hook was not removed. The only way this function can fail is if an invalid function address is passed in.