[VB6] - Kernel mode driver.

[fafalone]

@The trick, thanks.

--
@xiaoyaio

Filter drivers that intercept i/o are a mainstay of driver development. You can look at the anti-malware examples in the WDK samples library for intercepting I/O with them (note: currently not working in tB; there's, I believe, an IAT issue with imports). You can do it in classic WDM too, with IRP_MJ_CREATE handling.

But you can actually mount ISO files. If you mount them in user mode, you can read/write in kernel mode.

You can also write your own ISO mounting driver; this is how it was done before Windows 8 introduced built in ISO support. ImDisk is an open source driver that mounts ISOs (not in BASIC, obviously).

In the future, MAKE YOUR OWN THREADS. You question is not related to The trick's driver example specifically, it's a general driver question that probably doesn't even belong on this forum unless it's VB-implementation specific.