Function_IRPMonDllOpenHookedDriver

IRPMonDllOpenHookedDriver function

Summary

Open a handle to a given driver monitored by the IRPMon driver.

Definition

void cdecl IRPMonDllOpenHookedDriver(
    System.Void* ObjectId,
    System.Void** Handle
   );

Parameters

ObjectId

ID of the target driver. IDs can be obtained from the 'ObjectId' member of the HOOKED_DRIVER_UMINFO structure retrieved by the IRPMonDllDriverHooksEnumerate function.

Handle

Address of variable that receives the newly opened handle. The handle can be then used to control the hooked driver.

Return Value

Value	Description
ERROR_SUCCESS	The handle has been successfully created.
Other	An error occurred

Remarks

When no longer needed, the handle should be closed via the IRPMonDllCloseHookedDriverHandle function. Alternatively, the IRPMonDllUnhookDriver routine may also be used to close the handle, however, it also unhooks the driver represented by the handle.

See also

• HOOKED_DRIVER_UMINFO
• IRPMonDllCloseHookedDriverHandle
• IRPMonDllDriverHooksEnumerate
• IRPMonDllUnhookDriver

Requirements

Header	irpmondll.h
Library	irpmondll.lib
DLL	irpmondll.dll