Function_IRPMonDllDriverHooksEnumerate

IRPMonDllDriverHooksEnumerate function

Summary

Retrieves information about drivers and devices hooked by the IRPMon driver.

Individual drivers and their devices are identified by their addresses, and names.

Definition

void cdecl IRPMonDllDriverHooksEnumerate(
    _HOOKED_DRIVER_UMINFO** HookedDrivers,
    long System.UInt32 *Count
   );

Parameters

HookedDrivers

Address of variable that receives an array of HOOKED_DRIVER_UMINFO structures. Each structure represents one driver monitored by IRPMonand includes also information about its hooked devices.

Count

Address of variable that receives number of structures in the HookedDrivers array.

Return Value

Value	Description
ERROR_SUCCESS	The operation completed successfully.
ERROR_NOT_ENOUGH_MEMORY	There is not enough available free memory to perform the operation.

Remarks

When the caller no longer needs the retrieved information, it must free it by calling the IRPMonDllDriverHooksFree procedure.

See also

• HOOKED_DRIVER_UMINFO
• IRPMonDllDriverHooksFree

Requirements

Header	irpmondll.h
Library	irpmondll.lib
DLL	irpmondll.dll