Function_IRPMonDllOpenHookedDriver

IRPMonDllOpenHookedDriver function

Summary

Open a handle to a given driver monitored by the IRPMon driver.

Definition

void cdecl IRPMonDllOpenHookedDriver(
    const long System.Void* ObjectId,
    const long System.Void** Handle
   );

Parameters

ObjectId

ID of the target driver. IDs can be obtained from the 'ObjectId' member of the HOOKED_DRIVER_UMINFO structure retrieved by the IRPMonDllDriverHooksEnumerate function.

Handle

Address of variable that receives the newly opened handle. The handle can be then used to control the hooked driver.

Return Value

| | Description ||---|---| | ERROR_SUCCESS | The handle has been successfully created. | | Other | An error occurred |

Remarks

When no longer needed, the handle should be closed via the IRPMonDllCloseHookedDriverHandle function. Alternatively, the IRPMonDllUnhookDriver routine may also be used to close the handle, however, it also unhooks the driver represented by the handle.

See also

• HOOKED_DRIVER_UMINFO
• IRPMonDllCloseHookedDriverHandle
• IRPMonDllDriverHooksEnumerate
• IRPMonDllUnhookDriver