Function_IRPMonDllDriverHooksEnumerate - MartinDrab/IRPMon GitHub Wiki
IRPMonDllDriverHooksEnumerate function
Summary
Retrieves information about drivers and devices hooked by the IRPMon driver.
Individual drivers and their devices are identified by their addresses, and names.
Definition
void cdecl IRPMonDllDriverHooksEnumerate(
_HOOKED_DRIVER_UMINFO** HookedDrivers,
long System.UInt32 *Count
);
Parameters
HookedDrivers
Address of variable that receives an array of HOOKED_DRIVER_UMINFO structures. Each structure represents one driver monitored by IRPMonand includes also information about its hooked devices.
Count
Address of variable that receives number of structures in the HookedDrivers array.
Return Value
Value | Description |
---|---|
ERROR_SUCCESS | The operation completed successfully. |
ERROR_NOT_ENOUGH_MEMORY | There is not enough available free memory to perform the operation. |
Remarks
When the caller no longer needs the retrieved information, it must free it by calling the IRPMonDllDriverHooksFree procedure.
See also
Requirements
Header | irpmondll.h |
Library | irpmondll.lib |
DLL | irpmondll.dll |