IRPMonDllHookDeviceByAddress function

Summary

Starts monitoring events related to a given device, identified by its device object address.

Definition

void cdecl IRPMonDllHookDeviceByAddress(
    System.Void* DeviceObject,
    System.Void** HookHandle,
    System.Void** ObjectId
   );

Parameters

DeviceObject

Address of the device object to be monitored. It can be obtained from a snapshot of drivers and devices currently present in the system, retrieved by a call to the IRPMonDllSnapshotRetrieve function.

HookHandle

Address of variable that receives a handle representing the device being monitored.

ObjectId

Address of variable that receives globally unique ID of the target device object. This parameter is optional and can be NULL.

Return Value

Value	Description
ERROR_SUCCESS	The operation has succeeded. The device is now being monitored.
Other	An error occurred

Remarks

Before a call to this routine, the driver to which the device belongs must be hooked. Otherwise, the function fails. Drivers can be hooked by a call to the IRPMonDllHookDriver routine.

See also

• IRPMonDllHookDriver
• IRPMonDllSnapshotRetrieve

Requirements

Header	irpmondll.h
Library	irpmondll.lib
DLL	irpmondll.dll