Description: IRP began as an entity called I/O Manager function to create it, you can use any of the following function to create IRP: IoBuildAsynchronousFsdRequest create an asynchronous IRP (without waiting for its completion.) The function and one function only for the next to create certain types of IRP. IoBuildSynchronousFsdRequest create a synchronous IRP (need to wait for its completion.) IoBuildDeviceIoControlRequest create a synchronization IRP_MJ_DEVICE_CONTROL or IRP_MJ_INTERNAL_DEVICE_CONTROL requests. IoAllocateIrp create the above three functions are not supported by other types of IRP. From this we know, the first starting block approach to clear, and that is the creation of IRP HOOK these functions.
To Search:
File list (Check if you may need any files):
IRP hook.doc
Download