KernAllocateContextHook

From EDM2
Jump to: navigation, search

Allocate a new Context hook for use with KernArmHook.

Synopsis

APIRET APIENTRY KernAllocateContextHook(PVOID pfHandler,ULONG flags, PULONG pHook);

Parameters

pfHandler
This is the address of the hook handler. Pointer to a 32 bit-function.
flags
unused, set to 0.
pHook
The pointer to an ULONG where the hook handle is returned.

Prototype of 32-bit handler function: VOID APIENTRY fHandler(ULONG data);

Comments

See comments for KernArmHook.