KernAllocateContextHook: Difference between revisions
mNo edit summary |
No edit summary |
||
| (4 intermediate revisions by the same user not shown) | |||
| Line 2: | Line 2: | ||
==Synopsis== | ==Synopsis== | ||
APIRET APIENTRY KernAllocateContextHook(PVOID pfHandler,ULONG | APIRET APIENTRY KernAllocateContextHook(PVOID pfHandler,ULONG flags, PULONG pHook); | ||
==Parameters== | ==Parameters== | ||
;pfHandler:This is the address of the hook handler. | ;pfHandler:This is the address of the hook handler. Pointer to a 32 bit-function. | ||
; | ;flags:unused, set to 0. | ||
;pHook:The pointer to an ULONG where the hook handle is returned. | ;pHook:The pointer to an ULONG where the hook handle is returned. | ||
Prototype of 32-bit handler function: | |||
VOID APIENTRY fHandler(ULONG data); | |||
==Comments== | ==Comments== | ||
Latest revision as of 01:50, 6 December 2020
Allocate a new Context hook for use with KernArmHook.
Synopsis
APIRET APIENTRY KernAllocateContextHook(PVOID pfHandler,ULONG flags, PULONG pHook);
Parameters
- pfHandler
- This is the address of the hook handler. Pointer to a 32 bit-function.
- flags
- unused, set to 0.
- pHook
- The pointer to an ULONG where the hook handle is returned.
Prototype of 32-bit handler function: VOID APIENTRY fHandler(ULONG data);
Comments
See comments for KernArmHook.