Jump to content

KernAllocateContextHook: Difference between revisions

From EDM2
Ak120 (talk | contribs)
mNo edit summary
Ak120 (talk | contribs)
mNo edit summary
Line 1: Line 1:
Allocate a new Context hook for use with KernArmHook.
Allocate a new Context hook for use with ''KernArmHook''.


==Synopsis==
==Synopsis==
APIRET APIENTRY KernAllocateContextHook(PVOID pfHandler,ULONG dummy, PULONG pHook);
APIRET APIENTRY KernAllocateContextHook(PVOID pfHandler,ULONG dummy, PULONG pHook);


==Parameters==
==Parameters==
;pfHandler:This is the address of the hook handler. This is likely a pointer to a 32 bit function.
;pfHandler:This is the address of the hook handler. This is likely a pointer to a 32 bit function.
;dummy:I don't know why this is there, it is never accessed in the code.  
;dummy:I don't know why this is there, it is never accessed in the code.
;pHook:The pointer to an ULONG where the hook handle is returned.  
;pHook:The pointer to an ULONG where the hook handle is returned.


==Comments==
==Comments==

Revision as of 12:15, 19 July 2020

Allocate a new Context hook for use with KernArmHook.

Synopsis

APIRET APIENTRY KernAllocateContextHook(PVOID pfHandler,ULONG dummy, PULONG pHook);

Parameters

pfHandler
This is the address of the hook handler. This is likely a pointer to a 32 bit function.
dummy
I don't know why this is there, it is never accessed in the code.
pHook
The pointer to an ULONG where the hook handle is returned.

Comments

See comments for KernArmHook.