Jump to content

KernAllocateContextHook: Difference between revisions

From EDM2
Ak120 (talk | contribs)
mNo edit summary
Erdmann (talk | contribs)
No edit summary
Line 2: Line 2:


==Synopsis==
==Synopsis==
  APIRET APIENTRY KernAllocateContextHook(PVOID pfHandler,ULONG dummy, PULONG pHook);
  APIRET APIENTRY KernAllocateContextHook(PVOID pfHandler,ULONG Flags, PULONG pHook);


==Parameters==
==Parameters==
;pfHandler:This is the address of the hook handler. This is likely a pointer to a 32 bit function.
;pfHandler:This is the address of the hook handler. This is likely a pointer to a 32 bit function.
;dummy:I don't know why this is there, it is never accessed in the code.
;Flags:unused, set to 0.
;pHook:The pointer to an ULONG where the hook handle is returned.
;pHook:The pointer to an ULONG where the hook handle is returned.



Revision as of 01:46, 6 December 2020

Allocate a new Context hook for use with KernArmHook.

Synopsis

APIRET APIENTRY KernAllocateContextHook(PVOID pfHandler,ULONG Flags, PULONG pHook);

Parameters

pfHandler
This is the address of the hook handler. This is likely a pointer to a 32 bit function.
Flags
unused, set to 0.
pHook
The pointer to an ULONG where the hook handle is returned.

Comments

See comments for KernArmHook.