KernAllocateContextHook: Difference between revisions
No edit summary |
No edit summary |
||
| Line 8: | Line 8: | ||
;flags:unused, set to 0. | ;flags:unused, set to 0. | ||
;pHook:The pointer to an ULONG where the hook handle is returned. | ;pHook:The pointer to an ULONG where the hook handle is returned. | ||
Prototype of 32-bit handler function: | |||
APIRET APIENTRY fHandler(ULONG data); | |||
==Comments== | ==Comments== | ||
Revision as of 01:48, 6 December 2020
Allocate a new Context hook for use with KernArmHook.
Synopsis
APIRET APIENTRY KernAllocateContextHook(PVOID pfHandler,ULONG flags, PULONG pHook);
Parameters
- pfHandler
- This is the address of the hook handler. This is likely a pointer to a 32 bit function.
- flags
- unused, set to 0.
- pHook
- The pointer to an ULONG where the hook handle is returned.
Prototype of 32-bit handler function: APIRET APIENTRY fHandler(ULONG data);
Comments
See comments for KernArmHook.