KernAllocateContextHook: Difference between revisions
No edit summary |
No edit summary |
||
| Line 10: | Line 10: | ||
Prototype of 32-bit handler function: | Prototype of 32-bit handler function: | ||
VOID APIENTRY fHandler(ULONG data); | |||
==Comments== | ==Comments== | ||
Revision as of 01:50, 6 December 2020
Allocate a new Context hook for use with KernArmHook.
Synopsis
APIRET APIENTRY KernAllocateContextHook(PVOID pfHandler,ULONG flags, PULONG pHook);
Parameters
- pfHandler
- This is the address of the hook handler. This is likely a pointer to a 32 bit function.
- flags
- unused, set to 0.
- pHook
- The pointer to an ULONG where the hook handle is returned.
Prototype of 32-bit handler function: VOID APIENTRY fHandler(ULONG data);
Comments
See comments for KernArmHook.