Jump to content

KernAllocateContextHook: Difference between revisions

From EDM2
Erdmann (talk | contribs)
No edit summary
Erdmann (talk | contribs)
No edit summary
 
Line 5: Line 5:


==Parameters==
==Parameters==
;pfHandler:This is the address of the hook handler. This is likely a pointer to a 32 bit function.
;pfHandler:This is the address of the hook handler. Pointer to a 32 bit-function.
;flags:unused, set to 0.
;flags:unused, set to 0.
;pHook:The pointer to an ULONG where the hook handle is returned.
;pHook:The pointer to an ULONG where the hook handle is returned.

Latest revision as of 01:50, 6 December 2020

Allocate a new Context hook for use with KernArmHook.

Synopsis

APIRET APIENTRY KernAllocateContextHook(PVOID pfHandler,ULONG flags, PULONG pHook);

Parameters

pfHandler
This is the address of the hook handler. Pointer to a 32 bit-function.
flags
unused, set to 0.
pHook
The pointer to an ULONG where the hook handle is returned.

Prototype of 32-bit handler function: VOID APIENTRY fHandler(ULONG data);

Comments

See comments for KernArmHook.