Jump to content

KernAllocateContextHook

From EDM2
Revision as of 01:50, 6 December 2020 by Erdmann (talk | contribs)

Allocate a new Context hook for use with KernArmHook.

Synopsis

APIRET APIENTRY KernAllocateContextHook(PVOID pfHandler,ULONG flags, PULONG pHook);

Parameters

pfHandler
This is the address of the hook handler. This is likely a pointer to a 32 bit function.
flags
unused, set to 0.
pHook
The pointer to an ULONG where the hook handle is returned.

Prototype of 32-bit handler function: VOID APIENTRY fHandler(ULONG data);

Comments

See comments for KernArmHook.