Jump to content

KernAllocateContextHook

From EDM2
Revision as of 02:01, 9 March 2017 by Ak120 (talk | contribs)

Allocate a new Context hook for use with KernArmHook.

Synopsis

APIRET APIENTRY KernAllocateContextHook(PVOID pfHandler,ULONG dummy, PULONG pHook);

Parameters

pfHandler
This is the address of the hook handler. This is likely a pointer to a 32 bit function.
dummy
I don't know why this is there, it is never accessed in the code.
pHook
The pointer to an ULONG where the hook handle is returned.

Comments

See comments for KernArmHook.