The LocalHook type exposes the following members.
Installs a managed hook. After this you'll have to activate it by setting a proper ThreadACL.
If you want to immediately uninstall a hook, the only way is to dispose it. A disposed hook is guaranteed to never invoke your handler again but may still consume memory even for process life-time!
RIP relocation is disabled by default. If you want to enable it, just call this method which will attach a debugger to the current process. There may be circumstances under which this might fail and this is why it is not done by default. On 32-Bit system this method will always succeed and do nothing...
Ensures that each instance is always terminated with Dispose.(Overrides CriticalFinalizerObjectFinalize.)
Serves as a hash function for a particular type.(Inherited from Object.)
Reads the kernel object name for a given windows usermode handle. Executes in approx. 100 micro secounds.
Will return the address for a given DLL export symbol. The specified module has to be loaded into the current process space and also export the given method.
Will return a delegate for a given DLL export symbol. The specified module has to be loaded into the current process space and also export the given method.
Tries to get the underlying process ID for a given handle.
Tries to get the underlying thread ID for a given handle.
Gets the Type of the current instance.(Inherited from Object.)
Checks whether a given thread ID will be intercepted by the underlying hook.
Creates a shallow copy of the current Object.(Inherited from Object.)
Processes any pending hook removals. Warning! This method can be quite slow (1 second) under certain circumstances.
Returns a string that represents the current object.(Inherited from Object.)