pfnAcRedirTraceForked function

Callback that is invoked when a path is forked; for example, when an existing file is opened for write and must be copied to the virtual store.

Syntax

VOID pfnAcRedirTraceForked(
  _In_     ACREDIR_REDIRECT_TYPE redirectType,
  _In_     PVOID                 callerAddress,
  _In_     LPCWSTR               apiName,
  _In_opt_ LPCWSTR               path,
  _In_opt_ LPCWSTR               newFileName,
  _In_     LONG_PTR              result
);

Parameters

• redirectType [in]
  A type of operation. Can be ACREDIR_REDIRECT_TYPE_FILE for files, or ACREDIR_REDIRECT_TYPE_REGISTRY for registry operations.

• callerAddress [in]
  The address of the function that called the API. Can be used to determine the calling module.

• apiName [in]
  A string that specifies the name of the API; for example, RegOpenKeyA() or CreateFileW().

• path [in, optional]
  The original path that was passed to the API. Can be NULL.

• newFileName [in, optional]
  The redirected path. Can be NULL.

• result [in]
  The result of the API call, cast to a LONG_PTR. The actual type depends on the API that was called. For example, some Win32 APIs return a DWORD error code, and other APIs return a BOOL.

Return value

No return value.

Requirements

See also

AcRedirNotify