Geoff Chappell, Software Analyst
The CsrAllocateCapturePointer function obtains space in a capture buffer such that the allocated space is pointed to from within the capture buffer.
ULONG CsrAllocateCapturePointer ( PVOID CaptureBuffer, ULONG Size, PVOID *Pointer);
The CaptureBuffer argument is the address of a capture buffer, as obtained from calling CsrAllocateCaptureBuffer.
The Size argument tells how many bytes are required from free space in the capture buffer.
The Pointer argument is the address of a variable that is to receive a pointer to the allocated space. The intention is that this variable is in space that is already obtained in the capture buffer.
The function returns the size in bytes that has been obtained for the message, else it returns zero for failure.
The CsrAllocateCapturePointer function is exported by name from NTDLL.DLL in versions 3.10 to 4.0.
The CsrAllocateCapturePointer function is not documented. Neither is Microsoft known to have disclosed a C-language declaration in any header from any publicly released kit for software development.