IDkmFunctionTableProvider Interface
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Interface to provide access to the runtime function table of a process. A default implementation is provided by Microsoft's Native Debug Monitor which is able to find function tables in loaded Win32 modules and dynamic PData in live processes. This interface may be implemented by base debug monitors to provide runtime function table access for non-live processes (ex: minidumps).
Implementations of this interface may restrict when they are called using a filter defined in their component configuration. The following properties may be used: BaseDebugMonitorId, EngineId, TransportKind.
public interface class IDkmFunctionTableProviderpublic interface class IDkmFunctionTableProvider__interface IDkmFunctionTableProviderpublic interface IDkmFunctionTableProvidertype IDkmFunctionTableProvider = interfacePublic Interface IDkmFunctionTableProviderMethods
| GetFunctionTableEntry(DkmNativeModuleInstance, UInt64) |
Obtain the function table entry for the passed address. The format of the engine is dependent on the debuggee architecture. |
| SearchRuntimeFunctionTable(DkmProcess, UInt64, UInt64) |
The method will return the contents of the IMAGE_RUNTIME_FUNCTION_ENTRY for an address if possible. For searching static entries, callers should call the equivalent method on DkmNativeModuleInstance. |