Udostępnij za pośrednictwem


DkmProcess.SearchRuntimeFunctionTable(UInt64, UInt64) Method

Definition

The method will return the contents of the IMAGE_RUNTIME_FUNCTION_ENTRY for an address if possible. For searching static entries, callers should call the equivalent method on DkmNativeModuleInstance.

public:
 System::Collections::ObjectModel::ReadOnlyCollection<System::Byte> ^ SearchRuntimeFunctionTable(System::UInt64 Address, [Runtime::InteropServices::Out] System::UInt64 % BaseAddress);
public System.Collections.ObjectModel.ReadOnlyCollection<byte> SearchRuntimeFunctionTable (ulong Address, out ulong BaseAddress);
public System.Collections.ObjectModel.ReadOnlyCollection<byte>? SearchRuntimeFunctionTable (ulong Address, out ulong BaseAddress);
member this.SearchRuntimeFunctionTable : uint64 * uint64 -> System.Collections.ObjectModel.ReadOnlyCollection<byte>
Public Function SearchRuntimeFunctionTable (Address As ULong, ByRef BaseAddress As ULong) As ReadOnlyCollection(Of Byte)

Parameters

Address
UInt64

[In] The virtual address for which to find a function table entry for.

BaseAddress
UInt64

[Out] The base address for the runtime function table entry.

Returns

[Out,Optional] The runtime function table entry for this address if found.

Applies to