DkmProcess.SearchRuntimeFunctionTable(UInt64, UInt64) Method
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
The method will return the contents of the IMAGE_RUNTIME_FUNCTION_ENTRY for an address if possible. For searching static entries, callers should call the equivalent method on DkmNativeModuleInstance.
public:
System::Collections::ObjectModel::ReadOnlyCollection<System::Byte> ^ SearchRuntimeFunctionTable(System::UInt64 Address, [Runtime::InteropServices::Out] System::UInt64 % BaseAddress);public System.Collections.ObjectModel.ReadOnlyCollection<byte> SearchRuntimeFunctionTable (ulong Address, out ulong BaseAddress);member this.SearchRuntimeFunctionTable : uint64 * uint64 -> System.Collections.ObjectModel.ReadOnlyCollection<byte>Public Function SearchRuntimeFunctionTable (Address As ULong, ByRef BaseAddress As ULong) As ReadOnlyCollection(Of Byte)Parameters
- Address
- UInt64
[In] The virtual address for which to find a function table entry for.
- BaseAddress
- UInt64
[Out] The base address for the runtime function table entry.
Returns
[Out,Optional] The runtime function table entry for this address if found.