IDkmFunctionTableProvider.SearchRuntimeFunctionTable Method
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
The method will return the contents of the IMAGE_RUNTIME_FUNCTION_ENTRY for an address if possible. For searching static entries, callers should call the equivalent method on DkmNativeModuleInstance.
public:
System::Collections::ObjectModel::ReadOnlyCollection<System::Byte> ^ SearchRuntimeFunctionTable(Microsoft::VisualStudio::Debugger::DkmProcess ^ process, System::UInt64 address, [Runtime::InteropServices::Out] System::UInt64 % baseAddress);public System.Collections.ObjectModel.ReadOnlyCollection<byte> SearchRuntimeFunctionTable (Microsoft.VisualStudio.Debugger.DkmProcess process, ulong address, out ulong baseAddress);abstract member SearchRuntimeFunctionTable : Microsoft.VisualStudio.Debugger.DkmProcess * uint64 * uint64 -> System.Collections.ObjectModel.ReadOnlyCollection<byte>Public Function SearchRuntimeFunctionTable (process As DkmProcess, address As ULong, ByRef baseAddress As ULong) As ReadOnlyCollection(Of Byte)Parameters
- process
- DkmProcess
[In] DkmProcess represents a target process which is being debugged. The debugger debugs processes, so this is the basic unit of debugging. A DkmProcess can represent a system process or a virtual process such as minidumps.
- address
- UInt64
[In] The virtual address for which to find a function table entry for.
- baseAddress
- UInt64
[Out] The base address for the runtime function table entry.
Returns
[Out,Optional] The runtime function table entry for this address if found.