PVOID EngFindImageProcAddress(
HANDLE hModule, | |
LPSTR lpProcName | |
); |
EngFindImageProcAddress returns the address of a function within an executable module.
Parameters
hModule
Handle to the image in which the function can be found. This handle was obtained by calling EngLoadImage.
lpProcName
Pointer to the string that specifies the name of the function to be located.
Return Value
EngFindImageProcAddress returns the base address of the function’s executable code if it successfully locates the function. Otherwise, it returns null.
Comments
A driver must previously have loaded the image into kernel-mode through a call to EngLoadImage.
The function identified by lpProcName must be exported by the loaded module. This is accomplished by using the EXPORTS key in the module’s .DEF file.