EngFindImageProcAddress

PVOID EngFindImageProcAddress(

HANDLE hModule,
LPSTR lpProcName
);

EngFindImageProcAddress returns the address of a function within an executable module.

Parameters

hModule

Handle to the image in which the function can be found. This handle was obtained by calling EngLoadImage.

lpProcName

Pointer to the string that specifies the name of the function to be located.

Return Value

EngFindImageProcAddress returns the base address of the function’s executable code if it successfully locates the function. Otherwise, it returns null.

Comments

A driver must previously have loaded the image into kernel-mode through a call to EngLoadImage.

The function identified by lpProcName must be exported by the loaded module. This is accomplished by using the EXPORTS key in the module’s .DEF file.