_WIN_UNEXPORTED_FUNCTION_PATTERN Struct Reference

Describes a pattern for a kernel function that is not exported. More...

#include <winguest.h>

Data Fields
CHAR	SectionHint [8]
	Optional section name hint. More...
PATTERN_SIGNATURE	Signature
	The pattern signature. More...
DETOUR_ARGS	Arguments

Detailed Description

Describes a pattern for a kernel function that is not exported.

Functions that are not exported can not be found by name, so we search them by a pattern

Definition at line 85 of file winguest.h.

Field Documentation

Arguments

DETOUR_ARGS _WIN_UNEXPORTED_FUNCTION_PATTERN::Arguments

Definition at line 93 of file winguest.h.

Referenced by IntCamiLoadWindows(), and IntWinApiFindFunctionRva().

SectionHint

CHAR _WIN_UNEXPORTED_FUNCTION_PATTERN::SectionHint[8]

Optional section name hint.

If not empty, will search in the given section

Definition at line 90 of file winguest.h.

Referenced by IntCamiLoadWindows(), IntWinAgentFindPropperSyscall(), IntWinAgentFindSyscallLinkage(), and IntWinInfHookGetEtwpDebuggerData().

Signature

PATTERN_SIGNATURE _WIN_UNEXPORTED_FUNCTION_PATTERN::Signature

The pattern signature.

Definition at line 92 of file winguest.h.

Referenced by IntCamiLoadWindows(), and IntWinAgentFindSyscallLinkage().

---

The documentation for this struct was generated from the following file:

• introcore/include/winguest.h