| 80 | } |
| 81 | |
| 82 | std::unique_ptr<SymbolInfo> SymbolHelper::GetSymbolFromAddress(DWORD64 address, PDWORD64 offset) { |
| 83 | auto symbol = _kernel.GetSymbolFromAddress(address, offset); |
| 84 | if (symbol != nullptr) |
| 85 | return symbol; |
| 86 | |
| 87 | return _win32k.GetSymbolFromAddress(address, offset); |
| 88 | } |
| 89 | |
| 90 | // https://blog.csdn.net/xiaoxinjiang/article/details/7013488 |
| 91 | ULONG64 SymbolHelper::GetKernelSymbolAddressFromName(PCSTR name) { |
no outgoing calls
no test coverage detected