RtlLookupFunctionTable
VOID *__stdcall RtlLookupFunctionTable(VOID *ControlPc, VOID **ImageBase, UINT64 *SizeOfTable){
VOID *result;
_INVERTED_FUNCTION_TABLE_ENTRY FunctionTableInfo;
memset(&FunctionTableInfo, 0, sizeof(FunctionTableInfo));
if( ControlPc < *(&byte_140E00020 + 1)
|| ControlPc >= (char *)*(&byte_140E00020 + 1) + *((unsigned int *)&byte_140E00020 + 4) )
{
result = RtlpxLookupFunctionTable(ControlPc, &FunctionTableInfo);
}
else
{
result = byte_140E00020;
FunctionTableInfo = *(_INVERTED_FUNCTION_TABLE_ENTRY *)&byte_140E00020;
}
if( result )
{
*ImageBase = FunctionTableInfo.ImageBase;
*(_DWORD *)SizeOfTable = FunctionTableInfo.SizeOfTable;
}
return result;
}Referenced by:
CcInitializeBcbProfiler