From 3ba72ddeeddfb31188fb8248c7c0302fc99e15ac Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Benjamin=20H=C3=B6glinger-Stelzer?= Date: Sat, 17 Jun 2023 20:15:50 +0200 Subject: [PATCH] Typo fix --- Snippets/WDM/GetProcAddress.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Snippets/WDM/GetProcAddress.md b/Snippets/WDM/GetProcAddress.md index f5d753e..f68976b 100644 --- a/Snippets/WDM/GetProcAddress.md +++ b/Snippets/WDM/GetProcAddress.md @@ -82,7 +82,7 @@ _Success_(return == STATUS_SUCCESS) _Must_inspect_result_ _IRQL_requires_max_(PASSIVE_LEVEL) NTSTATUS -FundExportedFunctionAddress( +FindExportedFunctionAddress( _In_ PVOID ModuleBase, _In_ STRING FunctionName, _Inout_ PVOID* FunctionAddress @@ -183,7 +183,7 @@ _Success_(return == STATUS_SUCCESS) _Must_inspect_result_ _IRQL_requires_max_(PASSIVE_LEVEL) NTSTATUS -FundExportedFunctionAddress( +FindExportedFunctionAddress( _In_ PVOID ModuleBase, _In_ STRING FunctionName, _Inout_ PVOID* FunctionAddress @@ -259,7 +259,7 @@ PVOID driverBaseAddress = NULL, functionAddress = NULL; if (NT_SUCCESS(FindDriverBaseAddress(targetModuleName, &driverBaseAddress))) { - if (NT_SUCCESS(FundExportedFunctionAddress(driverBaseAddress, functionName, &functionAddress))) + if (NT_SUCCESS(FindExportedFunctionAddress(driverBaseAddress, functionName, &functionAddress))) { // Found imp_WppRecorderReplay, you can now safely call "functionAddress" }