MCPcopy Create free account
hub / github.com/rabbitstack/fibratus / IsParamOfFunc

Function IsParamOfFunc

pkg/util/threadcontext/context.go:102–104  ·  view source on GitHub ↗

IsParamOfFunc returns true if the CONTEXT structure is supplied as a single parameter to the well-known API functions.

(f string)

Source from the content-addressed store, hash-verified

100// structure is supplied as a single parameter
101// to the well-known API functions.
102func IsParamOfFunc(f string) bool {
103 return f == "NtContinue" || f == "ZwContinue" || f == "RtlCaptureContext"
104}

Callers 2

processCallstackMethod · 0.92
TestIsParamOfFuncFunction · 0.85

Calls

no outgoing calls

Tested by 1

TestIsParamOfFuncFunction · 0.68