GetFieldValue - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// wdbgexts.h
void GetFieldValue(
Addr,
Type,
Field,
OutValue
);
View the official Windows Driver Kit DDI referenceNo description available.
The GetFieldValue macro is a thin wrapper around the GetFieldData function. It is provided as a convenience for reading the value of a member in a structure.
AddrSpecifies the address of the structure in the target's memory.
TypeSpecifies the name of the type of the structure. This can be qualified with a module name, for example, mymodule!mystruct.
FieldSpecifies the name of the member in the structure. Submembers can be specified by using a period-separated path, for example, "myfield.mysubfield".
OutValueSpecifies the object into which the member's value is read.
The parameters provided to this macro are the same as those provided to the GetFieldData function except that instead of providing a pointer to a buffer and its size, the variable to hold the returned value can be provided directly.
If the function succeeds, the return value is zero. Otherwise, the return value is one of the IG_DUMP_SYMBOL_INFO error code.