[][src]Function vmread_sys_kmod::GetNTHeader

pub unsafe extern "C" fn GetNTHeader(
    ctx: *const WinCtx,
    process: *const WinProc,
    address: u64,
    header: *mut u8,
    is64Bit: *mut u8
) -> *mut _IMAGE_NT_HEADERS64

@brief Get the NT header of a module

@param ctx vmread context @param process target process @param address base address of the target module @param header buffer to read the header to @param is64Bit flag that returns if the module is 64-bit

header has to be at least one page long, and @is64Bit can not be NULL.

@return Pointer to the NT header, if it was found; otherwise @c NULL