[−][src]Function vmread_sys_kmod::GetNTHeader
pub unsafe extern "C" fn GetNTHeader(
ctx: *const WinCtx,
process: *const WinProc,
address: u64,
header: *mut u8,
is64Bit: *mut u8
) -> *mut _IMAGE_NT_HEADERS64
@brief Get the NT header of a module
@param ctx vmread context @param process target process @param address base address of the target module @param header buffer to read the header to @param is64Bit flag that returns if the module is 64-bit
header has to be at least one page long, and @is64Bit can not be NULL.
@return Pointer to the NT header, if it was found; otherwise @c NULL