vmread_sys_kmod

Function GetPeb

Source 
pub unsafe extern "C" fn GetPeb(
    ctx: *const WinCtx,
    process: *const WinProc,
) -> _PEB
Expand description

@brief Get the process environment block

@param ctx vmread context @param process target process

Note that there is no error checking in this function. Even though PEB should always exist, the returned data may be garbage

@return The environment block