MCPcopy Create free account
hub / github.com/Velocidex/WinPmem / KernelGetModuleBaseByPtr

Function KernelGetModuleBaseByPtr

src/kd.c:23–97  ·  view source on GitHub ↗

Rather default queryinfo routine., requires passive level.

Source from the content-addressed store, hash-verified

source not stored for this graph (policy: none)

Callers 1

DriverEntryFunction · 0.85

Calls

no outgoing calls

Tested by

no test coverage detected

Used in the wild real call sites across dependent graphs

searching dependent graphs…