def find_ntoskrnl(version_modules):
    for entry in version_modules:
        e_type = entry[0]
        if e_type == 'r':
            e_data = entry[1]
            if e_data['pdb'] in NT_KRNL_PDB:
                return (e_data['pdb'], e_data['guid'])
    raise RuntimeError('Cannot find {} with version_modules '
                       'plugin'.format(NT_KRNL_PDB))