Undocumented functions of NTDLL

2OOO, 18 October


RtlImageNtHeader
RtlImageNtHeader

NTSYSAPI 
PIMAGE_NT_HEADERS
NTAPI

RtlImageNtHeader(
IN PVOID ModuleAddress );


ModuleAddress

Is module base address in process virtual memory, known as HMODULE.


Return value

Is pointer to IMAGE_NT_HEADERS structure.



Requirements:
Library: ntdll.lib




See also:
LdrGetDllHandle
LdrLoadDll
RtlImageRvaToVa