Undocumented functions of NTDLL

2OOO, 18 October


RtlImageNtHeader
RtlImageNtHeader

NTSYSAPI 
PIMAGE_NT_HEADERS
NTAPI

RtlImageNtHeader(
IN PVOID ModuleAddress );


ModuleAddress


Is module base address in process virtual memory, known as HMODULE.

Return value


Is pointer to IMAGE_NT_HEADERS structure.



Requirements:
Library: ntdll.lib




See also:
LdrGetDllHandle
LdrLoadDll
RtlImageRvaToVa