typedef struct _LOADED_IMAGE {
LPSTR ModuleName;
HANDLE hFile;
PUCHAR MappedAddress;
PIMAGE_NT_HEADERS FileHeader;
PIMAGE_SECTION_HEADER LastRvaSection;
ULONG NumberOfSections;
PIMAGE_SECTION_HEADER Sections;
ULONG Characteristics;
BOOLEAN fSystemImage;
BOOLEAN fDOSImage;
LIST_ENTRY Links;
ULONG SizeOfImage;
} LOADED_IMAGE, *PLOADED_IMAGE;
Members
ModuleName
The filename of the mapped file.
hFile
The open handle for the mapped file.
MappedAddress
The base address of the mapped file.
FileHeader
A pointer to the NT headers.
LastRvaSection
A pointer to the first COFF section header.
NumberOfSections
The count of the COFF section headers.
Sections
A pointer to the first COFF section header.
Characteristics
The image characteristics value.
fSystemImage
This value is TRUE if the image is a kernel mode executable image.
fDOSImage
This value is TRUE if the image is a 16-bit executable image.
Links
The list of loaded images.
SizeOfImage
The size of the image.