#ifndef _NTLDR_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)

// rev
/**
 * The LdrGetDllHandleByMapping routine retrieves a module handle for an image that is already loaded in the calling process, identified by base address.
 *
 * \param BaseAddress The base address of a mapped image (image or datafile view).
 * \param DllHandle Receives the module handle corresponding to the base address.
 * \return NTSTATUS Successful or errant status.
 */
NTSYSAPI
NTSTATUS
NTAPI
LdrGetDllHandleByMapping(
    _In_ PVOID BaseAddress,
    _Out_ PVOID *DllHandle
    );

#endif
#endif
View code on GitHub