Process Hacker Discussion Forum

Posts: 67
Joined: 02 Jul 2021 23:33

RtlGetExePath definition

04 Sep 2021 20:09

ntrtl.h shows RtlGetExePath as a function that takes no parameters and returns a pointer to a wide string.

Disassembly (of Win10 21H1) shows RtlGetExePath takes two parameters and returns an NTSTATUS.

Comments welcome.
User avatar
Posts: 1702
Joined: 17 Jan 2011 05:43

Re: RtlGetExePath definition

05 Sep 2021 07:34

Looks like it was changed in recent patches. Thanks, I've updated the type. :thumbup: