Method GetLoadedModules

Process/Process.cpp:733–773

GetLoadedModules - returns a vector * representing a set of loaded modules in the current process returns nullptr on failure */

    returns nullptr on failure
*/
std::vector<ProcessData::MODULE_DATA> Process::GetLoadedModules()
{

#ifdef _M_IX86
    MYPEB* peb = (MYPEB*)__readfsdword(0x30);
#else
    MYPEB* peb = (MYPEB*)__readgsqword(0x60);
#endif

    uintptr_t kernel32Base = 0;

    LIST_ENTRY* current_record = NULL;
    LIST_ENTRY* start = &(peb->Ldr->InLoadOrderModuleList);

    current_record = start->Flink;

    std::vector<ProcessData::MODULE_DATA> moduleList;

    while (true)
    {
        MY_LDR_DATA_TABLE_ENTRY* module_entry = (MY_LDR_DATA_TABLE_ENTRY*)CONTAINING_RECORD(current_record, MY_LDR_DATA_TABLE_ENTRY, InLoadOrderLinks);
        ProcessData::MODULE_DATA module;

        module.name =  wstring(module_entry->FullDllName.Buffer);
        module.baseName = wstring(module_entry->BaseDllName.Buffer);

        module.hModule = (HMODULE)module_entry->DllBase;
        module.dllInfo.lpBaseOfDll = module_entry->DllBase;
        module.dllInfo.SizeOfImage = module_entry->SizeOfImage;
        moduleList.push_back(module);

        current_record = current_record->Flink;

        if (current_record == start)
        {
            break;
        }
    }

    return moduleList;
}

/*
    GetModuleInfo - returns a ProcessData::MODULE_DATA* representing the module given `name`.