Method GetModuleHandle_Ldr

Process/Process.cpp:831–864

GetModuleHandle_Ldr - returns base address of a module as HMODULE type returns NULL on failure */

    returns NULL on failure
*/
HMODULE Process::GetModuleHandle_Ldr(__in const  wchar_t* moduleName)
{
#ifdef _M_IX86
    MYPEB* peb = (MYPEB*)__readfsdword(0x30);
#else
    MYPEB* peb = (MYPEB*)__readgsqword(0x60);
#endif

    uintptr_t kernel32Base = 0;

    LIST_ENTRY* current_record = NULL;
    LIST_ENTRY* start = &(peb->Ldr->InLoadOrderModuleList);

    current_record = start->Flink;

    while (true)
    {
        MY_LDR_DATA_TABLE_ENTRY* module_entry = (MY_LDR_DATA_TABLE_ENTRY*)CONTAINING_RECORD(current_record, MY_LDR_DATA_TABLE_ENTRY, InLoadOrderLinks);

        current_record = current_record->Flink;

        if (wcsstr(module_entry->FullDllName.Buffer, moduleName) != NULL)
        {
            return (HMODULE)module_entry->DllBase;
        }

        if (current_record == start)
        {
            return (HMODULE)NULL;
        }
    }

    return (HMODULE)NULL;
}

DWORD Process::GetSectionSize(__in const HMODULE hModule, __in const std::string section)
{