Function main

codes/Processes and Jobs/PEB_walker.cpp:28–59

} MY_LDR_DATA_TABLE_ENTRY, * PMY_LDR_DATA_TABLE_ENTRY;

int main()
{
	// Fetching PEB Address
	PPEB PEB_Address = (PPEB) __readgsqword( 0x60 );

	// Fetching PEB_LDR_DATA Structure Address
	PMY_PEB_LDR_DATA P_Ldr = (PMY_PEB_LDR_DATA) PEB_Address->Ldr;

	// Getting the 1st InLoadOrderModuleList Entry
	PLIST_ENTRY P_NextModule = P_Ldr->InLoadOrderModuleList.Flink;

	// parse it to LDR_DATA_TABLE_ENTRY structure 
	PMY_LDR_DATA_TABLE_ENTRY P_DataTableEntry = (PMY_LDR_DATA_TABLE_ENTRY) P_NextModule;

	while (P_DataTableEntry->DllBase != NULL)
	{
		// Fetch module base address
		PVOID P_ModuleBase = P_DataTableEntry->DllBase;

		// Fetch module name
		UNICODE_STRING BaseDllName = P_DataTableEntry->BaseDllName;

		// Printing the output
		printf("DLL Name : %ls\n", BaseDllName.Buffer);
		printf("DLL Base Address: %p\n", P_ModuleBase);
		printf("\n");

		// Load the next entry
		P_DataTableEntry = (PMY_LDR_DATA_TABLE_ENTRY) P_DataTableEntry->InLoadOrderLinks.Flink;
	}
	return 0;
}