PEB LDR DATA
Jump to navigation
Jump to search
You are here | PEB_LDR_DATA
|
Description
The PEB_LDR_DATA structure is a structure that contains information about all of the loaded modules in the current process.
Structure
typedef struct _PEB_LDR_DATA { 0x00 ULONG Length; /* Size of structure, used by ntdll.dll as structure version ID */ 0x04 BOOLEAN Initialized; /* If set, loader data section for current process is initialized */ 0x08 PVOID SsHandle; 0x0c LIST_ENTRY InLoadOrderModuleList; /* Pointer to LDR_DATA_TABLE_ENTRY structure. Previous and next module in load order */ 0x14 LIST_ENTRY InMemoryOrderModuleList; /* Pointer to LDR_DATA_TABLE_ENTRY structure. Previous and next module in memory placement order */ 0x1c LIST_ENTRY InInitializationOrderModuleList; /* Pointer to LDR_DATA_TABLE_ENTRY structure. Previous and next module in initialization order */ } PEB_LDR_DATA,*PPEB_LDR_DATA; // +0x24