_RTL_PROCESS_MODULE_INFORMATION

最新推荐文章于 2021-12-22 17:37:01 发布

denggengwen3333

最新推荐文章于 2021-12-22 17:37:01 发布

阅读量432

点赞数

原文链接：http://www.cnblogs.com/ymzh1/p/9408222.html

版权

typedef struct _RTL_PROCESS_MODULE_INFORMATION {
HANDLE Section; // Not filled in
PVOID MappedBase;
PVOID ImageBase;
ULONG ImageSize;
ULONG Flags;
USHORT LoadOrderIndex;
USHORT InitOrderIndex;
USHORT LoadCount;
USHORT OffsetToFileName;
UCHAR FullPathName[256];
} RTL_PROCESS_MODULE_INFORMATION, *PRTL_PROCESS_MODULE_INFORMATION;

typedef struct _RTL_PROCESS_MODULES {
ULONG NumberOfModules;
RTL_PROCESS_MODULE_INFORMATION Modules[1];
} RTL_PROCESS_MODULES, *PRTL_PROCESS_MODULES;

转载于:https://www.cnblogs.com/ymzh1/p/9408222.html