PEB_LDR_DATA structure
[This structure may be altered in future versions of Windows.]
Contains information about the loaded modules for the process.
Syntax
typedef struct _PEB_LDR_DATA { BYTE Reserved1[8]; PVOID Reserved2[3]; LIST_ENTRY InMemoryOrderModuleList; } PEB_LDR_DATA, *PPEB_LDR_DATA;
Members
- Reserved1
-
Reserved for internal use by the operating system.
- Reserved2
-
Reserved for internal use by the operating system.
- InMemoryOrderModuleList
-
The head of a doubly-linked list that contains the loaded modules for the process. Each item in the list is a pointer to an LDR_DATA_TABLE_ENTRY structure. For more information, see Remarks.
Remarks
The LIST_ENTRY structure is defined as follows:
typedef struct _LIST_ENTRY {
struct _LIST_ENTRY *Flink;
struct _LIST_ENTRY *Blink;
} LIST_ENTRY, *PLIST_ENTRY, *RESTRICTED_POINTER PRLIST_ENTRY;
The LDR_DATA_TABLE_ENTRY structure is defined as follows:
typedef struct _LDR_DATA_TABLE_ENTRY {
PVOID Reserved1[2];
LIST_ENTRY InMemoryOrderLinks;
PVOID Reserved2[2];
PVOID DllBase;
PVOID EntryPoint;
PVOID Reserved3;
UNICODE_STRING FullDllName;
BYTE Reserved4[8];
PVOID Reserved5[3];
union {
ULONG CheckSum;
PVOID Reserved6;
};
ULONG TimeDateStamp;
} LDR_DATA_TABLE_ENTRY, *PLDR_DATA_TABLE_ENTRY;
- InMemoryOrderLinks
-
A doubly-linked list of loaded modules.
- DllBase
-
The base address of the loaded DLL.
- EntryPoint
-
The DLL entry point specified in the PE headers.
Windows Server 2003 and Windows XP: The EntryPoint member is not supported. The Reserved3 member is defined as Reserved3[2].
- FullDllName
-
The full path of the DLL file.
- CheckSum
-
The checksum from the image header of the DLL.
- TimeDateStamp
-
The time at which the DLL was built.
Requirements
|
Minimum supported client |
Windows XP [desktop apps only] |
|---|---|
|
Minimum supported server |
Windows Server 2003 [desktop apps only] |
|
Header |
|
See also