DetourEnumerateModules

Enumerate the PE binaries in a process.

Definition

HMODULE DetourEnumerateModules(
    _In_opt_ HMODULE hModuleLast
);

Parameters

hModuleLast: The handle of the last module enumerated. Pass NULL to start enumeration for the beginning of the process.

Return value

Handle to the next module loaded in a process, or NULL if the enumeration is complete.

Remarks

DetourEnumerateModules enumerates all of the PE binaries loaded into a process. Once a module has been enumerated, its entry point can be located with the DetourGetEntryPoint API, its exports can be enumerated with the DetourEnumerateExports API, and its payloads can be found using the DetourFindPayload API.

Disas, Einst, FindFunc, Tracebld, Tracelnk, Tracereg, Tryman,

Overview

Home
Frequently Asked Questions
Using Detours
Interception of Binary Functions
Payloads and DLL Import Editing
Detouring 32-bit and 64-bit Processes
Samples

API Reference

Detouring Target Functions
Finding Target Functions
Accessing Loaded Binaries and Payloads
Modifying Binaries
Inserting DLLs and Payloads Into New Processes