Thanks for the idea BlackAngel.

I got a question for you guys. I used Module32First to get winmine.exe base address and the size, I did a scan using that and I got some pretty good results. I'm just curious, if i'm scanning modules am I leaving out anything I should be scanning? Like does it skip a bunch of addresses?