Re: How to get imagebase after a DLL gets loaded
- From: "anton bassov" <soviet_bloke@xxxxxxxxxxx>
- Date: 1 Dec 2006 19:00:46 -0800
It provides a way of retrieving the instance handle / base address if he
doesn't have one.
Well, I thought the OP made it clear that DLL is not yet loaded at the
time when he wants
to do things. Therefore, in our situation the step that you have
mentioned is absolutely unnecessary - by the time the OP is able to
take it, he will already have a module handle
(or pointer to the mapped section, if he chooses MapViewOfFile()), so
that the whole thing will be already sorted out.
In fact, the step you have mentioned is appropriate only if you don't
know the names of the modules that are loaded into your address space
Anton Bassov
William DePalo [MVP VC++] wrote:
"anton bassov" <soviet_bloke@xxxxxxxxxxx> wrote in message
news:1164985935.593047.310150@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
This is absolutely unnecessary step, which involves a system call. What
is the point of making function calls, especially the ones that involve
user-to-kernel mode transition, at the time when you already have DLL's
base address???? Just for the fun of doing it?????
It provides a way of retrieving the instance handle / base address if he
doesn't have one.
Regards,
Will
.
- Follow-Ups:
- Re: How to get imagebase after a DLL gets loaded
- From: William DePalo [MVP VC++]
- Re: How to get imagebase after a DLL gets loaded
- References:
- How to get imagebase after a DLL gets loaded
- From: Jack
- Re: How to get imagebase after a DLL gets loaded
- From: William DePalo [MVP VC++]
- Re: How to get imagebase after a DLL gets loaded
- From: anton bassov
- Re: How to get imagebase after a DLL gets loaded
- From: William DePalo [MVP VC++]
- How to get imagebase after a DLL gets loaded
- Prev by Date: Re: Intro to writing kernel hooks
- Next by Date: Re: How to get imagebase after a DLL gets loaded
- Previous by thread: Re: How to get imagebase after a DLL gets loaded
- Next by thread: Re: How to get imagebase after a DLL gets loaded
- Index(es):
Relevant Pages
|