What's new

Solved Find Base Address of DLL

Fire30

Fire30

Seasoned Member
Messages
7,222
Reaction score
2,364
So I am researching a game that I thought loads a DLL at 0x89000000 but when I set a breakpoint at an address that is definitely called by the game it never breaks. I thought maybe the base address could be wrong so I thought I would use the function GetModuleHandle to find the address. The weird thing is that it is returning an address such as 0x30507D48 which I don't think is right lol. I am using %08X as the format specifier which I believe is right if you want to print a DWORD in hexadecimal. So I am kind of confused to what is happening.

Any suggestions on how I can find the address?
 
Dwack

Dwack

Now employed at Dominoes!
Experienced Veteran Hardened Veteran
Messages
4,550
Reaction score
2,947

It's returning the address to the xex's HANDLE.

You can cast that address to get more information.


Code:
LDR_DATA_TABLE_ENTRY* mHandle = (LDR_DATA_TABLE_ENTRY*)**your handle here**;
 
Fire30

Fire30

Seasoned Member
Messages
7,222
Reaction score
2,364
It's returning the address to the xex's HANDLE.

You can cast that address to get more information.


Code:
LDR_DATA_TABLE_ENTRY* mHandle = (LDR_DATA_TABLE_ENTRY*)**your handle here**;
Thanks that was what I needed.
 
Top Bottom