Finding the correct baseaddress

血红的双手。 提交于 2019-12-09 17:27:55

问题


I realized that my version of getting the correct baseaddress was wrong

Process[] iexp = Process.GetProcessesByName("Solitaire");
if (iexp.Length == 0) {
    //EXIT
}
Process internet = iexp[0];
uint baseAddress = (uint)internet.MainModule.BaseAddress.ToInt64();

but the baseaddress is wrong

I also looked in MSDN but this code is very strange and gives me an infinite loop.

I hope you can help me because I can't find any example.

EDIT :

 ReadProcessMemory(readHandle, ((IntPtr)(((baseAddress) + 0x14) + 0x50)), bytes, (UIntPtr)4, ref rw);

Here i made an image of my desktop. Im realy confused, maybe someone knows where i made a mistake. http://i.stack.imgur.com/50lva.jpg


回答1:


If you want what I think you want, I can only think of a few ways to do it, none of them are .NET built-in though...

  1. Use P/Invoke to return the base address of the startup executable.

    [DllImport("kernel32.dll")]
    public static extern IntPtr GetModuleHandle(string lpModuleName);
    
  2. Returns the base address of the executable containing MyClass

    Marshal.GetHINSTANCE(typeof(MyClass).Module)
    
  3. Return a handle to the current module using:

    Marshal.GetHINSTANCE(this.GetType().Module)
    


来源:https://stackoverflow.com/questions/8263135/finding-the-correct-baseaddress

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!