forked from nb1027/Source
-
Notifications
You must be signed in to change notification settings - Fork 3
Expand file tree
/
Copy pathMemory.cpp
More file actions
27 lines (26 loc) · 673 Bytes
/
Copy pathMemory.cpp
File metadata and controls
27 lines (26 loc) · 673 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
#include "Memory.h"
#include <TlHelp32.h>
uint64_t FindModuleBaseAddress(uint64_t ProcessID, const char* modulename)
{
uint64_t BaseAddress = 0;
HANDLE snapshot = CreateToolhelp32Snapshot(TH32CS_SNAPMODULE | TH32CS_SNAPMODULE32, ProcessID);
if (snapshot != INVALID_HANDLE_VALUE)
{
MODULEENTRY32 Module{};
Module.dwSize = sizeof(MODULEENTRY32);
if (Module32First(snapshot, &Module))
{
while (BaseAddress == 0)
{
if (strcmp(Module.szModule, modulename) == 0)
{
BaseAddress = (uint64_t)Module.modBaseAddr;
}
else
Module32Next(snapshot, &Module);
}
}
CloseHandle(snapshot);
}
return BaseAddress;
}