![]() |
|
#1
|
|||
|
|||
|
Hello,
I was wondering how I can retrieve the base address of an external process. My need it to get to its IAT and I suppose the base address could be a good starting point but ... I was not able to find any useful piece of code around. I imagine I could always do an OpenProcess on the remote process and then start reading its memory looking for the dos header structure or any well known sequence of bytes .... Is there anything better than this approach to find the IAT in a remote/external process? Thanks. Regards, Last edited by yaa; 11-01-2007 at 10:06. |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Finding API Address | britedream | General Discussion | 5 | 10-05-2006 21:28 |
| Can we hook some func in another process then change return address? | Teerayoot | General Discussion | 5 | 09-21-2004 11:12 |