Skip to content

Commit f70b6da

Browse files
Update README.md
1 parent 6937a81 commit f70b6da

File tree

1 file changed

+11
-1
lines changed

1 file changed

+11
-1
lines changed

README.md

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1,11 @@
1-
# GetModuleHandle
1+
# GetModuleHandle - C# implementation
2+
3+
This function takes a DLL name, walks the PEB (Ldr) and returns the DLL base address.
4+
5+
It works like the [GetModuleHandle](https://learn.microsoft.com/en-us/windows/win32/api/libloaderapi/nf-libloaderapi-getmodulehandlea) function so it is useful if you want to avoid using it. This implementation uses only the ZwQueryInformationProcess and ReadProcessMemory API calls.
6+
7+
It is the same idea than Sektor7's Malware Intermediate course by [reenz0h](https://twitter.com/reenz0h), but in that course the code is C++ and I wanted a implementation like this in C#, I could not find it so maybe this is useful for someone else.
8+
9+
There is a binary to test the functionality:
10+
11+
![img](https://raw.githubusercontent.com/ricardojoserf/ricardojoserf.github.io/master/images/getModuleHandle/Screenshot_1.png)

0 commit comments

Comments
 (0)