[Coding] Find a module base with C#

[T0mz0r]

Hello,

I'm trying to make a trainer in C# to learn the language, but I have a problem.
I need to find the base address of a module (RendDX9) in another process. I've searched google but found nothing that could help. Hopefully there is someone here who can help.

Thanks a lot!

GetModuleHandle(null) equivalent in C#

/thread

[kolbybrooks]

System.Diagnostics.Process.Modules (?)..

PSEUDO CODE!

Process[] ProcessList = System.Diagnostics.Process.GetProcessByName("bfh");
IntPtr 

if (ProcessList.Length > 0
{
	Process MYPROCESS = ProcessList[0];
	IntPtr BaseAddress = IntPtr.Zero;

	foreach (System.Diagnostics.ProcessModule Module in MYPROCESS.Modules)
	{
		if (Module.ModuleName.Contains("RendDX9"))
			BaseAddress = Module.BaseAddress;
	}

	if (BaseAddress != IntPtr.Zero)
	{
		// Win?
	}
}

--

Originally Posted by SEGnosis

GetModuleHandle(null) equivalent in C#

/thread

Not /thread, because that doesn't get him the Base Address of a module in another process; But because of my post we can possibly /thread (?)

[T0mz0r]

Hello.

I had it working with System.Diagnostics (basicly the same way as your code kolbybrooks. still thanks for the good help), but I have a new problem. It says the only modules are:

BF2.exe
ntdll.dll
wow64.dll
wow64win.dll
wow64cpu.dll

I have tried spawning in game first to make sure RendDX9 would have been loaded. This one beats me.

Any help apreciated!

[learn_more]

Originally Posted by T0mz0r

Hello.

I had it working with System.Diagnostics (basicly the same way as your code kolbybrooks. still thanks for the good help), but I have a new problem. It says the only modules are:

BF2.exe
ntdll.dll
wow64.dll
wow64win.dll
wow64cpu.dll

I have tried spawning in game first to make sure RendDX9 would have been loaded. This one beats me.

Any help apreciated!

looks like an x64 problem, try running your app as x86

[T0mz0r]

Originally Posted by learn_more

looks like an x64 problem, try running your app as x86

What is the best way to do this? Is it code related or just run in something like compatible mode?

Thanks