Uh oh!
There was an error while loading. Please reload this page.
- Notifications
You must be signed in to change notification settings - Fork 1.2k
DetourGetContainingModule
Brian Gianforcaro edited this page Aug 22, 2020
·
3 revisions
Find the PE binary in a process containing a known function.
HMODULEDetourGetContainingModule(
_In_ PVOID vpAddr
);pvAddr : Address of a function in the process.
Handle to the containing module or NULL if the address doesn't reside in
a loaded PE binary.