-
Notifications
You must be signed in to change notification settings - Fork 1k
DetourGetContainingModule
Brian Gianforcaro edited this page Aug 22, 2020
·
3 revisions
Find the PE binary in a process containing a known function.
HMODULE DetourGetContainingModule(
_In_ PVOID vpAddr
);pvAddr : Address of a function in the process.
Handle to the containing module or NULL if the address doesn't reside in
a loaded PE binary.