I have absolutely no idea if this will help but this is a article about examining the PE
http://www.codeproject.com/dotnet/dotnetformat.asp -----Original Message----- From: Discussion of advanced .NET topics. [mailto:[EMAIL PROTECTED] On Behalf Of Keith Hill Sent: Thursday, February 16, 2006 11:16 AM To: [email protected] Subject: [ADVANCED-DOTNET] Determing Executable Preferred BaseAddress Does anybody know how to determine an executable's preferred base address (image base) from managed code? I know how to use dumpbin /headers to get this information (image base) but I was hoping there was perhaps a more direct route. System.Diagnostics.ProcessModule.BaseAddress gives you the base address after the module has been loaded which means that it may be different from the preferred base address. In fact, what I want to do is compare the "preferred" base address with the "actual" base address given by ProcessModule.BaseAddress to find executables that have been rebased. Thanks, Keith Hill =================================== This list is hosted by DevelopMentor. http://www.develop.com View archives and manage your subscription(s) at http://discuss.develop.com =================================== This list is hosted by DevelopMentor® http://www.develop.com View archives and manage your subscription(s) at http://discuss.develop.com
