CODEWITHSUNDEEP
windowsdll
Richard D.
Richard D.

Reputation: 37

How can I determine the name of the dll from its disassembled code?

For example, I have a piece of disassembled code at base address 0x77B50000, which is a base address of a dll, how can I know which dll it is from the assembly codes?

Upvotes: 1

Views: 27

Answers (1)

Sean
Sean

Reputation: 62532

LoadLibrary returns a HMODULE, which is just the base address of the library, so if you've got the base address then you can cast it to a HMODULE and call GetModuleFileName.

Upvotes: 1

Related Questions