Finding the baseaddress of a running process

Question

Ive got the following code:

import subprocess
from ctypes import *

#-Part where I get the PID and declare all variables-#

OpenProcess = windll.kernel32.Ope         


        

Answer 1

See How to enumerate modules in python 64bit for some good code to use. You are looking for 'modBaseAddr'.

For more info on tagMODULEENTRY32, see http://msdn.microsoft.com/en-us/library/windows/desktop/ms684225(v=vs.85).aspx

You could also use pymem ('obsolete' project but still works) with the following code (you want modBaseAddr):

  for m in self.listModules():
    if m.szModule==szModule:
      print m.szModule, m.szExePath, m.modBaseAddr