[.Net] Get ImageBase with Assembly class?

[high6]

Is there a way to get the imagebase of the assembly in memory with the Assembly class?

[Malakai]

You can P/Invoke the PSAPI.dll and use GetModuleInformation

	[StructLayout(LayoutKind.Sequential)]
	public struct MODULEINFO
	{
		public IntPtr lpBaseOfDll;
		public uint SizeOfImage;
		public IntPtr EntryPoint;
	}		[DllImport("psapi.dll", SetLastError = true)]
		[return: MarshalAs(UnmanagedType.Bool)]
		public static extern bool GetModuleInformation(IntPtr hProcess, IntPtr hModule, out MODULEINFO lpmodinfo, uint countBytes);

That's from Blackstorm's RE framework.

[high6]

Problem is, how do you get the Assembly's "hModule"?

[revert]

			foreach (ProcessModule mod in Process.GetCurrentProcess().Modules)
			{
				if (mod.ModuleName == "MyModule")
				{
					MessageBox.Show(mod.BaseAddress.ToString("X8"));
				}
			}

Standard .NET code. You just need to include "using System.Diagnostics".

[high6]

The assembly wasn't loaded with LoadLibrary though so it isn't in the module list.

At this point I am probably gonna look at SOS.dll's dumpdomain function.