2010-11-24 19:41:00 UTC
When I LoadLibraryEx with LOAD_LIBRARY_AS_IMAGE_RESOURCE flag, the
returned hMod flag is the normal image base value + 2.
Example: LoadLibrary("f.dll") -> base = 0x10000000
LoadLibraryEx("f.dll", LOAD_LIBRARY_AS_IMAGE_RESOURCE) -> base =
It is a bit misleading because I am trying to find the RVA of a given
resource and if I use the hMod I will get an off by two RVA.
(The flag DONT_RESOLVE_DLL_REFERENCES works fine, but what about the