2 ms·
Maybe it's to get the addresses where the DLLs would be loaded? I think that information is not available until the process is created due to ASLR.
by omoikane 2y ago
Maybe it's to get the addresses where the DLLs would be loaded? I think that information is not available until the process is created due to ASLR.
- userbinator 2y agoDue to ASLR, those addresses wouldn't be useful either as they would change with the next process created.
- omoikane 2y agoWell, the addresses won't be constant, but maybe some people find those addresses to be useful for something, e.g. they want to check if ASLR is enabled. I just tried this and I get different addresses every time I ran `ldd /bin/true` on Linux, but I always get back the same addresses on Windows.