Tip: If you want to easily get client.dll base address you can use EnumProcessModulesEx of Psapi. Once you have your array of modules you can go through all of them and call GetModuleInformation. Once you have all the base addresses you need to sort out "client.dll", you can do this with GetModuleBaseNameA.