I've never used or looked at 'BlackMagic' so I have no idea what it is doing. That said, has the OP actually responded as to whether the OpenProcessAndThread thread is being executed? As for ASLR being enabled or not, I assume it would not affect the ability of this API to determine the module's base address. Again, to be clear, it appears from the original snippet that it is commented out. I for one see no point in continuing this thread without a reply from the OP on this.