YuriSizuku / win-MemoryModule

A flexible PE loader, loading module in memory. Most of the functions can be inline, compatible for shellcode.
MIT License
172 stars 66 forks source link

winpe_memGetProcAddress,Can you provide a hash version of this function? #7

Closed icyfox168168 closed 2 years ago

icyfox168168 commented 2 years ago

Can you provide a hash version of this function?

YuriSizuku commented 2 years ago

You can use this function winpe_memfindexpcrc32. This is almost similary with winpe_memGetProcAddress, without the forward to other dll function.

WINPEDEF WINPE_EXPORT
INLINE void* STDCALL winpe_memfindexpcrc32(
    void* mempe, uint32_t crc32);
icyfox168168 commented 2 years ago

winpe_findmoduleaex

No hash version was found for this function