MODULEENTRY32W mEntry;

memset(&mEntry, 0, sizeof(mEntry));

mEntry.dwSize = sizeof(MODULEENTRY32);

DWORD curPid = GetCurrentProcessId();

HANDLE hSnapshot = CreateToolhelp32Snapshot(TH32CS_SNAPMODULE, NULL);

if (Module32FirstW(hSnapshot, &mEntry)) {

do {

modules.emplace_back(mEntry.modBaseAddr);

} while (Module32NextW(hSnapshot, &mEntry));

}

CloseHandle(hSnapshot);

if (modules.empty()) {

return -1;

}

return 0;

PIMAGE_NT_HEADERS pNtHdr = ImageNtHeader(lpModBaseAddr);

PIMAGE_SECTION_HEADER pSectionHeader = (PIMAGE_SECTION_HEADER)(pNtHdr + 1);

LPVOID lpTextAddr = NULL;

DWORD dwSizeOfRawData = NULL;

for (int i = 0; i < pNtHdr->FileHeader.NumberOfSections; ++i) {

char *name = (char *)pSectionHeader->Name;

if (!strcmp(name, ".text")) {

info->lpVirtualAddress = (LPVOID)((DWORD64)lpModBaseAddr + pSectionHeader->VirtualAddress);

info->dwSizeOfRawData = pSectionHeader->SizeOfRawData;

break;

}

++pSectionHeader;

}

if (info->dwSizeOfRawData == NULL) {

return -1;

}

return 0;

DWORD64 hash = 0;

BYTE *str = (BYTE *)lpSectionAddress;

for (int i = 0; i < dwSizeOfRawData; ++i, ++str) {

if (*str) {

hash = *str + (hash << 6) + (hash << 16) - hash;

}

}

return hash;

DWORD64 dwRealHash = pHashSet->dwRealHash;

DWORD dwSizeOfRawData = pHashSet->SectionInfo.dwSizeOfRawData;

LPVOID lpVirtualAddress = pHashSet->SectionInfo.lpVirtualAddress;

while (1) {

Sleep(1000);

DWORD64 dwCurrentHash = HashSection(lpVirtualAddress, dwSizeOfRawData);

if (dwRealHash != dwCurrentHash) {

MessageBoxW(NULL, L"DebugAttached", L"WARN", MB_OK);

exit(1);

}

if (bTerminateThread) {

return;

}

}

bTerminateThread = true;

for (auto& thread : threads) {

thread.join();

}

return 0;

std::vector<LPVOID> modules;

GetAllModule(modules);

std::vector<std::thread> threads;

threads.reserve(modules.size());

std::vector<HASHSET> hashes;

hashes.reserve(modules.size());

for (auto& module : modules) {

SECTIONINFO info;

GetTextSectionInfo(module, &info);

DWORD64 dwRealHash = HashSection(info.lpVirtualAddress, info.dwSizeOfRawData);

hashes.emplace_back(HASHSET { dwRealHash, info });

threads.emplace_back(std::thread(CheckTextHash, &hashes.back()));

}

int num1, num2;

printf("[*] num1 num2 : ");

scanf("%d %d", &num1, &num2);

printf("[*] result : %d\n\n", num1 + num2);

printf("[*] wait for terminating thread..\n");

ExitThreads(threads);

return 0;