Function CheckModulePEHeaderHash

Source/Client/NM_Engine/IModuleScanner.cpp:15–25

#define ENUM_PROCESS_MODULES_LIMIT 0x800

bool CheckModulePEHeaderHash(HANDLE hProcess, const std::string & szModuleName, PVOID pModuleDump, std::size_t cbHeaderSize)
{
	auto szCurrHash = g_nmApp->DirFunctionsInstance()->GetSHA256(pModuleDump, cbHeaderSize);
	if (szCurrHash.empty())
	{
		// ...
	}

//	g_nmApp->QuarentineInstance()->CheckModulePeHeaderHash(szCurrHash);
	return true;
}
bool CheckModulePEHeaderWipe(HANDLE hProcess, const std::string & szModuleName, PVOID pModuleDump, std::size_t cbHeaderSize)
{
	BYTE pNullBuf[] = { 0x0 };