DWORD SUNDAY(unsigned char *lpBase, unsigned char *lpCmp,DWORD len,DWORD maxSize)
{
    size_t temp[256]; 
    size_t *shift = temp; 
    size_t i, patt_size = len, text_size = maxSize; 
	
    for( i=0; i < 256; i++ ) 
        *(shift+i) = patt_size+1; 
	
    for( i=0; i < patt_size; i++ ) 
        *(shift+unsigned char(*(lpCmp+i))) = patt_size-i; 
    size_t limit = text_size-patt_size+1; 
    for( i=0; i < limit; i += shift[ lpBase[i+patt_size] ] ) 
    { 
        if( lpBase[i] == *lpCmp ) 
        { 
            unsigned char *match_text = lpBase+i+1; 
            size_t match_size = 1; 
            do 
            {
                if( match_size == patt_size )
				{
                    return (DWORD)lpBase+i;
				}
            } 
            while( (*match_text++) == lpCmp[match_size++] ); 
        } 
    } 
	return NULL;
}

/*
EngineSingCode
{
  szProcName   进程名
  szSearchCode 内存特征码
  dwLen        内存分页特征码长度
  (此函数采用最快的内存字符特征匹配算法SunDay,搜索2GB内存只需1秒)
}
*/
DWORD WINAPI EngineSingCode(LPSTR szProcName,char * szSearchCode,DWORD dwlen)
{
	DWORD PID=GetCurrentProcessId();
	DWORD pBase,dwSize;
	if (!GetModuleInfo(PID,szProcName,&pBase,&dwSize))
		return NULL;
	DWORD pAddr=SUNDAY((unsigned char *)pBase,(unsigned char *)szSearchCode,dwlen,dwSize);
	return pAddr;
}

[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！