Instead of memcpy you can simply typecast the buffered file data to the structure type and read the file data directly from the buffered file data, thereby reducing memory usage and run time.
This method is already use in next video, to show another way of filling the struct 🙃 For those who don't know what it is, struct could be filled up also in this way: --------- IMAGE_NT_HEADERS32 *NTHeaders; NTHeaders = (IMAGE_NT_HEADERS32*)(FILE_BUFF+Pe_Offset); ---------- Ofcourse, I will upload both versions on Github 😎
![☠️ HOW HACKERS READING EXE FILES [HACKING BASICS]](/img/logo.svg){kind=logo}
