[Solved] Help with _WinAPI_HashData

[kaz]

Hello from france, 

I want to do with autoit the c++ routine you can find here :

https://github.com/riverar/hashlnk/blob/master/hashlnk.cpp

I started with hashdata function.

I want to test to hash the path to control.exe.

By debugging the c++ program, i saw that the path is :

{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}\control.exe

I wrote this.

 

#include <WinAPIConv.au3>

Local $bData = Binary(StringLower('{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}\control.exe' & "do not prehash links.  this should only be done by the user."))
ConsoleWrite($bData & @CR)

Local $iSize = BinaryLen($bData)
Local $tData = DllStructCreate('byte['& $iSize & ']')
Local $pData = DllStructGetPtr($tData)
DllStructSetData($tData, 1, $bData)

ConsoleWrite( _WinAPI_HashData($pData, $iSize, 4) & @CRLF)

ConsoleWrite('GOOD VALUE : 0x850DD6C5' & @CR)

I obtain with this autoit script : 0x6FEB513F

This is not the good value, it should be : 0x850DD6C5

I didn't find my mistake.

Could comeone help me?

 

 

 

 

Edited June 15, 2019 by kaz

[water]

Did you have a look at the Crypt UDF that comes with AutoIt?

[kaz]

Yes, here is :

Func _WinAPI_HashData($pMemory, $iSize, $iLength = 32)
    If ($iLength <= 0) Or ($iLength > 256) Then Return SetError(11, 0, 0)

    Local $tData = DllStructCreate('byte[' & $iLength & ']')

    Local $aRet = DllCall('shlwapi.dll', 'uint', 'HashData', 'struct*', $pMemory, 'dword', $iSize, 'struct*', $tData, 'dword', $iLength)
    If @error Then Return SetError(@error, @extended, 0)
    If $aRet[0] Then Return SetError(10, $aRet[0], 0)

    Return DllStructGetData($tData, 1)
EndFunc   ;==>_WinAPI_HashData

I just see there is a _WinAPI_HashString function, i will try.

[kaz]

When i use _WinAPI_HashString, the result is revert, but it's ok.

You help me by making me searching into WinApiConv.au3

Thank you.

[spudw2k]

On 6/15/2019 at 1:13 AM, kaz said:

Yes, here is

The function(s) @water was referring to is not the WinAPI one you listed.  I believe he was referring to the _Crypt_HashData and _Crypt_HashFile functions.  These can run hashing algos (i.e. message digest or secure hashing algorithms) to produce a hash...which may need be what you are looking for anyways.

I also wanted to make clear (as I understand it to be), the usage/purpose of the _WinAPI_HashData function to make sure it is doing what you think.  The WinAPI function creates a hash of binary data.  Using it the way you are in your example, you are hashing the binary representation of your concatenated string
[{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}\control.exedo not prehash links.  this should only be done by the user].  If you are intending on hashing the file, you will need to read the file as binary and use that binary data for the function call.

Just want to try and make sure you are using it the way you intend to.

[kaz]

Hello,

i really wanted to hash the string with hasdata from shlwapi.dll.

Thanks.