Exemple #1
0
        public static IntPtr FindPattern(HMemory memory, uint module, string pattern, int offset = 0)
        {
            if (string.IsNullOrWhiteSpace(pattern))
            {
                return(IntPtr.Zero);
            }

            List <byte> patterns = new List <byte>();

            pattern.Split(' ').All((X) =>
            {
                if (X.Equals("?"))
                {
                    patterns.Add(0);
                }
                else
                {
                    patterns.Add(Convert.ToByte(X, 16));
                }

                return(true);
            });

            return(FindPattern(memory, module, patterns.ToArray(), offset));
        }
Exemple #2
0
        public static IntPtr FindPattern(HMemory memory, uint module, byte[] pattern, int offset = 0)
        {
            if (pattern == null)
            {
                return(IntPtr.Zero);
            }

            Kernel32.GetModuleInformation(memory.Handle, (IntPtr)module, out MODULEINFO MODULEINFO, sizeof(MODULEINFO));

            for (long PIndex = module; PIndex < MODULEINFO.SizeOfImage; PIndex++)
            {
                bool Found = true;

                for (int MIndex = 0; MIndex < pattern.Length; MIndex++)
                {
                    Found = pattern[MIndex] == 0 || memory.Read <byte>((uint)(PIndex + MIndex)) == pattern[MIndex];

                    if (!Found)
                    {
                        break;
                    }
                }

                if (Found)
                {
                    return((IntPtr)(PIndex + offset));
                }
            }

            return(IntPtr.Zero);
        }