public static IntPtr FindPattern(HMemory memory, uint module, string pattern, int offset = 0)
{
if (string.IsNullOrWhiteSpace(pattern))
{
return(IntPtr.Zero);
}
List <byte> patterns = new List <byte>();
pattern.Split(' ').All((X) =>
{
if (X.Equals("?"))
{
patterns.Add(0);
}
else
{
patterns.Add(Convert.ToByte(X, 16));
}
return(true);
});
return(FindPattern(memory, module, patterns.ToArray(), offset));
}
public static IntPtr FindPattern(HMemory memory, uint module, byte[] pattern, int offset = 0)
{
if (pattern == null)
{
return(IntPtr.Zero);
}
Kernel32.GetModuleInformation(memory.Handle, (IntPtr)module, out MODULEINFO MODULEINFO, sizeof(MODULEINFO));
for (long PIndex = module; PIndex < MODULEINFO.SizeOfImage; PIndex++)
{
bool Found = true;
for (int MIndex = 0; MIndex < pattern.Length; MIndex++)
{
Found = pattern[MIndex] == 0 || memory.Read <byte>((uint)(PIndex + MIndex)) == pattern[MIndex];
if (!Found)
{
break;
}
}
if (Found)
{
return((IntPtr)(PIndex + offset));
}
}
return(IntPtr.Zero);
}
