Property | Type | Description | |
---|---|---|---|
Artifacts | Extract>.ConcurrentDictionary | ||
DetectedFragments | VAScanType>.ConcurrentDictionary |
Method | Description | |
---|---|---|
FastPE ( long VA, long Block ) : VAScanType | ||
Run ( long Start, long Stop = 0xFFFFffffFFFF ) : long |
|
|
VirtualScanner ( ) : System | ||
VirtualScanner ( DetectedProc Ctx, Mem backingBlocks ) : System |
public FastPE ( long VA, long Block ) : VAScanType | ||
VA | long | |
Block | long | |
return | VAScanType |
public Run ( long Start, long Stop = 0xFFFFffffFFFF ) : long | ||
Start | long | |
Stop | long | We just truncate VA's at 48 bit's |
return | long |
public VirtualScanner ( DetectedProc Ctx, Mem backingBlocks ) : System | ||
Ctx | DetectedProc | |
backingBlocks | Mem | |
return | System |
public ConcurrentDictionary |
||
return | Extract>.ConcurrentDictionary |