C# 클래스 Memory.Mem.SigScan

공개 메소드들

메소드	설명
FindPattern ( byte btPattern, string strMask, int nOffset ) : IntPtr	FindPattern Attempts to locate the given pattern inside the dumped memory region compared against the given mask. If the pattern is found, the offset is added to the located address and returned to the user.
ResetRegion ( ) : void	ResetRegion Resets the memory dump array to nothing to allow the class to redump the memory.
SigScan ( ) : System
SigScan ( Process proc, UIntPtr addr, int size ) : System

비공개 메소드들

메소드	설명
DumpMemory ( ) : bool	DumpMemory Internal memory dump function that uses the set class properties to dump a memory region.
MaskCheck ( int nOffset, IEnumerable btPattern, string strMask ) : bool	MaskCheck Compares the current pattern byte to the current memory dump byte to check for a match. Uses wildcards to skip bytes that are deemed unneeded in the compares.
ReadProcessMemory ( IntPtr hProcess, UIntPtr lpBaseAddress, [ lpBuffer, int dwSize, int &lpNumberOfBytesRead ) : bool

메소드 상세

FindPattern() 공개 메소드

FindPattern Attempts to locate the given pattern inside the dumped memory region compared against the given mask. If the pattern is found, the offset is added to the located address and returned to the user.

public FindPattern ( byte btPattern, string strMask, int nOffset ) : IntPtr
btPattern	byte	Byte pattern to look for in the dumped region.
strMask	string	The mask string to compare against.
nOffset	int	The offset added to the result address.
리턴	System.IntPtr

ResetRegion() 공개 메소드

ResetRegion Resets the memory dump array to nothing to allow the class to redump the memory.

public ResetRegion ( ) : void
리턴	void

SigScan() 공개 메소드

public SigScan ( ) : System
리턴	System

SigScan() 공개 메소드

public SigScan ( Process proc, UIntPtr addr, int size ) : System
proc	Process
addr	UIntPtr
size	int
리턴	System