Video Tutorial - Memory Pattern Scanning

On lunes, 27 de diciembre de 2010 0 comentarios

by P47R!CK

This is my video tutorial on scanning memory patterns to find addresses in memory that change during recompilation.
Click here for the tutorial!
The pattern scanning function:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
bool bDataCompare(const BYTE* pData, const BYTE* bMask, const char* szMask)
{
    for(;*szMask;++szMask,++pData,++bMask)
        if(*szMask=='x' && *pData!=*bMask )
            return false;
    return (*szMask) == NULL;
}
 
DWORD dwFindPattern(DWORD dwAddress,DWORD dwLen, BYTE *bMask, char * szMask) {
    for(DWORD i=0;i
        if( bDataCompare( (BYTE*)( dwAddress+i ),bMask,szMask) )
            return (DWORD)(dwAddress+i);
    return NULL;
}
SigMaker 0.3 by P47R!CK
Enjoy.

0 comentarios:

Publicar un comentario