by P47R!CK
This is my video tutorial on scanning memory patterns to find addresses in memory that change during recompilation.
Click here for the tutorial!
The pattern scanning function:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 | bool bDataCompare( const BYTE * pData, const BYTE * bMask, const char * szMask) { for (;*szMask;++szMask,++pData,++bMask) if (*szMask== 'x' && *pData!=*bMask ) return false ; return (*szMask) == NULL; } DWORD dwFindPattern( DWORD dwAddress, DWORD dwLen, BYTE *bMask, char * szMask) { for ( DWORD i=0;i if ( bDataCompare( ( BYTE *)( dwAddress+i ),bMask,szMask) ) return ( DWORD )(dwAddress+i); return NULL; } |
Enjoy.
0 comentarios:
Publicar un comentario