[C++] Pattern Scanner
I wrote a pattern scanner that makes use of C++11 features a while back and decided to adjust it to no longer require a mask be passed with it. Instead, the pattern is parsed for wildcards and handled accordingly.
This should be cross-platform and 64bit friendly. PHP Code:
PHP Code:
|
A version in C# that I made for my Steamless project:
PHP Code:
Code:
https://github.com/atom0s/Steamless |
Here is a version I did. It supports nibble wildcards for the more fine-grained users. It also has a parallel signature scanner.
https://github.com/mrexodia/PatternFinder |
Quote:
|
@atom0s: sure, I mainly use it for a more fine-grained matching on instructions with wildcard registers, for example FF D0 (call eax), for call reg you need to match FF D?, so without nibbles you would match on FF and this also matches a lot of other shit (invalid instructions, inc [reg], call [] etc). I agree that in signature matching it isn't quite useful, but if you need to find the next 'call reg' in a reliable way you need nibble matching. Same applies to 'push reg'.
Obviously if you feel it's a bloat you shouldn't use it :) I just commented so other people don't have to implement it themselves. Greetings |
All times are GMT +8. The time now is 04:54. |
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX