Struct ValueScanner

pub struct ValueScanner { /* private fields */ }

Describes a value scanner state.

Value scanner goes through all memory of the program and finds matching data. The matches can then be filtered after data has changed which can allow to find needed memory address.

That match can then be joined with PointerMap’s offset scanner, alongside Sigmaker to create reliable code signature alongside offset tree for the variable.

Implementations

impl ValueScanner

pub fn reset(&mut self)

Reset the value scanner.

pub fn scan_for<T: Process + MemoryView + Clone>( &mut self, proc: &mut T, data: &[u8], ) -> Result<()>

Scan for specific data in the value scanner.

First call will scan entire memory range for data, while consequitive calls will filter the data until its reset.

Arguments

• mem - memory object to scan for values in
• data - data to scan or filter against

pub fn scan_for_2<T: MemoryView + Clone>( &mut self, proc: &mut T, maps: fn(&mut T, imem, Address, Address) -> Vec<MemoryRange>, data: &[u8], ) -> Result<()>

pub fn matches(&self) -> &Vec<Address>

pub fn matches_mut(&mut self) -> &mut Vec<Address>

Trait Implementations

impl Default for ValueScanner

fn default() -> ValueScanner

Returns the “default value” for a type.