Module pattern

Module pattern 

Source
Expand description

Pattern scanning for memory and modules

Supports multiple pattern formats:

  • IDA-style: "48 8B 05 ?? ?? ?? ?? 48 89" (wildcards as ?? or ?)
  • Code-style: bytes + mask ("\x48\x8B" with "xx??")
  • Raw bytes with mask array

Structs§

Pattern
parsed byte pattern with wildcard mask
PatternScanner
pattern scanner for byte slices (backward compatible API)
ScanMatch
result of a pattern scan with context
Scanner
configurable pattern scanner

Functions§

find_pattern_all_modules
scan all loaded modules for pattern
find_pattern_executable
scan all executable regions for pattern
find_pattern_in_module
find pattern in module by name
find_pattern_in_module_first
find first pattern match in module
find_pattern_in_region
find pattern in specific memory region