blackbone::PatternSearch Class Reference

Public Member Functions
BLACKBONE_API	PatternSearch (const std::vector< uint8_t > &pattern)
BLACKBONE_API	PatternSearch (const std::string &pattern)
BLACKBONE_API	PatternSearch (const char *pattern, size_t len=0)
BLACKBONE_API	PatternSearch (const uint8_t *pattern, size_t len=0)
BLACKBONE_API size_t	Search (uint8_t wildcard, void *scanStart, size_t scanSize, std::vector< ptr_t > &out, ptr_t value_offset=0)
	Default pattern matching with wildcards. std::search is approximately 2x faster than naive approach. More...
BLACKBONE_API size_t	Search (void *scanStart, size_t scanSize, std::vector< ptr_t > &out, ptr_t value_offset=0)
	Full pattern match, no wildcards. Uses Boyer–Moore–Horspool algorithm. More...
BLACKBONE_API size_t	SearchRemote (class Process &remote, uint8_t wildcard, ptr_t scanStart, size_t scanSize, std::vector< ptr_t > &out)
	Search pattern in remote process More...
BLACKBONE_API size_t	SearchRemote (class Process &remote, ptr_t scanStart, size_t scanSize, std::vector< ptr_t > &out)
	Search pattern in remote process More...
BLACKBONE_API size_t	SearchRemoteWhole (class Process &remote, bool useWildcard, uint8_t wildcard, std::vector< ptr_t > &out)
	Search pattern in whole address space of remote process More...

Member Function Documentation

size_t blackbone::PatternSearch::Search	(	uint8_t	wildcard,
		void *	scanStart,
		size_t	scanSize,
		std::vector< ptr_t > &	out,
		ptr_t	value_offset = 0
	)

Default pattern matching with wildcards. std::search is approximately 2x faster than naive approach.

Parameters

wildcard	Pattern wildcard
scanStart	Starting address
scanSize	Size of region to scan
out	Found results
value_offset	Value that will be added to resulting addresses

Returns

Number of found addresses

size_t blackbone::PatternSearch::Search	(	void *	scanStart,
		size_t	scanSize,
		std::vector< ptr_t > &	out,
		ptr_t	value_offset = 0
	)

Full pattern match, no wildcards. Uses Boyer–Moore–Horspool algorithm.

Parameters

scanStart	Starting address
scanSize	Size of region to scan
out	Found results
value_offset	Value that will be added to resulting addresses

Returns

Number of found addresses

size_t blackbone::PatternSearch::SearchRemote	(	class Process &	remote,
		uint8_t	wildcard,
		ptr_t	scanStart,
		size_t	scanSize,
		std::vector< ptr_t > &	out
	)

Search pattern in remote process

Parameters

remote	Remote process
wildcard	Pattern wildcard
scanStart	Starting address
scanSize	Size of region to scan
out	Found results

Returns

Number of found addresses

size_t blackbone::PatternSearch::SearchRemote	(	class Process &	remote,
		ptr_t	scanStart,
		size_t	scanSize,
		std::vector< ptr_t > &	out
	)

Search pattern in remote process

Parameters

remote	Remote process
scanStart	Starting address
scanSize	Size of region to scan
out	Found results

Returns

Number of found addresses

size_t blackbone::PatternSearch::SearchRemoteWhole	(	class Process &	remote,
		bool	useWildcard,
		uint8_t	wildcard,
		std::vector< ptr_t > &	out
	)

Search pattern in whole address space of remote process

Parameters

remote	Remote process
useWildcard	True if pattern contains wildcards
wildcard	Pattern wildcard
out	Found results

Returns

Number of found addresses

---

The documentation for this class was generated from the following files:

• C:/Users/Ton/Documents/Visual Studio 2013/Projects/BlackBone/src/BlackBone/Patterns/PatternSearch.h
• C:/Users/Ton/Documents/Visual Studio 2013/Projects/BlackBone/src/BlackBone/Patterns/PatternSearch.cpp