Difference between revisions of "Lua:AOBScan"
Jump to navigation
Jump to search
(Created page with ''''function''' AOBScan('''''...''''') '''function''' AOBScan(''AOBString'', ''ProtectionFlags'' OPTIONAL, ''AlignmentType'' OPTIONAL, ''AlignmentParam'' HALFOPTIONAL) Scans the…') |
m |
||
(7 intermediate revisions by 2 users not shown) | |||
Line 1: | Line 1: | ||
+ | [[Category:Lua]] | ||
'''function''' AOBScan('''''...''''') | '''function''' AOBScan('''''...''''') | ||
'''function''' AOBScan(''AOBString'', ''ProtectionFlags'' OPTIONAL, ''AlignmentType'' OPTIONAL, ''AlignmentParam'' HALFOPTIONAL) | '''function''' AOBScan(''AOBString'', ''ProtectionFlags'' OPTIONAL, ''AlignmentType'' OPTIONAL, ''AlignmentParam'' HALFOPTIONAL) | ||
− | Scans the currently opened process and returns a StringList object containing all the results. | + | Scans the currently opened process and returns a [[Lua:Class:Stringlist|StringList]] object containing all the results. |
Don't forget to free this list when done. | Don't forget to free this list when done. | ||
Byte value of higher than 255 or anything not an integer will be seen as a wildcard. | Byte value of higher than 255 or anything not an integer will be seen as a wildcard. | ||
Line 13: | Line 14: | ||
!align="left"|Parameter | !align="left"|Parameter | ||
!align="left"|Type | !align="left"|Type | ||
− | !style="width: 80% | + | !style="width: 80%;" align="left"|Description |
|- | |- | ||
|... | |... | ||
Line 24: | Line 25: | ||
!align="left"|Parameter | !align="left"|Parameter | ||
!align="left"|Type | !align="left"|Type | ||
− | !style="width: 80% | + | !style="width: 80%;" align="left"|Description |
|- | |- | ||
|AOBString | |AOBString | ||
Line 62: | Line 63: | ||
− | + | {{LuaSeeAlso}} | |
− | |||
− | |||
=== Related Functions === | === Related Functions === | ||
− | * [[autoAssemble]] | + | * [[Lua:autoAssemble|autoAssemble]] |
− | * [[disassemble]] | + | * [[Lua:disassemble|disassemble]] |
− | * [[getInstructionSize]] | + | * [[Lua:getInstructionSize|getInstructionSize]] |
− | * [[getPreviousOpcode]] | + | * [[Lua:getPreviousOpcode|getPreviousOpcode]] |
− | * [[allocateSharedMemory]] | + | * [[Lua:allocateSharedMemory|allocateSharedMemory]] |
− | * [[mapMemory]] | + | * [[Lua:mapMemory|mapMemory]] |
− | * [[unmapMemory]] | + | * [[Lua:unmapMemory|unmapMemory]] |
− | * [[readBytes]] | + | * [[Lua:readBytes|readBytes]] |
− | * [[readPointer]] | + | * [[Lua:readPointer|readPointer]] |
− | * [[writeBytes]] | + | * [[Lua:writeBytes|writeBytes]] |
− | * [[ | + | * [[Lua:readBytesLocal|readBytesLocal]] |
− | + | * [[Lua:readPointerLocal|readPointerLocal]] | |
− | * [[readPointerLocal]] | + | * [[Lua:writeBytesLocal|writeBytesLocal]] |
− | * [[writeBytesLocal]] | + | * [[Lua:wordToByteTable|wordToByteTable]] |
− | * [[wordToByteTable]] | + | * [[Lua:dwordToByteTable|dwordToByteTable]] |
− | * [[dwordToByteTable]] | + | * [[Lua:qwordToByteTable|qwordToByteTable]] |
− | * [[qwordToByteTable]] | + | * [[Lua:floatToByteTable|floatToByteTable]] |
− | * [[floatToByteTable]] | + | * [[Lua:doubleToByteTable|doubleToByteTable]] |
− | * [[doubleToByteTable]] | + | * [[Lua:stringToByteTable|stringToByteTable]] |
− | * [[stringToByteTable]] | + | * [[Lua:wideStringToByteTable|wideStringToByteTable]] |
− | * [[wideStringToByteTable]] | + | * [[Lua:byteTableToWord|byteTableToWord]] |
− | * [[byteTableToWord]] | + | * [[Lua:byteTableToDword|byteTableToDword]] |
− | * [[byteTableToDword]] | + | * [[Lua:byteTableToQword|byteTableToQword]] |
− | * [[byteTableToQword]] | + | * [[Lua:byteTableToFloat|byteTableToFloat]] |
− | * [[byteTableToFloat]] | + | * [[Lua:byteTableToDouble|byteTableToDouble]] |
− | * [[byteTableToDouble]] | + | * [[Lua:byteTableToString|byteTableToString]] |
− | * [[byteTableToString]] | + | * [[Lua:byteTableToWideString|byteTableToWideString]] |
− | * [[byteTableToWideString]] |
Latest revision as of 02:51, 18 May 2019
function AOBScan(...)
function AOBScan(AOBString, ProtectionFlags OPTIONAL, AlignmentType OPTIONAL, AlignmentParam HALFOPTIONAL)
Scans the currently opened process and returns a StringList object containing all the results. Don't forget to free this list when done. Byte value of higher than 255 or anything not an integer will be seen as a wildcard.
Function Parameters[edit]
Parameter | Type | Description |
---|---|---|
... | ... | Bytes to scan for seperated as arguments |
Parameter | Type | Description |
---|---|---|
AOBString | string | A string of bytes, as hex, to scan for |
ProtectionFlags | string | A string of flags used to set protection type of memory to be scanned |
AlignmentType | integer | Used with 'AlignmentParam' to set scan alignment |
AlignmentParam | string | A string which either holds the value the addresses must be dividable by or what the last digits of the address must be |
- protectionflags is a string:
- Add a + to indicate that flag MUST be set and a - to indicate that that flag MUST NOT be set. (* sets it to don't care)
- X = Executable
- W = Writable memory
- C = Copy On Write.
Examples:
+W-C = Writable memory exluding copy on write and doesn't care about the Executable flag +X-C-W = Find readonly executable memory +W = Finds all writable memory and don't care about copy on write or execute "" = Find everything (is the same as "*X*C*W" )
- alignmenttype is an integer:
- 0 = No alignment check
- 1 = Address must be dividable by alignmentparam
- 2 = Address must end with alignmentparam
See also[edit]
Related Functions[edit]
- autoAssemble
- disassemble
- getInstructionSize
- getPreviousOpcode
- allocateSharedMemory
- mapMemory
- unmapMemory
- readBytes
- readPointer
- writeBytes
- readBytesLocal
- readPointerLocal
- writeBytesLocal
- wordToByteTable
- dwordToByteTable
- qwordToByteTable
- floatToByteTable
- doubleToByteTable
- stringToByteTable
- wideStringToByteTable
- byteTableToWord
- byteTableToDword
- byteTableToQword
- byteTableToFloat
- byteTableToDouble
- byteTableToString
- byteTableToWideString