2011-08-03 07:07:57 -06:00
|
|
|
#ifndef HEXSEARCH_H
|
|
|
|
#define HEXSEARCH_H
|
|
|
|
#include <vector>
|
2011-12-31 04:48:42 -07:00
|
|
|
#include "Core.h" //for some reason process.h needs core
|
|
|
|
#include "MemAccess.h"
|
2011-08-03 07:07:57 -06:00
|
|
|
|
|
|
|
//(not yet)implemented using Boyer-Moore algorithm
|
|
|
|
|
|
|
|
class Hexsearch
|
|
|
|
{
|
|
|
|
public:
|
|
|
|
typedef std::vector<int> SearchArgType;
|
|
|
|
enum SearchConst //TODO add more
|
|
|
|
{
|
|
|
|
ANYBYTE=0x101,DWORD_,ANYDWORD,ADDRESS
|
|
|
|
};
|
|
|
|
|
|
|
|
Hexsearch(const SearchArgType &args,uint64_t startpos,uint64_t endpos);
|
|
|
|
~Hexsearch();
|
|
|
|
|
|
|
|
void Reset(){pos_=startpos_;};
|
|
|
|
void SetStart(uint64_t pos){pos_=pos;};
|
|
|
|
|
|
|
|
uint64_t FindNext();
|
|
|
|
std::vector<uint64_t> FindAll();
|
|
|
|
|
|
|
|
private:
|
2011-08-03 08:59:06 -06:00
|
|
|
bool Compare(int a,int b);
|
|
|
|
void ReparseArgs();
|
2011-08-03 07:07:57 -06:00
|
|
|
SearchArgType args_;
|
|
|
|
uint64_t pos_,startpos_,endpos_;
|
|
|
|
std::vector<int> BadCharShifts,GoodSuffixShift;
|
|
|
|
void PrepareGoodSuffixTable();
|
|
|
|
void PrepareBadCharShift();
|
|
|
|
};
|
|
|
|
|
|
|
|
#endif
|