1 files changed, 0 insertions, 232 deletions
diff --git a/MemDriverLib/PatternScanner.cpp b/MemDriverLib/PatternScanner.cpp
deleted file mode 100644
index aa54a9b..0000000
--- a/MemDriverLib/PatternScanner.cpp
+++ /dev/null
@@ -1,232 +0,0 @@
-#include "stdafx.h"
-
-#include "DLLHelper.h"
-#include "PatternScanner.h"
-
-#include <algorithm>
-#include <stdexcept>
-#include <sstream>
-#include <string>
-#include <vector>
-#include <Windows.h>
-
-
-static bool map_file_loadlib(SymbolResolver& symres, MODULE_DATA& module, PVOID * const buffer,
-	SIZE_T * const size, PVOID const user_ptr);
-static bool map_file_loadlib_cleanup(SymbolResolver& symres, MODULE_DATA& module, PVOID buffer,
-	PVOID const user_ptr);
-
-const struct map_file_data map_loadlib = map_file_data(map_file_loadlib, map_file_loadlib_cleanup, true);
-
-bool map_file_loadlib(SymbolResolver& symres, MODULE_DATA& module, PVOID * const buffer,
-	SIZE_T * const size, PVOID const user_ptr)
-{
-	HMODULE hMod;
-	struct loadlib_user_data * const user_data = (struct loadlib_user_data * const) user_ptr;
-	std::vector<DLL_DIRECTORY_COOKIE> dir_cookies;
-
-	if (user_data) {
-		if (user_data->additionalDllSearchDirectories.size() == 1) {
-			SetDllDirectoryA(user_data->additionalDllSearchDirectories[0].c_str());
-		}
-		else {
-			for (auto& searchDir : user_data->additionalDllSearchDirectories) {
-				dir_cookies.push_back(AddDllDirectory(std::wstring(searchDir.begin(),
-					searchDir.end()).c_str()));
-			}
-			if (!SetDefaultDllDirectories(LOAD_LIBRARY_SEARCH_USER_DIRS)) {
-				return false;
-			}
-		}
-	}
-
-	hMod = symres.LoadLibrary(module.FullDllPath);
-
-	if (user_data) {
-		if (dir_cookies.size() > 1) {
-			SetDllDirectoryA("");
-		}
-		else
-			for (auto& searchDir : dir_cookies) {
-				RemoveDllDirectory(searchDir);
-			}
-	}
-
-	if (!hMod) {
-		*buffer = NULL;
-		*size = 0;
-		return false;
-	}
-	else {
-		*buffer = hMod;
-		*size = module.SizeOfImage;
-		return true;
-	}
-}
-
-bool map_file_loadlib_cleanup(SymbolResolver& symres, MODULE_DATA& module, PVOID buffer, PVOID const user_ptr)
-{
-	return symres.FreeLibrary((HMODULE)buffer);
-}
-
-PatternScanner::PatternScanner(SymbolResolver& symres,
-	struct map_file_data const * const mfd, PVOID map_file_user_data)
-	: m_symbolResolver(symres), mfd(mfd), map_file_user_data(map_file_user_data)
-{
-	if (!mfd) {
-		throw std::runtime_error("MapFileData was NULL");
-	}
-}
-
-PatternScanner::~PatternScanner()
-{
-}
-
-static void findAndReplaceAll(std::string& data, const char * const search, const char * const replace)
-{
-	std::string toSearch(search);
-	std::string replaceStr(replace);
-
-	size_t pos = data.find(toSearch);
-
-	while (pos != std::string::npos)
-	{
-		data.replace(pos, toSearch.size(), replaceStr);
-		pos = data.find(toSearch, pos + replaceStr.size());
-	}
-}
-
-bool PatternScanner::checkPattern(MODULE_DATA& module, const char * const pattern, std::string& result)
-{
-	const char * const hexalnum = "0123456789abcdefABCDEF ?";
-	std::string str_pattern(pattern);
-
-	std::size_t found = str_pattern.find_first_not_of(hexalnum);
-	if (found != std::string::npos) {
-		std::stringstream err_str;
-		err_str << "Found an invalid character at " << found
-			<< " (allowed characters: \"" << hexalnum << "\")";
-		throw std::runtime_error(err_str.str());
-		return false;
-	}
-
-	findAndReplaceAll(str_pattern, " ", "");
-	if (str_pattern.length() % 2 != 0) {
-		std::stringstream err_str;
-		err_str << "Pattern length is not a multiple of 2";
-		throw std::runtime_error(err_str.str());
-		return false;
-	}
-
-	result = str_pattern;
-	return true;
-}
-
-constexpr UINT8 HexCharToInt(char Input)
-{
-	return
-		((Input >= 'a') && (Input <= 'f'))
-		? (Input - 87)
-		: ((Input >= 'A') && (Input <= 'F'))
-		? (Input - 55)
-		: ((Input >= '0') && (Input <= '9'))
-		? (Input - 48)
-		: throw std::exception{};
-}
-
-constexpr UINT8 HexChar(char High, char Low)
-{
-	return (HexCharToInt(High) << 4) | (HexCharToInt(Low));
-}
-
-bool PatternScanner::doScan(std::string& pattern, UINT8 *buf, SIZE_T size, std::vector<SIZE_T>& foundOffsets)
-{
-	SIZE_T pattern_index = 0, pattern_length = pattern.length();
-
-	for (SIZE_T i = 0; i + (pattern_length / 2) < size; ++i) {
-		if (pattern_index == pattern_length) {
-			pattern_index = 0;
-			foundOffsets.push_back((SIZE_T)buf + i - pattern_length / 2);
-		}
-		if (pattern.at(pattern_index) == '?' && pattern.at(pattern_index + 1) == '?' ||
-			buf[i] == HexChar(pattern.at(pattern_index), pattern.at(pattern_index + 1))) {
-			pattern_index += 2;
-		}
-		else {
-			pattern_index = 0;
-			continue;
-		}
-	}
-
-	return true;
-}
-
-bool PatternScanner::Scan(MODULE_DATA& module, const char * const pattern, std::vector<SIZE_T>& foundAddresses)
-{
-	bool result;
-	std::string validPattern;
-	IMAGE_NT_HEADERS *ntHeader;
-	IMAGE_SECTION_HEADER *secHeader;
-	UINT8 *mappedBuffer = NULL;
-	SIZE_T mappedSize = 0;
-
-	if (!checkPattern(module, pattern, validPattern)) {
-		return false;
-	}
-
-	if (!mfd->mapfile(m_symbolResolver, module, (PVOID *)&mappedBuffer, &mappedSize, map_file_user_data))
-	{
-		return false;
-	}
-
-	if (mfd->in_memory_module) {
-		if (!VerifyPeHeader(mappedBuffer, mappedSize, &ntHeader) || !ntHeader) {
-			return false;
-		}
-
-		DWORD nBytes = 0, virtualSize;
-		secHeader = IMAGE_FIRST_SECTION(ntHeader);
-		result = true;
-		for (SIZE_T i = 0; i < ntHeader->FileHeader.NumberOfSections; i++)
-		{
-			if (nBytes >= ntHeader->OptionalHeader.SizeOfImage)
-				break;
-
-			if (!doScan(validPattern, MakePtr(BYTE *, mappedBuffer,
-				secHeader->VirtualAddress), secHeader->SizeOfRawData, foundAddresses))
-			{
-				result = false;
-			}
-
-			virtualSize = secHeader->VirtualAddress;
-			secHeader++;
-			virtualSize = secHeader->VirtualAddress - virtualSize;
-			nBytes += virtualSize;
-		}
-	}
-	else {
-		result = doScan(validPattern, mappedBuffer, mappedSize, foundAddresses);
-	}
-
-	if (!mfd->mapcleanup(m_symbolResolver, module, mappedBuffer, map_file_user_data))
-	{
-		return false;
-	}
-
-	return result;
-}
-
-bool PatternScanner::ScanForAddress(HANDLE targetPID, MODULE_DATA& module, PatternScanner *pscan, const char * const pattern, std::function<bool(SIZE_T)> callback)
-{
-	std::vector<SIZE_T> foundAddresses;
-
-	pscan->Scan(module, "48 8B 48 20 48 8B 01 FF 90 20 01 00 00", foundAddresses);
-
-	for (auto& addr : foundAddresses) {
-		if (callback(addr)) {
-			return true;
-		}
-	}
-
-	return false;
-}
-\ No newline at end of file