findhex

FindPattern(hD3D, 0x128000, (PBYTE)"xC7x06x00x00x00x00x89x86x00x00x00x00x89x86", "xx????xx????xx");//这种HOOK方式就是找到d3d9.dll的接口，搜索特征码，找到Vtable（虚函数表）
DWORD FindPattern ( DWORD startAddres, DWORD fileSize, PBYTE pattern, char mask[] )
{
    DWORD pos = 0;
    int searchLen = strlen ( mask ) - 1;
    
    for ( DWORD retAddress = startAddres; retAddress < startAddres + fileSize; retAddress++ )
    {
        if ( *(PBYTE) retAddress == pattern[ pos ] || mask[ pos ] == '?' )
        {
            if ( mask[ pos + 1 ] == '' )
            {
                return ( retAddress - searchLen );
            }
            
            pos++;
        } 
        else
        {
            pos = 0;
        }        
    }
    
    return NULL;
    }
}

by:danger's