Class PtrRemover

Contains methods for identifying and removing pointers to unwanted data.

Inheritance

System.Object

PtrRemover

Inherited Members

System.Object.ToString()

System.Object.Equals(System.Object)

System.Object.Equals(System.Object, System.Object)

System.Object.ReferenceEquals(System.Object, System.Object)

System.Object.GetHashCode()

System.Object.GetType()

System.Object.MemberwiseClone()

Namespace: ERC.Utilities

Assembly: ERC.Net.dll

Syntax

public static class PtrRemover

Methods

RemovePointers(MachineType, Dictionary<IntPtr, String>, Byte[])

Removes pointers which contain unwanted bytes.

Declaration

public static Dictionary<IntPtr, string> RemovePointers(MachineType mt, Dictionary<IntPtr, string> srcList, byte[] bytes)

Parameters

Type	Name	Description
MachineType	mt	MachineType architecture of the associated process.
System.Collections.Generic.Dictionary<System.IntPtr, System.String>	srcList	The list from which to remove the pointers
System.Byte[]	bytes	If a pointer contains any of these bytes it will be discarded

Returns

Type	Description
System.Collections.Generic.Dictionary<System.IntPtr, System.String>	Returns a ErcResult of Dictionary IntPtr, String

RemovePointers(MachineType, List<IntPtr>, Byte[])

Removes pointers which contain unwanted bytes.

Declaration

public static List<IntPtr> RemovePointers(MachineType mt, List<IntPtr> srcList, byte[] bytes)

Parameters

Type	Name	Description
MachineType	mt	MachineType architecture of the associated process.
System.Collections.Generic.List<System.IntPtr>	srcList	The list from which to remove the pointers
System.Byte[]	bytes	If a pointer contains any of these bytes it will be discarded

Returns

Type	Description
System.Collections.Generic.List<System.IntPtr>	Returns a ErcResult of List IntPtr

RemovePointersProtection(ProcessInfo, List<IntPtr>, String)

Removes pointers from a dictionary when pointers do not have the protection level specified.

Declaration

public static List<IntPtr> RemovePointersProtection(ProcessInfo info, List<IntPtr> srcList, string protection = "exec")

Parameters

Type	Name	Description
ProcessInfo	info	ProcessInfo object of the associated process.
System.Collections.Generic.List<System.IntPtr>	srcList	List of pointers.
System.String	protection	Specified protection level of pointers.

Returns

Type	Description
System.Collections.Generic.List<System.IntPtr>	Returns a Dictionary of Intptr, string

RemovePointersProtection(ProcessInfo, List<IntPtr>, UInt32)

Removes pointers from a dictionary when pointers do not have the protection level specified.

Declaration

public static List<IntPtr> RemovePointersProtection(ProcessInfo info, List<IntPtr> srcList, uint protection)

Parameters

Type	Name	Description
ProcessInfo	info	ProcessInfo object of the associated process.
System.Collections.Generic.List<System.IntPtr>	srcList	List of pointers.
System.UInt32	protection	Specified protection level of pointers.

Returns

Type	Description
System.Collections.Generic.List<System.IntPtr>	Returns a Dictionary of Intptr, string