findhex

FindPattern(hD3D, 0x128000, (PBYTE)"\xC7\x06\x00\x00\x00\x00\x89\x86\x00\x00\x00\x00\x89\x86", "xx????xx????xx");//这种HOOK方式就是找到d3d9.dll的接口，搜索特征码，找到Vtable（虚函数表）
DWORD FindPattern ( DWORD startAddres, DWORD fileSize, PBYTE pattern, char mask[] )
{
    DWORD pos = ;
    int searchLen = strlen ( mask ) - ;

    for ( DWORD retAddress = startAddres; retAddress < startAddres + fileSize; retAddress++ )
    {
        if ( *(PBYTE) retAddress == pattern[ pos ] || mask[ pos ] == '?' )
        {
            if ( mask[ pos +  ] == '\0' )
            {
                return ( retAddress - searchLen );
            }

            pos++;
        }
        else
        {
            pos = ;
        }
    }

    return NULL;
    }
}

by:danger's