memscan

Classes, exceptions, and methods to search for a pattern in the memory of a remote process.

class pyjectify.windows.modules.memscan.MemScan(process: ProcessHandle)[source]

This class provides methods to find a pattern inside a remote process memory.

Initialization: bind the module to a specific process

Parameters:

process – ProcessHandle targeted by the module

property addrs: list[int]

Addresses to scan, matching with the previous search. If empty, scan all addresses.

reset() None[source]

Reset found memory addresses (clear the ‘addrs’ attribute)

scan(pattern: bytes) list[int][source]

Search a pattern in the whole memory of the target process or among previously found memory addresses

Set the ‘addrs’ attribute to the matching addresses

Parameters:

pattern – regex pattern

Returns:

The addresses with bytes matching with the pattern