关于 binsig

此包提供了一种使用部分字节签名搜索字节模式的方法。

用法

use binsig::Pattern;

let haystack = &[
    0x11, 0x22, 0x33, 0x0, 0x0, 0x11, 0x22, 0x33, 0x11, 0x0, 0x33,
];
let pattern = Pattern::from_ida("11 ?? 33").expect("Should be valid signature");
for (pos, view) in pattern.scan(haystack) {
    println!("found needle at {} with bytes {:?}!", pos, view);
}

输出

found needle at 0 with bytes [17, 34, 51]!
found needle at 5 with bytes [17, 34, 51]!
found needle at 8 with bytes [17, 0, 51]!