Class FastStructScanner

source code

This scanner looks for a struct in memory.

Arguments:
    expected_values:
        Provide a list/tuple of dicts mapping member names to their
        expected values. Each dict in the list you provide will correspond
        to a struct at the same index in an array. If you're only looking
        for a single struct, pass a list with only one dict in it.
    type_name: Name of the type to scan for.

The base scanner.

Args:
   profile: The profile to use for this scan.
   address_space: The address space we use for scanning.
   window_size: The size of the overlap window between each buffer read.