Closed ComeInRage closed 9 months ago
Thank you for sharing your suggestion! It sounds sensible, but the code in commit 9c172c351977eb2b4ad867b91b9083b6fdb236f2 seems to add too much unecessary maintenance costs. For example, I don't see a reason to have more than one instance of these statements:
var processSampleId = Pine.CommonConversion.StringBase16FromByteArray(
Pine.CommonConversion.HashSHA256(processSampleFile));
Console.WriteLine($"Reading from process sample {processSampleId}.");
I am not sure the problems caused by such a duplication are necessary.
Thank you for your response. I am not good at C#, so I suggested a minimal working solution based on my skills.
Thank you, I will merge this as it is now.
Add support for root-address flag when reading from saved sample.
Sanderling does not support
--root-address
flag and ignores it when reading from saved process sample. With support for the--root-address
flag, it is no longer necessary to run a search for UIRoot candidates. It is enough to specify the address. Also it speeds up the program execution when root-address is known.