31 lines
1.1 KiB
HTML
31 lines
1.1 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<html>
|
|
<head>
|
|
<title>find</title>
|
|
<meta name="GENERATOR" content="WinCHM">
|
|
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
|
<style>
|
|
html,body {
|
|
/* Default Font */
|
|
font-family: Courier New;
|
|
font-size: 11pt;
|
|
}
|
|
</style>
|
|
|
|
</head>
|
|
|
|
<body>
|
|
<P><STRONG>find<BR></STRONG> Find a pattern.</P>
|
|
<P class=rvps3><U>arguments</U> <BR> arg1: The address to start searching from. Notice
|
|
that the searching will stop when the end of the memory page this address
|
|
resides in has been reached. This means you cannot search the complete process
|
|
memory without enumerating the memory pages first.</P>
|
|
<P class=rvps3> arg2: The byte pattern to search for.
|
|
This byte pattern can contain wildcards (?) for example: "EB0?90??8D".</P>
|
|
<P class=rvps3>[arg3]: The size of the data to search
|
|
in.</P>
|
|
<P class=rvps3><U>result <BR></U>The $result variable is set to the virtual address of
|
|
the address that matches the byte pattern. $result will be 0 when the pattern
|
|
could not be matched.</P>
|
|
<P> </P></body>
|
|
</html>
|