Difference between revisions of "Auto Assembler:aobScan"
Jump to navigation
Jump to search
(→Related Commands) |
|||
| Line 45: | Line 45: | ||
=== Related Commands === | === Related Commands === | ||
* [[Auto Assembler:aobScanModule|aobScanModule]] | * [[Auto Assembler:aobScanModule|aobScanModule]] | ||
| + | * [[Auto_Assembler:aobScanRegion|aobScanRegion]] | ||
* [[Auto Assembler:alloc|alloc]] | * [[Auto Assembler:alloc|alloc]] | ||
* [[Auto Assembler:dealloc|dealloc]] | * [[Auto Assembler:dealloc|dealloc]] | ||
| + | * [[Auto Assembler:globalAlloc|globalAlloc]] | ||
* [[Auto Assembler:createThread|createThread]] | * [[Auto Assembler:createThread|createThread]] | ||
* [[Auto Assembler:define|define]] | * [[Auto Assembler:define|define]] | ||
Revision as of 22:28, 4 January 2018
Auto Assembler aobScan(SymbolName, AOBString)
Scans the memory for the given array of byte and sets the result to the symbol name. '?' and '*' are seen as a wildcard.
Note: Wildcards can be written as one per byte or one per character of byte.
- i.e.: ? or * or ?? or **
- If not separated by spaces the wildcard will be interpreted as a byte.
Command Parameters
| Parameter | Type | Description |
|---|---|---|
| SymbolName | string | The symbol name to use if aob is found |
| AOBString | string | The string of bytes, as hex, to scan for |
Examples
aobScan(SomeSymbol, 00 53 48 8D 64 24 E0)
aobScan(SomeSymbol, 00 ** ** 8D 64 24 E0)
aobScan(SomeSymbol, 00 * * 8D 64 24 E0)
aobScan(SomeSymbol, 00 ?? ?? 8D 64 24 E0)
aobScan(SomeSymbol, 00 ? ? 8D 64 24 E0)
aobScan(SomeSymbol, 00**8D6424E0)
aobScan(SomeSymbol, 00??8D6424E0)
