Difference between revisions of "Auto Assembler:aobScanModule"
Jump to navigation
Jump to search
(Created page with ''''Auto Assembler''' aobScanModule(''SybolName'', ''ModuleName'', ''AOBString'') Scans the memory of a specific module for the given array of byte and sets the result to the sym…') |
|||
| (11 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
| − | '''Auto Assembler''' aobScanModule('' | + | [[Category:Assembler]] |
| + | '''Auto Assembler''' aobScanModule(''SymbolName'', ''ModuleName'', ''AOBString'') | ||
Scans the memory of a specific module for the given array of byte and sets the result to the symbol name. | Scans the memory of a specific module for the given array of byte and sets the result to the symbol name. | ||
| − | + | 'x', '?', and '*' are seen as a wildcard. | |
| − | === | + | Note: Wildcards can be written as one per byte or one per character of byte. |
| + | :If separated by spaces the wildcard will be interpreted as a byte. | ||
| + | i.e.: | ||
| + | 5x 48 8D 6x 24 E0 | ||
| + | 5? 48 8D 6? 24 E0 | ||
| + | 5* 48 8D 6* 24 E0 | ||
| + | xx 48 8D xx 24 E0 | ||
| + | ?? 48 8D ?? 24 E0 | ||
| + | ** 48 8D ** 24 E0 | ||
| + | x 48 8D x 24 E0 | ||
| + | ? 48 8D ? 24 E0 | ||
| + | * 48 8D * 24 E0 | ||
| + | |||
| + | === Command Parameters === | ||
{|width="85%" cellpadding="10%" cellpadding="5%" cellspacing="0" border="0" | {|width="85%" cellpadding="10%" cellpadding="5%" cellspacing="0" border="0" | ||
!align="left"|Parameter | !align="left"|Parameter | ||
| Line 26: | Line 40: | ||
== Examples == | == Examples == | ||
aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 53 48 8D 64 24 E0) | aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 53 48 8D 64 24 E0) | ||
| + | |||
| + | aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 xx xx 8D 64 24 E0) | ||
| + | |||
| + | aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 x x 8D 64 24 E0) | ||
aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 ** ** 8D 64 24 E0) | aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 ** ** 8D 64 24 E0) | ||
| + | |||
| + | aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 * * 8D 64 24 E0) | ||
aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 ?? ?? 8D 64 24 E0) | aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 ?? ?? 8D 64 24 E0) | ||
| + | |||
| + | aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 ? ? 8D 64 24 E0) | ||
| + | |||
| + | aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 5* 48 *D 64 24 E0) | ||
| + | |||
| + | aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00xx8D6424E0) | ||
aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00**8D6424E0) | aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00**8D6424E0) | ||
| Line 37: | Line 63: | ||
== See also == | == See also == | ||
* [[Cheat_Engine:Auto Assembler|Auto Assembler]] | * [[Cheat_Engine:Auto Assembler|Auto Assembler]] | ||
| + | * [[Auto_Assembler:Commands|Auto Assembler Commands]] | ||
| − | === Related | + | === Related Commands === |
* [[Auto Assembler:aobScan|aobScan]] | * [[Auto Assembler:aobScan|aobScan]] | ||
| + | * [[Auto_Assembler:aobScanRegion|aobScanRegion]] | ||
* [[Auto Assembler:alloc|alloc]] | * [[Auto Assembler:alloc|alloc]] | ||
* [[Auto Assembler:dealloc|dealloc]] | * [[Auto Assembler:dealloc|dealloc]] | ||
| + | * [[Auto Assembler:globalAlloc|globalAlloc]] | ||
| + | * [[Auto Assembler:createThread|createThread]] | ||
* [[Auto Assembler:define|define]] | * [[Auto Assembler:define|define]] | ||
* [[Auto Assembler:fullAccess|fullAccess]] | * [[Auto Assembler:fullAccess|fullAccess]] | ||
| Line 52: | Line 82: | ||
* [[Auto Assembler:registerSymbol|registerSymbol]] | * [[Auto Assembler:registerSymbol|registerSymbol]] | ||
* [[Auto Assembler:unregisterSymbol|unregisterSymbol]] | * [[Auto Assembler:unregisterSymbol|unregisterSymbol]] | ||
| − | * [[Auto Assembler:LUA|LUA | + | * [[Auto Assembler:LUA ASM|LUA ASM]] |
| − | |||
Revision as of 01:12, 13 January 2018
Auto Assembler aobScanModule(SymbolName, ModuleName, AOBString)
Scans the memory of a specific module for the given array of byte and sets the result to the symbol name. 'x', '?', and '*' are seen as a wildcard.
Note: Wildcards can be written as one per byte or one per character of byte.
- If separated by spaces the wildcard will be interpreted as a byte.
i.e.:
5x 48 8D 6x 24 E0 5? 48 8D 6? 24 E0 5* 48 8D 6* 24 E0 xx 48 8D xx 24 E0 ?? 48 8D ?? 24 E0 ** 48 8D ** 24 E0 x 48 8D x 24 E0 ? 48 8D ? 24 E0 * 48 8D * 24 E0
Command Parameters
| Parameter | Type | Description |
|---|---|---|
| SymbolName | string | The symbol name to use if aob is found |
| ModuleName | string | The name of the module to scan in |
| AOBString | string | The string of bytes, as hex, to scan for |
Examples
aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 53 48 8D 64 24 E0)
aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 xx xx 8D 64 24 E0)
aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 x x 8D 64 24 E0)
aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 ** ** 8D 64 24 E0)
aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 * * 8D 64 24 E0)
aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 ?? ?? 8D 64 24 E0)
aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 ? ? 8D 64 24 E0)
aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00 5* 48 *D 64 24 E0)
aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00xx8D6424E0)
aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00**8D6424E0)
aobScanModule(SomeSymbol, Tutorial-x86_64.exe, 00??8D6424E0)
