|
Searches for hex pattern in file in range defined by textbegin and textend using the Boyer-Moore algorithm.
Usage
findbinary[searcharea]=<text(hexstring)>
Examples
begin[searcharea]=0,end[searcharea]=1023,findbinary[searcharea]=48616C6C6F57656C74
section[searcharea]=.text,findbinary[searcharea]= 558BEC83C4F0
- Searches for HalloWelt inside the first 1024 bytes of the file.
- Searches for PUSH EBP; MOV EBP, ESP; ADD ESP, F0 within the code section of a Delphi application.
Description
Searches for hex pattern in file in the defined range using the Boyer-Moore algorithm. To define the range, take a look at begin[searcharea] and end[searcharea], or section[searcharea].
See also
Similar parameters
Similar commands
|