New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

pass variable to findallmem #2079

Open
TheCrazyT opened this Issue Nov 17, 2018 · 4 comments

Comments

Projects
None yet
3 participants
@TheCrazyT

TheCrazyT commented Nov 17, 2018

I'm currently trying to write a script, but passing variables to that function does not seem to be possible yet.
Is this correct?

@Ahmadmansoor

This comment has been minimized.

Ahmadmansoor commented Nov 17, 2018

I think writing Plugin will more effective .

@TheCrazyT

This comment has been minimized.

TheCrazyT commented Nov 17, 2018

why should it?
if i can use the command with a pattern, why i'm not able to use a variable directly.
For example:

findallmem 0x10000,"00542814"
mov rdx,ref.addr(0)

works, but:

findallmem 0x10000,$variable
mov rdx,ref.addr(0)

won't.

I just wanted to get rid of a step to convert a number to reversed hex-format manually all the time.
Reference-search sadly won't search through complete memory,too.
Wish there would be an easier solution.

@mrexodia

This comment has been minimized.

Member

mrexodia commented Nov 17, 2018

Hey, long time no see ^^

Currently the command doesn’t take a variable because there isn’t really a way to know how to convert the variable to a byte pattern (variables don’t have a size)...

@Ahmadmansoor

This comment has been minimized.

Ahmadmansoor commented Nov 17, 2018

I am working on a plugin , It could help u .

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment