Results 1 to 2 of 2

Thread: Ida

  1. #1


    HI i have ida verson 4.1, and was going threw Ghric3 tut on cracking ghost.exe. When i search for text in core i never find what i suppose to. Is it possible my version is diffent then his or is alt-b not the shortcut for that search like he said in his tut. I did a search in ida for that feature and came across this:

    long FindBinary (long ea,long flag,char str);
    // str - a string as a user enters it for Search Text
    in Core
    // example: "41 42" - find 2 bytes 41h,42h

    I honestly dont know what that is talking about or how to do it. Any help will be greatly appreciated.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2

    As above


    This will search the "binary" file. It actually looks for the "bytes" of data rather than "HOW" they are represented in the disassembly screen. So a search-in-binary for "AIMLESS" will actually CONVERT A=35, I=4C, M=22 (just examples) and so on, and search for these "BYTES".

    Same as in wordprocessor searches. It will search based on what you "SEE" in the disassembly. Therefore, you can also search for instructions like "PUSH" or "CALL".

    Have Phun, Forever.
    Blame Microsoft, get l337 !!


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts