From afdb87a884c7ccef5c0c4a2274d47c65e073ea89 Mon Sep 17 00:00:00 2001 From: "Mr. eXoDia" Date: Sat, 5 Jul 2014 16:33:29 +0200 Subject: [PATCH] PROJECT: updated help --- help/find.htm | 4 +- help/findall.htm | 31 +++++++++ help/x64_dbg.wcp | 160 +++++++++++++++++++++++++---------------------- 3 files changed, 118 insertions(+), 77 deletions(-) create mode 100644 help/findall.htm diff --git a/help/find.htm b/help/find.htm index 9cf8087d..3b3e52df 100644 --- a/help/find.htm +++ b/help/find.htm @@ -15,7 +15,7 @@ html,body { -

find
Dump at a certain position.

+

find
 Find a pattern.

arguments
  arg1: The address to start searching from. Notice that the searching will stop when the end of the memory page this address resides in has been reached. This means you cannot search the complete @@ -28,4 +28,4 @@ The size of the data to search in.

class=rvts9>The $result variable is set to the virtual address of the address that matches the byte pattern. $result will be 0 when the pattern could not be matched.

-

 

\ No newline at end of file +

 

\ No newline at end of file diff --git a/help/findall.htm b/help/findall.htm new file mode 100644 index 00000000..15d94d49 --- /dev/null +++ b/help/findall.htm @@ -0,0 +1,31 @@ + + + +findall + + + + + + + +

findall
Find all occurrences of a pattern.

+

arguments
  arg1: The address to start searching +from. Notice that the searching will stop when the end of the memory page this +address resides in has been reached. This means you cannot search the complete +process memory without enumerating the memory pages first.

+

  +arg2: The byte pattern to search for. This byte pattern can contain wildcards +(?) for example: "EB0?90??8D".

+

[arg3]: +The size of the data to search in.

+

result
$result is set to the number of +occurrences.

+

 

diff --git a/help/x64_dbg.wcp b/help/x64_dbg.wcp index ada83038..31f321c8 100644 --- a/help/x64_dbg.wcp +++ b/help/x64_dbg.wcp @@ -96,7 +96,7 @@ Font= DefaultTopic=Introduction.htm [TOPICS] -TitleList=116 +TitleList=117 TitleList.Title.0=Introduction TitleList.Level.0=0 TitleList.Url.0=Introduction.htm @@ -475,7 +475,7 @@ TitleList.Status.37=0 TitleList.Keywords.37= TitleList.ContextNumber.37=1004 TitleList.ApplyTemp.37=0 -TitleList.Expanded.37=1 +TitleList.Expanded.37=0 TitleList.Kind.37=0 TitleList.Title.38=strlen/charcount/ccount TitleList.Level.38=2 @@ -1037,224 +1037,234 @@ TitleList.ContextNumber.93=1114 TitleList.ApplyTemp.93=0 TitleList.Expanded.93=0 TitleList.Kind.93=0 -TitleList.Title.94=Plugins -TitleList.Level.94=0 -TitleList.Url.94=Plugins.htm +TitleList.Title.94=findall +TitleList.Level.94=2 +TitleList.Url.94=findall.htm TitleList.Icon.94=0 TitleList.Status.94=0 TitleList.Keywords.94= -TitleList.ContextNumber.94=1050 +TitleList.ContextNumber.94=1115 TitleList.ApplyTemp.94=0 TitleList.Expanded.94=0 TitleList.Kind.94=0 -TitleList.Title.95=The basics -TitleList.Level.95=1 -TitleList.Url.95=The_basics.htm +TitleList.Title.95=Plugins +TitleList.Level.95=0 +TitleList.Url.95=Plugins.htm TitleList.Icon.95=0 TitleList.Status.95=0 TitleList.Keywords.95= -TitleList.ContextNumber.95=1103 +TitleList.ContextNumber.95=1050 TitleList.ApplyTemp.95=0 TitleList.Expanded.95=0 TitleList.Kind.95=0 -TitleList.Title.96=API +TitleList.Title.96=The basics TitleList.Level.96=1 -TitleList.Url.96=Exports.htm +TitleList.Url.96=The_basics.htm TitleList.Icon.96=0 TitleList.Status.96=0 TitleList.Keywords.96= -TitleList.ContextNumber.96=1051 +TitleList.ContextNumber.96=1103 TitleList.ApplyTemp.96=0 TitleList.Expanded.96=0 TitleList.Kind.96=0 -TitleList.Title.97=_plugin_registercallback -TitleList.Level.97=2 -TitleList.Url.97=_plugin_registercallback.htm +TitleList.Title.97=API +TitleList.Level.97=1 +TitleList.Url.97=Exports.htm TitleList.Icon.97=0 TitleList.Status.97=0 TitleList.Keywords.97= -TitleList.ContextNumber.97=1052 +TitleList.ContextNumber.97=1051 TitleList.ApplyTemp.97=0 TitleList.Expanded.97=0 TitleList.Kind.97=0 -TitleList.Title.98=_plugin_unregistercallback +TitleList.Title.98=_plugin_registercallback TitleList.Level.98=2 -TitleList.Url.98=_plugin_unregistercallback.htm +TitleList.Url.98=_plugin_registercallback.htm TitleList.Icon.98=0 TitleList.Status.98=0 TitleList.Keywords.98= -TitleList.ContextNumber.98=1053 +TitleList.ContextNumber.98=1052 TitleList.ApplyTemp.98=0 TitleList.Expanded.98=0 TitleList.Kind.98=0 -TitleList.Title.99=_plugin_registercommand +TitleList.Title.99=_plugin_unregistercallback TitleList.Level.99=2 -TitleList.Url.99=_plugin_registercommand.htm +TitleList.Url.99=_plugin_unregistercallback.htm TitleList.Icon.99=0 TitleList.Status.99=0 TitleList.Keywords.99= -TitleList.ContextNumber.99=1054 +TitleList.ContextNumber.99=1053 TitleList.ApplyTemp.99=0 TitleList.Expanded.99=0 TitleList.Kind.99=0 -TitleList.Title.100=_plugin_unregistercommand +TitleList.Title.100=_plugin_registercommand TitleList.Level.100=2 -TitleList.Url.100=_plugin_unregistercommand.htm +TitleList.Url.100=_plugin_registercommand.htm TitleList.Icon.100=0 TitleList.Status.100=0 TitleList.Keywords.100= -TitleList.ContextNumber.100=1055 +TitleList.ContextNumber.100=1054 TitleList.ApplyTemp.100=0 TitleList.Expanded.100=0 TitleList.Kind.100=0 -TitleList.Title.101=_plugin_logprintf +TitleList.Title.101=_plugin_unregistercommand TitleList.Level.101=2 -TitleList.Url.101=_plugin_logprintf.htm +TitleList.Url.101=_plugin_unregistercommand.htm TitleList.Icon.101=0 TitleList.Status.101=0 TitleList.Keywords.101= -TitleList.ContextNumber.101=1056 +TitleList.ContextNumber.101=1055 TitleList.ApplyTemp.101=0 TitleList.Expanded.101=0 TitleList.Kind.101=0 -TitleList.Title.102=_plugin_logputs +TitleList.Title.102=_plugin_logprintf TitleList.Level.102=2 -TitleList.Url.102=_plugin_logputs.htm +TitleList.Url.102=_plugin_logprintf.htm TitleList.Icon.102=0 TitleList.Status.102=0 TitleList.Keywords.102= -TitleList.ContextNumber.102=1057 +TitleList.ContextNumber.102=1056 TitleList.ApplyTemp.102=0 TitleList.Expanded.102=0 TitleList.Kind.102=0 -TitleList.Title.103=_plugin_debugpause +TitleList.Title.103=_plugin_logputs TitleList.Level.103=2 -TitleList.Url.103=_plugin_debugpause.htm +TitleList.Url.103=_plugin_logputs.htm TitleList.Icon.103=0 TitleList.Status.103=0 TitleList.Keywords.103= -TitleList.ContextNumber.103=1058 +TitleList.ContextNumber.103=1057 TitleList.ApplyTemp.103=0 TitleList.Expanded.103=0 TitleList.Kind.103=0 -TitleList.Title.104=_plugin_debugskipexceptions +TitleList.Title.104=_plugin_debugpause TitleList.Level.104=2 -TitleList.Url.104=_plugin_debugskipexceptions.htm +TitleList.Url.104=_plugin_debugpause.htm TitleList.Icon.104=0 TitleList.Status.104=0 TitleList.Keywords.104= -TitleList.ContextNumber.104=1104 +TitleList.ContextNumber.104=1058 TitleList.ApplyTemp.104=0 TitleList.Expanded.104=0 TitleList.Kind.104=0 -TitleList.Title.105=_plugin_menuadd +TitleList.Title.105=_plugin_debugskipexceptions TitleList.Level.105=2 -TitleList.Url.105=_plugin_menuadd.htm +TitleList.Url.105=_plugin_debugskipexceptions.htm TitleList.Icon.105=0 TitleList.Status.105=0 TitleList.Keywords.105= -TitleList.ContextNumber.105=1108 +TitleList.ContextNumber.105=1104 TitleList.ApplyTemp.105=0 TitleList.Expanded.105=0 TitleList.Kind.105=0 -TitleList.Title.106=_plugin_menuaddentry +TitleList.Title.106=_plugin_menuadd TitleList.Level.106=2 -TitleList.Url.106=_plugin_menuaddentry.htm +TitleList.Url.106=_plugin_menuadd.htm TitleList.Icon.106=0 TitleList.Status.106=0 TitleList.Keywords.106= -TitleList.ContextNumber.106=1107 +TitleList.ContextNumber.106=1108 TitleList.ApplyTemp.106=0 TitleList.Expanded.106=0 TitleList.Kind.106=0 -TitleList.Title.107=_plugin_menuaddseparator +TitleList.Title.107=_plugin_menuaddentry TitleList.Level.107=2 -TitleList.Url.107=_plugin_menuaddseparator.htm +TitleList.Url.107=_plugin_menuaddentry.htm TitleList.Icon.107=0 TitleList.Status.107=0 TitleList.Keywords.107= -TitleList.ContextNumber.107=1106 +TitleList.ContextNumber.107=1107 TitleList.ApplyTemp.107=0 TitleList.Expanded.107=0 TitleList.Kind.107=0 -TitleList.Title.108=_plugin_menuclear +TitleList.Title.108=_plugin_menuaddseparator TitleList.Level.108=2 -TitleList.Url.108=_plugin_menuclear.htm +TitleList.Url.108=_plugin_menuaddseparator.htm TitleList.Icon.108=0 TitleList.Status.108=0 TitleList.Keywords.108= -TitleList.ContextNumber.108=1105 +TitleList.ContextNumber.108=1106 TitleList.ApplyTemp.108=0 TitleList.Expanded.108=0 TitleList.Kind.108=0 -TitleList.Title.109=Structures -TitleList.Level.109=1 -TitleList.Url.109=Structures.htm +TitleList.Title.109=_plugin_menuclear +TitleList.Level.109=2 +TitleList.Url.109=_plugin_menuclear.htm TitleList.Icon.109=0 TitleList.Status.109=0 TitleList.Keywords.109= -TitleList.ContextNumber.109=1059 +TitleList.ContextNumber.109=1105 TitleList.ApplyTemp.109=0 TitleList.Expanded.109=0 TitleList.Kind.109=0 -TitleList.Title.110=Callback Structures -TitleList.Level.110=2 -TitleList.Url.110=Callbacks.htm +TitleList.Title.110=Structures +TitleList.Level.110=1 +TitleList.Url.110=Structures.htm TitleList.Icon.110=0 TitleList.Status.110=0 TitleList.Keywords.110= -TitleList.ContextNumber.110=1060 +TitleList.ContextNumber.110=1059 TitleList.ApplyTemp.110=0 TitleList.Expanded.110=0 TitleList.Kind.110=0 -TitleList.Title.111=PLUG_INITSTRUCT +TitleList.Title.111=Callback Structures TitleList.Level.111=2 -TitleList.Url.111=PLUGINIT_STRUCT.htm +TitleList.Url.111=Callbacks.htm TitleList.Icon.111=0 TitleList.Status.111=0 TitleList.Keywords.111= -TitleList.ContextNumber.111=1061 +TitleList.ContextNumber.111=1060 TitleList.ApplyTemp.111=0 TitleList.Expanded.111=0 TitleList.Kind.111=0 -TitleList.Title.112=PLUG_SETUPSTRUCT +TitleList.Title.112=PLUG_INITSTRUCT TitleList.Level.112=2 -TitleList.Url.112=PLUG_SETUPSTRUCT.htm +TitleList.Url.112=PLUGINIT_STRUCT.htm TitleList.Icon.112=0 TitleList.Status.112=0 TitleList.Keywords.112= -TitleList.ContextNumber.112=1102 +TitleList.ContextNumber.112=1061 TitleList.ApplyTemp.112=0 TitleList.Expanded.112=0 TitleList.Kind.112=0 -TitleList.Title.113=Scripting -TitleList.Level.113=0 -TitleList.Url.113=Scripting.htm +TitleList.Title.113=PLUG_SETUPSTRUCT +TitleList.Level.113=2 +TitleList.Url.113=PLUG_SETUPSTRUCT.htm TitleList.Icon.113=0 TitleList.Status.113=0 TitleList.Keywords.113= -TitleList.ContextNumber.113=1069 +TitleList.ContextNumber.113=1102 TitleList.ApplyTemp.113=0 TitleList.Expanded.113=0 TitleList.Kind.113=0 -TitleList.Title.114=Special Thanks +TitleList.Title.114=Scripting TitleList.Level.114=0 -TitleList.Url.114=Special_Thanks.htm +TitleList.Url.114=Scripting.htm TitleList.Icon.114=0 TitleList.Status.114=0 TitleList.Keywords.114= -TitleList.ContextNumber.114=1024 +TitleList.ContextNumber.114=1069 TitleList.ApplyTemp.114=0 TitleList.Expanded.114=0 TitleList.Kind.114=0 -TitleList.Title.115=Fixed Top Style +TitleList.Title.115=Special Thanks TitleList.Level.115=0 -TitleList.Url.115=template\fixedtop.htm +TitleList.Url.115=Special_Thanks.htm TitleList.Icon.115=0 TitleList.Status.115=0 TitleList.Keywords.115= -TitleList.ContextNumber.115= +TitleList.ContextNumber.115=1024 TitleList.ApplyTemp.115=0 TitleList.Expanded.115=0 -TitleList.Kind.115=2 +TitleList.Kind.115=0 +TitleList.Title.116=Fixed Top Style +TitleList.Level.116=0 +TitleList.Url.116=template\fixedtop.htm +TitleList.Icon.116=0 +TitleList.Status.116=0 +TitleList.Keywords.116= +TitleList.ContextNumber.116= +TitleList.ApplyTemp.116=0 +TitleList.Expanded.116=0 +TitleList.Kind.116=2