Log in

View Full Version : Ida


golden_123
July 28th, 2002, 22:10
HI i have ida verson 4.1, and was going threw Ghric3 tut on cracking ghost.exe. When i search for text in core i never find what i suppose to. Is it possible my version is diffent then his or is alt-b not the shortcut for that search like he said in his tut. I did a search in ida for that feature and came across this:

long FindBinary (long ea,long flag,char str);
// str - a string as a user enters it for Search Text
in Core
// example: "41 42" - find 2 bytes 41h,42h

I honestly dont know what that is talking about or how to do it. Any help will be greatly appreciated.

Aimless
July 29th, 2002, 07:28
Simple...

SEARCH in BINARY
=============
This will search the "binary" file. It actually looks for the "bytes" of data rather than "HOW" they are represented in the disassembly screen. So a search-in-binary for "AIMLESS" will actually CONVERT A=35, I=4C, M=22 (just examples) and so on, and search for these "BYTES".

SEARCH in TEXT
===========
Same as in wordprocessor searches. It will search based on what you "SEE" in the disassembly. Therefore, you can also search for instructions like "PUSH" or "CALL".

Have Phun, Forever.