Skip to content

Latest commit

 

History

History
15 lines (8 loc) · 515 Bytes

search_function_call_pattern.md

File metadata and controls

15 lines (8 loc) · 515 Bytes

Search Function Call Pattern

This script searches the function call passing a specific value.

For example, consider the case where you want to look for the function call of RtlpImageDirectoryEntryToDataEx() whose third argument is IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT (0xd).

By using this script, you can search such a call site by typing RtlpImageDirectoryEntryToDataEx(_, _, 0xd, _, _)

Input for searching

input

Search results

result