Searching the memory Space
To perform a search we need s and four additional parameters
0:009> **s -d 0 L?80000000 41414141**
033a0a14 41414141 80928f8e 45459045 49494949 AAAA....E.EEIIII
06daf884 41414141 000000ed 000000da 000000ea AAAA............
69523820 41414141 db5e5e5e b6b7b7db b4b6b6b6 AAAA^^^.........
6cbb4600 41414141 00d5b7af 00000000 00000000 AAAA............
7542e594 41414141 64644141 64646464 89898918 AAAAAAdddddd....
7542e5b4 41414141 64644141 64646464 89898918 AAAAAAdddddd....
7542e5d4 41414141 64644141 64646464 89898918 AAAAAAdddddd....
7542e994 41414141 64644141 64646464 89898989 AAAAAAdddddd....
7542e9b4 41414141 64644141 64646464 89898989 AAAAAAdddddd....
7542e9d4 41414141 64644141 64646464 89898989 AAAAAAdddddd....
7542ed94 41414141 64644141 64646464 89898989 AAAAAAdddddd....
7542edb4 41414141 64644141 64646464 89898989 AAAAAAdddddd....
7542edd4 41414141 64644141 64646464 89898989 AAAAAAdddddd....
7547db50 41414141 45454341 49494545 4f4e4949 AAAAACEEEEIIIINO
7547df50 41414141 45454341 49494545 4f4e4949 AAAAACEEEEIIIINO
7547e288 41414141 43c64141 45454545 49494949 AAAAAA.CEEEEIIII
7547e2a8 41414141 43c64141 45454545 49494949 AAAAAA.CEEEEIIII
7547e388 41414141 43c4c5c4 45454545 49494949 AAAA...CEEEEIIII
7547e3a8 41414141 43c4c5c4 45454545 49494949 AAAA...CEEEEIIII
7547e488 41414141 c7c64141 45454545 49494949 AAAAAA..EEEEIIII
7547e4a8 41414141 c7c64141 45454545 49494949 AAAAAA..EEEEIIII
7547e988 41414141 43c64141 45454545 49494949 AAAAAA.CEEEEIIII
7547e9a8 41414141 43c64141 45454545 49494949 AAAAAA.CEEEEIIII
7547eb50 41414141 45454341 49494545 4f4e4949 AAAAACEEEEIIIINO
7547ec88 41414141 43414141 45454545 49494949 AAAAAAACEEEEIIII
7547eca8 41414141 43414141 45454545 49494949 AAAAAAACEEEEIIII
7547fc50 41414141 45454341 49494545 4f4e4949 AAAAACEEEEIIIINO
7547fd88 41414141 43c64141 45454545 49494949 AAAAAA.CEEEEIIII
7547fda8 41414141 43c64141 45454545 49494949 AAAAAA.CEEEEIIII
7547fe08 41414141 43c4c5c4 45454545 49494949 AAAA...CEEEEIIII
7547fe28 41414141 43c4c5c4 45454545 49494949 AAAA...CEEEEIIII
7547fe88 41414141 c7c64141 45454545 49494949 AAAAAA..EEEEIIII
7547fea8 41414141 c7c64141 45454545 49494949 AAAAAA..EEEEIIII
7547ffd0 41414141 45454341 49494545 4f4e4949 AAAAACEEEEIIIINO
75480108 41414141 43c64141 45454545 49494949 AAAAAA.CEEEEIIII
75480128 41414141 43c64141 45454545 49494949 AAAAAA.CEEEEIIII
760b09ec 41414141 41414141 41404141 00000741 AAAAAAAAAA@AA...
760b09f0 41414141 41404141 00000741 00000000 AAAAAA@AA.......
7617ba34 41414141 02444444 02024040 41404040 AAAADDD.@@..@@@A
7624acb0 41414141 41414141 41414141 41414141 AAAAAAAAAAAAAAAA
7624acb4 41414141 41414141 41414141 41414141 AAAAAAAAAAAAAAAA
7624acb8 41414141 41414141 41414141 41414141 AAAAAAAAAAAAAAAA
7624acbc 41414141 41414141 41414141 41414141 AAAAAAAAAAAAAAAA
7624acc0 41414141 41414141 41414141 41414141 AAAAAAAAAAAAAAAA
7624acc4 41414141 41414141 41414141 41414141 AAAAAAAAAAAAAAAA
7624acc8 41414141 41414141 41414141 41414141 AAAAAAAAAAAAAAAA
7624accc 41414141 41414141 41414141 00484141 AAAAAAAAAAAAAAH.
7624acd0 41414141 41414141 00484141 00000000 AAAAAAAAAAH.....
7624acd4 41414141 00484141 00000000 00000000 AAAAAAH.........
76689210 41414141 db5e5e5e b6b7b7db b4b6b6b6 AAAA^^^.........
7686e3d4 41414141 79414141 0000c7c6 708cbf00 AAAAAAAy.......p
7686e404 41414141 5e414141 0000cbc2 3b7dc200 AAAAAAA^......};
7686e430 41414141 41414141 55414141 0000cac2 AAAAAAAAAAAU....
7686e434 41414141 55414141 0000cac2 7281c2b1 AAAAAAAU.......r
7686e460 41414141 41414141 4b414141 0000cac2 AAAAAAAAAAAK....
7686e464 41414141 4b414141 0000cac2 7685c2b1 AAAAAAAK.......v
7686e490 41414141 41414141 4b414141 0000cac2 AAAAAAAAAAAK....
7686e494 41414141 4b414141 0000cac2 4c58c2b1 AAAAAAAK......XL
7686e4d4 41414141 41414141 12464141 c241310e AAAAAAAAAAF..1A.
7686e4d8 41414141 12464141 c241310e 0000cbc8 AAAAAAF..1A.....
7686e504 41414141 41414141 26414141 9566220e AAAAAAAAAAA&."f.
7686e508 41414141 26414141 9566220e cacdcbc2 AAAAAAA&."f.....
7686e534 41414141 41414141 3a414141 aa100c0e AAAAAAAAAAA:....
7686e538 41414141 3a414141 aa100c0e c2c2c2b2 AAAAAAA:........
7686e564 41414141 41414141 128f6643 11090c0e AAAAAAAACf......
7686e568 41414141 128f6643 11090c0e 6c6f77a9 AAAACf.......wol
7686e594 41414141 76564141 a9a9a9a9 06080c11 AAAAAAVv........
76879510 41414141 41414141 a7575844 0202fbc1 AAAAAAAADXW.....
76879514 41414141 a7575844 0202fbc1 02020202 AAAADXW.........
768bec4c 41414141 00d94e43 00000000 00000000 AAAACN..........
7735cdc4 41414141 6464663c 64646464 14141414 AAAA<fdddddd....
7735d094 41414141 fcf8ecc9 fcfdfdfc fcfcfcfd AAAA............
77398bc4 41414141 6464663c 64646464 14141414 AAAA<fdddddd....
77398e94 41414141 fcf8ecc9 fcfdfdfc fcfcfcfd AAAA............
77890c8c 41414141 42424241 42424242 43434342 AAAAABBBBBBBBCCCSearch space with ASCII string
0:009> s -a 0 L?80000000 "This program cannot be run in DOS mode"
00dc004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
0303004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
0607004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
56c1004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
5726004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
6245004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
644e004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
66ac004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
6934004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
6ad5004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
6c36004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
6ca8004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
6d2a004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7069004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
70c2004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
713f004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
714e004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7211004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
72d6004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
72f5004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7302004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
730a004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7369004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
73a5004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
73de004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
73ec004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7416004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
742e004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7430004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7431004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7437004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
743f004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7456004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
74b8004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
74ca004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
74cc004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7503004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7510004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7516004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
751b004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7542004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7547004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7551004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7559004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7565004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
758a004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7593004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
76c8004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
76dd004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
76e0004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
772d004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7744004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7752004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7762004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
776f004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
777e004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program can
7788004e 54 68 69 73 20 70 72 6f-67 72 61 6d 20 63 61 6e This program canother Example: will update ESP with Hello and then search the string
0:009> dd esp L1
06daf884 41414141
0:009> da esp
06daf884 "AAAAo"
0:009> ea esp "Hello"
0:009> s -a 0 L?80000000 "Hello"
06daf884 48 65 6c 6c 6f 00 00 00-da 00 00 00 ea 00 00 00 Hello...........
77911430 48 65 6c 6c 6f cc cc cc-cc cc cc cc cc cc cc cc Hello...........Last updated