find
Find a pattern.
arguments
arg1: The address to start searching from. Notice
that the searching will stop when the end of the memory page this address
resides in has been reached. This means you cannot search the complete process
memory without enumerating the memory pages first.
arg2: The byte pattern to search for. This byte pattern can contain wildcards (?) for example: "EB0?90??8D".
[arg3]: The size of the data to search in.
result
The $result variable is set to the virtual address of
the address that matches the byte pattern. $result will be 0 when the pattern
could not be matched.