From 936977542ecfb025b784cd457fcbfd7dffbe5f5c Mon Sep 17 00:00:00 2001 From: Philipp Paul G <40047520+Ceiridge@users.noreply.github.com> Date: Wed, 20 Dec 2023 14:45:56 +0100 Subject: [PATCH] Improve patterns.xml --- patterns.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/patterns.xml b/patterns.xml index 3840d14..cb46e14 100644 --- a/patterns.xml +++ b/patterns.xml @@ -8,7 +8,7 @@ Create a new issue if a pattern stops working with any browser. - New method: Debug Chrome in WinDBG, download the respective chrome.dll.pdb and load it for the chrome.dll module (lm -> ld ModuleName /f FileName) (.reload may be required). Then use x /D /f chrome**!*FUNCTION_NAME* to search for functions. Note down the offset and find it in a disassembler to make a pattern/signature. + How to find functions: Debug Chrome in WinDBG, download the respective chrome.dll.pdb and load it for the chrome.dll module (lm -> ld ModuleName /f FileName) (.reload may be required). Then use x /D /f chrome**!*FUNCTION_NAME* to search for functions. Note down the offset and find it in a disassembler to make a pattern/signature. For Brave: Download .sym debug files at https://github.com/brave/brave-browser/releases/tag (Search for the function name and add the offset to the base address) -->