The find command in x64dbg(x86),
(found here: https://help.x64dbg.com/en/latest/commands/searching/find.html) doesn't return anything. For example:
findall 0x00524180, "E8 ????????" returns 50 occurences
find 0x00524180, "E8 ????????" doesn't return anything.
However, when I write a false adress, or a wrong pattern, it returns an error.. For my goal, I want to restore the IAT of a program, which fools Scylla doing that: changing absolute import calls to Relative ones (FF 15 funcAdress -> 90 E8 func2Adress).
We can see why i wrote func2Adress, a sort of code is added which lead to the import function. For example, if I follow the call in adress 0x5950A82, I find many JMP instructions and other relative calls + some "Junk instructions" before the call of the import function. in the end to the import function. So what I'm trying to do is to use the x64dbg commands to replace each relative call with it's correct import function adress (absolute call) so that I can use Scylla to find IAT, but here I can't even use the find command, so I don't know if it's the best way to proceed. Any idea? For info, the program is packed by Thermida. Thank you!