Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

UEFIFind cannot find text pattern #404

Closed
platomav opened this issue Oct 9, 2024 · 2 comments
Closed

UEFIFind cannot find text pattern #404

platomav opened this issue Oct 9, 2024 · 2 comments

Comments

@platomav
Copy link

platomav commented Oct 9, 2024

Hello,

At the attached Apple UEFI image, I am trying to detect the following pattern:

244942494F534924................................2E00............2E00................2E00............2E00........................................0000

This pattern should exist under two duplicate GUIDs "C3E36D09-8294-4B97-A857-D5288FE33E28".

Checking the raw body, I can see that it is indeed 0x4A (same size as the pattern) and I can trace it from the start to the end (two 0x00 bytes). However, UEFIFind cannot find it for some reason. If I remove one null byte at the end, it finds it, though:

Just a wild guess, could it be something new line related? Or am I doing something wrong?

MBA11_00BB_03B_LOCKED.zip

@vit9696
Copy link
Contributor

vit9696 commented Oct 9, 2024

I should have fixed this in master, please check that the latest build works fine.

@platomav
Copy link
Author

platomav commented Oct 9, 2024

Yes, it works now! I downloaded the win64 artifact, and it produced the expected output:

Maybe this can be part of a release with a version increase so that other people can download it as a dependency.

Thanks for the quick fix @vit9696 💯

@platomav platomav closed this as completed Oct 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants