PDA

View Full Version : "%s" in exe file?!!!


cscat
September 13th, 2008, 07:37
Hi all,

In my exe file there is a %s and I guess it receives a string or something this way. Actually it is:

ASCII:
G l o s s a r i e s d i r e c t o r y = % s

Hex:
47 00 6C 00 6F 00 73 00 73 00 61 00 72 00 69 00 65 00 73 00 20 00 64 00 69 00 72 00 65 00 63 00 74 00 6F 00 72 00 79 00 20 00 3D 00 20 00 25 00 73 00

I want to change this directory e.g. to D:\Gloss. What should I consider?

Thanks

Silver
September 13th, 2008, 08:28
There is absolutely no way anyone can help you based on the information you've provided. Start again, describing what you're trying to do, what your target app is (no names, just if it's .net, vb, something else etc), what you've done up to this point, how you found this string, why you think this string is relevant. Then you might get some sensible answers. JMI will be along with words of encouragement shortly, although you can pre-empt that by reading your signature.

deroko
September 13th, 2008, 13:45
well from what you told us, onlly one conclusion comes to my mind -> your exe is using simple format string to make final string. Simple solution would consist of loading that file into IDA, and locating from where that paticialr string is being refferenced and patch the program

dELTA
September 19th, 2008, 17:09
RTFM regarding the *printf functions in the C language, and you will have the answer to your question for sure...