PDA

View Full Version : String Ref


golden_123
06-30-2002, 08:58 PM
HI

IF U DISASSEMBLE A EXE IN W32DSM89 AND ONLY A FEW LINES SHOW UP AND THERES NO STRING REFERENCES TO VIEW,WHERE CAN U GO IN THE PROGRAM TO VIEW COMPLETE DISASSEMBLE WITH STRING REF.
TY

SilSaLaMaTa
06-30-2002, 09:54 PM
try IDA

golden_123
07-01-2002, 05:20 AM
IDA WHAT? LOL SORRY NEWBIE

chdid
07-01-2002, 05:05 PM
Perharps this is a packed exe.

SO read tut on this. You will understand...

LOUZEW
07-02-2002, 07:48 PM
Right chdid !
but there is an other thing too :

Sections caracteristics are set to C0000040 or something like. You have to open the app with procdump or PE editor or LordPE etc and edit sections to set them to E0000020 (redable executable)

Maybe you can learn on PE files (search for Matt PietrekBook !)