Ok, haven't been posting for a while (I have been reading though ), but I needed help again.

I have unpacked a program which was packed with PEcompact. unPEcompact by y0da did a nice job unpacking it for me. I still have one problem, I don't see a String References list when I disassemble it in W32Dasm. I need it to patch this file, because I can't really set BPX's on API's with this one. It is a quake2 addon, so it doesn't give any messages through messageboxes and stuff. Just through the Quake2 console. It is an executable EXE file though. It is compiled in VC++ 5.0 and the file isn't crypted, because when I look in the file with my HEXeditor, I can find the messages I am looking for. Is there maybe something I can do, so that W32Dasm knows where the Strings are?

Grtz,

Argoth

Try changing the section characteristics... it should work..

or else use UltrEdit to search for string :>

hope that helps

Ok...and how would I do that? I'm not really into this 'section changing' and stuff.

Grtz

Argoth

Yep... get PEditor or Lord PE (registered version) then open up the file, edit section characteristics and change the section to "contain initialised and uninitialised data"

then you string reference should come up nicely... check out some unpacking tutorials as FEW of them do explain section characteristics here and there... if you are really interested read the famous "PE.txt" (search krobar site) but it really has lots of stuff... think 45 pages on my printer :>

cheers

Ok thanks man, let's just hope I'll find these tools on the usual sites

K, found them and they worked perfectly, tnx.
Lemme see if I can find some unpacking tuts

Grtz

Argoth