This has got me puzzled. If I run an exe and do a text search for a given ASCII string I can find it easily using WinHex.
If I try binary search (Ctrl-B) in the dump screen Olly cannot find it.

If I enter the offset (Ctrl-G) given in WinHex Olly gives the "unknown identifier" which I take to mean that this is outside the dumped address space??

I can find other strings in both Olly and WinHex at the same offset provided that they can be seen in the Olly dump screen address range.

Can anyone suggest what is wrong please?

Thanks 5aLIVE

PS. If I scroll down the dump screen, I will see empry adresses, hex dump and ASCII values in every row.
Some broken horizontal lines can be seen in the area too??


PPS I am using Oll 1.09d, I don't know if that will make any difference, I'll try v1.10 to see if this makes any difference.

OLLY serach for BYNAR STRING for default ONLY IN CODE SECTION, change in DEBUGGIN OPTIONS - EVENTS - change the mark to

SERACH FOR REFERENCES in MEMORY BLOCK SELECTED IN DISASSEMBLER.

Go to the section in the dissassembler you need serach , and make the search.

Ricardo

Excellent! Thankyou Ricardo.

Thanks, too! I had the same problem.
Just a minor correction: Debugging options\Debug (not Event).

@Stcruxenio, yes that right, it took me a little while to find it in all the options found in Olly. I should have added the minor correction to Ricardos helpful information myself.

Thanks guys.
5aLIVE