Timeline for What other methods can be used to find file paths in an executable?
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 3, 2018 at 3:40 | history | tweeted | twitter.com/StackReverseEng/status/948398729979146240 | ||
| Dec 31, 2017 at 8:14 | answer | added | blabb | timeline score: 4 | |
| Dec 30, 2017 at 18:14 | comment | added | Paweł Łukasik | well, I whodunit use Olly for that. Probably with some disassembler, I would check imports for some known API that operates on paths, from that found out the addresses and maybe then put bps on those in Olly and debug. | |
| Dec 30, 2017 at 15:47 | comment | added | Mr. Mendelli | That sounds promising, but I wouldn't know where to start with that... I apologize, I'm still a novice at OllyDbg. I know this isn't a "Give me my answer" website but could you point me in the right direction perhaps? | |
| Dec 30, 2017 at 14:01 | comment | added | Paweł Łukasik | maybe try to locate methods that operate on paths and see how the value is populated to them? Maybe it will give you the clue where to look form them. | |
| Dec 30, 2017 at 5:55 | history | edited | Mr. Mendelli | CC BY-SA 3.0 |
added 19 characters in body
|
| Dec 30, 2017 at 5:45 | history | edited | Mr. Mendelli | CC BY-SA 3.0 |
added 24 characters in body
|
| Dec 30, 2017 at 5:37 | history | asked | Mr. Mendelli | CC BY-SA 3.0 |