How can i settings IDA show me string instead of offset_xxx?
-
2could you please add a text dump of the screenshot as well as the disassembly listing of the highlighted locations?– Igor Skochinsky ♦Jun 12, 2018 at 18:35
Add a comment
|
2 Answers
Go to the menu Edit -> Plugins -> Hex-Rays Decompiler. A window will appear with information about the Hex-Rays plugin. Click Options and you should see a dialog like this:
Click on Analysis options and uncheck Print only constant string literals:
I learned about this option from the great Life In Hex blog, but I cannot find the post right now...
Have you tried changing the prototype of the function licensed_to() so the 2nd argument is "const char *" and, also, have you made a string at the given offset? If not, go to the address in that offset and press 'a' (or Alt+A and then select "Unicode").
answered Jun 12, 2018 at 11:42
-
Not sure i did it right but... i.imgur.com/fO54LAi.png and i.imgur.com/EziDXAB.png– beo senJun 12, 2018 at 11:58
-
I think it's a char **, not a char *. If that's the case, IDA will not show the string (because no string is being passed but rather a pointer to a pointer). Jun 12, 2018 at 12:22
