1

I was looking for a spcific string in IDA, but there were no hits in the "string view". Now after browsing the disassembly for a while I realize that not only does the string exist, IDA did in fact find this string. It was referenced by assembly code, IDA prints it as a comment next to the assembly, even the location of the string is named with the first characters of the string!

Very annoying! How come it is not listed in the string view, then? How would I go about finding referenced text strings by string?

edit: an example:

and     [rsp+18h+var_10], 0
lea     rax, aSettextfromsrc ; "settextfromsrc"
mov     [rsp+18h+var_18], rax
mov     r9, [rsp+18h+var_1A]
...
 text "UTF-16LE", 'settextfromsrc',0

maybe bc of the UTF-16LE?

Improve this question
3
  • 2
    Is it a very short string? Perhaps it's in the middle of another string? You should edit your post to include a snippet of the surrounding context (both the reference from the assembly language, and the string itself).
    – Rolf Rolles
    Feb 14, 2022 at 6:22
  • No, rather it's quiet a long string. I will add an example later. Not the first time this happens though, before i just assumed i mistyped the string or something...
    – bernd feinman
    Feb 14, 2022 at 20:02
  • @RolfRolles I added an example to the question. maybe bc it's a weird UTF-16LE string?
    – bernd feinman
    Feb 14, 2022 at 23:51

1 Answer 1

Reset to default
2

Right-click in the strings window, choose "Setup", and ensure that, under "Allowed string types", "Unicode C-style (16 bits)" is enabled:

enter image description here

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.