Hey all, I could do with a little help if anyone would be so kind.
I am currently debugging a program of mine which involves creating a messagebox. I wish to insert a breakpoint after some code following the messagebox; thus, I need to ensure that I am working on the correct section of ASM code. To do this I searched for the string that the messagebox displays in a Hex Dump of the application, but the string was nowhere to be found.
I thought that a hex dump was a list of addresses in a processes memory and the contents of the addresses. I figured that, to use the string, the application must store it somewhere (i.e. in it's memory) and the debugger would therefore display the string and it's associated address(es) in the hex dump. I must be mistaken.
I also noted that Sysinternals' Process Explorer was able to find the string in an image of the executable, but not the memory. What exactly is an image? (A google search listed alot of Linux related articles; I am working on a windows machine and wasn't sure if the info is relevant.) I guess my main question is "where are strings stored in an executable file?".
Thankyou for your time.
