12-07-2022, 12:51 PM
(12-07-2022, 11:42 AM)Supremeas Wrote: [ -> ]ive tried.. to extract that as pure text decoded file from hxd..You can not use IFR extractor on this PE32 section. It's not possible and I'm not obligating you doing this. Moreover, I'm trying to tell you that we need this data as it is, raw.
but no, it's extracting just the PE32_Section as a .data file
(12-07-2022, 11:42 AM)Supremeas Wrote: [ -> ]or do i got to edit that in hxd before i would save that as a readable IFR-Text to edit in " Tutorial-wise ? "You are thinking right, except the last part about saving to text. You already have everything you need.
There are two files: PE32 that you should open in HxD window and Freeform section textual output.
First start with IFR you extracted from the Freeform section. View the contents of the text file and mark any way you like which menus are hidden at this moment.