|
@git:
1. I just manually fix it when I enter an interesting function. Copy real end address then ALT+P.
2. Change low/high suspicious limit in options to some invalid address (eg. 0), then mark all unicode strings that haven't been fully detected and press c. Choose "analyze", choose "Yes, convert to code" and it should fix your unicode strings. You can use a regular expression and search for them:
"dd offset [^ ]+00" (dd offset loc_490021)
"dd offset [^ ]+\+" (dd offset aSomeString_7+18Bh)
Could take a couple of minutes to fix all unicode strings depending on the size of your exe.
|