PEiD & W32DSM Questions

Originally Posted by ivanov

I have a program written in Visual C++ with a disabled-grayed menu item inside. Question: How can I locate the dissambled codes for this disabled-gray menu? Restorator or PE Explorer didn't show anything at all.

Try breaking on EnableMenuItem and looking for the menu ID. If it's actually a button that is disabled, then you should be looking for calls to EnableWindow.

Did you try running the app in Olly and after you press the button hit f12 and alt k to bring up the call stack? Then all you do is trace it back.

[bunion]

Simplest way to QUICKLY enable greyed out buttons is to download and use SHOWIN...This lets you "enable" greyed out buttons so th\at they are clickable..sometimes it works sometimes it doesnt..Most of the demo microsoft exams apps that have most questions greyed out can be enabled with it

Sometimes when i cant find a string ref in a disassembled target i run the target THEN load up winhex to do a RAM EDIT on the targets memory locations..Many times ive found strings in the targets memory that i couldnd locate in its code..once u find the string you where looking for note its memory location then do a search in w32dasm for that location..it works u know

Good luck

paul333

ps..same method can be applied when lookin thru the apps code in hexeditor..some apps rather than store the string just store its location so look for this location in disassembled code..

[taos]

you can enable a button or a menu item that are disabled with the tool VEOVEO (spanish program).