0

I'm RE an executable file of a game with Ghidra, and I searched for strings. I found a lot of strings in the .rdata section, which have a readable meaning, but if I look for "references to this address", there are no results. Why are they included in the binary, if there is no usage for them? Could it be, that they are used at runtime? Here is a picture, for deeper understanding:

Ghidra shows us Strings with no usage

I found a lot of strings like this. I know the game very well, and strings like this I never saw ingame.

funie200
  • 3,688
  • 5
  • 21
  • 34
admin'--
  • 13
  • 5

1 Answers1

0

That looks like an array of strings to me (with each string being 16 characters long, hence the null bytes). If it is, you will likely find references to the beginning of the array where the program will add a dynamic offset to it at runtime which Ghidra can't detect.

Reimar
  • 11
  • 1
  • 1