0x90.org

[XSO] CFString in a binary

nummish nummish at 0x90.org
Mon Mar 31 00:32:07 EDT 2008

The section is in the format:

C8 07 00 00 XX XX XX XX YY YY YY YY

XX XX XX XX is an offset to the asciz string being referenced.
YY YY YY YY is  a little endian value equal to the non-terminated length of X

What could C8 07 00 00 be? My first assumption is that it would be the
string encoding of the CFString stored in the binary, but I can't find
any reference to that value directly and it doesn't look like values
would be ORed together like that.

Thoughts?

-- 
"Continued expansion diluted the talent pool, forcing owners to
recruit heavily from prisons, mental institutions, and Texas."

More information about the XSO mailing list