hh -decompile -blimey!
Well I never.
So all it takes, even on a w98 box, without installing anything, to extract the
entire contents of a .chm is to enter "hh -decompile workdir xxx.chm" at a DOS
command prompt. Well, it works on most, but not all (eg filzip.chm).
Three questions:
1) is parsing the resulting .hhk file the best way to figure out what I can
auto-lookup? (I don't want to open Eu.chm with zz_open, or Zz.chm with open, but
vice-versa, ie F1 on "zz_open" -> Zz.chm but F1 on "open" ->Eu.chm.)
[Some readers may note I've been banging my head against this long-time.]
2) I know I could look this up meself, but pointers to reversing this after the
above would be appreciated. (IE can/should I avoid the M$ crap?)
3) I have heard about virus/trojans (usually of low payload) in chm files, can
anyone confirm if the above and checking for .exe is a good/safe thing?
Regards,
Pete
|
Not Categorized, Please Help
|
|
