Questions tagged [hex]

Format in which is visualized the memory content or the variables while memory inspection. Hexadecimal (or 'hex') represents integers in base 16 (with digits taken within `0`-`9` and `a`-`f`).

Filter by
Sorted by
Tagged with
0
votes
0answers
46 views

Trying to understand this game packet encryption/compression

I'm working on dead game (Ghost In The Shell: First Assault Online), trying to get a working server emulator for it. I've done some work on this successfully. However, it seems like they use some kind ...
0
votes
1answer
69 views

IDA hex != String

, Hello. to learn reverse engineering, I would like to simply change a string via IDA. I select my string, get the adress, and select Change Bytes to get the Hex value : After That, I try to convert ...
0
votes
0answers
31 views

N64 ROM file index hacking issue

Alright, I downloaded the N64 SDK and compiled one of the samples provided by the SDK and dissembled the ROM with IDA and found the asset data is stored some way using index's so my question is. What ...
0
votes
0answers
11 views

Tool for navigating native assembler code and memory hex for interpreted languages like VBA

Complete newbie to this area and I have limited experience writing code in low level languages so I'm not familiar with the debugging techniques, but bear with me:). I'm trying to understand the ...
0
votes
1answer
41 views

Convert series of hex digits represented as ASCII-characters stored in a .txt file to raw bytes

I recently extracted a bunch of raw bytes (from wireshark) into a regular .txt file. Because these raw bytes are stored in a text file, all those hex-digits are actually written as ASCII characters ...
0
votes
0answers
43 views

Why do these memory address offsets not add up for this PE file?

I have used Puppy (PPEE) which is a tool similar to PE Studio for initial static analysis of a PE binary. PPEE identifies a string "Root CA" which appears at what it says is 0x0007C523, however as ...
1
vote
1answer
54 views

I want to modify the data [closed]

I am so newbie about this matter. I have a file XXXX.record file that contains a data. When I open the file How can I read this data and modify the values? thanks.
1
vote
1answer
68 views

Hex editing a program to change variable types

For starters guys please don't get mad at me because I really googled this question for a while and couldn't find a satisfying answer. Also if I'm asking an idiotic question, I apologize beforehand. ...
1
vote
1answer
146 views

Passing hex strings to Radare2

I can quickly test hex string arguments in gdb like this: r $'\x61\x61\x61\x61' I'd like to do something similar in radare2 but all I can figure out is regular strings: doo aaaa I tried this but ...
3
votes
0answers
63 views

Any way to edit an ELF binary without hex? [duplicate]

So, this is a noob question, I am a complete beginner in this field, so sorry if I'm wasting your time in any way. I wanted to know, if there is a way to edit an ELF binary without using a hex editor....
1
vote
0answers
262 views

How can I see specific memory value by using Hex view in IDA?

I'm about to use IDA pro. I have to access to 0018F42C(EAX) by using Hex view in IDA. Maybe I guess there is EAX value.(String is "happyy", standard input) but Hex view shows me 0018F410 as in screen1....
0
votes
2answers
629 views

RSA Decryption? [closed]

I am playing a game in my university where you have different puzzles based on cryptography and now in a puzzle named 'rsa', we have 2 files: 'key', 'secret'. The task for this is to decrypt the ...
4
votes
1answer
111 views

Help with a pointer

Sorry for this stupid question. It's late here and I've been kinda stuck for a while over this so I hope someone here can answer this easily. In CheatEngine, 028FA190+374 is pointing to 028F1788. ...
0
votes
1answer
493 views

Checksum error when flashing modded firmware on embedded device

I'm trying to patch strings in my firmware with a hex editor but I keep getting a checksum error when I go to re-flash the modded firmware onto my device. The device is a Roland gr-55 guitar ...
0
votes
1answer
281 views

How to calculate the checksum algorithm with data captures

I have an obsolete control system that I am trying to write an interface into our new control system. I have spent weeks capturing data and figuring out the addressing, polling commands, point ...
3
votes
1answer
207 views

Decipher variable length serial protocol

I have an ebike consisting of a controller which regulates power to the motor and a smart LCD which can adjust max speed, power output, pedal assist sensitivity etc as well as displaying the current ...
1
vote
1answer
6k views

Basic question: how to input non-printable hex values in GDB / NC? [duplicate]

I'm working on a CTF challenge that is an introduction to smashing the stack. I have the binary working in GDB, and can overwrite the correct part of the stack with printable characters. The ...
-1
votes
1answer
112 views

Understanding what is represented by function pointers to a block of hex

I'm working on a disassembly project for my class where I'm trying to bypass a license check, but when I throw the executable into Binary Ninja this is what I see: And when I look at those pointers, ...
0
votes
1answer
270 views

Decoding serial data package

I have an assignment at work, to get information from Jenbacher generator and show values in new SCADA system. It has a B&R CP260 PLC with RS232 port and RS232 to RS485 converter. Currently it’s ...
1
vote
1answer
164 views

Hex timestamp decode

I am trying to decode this hex timestamp: 5A24 B103 73AE --> 02/26/2018 15:45:44 5A24 FC03 83BC --> 02/26/2018 17:00:48 5A24 FE03 93E3 --> 02/26/2018 17:02:58 Data is coming from an old ...
3
votes
2answers
491 views

Disassembling Hex to assembly, then what?

I am working on a HEX string, which I figured out is a binary. I would like some pointers on what to do next after I have disassembled from hex to assembly. I'm just assuming that the architecture is ...
6
votes
1answer
477 views

Issues with reversing LZSS compression algorithm

I am trying to reverse engineer my HP printer's firmware, so I dumped the SPI chip from the board, and there are a lot of strings, but almost always look something like this: I noticed a pattern that ...
0
votes
1answer
117 views

Identifying Checksum?

I bring you either a hard challenge or the easiest challenge you've ever had. I have a save file for this game The first bytes are: F9 29 CE 54 02 4D 71 04 4D 71 00 00 this is the same throughout ...
1
vote
0answers
1k views

Reverse Intel hex to programming code

I have a file in the Intel hex format, which was taken of from a pic16F1705 chip. I need to find a way to disassemble it into some form of human friendly programming language in order to make some ...
2
votes
1answer
1k views

Bypassing av signature with Hex editing

I recently started studying on bypassing AV by finding an AV signature on nc.exe (NetCat) and changing it to see how it works. I have already found the place of signature with splitting method. Then, ...
2
votes
1answer
712 views

File analysis with hexdump - unknown container

I have a backup file, generated by an android phone. However, I don't know the file type or how to extract the contents without the original software. I've tried to search for common file headers ...
0
votes
2answers
167 views

Do .NET functions have function prologs?

If I'm looking at a binary compiled with VC++ in a hex editor and I want to identify the start of functions - I can look for the hex "55 8B" - which is a common function prolog. Is there something ...
2
votes
1answer
278 views

Invalid INDX entries for $I30 on NTFS harddisk

While parsing my NTFS formatted hard disk, I found some invalid entries of INDX while Windows is still able to list all the root directory contents! The structure of the Index Record in NTFS 3.1 is ...
1
vote
1answer
142 views

What does this sequence of numbers mean?

so i'm reversing a file format of game. As far as i can understand the file i'm trying to reverse contains compressed textures. I'm already able to locate the textures and decompress them, but i'm not ...
1
vote
0answers
169 views

What does the “Offset to the filename” stands for in an Index Record in NTFS

The structure of the Index Record in NTFS 3.1 is clear: Offset Description ------------------------------------- 0x00 MFT Reference of the file 0x08 Size of the index entry 0x0A ...
1
vote
1answer
601 views

Router flash dump unknown filesystem

I'm trying to reverse engineering my router firmware after reading an interesting article about an hidden backdoor inside router firmwares from a popular company. Data has been extracted (using ...
1
vote
1answer
608 views

How to extract an unknown archive file? Currently Im trying to open *.pak (P5CK)

I have a console game called Timesplitters Future Perfect(iso file). I were able to extract and got bunch of files. *.pak being one type I would like to open and see. I opened up a hex editor and saw ...
3
votes
2answers
267 views

Problem with converting hex values to decimal

I'm reverse-engineering custom binary file format. I'm using 010 Editor to check this file. I found data structure to represent UTF-8 strings, which has header section of one or two bytes in length ...
2
votes
1answer
6k views

Adding a new PE section for a code cave

I am trying to add a 1000 byte code cave using LordPE to a standalone exe. From what I understand I have to edit the PE header with a new section of 1000 bytes then open the exe in a hex editor and ...
3
votes
1answer
8k views

Making changes in ELF file after dissassembly [duplicate]

I am new to reverse engineering and after some research, I haven't found a clear way to do what I want to do. I have an ELF file, but not the original source code that generated it. It is really ...
14
votes
1answer
19k views

Approach to extract useful information from binary file

The purpose of this question is to gain an understanding of the concepts behind reverse engineering and to understand what approaches may be taken to extract useful information from a binary file. I'...
1
vote
1answer
1k views

Basic clarifications about .hex and .bin file

I am newcomer to this field. I would like to understand how these things work and what these file contain (and if I'm on the right path). To explain my doubts, I will use the .hex file posted in a ...
1
vote
1answer
521 views

how to translate HEX values into X Y Z

I am trying to understand how an application I have been using is setting its data in XYZ coordinates which I wish to convert to HEX value. The application essentially shows me the XYZ in one format (...
-1
votes
1answer
875 views

what is best forum to ask about hex reversing? [closed]

i want to create c script extract encrypt package. just can open it in hex editor to view and need knowledge and technique for write script for extract it. Script will work in command-line ( window 10 ...
1
vote
1answer
376 views

Unpack .apk file from a PC game (NOT Android related)

I have an old PC game called Air Strike 3D II. I wanted to extract music files but I couldn't figure out how to unpack the .apk file (NOT Android package). 7-zip can't open it. When I open the .apk ...
3
votes
1answer
520 views

How can I create an appropriate Japanese .tbl file for Hex Editing?

I'm trying to edit a Japanese Configuration executable using Resource Hacker and I just want to translate the UI stuff to English. There are also a few English text that I was able to find and ...
1
vote
1answer
1k views

How to reverse engineer hex data on EEprom? [closed]

I am learning how to reverse engineer the EEprom data in Automotive ECUs. For such purposes as to disable the immobilisers, find millage data and workout encoded VIN numbers among other things. I ...
1
vote
0answers
252 views

Analyzing Game Map/Terrain Format

I'm trying to understand how this game builds the map and terrain. Specially if it uses a heightmap. So I can write an app that can view the map and move around (camera) freely. First, I'm not ...
2
votes
1answer
2k views

Reversing unknown data in hex string

I have a string from job advert (Ethical hacker). I am not planning to candidate to that position. I just would try to resolve puzzle. Can someone suggest directions to look further? (And not yet post ...
0
votes
1answer
331 views

Using HEX editor and making 4 chars from 3 chars [closed]

I need to replace a single string in a bin. The actual string has 3 chars and the new one must have 4.If I use a hex editor this will make the exe useless.So is there any way to add bytes there to ...
2
votes
0answers
123 views

Restore function key

I have a simple function which looks like that: keyAlphabet = [-1, 16, 32, 127, 61, -32, -31, 43, 0, 88, 2, 5, 7, 112, 64, 69, 96] key = ??? # only keyAlphabet values p = 0x1337 for i in key: ...p*=i ...
5
votes
1answer
2k views

Reversing a 3D file format from 2001

This is a korean MMORPG released back in 2001. The game and the company no longer exists. I've been analyzing the file formats as a personal project for awhile now. I have already decoded the ...
3
votes
2answers
903 views

Is there a tool to scan for code / functions that can account for different compilers?

I have a library DLL and a program that uses the library (statically; the DLL is separate). My goal is to find a bunch of the functions from the library in the program, but unfortunately, it looks ...
0
votes
2answers
2k views

Editing a string in a native dll

Can anyone help me edit a string in a native dll? When I try to open the dll in CFF explorer or other similar tools, I can't see the string table, probably because it's hidden somehow. The DLL in ...
4
votes
1answer
2k views

Finding, hex-editing date timestamp to correct it

Trying hex-editing to fix the date-time data in file which was generated while the computer system clock was wrong. Some tutorial will be helpful appreciated after my attempts so far. [screen shot ...