Questions tagged [hex]

Format in which is visualized the memory content or the variables while memory inspection. Hexadecimal (or 'hex') represents integers in base 16 (with digits taken within `0`-`9` and `a`-`f`).

Filter by
Sorted by
Tagged with
2
votes
0answers
136 views

Restore function key

I have a simple function which looks like that: keyAlphabet = [-1, 16, 32, 127, 61, -32, -31, 43, 0, 88, 2, 5, 7, 112, 64, 69, 96] key = ??? # only keyAlphabet values p = 0x1337 for i in key: ...p*=i ...
5
votes
1answer
2k views

Reversing a 3D file format from 2001

This is a korean MMORPG released back in 2001. The game and the company no longer exists. I've been analyzing the file formats as a personal project for awhile now. I have already decoded the ...
3
votes
2answers
1k views

Is there a tool to scan for code / functions that can account for different compilers?

I have a library DLL and a program that uses the library (statically; the DLL is separate). My goal is to find a bunch of the functions from the library in the program, but unfortunately, it looks ...
0
votes
2answers
2k views

Editing a string in a native dll

Can anyone help me edit a string in a native dll? When I try to open the dll in CFF explorer or other similar tools, I can't see the string table, probably because it's hidden somehow. The DLL in ...
4
votes
1answer
3k views

Finding, hex-editing date timestamp to correct it

Trying hex-editing to fix the date-time data in file which was generated while the computer system clock was wrong. Some tutorial will be helpful appreciated after my attempts so far. [screen shot ...
7
votes
1answer
2k views

Reverse engineering Earthsiege 2 3D model format

As a personal project I've been trying to reverse engineer the art assets for the old Dynamix game Earthsiege 2 (this game has long been abandonware and was recently released for free by Hi-Rez, the ...
2
votes
1answer
2k views

Calculating check sum of m-bus data frame

I'm trying to calculate the check sum of a m-bus data frame. In page 1 of this PDF I'm able to read that the frame's check sum "is calculated from the arithmetical sum of the data mentioned above, ...
3
votes
1answer
792 views

End of central directory signature not found after extracting an embedded zip file

I'm learning about stenography and found this example. I've followed the instructions but when I write out a new zip file after changing the filename inside the file I get this: unzip nospaces.zip ...
-2
votes
1answer
827 views

How do I find specific sets of data when Hex Editing? (Important) [closed]

not trying to sound like my question is just more important than others because I'm asking it, purely because the outcome of my work will involve electrical impulses directly into people's faces. I ...
0
votes
0answers
47 views

Means of generating file hashes

I'm working with a relatively well secured program. In addition to memory validation checks during run time, the actual file integrity is checked at start. Both checks are synced with the server and I'...
1
vote
1answer
275 views

Getting Encryption Method When I Know Encrypted File Name & Original File Name

I'm busy trying to decrypt some game data. All the encrypted filenames are hexadecimal strings with the same length e.g. 1790C6E445C7E38EFCD5B3042F9B4443. I've figured out that a few of the files ...
3
votes
1answer
663 views

Reverse Engineering Firmware

I have a HEX file with a firmware for Attiny45. What I want to do is to extract some kind of formula that is coded inside it. I have done some research (mostly to find out that "it is not possible", ...
5
votes
1answer
753 views

Replacing small length instruction with larger length instruction

Basically I want to replace MOVS R1, #0x0 with MOV.W R1, #0x123, since later instruction requires 4 bytes it is impossible to simply replace in HEX code. I am using IDA Pro for analyzing native ...
-1
votes
2answers
5k views

Decoding binary - basics [closed]

I'm trying to decode this binary file which is from a cache. All I want is the playlist metadata. I am getting some of it using a simple hex viewer, but the majority of the information is random ...
1
vote
0answers
74 views

Work out packet structure from usb capture

Im hoping to understand the way a auto diagnostics tool is reporting data over usb. I've made a usb capture to look for changes according to known changes to the input it measures. The measurement is ...
2
votes
1answer
92 views

Extra bytes between clusters in FAT12

I am currently investigating a disk image with a FAT12 file system for data recovery purpose/researching for image file carving. For this investigation, I have the actual files (JPEG images) that need ...
12
votes
2answers
5k views

“Raw” offsets to “disassembler” offsets?

This is a very silly question, but surprisingly I've had a problem with this today. In a hex editor, I've found an offset and I wanted to take a look at that code in a disassembler. In the hex-editor, ...
1
vote
0answers
297 views

Reversing raw byte storage scheme on BusyBox-based network video recorder

I have a network video recorder - the Swann NVR8-7085. It had telnet enabled and I managed to figure out the user/pass to get in (I downloaded the firmware from the site, extracted the squashfs ...
7
votes
1answer
3k views

Reverse-engineering a tough-to-crack video game save-file checksum

Been trying to figure this one out for a while now, and would be eternally grateful for anyone with more experience in checksum algorithms lending a hand. I've been trying to alter save files for an ...
4
votes
1answer
2k views

Modifying a binary save-data file for a video game with a CRC/Checksum check

I recently overwrote the save game file of a video game that my girlfriend and I had been playing through. After trying to recover the file a few different ways (game didn't erase but overwrote the ...
3
votes
1answer
582 views

Finding timestamp in hex data

I'm reading stuff from public transport cards and I've got this hex data which is an usage history. I believe that these records contain timestamp or date in some format (but I'm not sure), but I ...
2
votes
2answers
353 views

Addressed changed by code from a common address

I have traced a static address which is using the base address and an offset. I am interrested in this address because a 'Find out what addresses this instruction accesses' shows values, changing as ...
1
vote
2answers
859 views

Patch a Java class inside a jar using C# [closed]

Being a beginner in C# I wonder if it is possible to patch a .class file inside a .jar? Since jar files tend to act like "zip" files, the approach I think might work is to decompress the jar, patch ...
4
votes
3answers
2k views

What ways is there for an application to detect that it has been modified?

I am using ollydbg and a Hex editor. I confirmed that once the application is edited in any way it behaves different than normal. My first thought was that the file is checking the checksum value so ...
-3
votes
1answer
11k views

How to edit .asec file? [closed]

How to edit .asec or compare two .asec files witch are stored by app at location mnt/.android_souce/app name.asec. This file get updated whenever data connection is on / while using app to upload and ...
-3
votes
1answer
194 views

Is there always 1:1 correlation between hexadecimal and binary?

I was wondering this because I have found that some instructions, on the machine code level, are too large if taken a step down from hex to 0s and 1s. On Motorola 68000 I found that some instructions ...
16
votes
3answers
6k views

Parsing/Rescuing corrupted IDA database

I'm reversing an application with IDA. My VM crashed and left the IDA database in a corrupted unpacked state. The next time I tried to load it back, IDA gave me the following error message: The ...
-5
votes
2answers
1k views

Bin file is not only storing 0s and 1s, ASCII or otherwise

Upon checking out a binary file, and according to convincing evidence, .bin file extensions are supposed to denote a file type which stores its data as 0s and 1s, or 31/32 in ASCII hex(ASCII character ...
6
votes
3answers
9k views

Paste hex bytes into IDA Pro Hex View

Is it possible to paste a series of bytes into hex view of IDA? Say I have a large buffer I need to fill with a specific value, and I have it in the form most hex editors output... 0A AB EF FF 00 01......
3
votes
1answer
3k views

Converting hex value to lat/long

Sorry if this is the wrong place to ask this but I'm stumped. I'm looking at iOS code as follows. - (NSString *)currentE6Location { CLLocationCoordinate2D loc = [AppDelegate instance].mapView....
11
votes
3answers
3k views

Wanted: Java bytecode disassembler that shows addresses, opcodes, operands, in hex

I am after a java bytecode disassembler whose output includes the bytecodes themselves, their operands, and their addresses in the .class file, and which displays numbers in hex, not decimal. To show ...
19
votes
2answers
3k views

What techniques are used in reverse engineering a serial protocol?

I'm working with a small public transit agency on a neat open-source project that will help us to offer realtime data to local developers. A key piece of data we need is the current bus route a given ...
8
votes
3answers
509 views

How to differentiate from different hex files of different families of microcontrollers?

Is there any way to differentiate different microcontroller's hex files? I have a hex file and now I have forgotten of which micro-controller it belongs. Is there any available tool to tell this? or ...
10
votes
1answer
4k views

How to see what compiler made PIC ASM code?

I extracted a .hex file from a PIC16F88. For example: :020000040000FA :100000008F3083160F0570388F009B0183129F017C :1000100083169F0107309C0005108312051483127C :...

1
2