Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 03-31-2018, 02:41
Stingered Stingered is offline
Friend
 
Join Date: Dec 2017
Posts: 256
Rept. Given: 0
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 296
Thanks Rcvd at 179 Times in 89 Posts
Stingered Reputation: 2
Binary patcher available?

I know of DUP2 and AT4RE, but I don't think these can do what I want. I want patcher to do a binary search/replace of a certain hex string. But needs to be able to search through older and FUTURE versions of the EXE, locate certain string and patch it, regardless of offset location due to recompile of same named EXE.

Thx!

Last edited by Stingered; 03-31-2018 at 03:39.
Reply With Quote
  #2  
Old 03-31-2018, 04:33
Jupiter's Avatar
Jupiter Jupiter is offline
Lo*eXeTools*rd
 
Join Date: Jan 2005
Location: Moscow, Russia
Posts: 214
Rept. Given: 36
Rept. Rcvd 61 Times in 36 Posts
Thanks Given: 20
Thanks Rcvd at 149 Times in 42 Posts
Jupiter Reputation: 61
It's already implemented in dUP2, so you can use wildcards in patterns to mark bytes that are changed from version to version.
__________________
EnJoy!
Reply With Quote
The Following 2 Users Say Thank You to Jupiter For This Useful Post:
Stingered (03-31-2018), tonyweb (03-31-2018)
  #3  
Old 03-31-2018, 05:21
Stingered Stingered is offline
Friend
 
Join Date: Dec 2017
Posts: 256
Rept. Given: 0
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 296
Thanks Rcvd at 179 Times in 89 Posts
Stingered Reputation: 2
Quote:
Originally Posted by Jupiter View Post
It's already implemented in dUP2, so you can use wildcards in patterns to mark bytes that are changed from version to version.
Okay, cool. I will see if I can find how to do this. I was already looking into just writing my own as I could find nothing else.

[edit]
Indeed, this does work in DUP2 and solve my problem.

Last edited by Stingered; 03-31-2018 at 05:44.
Reply With Quote
  #4  
Old 03-31-2018, 10:35
chicknsoup chicknsoup is offline
Friend
 
Join Date: Sep 2013
Posts: 39
Rept. Given: 2
Rept. Rcvd 8 Times in 2 Posts
Thanks Given: 8
Thanks Rcvd at 34 Times in 17 Posts
chicknsoup Reputation: 8
Give swiss knife a try?

https://sourceforge.net/projects/swissfileknife/?source=typ_redirect
Reply With Quote
The Following User Says Thank You to chicknsoup For This Useful Post:
Stingered (03-31-2018)
  #5  
Old 04-02-2018, 10:11
dosprog dosprog is offline
Friend
 
Join Date: Feb 2018
Posts: 114
Rept. Given: 0
Rept. Rcvd 17 Times in 16 Posts
Thanks Given: 33
Thanks Rcvd at 146 Times in 74 Posts
dosprog Reputation: 17
Quote:
Originally Posted by chicknsoup View Post
Give swiss knife a try?
https://sourceforge.net/projects/swissfileknife/?source=typ_redirect
GSAR is good too.
Reply With Quote
The Following User Says Thank You to dosprog For This Useful Post:
Stingered (04-02-2018)
  #6  
Old 04-05-2018, 15:56
LaDidi LaDidi is offline
VIP
 
Join Date: Aug 2004
Posts: 210
Rept. Given: 2
Rept. Rcvd 11 Times in 10 Posts
Thanks Given: 46
Thanks Rcvd at 41 Times in 24 Posts
LaDidi Reputation: 11
@Stingered:
As Jupiter said, it's already implemented in dUP2.
But, it's not a good idea to think that future version will be correctly supported.
Cause the signature searched will, maybe, exist elsewhere in the future version.
Regards.
Reply With Quote
The Following User Says Thank You to LaDidi For This Useful Post:
Stingered (04-06-2018)
  #7  
Old 04-05-2018, 23:22
Agmcz Agmcz is offline
Friend
 
Join Date: Mar 2018
Posts: 16
Rept. Given: 0
Rept. Rcvd 4 Times in 3 Posts
Thanks Given: 15
Thanks Rcvd at 61 Times in 13 Posts
Agmcz Reputation: 4
You can also use AT4RE Patcher with Search & Replace and wildcard support.
Reply With Quote
The Following User Says Thank You to Agmcz For This Useful Post:
Stingered (04-06-2018)
  #8  
Old 04-06-2018, 03:38
Stingered Stingered is offline
Friend
 
Join Date: Dec 2017
Posts: 256
Rept. Given: 0
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 296
Thanks Rcvd at 179 Times in 89 Posts
Stingered Reputation: 2
Quote:
Originally Posted by LaDidi View Post
@Stingered:
As Jupiter said, it's already implemented in dUP2.
But, it's not a good idea to think that future version will be correctly supported.
Cause the signature searched will, maybe, exist elsewhere in the future version.
Regards.
Very true, and not a perfect solution.

The best way, I have found, is to make the Search/Replace strings longer so there is less of a chance that you patch the wrong offset.

(for those that may not recall, wildcard = ?? and used as a place holder for non-matching string characters)
Reply With Quote
  #9  
Old 04-06-2018, 14:28
dosprog dosprog is offline
Friend
 
Join Date: Feb 2018
Posts: 114
Rept. Given: 0
Rept. Rcvd 17 Times in 16 Posts
Thanks Given: 33
Thanks Rcvd at 146 Times in 74 Posts
dosprog Reputation: 17
Many programs contain in the new versions both previous fragments [which are searched by the mask] and new ones added.
Therefore, you still have to make individual patches for a particular version, without searching with masks.
Reply With Quote
The Following 2 Users Say Thank You to dosprog For This Useful Post:
niculaita (04-06-2018), Stingered (04-07-2018)
  #10  
Old 04-07-2018, 01:07
Stingered Stingered is offline
Friend
 
Join Date: Dec 2017
Posts: 256
Rept. Given: 0
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 296
Thanks Rcvd at 179 Times in 89 Posts
Stingered Reputation: 2
Thumbs up

Quote:
Originally Posted by dosprog View Post
Many programs contain in the new versions both previous fragments [which are searched by the mask] and new ones added.
Therefore, you still have to make individual patches for a particular version, without searching with masks.
Hmmm... Something to remember.
Reply With Quote
  #11  
Old 04-08-2018, 12:14
dosprog dosprog is offline
Friend
 
Join Date: Feb 2018
Posts: 114
Rept. Given: 0
Rept. Rcvd 17 Times in 16 Posts
Thanks Given: 33
Thanks Rcvd at 146 Times in 74 Posts
dosprog Reputation: 17
I remember a few units of programs, which from version to version were patched by search&replace.
And there it was maked especially, imho.

In the simplest case the universal loader helps. Such as created with RPP v.1.5.1.006p [(c)2000-2018].
It's the script-based 32-bit loaders generator with search_&_replace and with selecting_of_file_to_load options.




Last edited by dosprog; 04-08-2018 at 17:14.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
help deobfuscating .net binary jonwil General Discussion 3 05-02-2020 09:13
[C#] Patcher2 - Small binary file patcher utility CryptXor Source Code 0 10-13-2015 14:11


All times are GMT +8. The time now is 09:22.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )