| Metabolic | Дата: Четверг, 07.12.2017, 14:08 | Сообщение # 1 |
 Администратор
Группа: Администраторы
Сообщений: 298
Репутация: 999
Статус: Оффлайн
Страна:  | Executable's strings lister and replacer 0.2.3a
Executable's strings lister and replacer - this tool has the main purpose of finding any ASCII and unicode string inside PE and ELF executables with the possibility of modifying them using any external text editor and re-injecting them in the original executable.
technically the finding of the strings works in the following way: it disassembles all the executable sections of the input file (like .text, only x86 32 bit supported) and visualizes any string or any array of strings, so any instruction like push "string" or mov eax, "string" or mov eax, "[4*edx+array]" and so on is handled perfectly.
instead the injecting of the modified strings back in the executable (ELF not supported) is performed through the adding of a new "stringz" section which contains all the new strings and the substituiting of all the pointers to those strings collected in the "finding" operation with the new ones (relocation).
the tool can be also used as a quick and advanted strings program (the one available on *nix) with the difference that the strings found by exestringz are not casuals but are found and confirmed by the disassembled code avoiding false positives.
anyway through the -b option the tool can acts exactly like the strings program and naturally can also re-import the modified strings.
there is also an "experimental" option specific for the asian utf8 which was also the reason of the initial creation of this tool for the translating of a japanese game.
note that for obvious technical reasons is not possible to export and reimport ever all the strings for any executable because in some cases (usually with big programs) could be generated false positives, anyway the output file generated by the tool is very easy to understand and edit so it's not a problem.
technical limitations:
- the end_of_line (carriage return/line feed) is left as was in the original string, so the result is that the output file could have a "mixed" style of unix ('\n') and windows ('\r\n'), and some text editor could try to convert the whole text in or the other style causing troubles (for example overwriting other strings or resources in the executable)
- the recognization of the english strings is ok since that charset is enough limited but for the others it's just a chaos anyway the tool is still a work-in-progress...
Дата выхода: 2012
Категория: Замена строк
Разработчик: Luigi Auriemma
Язык интерфейса: Английский
OC: Windows XP/2003/Vista/2008/7
Скачать: Executable's strings lister and replacer v0.2.3
Скачать: Executable's strings lister and replacer v0.2.3a
|
| |
| |
