二进制文件 查看工具 类似winhex 十六进制 显示 并 拷贝

成功导出变化了的dump文件。然后我们用hexeditor(这个会自动变成正常阅读顺序,当然某些数据不懂时我们可以尝试使用hexdump,这个是反端的顺序,可能会有新的发现)。打开分析。通过对比文件变化,我们发现有一部分内容变化了。

命令行形式的 工具,可以拷贝打印出的文字,用于分析 或者 写文档

https://www.di-mgt.com.au/hexdump-for-windows.html

http://www.anyv.net/index.php/article-1672412

HexEditorNeo是一款功能非常强劲的二进制、十六进制文件编辑和查看工具,程序体积虽然不大,但包含了你所有需要用到的功能,非常的全面,界面也设计的非常的合理

https://www.hhdsoftware.com/free-hex-editor

可以将里面的 十六进制数 copy出来,用于分析 或者 写文档
这里写图片描述

这里写图片描述

拷贝出来的数据:

42 4d 1e 03 00 00 00 00 00 00 3e 00 00 00 28 00
00 00 65 00 00 00 2e 00 00 00 01 00 01 00 00 00
00 00 e0 02 00 00 c4 0e 00 00 c4 0e 00 00 00 00
00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ef ff ff ff ff ff f1 ff ff ff f8 00 00 00 ff ff
c7 f3 fe 3f ff f0 0e ff 7f ff f8 00 00 00 ff ff
83 e0 e1 c0 f8 0b d1 7e 3f ff f8 00 00 00 ff ff
01 ee 53 6e 67 fe df 7c 1f ff f8 00 00 00 ff ff
01 f0 1b ff af bf d1 38 4f ff f8 00 00 00 ff fe
00 f2 83 fb 8f b1 df 70 07 ff f8 00 00 00 ff fc
00 03 c0 6f ab 8e 51 60 03 ff f8 00 00 00 ff fc
01 27 a7 83 2f 3f 9f 60 03 ff f8 00 00 00 ff fc
01 13 af ad b6 3d 6e e0 0b ff f8 00 00 00 ff fe
10 e0 0f 75 7a be f1 70 87 ff f8 00 00 00 ff ff
39 ef c6 f8 7c 3c 3f 79 cf ff f8 00 00 00 ff ff
ff ce e8 0c bb 83 c0 5f ff ff f8 00 00 00 ff ff
ff ad 47 f0 bb bf ff 3f ff ff f8 00 00 00 ff ff
ff 6f cf ff 3a 7f fe af ff ff f8 00 00 00 ff ff
ff 91 2f ff c8 ff ff 9f ff ff f8 00 00 00 ff ff
fb fc 4b 9f e9 fe 77 47 ff ff f8 00 00 00 ff ff
f1 fe 1b fd c0 ef f7 df ff ff f8 00 00 00 ff ff
e0 fc ff fd f5 ef ff df 7f ff f8 00 00 00 ff ff
c0 7e ff ff c0 ff ff de 3f ff f8 00 00 00 ff ff
80 3e ff ff ad ff ff dc 1f ff f8 00 00 00 ff ff
00 1e ff fe 4d ff ff d8 0f ff f8 00 00 00 ff fe
00 0d ff d8 ee ff ff b8 0f ff f8 00 00 00 ff fc
00 06 ff 26 66 7f ff d0 07 ff f8 00 00 00 ff fc
00 16 ff 77 36 fe a1 c0 03 ff f8 00 00 00 ff fc
00 16 f7 76 0e f0 ae 40 0b ff f8 00 00 00 ff fc
00 17 68 79 df 4e af a0 0b ff f8 00 00 00 ff fe
04 2f 5f b0 bf bf ff f0 87 ff f8 00 00 00 ff ff
0e 1f bf 8f 7f ff ff f9 cf ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00 ff ff
ff ff ff ff ff ff ff ff ff ff f8 00 00 00

猜你喜欢

转载自blog.csdn.net/wowocpp/article/details/80776489