This utility allows you to visualize a file in binary mode. The bytes in the file are displayed without taking into account any line records.
You reach this utility from the File
-> open binary menu option.
The display is organized in three main blocks:
The offset of the data within the file in the left column
The 16 bytes that follow that offset displayed according to the settings of the 'Style' button
Their character representation (if any)
This option allows you to change the representation of the data in the column at the center of the display.
|
|
You reach this dialog box by using the ‘Style’
option in the binary editor ‘File’ menu. The representation formats available are:
Characters shown in hex
Integer 8 bits shown in decimal
Integer 16 bits, unsigned or signed
Integer 32 bits, unsigned or signed
Bit inverted. The bits 0-31 become bits 31-0
Float simple precision (32 bits)
Float double precision (64 bits) |
You can choose any of the representations above.
This option allows you to search either an integer or an ASCII character string.
|
|
You reach this dialog box by choosing ‘Search’ in the
‘Edit’ menu bar of the binary editor window. |
It is possible to specify the following data types:
Integers (8, 16, or 32 bits)
Character strings
· ASCII
To add to the search byte sequence, enter your data in one of the fields and press the ‘Add’ button.
For instance, if you want to search for the binary integer 47234 followed by the ASCII sequence « foo » you would enter the number 47234 in the 32 bits field, press the ‘Add’ button, and then write « foo » in the ‘ASCII’ entry field followed by ‘Add’ again. In this way, you can easily specify very complex search sequences.
The sequence of bytes that will be searched for is shown at the top in the read only entry field ‘Bytes to search’.
This option will move the current point to the specified position. You can move the cursor using the arrow keys or the page up / page down keys. Within the small ’goto’ dialog box, you can enter the file offset either in decimal or hexadecimal form.
This option allows you to apply a data structure to the bytes at the current offset. Data structure means, in this context, a series of field descriptions composed from the elementary types and possibly a length. The building of that structure is done with a screen having the following sections:
A column at the left indicating the offset of each field relative to the beginning of the structure.
A 'Type' column that indicates the length and the representation used for this field.
The data for this field. Note that only the first few characters are shown.
You can display the data either in decimal or hexadecimal form.
To add a field to the structure proceed as follows:
1. Choose the 'Add' menu option. This will open the following dialog box.
2. Define the base type of the new field by clicking in the available primitive type list on the left.
3. Define its length if it is different than one.
4. Give it a name if you choose to.
The primitive types that are available are:
Characters
Integer 8 bits
Integer 16 bits, signed or unsigned
Integer 32 bits, signed or unsigned
Float simple precision (32 bits)
Float double precision (64 bits)
ASCIIZ: Character string finished by a zero
ASCII Pascal. Character string with a length byte at the beginning.
Swapped short: Short integer coming from a machine with inverted byte order.
Swapped long. 32 bit integer coming from another machine.
Bit inverted. The bits 0-31 become bits 31-0.
To erase a field from the structure definition:
1. Select a field by clicking on the list.
2.Choose the 'Erase' menu option.
