[ale] tool to repair a binary file given a diff between hex dumps of the original and the altered

[Greg Freemyer]

Jerry,

If you look closely at the diff, you have a \n in the first and \r\n
in the second.

\n is the Unix / Linux way
\r\\n is the Windows way (iirc).

Assuming \r\n is never valid in this doc, then there are several
little converters available to do that.  I think just bringing it into
vi and saving back out will do it.

Greg


2008/4/24 Jerry Yu <jjj863 at gmail.com>:
> what tool can I suggest a remote Windows admin to use to 'repair' his binary
> file given the hex diff below.
> Of course, if this 'repair' is too hairy, I'd go down the retransmission
> route (expensive).
>
> diff meta.od-x tpp.od-x
>  24,25c24,26
>  < 0000560 6b92 d311 01fb f7be 402c c959 a125 0ac4
>  < 0000600
>  ---
>  > 0000560 6b92 d311 01fb f7be 402c c959 a125 0d0a
>  > 0000600 c400
>  > 0000601
> _______________________________________________
>  Ale mailing list
>  Ale at ale.org
>  http://mail.ale.org/mailman/listinfo/ale
>
>



-- 
Greg Freemyer
Litigation Triage Solutions Specialist
http://www.linkedin.com/in/gregfreemyer
First 99 Days Litigation White Paper -
http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf

The Norcross Group
The Intersection of Evidence & Technology
http://www.norcrossgroup.com