It’s quite simple, select the target file you wish to patch and select a .dif file with the patches you wish to make. Note: the .dif files produced by IDA need to either have their first 4 lines removed or simply add a ; to the lines with text (turning them into what my patcher sees as a comment and ignores) otherwise it expects a format of:

Example Dif File

;This difference file has been created by IDA Pro
;
;some file.dll
;
; this is just a sample comment that can be placed inside a .dif file
00005031: 03 17
00005035: 03 17
00005872: 28 00
00005873: 58 00
00005874: 01 00
00005876: 06 00
00005C3A: 18 17
00010F56: 06 16

As you can see above this .dif file would make 8 bytes changes within the specified target file.

Hands down this plugin has been wonderful to use in every way, the only think I found it lacked (that I personally wanted) was the ability to pop code out of my blog into a another window, as you can see this blog is very thin and makes for lack luster code reading. After a quick contact with the plugin’s author low and behold the same day he build the feature into the plugin. How’s that for service!

Finally I built my own theme, for here at epicgeeks.net however I’ve made this theme available for download here: Epicgeeks Crayon Theme (74)

There are several methods to doing this, and one way is using public, private key-pair cryptography. In the example below I’ve shown a PHP script that is able to talk to a C# application using an openssl public, private key-pair.

In this post I’ve included the source to everything in a .rar file listed for download at the bottom.

Openssl Class

<?php


/**
 ******************************************************************************************
 * OpenSSL                                                                    * synmuffin *
 ******************************************************************************************
 * 
 * OpenSSL class that was designed to work with C/C++/C# applications. This class allows
 * users who want to build a secure API to Rx/Tx data from the web (website or server)
 * through to their end users application.
 * 
 *
 * author: synmuffin
 * email: synmuffin@savelab.net
 * version: 1.0
 * date:
 *
 */
class OpenSSL {
	
	/*
	|================================================================================
	| PUBLIC VARS
	|================================================================================
	*/


	/*
	|================================================================================
	| PRIVATE VARS
	|================================================================================
	*/
	
	
	/**
	 * $publicKey
	 * Public key instance used throughout the class. This must be initialized via the
	 * LoadPublicKey() function.
	 */
	private $publicKey 		= NULL;
	
	
	/**
	 * $privateKey
	 * Private key instance used throughout the class. This must be initialized via the
	 * LoadPrivateKey() function.
	 */
	private $privateKey 	= NULL;


	/**
	 * $padding
	 * Padding, currently not in use as it seems to not work.
	 */
	private $padding 		= NULL;		// OPENSSL_PKCS1_PADDING, OPENSSL_SSLV23_PADDING, OPENSSL_PKCS1_OAEP_PADDING, OPENSSL_NO_PADDING.

    
    /**
     * Class constructor, currently no paramaters are needed.
     */
    public function __construct($params = FALSE)
    {
        if (!$params)
            return;
        
        if (array_key_exists('public_key', $params))
        {
            if (file_exists($params['public_key']))
                $this->LoadPublicKey($params['public_key']);
            else
                trigger_error("Unable to find Public key file {$params['public_key']}.", E_USER_ERROR);
        }

        if (array_key_exists('private_key', $params))
        {
            if (file_exists($params['private_key']))
                $this->LoadPrivateKey($params['private_key']);
            else
                trigger_error("Unable to find Private key file {$params['private_key']}.", E_USER_ERROR);
        }
    }
    // ---------------------------------------------------------------------


    /*
	|================================================================================
	| PUBLIC FUNCTIONS
	|================================================================================
	*/

    
    /**
     * public LoadPrivateKey(string $privkey_path [, string $privkey_pass])
     *
     * Function will load a private key via the passed string file location of $privkey_path. This fucntion also
     * takes and optional second paramter that will allow for private keys locked with a DES passphrase to be used.
     *
     * @param string $privkey_path	- Path to the private key file.
     * @param string $privkey_pass	- Private key passphrase.
     *
     * @return none
     */
    public function LoadPrivateKey($privkey_path, $privkey_pass = FALSE)
    {
    	if (!$privkey_pass || $privkey_pass == NULL)
    	{
    		if (!($this->privateKey = openssl_get_privatekey('file://' . $privkey_path)))
    			trigger_error("Unable to load private key from file {$privkey_path}.", E_USER_ERROR);
    	}
    	else
    	{
    		if (!($this->privateKey = openssl_get_privatekey('file://' . $privkey_path, $privkey_pass)))
    			trigger_error("Unable to load private key from file {$privkey_path}.", E_USER_ERROR);
    	}
    }
    // ---------------------------------------------------------------------


    /**
     * public LoadPublicKey(string $pubkey_path)
     *
     * Function will load a public key via the passed string file location of $pubkey_path.
     *
     * @param string $pubkey_path 	- Path to public key file.
     *
     * @return none
     */
    public function LoadPublicKey($pubkey_path)
    {
    	if (!($this->publicKey = openssl_get_publickey('file://' . $pubkey_path)))
    		trigger_error("Unable to load public key from file {$pubkey_path}.", E_USER_ERROR);
    }
    // ---------------------------------------------------------------------

    
    /**
     * public PrivateKeyEncrypt(string $raw_data [, bool $base64 = TRUE])
     *
     * Function will try and encrypte the passed string $raw_data using the loaded (hopefully) $this->privateKey
     * resource. This function also takes an optional second paramter allowing the user to spepcified if they wish
     * to have the encrypted data returned base64 encoded, be default this is set to true.
     *
     * @param string $raw_data	- Raw data to be encrypted.
     * @param bool $base64 		- Bool value to return data base64 encoded.
     *
     * @return string $encrypted_data
     */
    public function PrivateKeyEncrypt($raw_data, $base64 = TRUE)
    {
    	if ($this->privateKey == NULL)
    		trigger_error("Private key has not been sepcified.", E_USER_ERROR);
		
    	if (!openssl_private_encrypt($raw_data, $encrypted_data, $this->privateKey))
    		trigger_error("Unable to encrypt data.", E_USER_ERROR);

    	return ($base64) ? base64_encode($encrypted_data) : $encrypted_data;
    }
    // ---------------------------------------------------------------------

    
    /**
     * public PrivateKeyDecrypt(string $raw_data [, bool $base64 = TRUE])
     *
     * Function will try and decrypt the passed $raw_data using the loaded (hopefully) $this->privateKey resource. This
     * function, much like it's counter-part, takes an optional second paramter specifiing whether or not the $raw_data
     * is base64 encoded. By default is assumes it is.
     *
     * @param string $raw_data 	- Raw data to be decrypted.
     * @param bool $base64 		- Bool value to assume $raw_data is base64 encoded.
     *
     * @return string $decrypted_data
     */
    public function PrivateKeyDecrypt($raw_data, $base64 = TRUE)
    {
		if ($this->privateKey == NULL)
			trigger_error("Private key has not been specified.", E_USER_ERROR);

    	
    	if (!openssl_private_decrypt(($base64) ? base64_decode($raw_data) : $raw_data, $decrypted_data, $this->privateKey, $this->padding))
    			trigger_error("Unable to decrypt data.", E_USER_ERROR);

    	return $decrypted_data;
    }
    // ---------------------------------------------------------------------

    
    /**
     * public PublicKeyEncrypt(string $raw_data [, bool $base64 = TRUE])
     *
     * Function will try and encrypte the passed string $raw_data using the loaded (hopefully) $this->publicKey
     * resource. This function also takes an optional second paramter allowing the user to spepcified if they wish
     * to have the encrypted data returned base64 encoded, be default this is set to true.
     *
     * @param string $raw_data	- Raw data to be encrypted.
     * @param bool $base64 		- Bool value to return data base64 encoded.
     *
     * @return string $encrypted_data
     */
    public function PublicKeyEncrypt($raw_data, $base64 = TRUE)
    {
    	if ($this->publicKey == NULL)
    		trigger_error("Public key has not been specified.", E_USER_ERROR);

    	if (!openssl_public_encrypt($raw_data, $encrypted_data, $this->publicKey))
    		trigger_error("Unable to encrypt data.", E_USER_ERROR);

    	return ($base64) ? base64_encode($encrypted_data) : $encrypted_data;
    }
    // ---------------------------------------------------------------------

    
    /**
     * public PublicKeyDecrypt(string $raw_data [, bool $base64 = TRUE])
     *
     * Function will try and decrypt the passed $raw_data using the loaded (hopefully) $this->privateKey resource. This
     * function, much like it's counter-part, takes an optional second paramter specifiing whether or not the $raw_data
     * is base64 encoded. By default is assumes it is.
     *
     * @param string $raw_data 	- Raw data to be decrypted.
     * @param bool $base64 		- Bool value to assume $raw_data is base64 encoded.
     *
     * @return string $decrypted_data
     */
    public function PublicKeyDecrypt($raw_data, $base64 = TRUE)
    {
    	if ($this->publicKey == NULL)
    		trigger_error("Public key has not been specified.", E_USER_ERROR);
    	
    	if (!openssl_public_decrypt(($base64) ? base64_decode($raw_data) : $raw_data, $decrypted_data, $this->publicKey))
    		trigger_error("Unable to decrypt data.", E_USER_ERROR);
    	
    	return $decrypted_data;
    }
    // ---------------------------------------------------------------------


    /*
	|================================================================================
	| PRIVATE FUNCTIONS
	|================================================================================
	*/
	

}
?>

Web usage example

<?php
	// include the lib
	require_once('../lib/OpenSSL.php');

	// now to keep this nice and secure this should always be done and called
	// over a a HTTPS layer for added security. However in this example I've provided
	// a way to turn this check off just in case you want to run soem quick http tests.
	//
	// Simply comment out the next two lines if you wish to run http NOT https.
	
	if ($_SERVER['HTTPS'] != 'on')
		exit("You should use HTTPS not HTTP.");

	// in this example I'm going to use the $raw_data variable and just stick some text data in it,
	// however in a RWS this would be sensitive data that I've returned via a call or check from
	// a database or something along those lines.
	//
	// More to the point I want to pass something back to my application here, as encrypted data.
	$raw_data = "This is my data that I want to keep a secret!";

	// next we init our class
	$ssl = new OpenSSL();

	// load our private key
	$ssl->LoadPrivateKey('/home/your/path/to/privatekey.key');

	// now we can encrypt our data (provided the key was valid)
	// note: with default optiosn like this it will return the data base64 encoded
	$encrypted_data = $ssl->PrivateKeyEncrypt($raw_data);

	// now we are just going to print this data (assuming this was our C# app that made this call)
	// we print the data right to output buffer, so we can use things like HTTP_GET requests.
	print $encrypted_data;
?>

Using the above example in conjunction with the C# application you can demo how this would work. Download the attached file to get a copy of all .php files as well as a full C# application.

Thanks for stopping in and hope you enjoy.