Exetools

Exetools (https://forum.exetools.com/index.php)
-   Community Tools (https://forum.exetools.com/forumdisplay.php?f=47)
-   -   Inline Empty Byte Finder (https://forum.exetools.com/showthread.php?t=18848)

chessgod101 07-13-2018 08:25

Inline Empty Byte Finder
 
Inline Empty Byte Finder is a tool designed to help you find a location inside an executable or dll file to create an inline patch or code cave. It can check for specific section flags to meet the requirements for your inline. Inline finder searches for areas the meet the size that you specify, but also lists how many extra bytes are available at that offset. It searches for the empty bytes by section to prevent the code cave from overlapping other sections.

Features:
  • Drag and Drop Support
  • Command line Support
  • Define Empty Byte Value
  • Define needed Section Flags

Download:
Code:

https://mega.nz/#!p50zUS4Y!xSTu4qaEgUIFXYzIEmU_lqBOESEf4usKRQe1J2LduAc

Screenshot:

Code:

https://1.bp.blogspot.com/-FO3PxX1cMPI/W0FgpG2TZFI/AAAAAAAAAuk/XD5jk8xnFZAUTq2VmrMnliy6OS4H3uHGwCLcBGAs/s400/InlineFinder_2018-07-07_20-52-02.png

dosprog 07-13-2018 14:44

Please add possibility to call Hiew32.exe with PE-file name and PE-offset from selected line of listing.

chessgod101 07-14-2018 04:33

That's a very good idea, dosprog. Here is an updated release with the feature implemented:
Download:
Code:

https://mega.nz/#!I582nATZ!cziRlP7krGlQQ0sBe-CdcB17SraXWkOETy2U21HWWz4

dosprog 07-14-2018 06:51

Great.

Duplicate, please, context menu functions HEX/ASM with keys <F3> & <F4>.

Then the context menu should look like this:

|------------------------------
| <F3> = Follow offset in HEX
| <F4> = Follow RVA in DASM
|------------------------------

--Add--

Little bug: Settings->Hiew32Path not saved on exit.
Works only if Hiew32 Path selected in current program session.

chessgod101 07-14-2018 09:50

Quote:

Little bug: Settings->Hiew32Path not saved on exit.
Works only if Hiew32 Path selected in current program session.
It does save the path on exit. Make sure you run it as admin so it can create the Settings.ini file in the application directory.

dosprog 07-14-2018 16:17

Run as admin Ok.
But file settings.ini not created.

It created only if Hiew32.exe placed at program directory ("E:\1\")
then HiewPath = E:\1\HIEW32.EXE.

When "settings.ini" edited manually to set
HiewPath=C:\EDITOR\HEX\HIEW\HIEW800\HIEW32.EXE
- then works Ok.

May be problems with selecting/saving too complex path?


chessgod101 07-15-2018 03:48

I found the issue. I failed to note that the CurrentDirectory is reset when a file is passed via command line. I used an alternate method to obtain the exe directory:
Code:

https://mega.nz/#!ZhdDlKKT!sawucwBXtwKeViQROViMXg4rivMGSNJURZoyN9dOx1k

dosprog 07-15-2018 14:06

Ok. Works fine.

Quote:

Originally Posted by chessgod101 (Post 113996)
I found the issue. I failed to note that the CurrentDirectory is reset when a file is passed via command line. I used an alternate method to obtain the exe directory.

The best way is using GetCommandLine().

-- add --

What about creating accelerators <F3> & <F4>? - Really needed function


chessgod101 07-15-2018 23:33

Here is version 1.3. I added sorting to the columns and hotkeys for the hiew functions:
Code:

https://mega.nz/#!159GGIgK!XUzoE3GcIh_6b5AtyxX2OnfGskZua43ULyssOsw9y9w

dosprog 07-16-2018 00:15

) I beg your pardon, i'm created new theme -> here <-


All times are GMT +8. The time now is 13:42.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2019, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX