PE_OVL.HEM PlugIn for HIEW32
PE_OVL.HEM PlugIn for HIEW32
for Strip/Add/Save/Goto overlay of PE-EXE file. Logic: Quote:
Quote:
|
Note about using HEM-plugins
Not only everyone(c) knows that you can speed up
the launch of Plug-Ins using the "hemkeys.ini" file. For example: Quote:
|
Goto.HEM - PlugIn for HIEW32
GOTO.HEM - HEM-PlugIn for locate some positions in MZ-PE-EXE file.
Menu available: Quote:
|
Updated 5 PlugIns for manipulate with PE-EXE.
(Now if file opened in Hiew is not PE, then PE_xxxx PligIns not listed in Hiew32 PlugIns Menu). Updated full PlugIns archive. See ->Start Post <- |
Quote:
|
you say malware found @github? :)
how come... or maybe it started to happen after MS bought GH by 7 500 000 000 usd? :) |
) sendersu, he got little excited
|
Goto.HEM - PlugIn for HIEW32 (updated)
Goto.HEM - added new option "Goto PE CheckSum".
Menu available: Quote:
|
Happy NY 2 all
@Jupiter, test, please, HEM-plugin KBD_CYR.HEM with new version 8.66, if possible - because in leaked vmprotected version it doesn't works. |
@dosprog, The plugin loads in my legal copy. This is the output for characters a-z on an English keyboard.
Code:
https://i.imgur.com/SMnal27.png |
New plugins released 2020:
--> BASE64.HEM <-- (17 apr 2020) - HEM-PlugIn produces BASE64 string for marked block (16Mb max.) --> SECTOR.HEM <-- (18 apr 2020) - HEM-PlugIn for write sector(s) of disk to a file (256 sectors max.). --> PE_SPLIT.HEM <-- (24 apr 2020) - HEM-Plugin - Split & Join 32-bit PE-file. (Prototype is --> PEU <-- by A.Quincey,1998) --> BL_FILE.HEM <-- (26 apr 2020) - HEM-PlugIn writes selected block to a file with HEX-address as filename. |
--> PE_TIME.HEM <-- (23 apr 2020) - HEM-Plugin - PE-file LinkTime<-> FileTime.
|
Another excellent HEM plugin by Tavis Ormandy, view data structures in Kaitai format:
https://github.com/taviso/kiewtai |
Updated PlugIn MBYTE2.HEM
- Added "Raw" Option. - Fixed "Asm" transtation (removed invalid comma at EOL) Now converted bytes : C-code: Quote:
Asm-code: Quote:
Quote:
|
|
All times are GMT +8. The time now is 10:57. |
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX