PE_Win9x.HEM PlugIn Released
 

PE_Win9x.HEM PlugIn Released.

This plug writes to x32 PE-EXE header
values OSver=1 & SubSys=4 for make PE-EXE linked for Vista+
loadable on Win9x+, for example, on WinXP.

Dounload: PE_Win9x.HEM v.0.001a

CRACK.HEM PlugIn updated - v.0.002a
 

Added option: Rewrite or Append to CRK-file if CRK-file already exists.

CRACK.HEM v.0.002a (31 Dec 2020).

CRACK.HEM PlugIn updated - v.0.003a
 

Added option: compare inside selected block only (optional, if block selected).

Download updated version: CRACK.HEM v.0.003a (2 Jan 2021).

PE_TAIL!.HEM PlugIn Released (*NEW*)
 

PE_TAIL!.HEM PlugIn Released (*NEW*)

Detects if current address of PE/PE+ in a "tail" of PE-section or in PE-overlay or in MZ/PE header.
Also detects valid VA and types report.

Download: PE_TAIL!.HEM v.0.000a (17 Oct 2021) - Size 4kb UPX'ed.



--Added--

Similar tool for 32-bit PE only:
File Location Calculator (c)manhunter / PCL
with little modification for checking sections tails:
Download: FLC v.1.4.0.4 (mod)

Locate.HEM PlugIn Released (*NEW*)
 

New PlugIn - Locate.HEM.

Creates/appends to file "Locate.TXT" string with current file position (or VA for PE/PE+)
in current opened file.

Download: LOCATE.HEM v.0.000a (2021)

Hashes v1.02 (4 Sept 2023)

Hiew External Module (HEM) to calculate CRC-32, MD5, SHA-1, and SHA-256 hashes of files and blocks.

What's new:

• Support for CRC-32 checksum

Home/Download:

BTW, do not click previously shared old exelab[.]ru links folks. They are NSFW right now!

CopyAs v1.00 (2 Aug 2023)

Hiew External Module (HEM) to copy block data in different formats.

This module allows you to export the content of a marked block in in multiple formats such as:

• Hex bytes (no spaces)
• Hex bytes (space-separated)
• Hex string (escaped)
• C array
• C string (escaped non-ASCII)

What's new:

• First release.

Home/Download:

Start post updated with actual collection (06 Feb 2024)

HEM-PlugIns from Fernando Merces (https://github.com/merces)

Rebuilded for compact size (~100Kb vs ~10Kb size).

CopyAs.HEM v.1.00
Hashes.HEM v.1.02

Note:
Hashes.HEM PlugIn requires bcrypt.dll (Vista+) present in system.

Hiew Keyboard Helper

HEM-PlugIn from Tavis Ormandy
(https://github.com/taviso/hiewkey)

Fixed/customized by me:

Rebuilded for compact size (~500Kb vs ~10Kb size).

Locate.HEM PlugIn updated.

Now copies file position (Raw/VA/RVA) to clipboard.

Download: --> Locate.HEM v.0.001a <-- (17 Feb 2024)

Locate.HEM PlugIn updated.
CopyAs.HEM PlugIn updated.

Now both works in Win9x too.


Start post updated with actual collection (17 Feb 2024)

Locate.HEM PlugIn updated.

Fixed "Open file error"

Start post updated with actual collection (14 Mar 2024)

cursor.HEM - HEM-Plugin - Highlighting current line in Hex/Disasm modes in Hiew32.

-> Download <-

(See also start post)