Exetools - Inline Empty Byte Finder

Exetools (https://forum.exetools.com/index.php)

- Community Tools (https://forum.exetools.com/forumdisplay.php?f=47)

- - Inline Empty Byte Finder (https://forum.exetools.com/showthread.php?t=18848)

chessgod101

07-13-2018 08:25

Inline Empty Byte Finder

Inline Empty Byte Finder is a tool designed to help you find a location inside an executable or dll file to create an inline patch or code cave. It can check for specific section flags to meet the requirements for your inline. Inline finder searches for areas the meet the size that you specify, but also lists how many extra bytes are available at that offset. It searches for the empty bytes by section to prevent the code cave from overlapping other sections.

Features:

Drag and Drop Support
Command line Support
Define Empty Byte Value
Define needed Section Flags

Download:

Code:

https://mega.nz/#!p50zUS4Y!xSTu4qaEgUIFXYzIEmU_lqBOESEf4usKRQe1J2LduAc

Screenshot:

Code:

https://1.bp.blogspot.com/-FO3PxX1cMPI/W0FgpG2TZFI/AAAAAAAAAuk/XD5jk8xnFZAUTq2VmrMnliy6OS4H3uHGwCLcBGAs/s400/InlineFinder_2018-07-07_20-52-02.png

dosprog

07-13-2018 14:44

Please add possibility to call Hiew32.exe with PE-file name and PE-offset from selected line of listing.

chessgod101

07-14-2018 04:33

That's a very good idea, dosprog. Here is an updated release with the feature implemented:
Download:

Code:

https://mega.nz/#!I582nATZ!cziRlP7krGlQQ0sBe-CdcB17SraXWkOETy2U21HWWz4

dosprog

07-14-2018 06:51

Great.

Duplicate, please, context menu functions HEX/ASM with keys <F3> & <F4>.

Then the context menu should look like this:

|------------------------------
| <F3> = Follow offset in HEX
| <F4> = Follow RVA in DASM
|------------------------------

--Add--

Little bug: Settings->Hiew32Path not saved on exit.
Works only if Hiew32 Path selected in current program session.

chessgod101

07-14-2018 09:50

Quote:

Little bug: Settings->Hiew32Path not saved on exit.
Works only if Hiew32 Path selected in current program session.

It does save the path on exit. Make sure you run it as admin so it can create the Settings.ini file in the application directory.

dosprog

07-14-2018 16:17

Run as admin Ok.
But file settings.ini not created.

It created only if Hiew32.exe placed at program directory ("E:\1\")
then HiewPath = E:\1\HIEW32.EXE.

When "settings.ini" edited manually to set
HiewPath=C:\EDITOR\HEX\HIEW\HIEW800\HIEW32.EXE
- then works Ok.

May be problems with selecting/saving too complex path?

chessgod101

07-15-2018 03:48

I found the issue. I failed to note that the CurrentDirectory is reset when a file is passed via command line. I used an alternate method to obtain the exe directory:

Code:

https://mega.nz/#!ZhdDlKKT!sawucwBXtwKeViQROViMXg4rivMGSNJURZoyN9dOx1k

dosprog

07-15-2018 14:06

Ok. Works fine.

Quote:

Originally Posted by chessgod101 (Post 113996)

I found the issue. I failed to note that the CurrentDirectory is reset when a file is passed via command line. I used an alternate method to obtain the exe directory.

The best way is using GetCommandLine().

-- add --

What about creating accelerators <F3> & <F4>? - Really needed function

chessgod101

07-15-2018 23:33

Here is version 1.3. I added sorting to the columns and hotkeys for the hiew functions:

Code:

https://mega.nz/#!159GGIgK!XUzoE3GcIh_6b5AtyxX2OnfGskZua43ULyssOsw9y9w

dosprog

07-16-2018 00:15

) I beg your pardon, i'm created new theme -> here <-

All times are GMT +8. The time now is 23:57.