04-15-2018, 08:55
|
Friend
|
|
Join Date: Dec 2017
Posts: 257
Rept. Given: 0
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 297
Thanks Rcvd at 179 Times in 89 Posts
|
|
Quote:
Originally Posted by dosprog
Here is a little and very useful 32-bit calculator
32-bit ASM Calculator 1.6 (c)PCL
--Add--
And here is a specific calculator for calculate offsets in 32-bit PE-EXE file:
File Location Calculator (c)PCL
His little-modified version 1.4.0.4(+) is attached to this message (See attachement).
Added option - displays "<TaiL>" string after section name if (given address > FileOffset+VirtualSize) for this section.
Example of PE-sections table in 32-bit PE-EXE with tails in sections:
See ".text" section for example:
VirtSize = 00028874h
PhisSize= 00028A00h
Then:
<Tail>Size= PhisSize-VirtSize= 018Ch
--Add--
For "Triming tails" of all sections in PE-section table of file
use HIEW32 HEM-Plugin PE_TAILS.HEM.
|
Best response yet!
|