Exetools  

Go Back   Exetools > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 12-11-2022, 00:50
CodeCracker CodeCracker is offline
Family
 
Join Date: Jun 2011
Posts: 385
Rept. Given: 20
Rept. Rcvd 314 Times in 103 Posts
Thanks Given: 13
Thanks Rcvd at 1,443 Times in 296 Posts
CodeCracker Reputation: 300-399 CodeCracker Reputation: 300-399 CodeCracker Reputation: 300-399 CodeCracker Reputation: 300-399
EmptyFinder

EmptyFinder
Find empty place inside target exe,
By default Byte to find is 00 (must be entered as 2 hexadecimal bytes)
you can specify on which section from PE to search, or section characteristics.

Last edited by CodeCracker; 12-24-2022 at 16:42.
Reply With Quote
The Following 2 Users Gave Reputation+1 to CodeCracker For This Useful Post:
MarcElBichon (12-11-2022), user1 (12-11-2022)
The Following 10 Users Say Thank You to CodeCracker For This Useful Post:
Apuromafo (12-11-2022), Fyyre (12-21-2022), Mahmoudnia (12-11-2022), Mendax47 (12-12-2022), niculaita (12-17-2022), pnta (12-22-2022), user1 (12-11-2022), user_hidden (12-11-2022), wilson bibe (12-11-2022), Zeokat (12-11-2022)
  #2  
Old 12-11-2022, 17:04
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 928
Rept. Given: 326
Rept. Rcvd 219 Times in 112 Posts
Thanks Given: 187
Thanks Rcvd at 425 Times in 236 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Thanks CodeCracker
do you know how to make this code compatible with VS2019+?

https://prnt.sc/2_-u5LTC9vsN

error code is

EmptyFinder\EmptyFinderDlg.cpp(56,2): error C2440: 'static_cast': cannot convert from 'void (__thiscall CEmptyFinderDlg::* )(HDROP)' to 'LRESULT (__thiscall CWnd::* )(WPARAM,LPARAM)'
Reply With Quote
  #3  
Old 12-17-2022, 16:25
CodeCracker CodeCracker is offline
Family
 
Join Date: Jun 2011
Posts: 385
Rept. Given: 20
Rept. Rcvd 314 Times in 103 Posts
Thanks Given: 13
Thanks Rcvd at 1,443 Times in 296 Posts
CodeCracker Reputation: 300-399 CodeCracker Reputation: 300-399 CodeCracker Reputation: 300-399 CodeCracker Reputation: 300-399
EmptyFinder v2

EmptyFinder v2: added "dec" and "hex" radio for setting base of "Min number of bytes".

@sendersu: This seems to be related to drag and drop support, don't know about drag and drop in VS2019+.
Attached Files
File Type: zip EmptyFinder_Exe_v2.zip (6.5 KB, 14 views)
File Type: zip EmptyFinder_src_v2.zip (42.7 KB, 14 views)
Reply With Quote
The Following 4 Users Say Thank You to CodeCracker For This Useful Post:
Fyyre (12-21-2022), niculaita (12-17-2022), pnta (12-22-2022), user_hidden (12-22-2022)
  #4  
Old 12-20-2022, 20:47
blue_devil blue_devil is offline
Friend
 
Join Date: Dec 2011
Location: Observable Universe
Posts: 65
Rept. Given: 15
Rept. Rcvd 22 Times in 7 Posts
Thanks Given: 54
Thanks Rcvd at 97 Times in 30 Posts
blue_devil Reputation: 22
@CodeCracker,

1. Searching for empty bytes mean null bytes right? If so can we change the sought value; like 0x00 to 0xCC or to 0xFF
2. Can we search a pattern? (More than one byte)

Sorry, I am asking because i cannot download the files.
Reply With Quote
  #5  
Old 12-22-2022, 19:02
CodeCracker CodeCracker is offline
Family
 
Join Date: Jun 2011
Posts: 385
Rept. Given: 20
Rept. Rcvd 314 Times in 103 Posts
Thanks Given: 13
Thanks Rcvd at 1,443 Times in 296 Posts
CodeCracker Reputation: 300-399 CodeCracker Reputation: 300-399 CodeCracker Reputation: 300-399 CodeCracker Reputation: 300-399
1. Yes 2. No.

1. empty bytes means usually 00, you can enter other hex byte value like CC or FF
under "Byte to find" textbox. By default searches for 00 byte
Reply With Quote
The Following User Says Thank You to CodeCracker For This Useful Post:
blue_devil (12-22-2022)
  #6  
Old 12-24-2022, 16:43
CodeCracker CodeCracker is offline
Family
 
Join Date: Jun 2011
Posts: 385
Rept. Given: 20
Rept. Rcvd 314 Times in 103 Posts
Thanks Given: 13
Thanks Rcvd at 1,443 Times in 296 Posts
CodeCracker Reputation: 300-399 CodeCracker Reputation: 300-399 CodeCracker Reputation: 300-399 CodeCracker Reputation: 300-399
Thank for interest on my tool EmptyFinder,
here is the uploaded exe:
https://www10.zippyshare.com/v/Z0Ep9u98/file.html
Reply With Quote
The Following 2 Users Say Thank You to CodeCracker For This Useful Post:
blue_devil (12-27-2022), retro (12-26-2022)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 20:00.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2022 )