#1
|
|||
|
|||
PE_OVLS - tool for test/strip overlay of PE/PE+ EXE file
PE_OVLS - WIN32 CMD tool for test/strip overlay of PE/PE+ EXE file.
Similar to PE_OVL.HEM plugin (See ->Here<-). Usage: PE_OVLS <file> [/opt /opt ...] Where file: filemask (wildcards allowed) opt: /s = strip PE-EXE overlay (default is test only) /q = be quiet /w = no wait for key Download: -> PE_OVLs v.0.000a <- Last edited by dosprog; 02-23-2022 at 12:23. |
The Following User Gave Reputation+1 to dosprog For This Useful Post: | ||
MarcElBichon (02-21-2022) |
#2
|
|||
|
|||
Usage examples:
C>PE_OVLs notepad.exe - Prints overlay exists or no in file notepad.exe. If overlay exists then prints his size as dec (hex). C>PE_OVLs * - Scans current directory for any PE-EXE files and prints overlay size for all if founded. C>PE_OVLs notepad.exe /s - Strips overlay of file notepad.exe. Prints stripped overlay size as dec (hex). C>PE_OVLs * /s - Strips overlay of all PE-EXE files founded in current directory. Prints stripped overlay size for all as dec (hex). Also keys available: /w = no wait for any key at exit; /q = /w + no text report, be quiet. *WARNING* All actions not prompted, no backups. So be careful when using wildcards. Last edited by dosprog; 02-21-2022 at 03:44. |
|
|