Exetools  

Go Back   Exetools > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 02-20-2022, 08:36
dosprog dosprog is offline
Friend
 
Join Date: Feb 2018
Posts: 103
Rept. Given: 0
Rept. Rcvd 15 Times in 14 Posts
Thanks Given: 31
Thanks Rcvd at 140 Times in 70 Posts
dosprog Reputation: 15
PE_OVLS - tool for test/strip overlay of PE/PE+ EXE file

PE_OVLS - WIN32 CMD tool for test/strip overlay of PE/PE+ EXE file.

Similar to PE_OVL.HEM plugin (See ->Here<-).

Usage: PE_OVLS <file> [/opt /opt ...]
Where
file: filemask (wildcards allowed)
opt:
/s = strip PE-EXE overlay (default is test only)
/q = be quiet
/w = no wait for key


Download: -> PE_OVLs v.0.000a <-

Last edited by dosprog; 02-23-2022 at 12:23.
Reply With Quote
The Following User Gave Reputation+1 to dosprog For This Useful Post:
MarcElBichon (02-21-2022)
  #2  
Old 02-21-2022, 03:33
dosprog dosprog is offline
Friend
 
Join Date: Feb 2018
Posts: 103
Rept. Given: 0
Rept. Rcvd 15 Times in 14 Posts
Thanks Given: 31
Thanks Rcvd at 140 Times in 70 Posts
dosprog Reputation: 15
Usage examples:

C>PE_OVLs notepad.exe

- Prints overlay exists or no in file notepad.exe. If overlay exists then prints his size as dec (hex).

C>PE_OVLs *

- Scans current directory for any PE-EXE files and prints overlay size for all if founded.

C>PE_OVLs notepad.exe /s

- Strips overlay of file notepad.exe. Prints stripped overlay size as dec (hex).

C>PE_OVLs * /s

- Strips overlay of all PE-EXE files founded in current directory. Prints stripped overlay size for all as dec (hex).


Also keys available:

/w = no wait for any key at exit;
/q = /w + no text report, be quiet.


*WARNING*
All actions not prompted, no backups.
So be careful when using wildcards.



Last edited by dosprog; 02-21-2022 at 03:44.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 03:54.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX
( 1998 - 2022 )