#1
|
||||
|
||||
Inline Empty Byte Finder
Inline Empty Byte Finder is a tool designed to help you find a location inside an executable or dll file to create an inline patch or code cave. It can check for specific section flags to meet the requirements for your inline. Inline finder searches for areas the meet the size that you specify, but also lists how many extra bytes are available at that offset. It searches for the empty bytes by section to prevent the code cave from overlapping other sections.
Features:
Download: Code:
https://mega.nz/#!p50zUS4Y!xSTu4qaEgUIFXYzIEmU_lqBOESEf4usKRQe1J2LduAc Screenshot: Code:
https://1.bp.blogspot.com/-FO3PxX1cMPI/W0FgpG2TZFI/AAAAAAAAAuk/XD5jk8xnFZAUTq2VmrMnliy6OS4H3uHGwCLcBGAs/s400/InlineFinder_2018-07-07_20-52-02.png
__________________
"As the island of our knowledge grows, so does the shore of our ignorance." John Wheeler |
The Following 5 Users Gave Reputation+1 to chessgod101 For This Useful Post: | ||
b30wulf (07-16-2018), canopus (08-11-2018), CodeCracker (07-13-2018), MarcElBichon (07-14-2018), niculaita (07-14-2018) |
The Following 15 Users Say Thank You to chessgod101 For This Useful Post: | ||
2late (07-24-2018), besoeso (07-14-2018), CodeCracker (07-13-2018), dosprog (07-13-2018), Hypnz (07-13-2018), Mahmoudnia (07-14-2018), Megin (07-14-2018), niculaita (07-14-2018), NoneForce (07-14-2018), taos (07-13-2018), TechLord (07-13-2018), user_hidden (07-13-2018), wilson bibe (07-13-2018), zeffy (07-13-2018), Zeokat (07-14-2018) |
#2
|
|||
|
|||
Please add possibility to call Hiew32.exe with PE-file name and PE-offset from selected line of listing.
|
The Following User Says Thank You to dosprog For This Useful Post: | ||
zeuscane (07-14-2018) |
#3
|
||||
|
||||
That's a very good idea, dosprog. Here is an updated release with the feature implemented:
Download: Code:
https://mega.nz/#!I582nATZ!cziRlP7krGlQQ0sBe-CdcB17SraXWkOETy2U21HWWz4
__________________
"As the island of our knowledge grows, so does the shore of our ignorance." John Wheeler |
The Following 4 Users Say Thank You to chessgod101 For This Useful Post: | ||
besoeso (07-14-2018), dosprog (07-14-2018), Mahmoudnia (07-14-2018), zeuscane (07-14-2018) |
#4
|
|||
|
|||
Great.
Duplicate, please, context menu functions HEX/ASM with keys <F3> & <F4>. Then the context menu should look like this: |------------------------------ | <F3> = Follow offset in HEX | <F4> = Follow RVA in DASM |------------------------------ --Add-- Little bug: Settings->Hiew32Path not saved on exit. Works only if Hiew32 Path selected in current program session. Last edited by dosprog; 07-14-2018 at 07:16. |
The Following User Says Thank You to dosprog For This Useful Post: | ||
niculaita (07-14-2018) |
#5
|
||||
|
||||
Quote:
__________________
"As the island of our knowledge grows, so does the shore of our ignorance." John Wheeler |
#6
|
|||
|
|||
Run as admin Ok.
But file settings.ini not created. It created only if Hiew32.exe placed at program directory ("E:\1\") then HiewPath = E:\1\HIEW32.EXE. When "settings.ini" edited manually to set HiewPath=C:\EDITOR\HEX\HIEW\HIEW800\HIEW32.EXE - then works Ok. May be problems with selecting/saving too complex path? Last edited by dosprog; 07-14-2018 at 16:22. |
#7
|
||||
|
||||
I found the issue. I failed to note that the CurrentDirectory is reset when a file is passed via command line. I used an alternate method to obtain the exe directory:
Code:
https://mega.nz/#!ZhdDlKKT!sawucwBXtwKeViQROViMXg4rivMGSNJURZoyN9dOx1k
__________________
"As the island of our knowledge grows, so does the shore of our ignorance." John Wheeler |
The Following User Says Thank You to chessgod101 For This Useful Post: | ||
tonyweb (07-15-2018) |
#8
|
|||
|
|||
Ok. Works fine.
Quote:
-- add -- What about creating accelerators <F3> & <F4>? - Really needed function Last edited by dosprog; 07-15-2018 at 14:14. |
#9
|
||||
|
||||
Here is version 1.3. I added sorting to the columns and hotkeys for the hiew functions:
Code:
https://mega.nz/#!159GGIgK!XUzoE3GcIh_6b5AtyxX2OnfGskZua43ULyssOsw9y9w
__________________
"As the island of our knowledge grows, so does the shore of our ignorance." John Wheeler |
#10
|
|||
|
|||
) I beg your pardon, i'm created new theme -> here <-
|
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
Tool to scan files for common byte sequences | dila | General Discussion | 15 | 02-18-2018 19:11 |
pic 16f84 and skip security byte? | hrco | General Discussion | 11 | 05-25-2004 15:40 |
MOV BYTE PTR DS:[463315],EB not working? | Nilrem | General Discussion | 7 | 01-13-2004 06:14 |