Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #18  
Old 04-15-2018, 08:55
Stingered Stingered is offline
Banned User
 
Join Date: Dec 2017
Posts: 257
Rept. Given: 0
Rept. Rcvd 3 Times in 3 Posts
Thanks Given: 296
Thanks Rcvd at 181 Times in 90 Posts
Stingered Reputation: 3
Thumbs up

Quote:
Originally Posted by dosprog View Post
Here is a little and very useful 32-bit calculator
32-bit ASM Calculator 1.6 (c)PCL

--Add--


And here is a specific calculator for calculate offsets in 32-bit PE-EXE file:
File Location Calculator (c)PCL

His little-modified version 1.4.0.4(+) is attached to this message (See attachement).
Added option - displays "<TaiL>" string after section name if (given address > FileOffset+VirtualSize) for this section.

Example of PE-sections table in 32-bit PE-EXE with tails in sections:



See ".text" section for example:
VirtSize =00028874h
PhisSize=00028A00h
Then:
<Tail>Size= PhisSize-VirtSize=018Ch


--Add--

For "Triming tails" of all sections in PE-section table of file
use HIEW32 HEM-Plugin PE_TAILS.HEM.



Best response yet!
Reply With Quote
The Following 2 Users Say Thank You to Stingered For This Useful Post:
niculaita (04-15-2018), wilson bibe (04-15-2018)
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
kernel-based keylogger for Linux nimaarek Source Code 7 10-30-2017 14:51


All times are GMT +8. The time now is 20:44.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )