PE_OVLS - tool for test/strip overlay of PE/PE+ EXE file
 

PE_OVLS - WIN32 CMD tool for test/strip overlay of PE/PE+ EXE file.

Similar to PE_OVL.HEM plugin (See ->Here<-).

Usage: PE_OVLS <file> [/opt /opt ...]
Where
file: filemask (wildcards allowed)
opt:
/s = strip PE-EXE overlay (default is test only)
/q = be quiet
/w = no wait for key


Download: -> PE_OVLs v.0.000a <-

Usage examples:

C>PE_OVLs notepad.exe

- Prints overlay exists or no in file notepad.exe. If overlay exists then prints his size as dec (hex).

C>PE_OVLs *

- Scans current directory for any PE-EXE files and prints overlay size for all if founded.

C>PE_OVLs notepad.exe /s

- Strips overlay of file notepad.exe. Prints stripped overlay size as dec (hex).

C>PE_OVLs * /s

- Strips overlay of all PE-EXE files founded in current directory. Prints stripped overlay size for all as dec (hex).


Also keys available:

/w = no wait for any key at exit;
/q = /w + no text report, be quiet.


*WARNING*
All actions not prompted, no backups.
So be careful when using wildcards.