EXE.bt
Parse Windows executable exe, dll, and sys files. Supports 32 and 64 bit.
- Authors: | xSpy, Peter Kankowski, SweetScape Software, mirar |
- Category: | Executable |
- Version: | 0.9.5 |
- File Mask: | *.exe,*.dll,*.sys |
- ID Bytes: | 4D 5A //MZ |
Available Versions
|
Version |
|
|
Date |
|
|
Author |
|
|
Changes |
|
|
Download |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.9.5 |
|
|
2024-06-16
|
|
|
abevol
|
|
|
Added CLR directory parsing
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.9.4 |
|
|
2023-07-14
|
|
|
SweetScape
|
|
|
Updated to use template styles.
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.9.3 |
|
|
2023-03-28
|
|
|
SweetScape
|
|
|
Fixed error being shown when Space2 was not created.
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.9.2 |
|
|
2022-12-28
|
|
|
R Lagcher
|
|
|
Updated mapping of Rich id and version on comp.id
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.9.1 |
|
|
2022-11-28
|
|
|
G Cazzetta
|
|
|
Fixed misplacement of sections raw data for out-of-order layouts
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.9 |
|
|
2021-12-02
|
|
|
OSchneider
|
|
|
Added certificate parsing, more read functions
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.8 |
|
|
2021-09-09
|
|
|
SweetScape
|
|
|
Added disassembly to .text section.
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.7.6 |
|
|
2021-07-25
|
|
|
ts
|
|
|
Tiny change to parse timestamp in IMAGE_DEBUG_DIRECTORY
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.7.5 |
|
|
2021-07-16
|
|
|
zhentar
|
|
|
Added debug directory parsing
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.7.4 |
|
|
2021-06-18
|
|
|
ts
|
|
|
Updated IMAGE_MACHINE enum (added ARM64 among others)
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.7.3 |
|
|
2021-02-11
|
|
|
Gon Rappaport
|
|
|
Fixed and improved base relocation parsing
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.7.2 |
|
|
2019-09-16
|
|
|
gf
|
|
|
CommentBaseRelocBlock detects more cases.
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.7.1 |
|
|
2019-09-02
|
|
|
mirar
|
|
|
Added mapping of Rich id and version on comp.id
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.7 |
|
|
2019-07-10
|
|
|
mirar
|
|
|
Added Rich header parsing
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.6 |
|
|
2019-03-19
|
|
|
Sen Jiang
|
|
|
Allow NT header to be overlapping with DOS header
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.5 |
|
|
2018-04-22
|
|
|
Joshua Dugie
|
|
|
Added resource section parsing, cleaned up formatting and order, also added Resource Directory String parsing
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.4 |
|
|
2018-03-09
|
|
|
Rafal Cyran
|
|
|
Fixed size of IMAGE_EXPORT_DIRECTORY
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.3 |
|
|
2016-03-31
|
|
|
T Strazzere
|
|
|
Fixed issue with IMAGE_IMPORT_DESCRIPTOR
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.2 |
|
|
2016-03-11
|
|
|
Yann Le Brech
|
|
|
Added LittleEndian();
|
|
|
Download
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.1 |
|
|
2016-02-19
|
|
|
SweetScape Software
|
|
|
Merged changes from PETemplate.bt and EXETemplate2.bt and renamed to this file. Added some coloring and rearranged for readability. Update header for repository submission.
|
|
|
Download
|
|
|
|
|
|
|
Return to the Template Repository