EXE.bt
Parse Windows executable exe, dll, and sys files. Supports 32 and 64 bit.
- Authors: | xSpy, Peter Kankowski, SweetScape Software, mirar |
- Category: | Executable |
- Version: | 0.9.3 |
- File Mask: | *.exe,*.dll,*.sys |
- ID Bytes: | 4D 5A //MZ |
Available Versions

|
Version |

|

|
Date |

|

|
Author |

|

|
Changes |

|

|
Download |

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.9.3 |
 |

|
2023-03-28
|
 |

|
SweetScape
|
 |

|
Fixed error being shown when Space2 was not created.
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.9.2 |
 |

|
2022-12-28
|
 |

|
R Lagcher
|
 |

|
Updated mapping of Rich id and version on comp.id
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.9.1 |
 |

|
2022-11-28
|
 |

|
G Cazzetta
|
 |

|
Fixed misplacement of sections raw data for out-of-order layouts
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.9 |
 |

|
2021-12-02
|
 |

|
OSchneider
|
 |

|
Added certificate parsing, more read functions
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.8 |
 |

|
2021-09-09
|
 |

|
SweetScape
|
 |

|
Added disassembly to .text section.
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.7.6 |
 |

|
2021-07-25
|
 |

|
ts
|
 |

|
Tiny change to parse timestamp in IMAGE_DEBUG_DIRECTORY
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.7.5 |
 |

|
2021-07-16
|
 |

|
zhentar
|
 |

|
Added debug directory parsing
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.7.4 |
 |

|
2021-06-18
|
 |

|
ts
|
 |

|
Updated IMAGE_MACHINE enum (added ARM64 among others)
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.7.3 |
 |

|
2021-02-11
|
 |

|
Gon Rappaport
|
 |

|
Fixed and improved base relocation parsing
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.7.2 |
 |

|
2019-09-16
|
 |

|
gf
|
 |

|
CommentBaseRelocBlock detects more cases.
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.7.1 |
 |

|
2019-09-02
|
 |

|
mirar
|
 |

|
Added mapping of Rich id and version on comp.id
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.7 |
 |

|
2019-07-10
|
 |

|
mirar
|
 |

|
Added Rich header parsing
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.6 |
 |

|
2019-03-19
|
 |

|
Sen Jiang
|
 |

|
Allow NT header to be overlapping with DOS header
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.5 |
 |

|
2018-04-22
|
 |

|
Joshua Dugie
|
 |

|
Added resource section parsing, cleaned up formatting and order, also added Resource Directory String parsing
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.4 |
 |

|
2018-03-09
|
 |

|
Rafal Cyran
|
 |

|
Fixed size of IMAGE_EXPORT_DIRECTORY
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.3 |
 |

|
2016-03-31
|
 |

|
T Strazzere
|
 |

|
Fixed issue with IMAGE_IMPORT_DESCRIPTOR
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.2 |
 |

|
2016-03-11
|
 |

|
Yann Le Brech
|
 |

|
Added LittleEndian();
|
 |

|
Download
|

|

|

|

|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |

|

|
0.1 |
 |

|
2016-02-19
|
 |

|
SweetScape Software
|
 |

|
Merged changes from PETemplate.bt and EXETemplate2.bt and renamed to this file. Added some coloring and rearranged for readability. Update header for repository submission.
|
 |

|
Download
|

|

|

|

|

|

|
Return to the Template Repository