Skip to content
View in the app

A better way to browse. Learn more.

ResHax

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.
Help us keep the site running.

Executable file parsing and extraction - PE/NE/LE/ROM/ELF/XBE

Featured Replies

  • Author
  • Localization

aluigi, posted Tue Aug 30, 2016 11:19 am (17049)


This is a script that I wrote just to experiment some feature of quickbms and that now is really very useful to parse and extract the executable files:
http://aluigi.org/bms/parse_exe.bms

There are many resource extractors out there (ResHacker for example) but today I updated it to version 0.3 with support for other types of executables like "NE" (New Executable) which is an old 16bit Win31-era type.
The game "Reader Rabbit's Reading Development Library 1" or "Reading Development Library" had all its files embedded in various DLL files but there are almost no extractors available (an old shareware one is here).

I had already lot of code implemented in my QuickRVA tool so was quite easy to port it to the script.
Currently supports:
  • PE 32/64
  • NE
  • LE
  • ROM/VXD
  • ELF32
  • ELF64
  • XBE

Keywords: extract resources 16bit new executable :)
  • Author
  • Localization

AnonBaiter, posted Wed Aug 31, 2016 2:28 pm (17092)


I've been getting nifty error from this file alone when running with this script:
Code:
  00497f90 1567068    00597200_00497f90_0017e95c_.dat

Error: incomplete input file 0: E:\ROCKSTAR_LEL\THE_WARRIORS\PS2\SLUS_212.15
       Can't read 961384 bytes from offset 004ad428.
       Anyway don't worry, it's possible that the BMS script has been written
       to exit in this way if it's reached the end of the archive so check it
       or contact its author or verify that all the files have been extracted.
       Please check the following coverage information to know if it's ok.

  coverage file 0   101%   4985231    4903976

Last script line before the error or that produced the error:
  39  log NAME PointerToRawData SizeOfRawData
The file itself in question is in the attachment.
  • Author
  • Localization

aluigi, posted Wed Aug 31, 2016 4:46 pm (17094)


Script 0.3.1, now the sections are sorted and limited by the offset of the next one without the possibility to read over.
  • Author
  • Localization

AntonZab, posted Sat Sep 10, 2016 5:24 pm (17403)


This script supports DOS executable?
  • Author
  • Localization

aluigi, posted Sun Sep 18, 2016 8:09 pm (17505)


As far as I remember the MSDOS executables don't have resources or at least not a standard format for them, in fact they have just the initial "MZ" header.
Guest
This topic is now closed to further replies.

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.