

Template File



Description



More Info

































Archive



























CAB.bt

Template for Microsoft cabinet format files.





More Info...























GZip.bt

Quick template for parsing GZip data/files.





More Info...























LZ4.bt

Template for LZ4 Framing Format.





More Info...

































OrochiDAT.bt

Analyzing Silicon Studio's Orochi / Mizuchi Engine data archiving format





More Info...

































RAR.bt

Parse RAR archives including 2.x, 3.x and SFX RAR files.





More Info...























SeqBox.bt

Explore a SeqBox file container/archive.





More Info...

































SquashFS.bt

Parses the SquashFS compressed read-only file system for Linux. Supports 3.x and 4.x files.





More Info...

































ZIPAdv.bt

Defines a template for parsing ZIP files. Handles more complex ZIP data such as ZIP64 that the base ZIP.bt cannot read.





More Info...





















Audio

















CDA.bt

Simple CDA file template to read Audio CD header information.





More Info...























MIDI.bt

General MIDI sound file template. Complete with delta-time and BPM evaluation into local variables.





More Info...























MP3.bt

Parse an MP3 music file.





More Info...























OGG.bt

Parses the ogg container format.





More Info...























SF2.bt

Defines a template for SF2 (SoundFont 2.04) files.





More Info...

































WAVAdv.bt

Defines an advanced template for parsing WAV audio files. Includes SMPL chunk parsing (Parsing wav files that contains Sustain Loops. Useful for Game Developers).





More Info...





















CAD

















Modo.bt

Reads all known chunks in Modo *.lxo, *.lxp. *.lxe and *.lxl 3D files as documented at http://sdk.luxology.com/wiki/File_Formats.





More Info...

































OrCAD_SCH.bt

Analyse drawings and blocks from OrCad 3.20a programs.





More Info...























Realflow_Bin_Particles.bt

Reads Nextlimit Realflow BIN particle files as per .pdf delivered with Realflow





More Info...























STL.bt

Parse an STL binary file containing 3D geometry (CAD).





More Info...





















Database



























MongoDBWireProtocol.bt

Analyze captured data from a MongoDB client request.





More Info...































Document

















MOBI.bt

Parse Amazon Kindle ebook mobipocket file formats .mobi, .azw, .prc.





More Info...























PDF.bt

Template for Adobe PDF (Portable Document Format) files.





More Info...





















Drives

















ADF.bt

Detect block types of AmigaDOS disk images.





More Info...























APFS.bt

Read APFS (Apple File System) structures





More Info...























Drive.bt

Parse logical and physical drives including MBR, FAT12, FAT16, FAT32, exFAT, HFS, NTFS and extended partitions. Can display subdirectories and data for individual files. Note that some NTFS drives may not work properly (see file comments).





More Info...























ElTorito.bt

View the file system headers in an El Torito bootable cd image.





More Info...























ISO.bt

Parse the file system headers for ISO disk images, and print Directory tree.





More Info...























LUKS.bt

Template for LUKS (Linux Unified Key Setup) hard disk encryption.





More Info...























MFT.bt

Parse a file containing NTFS MFT FILE records.





More Info...























ROMFS.bt

Template for parsing and reverse engineering RomFS images used in embedded devices.





More Info...























SinclairMicrodrive.bt

Defines a template for parsing images of emulated Sinclair Microdrive cartridges.





More Info...























SytosPlus.bt

Decode Sytos Plus Tape Image and (optionally) dump recovered files.





More Info...























VHD.bt

Microsoft VHD virtual disk format parser.





More Info...





















Electronics

















DynamixelProtocol.bt

Verify returned status data from Dynamixel XL-320 (and other) servoes.





More Info...























EatonAPR48.bt

Eaton APR48 power supply's EEPROM structure.





More Info...























EDID.bt

Template for EDID files (Extended display identification data).





More Info...























EVSB.bt

Decomposes Video Symbol Stream Files for E-8VSB modulation as per ATSC Digital Television Standard (A/53).





More Info...























EZTap_EZVIEW2.bt

Template for EZ-Tap EZView to EZVIEW2 .dat file.





More Info...























Goclever.bt

Template for the GOCLEVER GPS Navigation log format GPSLogYYYY-MM-DD_xx-xx-xx.bin (Model GC-4335 and others). Generates report in the human readable form: Date, Longitude, Latitude, Geoid, Altitude, Direction.





More Info...























Mifare1k.bt

Mifare Classic 1k Structure parsing. Commonly used in smart cards.





More Info...























Mifare4k.bt

Mifare Classic 4k Structure parsing. Commonly used in smart cards.





More Info...























MifareUltralight.bt

Mifare Ultralight structure parsing. Commonly used in tickets.





More Info...

































OscarItem.bt

Template for binary journal file used in AppleOne POS.





More Info...























Picolog_PLW.bt

Template for PicoTech Picologger .PLW file.





More Info...























SRec.bt

Motorola S-REC format template. This should work with the S-REC formats based on S1-S9.





More Info...





















Executable

















ELF.bt

Decode the ELF format for both 32/64 bit in big/little endian, decode the elf, program, and section headers. Also decode the dynamic symbol table entries. Many fields implement custom viewers but do not handle writing from those views.





More Info...























EXE.bt

Parse Windows executable exe, dll, and sys files. Supports 32 and 64 bit.





More Info...























MachO.bt

Quick template for parsing Mach-o binaries, including Mac OS X executables, .o and .dylib files.





More Info...





















Font

















EOT.bt

Template for parsing the Embedded OpenType (EOT) font file format.





More Info...























FNT.bt

Parse windows .FNT font files (which can be extracted from .FON files). Specification is here: https://support.microsoft.com/en-us/kb/65123





More Info...























OpenType.bt

Displays hierarchy of an OpenType font. This template can also parse TrueType fonts (TTF).





More Info...























TTF.bt

Template to parse TTF (TrueType) fonts.





More Info...





















Game

















Anno2070_RDM.bt

Unpack Anno 2070 .rdm 3D model files.





More Info...























GGPK.bt

A template for the content.ggpk used in Path of Exile.





More Info...























IGI2_RES.bt

'IGI 2: Covert Strike' Resource pack format





More Info...























IGI2_SPR.bt

'IGI 2: Covert Strike' Sprite and Picture format





More Info...

































IGI2_THM.bt

'IGI 2: Covert Strike' Terrain Height Map





More Info...























IGI2_TLM.bt

'IGI 2: Covert Strike' Terrain Light Map





More Info...























IGI2_TMM.bt

'IGI 2: Covert Strike' Terrain Material Map





More Info...























IGI2_WAV.bt

'IGI 2: Covert Strike' game sound format





More Info...























iNes.bt

Get information from the nes emulator standard format iNes.





More Info...























KnyttStoriesWorld.bt

Parse knytt stories world file (should by extracted from *.bin)





More Info...























NDS.bt

Defines a template for Nintendo DS cartridge files.





More Info...























Quake3Arena_BSP.bt

010 Editor Binary Template for Quake3 BSP files.





More Info...























Quake3Arena_MD3.bt

010 Editor Binary Template for Quake3 MD3 files.





More Info...























UnityMetadata.bt

Parse unity3d metadata file





More Info...





















GIS



































Image















































GIF.bt

Defines a template for parsing GIF image files.





More Info...























ICO.bt

Defines a template for parsing icon image files.





More Info...























JPG.bt

Template for JPG image files.





More Info...























PAL.bt

Parses a Microsoft PAL palette file.





More Info...























PCX.bt

Parse a PCX bitmap header.





More Info...























PNG.bt

Parse PNG (Portable Network Graphics) and APNG (Animated Portable Network Graphics) image files.





More Info...























TGA.bt

Shows the fields of a TGA image.





More Info...























TIF.bt

Parse TIFF (Tagged Image File Format) files, including GeoTIFF.





More Info...























WMF.bt

Parse the Windows Metafile (WMF) graphics file format.





More Info...





















Inspector

















Inspector.bt

This template may be used to customize the auto tab of the Inspector with your own variables. See the Inspector section of the Options dialog for more information.





More Info...























Inspector.bt

This template may be used to customize the auto tab of the Inspector with your own variables. See the Inspector section of the Options dialog for more information.





More Info...























InspectorDates.bt

Demonstrates how to add a series of dates to the Auto Inspector. Includes: WebkitTime (64-bit int, microseconds since 01/01/1601), HFSTime (32-bit int, seconds since 01/01/1904), AppleTime (32-bit int, seconds since 01/01/2001), PRTime (64-bit int, microseconds since 01/01/1970), JavaTime (64-bit int, microseconds since 01/01/1970), GPSTime (32-bit int, seconds since 01/06/1980), BlackberryDate (32-bit int, minutes since 01/01/1900).





More Info...























InspectorGUID.bt

Demonstrates how to add a GUID data type to the inspector. Currently GUID is readonly.





More Info...























InspectorWithMP4DateTime.bt

Adds MP4_Time to the Inspector template. This template may be used to customize the auto tab of the Inspector with your own variables. See the Inspector section of the Options dialog for more information.





More Info...





















Internet

















SWF.bt

Defines a template for parsing Adobe Flash SWF files based on the file format specification for Flash 9.





More Info...









































Misc

















FTS.bt

Microsoft Exchange FTS (Fast Transfer Stream) format template.





More Info...

































PB.bt

Parsing google protocol buffers format.





More Info...























RDB.bt

Defines a template for parsing QQ's RDB files.





More Info...























RIFF.bt

Defines a template for generic RIFF files.





More Info...























SCP.bt

SuperCard Pro dump file format based on official format document.





More Info...























Tacx.bt

Template for all the Tacx Fortius cycling training software file formats, including pgmf, caf, imf, rlv and mrlv.





More Info...























UMSE.bt

Template for Universal Malware Sample Encryption





More Info...





















Network

















NetflowVersion5.bt

Parses Cisco's Netflow Version 5 format.





More Info...























PCAP.bt

Parse a PCAP network capture file.





More Info...























PCAPNG.bt

Parse a PCAPNG Packet Capture file.





More Info...























SSP.bt

Define a template for parsing SmartSniff Packet files.





More Info...























TNEF.bt

Transport Neutral Encapsulation Format (TNEF) Template (usually for Winmail.dat or Win.dat).





More Info...





















Operating System

















AndroidBoot.bt

Android boot image template





More Info...























AndroidManifest.bt

Define a template for parsing AndroidManifest.xml binary files.





More Info...























AndroidResource.bt

Parse AndroidManifest.xml, res/*.xml, and resource.arsc binary files in an Android APK package.





More Info...























AndroidTrace.bt

Define a template for parsing dmtrace.trace files.





More Info...























AndroidVBMeta.bt

Android vbmeta partition template





More Info...























BPlist.bt

Template for parsing Apple Binary Property List format.





More Info...























Cryptfs.bt

Parse the Cryptfs footer from encrypted drives (specifically Android)





More Info...























DEX.bt

A template for analyzing Dalvik VM (Android) DEX files.





More Info...























DMP.bt

Template to parse the header of a Microsoft memory dump file (DMP) as produced by the debugger and kernel crashdump facility. Note there are two different DMP formats and see MiniDump.bt for ID bytes MDMP.





More Info...























FUTX.bt

Interpret user accounting information exposed by FreeBSD as /var/run/utx.active, which uses a custom on-disk format called futx. It differs from the in-memory representation specified in POSIX known as utmpx.





More Info...























HFSJournal.bt

Parse an HFS+ (HFS Plus file system) journal file.





More Info...























LNK.bt

View data in a Microsoft shortcut (LNK) file.





More Info...























MiniDump.bt

Template parse struct in Windows MiniDump. The struct define from windows header files.





More Info...























MTK_MCLF.bt

Mediatek Trustonic Trustlet Parser





More Info...

































OpenWRT-BIN.bt

Decode OpenWRT MIPS BIN images.





More Info...























PSF.bt

Parses a WSUS PSF (Patch Storage File) file.





More Info...























RegistryDhcpInterfaceOptions.bt

Decode the "DhcpInterfaceOptions" registry entry





More Info...























RegistryHive.bt

Parses Windows Registry hive structures. Includes Header, nk, vk, sk, and list records. Data node records are skipped.





More Info...























RegistryPolicyFile.bt

Template for Windows registry policy files (registry.pol).





More Info...























ThumbCache.bt

Parses Windows thumbnail cache files (thumbcache_idx.db, thumbcache_XXX.db).





More Info...























UTMP.bt

Interpret entries in utmp and wtmp login log files on *nix systems.





More Info...





















Programming

















BSON.bt

Parse BSON (binary JSON) files, per v1.0 spec at http://bsonspec.org/spec.html. Used by MongoDB et al.





More Info...























CAP.bt

Parse java card CAP file with bytecode disassembler (Java Card 2.2.2 specs compliance).





More Info...

































CLASSAdv.bt

A template for parsing Java Class (JVM) Files. Includes visualizing bytecode.





More Info...























JSC.bt

Parse a compiled JavaScript file of form SpiderMonkey_v52.





More Info...























Luac.bt

Parse lua bytecode .lua and .luac files, support lua 5.2.





More Info...























LuaJIT.bt

Parse luajit bytecode files, support luajit 2.0.5.





More Info...























OPCache.bt

Parse cache files generated by OPcache for PHP files on an x86 platform.





More Info...























PYC.bt

Parse python bytecode .pyc and .pyo files, support python 2.4 to 2.7.





More Info...























RES.bt

Parses resources structure of a RES file or a PE file with the .rsrc section.





More Info...





















Software

















010Theme.bt

Template for 010 Editor color/theme export files.





More Info...























CRX.bt

Template for packaged Google Chrome extensions. Basically a copy of ZIP.bt with extra bits for Google Chrome extensions.





More Info...

































TOC.bt

Template to make sense of, and modifications to, Eudora 7.* (possible older versions too) mailbox index files (.toc).





More Info...























WinhexPos.bt

The WinHex (editor by X-Ways Software Technology AG) stores the find results in the winhex.pos file. This template parses its structure and allows to build a script to convert WinHex results into a set of bookmarks for 010Editor.





More Info...





















Syntax

















010.bt

Syntax highlighting for 010 Editor Binary Templates and Scripts.





More Info...























010.bt

Syntax highlighting for 010 Editor Binary Templates and Scripts.





More Info...























Bash.bt

Syntax highlighting for Bash shell files.





More Info...























Batch.bt

Syntax highlighting for Windows batch files.





More Info...











































CSS.bt

Syntax highlighting for Cascading Style Sheets (CSS).





More Info...























CSV.bt

Syntax highlighting for CSV files. Supports comma, tab, semicolon, space, and pipe delimiters.





More Info...























HTML.bt

Syntax highlighting for HTML files.





More Info...























Java.bt

Syntax highlighting for Java files.





More Info...























JavaScript.bt

Syntax highlighting for JavaScript files.





More Info...























PHP.bt

Syntax highlighting for PHP files.





More Info...























PowerShell.bt

Syntax highlighting for Windows PowerShell scripts.





More Info...























Python.bt

Syntax highlighting for Python script files.





More Info...























SQL.bt

Syntax highlighting for SQL files.





More Info...























ULP.bt

Syntax highlighting for Eagle 5 user language programs. May not work correctly with earlier or later versions.





More Info...























VB.bt

Syntax highlighting for Visual Basic files.





More Info...























XML.bt

Syntax highlighting for XML files.





More Info...























Yara.bt

Syntax highlighting for Yara files





More Info...





















Video

















AVI.bt

Parse an AVI movie file.





More Info...























BaseMedia.bt

Parse ISO Base Media File Format files (QuickTime, JPEG2000, MPEG-4, etc.). See also the MP4.bt template.





More Info...























FLV.bt

Template for Flash Video (FLV) files including sei and nalu.





More Info...























MP4.bt

Defines a template for parsing MP4 and MOV video files.





More Info...























MXF.bt

Parse MXF files (Material Exchange Format, SMPTE 377M, SMPTE EG41, SMPTE EG42)





More Info...























RM.bt

Defines a template for parsing RM (RealMedia) video files.





More Info...













