http://ntcore.com/exsuite.php

Scripting documentation:

http://ntcore.com/Files/cffscriptv1.htm

News:

- Fixed a lot of bugs
- Fixed a minor bug in the MetaData tables
- Fixed minor resizing bug on Vista
- General improvements
- Significantly improved the interface
- Improved Resource Editor
- Improved Rebuilder (added checksum update and strip debug directory)
- Improved Data Directories viewer
- Improved Hex Editor
- Improved Sections Dialog (added section's hex view)
- Improved MetaData Tables
- Extended the SDK
- Added powerful very scripting language
- Added documentation for the scripting language
- Added security features for the scripting language
- Added support for generic files
- Added Name Unmangler
- Added Debug Directory
- Added Dependency Walker
- Added Quick Disassembler (x86, x64)

Hope you like it..

Very nice.

CRCETL:

http://www.woodmann.com/collaborative/tools/Explorer_Suite

http://www.woodmann.com/collaborative/tools/CFF_Explorer

Oops. I was updating the Collaborative Tool listing with the link to the Scripting documentation, but I see that dELTA was a few moments ahead of me with the edit.

Thanks for the updated Documention Daniel and for updating the entry dELTA.

Regards,

Great tool, can't live without it

IMPORTANT ANNOUNCEMENT: if you have the x64 version, please re-download, there was a little bug, which wasn't even my fault but in a mod for the scripting.

Thanks to you all.

Also, take a look at the scripting, I think it can be useful for lots of things.

Thanks for the head's up.

Regards,

It's nice to see a reversing utility evolve into such a professional result, excellent work Daniel.

When I read about the scripting ability I wondered if it was possible to parse (through a script) file formats other than PE.

You're probably familiar with 010 Editor where you can analyze the structure of files such as bmp, zip, wav, etc. through the use of ascii templates, and have the components reflected (highlighted) in the hex display.

I opened up a bmp file in CFF and it did open it without crashing (that's a start), but of course it doesn't recognize it as a bmp structure per se.


I'm not suggesting you DO allow for parsing of formats other than PE, but it seems you might be able to add that ability in a future version, if you thought that was something you wanted to do. You'd "just" need to allow an unknown file format to pattern itself after a user made structure template (i.e. bmp), and provide a few API's for a treeview/listview output of individual and grouped elements (again along the example of 010 Editor).

Just thought I'd mention this idea, which you can of course completely reject with no offense taken

Regards,
Kayaker

Thank you!

No, absolutely no offense. In fact, this is something I had in mind from day one of the CFF development and that's why I didn't call the software "PE Editor" or "PE Explorer" (ok that was already taken) or PE Master (ahah just kidding). CFF stands for Common File Format. So, in theory I could open and edit any kind of file. You're right, what I had in mind was exactly that, offer APIs to handle the tree and different type of files! The scripting is built on the same principle, and I would like to offer extension APIs for the scripting as well.

Ciao,

Daniel