ResourceEditor_orag.exe - Resource Editor by Anders Melander

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	ResourceEditor_orag.exe
size	3449856 (0x34a400)
md5	0ec1c2d66dfc872a742bae160f474fa0

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x4e6b4448
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818f
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0
SizeOfInitializedData	0x235a2d
SizeOfUninitializedData	0x8c8000
AddressOfEntryPoint	0x8c98e4
BaseOfCode	0x1000
BaseOfData	0x8c9000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0xc15000
SizeOfHeaders	0x400
CheckSum	0x358d35
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

NsPack v3.7 (North Star)

Sections

name	va	vsize	raw size	flags
.nsp0	0x1000	0x8c8000	0	RWX CODE IDATA DISCARDABLE SHARED
.nsp1	0x8c9000	0x235a2d	0x234800	RWX CODE IDATA
.nsp2	0xaff000	0x115620	0x115800	RWX CODE IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x8c91c0	0x2bc
RESOURCE	0xaff000	0x115620
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x5d9000	0x73f34
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x8ca1ea	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0x5d5000	0x49c
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x9d7000	0x9d7124	0x989a14	0	0	0

show previews

type	name	size
DOCKING	COMPACT	298
DOCKING	DEFAULT	298
EMBEDDED	RESOURCECOMPILER	331080
EMBEDDED	RESOURCEPARSER	27464
GIF	EXAMPLE	24114
MAD	CALIBRATE	20
MAD	EXCEPT	459632
PNG	SPLASH	40241
SYMBOLS	DIALOG	158
SYMBOLS	HELP	649
SYMBOLS	IMAGES	1363
SYMBOLS	KEYS	2716
SYMBOLS	LANGUAGES	9430
SYMBOLS	WINDOWS	186
TEXT	CREDITS	946
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
CURSOR	#8	4268
CURSOR	#9	4268
CURSOR	#10	4268
CURSOR	#11	4268
CURSOR	#12	3244
CURSOR	#13	4268
CURSOR	#14	3244
CURSOR	#15	4268
CURSOR	#16	3244
CURSOR	#17	4268
CURSOR	#18	748
CURSOR	#19	4268
CURSOR	#20	748
CURSOR	#21	4268
CURSOR	#22	748
CURSOR	#23	308
CURSOR	#24	308
CURSOR	#25	308
CURSOR	#26	308
CURSOR	#27	748
CURSOR	#28	748
CURSOR	#29	748
CURSOR	#30	4268
CURSOR	#31	4268
CURSOR	#32	748
CURSOR	#33	748
CURSOR	#34	748
CURSOR	#35	4268
CURSOR	#36	308
CURSOR	#37	4268
CURSOR	#38	748
CURSOR	#39	748
CURSOR	#40	748
CURSOR	#41	748
CURSOR	#42	4268
CURSOR	#43	308
CURSOR	#44	308
CURSOR	#45	308
CURSOR	#46	308
CURSOR	#47	308
CURSOR	#48	308
CURSOR	#49	308
CURSOR	#50	308
CURSOR	#51	308
CURSOR	#52	308
CURSOR	#53	308
CURSOR	#54	748
CURSOR	#55	748
CURSOR	#56	4268
CURSOR	#57	3244
CURSOR	#58	4268
CURSOR	#59	4268
CURSOR	#60	748
CURSOR	#61	4268
CURSOR	#62	3244
CURSOR	#63	308
CURSOR	#64	308
CURSOR	#65	4268
CURSOR	#66	3244
CURSOR	#67	308
CURSOR	#68	308
CURSOR	#69	4268
CURSOR	#70	3244
CURSOR	#71	308
CURSOR	#72	308
CURSOR	#73	308
CURSOR	#74	308
CURSOR	#75	4268
CURSOR	#76	4268
CURSOR	#77	748
CURSOR	#78	308
CURSOR	#79	4268
CURSOR	#80	3244
CURSOR	#81	308
CURSOR	#82	4268
CURSOR	#83	3244
CURSOR	#84	308
CURSOR	#85	308
CURSOR	#86	308
CURSOR	#87	4268
CURSOR	#88	3244
CURSOR	#89	308
CURSOR	#90	4268
CURSOR	#91	748
CURSOR	#92	308
CURSOR	#93	4268
CURSOR	#94	4572
CURSOR	#95	4268
CURSOR	#96	308
CURSOR	#97	4268
CURSOR	#98	308
CURSOR	#99	4268
CURSOR	#100	308
ICON	#1	16936
ICON	#2	1128
ICON	#3	2440
ICON	#4	4264
ICON	#5	9640
ICON	#6	67624
ICON	#7	52804
GROUP_ICON	A	104
VERSION	#1	1012
ANICURSOR	AM_BUSY	34524
MANIFEST	#1	1056

module_name	ord	function_name
KERNEL32.DLL		LoadLibraryA
KERNEL32.DLL		GetProcAddress
KERNEL32.DLL		VirtualProtect
KERNEL32.DLL		VirtualAlloc
KERNEL32.DLL		VirtualFree
KERNEL32.DLL		ExitProcess
OLEAUT32.DLL		SysFreeString
ADVAPI32.DLL		RegQueryValueExW
USER32.DLL		LoadStringW
KERNEL32.DLL		TlsSetValue
USER32.DLL		CreateWindowExA
MSIMG32.DLL		GradientFill
GDI32.DLL		UnrealizeObject
VERSION.DLL		VerQueryValueA
KERNEL32.DLL		lstrlenW
ADVAPI32.DLL		SetSecurityDescriptorDacl
OLEAUT32.DLL		CreateErrorInfo
OLE32.DLL		CreateStreamOnHGlobal
COMCTL32.DLL		InitializeFlatSB
SHELL32.DLL		ShellExecuteExA
SHELL32.DLL		SHGetPathFromIDListW
COMDLG32.DLL		PrintDlgW
WSOCK32.DLL		WSACleanup
KERNEL32.DLL		RtlUnwind
SHELL32.DLL		SHGetPathFromIDListA
KERNEL32.DLL		Sleep
OLEAUT32.DLL		SafeArrayPtrOfIndex
USER32.DLL		EnumDisplayMonitors
IMM32.DLL		ImmAssociateContext
WINSPOOL.DRV		OpenPrinterW
WINSPOOL.DRV		GetDefaultPrinterW
WINMM.DLL		timeGetTime
OLEACC.DLL		LresultFromObject
SHLWAPI.DLL		PathIsRelativeW
GDI32.DLL		GetFontResourceInfoW
SHELL32.DLL	18
KERNEL32.DLL		MulDiv
OLE32.DLL		CLSIDFromString
AVIFIL32.DLL		AVIStreamGetFrameClose

StringTable 040604E4

CompanyName	Anders Melander
FileDescription	Resource Editor by Anders Melander
FileVersion	0.9.0.834
InternalName
LegalCopyright	Copyright © 2008-2011
LegalTrademarks
OriginalFilename
ProductName	Resource Editor by Anders Melander
ProductVersion	1.0.0.0
Comments	Prerelease software - use at your own risk. Built with Delphi XE. Powered by Graphics32.

VS_FIXEDFILEINFO

FileVersion	0.9.0.834
ProductVersion	0.9.0.834
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	3
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	3449856	EXE	09/10/2011 11:04:40	#
15c1	15	HTM		#
297aa4	4970	GIF	(100 x 100)	#
30dc5c	40241	PNG	(220 x 220)	#
33d3dc	52804	PNG	(256 x 256)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x73383c

[?] can't find file_offset of VA 0x733970

[?] can't find file_offset of VA 0x733aa4

[?] can't find file_offset of VA 0x733bd8

[?] can't find file_offset of VA 0x733d0c

[?] can't find file_offset of VA 0x733e40

[?] can't find file_offset of VA 0x733f74

[?] can't find file_offset of VA 0x7340a8

[?] can't find file_offset of VA 0x735154

[?] can't find file_offset of VA 0x736200

[?] can't find file_offset of VA 0x7372ac

[?] can't find file_offset of VA 0x738358

[?] can't find file_offset of VA 0x739004

[?] can't find file_offset of VA 0x73a0b0

[?] can't find file_offset of VA 0x73ad5c

[?] can't find file_offset of VA 0x73be08

[?] can't find file_offset of VA 0x73cab4

[?] can't find file_offset of VA 0x73db60

[?] can't find file_offset of VA 0x73de4c

[?] can't find file_offset of VA 0x73eef8

[?] can't find file_offset of VA 0x73f1e4

[?] can't find file_offset of VA 0x740290

[?] can't find file_offset of VA 0x74057c

[?] can't find file_offset of VA 0x7406b0

[?] can't find file_offset of VA 0x7407e4

[?] can't find file_offset of VA 0x740918

[?] can't find file_offset of VA 0x740a4c

[?] can't find file_offset of VA 0x740d38

[?] can't find file_offset of VA 0x741024

[?] can't find file_offset of VA 0x741310

[?] can't find file_offset of VA 0x7423bc

[?] can't find file_offset of VA 0x743468

[?] can't find file_offset of VA 0x743754

[?] can't find file_offset of VA 0x743a40

[?] can't find file_offset of VA 0x743d2c

[?] can't find file_offset of VA 0x744dd8

[?] can't find file_offset of VA 0x744f0c

[?] can't find file_offset of VA 0x745fb8

[?] can't find file_offset of VA 0x7462a4

[?] can't find file_offset of VA 0x746590

[?] can't find file_offset of VA 0x74687c

[?] can't find file_offset of VA 0x746b68

[?] can't find file_offset of VA 0x747c14

[?] can't find file_offset of VA 0x747d48

[?] can't find file_offset of VA 0x747e7c

[?] can't find file_offset of VA 0x747fb0

[?] can't find file_offset of VA 0x7480e4

[?] can't find file_offset of VA 0x748218

[?] can't find file_offset of VA 0x74834c

[?] can't find file_offset of VA 0x748480

[?] can't find file_offset of VA 0x7485b4

[?] can't find file_offset of VA 0x7486e8

[?] can't find file_offset of VA 0x74881c

[?] can't find file_offset of VA 0x748950

[?] can't find file_offset of VA 0x748c3c

[?] can't find file_offset of VA 0x748f28

[?] can't find file_offset of VA 0x749fd4

[?] can't find file_offset of VA 0x74ac80

[?] can't find file_offset of VA 0x74bd2c

[?] can't find file_offset of VA 0x74cdd8

[?] can't find file_offset of VA 0x74d0c4

[?] can't find file_offset of VA 0x74e170

[?] can't find file_offset of VA 0x74ee1c

[?] can't find file_offset of VA 0x74ef50

[?] can't find file_offset of VA 0x74f084

[?] can't find file_offset of VA 0x750130

[?] can't find file_offset of VA 0x750ddc

[?] can't find file_offset of VA 0x750f10

[?] can't find file_offset of VA 0x751044

[?] can't find file_offset of VA 0x7520f0

[?] can't find file_offset of VA 0x752d9c

[?] can't find file_offset of VA 0x752ed0

[?] can't find file_offset of VA 0x753004

[?] can't find file_offset of VA 0x753138

[?] can't find file_offset of VA 0x75326c

[?] can't find file_offset of VA 0x754318

[?] can't find file_offset of VA 0x7553c4

[?] can't find file_offset of VA 0x7556b0

[?] can't find file_offset of VA 0x7557e4

[?] can't find file_offset of VA 0x756890

[?] can't find file_offset of VA 0x75753c

[?] can't find file_offset of VA 0x757670

[?] can't find file_offset of VA 0x75871c

[?] can't find file_offset of VA 0x7593c8

[?] can't find file_offset of VA 0x7594fc

[?] can't find file_offset of VA 0x759630

[?] can't find file_offset of VA 0x759764

[?] can't find file_offset of VA 0x75a810

[?] can't find file_offset of VA 0x75b4bc

[?] can't find file_offset of VA 0x75b5f0

[?] can't find file_offset of VA 0x75c69c

[?] can't find file_offset of VA 0x75c988

[?] can't find file_offset of VA 0x75cabc

[?] can't find file_offset of VA 0x75db68

[?] can't find file_offset of VA 0x75ed44

[?] can't find file_offset of VA 0x75fdf0

[?] can't find file_offset of VA 0x75ff24

[?] can't find file_offset of VA 0x760fd0

[?] can't find file_offset of VA 0x761104

[?] can't find file_offset of VA 0x7621b0

[?] can't find file_offset of VA 0x7622e4

[?] too many errors getting resource data, stopped on 0 of 1

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] too many errors getting resource data, stopped on 0 of 1

[?] can't find file_offset of VA 0x589a14

[?] can't find file_offset of VA 0x5d9000

[?] can't find file_offset of VA 0x5d5000

ResourceEditor_orag.exe- Resource Editor by Anders Melander