isorip12.exe - One-click ISO Ripper

info
MZ
PE
resources
strings
imports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	isorip12.exe
size	1729268 (0x1a62f4)
md5	4b95c1a59306b1d375bdaad16e0a89d9

type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe0

Rich Header

lib id	version	times used
11	8047	3
14	7299	8
10	8047	11
4	8047	2
1	0	148
93	2179	9
11	9782	62
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x43993ce3
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0xa000
SizeOfInitializedData	0x19000
SizeOfUninitializedData	0x2a000
AddressOfEntryPoint	0x33eb0
BaseOfCode	0x2b000
BaseOfData	0x35000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x4e000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

UPX v3.0 (EXE_LZMA) (Markus Oberhumer & Laszlo Molnar & John Reiser)

This file is packed with UPX. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

name	va	vsize	raw size	flags
UPX0	0x1000	0x2a000	0	RWX UDATA
UPX1	0x2b000	0xa000	0x9c00	RWX IDATA
.rsrc	0x35000	0x19000	0x18200	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x4d00c	0x15c
RESOURCE	0x35000	0x1800c
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#50	296
ICON	#51	1384
ICON	#52	744
ICON	#53	2216
ICON	#54	1640
ICON	#55	3752
ICON	#56	70746
ICON	#57	1128
ICON	#58	4264
ICON	#59	9640
DIALOG	#500	176
STRING	#1	84
STRING	#5	52
GROUP_ICON	#159	146
VERSION	#1	828
MANIFEST	#1	545

lang

string

1033

e3 b5 2a 2a 23 78 52 da  2b f9 28 65 ad a0 39 f3  |..**#xR.+.(e..9.|
7b 33 92 0e ee 2e 2b 33  ab 40 49 49 b0 8d a0 39  |{3....+3.@II...9|
86 37 1d 6b 30 d3 65 b8  b4 2a 62 b6 2c 77 c4 1b  |.7.k0.e..*b.,w..|
66 8f 97 27 14 fb 80 b3  d9 9c 6f af 15 db 97 b4  |f..'......o.....|
4e aa a1 00 8b 0e 2e 5c  0f c7 2a 31 3e e2 d4 9b  |N......\..*1>...|
6d 1c a5 93                                       |m...            |

1033

c0 bd 8e d2 fb 6b fc 44  97 ab 52 48 b8 bc df 7c  |.....k.D..RH...||
7a 83 4f 5d 5c 31 b8 c7  04 9b ce 1f 54 b5 66 7d  |z.O]\1......T.f}|
19 b2 78 1f d1 d9 92 57  14 bf a3 ad 1b 19 e2 0b  |..x....W........|
cf bd 6a 05                                       |..j.            |

module_name	ord	function_name
KERNEL32.DLL		LoadLibraryA
KERNEL32.DLL		GetProcAddress
KERNEL32.DLL		VirtualProtect
KERNEL32.DLL		VirtualAlloc
KERNEL32.DLL		VirtualFree
KERNEL32.DLL		ExitProcess
COMCTL32.dll	17
MSVCRT.dll		exit
OLEAUT32.dll	2
USER32.dll		SetTimer

StringTable 040904B0

CompanyName	Streamware Development
FileDescription	One-click ISO Ripper
FileVersion	1, 2, 0, 3
InternalName	isorip12
LegalCopyright	Copyright (c) 2008-2009 Streamware Development
OriginalFilename	isorip12.exe
ProductName	One-click ISO Ripper
ProductVersion	1, 2, 0, 3

VS_FIXEDFILEINFO

FileVersion	1.2.0.3
ProductVersion	1.2.0.3
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	139776	EXE	12/09/2005 08:14:27	#
15c1	15	HTM		#
caec	70746	PNG	(256 x 256)	#
22200	1589492	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 1729268 bytes (1689 KiB)


--
Type = 7z
Offset = 139875
Physical Size = 1589393
Headers Size = 911
Method = LZMA:23 BCJ2
Solid = +
Blocks = 2

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2009-07-06 11:02:25 ....A       203264       138773  isorip.msi
2008-06-16 07:03:04 ....A       137216               isorip64.msi
2006-12-01 23:23:00 ....A         1869               Windows/winsxs/b2rg91xw.1p4/x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700.manifest
2006-12-01 23:23:00 ....A         1869               Windows/winsxs/Manifests/x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700.manifest
2009-07-06 10:35:10 ....A          169               One-click ISO Ripper/whatsnew.txt
2008-06-16 06:26:55 ....A         4839               One-click ISO Ripper/license.rtf
2006-12-01 23:25:14 ....A         8355               Windows/winsxs/Policies/uxgs54we.kj4/8.0.50727.762.cat
2006-12-01 23:25:14 ....A         8355               Windows/winsxs/vxgs54we.kj4/8.0.50727.762.cat
2006-12-01 23:25:08 ....A         8335               Windows/winsxs/b2rg91xw.1p4/x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700.cat
2006-12-01 23:25:08 ....A         8335               Windows/winsxs/Manifests/x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700.cat
2006-12-01 15:54:36 ....A          800               Windows/winsxs/Policies/uxgs54we.kj4/8.0.50727.762.policy
2006-12-01 15:54:36 ....A          800               Windows/winsxs/vxgs54we.kj4/8.0.50727.762.policy
2008-06-16 06:26:39 ....A           51               One-click ISO Ripper/default.url
2008-06-16 06:26:32 ....A           65               One-click ISO Ripper/register.url
2009-07-06 10:56:53 ....A       458752      1449709  install.exe
2009-07-06 11:02:07 ....A       888832               One-click ISO Ripper/isorip.exe
2008-06-16 07:07:24 ....A       922584               One-click ISO Ripper/tutorial.exe
2009-07-06 09:56:55 ....A       225280               One-click ISO Ripper/unlock.exe
2009-06-12 08:37:06 ....A       184320               One-click ISO Ripper/lame_enc.dll
2006-12-01 15:54:32 ....A       479232               Windows/system32/msvcm80.dll
2006-12-01 15:54:32 ....A       479232               Windows/winsxs/92rg91xw.1p4/msvcm80.dll
2006-12-01 15:54:32 ....A       479232               Windows/winsxs/b2rg91xw.1p4/msvcm80.dll
2006-12-01 15:54:34 ....A       548864               Windows/system32/msvcp80.dll
2006-12-01 15:54:34 ....A       548864               Windows/winsxs/92rg91xw.1p4/msvcp80.dll
2006-12-01 15:54:34 ....A       548864               Windows/winsxs/b2rg91xw.1p4/msvcp80.dll
2006-12-01 15:54:32 ....A       626688               Windows/system32/msvcr80.dll
2006-12-01 15:54:32 ....A       626688               Windows/winsxs/92rg91xw.1p4/msvcr80.dll
2006-12-01 15:54:32 ....A       626688               Windows/winsxs/b2rg91xw.1p4/msvcr80.dll
2009-07-06 09:56:54 ....A        45056               One-click ISO Ripper/shellext.dll
2009-07-06 11:02:31 D....            0            0  Windows/winsxs/vxgs54we.kj4
2009-07-06 11:02:31 D....            0            0  Windows/winsxs/Policies/uxgs54we.kj4
2009-07-06 11:02:31 D....            0            0  Windows/winsxs/Policies
2009-07-06 11:02:31 D....            0            0  Windows/winsxs/Manifests
2009-07-06 11:02:31 D....            0            0  Windows/winsxs/b2rg91xw.1p4
2009-07-06 11:02:31 D....            0            0  Windows/winsxs/92rg91xw.1p4
2009-07-06 11:02:31 D....            0            0  Windows/winsxs
2009-07-06 11:02:31 D....            0            0  Windows/system32
2009-07-06 11:02:31 D....            0            0  Windows
2009-07-06 11:02:31 D....            0            0  One-click ISO Ripper
------------------- ----- ------------ ------------  ------------------------
2009-07-06 11:02:31            8073498      1588482  29 files, 10 folders

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[!] string size(93126) > stringtable size(84). truncated to 82

[!] cannot convert "**#xR\xDA+\xF9(e\xAD\xA09\xF3{3"... to UTF-16

[!] string size(97152) > stringtable size(52). truncated to 50

[!] cannot convert "\x8E\xD2\xFBk\xFCD\x97\xABRH\xB8\xBC\xDF|z\x83"... to UTF-16

isorip12.exe- One-click ISO Ripper