RegOrganizer.exe - Reg Organizer

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	RegOrganizer.exe
size	4503040 (0x44b600)
md5	cd86eb1e90ec76d429ec0fe88afafb28

type	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, PECompact2 compressed
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x5344
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	2
TimeDateStamp	0x583d9231
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x30f
Magic	0x10b
LinkerVersion	5.0
SizeOfCode	0xedd200
SizeOfInitializedData	0x45cc00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2c74
BaseOfCode	0x1000
BaseOfData	0x1000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x13b4000
SizeOfHeaders	0x200
CheckSum	0x455998
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x2000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

PeCompact 2.xx (BitSum Technologies / v2.0)

Sections

name	va	vsize	raw size	flags
CODE	0x1000	0x1354000	0x3ecc00	RWX CODE
.rsrc	0x1355000	0x5f000	0x5e800	RWX CODE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x13b219c	0x70c
RESOURCE	0x1355000	0x5bf8f
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x13b37a8	0x11c
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks
0x17b37c8	0x17b38c4	0x17b37c0	0x17b37c4
0	0	0	0
0	0	0	0
0	0	0	0

show previews

type	name	size
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
CURSOR	#8	308
BITMAP	BBABORT	464
BITMAP	BBALL	484
BITMAP	BBCANCEL	464
BITMAP	BBCLOSE	464
BITMAP	BBHELP	464
BITMAP	BBIGNORE	464
BITMAP	BBNO	464
BITMAP	BBOK	464
BITMAP	BBRETRY	464
BITMAP	BBYES	464
BITMAP	CDROM	192
BITMAP	CLOSEDFOLDER	224
BITMAP	CURRENTFOLDER	224
BITMAP	EXECUTABLE	224
BITMAP	FLOPPY	192
BITMAP	HARD	192
BITMAP	KNOWNFILE	224
BITMAP	NETWORK	192
BITMAP	OPENFOLDER	224
BITMAP	RAM	192
BITMAP	UNKNOWNFILE	224
ICON	#1	3752
ICON	#2	2216
ICON	#3	1384
ICON	#4	270376
ICON	#5	67624
ICON	#6	9640
ICON	#7	4264
ICON	#8	1128
STRING	#4051	72
STRING	#4052	1048
STRING	#4053	916
STRING	#4054	920
STRING	#4055	768
STRING	#4056	1088
STRING	#4057	960
STRING	#4058	1200
STRING	#4059	1212
STRING	#4060	1128
STRING	#4061	1120
STRING	#4062	1184
STRING	#4063	1648
STRING	#4064	1548
STRING	#4065	2668
STRING	#4066	1984
STRING	#4067	904
STRING	#4068	1112
STRING	#4069	1140
STRING	#4070	1068
STRING	#4071	1000
STRING	#4072	776
STRING	#4073	1044
STRING	#4074	892
STRING	#4075	188
STRING	#4076	264
STRING	#4077	468
STRING	#4078	852
STRING	#4079	1068
STRING	#4080	884
STRING	#4081	1520
STRING	#4082	832
STRING	#4083	888
STRING	#4084	968
STRING	#4085	1668
STRING	#4086	1244
STRING	#4087	948
STRING	#4088	928
STRING	#4089	1116
STRING	#4090	300
STRING	#4091	236
STRING	#4092	612
STRING	#4093	1076
STRING	#4094	924
STRING	#4095	780
STRING	#4096	828
FONTDIR	FONTDIR	326
FONT	#1	140396
FONT	#2	142472
RCDATA	DVCLAL	16
RCDATA	PLATFORMTARGETS	2
RCDATA	TABOUTFORM	9225
RCDATA	TADDTOFAVORITESANDCOMMENTSEDITINGFORM	5108
RCDATA	TAPPLICATIONSUNINSTALLERFORM	121096
RCDATA	TAUTOMATICREGISTRYCLEANUPFORM	38879
RCDATA	TAUTOMATICREGISTRYCLEANUPRESULTSFORM	7793
RCDATA	TBINARYVALUEFORM	4787
RCDATA	TCHANGELOGNOTATIONCONVENTIONSFORM	2516
RCDATA	TCHANGELOGSVIEWERFORM	38494
RCDATA	TCHANGELOGWIZARDFORM	23744
RCDATA	TCREATEREGISTRYSNAPSHOTFORM	7196
RCDATA	TDELETEDAPPLICATIONSFORM	19566
RCDATA	TDIDYOUKNOWFORM	199849
RCDATA	TDISKCLEANUPFRAME	232126
RCDATA	TDISKCLEANUPGEARMODULE	4890
RCDATA	TDISKCLEANUPRESULTSFORM	5512
RCDATA	TENTRYCHANGINGFORM	3677
RCDATA	TFINDAPPBYSHORTCUTDATAMODULE	17820
RCDATA	TFORM27	4290
RCDATA	TFORM3	24198
RCDATA	TFORM30	2457
GROUP_ICON	MAINICON	118
VERSION	#1	552
MANIFEST	#1	1799

module_name	hint	ord	function_name
kernel32.dll			LoadLibraryA
kernel32.dll			GetProcAddress
kernel32.dll			VirtualAlloc
kernel32.dll			VirtualFree
advapi32.dll			AdjustTokenPrivileges
netapi32.dll			NetApiBufferFree
version.dll			GetFileVersionInfoSizeW
winspool.drv			ClosePrinter
comctl32.dll			DefSubclassProc
comdlg32.dll			GetSaveFileNameW
GDI32.dll			AbortDoc
SHELL32.dll			CommandLineToArgvW
USER32.dll			ActivateKeyboardLayout
winmm.dll			timeBeginPeriod
ole32.dll			CLSIDFromString
oleaut32.dll			CreateErrorInfo
gdiplus.dll			GdipAddPathArcI
SHLWAPI.dll			StrCmpLogicalW
uxtheme.dll			CloseThemeData
wininet.dll			FindCloseUrlCache
crypt32.dll			CertFindCertificateInStore
updaterdll.dll			DownlodFileFromTheInternet
quickregeditorlaunch.dll			EnableRegEditorQuickLaunchEx
aclui.dll			CreateSecurityPage
aspr_api.dll			CheckKeyAndDecrypt
psapi.dll			EnumProcesses
urlmon.dll			URLDownloadToFileW
hardwareconstant.dll			GetHardwareConstant
installertracingagent.dll			DisableInstallerTracingAgent

StringTable 040904E4

CompanyName	Chemtable Software
FileDescription	Reg Organizer
FileVersion	0.0.0.0
InternalName
ProductName	Reg Organizer
ProductVersion	7.62

VS_FIXEDFILEINFO

FileVersion	0.0.0.0
ProductVersion	7.62.0.0
StrucVersion	0x10000
FileFlagsMask	0
FileFlags	0
FileOS	0
FileType	0
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	4497456	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x10ed000

[?] can't find file_offset of VA 0x10ed138

[?] can't find file_offset of VA 0x10ed270

[?] can't find file_offset of VA 0x10ed3a8

[?] can't find file_offset of VA 0x10ed4e0

[?] can't find file_offset of VA 0x10ed618

[?] can't find file_offset of VA 0x10ed750

[?] can't find file_offset of VA 0x10ed888

[?] can't find file_offset of VA 0x10ed9c0

[?] can't find file_offset of VA 0x10edb90

[?] can't find file_offset of VA 0x10edd78

[?] can't find file_offset of VA 0x10edf48

[?] can't find file_offset of VA 0x10ee118

[?] can't find file_offset of VA 0x10ee2e8

[?] can't find file_offset of VA 0x10ee4b8

[?] can't find file_offset of VA 0x10ee688

[?] can't find file_offset of VA 0x10ee858

[?] can't find file_offset of VA 0x10eea28

[?] can't find file_offset of VA 0x10eebf8

[?] can't find file_offset of VA 0x10eecb8

[?] can't find file_offset of VA 0x10eed98

[?] can't find file_offset of VA 0x10eee78

[?] can't find file_offset of VA 0x10eef58

[?] can't find file_offset of VA 0x10ef018

[?] can't find file_offset of VA 0x10ef0d8

[?] can't find file_offset of VA 0x10ef1b8

[?] can't find file_offset of VA 0x10ef278

[?] can't find file_offset of VA 0x10ef358

[?] can't find file_offset of VA 0x10ef418

[?] can't find file_offset of VA 0x10ef4f8

[?] can't find file_offset of VA 0x10ef540

[?] can't find file_offset of VA 0x10ef958

[?] can't find file_offset of VA 0x10efcf0

[?] can't find file_offset of VA 0x10f0088

[?] can't find file_offset of VA 0x10f0388

[?] can't find file_offset of VA 0x10f07c8

[?] can't find file_offset of VA 0x10f0b88

[?] can't find file_offset of VA 0x10f1038

[?] can't find file_offset of VA 0x10f14f8

[?] can't find file_offset of VA 0x10f1960

[?] can't find file_offset of VA 0x10f1dc0

[?] can't find file_offset of VA 0x10f2260

[?] can't find file_offset of VA 0x10f28d0

[?] can't find file_offset of VA 0x10f2ee0

[?] can't find file_offset of VA 0x10f3950

[?] can't find file_offset of VA 0x10f4110

[?] can't find file_offset of VA 0x10f4498

[?] can't find file_offset of VA 0x10f48f0

[?] can't find file_offset of VA 0x10f4d68

[?] can't find file_offset of VA 0x10f5198

[?] can't find file_offset of VA 0x10f5580

[?] can't find file_offset of VA 0x10f5888

[?] can't find file_offset of VA 0x10f5ca0

[?] can't find file_offset of VA 0x10f6020

[?] can't find file_offset of VA 0x10f60e0

[?] can't find file_offset of VA 0x10f61e8

[?] can't find file_offset of VA 0x10f63c0

[?] can't find file_offset of VA 0x10f6718

[?] can't find file_offset of VA 0x10f6b48

[?] can't find file_offset of VA 0x10f6ec0

[?] can't find file_offset of VA 0x10f74b0

[?] can't find file_offset of VA 0x10f77f0

[?] can't find file_offset of VA 0x10f7b68

[?] can't find file_offset of VA 0x10f7f30

[?] can't find file_offset of VA 0x10f85b8

[?] can't find file_offset of VA 0x10f8a98

[?] can't find file_offset of VA 0x10f8e50

[?] can't find file_offset of VA 0x10f91f0

[?] can't find file_offset of VA 0x10f9650

[?] can't find file_offset of VA 0x10f9780

[?] can't find file_offset of VA 0x10f9870

[?] can't find file_offset of VA 0x10f9ad8

[?] can't find file_offset of VA 0x10f9f10

[?] can't find file_offset of VA 0x10fa2b0

[?] can't find file_offset of VA 0x10fa5c0

[?] can't find file_offset of VA 0x10fa900

[?] can't find file_offset of VA 0x10faa48

[?] can't find file_offset of VA 0x111ceb8

[?] can't find file_offset of VA 0x113fb40

[?] can't find file_offset of VA 0x113fb50

[?] can't find file_offset of VA 0x113fb58

[?] can't find file_offset of VA 0x1141f68

[?] can't find file_offset of VA 0x1143360

[?] can't find file_offset of VA 0x1160c68

[?] can't find file_offset of VA 0x116a448

[?] can't find file_offset of VA 0x116c2c0

[?] can't find file_offset of VA 0x116d578

[?] can't find file_offset of VA 0x116df50

[?] can't find file_offset of VA 0x11775b0

[?] can't find file_offset of VA 0x117d270

[?] can't find file_offset of VA 0x117ee90

[?] can't find file_offset of VA 0x1183b00

[?] can't find file_offset of VA 0x11b47b0

[?] can't find file_offset of VA 0x11ed270

[?] can't find file_offset of VA 0x11ee590

[?] can't find file_offset of VA 0x11efb18

[?] can't find file_offset of VA 0x11f0978

[?] can't find file_offset of VA 0x11f4f18

[?] can't find file_offset of VA 0x11f5fe0

[?] can't find file_offset of VA 0x11fbe68

[?] can't find file_offset of VA 0x11fc808

[?] too many errors getting resource data, stopped on 0 of 1

RegOrganizer.exe-