Resource editors are specialized programs for viewing, creating and modifying PE file resources. With their help, you can, for example, unlock menu items in a shareware program, change the application icon, change the appearance of dialog boxes, translate the interface, etc. Every reverse engineer has their favorite resource editor, so you can't say that one of them is better or worse. Very often, to solve different tasks, the functions of a particular tool are required, and in this article I will try to briefly talk about the most popular executable resource editors.

restaurateur- perhaps the most famous resource editor for executable files in the format exe, dll, ocx, scr, res and others. Allows you to create and edit standard .RES resource files, extract and add your own resources to the file. But the main advantage of Restorator is that the results of your work can be arranged in a few clicks of the mouse in the form of a small patch. In this way, for example, a huge number of crackers for various programs have been created. Of the shortcomings noticed, the first cant is the need to pay for the use of the program (in the attached versions, this problem has already been solved), and the second is the stupid habit of spoiling the line "Bome" in the service fields of the icons of the edited file.

eXeScope is my favorite editor. It works very fast with resources, you can quickly view dialog boxes, pull out or change icons and pictures, but I am especially pleased with working with resources of files written in Delphi. Sometimes there are problems with the resources of uncompressed files, in this case it usually helps to rebuild the resource section of the file before sending it to the editor. eXeScope is also paid, but this problem has also been solved a long time ago. If you prefer the English interface, then delete the eXeScope.RUS file from the program directory.

P.E. Explorer is designed to view and edit the internal structure of executable files such as EXE, DLL, ActiveX and others. PE Explorer includes a resource editor, a section editor, a disassembler, a dependency scanner, a digital signature analyzer, and other tools indispensable for software researchers. With PE Explorer it is very easy to analyze, edit or optimize problematic files, translate interfaces into other languages. The authors of this division are the same as the previous one, with all the ensuing consequences. But abroad will help us again.

Resource Builder- another commercial development in the arsenal of resource editors. Using the Resource Builder, editing resources becomes a breeze. This editor provides a complete set of very convenient and understandable tools for all types of resources. The built-in linker will update resources directly in executable modules without recompilation, and the creation of resource libraries (Resource Only DLLs) used for application localization takes only a couple of mouse clicks. You can take this useful tool for free on third-party resources: and two.

- free viewer and editor of resources of executable files. You can download it, and for developers in open access, the source texts of the editor are also posted there. Here, learn how to work, sharovarschiki.

ResEdit.1.5.9.zip (527,389 bytes)

RCE- resource editor for visual creation and editing of RC files, can be used in conjunction with the IDE or used with other resource editors as an auxiliary tool. Doesn't work directly with executable files, so I don't see much benefit from RCE.

Portable Executable (PE) is an executable file format that has been around for a long time and is still used on all versions of Windows. This includes files with the format *.exe, *.dll and others, and such files contain all the information about the program. But any program can contain a virus, and before installation it is desirable to know what is stored behind a file with this format. This can be found using PE Explorer.

PE Explorer is a program that is designed to view and modify everything contained in PE files. This program was created and very often used to detect viruses, but its useful functions are not limited to this. For example, it can be used to remove debug information or translate any program into Russian.

While the program is being compressed, it is usually encrypted so that the user or anyone else cannot see everything that happens behind the scenes. But PE Explorer does not stop this, because thanks to a specially written algorithm, it can decrypt these files and show all the contents.

Browsing titles

As soon as you open the PE file, the program will open the header viewer. Here you can see a lot of interesting things, but nothing can be changed, and it is not necessary.

Data directories

Data Directories (data directories) is an important part of any executable file, because it is in this array that information about structures is stored (their size, pointer to the beginning, etc.). Copies of files should be changed, otherwise it can lead to irreversible consequences.

Section headings

All important application code is stored in PE Explorer in different sections for greater order. Since this section contains all the data, they can be changed by changing their location. If some data should not be changed, the program will notify you about it.

Resource editor

As you know, resources are an integral part of the program (icons, forms, inscriptions). But with the help of PE Explorer they can be changed. Thus, you can replace the application icon or translate the program into Russian. Here you can also save resources to your computer.

Disassembler

This tool is necessary for express analysis of executable files, moreover, it is made in a more simplified, but no less functional format.

Import table

Thanks to this section in the program, you can find out if the application being checked is harmful to your computer. This section contains all the functions that are contained in the program.

Dependency Scanner

Another advantage of the program in the fight against viruses. Here you can see the dependency with dynamic libraries, thereby recognizing whether this application poses a threat to your computer or not.

Program Benefits

1. Intuitive
2. Ability to change resources
3. Allows you to find out about viruses in the program even before running the code

disadvantages

1. Lack of Russification
2. Paid (free version only available for 30 days)

PE Explorer is an excellent tool that will allow you to protect your computer from viruses. Of course, it can be used in another direction, by adding dangerous code to a completely harmless program, but this is not recommended. In addition, due to the ability to change resources, you can add advertising or translate the program into Russian.

SDL Passolo 2015 is the most powerful utility for translating programs into various languages ​​of the world. Understands many formats, distinguishes the type of language. A template resource editor with advanced features designed for software localization. SDL Passolo 2015 has a visual dialog editor with a range of convenient formatting tools, supports working with almost any resource, has a lot of fine-tuning, a batch processing option, and a built-in spell checker. SDL Passolo 2015 can help a translator save a lot of effort and time in software localization. This is due to the fact that the program provides the function of automatic translation and checking the translated text for most common errors. The automatic translation function is carried out in the presence of certain dictionaries, of which there are many on the Internet, including those from Microsoft. If you are not satisfied with ready-made dictionaries, then you can create them yourself. It is enough to translate some program once and export the translation list to a dictionary. And in the future, this dictionary can be connected when translating new versions of programs. SDL Passolo 2015 has a very advanced visual correction of dialog boxes in translatable programs. Suffice it to say that it is not much inferior to form editing in Microsoft Visual Studio.Net. If you say that Resource Hacker has good dialogue adjustments, then you haven't seen Passolo. The list of Passolo advantages is not limited to this. Add. Information: New features: * Terminology is now also provided from the Passolo translation lists. * Services for pre-translation, searches for loose translations, matches and terminology can now easily be selected in the options dialog. * Searching for translations with quick indexes in projects and glossaries makes the search process much faster. * New modern user interface that allows arbitrary docking of output windows. New Auto-hide setting for output windows. * Keyboard shortcuts can be changed in the toolbar customization dialog. * Search for non-strict translations now marks the differences of non-strict matches in the searched text with colored texts. * When an entry is selected, terminologies are selected from the context menu of the source text, popping up with additional information regarding the displayed terminology element. * Files can be dragged and dropped into the project window to add them as a source file or import information from them. * The history of all changes in the text is provided with the date and username. Previous versions of data can be restored using the Rollback feature. * Entries in the project window can now be filtered and grouped. * Entries in the project window can be filtered as lists of strings.

Everything you need to work with executable files is in one program.

This is a program for viewing, studying, analyzing and editing the internal structure of executable files. With PE Explorer, you can explore both your own programs and libraries, and applications from third-party developers whose source code you do not have access to. This also includes the study of the device of viruses, trojans and other malicious programs.

PE Explorer allows you to open, view and edit 32-bit PE (Portable Executable) files for Windows of any type: EXE, DLL and ActiveX, SCR (screensavers), CPL (Control Panel Applets), SYS, DRV, MSSTYLES, MUI, BPL, DPL and many more.

Screenshots Feature List

Studying and modifying PE files

PE Explorer gives you the ability to look inside how a program or library works, statically analyze a file (ie without executing potentially dangerous code), and collect all possible information contained within the file.

PE Explorer takes care of all the searching and gathering of the various values ​​and characteristics of a file, leaving you with only a minimal amount of work to do your analysis. Opening the file in PE Explorer, you will immediately see a summary table of values ​​from the PE file headers, a list of imported and exported functions, names and characteristics of sections, the presence or absence of a digital signature, as well as all the resources contained in the file.

From this starting point, you can continue to further explore the elements of the file that interest you. To do this, PE Explorer offers a number of tools: Viewing and editing function parameter descriptions, Dependency Scanner, Section Editor, Resource editor, Disassembler, as well as static UPX unpackers, UPack and NSPack.

What you can do with PE Explorer

PE Explorer is intended for use in various IT areas: in software development and testing, in reverse engineering (reverse engineering) in order to restore the algorithms used in the analyzed file, in antivirus laboratories and forensics, to detect vulnerabilities and conduct security audits to files obtained from unverified sources.

• See what is inside executable files and what they are for
• Change and customize elements of the graphical interface of programs
• Determine where the application is accessing and which DLLs of the library are called from it
• Predict program behavior and interaction logic with other modules
• Check the presence and integrity of the digital signature of the file, verify the provider
• Get hint about function parameters exported from system libraries
• Directly open files packed with UPX, UPack or NSPack
• Special support for applications written in Delphi

PE Explorer contains tools for disassembling and examining executable files, as well as changing their properties and resources.

Viewing and editing Portable Executable (PE) files

• Working with 32-bit PE files- such as .EXE, .DLL, device drivers (.SYS, .ACM), ActiveX Controls (.OCX), Borland libraries (.DPL and .BPL), visual style files (.MSSTYLES), control panel applets (.CPL ), screensavers (.SCR) and any other win32 executable files.
• Working with damaged and packed files: such files are opened in Safe mode.
• File integrity check on opening.
• Calculation and correction file checksum.
• Value modification entry points.
• Modifying file properties.
• Automatic unpackers for UPX, Uppack and NSPack.
• Connection possible custom plugins to process files when opened.

• Supports Intel 80x86, Pentium family and compatible processors.
• x86 instruction set (MMX, SSE, SSE2 and SSE3), AMD K6-2 3D-Now!
• Convenient code navigation using panels, search and navigation history.
• Finding all text strings and VCL objects inside an EXE file.
• Saving the session and the subsequent opening of the assembler listing and the changes made.

General program settings

• List of the 20 most recently opened files.
• Adding frequently opened files to the favorites list.
• Optional integration with Windows Explorer context menu.
• Customizable appearance and color for panels and fonts.
• Creating a backup copy of the edited file (enabled by default).
• Displaying events and messages in the log window, recording events in a log file.

Download the free trial version!

PE Explorer runs on all versions of Windows
from Windows 95 to XP, Vista, 7, 8 and 10.

Minimum system requirements:
Processor Intel Pentium® or AMD K5 166 MHz
16MB RAM

If your only task is to edit resources and you don't need the advanced functionality of PE Explorer at all, then you can try - this program is a resource editor from PE Explorer, separated into a separate product.