A Localization/Multi-language Tool by Heaventools Software

Resource Tuner is an advanced visual resource editor for 32 bit Windows executable files. With Resource Tuner, creative individuals
can fully view, edit and replace strings, bitmaps, logos and icons - all that make up the visual part of all Windows program. This
tweaking tool enables you to view and edit almost anything about a compiled Windows program, from the menus to the dialog boxes to the icons, etc. Using the Application Manifest Wizard, you can also insert an application manifest into the resource section of the executable.

Browsing and extracting PE file resources

First of all, Resource Tuner is a resource viewer and extractor. A list of the file’s resources is displayed in a resource tree which can be expanded or collapsed by clicking with right mouse button on the chosen resource type and selecting an action from popup menu.

There are standard resource types such as bitmap, icon, menu, dialog, cursor, font, stringtable, message table, typelib, toolbar, accelerators and version info. Other resource types may also be defined by the programmer and are displayed in upper case: GIF, PNG, HTML, XML, Manifest. Programs compiled using the Borland VCL do not commonly have menu, dialog, or accelerator resources, but store this information in a resource type named RCData or the Application-defined resource (raw data) that holds the information that were in the DFM file before the compilation.

If VCL Delphi/C++ Builder is the case, and RCData contains DFM forms, all the found objects with all assigned properties and events will be displayed in a hierarchical tree. You can navigate easily through the objects and save their contents (Image Lists, Strings List, Glyphs, Bitmaps etc). PackageInfo shows all units used during compiling an executable. DVCLAL shows the compiler version for Borland products.

Hacking, modifying and customizing resources
PE Explorer's Resource Editor attempts to be the most convenient and easy-to-use PE resource editor available for Windows. Visual editing features let you quickly modify the resources without writing any scripts. All changes made to resources can be watched on the screen and, if you are not satisfied with the result, you can return to the previous state. If changing some values would result in unpleasant consequences, modification of the given data will usually be disallowed. However, in some cases Resource Tuner relies on your common sense and understanding of what you are going to do.

The Application Manifest Wizard allows your application to take advantage of the new common control styles and appearances featured in Windows XP and Vista.

Unpacking malicious software

The UPX Unpacker plug-in works on packed malware executables and can handle a file even if it has been packed with UPX and modified manually so that UPX cannot be used directly to unpack the file, because internal structures have been modified, for example the names of the sections have been changed from UPX to XYZ, or the version number of the UPX format has been changed from 1.20 to 3.21. This technique often is used by malware authors to make unpacking and reverse engineering harder.

Previously, you had to run the executable and damp the packed segments right after the executable had been completely unpacked in memory. Now you can open these obfuscated files even without knowing that: your file will be unpacked automatically!

The UPX Unpacker attempts to recover a file, even when an original PE file header entry is no longer available after unpacking. Previously, losing the PE file header rendered the executable completely inoperable and unrepairable. Now you have good chances to analyze packed malware executables and extract hidden data.