filenameMoo0_Anti_Recovery_v1.11_Installer.exe
size2863104 (0x2bb000)
md537385366e7955af6bce84440e6030716
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1235072724
9540351
93403511
10698
1255072742
11050727228
10950727290
11450727272
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x520b025b
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion8.0
SizeOfCode0x111000
SizeOfInitializedData0x1a9000
SizeOfUninitializedData0
AddressOfEntryPoint0xc27f8
BaseOfCode0x1000
BaseOfData0x112000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x2c6000
SizeOfHeaders0x1000
CheckSum0x21acac
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x11066d0x111000R-X CODE
.rdata0x1120000x3aaf00x3b000R-- IDATA
.data0x14d0000x12c780x8000RW- IDATA
.rsrc0x1600000x165d5c0x166000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x14a1500x12c
RESOURCE0x1600000x165d5c
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x1128f00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x1120000x7ac
Delay_IAT0x14a0c80x40
CLR_Header00
typenamesizecp
IDR_XML#1301130511252
IDR_ZIP#1505910241252
IDR_ZIP#160842441252
IDR_ZIP#1706304431252
CURSOR#133081252
CURSOR#141801252
CURSOR#153081252
CURSOR#163081252
CURSOR#173081252
CURSOR#183081252
CURSOR#193081252
CURSOR#203081252
CURSOR#213081252
CURSOR#223081252
CURSOR#233081252
CURSOR#243081252
CURSOR#253081252
CURSOR#263081252
CURSOR#273081252
CURSOR#283081252
BITMAP#309941841252
BITMAP#309963241252
ICON#12961252
ICON#213841252
ICON#311281252
ICON#44881252
ICON#517361252
ICON#624401252
ICON#77441252
ICON#822161252
ICON#942641252
ICON#1016401252
ICON#1137521252
ICON#1296401252
DIALOG#307212321252
DIALOG#30734521252
STRING#38411301252
STRING#3842421252
STRING#38434021252
STRING#385712501252
STRING#38587941252
STRING#38597321252
STRING#38601381252
STRING#38651721252
STRING#38662221252
STRING#386712201252
STRING#38686121252
STRING#3869441252
STRING#3887661252
GROUP_CURSOR#30977341252
GROUP_CURSOR#30998201252
GROUP_CURSOR#30999201252
GROUP_CURSOR#31000201252
GROUP_CURSOR#31001201252
GROUP_CURSOR#31002201252
GROUP_CURSOR#31003201252
GROUP_CURSOR#31004201252
GROUP_CURSOR#31005201252
GROUP_CURSOR#31006201252
GROUP_CURSOR#31007201252
GROUP_CURSOR#31008201252
GROUP_CURSOR#31009201252
GROUP_CURSOR#31010201252
GROUP_CURSOR#31011201252
GROUP_ICON#1281741252
VERSION#17281252
MANIFEST#110171252
idlangstring
614401041Open
614411041Save As
614421041All Files (*.*)
614431041Untitled
614461041an unnamed file
614571041&Hide
614721041No error message is available.
614731041An unsupported operation was attempted.
614741041A required resource was unavailable.
614751041Out of memory.
614761041An unknown error has occurred.
614771041An invalid argument was encountered.
616961041Invalid filename.
616971041Failed to open document.
616981041Failed to save document.
616991041Save changes to %1?
617001041Failed to create empty document.
617011041The file is too large to open.
617021041Could not start print job.
617031041Failed to launch help.
617041041Internal application error.
617051041Command failed.
617061041Insufficient memory to perform operation.
617071041System registry entries have been removed and the INI file (if any) was deleted.
617081041Not all of the system registry entries (or INI file) were removed.
617091041This program requires the file %s, which was not found on this system.
617101041This program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
617121041Please enter an integer.
617131041Please enter a number.
617141041Please enter an integer between %1 and %2.
617151041Please enter a number between %1 and %2.
617161041Please enter no more than %1 characters.
617171041Please select a button.
617181041Please enter an integer between 0 and 255.
617191041Please enter a positive integer.
617201041Please enter a date and/or time.
617211041Please enter a currency.
617221041Please enter a GUID.
617231041Please enter a time.
617241041Please enter a date.
617281041Unexpected file format.
617291041%1 Cannot find this file. Please verify that the correct path and file name are given.
617301041Destination disk drive is full.
617311041Unable to read from %1, it is opened by someone else.
617321041Unable to write to %1, it is read-only or opened by someone else.
617331041An unexpected error occurred while reading %1.
617341041An unexpected error occurred while writing %1.
617441041%1: %2 Continue running script?
617451041Dispatch exception: %1
618361041Unable to read write-only property.
618371041Unable to write read-only property.
618401041Unable to load mail system support.
618411041Mail system DLL is invalid.
618421041Send Mail failed to send message.
618561041No error occurred.
618571041An unknown error occurred while accessing %1.
618581041%1 was not found.
618591041%1 contains an invalid path.
618601041%1 could not be opened because there are too many open files.
618611041Access to %1 was denied.
618621041An invalid file handle was associated with %1.
618631041%1 could not be removed because it is the current directory.
618641041%1 could not be created because the directory is full.
618651041Seek failed on %1
618661041A hardware I/O error was reported while accessing %1.
618671041A sharing violation occurred while accessing %1.
618681041A locking violation occurred while accessing %1.
618691041Disk full while accessing %1.
618701041An attempt was made to access %1 past its end.
618721041No error occurred.
618731041An unknown error occurred while accessing %1.
618741041An attempt was made to write to the reading %1.
618751041An attempt was made to access %1 past its end.
618761041An attempt was made to read from the writing %1.
618771041%1 has a bad format.
618781041%1 contained an unexpected object.
618791041%1 contains an incorrect schema.
618881041pixels
621771041Uncheck
621781041Check
621791041Mixed
module_namehintordfunction_name
ole32.dll8CLSIDFromString
ole32.dll6CLSIDFromProgID
ole32.dll29CoFreeUnusedLibraries
ole32.dll267OleUninitialize
ole32.dll61CoInitializeSecurity
ole32.dll59CoInitialize
ole32.dll105CoUninitialize
ole32.dll16CoCreateInstance
ole32.dll102CoTaskMemAlloc
ole32.dll281RegisterDragDrop
ole32.dll70CoLockObjectExternal
ole32.dll283RevokeDragDrop
ole32.dll241OleGetClipboard
ole32.dll37CoGetClassObject
ole32.dll94CoRevokeClassObject
ole32.dll246OleIsCurrentClipboard
ole32.dll239OleFlushClipboard
ole32.dll101CoTaskMemFree
ole32.dll85CoRegisterMessageFilter
ole32.dll311StgOpenStorageOnILockBytes
ole32.dll127CreateILockBytesOnHGlobal
ole32.dll244OleInitialize
ole32.dll298StgCreateDocfileOnILockBytes
USER32.dll441IsDialogMessageW
USER32.dll684SetWindowTextW
USER32.dll517MoveWindow
USER32.dll383GetWindowDC
USER32.dll14BeginPaint
USER32.dll213EndPaint
USER32.dll417InflateRect
USER32.dll211EndDialog
USER32.dll339GetNextDlgTabItem
USER32.dll91CreateDialogIndirectParamW
USER32.dll284GetDesktopWindow
USER32.dll365GetSysColorBrush
USER32.dll47CharNextW
USER32.dll76CopyAcceleratorTableW
USER32.dll427InvalidateRgn
USER32.dll338GetNextDlgGroupItem
USER32.dll503MessageBeep
USER32.dll158DestroyMenu
USER32.dll735UnregisterClassW
USER32.dll660SetScrollPos
USER32.dll359GetScrollPos
USER32.dll316GetMenu
USER32.dll363GetSubMenu
USER32.dll323GetMenuItemID
USER32.dll322GetMenuItemCount
USER32.dll104CreateWindowExW
USER32.dll262GetClassInfoExW
USER32.dll263GetClassInfoW
USER32.dll566RegisterClassW
USER32.dll3AdjustWindowRectEx
USER32.dll596ScreenToClient
USER32.dll236EqualRect
USER32.dll286GetDlgCtrlID
USER32.dll29CallWindowProcW
USER32.dll708SystemParametersInfoA
USER32.dll391GetWindowPlacement
USER32.dll381GetWindow
USER32.dll675SetWindowContextHelpId
USER32.dll494MapDialogRect
USER32.dll679SetWindowPos
USER32.dll643SetMenuItemBitmaps
USER32.dll318GetMenuCheckMarkDimensions
USER32.dll465LoadBitmapW
USER32.dll292GetFocus
USER32.dll513ModifyMenuW
USER32.dll327GetMenuState
USER32.dll207EnableMenuItem
USER32.dll61CheckMenuItem
USER32.dll312GetLastActivePopup
USER32.dll265GetClassLongW
USER32.dll27CallNextHookEx
USER32.dll334GetMessageW
USER32.dll725TranslateMessage
USER32.dll691UnregisterClassA
USER32.dll249GetActiveWindow
USER32.dll458IsWindowVisible
USER32.dll305GetKeyState
USER32.dll540PeekMessageW
USER32.dll754ValidateRect
USER32.dll544PostQuitMessage
USER32.dll55CharUpperW
USER32.dll267GetClassNameW
USER32.dll656SetPropW
USER32.dll425IsRectEmpty
USER32.dll379GetWindowThreadProcessId
USER32.dll402IntersectRect
USER32.dll320GetMonitorInfoW
USER32.dll490MonitorFromRect
USER32.dll620SetRect
USER32.dll724WindowFromPoint
USER32.dll210EnumDisplayMonitors
USER32.dll74CopyRect
USER32.dll349GetSystemMetrics
USER32.dll325GetParent
USER32.dll305GetMenuInfo
USER32.dll536RegisterClassExW
USER32.dll279GetForegroundWindow
USER32.dll348GetPropW
USER32.dll592RemovePropW
USER32.dll668TabbedTextOutW
USER32.dll191DrawTextW
USER32.dll190DrawTextExW
USER32.dll382GrayStringW
USER32.dll79CreateCursor
USER32.dll518PostThreadMessageW
USER32.dll700UpdateWindow
USER32.dll398GetWindowTextLengthW
USER32.dll435IsZoomed
USER32.dll694UnregisterHotKey
USER32.dll542RegisterHotKey
USER32.dll422IsIconic
USER32.dll644SetWindowRgn
USER32.dll641SetWindowLongW
USER32.dll515PostMessageW
USER32.dll524PtInRect
USER32.dll367GetWindowLongW
USER32.dll666SystemParametersInfoW
USER32.dll539RegisterClipboardFormatW
USER32.dll399GetWindowTextW
USER32.dll614SetActiveWindow
USER32.dll243GetCapture
USER32.dll554ReleaseDC
USER32.dll268GetDC
USER32.dll372GetWindowRect
USER32.dll437KillTimer
USER32.dll634SetTimer
USER32.dll445LoadCursorW
USER32.dll589SetCursor
USER32.dll553ReleaseCapture
USER32.dll533RedrawWindow
USER32.dll267GetCursorPos
USER32.dll143DefWindowProcW
USER32.dll242GetAsyncKeyState
USER32.dll64ClientToScreen
USER32.dll501OffsetRect
USER32.dll183DrawIconEx
USER32.dll282GetIconInfo
USER32.dll287GetDlgItem
USER32.dll373GetTopWindow
USER32.dll580SetCapture
USER32.dll160DestroyWindow
USER32.dll605SetMenu
USER32.dll184DrawMenuBar
USER32.dll586RegisterWindowMessageW
USER32.dll471LoadIconW
USER32.dll602SendDlgItemMessageW
USER32.dll601SendDlgItemMessageA
USER32.dll768WinHelpW
USER32.dll688SetWindowsHookExW
USER32.dll437IsChild
USER32.dll150DestroyIcon
USER32.dll255GetClientRect
USER32.dll587SetClipboardViewer
USER32.dll31ChangeClipboardChain
USER32.dll729UnhookWindowsHookEx
USER32.dll403InvalidateRect
USER32.dll728wsprintfW
USER32.dll486MessageBoxW
USER32.dll333GetMessageTime
USER32.dll332GetMessagePos
USER32.dll499MapWindowPoints
USER32.dll454IsWindowEnabled
USER32.dll360GetScrollRange
USER32.dll576SendMessageW
USER32.dll598SetFocus
USER32.dll599SetForegroundWindow
USER32.dll658ShowWindow
USER32.dll429IsWindow
USER32.dll88CreateIconFromResource
USER32.dll89CreateIconFromResourceEx
USER32.dll346GetSysColor
USER32.dll196EnableWindow
USER32.dll169DispatchMessageW
OLEAUT32.dll10
OLEAUT32.dll184
OLEAUT32.dll185
OLEAUT32.dll2
OLEAUT32.dll9
OLEAUT32.dll8
OLEAUT32.dll6
OLEAUT32.dll16
OLEAUT32.dll420
OLEAUT32.dll7
OLEAUT32.dll12
OLEAUT32.dll4
SHELL32.dll155
SHELL32.dll716
SHELL32.dll195SHGetSpecialFolderLocation
SHELL32.dll126SHChangeNotify
SHELL32.dll266ShellExecuteExW
SHELL32.dll30DragAcceptFiles
SHELL32.dll167SHGetDesktopFolder
SHELL32.dll155SHFileOperationW
SHELL32.dll173SHGetFileInfoW
SHELL32.dll189SHGetPathFromIDListW
SHELL32.dll183SHGetMalloc
SHELL32.dll35DragQueryFileW
SHELL32.dll31DragFinish
SHELL32.dll276Shell_NotifyIconW
SHELL32.dll122SHBrowseForFolderW
SHELL32.dll190
SHELL32.dll162
ADVAPI32.dll28AdjustTokenPrivileges
ADVAPI32.dll336LookupPrivilegeValueW
ADVAPI32.dll428OpenProcessToken
ADVAPI32.dll504RegQueryValueExW
ADVAPI32.dll493RegOpenKeyExW
ADVAPI32.dll459RegCloseKey
ADVAPI32.dll574RegDeleteKeyW
ADVAPI32.dll586RegEnumKeyW
ADVAPI32.dll606RegOpenKeyW
ADVAPI32.dll617RegQueryValueW
ADVAPI32.dll563RegCreateKeyExW
ADVAPI32.dll632RegSetValueExW
ADVAPI32.dll280GetSidSubAuthority
ADVAPI32.dll281GetSidSubAuthorityCount
ADVAPI32.dll278GetSidIdentifierAuthority
ADVAPI32.dll320IsValidSid
ADVAPI32.dll293GetUserNameW
KERNEL32.dll1156WideCharToMultiByte
KERNEL32.dll799MultiByteToWideChar
KERNEL32.dll532GetOEMCP
KERNEL32.dll68CloseHandle
KERNEL32.dll1073SuspendThread
KERNEL32.dll164CreateThread
KERNEL32.dll1080TerminateThread
KERNEL32.dll1134WaitForSingleObject
KERNEL32.dll917ResumeThread
KERNEL32.dll613GetThreadPriority
KERNEL32.dll1045SetThreadPriority
KERNEL32.dll265ExpandEnvironmentStringsW
KERNEL32.dll705InterlockedDecrement
KERNEL32.dll502GetModuleFileNameW
KERNEL32.dll427GetCurrentProcessId
KERNEL32.dll1028SetProcessWorkingSetSize
KERNEL32.dll426GetCurrentProcess
KERNEL32.dll1022SetPriorityClass
KERNEL32.dll128CreateFileW
KERNEL32.dll1175WriteFile
KERNEL32.dll546GetProcAddress
KERNEL32.dll761LoadLibraryW
KERNEL32.dll1066SizeofResource
KERNEL32.dll329FormatMessageW
KERNEL32.dll780LockResource
KERNEL32.dll770LocalFree
KERNEL32.dll763LoadResource
KERNEL32.dll487GetLastError
KERNEL32.dll333FreeLibrary
KERNEL32.dll314FindResourceW
KERNEL32.dll1012SetLastError
KERNEL32.dll1216lstrlenW
KERNEL32.dll550GetProcessHeap
KERNEL32.dll595GetSystemTimeAsFileTime
KERNEL32.dll465GetFileInformationByHandle
KERNEL32.dll463GetFileAttributesW
KERNEL32.dll607GetTempPathW
KERNEL32.dll994SetFileAttributesW
KERNEL32.dll756LeaveCriticalSection
KERNEL32.dll293FindFirstFileW
KERNEL32.dll305FindNextFileW
KERNEL32.dll282FindClose
KERNEL32.dll440GetDiskFreeSpaceW
KERNEL32.dll1003SetFileTime
KERNEL32.dll792MoveFileExW
KERNEL32.dll1118VirtualAlloc
KERNEL32.dll1121VirtualFree
KERNEL32.dll196DeleteFileW
KERNEL32.dll902RemoveDirectoryW
KERNEL32.dll102CopyFileW
KERNEL32.dll638GetVolumeInformationW
KERNEL32.dll336FreeResource
KERNEL32.dll242EnumResourceTypesW
KERNEL32.dll238EnumResourceNamesW
KERNEL32.dll313FindResourceExW
KERNEL32.dll234EnumResourceLanguagesW
KERNEL32.dll42BeginUpdateResourceW
KERNEL32.dll1108UpdateResourceW
KERNEL32.dll217EndUpdateResourceW
KERNEL32.dll244EnumSystemCodePagesW
KERNEL32.dll350GetCPInfoExW
KERNEL32.dll173CreateToolhelp32Snapshot
KERNEL32.dll841Process32FirstW
KERNEL32.dll824OpenProcess
KERNEL32.dll843Process32NextW
KERNEL32.dll878ReadFile
KERNEL32.dll506GetModuleHandleW
KERNEL32.dll635GetVersionExW
KERNEL32.dll629GetUserDefaultUILanguage
KERNEL32.dll582GetSystemDefaultLangID
KERNEL32.dll623GetTimeZoneInformation
KERNEL32.dll272FileTimeToLocalFileTime
KERNEL32.dll273FileTimeToSystemTime
KERNEL32.dll768LocalFileTimeToFileTime
KERNEL32.dll649GlobalAddAtomW
KERNEL32.dll1210lstrcpyW
KERNEL32.dll674HeapAlloc
KERNEL32.dll678HeapFree
KERNEL32.dll1000SetFilePointerEx
KERNEL32.dll322FlushFileBuffers
KERNEL32.dll981SetEndOfFile
KERNEL32.dll661GlobalLock
KERNEL32.dll668GlobalUnlock
KERNEL32.dll430GetCurrentThreadId
KERNEL32.dll1079TerminateProcess
KERNEL32.dll469GetFileSize
KERNEL32.dll999SetFilePointer
KERNEL32.dll574GetStdHandle
KERNEL32.dll114CreateDirectoryW
KERNEL32.dll480GetFullPathNameW
KERNEL32.dll218EnterCriticalSection
KERNEL32.dll589GetSystemInfo
KERNEL32.dll191DeleteCriticalSection
KERNEL32.dll118CreateEventW
KERNEL32.dll987SetEvent
KERNEL32.dll914ResetEvent
KERNEL32.dll1132WaitForMultipleObjects
KERNEL32.dll650GlobalAlloc
KERNEL32.dll1204lstrcmpW
KERNEL32.dll706InterlockedExchange
KERNEL32.dll83CompareStringA
KERNEL32.dll491GetLocaleInfoW
KERNEL32.dll1203lstrcmpA
KERNEL32.dll633GetVersion
KERNEL32.dll91ConvertDefaultLocale
KERNEL32.dll429GetCurrentThread
KERNEL32.dll652GlobalDeleteAtom
KERNEL32.dll618GetTickCount
KERNEL32.dll657GlobalFree
KERNEL32.dll634GetVersionExA
KERNEL32.dll758LoadLibraryA
KERNEL32.dll86CompareStringW
KERNEL32.dll654GlobalFindAtomW
KERNEL32.dll798MulDiv
KERNEL32.dll503GetModuleHandleA
KERNEL32.dll563GetProfileIntW
KERNEL32.dll1181WritePrivateProfileStringW
KERNEL32.dll656GlobalFlags
KERNEL32.dll766LocalAlloc
KERNEL32.dll1086TlsGetValue
KERNEL32.dll664GlobalReAlloc
KERNEL32.dll660GlobalHandle
KERNEL32.dll1084TlsAlloc
KERNEL32.dll1087TlsSetValue
KERNEL32.dll773LocalReAlloc
KERNEL32.dll1085TlsFree
KERNEL32.dll709InterlockedIncrement
KERNEL32.dll611GetThreadLocale
KERNEL32.dll778LockFile
KERNEL32.dll1097UnlockFile
KERNEL32.dll213DuplicateHandle
KERNEL32.dll1215lstrlenA
KERNEL32.dll986SetErrorMode
KERNEL32.dll471GetFileTime
KERNEL32.dll573GetStartupInfoW
KERNEL32.dll444GetDriveTypeW
KERNEL32.dll472GetFileType
KERNEL32.dll681HeapReAlloc
KERNEL32.dll922RtlUnwind
KERNEL32.dll864RaiseException
KERNEL32.dll262ExitThread
KERNEL32.dll261ExitProcess
KERNEL32.dll683HeapSize
KERNEL32.dll1124VirtualProtect
KERNEL32.dll1126VirtualQuery
KERNEL32.dll1055SetUnhandledExceptionFilter
KERNEL32.dll501GetModuleFileNameA
KERNEL32.dll331FreeEnvironmentStringsA
KERNEL32.dll448GetEnvironmentStrings
KERNEL32.dll332FreeEnvironmentStringsW
KERNEL32.dll450GetEnvironmentStringsW
KERNEL32.dll368GetCommandLineA
KERNEL32.dll369GetCommandLineW
KERNEL32.dll1008SetHandleCount
KERNEL32.dll572GetStartupInfoA
KERNEL32.dll677HeapDestroy
KERNEL32.dll676HeapCreate
KERNEL32.dll857QueryPerformanceCounter
KERNEL32.dll1096UnhandledExceptionFilter
KERNEL32.dll697InitializeCriticalSection
KERNEL32.dll348GetCPInfo
KERNEL32.dll339GetACP
KERNEL32.dll736IsValidCodePage
KERNEL32.dll742LCMapStringA
KERNEL32.dll744LCMapStringW
KERNEL32.dll424GetCurrentDirectoryA
KERNEL32.dll388GetConsoleCP
KERNEL32.dll406GetConsoleMode
KERNEL32.dll1030SetStdHandle
KERNEL32.dll489GetLocaleInfoA
KERNEL32.dll576GetStringTypeA
KERNEL32.dll579GetStringTypeW
KERNEL32.dll443GetDriveTypeA
KERNEL32.dll1164WriteConsoleA
KERNEL32.dll410GetConsoleOutputCP
KERNEL32.dll1174WriteConsoleW
KERNEL32.dll121CreateFileA
KERNEL32.dll984SetEnvironmentVariableA
KERNEL32.dll1067Sleep
KERNEL32.dll605GetTempFileNameW
KERNEL32.dll726IsDebuggerPresent
GDI32.dll291ExtTextOutW
GDI32.dll672TextOutW
GDI32.dll403GetBkColor
GDI32.dll437GetDeviceCaps
GDI32.dll219EndDoc
GDI32.dll221EndPage
GDI32.dll48CreateDCW
GDI32.dll666StretchBlt
GDI32.dll656SetViewportOrgEx
GDI32.dll655SetViewportExtEx
GDI32.dll581RectVisible
GDI32.dll281Escape
GDI32.dll501GetStretchBltMode
GDI32.dll517GetTextExtentPoint32W
GDI32.dll614SetBkMode
GDI32.dll500GetStockObject
GDI32.dll613SetBkColor
GDI32.dll82CreateSolidBrush
GDI32.dll653SetTextColor
GDI32.dll62CreateFontIndirectW
GDI32.dll484GetObjectW
GDI32.dll18BitBlt
GDI32.dll487GetPaletteEntries
GDI32.dll649SetStretchBltMode
GDI32.dll665StartPage
GDI32.dll577PtVisible
GDI32.dll499GetRgnBox
GDI32.dll511GetTextColor
GDI32.dll146DPtoLP
GDI32.dll471GetMapMode
GDI32.dll78CreateRectRgnIndirect
GDI32.dll430GetCurrentObject
GDI32.dll205DeleteDC
GDI32.dll622SetDIBColorTable
GDI32.dll435GetDIBColorTable
GDI32.dll606SelectObject
GDI32.dll46CreateCompatibleDC
GDI32.dll51CreateDIBSection
GDI32.dll663StartDocW
GDI32.dll289ExtSelectClipRgn
GDI32.dll601ScaleWindowExtEx
GDI32.dll659SetWindowExtEx
GDI32.dll600ScaleViewportExtEx
GDI32.dll549OffsetViewportOrgEx
GDI32.dll530GetWindowExtEx
GDI32.dll527GetViewportExtEx
GDI32.dll40CreateBitmap
GDI32.dll426GetClipBox
GDI32.dll284ExcludeClipRect
GDI32.dll208DeleteObject
GDI32.dll599SaveDC
GDI32.dll592RestoreDC
GDI32.dll635SetMapMode
COMDLG32.dll10GetFileTitleW
WINSPOOL.DRV143OpenPrinterW
WINSPOOL.DRV78DocumentPropertiesW
WINSPOOL.DRV29ClosePrinter
COMCTL32.dll122InitCommonControlsEx
SHLWAPI.dll151PathStripToRootW
SHLWAPI.dll73PathFindFileNameW
SHLWAPI.dll71PathFindExtensionW
SHLWAPI.dll297StrFormatByteSizeW
SHLWAPI.dll113PathIsUNCW
oledlg.dll3OleUIBusyW
urlmon.dll102URLDownloadToFileW
urlmon.dll100URLDownloadToCacheFileW
WININET.dll153InternetOpenW
WININET.dll113InternetConnectW
WININET.dll87HttpOpenRequestW
WININET.dll93HttpSendRequestW
WININET.dll89HttpQueryInfoW
WININET.dll158InternetReadFile
WININET.dll106InternetCloseHandle
WININET.dll129InternetGetConnectedState

StringTable 040904e4

CompanyNameMoo0
FileDescriptionMoo0 Installer
FileVersion1.0.0.0
InternalNameInstaller.exe
LegalCopyright(c) Moo0. All rights reserved.
OriginalFilenameInstaller.exe
ProductNameMoo0 Installer
ProductVersion1.0.0.0

VS_FIXEDFILEINFO

FileVersion1.0.0.0
ProductVersion1.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
02863104EXE08/14/2013 04:06:51#
15c115HTM#
171764591024ZIP#
201c1484244ZIP#
Scanning the drive for archives:
1 file, 2863104 bytes (2796 KiB)


--
Type = PE
WARNING = Checksum error
Physical Size = 2863104
CPU = x86
Characteristics = Executable 32-bit NoRelocs
Created = 2013-08-14 04:06:51
Headers Size = 4096
Checksum = 2206892
Name = Installer.exe
Image Size = 2908160
Section Alignment = 4096
File Alignment = 4096
Code Size = 1118208
Initialized Data Size = 1740800
Uninitialized Data Size = 0
Linker Version = 8.0
OS Version = 4.0
Image Version = 0.0
Subsystem Version = 4.0
Subsystem = Windows GUI
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
CompanyName: Moo0
FileDescription: Moo0 Installer
InternalName: Installer.exe
LegalCopyright: (c) Moo0.  All rights reserved.
OriginalFilename: Installer.exe
ProductName: Moo0 Installer
----
Path = .rsrc/1033/IDR_ZIP/170
Size = 630443
Packed Size = 630443
--
Path = .rsrc/1033/IDR_ZIP/170
Type = 7z
Physical Size = 630443
Headers Size = 206
Method = LZMA:21 BCJ
Solid = -
Blocks = 2

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2012-09-12 17:47:04 ....A         1267          830  _ReadMe_AntiRecovery.txt
2013-08-20 10:56:20 ....A      1716224       629407  AntiRecovery.exe
------------------- ----- ------------ ------------  ------------------------
2013-08-20 10:56:20            1717491       630237  2 files

Warnings: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK