wprotectmanager.exe - wpm.exe

info
MZ
PE
resources
strings
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	wprotectmanager.exe
size	493568 (0x78800)
md5	39531d54f2afa4473bb4a97f64e99271

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
205	50929	35
207	50929	139
206	50929	226
147	30729	25
1	0	242
211	60430	26
201	60430	1
151	0	1
204	60430	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x52d4ce4f
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	11.0
SizeOfCode	0x50e00
SizeOfInitializedData	0x29c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1f517
BaseOfCode	0x1000
BaseOfData	0x52000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x7d000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x50c40	0x50e00	R-X CODE
.rdata	0x52000	0x10b56	0x10c00	R-- IDATA
.data	0x63000	0x68a0	0x4400	RW- IDATA
.rsrc	0x6a000	0x27b0	0x2800	R-- IDATA
.reloc	0x6d000	0xfd22	0xfe00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x616ec	0x104
RESOURCE	0x6a000	0x27b0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x6d000	0x4174
DEBUG	0x52450	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x5ba70	0x40
Bound_IAT	0	0
IAT	0x52000	0x384
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	296
ICON	#2	1384
ICON	#3	744
ICON	#4	2216
ICON	#5	744
ICON	#6	2216
MENU	#109	74
DIALOG	#103	300
STRING	#7	56
ACCELERATORS	#109	16
GROUP_ICON	#107	62
GROUP_ICON	#108	34
VERSION	#1	728
MANIFEST	#1	392

id	lang	string
103	1033	NewGdp
109	1033	NEWGDP

module_name	hint	ord	function_name
VERSION.dll	5		GetFileVersionInfoSizeW
VERSION.dll	14		VerQueryValueW
VERSION.dll	6		GetFileVersionInfoW
KERNEL32.dll	624		GetSystemDirectoryW
KERNEL32.dll	520		GetLogicalDriveStringsW
KERNEL32.dll	928		QueryDosDeviceW
KERNEL32.dll	896		OpenProcess
KERNEL32.dll	636		GetSystemWindowsDirectoryW
KERNEL32.dll	921		ProcessIdToSessionId
KERNEL32.dll	214		DeleteFileW
KERNEL32.dll	691		GlobalAlloc
KERNEL32.dll	143		CreateFileW
KERNEL32.dll	871		MultiByteToWideChar
KERNEL32.dll	698		GlobalFree
KERNEL32.dll	221		DeviceIoControl
KERNEL32.dll	679		GetVolumeInformationW
KERNEL32.dll	620		GetSystemDefaultLangID
KERNEL32.dll	840		LocalFree
KERNEL32.dll	633		GetSystemTimeAsFileTime
KERNEL32.dll	1297		WideCharToMultiByte
KERNEL32.dll	1126		SetFilePointer
KERNEL32.dll	1317		WriteFile
KERNEL32.dll	1358		lstrlenW
KERNEL32.dll	343		FlushFileBuffers
KERNEL32.dll	1217		TerminateThread
KERNEL32.dll	1271		WaitForMultipleObjects
KERNEL32.dll	1127		SetFilePointerEx
KERNEL32.dll	960		ReadFile
KERNEL32.dll	428		GetConsoleMode
KERNEL32.dll	452		GetCurrentThread
KERNEL32.dll	1177		SetThreadPriority
KERNEL32.dll	1149		SetPriorityClass
KERNEL32.dll	476		GetEnvironmentVariableW
KERNEL32.dll	609		GetShortPathNameW
KERNEL32.dll	831		LoadLibraryW
KERNEL32.dll	586		GetProcessHeap
KERNEL32.dll	659		GetTickCount
KERNEL32.dll	719		HeapFree
KERNEL32.dll	715		HeapAlloc
KERNEL32.dll	739		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	514		GetLastError
KERNEL32.dll	864		MoveFileExW
KERNEL32.dll	1202		Sleep
KERNEL32.dll	117		CopyFileW
KERNEL32.dll	129		CreateDirectoryW
KERNEL32.dll	1273		WaitForSingleObject
KERNEL32.dll	1113		SetEvent
KERNEL32.dll	133		CreateEventW
KERNEL32.dll	906		OutputDebugStringW
KERNEL32.dll	82		CloseHandle
KERNEL32.dll	676		GetVersionExW
KERNEL32.dll	825		LeaveCriticalSection
KERNEL32.dll	238		EnterCriticalSection
KERNEL32.dll	209		DeleteCriticalSection
KERNEL32.dll	738		InitializeCriticalSection
KERNEL32.dll	532		GetModuleFileNameW
KERNEL32.dll	448		GetCurrentProcess
KERNEL32.dll	536		GetModuleHandleW
KERNEL32.dll	581		GetProcAddress
KERNEL32.dll	935		QueryPerformanceCounter
KERNEL32.dll	449		GetCurrentProcessId
KERNEL32.dll	474		GetEnvironmentStringsW
KERNEL32.dll	410		GetConsoleCP
KERNEL32.dll	724		HeapSize
KERNEL32.dll	567		GetOEMCP
KERNEL32.dll	353		FreeEnvironmentStringsW
KERNEL32.dll	360		GetACP
KERNEL32.dll	778		IsValidCodePage
KERNEL32.dll	281		ExitProcess
KERNEL32.dll	271		EnumSystemLocalesW
KERNEL32.dll	667		GetUserDefaultLCID
KERNEL32.dll	780		IsValidLocale
KERNEL32.dll	518		GetLocaleInfoW
KERNEL32.dll	813		LCMapStringW
KERNEL32.dll	174		CreateSemaphoreW
KERNEL32.dll	611		GetStartupInfoW
KERNEL32.dll	1222		TlsFree
KERNEL32.dll	1200		SignalObjectAndWait
KERNEL32.dll	1107		SetEndOfFile
KERNEL32.dll	1224		TlsSetValue
KERNEL32.dll	1242		UnregisterWait
KERNEL32.dll	654		GetThreadPriority
KERNEL32.dll	1159		SetStdHandle
KERNEL32.dll	188		CreateTimerQueue
KERNEL32.dll	1013		RegisterWaitForSingleObject
KERNEL32.dll	553		GetNumaHighestNodeNumber
KERNEL32.dll	72		ChangeTimerQueueTimer
KERNEL32.dll	1243		UnregisterWaitEx
KERNEL32.dll	926		QueryDepthSList
KERNEL32.dll	750		InterlockedFlushSList
KERNEL32.dll	753		InterlockedPushEntrySList
KERNEL32.dll	752		InterlockedPopEntrySList
KERNEL32.dll	743		InitializeSListHead
KERNEL32.dll	1022		ReleaseSemaphore
KERNEL32.dll	232		DuplicateHandle
KERNEL32.dll	1263		VirtualProtect
KERNEL32.dll	1260		VirtualFree
KERNEL32.dll	1257		VirtualAlloc
KERNEL32.dll	533		GetModuleHandleA
KERNEL32.dll	355		FreeLibraryAndExitThread
KERNEL32.dll	354		FreeLibrary
KERNEL32.dll	657		GetThreadTimes
KERNEL32.dll	1212		SwitchToThread
KERNEL32.dll	1168		SetThreadAffinityMask
KERNEL32.dll	582		GetProcessAffinityMask
KERNEL32.dll	218		DeleteTimerQueueTimer
KERNEL32.dll	958		ReadConsoleW
KERNEL32.dll	1221		TlsAlloc
KERNEL32.dll	1216		TerminateProcess
KERNEL32.dll	751		InterlockedIncrement
KERNEL32.dll	747		InterlockedDecrement
KERNEL32.dll	453		GetCurrentThreadId
KERNEL32.dll	234		EncodePointer
KERNEL32.dll	202		DecodePointer
KERNEL32.dll	617		GetStringTypeW
KERNEL32.dll	722		HeapReAlloc
KERNEL32.dll	181		CreateThread
KERNEL32.dll	282		ExitThread
KERNEL32.dll	1043		ResumeThread
KERNEL32.dll	391		GetCommandLineW
KERNEL32.dll	768		IsDebuggerPresent
KERNEL32.dll	772		IsProcessorFeaturePresent
KERNEL32.dll	612		GetStdHandle
KERNEL32.dll	499		GetFileType
KERNEL32.dll	535		GetModuleHandleExW
KERNEL32.dll	1316		WriteConsoleW
KERNEL32.dll	830		LoadLibraryExW
KERNEL32.dll	945		RaiseException
KERNEL32.dll	1048		RtlUnwind
KERNEL32.dll	370		GetCPInfo
KERNEL32.dll	1223		TlsGetValue
KERNEL32.dll	189		CreateTimerQueueTimer
KERNEL32.dll	1235		UnhandledExceptionFilter
KERNEL32.dll	1189		SetUnhandledExceptionFilter
KERNEL32.dll	1139		SetLastError
USER32.dll	819		wsprintfW
ADVAPI32.dll	622		RegQueryValueExW
ADVAPI32.dll	706		SetTokenInformation
ADVAPI32.dll	116		ConvertStringSidToSidW
ADVAPI32.dll	223		DuplicateTokenEx
ADVAPI32.dll	124		CreateProcessAsUserW
ADVAPI32.dll	31		AdjustTokenPrivileges
ADVAPI32.dll	407		LookupPrivilegeValueW
ADVAPI32.dll	704		SetServiceStatus
ADVAPI32.dll	647		RegisterServiceCtrlHandlerExW
ADVAPI32.dll	712		StartServiceCtrlDispatcherW
ADVAPI32.dll	655		ReportEventW
ADVAPI32.dll	643		RegisterEventSourceW
ADVAPI32.dll	218		DeleteService
ADVAPI32.dll	92		ControlService
ADVAPI32.dll	253		EnumDependentServicesW
ADVAPI32.dll	713		StartServiceW
ADVAPI32.dll	553		QueryServiceStatusEx
ADVAPI32.dll	572		RegCreateKeyW
ADVAPI32.dll	78		ChangeServiceConfig2W
ADVAPI32.dll	129		CreateServiceW
ADVAPI32.dll	87		CloseServiceHandle
ADVAPI32.dll	507		OpenServiceW
ADVAPI32.dll	505		OpenSCManagerW
ADVAPI32.dll	219		DeregisterEventSource
ADVAPI32.dll	609		RegOpenKeyExW
ADVAPI32.dll	638		RegSetValueExW
ADVAPI32.dll	346		GetTokenInformation
ADVAPI32.dll	503		OpenProcessToken
ADVAPI32.dll	560		RegCloseKey
ADVAPI32.dll	569		RegCreateKeyExW
ADVAPI32.dll	612		RegOpenKeyW
SHELL32.dll	127		SHChangeNotify
SHELL32.dll	289		ShellExecuteExW
SHELL32.dll	195		SHGetFolderPathW
SHLWAPI.dll	179		SHDeleteKeyW
SHLWAPI.dll	69		PathFileExistsW
SHLWAPI.dll	324		StrStrIA
SHLWAPI.dll	336		StrTrimW
SHLWAPI.dll	293		StrCpyW
PSAPI.DLL	6		EnumProcesses
PSAPI.DLL	16		GetModuleFileNameExW
PSAPI.DLL	4		EnumProcessModules
USERENV.dll	4		DestroyEnvironmentBlock
USERENV.dll			CreateEnvironmentBlock
WININET.dll	116		InternetCrackUrlW
WININET.dll	105		InternetCheckConnectionW
WS2_32.dll		18
WS2_32.dll		111
WS2_32.dll		116
WS2_32.dll		151
WS2_32.dll		3
WS2_32.dll		16
WS2_32.dll		4
WS2_32.dll		9
WS2_32.dll		23
WS2_32.dll		115
WS2_32.dll		19
WS2_32.dll		52
WS2_32.dll		11
WS2_32.dll		10
WINHTTP.dll	4		WinHttpAddRequestHeaders
WINHTTP.dll	21		WinHttpReadData
WINHTTP.dll	9		WinHttpCrackUrl
WINHTTP.dll	14		WinHttpGetProxyForUrl
WINHTTP.dll	16		WinHttpOpenRequest
WINHTTP.dll	15		WinHttpOpen
WINHTTP.dll	18		WinHttpQueryDataAvailable
WINHTTP.dll	19		WinHttpQueryHeaders
WINHTTP.dll	7		WinHttpCloseHandle
WINHTTP.dll	8		WinHttpConnect
WINHTTP.dll	31		WinHttpWriteData
WINHTTP.dll	23		WinHttpSendRequest
WINHTTP.dll	13		WinHttpGetIEProxyConfigForCurrentUser
WINHTTP.dll	26		WinHttpSetOption
WINHTTP.dll	28		WinHttpSetTimeouts
WINHTTP.dll	22		WinHttpReceiveResponse
SensApi.dll	2		IsNetworkAlive

StringTable 080904b0

CompanyName	Cherished Technololgy LIMITED
FileDescription	WPM Service
FileVersion	17.8.0.3325
InternalName	wpm.exe
LegalCopyright	Copyright (C) 2013
OriginalFilename	wpm.exe
ProductName	wmp control
ProductVersion	17.8.0.3325

VS_FIXEDFILEINFO

FileVersion	17.8.0.3325
ProductVersion	17.8.0.3325
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	493568	EXE	01/14/2014 05:42:39	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

wprotectmanager.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 080904b0

VS_FIXEDFILEINFO

wprotectmanager.exe
-