filenameAnyProtect.exe
size21809664 (0x14cca00)
md5e20b6f06e2b48e423a50b5c372a46a36
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x118

Rich Header

lib idversiontimes used
152201157
1714021910
1704021970
1313072915
1473072943
10882
1583031948
17030319233
17130319405
1753031957
155303191
154303191
15101
157303191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x536bb5e6
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion10.0
SizeOfCode0x1ea400
SizeOfInitializedData0x12e2200
SizeOfUninitializedData0
AddressOfEntryPoint0x168c03
BaseOfCode0x1000
BaseOfData0x1ec000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x14d9000
SizeOfHeaders0x400
CheckSum0x14d0b6c
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0 2005

Sections

namevavsizeraw sizeflags
.text0x10000x1ea3100x1ea400R-X CODE
.rdata0x1ec0000x6d1030x6d200R-- IDATA
.data0x25a0000x1470c0xc600RW- IDATA
.rsrc0x26f0000x12252c40x1225400R-- IDATA
.reloc0x14950000x434e80x43600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x258ad00x633
IMPORT0x254fbc0x1b8
RESOURCE0x26f0000x12252c4
EXCEPTION00
SECURITY00
BASERELOC0x14950000x254a0
DEBUG0x1ed0700x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x2291100x40
Bound_IAT00
IAT0x1ec0000xb40
Delay_IAT00
CLR_Header00
typenamesizecp
DATA#101188245741252
DATA#1021599801252
CURSOR#53081252
CURSOR#61801252
CURSOR#73081252
CURSOR#83081252
CURSOR#93081252
CURSOR#103081252
CURSOR#113081252
CURSOR#123081252
CURSOR#133081252
CURSOR#143081252
CURSOR#153081252
CURSOR#163081252
CURSOR#173081252
CURSOR#183081252
CURSOR#193081252
CURSOR#203081252
BITMAP#309941841252
BITMAP#309963241252
ICON#1164241252
ICON#241361252
ICON#323441252
ICON#410641252
DIALOG#1021701252
DIALOG#1302641252
DIALOG#307212321252
DIALOG#30734521252
STRING#38411301252
STRING#3842421252
STRING#38433881252
STRING#385712541252
STRING#38586121252
STRING#38597301252
STRING#38601381252
STRING#38651721252
STRING#38662221252
STRING#386711921252
STRING#38685521252
STRING#3869441252
STRING#388713401252
GROUP_CURSOR#30977341252
GROUP_CURSOR#30998201252
GROUP_CURSOR#30999201252
GROUP_CURSOR#31000201252
GROUP_CURSOR#31001201252
GROUP_CURSOR#31002201252
GROUP_CURSOR#31003201252
GROUP_CURSOR#31004201252
GROUP_CURSOR#31005201252
GROUP_CURSOR#31006201252
GROUP_CURSOR#31007201252
GROUP_CURSOR#31008201252
GROUP_CURSOR#31009201252
GROUP_CURSOR#31010201252
GROUP_CURSOR#31011201252
GROUP_ICON#128621252
VERSION#17641252
MANIFEST#16071252
#240#1023221252
idlangstring
614401033Open
614411033Save As
614421033All Files (*.*)
614431033Untitled
614461033an unnamed file
614571033&Hide
614721033No error message is available.
614731033Attempted an unsupported operation.
614741033A required resource was unavailable.
614751033Out of memory.
614761033An unknown error has occurred.
614771033Encountered an improper argument.
616961033Incorrect filename.
616971033Failed to open document.
616981033Failed to save document.
616991033Save changes to %1?
617001033Failed to create empty document.
617011033The file is too large to open.
617021033Could not start print job.
617031033Failed to launch help.
617041033Internal application error.
617051033Command failed.
617061033Insufficient memory to perform operation.
617071033System registry entries have been removed and the INI file (if any) was deleted.
617081033Not all of the system registry entries (or INI file) were removed.
617091033This program requires the file %s, which was not found on this system.
617101033This program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
617121033Enter an integer.
617131033Enter a number.
617141033Enter an integer between %1 and %2.
617151033Enter a number between %1 and %2.
617161033Enter no more than %1 characters.
617171033Select a button.
617181033Enter an integer between 0 and 255.
617191033Enter a positive integer.
617201033Enter a date and/or time.
617211033Enter a currency.
617221033Enter a GUID.
617231033Enter a time.
617241033Enter a date.
617281033Unexpected file format.
617291033%1 Cannot find this file. Verify that the correct path and file name are given.
617301033Destination disk drive is full.
617311033Unable to read from %1, it is opened by someone else.
617321033Unable to write to %1, it is read-only or opened by someone else.
617331033Encountered an unexpected error while reading %1.
617341033Encountered an unexpected error while writing %1.
617441033%1: %2 Continue running script?
617451033Dispatch exception: %1
618361033Unable to read write-only property.
618371033Unable to write read-only property.
618401033Unable to load mail system support.
618411033Mail system DLL is invalid.
618421033Send Mail failed to send message.
618561033No error occurred.
618571033An unknown error occurred while accessing %1.
618581033%1 was not found.
618591033%1 contains an incorrect path.
618601033Could not open %1 because there are too many open files.
618611033Access to %1 was denied.
618621033An incorrect file handle was associated with %1.
618631033Could not remove %1 because it is the current directory.
618641033Could not create %1 because the directory is full.
618651033Seek failed on %1
618661033Encountered a hardware I/O error while accessing %1.
618671033Encountered a sharing violation while accessing %1.
618681033Encountered a locking violation while accessing %1.
618691033Disk full while accessing %1.
618701033Attempted to access %1 past its end.
618721033No error occurred.
618731033An unknown error occurred while accessing %1.
618741033Attempted to write to the reading %1.
618751033Attempted to access %1 past its end.
618761033Attempted to read from the writing %1.
618771033%1 has a bad format.
618781033%1 contained an unexpected object.
618791033%1 contains an incorrect schema.
618881033pixels
621771033Uncheck
621781033Check
621791033Mixed
621801033One or more auto-saved documents were found.
621811033These are more recently saved than the currently open documents and contain changes that were made before the application closed.
621821033Do you want to recover these auto-saved documents?
621831033Note that if you choose to recover the auto-saved documents, you must explicitly save them to overwrite the original documents. If you choose to not recover the auto-saved versions, they will be deleted.
621841033Recover the auto-saved documents Open the auto-saved versions instead of the explicitly saved versions
621851033Don't recover the auto-saved documents Use the last explicitly saved versions of the documents
621861033%s [Recovered]
module_namehintordfunction_name
KERNEL32.dll516GetLocaleInfoA
KERNEL32.dll136CreateFileA
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll664GetTimeZoneInformation
KERNEL32.dll428GetConsoleMode
KERNEL32.dll504GetFullPathNameA
KERNEL32.dll307FindFirstFileExA
KERNEL32.dll466GetDriveTypeA
KERNEL32.dll492GetFileInformationByHandle
KERNEL32.dll963ReadProcessMemory
KERNEL32.dll549GetNativeSystemInfo
KERNEL32.dll398GetComputerNameExW
KERNEL32.dll269EnumSystemLocalesA
KERNEL32.dll190CreateToolhelp32Snapshot
KERNEL32.dll920Process32NextW
KERNEL32.dll859Module32FirstW
KERNEL32.dll588GetProcessId
KERNEL32.dll918Process32FirstW
KERNEL32.dll23AttachConsole
KERNEL32.dll351FreeConsole
KERNEL32.dll16AllocConsole
KERNEL32.dll284ExpandEnvironmentStringsA
KERNEL32.dll828LoadLibraryA
KERNEL32.dll1271WaitForMultipleObjects
KERNEL32.dll909PeekNamedPipe
KERNEL32.dll675GetVersionExA
KERNEL32.dll1205SleepEx
KERNEL32.dll349FormatMessageA
KERNEL32.dll780IsValidLocale
KERNEL32.dll586GetProcessHeap
KERNEL32.dll1110SetEnvironmentVariableA
KERNEL32.dll410GetConsoleCP
KERNEL32.dll617GetStringTypeW
KERNEL32.dll813LCMapStringW
KERNEL32.dll778IsValidCodePage
KERNEL32.dll567GetOEMCP
KERNEL32.dll360GetACP
KERNEL32.dll370GetCPInfo
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll718HeapDestroy
KERNEL32.dll717HeapCreate
KERNEL32.dll1135SetHandleCount
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll612GetStdHandle
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll499GetFileType
KERNEL32.dll1159SetStdHandle
KERNEL32.dll1265VirtualQuery
KERNEL32.dll627GetSystemInfo
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll724HeapSize
KERNEL32.dll721HeapQueryInformation
KERNEL32.dll722HeapReAlloc
KERNEL32.dll945RaiseException
KERNEL32.dll281ExitProcess
KERNEL32.dll1048RtlUnwind
KERNEL32.dll715HeapAlloc
KERNEL32.dll181CreateThread
KERNEL32.dll282ExitThread
KERNEL32.dll719HeapFree
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll202DecodePointer
KERNEL32.dll234EncodePointer
KERNEL32.dll611GetStartupInfoW
KERNEL32.dll723HeapSetInformation
KERNEL32.dll333FindResourceExW
KERNEL32.dll667GetUserDefaultLCID
KERNEL32.dll1263VirtualProtect
KERNEL32.dll1053SearchPathW
KERNEL32.dll601GetProfileIntW
KERNEL32.dll563GetNumberFormatW
KERNEL32.dll687GetWindowsDirectoryW
KERNEL32.dll498GetFileTime
KERNEL32.dll292FileTimeToLocalFileTime
KERNEL32.dll487GetFileAttributesExW
KERNEL32.dll1112SetErrorMode
KERNEL32.dll1213SystemTimeToFileTime
KERNEL32.dll700GlobalGetAtomNameW
KERNEL32.dll507GetFullPathNameW
KERNEL32.dll679GetVolumeInformationW
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll232DuplicateHandle
KERNEL32.dll496GetFileSize
KERNEL32.dll1236UnlockFile
KERNEL32.dll850LockFile
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll1126SetFilePointer
KERNEL32.dll1349lstrcmpiW
KERNEL32.dll652GetThreadLocale
KERNEL32.dll1352lstrcpyW
KERNEL32.dll1222TlsFree
KERNEL32.dll843LocalReAlloc
KERNEL32.dll1224TlsSetValue
KERNEL32.dll1221TlsAlloc
KERNEL32.dll738InitializeCriticalSection
KERNEL32.dll701GlobalHandle
KERNEL32.dll705GlobalReAlloc
KERNEL32.dll1223TlsGetValue
KERNEL32.dll836LocalAlloc
KERNEL32.dll697GlobalFlags
KERNEL32.dll447GetCurrentDirectoryW
KERNEL32.dll695GlobalFindAtomW
KERNEL32.dll676GetVersionExW
KERNEL32.dll100CompareStringW
KERNEL32.dll1017ReleaseActCtx
KERNEL32.dll120CreateActCtxW
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll690GlobalAddAtomW
KERNEL32.dll578GetPrivateProfileStringW
KERNEL32.dll1323WritePrivateProfileStringW
KERNEL32.dll572GetPrivateProfileIntW
KERNEL32.dll1043ResumeThread
KERNEL32.dll1177SetThreadPriority
KERNEL32.dll117CopyFileW
KERNEL32.dll706GlobalSize
KERNEL32.dll350FormatMessageW
KERNEL32.dll840LocalFree
KERNEL32.dll870MulDiv
KERNEL32.dll709GlobalUnlock
KERNEL32.dll357FreeResource
KERNEL32.dll698GlobalFree
KERNEL32.dll1345lstrcmpA
KERNEL32.dll693GlobalDeleteAtom
KERNEL32.dll452GetCurrentThread
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll670GetUserDefaultUILanguage
KERNEL32.dll105ConvertDefaultLocale
KERNEL32.dll622GetSystemDefaultUILanguage
KERNEL32.dll518GetLocaleInfoW
KERNEL32.dll2ActivateActCtx
KERNEL32.dll831LoadLibraryW
KERNEL32.dll196DeactivateActCtx
KERNEL32.dll1139SetLastError
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll702GlobalLock
KERNEL32.dll1346lstrcmpW
KERNEL32.dll691GlobalAlloc
KERNEL32.dll581GetProcAddress
KERNEL32.dll354FreeLibrary
KERNEL32.dll960ReadFile
KERNEL32.dll1107SetEndOfFile
KERNEL32.dll1317WriteFile
KERNEL32.dll1127SetFilePointerEx
KERNEL32.dll221DeviceIoControl
KERNEL32.dll631GetSystemTime
KERNEL32.dll293FileTimeToSystemTime
KERNEL32.dll1358lstrlenW
KERNEL32.dll467GetDriveTypeW
KERNEL32.dll520GetLogicalDriveStringsW
KERNEL32.dll325FindNextFileW
KERNEL32.dll313FindFirstFileW
KERNEL32.dll302FindClose
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll668GetUserDefaultLangID
KERNEL32.dll391GetCommandLineW
KERNEL32.dll659GetTickCount
KERNEL32.dll748InterlockedExchange
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll1113SetEvent
KERNEL32.dll133CreateEventW
KERNEL32.dll168CreateProcessW
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll1216TerminateProcess
KERNEL32.dll1202Sleep
KERNEL32.dll1326WriteProcessMemory
KERNEL32.dll1261VirtualFreeEx
KERNEL32.dll1258VirtualAllocEx
KERNEL32.dll896OpenProcess
KERNEL32.dll1357lstrlenA
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll497GetFileSizeEx
KERNEL32.dll143CreateFileW
KERNEL32.dll852LockResource
KERNEL32.dll1201SizeofResource
KERNEL32.dll833LoadResource
KERNEL32.dll334FindResourceW
KERNEL32.dll490GetFileAttributesW
KERNEL32.dll285ExpandEnvironmentStringsW
KERNEL32.dll214DeleteFileW
KERNEL32.dll643GetTempFileNameW
KERNEL32.dll645GetTempPathW
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll82CloseHandle
KERNEL32.dll514GetLastError
KERNEL32.dll871MultiByteToWideChar
USER32.dll774UnregisterClassW
USER32.dll60CharUpperW
USER32.dll163DestroyIcon
USER32.dll465IsIconic
USER32.dll525MessageBeep
USER32.dll353GetNextDlgGroupItem
USER32.dll447InvalidateRgn
USER32.dll445IntersectRect
USER32.dll686SetRect
USER32.dll468IsRectEmpty
USER32.dll82CopyAcceleratorTableW
USER32.dll549OffsetRect
USER32.dll49CharNextW
USER32.dll380GetSysColorBrush
USER32.dll664SetLayeredWindowAttributes
USER32.dll230EnumDisplayMonitors
USER32.dll687SetRectEmpty
USER32.dll483KillTimer
USER32.dll699SetTimer
USER32.dll579RealChildWindowFromPoint
USER32.dll158DeleteMenu
USER32.dll715SetWindowTextW
USER32.dll461IsDialogMessageW
USER32.dll62CheckDlgButton
USER32.dll627SendDlgItemMessageW
USER32.dll626SendDlgItemMessageA
USER32.dll809WinHelpW
USER32.dll457IsChild
USER32.dll272GetClassLongW
USER32.dll658SetFocus
USER32.dll301GetForegroundWindow
USER32.dll13BeginDeferWindowPos
USER32.dll217EndDeferWindowPos
USER32.dll389GetTopWindow
USER32.dll348GetMessageTime
USER32.dll347GetMessagePos
USER32.dll538MonitorFromWindow
USER32.dll351GetMonitorInfoW
USER32.dll521MapWindowPoints
USER32.dll624ScrollWindow
USER32.dll758TrackPopupMenu
USER32.dll668SetMenu
USER32.dll690SetScrollRange
USER32.dll375GetScrollRange
USER32.dll689SetScrollPos
USER32.dll374GetScrollPos
USER32.dll659SetForegroundWindow
USER32.dll732ShowScrollBar
USER32.dll110CreateWindowExW
USER32.dll269GetClassInfoExW
USER32.dll270GetClassInfoW
USER32.dll590RegisterClassW
USER32.dll3AdjustWindowRectEx
USER32.dll243EqualRect
USER32.dll157DeferWindowPos
USER32.dll373GetScrollInfo
USER32.dll688SetScrollInfo
USER32.dll437InflateRect
USER32.dll709SetWindowPlacement
USER32.dll294GetDlgCtrlID
USER32.dll331GetMenu
USER32.dll379GetSysColor
USER32.dll220EndPaint
USER32.dll14BeginPaint
USER32.dll402GetWindowDC
USER32.dll613ReleaseDC
USER32.dll289GetDC
USER32.dll621ScreenToClient
USER32.dll198DrawFrameControl
USER32.dll196DrawFocusRect
USER32.dll756ToUnicodeEx
USER32.dll424GrayStringW
USER32.dll207DrawTextExW
USER32.dll520MapVirtualKeyW
USER32.dll318GetKeyboardLayout
USER32.dll322GetKeyboardState
USER32.dll611RegisterWindowMessageW
USER32.dll493LoadIconW
USER32.dll208DrawTextW
USER32.dll750TabbedTextOutW
USER32.dll768UnhookWindowsHookEx
USER32.dll274GetClassNameW
USER32.dll785UpdateWindow
USER32.dll276GetClientRect
USER32.dll246FillRect
USER32.dll204DrawStateW
USER32.dll731ShowOwnedPopups
USER32.dll719SetWindowsHookExW
USER32.dll28CallNextHookEx
USER32.dll349GetMessageW
USER32.dll764TranslateMessage
USER32.dll175DispatchMessageW
USER32.dll563PeekMessageW
USER32.dll796ValidateRect
USER32.dll672SetMenuItemBitmaps
USER32.dll333GetMenuCheckMarkDimensions
USER32.dll487LoadBitmapW
USER32.dll300GetFocus
USER32.dll535ModifyMenuW
USER32.dll214EnableMenuItem
USER32.dll769UnionRect
USER32.dll215EnableScrollBar
USER32.dll782UpdateLayeredWindow
USER32.dll536MonitorFromPoint
USER32.dll164DestroyMenu
USER32.dll466IsMenu
USER32.dll107CreatePopupMenu
USER32.dll340GetMenuItemInfoW
USER32.dll670SetMenuDefaultItem
USER32.dll335GetMenuDefaultItem
USER32.dll678SetParent
USER32.dll160DestroyAcceleratorTable
USER32.dll644SetClassLongW
USER32.dll200DrawIconEx
USER32.dll63CheckMenuItem
USER32.dll342GetMenuState
USER32.dll344GetMenuStringW
USER32.dll10AppendMenuW
USER32.dll338GetMenuItemID
USER32.dll442InsertMenuW
USER32.dll337GetMenuItemCount
USER32.dll378GetSubMenu
USER32.dll615RemoveMenu
USER32.dll291GetDesktopWindow
USER32.dll503LoadMenuW
USER32.dll381GetSystemMenu
USER32.dll711SetWindowRgn
USER32.dll586RedrawWindow
USER32.dll812WindowFromPoint
USER32.dll543NotifyWinEvent
USER32.dll263GetAsyncKeyState
USER32.dll85CopyRect
USER32.dll482IsZoomed
USER32.dll636SendMessageW
USER32.dll567PostQuitMessage
USER32.dll566PostMessageW
USER32.dll533MessageBoxW
USER32.dll216EnableWindow
USER32.dll218EndDialog
USER32.dll172DialogBoxParamW
USER32.dll363GetPropW
USER32.dll30CallWindowProcW
USER32.dll708SetWindowLongW
USER32.dll617RemovePropW
USER32.dll264GetCapture
USER32.dll446InvalidateRect
USER32.dll640SetCapture
USER32.dll412GetWindowRect
USER32.dll71ClientToScreen
USER32.dll576PtInRect
USER32.dll612ReleaseCapture
USER32.dll491LoadCursorW
USER32.dll648SetCursor
USER32.dll356GetParent
USER32.dll406GetWindowLongW
USER32.dll685SetPropW
USER32.dll299GetDoubleClickTime
USER32.dll589RegisterClassExW
USER32.dll295GetDlgItem
USER32.dll420GetWindowThreadProcessId
USER32.dll250FindWindowW
USER32.dll156DefWindowProcW
USER32.dll166DestroyWindow
USER32.dll526MessageBoxA
USER32.dll418GetWindowTextLengthW
USER32.dll419GetWindowTextW
USER32.dll249FindWindowExW
USER32.dll748SystemParametersInfoW
USER32.dll710SetWindowPos
USER32.dll382GetSystemMetrics
USER32.dll539MoveWindow
USER32.dll242EnumWindows
USER32.dll480IsWindowVisible
USER32.dll260GetAncestor
USER32.dll324GetLastActivePopup
USER32.dll387GetTitleBarInfo
USER32.dll735ShowWindow
USER32.dll288GetCursorPos
USER32.dll317GetKeyState
USER32.dll411GetWindowPlacement
USER32.dll516MapDialogRect
USER32.dll705SetWindowContextHelpId
USER32.dll398GetWindow
USER32.dll354GetNextDlgTabItem
USER32.dll476IsWindowEnabled
USER32.dll475IsWindow
USER32.dll97CreateDialogIndirectParamW
USER32.dll485LoadAcceleratorsW
USER32.dll88CreateAcceleratorTableW
USER32.dll650SetCursorPos
USER32.dll16BringWindowToTop
USER32.dll639SetActiveWindow
USER32.dll256GetActiveWindow
USER32.dll509LockWindowUpdate
USER32.dll592RegisterClipboardFormatW
USER32.dll448InvertRect
USER32.dll425HideCaret
USER32.dll307GetIconInfo
USER32.dll84CopyImage
USER32.dll495LoadImageW
USER32.dll550OpenClipboard
USER32.dll646SetClipboardData
USER32.dll73CloseClipboard
USER32.dll213EmptyClipboard
USER32.dll253FrameRect
USER32.dll762TranslateAcceleratorW
USER32.dll441InsertMenuItemW
USER32.dll620ReuseDDElParam
USER32.dll772UnpackDDElParam
USER32.dll83CopyIcon
USER32.dll59CharUpperBuffW
USER32.dll569PostThreadMessageW
USER32.dll807WaitMessage
USER32.dll151DefFrameProcW
USER32.dll153DefMDIChildProcW
USER32.dll201DrawMenuBar
USER32.dll763TranslateMDISysAccel
USER32.dll106CreateMenu
USER32.dll458IsClipboardFormatAvailable
USER32.dll391GetUpdateRect
USER32.dll413GetWindowRgn
USER32.dll199DrawIcon
USER32.dll223EnumChildWindows
USER32.dll162DestroyCursor
USER32.dll742SubtractRect
USER32.dll519MapVirtualKeyExW
USER32.dll316GetKeyNameTextW
USER32.dll454IsCharLowerW
USER32.dll195DrawEdge
GDI32.dll310ExtSelectClipRgn
GDI32.dll227DeleteDC
GDI32.dll74CreatePatternBrush
GDI32.dll48CreateCompatibleDC
GDI32.dll632SelectPalette
GDI32.dll508GetObjectType
GDI32.dll75CreatePen
GDI32.dll67CreateHatchBrush
GDI32.dll54CreateDIBitmap
GDI32.dll47CreateCompatibleBitmap
GDI32.dll80CreateRectRgnIndirect
GDI32.dll550GetTextMetricsW
GDI32.dll294EnumFontFamiliesW
GDI32.dll535GetTextCharsetInfo
GDI32.dll425GetBkColor
GDI32.dll536GetTextColor
GDI32.dll524GetRgnBox
GDI32.dll542GetTextExtentPoint32W
GDI32.dll672SetRectRgn
GDI32.dll34CombineRgn
GDI32.dll496GetMapMode
GDI32.dll582PatBlt
GDI32.dll164DPtoLP
GDI32.dll81CreateRoundRectRgn
GDI32.dll53CreateDIBSection
GDI32.dll78CreatePolygonRgn
GDI32.dll56CreateEllipticRgn
GDI32.dll599Polyline
GDI32.dll237Ellipse
GDI32.dll312ExtTextOutW
GDI32.dll73CreatePalette
GDI32.dll512GetPaletteEntries
GDI32.dll503GetNearestPaletteIndex
GDI32.dll604RealizePalette
GDI32.dll530GetSystemPaletteEntries
GDI32.dll573OffsetRgn
GDI32.dll647SetDIBColorTable
GDI32.dll691StretchBlt
GDI32.dll667SetPixel
GDI32.dll293EnumFontFamiliesExW
GDI32.dll309ExtFloodFill
GDI32.dll666SetPaletteEntries
GDI32.dll564LPtoDP
GDI32.dll556GetWindowOrgEx
GDI32.dll553GetViewportOrgEx
GDI32.dll601PtInRegion
GDI32.dll322FillRgn
GDI32.dll327FrameRgn
GDI32.dll427GetBoundsRect
GDI32.dll548GetTextFaceW
GDI32.dll669SetPixelV
GDI32.dll697TextOutW
GDI32.dll606RectVisible
GDI32.dll602PtVisible
GDI32.dll516GetPixel
GDI32.dll19BitBlt
GDI32.dll555GetWindowExtEx
GDI32.dll552GetViewportExtEx
GDI32.dll79CreateRectRgn
GDI32.dll629SelectClipRgn
GDI32.dll657SetLayout
GDI32.dll493GetLayout
GDI32.dll676SetTextAlign
GDI32.dll570MoveToEx
GDI32.dll566LineTo
GDI32.dll626ScaleWindowExtEx
GDI32.dll684SetWindowExtEx
GDI32.dll575OffsetWindowOrgEx
GDI32.dll685SetWindowOrgEx
GDI32.dll625ScaleViewportExtEx
GDI32.dll680SetViewportExtEx
GDI32.dll574OffsetViewportOrgEx
GDI32.dll681SetViewportOrgEx
GDI32.dll631SelectObject
GDI32.dll607Rectangle
GDI32.dll302Escape
GDI32.dll560IntersectClipRect
GDI32.dll305ExcludeClipRect
GDI32.dll448GetClipBox
GDI32.dll660SetMapMode
GDI32.dll671SetROP2
GDI32.dll670SetPolyFillMode
GDI32.dll639SetBkMode
GDI32.dll638SetBkColor
GDI32.dll617RestoreDC
GDI32.dll624SaveDC
GDI32.dll525GetStockObject
GDI32.dll84CreateSolidBrush
GDI32.dll41CreateBitmap
GDI32.dll50CreateDCW
GDI32.dll40CopyMetaFileW
GDI32.dll459GetDeviceCaps
GDI32.dll64CreateFontIndirectW
GDI32.dll509GetObjectW
GDI32.dll230DeleteObject
GDI32.dll598Polygon
GDI32.dll678SetTextColor
MSIMG32.dllAlphaBlend
MSIMG32.dll3TransparentBlt
COMDLG32.dll10GetFileTitleW
WINSPOOL.DRV144OpenPrinterW
WINSPOOL.DRV29ClosePrinter
WINSPOOL.DRV78DocumentPropertiesW
ADVAPI32.dll503OpenProcessToken
ADVAPI32.dll343GetSidSubAuthority
ADVAPI32.dll344GetSidSubAuthorityCount
ADVAPI32.dll346GetTokenInformation
ADVAPI32.dll124CreateProcessAsUserW
ADVAPI32.dll706SetTokenInformation
ADVAPI32.dll223DuplicateTokenEx
ADVAPI32.dll32AllocateAndInitializeSid
ADVAPI32.dll288FreeSid
ADVAPI32.dll310GetLengthSid
ADVAPI32.dll616RegQueryInfoKeyW
ADVAPI32.dll176CryptAcquireContextA
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll594RegEnumValueW
ADVAPI32.dll623RegQueryValueW
ADVAPI32.dll592RegEnumKeyW
ADVAPI32.dll580RegDeleteKeyW
ADVAPI32.dll584RegDeleteValueW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll357GetUserNameW
ADVAPI32.dll203CryptReleaseContext
ADVAPI32.dll182CryptDestroyHash
ADVAPI32.dll196CryptGetHashParam
ADVAPI32.dll200CryptHashData
ADVAPI32.dll179CryptCreateHash
ADVAPI32.dll177CryptAcquireContextW
SHELL32.dll123SHBrowseForFolderW
SHELL32.dll31DragQueryFileW
SHELL32.dll27DragFinish
SHELL32.dll114SHAppBarMessage
SHELL32.dll223SHGetSpecialFolderLocation
SHELL32.dll215SHGetPathFromIDListW
SHELL32.dll182SHGetDesktopFolder
SHELL32.dll189SHGetFileInfoW
SHELL32.dll195SHGetFolderPathW
SHELL32.dll290ShellExecuteW
COMCTL32.dll99ImageList_GetIconSize
SHLWAPI.dll113PathIsUNCW
SHLWAPI.dll151PathStripToRootW
SHLWAPI.dll73PathFindFileNameW
SHLWAPI.dll71PathFindExtensionW
SHLWAPI.dll291StrCmpW
SHLWAPI.dll8AssocQueryStringW
SHLWAPI.dll139PathRemoveFileSpecW
ole32.dll345RevokeDragDrop
ole32.dll71CoLockObjectExternal
ole32.dll343RegisterDragDrop
ole32.dll303OleGetClipboard
ole32.dll86CoRegisterMessageFilter
ole32.dll95CoRevokeClassObject
ole32.dll312OleLockRunning
ole32.dll206IsAccelerator
ole32.dll328OleTranslateAccelerator
ole32.dll297OleDestroyMenuDescriptor
ole32.dll295OleCreateMenuDescriptor
ole32.dll140DoDragDrop
ole32.dll301OleFlushClipboard
ole32.dll308OleIsCurrentClipboard
ole32.dll134CreateStreamOnHGlobal
ole32.dll63CoInitializeEx
ole32.dll29CoFreeUnusedLibraries
ole32.dll128CreateILockBytesOnHGlobal
ole32.dll360StgCreateDocfileOnILockBytes
ole32.dll38CoGetClassObject
ole32.dll300OleDuplicateData
ole32.dll103CoTaskMemAlloc
ole32.dll344ReleaseStgMedium
ole32.dll104CoTaskMemFree
ole32.dll8CLSIDFromString
ole32.dll6CLSIDFromProgID
ole32.dll108CoUninitialize
ole32.dll16CoCreateInstance
ole32.dll62CoInitialize
ole32.dll377StringFromGUID2
ole32.dll15CoCreateGuid
ole32.dll329OleUninitialize
ole32.dll306OleInitialize
ole32.dll373StgOpenStorageOnILockBytes
OLEAUT32.dll16
OLEAUT32.dll184
OLEAUT32.dll185
OLEAUT32.dll420
OLEAUT32.dll7
OLEAUT32.dll8
OLEAUT32.dll12
OLEAUT32.dll9
OLEAUT32.dll4
OLEAUT32.dll2
OLEAUT32.dll114
OLEAUT32.dll6
OLEAUT32.dll10
OLEAUT32.dll200
oledlg.dll3OleUIBusyW
gdiplus.dll176GdipDrawImageI
gdiplus.dll289GdipGetImageGraphicsContext
gdiplus.dll46GdipBitmapUnlockBits
gdiplus.dll43GdipBitmapLockBits
gdiplus.dll80GdipCreateBitmapFromScan0
gdiplus.dll81GdipCreateBitmapFromStream
gdiplus.dll293GdipGetImagePalette
gdiplus.dll294GdipGetImagePaletteSize
gdiplus.dll295GdipGetImagePixelFormat
gdiplus.dll290GdipGetImageHeight
gdiplus.dll300GdipGetImageWidth
gdiplus.dll54GdipCloneImage
gdiplus.dll184GdipDrawImageRectI
gdiplus.dll536GdipSetInterpolationMode
gdiplus.dll628GdiplusShutdown
gdiplus.dll629GdiplusStartup
gdiplus.dll77GdipCreateBitmapFromHBITMAP
gdiplus.dll152GdipDisposeImage
gdiplus.dll144GdipDeleteGraphics
gdiplus.dll33GdipAlloc
gdiplus.dll237GdipFree
gdiplus.dll91GdipCreateFromHDC
WS2_32.dll57
WS2_32.dll10
WS2_32.dll13
WS2_32.dll1
WS2_32.dll17
WS2_32.dll20
WS2_32.dll137getaddrinfo
WS2_32.dll136freeaddrinfo
WS2_32.dll4
WS2_32.dll23
WS2_32.dll3
WS2_32.dll5
WS2_32.dll7
WS2_32.dll9
WS2_32.dll2
WS2_32.dll15
WS2_32.dll6
WS2_32.dll21
WS2_32.dll116
WS2_32.dll115
WS2_32.dll112
WS2_32.dll151
WS2_32.dll111
WS2_32.dll18
WS2_32.dll16
WS2_32.dll19
WS2_32.dll54WSAIoctl
WLDAP32.dll211
WLDAP32.dll143
WLDAP32.dll60
WLDAP32.dll50
WLDAP32.dll26
WLDAP32.dll30
WLDAP32.dll32
WLDAP32.dll22
WLDAP32.dll79
WLDAP32.dll200
WLDAP32.dll33
WLDAP32.dll301
WLDAP32.dll27
WLDAP32.dll41
WLDAP32.dll46
WLDAP32.dll35
CRYPT32.dll217CryptStringToBinaryW
VERSION.dll5GetFileVersionInfoSizeW
VERSION.dll6GetFileVersionInfoW
VERSION.dll14VerQueryValueW
OLEACC.dll3AccessibleObjectFromWindow
OLEACC.dll4CreateStdAccessibleObject
OLEACC.dll20LresultFromObject
IMM32.dll74ImmGetOpenStatus
IMM32.dll56ImmGetContext
IMM32.dll104ImmReleaseContext
WINMM.dll9PlaySoundW
ordentry_vafunction_name
10x189fd0curl_easy_cleanup
20x18a050curl_easy_duphandle
30x18b150curl_easy_escape
40x18a030curl_easy_getinfo
50x189dc0curl_easy_init
60x18a2d0curl_easy_pause
70x189e30curl_easy_perform
80x18a480curl_easy_recv
90x18a220curl_easy_reset
100x18a4d0curl_easy_send
110x189e00curl_easy_setopt
120x18a540curl_easy_strerror
130x18b320curl_easy_unescape
140x18b3a0curl_escape
150x1b6f90curl_formadd
160x1b71a0curl_formfree
170x1b7b10curl_formget
180x18b380curl_free
190x1b4240curl_getdate
200x1b0fa0curl_getenv
210x189d80curl_global_cleanup
220x189c70curl_global_init
230x189d00curl_global_init_mem
240x199880curl_maprintf
250x1999e0curl_mfprintf
260x1999b0curl_mprintf
270x198dc0curl_msnprintf
280x199980curl_msprintf
290x193760curl_multi_add_handle
300x193620curl_multi_assign
310x192e90curl_multi_cleanup
320x192d00curl_multi_fdset
330x192f90curl_multi_info_read
340x192b90curl_multi_init
350x194c30curl_multi_perform
360x193dd0curl_multi_remove_handle
370x193100curl_multi_setopt
380x194f10curl_multi_socket
390x194f40curl_multi_socket_action
400x194f80curl_multi_socket_all
410x18a900curl_multi_strerror
420x1932b0curl_multi_timeout
430x193910curl_multi_wait
440x199900curl_mvaprintf
450x199a60curl_mvfprintf
460x199a30curl_mvprintf
470x198d60curl_mvsnprintf
480x199a00curl_mvsprintf
490x19a970curl_share_cleanup
500x19a7f0curl_share_init
510x19a810curl_share_setopt
520x18a980curl_share_strerror
530x195db0curl_slist_append
540x195df0curl_slist_free_all
550x1b33e0curl_strequal
560x1b3400curl_strnequal
570x18b3c0curl_unescape
module_nameAnyProtect.exe
flags0
timestamp2014-05-08 16:50:28
version0.0
ordinal_base1
nFunctions57
nNames57
Names(57)0x258bdc
Functions(57)0x258af8
NameOrdinals(57)0x258cc0

StringTable 040904b0

CompanyNameAnyProtect by CMI
FileDescriptionAnyProtect
FileVersion1.0.0.1
InternalNameAnyProtect.exe
LegalCopyright2013 (C)
OriginalFilenameAnyProtect.exe
ProductNameAnyProtect
ProductVersion1.0.0.1
CommentsAnyProtect Scanner

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d021804080BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 21809664 bytes (21 MiB)


--
Type = PE
Physical Size = 21809664
CPU = x86
Characteristics = Executable 32-bit
Created = 2014-05-08 16:50:46
Headers Size = 1024
Checksum = 21826412
Name = AnyProtect.exe
Image Size = 21860352
Section Alignment = 4096
File Alignment = 512
Code Size = 2008064
Initialized Data Size = 19800576
Uninitialized Data Size = 0
Linker Version = 10.0
OS Version = 5.1
Image Version = 0.0
Subsystem Version = 5.1
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 1.0.0.1
ProductVersion: 1.0.0.1
CompanyName: AnyProtect by CMI
FileDescription: AnyProtect
InternalName: AnyProtect.exe
LegalCopyright: 2013 (C)
OriginalFilename: AnyProtect.exe
ProductName: AnyProtect
Comments: AnyProtect Scanner
----
Path = .rsrc/1058/DATA/101
Size = 18824574
Packed Size = 18824574
--
Path = .rsrc/1058/DATA/101
Type = SWFc

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
                    .....     19189085               101~.swf
------------------- ----- ------------ ------------  ------------------------
                              19189085     21809664  1 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK