filenameUPX
size9065984 (0x8a5600)
md5e536a98fe4e10e95a8c4ac76fb50a317
typePE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x50
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0x1a
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x532864ca
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x818f
Magic0x10b
LinkerVersion2.25
SizeOfCode0x386000
SizeOfInitializedData0x8000
SizeOfUninitializedData0x518000
AddressOfEntryPoint0xfdfd4
BaseOfCode0x519000
BaseOfData0x89f000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x8a7000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x4000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Borland Delphi v6.0 - v7.0

Sections

namevavsizeraw sizeflags
UPX00x10000x5180000x518000RWX UDATA
UPX10x5190000x3860000x385800RWX IDATA
.rsrc0x89f0000x80000x7a00RW- IDATA

Data Directory

typevasize
EXPORT0x1130000xa3
IMPORT0x8a68000x1b8
RESOURCE0x89f0000x732c
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x89e7900x18
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0xc9e7a80xc9e7e00x4ff798000
typenamesizecp
CURSOR#13080
CURSOR#23080
CURSOR#33080
CURSOR#43080
CURSOR#53080
CURSOR#63080
CURSOR#73080
BITMAPBBABORT4640
BITMAPBBALL4840
BITMAPBBCANCEL4640
BITMAPBBCLOSE4640
BITMAPBBHELP4640
BITMAPBBIGNORE4640
BITMAPBBNO4640
BITMAPBBOK4640
BITMAPBBRETRY4640
BITMAPBBYES4640
BITMAPPREVIEWGLYPH2320
ICON#1169360
ICON#242640
ICON#324400
ICON#411280
DIALOGDLGTEMPLATE820
DIALOGTEXTFILEDLG820
STRING#406813520
STRING#406921640
STRING#40708560
STRING#407110840
STRING#40725640
STRING#407311160
STRING#40749480
STRING#40758000
STRING#40768280
STRING#407711560
STRING#40788800
STRING#40799120
STRING#40806360
STRING#408113480
STRING#40829520
STRING#40832160
STRING#40842160
STRING#40855520
STRING#40868320
STRING#40879840
STRING#40889080
STRING#40898960
STRING#409010160
STRING#40912800
STRING#40922040
STRING#40935200
STRING#40949200
STRING#40958760
STRING#40966760
RCDATADVCLAL160
RCDATAPACKAGEINFO20040
RCDATATFBBLIE4438520
RCDATATFCEF12822090
RCDATATFITAJLIE8350580
RCDATATFITALIE11842490
RCDATATFITAUNILIE12703820
RCDATATFSNTJLIE7970120
RCDATATFSNTLIE6704300
RCDATATFSOBRE7250
RCDATATFUPITAP12665200
RCDATAT_16960
GROUP_CURSOR#32761200
GROUP_CURSOR#32762200
GROUP_CURSOR#32763200
GROUP_CURSOR#32764200
GROUP_CURSOR#32765200
GROUP_CURSOR#32766200
GROUP_CURSOR#32767200
GROUP_ICONCHROME620
MANIFEST#14080
idlangstring
650720This "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.
650730This "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.
650740The chunks must be compatible to be assigned.
650750This "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.
650760This "Portable Network Graphics" image contains no data.
650770Some operation could not be performed because the system is out of resources. Close some windows and try again.
650780This operation is not valid because the current image contains no valid header.
650790The new size provided for image resizing is invalid.
650880Loading
650890Saving
650900Converting
650910Rendering
650920Copying
650930Optimizing
650940This "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)
650950The "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corrupted
650960This "Portable Network Graphics" image is invalid because it has missing image parts.
650970Could not decompress the image because it contains invalid compressed data. Description:
650980The "Portable Network Graphics" image contains an invalid palette.
650990The file being readed is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corruped, try obtaining it again.
651000This "Portable Network Graphics" image is not supported or it might be invalid. (IHDR chunk is not the first)
651010This "Portable Network Graphics" image is not supported because either it's width or height exceeds the maximum size, which is 65535 pixels length.
651020There is no such palette entry.
651030This "Portable Network Graphics" image contains an unknown critical part which could not be decoded.
651040Object type not supported for operation
651050Invalid GIF data
651060Invalid image size
651070Image exceeds Logical Screen size
651080No global or local color table defined
651090Invalid pixel coordinates
651100Unsupported PixelFormat
651110Invalid image dimensions
651120Image has no DIB
651130Invalid stream operation
651140Color not in color table
651150Color table is empty
651160Image is empty
651170Frame contains multiple Graphic Control Extension blocks
651180Missing, invalid or empty palette
651190GIF Image
651200Color table overflow
651210Invalid color index
651220Invalid color index - color map expanded
651230Cannot save empty GIF
651240Invalid GIF signature
651250Invalid number of colors specified in Screen Descriptor
651260Invalid number of colors specified in Image Descriptor
651270Unknown extension type
651280Invalid extension introducer
651290Failed to allocate memory for GIF DIB
651300Decoder bit buffer under-run
651310Circular decoder table entry
651320Invalid Image trailer
651330Internal error: Extension Instance does not match Extension Label
651340Unsupported Application Extension block size
651350Unknown GIF block type
651360Unsupported PixelFormat
651370Invalid image dimensions
651380Image has no DIB
651390Invalid stream operation
651400Color not in color table
651410Color table is empty
651420Image is empty
651430Invalid reduction method
651440GIF Image
651450Loading...
651460Saving...
651470Converting...
651480Rendering...
651490Copying...
651500Optimizing...
651510Premature end of data
651520Invalid extension introducer
651530Failed to allocate memory for GIF DIB
651540Decoder bit buffer under-run
651550Circular decoder table entry
651560Invalid Image trailer
651570Internal error: Extension Instance does not match Extension Label
651580Unsupported Application Extension block size
651590Unknown GIF block type
651600Object type not supported for operation
651610Invalid GIF data
651620Image height too small for contained frames
651630Image width too small for contained frames
651640Failed to store GIF on clipboard
651650Image exceeds Logical Screen size
651660No global or local color table defined
651670Invalid pixel coordinates
651680Request method requires HTTP version 1.1
651690This authentication method is already registered with class name %s.
651700Protocol field is empty
651710Host field is empty
651720Error
651730Cannot change the size of a JPEG image
651740JPEG error #%d
651750JPEG Image File
651760Premature end of data
651770Color table overflow
651780Invalid color index
651790Unsupported GIF version
651800Invalid GIF signature
651810Invalid number of colors specified in Screen Descriptor
651820Invalid number of colors specified in Image Descriptor
651830Unknown extension type
651840Object type not supported.
651850No data to read.
651860Read Timeout
651870Max line length exceeded.
651880Connect timed out.
651890Already connected.
651900Maximum number of line allowed exceeded
651910Transparent proxy cannot bind.
651920UDP Not supported by this proxy.
651930Buffer terminator must be specified.
651940Buffer start position is invalid.
651950Reply Code is not valid: %s
651960IOHandler value is not valid
651970Chunk Started
651980Not Acceptable
651990Unknown Protocol
652000Socks server did not respond.
652010Invalid socks authentication method.
652020Authentication error to socks server.
652030General SOCKS server failure.
652040Connection not allowed by ruleset.
652050Network unreachable.
652060Host unreachable.
652070Connection refused.
652080TTL expired.
652090Command not supported.
652100Address type not supported.
652110%d: Circular links are not allowed
652120Not enough data in buffer.
652130Too much data in buffer.
652140File "%s" not found
652150Not Connected
652160Can not bind in port range (%d - %d)
652170Connection Closed Gracefully.
652180Could not bind socket. Address and port are already in use.
652190Invalid Port Range (%d - %d)
652200%s is not a valid service.
652210IPv6 unavailable
652220%s is not a valid IPv6 address
652230The requested IPVersion / Address family is not supported.
652240Not all bytes sent.
652250Package Size Too Big.
652260Set Size Exceeded.
652270UDP is not support in this SOCKS version.
652280Request rejected or failed.
652290Request rejected because SOCKS server cannot connect.
652300Request rejected because the client program and identd report different user-ids.
652310Unknown socks error.
652320Socket is already connected.
652330Socket is not connected.
652340Cannot send or receive after socket is closed.
652350Too many references, cannot splice.
652360Connection timed out.
652370Connection refused.
652380Too many levels of symbolic links.
652390File name too long.
652400Host is down.
652410No route to host.
652420Directory not empty
652430Host not found.
652440Stack Class is undefined.
652450Stack already created.
652460Only one TIdAntiFreeze can exist per application.
652470Cannot change IPVersion when connected
652480Message too long.
652490Protocol wrong type for socket.
652500Bad protocol option.
652510Protocol not supported.
652520Socket type not supported.
652530Operation not supported on socket.
652540Protocol family not supported.
652550Address family not supported by protocol family.
652560Address already in use.
652570Cannot assign requested address.
652580Network is down.
652590Network is unreachable.
652600Net dropped connection or reset.
652610Software caused connection abort.
652620Connection reset by peer.
652630No buffer space available.
652640Connected.
652650Disconnecting.
652660Disconnected.
652670%s
652680Socket Error # %d %s
652690Interrupted system call.
652700Bad file number.
652710Access denied.
652720Buffer fault.
652730Invalid argument.
652740Too many open files.
652750Operation would block.
652760Operation now in progress.
652770Operation already in progress.
652780Socket operation on non-socket.
652790Destination address required.
652800Big Endian Unicode
652810UTF-8
652820UTF-7
652830OLE error %.8x
652840Method '%s' not supported by automation object
652850Variant does not reference an automation object
652860Dispatch methods do not support more than 64 parameters
652870COM Server Warning
652880There are still active COM objects in this application. One or more clients may have references to these objects, so manually closing
652890this application may cause those client application(s) to fail. Are you sure you want to close this application?
652900Failed attempting to retrieve time zone information.
652910Error on call Winsock2 library function %s
652920Error on loading Winsock2 library (%s)
652930Winsock Initialization Error.
652940Resolving hostname %s.
652950Connecting to %s.
652960Unable to insert a line
652970Invalid clipboard format
652980Clipboard does not support Icons
652990Cannot open clipboard
653000Text exceeds memo capacity
653010Menu '%s' is already being used by another form
653020Docked control must have a name
653030Error removing control from dock tree
653040- Dock zone not found
653050- Dock zone has no control
653060Error loading dock zone from the stream. Expecting version %d, but found %d.
653070Error setting %s.Count
653080Listbox (%s) style must be virtual in order to set Count
653090ANSI
653100ASCII
653110Unicode
653120Enter
653130Space
653140PgUp
653150PgDn
653160End
653170Home
653180Left
653190Up
653200Right
653210Down
653220Ins
653230Del
653240Shift+
653250Ctrl+
653260Alt+
653270Value must be between %d and %d
653280Information
653290Confirm
653300&Yes
653310&No
653320OK
653330Cancel
653340&Help
653350&Abort
653360&Retry
653370&Ignore
653380&All
653390N&o to All
653400Yes to &All
653410BkSp
653420Tab
653430Esc
653440&Close
653450&Ignore
653460&Retry
653470Abort
653480&All
653490Cannot drag a form
653500An error returned from DDE ($0%x)
653510DDE Error - conversation not established ($0%x)
653520Error occurred when DDE ran out of memory ($0%x)
653530Unable to connect DDE conversation
653540Metafiles
653550Enhanced Metafiles
653560Icons
653570Bitmaps
653580Warning
653590Error
653600Cannot hide an MDI Child Form
653610Cannot change Visible in OnShow or OnHide
653620Cannot make a visible window modal
653630%s property out of range
653640Menu index out of range
653650Menu inserted twice
653660Sub-menu is not in menu
653670Not enough timers available
653680GroupIndex cannot be less than a previous menu item's GroupIndex
653690Cannot create form. No MDI forms are currently active
653700A control cannot have itself as its parent
653710OK
653720Cancel
653730&Yes
653740&No
653750&Help
653760Invalid pixel format
653770Scan line index out of range
653780Cannot change the size of an icon
653790Unsupported clipboard format
653800Out of system resources
653810Canvas does not allow drawing
653820Invalid image size
653830Invalid ImageList
653840Invalid ImageList Index
653850Failed to read ImageList data from stream
653860Failed to write ImageList data to stream
653870Error creating window device context
653880Error creating window class
653890Cannot focus a disabled or invisible window
653900Control '%s' has no parent window
653910Parent given is not a parent of '%s'
653920Thread creation error: %s
653930Thread Error: %s (%d)
653940Windows socket error: %s (%d), on API '%s'
653950Asynchronous socket error %d
653960No address specified
653970Can't create new socket
653980Socket already open
653990Can't change value while socket is active
654000Unable to find a Table of Contents
654010No help found for %s
654020No context-sensitive help installed
654030No help found for context
654040No topic-based help system installed
654050Bitmap image is not valid
654060Icon image is not valid
654070Metafile is not valid
654080List capacity out of bounds (%d)
654090List count out of bounds (%d)
654100List index out of bounds (%d)
654110Out of memory while expanding memory stream
654120Error reading %s%s%s: %s
654130Stream read error
654140Property is read-only
654150Failed to create key %s
654160Failed to get data for '%s'
654170Failed to set data for '%s'
654180Resource %s not found
654190%s.Seek not implemented
654200Operation not allowed on sorted list
654210%s not in a class registration group
654220Property %s does not exist
654230Stream write error
654240Bits index out of range
654250Can't write to a read-only resource stream
654260CheckSynchronize called from thread $%x, which is NOT the main thread
654270Class %s not found
654280A class named %s already exists
654290List does not allow duplicates ($0%x)
654300A component named %s already exists
654310String list does not allow duplicates
654320Cannot create file "%s". %s
654330Cannot open file "%s". %s
654340Invalid stream format
654350''%s'' is not a valid component name
654360Invalid property value
654370Invalid property path
654380Invalid property value
654390Invalid data type for '%s'
654400Sun
654410Mon
654420Tue
654430Wed
654440Thu
654450Fri
654460Sat
654470Sunday
654480Monday
654490Tuesday
654500Wednesday
654510Thursday
654520Friday
654530Saturday
654540Ancestor for '%s' not found
654550Cannot assign a %s to a %s
654560Sep
654570Oct
654580Nov
654590Dec
654600January
654610February
654620March
654630April
654640May
654650June
654660July
654670August
654680September
654690October
654700November
654710December
654720Assertion failed
654730Interface not supported
654740Exception in safecall method
654750%s (%s, line %d)
654760Abstract Error
654770Access violation at address %p in module '%s'. %s of address %p
654780System Error. Code: %d. %s
654790A call to an OS function failed
654800Jan
654810Feb
654820Mar
654830Apr
654840May
654850Jun
654860Jul
654870Aug
654880Read
654890Write
654900Error creating variant or safe array
654910Variant or safe array index out of bounds
654920Variant or safe array is locked
654930Invalid variant type conversion
654940Invalid variant operation
654950Invalid variant operation (%s%.8x) %s
654960Could not convert variant of type (%s) into type (%s)
654970Overflow while converting variant of type (%s) into type (%s)
654980Variant overflow
654990Invalid argument
655000Invalid variant type
655010Operation not supported
655020Unexpected variant error
655030External exception %x
655040Floating point division by zero
655050Floating point overflow
655060Floating point underflow
655070Invalid pointer operation
655080Invalid class typecast
655090Access violation at address %p. %s of address %p
655100Access violation
655110Stack overflow
655120Control-C hit
655130Privileged instruction
655140Operation aborted
655150Exception %s in module %s at %p. %s%s
655160Application Error
655170Format '%s' invalid or incompatible with argument
655180No argument for format '%s'
655190Variant method calls not supported
655200'%s' is not a valid integer value
655210Invalid argument to time encode
655220Invalid argument to date encode
655230Out of memory
655240I/O error %d
655250File not found
655260Invalid filename
655270Too many open files
655280File access denied
655290Read beyond end of file
655300Disk full
655310Invalid numeric input
655320Division by zero
655330Range check error
655340Integer overflow
655350Invalid floating point operation
module_namehintordfunction_name
KERNEL32.DLL256TlsSetValue
KERNEL32.DLL256TlsGetValue
KERNEL32.DLL256LocalAlloc
KERNEL32.DLL256GetModuleHandleA
KERNEL32.DLL256lstrcpyA
KERNEL32.DLL256WriteFile
KERNEL32.DLL256WinExec
KERNEL32.DLL256WaitForSingleObject
KERNEL32.DLL256VirtualQuery
KERNEL32.DLL256VirtualAlloc
KERNEL32.DLL256TerminateProcess
KERNEL32.DLL256Sleep
KERNEL32.DLL256SizeofResource
KERNEL32.DLL256SetThreadPriority
KERNEL32.DLL256SetThreadLocale
KERNEL32.DLL256SetFilePointer
KERNEL32.DLL256SetEvent
KERNEL32.DLL256SetErrorMode
KERNEL32.DLL256SetEndOfFile
KERNEL32.DLL256ResumeThread
KERNEL32.DLL256ResetEvent
KERNEL32.DLL256RemoveDirectoryA
KERNEL32.DLL256ReadFile
KERNEL32.DLL256RaiseException
KERNEL32.DLL256QueryPerformanceFrequency
KERNEL32.DLL256QueryPerformanceCounter
KERNEL32.DLL256OpenProcess
KERNEL32.DLL256MultiByteToWideChar
KERNEL32.DLL256MulDiv
KERNEL32.DLL256LockResource
KERNEL32.DLL256LoadResource
KERNEL32.DLL256LoadLibraryA
KERNEL32.DLL256LeaveCriticalSection
KERNEL32.DLL256InitializeCriticalSection
KERNEL32.DLL256GlobalUnlock
KERNEL32.DLL256GlobalSize
KERNEL32.DLL256GlobalHandle
KERNEL32.DLL256GlobalLock
KERNEL32.DLL256GlobalFree
KERNEL32.DLL256GlobalFindAtomA
KERNEL32.DLL256GlobalDeleteAtom
KERNEL32.DLL256GlobalAlloc
KERNEL32.DLL256GlobalAddAtomA
KERNEL32.DLL256GetVersionExA
KERNEL32.DLL256GetVersion
KERNEL32.DLL256GetTimeZoneInformation
KERNEL32.DLL256GetTickCount
KERNEL32.DLL256GetThreadLocale
KERNEL32.DLL256GetTempPathA
KERNEL32.DLL256GetSystemInfo
KERNEL32.DLL256GetStdHandle
KERNEL32.DLL256GetProcAddress
KERNEL32.DLL256GetModuleHandleA
KERNEL32.DLL256GetModuleFileNameA
KERNEL32.DLL256GetLocaleInfoA
KERNEL32.DLL256GetLocalTime
KERNEL32.DLL256GetLastError
KERNEL32.DLL256GetFullPathNameA
KERNEL32.DLL256GetFileSize
KERNEL32.DLL256GetFileAttributesA
KERNEL32.DLL256GetExitCodeThread
KERNEL32.DLL256GetEnvironmentVariableA
KERNEL32.DLL256GetDiskFreeSpaceA
KERNEL32.DLL256GetDateFormatA
KERNEL32.DLL256GetCurrentThreadId
KERNEL32.DLL256GetCurrentProcessId
KERNEL32.DLL256GetCurrentProcess
KERNEL32.DLL256GetComputerNameA
KERNEL32.DLL256GetCPInfo
KERNEL32.DLL256FreeResource
KERNEL32.DLL256InterlockedIncrement
KERNEL32.DLL256InterlockedExchange
KERNEL32.DLL256InterlockedDecrement
KERNEL32.DLL256FreeLibrary
KERNEL32.DLL256FormatMessageA
KERNEL32.DLL256FindResourceA
KERNEL32.DLL256FindNextFileA
KERNEL32.DLL256FindFirstFileA
KERNEL32.DLL256FindClose
KERNEL32.DLL256FileTimeToLocalFileTime
KERNEL32.DLL256FileTimeToDosDateTime
KERNEL32.DLL256EnumCalendarInfoA
KERNEL32.DLL256EnterCriticalSection
KERNEL32.DLL256DeleteFileA
KERNEL32.DLL256DeleteCriticalSection
KERNEL32.DLL256CreateThread
KERNEL32.DLL256CreateFileA
KERNEL32.DLL256CreateEventA
KERNEL32.DLL256CopyFileA
KERNEL32.DLL256CompareStringA
KERNEL32.DLL256CloseHandle
KERNEL32.DLL256GetACP
KERNEL32.DLL256Sleep
KERNEL32.DLL256VirtualFree
KERNEL32.DLL256VirtualAlloc
KERNEL32.DLL256GetTickCount
KERNEL32.DLL256QueryPerformanceCounter
KERNEL32.DLL256GetCurrentThreadId
KERNEL32.DLL256InterlockedDecrement
KERNEL32.DLL256InterlockedIncrement
KERNEL32.DLL256VirtualQuery
KERNEL32.DLL256WideCharToMultiByte
KERNEL32.DLL256MultiByteToWideChar
KERNEL32.DLL256lstrlenA
KERNEL32.DLL256lstrcpynA
KERNEL32.DLL256LoadLibraryExA
KERNEL32.DLL256GetThreadLocale
KERNEL32.DLL256GetStartupInfoA
KERNEL32.DLL256GetProcAddress
KERNEL32.DLL256GetModuleHandleA
KERNEL32.DLL256GetModuleFileNameA
KERNEL32.DLL256GetLocaleInfoA
KERNEL32.DLL256GetCommandLineA
KERNEL32.DLL256FreeLibrary
KERNEL32.DLL256FindFirstFileA
KERNEL32.DLL256FindClose
KERNEL32.DLL256ExitProcess
KERNEL32.DLL256ExitThread
KERNEL32.DLL256CreateThread
KERNEL32.DLL256CompareStringA
KERNEL32.DLL256WriteFile
KERNEL32.DLL256UnhandledExceptionFilter
KERNEL32.DLL256RtlUnwind
KERNEL32.DLL256RaiseException
KERNEL32.DLL256GetStdHandle
KERNEL32.DLL256Sleep
advapi32.dll256RegSetValueExA
advapi32.dll256RegQueryValueExA
advapi32.dll256RegOpenKeyExA
advapi32.dll256RegFlushKey
advapi32.dll256RegCreateKeyExA
advapi32.dll256RegCloseKey
advapi32.dll256GetUserNameA
advapi32.dll256RegQueryValueExA
advapi32.dll256RegOpenKeyExA
advapi32.dll256RegCloseKey
comctl32.dll256_TrackMouseEvent
comctl32.dll256ImageList_SetIconSize
comctl32.dll256ImageList_GetIconSize
comctl32.dll256ImageList_Write
comctl32.dll256ImageList_Read
comctl32.dll256ImageList_DragShowNolock
comctl32.dll256ImageList_DragMove
comctl32.dll256ImageList_DragLeave
comctl32.dll256ImageList_DragEnter
comctl32.dll256ImageList_EndDrag
comctl32.dll256ImageList_BeginDrag
comctl32.dll256ImageList_Remove
comctl32.dll256ImageList_DrawEx
comctl32.dll256ImageList_Draw
comctl32.dll256ImageList_GetBkColor
comctl32.dll256ImageList_SetBkColor
comctl32.dll256ImageList_Add
comctl32.dll256ImageList_SetImageCount
comctl32.dll256ImageList_GetImageCount
comctl32.dll256ImageList_Destroy
comctl32.dll256ImageList_Create
comctl32.dll256InitCommonControls
gdi32.dll256UnrealizeObject
gdi32.dll256StretchDIBits
gdi32.dll256StretchBlt
gdi32.dll256SetWindowOrgEx
gdi32.dll256SetWinMetaFileBits
gdi32.dll256SetViewportOrgEx
gdi32.dll256SetTextColor
gdi32.dll256SetStretchBltMode
gdi32.dll256SetROP2
gdi32.dll256SetPixel
gdi32.dll256SetPaletteEntries
gdi32.dll256SetEnhMetaFileBits
gdi32.dll256SetDIBColorTable
gdi32.dll256SetBrushOrgEx
gdi32.dll256SetBkMode
gdi32.dll256SetBkColor
gdi32.dll256SelectPalette
gdi32.dll256SelectObject
gdi32.dll256SelectClipRgn
gdi32.dll256SaveDC
gdi32.dll256RestoreDC
gdi32.dll256ResizePalette
gdi32.dll256Rectangle
gdi32.dll256RectVisible
gdi32.dll256RealizePalette
gdi32.dll256Polyline
gdi32.dll256PlayEnhMetaFile
gdi32.dll256PatBlt
gdi32.dll256MoveToEx
gdi32.dll256MaskBlt
gdi32.dll256LineTo
gdi32.dll256IntersectClipRect
gdi32.dll256GetWindowOrgEx
gdi32.dll256GetWinMetaFileBits
gdi32.dll256GetTextMetricsA
gdi32.dll256GetTextExtentPoint32A
gdi32.dll256GetSystemPaletteEntries
gdi32.dll256GetStockObject
gdi32.dll256GetRgnBox
gdi32.dll256GetPixel
gdi32.dll256GetPaletteEntries
gdi32.dll256GetObjectType
gdi32.dll256GetObjectA
gdi32.dll256GetNearestPaletteIndex
gdi32.dll256GetEnhMetaFilePaletteEntries
gdi32.dll256GetEnhMetaFileHeader
gdi32.dll256GetEnhMetaFileBits
gdi32.dll256GetDeviceCaps
gdi32.dll256GetDIBits
gdi32.dll256GetDIBColorTable
gdi32.dll256GetDCOrgEx
gdi32.dll256GetCurrentPositionEx
gdi32.dll256GetClipBox
gdi32.dll256GetBrushOrgEx
gdi32.dll256GetBitmapBits
gdi32.dll256GdiFlush
gdi32.dll256ExcludeClipRect
gdi32.dll256DeleteObject
gdi32.dll256DeleteEnhMetaFile
gdi32.dll256DeleteDC
gdi32.dll256CreateSolidBrush
gdi32.dll256CreatePenIndirect
gdi32.dll256CreatePalette
gdi32.dll256CreateHalftonePalette
gdi32.dll256CreateFontIndirectA
gdi32.dll256CreateDIBitmap
gdi32.dll256CreateDIBSection
gdi32.dll256CreateCompatibleDC
gdi32.dll256CreateCompatibleBitmap
gdi32.dll256CreateBrushIndirect
gdi32.dll256CreateBitmap
gdi32.dll256CopyEnhMetaFileA
gdi32.dll256BitBlt
ole32.dll256OleSaveToStream
ole32.dll256OleLoadFromStream
ole32.dll256GetRunningObjectTable
ole32.dll256CreateItemMoniker
ole32.dll256CoTaskMemFree
ole32.dll256CoTaskMemAlloc
ole32.dll256CLSIDFromString
ole32.dll256CoCreateInstance
ole32.dll256CoRegisterClassObject
ole32.dll256CoUninitialize
ole32.dll256CoInitialize
ole32.dll256IsEqualGUID
ole32.dll256IsEqualGUID
oleaut32.dll256SafeArrayPtrOfIndex
oleaut32.dll256SafeArrayGetUBound
oleaut32.dll256SafeArrayGetLBound
oleaut32.dll256SafeArrayCreate
oleaut32.dll256VariantChangeType
oleaut32.dll256VariantCopy
oleaut32.dll256VariantClear
oleaut32.dll256VariantInit
oleaut32.dll256GetErrorInfo
oleaut32.dll256RegisterTypeLib
oleaut32.dll256LoadTypeLibEx
oleaut32.dll256SysFreeString
oleaut32.dll256SysFreeString
oleaut32.dll256SysReAllocStringLen
oleaut32.dll256SysAllocStringLen
quartz.dll256AMGetErrorTextA
shell32.dll256ShellExecuteA
user32.dll256CreateWindowExA
user32.dll256mouse_event
user32.dll256keybd_event
user32.dll256WindowFromPoint
user32.dll256WaitMessage
user32.dll256UpdateWindow
user32.dll256UnregisterClassA
user32.dll256UnhookWindowsHookEx
user32.dll256TranslateMessage
user32.dll256TranslateMDISysAccel
user32.dll256TrackPopupMenu
user32.dll256SystemParametersInfoA
user32.dll256ShowWindow
user32.dll256ShowScrollBar
user32.dll256ShowOwnedPopups
user32.dll256SetWindowsHookExA
user32.dll256SetWindowTextA
user32.dll256SetWindowPos
user32.dll256SetWindowPlacement
user32.dll256SetWindowLongW
user32.dll256SetWindowLongA
user32.dll256SetTimer
user32.dll256SetScrollRange
user32.dll256SetScrollPos
user32.dll256SetScrollInfo
user32.dll256SetRect
user32.dll256SetPropA
user32.dll256SetParent
user32.dll256SetMenuItemInfoA
user32.dll256SetMenu
user32.dll256SetForegroundWindow
user32.dll256SetFocus
user32.dll256SetCursorPos
user32.dll256SetCursor
user32.dll256SetClipboardData
user32.dll256SetClassLongA
user32.dll256SetCapture
user32.dll256SetActiveWindow
user32.dll256SendMessageTimeoutA
user32.dll256SendMessageW
user32.dll256SendMessageA
user32.dll256ScrollWindow
user32.dll256ScreenToClient
user32.dll256RemovePropA
user32.dll256RemoveMenu
user32.dll256ReleaseDC
user32.dll256ReleaseCapture
user32.dll256RegisterWindowMessageA
user32.dll256RegisterClipboardFormatA
user32.dll256RegisterClassA
user32.dll256RedrawWindow
user32.dll256PtInRect
user32.dll256PostThreadMessageA
user32.dll256PostQuitMessage
user32.dll256PostMessageA
user32.dll256PeekMessageW
user32.dll256PeekMessageA
user32.dll256OpenClipboard
user32.dll256OffsetRect
user32.dll256OemToCharA
user32.dll256MsgWaitForMultipleObjects
user32.dll256MessageBoxA
user32.dll256MessageBeep
user32.dll256MapWindowPoints
user32.dll256MapVirtualKeyA
user32.dll256LoadStringA
user32.dll256LoadKeyboardLayoutA
user32.dll256LoadIconA
user32.dll256LoadCursorA
user32.dll256LoadBitmapA
user32.dll256KillTimer
user32.dll256IsZoomed
user32.dll256IsWindowVisible
user32.dll256IsWindowUnicode
user32.dll256IsWindowEnabled
user32.dll256IsWindow
user32.dll256IsRectEmpty
user32.dll256IsIconic
user32.dll256IsDialogMessageW
user32.dll256IsDialogMessageA
user32.dll256IsClipboardFormatAvailable
user32.dll256IsChild
user32.dll256InvalidateRect
user32.dll256IntersectRect
user32.dll256InsertMenuItemA
user32.dll256InsertMenuA
user32.dll256InflateRect
user32.dll256GetWindowThreadProcessId
user32.dll256GetWindowTextA
user32.dll256GetWindowRect
user32.dll256GetWindowPlacement
user32.dll256GetWindowLongW
user32.dll256GetWindowLongA
user32.dll256GetWindowDC
user32.dll256GetTopWindow
user32.dll256GetSystemMetrics
user32.dll256GetSystemMenu
user32.dll256GetSysColorBrush
user32.dll256GetSysColor
user32.dll256GetSubMenu
user32.dll256GetScrollRange
user32.dll256GetScrollPos
user32.dll256GetScrollInfo
user32.dll256GetPropA
user32.dll256GetParent
user32.dll256GetWindow
user32.dll256GetMessagePos
user32.dll256GetMenuStringA
user32.dll256GetMenuState
user32.dll256GetMenuItemInfoA
user32.dll256GetMenuItemID
user32.dll256GetMenuItemCount
user32.dll256GetMenu
user32.dll256GetLastActivePopup
user32.dll256GetKeyboardState
user32.dll256GetKeyboardLayoutNameA
user32.dll256GetKeyboardLayoutList
user32.dll256GetKeyboardLayout
user32.dll256GetKeyState
user32.dll256GetKeyNameTextA
user32.dll256GetIconInfo
user32.dll256GetForegroundWindow
user32.dll256GetFocus
user32.dll256GetDoubleClickTime
user32.dll256GetDesktopWindow
user32.dll256GetDCEx
user32.dll256GetDC
user32.dll256GetCursorPos
user32.dll256GetCursor
user32.dll256GetClipboardData
user32.dll256GetClientRect
user32.dll256GetClassLongA
user32.dll256GetClassInfoA
user32.dll256GetCapture
user32.dll256GetActiveWindow
user32.dll256FrameRect
user32.dll256FindWindowExA
user32.dll256FindWindowA
user32.dll256FillRect
user32.dll256ExitWindowsEx
user32.dll256EqualRect
user32.dll256EnumWindows
user32.dll256EnumThreadWindows
user32.dll256EnumClipboardFormats
user32.dll256EnumChildWindows
user32.dll256EndPaint
user32.dll256EnableWindow
user32.dll256EnableScrollBar
user32.dll256EnableMenuItem
user32.dll256EmptyClipboard
user32.dll256DrawTextA
user32.dll256DrawMenuBar
user32.dll256DrawIconEx
user32.dll256DrawIcon
user32.dll256DrawFrameControl
user32.dll256DrawFocusRect
user32.dll256DrawEdge
user32.dll256DispatchMessageW
user32.dll256DispatchMessageA
user32.dll256DestroyWindow
user32.dll256DestroyMenu
user32.dll256DestroyIcon
user32.dll256DestroyCursor
user32.dll256DeleteMenu
user32.dll256DefWindowProcA
user32.dll256DefMDIChildProcA
user32.dll256DefFrameProcA
user32.dll256CreatePopupMenu
user32.dll256CreateMenu
user32.dll256CreateIcon
user32.dll256CopyImage
user32.dll256CopyIcon
user32.dll256CloseClipboard
user32.dll256ClientToScreen
user32.dll256CheckMenuItem
user32.dll256CallWindowProcA
user32.dll256CallNextHookEx
user32.dll256BringWindowToTop
user32.dll256BeginPaint
user32.dll256AttachThreadInput
user32.dll256CharNextA
user32.dll256CharLowerBuffA
user32.dll256CharLowerA
user32.dll256CharUpperBuffA
user32.dll256CharToOemA
user32.dll256AdjustWindowRectEx
user32.dll256ActivateKeyboardLayout
user32.dll256GetKeyboardType
user32.dll256DestroyWindow
user32.dll256LoadStringA
user32.dll256MessageBoxA
user32.dll256CharNextA
user32.dll256DdeCmpStringHandles
user32.dll256DdeFreeStringHandle
user32.dll256DdeQueryStringA
user32.dll256DdeCreateStringHandleA
user32.dll256DdeGetLastError
user32.dll256DdeFreeDataHandle
user32.dll256DdeUnaccessData
user32.dll256DdeAccessData
user32.dll256DdeCreateDataHandle
user32.dll256DdeClientTransaction
user32.dll256DdeNameService
user32.dll256DdePostAdvise
user32.dll256DdeSetUserHandle
user32.dll256DdeQueryConvInfo
user32.dll256DdeDisconnect
user32.dll256DdeConnect
user32.dll256DdeUninitialize
user32.dll256DdeInitializeA
version.dll256VerQueryValueA
version.dll256GetFileVersionInfoSizeA
version.dll256GetFileVersionInfoA
winmm.dll256timeGetTime
wsock32.dll256WSACleanup
wsock32.dll256WSAStartup
wsock32.dll256WSAGetLastError
wsock32.dll256WSACancelAsyncRequest
wsock32.dll256WSAAsyncGetServByName
wsock32.dll256WSAAsyncGetHostByName
wsock32.dll256WSAAsyncSelect
wsock32.dll256gethostname
wsock32.dll256getservbyname
wsock32.dll256gethostbyname
wsock32.dll256socket
wsock32.dll256send
wsock32.dll256recv
wsock32.dll256ntohs
wsock32.dll256listen
wsock32.dll256ioctlsocket
wsock32.dll256inet_ntoa
wsock32.dll256inet_addr
wsock32.dll256htons
wsock32.dll256connect
wsock32.dll256closesocket
wsock32.dll256bind
ordentry_vafunction_name
10x6be20DllUnregisterServer
20x6bddcDllRegisterServer
30x6bdb4DllCanUnloadNow
40x6bd6cDllGetClassObject
module_nameAnarch.exe
flags0
timestamp0
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0x113038
Functions(4)0x113028
NameOrdinals(4)0x113048
offsetsizetypecomment
15c115HTM#
134c2f130643PNG(657 x 374)#
154db9124062PNG(657 x 374)#
1732ec629GIF(100 x 30)#
178a32142913PNG(657 x 374)#
19b8c9629GIF(100 x 30)#
1a1192162135PNG(655 x 374)#
1c8e7556743PNG(146 x 37)#
1d6e79143072PNG(655 x 374)#
1f9dc449871PNG(81 x 36)#
20617a124784PNG(655 x 374)#
22494647529PNG(214 x 108)#
230354314270GIF(104 x 104)#
27cf5847529PNG(214 x 108)#
28895d47529PNG(214 x 108)#
29436347529PNG(214 x 108)#
29fd7347529PNG(214 x 108)#
2ab77947529PNG(214 x 108)#
2b717f47529PNG(214 x 108)#
2c2b8447529PNG(214 x 108)#
2ce58947529PNG(214 x 108)#
2da2c8183258PNG(655 x 375)#
306f0c52391PNG(73 x 18)#
313e3d115768PNG(655 x 375)#
3302cb3202GIF(16 x 16)#
331058190373PNG(655 x 375)#
35f85e52391PNG(73 x 18)#
36c7be182424PNG(655 x 375)#
3990c052391PNG(73 x 18)#
3a60bc198918PNG(655 x 375)#
3d6a2d396PNG(73 x 18)#
3d6fab202708PNG(655 x 375)#
4087ea396PNG(73 x 18)#
408a4c208305PNG(655 x 375)#
43b85e389PNG(73 x 18)#
43bc9a133849PNG(655 x 375)#
45c7cb2578PNG(128 x 49)#
45d2333202GIF(16 x 16)#
45dfbf202445PNG(655 x 375)#
48f6f6396PNG(73 x 18)#
48fb0e225207PNG(655 x 375)#
4c6b27389PNG(73 x 18)#
4c72be188164PNG(655 x 375)#
4f522d52391PNG(73 x 18)#
5022c6190370PNG(655 x 375)#
530ad3369PNG(73 x 18)#
530d1a197129PNG(655 x 375)#
560f8452391PNG(73 x 18)#
56dee2123190PNG(655 x 375)#
58c06e3202GIF(16 x 16)#
58cdfa190863PNG(655 x 375)#
5bb7f3369PNG(73 x 18)#
5bbbf0214564PNG(655 x 375)#
5f027652391PNG(73 x 18)#
5fd522199071PNG(684 x 392)#
62df2c1364PNG(82 x 17)#
62e558136479PNG(684 x 392)#
64facf2619GIF(215 x 44)#
6505c9219424PNG(684 x 392)#
685f541289PNG(61 x 17)#
6864df1226PNG(58 x 17)#
686d1d229644PNG(684 x 392)#
6bee941289PNG(61 x 17)#
6bf4e81226PNG(58 x 17)#
6bfe31136479PNG(684 x 392)#
6e14d52619GIF(215 x 44)#
6e1fc2141315PNG(684 x 392)#
7048ed777PNG(58 x 20)#
704d24870PNG(78 x 20)#
705232199071PNG(684 x 392)#
735c3c866PNG(82 x 20)#
736063183432PNG(684 x 392)#
762e81777PNG(58 x 20)#
76320a870PNG(78 x 20)#
763c34199853PNG(655 x 375)#
794b7f51778PNG(70 x 15)#
7a178054276PNG(655 x 375)#
7aebef51778PNG(70 x 15)#
7bb707208090PNG(655 x 375)#
7ee54051778PNG(70 x 15)#
7fb13b107182PNG(655 x 375)#
8154412578PNG(128 x 49)#
815ea93202GIF(16 x 16)#
816c35201747PNG(655 x 375)#
8480b251778PNG(70 x 15)#
854d80225631PNG(655 x 375)#
88bf4151778PNG(70 x 15)#
89898352349BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK