VMProtect_ULTIMATE_3[.]5[.]0_Build_1213[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

VMProtect_ULTIMATE_3.5.0_Build_1213.rar
Size

39.5MB
MD5

553e809d292377ce5f72f6b29db8a93d
SHA1

0ae66b4194980a7082a6a59c8d1cbaf58b2cfbd4
SHA256

01c62d6f5119be1aa46f01acd98afdc3e03483660df3a5ead8660eb4fe3ceff9
SHA512

00d63a23615a646300c9709abdab294894dedc63a78928f76446bb3477c7ab70a7e990b9a79fe178149fb377f1e56e61988055f643bd4f3030c54f2ad189d239
SSDEEP

786432:qWsoc7u6lLih4ftXiOc63MA/8KZTXMSZhU+YilwEShNqR5t0iuDJnGdgpo5Nfb:bsn1ZtBtcSKieMZDK1GZlb

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/VMProtect.exe	upx
static1/unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/VMProtect_Con.exe	upx

Unsigned PE 47 IoCs

Checks for missing Authenticode signature.

resource
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/BCB/Project1.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/BCB/VMProtectSDK32.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Delphi/Project1.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Delphi/VMProtectSDK32.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Free Pascal/Project1.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Free Pascal/VMProtectSDK32.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/VMProtectSDK32.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/project1.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MASM/Project1.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MASM/VMProtectSDK32.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MASM/VMProtectSDK64.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/bin/Project1.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/bin/VMProtectSDK32.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/bin/VMProtectSDK64.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MinGW/Project1.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MinGW/VMProtectSDK32.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Net/bin/Project1.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Net/bin/VMProtect.SDK.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/VB6/Project1.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/VB6/VMProtectSDK32.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Lib/KeyGen32.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Lib/KeyGen64.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/BCB/TestApp.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/DDK/bin/i386/TestApp.sys
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Delphi/TestApp.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Delphi/VMProtectSDK32.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/TestApp.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/bin/TestApp.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/bin/VMProtectSDK32.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/bin/VMProtectSDK64.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/bin/TestApp.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/bin/VMProtect.SDK.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/VB6/TestApp.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/VB6/VMProtectSDK32.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Scripts/Delphi Resources/Project1.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Scripts/Environment Variables/Project1.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Scripts/External DLL/Project1.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Scripts/Random Section Names/Project1.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Scripts/Script Events/Project1.exe
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/Net/VMProtect.SDK.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/VMProtectDDK32.sys
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/VMProtectDDK64.sys
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/VMProtectSDK32.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/VMProtectSDK64.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/VMProtect_Ext32.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/VMProtect_Ext64.dll
unpack001/VMProtect_ULTIMATE_3.5.0_Build_1213/unins000.exe

Files

VMProtect_ULTIMATE_3.5.0_Build_1213.rar
.rar
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/BCB/Project1.bpr
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/BCB/Project1.cpp
.js
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/BCB/Project1.exe
.exe windows:4 windows x86 arch:x86

532c62395891b8320957c654d6524f07

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

vcl190.bpl

@Vcl@Consts@initialization$qqrv
@Vcl@Consts@Finalization$qqrv
@Vcl@Graphics@initialization$qqrv
@Vcl@Graphics@Finalization$qqrv
@Vcl@Graphutil@initialization$qqrv
@Vcl@Graphutil@Finalization$qqrv
@Vcl@Toolwin@initialization$qqrv
@Vcl@Toolwin@Finalization$qqrv
@Vcl@Printers@initialization$qqrv
@Vcl@Printers@Finalization$qqrv
@Vcl@Stdactns@initialization$qqrv
@Vcl@Stdactns@Finalization$qqrv
@Vcl@Comstrs@initialization$qqrv
@Vcl@Comstrs@Finalization$qqrv
@Vcl@Extctrls@initialization$qqrv
@Vcl@Extctrls@Finalization$qqrv
@Vcl@Extctrls@TLinkLabel@$bcdtr$qqrv
@Vcl@Extctrls@TLinkLabel@$bcctr$qqrv
@Vcl@Extctrls@TCustomLinkLabel@$bcdtr$qqrv
@Vcl@Extctrls@TCustomLinkLabel@$bcctr$qqrv
@Vcl@Extctrls@TCategoryPanelGroup@$bcdtr$qqrv
@Vcl@Extctrls@TCategoryPanelGroup@$bcctr$qqrv
@Vcl@Extctrls@TCustomCategoryPanelGroup@$bcdtr$qqrv
@Vcl@Extctrls@TCustomCategoryPanelGroup@$bcctr$qqrv
@Vcl@Stdctrls@initialization$qqrv
@Vcl@Stdctrls@Finalization$qqrv
@Vcl@Stdctrls@TStaticText@$bcdtr$qqrv
@Vcl@Stdctrls@TStaticText@$bcctr$qqrv
@Vcl@Stdctrls@TListBox@$bcdtr$qqrv
@Vcl@Stdctrls@TListBox@$bcctr$qqrv
@Vcl@Stdctrls@TCheckBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCheckBox@$bcctr$qqrv
@Vcl@Stdctrls@TButton@$bcdtr$qqrv
@Vcl@Stdctrls@TButton@$bcctr$qqrv
@Vcl@Stdctrls@TComboBox@$bcdtr$qqrv
@Vcl@Stdctrls@TComboBox@$bcctr$qqrv
@Vcl@Stdctrls@TMemo@$bcdtr$qqrv
@Vcl@Stdctrls@TMemo@$bcctr$qqrv
@Vcl@Stdctrls@TEdit@$bcdtr$qqrv
@Vcl@Stdctrls@TEdit@$bcctr$qqrv
@Vcl@Stdctrls@TGroupBox@$bcdtr$qqrv
@Vcl@Stdctrls@TGroupBox@$bcctr$qqrv
@Vcl@Stdctrls@TCustomStaticText@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomStaticText@$bcctr$qqrv
@Vcl@Stdctrls@TScrollBar@$bcdtr$qqrv
@Vcl@Stdctrls@TScrollBar@$bcctr$qqrv
@Vcl@Stdctrls@TCustomListBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomListBox@$bcctr$qqrv
@Vcl@Stdctrls@TRadioButton@$bcdtr$qqrv
@Vcl@Stdctrls@TRadioButton@$bcctr$qqrv
@Vcl@Stdctrls@TCustomCheckBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomCheckBox@$bcctr$qqrv
@Vcl@Stdctrls@TCustomButton@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomButton@$bcctr$qqrv
@Vcl@Stdctrls@TCustomComboBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomComboBox@$bcctr$qqrv
@Vcl@Stdctrls@TCustomMemo@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomMemo@$bcctr$qqrv
@Vcl@Stdctrls@TCustomEdit@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomEdit@$bcctr$qqrv
@Vcl@Stdctrls@TCustomGroupBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomGroupBox@$bcctr$qqrv
@Vcl@Stdctrls@TButton@
@Vcl@Stdctrls@TEdit@
@Vcl@Stdctrls@TLabel@
@Vcl@Listactns@initialization$qqrv
@Vcl@Listactns@Finalization$qqrv
@Vcl@Comctrls@initialization$qqrv
@Vcl@Comctrls@Finalization$qqrv
@Vcl@Comctrls@THeaderControl@$bcdtr$qqrv
@Vcl@Comctrls@THeaderControl@$bcctr$qqrv
@Vcl@Comctrls@TStatusBar@$bcdtr$qqrv
@Vcl@Comctrls@TStatusBar@$bcctr$qqrv
@Vcl@Comctrls@TComboBoxEx@$bcdtr$qqrv
@Vcl@Comctrls@TComboBoxEx@$bcctr$qqrv
@Vcl@Comctrls@TCustomComboBoxEx@$bcdtr$qqrv
@Vcl@Comctrls@TCustomComboBoxEx@$bcctr$qqrv
@Vcl@Comctrls@TPageScroller@$bcdtr$qqrv
@Vcl@Comctrls@TPageScroller@$bcctr$qqrv
@Vcl@Comctrls@TDateTimePicker@$bcdtr$qqrv
@Vcl@Comctrls@TDateTimePicker@$bcctr$qqrv
@Vcl@Comctrls@TCoolBar@$bcdtr$qqrv
@Vcl@Comctrls@TCoolBar@$bcctr$qqrv
@Vcl@Comctrls@TToolBar@$bcdtr$qqrv
@Vcl@Comctrls@TToolBar@$bcctr$qqrv
@Vcl@Comctrls@TListView@$bcdtr$qqrv
@Vcl@Comctrls@TListView@$bcctr$qqrv
@Vcl@Comctrls@TCustomListView@$bcdtr$qqrv
@Vcl@Comctrls@TCustomListView@$bcctr$qqrv
@Vcl@Comctrls@THotKey@$bcdtr$qqrv
@Vcl@Comctrls@THotKey@$bcctr$qqrv
@Vcl@Comctrls@TCustomHotKey@$bcdtr$qqrv
@Vcl@Comctrls@TCustomHotKey@$bcctr$qqrv
@Vcl@Comctrls@TUpDown@$bcdtr$qqrv
@Vcl@Comctrls@TUpDown@$bcctr$qqrv
@Vcl@Comctrls@TCustomUpDown@$bcdtr$qqrv
@Vcl@Comctrls@TCustomUpDown@$bcctr$qqrv
@Vcl@Comctrls@TRichEdit@$bcdtr$qqrv
@Vcl@Comctrls@TRichEdit@$bcctr$qqrv
@Vcl@Comctrls@TCustomRichEdit@$bcdtr$qqrv
@Vcl@Comctrls@TCustomRichEdit@$bcctr$qqrv
@Vcl@Comctrls@TProgressBar@$bcdtr$qqrv
@Vcl@Comctrls@TProgressBar@$bcctr$qqrv
@Vcl@Comctrls@TTrackBar@$bcdtr$qqrv
@Vcl@Comctrls@TTrackBar@$bcctr$qqrv
@Vcl@Comctrls@TTreeView@$bcdtr$qqrv
@Vcl@Comctrls@TTreeView@$bcctr$qqrv
@Vcl@Comctrls@TCustomTreeView@$bcdtr$qqrv
@Vcl@Comctrls@TCustomTreeView@$bcctr$qqrv
@Vcl@Comctrls@TCustomHeaderControl@$bcdtr$qqrv
@Vcl@Comctrls@TCustomHeaderControl@$bcctr$qqrv
@Vcl@Comctrls@TCustomStatusBar@$bcdtr$qqrv
@Vcl@Comctrls@TCustomStatusBar@$bcctr$qqrv
@Vcl@Comctrls@TTabControl@$bcdtr$qqrv
@Vcl@Comctrls@TTabControl@$bcctr$qqrv
@Vcl@Comctrls@TCustomTabControl@$bcdtr$qqrv
@Vcl@Comctrls@TCustomTabControl@$bcctr$qqrv
@Vcl@Dialogs@initialization$qqrv
@Vcl@Dialogs@Finalization$qqrv
@Vcl@Dialogs@MessageDlg$qqrx20System@UnicodeString26System@Uitypes@TMsgDlgType54System@%Set$t25System@Uitypes@TMsgDlgBtn$iuc$0$iuc$11%i
@Vcl@Menus@initialization$qqrv
@Vcl@Menus@Finalization$qqrv
@Vcl@Imglist@initialization$qqrv
@Vcl@Imglist@Finalization$qqrv
@Vcl@Actnlist@initialization$qqrv
@Vcl@Actnlist@Finalization$qqrv
@Vcl@Controls@initialization$qqrv
@Vcl@Controls@Finalization$qqrv
@Vcl@Controls@TWinControl@UpdateControlOriginalParentSize$qqrp21Vcl@Controls@TControlr19System@Types@TPoint
@Vcl@Controls@TWinControl@UpdateTIPStatus$qqrv
@Vcl@Controls@TWinControl@DockReplaceDockClient$qqrp21Vcl@Controls@TControlp24Vcl@Controls@TWinControlt119Vcl@Controls@TAlignt1
@Vcl@Controls@TWinControl@SetParentBackground$qqro
@Vcl@Controls@TWinControl@CanAutoSize$qqrrit1
@Vcl@Controls@TWinControl@AssignTo$qqrp26System@Classes@TPersistent
@Vcl@Controls@TWinControl@UpdateStyleElements$qqrv
@Vcl@Controls@TWinControl@ConstrainedResize$qqrrit1t1t1
@Vcl@Controls@TWinControl@CanResize$qqrrit1
@Vcl@Controls@TWinControl@GetClientOrigin$qqrv
@Vcl@Controls@TWinControl@GetControlExtents$qqrv
@Vcl@Controls@TWinControl@Repaint$qqrv
@Vcl@Controls@TWinControl@Update$qqrv
@Vcl@Controls@TWinControl@Invalidate$qqrv
@Vcl@Controls@TWinControl@GetDeviceContext$qqrrp6HWND__
@Vcl@Controls@TWinControl@ShowControl$qqrp21Vcl@Controls@TControl
@Vcl@Controls@TWinControl@SetBounds$qqriiii
@Vcl@Controls@TWinControl@SetParentDoubleBuffered$qqro
@Vcl@Controls@TWinControl@CustomAlignPosition$qqrp21Vcl@Controls@TControlrit2t2t2r18System@Types@TRectrx23Vcl@Controls@TAlignInfo
@Vcl@Controls@TWinControl@CustomAlignInsertBefore$qqrp21Vcl@Controls@TControlt1
@Vcl@Controls@TWinControl@CreateHandle$qqrv
@Vcl@Controls@TWinControl@DestroyWnd$qqrv
@Vcl@Controls@TWinControl@$bdtr$qqrv
@Vcl@Controls@TControl@InitiateAction$qqrv
@Vcl@Controls@TControl@GetFloatingDockSiteClass$qqrv
@Vcl@Controls@TControl@CreateTouchManager$qqrv
@Vcl@Controls@TControl@SetBiDiMode$qqr24System@Classes@TBiDiMode
@Vcl@Controls@TControl@GetText$qqrv
@Vcl@Controls@TControl@SetEnabled$qqro
@Vcl@Controls@TControl@SetName$qqrx20System@UnicodeString
@Vcl@Controls@TControl@SetAutoSize$qqro
@Vcl@Controls@TControl@SetDragMode$qqr24System@Uitypes@TDragMode
@Vcl@Controls@TControl@GetAction$qqrv
@Vcl@Controls@TControl@GetEnabled$qqrv
@Vcl@Controls@TControl@GetDragImages$qqrv
@Vcl@Controls@TControl@$bdtr$qqrv
@Vcl@Themes@initialization$qqrv
@Vcl@Themes@Finalization$qqrv
@Vcl@Themes@TCustomStyleEngine@$bcdtr$qqrv
@Vcl@Themes@TCustomStyleEngine@$bcctr$qqrv
@Vcl@Forms@initialization$qqrv
@Vcl@Forms@Finalization$qqrv
@Vcl@Forms@TApplication@ShowException$qqrp25System@Sysutils@Exception
@Vcl@Forms@TApplication@Run$qqrv
@Vcl@Forms@TApplication@CreateForm$qqrp17System@TMetaClasspv
@Vcl@Forms@TApplication@Initialize$qqrv
@Vcl@Forms@TForm@$bcdtr$qqrv
@Vcl@Forms@TForm@$bcctr$qqrv
@Vcl@Forms@TCustomForm@QueryInterface$qqsrx5_GUIDpv
@Vcl@Forms@TCustomForm@RequestAlign$qqrv
@Vcl@Forms@TCustomForm@UpdateActions$qqrv
@Vcl@Forms@TCustomForm@ShowModal$qqrv
@Vcl@Forms@TCustomForm@SetFocus$qqrv
@Vcl@Forms@TCustomForm@CloseQuery$qqrv
@Vcl@Forms@TCustomForm@Resizing$qqr27System@Uitypes@TWindowState
@Vcl@Forms@TCustomForm@PaintWindow$qqrp5HDC__
@Vcl@Forms@TCustomForm@SetFocusedControl$qqrp24Vcl@Controls@TWinControl
@Vcl@Forms@TCustomForm@DefaultHandler$qqrpv
@Vcl@Forms@TCustomForm@DestroyWindowHandle$qqrv
@Vcl@Forms@TCustomForm@DestroyHandle$qqrv
@Vcl@Forms@TCustomForm@CreateWindowHandle$qqrrx26Vcl@Controls@TCreateParams
@Vcl@Forms@TCustomForm@CreateWnd$qqrv
@Vcl@Forms@TCustomForm@CreateParams$qqrr26Vcl@Controls@TCreateParams
@Vcl@Forms@TCustomForm@AlignControls$qqrp21Vcl@Controls@TControlr18System@Types@TRect
@Vcl@Forms@TCustomForm@ClientWndProc$qqrr24Winapi@Messages@TMessage
@Vcl@Forms@TCustomForm@WndProc$qqrr24Winapi@Messages@TMessage
@Vcl@Forms@TCustomForm@ValidateRename$qqrp25System@Classes@TComponentx20System@UnicodeStringt2
@Vcl@Forms@TCustomForm@SetParent$qqrp24Vcl@Controls@TWinControl
@Vcl@Forms@TCustomForm@WantChildKey$qqrp21Vcl@Controls@TControlr24Winapi@Messages@TMessage
@Vcl@Forms@TCustomForm@SetParentBiDiMode$qqro
@Vcl@Forms@TCustomForm@GetFloating$qqrv
@Vcl@Forms@TCustomForm@GetClientRect$qqrv
@Vcl@Forms@TCustomForm@DefineProperties$qqrp21System@Classes@TFiler
@Vcl@Forms@TCustomForm@ReadState$qqrp22System@Classes@TReader
@Vcl@Forms@TCustomForm@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation
@Vcl@Forms@TCustomForm@Loaded$qqrv
@Vcl@Forms@TCustomForm@DoDestroy$qqrv
@Vcl@Forms@TCustomForm@DoCreate$qqrv
@Vcl@Forms@TCustomForm@$bdtr$qqrv
@Vcl@Forms@TCustomForm@BeforeDestruction$qqrv
@Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponenti
@Vcl@Forms@TCustomForm@AfterConstruction$qqrv
@Vcl@Forms@TCustomForm@$bcdtr$qqrv
@Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponent
@Vcl@Forms@TCustomForm@$bcctr$qqrv
@Vcl@Forms@TScrollBox@$bcdtr$qqrv
@Vcl@Forms@TScrollBox@$bcctr$qqrv
@Vcl@Forms@TScrollingWinControl@AdjustClientRect$qqrr18System@Types@TRect
@Vcl@Forms@TScrollingWinControl@AutoScrollInView$qqrp21Vcl@Controls@TControl
@Vcl@Forms@TScrollingWinControl@DoGetGestureOptions$qqrr60System@%Set$t32Vcl@Controls@TInteractiveGesture$iuc$0$iuc$4%r66System@%Set$t38Vcl@Controls@TInteractiveGestureOption$iuc$0$iuc$4%
@Vcl@Forms@TScrollingWinControl@DoGesture$qqrrx30Vcl@Controls@TGestureEventInforo
@Vcl@Forms@TScrollingWinControl@AutoScrollEnabled$qqrv
@Vcl@Forms@TScrollingWinControl@$bdtr$qqrv
@Vcl@Forms@Application
@$xp$15Vcl@Forms@TForm
@Vcl@Forms@TForm@
@Vcl@Clipbrd@initialization$qqrv
@Vcl@Clipbrd@Finalization$qqrv
@Vcl@Mask@initialization$qqrv
@Vcl@Mask@Finalization$qqrv
@Vcl@Grids@initialization$qqrv
@Vcl@Grids@Finalization$qqrv
@Vcl@Grids@TDrawGrid@$bcdtr$qqrv
@Vcl@Grids@TDrawGrid@$bcctr$qqrv
@Vcl@Grids@TStringGrid@$bcdtr$qqrv
@Vcl@Grids@TStringGrid@$bcctr$qqrv
@Vcl@Grids@TCustomDrawGrid@$bcdtr$qqrv
@Vcl@Grids@TCustomDrawGrid@$bcctr$qqrv
@Vcl@Grids@TCustomGrid@$bcdtr$qqrv
@Vcl@Grids@TCustomGrid@$bcctr$qqrv
@Vcl@Buttons@initialization$qqrv
@Vcl@Buttons@Finalization$qqrv
@Vcl@Buttons@TBitBtn@$bcdtr$qqrv
@Vcl@Buttons@TBitBtn@$bcctr$qqrv
@Vcl@Categorybuttons@initialization$qqrv
@Vcl@Categorybuttons@Finalization$qqrv
@Vcl@Categorybuttons@TCategoryButtons@$bcdtr$qqrv
@Vcl@Categorybuttons@TCategoryButtons@$bcctr$qqrv
@Vcl@Buttongroup@initialization$qqrv
@Vcl@Buttongroup@Finalization$qqrv
@Vcl@Buttongroup@TButtonGroup@$bcdtr$qqrv
@Vcl@Buttongroup@TButtonGroup@$bcctr$qqrv
@Vcl@Styles@initialization$qqrv
@Vcl@Styles@Finalization$qqrv
@Vcl@Styles@TStyleEngine@$bcdtr$qqrv
@Vcl@Styles@TStyleEngine@$bcctr$qqrv

rtl190.bpl

@System@initialization$qqrv
@System@Finalization$qqrv
@System@UTF8ToUnicodeString$qqrpxc
@System@FreeMemory$qpv
@System@@CheckAutoResult$qqrl
@System@UnregisterModule$qqrp17System@TLibModule
@System@RegisterModule$qqrp17System@TLibModule
@System@FindHInstance$qqrpv
@System@@DynArrayRelease$qqrpv
@System@@DynArrayAddRef$qqrpv
@System@SetAnsiString$qqrp27System@%AnsiStringT$us$i0$%pbius
@System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%
@System@@UStrFromPChar$qqrr20System@UnicodeStringpc
@System@@WStrFromLStr$qqrr17System@WideStringx27System@%AnsiStringT$us$i0$%
@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus
@System@@LStrSetLength$qqrr27System@%AnsiStringT$us$i0$%ius
@System@@LStrInsert$qqrx27System@%AnsiStringT$us$i0$%r27System@%AnsiStringT$us$i0$%i
@System@@LStrDelete$qqrr27System@%AnsiStringT$us$i0$%ii
@System@@LStrCmp$qqrv
@System@@LStrCat3$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%t2
@System@@LStrCat$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@System@@LStrFromWStr$qqrr27System@%AnsiStringT$us$i0$%x17System@WideStringus
@System@@LStrFromArray$qqrr27System@%AnsiStringT$us$i0$%pcius
@System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus
@System@@LStrFromWChar$qqrr27System@%AnsiStringT$us$i0$%bus
@System@@LStrAsg$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@LStrFromPWCharLen$qqrr27System@%AnsiStringT$us$i0$%pbius
@System@@LStrClr$qqrpv
@System@@UStrClr$qqrpv
@System@@HandleFinally$qqrv
@System@TObject@MethodName$qqrpv
@System@TObject@MethodAddress$qqrx20System@UnicodeString
@System@TObject@MethodAddress$qqrrx28System@%SmallString$iuc$255%
@System@TObject@Dispatch$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@ClassInfo$qqrv
@System@TObject@InheritsFrom$qqrp17System@TMetaClass
@System@@FindDynaInst$qqrxp14System@TObjects
@System@TObject@UnitScope$qqrv
@System@TObject@UnitName$qqrv
@System@TObject@GetInterfaceTable$qqrv
@System@TObject@GetInterfaceEntry$qqrrx5_GUID
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@InitInstance$qqrpv
@System@TObject@$bdtr$qqrv
@System@TObject@InstanceSize$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@TObject@ClassParent$qqrv
@System@TObject@ClassNameIs$qqrx20System@UnicodeString
@System@TObject@QualifiedClassName$qqrv
@System@TObject@ClassName$qqrv
@System@Set8087CW$qqrus
@System@Reset8087CW$qqrv
@System@SetRaiseList$qqrpv
@System@RaiseList$qqrv
@System@IsMemoryManagerSet$qqrv
@System@SetMemoryManager$qqrrx23System@TMemoryManagerEx
@System@GetMemoryManager$qqrr23System@TMemoryManagerEx
@System@DefaultSystemCodePage
@System@IsMultiThread
@System@IsConsole
@System@ExitProc
@System@CmdLine
@System@IsLibrary
@System@MainInstance
@System@ExceptionAcquired
@System@RaiseExceptObjProc
@System@ExceptObjProc
@System@Types@initialization$qqrv
@System@Types@Finalization$qqrv
@System@Uitypes@initialization$qqrv
@System@Uitypes@Finalization$qqrv
@System@Sysconst@initialization$qqrv
@System@Sysconst@Finalization$qqrv
@System@Internal@Excutils@initialization$qqrv
@System@Internal@Excutils@Finalization$qqrv
@System@Rtlconsts@initialization$qqrv
@System@Rtlconsts@Finalization$qqrv
@System@Character@initialization$qqrv
@System@Character@Finalization$qqrv
@Winapi@Shfolder@initialization$qqrv
@Winapi@Shfolder@Finalization$qqrv
@Winapi@Imagehlp@initialization$qqrv
@Winapi@Imagehlp@Finalization$qqrv
@System@Sysutils@initialization$qqrv
@System@Sysutils@Finalization$qqrv
@System@Sysutils@TOSVersion@$bcctr$qqrv
@System@Sysutils@TEncoding@$bcdtr$qqrv
@System@Sysutils@TLanguages@$bcdtr$qqrv
@System@Sysutils@Exception@$bcdtr$qqrv
@System@Sysutils@Exception@$bcctr$qqrv
@System@Sysutils@Exception@$bdtr$qqrv
@System@Sysutils@Exception@$bctr$qqrx20System@UnicodeString
@System@Sysutils@StrToIntDef$qqrx20System@UnicodeStringi
@System@Sysutils@TOSVersion@$bcdtr$qqrv
@System@Sysutils@TEncoding@$bcctr$qqrv
@System@Sysutils@Exception@
@System@Sysutils@TLanguages@$bcctr$qqrv
@System@Math@initialization$qqrv
@System@Math@Finalization$qqrv
@System@Timespan@initialization$qqrv
@System@Timespan@Finalization$qqrv
@System@Timespan@TTimeSpan@$bcctr$qqrv
@System@Timespan@TTimeSpan@$bcdtr$qqrv
@System@Varutils@initialization$qqrv
@System@Varutils@Finalization$qqrv
@System@Variants@initialization$qqrv
@System@Variants@Finalization$qqrv
@System@Strutils@initialization$qqrv
@System@Strutils@Finalization$qqrv
@System@Ansistrings@initialization$qqrv
@System@Ansistrings@Finalization$qqrv
@System@Rtti@initialization$qqrv
@System@Rtti@Finalization$qqrv
@System@Typinfo@initialization$qqrv
@System@Typinfo@Finalization$qqrv
@System@Generics@Defaults@initialization$qqrv
@System@Generics@Defaults@Finalization$qqrv
@System@Generics@Defaults@TIStringComparer@$bcdtr$qqrv
@System@Generics@Defaults@TStringComparer@$bcdtr$qqrv
@System@Generics@Defaults@TIStringComparer@$bcctr$qqrv
@System@Generics@Defaults@TStringComparer@$bcctr$qqrv
@System@Diagnostics@initialization$qqrv
@System@Diagnostics@Finalization$qqrv
@System@Syncobjs@initialization$qqrv
@System@Syncobjs@Finalization$qqrv
@System@Syncobjs@TInterlocked@Increment$qqrri
@System@Generics@Collections@initialization$qqrv
@System@Generics@Collections@Finalization$qqrv
@System@Classes@initialization$qqrv
@System@Classes@Finalization$qqrv
@System@Classes@TObserverMapping@$bcdtr$qqrv
@System@Classes@TLoginCredentialService@$bcdtr$qqrv
@System@Classes@TLoginCredentialService@$bcctr$qqrv
@System@Classes@TBinaryWriter@$bcdtr$qqrv
@System@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2
@System@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv
@System@Classes@TComponent@ObserverAdded$qqrxix52System@%DelphiInterface$t24System@Classes@IObserver%
@System@Classes@TComponent@CanObserve$qqrxi
@System@Classes@TComponent@UpdateAction$qqrp27System@Classes@TBasicAction
@System@Classes@TComponent@GetObservers$qqrv
@System@Classes@TComponent@$bcctr$qqrv
@System@Classes@TComponent@WriteState$qqrp22System@Classes@TWriter
@System@Classes@TComponent@$bdtr$qqrv
@System@Classes@TThread@$bcdtr$qqrv
@System@Classes@TThread@$bcctr$qqrv
@System@Classes@TPersistent@Assign$qqrp26System@Classes@TPersistent
@System@Classes@TPersistent@$bdtr$qqrv
@System@Classes@TBinaryWriter@$bcctr$qqrv
@System@Classes@TComponent@$bcdtr$qqrv
@System@Classes@TObserverMapping@$bcctr$qqrv
@System@Uiconsts@initialization$qqrv
@System@Uiconsts@Finalization$qqrv
@System@Actions@initialization$qqrv
@System@Actions@Finalization$qqrv
@System@Win@Comconst@initialization$qqrv
@System@Win@Comconst@Finalization$qqrv
@System@Win@Comobj@initialization$qqrv
@System@Win@Comobj@Finalization$qqrv
@System@Win@Comobj@TComServerObject@$bcctr$qqrv
@System@Win@Comobj@TComServerObject@$bcdtr$qqrv
@System@Contnrs@initialization$qqrv
@System@Contnrs@Finalization$qqrv
@System@Dateutils@initialization$qqrv
@System@Dateutils@Finalization$qqrv
@System@Dateutils@TTimeZone@$bcdtr$qqrv
@System@Dateutils@TTimeZone@$bcctr$qqrv
@System@Masks@initialization$qqrv
@System@Masks@Finalization$qqrv
@System@Ioutils@initialization$qqrv
@System@Ioutils@Finalization$qqrv
@System@Ioutils@TPath@$bcctr$qqrv
@System@Ioutils@TPath@$bcdtr$qqrv
@System@Inifiles@initialization$qqrv
@System@Inifiles@Finalization$qqrv
@System@Win@Registry@initialization$qqrv
@System@Win@Registry@Finalization$qqrv
@System@Win@Registry@TRegistry@$bcctr$qqrv
@System@Win@Registry@TRegistry@$bcdtr$qqrv
@System@Maskutils@initialization$qqrv
@System@Maskutils@Finalization$qqrv
@System@Helpintfs@initialization$qqrv
@System@Helpintfs@Finalization$qqrv
@Winapi@Msxmlintf@initialization$qqrv
@Winapi@Msxmlintf@Finalization$qqrv
@Winapi@Uxtheme@initialization$qqrv
@Winapi@Uxtheme@Finalization$qqrv
@Winapi@Flatsb@initialization$qqrv
@Winapi@Flatsb@Finalization$qqrv
@Winapi@Multimon@initialization$qqrv
@Winapi@Multimon@Finalization$qqrv
@System@Widestrutils@initialization$qqrv
@System@Widestrutils@Finalization$qqrv
@System@Zlib@initialization$qqrv
@System@Zlib@Finalization$qqrv
@Winapi@Wincodec@initialization$qqrv
@Winapi@Wincodec@Finalization$qqrv

kernel32

CloseHandle
CreateFileA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetUserDefaultLCID
GetVersion
GetVersionExA
GetVersionExW
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualQuery
WideCharToMultiByte
WriteFile

user32

EnumThreadWindows
MessageBoxA
wsprintfA

vmprotectsdk32

VMProtectBegin
VMProtectDecryptStringA
VMProtectEnd

Exports

Exports

@@Unit1@Finalize
@@Unit1@Initialize
_Form1
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 153KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/BCB/Project1.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/BCB/Project1.res
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/BCB/Unit1.cpp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/BCB/Unit1.dfm
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/BCB/Unit1.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/BCB/VMProtectSDK.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/BCB/VMProtectSDK32.dll
.dll windows:5 windows x86 arch:x86

b9f19b4d3ce951c4ff6196681bbb3439

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/BCB/VMProtectSDK32.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Delphi/Project1.dof
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Delphi/Project1.dpr
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Delphi/Project1.exe
.exe windows:5 windows x86 arch:x86

1e7575186edecf060e4585f8bc74203f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
RegCloseKey

user32

LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetClassLongW
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CreateAcceleratorTableW
CopyIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout

kernel32

lstrcmpiA
LoadLibraryA
LocalFree
LocalAlloc
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
IsValidLocale
GetSystemDefaultUILanguage
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetUserDefaultUILanguage
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcpyW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
TryEnterCriticalSection
SwitchToThread
SuspendThread
SizeofResource
SignalObjectAndWait
SetThreadPriority
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
RaiseException
IsDebuggerPresent
MultiByteToWideChar
MulDiv
LockResource
LoadResource
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetExitCodeThread
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCPInfo
FreeResource
InterlockedExchangeAdd
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetEnhMetaFileBits
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
Chord
BitBlt
Arc
AbortDoc

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
IsEqualGUID

comctl32

InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create

winspool.drv

OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
GetDefaultPrinterW

vmprotectsdk32

VMProtectDecryptStringA
VMProtectEnd
VMProtectBegin

Sections

.text
Size: 741KB - Virtual size: 741KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Delphi/Project1.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Delphi/Project1.res
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Delphi/Unit1.dfm
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Delphi/Unit1.pas
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Delphi/VMProtectSDK.pas
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Delphi/VMProtectSDK32.dll
.dll windows:5 windows x86 arch:x86

b9f19b4d3ce951c4ff6196681bbb3439

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Free Pascal/Project1
.macho macos arch:x86
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Free Pascal/Project1.exe
.exe windows:4 windows x86 arch:x86

31c9cdd1525221040f7f273b9a6216ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

vmprotectsdk32

VMProtectBegin
VMProtectDecryptStringA
VMProtectEnd

kernel32

CloseHandle
CompareStringA
CompareStringW
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
EnumCalendarInfoA
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
ExitThread
FindResourceA
FindResourceExA
FormatMessageA
FreeLibrary
FreeResource
GetCommandLineA
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadLocale
GetThreadPriority
GetUserDefaultLCID
GetVersionExA
GetWindowsDirectoryA
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadResource
LocalAlloc
LocalFree
LockResource
MultiByteToWideChar
ReadFile
ReadProcessMemory
ResetEvent
ResumeThread
SetEvent
SetFilePointer
SetLastError
SetThreadLocale
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
WaitForSingleObject
WideCharToMultiByte
WriteFile

oleaut32

SysAllocStringLen
SysFreeString
SysReAllocStringLen

user32

CharLowerA
CharLowerBuffA
CharLowerBuffW
CharUpperA
CharUpperBuffA
CharUpperBuffW
DialogBoxParamA
EndDialog
GetDlgItem
GetDlgItemTextA
GetSystemMetrics
MessageBeep
MessageBoxA
SetFocus

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Free Pascal/Project1.pas
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Free Pascal/Resource.rc
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Free Pascal/Resource.res
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Free Pascal/VMProtectSDK.pas
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Free Pascal/VMProtectSDK32.dll
.dll windows:5 windows x86 arch:x86

b9f19b4d3ce951c4ff6196681bbb3439

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Free Pascal/libVMProtectSDK.dylib
.dylib macos arch:x64 arch:x86
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Free Pascal/makeit.bat
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Free Pascal/makeit.sh
.sh linux
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/GCC/Project1
.macho macos arch:x64
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/GCC/Project1.cpp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/GCC/VMProtectSDK.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/GCC/libVMProtectSDK.dylib
.dylib macos arch:x64 arch:x86
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/GCC/makeit.sh
.sh .vbs linux polyglot
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/VMProtectSDK.pas
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/VMProtectSDK32.dll
.dll windows:5 windows x86 arch:x86

b9f19b4d3ce951c4ff6196681bbb3439

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/libVMProtectSDK.dylib
.dylib macos arch:x64 arch:x86
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/project1
.macho macos arch:x86
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/project1.app/Contents/Info.plist
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/project1.app/Contents/MacOS/project1
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/project1.app/Contents/PkgInfo
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/project1.exe
.exe windows:4 windows x86 arch:x86

e78a5d103f3c1ceff54c4588d6a9ed5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

vmprotectsdk32

VMProtectBegin
VMProtectDecryptStringA
VMProtectEnd

comctl32

ImageList_Add
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_EndDrag
ImageList_GetImageCount
ImageList_Remove
ImageList_Replace
ImageList_SetImageCount
InitCommonControls

gdi32

Arc
BitBlt
Chord
CombineRgn
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateDIBitmap
CreateEllipticRgn
CreateFontIndirectA
CreateFontIndirectW
CreatePatternBrush
CreatePen
CreatePenIndirect
CreatePolygonRgn
CreateRectRgn
CreateRoundRectRgn
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
Ellipse
EnumFontFamiliesA
EnumFontFamiliesExA
EnumFontFamiliesExW
ExcludeClipRect
ExtCreatePen
ExtCreateRegion
ExtFloodFill
ExtSelectClipRgn
ExtTextOutA
ExtTextOutW
FillRgn
GetBitmapBits
GetBkColor
GetCharABCWidthsA
GetClipBox
GetClipRgn
GetCurrentObject
GetDCOrgEx
GetDIBits
GetDeviceCaps
GetMapMode
GetObjectA
GetObjectType
GetObjectW
GetPixel
GetROP2
GetRandomRgn
GetRgnBox
GetStockObject
GetTextAlign
GetTextColor
GetTextExtentExPointA
GetTextExtentExPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
GetTextMetricsA
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
LPtoDP
LineTo
MaskBlt
MoveToEx
OffsetRgn
OffsetViewportOrgEx
PatBlt
Pie
PolyBezier
Polygon
Polyline
PtInRegion
RealizePalette
RectVisible
Rectangle
RestoreDC
RoundRect
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetArcDirection
SetBkColor
SetBkMode
SetBrushOrgEx
SetMapMode
SetPixel
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchBlt
TextOutW

kernel32

CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
EnumCalendarInfoA
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceA
FindResourceExA
FormatMessageA
FreeEnvironmentStringsA
FreeLibrary
FreeResource
GetACP
GetCommandLineA
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsA
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesW
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadLocale
GetThreadPriority
GetTickCount
GetUserDefaultLCID
GetVersionExA
GetWindowsDirectoryA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
LockResource
MoveFileA
MoveFileW
MulDiv
MultiByteToWideChar
PeekNamedPipe
ReadFile
ReadProcessMemory
RemoveDirectoryA
RemoveDirectoryW
ResetEvent
ResumeThread
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEndOfFile
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetLastError
SetThreadLocale
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

ole32

OleInitialize
OleUninitialize

oleaut32

SafeArrayAccessData
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayRedim
SafeArrayUnaccessData
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VariantChangeTypeEx
VariantClear
VariantCopy
VariantInit

shell32

DragAcceptFiles
DragFinish
DragQueryFileA
DragQueryFileW

user32

AdjustWindowRectEx
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcA
CallWindowProcW
CharLowerA
CharLowerBuffA
CharLowerBuffW
CharToOemA
CharUpperA
CharUpperBuffA
CharUpperBuffW
ChildWindowFromPointEx
ClientToScreen
CloseClipboard
CopyImage
CountClipboardFormats
CreateCaret
CreateIconIndirect
CreateMenu
CreatePopupMenu
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DeleteMenu
DestroyCaret
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DispatchMessageW
DrawEdge
DrawFocusRect
DrawFrameControl
DrawMenuBar
DrawStateA
DrawStateW
DrawTextA
DrawTextW
EmptyClipboard
EnableMenuItem
EnableScrollBar
EnableWindow
EndPaint
EnumClipboardFormats
EnumPropsA
EnumThreadWindows
FillRect
FrameRect
GetActiveWindow
GetCapture
GetCaretPos
GetClassInfoA
GetClassInfoW
GetClassNameA
GetClientRect
GetClipboardData
GetClipboardFormatNameA
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyState
GetMenu
GetMenuItemCount
GetMenuItemInfoA
GetParent
GetPropA
GetScrollInfo
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowDC
GetWindowLongA
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
HideCaret
InflateRect
InsertMenuItemA
IntersectRect
InvalidateRect
InvalidateRgn
IsClipboardFormatAvailable
IsIconic
IsMenu
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadCursorA
LoadIconA
LoadImageA
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxW
MsgWaitForMultipleObjects
OemToCharA
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageA
PostQuitMessage
RedrawWindow
RegisterClassA
RegisterClassW
RegisterClipboardFormatA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
ScrollWindow
ScrollWindowEx
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetCaretPos
SetClassLongA
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoA
SetParent
SetPropA
SetRect
SetScrollInfo
SetSysColors
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowTextW
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
TrackPopupMenuEx
TranslateMessage
UnregisterClassA
UnregisterClassW
UpdateWindow
WindowFromDC
WindowFromPoint

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/project1.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/project1.lpi
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/project1.lpr
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/unit1.lfm
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/unit1.lrs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Lazarus/unit1.pas
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MASM/Project1.asm
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MASM/Project1.exe
.exe windows:4 windows x86 arch:x86

8fbba78ee3fc992258b0d48632a5a024

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
MessageBoxA
GetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

MultiByteToWideChar
GlobalFree
ExitProcess
GetModuleHandleA
GlobalAlloc

vmprotectsdk32

VMProtectDecryptStringA
VMProtectEnd
VMProtectBegin

Sections

.text
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MASM/Project1.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MASM/Project1.inc
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MASM/VMProtectSDK.inc
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MASM/VMProtectSDK32.dll
.dll windows:5 windows x86 arch:x86

b9f19b4d3ce951c4ff6196681bbb3439

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MASM/VMProtectSDK32.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MASM/VMProtectSDK64.dll
.dll windows:5 windows x64 arch:x64

1851ff453adce0cef5274e320d5bed3c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MASM/VMProtectSDK64.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MASM/makeit.bat
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/Project1.cpp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/Project1.sln
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/Project1.vcxproj
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/Project1.vcxproj.filters
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/Resource.rc
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/StdAfx.cpp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/StdAfx.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/VMProtectSDK.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/VMProtectSDK32.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/VMProtectSDK64.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/bin/Project1.exe
.exe windows:5 windows x86 arch:x86

a9dccdf6743a7166d3342a2be5a7ac84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
HeapReAlloc
HeapAlloc
HeapSize
GetStringTypeW
MultiByteToWideChar
LCMapStringW
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
HeapFree
Sleep
IsProcessorFeaturePresent

user32

SetFocus
GetDlgItem
MessageBoxA
DialogBoxParamA
EndDialog
GetDlgItemTextA

vmprotectsdk32

VMProtectDecryptStringA
VMProtectBegin
VMProtectEnd

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/bin/Project1.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/bin/VMProtectSDK32.dll
.dll windows:5 windows x86 arch:x86

b9f19b4d3ce951c4ff6196681bbb3439

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/bin/VMProtectSDK64.dll
.dll windows:5 windows x64 arch:x64

1851ff453adce0cef5274e320d5bed3c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MSVC/resource.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MinGW/Project1.cpp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MinGW/Project1.dev
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MinGW/Project1.exe
.exe windows:4 windows x86 arch:x86

60cebcec59e5019b6aa223ba1a5c67c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
atoi
fflush
fprintf
free
malloc
signal

user32

DialogBoxParamA
EndDialog
GetDlgItem
GetDlgItemTextA
MessageBoxA
SetFocus

vmprotectsdk32

VMProtectBegin
VMProtectDecryptStringA
VMProtectEnd

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MinGW/Project1.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MinGW/Project1_private.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MinGW/Project1_private.rc
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MinGW/Resource.rc
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MinGW/VMProtectSDK.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MinGW/VMProtectSDK32.a
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MinGW/VMProtectSDK32.dll
.dll windows:5 windows x86 arch:x86

b9f19b4d3ce951c4ff6196681bbb3439

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MinGW/makeit.bat
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/MinGW/resource.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Net/App.config
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Net/Form1.Designer.cs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Net/Form1.cs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Net/Form1.resx
.vbs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Net/Program.cs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Net/Project1.csproj
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Net/Properties/AssemblyInfo.cs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Net/bin/Project1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Ivan\Projects\vmpsoft\vmprotect\examples\code markers\Net\obj\Release\Project1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Net/bin/VMProtect.SDK.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

e:\master\vmpb-bb-job1\sdk\VMProtect.SDK\obj\Release\VMProtect.SDK.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/VB6/Form1.frm
.vbs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/VB6/Project1.exe
.exe windows:4 windows x86 arch:x86

1c15af9dd6df387719122b359dc175be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord644
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
__vbaFpI4
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
ord581

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/VB6/Project1.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/VB6/Project1.vbp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/VB6/Project1.vbw
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/VB6/VMProtectSDK.bas
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/VB6/VMProtectSDK32.dll
.dll windows:5 windows x86 arch:x86

b9f19b4d3ce951c4ff6196681bbb3439

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1.xcodeproj/project.pbxproj
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1.xcodeproj/project.xcworkspace/contents.xcworkspacedata
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/AppDelegate.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/AppDelegate.m
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/Base.lproj/MainMenu.xib
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/Images.xcassets/AppIcon.appiconset/Contents.json
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/Project1-Info.plist
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/Project1-Prefix.pch
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/Project1.app/Contents/Info.plist
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/Project1.app/Contents/MacOS/Project1
.macho macos arch:x64
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/Project1.app/Contents/MacOS/libVMProtectSDK.dylib
.dylib macos arch:x64 arch:x86
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/Project1.app/Contents/PkgInfo
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/Project1.app/Contents/Resources/Base.lproj/MainMenu.nib
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/Project1.app/Contents/Resources/en.lproj/Credits.rtf
.rtf
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/Project1.app/Contents/Resources/en.lproj/InfoPlist.strings
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/VMProtectSDK.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/en.lproj/Credits.rtf
.rtf
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/en.lproj/InfoPlist.strings
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/libVMProtectSDK.dylib
.dylib macos arch:x64 arch:x86
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1/main.m
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1Tests/Project1Tests-Info.plist
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1Tests/Project1Tests.m
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Code Markers/Xcode/Project1Tests/en.lproj/InfoPlist.strings
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Delphi/KeyGenExample.dpr
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Lib/KeyGen32.dll
.dll windows:5 windows x86 arch:x86

9e46d55512301a0e25ff020e01794a52

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
GetTickCount
EncodePointer
DecodePointer
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
IsProcessorFeaturePresent
Sleep
HeapSize
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
HeapReAlloc
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Exports

Exports

VMProtectFreeSerialNumberMemory
VMProtectGenerateSerialNumber

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Lib/KeyGen32.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Lib/KeyGen64.dll
.dll windows:5 windows x64 arch:x64

44d72ff3208e2f77edc20a3432274582

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
GetTickCount
EncodePointer
DecodePointer
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
RtlUnwindEx
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetStdHandle
GetModuleFileNameW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Exports

Exports

VMProtectFreeSerialNumberMemory
VMProtectGenerateSerialNumber

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Lib/KeyGen64.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Lib/KeyGenAPI.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/MSVC/KeyGenAPI.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/MSVC/KeyGenExample.cpp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/MSVC/KeyGenExample.sln
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/MSVC/KeyGenExample.vcproj
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/MSVC/stdafx.cpp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/MSVC/stdafx.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/MSVC/targetver.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Sources/KeyGen.cpp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Sources/KeyGen.def
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Sources/KeyGen.rc
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Sources/KeyGen.sln
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Sources/KeyGen.vcproj
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Sources/KeyGenAPI.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Sources/b64.cpp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Sources/b64.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Sources/resource.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Sources/sha-1.cpp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Sources/sha-1.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Sources/sshbn.cpp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Sources/sshbn.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Sources/stdafx.cpp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/DLL/Sources/stdafx.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/Net/KeyGen/AlorithmRSA.cs
.ps1
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/Net/KeyGen/BigInteger.cs
.js
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/Net/KeyGen/Generator.cs
.ps1
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/Net/KeyGen/KeyGen.csproj
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/Net/KeyGen/Properties/AssemblyInfo.cs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/Net/KeyGen/app.config
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/Net/KeyGenNet.sln
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/Net/Usage/Program.cs
.js
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/Net/Usage/Properties/AssemblyInfo.cs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/Net/Usage/Usage.csproj
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/Net/Usage/app.config
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/KeyGen/PHP/keygen.php
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/BCB/TestApp.cbproj
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/BCB/TestApp.cpp
.js
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/BCB/TestApp.exe
.exe windows:4 windows x86 arch:x86

26e7fb27c5c9cdac46ddac5efe7e2eda

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

rtl190.bpl

@System@initialization$qqrv
@System@Finalization$qqrv
@System@UTF8ToUnicodeString$qqrpxc
@System@FreeMemory$qpv
@System@@CheckAutoResult$qqrl
@System@UnregisterModule$qqrp17System@TLibModule
@System@RegisterModule$qqrp17System@TLibModule
@System@FindHInstance$qqrpv
@System@@DynArrayRelease$qqrpv
@System@@DynArrayAddRef$qqrpv
@System@SetAnsiString$qqrp27System@%AnsiStringT$us$i0$%pbius
@System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%
@System@@UStrFromPChar$qqrr20System@UnicodeStringpc
@System@@WStrFromLStr$qqrr17System@WideStringx27System@%AnsiStringT$us$i0$%
@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus
@System@@LStrSetLength$qqrr27System@%AnsiStringT$us$i0$%ius
@System@@LStrInsert$qqrx27System@%AnsiStringT$us$i0$%r27System@%AnsiStringT$us$i0$%i
@System@@LStrDelete$qqrr27System@%AnsiStringT$us$i0$%ii
@System@@LStrCmp$qqrv
@System@@LStrCat3$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%t2
@System@@LStrCat$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@System@@LStrFromWStr$qqrr27System@%AnsiStringT$us$i0$%x17System@WideStringus
@System@@LStrFromArray$qqrr27System@%AnsiStringT$us$i0$%pcius
@System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus
@System@@LStrFromWChar$qqrr27System@%AnsiStringT$us$i0$%bus
@System@@LStrAsg$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@LStrFromPWCharLen$qqrr27System@%AnsiStringT$us$i0$%pbius
@System@@LStrClr$qqrpv
@System@@UStrClr$qqrpv
@System@@HandleFinally$qqrv
@System@TObject@MethodName$qqrpv
@System@TObject@MethodAddress$qqrx20System@UnicodeString
@System@TObject@MethodAddress$qqrrx28System@%SmallString$iuc$255%
@System@TObject@Dispatch$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@ClassInfo$qqrv
@System@TObject@InheritsFrom$qqrp17System@TMetaClass
@System@@FindDynaInst$qqrxp14System@TObjects
@System@TObject@UnitScope$qqrv
@System@TObject@UnitName$qqrv
@System@TObject@GetInterfaceTable$qqrv
@System@TObject@GetInterfaceEntry$qqrrx5_GUID
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@InitInstance$qqrpv
@System@TObject@$bdtr$qqrv
@System@TObject@InstanceSize$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@TObject@ClassParent$qqrv
@System@TObject@ClassNameIs$qqrx20System@UnicodeString
@System@TObject@QualifiedClassName$qqrv
@System@TObject@ClassName$qqrv
@System@Set8087CW$qqrus
@System@Reset8087CW$qqrv
@System@SetRaiseList$qqrpv
@System@RaiseList$qqrv
@System@IsMemoryManagerSet$qqrv
@System@SetMemoryManager$qqrrx23System@TMemoryManagerEx
@System@DefaultSystemCodePage
@System@IsMultiThread
@System@IsConsole
@System@ExitProc
@System@CmdLine
@System@IsLibrary
@System@MainInstance
@System@ExceptionAcquired
@System@RaiseExceptObjProc
@System@ExceptObjProc
@System@Types@initialization$qqrv
@System@Types@Finalization$qqrv
@System@Uitypes@initialization$qqrv
@System@Uitypes@Finalization$qqrv
@System@Sysconst@initialization$qqrv
@System@Sysconst@Finalization$qqrv
@System@Internal@Excutils@initialization$qqrv
@System@Internal@Excutils@Finalization$qqrv
@System@Rtlconsts@initialization$qqrv
@System@Rtlconsts@Finalization$qqrv
@System@Character@initialization$qqrv
@System@Character@Finalization$qqrv
@Winapi@Shfolder@initialization$qqrv
@Winapi@Shfolder@Finalization$qqrv
@Winapi@Imagehlp@initialization$qqrv
@Winapi@Imagehlp@Finalization$qqrv
@System@Sysutils@initialization$qqrv
@System@Sysutils@Finalization$qqrv
@System@Sysutils@TOSVersion@$bcctr$qqrv
@System@Sysutils@TEncoding@$bcdtr$qqrv
@System@Sysutils@TLanguages@$bcdtr$qqrv
@System@Sysutils@Exception@$bcdtr$qqrv
@System@Sysutils@Exception@$bcctr$qqrv
@System@Sysutils@Exception@$bdtr$qqrv
@System@Sysutils@Exception@$bctr$qqrx20System@UnicodeString
@System@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi
@System@Sysutils@ExtractFileName$qqrx20System@UnicodeString
@System@Sysutils@TOSVersion@$bcdtr$qqrv
@System@Sysutils@TEncoding@$bcctr$qqrv
@System@Sysutils@Exception@
@System@Sysutils@TLanguages@$bcctr$qqrv
@System@Math@initialization$qqrv
@System@Math@Finalization$qqrv
@System@Timespan@initialization$qqrv
@System@Timespan@Finalization$qqrv
@System@Timespan@TTimeSpan@$bcctr$qqrv
@System@Timespan@TTimeSpan@$bcdtr$qqrv
@System@Varutils@initialization$qqrv
@System@Varutils@Finalization$qqrv
@System@Variants@initialization$qqrv
@System@Variants@Finalization$qqrv
@System@Strutils@initialization$qqrv
@System@Strutils@Finalization$qqrv
@System@Ansistrings@initialization$qqrv
@System@Ansistrings@Finalization$qqrv
@System@Rtti@initialization$qqrv
@System@Rtti@Finalization$qqrv
@System@Typinfo@initialization$qqrv
@System@Typinfo@Finalization$qqrv
@System@Generics@Defaults@initialization$qqrv
@System@Generics@Defaults@Finalization$qqrv
@System@Generics@Defaults@TIStringComparer@$bcdtr$qqrv
@System@Generics@Defaults@TStringComparer@$bcdtr$qqrv
@System@Generics@Defaults@TIStringComparer@$bcctr$qqrv
@System@Generics@Defaults@TStringComparer@$bcctr$qqrv
@System@Diagnostics@initialization$qqrv
@System@Diagnostics@Finalization$qqrv
@System@Syncobjs@initialization$qqrv
@System@Syncobjs@Finalization$qqrv
@System@Syncobjs@TInterlocked@Increment$qqrri
@System@Generics@Collections@initialization$qqrv
@System@Generics@Collections@Finalization$qqrv
@System@Classes@initialization$qqrv
@System@Classes@Finalization$qqrv
@System@Classes@TObserverMapping@$bcdtr$qqrv
@System@Classes@TLoginCredentialService@$bcdtr$qqrv
@System@Classes@TLoginCredentialService@$bcctr$qqrv
@System@Classes@TBinaryWriter@$bcdtr$qqrv
@System@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2
@System@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv
@System@Classes@TComponent@ObserverAdded$qqrxix52System@%DelphiInterface$t24System@Classes@IObserver%
@System@Classes@TComponent@CanObserve$qqrxi
@System@Classes@TComponent@UpdateAction$qqrp27System@Classes@TBasicAction
@System@Classes@TComponent@GetObservers$qqrv
@System@Classes@TComponent@$bcctr$qqrv
@System@Classes@TComponent@WriteState$qqrp22System@Classes@TWriter
@System@Classes@TComponent@$bdtr$qqrv
@System@Classes@TThread@$bcdtr$qqrv
@System@Classes@TThread@$bcctr$qqrv
@System@Classes@TStrings@EndUpdate$qqrv
@System@Classes@TStrings@BeginUpdate$qqrv
@System@Classes@TPersistent@Assign$qqrp26System@Classes@TPersistent
@System@Classes@TPersistent@$bdtr$qqrv
@System@Classes@TBinaryWriter@$bcctr$qqrv
@System@Classes@TComponent@$bcdtr$qqrv
@System@Classes@TObserverMapping@$bcctr$qqrv
@System@Uiconsts@initialization$qqrv
@System@Uiconsts@Finalization$qqrv
@System@Actions@initialization$qqrv
@System@Actions@Finalization$qqrv
@System@Win@Comconst@initialization$qqrv
@System@Win@Comconst@Finalization$qqrv
@System@Win@Comobj@initialization$qqrv
@System@Win@Comobj@Finalization$qqrv
@System@Win@Comobj@TComServerObject@$bcctr$qqrv
@System@Win@Comobj@TComServerObject@$bcdtr$qqrv
@System@Contnrs@initialization$qqrv
@System@Contnrs@Finalization$qqrv
@System@Dateutils@initialization$qqrv
@System@Dateutils@Finalization$qqrv
@System@Dateutils@TTimeZone@$bcdtr$qqrv
@System@Dateutils@TTimeZone@$bcctr$qqrv
@System@Masks@initialization$qqrv
@System@Masks@Finalization$qqrv
@System@Ioutils@initialization$qqrv
@System@Ioutils@Finalization$qqrv
@System@Ioutils@TPath@$bcctr$qqrv
@System@Ioutils@TPath@$bcdtr$qqrv
@System@Inifiles@initialization$qqrv
@System@Inifiles@Finalization$qqrv
@System@Win@Registry@initialization$qqrv
@System@Win@Registry@Finalization$qqrv
@System@Win@Registry@TRegistry@$bcctr$qqrv
@System@Win@Registry@TRegistry@$bcdtr$qqrv
@System@Helpintfs@initialization$qqrv
@System@Helpintfs@Finalization$qqrv
@Winapi@Msxmlintf@initialization$qqrv
@Winapi@Msxmlintf@Finalization$qqrv
@Winapi@Uxtheme@initialization$qqrv
@Winapi@Uxtheme@Finalization$qqrv
@Winapi@Flatsb@initialization$qqrv
@Winapi@Flatsb@Finalization$qqrv
@Winapi@Multimon@initialization$qqrv
@Winapi@Multimon@Finalization$qqrv
@System@Widestrutils@initialization$qqrv
@System@Widestrutils@Finalization$qqrv
@System@Zlib@initialization$qqrv
@System@Zlib@Finalization$qqrv
@System@Internal@Debugutils@initialization$qqrv
@System@Internal@Debugutils@Finalization$qqrv
@System@Internal@Debugutils@TDebugUtils@$bcdtr$qqrv
@System@Internal@Debugutils@TDebugUtils@$bcctr$qqrv
@Winapi@Wincodec@initialization$qqrv
@Winapi@Wincodec@Finalization$qqrv

vcl190.bpl

@Vcl@Consts@initialization$qqrv
@Vcl@Consts@Finalization$qqrv
@Vcl@Graphics@initialization$qqrv
@Vcl@Graphics@Finalization$qqrv
@Vcl@Graphutil@initialization$qqrv
@Vcl@Graphutil@Finalization$qqrv
@Vcl@Toolwin@initialization$qqrv
@Vcl@Toolwin@Finalization$qqrv
@Vcl@Printers@initialization$qqrv
@Vcl@Printers@Finalization$qqrv
@Vcl@Stdactns@initialization$qqrv
@Vcl@Stdactns@Finalization$qqrv
@Vcl@Comstrs@initialization$qqrv
@Vcl@Comstrs@Finalization$qqrv
@Vcl@Extctrls@initialization$qqrv
@Vcl@Extctrls@Finalization$qqrv
@Vcl@Extctrls@TLinkLabel@$bcdtr$qqrv
@Vcl@Extctrls@TLinkLabel@$bcctr$qqrv
@Vcl@Extctrls@TCustomLinkLabel@$bcdtr$qqrv
@Vcl@Extctrls@TCustomLinkLabel@$bcctr$qqrv
@Vcl@Extctrls@TCategoryPanelGroup@$bcdtr$qqrv
@Vcl@Extctrls@TCategoryPanelGroup@$bcctr$qqrv
@Vcl@Extctrls@TCustomCategoryPanelGroup@$bcdtr$qqrv
@Vcl@Extctrls@TCustomCategoryPanelGroup@$bcctr$qqrv
@Vcl@Stdctrls@initialization$qqrv
@Vcl@Stdctrls@Finalization$qqrv
@Vcl@Stdctrls@TStaticText@$bcdtr$qqrv
@Vcl@Stdctrls@TStaticText@$bcctr$qqrv
@Vcl@Stdctrls@TListBox@$bcdtr$qqrv
@Vcl@Stdctrls@TListBox@$bcctr$qqrv
@Vcl@Stdctrls@TCheckBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCheckBox@$bcctr$qqrv
@Vcl@Stdctrls@TButton@$bcdtr$qqrv
@Vcl@Stdctrls@TButton@$bcctr$qqrv
@Vcl@Stdctrls@TComboBox@$bcdtr$qqrv
@Vcl@Stdctrls@TComboBox@$bcctr$qqrv
@Vcl@Stdctrls@TMemo@$bcdtr$qqrv
@Vcl@Stdctrls@TMemo@$bcctr$qqrv
@Vcl@Stdctrls@TEdit@$bcdtr$qqrv
@Vcl@Stdctrls@TEdit@$bcctr$qqrv
@Vcl@Stdctrls@TGroupBox@$bcdtr$qqrv
@Vcl@Stdctrls@TGroupBox@$bcctr$qqrv
@Vcl@Stdctrls@TCustomStaticText@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomStaticText@$bcctr$qqrv
@Vcl@Stdctrls@TScrollBar@$bcdtr$qqrv
@Vcl@Stdctrls@TScrollBar@$bcctr$qqrv
@Vcl@Stdctrls@TCustomListBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomListBox@$bcctr$qqrv
@Vcl@Stdctrls@TRadioButton@$bcdtr$qqrv
@Vcl@Stdctrls@TRadioButton@$bcctr$qqrv
@Vcl@Stdctrls@TCustomCheckBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomCheckBox@$bcctr$qqrv
@Vcl@Stdctrls@TCustomButton@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomButton@$bcctr$qqrv
@Vcl@Stdctrls@TCustomComboBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomComboBox@$bcctr$qqrv
@Vcl@Stdctrls@TCustomMemo@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomMemo@$bcctr$qqrv
@Vcl@Stdctrls@TCustomEdit@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomEdit@$bcctr$qqrv
@Vcl@Stdctrls@TCustomGroupBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomGroupBox@$bcctr$qqrv
@Vcl@Stdctrls@TButton@
@Vcl@Stdctrls@TMemo@
@Vcl@Stdctrls@TEdit@
@Vcl@Stdctrls@TLabel@
@Vcl@Listactns@initialization$qqrv
@Vcl@Listactns@Finalization$qqrv
@Vcl@Comctrls@initialization$qqrv
@Vcl@Comctrls@Finalization$qqrv
@Vcl@Comctrls@THeaderControl@$bcdtr$qqrv
@Vcl@Comctrls@THeaderControl@$bcctr$qqrv
@Vcl@Comctrls@TStatusBar@$bcdtr$qqrv
@Vcl@Comctrls@TStatusBar@$bcctr$qqrv
@Vcl@Comctrls@TComboBoxEx@$bcdtr$qqrv
@Vcl@Comctrls@TComboBoxEx@$bcctr$qqrv
@Vcl@Comctrls@TCustomComboBoxEx@$bcdtr$qqrv
@Vcl@Comctrls@TCustomComboBoxEx@$bcctr$qqrv
@Vcl@Comctrls@TPageScroller@$bcdtr$qqrv
@Vcl@Comctrls@TPageScroller@$bcctr$qqrv
@Vcl@Comctrls@TDateTimePicker@$bcdtr$qqrv
@Vcl@Comctrls@TDateTimePicker@$bcctr$qqrv
@Vcl@Comctrls@TCoolBar@$bcdtr$qqrv
@Vcl@Comctrls@TCoolBar@$bcctr$qqrv
@Vcl@Comctrls@TToolBar@$bcdtr$qqrv
@Vcl@Comctrls@TToolBar@$bcctr$qqrv
@Vcl@Comctrls@TListView@$bcdtr$qqrv
@Vcl@Comctrls@TListView@$bcctr$qqrv
@Vcl@Comctrls@TCustomListView@$bcdtr$qqrv
@Vcl@Comctrls@TCustomListView@$bcctr$qqrv
@Vcl@Comctrls@THotKey@$bcdtr$qqrv
@Vcl@Comctrls@THotKey@$bcctr$qqrv
@Vcl@Comctrls@TCustomHotKey@$bcdtr$qqrv
@Vcl@Comctrls@TCustomHotKey@$bcctr$qqrv
@Vcl@Comctrls@TUpDown@$bcdtr$qqrv
@Vcl@Comctrls@TUpDown@$bcctr$qqrv
@Vcl@Comctrls@TCustomUpDown@$bcdtr$qqrv
@Vcl@Comctrls@TCustomUpDown@$bcctr$qqrv
@Vcl@Comctrls@TRichEdit@$bcdtr$qqrv
@Vcl@Comctrls@TRichEdit@$bcctr$qqrv
@Vcl@Comctrls@TCustomRichEdit@$bcdtr$qqrv
@Vcl@Comctrls@TCustomRichEdit@$bcctr$qqrv
@Vcl@Comctrls@TProgressBar@$bcdtr$qqrv
@Vcl@Comctrls@TProgressBar@$bcctr$qqrv
@Vcl@Comctrls@TTrackBar@$bcdtr$qqrv
@Vcl@Comctrls@TTrackBar@$bcctr$qqrv
@Vcl@Comctrls@TTreeView@$bcdtr$qqrv
@Vcl@Comctrls@TTreeView@$bcctr$qqrv
@Vcl@Comctrls@TCustomTreeView@$bcdtr$qqrv
@Vcl@Comctrls@TCustomTreeView@$bcctr$qqrv
@Vcl@Comctrls@TCustomHeaderControl@$bcdtr$qqrv
@Vcl@Comctrls@TCustomHeaderControl@$bcctr$qqrv
@Vcl@Comctrls@TCustomStatusBar@$bcdtr$qqrv
@Vcl@Comctrls@TCustomStatusBar@$bcctr$qqrv
@Vcl@Comctrls@TTabControl@$bcdtr$qqrv
@Vcl@Comctrls@TTabControl@$bcctr$qqrv
@Vcl@Comctrls@TCustomTabControl@$bcdtr$qqrv
@Vcl@Comctrls@TCustomTabControl@$bcctr$qqrv
@Vcl@Dialogs@initialization$qqrv
@Vcl@Dialogs@Finalization$qqrv
@Vcl@Menus@initialization$qqrv
@Vcl@Menus@Finalization$qqrv
@Vcl@Imglist@initialization$qqrv
@Vcl@Imglist@Finalization$qqrv
@Vcl@Actnlist@initialization$qqrv
@Vcl@Actnlist@Finalization$qqrv
@Vcl@Controls@initialization$qqrv
@Vcl@Controls@Finalization$qqrv
@Vcl@Controls@TWinControl@UpdateControlOriginalParentSize$qqrp21Vcl@Controls@TControlr19System@Types@TPoint
@Vcl@Controls@TWinControl@UpdateTIPStatus$qqrv
@Vcl@Controls@TWinControl@DockReplaceDockClient$qqrp21Vcl@Controls@TControlp24Vcl@Controls@TWinControlt119Vcl@Controls@TAlignt1
@Vcl@Controls@TWinControl@SetParentBackground$qqro
@Vcl@Controls@TWinControl@CanAutoSize$qqrrit1
@Vcl@Controls@TWinControl@AssignTo$qqrp26System@Classes@TPersistent
@Vcl@Controls@TWinControl@UpdateStyleElements$qqrv
@Vcl@Controls@TWinControl@ConstrainedResize$qqrrit1t1t1
@Vcl@Controls@TWinControl@CanResize$qqrrit1
@Vcl@Controls@TWinControl@GetClientOrigin$qqrv
@Vcl@Controls@TWinControl@GetControlExtents$qqrv
@Vcl@Controls@TWinControl@Repaint$qqrv
@Vcl@Controls@TWinControl@Update$qqrv
@Vcl@Controls@TWinControl@Invalidate$qqrv
@Vcl@Controls@TWinControl@GetDeviceContext$qqrrp6HWND__
@Vcl@Controls@TWinControl@ShowControl$qqrp21Vcl@Controls@TControl
@Vcl@Controls@TWinControl@SetBounds$qqriiii
@Vcl@Controls@TWinControl@SetParentDoubleBuffered$qqro
@Vcl@Controls@TWinControl@CustomAlignPosition$qqrp21Vcl@Controls@TControlrit2t2t2r18System@Types@TRectrx23Vcl@Controls@TAlignInfo
@Vcl@Controls@TWinControl@CustomAlignInsertBefore$qqrp21Vcl@Controls@TControlt1
@Vcl@Controls@TWinControl@CreateHandle$qqrv
@Vcl@Controls@TWinControl@DestroyWnd$qqrv
@Vcl@Controls@TWinControl@$bdtr$qqrv
@Vcl@Controls@TControl@InitiateAction$qqrv
@Vcl@Controls@TControl@GetFloatingDockSiteClass$qqrv
@Vcl@Controls@TControl@CreateTouchManager$qqrv
@Vcl@Controls@TControl@SetBiDiMode$qqr24System@Classes@TBiDiMode
@Vcl@Controls@TControl@SetText$qqrx20System@UnicodeString
@Vcl@Controls@TControl@GetText$qqrv
@Vcl@Controls@TControl@SetEnabled$qqro
@Vcl@Controls@TControl@SetName$qqrx20System@UnicodeString
@Vcl@Controls@TControl@SetAutoSize$qqro
@Vcl@Controls@TControl@SetDragMode$qqr24System@Uitypes@TDragMode
@Vcl@Controls@TControl@GetAction$qqrv
@Vcl@Controls@TControl@GetEnabled$qqrv
@Vcl@Controls@TControl@GetDragImages$qqrv
@Vcl@Controls@TControl@$bdtr$qqrv
@Vcl@Themes@initialization$qqrv
@Vcl@Themes@Finalization$qqrv
@Vcl@Themes@TCustomStyleEngine@$bcdtr$qqrv
@Vcl@Themes@TCustomStyleEngine@$bcctr$qqrv
@Vcl@Forms@initialization$qqrv
@Vcl@Forms@Finalization$qqrv
@Vcl@Forms@TApplication@SetMainFormOnTaskBar$qqrxo
@Vcl@Forms@TApplication@GetExeName$qqrv
@Vcl@Forms@TApplication@ShowException$qqrp25System@Sysutils@Exception
@Vcl@Forms@TApplication@MessageBox$qqrpxbt1i
@Vcl@Forms@TApplication@Run$qqrv
@Vcl@Forms@TApplication@CreateForm$qqrp17System@TMetaClasspv
@Vcl@Forms@TApplication@Initialize$qqrv
@Vcl@Forms@TForm@$bcdtr$qqrv
@Vcl@Forms@TForm@$bcctr$qqrv
@Vcl@Forms@TCustomForm@QueryInterface$qqsrx5_GUIDpv
@Vcl@Forms@TCustomForm@RequestAlign$qqrv
@Vcl@Forms@TCustomForm@UpdateActions$qqrv
@Vcl@Forms@TCustomForm@ShowModal$qqrv
@Vcl@Forms@TCustomForm@SetFocus$qqrv
@Vcl@Forms@TCustomForm@CloseQuery$qqrv
@Vcl@Forms@TCustomForm@Close$qqrv
@Vcl@Forms@TCustomForm@Resizing$qqr27System@Uitypes@TWindowState
@Vcl@Forms@TCustomForm@PaintWindow$qqrp5HDC__
@Vcl@Forms@TCustomForm@SetFocusedControl$qqrp24Vcl@Controls@TWinControl
@Vcl@Forms@TCustomForm@DefaultHandler$qqrpv
@Vcl@Forms@TCustomForm@DestroyWindowHandle$qqrv
@Vcl@Forms@TCustomForm@DestroyHandle$qqrv
@Vcl@Forms@TCustomForm@CreateWindowHandle$qqrrx26Vcl@Controls@TCreateParams
@Vcl@Forms@TCustomForm@CreateWnd$qqrv
@Vcl@Forms@TCustomForm@CreateParams$qqrr26Vcl@Controls@TCreateParams
@Vcl@Forms@TCustomForm@AlignControls$qqrp21Vcl@Controls@TControlr18System@Types@TRect
@Vcl@Forms@TCustomForm@ClientWndProc$qqrr24Winapi@Messages@TMessage
@Vcl@Forms@TCustomForm@WndProc$qqrr24Winapi@Messages@TMessage
@Vcl@Forms@TCustomForm@ValidateRename$qqrp25System@Classes@TComponentx20System@UnicodeStringt2
@Vcl@Forms@TCustomForm@SetParent$qqrp24Vcl@Controls@TWinControl
@Vcl@Forms@TCustomForm@WantChildKey$qqrp21Vcl@Controls@TControlr24Winapi@Messages@TMessage
@Vcl@Forms@TCustomForm@SetParentBiDiMode$qqro
@Vcl@Forms@TCustomForm@GetFloating$qqrv
@Vcl@Forms@TCustomForm@GetClientRect$qqrv
@Vcl@Forms@TCustomForm@DefineProperties$qqrp21System@Classes@TFiler
@Vcl@Forms@TCustomForm@ReadState$qqrp22System@Classes@TReader
@Vcl@Forms@TCustomForm@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation
@Vcl@Forms@TCustomForm@Loaded$qqrv
@Vcl@Forms@TCustomForm@DoDestroy$qqrv
@Vcl@Forms@TCustomForm@DoCreate$qqrv
@Vcl@Forms@TCustomForm@$bdtr$qqrv
@Vcl@Forms@TCustomForm@BeforeDestruction$qqrv
@Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponenti
@Vcl@Forms@TCustomForm@AfterConstruction$qqrv
@Vcl@Forms@TCustomForm@$bcdtr$qqrv
@Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponent
@Vcl@Forms@TCustomForm@$bcctr$qqrv
@Vcl@Forms@TScrollBox@$bcdtr$qqrv
@Vcl@Forms@TScrollBox@$bcctr$qqrv
@Vcl@Forms@TScrollingWinControl@AdjustClientRect$qqrr18System@Types@TRect
@Vcl@Forms@TScrollingWinControl@AutoScrollInView$qqrp21Vcl@Controls@TControl
@Vcl@Forms@TScrollingWinControl@DoGetGestureOptions$qqrr60System@%Set$t32Vcl@Controls@TInteractiveGesture$iuc$0$iuc$4%r66System@%Set$t38Vcl@Controls@TInteractiveGestureOption$iuc$0$iuc$4%
@Vcl@Forms@TScrollingWinControl@DoGesture$qqrrx30Vcl@Controls@TGestureEventInforo
@Vcl@Forms@TScrollingWinControl@AutoScrollEnabled$qqrv
@Vcl@Forms@TScrollingWinControl@$bdtr$qqrv
@Vcl@Forms@Application
@$xp$15Vcl@Forms@TForm
@Vcl@Forms@TForm@
@Vcl@Clipbrd@initialization$qqrv
@Vcl@Clipbrd@Finalization$qqrv

borlndmm

GetAllocMemCount

kernel32

FreeLibrary
GetCommandLineW
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetVersionExW
HeapAlloc
HeapFree
InterlockedExchange
LoadLibraryA
LocalAlloc
LocalFree
RaiseException

cc32140mt

@$bdele$qpv
@$bdla$qpv
@$bnwa$qui
@_CatchCleanup$qv
@_InitTermAndUnexPtrs$qv
@_ReThrowException$quipuc
@_ThrowExceptionLDTC$qpvt1t1t1uiuiuipuct1
@__exceptionAcquired
@setExceptionFuncAddr$qpqp17_EXCEPTION_RECORDpp4tpid$pvppqqrp17_EXCEPTION_RECORD$v
@setRaiseListFuncAddr$qpvt1
__ErrorExit
___CRTL_MEM_GetBorMemPtrs
___CRTL_MEM_UseBorMM
___CRTL_TLS_Alloc
___CRTL_TLS_ExitThread
___CRTL_TLS_Free
___CRTL_TLS_GetValue
___CRTL_TLS_InitThread
___CRTL_TLS_SetValue
___CRTL_VCL_FPU_Hook
___VCL_add_EH
___VCL_clear_EH
___VCL_init_except
___VCL_init_fpu
____ExceptionHandler
___getExceptionObject
___raiseDebuggerException
___terminatePTR
__argc
__argv
__argv_default_expand
__exitargv
__handle_exitargv
__handle_setargv
__handle_wexitargv
__handle_wsetargv
__matherr
__matherrl
__max_dble
__max_flt
__max_ldble
__setargv
__tiny_ldble
__wargv
__wargv_default_expand
__wexitargv
__wsetargv
__wstartup
_abort
_fflush
_memchr
_memcpy
_memset
_sprintf
_strcat
_strcpy
_strerror
_strlen
_wcstombs

vmprotectsdk32

VMProtectGetCurrentHWID
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectSetSerialNumber

Exports

Exports

@@Unit1@Finalize
@@Unit1@Initialize
_Form1
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/BCB/TestApp.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/BCB/TestApp.map
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/BCB/TestApp.res
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/BCB/Unit1.cpp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/BCB/Unit1.dfm
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/BCB/Unit1.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/DDK/MAKEFILE
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/DDK/SOURCES
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/DDK/TestApp.c
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/DDK/VMProtectDDK.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/DDK/VMProtectDDK32.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/DDK/VMProtectDDK64.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/DDK/bin/i386/TestApp.sys
.sys windows:6 windows x86 arch:x86

c1335faeced066df9bbc6e5efb7d89a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\DDK\bin\i386\TestApp.pdb

Imports

ntoskrnl.exe

KeTickCount
memset
ExAllocatePool
DbgPrint
KeBugCheckEx
ExFreePoolWithTag

vmprotectddk32.sys

VMProtectGetCurrentHWID
VMProtectSetSerialNumber
VMProtectGetSerialNumberState
VMProtectGetSerialNumberData
VMProtectBegin

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/DDK/bin/i386/TestApp.sys.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/DDK/make.bat
.bat .vbs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Delphi/TestApp.dpr
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Delphi/TestApp.dproj
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Delphi/TestApp.exe
.exe windows:5 windows x86 arch:x86

bbe6bbe2bb17a0cd01758afcc31fe177

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
RegCloseKey

user32

LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClassLongW
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CreateAcceleratorTableW
CopyIcon
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharNextW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout

kernel32

lstrcmpiA
LoadLibraryA
LocalFree
LocalAlloc
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
IsValidLocale
GetSystemDefaultUILanguage
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetUserDefaultUILanguage
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcpyW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
TryEnterCriticalSection
SwitchToThread
SuspendThread
SizeofResource
SignalObjectAndWait
SetThreadPriority
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
RaiseException
IsDebuggerPresent
MultiByteToWideChar
MulDiv
LockResource
LoadResource
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetExitCodeThread
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCPInfo
FreeResource
InterlockedExchangeAdd
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetTextMetricsW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
Chord
BitBlt
Arc
AbortDoc

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

ole32

OleUninitialize
OleInitialize

comctl32

InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create

winspool.drv

OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
GetDefaultPrinterW

vmprotectsdk32

VMProtectGetCurrentHWID
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectSetSerialNumber

Sections

.text
Size: 697KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Delphi/TestApp.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Delphi/TestApp.map
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Delphi/Unit1.dfm
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Delphi/Unit1.pas
.js
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Delphi/VMProtectSDK.pas
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Delphi/VMProtectSDK32.dll
.dll windows:5 windows x86 arch:x86

b9f19b4d3ce951c4ff6196681bbb3439

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/TestApp.cpp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/TestApp.exe
.exe windows:5 windows x86 arch:x86

d459861a2d3c1b915fecfb235adf0ae5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\vmprotect\examples\licensing\MSVC\bin\TestApp.pdb

Imports

user32

GetWindowTextLengthW
DialogBoxParamW
EndDialog
GetDlgItem
SetWindowTextA
MessageBoxW
SendMessageW
GetWindowTextA
SetWindowTextW

vmprotectsdk32

VMProtectGetSerialNumberState
VMProtectGetSerialNumberData
VMProtectGetCurrentHWID
VMProtectSetSerialNumber

kernel32

CreateFileW
DecodePointer
EncodePointer
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapQueryInformation
HeapSize
HeapReAlloc
GetStringTypeW
SetStdHandle
IsDebuggerPresent
RaiseException
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
GetProcAddress
GetModuleFileNameW
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleFileNameA
GetModuleHandleExW
GetStdHandle
WriteFile
ExitProcess
GetACP
HeapValidate
GetSystemInfo
GetCurrentThread
GetFileType
OutputDebugStringA
OutputDebugStringW
WriteConsoleW
CloseHandle
WaitForSingleObjectEx
CreateThread
SetConsoleCtrlHandler
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW

advapi32

SystemFunction036

Sections

.text
Size: 605KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/TestApp.rc
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/TestApp.sln
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/TestApp.vcxproj
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/TestApp.vcxproj.filters
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/VMProtectSDK.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/VMProtectSDK32.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/VMProtectSDK64.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/bin/TestApp.exe
.exe windows:5 windows x86 arch:x86

ae2c24d912079246eea215f597cad7bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
GetDlgItem
SetWindowTextW
SendMessageW
GetWindowTextLengthW
DialogBoxParamW
MessageBoxW
SetWindowTextA
GetWindowTextA

vmprotectsdk32

VMProtectGetSerialNumberData
VMProtectSetSerialNumber
VMProtectGetCurrentHWID
VMProtectGetSerialNumberState

kernel32

InterlockedIncrement
FlushFileBuffers
CloseHandle
CreateFileW
GetStringTypeW
LCMapStringW
IsProcessorFeaturePresent
WriteConsoleW
SetStdHandle
HeapReAlloc
RtlUnwind
GetCommandLineW
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
HeapAlloc
RaiseException
GetLastError
HeapFree
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LoadLibraryW

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/bin/TestApp.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/bin/TestApp.map
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/bin/VMProtectSDK32.dll
.dll windows:5 windows x86 arch:x86

b9f19b4d3ce951c4ff6196681bbb3439

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/bin/VMProtectSDK64.dll
.dll windows:5 windows x64 arch:x64

1851ff453adce0cef5274e320d5bed3c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/resource.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/stdafx.cpp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/MSVC/stdafx.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/Form1.Designer.cs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/Form1.cs
.js
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/Form1.resx
.vbs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/Program.cs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/Properties/AssemblyInfo.cs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/Properties/Resources.Designer.cs
.vbs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/Properties/Resources.resx
.vbs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/Properties/Settings.Designer.cs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/Properties/Settings.settings
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/TestApp.csproj
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/TestApp.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/bin/TestApp.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Ivan\Projects\vmpsoft\vmprotect\examples\licensing\Net\obj\Release\TestApp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/bin/TestApp.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Net/bin/VMProtect.SDK.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

e:\master\vmpb-bb-job1\sdk\VMProtect.SDK\obj\Release\VMProtect.SDK.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/VB6/Form1.frm
.vbs
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/VB6/TestApp.exe
.exe windows:4 windows x86 arch:x86

fd2e4b5aec9d700a0a84f5b1386417ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
ord698
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaVarForInit
ord595
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaStrUI1
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord607
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaStrToAnsi
__vbaVarDup
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaVarForNext
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/VB6/TestApp.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/VB6/TestApp.vbp
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/VB6/TestApp.vbw
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/VB6/VMProtectSDK.bas
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/VB6/VMProtectSDK32.dll
.dll windows:5 windows x86 arch:x86

b9f19b4d3ce951c4ff6196681bbb3439

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/AppDelegate.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/AppDelegate.mm
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/Info.plist
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/MacOS/VMProtect Licensing Test
.macho macos arch:x64
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/MacOS/libVMProtectSDK.dylib
.dylib macos arch:x64 arch:x86
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/PkgInfo
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/Resources/en.lproj/Credits.rtf
.rtf
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/Resources/en.lproj/InfoPlist.strings
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/Resources/en.lproj/MainMenu.nib
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/VMProtect Licensing Test-Info.plist
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/VMProtect Licensing Test-Prefix.pch
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/VMProtect Licensing Test.xcodeproj/project.pbxproj
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/VMProtect Licensing Test.xcodeproj/project.xcworkspace/contents.xcworkspacedata
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/VMProtectLicense.ini
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/VMProtectSDK.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/en.lproj/Credits.rtf
.rtf
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/en.lproj/InfoPlist.strings
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/en.lproj/MainMenu.xib
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/libVMProtectSDK.dylib
.dylib macos arch:x64 arch:x86
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Licensing/Xcode/main.m
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Scripts/Delphi Resources/Project1.exe
.exe windows:5 windows x86 arch:x86

1e7575186edecf060e4585f8bc74203f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
RegCloseKey

user32

LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetClassLongW
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CreateAcceleratorTableW
CopyIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout

kernel32

lstrcmpiA
LoadLibraryA
LocalFree
LocalAlloc
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
IsValidLocale
GetSystemDefaultUILanguage
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetUserDefaultUILanguage
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcpyW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
TryEnterCriticalSection
SwitchToThread
SuspendThread
SizeofResource
SignalObjectAndWait
SetThreadPriority
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
RaiseException
IsDebuggerPresent
MultiByteToWideChar
MulDiv
LockResource
LoadResource
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetExitCodeThread
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCPInfo
FreeResource
InterlockedExchangeAdd
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetEnhMetaFileBits
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
Chord
BitBlt
Arc
AbortDoc

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
IsEqualGUID

comctl32

InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create

winspool.drv

OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
GetDefaultPrinterW

vmprotectsdk32

VMProtectDecryptStringA
VMProtectEnd
VMProtectBegin

Sections

.text
Size: 741KB - Virtual size: 741KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Scripts/Delphi Resources/Project1.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Scripts/Environment Variables/Project1.exe
.exe windows:4 windows x86 arch:x86

8fbba78ee3fc992258b0d48632a5a024

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
MessageBoxA
GetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

MultiByteToWideChar
GlobalFree
ExitProcess
GetModuleHandleA
GlobalAlloc

vmprotectsdk32

VMProtectDecryptStringA
VMProtectEnd
VMProtectBegin

Sections

.text
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Scripts/Environment Variables/Project1.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Scripts/External DLL/Project1.exe
.exe windows:4 windows x86 arch:x86

8fbba78ee3fc992258b0d48632a5a024

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
MessageBoxA
GetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

MultiByteToWideChar
GlobalFree
ExitProcess
GetModuleHandleA
GlobalAlloc

vmprotectsdk32

VMProtectDecryptStringA
VMProtectEnd
VMProtectBegin

Sections

.text
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Scripts/External DLL/Project1.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Scripts/Random Section Names/Project1.exe
.exe windows:4 windows x86 arch:x86

8fbba78ee3fc992258b0d48632a5a024

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
MessageBoxA
GetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

MultiByteToWideChar
GlobalFree
ExitProcess
GetModuleHandleA
GlobalAlloc

vmprotectsdk32

VMProtectDecryptStringA
VMProtectEnd
VMProtectBegin

Sections

.text
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Scripts/Random Section Names/Project1.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Scripts/Script Events/Project1.exe
.exe windows:4 windows x86 arch:x86

8fbba78ee3fc992258b0d48632a5a024

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
MessageBoxA
GetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

MultiByteToWideChar
GlobalFree
ExitProcess
GetModuleHandleA
GlobalAlloc

vmprotectsdk32

VMProtectDecryptStringA
VMProtectEnd
VMProtectBegin

Sections

.text
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VMProtect_ULTIMATE_3.5.0_Build_1213/Example/Scripts/Script Events/Project1.exe.vmp
.xml
VMProtect_ULTIMATE_3.5.0_Build_1213/Help/.en/_23.cfs
VMProtect_ULTIMATE_3.5.0_Build_1213/Help/.en/deletable
VMProtect_ULTIMATE_3.5.0_Build_1213/Help/.en/segments
VMProtect_ULTIMATE_3.5.0_Build_1213/Help/.ru/_23.cfs
VMProtect_ULTIMATE_3.5.0_Build_1213/Help/.ru/deletable
VMProtect_ULTIMATE_3.5.0_Build_1213/Help/.ru/segments
VMProtect_ULTIMATE_3.5.0_Build_1213/Help/en.qch
VMProtect_ULTIMATE_3.5.0_Build_1213/Help/en.qhc
VMProtect_ULTIMATE_3.5.0_Build_1213/Help/ru.qch
VMProtect_ULTIMATE_3.5.0_Build_1213/Help/ru.qhc
VMProtect_ULTIMATE_3.5.0_Build_1213/Include/ASM/VMProtectSDK.inc
VMProtect_ULTIMATE_3.5.0_Build_1213/Include/C/VMProtectDDK.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Include/C/VMProtectSDK.h
VMProtect_ULTIMATE_3.5.0_Build_1213/Include/Pascal/VMProtectSDK.pas
VMProtect_ULTIMATE_3.5.0_Build_1213/Include/VB6/VMProtectSDK.bas
VMProtect_ULTIMATE_3.5.0_Build_1213/Langs/en.lng
VMProtect_ULTIMATE_3.5.0_Build_1213/Langs/fr.lng
VMProtect_ULTIMATE_3.5.0_Build_1213/Langs/ru.lng
VMProtect_ULTIMATE_3.5.0_Build_1213/Langs/zh.lng
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Linux/libVMProtectSDK32.so
.elf linux x86
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Linux/libVMProtectSDK64.so
.elf linux x64
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/OSX/libVMProtectSDK.dylib
.dylib macos arch:x64 arch:x86
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/BCC64ELF/VMProtectSDK64.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/MinGW/VMProtectSDK32.a
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/MinGW/VMProtectSDK64.a
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/Net/VMProtect.SDK.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

e:\master\vmpb-bb-job1\sdk\VMProtect.SDK\obj\Release\VMProtect.SDK.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/OMF/VMProtectSDK32.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/VMProtectDDK32.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/VMProtectDDK32.sys
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/VMProtectDDK64.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/VMProtectDDK64.sys
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 512B - Virtual size: 115B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/VMProtectSDK32.dll
.dll windows:5 windows x86 arch:x86

b9f19b4d3ce951c4ff6196681bbb3439

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/VMProtectSDK32.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/VMProtectSDK64.dll
.dll windows:5 windows x64 arch:x64

1851ff453adce0cef5274e320d5bed3c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
RaiseException

Exports

Exports

VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/Lib/Windows/VMProtectSDK64.lib
VMProtect_ULTIMATE_3.5.0_Build_1213/Readme.txt
VMProtect_ULTIMATE_3.5.0_Build_1213/VMProtect.exe
.exe windows:5 windows x64 arch:x64

fd23731c4bc5b7f8ff873ee45e6453c2

Code Sign

3b:90:30:71:8e:4e:5f:91:06:e7:e7:d2:a8:5f:1b:48
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/06/2019, 00:00

Not After

31/05/2022, 23:59

Subject

CN=Ivan Yurievich Permyakov IP,O=Ivan Yurievich Permyakov IP,POSTALCODE=620144,STREET=8 Marta str.\, 194-236,L=Ekaterinburg,ST=-,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

99:0c:fc:59:fd:06:f5:45:5f:96:e8:b0:28:b3:a1:df:2e:e4:cc:af
Signer

Actual PE Digest

99:0c:fc:59:fd:06:f5:45:5f:96:e8:b0:28:b3:a1:df:2e:e4:cc:af

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

winmm

PlaySoundW

imm32

ImmGetDefaultIMEWnd

opengl32

glBindTexture

ws2_32

gethostname

kernel32

SetEvent
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

ReleaseCapture
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW

gdi32

SetWorldTransform

advapi32

CopySid

shell32

CommandLineToArgvW

ole32

OleGetClipboard

oleaut32

GetErrorInfo

psapi

EnumProcessModules

wtsapi32

WTSSendMessageW

Exports

Exports

�]+��ut$L8�{�u��m)Qc��Q��/&7K�^R9n��'��r^��Z+6U�'d��s6o�߽]�8%��"��G;7��Vh��5�~1��,��MU(> �J�)�_⽐�K࠮��&�H�Ut5��M��f��4� 2`�|�Ƀ?�~Z��݁s�:I�:|o0��e>��n��Lǚ#c��L[C�ˉ=�2�{{��U�rw��Ss�|��*Ⱥ`�\1WS��}=S��N�g�z��.��H~o�\��M��iB��w]�d�O�\+��;k�홗��o�~��=�m�T; �A��0��z��ƪQ�'�!(N��O�� ,�'޻��ǌ��T��/��C��hmy�� T�R��.Q*��0��.W5ɬa%�ઑ�x$��>�T��v�w=��0)��1�%�Y�%�z��j�u�d%q��9��QC�1��rju�8=Gj�]��1��3��j��Yڨ>�080�(�kfEp�t#Z��qB~�$@�a.�p?F��oi,�o=��A�<��M�h��6i�� P�-�q{:E]��겤��I)��{t83ǟ��~ƢO#��4�Q|�Iz堯j��ˢOT�%jF��j�q? (ظdj8x*��^�X�oa3�� D9|5x��z{%9e�Z��(u|<R`�a��尺D��w�13m�}<�6�/�(ƥ��h��]�Bqzx�l�G~<I�>�4j�G �!��1��_��rB:g�n�A1�4�DT�>d�}'^�ک�� A��ʯ �z�4��u�V?��`�56j(�Е��9��ڗ�.uJ!T'��Ú�;p��ktR��[W�84f��m5dOM�0�ES��@�zۇ��A�6*�]H�� ]>�zC��U�a�@�H��w ��o6��r�]Iu�s�olӘ;�:H��-�F��* ��~�VO��"k�X�Q�.��$NoI�(��2O:��&V��k�cLk��(��.k_M�tA�n�Zq]v��x�ܭu4�i��+��3J8 �Oc�y(v d2��7Էxv��u-=/Lȝ��S`��Vq�?TQ��y�U��d�@N\�2��f�w�^�p=��@�O6��[�F�ԙ��W3��6��)69�q��=K��u��?t�sj��3Ȁ�[N� �`�7��S�Q�� &�n,$��"�f�UGS�R�Q�IH��OX$�C��M��nVX��&��I��O��k��:��Js_� ��Qp�C��h��=noz�WԻЭ�N��ҞX_�R�]7�E3*��`F �2��j��m�&� _7��b4��Uv�E1��2=~��\�ץ"��S��7�k�|��!ع��j�u��ĭ�7*�x'uv��$��O�hm�8X�a�H-��0d��CH �7�d7��`� �Y�k_�~�l�oؕ��e�e�a�� g��U�Q��9p@�XeDX�V�e��v��g�GDU�DW8�A��b]Ƒ�ЅCc�N��i��./7�ڦ/C�|U{��jb�j��[��'W��8ږD��]��8N��CnSݎN�ώk��Cv��d��2J��n ]0��Wt�;j�q�Q��L��MR�t4 �RE ��RB 8�t94\��{EKۑ� /��ʅڂ%�c�Cv�% թ��r2T�]� $A�^��t�7� F��<��X�)�Q Kk�8��M� ��S�iB��y~��r*\'��B?�4)]�V�Q�)�r}��G>mgSX5N�튉��[�u��Ӥ`/G2d}��e�zaA'�:�C��ҍ{_�s�� n,R��Q��ԅ��kl��V��ֿ<�߶�qI��,��/T��M��<8��!.F3��L_�bTx��;�/mM��n��z�Q��NO��t}��`0o�yǷmDu��)|�{��t1�d��gO`��I3�}?��]��l.h ��\��ro� 6��.��f��I�C��^��7�$7�� P��C�A�,h�}(."/��|�w��x&\��䭒��o0^��쐝A�9�,�P�*4��R��ϞЋ��\M�=C�s^8��U��#��. ,+ÉJ7l�ނڽ�C�� 7)��H�I 6-Bl�֌�o?��[m��j�~��q�ћU��@��)+xtD�U��X��y�#`�lA {��`�7��&��]k淘l'��Џ1��!t��e�g�~�{�u6Q;�!��P�wR<2�D\8?��a��%w$6�S\'S$�c��9��({��>�s5��o��,\�*��;�n�VoM�?��W��Q2�J�.n��h�D}}l:��^��|A��Q�1y��N4��fϫ�K��A�v+յIC��~�,&̧�DЗ$9��Ҋ[7^�F�t��U@~B_�L��>:��<��QA=/��*��/b3�簲(�)�wn1�G��?l{��W�2��^M;��w��c�.�\��e�ƿ��F�u��'!�� @+�Q�0�*@_7Fl?@;��U��}r�-)a8]H*E�]�NAq��YwN��> �Yˁ�u�pI��U�� #��h�e��w�$;zM�`�� Yop_=�A!��~Ck�:au~��}� z�{nߝ��l��W=7iRA��ϊ��f��Zn� �d�ޞ�{��|n��T,nR�?*�p��㑮ɭ��i\�<!ifηñĊ+ֵ*3E�J�u �.��W�$7/o>Y��ڽ��\(��ڐ� Ff�>�*<�"�1��SL�(5�bK�y��D�E�{�S�X;�\�C?��3h3�U��6�j1�_�|��o;x�33Ļk%�#8��ȍ��54��=g

Sections

.text
Size: - Virtual size: 17.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 13.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: - Virtual size: 7.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.UPX1
Size: 20.8MB - Virtual size: 20.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 339KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/VMProtect_Con.exe
.exe windows:5 windows x64 arch:x64

cd157d70e2e1b59af033047c1545386e

Code Sign

3b:90:30:71:8e:4e:5f:91:06:e7:e7:d2:a8:5f:1b:48
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/06/2019, 00:00

Not After

31/05/2022, 23:59

Subject

CN=Ivan Yurievich Permyakov IP,O=Ivan Yurievich Permyakov IP,POSTALCODE=620144,STREET=8 Marta str.\, 194-236,L=Ekaterinburg,ST=-,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

1d:96:4b:be:98:f5:3e:21:e6:5a:d0:da:b6:90:20:57:cf:7f:3f:96
Signer

Actual PE Digest

1d:96:4b:be:98:f5:3e:21:e6:5a:d0:da:b6:90:20:57:cf:7f:3f:96

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

psapi

GetModuleInformation

kernel32

FreeEnvironmentStringsW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

shell32

CommandLineToArgvW

wtsapi32

WTSSendMessageW

user32

GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW

Exports

Exports

�jMi��FL�?��Ӂ��ֈ��؆�>��yhuK��q=V��g�>�cZ�vz/|}_=��'�`ݧ��: ��l��ߣ�]o��\�HV��j�0)и�0{�zz�l�7�IQ�ٶ6�^��7��>X�<>gw�T��:�R�i%(�̵hC��E��,�e��#E�J&<}}�EH��T��pHH<<8]?��p��'�Ɨ�n�`��xJ��հ��l��C��^{}.w��^S�#c��b�5��Z��#��d�^��]�yXͱ��eI�즘�HS��~��`]�?Fn��,1��?iB }�ￛ;��*�V�]:v�U�=��ht�O4�GIJ�p_�e:꩚+YZpmU�� <Ɇ�hHΡ��4��6 ��Yy�=C!��Β>�7��k�f�xg��gf�1�3�[0fW�^pZ�0ؕ2J@K�ёb�Q�ᩣ�c:�[(��Մi�l�{�jL��9�ӧ��'�sjf�*�%��a]Fj��#�I��TKg5M!��1sm�Vï��-�zswG��H�P�e$�32�9lt)�dgWD��c�p/W��x��eCl3�M��|�iMn��:j�k��ـ�yy�=�H|�[ A�t�Qv��g6i�%��1�k4C�k8�U~:�2]��wx��N��J��~�D�� }�]�D�we��l*�I#t14��L ǣ�2D?��j��["�5 ��a(��8LQ�t��0{�ǿ�B��}�l�C��g�C#�N,��c*N9�g��'�XQ��Xܽ%��2'��dCi�� E��'��.��o�׵�M��{�{ā��$��:K<9b%�p��7e 3/էS�,�sQ7�O��\� ��J? v��K��ݨdqʮ��/��tV!5��C�k��m��Q��FZ%5a�� J��i�0�=�gq��x&��d>*i��"��U�T��X��5$��Fkֿ��Gj��Qyg��~.��A��|O�C�1��{!��Sq*م��L{�|��*�0��G]�� o�C�$��غɚ�l��R� �hyB-r��k7�i��7E�H�U�x j��>=|��b��gK5��Q"��?a�� Y��g��_�:@�R=�=:!�`��r�N�26�|�I�N��Si�S8�V��I`� ��.��Ē��E;5o3qYP��sVʓu5:� o~2�?t��j�x��`��w��lW��#��͔`��=��R�;�G� 4�Q��Poz�!~-��0�^ౖ��^�d޻ߦ�R�i��T��SLm��,s:}�VS@y�X~�Q��B��ݦ*��T0S�)!Wy�[�:��"�b꺻8�V��a��IE�A��.2�R��vX)W��Fc��e�{�@>\�� Q�d!8�Ȝ;��7��a5W1݄�|s�8��e#�ėf��-��J9E�i�s�]w��! �^�y)h+[9��{��pjﳗ��鉽j19�e��N�6e�u�S��a'"��8Z궂li �qip�2��bc�)��h�h��$��[�e��@ ��n��$��[��^�q|O�H�KцA%,�A:��O�?!�#�@&�-�A�w-��`y%r͢X�z��*�,��m�r�5��>I��.{�_��b{V��*�1=XFz��o#�h ��r�)�hY�Lp�qk��5�߽��ޔ]��R-IH�� eY��k� [�xj��(%��\��n��8l�5≔��?��Z��&��q_r�s�Ar�?�̕b��b1��C�q�PM(�5�,D"i�f��|5�]8�b�X�� 38S�y�y�Zp)薉��R�I ?�a��J߹H-eOcy�fְ��<��Z+�ވ��b�L� �e�U�峂M��Q��SJe�=:�gG�CQm��r�I��Ȯ��XT��܈�@��[ ��A�w9yW�M�9�̸xm�/�؞��Ūm�yX��˘�ˇ��V1�c�mD� �o��΃��7��&�H��0�K�/?GQ�=��Cӄ�]��#�̇��gt~�E3��JE1w�Si}}�d�%�{�~�a%��ž�+�e<`��8R��4a?�m�2�}�/w~��:f�!��N)��牼��k��Č�b��,aT��,�$��v��Bz��rt7��m��x�ycD��IMpl22�q��N�O�� K�#MW�X>э��UC�t2��U�Q�f򋮸]ț��P�q�)pN!}��:z��?��/��2|�� *%V�xT��B��3�h³3rI�:�o��g�C��lX½ X`��0I��wآ��=Y\W(O8�(��5HR��a��-�!l�i�˨��O�[W��;�W c�� s3]�J�x�H��L��F�J��^��ic��vGr��c�X�u~܀ ��,U�?e07� ��Yb:��93�# {x��U��`<W�]�s��˗14��CS�kq��w�O#�,��ke0��r��È�Q}�p��U!��MĊ�.�8��P��# Ho�/��Z��A��IZ�-�d�0j�fM��\!�AT��2 v�S��]�F��}PyH��n�Y�.F�E��[��avu\`�łis��ؼ��,N��x{M�� T��N~OD]vd�~��3ߑ�ن��b��u��t��T�pE� �Ն��IT�V��c��A�kpy݈0}��'�ji�$�!E�1;F�H�iK�� (u�i�3��/mS}��?�'�zՠ�4eΊ�pLw��p��I��]��͋��$}��vHmC��k9��{��;=

Sections

.text
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 7.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX0
Size: - Virtual size: 7.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.UPX1
Size: 12.5MB - Virtual size: 12.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 339KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/VMProtect_Ext32.dll
.dll regsvr32 windows:5 windows x86 arch:x86

159cd5e2ffb2c4163d0a69529aa7918a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
GetModuleFileNameW
CreateProcessW
DisableThreadLibraryCalls
lstrlenW
DecodePointer
WriteConsoleW
GetLastError
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WriteFile
SetStdHandle
HeapReAlloc
HeapSize
GlobalUnlock
GlobalLock
InterlockedDecrement
InterlockedIncrement
GetVersionExW
GetProcessHeap
LoadLibraryW
HeapFree
HeapAlloc
GetProcAddress
FreeLibrary
GetStringTypeW
GetFileType
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
InterlockedFlushSList
SetLastError
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
CreateFileW

user32

GetIconInfo
GetSystemMetrics
GetDC
ReleaseDC
MessageBoxW
InsertMenuItemW
RegisterClipboardFormatW
wsprintfW
DrawIconEx
LoadImageW
DestroyIcon
SetRect

gdi32

SelectObject
GetDIBits
DeleteObject
DeleteDC
CreateCompatibleDC
CreateDIBSection

advapi32

RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW

shell32

SHGetDesktopFolder
DragQueryFileW

ole32

StringFromGUID2
ReleaseStgMedium
CoTaskMemFree

shlwapi

wnsprintfW
StrRetToStrW
ord219

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/VMProtect_Ext64.dll
.dll regsvr32 windows:5 windows x64 arch:x64

1b73bdc4fccd1329501f72bf5ae9ff16

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessW
DisableThreadLibraryCalls
lstrlenW
WriteConsoleW
GetModuleFileNameW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WriteFile
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
CloseHandle
GetLastError
GlobalUnlock
GlobalLock
GetVersionExW
GetProcessHeap
LoadLibraryW
HeapFree
HeapAlloc
GetProcAddress
SetFilePointerEx
FreeLibrary
GetFileType
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RaiseException
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
InterlockedFlushSList
SetLastError
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
CreateFileW

user32

GetIconInfo
GetSystemMetrics
GetDC
ReleaseDC
MessageBoxW
InsertMenuItemW
RegisterClipboardFormatW
wsprintfW
DrawIconEx
LoadImageW
DestroyIcon
SetRect

gdi32

SelectObject
GetDIBits
DeleteObject
DeleteDC
CreateCompatibleDC
CreateDIBSection

advapi32

RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW

shell32

SHGetDesktopFolder
DragQueryFileW

ole32

StringFromGUID2
ReleaseStgMedium
CoTaskMemFree

shlwapi

wnsprintfW
StrRetToStrW
ord219

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VMProtect_ULTIMATE_3.5.0_Build_1213/unins000.dat
VMProtect_ULTIMATE_3.5.0_Build_1213/unins000.exe
.exe windows:5 windows x86 arch:x86

f62b90e31eca404f228fcf7068b00f31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
GetActiveObject
RegisterTypeLib
LoadTypeLib
SysFreeString
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit
SysFreeString

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
InitializeSecurityDescriptor
GetUserNameW
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
AdjustTokenPrivileges

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
WindowFromPoint
WaitMessage
WaitForInputIdle
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRectEmpty
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClassLongW
SetCapture
SetActiveWindow
SendNotifyMessageW
SendMessageTimeoutW
SendMessageA
SendMessageW
ScrollWindowEx
ScrollWindow
ScreenToClient
ReplyMessage
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OffsetRect
OemToCharBuffA
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageW
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
ExitWindowsEx
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
AppendMenuW
CharToOemBuffA
AdjustWindowRectEx
ActivateKeyboardLayout

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
SetCurrentDirectoryW
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCurrentDirectoryW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcpyW
lstrcmpW
WriteProfileStringW
WritePrivateProfileStringW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
TransactNamedPipe
TerminateProcess
SwitchToThread
SizeofResource
SignalObjectAndWait
SetThreadLocale
SetNamedPipeHandleState
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
SetCurrentDirectoryW
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
QueryPerformanceCounter
OpenProcess
OpenMutexW
MultiByteToWideChar
MulDiv
MoveFileExW
MoveFileW
LockResource
LocalFree
LocalFileTimeToFileTime
LoadResource
LoadLibraryExW
LoadLibraryW
LeaveCriticalSection
IsDBCSLeadByte
IsBadWritePtr
InitializeCriticalSection
GlobalFindAtomW
GlobalDeleteAtom
GlobalAddAtomW
GetWindowsDirectoryW
GetVersionExW
GetVersion
GetUserDefaultLangID
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryW
GetStdHandle
GetShortPathNameW
GetProfileStringW
GetProcAddress
GetPrivateProfileStringW
GetOverlappedResult
GetModuleHandleW
GetModuleFileNameW
GetLogicalDrives
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeThread
GetExitCodeProcess
GetEnvironmentVariableW
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetComputerNameW
GetCommandLineW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
EnumCalendarInfoW
EnterCriticalSection
DeviceIoControl
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreateNamedPipeW
CreateMutexW
CreateFileW
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringW
CompareFileTime
CloseHandle
Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject
StretchBlt
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
RemoveFontResourceW
Rectangle
RectVisible
RealizePalette
Polyline
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
LineDDA
IntersectClipRect
GetWindowOrgEx
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
Chord
BitBlt
Arc
AddFontResourceW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

mpr

WNetOpenEnumW
WNetGetUniversalNameW
WNetGetConnectionW
WNetEnumResourceW
WNetCloseEnum

comctl32

InitCommonControls
InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
StringFromCLSID
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
CoInitialize
IsEqualGUID
CoDisconnectObject

shell32

ShellExecuteExW
ShellExecuteW
SHGetFileInfoW
ExtractIconW
SHGetPathFromIDListW
SHGetMalloc
SHChangeNotify
SHBrowseForFolderW

comdlg32

GetSaveFileNameW
GetOpenFileNameW

Sections

.text
Size: 1015KB - Virtual size: 1014KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

532c62395891b8320957c654d6524f07

Headers

File Characteristics

Imports

vcl190.bpl

rtl190.bpl

kernel32

user32

vmprotectsdk32

Exports

Exports

Sections

.text Size: 153KB - Virtual size: 156KB

.data Size: 23KB - Virtual size: 40KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 28KB - Virtual size: 28KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 4KB

.reloc Size: 9KB - Virtual size: 12KB

b9f19b4d3ce951c4ff6196681bbb3439

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 64KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 2KB - Virtual size: 4KB

.gfids Size: 512B - Virtual size: 160B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 4KB - Virtual size: 3KB

1e7575186edecf060e4585f8bc74203f

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

msimg32

gdi32

version

ole32

comctl32

winspool.drv

vmprotectsdk32

Sections

.text Size: 741KB - Virtual size: 741KB

.itext Size: 3KB - Virtual size: 3KB

.data Size: 9KB - Virtual size: 9KB

.bss Size: - Virtual size: 20KB

.idata Size: 13KB - Virtual size: 12KB

.didata Size: 1024B - Virtual size: 806B

.tls Size: - Virtual size: 60B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 67KB - Virtual size: 66KB

.rsrc Size: 50KB - Virtual size: 50KB

b9f19b4d3ce951c4ff6196681bbb3439

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 64KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 2KB - Virtual size: 4KB

.gfids Size: 512B - Virtual size: 160B

.rsrc Size: 512B - Virtual size: 480B

.text
Size: 153KB - Virtual size: 156KB

.data
Size: 23KB - Virtual size: 40KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 28KB - Virtual size: 28KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 4KB

.reloc
Size: 9KB - Virtual size: 12KB

.text
Size: 64KB - Virtual size: 64KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 2KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 160B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 741KB - Virtual size: 741KB

.itext
Size: 3KB - Virtual size: 3KB

.data
Size: 9KB - Virtual size: 9KB

.bss
Size: - Virtual size: 20KB

.idata
Size: 13KB - Virtual size: 12KB

.didata
Size: 1024B - Virtual size: 806B

.tls
Size: - Virtual size: 60B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 67KB - Virtual size: 66KB

.rsrc
Size: 50KB - Virtual size: 50KB

.text
Size: 64KB - Virtual size: 64KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 2KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 160B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 59KB - Virtual size: 58KB

.data
Size: 13KB - Virtual size: 12KB

.bss
Size: - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 4B

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 324B

.text
Size: 64KB - Virtual size: 64KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 2KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 160B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 64KB - Virtual size: 64KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 2KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 160B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 303KB - Virtual size: 303KB

.bss
Size: - Virtual size: 27KB

.CRT
Size: 512B - Virtual size: 4B

.idata
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 4KB