more robust anomaly and scanning and pedata loading (tested with tiny.exe)