KB329449120.exe - XnView.exe - XnView for Windows

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	KB329449120.exe
size	156672 (0x26400)
md5	61829d7e3fef7fc0dfabc10eaac129a4

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
93	4035	2
149	30729	16
132	30729	23
131	30729	68
147	30729	7
1	0	233
132	21022	1
148	21022	1
145	21022	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x53bc5df7
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x15800
SizeOfInitializedData	0x10800
SizeOfUninitializedData	0
AddressOfEntryPoint	0xe223
BaseOfCode	0x1000
BaseOfData	0x17000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x2a000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0x8000
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x15731	0x15800	R-X CODE
.rdata	0x17000	0x37dc	0x3800	R-- IDATA
.data	0x1b000	0x1c24	0xe00	RW- IDATA
.rsrc	0x1d000	0xc130	0xc200	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x1935c	0x64
RESOURCE	0x1d000	0xc130
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x19040	0x40
Bound_IAT	0	0
IAT	0x17000	0x3a8
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
JPEG	#48	22010	1252
ICON	#2	1720	1252
ICON	#3	1128	1252
ICON	#5	296	1252
ICON	#6	1384	1252
ICON	#7	744	1252
ICON	#8	3752	1252
ICON	#9	16936	1252
GROUP_ICON	#1	62	1252
VERSION	#1	816	1252

module_name	hint	function_name
USER32.dll	671	SetMenuInfo
USER32.dll	345	GetMessageA
USER32.dll	800	VkKeyScanExW
USER32.dll	13	BeginDeferWindowPos
USER32.dll	335	GetMenuDefaultItem
USER32.dll	231	EnumDisplaySettingsA
USER32.dll	405	GetWindowLongA
USER32.dll	589	RegisterClassExW
USER32.dll	687	SetRectEmpty
USER32.dll	509	LockWindowUpdate
USER32.dll	367	GetRawInputDeviceInfoA
USER32.dll	164	DestroyMenu
USER32.dll	263	GetAsyncKeyState
USER32.dll	337	GetMenuItemCount
USER32.dll	65	CheckRadioButton
USER32.dll	796	ValidateRect
USER32.dll	351	GetMonitorInfoW
USER32.dll	700	SetUserObjectInformationA
USER32.dll	413	GetWindowRgn
USER32.dll	14	BeginPaint
USER32.dll	374	GetScrollPos
USER32.dll	295	GetDlgItem
USER32.dll	799	VkKeyScanExA
USER32.dll	285	GetCursor
USER32.dll	753	ToAscii
USER32.dll	368	GetRawInputDeviceInfoW
USER32.dll	292	GetDialogBaseUnits
USER32.dll	668	SetMenu
USER32.dll	436	InSendMessageEx
USER32.dll	623	ScrollDC
USER32.dll	64	CheckMenuRadioItem
USER32.dll	394	GetUserObjectInformationA
USER32.dll	655	SetDlgItemTextA
GDI32.dll	50	CreateDCW
GDI32.dll	12	ArcTo
GDI32.dll	3	AddFontResourceA
GDI32.dll	29	CloseEnhMetaFile
GDI32.dll	46	CreateColorSpaceW
GDI32.dll	32	ColorCorrectPalette
GDI32.dll	55	CreateDiscardableBitmap
GDI32.dll	423	GetBitmapBits
GDI32.dll	520	GetRandomRgn
GDI32.dll	693	StrokeAndFillPath
GDI32.dll	598	Polygon
GDI32.dll	589	PlgBlt
GDI32.dll	418	GdiTransparentBlt
GDI32.dll	684	SetWindowExtEx
GDI32.dll	602	PtVisible
GDI32.dll	228	DeleteEnhMetaFile
GDI32.dll	698	TranslateCharsetInfo
GDI32.dll	566	LineTo
GDI32.dll	590	PolyBezier
GDI32.dll	469	GetEnhMetaFilePaletteEntries
GDI32.dll	458	GetDIBits
GDI32.dll	546	GetTextFaceA
GDI32.dll	465	GetEnhMetaFileBits
GDI32.dll	634	SetArcDirection
GDI32.dll	697	TextOutW
GDI32.dll	700	UnrealizeObject
GDI32.dll	491	GetKerningPairsA
GDI32.dll	8	AngleArc
SHLWAPI.dll	38	IsCharSpaceA
SHLWAPI.dll	191	SHGetInverseCMAP
KERNEL32.dll	236	FormatMessageW
KERNEL32.dll	648	Process32FirstW
KERNEL32.dll	204	FindClose
KERNEL32.dll	631	OpenProcess
KERNEL32.dll	111	CreateToolhelp32Snapshot
KERNEL32.dll	218	FindNextFileW
KERNEL32.dll	211	FindFirstFileW
KERNEL32.dll	460	GetTempPathW
KERNEL32.dll	226	FindResourceW
KERNEL32.dll	833	SizeofResource
KERNEL32.dll	585	LoadResource
KERNEL32.dll	599	LockResource
KERNEL32.dll	242	FreeResource
KERNEL32.dll	611	MoveFileW
KERNEL32.dll	345	GetFileAttributesW
KERNEL32.dll	230	FlushFileBuffers
KERNEL32.dll	777	SetFilePointer
KERNEL32.dll	362	GetLocalTime
KERNEL32.dll	544	InterlockedIncrement
KERNEL32.dll	540	InterlockedDecrement
KERNEL32.dll	265	GetCommandLineA
KERNEL32.dll	478	GetVersionExA
KERNEL32.dll	638	OutputDebugStringA
KERNEL32.dll	238	FreeEnvironmentStringsA
KERNEL32.dll	333	GetEnvironmentStrings
KERNEL32.dll	581	LoadLibraryExA
KERNEL32.dll	884	VirtualProtect
KERNEL32.dll	443	GetSystemInfo
KERNEL32.dll	886	VirtualQuery
KERNEL32.dll	650	Process32NextW
KERNEL32.dll	834	Sleep
KERNEL32.dll	246	GetACP
KERNEL32.dll	615	MultiByteToWideChar
KERNEL32.dll	507	GlobalReAlloc
KERNEL32.dll	107	CreateTapePartition
KERNEL32.dll	708	RtlCaptureStackBackTrace
KERNEL32.dll	861	UnlockFileEx
KERNEL32.dll	49	CloseHandle
KERNEL32.dll	808	SetSystemTimeAdjustment
KERNEL32.dll	456	GetTapeStatus
KERNEL32.dll	264	GetCommTimeouts
KERNEL32.dll	796	SetMailslotInfo
KERNEL32.dll	91	CreateMemoryResourceNotification
KERNEL32.dll	697	RemoveVectoredExceptionHandler
KERNEL32.dll	495	GlobalDeleteAtom
KERNEL32.dll	477	GetVersion
KERNEL32.dll	378	GetNamedPipeHandleStateA
KERNEL32.dll	768	SetEndOfFile
KERNEL32.dll	82	CreateFileW
KERNEL32.dll	240	FreeLibrary
KERNEL32.dll	771	SetErrorMode
KERNEL32.dll	360	GetLastError
KERNEL32.dll	408	GetProcAddress
KERNEL32.dll	583	LoadLibraryW
KERNEL32.dll	678	ReadFile
KERNEL32.dll	911	WriteFile
KERNEL32.dll	347	GetFileSize
KERNEL32.dll	952	lstrlenW
KERNEL32.dll	898	WideCharToMultiByte
KERNEL32.dll	373	GetModuleFileNameW
KERNEL32.dll	318	GetCurrentThreadId
KERNEL32.dll	316	GetCurrentProcessId
KERNEL32.dll	315	GetCurrentProcess
KERNEL32.dll	822	SetUnhandledExceptionFilter
KERNEL32.dll	479	GetVersionExW
KERNEL32.dll	377	GetModuleHandleW
KERNEL32.dll	130	DeleteFileW
KERNEL32.dll	610	MoveFileExW
KERNEL32.dll	511	GlobalUnlock
KERNEL32.dll	504	GlobalLock
KERNEL32.dll	493	GlobalAlloc
KERNEL32.dll	56	CompareStringW
KERNEL32.dll	614	MulDiv
KERNEL32.dll	894	WaitForSingleObject
KERNEL32.dll	338	GetExitCodeProcess
KERNEL32.dll	842	TerminateProcess
KERNEL32.dll	102	CreateProcessW
KERNEL32.dll	266	GetCommandLineW
KERNEL32.dll	586	LocalAlloc
KERNEL32.dll	580	LoadLibraryA
KERNEL32.dll	559	IsProcessorFeaturePresent
KERNEL32.dll	881	VirtualFree
KERNEL32.dll	878	VirtualAlloc
KERNEL32.dll	521	HeapDestroy
KERNEL32.dll	527	HeapReAlloc
KERNEL32.dll	529	HeapSize
KERNEL32.dll	472	GetUserDefaultLCID
KERNEL32.dll	435	GetStringTypeExW
KERNEL32.dll	566	LCMapStringA
KERNEL32.dll	567	LCMapStringW
KERNEL32.dll	859	UnhandledExceptionFilter
KERNEL32.dll	557	IsDebuggerPresent
KERNEL32.dll	448	GetSystemTimeAsFileTime
KERNEL32.dll	734	SetConsoleCtrlHandler
KERNEL32.dll	183	ExitThread
KERNEL32.dll	108	CreateThread
KERNEL32.dll	253	GetCPInfo
KERNEL32.dll	431	GetStartupInfoW
KERNEL32.dll	711	RtlUnwind
KERNEL32.dll	436	GetStringTypeW
KERNEL32.dll	849	TlsGetValue
KERNEL32.dll	847	TlsAlloc
KERNEL32.dll	850	TlsSetValue
KERNEL32.dll	848	TlsFree
KERNEL32.dll	519	HeapCreate
KERNEL32.dll	182	ExitProcess
KERNEL32.dll	432	GetStdHandle
KERNEL32.dll	372	GetModuleFileNameA
KERNEL32.dll	239	FreeEnvironmentStringsW
KERNEL32.dll	335	GetEnvironmentStringsW
KERNEL32.dll	395	GetOEMCP
KERNEL32.dll	561	IsValidCodePage
KERNEL32.dll	786	SetHandleCount
KERNEL32.dll	350	GetFileType
KERNEL32.dll	430	GetStartupInfoA
KERNEL32.dll	283	GetConsoleCP
KERNEL32.dll	300	GetConsoleMode
KERNEL32.dll	433	GetStringTypeA
KERNEL32.dll	660	QueryPerformanceCounter
KERNEL32.dll	469	GetTimeFormatA
KERNEL32.dll	319	GetDateFormatA
KERNEL32.dll	363	GetLocaleInfoA
KERNEL32.dll	172	EnumSystemLocalesA
KERNEL32.dll	563	IsValidLocale
KERNEL32.dll	374	GetModuleHandleA
KERNEL32.dll	537	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	364	GetLocaleInfoW
KERNEL32.dll	769	SetEnvironmentVariableA
KERNEL32.dll	770	SetEnvironmentVariableW
KERNEL32.dll	900	WriteConsoleA
KERNEL32.dll	302	GetConsoleOutputCP
KERNEL32.dll	910	WriteConsoleW
KERNEL32.dll	805	SetStdHandle
KERNEL32.dll	471	GetTimeZoneInformation
KERNEL32.dll	79	CreateFileA
KERNEL32.dll	590	LocalFree
KERNEL32.dll	55	CompareStringA
KERNEL32.dll	235	FormatMessageA
KERNEL32.dll	940	lstrcmpW
KERNEL32.dll	582	LoadLibraryExW
KERNEL32.dll	943	lstrcmpiW
KERNEL32.dll	860	UnlockFile
KERNEL32.dll	597	LockFile
KERNEL32.dll	694	RemoveDirectoryW
KERNEL32.dll	468	GetTickCount
KERNEL32.dll	74	CreateDirectoryW
KERNEL32.dll	225	FindResourceExW
KERNEL32.dll	877	VerifyVersionInfoW
KERNEL32.dll	874	VerSetConditionMask
KERNEL32.dll	523	HeapFree
KERNEL32.dll	412	GetProcessHeap
KERNEL32.dll	517	HeapAlloc
KERNEL32.dll	339	GetExitCodeThread
KERNEL32.dll	691	ReleaseMutex
KERNEL32.dll	93	CreateMutexW
KERNEL32.dll	703	ResetEvent
KERNEL32.dll	772	SetEvent
KERNEL32.dll	76	CreateEventW
KERNEL32.dll	892	WaitForMultipleObjects
KERNEL32.dll	127	DeleteCriticalSection
KERNEL32.dll	536	InitializeCriticalSection
KERNEL32.dll	665	RaiseException
KERNEL32.dll	790	SetLastError
KERNEL32.dll	231	FlushInstructionCache
KERNEL32.dll	500	GlobalFree
KERNEL32.dll	150	EnterCriticalSection
KERNEL32.dll	579	LeaveCriticalSection

StringTable 040904b0

CompanyName	XnView, http://www.xnview.com
FileDescription	XnView for Windows
FileVersion	1.99.1
InternalName	XnView
LegalCopyright	Copyright © 1991-2012 by Pierre-e Gougelet
LegalTrademarks
OriginalFilename	XnView.exe
ProductName	XnView
ProductVersion	1.99.1

VS_FIXEDFILEINFO

FileVersion	1.99.0.0
ProductVersion	1.99.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	156672	EXE	07/08/2014 21:09:11	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

KB329449120.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904b0

VS_FIXEDFILEINFO

KB329449120.exe
-