filenamessText3d.scr
size191488 (0x2ec00)
md5928f841b990da563eda4d8955bb7c626
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
207655012
2066550122
205655016
2036550127
10267
2116550187
201655011
204655011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x54504635
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion11.0
SizeOfCode0x21800
SizeOfInitializedData0x12200
SizeOfUninitializedData0
AddressOfEntryPoint0x21be0
BaseOfCode0x1000
BaseOfData0x23000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.3
ImageVersion6.3
SubsystemVersion6.3
Reserved10
SizeOfImage0x38000
SizeOfHeaders0x400
CheckSum0x37cb2
Subsystem2
DllCharacteristics0xc140
SizeOfStackReserve0x40000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0 2005

Sections

namevavsizeraw sizeflags
.text0x10000x217b40x21800R-X CODE
.data0x230000x62e00x1200RW- IDATA
.idata0x2a0000x13400x1400R-- IDATA
.rsrc0x2c0000x92f00x9400R-- IDATA
.reloc0x360000x14680x1600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x2a3040x118
RESOURCE0x2c0000x92f0
EXCEPTION00
SECURITY00
BASERELOC0x360000x1468
DEBUG0x13e00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x23500x5c
Bound_IAT00
IAT0x2a0000x300
Delay_IAT00
CLR_Header00
typenamesizecp
JPG#102102100
JPG#103234120
MUI#12240
ICON#13040
ICON#27440
GROUP_ICON#101340
VERSION#19000
MANIFEST#112070
module_namehintordfunction_name
ADVAPI32.dll605RegCreateKeyExW
ADVAPI32.dll658RegQueryValueExW
ADVAPI32.dll645RegOpenKeyExW
ADVAPI32.dll596RegCloseKey
ADVAPI32.dll674RegSetValueExW
ADVAPI32.dll644RegOpenKeyExA
ADVAPI32.dll657RegQueryValueExA
KERNEL32.dll666GetPrivateProfileStringW
KERNEL32.dll759GetTimeFormatW
KERNEL32.dll1535lstrcmpW
KERNEL32.dll1547lstrlenW
KERNEL32.dll660GetPrivateProfileIntW
KERNEL32.dll1362Sleep
KERNEL32.dll701GetStartupInfoA
KERNEL32.dll1410UnhandledExceptionFilter
KERNEL32.dll1347SetUnhandledExceptionFilter
KERNEL32.dll521GetCurrentProcess
KERNEL32.dll1377TerminateProcess
KERNEL32.dll612GetModuleHandleA
KERNEL32.dll1069QueryPerformanceCounter
KERNEL32.dll522GetCurrentProcessId
KERNEL32.dll526GetCurrentThreadId
KERNEL32.dll726GetSystemTimeAsFileTime
KERNEL32.dll772GetVersionExA
KERNEL32.dll877IsProcessorFeaturePresent
KERNEL32.dll933LoadLibraryA
KERNEL32.dll669GetProcAddress
KERNEL32.dll1017OutputDebugStringA
KERNEL32.dll977MultiByteToWideChar
KERNEL32.dll592GetLastError
KERNEL32.dll393FindResourceW
KERNEL32.dll1361SizeofResource
KERNEL32.dll939LoadResource
KERNEL32.dll957LockResource
KERNEL32.dll839InitializeCriticalSection
KERNEL32.dll261DeleteCriticalSection
KERNEL32.dll615GetModuleHandleW
KERNEL32.dll457GetCommandLineW
KERNEL32.dll976MulDiv
KERNEL32.dll1070QueryPerformanceFrequency
KERNEL32.dll791GlobalAlloc
KERNEL32.dll802GlobalLock
KERNEL32.dll809GlobalUnlock
KERNEL32.dll798GlobalFree
KERNEL32.dll823HeapSetInformation
KERNEL32.dll784GetWindowsDirectoryW
KERNEL32.dll664GetPrivateProfileSectionW
KERNEL32.dll754GetTickCount
GDI32.dll725SelectObject
GDI32.dll51CreateDCW
GDI32.dll65CreateFontIndirectW
GDI32.dll268DeleteDC
GDI32.dll346ExcludeClipRect
GDI32.dll553GetObjectW
GDI32.dll772SetTextColor
GDI32.dll732SetBkColor
GDI32.dll271DeleteObject
GDI32.dll555GetOutlineTextMetricsW
GDI32.dll496GetCurrentObject
GDI32.dll569GetStockObject
GDI32.dll503GetDeviceCaps
GDI32.dll66CreateFontW
GDI32.dll528GetGlyphOutlineW
USER32.dll178DialogBoxParamW
USER32.dll605OffsetRect
USER32.dll494IntersectRect
USER32.dll316GetDlgItem
USER32.dll231EndDialog
USER32.dll691SendDlgItemMessageW
USER32.dll560LoadStringW
USER32.dll511IsDlgButtonChecked
USER32.dll67CheckRadioButton
USER32.dll319GetDlgItemTextW
USER32.dll722SetDlgItemTextW
USER32.dll228EnableWindow
USER32.dll685ScreenToClient
USER32.dll495InvalidateRect
USER32.dll855UpdateWindow
USER32.dll755SetRect
USER32.dll214DrawTextW
USER32.dll589MessageBoxW
USER32.dll466GetWindowTextW
USER32.dll700SendMessageW
USER32.dll62CheckDlgButton
USER32.dll788SetWindowTextW
USER32.dll426GetSystemMetrics
USER32.dll814SystemParametersInfoA
USER32.dll756SetRectEmpty
USER32.dll624PostMessageW
USER32.dll371GetMessageW
USER32.dll625PostQuitMessage
USER32.dll831TranslateMessage
USER32.dll181DispatchMessageW
USER32.dll836UnionRect
USER32.dll545LoadCursorW
USER32.dll547LoadIconW
USER32.dll650RegisterClassW
USER32.dll293GetClientRect
USER32.dll2AdjustWindowRect
USER32.dll113CreateWindowExW
USER32.dll815SystemParametersInfoW
USER32.dll620PeekMessageW
USER32.dll769SetTimer
USER32.dll537KillTimer
USER32.dll713SetCursor
USER32.dll14BeginPaint
USER32.dll261FillRect
USER32.dll233EndPaint
USER32.dll161DefWindowProcW
USER32.dll783SetWindowPos
USER32.dll247EnumDisplaySettingsW
msvcrt.dll394_finite
msvcrt.dll20void __cdecl operator delete(void *)

??3@YAXPAX@Z

msvcrt.dll18void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

msvcrt.dll1262iswdigit
msvcrt.dll1223free
msvcrt.dll275_amsg_exit
msvcrt.dll113_XcptFilter
msvcrt.dll1307qsort
msvcrt.dll1166_wtol
msvcrt.dll1006_vsnwprintf
msvcrt.dll1279malloc
msvcrt.dll1190calloc
msvcrt.dll1312realloc
msvcrt.dll1365time
msvcrt.dll163__getmainargs
msvcrt.dll203__p__commode
msvcrt.dll425_ftol2_sse
msvcrt.dll424_ftol2
msvcrt.dll71_CIsqrt
msvcrt.dll1327srand
msvcrt.dll1310rand
msvcrt.dll1291memcpy
msvcrt.dll228__set_app_type
msvcrt.dll1200exit
msvcrt.dll373_exit
msvcrt.dll294_cexit
msvcrt.dll208__p__fmode
msvcrt.dll521_ismbblead
msvcrt.dll779_onexit
msvcrt.dll159__dllonexit
msvcrt.dll966_unlock
msvcrt.dll610_lock
msvcrt.dll364_except_handler4_common
msvcrt.dll313_controlfp
msvcrt.dll55void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll249_acmdln
msvcrt.dll490_initterm
msvcrt.dll230__setusermatherr
msvcrt.dll58_CIacos
msvcrt.dll61_CIatan2
msvcrt.dll62_CIcos
msvcrt.dll69_CIsin
msvcrt.dll1295memset
COMCTL32.dll17
COMDLG32.dll3ChooseFontW
COMDLG32.dll1ChooseColorW
COMDLG32.dll12GetOpenFileNameW
ole32.dll127CoUninitialize
ole32.dll80CoInitializeEx
ole32.dll154CreateStreamOnHGlobal
ole32.dll389PropVariantClear
ole32.dll26CoCreateInstance
USP10.dll31ScriptStringGetOrder
USP10.dll29ScriptStringFree
USP10.dll27ScriptStringAnalyse
WINBRAND.dllBrandingFormatString
d3d9.dll10Direct3DCreate9
WINMM.dll148timeGetTime
GLU32.dll43gluTessBeginContour
GLU32.dll50gluTessVertex
GLU32.dll46gluTessEndContour
GLU32.dll47gluTessEndPolygon
GLU32.dll24gluNewTess
GLU32.dll45gluTessCallback
GLU32.dll48gluTessNormal
GLU32.dll49gluTessProperty
GLU32.dll9gluDeleteTess
GLU32.dll44gluTessBeginPolygon

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescription3D Text Screen Saver
FileVersion6.3.9600.17415 (winblue_r4.141028-1500)
InternalNameText3D
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameText3D
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.3.9600.17415

VS_FIXEDFILEINFO

FileVersion6.3.9600.17415
ProductVersion6.3.9600.17415
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0191488EXE10/29/2014 01:43:17#
15c115HTM#
250b010210JPG#
2789823412JPG#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK