faa1fde004b3c60b5a8068a7c3aab151

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2008-Apr-13 18:37:00
Detected languages English - United States
Debug artifacts pinball.pdb
CompanyName Cinematronics
FileDescription 3D Pinball
FileVersion 5.1.2600.5512 (xpsp.080413-2105)
InternalName 3D Pinball
LegalCopyright Copyright © Cinematronics 1994,1995
OriginalFilename PINBALL.EXE
ProductName 3D Pinball
ProductVersion 5.1.2600.5512

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • GetProcAddress
Functions which can be used for anti-debugging purposes:
  • FindWindowA
Code injection capabilities (PowerLoader):
  • FindWindowA
  • GetWindowLongA
Can access the registry:
  • RegOpenKeyA
  • RegOpenKeyExA
  • RegCloseKey
  • RegQueryValueExA
  • RegCreateKeyExA
  • RegSetValueExA
  • RegQueryValueA
Possibly launches other programs:
  • WinExec
Can take screenshots:
  • CreateCompatibleDC
  • BitBlt
  • FindWindowA
  • GetDC
Suspicious VirusTotal score: 1/69 (Scanned on 2020-09-24 12:49:31) APEX: Malicious

Hashes

MD5 faa1fde004b3c60b5a8068a7c3aab151
SHA1 2a5b525e0f631bb6107639e2a69df15986fb0d05
SHA256 2bbc8234685fe2f6324040af6ea20123cf00c4a56882ce0d9074f0beefac67bc
SHA3 c3712cb72e9838972d6ef7075efd216a26d8cfec2f06dea40833bb0b8bc6c299
SSDeep 6144:aqKFh6MBn1++g0UIgqVwTREJ7EAE2xyS:anFhr1+h0UjqVwyx/
Imports Hash b056bb2d3f3072887b24af9cd64737cb

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xd8

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2008-Apr-13 18:37:00
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 7.1
SizeOfCode 0x21400
SizeOfInitializedData 0x26c00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00020F95 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x23000
ImageBase 0x1000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 5.1
ImageVersion 5.1
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x4b000
SizeOfHeaders 0x400
Checksum 0x4cc55
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x40000
SizeofStackCommit 0x10000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 c54c3221d20461ade042d63809b54555
SHA1 d79541e1e5e3258341df7d7f842ef11674509951
SHA256 2e1a1078ac78e72e9ec747c54273b2e5ec9f9c8e0b4b1c98785ff30559882707
SHA3 1b35c38cd1ac414b508548dea7506f3c4837ad5f11d6b086a781de8bcc17e53e
VirtualSize 0x2132c
VirtualAddress 0x1000
SizeOfRawData 0x21400
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.66427

.data

MD5 b13bfacc89a8e86815a8af729fc2c7af
SHA1 874d78f31e99790382623951d4fffadbf9a24bb1
SHA256 6a9b4212830c0cce4e36f2a0fb0d3217dbf26a7f83a75356b0a9a8916f81857e
SHA3 a5fcf2cfca23bbf1a49d883ae2defa850257d6d6d1bbab810aed242384b246ee
VirtualSize 0x52a4
VirtualAddress 0x23000
SizeOfRawData 0x1a00
PointerToRawData 0x21800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.34077

.rsrc

MD5 372d958d575c5878afa49762eb674cb8
SHA1 99829b487caea46acba84c3d7c709b848684f55f
SHA256 89231a8670048e1cadaa9966389ef06bab1cc3ce78d3a4a86c535b28e6a4f383
SHA3 a7ea7f13f065f433f4bd40d0f850bac4d997a4ec50a59ae5c27280ca656c6310
VirtualSize 0x21710
VirtualAddress 0x29000
SizeOfRawData 0x21800
PointerToRawData 0x23200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.60483

Imports

GDI32.dll RealizePalette
SelectPalette
CreateCompatibleDC
GetObjectA
GetStockObject
CreateDIBitmap
GetPaletteEntries
DeleteDC
SetPaletteEntries
ResizePalette
GetSystemPaletteEntries
SetSystemPaletteUse
GetDeviceCaps
CreateCompatibleBitmap
BitBlt
CreatePalette
CreateSolidBrush
SelectObject
DeleteObject
SetBkMode
SetTextColor
GetLayout
StretchDIBits
SetLayout
USER32.dll RegisterWindowMessageA
FindWindowA
GetCursorPos
SetCursorPos
PeekMessageA
TranslateMessage
DispatchMessageA
GetMessageA
IsIconic
SetForegroundWindow
GetMenu
PostQuitMessage
PostMessageA
ReleaseCapture
SetCapture
LoadIconA
EndPaint
UnregisterClassA
LoadBitmapA
DestroyWindow
RegisterClassA
CreateWindowExA
GetWindowLongA
DefWindowProcA
UpdateWindow
LoadCursorA
SetCursor
DeleteMenu
DrawMenuBar
SendDlgItemMessageA
MapVirtualKeyA
GetKeyNameTextA
CheckMenuItem
EnableMenuItem
DialogBoxParamA
MessageBoxA
EndDialog
GetDlgItemTextA
ShowWindow
EnableWindow
SetFocus
SendMessageA
GetParent
WinHelpA
GetDlgItem
SetWindowTextA
SetWindowLongA
GetSystemMetrics
GetDC
BeginPaint
InvalidateRect
ChangeDisplaySettingsA
SetWindowPos
RedrawWindow
IsWindowVisible
MoveWindow
FillRect
DialogBoxIndirectParamA
GetWindowTextA
MessageBeep
GetDesktopWindow
GetWindowRect
DrawTextA
ReleaseDC
LoadStringA
wsprintfA
SetMenu
SHELL32.dll ShellAboutA
KERNEL32.dll TerminateProcess
GetStartupInfoA
GetPrivateProfileIntA
WritePrivateProfileStringA
SizeofResource
GetVersion
LoadLibraryA
GetProcAddress
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
FreeResource
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
_lopen
Sleep
WinExec
GetCurrentThread
SetThreadPriority
GetModuleFileNameA
GetLastError
lstrcmpA
GetModuleHandleA
FindResourceA
LoadResource
LockResource
_hread
GlobalHandle
GlobalUnlock
GlobalReAlloc
GlobalFree
_llseek
_lread
GlobalAlloc
GlobalLock
LocalAlloc
LocalFree
OpenFile
_lclose
lstrcpynA
lstrcatA
lstrlenA
lstrcpyA
COMCTL32.dll InitCommonControlsEx
WINMM.dll timeGetTime
sndPlaySoundA
mmioOpenA
mmioClose
mmioDescend
mmioRead
mmioAscend
waveOutPause
waveOutRestart
waveOutWrite
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutReset
waveOutGetPosition
waveOutGetNumDevs
waveOutGetDevCapsA
mciSendCommandA
ADVAPI32.dll RegOpenKeyA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueA
msvcrt.dll _XcptFilter
_cexit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_exit
__p__fmode
__set_app_type
_except_handler3
_controlfp
atoi
_c_exit
wcscpy
wcslen
isdigit
isalnum
isspace
_purecall
calloc
rand
??2@YAPAXI@Z
??3@YAXPAX@Z
floor
_CIacos
strstr
exit
_ftol
fopen
fclose
_strnicmp
realloc
free
malloc
sprintf
_itoa
sscanf
_ltoa
__p__commode
memmove
atol

Delayed Imports

SPLASH_BITMAP

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x119a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.54587
MD5 c07dc50821c61304b4c40fe66f74b2f5
SHA1 f50497af32f0873ca92f8f9381488b5344671720
SHA256 62712f8141437928881e75b923b8fb0d1574867671c1108f97ef72a517cd6958
SHA3 0ea4def9e45f9e843500075c21d3d97fe5d189a1bf5e1c57d4167a188e0b3acb
Preview

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.15158
MD5 467b74c2029d3fbbcc2d6449afb17eb9
SHA1 1217edf0bdfa49861e9d42e09d10db2b2a79144e
SHA256 9201e9408187ce5ea7761c0b340f759c1dbf2d20676333d3b5b117cd5950f3ea
SHA3 42157ebaa33d81e700b7abdd8aeffbcdde2fa941f73683a61306e00901e2ab1a

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.46117
MD5 c159a14ac467069526f407f4ebd937cb
SHA1 f35fa3ee645eba1d3b1dd3593349dcaf507bfeee
SHA256 d0003c8b39e9c28825137c8a1d8bbd9cfb249671dc873a9dc6091e307dddc0a6
SHA3 35e59d3f4e789e18b15547c9e367838240332d4dfa8245f1e64c394c58c8b229

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.56885
MD5 1d4bcd2c59bfeb72705a2c0ec5bfd6b5
SHA1 fc54d65d377c581e63dfab54778647a64cc66ef0
SHA256 eab8f57e9e7d6457c8b326b2e1b772fecc4671765654b4e13193d52fcf055525
SHA3 aab53b89a57add6113a4b523574aee3dbfaeeb23108e751817954cf98add0d8b

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.89985
MD5 25699d2efe717b7c10b1b54def3477f1
SHA1 5a004ca6d1ad2dfd97fe0fc6e3ca8cc3bb04a595
SHA256 1a38a42a0c80897c1c25307233e9ee47feca861bd84e3d2e7a137241c585abd8
SHA3 6e5e2e5704bc03cee9482f246e346a41d36daff5febdc0311a7a5e1878ad145b

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.10663
MD5 a94b14092a09fe6dd3716b8254672665
SHA1 aaa402a3e9441714d33e00b6e8f160e610991d7a
SHA256 af3841464daff0e273574e6477b685abcd3b8cb623643a3b35e7e03d233dc127
SHA3 b19ea0b0ca1709bb3cecbddd6fd042390b2aadddd6167e37841d59e4421e2e88

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.24698
MD5 df41e646adef76d296c8ee95e44a4406
SHA1 4504809fbc5cb423fe72aed961f3b24bf44f443c
SHA256 6c31ccc3db0ed3c298a61cc2bddd6eada45345823f71827e49252f9610adae06
SHA3 d04824cec3e431f1a83f9e4401d30218e38e058031dc747f5d058d65e3afb2d8

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.41508
MD5 2ef09dd6eab27aca3ab158ac44a2d6b1
SHA1 5276334c3ac68b9a82ca4d18e77d3d0ae9b123d0
SHA256 e636ac433cef891e7258243c9dfe9741ed448dd507680628d6dbd62322d344e3
SHA3 0e989547e28f3fd4579a570fbcc9311d320c71a052a7dd6badd7ae0203f68436

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.69869
MD5 8234e1cd85e5e24e51d5aeb5c0b148cf
SHA1 75505d1a89182555db45d9251ea9096ef1f10ded
SHA256 1fbb084c6247ab3f76543afcba99ae297709f1961293820144af7e79e994a527
SHA3 72df9e80244fa8a8945ee35aaa40030288ba28d0e85bdeb881a42640cb0e08a6

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.80422
MD5 3cfaa76e6ed5d8fc0fe7d911af143bb3
SHA1 969d3277a04b53e16ba4763d06946ee974b1edb0
SHA256 3b7055dd67b55265ea8271e8ba9b5eb0a517a998063a59444ae3bb71fcf12fc2
SHA3 c86871653cbe42b4aa87b3c7d5587baa7c0803667fc7efc87469cafdd3e7d875

MENU_1

Type RT_MENU
Language English - United States
Codepage UNKNOWN
Size 0x266
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.29045
MD5 6546e592bbef7f63969b8e9fbde7e8ec
SHA1 48127236bae83b2883d0cae3fc714badd8025520
SHA256 aceb83861fe945ead7f5f8337a8f67fb0f4df751f998bcd196321bb1be13a92d
SHA3 ec2f166e764e730a49d4f1d338132dbef6cba23aa87a13fba16d31de9659a283

DIALOG_1

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xe2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.34147
MD5 c6a36102dea2945487c2cd0870d258af
SHA1 783a345a4176678ea8cfe64e326604136a0209be
SHA256 6b06b8990dc7c7be75b4f3ce0f36f60e4b5a10b8791e31a4ddc28178486f0f3e
SHA3 0667ae90e573730eeb375350a3d62c04fae2bb28bd274c97874d90923108d222

DLG_HIGHSCORES

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x372
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.20539
MD5 a48fed86298ab7b0003df451f71af88d
SHA1 f80f0e9a67c29191791bafd00e9b551b989826e9
SHA256 2f8d5926ac7cb731d4aff535148bef946ee54b8a5d1345cac680ced1c9d76ad8
SHA3 a0b1de4487194ae83a92e761a97444297f7260178ebfcfa75d4536e8e91ecc0b

EDIT_COMPONENTS

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x5c4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.25079
MD5 53ab58fdd51338e08a7819a9fb8e000f
SHA1 e779279d2523674009123a3c853b82e77bf683c3
SHA256 8e162540cb04b5ea9be2367ccb7dfbf5097923566bd0adccadd222e05abe2bde
SHA3 1ae16d9198ff981784ac5ba1edd1a563a082915769093144a374466f18b2ce62

KEYMAPPER

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x5ae
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.60841
MD5 83ca94be7b218c27646ef98f5e6b166f
SHA1 202b825cef3953480e549012b4e8b4fba0e473d0
SHA256 60bf3c2ed6627f865750214e36627106a3be6315021a80fc6cf2fbf4bc6031bf
SHA3 9d7ab9b822ac98b24b1c8603235ac3eb1da411a15f242307ed31ef09eda89638

XXDLG_HIGHSCORES

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x356
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.06134
MD5 cd92308ccb92b5339aa34b88beab66b8
SHA1 134c91538123b9ddb428e50d94579ad8334f4abe
SHA256 b6628ad020f48688ec294135c9a63891b605ad9843cd3cf8b81af084dd26a018
SHA3 3868a84a0164238619eee246cb557c74d1b31c0b11633ce2ab5a0f534180e718

XXKEYMAPPER

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x59e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.60019
MD5 acc03c245c6e062099e72622f8030db7
SHA1 6e220de40f409451f0b93e714ba04e537fcccba0
SHA256 d351147a15783d3916f4fa726f172755050e1a0c4c1fe79a15d1c2df3664a2d9
SHA3 f83f904f5bdf11f8fa67478974aea4f5fc392c5e186eeeea109938aeb8deb078

1 (#2)

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x244
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.45529
MD5 2243cb1b1516b3ba1bfd35d52f246449
SHA1 cd1438de73c08108ed85ca020836e7ea9a8b1af0
SHA256 21081d2d609473ae92bc01873567d6e8415f2d28efaf06c0996a82d15ebd2901
SHA3 a5a66354edae1158bdea2646a8a7b5d74523eb5f7a04a068e0e8123e3cf311c6

2 (#2)

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x1b6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.51431
MD5 5da33aac6ce602dd56c7b33f93a92a24
SHA1 09282b3db6b988079aa60c87df2ef35e0a1af7e6
SHA256 d9757cfc8169111a156f41e301d8f150b15e9cdeef58b352da1cff30d008d65a
SHA3 554ce133c7a18f378a4096968635ee63508e67b9d57d01bbddacf92f15f5d278

3 (#2)

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x344
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.53759
MD5 ed5786540de56526d5ba53e347df541f
SHA1 9b0c0c13d382fba7d4a2b63de63b0efee256ab99
SHA256 e72f14d5c7827cb12a4d7cedd844d59107cc37c825135f46a6ebc28ec474de43
SHA3 5cce5d376bd4421c3071261d8f2b5aabeb950a72e2597faf4e5fb81ee534e905

4 (#2)

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.44432
MD5 110342fca4047c876fe6966691d0b123
SHA1 cf12206abe7ea29bd03c27bb15a18f47d6422995
SHA256 551bacd847780df95d8a686ffef701b452ae716860991c0ddccf9b037c1b54f1
SHA3 573e317b120539789dbdee93f3f0f21060fcac96ebb7d5d78beb3a73574e92dc

5 (#2)

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x1ae
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.40066
MD5 6b5fcf7d430883d2a3712f7e6e6ef5dc
SHA1 146e352cbf3e6e78b6e9c70daf663345e8721bc0
SHA256 077ae24d1f47e1b5a643709690b1f57708b3e643e8a0445c39dc4e4c65196599
SHA3 58523fd51ea05aa71d1b3614fd4cfb67a230fe1cc8bcd25d3cfef771210b7955

6 (#2)

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x194
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.42917
MD5 2cb9a16f5753f7021a40a707496e4d5b
SHA1 ab13efa9963ae457a5b42f13545935d5bc18122e
SHA256 0001642f059d526b838db83020d938aa85a79b89835986253ddef52a4764f102
SHA3 797ce24d242dcbf10a95d7f175cfce3465044331b425b50e0e0b22a60f609e74

7 (#2)

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x434
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.53646
MD5 8ec5bb8268204e907a55aa4d1b10accc
SHA1 e56a86d37fcb16ca63107ae01098e67d5279da55
SHA256 8738ca9c1fdbee53916fd0bc0d0866b04f9bd0418588541c7fd12ce90f616f91
SHA3 b27d9c1c8e8be54c148bcd9d5f69de33be8f771cc38752b46f80254951d60fc7

8 (#2)

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x282
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.4928
MD5 fac51d4ec11f81394db01f21fa00aba3
SHA1 0f4d9cedd576b404e97d76aea943265bb353718d
SHA256 a2483ee4ea482ed5e899c3a7d84f1eceaa087d60ee08723917f2e2ff0aefd9f6
SHA3 8d7ad80c23fbdec8d3dff9926fa2a020930f9150a81bc86859c6c5821e36b375

9 (#2)

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x296
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.45905
MD5 b1768168b02b8361b4d4b0bb0e08df6a
SHA1 2dd79a3f15aaeda86c2e09db3abcdda42187481a
SHA256 40a7fa7aef2a109c89fbce55afec1941a7f915c0a6c0dd2a51cfe71b76e29c59
SHA3 88d5728346e7a8f065533f094dd0bf041d3e03012d4fcd90491ecdbc92bbd111

10

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x276
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.4704
MD5 fed39973b400cfa2c30ad23c1e109313
SHA1 b5c12787dcc6fda62f33dd987184b92595a77d5e
SHA256 b3937853f42e9d2e26556f1ab0a0eed7fe5f593519c460a623d1596734f4954f
SHA3 388c4e1546acb0f8837a815001f96c89282bd146d16361667964551f6259a21d

11

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x26c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.70862
MD5 971bacf4ac52e59849b0f9d69e4643bc
SHA1 747a44dde324ff5d01ab1d933507ee715e0d93a5
SHA256 edaa3658978eb0a7ba0253b879b2f292d77eb9e4e4d4fbf5be25d629521b8aa7
SHA3 856db8be57f2e59af342fa02de20c8f5c597053038bc0c06bc40e5b564e6c3b2

12

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x24e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.47986
MD5 0ff9b040ee8f950f4f5532349642a911
SHA1 295040e58eb3847df79d18ff19030b059902b4f5
SHA256 86149f6c41e550ebc223044889f981912ebd02c73f26e2b269cd290733f21987
SHA3 1a5a59db77ccf5b4fed1abd74682751ce2e74eafe01c88b7e5d24bb4a61a4676

PBMSG_FT

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x54c6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.74595
MD5 55a63fab919539f2d55fb69dd3e8ea70
SHA1 f2efad631ccc153a7b71eb44847d58948d5efa36
SHA256 3679477baf73444a2b5a5d93b32153a7266c7e5edfb4d4644a917ca6766cb4c8
SHA3 3235a37854e960aa65859339f73d520ecddc07ee0bceecc7ef3f856ef7deb3ae

ICON_1

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.89097
Detected Filetype Icon file
MD5 a6469ac97a109b7c2bc1bf3020168af3
SHA1 53f3b4b4b61af9cde9de74a33fbc492c71f7660c
SHA256 ca82878ac6f8f5d26249f03257b496eebf06e2d20e02349a0b871bf92766535c
SHA3 15f2850e54173ca36462fa901e1019404484e4da82f3668cb938a5e593f2ed53

1 (#3)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x318
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.56078
MD5 9dd7c2c4198d91978ca1c325a7dc4964
SHA1 7aea594b01c2183e06ad20742bf0cfe4e440ad05
SHA256 6cffe907685ceabe5f35577ce831dba4e1df69e43d6849a296ad754d1afab9e6
SHA3 075aebeaeef0f1d3db424809cfd9f0e185ed67e15114c5bb610bd5ca31ad11a5

1 (#4)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x291
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.94247
MD5 5c2d8ffa43f079385a44ba1ccd8f8a09
SHA1 09e6b108575a4f06ccda88080d4657cb63d96d06
SHA256 71e31cb8bf6eb3d8d161974c1c8f773bb872c01cae717482808adfe284063a6a
SHA3 b7067fbf29f1a0270eb4db8c0269963f88ce61dc3463f5b58f510f814e129e39

String Table contents

Replay Awarded
Ball Locked
Center Post
%ld
Bonus Awarded
%ld
Bonus Activated
Weapons Upgraded
Engine Upgraded
Bonus up 1 Million
Extra Ball Available
%ld
Extra Ball
Reflex Shot Award
%ld
Final Battle Won
Hyperspace Bonus
%ld
Hyperspace Bonus Available
Jackpot Awarded
%ld
Jackpot Activated
Multiball
Ramp Bonus Awarded
Light Added
Ramp Bonus On
Light Reset Off
Skill Shot
%ld
Game Paused
F3 to Resume
Continue Play
F2 Starts New Game
Careful...
Player 1
Player 2
Player 3
Player 4
Demo
Player 1
Demo
Player 2
Demo
Player 3
Demo
Player 4
Game Over
TILT!
This program requires an 80386 or later CPU.
80386 Required
3D Pinball for Windows - Space Cadet
One or more of the player controls is set to the same key,
for best performance use unique keys for each control.
Clear High Scores?
Confirm
WAVEMIX.INF is missing - it must be in the pinball directory!
Warning:
Ship Re-Fueled
Gravity Well
Time Warp Forward
Time Warp Backward
Maelstrom!
Wormhole
Awaiting Deployment
Flags Upgraded
Bonus Hold
Level One Commendation
Level Two Commendation
Level Three Commendation
Field Multiplier 2x
Field Multiplier 3x
Field Multiplier 5x
Field Multiplier 10x
Target Practice
Launch Training
Re-Entry Training
Science
Stray Comet
Black Hole
Space Radiation
Bug Hunt
Alien Menace
Rescue
Satellite Retrieval
Recon
Doomsday Machine
Cosmic Plague
Secret
Time Warp
Maelstrom
Mission Accepted
%ld
Mission Completed
%ld
%s Mission Selected
Black Hole
%ld
Gravity Normalized
%ld
Gravity Well
%ld
Promotion to %s
Cadet
Ensign
Lieutenant
Captain
Lt Commander
Commander
Commodore
Admiral
Fleet Admiral
Wormhole Opened
Crash Bonus
%ld
Replay Ball
Re-Deploy
Player 1 Shoot Again
Player 2 Shoot Again
Player 3 Shoot Again
Player 4 Shoot Again
This 3D Pinball Table was created for Microsoft by Maxis.
For more information call (800)-336-2947
(US and Canadian customers only).
Copyright (c) 1995 Maxis.
3D Pinball Table created for Microsoft by Maxis. Copyright (c) 1995 Maxis.
About 3D Pinball
Hit Mission Targets To Select Mission
Re-Fuel Ship
Launch Ramp To Accept %s Mission
Attack Bumpers Hits
Left: %d
Target Training Passed
Mission Aborted
Launches Left: %d
Launch Training Passed
Re-Entries Left: %d
Re-Entry Training Passed
Drop Targets
Left: %d
Science Mission Completed
Warning -- Low Fuel
Fill Right Hazard Banks
Hyperspace Launch
Comet Destroyed
Enter Wormhole
Radiation Eliminated
Upgrade Launch Bumpers
Enter Black Hole
Black Hole Eliminated
Targets
Left: %d
Xenomorphs Destroyed
Upgrade Flags
Hyperspace Launch
Survivors Rescued
Aliens Repelled
Hit Fuel Targets
Remote Attack Bumper Hits
Left: %d
Satellite Repaired
Lane Passes
Left: %d
Shoot Ball Up Fuel Chute
Survey Complete
Out Lane Passes
Left: %d
Doomsday Machine Destroyed
Roll Flags: %d
Hit Space Warp Rollover
Plague Eliminated
Hit Yellow Wormhole
Hit Red Wormhole
Hit Green Wormhole
Plans Recovered
Rebound Hits
Left: %d
Hit Hyperspace Chute or Launch Ramp
Drop Target Hits
Left: %d
Spot Target Hits
Left: %d
Lanes Passes
Left: %d
Shoot Ball Up Fuel Chute
Hit Launch Ramp
Hit Flags
Hit Worm Hole
Hyperspace Chute to end Maelstrom
pinball.mid
1 UseBitmapFont
90 Left Flipper Key
191 Right Flipper Key
32 Plunger Key
88 Bump Left Key
190 Bump Right Key
38 Bump Bottom Key
Software\Microsoft\Plus!\Pinball
SpaceCadet
1c7c22a0-9576-11ce-bf80-444553540000
PINBALL.DAT
Space Cadet
Error:
Unable to find other tables.
3D Pinball
Space Cadet
Promotion to %s
Demotion to %s
Upgrade Attack Bumpers
Fill Left Hazard Banks
HIGH SCORE
pinball.chm
Not enough memory to run 3D Pinball.
Player 1's Score
%ld
Player 2's Score
%ld
Player 3's Score
%ld
Player 4's Score
%ld
High Score 1
%ld
High Score 2
%ld
High Score 3
%ld
High Score 4
%ld
High Score 5
%ld
255 255 255 (R G B default font color)

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 5.1.2600.5512
ProductVersion 5.1.2600.5512
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName Cinematronics
FileDescription 3D Pinball
FileVersion (#2) 5.1.2600.5512 (xpsp.080413-2105)
InternalName 3D Pinball
LegalCopyright Copyright © Cinematronics 1994,1995
OriginalFilename PINBALL.EXE
ProductName 3D Pinball
ProductVersion (#2) 5.1.2600.5512
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2008-Apr-13 18:37:00
Version 0.0
SizeofData 36
AddressOfRawData 0x3408
PointerToRawData 0x2808
Referenced File pinball.pdb

TLS Callbacks

Load Configuration

Size 0x48
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x1024778
SEHandlerTable 0x1003430
SEHandlerCount 1

RICH Header

XOR Key 0x916ad316
Unmarked objects 0
ASM objects (VS2003 (.NET) build 4035) 2
Imports (VS2003 (.NET) build 4035) 17
Total imports 233
94 (VS2003 (.NET) build 4035) 1
C objects (VS2003 (.NET) build 4035) 45
C++ objects (VS2003 (.NET) build 4035) 14
Linker (VS2003 (.NET) build 4035) 1

Errors