; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; Input MD5 : 92A28637E1D95E647FAB2EEA9D786A3E ; File Name : u:\work\92a28637e1d95e647fab2eea9d786a3e_unpacked.exe ; Format : Portable executable for 80386 (PE) ; Imagebase : 400000 ; Section 1. (virtual address 00001000) ; Virtual size : 001B4000 (1785856.) ; Section size in file : 001B4000 (1785856.) ; Offset to raw data for section: 00001000 ; Flags E00000C0: Data Bss Executable Readable Writable ; Alignment : default .686p .mmx .model flat ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute _XPack0 segment para public 'CODE' use32 assume cs:_XPack0 ;org 401000h assume es:nothing, ss:nothing, ds:_XPack0, fs:nothing, gs:nothing dd 6D000h dup(0) _XPack0 ends ; Section 2. (virtual address 001B5000) ; Virtual size : 0007B75E ( 505694.) ; Section size in file : 0007B75E ( 505694.) ; Offset to raw data for section: 001B5000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute _XPack segment para public 'CODE' use32 assume cs:_XPack ;org 5B5000h assume es:nothing, ss:nothing, ds:_XPack0, fs:nothing, gs:nothing dd 1D1D7h dup(0) db 2 dup(0) public start start dw 0 dd 1BFFh dup(0) db 2 dup(0) _XPack ends ; Section 3. (virtual address 00231000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00000200 ( 512.) ; Offset to raw data for section: 00230800 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _idata2 segment para public 'DATA' use32 assume cs:_idata2 ;org 631000h align 2000h _idata2 ends end start