; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; Input MD5 : 80FBB95E9CB406438591A66109908BED ; File Name : u:\work\80fbb95e9cb406438591a66109908bed_unpacked.exe ; Format : Portable executable for 80386 (PE) ; Imagebase : 31420000 ; Section 1. (virtual address 00001000) ; Virtual size : 00005000 ( 20480.) ; Section size in file : 00005000 ( 20480.) ; Offset to raw data for section: 00001000 ; Flags E0000080: Bss Executable Readable Writable ; Alignment : default .686p .mmx .model flat ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX0 segment para public 'CODE' use32 assume cs:UPX0 ;org 31421000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 1400h dup(0) UPX0 ends ; Section 2. (virtual address 00006000) ; Virtual size : 00002000 ( 8192.) ; Section size in file : 00002000 ( 8192.) ; Offset to raw data for section: 00006000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX1 segment para public 'CODE' use32 assume cs:UPX1 ;org 31426000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 4F9F292Fh, 8261906Fh, 87B146B5h, 0D16F5E12h, 1EEC47C8h dd 5A5BB35Fh, 0AE392221h, 0D2DD6B38h, 0B7375DE2h, 764A20DDh dd 0F41DDCC7h, 0D5F40FDEh, 0E85B205Fh, 0AADFFD36h, 76844953h dd 0E7582574h, 79E92917h, 7230CAE1h, 1CE2AA86h, 7181BCACh dd 0DDE89184h, 73B620D7h, 1C64456Ch, 0F18CC4E6h, 0F00A0DFFh dd 96A4898Ch, 2562F1FEh, 4222A8C9h, 0F2113C18h, 9D9E422Fh dd 172C6C9Eh, 0DEE8FDBCh, 0E6D91D9Eh, 971AE491h, 43934653h dd 7944311h, 0BB0CDDB8h, 0A0E184Bh, 634B4B69h, 0FAE6E606h dd 0F8B331EFh, 0EC95BD7h, 1B028348h, 0FBAC8C5Ah, 12217862h dd 274714CFh, 0B717EF24h, 22D3DD60h, 8BB47670h, 1DA3971Dh dd 379482F7h, 615E9284h, 0CC56EEA6h, 32E8915h, 0DF1B56E3h dd 21DED8D3h, 6CCBC482h, 0D782ABCCh, 0DA8A2E5Ch, 0C98D2151h dd 0CC3BEC9h, 34BBD16Dh, 6249A6C7h, 0B8B7B68Dh, 38141CB9h dd 1AE59AB2h, 936EFCDh, 0E5078773h, 4E42C6EAh, 4B856696h dd 15A08641h, 8EC184DFh, 0B43CBD0Dh, 0B2141ED0h, 48A335E0h dd 9080D8Eh, 0FAF12BAEh, 0DDB34FBFh, 0EEE061A7h, 0F232C639h dd 4A71D18Eh, 5FA84239h, 79317524h, 0ECA0F520h, 55141E5Ch dd 23608341h, 5C7F6E4Dh, 0C986D879h, 546CDE5h, 8D54D1B9h dd 0D651A895h, 514A811Bh, 0D3519C41h, 63032656h, 0A97FA0A2h dd 0AAF32B0Ch, 45ED338h, 3809403Fh, 0FE3FE0FAh, 869F5A59h dd 7622564Fh, 79846F63h, 0F34F5462h, 0EB934349h, 2253D500h dd 0C0BF3A44h, 692A99E1h, 2B582B7Dh, 0C4B0B4C3h, 307C8840h dd 2BE73243h, 0CB5BCA31h, 7FF1DCF3h, 5F24DCA7h, 54A2FF47h dd 0B9B2945Ch, 0E85047AFh, 0A80DEC7Bh, 6DEA110Dh, 4849BA34h dd 0DD4DB328h, 20BD532Eh, 41BEDA8h, 82C629CCh, 7D883E73h dd 35F763C6h, 7DC073B2h, 4F282601h, 0CEE12FD2h, 498A72F9h dd 0BE443B00h, 86977BB1h, 2D2C69ABh, 8FDD29C8h, 0A42F1136h dd 0F900BE54h, 0C084E1C3h, 6BB3CBA6h, 83EF23E3h, 764A68E7h dd 41ED7B12h, 746B4C05h, 1E8971E1h, 8BA2E966h, 10DB4096h dd 0F2CCA526h, 611A620Ah, 0DAC4D2Ah, 0C96E37B3h, 48E58C62h dd 0D9249D62h, 0CED88211h, 0F7939901h, 5545BD74h, 52D1405Bh dd 0B4BF955Bh, 11B1E0F0h, 0C3C02E9Eh, 641A0104h, 0DD470BC3h dd 6DF560E6h, 0C9AA0AAAh, 3F90D926h, 389618EBh, 616EAE31h dd 0DDAC181Bh, 5B8CCB3Bh, 0C6F4BB31h, 0AD259E09h, 2683EAC0h dd 8ACEE284h, 33F432CAh, 0FFD959C5h, 0B7ABFF56h, 3CFDED68h dd 0CD27AE51h, 33696FC7h, 0DD1FA894h, 0E9E6A01Ch, 1D43AE08h dd 73C183A0h, 904E974h, 0A224804Dh, 0D9A0564Eh, 4F45FD57h dd 0E14C130Fh, 0F0D1CD19h, 0C6A02205h, 87CBD25Ah, 88A9458Fh dd 0EB45A86Ch, 9B08C8A2h, 0FC89694Dh, 0D6EF20E5h, 74A34A76h dd 8416177Dh, 0C106DCEDh, 5479DD88h, 0B1FA79DCh, 0A963545Dh dd 7F734A6h, 0AFDC87EFh, 87AD9EDFh, 9EDD586Eh, 36A64E84h dd 5F4F7AA8h, 75620FF6h, 0A9B0D1C1h, 0AB3D1660h, 39201748h dd 5A49D941h, 298CC847h, 3F336E44h, 0DF9BED8Dh, 3826A069h dd 145315F4h, 0C7976B1Eh, 5DDA140Eh, 633C75C9h, 904A6D42h dd 0A8BB2504h, 392C5536h, 380E1B05h, 1E4D31C8h, 1444C8A0h dd 6FD4DEE0h, 46A955F8h, 2308D370h, 0B351B9ECh, 329A9668h dd 79F01636h, 0CB143A12h, 21CDB010h, 518339E2h, 0D233DB1h dd 0C7A4C38Fh, 84C0E580h, 6A278D3Eh, 2F8704AFh, 0AD3256FDh dd 83C2B104h, 97BE7CDAh, 0F574ABCBh, 924E7A68h, 0A317619Eh dd 0A7A1E11Dh, 9590ED13h, 3AF9EFE2h, 0F62DA05Bh, 6AE264A1h dd 7E79409h, 0AC7A4FC4h, 3A65A4AEh, 0B8CD43B5h, 0ADA7353Ch dd 4C5F1CA4h, 0EB9B967Ah, 0E1BBCA87h, 3DCF0A19h, 0D3C28977h dd 0C5D7E47Eh, 76114250h, 23E19E8Fh, 0C00F0EBh, 4CD9B15Eh dd 8381F8E3h, 0E88BE36Dh, 7B1753E8h, 0EEC6D6F6h, 9652F258h dd 0B6DBCC3h, 852C15BCh, 0EB1735A3h, 63565AACh, 0C8239961h dd 1F6A8A61h, 3FC3125Ch, 0E104C79Bh, 19D0BDDAh, 82599111h dd 0D6665074h, 5F1A7196h, 8E04A94Bh, 0C54CA48Ah, 57201CF9h dd 0DA39EF6Ch, 0E08AD4D4h, 0CBFF69BFh, 0C6A426C8h, 0BD3E48EFh dd 911AFA1Bh, 5560A80h, 66E358F4h, 0FDFF99CCh, 8058660Dh dd 0C32623B2h, 528B5EFDh, 572F8B1Ch, 6E38F73h, 0E3905F7Bh dd 0ACA19EE7h, 96911186h, 0D147250Bh, 723031A5h, 0CF7BFF9Eh dd 1BB31873h, 96075673h, 0C1097D43h, 0BBB1F8D4h, 616594B0h dd 0F5CCDD75h, 2E442D76h, 4099F34Bh, 0A6E9352Ch, 957A99AFh dd 0E43E4ED0h, 74BEBD84h, 0F8FEB21Ch, 0AA0EB2C2h, 6E60BD5h dd 0A8F73DE3h, 0F539B4DCh, 1A136B7Dh, 33FA5B5Dh, 476FFE0Dh dd 0B6BFDEBh, 93A43C9Eh, 2E9956BFh, 7E06845Ah, 39C787A6h dd 0FDBDAC89h, 25C3BC0Eh, 786DC7D4h, 0DDB00D12h, 0BF84A92Fh dd 734386BBh, 0DBC6784Ch, 97BCA65Ch, 0A4F07C7h, 0DB649F6Fh dd 0CA88DAC4h, 0D9B9954Bh, 8771141Dh, 0C7DD388Dh, 15BC2255h dd 4B6B926Bh, 177F298Bh, 8ED2E588h, 0D5E7A5Eh, 0E7793DBAh dd 263EA320h, 3DA9C4D5h, 67C7D300h, 9EEDD401h, 102275C0h dd 0EB9A568Eh, 1571809Eh, 0CBC1860Ch, 1928AB3Dh, 3BEB9F1h dd 193E8837h, 0BE759D85h, 0EA3FD843h, 1653D368h, 0EE7B4360h dd 0B4ABD17Fh, 51C534F7h, 0E2FAE7E1h, 0F62E977Ah, 123AFA9Ah dd 609E9E2Ch, 459DC3AFh, 15E7F85Bh, 727A2A60h, 94E538C4h dd 30077370h, 7439DFBEh, 0CECF0079h, 28EAA77Eh, 0E7278Fh dd 0F6F6320Eh, 406CD066h, 0EBC7C62Eh, 436010ACh, 0FB474872h dd 9702EBF2h, 312B0FDBh, 9F91827Eh, 0DD7D75F1h, 0F02DD3D8h dd 0A9DEFB4Ch, 0C09B842Ch, 58F6E656h, 558725D9h, 2A649A65h dd 33CD26AEh, 158D6F59h, 0EE514D0Eh, 0A55143E9h, 0FE18A347h dd 0C6B82E96h, 5B65A811h, 0BFE62358h, 0B1B7A8BEh, 0E309EFDBh dd 0E3C54F6Fh, 0EBCC68DFh, 0A171883Fh, 59CBBDB9h, 0BDC327EDh dd 1EF8AE4Dh, 0D8763E5Eh, 93C58AEEh, 0C69D9346h, 16A48C8Ch dd 0D6DE9569h, 2FE3387Dh, 0BED40923h, 302A1D5Ch, 0A8726BECh dd 1CD10F5Fh, 0BB7281BAh, 5FE36B4Eh, 47446C92h, 0F8298DBBh dd 0DFA4CB33h, 7291591Bh, 0E1A3E3A6h, 32EF38FDh, 0E107DAE3h dd 722AF211h, 0D41242ACh, 0C16DFD34h, 91A9E59Dh, 2A0677C7h dd 7E0BEEEh, 0F95E5927h, 0C62C5B96h, 2AAB64EBh, 0DD3889D5h dd 6E76F2CAh, 0A1B74BEEh, 90F6CBCDh, 4E53AE32h, 0F800CC97h dd 0EA7C6476h, 0D2233CD1h, 0D632A681h, 0FF743CBCh, 3214213Ch dd 4B18FB6h, 9EF7C8EDh, 2939D044h, 79C9846Dh, 854109C8h dd 30FF471Bh, 0A981F323h, 0BE86D89Dh, 35AB5F32h, 47421BBBh dd 0BC34B084h, 98076EC8h, 0A35769A8h, 0DB276614h, 0A1DD907Fh dd 3502A600h, 4F024461h, 7321254h, 0A4F3DD9Fh, 16ACD67Dh dd 911B2E97h, 0CB3FB7B1h, 8F461678h, 0BB155DCh, 27F02D45h dd 156885FEh, 32362B0h, 9C6B17BCh, 0C8F9334Ah, 0DB4397E5h dd 4B39AF77h, 2E7541A3h, 769BA29Dh, 0F5797980h, 0E9796AE1h dd 5097CD2h, 8492C9A7h, 28895871h, 0BE07EDB9h, 53020976h dd 9A245184h, 95FD3AB5h, 2569D855h, 0BC0C6281h, 0A6E688B5h dd 76FB6B12h, 9D700BC3h, 9DACFC79h, 55949A4Fh, 321E6087h dd 0DE32DE3Bh, 0D8EF7F6Ah, 5EBAE7F6h, 0A1AFA932h, 0A0F9D2B4h dd 4B845F3Eh, 11A100E6h, 3056B189h, 93E6FDE8h, 5BE64489h dd 7C821323h, 0E8837C46h dd 633DC9DAh, 0FF900B2Eh, 0A856F354h, 0E022C635h, 82079DB3h dd 0BA6BBA32h, 1C9D5FECh, 0EA3696AFh, 0EA6D3C7h, 0CDED5254h dd 0F6D6B255h, 952E3881h, 7621C42Eh, 6A0C1731h, 0C32F6E61h dd 0B8F92AEFh, 6B550277h, 589F6A8Fh, 700D1A6Eh, 0BCDA2DF5h dd 0B9C667C0h, 45D13916h, 9D925D3Dh, 7FAF1AB4h, 4C113D49h dd 638C9B36h, 0E3290BCFh, 0A32CBCE8h, 728339E2h, 797E490Fh dd 69255513h, 584D1D11h, 5CE4367Fh, 953991CCh, 8914F825h dd 55455287h, 6C2552E9h, 0D154FB78h, 4B914599h, 0ECED027Ah dd 0BBBCC2F1h, 7E9F5DD9h, 7C021C08h, 0C7CE4CBBh, 0F680B397h dd 0F14D940h, 5E046F23h, 43B1D370h, 4905CA47h, 7FE5BEC6h dd 8AAD8F5Eh, 6D4D30A7h, 0B6D42D7Dh, 0C18C8C60h, 0CC1CB461h dd 7DC167Bh, 2984726Dh, 0AC86EC45h, 2EB3AC5Ch, 9413AC6Ah dd 46621612h, 2A8DEB7Ch, 8DE0507Eh, 6DD17D67h, 697D28ADh dd 0A3C7DF35h, 0AFA0168Dh, 2E6DF674h, 85255150h, 9D9C9A09h dd 0C77BF495h, 98A533E3h, 0FD8D12A9h, 0BDE2DDECh, 534E487h dd 19D5BEB1h, 4B435B1Ah, 5B36B8B5h, 6121A14Ch, 1CDA889h dd 65BA134Dh, 0DB931110h, 543556D9h, 0A24E435Fh, 0A9E906F1h dd 17D5E19Bh, 0BB680853h, 9669CC1Dh, 0C06E9B49h, 0A9DD6DC5h dd 0A01B07E4h, 0B17809EEh, 23464AB6h, 613925Ch, 0E441911Dh dd 514C0460h, 375BFB0Ah, 0CFBFE301h, 9B3B3960h, 353CCD56h dd 758F9B7Eh, 715FDEDDh, 497D7DF9h, 3E3C6110h, 0C57F6C47h dd 91249346h, 911AD424h, 5B6C8764h, 3F3CD43Ah, 0DA025F8h dd 525ECAD4h, 2DB88457h, 6F19CF27h, 0DE5E56A0h, 419E0D35h dd 0FA5942D1h, 0C4EEFF70h, 0F38396FAh, 72982D90h, 0B8CEC9C2h dd 352E304h, 1DD78BA6h, 95BE032h, 0D615B455h, 0C71FBB6Bh dd 9C66BD35h, 610D2EFAh, 5B04EBE5h, 0A0A0902Eh, 0AE10F8F0h dd 4A4EDBF3h, 0E665044h, 223FB6A6h, 0D8809BCBh, 99D78FA0h dd 0F1A54589h, 0C0DBEB0Bh, 0E7B2832Ch, 0BF85807Ch, 0F9A86CA5h dd 1E1B6CEAh, 0D293BF6Dh, 0D0FF6B69h, 2F8025E3h, 606A31D1h dd 0C87E7E1Dh, 0B1E97EF2h, 0F59E645h, 70B70F29h, 0A323175Dh dd 0F656AF65h, 9B68969Ch, 0C6D6E4BAh, 5F89B5E3h, 274EDB6h dd 0C0895941h, 0F016C38Fh, 0B643867Dh, 0C4239247h, 58FBC4FEh dd 0B6A9D962h, 8443B557h, 0DB5F83F5h, 0AFFFD82Ah, 88E65024h dd 8D2C7335h, 1F73D471h, 5AAC80D3h, 0ED4CB7C3h, 0EAC51DE9h dd 988C0CBFh, 0D8563E10h, 0C5175104h, 53C8F09Eh, 0C236C48h dd 0E975B4CDh, 77B7E057h, 0AA460876h, 0FF29F1E1h, 614C5A14h dd 7127BDBFh, 0A9647C3Fh, 0FF57E313h, 62FD184Bh, 0B0CEAEA4h dd 0E75CD82Ch, 5BC9F895h, 0D1C1B200h, 1A5FE124h, 39AF92D9h dd 0BFC38C25h, 25BE5A3Bh, 0F596D43Ah, 0AC0E01EAh, 35D833DFh dd 0BF3DE34Fh, 74913FD2h, 58DCDAEFh, 0F600E910h, 0FD7202D2h dd 0A418A291h, 0A9A53DEFh, 9E666F4h, 0BC7555D3h, 849CA4CCh dd 48E898E4h, 20100C8h, 0CF172F03h, 0FC3933Fh, 0E3E1A16h dd 0E65E3A4Eh, 6FFE920Eh, 4777F5ACh, 0EF179357h, 0BE8D85E7h dd 4D4C488h, 3939ED58h, 7CE86561h, 4109A59Ch, 0B9896D41h dd 34564151h, 0AE9115D5h, 6CACCF03h, 3C6D848Bh, 60E8128Eh dd 6577F2FBh, 489431BDh, 251E5F14h, 0D50838B5h, 331BE81Ah dd 98FA7D72h, 2773B7BAh, 0E78568CDh, 0C7681B6h, 28554DD5h dd 3A98F519h, 7734FBB6h, 0CD384581h, 288193F0h, 0F5E968F2h dd 0D863AED1h, 3B2C8DB5h, 35237D77h, 449E6FDAh, 735BD5EAh dd 48624219h, 1B55DEBh, 12F17971h, 5A785B88h, 960FF68Ah dd 53B8E7BDh, 963220EDh, 0AA0E4883h, 0F7D49CCDh, 8CE4A506h dd 147EDED5h, 0A62A0AF6h, 10BC07C9h, 0F3AB02AEh, 0C2CC835Eh dd 4AB81D3Dh, 8360AC17h, 7B208776h, 3826D58Fh, 7679DE07h dd 15E6D611h, 0B88361CFh, 0BEB899D3h, 0CA4645BEh, 9DFFB997h dd 67108817h, 1A754116h, 77277FD7h, 0E32A611Ah, 8A8E82F3h dd 738C059Eh, 23AA9186h, 0FFF6224Eh, 6580F589h, 0DAF42D80h dd 0C29BBD63h, 6888407Dh, 0AEA56C8Fh, 5B05BEBh, 0BE26F108h dd 1E3B0221h, 62713C1Ah, 9B3DA8CBh, 67922BB9h, 1FD0AE2h dd 37E2F178h, 0C433C7B4h, 1512CEC4h, 2AE2C761h, 668B622Dh dd 0A5201B03h, 0CDE88F95h, 0B4E7A1BAh, 602F0D1Ah, 399B3829h dd 0F7EF015Dh, 391735Eh, 1FDE1D49h, 2C382964h, 207E545Ch dd 6126A62Eh, 7758C0CBh, 2A061CE9h, 0AF620A6Eh, 547E0806h dd 1940CCADh, 22DDEC63h, 39FE182h, 0B99A9711h, 40628ECEh dd 0D0B8BB48h, 47E78CECh, 75119292h, 5AE6D864h, 9C9EDAF9h dd 0DB53854Ch, 0B28687CDh, 0A159249h, 45EC7F81h, 8E99270h dd 47884E96h, 0CC3B26A4h, 0CBC48683h, 5CED2D0Eh, 6979D317h dd 30B385C2h, 0E6CC3744h, 0A31B8BDDh, 611486DBh, 0A5D1ADBBh dd 790C02EBh, 0B2B39099h, 4279C1A4h, 1AECF555h, 4FA96D22h dd 0BF4F6858h, 34759FC1h, 0CF94B732h, 633BE728h, 0E1FCF27h dd 0C1912509h, 9D0A24FFh, 608DF6DBh, 0E5ACE904h, 1B0633DFh dd 0E5CD06F6h, 2D8F62EAh, 6E03EEDAh, 4F03889Eh, 46021FEAh dd 5A4421DEh, 0DD0C3D2h, 0E71DCBA7h, 0E93E0BCBh, 32134787h dd 0C2C62ED4h, 5BB348C5h, 3197AA0Dh, 0FA9C534Fh, 0B978CE0Ch dd 0E3D098F8h, 2C69BB87h, 724AFACBh, 0D6F60013h, 0F1613E06h dd 26151988h, 6A3F8C82h, 6040F41Fh, 8938D503h, 9E5D4DC3h dd 57F20B92h, 2502F801h, 0C8C6ADE2h, 654507CDh, 6C9E2071h dd 0B6E1BCB0h, 696D75F4h, 33C99859h, 66E4A2EAh, 0B9A72E74h dd 0D7B16D51h, 0BE3775BBh, 392442B7h, 0FDD8CCC6h, 180A08D5h dd 0FA789A99h, 29CD5792h, 0F8B12397h, 613DE6F6h, 27BB867h dd 6FD2CECBh, 0C9175BC8h, 284E8DF4h, 5AB4708h, 0D413EFE1h dd 1480A53Dh, 0C778BD1Dh, 0A6CAC938h, 668C127Eh, 78BEEE8Eh dd 0C4DAAE98h, 2C550462h, 0FC88D999h, 6FB533B2h, 32C50D8h dd 0A7A3107h, 0BFB3170Eh, 9BD3EF67h, 4B7B5FBBh, 0AF1BFFDAh dd 67BB57C7h, 3B290E41h, 0B74BBF4Bh, 0A2BEEA00h, 11A893F5h dd 2766F09h, 0A09E4A3Eh, 0F8C2FFD7h, 0EED87D06h, 0BE41B0BAh dd 0B84387CEh, 260F902Dh, 6B235C12h, 0CE6D54FAh, 0AAA2B8ADh dd 0B8752322h, 9968D842h, 6B7392Dh, 0C2A80DE3h, 0C1415FB8h dd 75711CBDh, 0BD3EDCA2h, 0E727A221h, 0E233BBE2h, 0A6FFA8EDh dd 0F129FA5h, 17E5E998h, 5EDB972Ah, 0B66CB4B3h, 8AE7D0B8h dd 1BEB0AB1h, 6E2E4A8Bh, 0DBABD401h, 7D437A3Bh, 21B3CB7h dd 2B488DE3h, 0FC1A3B8Fh, 5E9F43E7h, 73C20AD8h, 9FD42AC9h dd 0DFF1E600h, 0D4C3F8CFh, 5FF9F5A2h, 0A8C99D92h, 18C57F6Fh dd 539EDD52h, 0AAC01973h, 5694D5F5h, 95C9F419h, 442E8D56h dd 0AD06EA93h, 0C916A971h, 6DBF0EAEh, 84EF10C2h, 0F630C197h dd 7FAE6455h, 11FF6245h, 8EBED706h, 5D9EF63Ch, 0C5DEAA3Ah dd 1F89BE1Bh, 6CAE76C3h, 0D4E51418h, 8C902258h, 0ED2255ABh dd 0D9A30000h, 552B7283h, 0F2204858h, 0C51BE9ECh, 73C4E021h dd 0F19743B8h, 0CB7EE8DEh, 31024423h, 0EE2ECF0h, 0A36EECE5h dd 5D3D1332h, 8AD7744Dh, 35744149h, 6CBCF6B5h, 5E1B89E4h dd 30E79DEh, 40B87432h, 8A7639BFh, 0BFBA0AB6h, 4B33A747h dd 29EADFFAh, 263D6C4Ah, 0E1D2DAD5h, 947CE8ABh, 24F5FC15h dd 0D7BEBF32h, 0A91DA6A4h, 7FAAE2A2h, 8DF6F2C8h, 0EFF5F970h dd 6D23C14Ch, 0D42E0137h dd 842D7548h, 53FB5316h, 18856363h, 599F6ECEh, 0EC08867h dd 88DB4159h, 0AF205E6Fh, 2B44B1AEh, 3938A7B0h, 6EBA3B3Ah dd 0B2405062h, 73D65F34h, 0A4F38D69h, 70C8009Bh, 0E47917EDh dd 223DB8D4h, 6F15936h, 873AB56Ch, 2F81F9F8h, 0D7D1DA09h dd 0CCC558FAh, 60F16BC5h, 0E3BEC18h, 8E1085FFh, 7970DB22h dd 86AC7B7Ah, 4C6424C8h, 0BB3380EFh, 1B79E85Ah, 0C79722B7h dd 0B5EE074Ah, 0A99E6315h, 9C1B9028h, 0F44CD035h, 6DA9149Bh dd 1A2FEF23h, 0D8EAA34Ah, 0B5EB8AC4h, 73A747AEh, 0F0447E7Fh dd 0D136A6F6h, 3D31A6E6h, 13DDB549h, 4FC48A73h, 4E4A2283h dd 63C6F6DAh, 9265A94Bh, 0C16B73A5h, 0BDFD05E5h, 0C857428Ah dd 74FA4A05h, 0F36DD456h, 0EC85827Ch, 0E69EBD8Ah, 0FA9FF050h dd 5FB8750Bh, 0AA1677ECh, 141BC529h, 1C04F0Dh, 0EF7CC04Fh dd 53A20497h, 25BA66FDh, 0C3BFCA3Ch, 0C3A959C0h, 7ED7A947h dd 739BFAFAh, 0D8258EE0h, 6EA9B077h, 0C6384C20h, 8F4F8BEBh dd 0C76EF989h, 0B927224Ah, 8E3510A7h, 0D4AE4036h, 536AD306h dd 28CB3DB5h, 32BC2B5Fh, 0C598E9Ch, 2A206DC1h, 0A74A89FAh dd 0B4C32C4Ah, 0A1BE213Ch, 1296F045h, 0DE2762F7h, 0A4211252h dd 25B46FFDh, 0EBE81D7h, 0F5522CFAh, 73D621B6h, 9B094D3Ch dd 0AB24A3DBh, 41A33D07h, 7167ED28h, 0FD77EC12h, 81A90460h dd 0E239A2FFh, 2DC1BEB8h, 464F944h, 92EA4FABh, 0F840A93Dh dd 2EBE0B97h, 4F6CC3B5h, 0E0D745AAh, 88EF57Bh, 970A6F91h dd 0DF97B653h, 0EE255BE0h, 80CB71B8h, 0B2E12F5Ah, 15B9CD1Ch dd 0CF17BCC0h, 0BAB912B6h, 7221C532h, 0B424A81Ch, 0E9B2410Eh dd 41406F82h, 0E162ED6Bh, 76DEAE7Eh, 7E3BC9F6h, 4BC6A98Fh dd 9A8914E5h, 0DBFD954Bh, 169CE24Ah, 467F2CEDh, 2831D795h dd 1D149C4Ch, 7B4CCC29h, 7321EE23h, 0C7463B44h, 86B7A6E0h dd 0BA6A1AD2h, 0F2918C95h, 19F8F70Ch, 0C1623D95h, 0E293E5CAh dd 0E58E03FAh, 196B8100h, 0FFC61F1Bh, 6CFDF8F9h, 0D696B228h dd 0A1096850h, 0C1DFFB6h, 712BB325h, 2321D8FBh, 0C35ABF5Eh dd 0A4394825h, 4FB29E1Fh, 0EC00FD12h, 3D33D617h, 47CF413Ch dd 0E67E033Dh, 279D6D4Ch, 0A82E7743h, 6582BD2h, 0B7A92FC7h dd 1D13C0C8h, 0B2029290h, 81EBDAEDh, 0C88868FCh, 0D927612h dd 2B285FC0h, 0A2CA421h, 8ED39E1Bh, 272CA541h, 12291248h dd 2C3D995Dh, 5B263D0Eh, 627E8E78h, 83882564h, 2578B43Fh dd 0BC19AEB5h, 0A88C66BFh, 0BAEB9911h, 1550947Bh, 4313584Bh dd 9F2865F2h, 0E90AAA2h, 0D2BB86CCh, 36FE4EFCh, 0E7E45FC6h dd 17A327A4h, 6A76ABF0h, 0ADBC7CC4h, 2CB196DFh, 2B42F159h dd 3F2B8BAEh, 0CCF739FBh, 656278A3h, 0D88059BDh, 66EB6613h dd 64D3DE8Eh, 0B28DCC1Ch, 0DC1019D2h, 72AAE4DFh, 8705C601h dd 0BE65ACFAh, 0B62F785Dh, 9DB5FB24h, 2C0AB2D6h, 819206A6h dd 0BD7045CBh, 3691248Dh, 0F8ED273Bh, 1EB024ECh, 8443212Fh dd 0E8160001h, 0D43BD60Dh, 33F21503h, 991E4464h, 0B519B9C9h dd 188CBDB8h, 5E199225h, 8B9A644Dh, 1A03FFB6h, 0BFBE09F0h dd 0D49D17C8h, 9A54EEEAh, 0C4B6BDA6h, 0A87883C1h, 84A32F93h dd 440C0906h, 0E08045C1h, 0E14D78DEh, 2A9D1C6Ah, 67E279C4h dd 0FC8CFDAEh, 8669B430h, 4B7C1956h, 64C110E2h, 0B993E28Ch dd 891DE6CCh, 0B458B7B6h, 443ACF9Dh, 0BBEDBFA5h, 0E1B33ED4h dd 2EE476Fh, 0D60D37A9h, 6E0D2827h, 75ACD53h, 0EE880BECh dd 35E4B602h, 6AEA0778h, 7AFBD34Dh, 12FE2397h, 8B827BDAh dd 90F897C4h, 50BC47B2h, 112BA98Ch, 0C75D2AB7h, 0CF9941ADh dd 0F36CAB82h, 48ACE123h, 1CEEEEEBh, 680A0EA7h, 670F03F9h dd 0D6BABFACh, 0B7CD5C54h, 0A7C6E58Ch, 1786B16Eh, 0F3389362h dd 84A73F49h, 130F0DE2h, 1D7F7D14h, 70B3E3E1h, 0C56ABCF5h dd 0F5C16AA6h, 0A1D817A5h, 2D8D3E7Fh, 211C0C1Ch, 640689B2h dd 524EFB35h, 0A4ECF758h, 20A9AF22h, 86F02FDh, 0E22FF6Dh dd 7E951D8h, 0E2055024h, 0D66E1AA1h, 4CD4D7AAh, 0C7F1A351h dd 25506409h, 389CB0D3h, 4DA66418h, 73D386F5h, 9CB08758h dd 5FC813ECh, 0C238413Ch, 0F5DDD7C6h, 0E1CE10D5h, 4492952Ch dd 72A1EDEDh, 0CD7A84D7h, 56BA77A6h, 20B0B4B6h, 6541BDEAh dd 37B7D30Bh, 705C2D58h, 7003FB8Eh, 5514C44Ch, 922B855Ch dd 0C4B273FFh, 1701DAF1h, 35365760h, 1C07DDDDh, 55184A6Ah dd 7E958F63h, 3097C71Fh, 0C3312DCEh, 0D4CB4A65h, 0B37D7E06h dd 0FFF9F5F3h, 0AC6F0EEFh, 0DFB45348h, 9911E155h, 2C685619h dd 57A9B352h, 0A9347D55h, 1AF8E717h, 0CC9E50Ah, 6AB5D23Ah dd 7F16316Dh, 392CB2E9h, 0A9F5F1F1h, 0B9FBE556h, 2B93A16Ah dd 1BA5E677h, 98A05C64h, 7AB06469h, 4C17C7ACh, 0E457BB3Bh dd 0B27DD825h, 0B8A39C5Ch, 2EFB005Ah, 0AB676F2Fh, 52811757h dd 685472ACh, 6E72682Ah, 0D6A7C60h, 1A123030h, 1976BD22h dd 0C1918F1h, 69FCD5A5h, 7ECA12A0h, 765A21ADh, 80F5941Ah dd 9546DF6h, 701B4B25h, 0BA38433Ch, 102289D9h, 447BD4C2h dd 4EC7084Dh, 7E29CE52h, 0B4ADA0C5h, 99F56EB6h, 9D89747Fh dd 158D5DD5h, 0F0F1786Bh, 0A7CDB6F5h, 0BD41461Fh, 0D42FBE0Ch dd 1D529242h, 0C25D5478h, 9D6BD1A1h, 0D5BE3CD3h, 801F8C35h dd 1DC99A56h, 9A140555h, 67853556h, 5BFB1348h, 144B0797h dd 6B7309Ch, 18D47464h, 855C9B04h, 98911141h, 8E85769Ah dd 46094990h, 0B1C9DDA8h, 2C8CFC7Eh, 6D6C6B13h, 0B0CB9F00h dd 55443125h, 9D59E6D8h, 0C553F65Dh, 0ED15E1E0h, 2DDB722h dd 0F40202FDh, 66D56B2Bh, 0D8CCAA42h, 9EA7D45Ch, 0A1A1BFF0h dd 1FEFDE3h, 0F5C5A9B9h, 0CFEDAF58h, 5726DDE3h, 0D9216EA8h dd 0A9886892h, 28929DD9h, 0EC1EE03Fh, 0D5C9A431h, 2AD2A8D7h dd 0D9D0B37Ah, 0FA605E89h, 0D76AB352h, 3DA81372h, 38B56019h dd 68AC3025h, 3AA8F8D8h, 6A2D2ABAh, 2BA2E698h, 91FD5612h dd 63841B6h, 10E89D64h, 0EBA80655h, 637FE08Fh, 64DB2E0Fh dd 27197269h, 8015B1E1h, 72F061B9h, 0DE9FF111h, 10EFD00Ch dd 35D3710Ah, 0FE1B48B6h, 7ECB2144h, 43268EE7h, 11CA152Ch dd 0EB0F30AFh, 67B32899h, 0A8049DE8h, 2A453823h, 0C5121E90h dd 46D05E0Bh, 0CD46AB07h, 0BFCC594Ch, 0C22C1B52h, 38DA250Ah dd 0A4E78733h, 0B8115200h, 0EBA659B4h, 117D41E8h, 6FFA44BDh dd 4B30D296h, 8FAE3310h, 2F94F17Bh, 2D501F98h, 66BBCD06h dd 4EE0FC5Dh, 1A4CB502h, 632161CAh, 50E6EA00h, 63EE0C2Bh dd 0BDE24FDDh, 85FD3615h, 1140CE0Eh, 0B2771397h, 0CD0FF2F7h dd 51F90D59h, 12CE69D2h, 7604A4C0h, 0BBEF12Dh, 0CEA39286h dd 4CF791A7h, 163BB1F1h, 54DFB024h, 0BB74AFB3h, 4F30D581h dd 48DEE8B7h, 1D35A42Fh, 52E9AFE4h, 4CC786ECh, 11508B5Fh dd 0B1671D08h, 0D2913AF7h, 0D7DA86C9h, 188ADD44h, 847E39C8h dd 5A514BABh, 298D19EEh, 511A5558h, 0DC3FA504h, 3EA4F953h dd 0C441A817h, 0AF8456E3h, 0A9F6BA21h, 0B40A1942h, 0B0764843h dd 27E8DAF1h, 0D5864871h, 0AA4E2770h, 908B0A3Dh, 9C9F9A4h dd 0E798D3D6h, 0BF827224h, 8C7EF1B8h, 89B076BEh, 545616C5h dd 83B24050h, 53E06BD3h, 669265BDh, 2284BF46h, 3E11CE8Ch dd 0FE01498Fh, 84D61341h, 2A85E879h, 0B64EECA3h, 4D6E1E5Ch dd 1785EE0Dh, 68085CA5h, 454DC6E3h, 7892CE3Ah, 0DDC09F09h dd 0C210FA55h, 0F2D6FE9Fh dd 0E1B25292h, 4F9CDB1Eh, 0A251A670h, 40C22DBBh, 0F61D90FAh dd 6F76F6Dh, 1B4880D4h, 40A9E6CAh, 0BE2E65F0h, 0A43C67D2h dd 5B63FAFh, 0A55ED7CAh, 0A042081Dh, 0E592B6BCh, 0E0A3630Eh dd 0EED3F503h, 0AF993592h, 81151B9Ah, 0F9A445Dh, 1930614Bh dd 59AFC221h, 0F3400D7h, 4944A5ACh, 4CDFADCAh, 0CE2E980Bh dd 765E738Ch, 0FE3D1D6Ch, 8C974261h, 0B29FF272h, 0BC8B9921h dd 0C26ED1Fh, 3FC89112h, 335103DBh, 123C8D94h, 0D5A56240h dd 16758DECh, 0AE1793FAh, 70DC3D70h, 6167AF92h, 2DDC5C34h dd 588ADDC7h, 0E3BDF310h, 0CE94A48h, 106400E6h, 0AA2F51E7h dd 97509551h, 0F905F402h, 6CD92D46h, 8F015A01h, 0E7707C64h dd 0F556A7E5h, 0A9026C6Dh, 350B339h, 0FFB86670h, 0CB234AF5h dd 5AB7BD52h, 0F5A2BD21h, 8C3C99D9h, 92E16EBAh, 0F0C94B00h dd 0AF5CAAB5h, 0A33A52FDh, 16EE053h, 2DF648A9h, 4A860174h dd 8E7DEE58h, 96466BC4h, 4F5B8786h, 73868697h, 68EF8703h dd 6CCD221Bh, 3E46FB2Fh, 0B0171603h, 7CD52235h, 0D557B40Ah dd 74CF504Ah, 1551BBC5h, 979D2303h, 861AC77Bh, 0DF2DBC4Bh dd 0FBEE67E9h, 158EFDC1h, 88107C9Dh, 0DCE1EC5Ch, 5AC4DE65h dd 0C70A046Ah, 9BE4EB93h, 7C364501h, 0AF3BA8DFh, 259CF45Ch dd 0ACADA5C1h, 96CC1005h, 0DF01004Eh, 0F9CE8170h, 9DC82E9Ch dd 5AA26C85h, 5DA68197h, 0DD6E44F9h, 2CDAB645h, 2038883Eh dd 105523E7h, 0A43E7F70h, 0EF5FA40h, 77F29E26h, 0EC5EBACBh dd 0A66D1671h, 0FB4587F5h, 0C12A2459h, 86983430h, 374A817Bh dd 43F562E3h, 7B8B3D49h, 7E8B950Eh, 0C82C1169h, 515F4B51h dd 0A1572360h, 0CDF48ECBh, 1A061E62h, 39781A5Eh, 0F1B508B9h dd 6054DFB0h, 7A87C417h, 4F28CDD6h, 0CE0510A8h, 5DC4BE38h dd 5B63B8A5h, 2BBEEC2Bh, 7D496416h, 0E07E3DA5h, 71E69A31h dd 677EEDh, 66DF246Fh, 0C36BCDDDh, 833CF7F5h, 9B69430Ch dd 0AF1FEF72h, 0D334F858h, 96C7E13Ah, 0F9E7E4Eh, 779EFAA3h dd 5739968Dh, 24D03619h, 22443009h, 41C0F371h, 1F0F8E9Bh dd 343E2C19h, 71FF9E0Ch, 0CEB0D460h, 72C355A0h, 9F3A294Eh dd 5FC069CFh, 0A26CFCB4h, 920ED055h, 278658F3h, 9794A628h dd 0CE26EA9Ah, 411C10C0h, 361C4B4Fh, 3EAB1477h, 0A1D65BA9h dd 672C8C58h, 95760C42h, 62109B47h, 0C834A747h, 0DB91F0E6h dd 1EB85E2Eh, 0EDC24CB2h, 0B38C09A2h, 6BC8BCA5h, 31108FD7h dd 4F3AC3A5h, 7097621Eh, 2AAC877Ch, 34B4A187h, 1E0EEF7h dd 32F9B090h, 19F2D356h, 35262D06h, 0D3B6B836h, 0F542E5CFh dd 105ABD6Dh, 0D70C711h, 5A1F4156h, 0EC68D114h, 50747EB1h dd 0E6FE5E6Eh, 0A0F54C12h, 752CADD1h, 0BDB32051h, 9F1081A6h dd 6A95FED4h, 1F409302h, 9AC586FEh, 6C0B1168h, 0BF140749h dd 1F926DB2h, 0E464C0F3h, 4F5F4F6h, 4C1C503Fh, 2A3DE547h dd 0FE6D6958h, 0B21D86AAh, 0E9ECD2A4h, 0A1F1DCA4h, 0F6028804h dd 5757E732h, 0E11CCD57h, 0DF2FDFDh, 131F1906h, 97D2430Dh dd 0D2D684BBh, 0BE0F2D39h, 0D3D222CBh, 0D0C7894Bh, 0BB478AD2h dd 6E22228Fh, 7121999Eh, 0B0E7DD4Fh, 2BFEE713h, 0AA8E8047h dd 4EB1AF4Eh, 0B482EC3Dh, 68F090A2h, 91E9B1AEh, 10EA7531h dd 7C42D6F8h, 6578548Dh, 5173749Eh, 6CE1E82h, 8AC2FAC0h dd 0BABAA48Bh, 217142BAh, 0EDC9C9C9h, 0EC12EDEDh, 2 dup(0ECECECECh) dd 6A0AF28Ch, 0D4509D28h, 28279828h, 827DAE81h, 97E77797h dd 0D727B707h, 2521675Dh, 5F827B32h, 7850D32Ah, 0E009E907h dd 84A2AFD9h, 0F5F5F5F5h, 41A42DF4h, 9775C6C6h, 5EAF729Bh dd 8FFA21A0h, 57DA2B80h, 0AE60679h, 0B5ADD8E3h, 5AACAF04h dd 0DD02EF99h, 494FB53Dh, 0F1EE1813h, 0BB7CF579h, 936A9F42h dd 29C73810h, 8C19A049h, 26A37667h, 0FB4444CFh, 2DF41515h dd 0DE2BC0h, 28598001h, 17A52D5h, 0DBFE0FEBh, 6DB425CAh dd 6186EBE2h, 7399E2FAh, 439677h, 0C8C4902h, 7D8E6C91h dd 0D3FC7F7Eh, 5A7559D2h, 56D8DA27h, 732D2F99h, 45FCFBh dd 8417F0E7h, 0D7B7B6B5h, 25E7605Ch, 0BE3124ADh, 0E7088307h dd 62838CF3h, 9750DAABh, 4A3B9998h, 7A82FABBh, 3F07A7Ah dd 5A967E4Ch, 91EDD4A3h, 0B4A4D1AEh, 0B40C4B3h, 36DCD1B7h dd 5F4F0FCEh, 2A8021D9h, 1CDDA14Ah, 1D9087EEh, 0AE64EDE6h dd 2884E9ACh, 0A4A40454h, 0FF3F282Fh, 1C33368Bh, 87B72BA6h dd 575797E7h, 181BAB56h, 7A12EDD9h, 7E7E7E0Eh, 0E39A99EBh dd 0FBC733E3h, 0F9FC758Ah, 95CCA30Ah, 3E092E49h, 0FD54FA88h dd 52026A02h, 5B9B9292h, 5C5FC82Fh, 47AC26E1h, 90F8904Fh dd 690808E8h, 0E0DF7580h, 1D1D1DE1h, 3Ch dup(1D1D1D1Dh) dd 80h dup(0) UPX1 ends ; Section 3. (virtual address 00008000) ; Virtual size : 00004000 ( 16384.) ; Section size in file : 00004000 ( 16384.) ; Offset to raw data for section: 00008000 ; Flags E00000E0: Text Data Bss Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX2 segment para public 'CODE' use32 assume cs:UPX2 ;org 31428000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 3 dup(0) dd 80C4h, 808Ch, 3 dup(0) dd 80D1h, 809Ch, 3 dup(0) dd 80DEh, 80A4h, 3 dup(0) dd 80E9h, 80ACh, 3 dup(0) dd 80F4h, 80B4h, 3 dup(0) dd 8100h, 80BCh, 5 dup(0) dd 77E805D8h, 77E7A5FDh, 77E75CB5h, 0 dd 77DD189Ah, 0 dd 77C3528Dh, 0 dd 77D4C96Ah, 0 dd 7620AFB6h, 0 dd 71AB1A6Dh, 0 dd 4E52454Bh, 32334C45h, 4C4C442Eh, 56444100h, 33495041h dd 6C642E32h, 534D006Ch, 54524356h, 6C6C642Eh, 45535500h dd 2E323352h, 6C6C64h, 494E4957h, 2E54454Eh, 6C6C64h, 5F325357h dd 642E3233h, 6C6Ch, 64616F4Ch, 7262694Ch, 41797261h, 65470000h dd 6F725074h, 64644163h, 73736572h, 78450000h, 72507469h dd 7365636Fh, 73h, 43676552h, 65736F6Ch, 79654Bh, 61720000h dd 646Eh, 72707377h, 66746E69h, 41h, 65746E49h, 74656E72h dd 6E65704Fh, 41h, 26h dup(0) dword_31428200 dd 0C3906893h, 0C48BED01h, 0E85BD0FFh, 5Fh, 824648Bh, 4EBB8h ; DATA XREF: start+7Fo dd 64FAEB00h, 18A167h, 0F30408Bh, 830240B6h, 427500F8h dd 0E8h, 0ED815D00h, 402338h, 2385858Bh, 85030040h, 40238Dh dd 858BF08Bh, 402389h, 238D8503h, 60500040h, 0C933FE8Bh dd 2395958Ah, 32AC0040h, 0AAD002C2h, 918D3B41h, 7C004023h dd 2BC361F1h, 30FF64C0h, 0B8208964h, 12345678h, 60000387h dd 7BB00000h, 0 dd 1E003142h db 2 dup(0), 48h ; =============== S U B R O U T I N E ======================================= public start start proc near ; FUNCTION CHUNK AT 314282F9 SIZE 0000001C BYTES call near ptr loc_314282E2+1 jnb short loc_314282FE db 65h insb insb xor esi, [edx] db 2Eh, 64h insb insb add [ebx+68h], dl db 65h insb insb inc ebp js short near ptr loc_3142830C+1 arpl [ebp+74h], si db 65h inc ecx add [ebx+3Ah], al pop esp push edi dec ecx dec esi inc esp dec edi push edi push ebx pop esp push ebx jns short near ptr byte_3142832F jz short near ptr byte_31428323 insd xor esi, [edx] pop esp db 36h, 36h dec esi imul edx, [ebp+70h], 55h jnb short loc_314282F9 db 65h js short near ptr byte_31428333 add [eax+49h], cl dec edx dec ebx dec esp dec ebp dec esi dec edi push eax push ecx push edx push ebx push esp push ebp push esi push edi pop eax pop ecx pop edx loc_314282E2: ; CODE XREF: startp add [edx+52h], bl start endp ; sp-analysis failed push edx mov ebx, 77E5D961h call ebx pop ebx push ebx add ebx, 0Ch push ebx push eax mov ecx, 77E5B332h ; START OF FUNCTION CHUNK FOR start loc_314282F9: ; CODE XREF: start+3Aj call ecx pop edx push 1 loc_314282FE: ; CODE XREF: start+5j push 0 push 0 mov ecx, edx add ecx, 1Ah push ecx push 0 push 0 loc_3142830C: ; CODE XREF: start+17j call eax mov eax, offset dword_31428200 jmp eax ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- align 4 dd 2 dup(0) db 3 dup(0) byte_31428323 db 0 ; CODE XREF: start+2Dj dd 2 dup(0) db 3 dup(0) byte_3142832F db 0 ; CODE XREF: start+2Bj db 3 dup(0) byte_31428333 db 0 ; CODE XREF: start+3Cj dd 7D6h dup(0) dd 210000h, 75Ch dup(0) UPX2 ends ; Section 4. (virtual address 0000C000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00000200 ( 512.) ; Offset to raw data for section: 0000C000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _idata2 segment para public 'DATA' use32 assume cs:_idata2 ;org 3142C000h dd 80h dup(0) align 1000h _idata2 ends end start