========== LBA[000016, 0x00010]: Volume Descriptor ========== Volume Descriptor Type: 1 Standard Identifier: CD001 Volume Descriptor Version: 1 System Identifier: Volume Identifier: KAZOKU_G Volume Space Size: 29978 Volume Set Size: 1 Volume Sequence Number: 1 Logical Block Size: 2048 Path Table Size: 26 Location of Occurrence of Path Table: 21 Location of Optional Occurrence of Path Table: 0 Length of Directory Record: 34 Extended Attribute Record Length: 0 Location of Extent: 19 Data Length: 2048 Recording Date and Time: 2001-10-16 10:40:00 +09:00 File Flags: 2 (Visible, Directory, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 1 File Identifier: Volume Set Identifier: Publisher Identifier: Data Preparer Identifier: Application Identifier: Copyright File Identifier: Abstract File Identifier: Bibliographic File Identifier: Volume Creation Date and Time: 2001-10-16 10:40:00.00 +09:00 Volume Modification Date and Time: 2001-10-16 10:40:00.00 +09:00 Volume Expiration Date and Time: 0000-00-00 00:00:00.00 +00:00 Volume Effective Date and Time: 0000-00-00 00:00:00.00 +00:00 File Structure Version: 1 Application Use: 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 ========== LBA[000017, 0x00011]: Volume Descriptor ========== Volume Descriptor Type: 2 Standard Identifier: CD001 Volume Descriptor Version: 1 System Identifier: Volume Identifier: kazoku_g Volume Space Size: 29978 Escape Sequences: %/E Volume Set Size: 1 Volume Sequence Number: 1 Logical Block Size: 2048 Path Table Size: 32 Location of Occurrence of Path Table: 25 Location of Optional Occurrence of Path Table: 0 Length of Directory Record: 34 Extended Attribute Record Length: 0 Location of Extent: 23 Data Length: 2048 Recording Date and Time: 2001-10-16 10:40:00 +09:00 File Flags: 2 (Visible, Directory, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 1 File Identifier: Volume Set Identifier: Publisher Identifier: Data Preparer Identifier: Application Identifier: Copyright File Identifier: Abstract File Identifier: Bibliographic File Identifier: Volume Creation Date and Time: 2001-10-16 10:40:00.00 +09:00 Volume Modification Date and Time: 2001-10-16 10:40:00.00 +09:00 Volume Expiration Date and Time: 0000-00-00 00:00:00.00 +00:00 Volume Effective Date and Time: 0000-00-00 00:00:00.00 +00:00 File Structure Version: 1 Application Use: 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 ========== LBA[000018, 0x00012]: Volume Descriptor ========== Volume Descriptor Type: 255 Standard Identifier: CD001 Volume Descriptor Version: 1 ========== LBA[000021, 0x00015]: Path Table Record ========== Length of Directory Identifier: 1 Length of Extended Attribute Record: 0 Position of Extent: 19 Number of Upper Directory: 1 Directory Identifier: Length of Directory Identifier: 7 Length of Extended Attribute Record: 0 Position of Extent: 20 Number of Upper Directory: 1 Directory Identifier: PROTECT Directory Num: 2 ========== LBA[000019, 0x00013]: Directory Record ========== Length of Directory Record: 34 Extended Attribute Record Length: 0 Location of Extent: 19 Data Length: 2048 Recording Date and Time: 1900-00-00 00:00:00 +09:00 File Flags: 2 (Visible, Directory, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 1 File Identifier: Length of Directory Record: 34 Extended Attribute Record Length: 0 Location of Extent: 19 Data Length: 2048 Recording Date and Time: 1900-00-00 00:00:00 +09:00 File Flags: 2 (Visible, Directory, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 1 File Identifier:  Length of Directory Record: 46 Extended Attribute Record Length: 0 Location of Extent: 28316 Data Length: 124 Recording Date and Time: 2001-10-01 23:48:10 +09:00 File Flags: 0 (Visible, File, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 13 File Identifier: AUTORUN.INF;1 Length of Directory Record: 48 Extended Attribute Record Length: 0 Location of Extent: 28317 Data Length: 41984 Recording Date and Time: 1998-07-30 03:00:06 +09:00 File Flags: 0 (Visible, File, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 14 File Identifier: CFGMGR32.DLL;1 Length of Directory Record: 46 Extended Attribute Record Length: 0 Location of Extent: 4123 Data Length: 7079676 Recording Date and Time: 1999-11-27 23:41:26 +09:00 File Flags: 0 (Visible, File, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 13 File Identifier: DIRECTX.CAB;1 Length of Directory Record: 46 Extended Attribute Record Length: 0 Location of Extent: 28338 Data Length: 7608 Recording Date and Time: 1999-11-16 18:47:34 +09:00 File Flags: 0 (Visible, File, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 13 File Identifier: DIRECTX.INF;1 Length of Directory Record: 46 Extended Attribute Record Length: 0 Location of Extent: 28342 Data Length: 1574092 Recording Date and Time: 2001-06-21 14:53:36 +09:00 File Flags: 0 (Visible, File, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 12 File Identifier: DOLOGO.AVI;1 Length of Directory Record: 46 Extended Attribute Record Length: 0 Location of Extent: 29111 Data Length: 40208 Recording Date and Time: 1999-09-09 01:51:16 +09:00 File Flags: 0 (Visible, File, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 12 File Identifier: DSETUP.DLL;1 Length of Directory Record: 48 Extended Attribute Record Length: 0 Location of Extent: 29131 Data Length: 196368 Recording Date and Time: 1999-11-27 22:47:22 +09:00 File Flags: 0 (Visible, File, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 14 File Identifier: DSETUP32.DLL;1 Length of Directory Record: 46 Extended Attribute Record Length: 0 Location of Extent: 29227 Data Length: 322320 Recording Date and Time: 1999-09-09 01:56:36 +09:00 File Flags: 0 (Visible, File, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 13 File Identifier: DXSETUP.EXE;1 Length of Directory Record: 44 Extended Attribute Record Length: 0 Location of Extent: 29385 Data Length: 110592 Recording Date and Time: 2001-06-26 11:04:16 +09:00 File Flags: 0 (Visible, File, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 10 File Identifier: EDP2.DLL;1 Length of Directory Record: 46 Extended Attribute Record Length: 0 Location of Extent: 29439 Data Length: 92 Recording Date and Time: 2001-09-26 23:21:48 +09:00 File Flags: 0 (Visible, File, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 12 File Identifier: KAZOKU.SUF;1 Length of Directory Record: 46 Extended Attribute Record Length: 0 Location of Extent: 29440 Data Length: 442368 Recording Date and Time: 2001-10-04 14:02:52 +09:00 File Flags: 0 (Visible, File, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 13 File Identifier: KAZOKUT.EXE;1 Length of Directory Record: 40 Extended Attribute Record Length: 0 Location of Extent: 20 Data Length: 2048 Recording Date and Time: 2001-10-16 10:24:32 +09:00 File Flags: 3 (Invisible, Directory, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 7 File Identifier: PROTECT Length of Directory Record: 48 Extended Attribute Record Length: 0 Location of Extent: 29656 Data Length: 341264 Recording Date and Time: 1998-07-30 03:00:06 +09:00 File Flags: 0 (Visible, File, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 14 File Identifier: SETUPAPI.DLL;1 ========== LBA[000020, 0x00014]: Directory Record ========== Length of Directory Record: 34 Extended Attribute Record Length: 0 Location of Extent: 20 Data Length: 2048 Recording Date and Time: 1900-00-00 00:00:00 +09:00 File Flags: 2 (Visible, Directory, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 1 File Identifier: Length of Directory Record: 34 Extended Attribute Record Length: 0 Location of Extent: 19 Data Length: 2048 Recording Date and Time: 1900-00-00 00:00:00 +09:00 File Flags: 2 (Visible, Directory, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 1 File Identifier:  Length of Directory Record: 46 Extended Attribute Record Length: 0 Location of Extent: 27 Data Length: 8388608 Recording Date and Time: 2001-10-16 10:37:34 +09:00 File Flags: 1 (Invisible, File, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 12 File Identifier: 011016.TMP;1 Length of Directory Record: 46 Extended Attribute Record Length: 0 Location of Extent: 7580 Data Length: 42467328 Recording Date and Time: 2000-10-10 20:29:54 +09:00 File Flags: 1 (Invisible, File, Disassociated, File has't record format, Owner/Group ID has't, Final Directory Record) File Unit Size: 0 Interleave Gap Size: 0 Volume Sequence Number: 1 Length of File Identifier: 13 File Identifier: PROTECT.PRO;1 ========== LBA[028317, 0x06e9d]: CFGMGR32.DLL ========== ========== Image Dos Header (64 byte) ========== Magic number: 5a4d Bytes on last page of file: 0090 Pages in file: 0003 Relocations: 0000 Size of header in paragraphs: 0004 Minimum extra paragraphs needed: 0000 Maximum extra paragraphs needed: ffff Initial (relative) SS value: 0000 Initial SP value: 00b8 Checksum: 0000 Initial IP value: 0000 Initial (relative) CS value: 0000 File address of relocation table: 0040 Overlay number: 0000 OEM identifier (for e_oeminfo): 0000 OEM information; e_oemid specific: 0000 File address of new exe header: 00000080 ========== Image NT Header (248 byte) ========== Signature: 00004550 ========== FileHeader ========== Machine: 014c NumberOfSections: 0005 TimeDateStamp: 33eb31d7 PointerToSymbolTable: 00000000 NumberOfSymbols: 00000000 SizeOfOptionalHeader: 00e0 Characteristics: 210e ========== OptionalHeader ========== Magic: 010b MajorLinkerVersion: 03 MinorLinkerVersion: 0a SizeOfCode: 00005400 SizeOfInitializedData: 00000e00 SizeOfUninitializedData: 00000000 AddressOfEntryPoint: 000011f1 BaseOfCode: 00001000 BaseOfData: 00007000 ImageBase: 7f6a0000 SectionAlignment: 00001000 FileAlignment: 00000200 MajorOperatingSystemVersion: 0004 MinorOperatingSystemVersion: 0000 MajorImageVersion: 0000 MinorImageVersion: 0000 MajorSubsystemVersion: 0004 MinorSubsystemVersion: 0000 Win32VersionValue: 00000000 SizeOfImage: 0000b000 SizeOfHeaders: 00000400 CheckSum: 000143d0 Subsystem: 0002 DllCharacteristics: 0000 SizeOfStackReserve: 00100000 SizeOfStackCommit: 00001000 SizeOfHeapReserve: 00001000 SizeOfHeapCommit: 00001000 LoaderFlags: 00000000 NumberOfRvaAndSizes: 00000010 DataDirectory: VirtualAddress[0]: 00004bc0 Size[0]: 0000170b VirtualAddress[1]: 00008000 Size[1]: 00000064 VirtualAddress[2]: 00009000 Size[2]: 000003c4 VirtualAddress[3]: 00000000 Size[3]: 00000000 VirtualAddress[4]: 00000000 Size[4]: 00000000 VirtualAddress[5]: 0000a000 Size[5]: 00000244 VirtualAddress[6]: 00000000 Size[6]: 00000000 VirtualAddress[7]: 00000000 Size[7]: 00000000 VirtualAddress[8]: 00000000 Size[8]: 00000000 VirtualAddress[9]: 00000000 Size[9]: 00000000 VirtualAddress[10]: 00000000 Size[10]: 00000000 VirtualAddress[11]: 00000000 Size[11]: 00000000 VirtualAddress[12]: 000080f4 Size[12]: 0000007c VirtualAddress[13]: 00000000 Size[13]: 00000000 VirtualAddress[14]: 00000000 Size[14]: 00000000 VirtualAddress[15]: 00000000 Size[15]: 00000000 ========== Image Section Header (40 byte) ========== Name: .text PhysicalAddress: 000052cb VirtualSize: 000052cb VirtualAddress: 00001000 SizeOfRawData: 00005400 PointerToRawData: 00001000 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 60000020 ========== Image Section Header (40 byte) ========== Name: .data PhysicalAddress: 00000010 VirtualSize: 00000010 VirtualAddress: 00007000 SizeOfRawData: 00000200 PointerToRawData: 00007000 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: d0000040 ========== Image Section Header (40 byte) ========== Name: .idata PhysicalAddress: 00000360 VirtualSize: 00000360 VirtualAddress: 00008000 SizeOfRawData: 00000400 PointerToRawData: 00008000 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 40000040 ========== Image Section Header (40 byte) ========== Name: .rsrc PhysicalAddress: 000003c4 VirtualSize: 000003c4 VirtualAddress: 00009000 SizeOfRawData: 00000400 PointerToRawData: 00009000 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 50000040 ========== Image Section Header (40 byte) ========== Name: .reloc PhysicalAddress: 000002b2 VirtualSize: 000002b2 VirtualAddress: 0000a000 SizeOfRawData: 00000400 PointerToRawData: 0000a000 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 42000040 ========== LBA[029111, 0x071b7]: DSETUP.DLL ========== ========== Image Dos Header (64 byte) ========== Magic number: 5a4d Bytes on last page of file: 0090 Pages in file: 0003 Relocations: 0000 Size of header in paragraphs: 0004 Minimum extra paragraphs needed: 0000 Maximum extra paragraphs needed: ffff Initial (relative) SS value: 0000 Initial SP value: 00b8 Checksum: 0000 Initial IP value: 0000 Initial (relative) CS value: 0000 File address of relocation table: 0040 Overlay number: 0000 OEM identifier (for e_oeminfo): 0000 OEM information; e_oemid specific: 0000 File address of new exe header: 000000c8 ========== Image NT Header (248 byte) ========== Signature: 00004550 ========== FileHeader ========== Machine: 014c NumberOfSections: 0004 TimeDateStamp: 37d6f675 PointerToSymbolTable: 00000000 NumberOfSymbols: 000002b1 SizeOfOptionalHeader: 00e0 Characteristics: 2306 ========== OptionalHeader ========== Magic: 010b MajorLinkerVersion: 05 MinorLinkerVersion: 0c SizeOfCode: 00006000 SizeOfInitializedData: 00004c00 SizeOfUninitializedData: 00000000 AddressOfEntryPoint: 00002f00 BaseOfCode: 00001000 BaseOfData: 00007000 ImageBase: 00400000 SectionAlignment: 00001000 FileAlignment: 00000200 MajorOperatingSystemVersion: 0005 MinorOperatingSystemVersion: 0000 MajorImageVersion: 0005 MinorImageVersion: 0000 MajorSubsystemVersion: 0004 MinorSubsystemVersion: 0000 Win32VersionValue: 00000000 SizeOfImage: 0000d000 SizeOfHeaders: 00000600 CheckSum: 0000ab7f Subsystem: 0002 DllCharacteristics: 0000 SizeOfStackReserve: 00040000 SizeOfStackCommit: 00001000 SizeOfHeapReserve: 00001000 SizeOfHeapCommit: 00001000 LoaderFlags: 00000000 NumberOfRvaAndSizes: 00000010 DataDirectory: VirtualAddress[0]: 00006d70 Size[0]: 0000021c VirtualAddress[1]: 00006454 Size[1]: 0000008c VirtualAddress[2]: 0000b000 Size[2]: 000003c0 VirtualAddress[3]: 00000000 Size[3]: 00000000 VirtualAddress[4]: 00000000 Size[4]: 00000000 VirtualAddress[5]: 0000c000 Size[5]: 000005dc VirtualAddress[6]: 000011a0 Size[6]: 0000001c VirtualAddress[7]: 00000000 Size[7]: 00000000 VirtualAddress[8]: 00000000 Size[8]: 00000000 VirtualAddress[9]: 00000000 Size[9]: 00000000 VirtualAddress[10]: 00000000 Size[10]: 00000000 VirtualAddress[11]: 00000000 Size[11]: 00000000 VirtualAddress[12]: 00001000 Size[12]: 000001a0 VirtualAddress[13]: 00000000 Size[13]: 00000000 VirtualAddress[14]: 00000000 Size[14]: 00000000 VirtualAddress[15]: 00000000 Size[15]: 00000000 ========== Image Section Header (40 byte) ========== Name: .text PhysicalAddress: 00005f8c VirtualSize: 00005f8c VirtualAddress: 00001000 SizeOfRawData: 00006000 PointerToRawData: 00000600 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 60000020 ========== Image Section Header (40 byte) ========== Name: .data PhysicalAddress: 00003f58 VirtualSize: 00003f58 VirtualAddress: 00007000 SizeOfRawData: 00002a00 PointerToRawData: 00006600 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: c0000040 ========== Image Section Header (40 byte) ========== Name: .rsrc PhysicalAddress: 000003c0 VirtualSize: 000003c0 VirtualAddress: 0000b000 SizeOfRawData: 00000400 PointerToRawData: 00009000 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 40000040 ========== Image Section Header (40 byte) ========== Name: .reloc PhysicalAddress: 00000790 VirtualSize: 00000790 VirtualAddress: 0000c000 SizeOfRawData: 00000800 PointerToRawData: 00009400 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 42000040 ========== LBA[029131, 0x071cb]: DSETUP32.DLL ========== ========== Image Dos Header (64 byte) ========== Magic number: 5a4d Bytes on last page of file: 0090 Pages in file: 0003 Relocations: 0000 Size of header in paragraphs: 0004 Minimum extra paragraphs needed: 0000 Maximum extra paragraphs needed: ffff Initial (relative) SS value: 0000 Initial SP value: 00b8 Checksum: 0000 Initial IP value: 0000 Initial (relative) CS value: 0000 File address of relocation table: 0040 Overlay number: 0000 OEM identifier (for e_oeminfo): 0000 OEM information; e_oemid specific: 0000 File address of new exe header: 000000d8 ========== Image NT Header (248 byte) ========== Signature: 00004550 ========== FileHeader ========== Machine: 014c NumberOfSections: 0004 TimeDateStamp: 384040df PointerToSymbolTable: 00000000 NumberOfSymbols: 0000060d SizeOfOptionalHeader: 00e0 Characteristics: 2306 ========== OptionalHeader ========== Magic: 010b MajorLinkerVersion: 05 MinorLinkerVersion: 0c SizeOfCode: 0000f600 SizeOfInitializedData: 00020200 SizeOfUninitializedData: 00000000 AddressOfEntryPoint: 00008240 BaseOfCode: 00001000 BaseOfData: 00011000 ImageBase: 00400000 SectionAlignment: 00001000 FileAlignment: 00000200 MajorOperatingSystemVersion: 0005 MinorOperatingSystemVersion: 0000 MajorImageVersion: 0005 MinorImageVersion: 0000 MajorSubsystemVersion: 0004 MinorSubsystemVersion: 0000 Win32VersionValue: 00000000 SizeOfImage: 00034000 SizeOfHeaders: 00000600 CheckSum: 000357bd Subsystem: 0002 DllCharacteristics: 0000 SizeOfStackReserve: 00040000 SizeOfStackCommit: 00001000 SizeOfHeapReserve: 00001000 SizeOfHeapCommit: 00001000 LoaderFlags: 00000000 NumberOfRvaAndSizes: 00000010 DataDirectory: VirtualAddress[0]: 00010320 Size[0]: 000000e6 VirtualAddress[1]: 0000f6f4 Size[1]: 000000b4 VirtualAddress[2]: 00016000 Size[2]: 0001b460 VirtualAddress[3]: 00000000 Size[3]: 00000000 VirtualAddress[4]: 00000000 Size[4]: 00000000 VirtualAddress[5]: 00032000 Size[5]: 00000e5c VirtualAddress[6]: 00001230 Size[6]: 0000001c VirtualAddress[7]: 00000000 Size[7]: 00000000 VirtualAddress[8]: 00000000 Size[8]: 00000000 VirtualAddress[9]: 00000000 Size[9]: 00000000 VirtualAddress[10]: 00000000 Size[10]: 00000000 VirtualAddress[11]: 00000000 Size[11]: 00000000 VirtualAddress[12]: 00001000 Size[12]: 00000224 VirtualAddress[13]: 00000000 Size[13]: 00000000 VirtualAddress[14]: 00000000 Size[14]: 00000000 VirtualAddress[15]: 00000000 Size[15]: 00000000 ========== Image Section Header (40 byte) ========== Name: .text PhysicalAddress: 0000f406 VirtualSize: 0000f406 VirtualAddress: 00001000 SizeOfRawData: 0000f600 PointerToRawData: 00000600 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 60000020 ========== Image Section Header (40 byte) ========== Name: .data PhysicalAddress: 00004d58 VirtualSize: 00004d58 VirtualAddress: 00011000 SizeOfRawData: 00003600 PointerToRawData: 0000fc00 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: c0000040 ========== Image Section Header (40 byte) ========== Name: .rsrc PhysicalAddress: 0001c000 VirtualSize: 0001c000 VirtualAddress: 00016000 SizeOfRawData: 0001b600 PointerToRawData: 00013200 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 40000040 ========== Image Section Header (40 byte) ========== Name: .reloc PhysicalAddress: 00001482 VirtualSize: 00001482 VirtualAddress: 00032000 SizeOfRawData: 00001600 PointerToRawData: 0002e800 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 42000040 ========== LBA[029227, 0x0722b]: DXSETUP.EXE ========== ========== Image Dos Header (64 byte) ========== Magic number: 5a4d Bytes on last page of file: 0090 Pages in file: 0003 Relocations: 0000 Size of header in paragraphs: 0004 Minimum extra paragraphs needed: 0000 Maximum extra paragraphs needed: ffff Initial (relative) SS value: 0000 Initial SP value: 00b8 Checksum: 0000 Initial IP value: 0000 Initial (relative) CS value: 0000 File address of relocation table: 0040 Overlay number: 0000 OEM identifier (for e_oeminfo): 0000 OEM information; e_oemid specific: 0000 File address of new exe header: 000000d0 ========== Image NT Header (248 byte) ========== Signature: 00004550 ========== FileHeader ========== Machine: 014c NumberOfSections: 0003 TimeDateStamp: 37d6f677 PointerToSymbolTable: 00000000 NumberOfSymbols: 00000572 SizeOfOptionalHeader: 00e0 Characteristics: 0307 ========== OptionalHeader ========== Magic: 010b MajorLinkerVersion: 05 MinorLinkerVersion: 0c SizeOfCode: 0000a200 SizeOfInitializedData: 00044200 SizeOfUninitializedData: 00000000 AddressOfEntryPoint: 00003440 BaseOfCode: 00001000 BaseOfData: 0000c000 ImageBase: 01000000 SectionAlignment: 00001000 FileAlignment: 00000200 MajorOperatingSystemVersion: 0005 MinorOperatingSystemVersion: 0000 MajorImageVersion: 0005 MinorImageVersion: 0000 MajorSubsystemVersion: 0004 MinorSubsystemVersion: 0000 Win32VersionValue: 00000000 SizeOfImage: 00052000 SizeOfHeaders: 00000600 CheckSum: 00050715 Subsystem: 0002 DllCharacteristics: 8000 SizeOfStackReserve: 00040000 SizeOfStackCommit: 00001000 SizeOfHeapReserve: 00100000 SizeOfHeapCommit: 00001000 LoaderFlags: 00000000 NumberOfRvaAndSizes: 00000010 DataDirectory: VirtualAddress[0]: 00000000 Size[0]: 00000000 VirtualAddress[1]: 0000a6bc Size[1]: 0000008c VirtualAddress[2]: 00011000 Size[2]: 00040bcc VirtualAddress[3]: 00000000 Size[3]: 00000000 VirtualAddress[4]: 00000000 Size[4]: 00000000 VirtualAddress[5]: 00000000 Size[5]: 00000000 VirtualAddress[6]: 000011d0 Size[6]: 0000001c VirtualAddress[7]: 00000000 Size[7]: 00000000 VirtualAddress[8]: 00000000 Size[8]: 00000000 VirtualAddress[9]: 00000000 Size[9]: 00000000 VirtualAddress[10]: 00000000 Size[10]: 00000000 VirtualAddress[11]: 00000000 Size[11]: 00000000 VirtualAddress[12]: 00001000 Size[12]: 000001d0 VirtualAddress[13]: 00000000 Size[13]: 00000000 VirtualAddress[14]: 00000000 Size[14]: 00000000 VirtualAddress[15]: 00000000 Size[15]: 00000000 ========== Image Section Header (40 byte) ========== Name: .text PhysicalAddress: 0000a0b6 VirtualSize: 0000a0b6 VirtualAddress: 00001000 SizeOfRawData: 0000a200 PointerToRawData: 00000600 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 60000020 ========== Image Section Header (40 byte) ========== Name: .data PhysicalAddress: 00004cd8 VirtualSize: 00004cd8 VirtualAddress: 0000c000 SizeOfRawData: 00003600 PointerToRawData: 0000a800 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: c0000040 ========== Image Section Header (40 byte) ========== Name: .rsrc PhysicalAddress: 00041000 VirtualSize: 00041000 VirtualAddress: 00011000 SizeOfRawData: 00040c00 PointerToRawData: 0000de00 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 40000040 ========== LBA[029385, 0x072c9]: EDP2.DLL ========== ========== Image Dos Header (64 byte) ========== Magic number: 5a4d Bytes on last page of file: 0090 Pages in file: 0003 Relocations: 0000 Size of header in paragraphs: 0004 Minimum extra paragraphs needed: 0000 Maximum extra paragraphs needed: ffff Initial (relative) SS value: 0000 Initial SP value: 00b8 Checksum: 0000 Initial IP value: 0000 Initial (relative) CS value: 0000 File address of relocation table: 0040 Overlay number: 0000 OEM identifier (for e_oeminfo): 0000 OEM information; e_oemid specific: 0000 File address of new exe header: 000000f8 ========== Image NT Header (248 byte) ========== Signature: 00004550 ========== FileHeader ========== Machine: 014c NumberOfSections: 0005 TimeDateStamp: 3b37ed9f PointerToSymbolTable: 00000000 NumberOfSymbols: 00000000 SizeOfOptionalHeader: 00e0 Characteristics: 210e ========== OptionalHeader ========== Magic: 010b MajorLinkerVersion: 06 MinorLinkerVersion: 00 SizeOfCode: 0000d000 SizeOfInitializedData: 00010000 SizeOfUninitializedData: 00000000 AddressOfEntryPoint: 00001eb7 BaseOfCode: 00001000 BaseOfData: 0000e000 ImageBase: 10000000 SectionAlignment: 00001000 FileAlignment: 00001000 MajorOperatingSystemVersion: 0004 MinorOperatingSystemVersion: 0000 MajorImageVersion: 0000 MinorImageVersion: 0000 MajorSubsystemVersion: 0004 MinorSubsystemVersion: 0000 Win32VersionValue: 00000000 SizeOfImage: 0001e000 SizeOfHeaders: 00001000 CheckSum: 00000000 Subsystem: 0002 DllCharacteristics: 0000 SizeOfStackReserve: 00100000 SizeOfStackCommit: 00001000 SizeOfHeapReserve: 00100000 SizeOfHeapCommit: 00001000 LoaderFlags: 00000000 NumberOfRvaAndSizes: 00000010 DataDirectory: VirtualAddress[0]: 00011a60 Size[0]: 00000062 VirtualAddress[1]: 00010900 Size[1]: 0000008c VirtualAddress[2]: 00018000 Size[2]: 00002958 VirtualAddress[3]: 00000000 Size[3]: 00000000 VirtualAddress[4]: 00000000 Size[4]: 00000000 VirtualAddress[5]: 0001b000 Size[5]: 000012fc VirtualAddress[6]: 00000000 Size[6]: 00000000 VirtualAddress[7]: 00000000 Size[7]: 00000000 VirtualAddress[8]: 00000000 Size[8]: 00000000 VirtualAddress[9]: 00000000 Size[9]: 00000000 VirtualAddress[10]: 00000000 Size[10]: 00000000 VirtualAddress[11]: 00000000 Size[11]: 00000000 VirtualAddress[12]: 0000e000 Size[12]: 00000344 VirtualAddress[13]: 00000000 Size[13]: 00000000 VirtualAddress[14]: 00000000 Size[14]: 00000000 VirtualAddress[15]: 00000000 Size[15]: 00000000 ========== Image Section Header (40 byte) ========== Name: .text PhysicalAddress: 0000cea6 VirtualSize: 0000cea6 VirtualAddress: 00001000 SizeOfRawData: 0000d000 PointerToRawData: 00001000 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 60000020 ========== Image Section Header (40 byte) ========== Name: .rdata PhysicalAddress: 00003ac2 VirtualSize: 00003ac2 VirtualAddress: 0000e000 SizeOfRawData: 00004000 PointerToRawData: 0000e000 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 40000040 ========== Image Section Header (40 byte) ========== Name: .data PhysicalAddress: 000056e4 VirtualSize: 000056e4 VirtualAddress: 00012000 SizeOfRawData: 00003000 PointerToRawData: 00012000 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: c0000040 ========== Image Section Header (40 byte) ========== Name: .rsrc PhysicalAddress: 00002958 VirtualSize: 00002958 VirtualAddress: 00018000 SizeOfRawData: 00003000 PointerToRawData: 00015000 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 40000040 ========== Image Section Header (40 byte) ========== Name: .reloc PhysicalAddress: 00002704 VirtualSize: 00002704 VirtualAddress: 0001b000 SizeOfRawData: 00003000 PointerToRawData: 00018000 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 42000040 ========== LBA[029440, 0x07300]: KAZOKUT.EXE ========== ========== Image Dos Header (64 byte) ========== Magic number: 5a4d Bytes on last page of file: 0090 Pages in file: 0003 Relocations: 0000 Size of header in paragraphs: 0004 Minimum extra paragraphs needed: 0000 Maximum extra paragraphs needed: ffff Initial (relative) SS value: 0000 Initial SP value: 00b8 Checksum: 0000 Initial IP value: 0000 Initial (relative) CS value: 0000 File address of relocation table: 0040 Overlay number: 0000 OEM identifier (for e_oeminfo): 0000 OEM information; e_oemid specific: 0000 File address of new exe header: 000000e8 ========== Image NT Header (248 byte) ========== Signature: 00004550 ========== FileHeader ========== Machine: 014c NumberOfSections: 0004 TimeDateStamp: 3bbbed7a PointerToSymbolTable: 00000000 NumberOfSymbols: 00000000 SizeOfOptionalHeader: 00e0 Characteristics: 010f ========== OptionalHeader ========== Magic: 010b MajorLinkerVersion: 06 MinorLinkerVersion: 00 SizeOfCode: 00019000 SizeOfInitializedData: 00055000 SizeOfUninitializedData: 00000000 AddressOfEntryPoint: 00009f05 BaseOfCode: 00001000 BaseOfData: 0001a000 ImageBase: 00400000 SectionAlignment: 00001000 FileAlignment: 00001000 MajorOperatingSystemVersion: 0004 MinorOperatingSystemVersion: 0000 MajorImageVersion: 0000 MinorImageVersion: 0000 MajorSubsystemVersion: 0004 MinorSubsystemVersion: 0000 Win32VersionValue: 00000000 SizeOfImage: 0006f000 SizeOfHeaders: 00001000 CheckSum: 00000000 Subsystem: 0002 DllCharacteristics: 0000 SizeOfStackReserve: 00100000 SizeOfStackCommit: 00001000 SizeOfHeapReserve: 00100000 SizeOfHeapCommit: 00001000 LoaderFlags: 00000000 NumberOfRvaAndSizes: 00000010 DataDirectory: VirtualAddress[0]: 00000000 Size[0]: 00000000 VirtualAddress[1]: 0001e7f0 Size[1]: 000000dc VirtualAddress[2]: 00027000 Size[2]: 00047be0 VirtualAddress[3]: 00000000 Size[3]: 00000000 VirtualAddress[4]: 00000000 Size[4]: 00000000 VirtualAddress[5]: 00000000 Size[5]: 00000000 VirtualAddress[6]: 00000000 Size[6]: 00000000 VirtualAddress[7]: 00000000 Size[7]: 00000000 VirtualAddress[8]: 00000000 Size[8]: 00000000 VirtualAddress[9]: 00000000 Size[9]: 00000000 VirtualAddress[10]: 00000000 Size[10]: 00000000 VirtualAddress[11]: 00000000 Size[11]: 00000000 VirtualAddress[12]: 0001a000 Size[12]: 00000480 VirtualAddress[13]: 00000000 Size[13]: 00000000 VirtualAddress[14]: 00000000 Size[14]: 00000000 VirtualAddress[15]: 00000000 Size[15]: 00000000 ========== Image Section Header (40 byte) ========== Name: .text PhysicalAddress: 000181fe VirtualSize: 000181fe VirtualAddress: 00001000 SizeOfRawData: 00019000 PointerToRawData: 00001000 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 60000020 ========== Image Section Header (40 byte) ========== Name: .rdata PhysicalAddress: 00006012 VirtualSize: 00006012 VirtualAddress: 0001a000 SizeOfRawData: 00007000 PointerToRawData: 0001a000 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 40000040 ========== Image Section Header (40 byte) ========== Name: .data PhysicalAddress: 00005c80 VirtualSize: 00005c80 VirtualAddress: 00021000 SizeOfRawData: 00003000 PointerToRawData: 00021000 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: c0000040 ========== Image Section Header (40 byte) ========== Name: .rsrc PhysicalAddress: 00047be0 VirtualSize: 00047be0 VirtualAddress: 00027000 SizeOfRawData: 00048000 PointerToRawData: 00024000 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 40000040 ========== LBA[029656, 0x073d8]: SETUPAPI.DLL ========== ========== Image Dos Header (64 byte) ========== Magic number: 5a4d Bytes on last page of file: 0090 Pages in file: 0003 Relocations: 0000 Size of header in paragraphs: 0004 Minimum extra paragraphs needed: 0000 Maximum extra paragraphs needed: ffff Initial (relative) SS value: 0000 Initial SP value: 00b8 Checksum: 0000 Initial IP value: 0000 Initial (relative) CS value: 0000 File address of relocation table: 0040 Overlay number: 0000 OEM identifier (for e_oeminfo): 0000 OEM information; e_oemid specific: 0000 File address of new exe header: 00000080 ========== Image NT Header (248 byte) ========== Signature: 00004550 ========== FileHeader ========== Machine: 014c NumberOfSections: 0005 TimeDateStamp: 33df7fde PointerToSymbolTable: 00000000 NumberOfSymbols: 00001214 SizeOfOptionalHeader: 00e0 Characteristics: 2302 ========== OptionalHeader ========== Magic: 010b MajorLinkerVersion: 03 MinorLinkerVersion: 0a SizeOfCode: 00033400 SizeOfInitializedData: 00021800 SizeOfUninitializedData: 00000000 AddressOfEntryPoint: 00029b40 BaseOfCode: 00001000 BaseOfData: 00035000 ImageBase: 02000000 SectionAlignment: 00001000 FileAlignment: 00000200 MajorOperatingSystemVersion: 0004 MinorOperatingSystemVersion: 0000 MajorImageVersion: 0004 MinorImageVersion: 0000 MajorSubsystemVersion: 0004 MinorSubsystemVersion: 0000 Win32VersionValue: 00000000 SizeOfImage: 00058000 SizeOfHeaders: 00000400 CheckSum: 0005cfed Subsystem: 0002 DllCharacteristics: 0000 SizeOfStackReserve: 00100000 SizeOfStackCommit: 00001000 SizeOfHeapReserve: 00100000 SizeOfHeapCommit: 00001000 LoaderFlags: 00000000 NumberOfRvaAndSizes: 00000010 DataDirectory: VirtualAddress[0]: 00039530 Size[0]: 000026f6 VirtualAddress[1]: 00037a35 Size[1]: 0000012c VirtualAddress[2]: 00041000 Size[2]: 000123a0 VirtualAddress[3]: 00000000 Size[3]: 00000000 VirtualAddress[4]: 00000000 Size[4]: 00000000 VirtualAddress[5]: 00054000 Size[5]: 00002c10 VirtualAddress[6]: 000354b0 Size[6]: 0000001c VirtualAddress[7]: 00000000 Size[7]: 00000000 VirtualAddress[8]: 00000000 Size[8]: 00000000 VirtualAddress[9]: 00000000 Size[9]: 00000000 VirtualAddress[10]: 00000000 Size[10]: 00000000 VirtualAddress[11]: 00000000 Size[11]: 00000000 VirtualAddress[12]: 00035000 Size[12]: 000004b0 VirtualAddress[13]: 00000000 Size[13]: 00000000 VirtualAddress[14]: 00000000 Size[14]: 00000000 VirtualAddress[15]: 00000000 Size[15]: 00000000 ========== Image Section Header (40 byte) ========== Name: .text PhysicalAddress: 00033374 VirtualSize: 00033374 VirtualAddress: 00001000 SizeOfRawData: 00033400 PointerToRawData: 00001000 PointerToRelocations: 00000000 PointerToLinenumbers: 00053420 NumberOfRelocations: 0000 NumberOfLinenumbers: 4cb2 Characteristics: 60000020 ========== Image Section Header (40 byte) ========== Name: .rdata PhysicalAddress: 00006c26 VirtualSize: 00006c26 VirtualAddress: 00035000 SizeOfRawData: 00006e00 PointerToRawData: 00034400 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 40000040 ========== Image Section Header (40 byte) ========== Name: .data PhysicalAddress: 00004d3c VirtualSize: 00004d3c VirtualAddress: 0003c000 SizeOfRawData: 00002600 PointerToRawData: 0003b200 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: c0000040 ========== Image Section Header (40 byte) ========== Name: .rsrc PhysicalAddress: 000123a0 VirtualSize: 000123a0 VirtualAddress: 00041000 SizeOfRawData: 00012400 PointerToRawData: 0003d800 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 40000040 ========== Image Section Header (40 byte) ========== Name: .reloc PhysicalAddress: 000036e6 VirtualSize: 000036e6 VirtualAddress: 00054000 SizeOfRawData: 00003800 PointerToRawData: 0004fc00 PointerToRelocations: 00000000 PointerToLinenumbers: 00000000 NumberOfRelocations: 0000 NumberOfLinenumbers: 0000 Characteristics: 42000040