unupx.dll - UPX Unpacker Plug-in

info
MZ
PE
resources
strings
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	unupx.dll
size	172296 (0x2a108)
md5	f3ae9b90e91b0866811605f861595454

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	7
TimeDateStamp	0x4ad60ea5
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0xa18e
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x15000
SizeOfInitializedData	0x13c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x15ed4
BaseOfCode	0x1000
BaseOfData	0x16000
ImageBase	0x61400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	1.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x2d000
SizeOfHeaders	0x400
CheckSum	0x39287
Subsystem	2
DllCharacteristics	1
SizeOfStackReserve	0
SizeOfStackCommit	0
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Borland Delphi 2006

Sections

name	va	vsize	raw size	flags
CODE	0x1000	0x14ef4	0x15000	R-X CODE
DATA	0x16000	0x974	0xa00	RW- IDATA
BSS	0x17000	0x65d	0	RW-
.idata	0x18000	0x976	0xa00	RW- IDATA
.edata	0x19000	0x83	0x200	R-- IDATA SHARED
.reloc	0x1a000	0x1510	0x1600	R-- IDATA SHARED
.rsrc	0x1c000	0x10eb0	0x11000	R-- IDATA SHARED

Data Directory

type	va	size
EXPORT	0x19000	0x83
IMPORT	0x18000	0x976
RESOURCE	0x1c000	0x10eb0
EXCEPTION	0	0
SECURITY	0x29000	0x1108
BASERELOC	0x1a000	0x1510
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
BITMAP	PGL_IMAGE	808	0
ICON	#1	744	0
STRING	#4086	254	0
STRING	#4086	218	1200
STRING	#4086	294	1200
STRING	#4086	296	1200
STRING	#4086	338	1200
STRING	#4086	296	1200
STRING	#4086	312	1200
STRING	#4086	316	1200
STRING	#4087	1204	0
STRING	#4087	1070	1200
STRING	#4087	1650	1200
STRING	#4087	1308	1200
STRING	#4087	1544	1200
STRING	#4087	1602	1200
STRING	#4087	1466	1200
STRING	#4087	1364	1200
STRING	#4088	1672	0
STRING	#4088	1570	1200
STRING	#4088	2046	1200
STRING	#4088	1782	1200
STRING	#4088	1938	1200
STRING	#4088	1898	1200
STRING	#4088	1962	1200
STRING	#4088	1774	1200
STRING	#4089	1714	0
STRING	#4089	1442	1200
STRING	#4089	1812	1200
STRING	#4089	1710	1200
STRING	#4089	1768	1200
STRING	#4089	1822	1200
STRING	#4089	1820	1200
STRING	#4089	1692	1200
STRING	#4090	1150	0
STRING	#4090	962	1200
STRING	#4090	1274	1200
STRING	#4090	1264	1200
STRING	#4090	1336	1200
STRING	#4090	1346	1200
STRING	#4090	1272	1200
STRING	#4090	1278	1200
STRING	#4091	1230	0
STRING	#4091	1200	1200
STRING	#4091	1234	1200
STRING	#4091	1252	1200
STRING	#4091	1232	1200
STRING	#4091	1244	1200
STRING	#4091	1262	1200
STRING	#4091	1272	1200
STRING	#4092	236	0
STRING	#4093	208	0
STRING	#4094	676	0
STRING	#4095	868	0
STRING	#4096	672	0
RCDATA	DVCLAL	16	0
RCDATA	PACKAGEINFO	180	0
GROUP_ICON	MAINICON	20	0
VERSION	#1	976	0

id	lang	string
65360	0	<UPX> Failed to unpack due to unknown algorithm or false packer signature
65361	0	<UPX> Decompressed file size: %d bytes
65360	1025	<UPX> فشل في فك الضغط بسبب تشفير غير معروف او توقيع غير صحيح
65361	1025	<UPX> بايت %d :الحجم الغير مضغوط
65360	1031	<UPX> Konnte wegen des unbekannten Algorithmus oder der falschen Signature nicht auspacken
65361	1031	<UPX> Dekomprimierte Dateigröße: %d Bytes
65360	1034	<UPX> Falla al descomprimir por un algoritmo desconocido o firma de compresor falsa.
65361	1034	<UPX> Tamaño del archivo descomprimido: %d bytes
65360	1036	<UPX> Echec de la décompression en raison d'un algorithme inconnu ou d'une fausse signature du compresseur
65361	1036	<UPX> Taille du fichier décompressée: %d octets
65360	1040	<UPX> Impossibile decomprimere il file: algoritmo sconosciuto o firma del packer errata
65361	1040	<UPX> Grandezza del file decompresso: %d byte
65360	1043	<UPX> Fout tijdens uitpakken door een onbekend algoritme of verkeerde packer handtekening.
65361	1043	<UPX> Ongecomprimeerde bestands grootte: %d bytes
65360	1046	<UPX> Falha ao descompactar devido a algoritmo desconhecido ou falsa assinatura do compactador
65361	1046	<UPX> Tamanho do arquivo descomprimido: %d bytes
65376	0	<UPX> Failed to recover Import!
65377	0	<UPX> Trying to recover TLS...
65378	0	<UPX> Trying to recover Export...
65379	0	<UPX> Failed to recover Export!
65380	0	<UPX> Trying to recover Relocations...
65381	0	<UPX> Failed to recover Relocations!
65382	0	<UPX> Trying to recover Resources...
65383	0	<UPX> Failed to recover Resources!
65384	0	<UPX> The file partially recovered.
65385	0	<UPX> Original UPX header lost! Attempting to recover UPX header...
65386	0	<UPX> Cannot recover the UPX header
65387	0	<UPX> Cannot determine the compression method used
65388	0	<UPX> Cannot get the uncompressed size
65389	0	<UPX> Cannot get the compressed size
65390	0	<UPX> The file is not UPX-packed
65391	0	File compressed with UPX
65376	1025	<UPX> !فشل في استرجاع المستوردات
65377	1025	<UPX> ...TLS محاولة استعادة
65378	1025	<UPX> ...محاولة استعادة المصدرات
65379	1025	<UPX> !فشل في استعادة المصدرات
65380	1025	<UPX> ...محاولة استعادة المتنقلات
65381	1025	<UPX> !فشل في استعادة المتنقلات
65382	1025	<UPX> ...محاولة استعادة المصادر
65383	1025	<UPX> !فشل في استعادة المصادر
65384	1025	<UPX> الملف استعيد جزئيا
65385	1025	<UPX> ...UPX الاصلية مفقودة ! محاولة استرجاع ترويسة UPX ترويسة
65386	1025	<UPX> UPX لا يمكن استرجاع ترويسة
65387	1025	<UPX> لايمكن معرفة طريقة الضغط المستخدمة
65388	1025	<UPX> لايمكن حساب الحجم الغير مضغوط
65389	1025	<UPX> لايمكن حساب الحجم المضغوط
65390	1025	<UPX> UPX الملف ليس مضغوط بــ
65391	1025	UPX الملف مضغوط بــ
65376	1031	<UPX> Der Import konnte nicht wiederherstellen werden!
65377	1031	<UPX> Versuche TLS wiederherzustellen...
65378	1031	<UPX> Versuche den Export wiederherzustellen...
65379	1031	<UPX> Der Export konnten nicht wiederhergestellt werden!
65380	1031	<UPX> Versuche die Relocationen wiederherzustellen...
65381	1031	<UPX> Die Relocationen konnten nicht wiederhergestellt werden!
65382	1031	<UPX> Versuche Resourcen wiederherzustellen...
65383	1031	<UPX> Konnte Resourcen nicht wiederherstellen!
65384	1031	<UPX> Die Datei wurde teilweise wiederhergestellt
65385	1031	<UPX> Original UPX Header verloren! Versuche den UPX Header wiederherzustellen...
65386	1031	<UPX> Kann den UPX header nicht wiederherstellen
65387	1031	<UPX> Kann die Komprimierungsmethode nicht ermitteln
65388	1031	<UPX> Kann die entpackte Größe nicht feststellen
65389	1031	<UPX> Kann die komprimierte Größe nicht feststellen
65390	1031	<UPX> Diese Datei ist nicht UPX-prozessed
65391	1031	Diese Datei ist mit UPX komprimiert
65376	1034	<UPX> Falla al recuperar Import!
65377	1034	<UPX> Probando recuperar TLS...
65378	1034	<UPX> Probando recuperar Export...
65379	1034	<UPX> Falla al recuperar Export!
65380	1034	<UPX> Probando recuperar Reubicaciones...
65381	1034	<UPX> Falla al recuperar Reubicaciones!
65382	1034	<UPX> Probando recuperar Recursos...
65383	1034	<UPX> Falla al recuperar Recursos!
65384	1034	<UPX> Archivo parcialmente recuperado
65385	1034	<UPX> Cabecera UPX original perdida! Intentando recuperar cabecera UPX...
65386	1034	<UPX> No se puede recuperar la cabecera UPX
65387	1034	<UPX> No se puede determinar el método de compresión usado
65388	1034	<UPX> No se determinó el tamaño descomprimido
65389	1034	<UPX> No se determinó el tamaño comprimido
65390	1034	<UPX> Archivo no comprimido con UPX
65391	1034	Archivo comprimido con UPX
65376	1036	<UPX> Impossible de récupérer l'Importation!
65377	1036	<UPX> Essai de récupérer TLS...
65378	1036	<UPX> Essai de récupérer l'Exportation...
65379	1036	<UPX> Impossible de récupérer l'Exportation!
65380	1036	<UPX> Essai de récupérer les Relocalisations...
65381	1036	<UPX> Impossible de récupérer les Relocalisations!
65382	1036	<UPX> Essai de récupérer les Ressources...
65383	1036	<UPX> Impossible de récupérer les Ressources!
65384	1036	<UPX> Le fichier a été partiellement récupéré
65385	1036	<UPX> En-tête UPX Original perdu! Essai de récupération de l'en-tête UPX...
65386	1036	<UPX> Récupération de l'en-tête UPX impossible
65387	1036	<UPX> La méthode de compression utilisée ne peut être identifiée
65388	1036	<UPX> Impossible de connaitre la taille non compressée
65389	1036	<UPX> Impossible de connaitre la taille compressée
65390	1036	<UPX> Le fichier n'est pas compressé avec UPX
65391	1036	Le fichier est compressé avec UPX
65376	1040	<UPX> Impossibile ripristinare Importa!
65377	1040	<UPX> Tentativo di ripristino di TLS...
65378	1040	<UPX> Tentativo di ripristino di Esporta...
65379	1040	<UPX> Impossibile ripristinare Esporta!
65380	1040	<UPX> Tentativo di ripristino di Rilocazioni...
65381	1040	<UPX> Impossibile ripristinare Rilocazioni!
65382	1040	<UPX> Tentativo di ripristino di Risorse...
65383	1040	<UPX> Impossibile ripristinare Risorse!
65384	1040	<UPX> File ripristinato parzialmente.
65385	1040	<UPX> Intestazione originaria del file UPX persa! Tentativo di ripristino dell'intestazione del file UPX...
65386	1040	<UPX> Impossibile ripristinare l'intestazione del file UPX
65387	1040	<UPX> Impossibile determinare il metodo di compressione utilizzato
65388	1040	<UPX> Impossibile determinare la grandezza del file non compresso
65389	1040	<UPX> Impossibile determinare la grandezza del file compresso
65390	1040	<UPX> Il file non è compresso con UPX
65391	1040	File compresso con UPX
65376	1043	<UPX> Niet gelukt om Import te herstellen!
65377	1043	<UPX> Poging tot herstel van TLS...
65378	1043	<UPX> Poging tot herstel van Export...
65379	1043	<UPX> Niet gelukt om Export te herstellen!
65380	1043	<UPX> Poging tot herstel van Relocations...
65381	1043	<UPX> Niet gelukt om relocations te herstellen!
65382	1043	<UPX> Poging tot herstel van Resources...
65383	1043	<UPX> Niet gelukt om Resources te herstellen!
65384	1043	<UPX> Het bestand is deels hersteld.
65385	1043	<UPX> Oorspronkelijke UPX header verloren! Poging om het UPX header te herstellen...
65386	1043	<UPX> Kan het UPX header niet herstellen.
65387	1043	<UPX> Kan de compressie methode niet achterhalen.
65388	1043	<UPX> Kan de ongecomprimeerde grootte niet achterhalen.
65389	1043	<UPX> Kan de gecomprimeerde grootte niet achterhalen.
65390	1043	<UPX> Dit bestand is niet verpakt met UPX.
65391	1043	Bestand verpakt met UPX.
65376	1046	<UPX> Falha ao recuperar importação!
65377	1046	<UPX> Tentando recuperar TLS...
65378	1046	<UPX> Tentando recuperar exportação...
65379	1046	<UPX> Falha ao recuperar exportação!
65380	1046	<UPX> Tentando recuperar realocações...
65381	1046	<UPX> Falha ao recuperar realocações!
65382	1046	<UPX> Tentando recuperar recursos...
65383	1046	<UPX> Falha ao recuperar recursos!
65384	1046	<UPX> Arquivo parcialmente recuperado.
65385	1046	<UPX> Cabeçalho original UPX perdido! Na tentativa de recuperar cabeçalho UPX...
65386	1046	<UPX> Não é possível recuperar o cabeçalho UPX
65387	1046	<UPX> Não é possível determinar o método de compressão usado
65388	1046	<UPX> Não é possível obter o tamanho descompactado
65389	1046	<UPX> Não é possível obter o tamanho comprimido
65390	1046	<UPX> O arquivo não é UPX-packed
65391	1046	Arquivo comprimido com UPX
65392	0	<UPX> Warning! "OriginalPEHeader.Magic" = 0. Using default value (PE32).
65393	0	<UPX> Warning! "OriginalPEHeader.FileAlignment" = 0. Using default value (200h).
65394	0	<UPX> Unfiltering...
65395	0	<UPX> Unsupported filter!
65396	0	<UPX> Rebuilding Image...
65397	0	<UPX> Failed to recover the PE file header!
65398	0	<UPX> Section: %-9s %d bytes
65399	0	<UPX> Original PE file header lost! Trying to recover...
65400	0	<UPX> Original CTO (for filters 21h .. 29h, 36h, 46h, 49h), Filter ID and Code Length lost! Trying to find...
65401	0	<UPX> Failed to find CTO (for filters 21h .. 29h, 36h, 46h, 49h), Filter ID and Code Length!
65402	0	<UPX> Failed to recover the file.
65403	0	<UPX> CTO (for filters 21h .. 29h, 36h, 46h, 49h): %.2xh
65404	0	<UPX> Original EntryPoint lost! Trying to find...
65405	0	<UPX> Original EntryPoint: %.8xh
65406	0	<UPX> Failed to find the original EntryPoint! Setting it to zero...
65407	0	<UPX> Trying to recover Import...
65392	1025	<UPX> (200h)تحذير!"ترويسة الملف الاصلي.سحر"=0 استعمال القيمة الاصلية
65393	1025	<UPX> (200h)تحذير!"ترويسة الملف الاصلي.محاذاة ملف"=0 استعمال القيمة الاصلية
65394	1025	<UPX> ...ازالة الترشيح
65395	1025	<UPX> !مرشح غير مدعوم
65396	1025	<UPX> ...اعادة بناء الصورة
65397	1025	<UPX> !PE فشل في استعادة ترويسة ملف
65398	1025	<UPX> بايت %d %-9s القسم
65399	1025	<UPX> ...ترويسة الملف الاصلية ضائعة . محاولة الاسترداد
65400	1025	<UPX> ...هوية المرشح و طول الترميز ضائع!محاولة الايجادi (21h .. 29h, 36h, 46h, 49h الاصلية (للمرشحات CTO
65401	1025	<UPX> هوية المرشحو طول الترميزi(21h .. 29h, 36h, 46h, 49h للمرشحات) CTO فشل في ايجاد
65402	1025	<UPX> فشل في استعادة الملف
65403	1025	<UPX> CTO (for filters 21h .. 29h, 36h, 46h, 49h): %.2xh
65404	1025	<UPX> ...فقدان نقطة الدخول الاصلية ! محاولة الايجاد
65405	1025	<UPX> %.8xh:نقطة دخول اصلية
65406	1025	<UPX> ...فشل في ايجاد نقطة الدخول الاصلية! تحويلها الى صفر
65407	1025	<UPX> ...محاولة استرجاع المستوردات
65392	1031	<UPX> Warnung! "OriginalPEHeader.Magic" = 0. Benutze Standardwert (PE32).
65393	1031	<UPX> Warnung! "OriginalPEHeader.FileAlignment" = 0. Benutze Standardwert (200h).
65394	1031	<UPX> Filter entfernen...
65395	1031	<UPX> Nicht unterstützter Filter!
65396	1031	<UPX> Image neu aufbauen...
65397	1031	<UPX> Konnte den PE Dateiheader nicht wiederherstellen!
65398	1031	<UPX> Bereich: %-9s %d Bytes
65399	1031	<UPX> Original PE Dateiheader verloren! Es wird versucht diesen wiederherzustellen...
65400	1031	<UPX> Ursprünglichen CTO (für Filter 21h .. 29h, 36h, 46h, 49h), Filter ID und Code Länge verloren! Es wird versucht diese zu finden...
65401	1031	<UPX> Konnte CTO (für Filters 21h .. 29h, 36h, 46h, 49h), Filter ID und Code Länge nicht finden!
65402	1031	<UPX> Konnte die Datei nicht wiederherstellen
65403	1031	<UPX> CTO (für Filter 21h .. 29h, 36h, 46h, 49h): %.2xh
65404	1031	<UPX> Ursprünglichen Einstiegspunkt verloren! Es wird versucht diesen zu finden...
65405	1031	<UPX> Ursprünglicher Einstiegspunkt: %.8xh
65406	1031	<UPX> Konnte den ursprünglichen Einstiegspunkt nicht finden. Daher wird er auf 0 (Null) gesetzt...
65407	1031	<UPX> Versuche den Import wiederherzustellen...
65392	1034	<UPX> Alerta! "OriginalPEHeader.Magic" = 0. Usando valor predefinido (PE32).
65393	1034	<UPX> Alerta! "OriginalPEHeader.FileAlignment" = 0. Usando valor predefinido (200h).
65394	1034	<UPX> Desfiltrando...
65395	1034	<UPX> Filtro no soportado!
65396	1034	<UPX> Reconstruyendo Imagen...
65397	1034	<UPX> Falla al recuperar cabecera PE del archivo!
65398	1034	<UPX> Sección: %-9s %d bytes
65399	1034	<UPX> Cabecera PE original del archivo perdida! Intentado recuperar...
65400	1034	<UPX> CTO Original (para filtros 21h .. 29h, 36h, 46h, 49h), Filter ID y Code Length perdidos! Intentando hallarlos...
65401	1034	<UPX> Falla al hallar CTO (para filtros 21h .. 29h, 36h, 46h, 49h), Filter ID y Code Length!
65402	1034	<UPX> Falla al recuperar el archivo
65403	1034	<UPX> CTO (para filtros 21h .. 29h, 36h, 46h, 49h): %.2xh
65404	1034	<UPX> EntryPoint Original perdido! Intentado hallarlo...
65405	1034	<UPX> EntryPoint Original: %.8xh
65406	1034	<UPX> Falla al buscar el EntryPoint original! Establecido a cero...
65407	1034	<UPX> Probando recuperar Import...
65392	1036	<UPX> Attention! "OriginalPEHeader.Magic" = 0. Utilise la valeur par défaut (PE32).
65393	1036	<UPX> Attention! "OriginalPEHeader.FileAlignment" = 0. Utilise la valeur par défaut (200h).
65394	1036	<UPX> Enlever le filtre...
65395	1036	<UPX> Filtre non supporté!
65396	1036	<UPX> Reconstruction de l'Image...
65397	1036	<UPX> Echec de récupération de l'en-tête PE du fichier!
65398	1036	<UPX> Section: %-9s %d octets
65399	1036	<UPX> Perte de l'ent-tête PE du fichier Original! Essayer de la récupérer...
65400	1036	<UPX> CTO Original (pour les filtres 21h .. 29h, 36h, 46h, 49h), ID Filtre et Longueur de Code perdues! Essayer de les retrouver...
65401	1036	<UPX> CTO introuvable (pour les filtres 21h .. 29h, 36h, 46h, 49h), ID Filtre et Longueur de Code!
65402	1036	<UPX> La récupération du fichier a échoué
65403	1036	<UPX> CTO (pour les filtres 21h .. 29h, 36h, 46h, 49h): %.2xh
65404	1036	<UPX> Point d'Entrée Original perdu! Essayer de le retrouver...
65405	1036	<UPX> Point d'Entrée Original: %.8xh
65406	1036	<UPX> Point d'Entrée Original introuvable! Le mettre à zéro...
65407	1036	<UPX> Essai de récupérer l'Importation...
65392	1040	<UPX> Attenzione! "OriginalPEHeader.Magic" = 0. Utilizzo del valore di default (PE32).
65393	1040	<UPX> Attenzione! "OriginalPEHeader.FileAlignment" = 0. Utilizzo del valore di default (200h).
65394	1040	<UPX> Defiltraggio...
65395	1040	<UPX> Filtro non supportato!
65396	1040	<UPX> Riassemblaggio Immagine...
65397	1040	<UPX> Impossibile ripristinare l'intestazione del file PE!
65398	1040	<UPX> Sezione: %-9s %d byte
65399	1040	<UPX> Intestazione del file PE persa! Tentativo di ripristino...
65400	1040	<UPX> CTO iniziale (filtri 21h .. 29h, 36h, 46h, 49h), Filtro ID e lunghezza del Codice persi! Tentativo di ricerca...
65401	1040	<UPX> Impossibile trovate CTO (filtri 21h .. 29h, 36h, 46h, 49h), Filtro ID e lunghezza del Codice!
65402	1040	<UPX> Impossibile ripristinare il file.
65403	1040	<UPX> CTO (filtri 21h .. 29h, 36h, 46h, 49h): %.2xh
65404	1040	<UPX> Entry Point iniziale perso! Tentativo di ricerca...
65405	1040	<UPX> Entry Point iniziale: %.8xh
65406	1040	<UPX> Impossibile trovare l'Entry Point iniziale! Impostazione automatica a zero...
65407	1040	<UPX> Tentativo di ripristino di Importa...
65392	1043	<UPX> Waarschuwing! "OriginalPEHeader.Magic" = 0. Standaard waarde wordt gebruikt (PE32).
65393	1043	<UPX> Waarschuwing! "OriginalPEHeader.FileAlignment" = 0. Standaard waarde wordt gebruikt (200h).
65394	1043	<UPX> Ontfilteren...
65395	1043	<UPX> Niet ondersteunde filter!
65396	1043	<UPX> Herbouwen Image...
65397	1043	<UPX> Herstellen van het PE bestands header niet gelukt!
65398	1043	<UPX> Section: %-9s %d bytes
65399	1043	<UPX> Origineel PE bestands header kwijt! Poging om te herstellen...
65400	1043	<UPX> Origineel CTO (voor filters 21h .. 29h, 36h, 46h, 49h), Filter ID en Code lengte kwijt! Poging om te vinden...
65401	1043	<UPX> Niet gelukt om CTO (voor filters 21h .. 29h, 36h, 46h, 49h), Filter ID en Code lengte te vinden!
65402	1043	<UPX> Niet gelukt om het bestand te herstellen.
65403	1043	<UPX> CTO (voor filters 21h .. 29h, 36h, 46h, 49h): %.2xh
65404	1043	<UPX> Oorspronkelijk Entry Point verloren! Poging om te vinden...
65405	1043	<UPX> Oorspronkelijk Entry Point: %.8xh
65406	1043	<UPX> Niet gelukt om het oorspronkelijk Entry Point te herstellen! Aangepast naar nul...
65407	1043	<UPX> Poging tot herstel van Import...
65392	1046	<UPX> Aviso! "OriginalPEHeader.Magic" = 0. Usa valor padrão (PE32).
65393	1046	<UPX> Aviso! "OriginalPEHeader.FileAlignment" = 0. Usa valor padrão (200h).
65394	1046	<UPX> Não filtrado...
65395	1046	<UPX> Filtro não suportado!
65396	1046	<UPX> Reconstruindo imagem...
65397	1046	<UPX> Falha ao recuperar o arquivo PE cabeçalho!
65398	1046	<UPX> Seção: %-9s %d bytes
65399	1046	<UPX> Arquivo original PE cabeçalho perdido! Tentando recuperar...
65400	1046	<UPX> Original CTO (para filtros 21h .. 29h, 36h, 46h, 49h), Filtro ID e tamanho do código perdido! Tentando encontrar...
65401	1046	<UPX> Falha ao procurar CTO (para filtros 21h .. 29h, 36h, 46h, 49h), Filtro ID e tamanho do código!
65402	1046	<UPX> Falha ao recuperar o arquivo.
65403	1046	<UPX> CTO (para filtros 21h .. 29h, 36h, 46h, 49h): %.2xh
65404	1046	<UPX> Original EntryPoint perdido! Tentando encontrar...
65405	1046	<UPX> Ponto de entrada original: %.8xh
65406	1046	<UPX> Falha ao encontrar o EntryPoint original! Ajuste para zero...
65407	1046	<UPX> Tentando recuperar importação...
65408	0	<UPX> Filter ID: %.2xh
65409	0	<UPX> CTO (for filters 21h .. 29h, 36h, 46h, 49h): %.2xh
65410	0	<UPX> Link checksum: From the header = %.2xh
65411	0	<UPX> Link checksum: Calculated = %.2xh
65412	0	<UPX> The file probably may be truncated, or not completely downloaded from the Internet!
65413	0	<UPX> Compressed adler32: From the header = %.8xh
65414	0	<UPX> Compressed adler32: Calculated = %.8xh
65415	0	<UPX> Trying to unscramble...
65416	0	<UPX> Compressed adler32 from the header and calculated adler32 mismatched!
65417	0	<UPX> Unscrambled adler32: Calculated = %.8xh
65418	0	<UPX> Decompressing...
65419	0	<UPX> Uncompressed adler32: From the header = %.8xh
65420	0	<UPX> Uncompressed adler32: Calculated = %.8xh
65421	0	<UPX> Uncompressed adler32 from the header and calculated adler32 mismatched!
65422	0	<UPX> Warning! "InputFilePEHeader.FileAlignment" = 0. Using default value (200h).
65423	0	<UPX> File has an original PE header (can be recovered).
65408	1025	<UPX> %.2xh :هوية المرشح
65409	1025	<UPX> CTO (for filters 21h .. 29h, 36h, 46h, 49h): %.2xh
65410	1025	<UPX> %.2xh = ارتباط نقطة التحقق: من الترويسة
65411	1025	<UPX> %.2xh = ارتباط نقطة التحقق: حساب
65412	1025	<UPX> !الملف يمكن ان يكون مقطوع او غير محمل بشكل كامل من الانترنت
65413	1025	<UPX> %.8xh = مضغوط: من الترويسة adler32
65414	1025	<UPX> %.8xh = مضغوط: محسوب adler32
65415	1025	<UPX> ...محاولة فك التشفير
65416	1025	<UPX> !غير متطابق adler32 مضغوط من الترويسة و محسوب adler32
65417	1025	<UPX> %.8xh = غير مشفر: محسوب adler32
65418	1025	<UPX> ...فك ضغط
65419	1025	<UPX> %.8xh = غير مضغوط: من الترويسة adler32
65420	1025	<UPX> %.8xh = غير مضغوط: محسوب adler32
65421	1025	<UPX> !غير متطابق adler32 غير مضغوط من الترويسة و محسوب adler32
65422	1025	<UPX> (200h)تحذير!"ترويسة مدخل ملف.محاذاة ملف"=0 استعمال القيمة الاصلية
65423	1025	<UPX> (اصلية (يمكن استعادتها PE الملف يحوي ترويسة
65408	1031	<UPX> Filter ID: %.2xh
65409	1031	<UPX> CTO (für Filter 21h .. 29h, 36h, 46h, 49h): %.2xh
65410	1031	<UPX> Link Prüfsumme: Aus dem Header = %.2xh
65411	1031	<UPX> Link Prüfsumme: Berechnet = %.2xh
65412	1031	<UPX> Die Datei ist vermutlich unvollständig, oder wurde nicht vollständig aus dem Internet heruntergeladen!
65413	1031	<UPX> Komprimiert adler32: Aus dem Header = %.8xh
65414	1031	<UPX> Komprimiert adler32: Berechnet = %.8xh
65415	1031	<UPX> Versuche zu entschlüsseln...
65416	1031	<UPX> Komprimierte adler32 aus dem Header und Berechnete adler32 stimmen nicht überen!
65417	1031	<UPX> Untschlüsselte adler32: Berechnet = %.8xh
65418	1031	<UPX> Entpacken...
65419	1031	<UPX> Entpackte adler32: Aus dem Header = %.8xh
65420	1031	<UPX> Entpackte adler32: Berechnet = %.8xh
65421	1031	<UPX> Entpackte adler32 aus dem Header und Berechnete adler32 stimmen nicht überein!
65422	1031	<UPX> Warnung! "InputFilePEHeader.FileAlignment" = 0. Benutze Standardwert (200h).
65423	1031	<UPX> Datei hat einen Original PE Header (kann wiederhergestellt werden).
65408	1034	<UPX> ID de filtro: %.2xh
65409	1034	<UPX> CTO (para filtros 21h .. 29h, 36h, 46h, 49h): %.2xh
65410	1034	<UPX> Link checksum: Desde cabecera = %.2xh
65411	1034	<UPX> Link checksum: Calculado = %.2xh
65412	1034	<UPX> Archivo posiblemente truncado, o descargado incompleto desde Internet!
65413	1034	<UPX> adler32 comprimido: Desde cabecera = %.8xh
65414	1034	<UPX> adler32 comprimido: Calculado = %.8xh
65415	1034	<UPX> Probando reorganizar...
65416	1034	<UPX> adler32 comprimido desde cabecera y adler32 calculado diferentes!
65417	1034	<UPX> adler32 reorganizado: Calculado = %.8xh
65418	1034	<UPX> Descomprimiendo...
65419	1034	<UPX> adler32 descomprimido: Desde cabecera = %.8xh
65420	1034	<UPX> adler32 descomprimido: Calculado = %.8xh
65421	1034	<UPX> adler32 descomprimido desde cabecera y adler32 calculado diferentes!
65422	1034	<UPX> Alerta! "InputFilePEHeader.FileAlignment" = 0. Usando valor predefinido (200h).
65423	1034	<UPX> El archivo tiene una cabecera PE original (puede recuperarse).
65408	1036	<UPX> ID filtré: %.2xh
65409	1036	<UPX> CTO (pour les filtres 21h .. 29h, 36h, 46h, 49h): %.2xh
65410	1036	<UPX> Lien checksum: A partir de l'en-tête = %.2xh
65411	1036	<UPX> Lien checksum: Calculé = %.2xh
65412	1036	<UPX> Le fichier est peut être tronqué ou son téléchargement a été interrompu!
65413	1036	<UPX> Compressed adler32: A partir de l'en-tête = %.8xh
65414	1036	<UPX> Compressed adler32: Calculé = %.8xh
65415	1036	<UPX> Essai de déchiffrage...
65416	1036	<UPX> adler32 compressé à partir de l'en-tête et adler32 calculé non correspondant!
65417	1036	<UPX> adler32 décodé: Calculé = %.8xh
65418	1036	<UPX> Décompression...
65419	1036	<UPX> adler32 décompressé: A partir de l'en-tête = %.8xh
65420	1036	<UPX> adler32 décompressé: Calculé = %.8xh
65421	1036	<UPX> adler32 décompressé à partir de l'en-tête et adler32 calculé non correspondant!
65422	1036	<UPX> Attention! "InputFilePEHeader.FileAlignment" = 0. Utilise la valeur par défaut (200h).
65423	1036	<UPX> Le fichier a un en-tête PE original (peut être récupéré).
65408	1040	<UPX> Filtro ID: %.2xh
65409	1040	<UPX> CTO (filtri 21h .. 29h, 36h, 46h, 49h): %.2xh
65410	1040	<UPX> Checksum del link: Dall'intestazione = %.2xh
65411	1040	<UPX> Checksum del link: Calcolato = %.2xh
65412	1040	<UPX> Il file è probabilmente troncato, oppure non è stato scaricato completamente da internet.
65413	1040	<UPX> Adler32 compresso: Dall'intestazione = %.8xh
65414	1040	<UPX> Adler32 compresso: Calcolato = %.8xh
65415	1040	<UPX> Tentativo di decifrazione...
65416	1040	<UPX> L'adler32 compresso dell'intestazione e l'adler32 calcolato non coincidono!
65417	1040	<UPX> Adler32 decodificato: Calcolato = %.8xh
65418	1040	<UPX> Decompressione...
65419	1040	<UPX> Adler32 non compresso: Dall'intestazione = %.8xh
65420	1040	<UPX> Adler32 non compresso: Calcolato = %.8xh
65421	1040	<UPX> L'adler32 non compresso dell'intestazione e l'adler32 calcolato non coincidono!
65422	1040	<UPX> Attenzione! "InputFilePEHeader.FileAlignment" = 0. Utilizzo del valore di default (200h).
65423	1040	<UPX> Il file ha un'intestazione PE originaria (ripristinabile).
65408	1043	<UPX> Filter ID: %.2xh
65409	1043	<UPX> CTO (voor filters 21h .. 29h, 36h, 46h, 49h): %.2xh
65410	1043	<UPX> Link checksum: Uit het header = %.2xh
65411	1043	<UPX> Link checksum: Berekend = %.2xh
65412	1043	<UPX> Het bestand is waarschijnlijk beschadigd, of niet geheel gedownload vanaf het Internet!
65413	1043	<UPX> Gecomprimeerde adler32: Uit het header = %.8xh
65414	1043	<UPX> Gecomprimeerde adler32: Berekend = %.8xh
65415	1043	<UPX> Poging tot ontcijferen...
65416	1043	<UPX> Gecomprimeerde adler32 uit het header en berekende adler32 komen niet overeen!
65417	1043	<UPX> Ontcijferde adler32: Berekend = %.8xh
65418	1043	<UPX> Decomprimeren...
65419	1043	<UPX> Ongecomprimeerde adler32: Uit het header = %.8xh
65420	1043	<UPX> Ongecomprimeerde adler32: Berekend = %.8xh
65421	1043	<UPX> Gecomprimeerde adler32 uit het header en berekende adler32 komen niet overeen!
65422	1043	<UPX> Waarschuwing! "InputFilePEHeader.FileAlignment" = 0. Standaard waarde wordt gebruikt (200h).
65423	1043	<UPX> Bestand heeft een originele PE header (kan hersteld worden).
65408	1046	<UPX> Filtro ID: %.2xh
65409	1046	<UPX> CTO (para filtros 21h .. 29h, 36h, 46h, 49h): %.2xh
65410	1046	<UPX> Link checksum: do cabeçalho = %.2xh
65411	1046	<UPX> Link checksum: calculado = %.2xh
65412	1046	<UPX> O arquivo provavelmente pode estar truncado, ou não foi completamente baixado da Internet!
65413	1046	<UPX> Comprimido adler32: Do cabeçalho = %.8xh
65414	1046	<UPX> Comprimido adler32: Calculado = %.8xh
65415	1046	<UPX> Tentando ordenar...
65416	1046	<UPX> adler32 comprimido do cabeçalho e adler32 calculado não combinam!
65417	1046	<UPX> adler32 ordenado: Calculado = %.8xh
65418	1046	<UPX> Descomprimindo...
65419	1046	<UPX> adler32 descomprimido: Do cabeçalho = %.8xh
65420	1046	<UPX> adler32 descomprimido: Calculado = %.8xh
65421	1046	<UPX> adler32 descomprimido do cabeçalho e adler32 calculado não combinam!
65422	1046	<UPX> Aviso! "InputFilePEHeader.FileAlignment" = 0. Usa valor padrão (200h).
65423	1046	<UPX> Arquivo tem um cabeçalho original PE (pode ser recuperado).
65424	0	Runtime error: PexPreloadImage
65425	0	Unknown (%d)
65426	0	<UPX> --- File opening canceled ---
65427	0	<UPX> File compressed with UPX
65428	0	<UPX> UPX version: %d
65429	0	<UPX> Crafty modification to UPX header detected!
65430	0	<UPX> UPX Version > 13
65431	0	<UPX> A newer version of UPX Unpacker is required!
65432	0	<UPX> File type: %s
65433	0	<UPX> Only win32/PE files are supported!
65434	0	<UPX> Compression method: %s
65435	0	<UPX> Only "NRV2B_LE32", "NRV2D_LE32", "NRV2E_LE32" or "LZMA" compression methods are supported!
65436	0	<UPX> Compression level: %d
65437	0	<UPX> Uncompressed size: %d bytes
65438	0	<UPX> Compressed size: %d bytes
65439	0	<UPX> Original file size: %d bytes
65424	1025	خطأ تشغيلي: قبل تحميل صورة البكس
65425	1025	(%d)غير معروف
65426	1025	<UPX> --- الغي فتح الملف ---
65427	1025	<UPX> UPX الملف مضغوط بــ
65428	1025	<UPX> %d :UPX اصدار
65429	1025	<UPX> !قد وجدت UPX تعديل يدوي لترويسة
65430	1025	<UPX> 13 < UPX اصدار
65431	1025	<UPX> !مطلوب UPX اصدار جديد من فك ضغط
65432	1025	<UPX> %s :نوع ملف
65433	1025	<UPX> !مدعومة win32/PE فقط
65434	1025	<UPX> %s:نوع الضغط
65435	1025	<UPX> !مدعومة "NRV2B_LE32", "NRV2D_LE32", "NRV2E_LE32", "LZMA" فقط طرق الضغط هذه
65436	1025	<UPX> %d:مستوى الضغط
65437	1025	<UPX> بايت %d :الحجم الغير مضغوط
65438	1025	<UPX> بايت %d :الحجم مضغوط
65439	1025	<UPX> بايت %d :حجم الملف الاصلي
65424	1031	Laufzeitfehler: PexPreloadImage
65425	1031	Unbekannt (%d)
65426	1031	<UPX> --- Öffnen der Datei abgebrochen ---
65427	1031	<UPX> Datei ist mit UPX komprimiert
65428	1031	<UPX> UPX Version: %d
65429	1031	<UPX> Hinterlistige Veränderungen im UPX Header entdeckt!
65430	1031	<UPX> UPX Version > 13
65431	1031	<UPX> Eine neuere Version des UPX Unpackers wird benötigt!
65432	1031	<UPX> Dateityp: %s
65433	1031	<UPX> Es werden nur win32/PE Dateien unterstützt!
65434	1031	<UPX> Kompressionsmethode: %s
65435	1031	<UPX> Es werden nur die Kompressionsmethoden "NRV2B_LE32", "NRV2D_LE32", "NRV2E_LE32" oder "LZMA" unterstützt!
65436	1031	<UPX> Komprimierungsgrad: %d
65437	1031	<UPX> Entpackte Größe: %d Bytes
65438	1031	<UPX> Komprimierte Größe: %d Bytes
65439	1031	<UPX> Ursprüngliche Dateigröße: %d Bytes
65424	1034	Runtime error: PexPreloadImage
65425	1034	Desconocido (%d)
65426	1034	<UPX> --- Apertura de archivo cancelada ---
65427	1034	<UPX> Archivo comprimido con UPX
65428	1034	<UPX> Versión de UPX: %d
65429	1034	<UPX> Modificación sospechosa de cabecera UPX detectada!
65430	1034	<UPX> Versión de UPX > 13
65431	1034	<UPX> Requiere una versión actualizada de UPX Unpacker!
65432	1034	<UPX> Tipo de archivo: %s
65433	1034	<UPX> Solo soporta archivos win32/PE!
65434	1034	<UPX> Método de compresión: %s
65435	1034	<UPX> Solo métodos de compresión "NRV2B_LE32", "NRV2D_LE32", "NRV2E_LE32" o "LZMA" están soportados!
65436	1034	<UPX> Nivel de compresión: %d
65437	1034	<UPX> Tamaño sin comprimir: %d bytes
65438	1034	<UPX> Tamaño comprimido: %d bytes
65439	1034	<UPX> Tamaño original del archivo: %d bytes
65424	1036	Erreur pendant l'exécution: PexPreloadImage
65425	1036	Inconnu (%d)
65426	1036	<UPX> --- Ouverture du fichier annulée ---
65427	1036	<UPX> Fichier compressé avec UPX
65428	1036	<UPX> Version UPX: %d
65429	1036	<UPX> Modification astucieuse d'en-tête UPX détectée!
65430	1036	<UPX> Version UPX > 13
65431	1036	<UPX> Une version plus récente du décompresseur UPX est nécessaire!
65432	1036	<UPX> Type de fichier: %s
65433	1036	<UPX> Seuls les fichiers win32/PE sont supportés!
65434	1036	<UPX> Méthode de compression: %s
65435	1036	<UPX> Seules les méthodes de compression "NRV2B_LE32", "NRV2D_LE32", "NRV2E_LE32" ou "LZMA" sont supportées!
65436	1036	<UPX> Niveau de Compression: %d
65437	1036	<UPX> Taille décompressée: %d octets
65438	1036	<UPX> Taille compressée: %d octets
65439	1036	<UPX> Taille du fichier original: %d octets
65424	1040	Errore d'esecuzione: PexPreloadImage
65425	1040	Sconosciuto (%d)
65426	1040	<UPX> --- Apertura del file annullata ---
65427	1040	<UPX> File compresso con UPX
65428	1040	<UPX> Versione UPX: %d
65429	1040	<UPX> Trovata manomissione nell'intestazione del file UPX!
65430	1040	<UPX> Versione UPX > 13
65431	1040	<UPX> Necessaria una versione più aggiornata di UPX Unpacker!
65432	1040	<UPX> Tipo del file: %s
65433	1040	<UPX> Solamente file win32/PE sono supportati!
65434	1040	<UPX> Metodo di compressione: %s
65435	1040	<UPX> Solo i metodi di compressione "NRV2B_LE32", "NRV2D_LE32", "NRV2E_LE32" o "LZMA" sono supportati!
65436	1040	<UPX> Livello di compressione: %d
65437	1040	<UPX> Grandezza del file non compresso: %d byte
65438	1040	<UPX> Grandezza del file compresso: %d byte
65439	1040	<UPX> Grandezza del file originaria: %d byte
65424	1043	Runtime fout: PexPreloadImage
65425	1043	Onbekend (%d)
65426	1043	<UPX> --- Bestandsopening is geannuleerd ---
65427	1043	<UPX> Bestand is gecomprimeerd met UPX
65428	1043	<UPX> UPX versie: %d
65429	1043	<UPX> Modificaties van UPX header ontdekt!
65430	1043	<UPX> UPX Versie > 13
65431	1043	<UPX> Een nieuwere versie van UPX Unpacker is vereist!
65432	1043	<UPX> Bestand type: %s
65433	1043	<UPX> Alleen win32/PE bestanden worden ondersteund!
65434	1043	<UPX> Compressie methode: %s
65435	1043	<UPX> Alleen "NRV2B_LE32", "NRV2D_LE32", "NRV2E_LE32" or "LZMA" compressie methoden worden ondersteund!
65436	1043	<UPX> Compressie niveau: %d
65437	1043	<UPX> Ongecomprimeerde grootte: %d bytes
65438	1043	<UPX> Gecomprimeerde grootte: %d bytes
65439	1043	<UPX> Oorspronkelijke bestandsgrootte: %d bytes
65424	1046	Erro de tempo de execução: PexPreloadImage
65425	1046	Desconhecido (%d)
65426	1046	<UPX> --- Abertura do arquivo cancelada ---
65427	1046	<UPX> Arquivo compactado com UPX
65428	1046	<UPX> Versão UPX : %d
65429	1046	<UPX> Modificação para cabeçalho UPX detectado!
65430	1046	<UPX> Versão UPX > 13
65431	1046	<UPX> Requer uma nova versão do descompactador UPX!
65432	1046	<UPX> Arquivo tipo: %s
65433	1046	<UPX> Somente arquivos win32/PE são suportados!
65434	1046	<UPX> Método de compressão: %s
65435	1046	<UPX> Métodos de compressão suportados, somente "NRV2B_LE32", "NRV2D_LE32", "NRV2E_LE32" ou "LZMA"
65436	1046	<UPX> Nível de compressão: %d
65437	1046	<UPX> Tamanho da descompressão: %d bytes
65438	1046	<UPX> Tamanho da compressão: %d bytes
65439	1046	<UPX> Tamanho original do arquivo: %d bytes
65440	0	Saturday
65441	0	Cannot assign a %s to a %s
65442	0	Cannot create file %s
65443	0	Cannot open file %s
65444	0	Stream read error
65445	0	Stream write error
65446	0	Out of memory while expanding memory stream
65447	0	List index out of bounds (%d)
65448	0	List capacity out of bounds (%d)
65449	0	List count out of bounds (%d)
65450	0	Operation not allowed on sorted string list
65451	0	String list does not allow duplicates
65452	0	Invalid property value
65453	0	UPX Unpacker Plug-in
65454	0	UPX Unpacker Plug-in. Version %s © 2000-2009 Heaventools Software. All rights reserved. http://www.heaventools.com UPX © 1996-2009 Markus F.X.J. Oberhumer, Laszlo Molnar & John F. Reiser http://upx.sourceforge.net
65455	0	Executing...
65440	1025	Saturday
65441	1025	Cannot assign a %s to a %s
65442	1025	Cannot create file %s
65443	1025	Cannot open file %s
65444	1025	Stream read error
65445	1025	Stream write error
65446	1025	Out of memory while expanding memory stream
65447	1025	List index out of bounds (%d)
65448	1025	List capacity out of bounds (%d)
65449	1025	List count out of bounds (%d)
65450	1025	Operation not allowed on sorted string list
65451	1025	String list does not allow duplicates
65452	1025	Invalid property value
65453	1025	UPX اضافة فك ضغط
65454	1025	UPX Unpacker اضافة. اصدار %s © 2000-2009 Heaventools Software. كل الحقوق محفوظة. http://www.heaventools.com UPX © 1996-2009 Markus F.X.J. Oberhumer, Laszlo Molnar & John F. Reiser http://upx.sourceforge.net
65455	1025	...تنفيذ
65440	1031	Saturday
65441	1031	Cannot assign a %s to a %s
65442	1031	Cannot create file %s
65443	1031	Cannot open file %s
65444	1031	Stream read error
65445	1031	Stream write error
65446	1031	Out of memory while expanding memory stream
65447	1031	List index out of bounds (%d)
65448	1031	List capacity out of bounds (%d)
65449	1031	List count out of bounds (%d)
65450	1031	Operation not allowed on sorted string list
65451	1031	String list does not allow duplicates
65452	1031	Invalid property value
65453	1031	UPX Entpacker Plug-in
65454	1031	UPX Entpacker Plug-in. Version %s © 2000-2009 Heaventools Software. All rights reserved. http://www.heaventools.com UPX © 1996-2009 Markus F.X.J. Oberhumer, Laszlo Molnar & John F. Reiser http://upx.sourceforge.net
65455	1031	Ausführen...
65440	1034	Saturday
65441	1034	Cannot assign a %s to a %s
65442	1034	Cannot create file %s
65443	1034	Cannot open file %s
65444	1034	Stream read error
65445	1034	Stream write error
65446	1034	Out of memory while expanding memory stream
65447	1034	List index out of bounds (%d)
65448	1034	List capacity out of bounds (%d)
65449	1034	List count out of bounds (%d)
65450	1034	Operation not allowed on sorted string list
65451	1034	String list does not allow duplicates
65452	1034	Invalid property value
65453	1034	UPX Unpacker Plug-in
65454	1034	UPX Unpacker Plug-in. Version %s © 2000-2009 Heaventools Software. Todos los derechos reservados. http://www.heaventools.com UPX © 1996-2009 Markus F.X.J. Oberhumer, Laszlo Molnar & John F. Reiser http://upx.sourceforge.net
65455	1034	Ejecutando...
65440	1036	Saturday
65441	1036	Cannot assign a %s to a %s
65442	1036	Cannot create file %s
65443	1036	Cannot open file %s
65444	1036	Stream read error
65445	1036	Stream write error
65446	1036	Out of memory while expanding memory stream
65447	1036	List index out of bounds (%d)
65448	1036	List capacity out of bounds (%d)
65449	1036	List count out of bounds (%d)
65450	1036	Operation not allowed on sorted string list
65451	1036	String list does not allow duplicates
65452	1036	Invalid property value
65453	1036	UPX Unpacker Plug-in
65454	1036	UPX Unpacker Plug-in. Version %s © 2000-2009 Heaventools Software. Tous droits reservés. http://www.heaventools.com UPX © 1996-2009 Markus F.X.J. Oberhumer, Laszlo Molnar & John F. Reiser http://upx.sourceforge.net
65455	1036	Exécution...
65440	1040	Saturday
65441	1040	Cannot assign a %s to a %s
65442	1040	Cannot create file %s
65443	1040	Cannot open file %s
65444	1040	Stream read error
65445	1040	Stream write error
65446	1040	Out of memory while expanding memory stream
65447	1040	List index out of bounds (%d)
65448	1040	List capacity out of bounds (%d)
65449	1040	List count out of bounds (%d)
65450	1040	Operation not allowed on sorted string list
65451	1040	String list does not allow duplicates
65452	1040	Invalid property value
65453	1040	UPX Unpacker Plug-in
65454	1040	UPX Unpacker Plug-in. Version %s © 2000-2009 Heaventools Software. Tutti i diritti riservati. http://www.heaventools.com UPX © 1996-2009 Markus F.X.J. Oberhumer, Laszlo Molnar & John F. Reiser http://upx.sourceforge.net
65455	1040	Esecuzione...
65440	1043	Saturday
65441	1043	Cannot assign a %s to a %s
65442	1043	Cannot create file %s
65443	1043	Cannot open file %s
65444	1043	Stream read error
65445	1043	Stream write error
65446	1043	Out of memory while expanding memory stream
65447	1043	List index out of bounds (%d)
65448	1043	List capacity out of bounds (%d)
65449	1043	List count out of bounds (%d)
65450	1043	Operation not allowed on sorted string list
65451	1043	String list does not allow duplicates
65452	1043	Invalid property value
65453	1043	UPX Unpacker Plug-in
65454	1043	UPX Uitpakker Plug-in. Versie %s © 2000-2009 Heaventools Software. Alle rechten voorbehouden. http://www.heaventools.com UPX © 1996-2009 Markus F.X.J. Oberhumer, Laszlo Molnar & John F. Reiser http://upx.sourceforge.net
65455	1043	Bezig met uitvoeren...
65440	1046	Saturday
65441	1046	Cannot assign a %s to a %s
65442	1046	Cannot create file %s
65443	1046	Cannot open file %s
65444	1046	Stream read error
65445	1046	Stream write error
65446	1046	Out of memory while expanding memory stream
65447	1046	List index out of bounds (%d)
65448	1046	List capacity out of bounds (%d)
65449	1046	List count out of bounds (%d)
65450	1046	Operation not allowed on sorted string list
65451	1046	String list does not allow duplicates
65452	1046	Invalid property value
65453	1046	UPX Descompactador Plug-in
65454	1046	UPX Descompactador Plug-in. Versão %s © 2000-2009 Heaventools Software. Todos os direitos reservados. http://www.heaventools.com UPX © 1996-2009 Markus F.X.J. Oberhumer, Laszlo Molnar & John F. Reiser http://upx.sourceforge.net
65455	1046	Executando...
65456	0	October
65457	0	November
65458	0	December
65459	0	Sun
65460	0	Mon
65461	0	Tue
65462	0	Wed
65463	0	Thu
65464	0	Fri
65465	0	Sat
65466	0	Sunday
65467	0	Monday
65468	0	Tuesday
65469	0	Wednesday
65470	0	Thursday
65471	0	Friday
65472	0	Jun
65473	0	Jul
65474	0	Aug
65475	0	Sep
65476	0	Oct
65477	0	Nov
65478	0	Dec
65479	0	January
65480	0	February
65481	0	March
65482	0	April
65483	0	May
65484	0	June
65485	0	July
65486	0	August
65487	0	September
65488	0	Variant is not an array
65489	0	Variant array index out of bounds
65490	0	External exception %x
65491	0	Assertion failed
65492	0	Interface not supported
65493	0	Exception in safecall method
65494	0	%s (%s, line %d)
65495	0	Abstract Error
65496	0	Access violation at address %p in module '%s'. %s of address %p
65497	0	Win32 Error. Code: %d. %s
65498	0	A Win32 API function failed
65499	0	Jan
65500	0	Feb
65501	0	Mar
65502	0	Apr
65503	0	May
65504	0	Invalid pointer operation
65505	0	Invalid class typecast
65506	0	Access violation at address %p. %s of address %p
65507	0	Stack overflow
65508	0	Control-C hit
65509	0	Privileged instruction
65510	0	Exception %s in module %s at %p. %s%s
65511	0	Application Error
65512	0	Format '%s' invalid or incompatible with argument
65513	0	No argument for format '%s'
65514	0	Invalid variant type conversion
65515	0	Invalid variant operation
65516	0	Variant method calls not supported
65517	0	Read
65518	0	Write
65519	0	Error creating variant array
65520	0	Out of memory
65521	0	I/O error %d
65522	0	File not found
65523	0	Invalid filename
65524	0	Too many open files
65525	0	File access denied
65526	0	Read beyond end of file
65527	0	Disk full
65528	0	Invalid numeric input
65529	0	Division by zero
65530	0	Range check error
65531	0	Integer overflow
65532	0	Invalid floating point operation
65533	0	Floating point division by zero
65534	0	Floating point overflow
65535	0	Floating point underflow

module_name	hint	ord	function_name
kernel32.dll			GetCurrentThreadId
kernel32.dll			DeleteCriticalSection
kernel32.dll			LeaveCriticalSection
kernel32.dll			EnterCriticalSection
kernel32.dll			InitializeCriticalSection
kernel32.dll			VirtualFree
kernel32.dll			VirtualAlloc
kernel32.dll			LocalFree
kernel32.dll			LocalAlloc
kernel32.dll			VirtualQuery
kernel32.dll			WideCharToMultiByte
kernel32.dll			MultiByteToWideChar
kernel32.dll			lstrlenA
kernel32.dll			lstrcpynA
kernel32.dll			lstrcpyA
kernel32.dll			LoadLibraryExA
kernel32.dll			GetThreadLocale
kernel32.dll			GetStartupInfoA
kernel32.dll			GetProcAddress
kernel32.dll			GetModuleHandleA
kernel32.dll			GetModuleFileNameA
kernel32.dll			GetLocaleInfoA
kernel32.dll			GetLastError
kernel32.dll			GetCommandLineA
kernel32.dll			FreeLibrary
kernel32.dll			FindFirstFileA
kernel32.dll			FindClose
kernel32.dll			ExitProcess
kernel32.dll			WriteFile
kernel32.dll			UnhandledExceptionFilter
kernel32.dll			SetFilePointer
kernel32.dll			SetEndOfFile
kernel32.dll			RtlUnwind
kernel32.dll			ReadFile
kernel32.dll			RaiseException
kernel32.dll			GetStdHandle
kernel32.dll			GetFileSize
kernel32.dll			GetFileType
kernel32.dll			CreateFileA
kernel32.dll			CloseHandle
user32.dll			GetKeyboardType
user32.dll			LoadStringA
user32.dll			MessageBoxA
user32.dll			CharNextA
advapi32.dll			RegQueryValueExA
advapi32.dll			RegOpenKeyExA
advapi32.dll			RegCloseKey
oleaut32.dll			VariantChangeTypeEx
oleaut32.dll			VariantCopyInd
oleaut32.dll			VariantClear
oleaut32.dll			SysStringLen
oleaut32.dll			SysFreeString
oleaut32.dll			SysReAllocStringLen
oleaut32.dll			SysAllocStringLen
kernel32.dll			TlsSetValue
kernel32.dll			TlsGetValue
kernel32.dll			TlsFree
kernel32.dll			TlsAlloc
kernel32.dll			LocalFree
kernel32.dll			LocalAlloc
kernel32.dll			GetModuleFileNameA
kernel32.dll			WriteFile
kernel32.dll			WaitForSingleObject
kernel32.dll			VirtualQuery
kernel32.dll			VirtualFree
kernel32.dll			VirtualAlloc
kernel32.dll			SetFilePointer
kernel32.dll			SetEndOfFile
kernel32.dll			ReadFile
kernel32.dll			LoadResource
kernel32.dll			LeaveCriticalSection
kernel32.dll			IsBadWritePtr
kernel32.dll			InitializeCriticalSection
kernel32.dll			GlobalUnlock
kernel32.dll			GlobalReAlloc
kernel32.dll			GlobalHandle
kernel32.dll			GlobalLock
kernel32.dll			GlobalFree
kernel32.dll			GlobalAlloc
kernel32.dll			GetVersionExA
kernel32.dll			GetThreadLocale
kernel32.dll			GetProcAddress
kernel32.dll			GetModuleHandleA
kernel32.dll			GetModuleFileNameA
kernel32.dll			GetLocaleInfoA
kernel32.dll			GetLastError
kernel32.dll			GetDiskFreeSpaceA
kernel32.dll			GetCurrentThreadId
kernel32.dll			GetCPInfo
kernel32.dll			FormatMessageA
kernel32.dll			FindResourceA
kernel32.dll			EnumCalendarInfoA
kernel32.dll			EnterCriticalSection
kernel32.dll			DeleteCriticalSection
kernel32.dll			CreateFileA
kernel32.dll			CreateEventA
kernel32.dll			CompareStringA
kernel32.dll			CloseHandle
user32.dll			MessageBoxA
user32.dll			LoadStringA
user32.dll			GetSystemMetrics
user32.dll			DestroyWindow

ord	entry_va	function_name
1	0x15dc8	PexRegisterPlugInEx
2	0x15c0c	PexAboutPlugIn
3	0x15b30	PexPreloadImage

module_name	unupx.dll
flags	0
timestamp	2009-10-14 17:47:17
version	0.0
ordinal_base	1
nFunctions	3
nNames	3
Names(3)	0x19034
Functions(3)	0x19028
NameOrdinals(3)	0x19040

StringTable 000004E3

CompanyName	Heaventools Software
FileDescription	UPX Unpacker Plug-in
FileVersion	1.92.0.98
InternalName	UPX Unpacker Plug-in
LegalCopyright	Copyright © 2000-2009 Heaventools Software
LegalTrademarks	PE Explorer is a trademark of Heaventools Software
OriginalFilename	unupx.dll
ProductName	PE Explorer
ProductVersion	1.92.0.98
Comments

VS_FIXEDFILEINFO

FileVersion	1.92.0.98
ProductVersion	1.92.0.98
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	2
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http:\/\/www.usertrust.com/CN=UTN-USERFirst-Object

serial: 9F1730A374EFEA42ED0D1B504DA8F981

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Jun 15 00:00:00 2007 GMT
            Not After : Jun 14 23:59:59 2012 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f:
                    4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62:
                    4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a:
                    0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1:
                    a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58:
                    4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3:
                    2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e:
                    de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be:
                    16:a3:63:78:69:14:7b:ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-2
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6:
        82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05:
        fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75:
        36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0:
        8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa:
        27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06:
        87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df:
        ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22:
        a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c:
        24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3:
        80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d:
        3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18:
        b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9:
        0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9:
        49:32:f2:33

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
        d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
        04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
        15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
        fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
        e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
        c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
        3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9f:17:30:a3:74:ef:ea:42:ed:0d:1b:50:4d:a8:f9:81
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Oct 25 00:00:00 2007 GMT
            Not After : Oct 24 23:59:59 2009 GMT
        Subject: C=CA/postalCode=V6H4E4, ST=BC, L=Vancouver/street=101-1001 West Broadway Dept. 381, O=Heaventools Software, CN=Heaventools Software
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:19:df:c2:14:ba:a7:3f:53:19:b6:e8:3a:
                    f8:c1:ea:6e:30:e6:32:d4:9b:30:f6:36:a9:60:f7:
                    40:5b:98:d4:5b:74:c4:14:eb:3a:bd:96:ad:76:60:
                    39:32:ed:03:1a:51:80:a9:0d:27:3f:5c:67:c4:6c:
                    79:5c:3f:4e:0a:c3:4a:e8:c8:dc:90:21:89:3f:80:
                    bb:d4:44:43:8c:3f:ed:db:8d:dd:04:fd:ed:3b:d3:
                    7b:c8:4b:04:3a:9d:74:96:34:fa:eb:ff:ed:22:b8:
                    c8:2f:13:84:08:c0:30:56:56:37:cd:3e:ae:0f:41:
                    67:18:8e:b2:a1:c1:6b:74:2c:32:38:00:f5:d0:24:
                    69:f6:cb:4b:bc:34:04:fb:c4:21:f8:3f:99:be:59:
                    21:c5:b6:60:36:6d:32:32:c0:43:f7:5d:d7:88:f4:
                    57:b1:d8:a9:bd:09:b8:06:d6:1a:e5:2d:9f:21:17:
                    27:b0:e0:d6:66:82:f8:f6:c5:25:64:05:6c:3e:eb:
                    54:f3:44:78:94:80:2c:98:69:9c:e5:bc:81:8c:45:
                    71:d3:09:c8:90:24:5a:15:85:7c:0c:85:f8:70:b4:
                    69:70:b5:52:54:13:fe:ed:a0:25:a1:b1:d6:dc:d6:
                    52:57:7c:73:b7:c2:48:5c:86:13:75:93:0b:35:ea:
                    90:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Subject Key Identifier: 
                28:A0:D8:9C:16:56:AF:04:5D:D7:6B:D6:9D:DE:B9:10:45:FA:41:E3
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl
            X509v3 Subject Alternative Name: 
                email:support@heaventools.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        92:74:6a:92:1f:ed:64:96:ac:4a:ae:82:1f:44:5d:ed:48:6a:
        8b:67:3d:6d:10:1c:55:6b:d0:6c:ae:17:64:9e:a8:72:af:13:
        5d:d4:a0:dd:41:63:fd:13:6d:c7:a9:58:c8:34:63:64:03:44:
        51:89:db:a1:1b:c8:4f:c2:a6:3e:b8:14:89:ba:f7:fd:80:94:
        d6:a6:4f:fb:6e:19:30:ae:b4:9a:a6:35:45:ef:0a:02:86:3e:
        6a:8d:62:51:e5:90:02:b6:e2:87:9f:72:45:ba:c2:54:81:d1:
        25:47:3e:a7:f8:37:ff:ea:ac:e4:cb:90:cf:c9:20:5e:be:4f:
        f9:ab:25:d1:46:4c:e7:bd:49:dd:4e:31:2f:a8:8c:55:43:bb:
        63:f8:6b:ad:fa:ab:ef:be:22:1b:7b:ed:a3:98:4c:be:f0:5d:
        50:11:78:c7:b3:74:3d:9f:2c:b1:cd:2d:18:86:6e:c8:0d:74:
        44:15:66:c4:9e:a3:41:de:c2:fa:8c:4d:92:a5:5a:4a:43:e3:
        50:8e:a8:cb:e7:f3:5a:17:70:20:22:3c:40:3f:3a:ac:bc:fc:
        53:05:a3:d2:8e:3b:a0:f4:4b:2a:a6:79:f5:e0:4e:9f:3e:8d:
        02:7d:72:24:b6:59:77:10:9e:45:2c:7c:48:da:96:fe:16:b7:
        77:70:a6:6c

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

1f 44 b4 76 fe 20 4f 75 11 61 e3 be 80 2c d7 70 |.D.v. Ou.a...,.p| 50 05 d7 03 |P... |

Certificates
- Certificate #0
  - 2
    - 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - CN: VeriSign Time Stamping Services CA
    - 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - CN: VeriSign Time Stamping Services Signer - G2
    - #5
      - rsaEncryption: nil
      - C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
        6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
        34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
        98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
        2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
        2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
        8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
        C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - basicConstraints
        true
        nil
      - crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0xc0
      - subjectAltName
        CN: TSA1-2
  - RSA-SHA1:
```
50 c5 4b c8 24 80 df e4  0d 24 c2 de 1a b1 a1 02  |P.K.$....$......|
a1 a6 82 2d 0c 83 15 81  37 0a 82 0e 2c b0 5a 17  |...-....7...,.Z.|
61 b5 d8 05 fe 88 db f1  91 91 b3 56 1a 40 a6 eb  |a..........V.@..|
92 be 38 39 b0 75 36 74  3a 98 4f e4 37 ba 99 89  |..89.u6t:.O.7...|
ca 95 42 1d b0 b9 c7 a0  8d 57 e0 fa d5 64 04 42  |..B......W...d.B|
35 4e 01 d1 33 a2 17 c8  4d aa 27 c7 f2 e1 86 4c  |5N..3...M.'....L|
02 38 4d 83 78 c6 fc 53  e0 eb e0 06 87 dd a4 96  |.8M.x..S........|
9e 5e 0c 98 e2 a5 be bf  82 85 c3 60 e1 df ad 28  |.^.........`...(|
d8 c7 a5 4b 64 da c7 1b  5b bd ac 39 08 d5 38 22  |...Kd...[..9..8"|
a1 33 8b 2f 8a 9a eb bc  07 21 3f 44 41 09 07 b5  |.3./.....!?DA...|
65 1c 24 bc 48 d3 44 80  eb a1 cf c9 02 b4 14 cf  |e.$.H.D.........|
54 c7 16 a3 80 5c f9 79  3e 5d 72 7d 88 17 9e 2c  |T....\.y>]r}...,|
43 a2 ca 53 ce 7d 3d f6  2a 3a b8 4f 94 00 a5 6d  |C..S.}=.*:.O...m|
0a 83 5d f9 5e 53 f4 18  b3 57 0f 70 c3 fb f5 ad  |..].^S...W.p....|
95 a0 0e 17 de c4 16 80  60 c9 0f 2b 6e 86 04 f1  |........`..+n...|
eb f4 78 27 d1 05 c5 ee  34 5b 5e b9 49 32 f2 33  |..x'....4[^.I2.3|
```
- Certificate #1
  - 2
    - 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - CN: VeriSign Time Stamping Services CA
    - #5
      - rsaEncryption: nil
      - A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
        4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
        33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
        EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
        94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
        FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
        E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
        5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
        57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
        E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
        BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
        6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
        1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
        1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
        F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
        0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TSA2048-1-53
  - RSA-SHA1:
```
4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
```
- Certificate #2
  - 2
    - 9F:17:30:A3:74:EF:EA:42:ED:0D:1B:50:4D:A8:F9:81
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - ST: UT
      - L: Salt Lake City
      - O: The USERTRUST Network
      - OU: http://www.usertrust.com
      - CN: UTN-USERFirst-Object
    - 2007-10-25 00:00:00 UTC: 2009-10-24 23:59:59 UTC
    - Subject
      - C: CA
      - postalCode: V6H4E4
      - ST: BC
      - L: Vancouver
      - street: 101-1001 West Broadway Dept. 381
      - O: Heaventools Software
      - CN: Heaventools Software
    - #5
      - rsaEncryption: nil
      - AF:8A:19:DF:C2:14:BA:A7:3F:53:19:B6:E8:3A:F8:C1:
        EA:6E:30:E6:32:D4:9B:30:F6:36:A9:60:F7:40:5B:98:
        D4:5B:74:C4:14:EB:3A:BD:96:AD:76:60:39:32:ED:03:
        1A:51:80:A9:0D:27:3F:5C:67:C4:6C:79:5C:3F:4E:0A:
        C3:4A:E8:C8:DC:90:21:89:3F:80:BB:D4:44:43:8C:3F:
        ED:DB:8D:DD:04:FD:ED:3B:D3:7B:C8:4B:04:3A:9D:74:
        96:34:FA:EB:FF:ED:22:B8:C8:2F:13:84:08:C0:30:56:
        56:37:CD:3E:AE:0F:41:67:18:8E:B2:A1:C1:6B:74:2C:
        32:38:00:F5:D0:24:69:F6:CB:4B:BC:34:04:FB:C4:21:
        F8:3F:99:BE:59:21:C5:B6:60:36:6D:32:32:C0:43:F7:
        5D:D7:88:F4:57:B1:D8:A9:BD:09:B8:06:D6:1A:E5:2D:
        9F:21:17:27:B0:E0:D6:66:82:F8:F6:C5:25:64:05:6C:
        3E:EB:54:F3:44:78:94:80:2C:98:69:9C:E5:BC:81:8C:
        45:71:D3:09:C8:90:24:5A:15:85:7C:0C:85:F8:70:B4:
        69:70:B5:52:54:13:FE:ED:A0:25:A1:B1:D6:DC:D6:52:
        57:7C:73:B7:C2:48:5C:86:13:75:93:0B:35:EA:90:11: 0x010001
    - #6
      - authorityKeyIdentifier:
        da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
      - subjectKeyIdentifier:
        28 a0 d8 9c 16 56 af 04 5d d7 6b d6 9d de b9 10 |(....V..].k.....| 45 fa 41 e3 |E.A. |
      - keyUsage: true, 0x80
      - basicConstraints
        true
        nil
      - extendedKeyUsage: codeSigning
      - nsCertType: 0x10
      - certificatePolicies
        1.3.6.1.4.1.6449.1.2.1.3.2
        id-qt-cps: https://secure.comodo.net/CPS
      - crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
      - subjectAltName: support@heaventools.com
  - RSA-SHA1:
```
92 74 6a 92 1f ed 64 96  ac 4a ae 82 1f 44 5d ed  |.tj...d..J...D].|
48 6a 8b 67 3d 6d 10 1c  55 6b d0 6c ae 17 64 9e  |Hj.g=m..Uk.l..d.|
a8 72 af 13 5d d4 a0 dd  41 63 fd 13 6d c7 a9 58  |.r..]...Ac..m..X|
c8 34 63 64 03 44 51 89  db a1 1b c8 4f c2 a6 3e  |.4cd.DQ.....O..>|
b8 14 89 ba f7 fd 80 94  d6 a6 4f fb 6e 19 30 ae  |..........O.n.0.|
b4 9a a6 35 45 ef 0a 02  86 3e 6a 8d 62 51 e5 90  |...5E....>j.bQ..|
02 b6 e2 87 9f 72 45 ba  c2 54 81 d1 25 47 3e a7  |.....rE..T..%G>.|
f8 37 ff ea ac e4 cb 90  cf c9 20 5e be 4f f9 ab  |.7........ ^.O..|
25 d1 46 4c e7 bd 49 dd  4e 31 2f a8 8c 55 43 bb  |%.FL..I.N1/..UC.|
63 f8 6b ad fa ab ef be  22 1b 7b ed a3 98 4c be  |c.k.....".{...L.|
f0 5d 50 11 78 c7 b3 74  3d 9f 2c b1 cd 2d 18 86  |.]P.x..t=.,..-..|
6e c8 0d 74 44 15 66 c4  9e a3 41 de c2 fa 8c 4d  |n..tD.f...A....M|
92 a5 5a 4a 43 e3 50 8e  a8 cb e7 f3 5a 17 70 20  |..ZJC.P.....Z.p |
22 3c 40 3f 3a ac bc fc  53 05 a3 d2 8e 3b a0 f4  |"<@?:...S....;..|
4b 2a a6 79 f5 e0 4e 9f  3e 8d 02 7d 72 24 b6 59  |K*.y..N.>..}r$.Y|
77 10 9e 45 2c 7c 48 da  96 fe 16 b7 77 70 a6 6c  |w..E,|H.....wp.l|
```

Signer

1
unnamed
- #0
  - C: US
  - ST: UT
  - L: Salt Lake City
  - O: The USERTRUST Network
  - OU: http://www.usertrust.com
  - CN: UTN-USERFirst-Object
- 9F:17:30:A3:74:EF:EA:42:ED:0D:1B:50:4D:A8:F9:81
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

93 1e e7 a0 6e f6 0e 91  19 29 b0 72 d2 66 37 79  |....n....).r.f7y|
38 6f 2a 69                                       |8o*i            |

1.3.6.1.4.1.311.2.1.12

00 55 00 50 00 58 00 20 00 55 00 6e 00 70 00 61 |.U.P.X. .U.n.p.a| 00 63 00 6b 00 65 00 72 00 20 00 50 00 6c 00 75 |.c.k.e.r. .P.l.u| 00 67 00 2d 00 69 00 6e |.g.-.i.n |
: http://www.heaventools.com

rsaEncryption:

73 ef a3 dc 31 69 64 ee  59 83 d7 4c 94 a5 b7 12  |s...1id.Y..L....|
f3 7e b2 ef dd db d2 34  f8 d3 f9 49 5c 9f 6e 3e  |.~.....4...I\.n>|
b2 78 ff ca 50 9f 15 63  0b 34 06 fd c5 fe d0 fd  |.x..P..c.4......|
f0 58 87 bf 1c 6b 54 d8  aa c2 58 9c 1d 97 cb 0a  |.X...kT...X.....|
d4 8a f2 93 e3 3b 8f 57  4f 60 7f 7e 0b 2a de 6c  |.....;.WO`.~.*.l|
f7 5f d5 51 3c 07 10 b3  d1 53 f7 ef 71 9c 3a f3  |._.Q<....S..q.:.|
15 c3 c9 63 fa f1 6e a1  ba 7e 63 e0 8f d5 57 70  |...c..n..~c...Wp|
4e d1 13 9a ac d8 a5 ec  0c d4 fc 9a e6 45 48 6e  |N............EHn|
b7 d1 f4 ad f2 f6 2c 08  59 4f d3 52 3f 3a 11 b6  |......,.YO.R?:..|
08 fe 15 d1 46 74 70 7b  df 96 c5 6b 07 40 c5 a9  |....Ftp{...k.@..|
fc df 35 91 e8 b4 0a e1  ea 04 9f 2f 8b 13 e6 af  |..5......../....|
df d3 7e 19 44 0a 42 f2  26 5b 9e 95 67 25 26 80  |..~.D.B.&[..g%&.|
03 d7 0e a0 72 61 2f ba  01 cf 36 9d 27 2d ac 73  |....ra/...6.'-.s|
11 fe 1d 55 2c 3d ab b5  25 98 d8 b0 65 59 fa 77  |...U,=..%...eY.w|
1d 96 eb 6d 81 70 0a 7d  b3 b8 4e 2e 5f c3 7e d4  |...m.p.}..N._.~.|
04 9d c7 e9 d4 58 87 b6  2a 7c f5 0d 9c 7e 26 88  |.....X..*|...~&.|

countersignature

unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - CN: VeriSign Time Stamping Services CA
- 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
SHA1: nil

contentType: pkcs7-data
signingTime: 2009-10-14 13:47:44 UTC