+0 343 BYTEs Useless bytes that try to fake a DLL. +343 311 DWORDs Array 1 +1587 266 BYTEs useless +1853 311 DWORDs Array 2 +3097 n BYTEs useless
Record VPH_Record(N) of VPH35.DLL is
( Array1[N] XOR Array2[N] ) AND 7FFFFFFFh
N runs from 1 to 311. For larger values, counting starts at the beginning, that is 312 => 1, 313 => 2 etc.
The values in the file seem to be random numbers. While the Task Manager from Windows 3.1, a 4 kB file, can be compressed by 55% using PKZIP, this file which is 5 kB and should offer more redundant data, can only be compressed to save 1%.
THost will not run if it receives a Winplan TRN but can't open this file.
