I did try the unpack tutorial by r@dier but it seems that the value given by him differs from what i see. I was wondering if it has to do with winXP. Since its an NT base OS, maybe it showed up diffrently.