File cftmon_3c4444c8339f2b4c04931a379daf9d041854b168e45f949515f90b124821d626.exe
Function:
Loading..
00400000
00400000 struct IMAGE_DOS_HEADER
00400000 struct IMAGE_DOS_HEADER
00400000 e_magic uint16 0x5a4d ; IMAGE_DOS_SIGNATURE
00400002 e_cblp int 144
00400004 e_cp int 3
00400006 e_crlc int 0
00400008 e_cparhdr int 4
0040000a e_minalloc int 0
0040000c e_maxalloc int 65535
0040000e e_ss uint16 0x0000
00400010 e_sp uint16 0x00b8
00400012 e_csum uint16 0x0000
00400014 e_ip uint16 0x0000
00400016 e_cs uint16 0x0000
00400018 e_lfarlc uint16 0x0040
0040001a e_ovno int 0
0040001c e_res [4]uint16 {0, 0, 0, 0}
00400024 e_oemid uint16 0x0000
00400026 e_oeminfo uint16 0x0000
00400028 e_res2 [10]uint16 {0, 0, 0, 0, 0, 0, 0, 0, 0, 0}
0040003c e_lfanew uint32 0x4000b8
00400002 e_cblp int 144
00400004 e_cp int 3
00400006 e_crlc int 0
00400008 e_cparhdr int 4
0040000a e_minalloc int 0
0040000c e_maxalloc int 65535
0040000e e_ss uint16 0x0000
00400010 e_sp uint16 0x00b8
00400012 e_csum uint16 0x0000
00400014 e_ip uint16 0x0000
00400016 e_cs uint16 0x0000
00400018 e_lfarlc uint16 0x0040
0040001a e_ovno int 0
0040001c e_res [4]uint16 {0, 0, 0, 0}
00400024 e_oemid uint16 0x0000
00400026 e_oeminfo uint16 0x0000
00400028 e_res2 [10]uint16 {0, 0, 0, 0, 0, 0, 0, 0, 0, 0}
0040003c e_lfanew uint32 0x4000b8
00400040
00400040 struct IMAGE_DOS_STUB
00400040 struct IMAGE_DOS_STUB
00400040 PushCS uint8 0x0e
00400041 PopDS uint8 0x1f
00400042 MovDX uint8 0xba
00400043 MessageOffset uint16 0x40004e
00400045 MovAH9 uint16 0x09b4
00400047 Int21Print uint16 0x21cd
00400049 MovAX uint8 0xb8
0040004a ExitCode uint16 0x4c01
0040004c Int21Exit uint16 0x21cd
0040004e Message ascii "This program cannot be run in DOS mode.\r\r\n$"
00400079
00400079 00 00 00 00 00 00 00 .......
00400080
00400080 struct IMAGE_RICH_HEADER
00400080 DanS uint32 0x536e6144 ; DanS
00400084 Padding [3]uint32 {0, 0, 0}
00400090
00400090 struct IMAGE_RICH_ENTRY
00400090 BuildNumber int 7299
00400092 ProductId int 14
00400094 Count int 1
00400098
00400098 struct IMAGE_RICH_ENTRY
00400098 BuildNumber int 8041
0040009a ProductId int 9
0040009c Count int 1
004000a0
004000a0 struct IMAGE_RICH_ENTRY
004000a0 BuildNumber int 8169
004000a2 ProductId int 13
004000a4 Count int 1
004000a8
004000a8 struct IMAGE_RICH_FOOTER
004000a8 Signature uint32 0x68636952 ; Rich
004000ac Key uint32 0x8897ebcb
004000b0
004000b0 // align 0x8
00400041 PopDS uint8 0x1f
00400042 MovDX uint8 0xba
00400043 MessageOffset uint16 0x40004e
00400045 MovAH9 uint16 0x09b4
00400047 Int21Print uint16 0x21cd
00400049 MovAX uint8 0xb8
0040004a ExitCode uint16 0x4c01
0040004c Int21Exit uint16 0x21cd
0040004e Message ascii "This program cannot be run in DOS mode.\r\r\n$"
00400079
00400079 00 00 00 00 00 00 00 .......
00400080
00400080 struct IMAGE_RICH_HEADER
00400080 DanS uint32 0x536e6144 ; DanS
00400084 Padding [3]uint32 {0, 0, 0}
00400090
00400090 struct IMAGE_RICH_ENTRY
00400090 BuildNumber int 7299
00400092 ProductId int 14
00400094 Count int 1
00400098
00400098 struct IMAGE_RICH_ENTRY
00400098 BuildNumber int 8041
0040009a ProductId int 9
0040009c Count int 1
004000a0
004000a0 struct IMAGE_RICH_ENTRY
004000a0 BuildNumber int 8169
004000a2 ProductId int 13
004000a4 Count int 1
004000a8
004000a8 struct IMAGE_RICH_FOOTER
004000a8 Signature uint32 0x68636952 ; Rich
004000ac Key uint32 0x8897ebcb
004000b0
004000b0 // align 0x8
004000b8
004000b8 struct IMAGE_NT_HEADERS
004000b8 struct IMAGE_NT_HEADERS
004000b8 Signature uint32 0x00004550 ; IMAGE_NT_SIGNATURE — "PE\0\0" magic
004000bc FileHeader.Machine uint16 0x014c ; IMAGE_FILE_MACHINE_I386
004000be FileHeader.NumberOfSections int 3
004000c0 FileHeader.TimeDateStamp uint32 0x55a501a3
004000c4 FileHeader.PointerToSymbolTable uint32 0x00000000
004000c8 FileHeader.NumberOfSymbols int 0
004000cc FileHeader.SizeOfOptionalHeader int 224
004000ce FileHeader.Characteristics uint16 0x010f ; IMAGE_FILE_RELOCS_STRIPPED|IMAGE_FILE_EXECUTABLE_IMAGE|IMAGE_FILE_LINE_NUMS_STRIPPED|IMAGE_FILE_LOCAL_SYMS_STRIPPED|IMAGE_FILE_32BIT_MACHINE
004000d0 OptionalHeader.Magic uint16 0x010b ; PE32 (x86_32)
004000d2 OptionalHeader.MajorLinkerVersion int 6
004000d3 OptionalHeader.MinorLinkerVersion int 0
004000d4 OptionalHeader.SizeOfCode int 36864
004000d8 OptionalHeader.SizeOfInitializedData int 8192
004000dc OptionalHeader.SizeOfUninitializedData int 0
004000e0 OptionalHeader.AddressOfEntryPoint uint32 0x4016c4
004000e4 OptionalHeader.BaseOfCode uint32 0x00001000
004000e8 OptionalHeader.BaseOfData uint32 0x0000a000
004000ec OptionalHeader.ImageBase uint32 0x00400000
004000f0 OptionalHeader.SectionAlignment uint32 0x00001000
004000f4 OptionalHeader.FileAlignment uint32 0x00001000
004000f8 OptionalHeader.MajorOperatingSystemVersion int 4
004000fa OptionalHeader.MinorOperatingSystemVersion int 0
004000fc OptionalHeader.MajorImageVersion int 3
004000fe OptionalHeader.MinorImageVersion int 5
00400100 OptionalHeader.MajorSubsystemVersion int 4
00400102 OptionalHeader.MinorSubsystemVersion int 0
00400104 OptionalHeader.Win32VersionValue uint32 0x00000000
00400108 OptionalHeader.SizeOfImage uint32 0x0000c000
0040010c OptionalHeader.SizeOfHeaders uint32 0x00001000
00400110 OptionalHeader.CheckSum uint32 0x000158b8
00400114 OptionalHeader.Subsystem uint16 0x0002 ; IMAGE_SUBSYSTEM_WINDOWS_GUI
00400116 OptionalHeader.DllCharacteristics uint16 0x0000
00400118 OptionalHeader.SizeOfStackReserve uint32 0x00100000
0040011c OptionalHeader.SizeOfStackCommit uint32 0x00001000
00400120 OptionalHeader.SizeOfHeapReserve uint32 0x00100000
00400124 OptionalHeader.SizeOfHeapCommit uint32 0x00001000
00400128 OptionalHeader.LoaderFlags uint32 0x00000000
0040012c OptionalHeader.NumberOfRvaAndSizes int 16
00400130 OptionalHeader.DataDirectory.ExportTable.VirtualAddress uint32 0x00000000
00400134 OptionalHeader.DataDirectory.ExportTable.Size int 0
00400138 OptionalHeader.DataDirectory.ImportTable.VirtualAddress uint32 0x4098d4
0040013c OptionalHeader.DataDirectory.ImportTable.Size int 40
00400140 OptionalHeader.DataDirectory.Resource.VirtualAddress uint32 0x0000b000
00400144 OptionalHeader.DataDirectory.Resource.Size int 2196
00400148 OptionalHeader.DataDirectory.Exception.VirtualAddress uint32 0x00000000
0040014c OptionalHeader.DataDirectory.Exception.Size int 0
00400150 OptionalHeader.DataDirectory.Security.VirtualAddress uint32 0x00000000
00400154 OptionalHeader.DataDirectory.Security.Size int 0
00400158 OptionalHeader.DataDirectory.BaseReloc.VirtualAddress uint32 0x00000000
0040015c OptionalHeader.DataDirectory.BaseReloc.Size int 0
00400160 OptionalHeader.DataDirectory.Debug.VirtualAddress uint32 0x00000000
00400164 OptionalHeader.DataDirectory.Debug.Size int 0
00400168 OptionalHeader.DataDirectory.Architecture.VirtualAddress uint32 0x00000000
0040016c OptionalHeader.DataDirectory.Architecture.Size int 0
00400170 OptionalHeader.DataDirectory.GlobalPtr.VirtualAddress uint32 0x00000000
00400174 OptionalHeader.DataDirectory.GlobalPtr.Size int 0
00400178 OptionalHeader.DataDirectory.TLS.VirtualAddress uint32 0x00000000
0040017c OptionalHeader.DataDirectory.TLS.Size int 0
00400180 OptionalHeader.DataDirectory.LoadConfig.VirtualAddress uint32 0x00000000
00400184 OptionalHeader.DataDirectory.LoadConfig.Size int 0
00400188 OptionalHeader.DataDirectory.BoundImport.VirtualAddress uint32 0x400228
0040018c OptionalHeader.DataDirectory.BoundImport.Size int 32
00400190 OptionalHeader.DataDirectory.IAT.VirtualAddress uint32 0x401000
00400194 OptionalHeader.DataDirectory.IAT.Size int 368
00400198 OptionalHeader.DataDirectory.DelayImport.VirtualAddress uint32 0x00000000
0040019c OptionalHeader.DataDirectory.DelayImport.Size int 0
004001a0 OptionalHeader.DataDirectory.CLRRuntime.VirtualAddress uint32 0x00000000
004001a4 OptionalHeader.DataDirectory.CLRRuntime.Size int 0
004001a8 OptionalHeader.DataDirectory.Reserved.VirtualAddress uint32 0x00000000
004001ac OptionalHeader.DataDirectory.Reserved.Size int 0
004000bc FileHeader.Machine uint16 0x014c ; IMAGE_FILE_MACHINE_I386
004000be FileHeader.NumberOfSections int 3
004000c0 FileHeader.TimeDateStamp uint32 0x55a501a3
004000c4 FileHeader.PointerToSymbolTable uint32 0x00000000
004000c8 FileHeader.NumberOfSymbols int 0
004000cc FileHeader.SizeOfOptionalHeader int 224
004000ce FileHeader.Characteristics uint16 0x010f ; IMAGE_FILE_RELOCS_STRIPPED|IMAGE_FILE_EXECUTABLE_IMAGE|IMAGE_FILE_LINE_NUMS_STRIPPED|IMAGE_FILE_LOCAL_SYMS_STRIPPED|IMAGE_FILE_32BIT_MACHINE
004000d0 OptionalHeader.Magic uint16 0x010b ; PE32 (x86_32)
004000d2 OptionalHeader.MajorLinkerVersion int 6
004000d3 OptionalHeader.MinorLinkerVersion int 0
004000d4 OptionalHeader.SizeOfCode int 36864
004000d8 OptionalHeader.SizeOfInitializedData int 8192
004000dc OptionalHeader.SizeOfUninitializedData int 0
004000e0 OptionalHeader.AddressOfEntryPoint uint32 0x4016c4
004000e4 OptionalHeader.BaseOfCode uint32 0x00001000
004000e8 OptionalHeader.BaseOfData uint32 0x0000a000
004000ec OptionalHeader.ImageBase uint32 0x00400000
004000f0 OptionalHeader.SectionAlignment uint32 0x00001000
004000f4 OptionalHeader.FileAlignment uint32 0x00001000
004000f8 OptionalHeader.MajorOperatingSystemVersion int 4
004000fa OptionalHeader.MinorOperatingSystemVersion int 0
004000fc OptionalHeader.MajorImageVersion int 3
004000fe OptionalHeader.MinorImageVersion int 5
00400100 OptionalHeader.MajorSubsystemVersion int 4
00400102 OptionalHeader.MinorSubsystemVersion int 0
00400104 OptionalHeader.Win32VersionValue uint32 0x00000000
00400108 OptionalHeader.SizeOfImage uint32 0x0000c000
0040010c OptionalHeader.SizeOfHeaders uint32 0x00001000
00400110 OptionalHeader.CheckSum uint32 0x000158b8
00400114 OptionalHeader.Subsystem uint16 0x0002 ; IMAGE_SUBSYSTEM_WINDOWS_GUI
00400116 OptionalHeader.DllCharacteristics uint16 0x0000
00400118 OptionalHeader.SizeOfStackReserve uint32 0x00100000
0040011c OptionalHeader.SizeOfStackCommit uint32 0x00001000
00400120 OptionalHeader.SizeOfHeapReserve uint32 0x00100000
00400124 OptionalHeader.SizeOfHeapCommit uint32 0x00001000
00400128 OptionalHeader.LoaderFlags uint32 0x00000000
0040012c OptionalHeader.NumberOfRvaAndSizes int 16
00400130 OptionalHeader.DataDirectory.ExportTable.VirtualAddress uint32 0x00000000
00400134 OptionalHeader.DataDirectory.ExportTable.Size int 0
00400138 OptionalHeader.DataDirectory.ImportTable.VirtualAddress uint32 0x4098d4
0040013c OptionalHeader.DataDirectory.ImportTable.Size int 40
00400140 OptionalHeader.DataDirectory.Resource.VirtualAddress uint32 0x0000b000
00400144 OptionalHeader.DataDirectory.Resource.Size int 2196
00400148 OptionalHeader.DataDirectory.Exception.VirtualAddress uint32 0x00000000
0040014c OptionalHeader.DataDirectory.Exception.Size int 0
00400150 OptionalHeader.DataDirectory.Security.VirtualAddress uint32 0x00000000
00400154 OptionalHeader.DataDirectory.Security.Size int 0
00400158 OptionalHeader.DataDirectory.BaseReloc.VirtualAddress uint32 0x00000000
0040015c OptionalHeader.DataDirectory.BaseReloc.Size int 0
00400160 OptionalHeader.DataDirectory.Debug.VirtualAddress uint32 0x00000000
00400164 OptionalHeader.DataDirectory.Debug.Size int 0
00400168 OptionalHeader.DataDirectory.Architecture.VirtualAddress uint32 0x00000000
0040016c OptionalHeader.DataDirectory.Architecture.Size int 0
00400170 OptionalHeader.DataDirectory.GlobalPtr.VirtualAddress uint32 0x00000000
00400174 OptionalHeader.DataDirectory.GlobalPtr.Size int 0
00400178 OptionalHeader.DataDirectory.TLS.VirtualAddress uint32 0x00000000
0040017c OptionalHeader.DataDirectory.TLS.Size int 0
00400180 OptionalHeader.DataDirectory.LoadConfig.VirtualAddress uint32 0x00000000
00400184 OptionalHeader.DataDirectory.LoadConfig.Size int 0
00400188 OptionalHeader.DataDirectory.BoundImport.VirtualAddress uint32 0x400228
0040018c OptionalHeader.DataDirectory.BoundImport.Size int 32
00400190 OptionalHeader.DataDirectory.IAT.VirtualAddress uint32 0x401000
00400194 OptionalHeader.DataDirectory.IAT.Size int 368
00400198 OptionalHeader.DataDirectory.DelayImport.VirtualAddress uint32 0x00000000
0040019c OptionalHeader.DataDirectory.DelayImport.Size int 0
004001a0 OptionalHeader.DataDirectory.CLRRuntime.VirtualAddress uint32 0x00000000
004001a4 OptionalHeader.DataDirectory.CLRRuntime.Size int 0
004001a8 OptionalHeader.DataDirectory.Reserved.VirtualAddress uint32 0x00000000
004001ac OptionalHeader.DataDirectory.Reserved.Size int 0
004001b0
004001b0 struct IMAGE_SECTION_HEADER
004001b0 struct IMAGE_SECTION_HEADER
004001b0 Name ascii ".text"
004001b8 VirtualSize uint32 0x00008ec4
004001bc VirtualAddress uint32 0x401000
004001c0 SizeOfRawData uint32 0x00009000
004001c4 PointerToRawData uint32 0x00001000
004001c8 PointerToRelocations uint32 0x00000000
004001cc PointerToLineNumbers uint32 0x00000000
004001d0 NumberOfRelocations int 0
004001d2 NumberOfLineNumbers int 0
004001d4 Characteristics uint32 0x60000020 ; IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
004001b8 VirtualSize uint32 0x00008ec4
004001bc VirtualAddress uint32 0x401000
004001c0 SizeOfRawData uint32 0x00009000
004001c4 PointerToRawData uint32 0x00001000
004001c8 PointerToRelocations uint32 0x00000000
004001cc PointerToLineNumbers uint32 0x00000000
004001d0 NumberOfRelocations int 0
004001d2 NumberOfLineNumbers int 0
004001d4 Characteristics uint32 0x60000020 ; IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
004001d8
004001d8 struct IMAGE_SECTION_HEADER
004001d8 struct IMAGE_SECTION_HEADER
004001d8 Name ascii ".data"
004001e0 VirtualSize uint32 0x00000afc
004001e4 VirtualAddress uint32 0x40a000
004001e8 SizeOfRawData uint32 0x00001000
004001ec PointerToRawData uint32 0x0000a000
004001f0 PointerToRelocations uint32 0x00000000
004001f4 PointerToLineNumbers uint32 0x00000000
004001f8 NumberOfRelocations int 0
004001fa NumberOfLineNumbers int 0
004001fc Characteristics uint32 0xc0000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
004001e0 VirtualSize uint32 0x00000afc
004001e4 VirtualAddress uint32 0x40a000
004001e8 SizeOfRawData uint32 0x00001000
004001ec PointerToRawData uint32 0x0000a000
004001f0 PointerToRelocations uint32 0x00000000
004001f4 PointerToLineNumbers uint32 0x00000000
004001f8 NumberOfRelocations int 0
004001fa NumberOfLineNumbers int 0
004001fc Characteristics uint32 0xc0000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
00400200
00400200 struct IMAGE_SECTION_HEADER
00400228 00400200 struct IMAGE_SECTION_HEADER
00400200 Name ascii ".rsrc"
00400208 VirtualSize uint32 0x00000894
0040020c VirtualAddress uint32 0x40b000
00400210 SizeOfRawData uint32 0x00001000
00400214 PointerToRawData uint32 0x0000b000
00400218 PointerToRelocations uint32 0x00000000
0040021c PointerToLineNumbers uint32 0x00000000
00400220 NumberOfRelocations int 0
00400222 NumberOfLineNumbers int 0
00400224 Characteristics uint32 0x40000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
00400208 VirtualSize uint32 0x00000894
0040020c VirtualAddress uint32 0x40b000
00400210 SizeOfRawData uint32 0x00001000
00400214 PointerToRawData uint32 0x0000b000
00400218 PointerToRelocations uint32 0x00000000
0040021c PointerToLineNumbers uint32 0x00000000
00400220 NumberOfRelocations int 0
00400222 NumberOfLineNumbers int 0
00400224 Characteristics uint32 0x40000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
00400228 struct IMAGE_BOUND_IMPORT_DESCRIPTOR
00400228 TimeDateStamp uint32 0x4a5bda6c
0040022c OffsetModuleName uint16 0x400238
0040022e NumberOfModuleForwarderRefs int 0
00400230
00400230 struct IMAGE_BOUND_IMPORT_DESCRIPTOR
00400230 TimeDateStamp uint32 0x00000000
00400234 OffsetModuleName uint16 0x0000
00400236 NumberOfModuleForwarderRefs int 0
00400238
00400238 string "MSVBVM60.DLL",0
00400245
00400245 00 00 00 00 00 00 00 00 00 00 00 ...........
00400250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*
00401000
00401000
00401000 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32 ← 0x400190 0x4098e4
00401000 AddressOfData uint32 0x72a20507
00401004
00401004 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401004 AddressOfData uint32 0x72a39386
00401008
00401008 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401008 AddressOfData uint32 0x72a309f9
0040100c
0040100c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040100c AddressOfData uint32 0x72a46831
00401010
00401010 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401010 AddressOfData uint32 0x72a21929
00401014
00401014 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401014 AddressOfData uint32 0x72a26a9b
00401018
00401018 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401018 AddressOfData uint32 0x72a47262
0040101c
0040101c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040101c AddressOfData uint32 0x72a302ba
00401020
00401020 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401020 AddressOfData uint32 0x72a19fc3
00401024
00401024 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401024 AddressOfData uint32 0x72a30941
00401028
00401028 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401028 AddressOfData uint32 0x72a26a76
0040102c
0040102c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040102c AddressOfData uint32 0x72a276e5
00401030
00401030 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401030 AddressOfData uint32 0x72a11b17
00401034
00401034 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401034 AddressOfData uint32 0x72a0c33a
00401038
00401038 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401038 AddressOfData uint32 0x72a1a274
0040103c
0040103c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040103c AddressOfData uint32 0x72a3026e
00401040
00401040 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401040 AddressOfData uint32 0x72a1db35
00401044
00401044 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401044 AddressOfData uint32 0x72a24a48
00401048
00401048 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401048 AddressOfData uint32 0x72a14191
0040104c
0040104c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040104c AddressOfData uint32 0x72a2499d
00401050
00401050 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401050 AddressOfData uint32 0x72a19ff1
00401054
00401054 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401054 AddressOfData uint32 0x72a30306
00401058
00401058 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401058 AddressOfData uint32 0x72a1a008
0040105c
0040105c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040105c AddressOfData uint32 0x72a30406
00401060
00401060 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401060 AddressOfData uint32 0x72a0e0f7
00401064
00401064 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401064 AddressOfData uint32 0x72a27621
00401068
00401068 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401068 AddressOfData uint32 0x72a394ee
0040106c
0040106c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040106c AddressOfData uint32 0x72a2702f
00401070
00401070 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401070 AddressOfData uint32 0x72a362ea
00401074
00401074 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401074 AddressOfData uint32 0x72a27dfb
00401078
00401078 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401078 AddressOfData uint32 0x72a1417d
0040107c
0040107c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040107c AddressOfData uint32 0x72a09b74
00401080
00401080 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401080 AddressOfData uint32 0x72a256de
00401084
00401084 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401084 AddressOfData uint32 0x72a29596
00401088
00401088 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401088 AddressOfData uint32 0x72a15d41
0040108c
0040108c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040108c AddressOfData uint32 0x7294a0fd
00401090
00401090 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401090 AddressOfData uint32 0x72a309f6
00401094
00401094 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401094 AddressOfData uint32 0x72a29618
00401098
00401098 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401098 AddressOfData uint32 0x72a48b25
0040109c
0040109c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040109c AddressOfData uint32 0x72a2059b
004010a0
004010a0 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010a0 AddressOfData uint32 0x72a09b87
004010a4
004010a4 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010a4 AddressOfData uint32 0x72a0ce69
004010a8
004010a8 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010a8 AddressOfData uint32 0x72a219dc
004010ac
004010ac struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010ac AddressOfData uint32 0x72a39593
004010b0
004010b0 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010b0 AddressOfData uint32 0x72a09a85
004010b4
004010b4 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010b4 AddressOfData uint32 0x72a247df
004010b8
004010b8 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010b8 AddressOfData uint32 0x72a0bf1d
004010bc
004010bc struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010bc AddressOfData uint32 0x72a30689
004010c0
004010c0 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010c0 AddressOfData uint32 0x72a303ba
004010c4
004010c4 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010c4 AddressOfData uint32 0x72a20f56
004010c8
004010c8 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010c8 AddressOfData uint32 0x72a47513
004010cc
004010cc struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010cc AddressOfData uint32 0x72a21948
004010d0
004010d0 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010d0 AddressOfData uint32 0x72a2697d
004010d4
004010d4 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010d4 AddressOfData uint32 0x72a1de99
004010d8
004010d8 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010d8 AddressOfData uint32 0x72a153f7
004010dc
004010dc struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010dc AddressOfData uint32 0x72a3942b
004010e0
004010e0 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010e0 AddressOfData uint32 0x72a0e867
004010e4
004010e4 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010e4 AddressOfData uint32 0x72a13d10
004010e8
004010e8 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010e8 AddressOfData uint32 0x72a1a237
004010ec
004010ec struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010ec AddressOfData uint32 0x72a14275
004010f0
004010f0 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010f0 AddressOfData uint32 0x72a25618
004010f4
004010f4 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010f4 AddressOfData uint32 0x72a210ea
004010f8
004010f8 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010f8 AddressOfData uint32 0x72a3033a
004010fc
004010fc struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
004010fc AddressOfData uint32 0x72a3043a
00401100
00401100 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401100 AddressOfData uint32 0x72a26c4a
00401104
00401104 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401104 AddressOfData uint32 0x72a1dae3
00401108
00401108 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401108 AddressOfData uint32 0x72a26c01
0040110c
0040110c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040110c AddressOfData uint32 0x72a3036e
00401110
00401110 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401110 AddressOfData uint32 0x72a2fda9
00401114
00401114 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401114 AddressOfData uint32 0x729435a4
00401118
00401118 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401118 AddressOfData uint32 0x72a24e2f
0040111c
0040111c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040111c AddressOfData uint32 0x72a122b9
00401120
00401120 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401120 AddressOfData uint32 0x72a46df6
00401124
00401124 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401124 AddressOfData uint32 0x7294a3d7
00401128
00401128 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401128 AddressOfData uint32 0x72a122fb
0040112c
0040112c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040112c AddressOfData uint32 0x72a46bb8
00401130
00401130 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401130 AddressOfData uint32 0x72a26dad
00401134
00401134 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401134 AddressOfData uint32 0x72a392c0
00401138
00401138 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401138 AddressOfData uint32 0x72a26c30
0040113c
0040113c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040113c AddressOfData uint32 0x72a45ded
00401140
00401140 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401140 AddressOfData uint32 0x72a11b9d
00401144
00401144 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401144 AddressOfData uint32 0x72a11c50
00401148
00401148 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401148 AddressOfData uint32 0x72a2eeed
0040114c
0040114c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040114c AddressOfData uint32 0x72a11c93
00401150
00401150 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401150 AddressOfData uint32 0x72a11b5a
00401154
00401154 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401154 AddressOfData uint32 0x72a39644
00401158
00401158 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401158 AddressOfData uint32 0x72a11cd6
0040115c
0040115c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040115c AddressOfData uint32 0x72a2dd11
00401160
00401160 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401160 AddressOfData uint32 0x72a19faf
00401164
00401164 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401164 AddressOfData uint32 0x72a26bec
00401168
00401168 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
00401168 AddressOfData uint32 0x72a1325a
0040116c
0040116c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
0040116c AddressOfData uint32 0x00000000
00401170
00401170 05 00 08 00 f7 3c 40 00 00 00 00 00 fe 3c 40 00 .....<@......<@.
00401180 2f 00 14 00 70 42 40 00 b5 42 40 00 77 42 40 00 /...pB@..B@.wB@.
00401190 00 00 00 00 98 11 40 00 20 00 00 00 9a 3d 40 00 ......@. ....=@.
004011a0 b9 3d 40 00 c8 3d 40 00 04 3e 40 00 12 3e 40 00 .=@..=@..>@..>@.
004011b0 20 3e 40 00 2e 3e 40 00 70 3e 40 00 81 3e 40 00 >@..>@.p>@..>@.
004011c0 f2 3e 40 00 03 3f 40 00 89 3f 40 00 9a 3f 40 00 .>@..?@..?@..?@.
004011d0 dc 3f 40 00 f0 3f 40 00 74 40 40 00 81 40 40 00 .?@..?@.t@@..@@.
004011e0 94 40 40 00 a9 40 40 00 25 41 40 00 c6 41 40 00 .@@..@@.%A@..A@.
004011f0 d3 41 40 00 e0 41 40 00 e0 41 40 00 e5 41 40 00 .A@..A@..A@..A@.
00401200 f8 41 40 00 20 42 40 00 20 42 40 00 48 42 40 00 .A@. B@. B@.HB@.
00401210 48 42 40 00 70 42 40 00 70 42 40 00 00 00 00 00 HB@.pB@.pB@.....
00401220 0e 00 08 00 00 00 00 00 ac 45 40 00 85 45 40 00 .........E@..E@.
00401230 1e 00 10 00 00 00 00 00 45 47 40 00 23 47 40 00 ........EG@.#G@.
00401240 48 12 40 00 00 00 00 00 01 00 00 00 01 00 00 00 H.@.............
00401250 10 47 40 00 00 00 00 00 27 00 14 00 a8 53 40 00 .G@.....'....S@.
00401260 04 54 40 00 b0 53 40 00 00 00 00 00 70 12 40 00 .T@..S@.....p.@.
00401270 24 00 00 00 c5 47 40 00 cc 47 40 00 db 47 40 00 $....G@..G@..G@.
00401280 b3 48 40 00 50 49 40 00 92 49 40 00 4f 4a 40 00 .H@.PI@..I@.OJ@.
00401290 83 4a 40 00 d9 4a 40 00 49 4b 40 00 dd 4b 40 00 .J@..J@.IK@..K@.
004012a0 f3 4b 40 00 09 4c 40 00 1f 4c 40 00 35 4c 40 00 .K@..L@..L@.5L@.
004012b0 56 4c 40 00 d5 4c 40 00 04 4d 40 00 46 4d 40 00 VL@..L@..M@.FM@.
004012c0 ba 4d 40 00 84 4e 40 00 e3 4e 40 00 09 4f 40 00 .M@..N@..N@..O@.
004012d0 88 4f 40 00 38 50 40 00 7a 50 40 00 ee 50 40 00 .O@.8P@.zP@..P@.
004012e0 b8 51 40 00 17 52 40 00 17 52 40 00 2d 52 40 00 .Q@..R@..R@.-R@.
004012f0 43 52 40 00 59 52 40 00 5e 52 40 00 a1 53 40 00 CR@.YR@.^R@..S@.
00401300 a1 53 40 00 00 00 00 00 00 00 00 00 00 00 f0 3f .S@............?
00401310 00 00 00 00 00 00 3e 40 27 00 14 00 aa 59 40 00 ......>@'....Y@.
00401320 73 5a 40 00 b4 59 40 00 00 00 00 00 30 13 40 00 sZ@..Y@.....0.@.
00401330 08 00 00 00 b5 54 40 00 bc 54 40 00 cb 54 40 00 .....T@..T@..T@.
00401340 b0 56 40 00 a0 57 40 00 b7 57 40 00 f5 58 40 00 .V@..W@..W@..X@.
00401350 a3 59 40 00 00 00 00 00 2e 00 14 00 00 00 00 00 .Y@.............
00401360 28 5f 40 00 01 5f 40 00 00 00 00 00 70 13 40 00 (_@.._@.....p.@.
00401370 0c 00 00 00 ee 5a 40 00 fe 5a 40 00 0d 5b 40 00 .....Z@..Z@..[@.
00401380 21 5c 40 00 4c 5c 40 00 59 5c 40 00 84 5c 40 00 !\@.L\@.Y\@..\@.
00401390 91 5c 40 00 bc 5c 40 00 c9 5c 40 00 dd 5d 40 00 .\@..\@..\@..]@.
004013a0 fa 5e 40 00 00 00 00 00 05 00 08 00 e8 8d 40 00 .^@...........@.
004013b0 00 00 00 00 ef 8d 40 00 05 00 08 00 77 91 40 00 ......@.....w.@.
004013c0 00 00 00 00 7e 91 40 00 25 00 14 00 d4 95 40 00 ....~.@.%.....@.
004013d0 00 00 00 00 db 95 40 00 00 00 00 00 e0 13 40 00 ......@.......@.
004013e0 0f 00 00 00 15 92 40 00 1c 92 40 00 2b 92 40 00 ......@...@.+.@.
004013f0 d0 92 40 00 0c 93 40 00 7a 93 40 00 af 94 40 00 ..@...@.z.@...@.
00401400 08 95 40 00 15 95 40 00 8b 95 40 00 8b 95 40 00 ..@...@...@...@.
00401410 8b 95 40 00 a1 95 40 00 b7 95 40 00 cd 95 40 00 ..@...@...@...@.
00401420 00 00 00 00 00 00 00 00 26 00 14 00 00 00 00 00 ........&.......
00401430 a6 98 40 00 99 98 40 00 00 00 00 00 40 14 40 00 ..@...@.....@.@.
00401440 15 00 00 00 6e 96 40 00 8f 96 40 00 9e 96 40 00 ....n.@...@...@.
00401450 ac 96 40 00 d7 96 40 00 e8 96 40 00 41 97 40 00 ..@...@...@.A.@.
00401460 52 97 40 00 80 97 40 00 8e 97 40 00 9e 97 40 00 R.@...@...@...@.
00401470 cf 97 40 00 e3 97 40 00 f7 97 40 00 11 98 40 00 ..@...@...@...@.
00401480 22 98 40 00 66 98 40 00 7c 98 40 00 7c 98 40 00 ".@.f.@.|.@.|.@.
00401490 92 98 40 00 92 98 40 00 00 00 00 00 00 00 00 00 ..@...@.........
004016aa
004016aaEVENT_SINK_QueryInterface:
004016aajmp imp:msvbvm60!EVENT_SINK_QueryInterface
004016aa
004016aaEVENT_SINK_QueryInterface:
004016aajmp imp:msvbvm60!EVENT_SINK_QueryInterface
004016aa
004016c2
004016c2 00 00 ..
004016c2 00 00 ..
004016ce
004016ce 00 00 ..
004016d0
004016d0 struct COMRegistrationData
004016d0 bRegInfo uint32 0x00000000
004016d4 bSZProjectName uint32 0x401700
004016d8 bSZHelpDirectory uint32 0x401720
004016dc bSZProjectDescription uint32 0x401708
004016e0 uuidProjectClsId guid dca584c6-4383-4135-b176-85dfce535869
004016f0 dwTlbLcid uint32 0x00000000
004016f4 wUnknown uint16 0x0000
004016f6 wTlbVerMajor int 1
004016f8 wTlbVerMinor int 0
004016fa
004016fa 2d 43 30 30 30 2d -C000-
00401700
00401700 string "cftmon",0
00401707
00401707 30 0
00401708
00401708 string "Windows System Manager",0
0040171f
0040171f 53 S
00401720 00 00 00 00 ....
00401724
00401724 struct VBFormHeader
00401724 bMagic uint8 0xff
00401725 bVersion uint8 0xcc
00401726 wGuidBlockSize uint16 0x0031
00401728 bControlCount int 6
00401729 uuidForm guid 19c7124f-b459-46d9-ad48-f0583da63242
00401739 uuidFormIface guid c67d069e-6dc7-462d-bb2e-13d9ed29ea16
00401749 uuidFormClass guid 33ad4f3a-6699-11cf-b70c-00aa0060d393
00401759 dwReserved [9]uint32 {0, 0, 0, 0, 0, 0, 0, 0, 0}
0040177d cbControlData uint32 0x00000569
00401781 Begin VB.Form frmMain
00401791 Caption = "cftmon v3.5"
004017a0 ScaleMode = 1 'Twip
004017a3 AutoRedraw = 0 'False
004017a3 FontTransparent = -1 'True
004017a5 BorderStyle = 1 'Fixed Single
004017a7 Icon = <1086 bytes at 0x4017ac> ' ICO, 1078 bytes, 32x32 16 colors, 16x16 16 colors, sha256 b525f15edbbc4032ce7d1f6ddcd1f6930362427ee82a679b31b16aeec25ec5cf
00401bea LinkTopic = "frmMain"
00401bf5 MaxButton = 0 'False
00401bf7 MinButton = 0 'False
00401bf9 Visible = 0 'False
00401bfc ClientLeft = 45
00401c00 ClientTop = 375
00401c04 ClientWidth = 5970
00401c08 ClientHeight = 2595
00401c0c BeginProperty Font
00401c0e Charset = 0
00401c10 Underline = 0 'False
00401c10 Italic = 0 'False
00401c10 Strikethrough = 0 'False
00401c11 Weight = 400
00401c13 Size = 8.25
00401c17 Name = "Tahoma"
00401c1d EndProperty
00401c1e ShowInTaskbar = 0 'False
00401c20 StartUpPosition = 2 'CenterScreen
00401c24 Begin VB.Timer t_cmd
00401c32 Interval = 10000
00401c37 Left = 1320
00401c3c Top = 60
00401c41 End
00401c43 Begin VB.Timer t_key
00401c51 Interval = 1
00401c56 Left = 900
00401c5b Top = 60
00401c60 End
00401c62 Begin VB.Timer t_save
00401c71 Interval = 60000
00401c76 Left = 480
00401c7b Top = 60
00401c80 End
00401c82 Begin VB.Timer t_grab
00401c91 Interval = 65000
00401c96 Left = 60
00401c9b Top = 60
00401ca0 End
00401ca2 Begin VB.TextBox Text1
00401cb1 Left = 60
00401cb3 Top = 60
00401cb5 Width = 5835
00401cb7 Height = 2295
00401cb9 TabIndex = 0
00401cbc MultiLine = -1 'True
00401cbe End
00401cc0 Begin VB.Label lblCONT
00401cd0 Caption = "0"
00401cd6 Left = 60
00401cd8 Top = 2340
00401cda Width = 435
00401cdc Height = 255
00401cde TabIndex = 1
00401ce1 BackStyle = 0 'Transparent
00401ce3 End
00401ce5 End
00401ce6
00401ce6 00 00 ..
00401ce8
00401ce8 struct GUITableEntry
00401ce8 dwStructSize uint32 0x00000050
00401cec uuidObjectGUI guid 19c7124f-b459-46d9-ad48-f0583da63242
00401cfc dwUnknown1 uint32 0x00000000
00401d00 dwUnknown2 uint32 0x00000000
00401d04 dwUnknown3 uint32 0x00000000
00401d08 dwUnknown4 uint32 0x00000000
00401d0c dwObjectId int 0
00401d10 dwUnknown5 uint32 0x00000310
00401d14 fOLEMisc uint32 0x00000000
00401d18 uuidObject guid 00000000-0000-0000-0000-000000000000
00401d28 cbFormData uint32 0x000005c2
00401d2c dwUnknown7 uint32 0x00000000
00401d30 lpFormData uint32 0x401724
00401d34 dwUnknown8 uint32 0x0000004c
00401d38
00401d38 struct VBHeader
00401d38 szVbMagic ascii "VB5!"
00401d3c wRuntimeBuild int 8176
00401d3e szLangDll ascii "*"
00401d4c szSecLangDll ascii "~"
00401d5a wRuntimeRevision int 10
00401d5c dwLCID uint32 0x00000410
00401d60 dwSecLCID uint32 0x00000000
00401d64 lpSubMain uint32 0x00000000
00401d68 lpProjectData uint32 0x401e6c
00401d6c fMdlIntCtls uint32 0x0030f806
00401d70 fMdlIntCtls2 uint32 0xffffff00
00401d74 dwThreadFlags uint32 0x00000008 ; SingleThreaded
00401d78 dwThreadCount int 1
00401d7c wFormCount int 1
00401d7e wExternalCount int 0
00401d80 dwThunkCount int 233
00401d84 lpGuiTable uint32 0x401ce8
00401d88 lpExternalTable uint32 0x401ce8
00401d8c lpComRegisterData uint32 0x4016d0
00401d90 bSZProjectDescription uint32 0x401db0
00401d94 bSZProjectExeName uint32 0x401db7
00401d98 bSZProjectHelpFile uint32 0x401dc3
00401d9c bSZProjectName uint32 0x401dc4
00401da0
00401da0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00401db0
00401db0 string "cftmon",0
00401db7
00401db7 string "cftmon v3.5",0
00401dc3
00401dc3 00 .
00401dc4
00401dc4 string "cftmon",0
00401dcb
00401dcb 00 .
00401dcc
00401dcc struct ExternalTableEntry
00401dcc dwFlag uint32 0x00000006 ; TypeLibReference
00401dd0 lpExternal uint32 0x403778
00401dd4
00401dd4 struct ExternalTableEntry
00401dd4 dwFlag uint32 0x00000007 ; Declare
00401dd8 lpExternal uint32 0x402e58
00401ddc
00401ddc struct ExternalTableEntry
00401ddc dwFlag uint32 0x00000007 ; Declare
00401de0 lpExternal uint32 0x402e04
00401de4
00401de4 struct ExternalTableEntry
00401de4 dwFlag uint32 0x00000007 ; Declare
00401de8 lpExternal uint32 0x402db0
00401dec
00401dec struct ExternalTableEntry
00401dec dwFlag uint32 0x00000007 ; Declare
00401df0 lpExternal uint32 0x402d68
00401df4
00401df4 struct ExternalTableEntry
00401df4 dwFlag uint32 0x00000007 ; Declare
00401df8 lpExternal uint32 0x402d1c
00401dfc
00401dfc struct ExternalTableEntry
00401dfc dwFlag uint32 0x00000007 ; Declare
00401e00 lpExternal uint32 0x402cc4
00401e04
00401e04 struct ExternalTableEntry
00401e04 dwFlag uint32 0x00000007 ; Declare
00401e08 lpExternal uint32 0x402c48
00401e0c
00401e0c struct ExternalTableEntry
00401e0c dwFlag uint32 0x00000007 ; Declare
00401e10 lpExternal uint32 0x402bf8
00401e14
00401e14 struct ExternalTableEntry
00401e14 dwFlag uint32 0x00000007 ; Declare
00401e18 lpExternal uint32 0x402bac
00401e1c
00401e1c struct ExternalTableEntry
00401e1c dwFlag uint32 0x00000007 ; Declare
00401e20 lpExternal uint32 0x402b60
00401e24
00401e24 struct ExternalTableEntry
00401e24 dwFlag uint32 0x00000007 ; Declare
00401e28 lpExternal uint32 0x402b14
00401e2c
00401e2c struct ExternalTableEntry
00401e2c dwFlag uint32 0x00000007 ; Declare
00401e30 lpExternal uint32 0x402ac8
00401e34
00401e34 struct ExternalTableEntry
00401e34 dwFlag uint32 0x00000007 ; Declare
00401e38 lpExternal uint32 0x402a7c
00401e3c
00401e3c struct ExternalTableEntry
00401e3c dwFlag uint32 0x00000007 ; Declare
00401e40 lpExternal uint32 0x402a24
00401e44
00401e44 struct ExternalTableEntry
00401e44 dwFlag uint32 0x00000007 ; Declare
00401e48 lpExternal uint32 0x4029d0
00401e4c
00401e4c struct ExternalTableEntry
00401e4c dwFlag uint32 0x00000007 ; Declare
00401e50 lpExternal uint32 0x402984
00401e54
00401e54 struct ExternalTableEntry
00401e54 dwFlag uint32 0x00000007 ; Declare
00401e58 lpExternal uint32 0x402938
00401e5c
00401e5c struct ExternalTableEntry
00401e5c dwFlag uint32 0x00000007 ; Declare
00401e60 lpExternal uint32 0x4028e0
00401e64
00401e64 struct ExternalTableEntry
00401e64 dwFlag uint32 0x00000007 ; Declare
00401e68 lpExternal uint32 0x402898
00401e6c
00401e6c struct ProjectInfo
00401e6c dwVersion uint32 0x000001f4
00401e70 lpObjectTable uint32 0x402524
00401e74 dwNull uint32 0x00000000
00401e78 lpCodeStart uint32 0x403b60
00401e7c lpCodeEnd uint32 0x4098d0
00401e80 dwDataSize uint32 0x00000af4
00401e84 lpThreadSpace uint32 0x40a008
00401e88 lpVbaSeh uint32 0x4014a6
00401e8c lpNativeCode uint32 0x40a000
00401e90 szPathInformation ascii "*\\AE:\\spyLog\\cftmon_v3.5_http_grab\\cftmon.vbp"
004020a0 lpExternalTable uint32 0x401dcc
004020a4 dwExternalCount int 20
004016ce 00 00 ..
004016d0
004016d0 struct COMRegistrationData
004016d0 bRegInfo uint32 0x00000000
004016d4 bSZProjectName uint32 0x401700
004016d8 bSZHelpDirectory uint32 0x401720
004016dc bSZProjectDescription uint32 0x401708
004016e0 uuidProjectClsId guid dca584c6-4383-4135-b176-85dfce535869
004016f0 dwTlbLcid uint32 0x00000000
004016f4 wUnknown uint16 0x0000
004016f6 wTlbVerMajor int 1
004016f8 wTlbVerMinor int 0
004016fa
004016fa 2d 43 30 30 30 2d -C000-
00401700
00401700 string "cftmon",0
00401707
00401707 30 0
00401708
00401708 string "Windows System Manager",0
0040171f
0040171f 53 S
00401720 00 00 00 00 ....
00401724
00401724 struct VBFormHeader
00401724 bMagic uint8 0xff
00401725 bVersion uint8 0xcc
00401726 wGuidBlockSize uint16 0x0031
00401728 bControlCount int 6
00401729 uuidForm guid 19c7124f-b459-46d9-ad48-f0583da63242
00401739 uuidFormIface guid c67d069e-6dc7-462d-bb2e-13d9ed29ea16
00401749 uuidFormClass guid 33ad4f3a-6699-11cf-b70c-00aa0060d393
00401759 dwReserved [9]uint32 {0, 0, 0, 0, 0, 0, 0, 0, 0}
0040177d cbControlData uint32 0x00000569
00401781 Begin VB.Form frmMain
00401791 Caption = "cftmon v3.5"
004017a0 ScaleMode = 1 'Twip
004017a3 AutoRedraw = 0 'False
004017a3 FontTransparent = -1 'True
004017a5 BorderStyle = 1 'Fixed Single
004017a7 Icon = <1086 bytes at 0x4017ac> ' ICO, 1078 bytes, 32x32 16 colors, 16x16 16 colors, sha256 b525f15edbbc4032ce7d1f6ddcd1f6930362427ee82a679b31b16aeec25ec5cf
00401bea LinkTopic = "frmMain"
00401bf5 MaxButton = 0 'False
00401bf7 MinButton = 0 'False
00401bf9 Visible = 0 'False
00401bfc ClientLeft = 45
00401c00 ClientTop = 375
00401c04 ClientWidth = 5970
00401c08 ClientHeight = 2595
00401c0c BeginProperty Font
00401c0e Charset = 0
00401c10 Underline = 0 'False
00401c10 Italic = 0 'False
00401c10 Strikethrough = 0 'False
00401c11 Weight = 400
00401c13 Size = 8.25
00401c17 Name = "Tahoma"
00401c1d EndProperty
00401c1e ShowInTaskbar = 0 'False
00401c20 StartUpPosition = 2 'CenterScreen
00401c24 Begin VB.Timer t_cmd
00401c32 Interval = 10000
00401c37 Left = 1320
00401c3c Top = 60
00401c41 End
00401c43 Begin VB.Timer t_key
00401c51 Interval = 1
00401c56 Left = 900
00401c5b Top = 60
00401c60 End
00401c62 Begin VB.Timer t_save
00401c71 Interval = 60000
00401c76 Left = 480
00401c7b Top = 60
00401c80 End
00401c82 Begin VB.Timer t_grab
00401c91 Interval = 65000
00401c96 Left = 60
00401c9b Top = 60
00401ca0 End
00401ca2 Begin VB.TextBox Text1
00401cb1 Left = 60
00401cb3 Top = 60
00401cb5 Width = 5835
00401cb7 Height = 2295
00401cb9 TabIndex = 0
00401cbc MultiLine = -1 'True
00401cbe End
00401cc0 Begin VB.Label lblCONT
00401cd0 Caption = "0"
00401cd6 Left = 60
00401cd8 Top = 2340
00401cda Width = 435
00401cdc Height = 255
00401cde TabIndex = 1
00401ce1 BackStyle = 0 'Transparent
00401ce3 End
00401ce5 End
00401ce6
00401ce6 00 00 ..
00401ce8
00401ce8 struct GUITableEntry
00401ce8 dwStructSize uint32 0x00000050
00401cec uuidObjectGUI guid 19c7124f-b459-46d9-ad48-f0583da63242
00401cfc dwUnknown1 uint32 0x00000000
00401d00 dwUnknown2 uint32 0x00000000
00401d04 dwUnknown3 uint32 0x00000000
00401d08 dwUnknown4 uint32 0x00000000
00401d0c dwObjectId int 0
00401d10 dwUnknown5 uint32 0x00000310
00401d14 fOLEMisc uint32 0x00000000
00401d18 uuidObject guid 00000000-0000-0000-0000-000000000000
00401d28 cbFormData uint32 0x000005c2
00401d2c dwUnknown7 uint32 0x00000000
00401d30 lpFormData uint32 0x401724
00401d34 dwUnknown8 uint32 0x0000004c
00401d38
00401d38 struct VBHeader
00401d38 szVbMagic ascii "VB5!"
00401d3c wRuntimeBuild int 8176
00401d3e szLangDll ascii "*"
00401d4c szSecLangDll ascii "~"
00401d5a wRuntimeRevision int 10
00401d5c dwLCID uint32 0x00000410
00401d60 dwSecLCID uint32 0x00000000
00401d64 lpSubMain uint32 0x00000000
00401d68 lpProjectData uint32 0x401e6c
00401d6c fMdlIntCtls uint32 0x0030f806
00401d70 fMdlIntCtls2 uint32 0xffffff00
00401d74 dwThreadFlags uint32 0x00000008 ; SingleThreaded
00401d78 dwThreadCount int 1
00401d7c wFormCount int 1
00401d7e wExternalCount int 0
00401d80 dwThunkCount int 233
00401d84 lpGuiTable uint32 0x401ce8
00401d88 lpExternalTable uint32 0x401ce8
00401d8c lpComRegisterData uint32 0x4016d0
00401d90 bSZProjectDescription uint32 0x401db0
00401d94 bSZProjectExeName uint32 0x401db7
00401d98 bSZProjectHelpFile uint32 0x401dc3
00401d9c bSZProjectName uint32 0x401dc4
00401da0
00401da0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00401db0
00401db0 string "cftmon",0
00401db7
00401db7 string "cftmon v3.5",0
00401dc3
00401dc3 00 .
00401dc4
00401dc4 string "cftmon",0
00401dcb
00401dcb 00 .
00401dcc
00401dcc struct ExternalTableEntry
00401dcc dwFlag uint32 0x00000006 ; TypeLibReference
00401dd0 lpExternal uint32 0x403778
00401dd4
00401dd4 struct ExternalTableEntry
00401dd4 dwFlag uint32 0x00000007 ; Declare
00401dd8 lpExternal uint32 0x402e58
00401ddc
00401ddc struct ExternalTableEntry
00401ddc dwFlag uint32 0x00000007 ; Declare
00401de0 lpExternal uint32 0x402e04
00401de4
00401de4 struct ExternalTableEntry
00401de4 dwFlag uint32 0x00000007 ; Declare
00401de8 lpExternal uint32 0x402db0
00401dec
00401dec struct ExternalTableEntry
00401dec dwFlag uint32 0x00000007 ; Declare
00401df0 lpExternal uint32 0x402d68
00401df4
00401df4 struct ExternalTableEntry
00401df4 dwFlag uint32 0x00000007 ; Declare
00401df8 lpExternal uint32 0x402d1c
00401dfc
00401dfc struct ExternalTableEntry
00401dfc dwFlag uint32 0x00000007 ; Declare
00401e00 lpExternal uint32 0x402cc4
00401e04
00401e04 struct ExternalTableEntry
00401e04 dwFlag uint32 0x00000007 ; Declare
00401e08 lpExternal uint32 0x402c48
00401e0c
00401e0c struct ExternalTableEntry
00401e0c dwFlag uint32 0x00000007 ; Declare
00401e10 lpExternal uint32 0x402bf8
00401e14
00401e14 struct ExternalTableEntry
00401e14 dwFlag uint32 0x00000007 ; Declare
00401e18 lpExternal uint32 0x402bac
00401e1c
00401e1c struct ExternalTableEntry
00401e1c dwFlag uint32 0x00000007 ; Declare
00401e20 lpExternal uint32 0x402b60
00401e24
00401e24 struct ExternalTableEntry
00401e24 dwFlag uint32 0x00000007 ; Declare
00401e28 lpExternal uint32 0x402b14
00401e2c
00401e2c struct ExternalTableEntry
00401e2c dwFlag uint32 0x00000007 ; Declare
00401e30 lpExternal uint32 0x402ac8
00401e34
00401e34 struct ExternalTableEntry
00401e34 dwFlag uint32 0x00000007 ; Declare
00401e38 lpExternal uint32 0x402a7c
00401e3c
00401e3c struct ExternalTableEntry
00401e3c dwFlag uint32 0x00000007 ; Declare
00401e40 lpExternal uint32 0x402a24
00401e44
00401e44 struct ExternalTableEntry
00401e44 dwFlag uint32 0x00000007 ; Declare
00401e48 lpExternal uint32 0x4029d0
00401e4c
00401e4c struct ExternalTableEntry
00401e4c dwFlag uint32 0x00000007 ; Declare
00401e50 lpExternal uint32 0x402984
00401e54
00401e54 struct ExternalTableEntry
00401e54 dwFlag uint32 0x00000007 ; Declare
00401e58 lpExternal uint32 0x402938
00401e5c
00401e5c struct ExternalTableEntry
00401e5c dwFlag uint32 0x00000007 ; Declare
00401e60 lpExternal uint32 0x4028e0
00401e64
00401e64 struct ExternalTableEntry
00401e64 dwFlag uint32 0x00000007 ; Declare
00401e68 lpExternal uint32 0x402898
00401e6c
00401e6c struct ProjectInfo
00401e6c dwVersion uint32 0x000001f4
00401e70 lpObjectTable uint32 0x402524
00401e74 dwNull uint32 0x00000000
00401e78 lpCodeStart uint32 0x403b60
00401e7c lpCodeEnd uint32 0x4098d0
00401e80 dwDataSize uint32 0x00000af4
00401e84 lpThreadSpace uint32 0x40a008
00401e88 lpVbaSeh uint32 0x4014a6
00401e8c lpNativeCode uint32 0x40a000
00401e90 szPathInformation ascii "*\\AE:\\spyLog\\cftmon_v3.5_http_grab\\cftmon.vbp"
004020a0 lpExternalTable uint32 0x401dcc
004020a4 dwExternalCount int 20
Loading..