File moonlight_4ee502b0ead248bae0a05466deb54e9bb532a9c41de1480425eb48eacf508e75.exe
Function:
    00400040
    00400040 struct IMAGE_NT_HEADERS uint8_t
    00400138
    00400138 struct IMAGE_SECTION_HEADER
    00400160
    00400160 struct IMAGE_SECTION_HEADER
    00400188
    00400188 struct IMAGE_SECTION_HEADER
    00401000
    00401000 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32 ← 0x451010
    00401000 AddressOfData uint32 0x41a1ee
    00401004
    00401004 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401004 AddressOfData uint32 0x80000204
    00401008
    00401008 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401008 AddressOfData uint32 0x80000206
    0040100c
    0040100c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    0040100c AddressOfData uint32 0x80000207
    00401010
    00401010 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401010 AddressOfData uint32 0x80000294
    00401014
    00401014 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401014 AddressOfData uint32 0x80000251
    00401018
    00401018 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401018 AddressOfData uint32 0x80000252
    0040101c
    0040101c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    0040101c AddressOfData uint32 0x80000254
    00401020
    00401020 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401020 AddressOfData uint32 0x80000256
    00401024
    00401024 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401024 AddressOfData uint32 0x80000208
    00401028
    00401028 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401028 AddressOfData uint32 0x800002c5
    0040102c
    0040102c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    0040102c AddressOfData uint32 0x80000277
    00401030
    00401030 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401030 AddressOfData uint32 0x80000278
    00401034
    00401034 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401034 AddressOfData uint32 0x8000020d
    00401038
    00401038 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401038 AddressOfData uint32 0x8000020e
    0040103c
    0040103c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    0040103c AddressOfData uint32 0x41a200
    00401040
    00401040 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401040 AddressOfData uint32 0x8000020f
    00401044
    00401044 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401044 AddressOfData uint32 0x80000210
    00401048
    00401048 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401048 AddressOfData uint32 0x80000211
    0040104c
    0040104c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    0040104c AddressOfData uint32 0x80000231
    00401050
    00401050 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401050 AddressOfData uint32 0x41a214
    00401054
    00401054 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401054 AddressOfData uint32 0x41a226
    00401058
    00401058 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401058 AddressOfData uint32 0x80000258
    0040105c
    0040105c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    0040105c AddressOfData uint32 0x80000259
    00401060
    00401060 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401060 AddressOfData uint32 0x41a23c
    00401064
    00401064 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401064 AddressOfData uint32 0x41a258
    00401068
    00401068 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401068 AddressOfData uint32 0x800002c8
    0040106c
    0040106c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    0040106c AddressOfData uint32 0x800002c9
    00401070
    00401070 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401070 AddressOfData uint32 0x8000025e
    00401074
    00401074 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401074 AddressOfData uint32 0x80000260
    00401078
    00401078 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401078 AddressOfData uint32 0x800002cc
    0040107c
    0040107c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    0040107c AddressOfData uint32 0x80000213
    00401080
    00401080 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401080 AddressOfData uint32 0x41a26e
    00401084
    00401084 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401084 AddressOfData uint32 0x80000218
    00401088
    00401088 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401088 AddressOfData uint32 0x80000219
    0040108c
    0040108c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    0040108c AddressOfData uint32 0x80000285
    00401090
    00401090 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401090 AddressOfData uint32 0x8000023a
    00401094
    00401094 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401094 AddressOfData uint32 0x80000288
    00401098
    00401098 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    00401098 AddressOfData uint32 0x8000023c
    0040109c
    0040109c struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    0040109c AddressOfData uint32 0x800002a9
    004010a0
    004010a0 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    004010a0 AddressOfData uint32 0x80000242
    004010a4
    004010a4 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    004010a4 AddressOfData uint32 0x80000064
    004010a8
    004010a8 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    004010a8 AddressOfData uint32 0x80000262
    004010ac
    004010ac struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    004010ac AddressOfData uint32 0x80000264
    004010b0
    004010b0 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    004010b0 AddressOfData uint32 0x80000268
    004010b4
    004010b4 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    004010b4 AddressOfData uint32 0x80000269
    004010b8
    004010b8 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    004010b8 AddressOfData uint32 0x8000026a
    004010bc
    004010bc struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    004010bc AddressOfData uint32 0x8000026b
    004010c0
    004010c0 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    004010c0 AddressOfData uint32 0x8000021e
    004010c4
    004010c4 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    004010c4 AddressOfData uint32 0x8000028a
    004010c8
    004010c8 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    004010c8 AddressOfData uint32 0x80000222
    004010cc
    004010cc struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    004010cc AddressOfData uint32 0x80000244
    004010d0
    004010d0 struct IMAGE_IMPORT_ADDRESS_TABLE_ENTRY32
    004010d0 AddressOfData uint32 0x00000000
    004010d4
    004010d4 00 00 00 00 00 00 00 00 00 00 00 00 ............
    004010e0
    004010e0DllFunctionCall:
    004010e0jmp imp:msvbvm60!DllFunctionCall
    004010e0
    004010e6
    004010e6rtcVarBstrFromAnsi:
    004010e6jmp imp:msvbvm60!rtcVarBstrFromAnsi
    004010e6
    004010ec
    004010ecrtcSpaceBstr:
    004010ecjmp imp:msvbvm60!rtcSpaceBstr
    004010ec
    004010f2
    004010f2rtcLeftCharBstr:
    004010f2jmp imp:msvbvm60!rtcLeftCharBstr
    004010f2
    004010f8
    004010f8rtcUpperCaseVar:
    004010f8jmp imp:msvbvm60!rtcUpperCaseVar
    004010f8
    004010fe
    004010fertcUpperCaseBstr:
    004010fejmp imp:msvbvm60!rtcUpperCaseBstr
    004010fe
    00401104
    00401104rtcRandomize:
    00401104jmp imp:msvbvm60!rtcRandomize
    00401104
    0040110a
    0040110artcRandomNext:
    0040110ajmp imp:msvbvm60!rtcRandomNext
    0040110a
    00401110
    00401110rtcRightCharVar:
    00401110jmp imp:msvbvm60!rtcRightCharVar
    00401110
    00401116
    00401116rtcMidCharVar:
    00401116jmp imp:msvbvm60!rtcMidCharVar
    00401116
    0040111c
    0040111crtcAnsiValueBstr:
    0040111cjmp imp:msvbvm60!rtcAnsiValueBstr
    0040111c
    00401122
    00401122rtcDoEvents:
    00401122jmp imp:msvbvm60!rtcDoEvents
    00401122
    00401128
    00401128rtcStringBstr:
    00401128jmp imp:msvbvm60!rtcStringBstr
    00401128
    0040112e
    0040112ertcLeftCharVar:
    0040112ejmp imp:msvbvm60!rtcLeftCharVar
    0040112e
    00401134
    00401134rtcTrimVar:
    00401134jmp imp:msvbvm60!rtcTrimVar
    00401134
    0040113a
    0040113artcDir:
    0040113ajmp imp:msvbvm60!rtcDir
    0040113a
    00401140
    00401140rtcFileLen:
    00401140jmp imp:msvbvm60!rtcFileLen
    00401140
    00401146
    00401146rtcKillFiles:
    00401146jmp imp:msvbvm60!rtcKillFiles
    00401146
    0040114c
    0040114crtcArray:
    0040114cjmp imp:msvbvm60!rtcArray
    0040114c
    00401152
    00401152rtcFreeFile:
    00401152jmp imp:msvbvm60!rtcFreeFile
    00401152
    00401158
    00401158rtcBstrFromAnsi:
    00401158jmp imp:msvbvm60!rtcBstrFromAnsi
    00401158
    0040115e
    0040115ertcStrReverse:
    0040115ejmp imp:msvbvm60!rtcStrReverse
    0040115e
    00401164
    00401164rtcLowerCaseVar:
    00401164jmp imp:msvbvm60!rtcLowerCaseVar
    00401164
    0040116a
    0040116artcSetFileAttr:
    0040116ajmp imp:msvbvm60!rtcSetFileAttr
    0040116a
    00401170
    00401170rtcShell:
    00401170jmp imp:msvbvm60!rtcShell
    00401170
    00401176
    00401176rtcMakeDir:
    00401176jmp imp:msvbvm60!rtcMakeDir
    00401176
    0040117c
    0040117crtcCreateObject2:
    0040117cjmp imp:msvbvm60!rtcCreateObject2
    0040117c
    00401182
    00401182rtcGetTimeVar:
    00401182jmp imp:msvbvm60!rtcGetTimeVar
    00401182
    00401188
    00401188rtcVarFromFormatVar:
    00401188jmp imp:msvbvm60!rtcVarFromFormatVar
    00401188
    0040118e
    0040118ertcSpaceVar:
    0040118ejmp imp:msvbvm60!rtcSpaceVar
    0040118e
    00401194
    00401194rtcIsNumeric:
    00401194jmp imp:msvbvm60!rtcIsNumeric
    00401194
    0040119a
    0040119artcStrFromVar:
    0040119ajmp imp:msvbvm60!rtcStrFromVar
    0040119a
    004011a0
    004011a0rtcTrimBstr:
    004011a0jmp imp:msvbvm60!rtcTrimBstr
    004011a0
    004011a6
    004011a6rtcMidCharBstr:
    004011a6jmp imp:msvbvm60!rtcMidCharBstr
    004011a6
    004011ac
    004011acrtcGetPresentDate:
    004011acjmp imp:msvbvm60!rtcGetPresentDate
    004011ac
    004011b2
    004011b2rtcGetDateVar:
    004011b2jmp imp:msvbvm60!rtcGetDateVar
    004011b2
    004011b8
    004011b8rtcHexBstrFromVar:
    004011b8jmp imp:msvbvm60!rtcHexBstrFromVar
    004011b8
    004011be
    004011bertcRightCharBstr:
    004011bejmp imp:msvbvm60!rtcRightCharBstr
    004011be
    004011c4
    004011c4rtcGetDayOfMonth:
    004011c4jmp imp:msvbvm60!rtcGetDayOfMonth
    004011c4
    004011ca
    004011cartcBstrFromFormatVar:
    004011cajmp imp:msvbvm60!rtcBstrFromFormatVar
    004011ca
    004011d0
    004011d0rtcFileLength:
    004011d0jmp imp:msvbvm60!rtcFileLength
    004011d0
    004011d6
    004011d6rtcImmediateIf:
    004011d6jmp imp:msvbvm60!rtcImmediateIf
    004011d6
    004011dc
    004011dcrtcInputBox:
    004011dcjmp imp:msvbvm60!rtcInputBox
    004011dc
    004011e2
    004011e2rtcReplace:
    004011e2jmp imp:msvbvm60!rtcReplace
    004011e2
    004011e8
    004011e8rtcInStrRev:
    004011e8jmp imp:msvbvm60!rtcInStrRev
    004011e8
    004011ee
    004011ee__vbaExceptHandler:
    004011eejmp imp:msvbvm60!__vbaExceptHandler
    004011ee
    004011f4
    004011f4ProcCallEngine:
    004011f4jmp imp:msvbvm60!ProcCallEngine
    004011f4
    00401200
    00401200EVENT_SINK_AddRef:
    00401200jmp imp:msvbvm60!EVENT_SINK_AddRef
    00401200
    00401206
    00401206EVENT_SINK_Release:
    00401206jmp imp:msvbvm60!EVENT_SINK_Release
    00401206
    0040120c
    0040120cMethCallEngine:
    0040120cjmp imp:msvbvm60!MethCallEngine
    0040120c
    00401212
    00401212ThunRTMain:
    00401212jmp imp:msvbvm60!ThunRTMain
    00401212
    00401218
    00401218_start:
    00401218push 0x403a0c
    0040121dcall ThunRTMain
    00401218
    00401222
    00401222 00 00 ..
    00401224
    00401224 struct COMRegistrationData
    00401224 bRegInfo uint32 0x00000000
    00401228 bSZProjectName uint32 0x401254
    0040122c bSZHelpDirectory uint32 0x401264
    00401230 bSZProjectDescription uint32 0x00000000
    00401234 uuidProjectClsId guid 5798c4fd-cbff-4300-8ace-09a100997a8c
    00401244 dwTlbLcid uint32 0x00000000
    00401248 wUnknown uint16 0x0000
    0040124a wTlbVerMajor int 1
    0040124c wTlbVerMinor int 0
    0040124e
    0040124e 2d 43 -C
    00401250 30 30 30 2d 000-
    00401254
    00401254 string "NewMoonlight",0
    00401261
    00401261 23 32 2e 00 00 00 00 #2.....
    00401268
    00401268 struct VBFormHeader
    00401268 bMagic uint8 0xff
    00401269 bVersion uint8 0xcc
    0040126a wGuidBlockSize uint16 0x0031
    0040126c bControlCount int 7
    0040126d uuidForm guid 816f015c-7d2b-4943-a6b7-eb9575199200
    0040127d uuidFormIface guid 91f2cccd-91be-461c-883f-07408b0af473
    0040128d uuidFormClass guid 33ad4f3a-6699-11cf-b70c-00aa0060d393
    0040129d dwReserved [9]uint32 {0, 0, 0, 0, 0, 0, 0, 0, 0}
    004012c1 cbControlData uint32 0x00002531
    004012c5 Begin VB.Form FrmMain
    004012d5 BackColor = &H80000000&
    004012da WindowState = 2 'Maximized
    004012dc ScaleMode = 1 'Twip
    004012df AutoRedraw = 0 'False
    004012df FontTransparent = -1 'True
    004012e1 DrawWidth = 28440
    004012e4 FillStyle = 0 'Solid
    004012e6 BorderStyle = 0 'None
    004012e8 Icon = <9166 bytes at 0x4012ed> ' ICO, 9158 bytes, 48x48, 32x32, 24x24, 16x16, sha256 a95df980a5780d16df75a4976ad5fe67e61e97694677f40cdea0a7255047e01d
    004036bb LinkTopic = "Form1"
    004036c4 MaxButton = 0 'False
    004036c6 MinButton = 0 'False
    004036c8 ControlBox = 0 'False
    004036ca Visible = 0 'False
    004036cd ClientLeft = 1710
    004036d1 ClientTop = 1065
    004036d5 ClientWidth = 3360
    004036d9 ClientHeight = 3450
    004036dd ShowInTaskbar = 0 'False