sub_4066F5(0e35):
USER32.GetActiveWindow
USER32.GetLastActivePopup
USER32.MessageBoxA
"user32.dll"
"MessageBoxA"
"GetActiveWindow"
"GetLastActivePopup"
|
sub_4052DA(33c3):
"TZ"
|
sub_4017F0(385c):
"Advanced DHTML Enable"
"http://"
"%d.%d.%d.%d"
"%d.%d.%d.%d"
"HTTP/1.0 200 Connection established\r\n\r\n"...
"HTTP/1.0 201 Unable to connect\r\n\r\n"
|
sub_522069(46bb):
KERNEL32.FreeLibrary
KERNEL32.VirtualFree
|
start(5627):
KERNEL32.VirtualAlloc
USER32.MessageBoxA
KERNEL32.GetModuleFileNameA
USER32.wsprintfA
KERNEL32.VirtualFree
KERNEL32.VirtualProtect
KERNEL32.GetModuleHandleA
KERNEL32.LoadLibraryExA
KERNEL32.GetProcAddress
KERNEL32.ExitProcess
|
sub_4016E0(70ab):
"serv1.alwaysproxy3.info"
|
sub_521402(983f):
KERNEL32.VirtualAlloc
KERNEL32.VirtualFree
|
sub_5220B6(9ab2):
KERNEL32.VirtualProtect
|
sub_5222A3(adc4):
KERNEL32.CreateMutexA
NTDLL.RtlGetLastWin32Error
"eXPressor_InstanceChecker_"
|
sub_522F84(b8f4):
KERNEL32.VirtualAlloc
|
sub_404E3C(fc50):
""
"..."
"Runtime Error!\n\nProgram: "
"\n\n"
"Microsoft Visual C++ Runtime Library"
|
sub_522AD4(fea3):
KERNEL32.LoadLibraryA
KERNEL32.GetProcAddress
KERNEL32.GetModuleHandleA
"wks"
|