sub_4025D0(19ed): "CurrentUser" "sandbox" "vmware" |
sub_4026A0(363e): "Control Panel\\Mouse" "SwapMouseButtons" "0" |
sub_4024A0(3848): KERNEL32.GetModuleHandleA KERNEL32.CloseHandle |
sub_401030(7dea): KERNEL32.GlobalFree |
sub_401000(7e56): KERNEL32.GlobalAlloc |
start(8b1f): "0x001xFDK" |
sub_401C30(97df): ")1}" "0x001xFDK" ", k\x1Bī" ")1}" "0x001xFDK" "&!o" ", k\x1Bī" "0x001xFDK" "&!o" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" "0x001xFDK" |
sub_4018F0(a5c0): KERNEL32.GetModuleHandleA KERNEL32.FreeLibrary ")1}" ", k\x1Bī" "&!o" |
sub_401460(aeb3): KERNEL32.lstrcatA |
sub_401520(fde5): KERNEL32.LoadLibraryA "ntdll.dll" |