sub_outside(): KERNEL32.CreateFileA KERNEL32.GetFileSize KERNEL32.SetFilePointer KERNEL32.ReadFile KERNEL32.SetEndOfFile KERNEL32.GetStdHandle KERNEL32.GetFileType KERNEL32.CloseHandle NTDLL.RtlGetLastWin32Error KERNEL32.VirtualQuery KERNEL32.GetModuleFileNameA USER32.LoadStringA KERNEL32.WriteFile USER32.MessageBoxA KERNEL32.LoadLibraryA KERNEL32.GetProcAddress KERNEL32.ExitProcess KERNEL32.CreateDirectoryA KERNEL32.FreeLibrary |
sub_4021A4(027a): KERNEL32.UnhandledExceptionFilter |
sub_404520(0713): KERNEL32.GetDiskFreeSpaceA |
sub_406350(0c1b): KERNEL32.GetThreadLocale KERNEL32.GetStringTypeExA USER32.GetSystemMetrics |
sub_401844(1395): NTDLL.RtlGetLastWin32Error |
sub_4053C4(167e): KERNEL32.GetThreadLocale KERNEL32.EnumCalendarInfoA |
sub_403494(192d): KERNEL32.TlsSetValue |
sub_4024E0(20ae): KERNEL32.FreeLibrary KERNEL32.ExitProcess |
sub_4014EC(218c): KERNEL32.GetSystemTime |
sub_404420(22e2): KERNEL32.FindFirstFileA KERNEL32.FindClose KERNEL32.FileTimeToLocalFileTime KERNEL32.FileTimeToDosDateTime |
sub_406094(240e): KERNEL32.GetVersionExA |
sub_407AC0(3341): KERNEL32.GetCurrentDirectoryA |
sub_401314(36be): NTDLL.RtlGetLastWin32Error |
sub_4034D8(3b40): KERNEL32.TlsGetValue |
sub_40685C(3bab): KERNEL32.GetModuleHandleA KERNEL32.GetProcAddress "GetDiskFreeSpaceExA" |
sub_4026E4(3bf9): KERNEL32.WideCharToMultiByte |
sub_403524(3f4e): KERNEL32.GetModuleHandleA |
sub_401528(4636): KERNEL32.ReadFile NTDLL.RtlGetLastWin32Error |
sub_40148C(51d7): KERNEL32.GetModuleFileNameA KERNEL32.GetCommandLineA |
sub_4033B0(54db): USER32.LoadStringA |
sub_4011B0(5961): NTDLL.RtlAllocateHeap |
sub_4011C4(5c5c): NTDLL.RtlFreeHeap |
sub_406DAC(6596): NTDLL.RtlDecompressBuffer |
sub_407758(6b61): KERNEL32.LoadLibraryA KERNEL32.GetProcAddress |
sub_4011E8(81dc): NTDLL.RtlReAllocateHeap |
sub_4062D8(821c): KERNEL32.GetCPInfo |
sub_4061A0(856a): USER32.CharNextA |
sub_403480(8667): KERNEL32.LocalAlloc |
sub_4051EC(8708): KERNEL32.GetThreadLocale |
sub_402F40(8b0c): KERNEL32.GetModuleHandleA KERNEL32.GetProcAddress KERNEL32.lstrcpynA KERNEL32.FindFirstFileA KERNEL32.FindClose KERNEL32.lstrlenA "GetLongPathNameA" |
sub_405CFC(8f14): KERNEL32.VirtualQuery KERNEL32.GetModuleFileNameA |
sub_4015B4(9a30): NTDLL.RtlGetLastWin32Error |
sub_406264(9b61): KERNEL32.GetLocaleInfoA KERNEL32.GetACP |
sub_406F88(9e36): "add file location" |
sub_402EBC(a00d): KERNEL32.GetModuleFileNameA |
sub_4015A4(abfd): KERNEL32.CloseHandle |
sub_401568(acbe): KERNEL32.WriteFile NTDLL.RtlGetLastWin32Error |
sub_405188(bdfe): KERNEL32.GetLocaleInfoA |
sub_4064C4(cb75): KERNEL32.GetThreadLocale |
sub_4070E0(cdb5): KERNEL32.LoadLibraryA KERNEL32.GetProcAddress NTDLL.ZwUnmapViewOfSection KERNEL32.VirtualProtectEx KERNEL32.TerminateProcess "xĨ Ģt ĨĐĨ" "Ģ ĪĪ~ ĢŠ" "ĢĨĢ ĪĪ~ ĢŠ" "Ĩ Ģt ĨĐĨ" |
sub_4019C8(cf52): KERNEL32.CreateFileA KERNEL32.GetStdHandle NTDLL.RtlGetLastWin32Error |
sub_403450(d00e): KERNEL32.GetProcessHeap KERNEL32.GetCurrentThreadId |
sub_4030F8(d955): KERNEL32.GetModuleFileNameA ADVAPI32.RegOpenKeyExA ADVAPI32.RegQueryValueExA ADVAPI32.RegCloseKey KERNEL32.lstrcpynA KERNEL32.GetThreadLocale KERNEL32.GetLocaleInfoA KERNEL32.lstrlenA KERNEL32.LoadLibraryExA "Software\\Borland\\Locales" "Software\\Borland\\Locales" "Software\\Borland\\Delphi\\Locales" |
sub_405474(da14): KERNEL32.GetThreadLocale "yyyy" "eeee" "yy" |
sub_40797C(db11): KERNEL32.GetEnvironmentVariableA |
sub_40513C(e0af): KERNEL32.GetLocaleInfoA |
sub_4013A0(e4ee): USER32.CharNextA |
sub_4075F4(e813): KERNEL32.LoadLibraryA KERNEL32.GetProcAddress "xĨwrĨĨĢĶĨĪr" |
sub_402F2C(f616): USER32.CharNextA |
sub_406FBC(f6ca): ADVAPI32.GetUserNameA |