sub_outside():
KERNEL32.ExitProcess
KERNEL32.GetVersionExA
KERNEL32.GetModuleHandleA
KERNEL32.GetCommandLineA
KERNEL32.GetStartupInfoA
KERNEL32.GetModuleFileNameA
|
sub_40374F(128c):
KERNEL32.VirtualAlloc
|
sub_404BEF(1310):
NTDLL.RtlAllocateHeap
|
sub_401EAD(13fb):
KERNEL32.GetModuleFileNameA
"C:\\m_unpacker\\packed.exe"
|
sub_403698(2299):
NTDLL.RtlReAllocateHeap
NTDLL.RtlAllocateHeap
KERNEL32.VirtualAlloc
NTDLL.RtlFreeHeap
|
sub_40330D(2585):
NTDLL.RtlAllocateHeap
|
sub_40234D(3cd4):
KERNEL32.LoadLibraryA
KERNEL32.GetProcAddress
"user32.dll"
"MessageBoxA"
"GetActiveWindow"
"GetLastActivePopup"
"GetUserObjectInformationA"
"GetProcessWindowStation"
|
sub_402071(4863):
KERNEL32.GetStartupInfoA
KERNEL32.GetFileType
KERNEL32.GetStdHandle
KERNEL32.LockResource
|
sub_401761(5547):
KERNEL32.GetModuleHandleA
KERNEL32.GetProcAddress
KERNEL32.ExitProcess
"mscoree.dll"
"CorExitProcess"
|
sub_404B0C(55d4):
KERNEL32.VirtualQuery
KERNEL32.GetSystemInfo
KERNEL32.VirtualAlloc
KERNEL32.VirtualProtect
|
sub_4022BE(5769):
KERNEL32.HeapCreate
KERNEL32.HeapDestroy
|
sub_401F4F(6487):
KERNEL32.GetEnvironmentStringsW
NTDLL.RtlGetLastWin32Error
KERNEL32.WideCharToMultiByte
KERNEL32.FreeEnvironmentStringsW
KERNEL32.GetEnvironmentStrings
KERNEL32.FreeEnvironmentStringsA
|
sub_4027FA(64e8):
KERNEL32.VirtualQuery
KERNEL32.InterlockedExchange
|
sub_404900(6848):
KERNEL32.GetLocaleInfoA
|
sub_403FCA(72cc):
KERNEL32.LCMapStringW
NTDLL.RtlGetLastWin32Error
KERNEL32.MultiByteToWideChar
KERNEL32.WideCharToMultiByte
KERNEL32.LCMapStringA
|
sub_403380(76df):
KERNEL32.VirtualFree
NTDLL.RtlFreeHeap
|
sub_402B7B(7906):
KERNEL32.GetCPInfo
|
sub_402F0B(8039):
NTDLL.RtlFreeHeap
|
sub_402F43(84dc):
NTDLL.RtlAllocateHeap
|
sub_40270C(8af0):
NTDLL.RtlUnwind
|
sub_401090(8c72):
KERNEL32.GetModuleFileNameA
KERNEL32.GetSystemDirectoryA
KERNEL32.lstrcpyn
KERNEL32.lstrcat
KERNEL32.LoadLibraryA
KERNEL32.GetProcAddress
KERNEL32.FreeLibrary
KERNEL32.GetTempPathA
KERNEL32.MoveFileExA
"\\iea.dll"
"DllRegisterServer"
"\\clr.exe"
"open"
"\\hp.exe"
"open"
"\\ff.exe"
"open"
|
sub_402D07(8dad):
KERNEL32.GetOEMCP
KERNEL32.GetACP
KERNEL32.GetCPInfo
|
sub_4018FC(8f02):
KERNEL32.GetModuleFileNameA
KERNEL32.GetStdHandle
KERNEL32.WriteFile
""
"..."
"Runtime Error!\n\nProgram: "
"\n\n"
"Microsoft Visual C++ Runtime Library"
|
sub_403E30(a788):
NTDLL.RtlAllocateHeap
NTDLL.RtlReAllocateHeap
|
sub_404386(bf7b):
KERNEL32.GetStringTypeW
NTDLL.RtlGetLastWin32Error
KERNEL32.MultiByteToWideChar
KERNEL32.GetStringTypeA
|
sub_401AAC(c327):
KERNEL32.UnhandledExceptionFilter
|
sub_404943(d361):
KERNEL32.GetCPInfo
KERNEL32.MultiByteToWideChar
KERNEL32.WideCharToMultiByte
|
sub_40145D(d5da):
KERNEL32.GetSystemTimeAsFileTime
KERNEL32.GetCurrentProcessId
KERNEL32.GetCurrentThreadId
KERNEL32.GetTickCount
KERNEL32.QueryPerformanceCounter
|
sub_401000(ea36):
KERNEL32.FindResourceA
KERNEL32.LoadResource
KERNEL32.SizeofResource
KERNEL32.LockResource
KERNEL32.CreateFileA
KERNEL32.WriteFile
KERNEL32.CloseHandle
|
sub_403F92(fdb6):
NTDLL.RtlSizeHeap
|
sub_4017FB(ff2c):
KERNEL32.GetCurrentProcess
KERNEL32.TerminateProcess
|