sub_outside(): KERNEL32.UnhandledExceptionFilter KERNEL32.GetCommandLineA KERNEL32.GetVersion KERNEL32.GetThreadLocale KERNEL32.GetCurrentThreadId |
sub_10001E74(024c): NTDLL.RtlEnterCriticalSection NTDLL.RtlLeaveCriticalSection |
sub_10007758(0553): KERNEL32.VirtualAlloc |
sub_100033E0(06e4): KERNEL32.GetLocaleInfoA |
sub_100072F4(083a): KERNEL32.CreateProcessA KERNEL32.GetThreadContext KERNEL32.ReadProcessMemory KERNEL32.VirtualAllocEx KERNEL32.WriteProcessMemory KERNEL32.SetThreadContext KERNEL32.ResumeThread |
sub_10004B48(08ad): "oversubscribed dynamic bit lengths tree"... "incomplete dynamic bit lengths tree" |
sub_100035E4(192d): KERNEL32.TlsSetValue |
sub_100010FC(325d): KERNEL32.LocalAlloc |
sub_10005CF0(34d7): "invalid literal/length code" "invalid distance code" |
sub_10007590(36a9): KERNEL32.GetModuleHandleA KERNEL32.FindResourceA KERNEL32.LoadResource KERNEL32.LockResource |
sub_100014C8(37a2): KERNEL32.VirtualFree |
sub_10003628(3b40): KERNEL32.TlsGetValue |
sub_100075D4(3bba): KERNEL32.GetModuleHandleA KERNEL32.FindResourceA KERNEL32.SizeofResource |
sub_10003674(3f4e): KERNEL32.GetModuleHandleA |
sub_10001098(5034): KERNEL32.GetStartupInfoA |
sub_10002678(51d7): KERNEL32.GetModuleFileNameA KERNEL32.GetCommandLineA |
sub_10002868(5311): ADVAPI32.RegOpenKeyExA ADVAPI32.RegQueryValueExA ADVAPI32.RegCloseKey "SOFTWARE\\Borland\\Delphi\\RTL" "FPUMaskValue" |
sub_10001304(5ba5): KERNEL32.VirtualAlloc KERNEL32.VirtualFree |
sub_100066BC(5c1d): "invalid distance code" "invalid literal/length code" |
sub_10001788(5edc): KERNEL32.InitializeCriticalSection NTDLL.RtlEnterCriticalSection KERNEL32.LocalAlloc NTDLL.RtlLeaveCriticalSection |
sub_10002FD4(5f8a): KERNEL32.FreeLibrary KERNEL32.ExitProcess |
sub_100037E0(85d9): KERNEL32.VirtualAlloc NTDLL.RtlDecompressBuffer |
sub_100035D0(8667): KERNEL32.LocalAlloc |
sub_10007610(8985): "RC_DATA" "NEOKURD" "RC_DATA" "NEOKURD" |
sub_10001434(8d75): KERNEL32.VirtualAlloc |
sub_10004BE4(8f4a): "oversubscribed literal/length tree" "incomplete literal/length tree" "oversubscribed distance tree" "incomplete distance tree" "empty distance tree with lengths" |
sub_100077BC(9853): "RC_DATA" "NEOKURD" "RC_DATA" "NEOKURD" |
sub_10004128(a183): "unknown compression method" "invalid window size" "incorrect header check" "need dictionary" "incorrect data check" |
sub_10002EBC(a4e9): "Runtime error at 00000000" |
sub_10002004(b988): NTDLL.RtlEnterCriticalSection NTDLL.RtlLeaveCriticalSection |
sub_1000184C(bffe): NTDLL.RtlEnterCriticalSection KERNEL32.LocalFree KERNEL32.VirtualFree NTDLL.RtlLeaveCriticalSection NTDLL.RtlDeleteCriticalSection |
sub_100038B0(cae7): KERNEL32.VirtualAlloc |
sub_1000137C(cbe7): KERNEL32.VirtualFree |
sub_100076B8(ce7f): KERNEL32.VirtualAlloc |
sub_10007714(cea9): "RC_DATA" "NEOKURD" "RC_DATA" "NEOKURD" |
sub_1000765C(cea9): "RC_DATA" "NEOKURD" "RC_DATA" "NEOKURD" |
sub_10002F48(cf12): KERNEL32.GetStdHandle KERNEL32.WriteFile USER32.MessageBoxA "Runtime error at 00000000" "Error" "Runtime error at 00000000" |
sub_10002838(d3f8): USER32.GetKeyboardType |
sub_10004F78(e095): "invalid block type" "invalid stored block lengths" "too many length or distance symbols" "invalid bit length repeat" |
sub_10002384(e369): NTDLL.RtlEnterCriticalSection NTDLL.RtlLeaveCriticalSection |
sub_1000258C(e4ee): USER32.CharNextA |
sub_100012A0(ebe9): KERNEL32.VirtualAlloc KERNEL32.VirtualFree |