sub_outside(): KERNEL32.SetErrorMode |
sub_403849(03ce): USER32.SetTimer KERNEL32.MulDiv USER32.wsprintfA USER32.SetWindowTextA USER32.SetDlgItemTextA USER32.ShowWindow |
sub_405DE5(0532): USER32.GetDlgItem USER32.GetClientRect USER32.GetSystemMetrics USER32.SendMessageA USER32.ShowWindow KERNEL32.CreateThread KERNEL32.CloseHandle USER32.CreatePopupMenu USER32.AppendMenuA USER32.GetWindowRect USER32.TrackPopupMenu USER32.OpenClipboard USER32.EmptyClipboard KERNEL32.GlobalAlloc KERNEL32.GlobalLock KERNEL32.lstrlen KERNEL32.GlobalUnlock USER32.SetClipboardData USER32.CloseClipboard |
sub_40658F(0c33): KERNEL32.GetFileAttributesA KERNEL32.CreateFileA |
sub_404440(0da6): KERNEL32.GetUserDefaultLangID USER32.SetWindowTextA "TTC Setup" |
sub_4063CF(1612): KERNEL32.lstrlen USER32.CharPrevA KERNEL32.lstrcat |
sub_4041E1(1a51): KERNEL32.lstrlen KERNEL32.lstrcmpi KERNEL32.GetFileAttributesA KERNEL32.lstrcpy USER32.LoadImageA USER32.RegisterClassA USER32.SystemParametersInfoA USER32.CreateWindowExA USER32.ShowWindow KERNEL32.LoadLibraryA USER32.GetClassInfoA USER32.DialogBoxParamA "Call" "Call" ".exe" "RichEd20.dll" "RichEdit20A" |
sub_405AEF(1acf): USER32.SendMessageA |
sub_4064B0(1b5d): KERNEL32.lstrcpy KERNEL32.lstrlen KERNEL32.GetFileAttributesA "C:\\" |
sub_404A1B(1c64): USER32.SendMessageA |
sub_4067BD(1d16): ADVAPI32.RegOpenKeyExA ADVAPI32.RegQueryValueExA ADVAPI32.RegCloseKey |
sub_406827(21ad): USER32.wsprintfA "%d" |
sub_40EEDB(21b8): KERNEL32.lstrcat |
sub_41AF33(21b8): KERNEL32.lstrcat |
sub_40521F(21c2): USER32.GetMessagePos USER32.ScreenToClient USER32.SendMessageA |
sub_404B17(225b): USER32.CheckDlgButton USER32.GetDlgItem USER32.SendMessageA USER32.GetSysColor KERNEL32.lstrlen USER32.LoadCursorA USER32.SetCursor "Call" "open" |
sub_406202(2537): USER32.MessageBoxA "TTC Setup" |
sub_403DE8(2ecf): KERNEL32.CreateDirectoryA "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\" |
sub_404DBF(3289): USER32.SendMessageA |
sub_4038D5(3aed): KERNEL32.GetTickCount KERNEL32.GetModuleFileNameA KERNEL32.GetFileSize USER32.CreateDialogParamA USER32.DispatchMessageA USER32.PeekMessageA USER32.DestroyWindow KERNEL32.GlobalFree KERNEL32.SetFilePointer "C:\\m_unpacker" "Error launching installer" "verifying installer: %d%%" "The installer you are trying to use is "... |
sub_4061E6(3c14): USER32.GetDlgItemTextA |
sub_404A04(3cd5): USER32.SendMessageA |
sub_403DD1(3cd5): KERNEL32.SetFilePointer |
sub_406253(45c8): KERNEL32.lstrcpy KERNEL32.lstrcat KERNEL32.lstrlen KERNEL32.FindFirstFileA KERNEL32.SetFileAttributesA KERNEL32.DeleteFileA KERNEL32.FindNextFileA KERNEL32.FindClose KERNEL32.RemoveDirectoryA "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... "\\*.*" |
sub_406417(4982): KERNEL32.lstrlen USER32.CharPrevA |
sub_4049A8(4e9e): USER32.SendMessageA |
sub_405176(4f44): KERNEL32.lstrlen USER32.wsprintfA "%d.%d%s%s" |
sub_404DE3(515e): USER32.SetDlgItemTextA "{7B4DD627-E555-4373-AA84-4E5241613B7A}" |
sub_406606(5265): KERNEL32.GetModuleHandleA KERNEL32.GetProcAddress KERNEL32.CloseHandle KERNEL32.GetShortPathNameA USER32.wsprintfA KERNEL32.GetWindowsDirectoryA KERNEL32.lstrcat KERNEL32.CreateFileA KERNEL32.GetFileSize KERNEL32.CreateFileMappingA KERNEL32.MapViewOfFile KERNEL32.lstrcpy KERNEL32.UnmapViewOfFile KERNEL32.SetFilePointer KERNEL32.SetEndOfFile "KERNEL32.dll" "MoveFileExA" "%s=%s\r\n" "\\wininit.ini" "[Rename]\r\n" "[Rename]\r\n" "\n[" |
sub_403D9F(554a): KERNEL32.ReadFile |
sub_4020E9(5736): USER32.PostQuitMessage KERNEL32.Sleep USER32.SetForegroundWindow USER32.ShowWindow KERNEL32.SetFileAttributesA KERNEL32.CreateDirectoryA KERNEL32.lstrcpy KERNEL32.SetCurrentDirectoryA KERNEL32.lstrlen KERNEL32.lstrcat KERNEL32.MoveFileA KERNEL32.GetFullPathNameA KERNEL32.GetShortPathNameA KERNEL32.SearchPathA KERNEL32.CompareFileTime KERNEL32.GetFileAttributesA KERNEL32.SetFileTime KERNEL32.CloseHandle KERNEL32.lstrcmpi KERNEL32.GetEnvironmentVariableA KERNEL32.ExpandEnvironmentStringsA USER32.wsprintfA KERNEL32.GlobalFree USER32.SendMessageTimeoutA USER32.SendMessageA USER32.FindWindowExA USER32.IsWindow USER32.GetDlgItem USER32.SetWindowLongA USER32.GetClientRect USER32.LoadImageA GDI32.DeleteObject USER32.GetDC GDI32.GetDeviceCaps KERNEL32.MulDiv GDI32.CreateFontIndirectA USER32.EnableWindow KERNEL32.WaitForSingleObject USER32.DispatchMessageA USER32.PeekMessageA KERNEL32.GetExitCodeProcess KERNEL32.SetErrorMode KERNEL32.GetModuleHandleA KERNEL32.LoadLibraryA KERNEL32.GetProcAddress KERNEL32.FreeLibrary KERNEL32.MultiByteToWideChar KERNEL32.WritePrivateProfileStringA KERNEL32.GetPrivateProfileStringA ADVAPI32.RegDeleteValueA ADVAPI32.RegCloseKey ADVAPI32.RegCreateKeyExA ADVAPI32.RegSetValueExA ADVAPI32.RegQueryValueExA ADVAPI32.RegEnumKeyA ADVAPI32.RegEnumValueA KERNEL32.WriteFile KERNEL32.ReadFile KERNEL32.SetFilePointer KERNEL32.FindClose KERNEL32.FindNextFileA KERNEL32.FindFirstFileA KERNEL32.DeleteFileA USER32.InvalidateRect "{7B4DD627-E555-4373-AA84-4E5241613B7A}" "{7B4DD627-E555-4373-AA84-4E5241613B7A}" "C:\\Program Files\\Common Files" "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... "->" "Call" "C:\\Program Files\\Common Files" "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... "{7B4DD627-E555-4373-AA84-4E5241613B7A}" "{7B4DD627-E555-4373-AA84-4E5241613B7A}" "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... "{7B4DD627-E555-4373-AA84-4E5241613B7A}" "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... "Call" "%s %s" "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... "C:\\Program Files\\Common Files" "C:\\Program Files\\Common Files" "{7B4DD627-E555-4373-AA84-4E5241613B7A}" "C:\\Program Files\\Common Files" "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... |
sub_403753(57c5): "Call" |
sub_405CAC(5a50): KERNEL32.lstrlen KERNEL32.lstrcat USER32.SetWindowTextA USER32.SendMessageA |
sub_405BC5(5c4e): USER32.IsWindowVisible USER32.SendMessageA KERNEL32.lstrcpy USER32.CallWindowProcA "{7B4DD627-E555-4373-AA84-4E5241613B7A}" |
sub_403B73(64e8): KERNEL32.GetTickCount KERNEL32.MulDiv USER32.wsprintfA KERNEL32.WriteFile "... %d%%" |
sub_406244(6879): KERNEL32.GlobalAlloc |
sub_4020D8(6879): "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... |
sub_4049F1(6879): USER32.EnableWindow |
sub_405A14(6e57): USER32.SendMessageA |
sub_40618A(7b11): KERNEL32.GetFileAttributesA KERNEL32.CreateProcessA KERNEL32.CloseHandle |
sub_405110(88c6): USER32.SendMessageA |
sub_404A36(8a0b): USER32.GetWindowLongA USER32.GetSysColor GDI32.SetTextColor GDI32.SetBkMode GDI32.SetBkColor GDI32.DeleteObject GDI32.CreateBrushIndirect |
sub_404E2A(8a53): USER32.SetDlgItemTextA USER32.GetDlgItem KERNEL32.lstrcmpi KERNEL32.lstrcat KERNEL32.lstrcpy KERNEL32.GetModuleHandleA KERNEL32.GetProcAddress KERNEL32.GetDiskFreeSpaceA KERNEL32.MulDiv "{7B4DD627-E555-4373-AA84-4E5241613B7A}" "Call" "KERNEL32.dll" "GetDiskFreeSpaceExA" |
sub_403793(8e3b): ADVAPI32.RegOpenKeyExA ADVAPI32.RegEnumKeyA ADVAPI32.RegCloseKey ADVAPI32.RegDeleteKeyA |
sub_40201D(906d): KERNEL32.MulDiv USER32.SendMessageA "{7B4DD627-E555-4373-AA84-4E5241613B7A}" |
sub_4068D5(933e): KERNEL32.lstrcpy KERNEL32.GetSystemDirectoryA KERNEL32.GetWindowsDirectoryA KERNEL32.lstrcat KERNEL32.lstrlen KERNEL32.lstrcpyn "Call" "\\Microsoft\\Internet Explorer\\Quick Laun"... "CommonFilesDir" "Software\\Microsoft\\Windows\\CurrentVersi"... "ProgramFilesDir" "Software\\Microsoft\\Windows\\CurrentVersi"... "{7B4DD627-E555-4373-AA84-4E5241613B7A}" "Call" |
sub_404AE3(a485): KERNEL32.lstrcpyn KERNEL32.lstrlen |
sub_406BAB(a49e): KERNEL32.SetErrorMode KERNEL32.FindFirstFileA KERNEL32.FindClose |
sub_4049CF(a5a9): USER32.SetDlgItemTextA |
sub_406B09(a68f): USER32.CharNextA USER32.CharPrevA "*?|<>/\":" |
sub_40526B(ab1f): USER32.GetDlgItem USER32.LoadBitmapA USER32.SetWindowLongA USER32.SendMessageA GDI32.DeleteObject USER32.GetWindowLongA USER32.ShowWindow KERNEL32.GlobalFree USER32.SetDlgItemTextA |
start(ac32): KERNEL32.lstrcpy KERNEL32.GetTempPathA KERNEL32.GetWindowsDirectoryA KERNEL32.lstrcat KERNEL32.DeleteFileA KERNEL32.GetCommandLineA KERNEL32.lstrcpyn KERNEL32.GetModuleHandleA USER32.CharNextA KERNEL32.ExitProcess KERNEL32.GetModuleFileNameA KERNEL32.lstrcmpi KERNEL32.CopyFileA KERNEL32.CloseHandle KERNEL32.GetProcAddress KERNEL32.GetCurrentProcess KERNEL32.GetTickCount USER32.SendMessageA USER32.ExitWindowsEx "Error writing temporary file. Make sure"... "NSIS Error" "TTC Setup" "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\" "\\Temp" "Error launching installer" "C:\\Program Files\\Common Files" "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\" "A~NSISu_.exe" "\" " " _?=" "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\" "ADVAPI32.dll" "OpenProcessToken" "LookupPrivilegeValueA" "AdjustTokenPrivileges" "SeShutdownPrivilege" |
sub_4063FB(b7d0): USER32.CharNextA |
sub_401E32(b88f): USER32.DefWindowProcA USER32.BeginPaint USER32.GetClientRect GDI32.CreateBrushIndirect USER32.FillRect GDI32.DeleteObject GDI32.CreateFontIndirectA GDI32.SetBkMode GDI32.SetTextColor GDI32.SelectObject USER32.DrawTextA USER32.EndPaint "TTC Setup" |
sub_406523(d152): KERNEL32.lstrlen KERNEL32.lstrcmpi USER32.CharNextA |
sub_40381A(d78f): ADVAPI32.RegOpenKeyExA |
sub_4065BE(e20a): KERNEL32.GetTickCount KERNEL32.GetTempFileNameA |
sub_406463(f26e): USER32.CharNextA |
sub_4041BC(f636): KERNEL32.CloseHandle "C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\nsy2"... |
sub_4044FB(fd89): USER32.SetWindowPos USER32.ShowWindow USER32.DestroyWindow USER32.SetWindowLongA USER32.IsWindowEnabled USER32.GetDlgItem USER32.SendMessageA USER32.SetClassLongA USER32.EnableWindow KERNEL32.lstrcpy KERNEL32.lstrlen USER32.SetWindowTextA USER32.CreateDialogParamA USER32.GetWindowRect USER32.ScreenToClient USER32.EndDialog "TTC Setup" |