sub_outside(): KERNEL32.UnhandledExceptionFilter KERNEL32.VirtualQuery KERNEL32.GetModuleFileNameA USER32.LoadStringA KERNEL32.ExitProcess |
sub_401D08(027a): KERNEL32.UnhandledExceptionFilter |
sub_403FE4(0713): KERNEL32.GetDiskFreeSpaceA |
sub_405E14(0c1b): KERNEL32.GetThreadLocale KERNEL32.GetStringTypeExA USER32.GetSystemMetrics |
sub_404E88(167e): KERNEL32.GetThreadLocale KERNEL32.EnumCalendarInfoA |
sub_403048(192d): KERNEL32.TlsSetValue |
sub_4021FC(20ae): KERNEL32.FreeLibrary KERNEL32.ExitProcess |
sub_405B58(240e): KERNEL32.GetVersionExA |
sub_406B18(2675): KERNEL32.LoadLibraryA KERNEL32.GetProcAddress "zงฅvขกงซง" " ฅขฆฆ ขฅฌ" "ฅงฅขฆฆ ขฅฌ" "งฅvขกงซง" "ฅงจฅขงงxซ" "ชก ฃชงขก" "ฅ กงฅขฆฆ" |
sub_407938(3834): "asdasdasdasdsa" |
sub_40308C(3b40): KERNEL32.TlsGetValue |
sub_406320(3bab): KERNEL32.GetModuleHandleA KERNEL32.GetProcAddress "GetDiskFreeSpaceExA" |
sub_402400(3bf9): KERNEL32.WideCharToMultiByte |
sub_4030D8(3f4e): KERNEL32.GetModuleHandleA |
sub_401488(51d7): KERNEL32.GetModuleFileNameA KERNEL32.GetCommandLineA |
sub_402F64(54db): USER32.LoadStringA |
sub_401428(58a0): KERNEL32.GetCommandLineA |
sub_401158(5961): NTDLL.RtlAllocateHeap |
sub_40116C(5c5c): NTDLL.RtlFreeHeap |
sub_406870(6596): NTDLL.RtlDecompressBuffer |
sub_407F08(6b91): KERNEL32.LoadLibraryA KERNEL32.GetProcAddress |
sub_401190(81dc): NTDLL.RtlReAllocateHeap |
sub_405D9C(821c): KERNEL32.GetCPInfo |
sub_407DF8(84c2): KERNEL32.LoadLibraryA KERNEL32.GetProcAddress "IsDebuggerPresent" |
sub_405C64(856a): USER32.CharNextA |
sub_403034(8667): KERNEL32.LocalAlloc |
sub_404CB0(8708): KERNEL32.GetThreadLocale |
sub_402AF4(8b0c): KERNEL32.GetModuleHandleA KERNEL32.GetProcAddress KERNEL32.lstrcpyn KERNEL32.FindFirstFileA KERNEL32.FindClose KERNEL32.lstrlen "GetLongPathNameA" |
sub_4057C0(8f14): KERNEL32.VirtualQuery KERNEL32.GetModuleFileNameA |
sub_405D28(9b61): KERNEL32.GetLocaleInfoA KERNEL32.GetACP |
sub_402A70(a00d): KERNEL32.GetModuleFileNameA |
sub_404C4C(bdfe): KERNEL32.GetLocaleInfoA |
sub_407CDC(c030): KERNEL32.GetModuleHandleA KERNEL32.GetModuleFileNameA |
sub_402AE0(c623): USER32.CharNextA |
sub_405F88(cb75): KERNEL32.GetThreadLocale |
sub_407B70(cfcc): KERNEL32.LoadLibraryA KERNEL32.GetProcAddress |
sub_402CAC(d955): KERNEL32.GetModuleFileNameA ADVAPI32.RegOpenKeyExA ADVAPI32.RegQueryValueExA ADVAPI32.RegCloseKey KERNEL32.lstrcpyn KERNEL32.GetThreadLocale KERNEL32.GetLocaleInfoA KERNEL32.lstrlen KERNEL32.LoadLibraryExA "Software\\Borland\\Locales" "Software\\Borland\\Locales" "Software\\Borland\\Delphi\\Locales" |
sub_404F38(da14): KERNEL32.GetThreadLocale "yyyy" "eeee" "yy" |
sub_404C00(e0af): KERNEL32.GetLocaleInfoA |
sub_40133C(e4ee): USER32.CharNextA |