sub_40AFB0(01b1): KERNEL32.GetCurrentProcess KERNEL32.TerminateProcess KERNEL32.ExitProcess |
sub_406E60(0493): WININET.InternetAutodial WININET.InternetOpenA WININET.InternetOpenUrlA WININET.InternetReadFile USER32.LoadStringA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW ADVAPI32.RegCreateKeyExA ADVAPI32.RegCloseKey WININET.InternetCloseHandle "http://prs.payperdownload.nl" "http://prs.payperdownload.nl" "del" "http://prs.payperdownload.nl/radius/dia"... "callrecords" "call" "realnumber" "price" "countrycode" "xx" "XX" "\\" "\\" "\\" "phonenumber1" "phonenumber2" "price1" "price2" "cc" |
sub_401060(093c): KERNEL32.CreateEventA KERNEL32.CreateThread |
sub_40A620(0aa6): KERNEL32.LoadLibraryA KERNEL32.GetProcAddress KERNEL32.FreeLibrary KERNEL32.lstrcpynA "SHGetFolderPathA" |
sub_40A2D0(1042): KERNEL32.WideCharToMultiByte |
sub_409C40(1845): KERNEL32.lstrcpynA |
sub_409C20(1845): KERNEL32.lstrcpynA |
sub_409840(21d3): KERNEL32.lstrcpynA " " |
sub_404DC0(228e): KERNEL32.GetCurrentThreadId USER32.CreateDialogParamA |
sub_4036E0(2518): USER32.LoadStringA KERNEL32.lstrlenA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW ADVAPI32.RegOpenKeyExA ADVAPI32.RegCloseKey KERNEL32.DeleteFileA "\\" "\\" "\\" "uninstExe" "uninstExe" "uninstShortcut" "uninstShortcut" "SOFTWARE\\Microsoft\\Windows\\CurrentVersi"... |
sub_402DE0(2a08): ADVAPI32.RegCreateKeyExA ADVAPI32.RegCloseKey |
sub_404ED0(2cdc): USER32.SetWindowLongA |
sub_404320(3244): USER32.LoadStringA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW ADVAPI32.RegCreateKeyExA ADVAPI32.RegCloseKey "\\" "\\" "\\" "uninstExe" "uninstShortcut" |
sub_40A840(34a2): USER32.LoadStringA KERNEL32.lstrlenA KERNEL32.MultiByteToWideChar |
sub_4081B0(368d): ADVAPI32.RegOpenKeyExA ADVAPI32.RegCloseKey USER32.LoadStringA KERNEL32.lstrlenA KERNEL32.lstrlenW ADVAPI32.RegCreateKeyExA "\\" "\\" "\\" |
sub_4018A0(3db4): KERNEL32.lstrlenW KERNEL32.WideCharToMultiByte KERNEL32.LoadLibraryExA KERNEL32.FindResourceA KERNEL32.LoadResource KERNEL32.SizeofResource KERNEL32.FreeLibrary |
sub_4084F0(4cd5): USER32.LoadStringA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW ADVAPI32.RegCreateKeyExA ADVAPI32.RegSetValueExA ADVAPI32.RegCloseKey "\\" "\\" "\\" "Prefix" |
sub_405180(4cdb): USER32.DestroyWindow USER32.PostQuitMessage |
sub_408E00(4efa): KERNEL32.lstrlenA KERNEL32.lstrcpyA |
sub_409520(508d): KERNEL32.FreeLibrary KERNEL32.LoadLibraryA "RASAPI32.DLL" "RasEnumDevicesA" "RasDialA" "RasGetErrorStringA" "RasGetEntryPropertiesA" "RasSetEntryPropertiesA" "RasHangUpA" "RasEnumConnectionsA" "RasGetConnectStatusA" "RasSetEntryDialParamsA" |
sub_405020(5190): USER32.LoadStringA KERNEL32.lstrlenA KERNEL32.MultiByteToWideChar |
sub_402E50(51b6): ADVAPI32.RegOpenKeyExA ADVAPI32.RegCloseKey |
sub_401D60(5273): KERNEL32.IsDBCSLeadByte |
sub_40A170(5529): KERNEL32.lstrlenA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW |
sub_40A350(55cc): KERNEL32.lstrcpynA KERNEL32.lstrlenA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW |
sub_40BA13(5682): KERNEL32.GetStringTypeW KERNEL32.GetStringTypeA KERNEL32.MultiByteToWideChar |
sub_402FF0(57d3): USER32.CharNextA KERNEL32.lstrcmpiA KERNEL32.lstrlenA KERNEL32.MultiByteToWideChar ADVAPI32.RegSetValueExA |
sub_401E70(5d17): KERNEL32.lstrlenW KERNEL32.WideCharToMultiByte KERNEL32.lstrcmpiA |
sub_401710(61b9): KERNEL32.lstrlenW KERNEL32.WideCharToMultiByte KERNEL32.LoadLibraryExA KERNEL32.FindResourceA KERNEL32.LoadResource KERNEL32.SizeofResource KERNEL32.FreeLibrary |
sub_402370(6737): USER32.CharNextA KERNEL32.lstrcmpiA ADVAPI32.RegDeleteKeyA KERNEL32.lstrlenA ADVAPI32.RegDeleteValueA KERNEL32.lstrcpynA "TYPELIB" "TYPELIB" |
sub_404FF0(689b): SHELL32.ShellExecuteA "open" |
sub_405640(6d51): USER32.wvsprintfA |
sub_404A70(6f60): KERNEL32.LoadLibraryA KERNEL32.GetProcAddress KERNEL32.FreeLibrary "oleaut32.dll" "UnRegisterTypeLib" |
sub_403450(71fb): ADVAPI32.RegQueryInfoKeyA ADVAPI32.RegEnumValueA |
sub_40ABF0(7365): ADVAPI32.RegQueryValueExA ADVAPI32.RegCloseKey ADVAPI32.RegSetValueExA |
sub_40A460(7376): ADVAPI32.RegOpenKeyExA ADVAPI32.RegCloseKey KERNEL32.lstrlenA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW |
sub_40A680(8343): KERNEL32.lstrlenA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW KERNEL32.FreeLibrary "Shell32.dll" "SHFolder.dll" |
sub_4057A0(8a2b): USER32.SetDlgItemTextA |
sub_40BB5C(8af0): NTDLL.RtlUnwind |
sub_407EC0(9279): USER32.LoadStringA KERNEL32.lstrlenA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW ADVAPI32.RegCloseKey "\\" "\\" "\\" |
sub_4097E0(952e): KERNEL32.lstrcmpA |
sub_402DC0(99d6): ADVAPI32.RegCloseKey |
sub_403400(9a34): ADVAPI32.RegQueryInfoKeyA |
sub_406560(9a98): USER32.LoadStringA KERNEL32.lstrlenA KERNEL32.MultiByteToWideChar |
sub_405500(9db4): KERNEL32.lstrcmpA KERNEL32.lstrcpynA |
sub_40B540(a056): KERNEL32.DeleteFileA |
sub_408980(a317): USER32.LoadStringA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW ADVAPI32.RegOpenKeyExA ADVAPI32.RegCloseKey "\\" "\\" "\\" "cc" "cc" |
sub_406D00(a3f3): USER32.DestroyWindow USER32.PostQuitMessage |
sub_401D20(a403): USER32.CharNextA |
sub_40B7C4(a93f): KERNEL32.LCMapStringW KERNEL32.LCMapStringA KERNEL32.MultiByteToWideChar KERNEL32.WideCharToMultiByte |
sub_4051A0(aa74): USER32.LoadStringA KERNEL32.MultiByteToWideChar USER32.wvsprintfA USER32.MessageBoxA "?" "&" "error=fatal&filename=" "error=fatal&filename=" "error=fatal&filename=" "&linenumber=" "&linenumber=" "&linenumber=" "&lasterror=" "&lasterror=" "&lasterror=" |
sub_405680(aec7): USER32.LoadStringA KERNEL32.lstrlenA KERNEL32.MultiByteToWideChar USER32.SetDlgItemTextA |
sub_401560(aef0): KERNEL32.MultiByteToWideChar |
sub_4064E0(af57): USER32.SendDlgItemMessageA USER32.SetTimer |
sub_402EA0(afe8): ADVAPI32.RegOpenKeyExA ADVAPI32.RegCloseKey ADVAPI32.RegDeleteKeyA |
EnumFunc(b091): USER32.GetClassWord USER32.GetWindowLongA USER32.ShowWindow USER32.SetForegroundWindow USER32.SetFocus |
sub_4039C0(b350): USER32.LoadStringA KERNEL32.lstrlenW KERNEL32.SetFileAttributesA KERNEL32.lstrcmpA KERNEL32.CopyFileA ADVAPI32.RegCreateKeyExA KERNEL32.lstrlenA ADVAPI32.RegCloseKey SHELL32.SHChangeNotify "\\" "\\" "\\" "c:\\" "c:\\" "c:\\" "\\" "\\" "\\" "." "." "." "\\" "\\" "\\" ".exe" ".exe" ".exe" "\\" "\\" "\\" ".lnk" ".lnk" ".lnk" "Internet Dialer" "SOFTWARE\\Microsoft\\Windows\\CurrentVersi"... "Delsim Dialer" "Delsim Dialer" "DisplayName" " -u" " -u" " -u" "UninstallString" |
sub_405C90(b514): USER32.SetWindowLongA USER32.LoadStringA KERNEL32.lstrlenA KERNEL32.MultiByteToWideChar USER32.SetWindowTextA KERNEL32.lstrcmpA USER32.SendDlgItemMessageA USER32.EnableWindow USER32.SetFocus USER32.LoadImageA USER32.SendMessageA "xx" "D:\\Work\\Splendo\\Dialer\\working\\dialer h"... "modem" "isdn" |
sub_404FC0(b618): USER32.GetDlgItem USER32.PostMessageA |
sub_406670(b732): "%s" |
start(b861): KERNEL32.GetCommandLineA KERNEL32.GetStartupInfoA KERNEL32.GetModuleHandleA |
sub_4010C0(ba97): KERNEL32.GetCommandLineA KERNEL32.GetSystemInfo KERNEL32.GetCurrentThreadId KERNEL32.GetModuleFileNameA KERNEL32.GetShortPathNameA KERNEL32.lstrlenA KERNEL32.lstrlenW USER32.GetDesktopWindow USER32.ShowWindow KERNEL32.Sleep "UnregServer" "RegServer" "Module" "REGISTRY" "Module" "REGISTRY" |
sub_40B50B(bab4): KERNEL32.GetSystemTimeAsFileTime |
sub_409C70(bbbb): KERNEL32.lstrcpynA |
sub_409C90(bbbb): KERNEL32.lstrcpynA |
sub_40AA70(be2f): KERNEL32.lstrlenA USER32.wsprintfA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW "%%%2x" |
sub_404C30(bff7): KERNEL32.GetModuleFileNameA KERNEL32.lstrlenW KERNEL32.WideCharToMultiByte KERNEL32.lstrcatA KERNEL32.MultiByteToWideChar KERNEL32.lstrcpyA ".tlb" |
sub_406E00(c216): USER32.GetDlgItemTextA |
sub_407820(c64d): WININET.InternetAutodial WININET.InternetOpenA WININET.InternetOpenUrlA WININET.InternetReadFile USER32.LoadStringA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW ADVAPI32.RegCreateKeyExA ADVAPI32.RegCloseKey WININET.InternetCloseHandle "http://prs.payperdownload.nl" "http://prs.payperdownload.nl" "del" "http://prs.payperdownload.nl/radius/dia"... "callrecords" "call" "realnumber" "price" "\\" "\\" "\\" "xx" "phonenumber2" "price2" "phonenumber1" "price1" |
sub_409BD0(c792): KERNEL32.lstrcpyA KERNEL32.lstrlenA "," |
sub_409720(c8b0): "modem" "isdn" |
sub_408E90(c91f): USER32.LoadStringA |
sub_405BD0(c958): USER32.GetClassWord USER32.GetWindowLongA USER32.EnumWindows |
sub_409160(cdb5): KERNEL32.lstrlenA ADVAPI32.RegSetValueExA |
sub_4099D0(ce67): KERNEL32.lstrlenA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW KERNEL32.lstrcpynA |
sub_404810(d6bb): KERNEL32.lstrlenW |
sub_409B90(da71): KERNEL32.lstrcpynA |
sub_409BB0(da71): KERNEL32.lstrcpynA |
sub_409450(db5e): USER32.LoadStringA |
sub_4093B0(db5e): USER32.LoadStringA |
sub_40B16E(dbe4): KERNEL32.CreateDirectoryA |
sub_40A980(dc9c): KERNEL32.lstrlenA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW |
sub_401000(e0ee): KERNEL32.CloseHandle USER32.PostThreadMessageA |
sub_405830(e297): USER32.LoadStringA KERNEL32.lstrlenA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW "\\" "\\" "\\" |
sub_409190(e3c0): ADVAPI32.RegCreateKeyExA ADVAPI32.RegCloseKey "version" "serial" "username1" "username2" "password1" "password2" "connecttime" |
sub_401DC0(e497): KERNEL32.lstrlenW KERNEL32.WideCharToMultiByte KERNEL32.IsDBCSLeadByte |
sub_408FC0(eacd): ADVAPI32.RegCreateKeyExA ADVAPI32.RegCloseKey "version" "serial" "username1" "username2" "password1" "password2" "phonenumber1" "phonenumber2" "connecttime" |
sub_408DD0(ef6a): KERNEL32.lstrcmpA |
DialogFunc(f074): KERNEL32.GetCurrentThreadId KERNEL32.GetCurrentProcess KERNEL32.FlushInstructionCache USER32.SetWindowLongA |
sub_4055A0(f6bd): USER32.LoadStringA USER32.wsprintfA USER32.wvsprintfA "resource %ld not found" |
sub_40B4C8(f87e): KERNEL32.GetSystemTimeAsFileTime |
sub_401A30(fab6): KERNEL32.lstrlenA KERNEL32.lstrcpynA |
sub_408BE0(fcfa): "2.0" |
sub_40ACD0(fd2d): KERNEL32.MultiByteToWideChar |
sub_4086F0(febd): USER32.LoadStringA KERNEL32.MultiByteToWideChar KERNEL32.lstrlenW ADVAPI32.RegOpenKeyExA ADVAPI32.RegCloseKey "\\" "\\" "\\" "Prefix" "Prefix" |
sub_406720(ff56): USER32.KillTimer USER32.ShowWindow USER32.SetTimer USER32.SendDlgItemMessageA "Dial: %d - %s" "xx" |