sub_outside():
USER32.SetTimer
KERNEL32.MulDiv
USER32.wsprintfA
USER32.SetWindowTextA
USER32.SetDlgItemTextA
USER32.ShowWindow
|
sub_401000(0204):
USER32.DefWindowProcA
USER32.BeginPaint
USER32.GetClientRect
GDI32.CreateBrushIndirect
USER32.FillRect
GDI32.DeleteObject
GDI32.CreateFontIndirectA
GDI32.SetBkMode
GDI32.SetTextColor
GDI32.SelectObject
USER32.DrawTextA
USER32.EndPaint
"NSIS Error"
|
sub_4033D7(0b1b):
KERNEL32.ReadFile
|
sub_403A96(0eac):
KERNEL32.CloseHandle
KERNEL32.GlobalFree
|
sub_403756(0fb8):
KERNEL32.GetTickCount
KERNEL32.GetModuleFileNameA
KERNEL32.GetFileSize
USER32.CreateDialogParamA
USER32.DestroyWindow
KERNEL32.CreateFileA
USER32.DispatchMessageA
USER32.PeekMessageA
KERNEL32.GlobalFree
"Error launching installer"
"verifying installer: %d%%"
"C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\"
"Error writing temporary file. Make sure"...
"The installer you are trying to use is "...
|
sub_4015C7(15c4):
ADVAPI32.RegOpenKeyExA
|
sub_4061A6(1612):
KERNEL32.lstrlen
USER32.CharPrevA
KERNEL32.lstrcat
"\\"
|
sub_4013E7(16b5):
KERNEL32.MulDiv
USER32.SendMessageA
|
sub_405A5A(17e7):
KERNEL32.lstrlen
KERNEL32.lstrcmpi
KERNEL32.GetFileAttributesA
KERNEL32.lstrcpy
USER32.LoadImageA
USER32.RegisterClassA
USER32.SystemParametersInfoA
USER32.CreateWindowExA
USER32.ShowWindow
KERNEL32.LoadLibraryA
USER32.GetClassInfoA
USER32.DialogBoxParamA
".exe"
"RichEd20.dll"
"RichEdit20A"
|
sub_405F5B(21ad):
USER32.wsprintfA
"%d"
|
sub_403A62(2ecf):
KERNEL32.CreateDirectoryA
"C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\"
|
sub_40622D(2f1a):
KERNEL32.lstrcpy
KERNEL32.lstrlen
KERNEL32.GetFileAttributesA
|
sub_405E7A(30b5):
KERNEL32.GetFileAttributesA
KERNEL32.CreateFileA
|
sub_403FD6(3289):
USER32.SendMessageA
|
sub_405D5D(3c14):
USER32.GetDlgItemTextA
|
sub_403409(3cd5):
KERNEL32.SetFilePointer
|
sub_40400D(3cd5):
USER32.SendMessageA
|
sub_40410B(3ee7):
KERNEL32.GetUserDefaultLangID
USER32.SetWindowTextA
"NSIS Error"
|
sub_401610(45c2):
USER32.PostQuitMessage
KERNEL32.Sleep
USER32.SetForegroundWindow
USER32.ShowWindow
KERNEL32.SetFileAttributesA
KERNEL32.lstrcpy
KERNEL32.SetCurrentDirectoryA
KERNEL32.lstrlen
KERNEL32.lstrcat
KERNEL32.MoveFileA
KERNEL32.GetFullPathNameA
KERNEL32.GetShortPathNameA
KERNEL32.SearchPathA
USER32.CharPrevA
KERNEL32.CompareFileTime
KERNEL32.GetFileAttributesA
KERNEL32.SetFileTime
KERNEL32.CloseHandle
KERNEL32.lstrcmpi
KERNEL32.GetEnvironmentVariableA
KERNEL32.ExpandEnvironmentStringsA
USER32.wsprintfA
USER32.SendMessageTimeoutA
USER32.SendMessageA
USER32.FindWindowExA
USER32.IsWindow
USER32.GetDlgItem
USER32.SetWindowLongA
USER32.GetClientRect
USER32.LoadImageA
GDI32.DeleteObject
USER32.GetDC
GDI32.GetDeviceCaps
KERNEL32.MulDiv
GDI32.CreateFontIndirectA
USER32.EnableWindow
KERNEL32.WaitForSingleObject
USER32.DispatchMessageA
USER32.PeekMessageA
KERNEL32.GetExitCodeProcess
KERNEL32.SetErrorMode
KERNEL32.GetModuleHandleA
NTDLL.RtlGetLastWin32Error
KERNEL32.FormatMessageA
KERNEL32.LoadLibraryA
KERNEL32.GetProcAddress
KERNEL32.FreeLibrary
KERNEL32.MultiByteToWideChar
KERNEL32.WritePrivateProfileStringA
KERNEL32.GetPrivateProfileStringA
ADVAPI32.RegDeleteValueA
ADVAPI32.RegCloseKey
ADVAPI32.RegCreateKeyExA
ADVAPI32.RegSetValueExA
ADVAPI32.RegQueryValueExA
ADVAPI32.RegEnumKeyA
ADVAPI32.RegEnumValueA
KERNEL32.WriteFile
KERNEL32.ReadFile
KERNEL32.SetFilePointer
KERNEL32.FindClose
KERNEL32.FindNextFileA
KERNEL32.FindFirstFileA
KERNEL32.GlobalFree
KERNEL32.DeleteFileA
USER32.InvalidateRect
"Jump: %d"
"Aborting: \"%s\""
"Call: %d"
"detailprint: %s"
"Sleep(%d)"
"SetFileAttributes: \"%s\":%08X"
"SetFileAttributes failed."
"CreateDirectory: \"%s\" (%d)"
"IfFileExists: file \"%s\" exists, jumping"...
"IfFileExists: file \"%s\" does not exist,"...
"->"
"Rename: %s"
"Rename on reboot: %s"
"File: overwriteflag=%d, allowskipfilesf"...
"File: error creating \"%s\""
"File: error, user retry"
"File: error, user abort"
"File: skipped: \"%s\" (overwriteflag=%d)"
"File: error, user cancel"
"%s"
"Delete: \"%s\""
"MessageBox: %d,\"%s\""
"RMDir: \"%s\""
"Exch: stack < %d elements"
"HideWindow"
"%s %s"
"ExecShell: warning: error (\"%s\": file:\""...
"ExecShell: success (\"%s\": file:\"%s\" par"...
"Exec: command=\"%s\""
"Exec: success (\"%s\")"
"Exec: failed createprocess (\"%s\")"
"\\"
"RegDLL: Could not load '%s' -> '%s'"
"Error registering DLL: %s not found in "...
"Error registering DLL: Could not load '"...
"Error registering DLL: Could not initia"...
"CreateShortCut: out: \"%s\", in: \"%s %s\","...
"CopyFiles \"%s\"->\"%s\""
""
"WriteINIStr: wrote [%s] %s=%s in %s"
"DeleteRegValue: %d\\%s\\%s"
"DeleteRegKey: %d\\%s"
"WriteRegStr: set %d\\%s\\%s to %s"
"WriteRegDWORD: set %d\\%s\\%s to %d"
"WriteRegBin: set %d\\%s\\%s with %d bytes"...
"WriteReg: error creating key %d\\%s"
"created uninstaller: %d, \"%s\""
" /x \""
"\" _?="
"File Extraction: success (\"%s\")"
"File Extraction: failed createprocess o"...
"settings logging to %d"
"%s"
|
sub_405DCA(47d4):
USER32.CharNextA
|
sub_40509F(4b22):
KERNEL32.lstrlen
KERNEL32.lstrcat
USER32.SetWindowTextA
USER32.SendMessageA
|
sub_403F8D(4e9e):
USER32.SendMessageA
|
sub_404258(4eaf):
KERNEL32.lstrcpyn
KERNEL32.lstrlen
|
sub_404A94(583d):
USER32.GetDlgItem
USER32.LoadBitmapA
USER32.SetWindowLongA
USER32.SendMessageA
GDI32.DeleteObject
USER32.GetWindowLongA
USER32.ShowWindow
KERNEL32.GlobalFree
|
sub_404961(5c2f):
USER32.GetMessagePos
USER32.ScreenToClient
USER32.SendMessageA
|
sub_40463C(63d1):
USER32.IsDlgButtonChecked
USER32.GetAsyncKeyState
USER32.GetDlgItem
USER32.ShowWindow
USER32.SetDlgItemTextA
KERNEL32.lstrcmpi
KERNEL32.lstrcat
KERNEL32.lstrcpy
KERNEL32.GetModuleHandleA
KERNEL32.GetProcAddress
KERNEL32.GetDiskFreeSpaceA
KERNEL32.MulDiv
"KERNEL32.dll"
"GetDiskFreeSpaceExA"
|
start(6454):
KERNEL32.lstrcpy
KERNEL32.GetTempPathA
KERNEL32.GetWindowsDirectoryA
KERNEL32.lstrcat
KERNEL32.DeleteFileA
KERNEL32.GetCommandLineA
KERNEL32.lstrcpyn
KERNEL32.GetModuleHandleA
USER32.CharNextA
KERNEL32.CreateDirectoryA
KERNEL32.GetModuleFileNameA
KERNEL32.lstrcmpi
KERNEL32.CopyFileA
KERNEL32.CloseHandle
KERNEL32.GetProcAddress
KERNEL32.GetCurrentProcess
USER32.ExitWindowsEx
KERNEL32.ExitProcess
"Error writing temporary file. Make sure"...
"NSIS Error"
"NSIS Error"
"C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\"
"\\Temp"
"C:\\NSIS_ExtractFiles\\"
"Extraction pathname not properly delimi"...
"Out of Memory"
"Error launching installer"
"C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\"
"A~NSISu_.exe"
"\" "
" _?="
"C:\\DOCUME~1\\SRI-user\\LOCALS~1\\Temp\\"
"ADVAPI32.dll"
"OpenProcessToken"
"LookupPrivilegeValueA"
"AdjustTokenPrivileges"
"SeShutdownPrivilege"
|
sub_405EA9(650e):
KERNEL32.GetTickCount
KERNEL32.GetTempFileNameA
|
sub_403420(6595):
KERNEL32.GetTickCount
KERNEL32.SetFilePointer
USER32.DispatchMessageA
USER32.PeekMessageA
USER32.CreateDialogParamA
KERNEL32.WriteFile
USER32.SendMessageA
USER32.DestroyWindow
"unpacking data: %d%%"
|
sub_4061D3(6810):
KERNEL32.lstrlen
USER32.CharPrevA
|
sub_405DBB(6879):
KERNEL32.GlobalAlloc
|
sub_403FFA(6879):
USER32.EnableWindow
|
sub_406207(6a50):
KERNEL32.lstrlen
USER32.CharPrevA
|
sub_406301(6dc8):
KERNEL32.CreateDirectoryA
|
sub_4062AB(76e0):
KERNEL32.lstrlen
KERNEL32.lstrcmpi
USER32.CharNextA
|
sub_406357(789a):
KERNEL32.GetModuleHandleA
KERNEL32.GetProcAddress
KERNEL32.CloseHandle
KERNEL32.GetShortPathNameA
KERNEL32.lstrcpy
USER32.wsprintfA
KERNEL32.GetWindowsDirectoryA
KERNEL32.lstrcat
KERNEL32.CreateFileA
KERNEL32.GetFileSize
KERNEL32.CreateFileMappingA
KERNEL32.MapViewOfFile
KERNEL32.GlobalAlloc
KERNEL32.GlobalFree
KERNEL32.UnmapViewOfFile
KERNEL32.SetFilePointer
KERNEL32.SetEndOfFile
"KERNEL32.dll"
"MoveFileExA"
"NUL"
"%s=%s\r\n"
"\\wininit.ini"
"[Rename]\r\n"
"[Rename]\r\n"
"\n["
|
sub_405D01(7df0):
KERNEL32.GetFileAttributesA
KERNEL32.CreateProcessA
KERNEL32.CloseHandle
|
sub_40403F(82e0):
USER32.GetWindowLongA
USER32.GetSysColor
GDI32.SetTextColor
GDI32.SetBkMode
GDI32.SetBkColor
GDI32.DeleteObject
GDI32.CreateBrushIndirect
|
sub_4040E9(82fe):
KERNEL32.lstrcpy
KERNEL32.lstrcat
"install.log"
|
sub_4069FF(85af):
KERNEL32.GlobalFree
|
sub_4041F2(88c6):
USER32.SendMessageA
|
sub_40362B(8c33):
KERNEL32.SetFilePointer
KERNEL32.ReadFile
KERNEL32.WriteFile
|
sub_406009(8c6a):
USER32.CharNextA
USER32.CharPrevA
"*?|<>/\":"
|
sub_4060AD(92e7):
KERNEL32.CloseHandle
KERNEL32.SetFilePointer
KERNEL32.lstrcat
KERNEL32.lstrlen
KERNEL32.WriteFile
"\r\n"
|
sub_405D79(97ca):
USER32.MessageBoxA
"NSIS Error"
|
sub_4067E6(9e04):
KERNEL32.DeleteFileA
KERNEL32.lstrcpy
KERNEL32.lstrcat
KERNEL32.lstrlen
KERNEL32.FindFirstFileA
KERNEL32.SetFileAttributesA
KERNEL32.FindNextFileA
KERNEL32.FindClose
KERNEL32.RemoveDirectoryA
"\\*.*"
"\\"
"Delete: DeleteFile(\"%s\")"
"Delete: DeleteFile on Reboot(\"%s\")"
"Delete: DeleteFile failed(\"%s\")"
"RMDir: RemoveDirectory(\"%s\")"
"RMDir: RemoveDirectory on Reboot(\"%s\")"
"RMDir: RemoveDirectory failed(\"%s\")"
|
sub_406168(a49e):
KERNEL32.SetErrorMode
KERNEL32.FindFirstFileA
KERNEL32.FindClose
|
sub_403FB4(a5a9):
USER32.SetDlgItemTextA
|
sub_401540(ad0a):
ADVAPI32.RegOpenKeyExA
ADVAPI32.RegEnumKeyA
ADVAPI32.RegCloseKey
ADVAPI32.RegDeleteKeyA
|
sub_405597(b942):
USER32.SetWindowPos
USER32.ShowWindow
USER32.DestroyWindow
USER32.SetWindowLongA
USER32.IsWindowEnabled
USER32.GetDlgItem
USER32.SendMessageA
USER32.SetClassLongA
USER32.EnableWindow
KERNEL32.lstrcpy
KERNEL32.lstrlen
USER32.SetWindowTextA
USER32.CreateDialogParamA
USER32.GetWindowRect
USER32.ScreenToClient
USER32.EndDialog
"NSIS Error"
|
sub_4065B7(bd83):
KERNEL32.lstrcpy
KERNEL32.GetSystemDirectoryA
KERNEL32.GetWindowsDirectoryA
KERNEL32.lstrcat
KERNEL32.lstrlen
KERNEL32.lstrcpyn
"\\Microsoft\\Internet Explorer\\Quick Laun"...
"CommonFilesDir"
"Software\\Microsoft\\Windows\\CurrentVersi"...
"ProgramFilesDir"
"Software\\Microsoft\\Windows\\CurrentVersi"...
|
sub_404531(c32b):
USER32.SetDlgItemTextA
|
sub_40428C(cc76):
USER32.CheckDlgButton
USER32.GetDlgItem
USER32.SendMessageA
USER32.GetSysColor
KERNEL32.lstrlen
USER32.LoadCursorA
USER32.SetCursor
"open"
|
sub_40614C(cd0c):
USER32.wvsprintfA
|
sub_404024(d53c):
USER32.SendMessageA
|
sub_405177(d724):
"Skipping section: \"%s\""
"Section: \"%s\""
|
sub_4049AD(ddf4):
USER32.IsWindowVisible
USER32.SendMessageA
KERNEL32.lstrcpy
USER32.CallWindowProcA
|
sub_405E0D(f26e):
USER32.CharNextA
|
sub_404578(f88d):
KERNEL32.lstrlen
USER32.wsprintfA
USER32.SetDlgItemTextA
"%u.%u%s%s"
|
sub_405EF1(f90d):
ADVAPI32.RegOpenKeyExA
ADVAPI32.RegQueryValueExA
ADVAPI32.RegCloseKey
|
sub_405202(faba):
USER32.GetDlgItem
USER32.GetClientRect
USER32.GetSystemMetrics
USER32.SendMessageA
USER32.ShowWindow
KERNEL32.CreateThread
KERNEL32.CloseHandle
USER32.CreatePopupMenu
USER32.AppendMenuA
USER32.GetWindowRect
USER32.TrackPopupMenu
USER32.OpenClipboard
USER32.EmptyClipboard
KERNEL32.GlobalAlloc
KERNEL32.GlobalLock
KERNEL32.lstrlen
KERNEL32.GlobalUnlock
USER32.SetClipboardData
USER32.CloseClipboard
"New install of \"%s\" to \"%s\""
|