[Resolved] really slow programs, very slow start up

beckpeck Topic Starter

Post #1January 5, 2009, 4:13 AM UTC

Hi,
I have run several anti sypware programs, uninstalled a ton of old software, and have had some improvement; however my laptop is still freezing, running slow in general, and the startup is much slower than it should be. I dont know how this all started as I was given this laptop as is, hoping to get it running well.

Thanks for your time!!!

Here is my Hijack This log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:53:07 PM, on 1/4/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
c:\PROGRA~1\mcafee.com\vso\OasClnt.exe
c:\program files\mcafee.com\vso\mcvsshld.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
C:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\dlcccoms.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\program files\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: McAfee PopupKiller - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:\program files\mcafee.com\mps\popupkiller.dll
O2 - BHO: McAfee Anti-Phishing Filter - {41D68ED8-4CFF-4115-88A6-6EBB8AF19000} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: GoogleAFE - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - (no file)
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\PROGRA~1\McAfee\SPAMKI~1\MSKDetct.exe /startup
O4 - HKLM\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
O4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [McRegWiz] C:\progra~1\mcafee.com\agent\mcregwiz.exe /autorun
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [dlccmon.exe] "C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe"
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKCU\..\Run: [Universal Installer] "C:\Program Files\ComcastUI\Universal Installer\uinstaller.exe" /fromrun /starthidden
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O9 - Extra 'Tools' menuitem: McAfee Anti-Phishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: dlcc_device - Unknown owner - C:\WINDOWS\system32\dlcccoms.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
O23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

–
End of file - 10042 bytes

jpshortstuff

Post #2January 17, 2009, 10:38 AM UTC

Hi, and Welcome to WhatTheTech

My name is jpshortstuff. I would be glad to take a look at your log and help you with solving any malware problems. HijackThis logs can take a while to research, so please be patient and I'd be grateful if you would note the following:

I will be working on your Malware issues, this may or may not solve other issues you have with your machine.
The fixes are specific to your problem and should only be used for the issues on this machine.
Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
It's often worth reading through the instructions before starting to follow them to make sure you understand everything you have to do.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
Please reply to this thread. Do not start a new topic.

Apologies in the delay in a response. We are overwhelmed with logs at the moment and there aren't enough helpers to go around. If you still require help, please do the following:

Please download DDS and save it to your desktop.

Disable any script blocking protection
Double click dds.scr to run the tool.
When done, DDS.txt will open.
Click Yes at the next prompt for Optional Scan.
Save both reports to your desktop.

—————————————————

Post the contents of the DDS.txt report in your next reply
Attach the Attach.txt report to your post by scroling down to the Attachments area and then clicking Browse. Browse to where you saved the file, and click Open and then click UPLOAD.

Please describe how your computer is behaving at the moment, listing any symptoms and problems that you are experiencing.

Thanks.

beckpeck

Post #3January 18, 2009, 4:18 PM UTC

Hi and thanks for helping! My system is still extreamly slow starting and pretty much everything else you want it to do…IE crashed just a moment ago when I attempted to reply to this post the first time. When i start up in safe mode, the system acts much more normal and is quite fast. If there is any more clues I can give about the way my system is running right now let me know. Since my last post I have installed Ubuntu and it runs perfectly - but I still want my XP system to run as well…

Here is the DSS txt and I have attached the rest. THANKS AGAIN!!! DDS (Ver_09-01-18.01) - NTFSx86 Run by [removed] at 9:07:55.20 on Sun 01/18/2009 Internet Explorer: 7.0.5730.13 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1271.672 [GMT -7:00] AV: McAfee VirusScan *On-access scanning enabled* (Updated) FW: McAfee Personal Firewall Plus *enabled* ============== Running Processes =============== C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\wltrysvc.exe C:\WINDOWS\System32\bcmwltry.exe C:\WINDOWS\system32\spoolsv.exe c:\program files\mcafee.com\agent\mcdetect.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe c:\PROGRA~1\mcafee.com\agent\mctskshd.exe c:\PROGRA~1\mcafee.com\vso\OasClnt.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE c:\program files\mcafee.com\vso\mcvsshld.exe C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe c:\progra~1\mcafee.com\vso\mcvsescn.exe C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\system32\igfxpers.exe C:\WINDOWS\system32\igfxsrvc.exe C:\WINDOWS\stsystra.exe C:\WINDOWS\system32\WLTRAY.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe C:\Program Files\QuickTime\qttask.exe C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe C:\Program Files\Java\j2re1.4.2_03\bin\jucheck.exe C:\PROGRA~1\mcafee.com\mps\mscifapp.exe C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe C:\Program Files\Digital Line Detect\DLG.exe C:\WINDOWS\system32\dlcccoms.exe C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\Becker Family\Desktop\dds.scr ============== Pseudo HJT Report =============== uStart Page = hxxp://www.google.com/ uSearch Page = hxxp://www.google.com/hws/sb/dell/en/side.html uSearch Bar = hxxp://www.google.com/hws/sb/dell/en/side.html uDefault_Page_URL = hxxp://www.google.com/ig/dell?hl=en uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid;=ie7&rls;=com.microsoft:en-US&ie;=utf8&oe;=utf8 mSearchAssistant = hxxp://www.google.com/ie BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 6.0\reader\activex\AcroIEHelper.dll BHO: McBrwHelper Class: {227b8aa8-daf2-4892-bd1d-73f568bcb24e} - c:\program files\mcafee.com\mps\mcbrhlpr.dll BHO: McAfee Privacy Service Popup Blocker: {3ec8255f-e043-4cae-8b3b-b191550c2a22} - c:\program files\mcafee.com\mps\popupkiller.dll BHO: McAfee Anti-Phishing Filter: {41d68ed8-4cff-4115-88a6-6ebb8af19000} - c:\program files\mcafee\spamkiller\mcapfbho.dll BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\tfswshx.dll BHO: {AA58ED58-01DD-4d91-8333-CF10577473F7} - No File BHO: {CA6319C0-31B7-401E-A518-A07C3DB8F777} - No File TB: McAfee VirusScan: {ba52b914-b692-46c4-b683-905236f6f655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll TB: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - No File uRun: [Universal Installer] "c:\program files\comcastui\universal installer\uinstaller.exe" /fromrun /starthidden uRun: [swg] c:\program files\google\googletoolbarnotifier\1.2.1128.5462\GoogleToolbarNotifier.exe uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background uRun: [DellSupport] "c:\program files\dellsupport\DSAgnt.exe" /startup mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [igfxtray] c:\windows\system32\igfxtray.exe mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe mRun: [igfxpers] c:\windows\system32\igfxpers.exe mRun: [SigmatelSysTrayApp] stsystra.exe mRun: [Dell Wireless Manager UI] c:\windows\system32\WLTRAY mRun: [dla] c:\windows\system32\dla\tfswctrl.exe mRun: [DLCCCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\DLCCtime.dll,_RunDLLEntry@16 mRun: [Windows Defender] "c:\program files\windows defender\MSASCui.exe" -hide mRun: [VSOCheckTask] "c:\progra~1\mcafee.com\vso\mcmnhdlr.exe" /checktask mRun: [VirusScan Online] c:\progra~1\mcafee.com\vso\mcvsshld.exe mRun: [SunJavaUpdateSched] c:\program files\java\j2re1.4.2_03\bin\jusched.exe mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime mRun: [OASClnt] c:\program files\mcafee.com\vso\oasclnt.exe mRun: [MSKDetectorExe] c:\progra~1\mcafee\spamki~1\MSKDetct.exe /startup mRun: [MSKAGENTEXE] c:\progra~1\mcafee\spamki~1\MskAgent.exe mRun: [MPSExe] c:\progra~1\mcafee.com\mps\mscifapp.exe /embedding mRun: [MPFExe] c:\progra~1\mcafee.com\person~1\MpfTray.exe mRun: [MMTray] "c:\program files\musicmatch\musicmatch jukebox\mm_tray.exe" mRun: [MimBoot] c:\progra~1\musicm~1\musicm~3\mimboot.exe mRun: [MCUpdateExe] c:\progra~1\mcafee.com\agent\mcupdate.exe mRun: [MCAgentExe] c:\progra~1\mcafee.com\agent\mcagent.exe mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start mRun: [ISUSPM Startup] "c:\program files\common files\installshield\updateservice\isuspm.exe" -startup mRun: [dlccmon.exe] "c:\program files\dell photo aio printer 924\dlccmon.exe" mRun: [Dell QuickSet] c:\program files\dell\quickset\quickset.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe IE: &Google; Search - c:\program files\google\GoogleToolbar1.dll/cmsearch.html IE: &Translate; English Word - c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html IE: Backward Links - c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html IE: Cached Snapshot of Page - c:\program files\google\GoogleToolbar1.dll/cmcache.html IE: E&xport; to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000 IE: Similar Pages - c:\program files\google\GoogleToolbar1.dll/cmsimilar.html IE: Translate Page into English - c:\program files\google\GoogleToolbar1.dll/cmtrans.html IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} IE: {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - {7DD73374-7187-4103-8F29-622AA25E7C40} - c:\program files\mcafee\spamkiller\mcapfbho.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL LSP: c:\windows\system32\mclsp.dll Trusted Zone: musicmatch.com\online Notify: igfxcui - igfxdev.dll SEH: Microsoft AntiMalware ShellExecuteHook: {091eb208-39dd-417d-a5dd-7e2c2d8fb9cb} - c:\progra~1\wifd1f~1\MpShHook.dll ============= SERVICES / DRIVERS =============== R3 NaiAvFilter1;NaiAvFilter1;c:\windows\system32\drivers\naiavf5x.sys [2006-1-2 114464] R4 McDetect.exe;McAfee WSC Integration;c:\program files\mcafee.com\agent\Mcdetect.exe [2006-1-2 126976] R4 McShield;McAfee.com McShield;c:\progra~1\mcafee.com\vso\mcshield.exe [2006-1-2 221184] R4 McTskshd.exe;McAfee Task Scheduler;c:\progra~1\mcafee.com\agent\mctskshd.exe [2006-1-2 122368] R4 WinDefend;Windows Defender;c:\program files\windows defender\MsMpEng.exe [2006-11-3 13592] S3 mcupdmgr.exe;McAfee SecurityCenter Update Manager;c:\progra~1\mcafee.com\agent\mcupdmgr.exe [2006-1-2 245760] S3 w4shwdrv;w4shwdrv;\??\c:\docume~1\becker~1\locals~1\temp\w4s2.tmp –> c:\docume~1\becker~1\locals~1\temp\w4s2.tmp [?] S4 aawservice;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\aawservice.exe [2008-9-10 611664] =============== Created Last 30 ================ 2009-01-10 12:59 8,192 a——- C:\wubildr.mbr 2009-01-10 12:59 192,307 a——- C:\wubildr 2009-01-10 11:18 –d—– C:\ubuntu 2009-01-06 07:17 –d—– c:\docume~1\becker~1\applic~1\Malwarebytes 2009-01-04 20:45 –d—– c:\docume~1\becker~1\applic~1\McAfee.com Personal Firewall 2009-01-04 19:51 –d—– c:\program files\Trend Micro 2009-01-04 11:21 –d—– c:\documents and settings\Becker Family 2009-01-04 11:15 272,128 ——– c:\windows\system32\dllcache\bthport.sys 2009-01-04 11:15 138,496 ——– c:\windows\system32\dllcache\afd.sys 2009-01-04 11:14 333,824 ——– c:\windows\system32\dllcache\srv.sys 2009-01-04 11:13 1,846,400 ——– c:\windows\system32\dllcache\win32k.sys 2009-01-04 11:13 2,145,280 ——– c:\windows\system32\dllcache\ntkrnlmp.exe 2009-01-04 11:13 2,189,184 ——– c:\windows\system32\dllcache\ntoskrnl.exe 2009-01-04 11:13 2,023,936 ——– c:\windows\system32\dllcache\ntkrpamp.exe 2009-01-04 11:13 2,066,048 ——– c:\windows\system32\dllcache\ntkrnlpa.exe 2009-01-04 11:12 203,136 ——– c:\windows\system32\dllcache\rmcast.sys 2009-01-04 11:12 455,296 ——– c:\windows\system32\dllcache\mrxsmb.sys 2009-01-04 11:12 691,712 ——– c:\windows\system32\dllcache\inetcomm.dll 2009-01-04 11:12 337,408 ——– c:\windows\system32\dllcache\netapi32.dll 2009-01-04 10:04 –d—– c:\windows\system32\scripting 2009-01-04 10:04 –d—– c:\windows\l2schemas 2009-01-04 10:04 –d—– c:\windows\system32\en 2009-01-04 10:04 –d—– c:\windows\system32\bits 2009-01-04 09:50 –d—– c:\windows\ServicePackFiles 2009-01-04 09:30 –d—– c:\windows\EHome 2009-01-03 22:19 –d—– c:\program files\CCleaner 2009-01-03 21:54 15,504 a——- c:\windows\system32\drivers\mbam.sys 2009-01-03 21:54 38,496 a——- c:\windows\system32\drivers\mbamswissarmy.sys 2009-01-03 21:53 –d—– c:\docume~1\alluse~1\applic~1\Malwarebytes 2009-01-03 21:53 –d—– c:\program files\Malwarebytes' Anti-Malware 2009-01-03 19:56 52,224 ——– c:\windows\system32\dllcache\msfeedsbs.dll 2009-01-03 19:56 459,264 ——– c:\windows\system32\dllcache\msfeeds.dll 2009-01-03 19:56 267,776 ——– c:\windows\system32\dllcache\iertutil.dll 2009-01-03 19:56 13,824 ——– c:\windows\system32\dllcache\ieudinit.exe 2009-01-03 19:56 991,232 ——– c:\windows\system32\dllcache\ieframe.dll.mui 2009-01-03 19:55 6,066,176 ——– c:\windows\system32\dllcache\ieframe.dll 2009-01-03 19:55 383,488 ——– c:\windows\system32\dllcache\ieapfltr.dll 2009-01-03 19:55 2,455,488 ——– c:\windows\system32\dllcache\ieapfltr.dat 2009-01-03 19:55 63,488 ——– c:\windows\system32\dllcache\icardie.dll 2009-01-03 14:52 –d—– c:\windows\pss 2009-01-03 14:26 2 a——- c:\windows\msoffice.ini 2009-01-03 10:00 –d—– c:\program files\common files\Wise Installation Wizard 2008-12-26 06:31 –d—– c:\program files\Spybot - Search & Destroy 2008-12-26 06:31 –d—– c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy 2008-12-24 23:06 –d—– c:\program files\Lavasoft 2008-12-24 22:28 –d—– c:\windows\network diagnostic ==================== Find3M ==================== 2009-01-04 10:14 78,143 a——- c:\windows\pchealth\helpctr\offlinecache\index.dat 2008-12-12 23:40 3,593,216 ——– c:\windows\system32\dllcache\mshtml.dll 2008-10-23 05:36 286,720 a——- c:\windows\system32\gdi32.dll 2008-10-23 05:36 286,720 ——– c:\windows\system32\dllcache\gdi32.dll 2008-04-21 18:43 56 —shr– c:\windows\system32\94BB0BF62B.sys 2008-04-21 19:11 3,766 a–sh— c:\windows\system32\KGyGaAvL.sys ============= FINISH: 9:08:34.18 ===============

Attachments:

📎Attach.txt

jpshortstuff

Post #4January 19, 2009, 7:28 AM UTC

Hi

Open HijackThis. Hit Do A System Scan Only. Place a check next to the following items (if present):
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: GoogleAFE - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - (no file)
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)

Close all browsers and windows except for HijackThis and click Fix Checked.

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

(If you use FireFox or the Opera browser
To keep saved passwords, click No at the prompt.)

It's normal after running ATF cleaner that the PC will be slower to boot the first time or two.

Please download Malwarebytes' Anti-Malware to your desktop.

Double-click mbam-setup.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform full scan, then click Scan.
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click Remove Selected.
When completed, a log will open in Notepad. Please save it to a convenient location.
The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt
Post that log back here.

Download the GMER Rootkit Scanner. Unzip it to your Desktop.

Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while the scan is being performed. Do not use your computer for anything else during the scan.

Double-click gmer.exe. The program will begin to run.

**Caution**
These types of scans can produce false positives. Do NOT take any action on any "<— ROOKIT" entries unless advised!

If possible rootkit activity is found, you will be asked if you would like to perform a full scan.

Click NO
In the right panel, you will see a bunch of boxes that have been checked … leave everything checked and ensure the Show all box is un-checked.
Now click the Scan button.
Once the scan is complete, you may receive another notice about rootkit activity.
Click OK.
GMER will produce a log. Click on the [Save..] button, and in the File name area, type in "GMER.txt"
Save it where you can easily find it, such as your desktop.

Post the contents of GMER.txt in your next reply.

Thanks.

beckpeck

Post #5January 20, 2009, 5:14 PM UTC

Okay…got it all done. Here are the contents of the log file as you requested. Thanks for looking at this.

GMER 1.0.14.14536 - http://www.gmer.net
Rootkit scan 2009-01-20 10:04:18
Windows 5.1.2600 Service Pack 3

—- User code sections - GMER 1.0.14 —-

.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrStrW + FFE25751 7C9C217D 272 Bytes [ C0, F1, 77, DB, A8, F1, 77, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrStrW + FFE25862 7C9C228E 1 Byte [ 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrStrW + FFE25864 7C9C2290 89 Bytes [ FF, 30, 83, 7C, 17, F8, 82, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrStrW + FFE258BE 7C9C22EA 121 Bytes [ 91, 7C, F9, BC, 80, 7C, 0D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrStrW + FFE25938 7C9C2364 3 Bytes [ 18, AD, 80 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDiskFreeSpaceExW + 8C 7C9EA5DD 267 Bytes [ 53, 48, 47, 65, 74, 44, 65, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDiskFreeSpaceExW + 198 7C9EA6E9 25 Bytes [ 72, 6C, 61, 79, 49, 6E, 64, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDiskFreeSpaceExW + 1B2 7C9EA703 40 Bytes [ 53, 48, 47, 65, 74, 49, 6E, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDiskFreeSpaceExW + 1DB 7C9EA72C 181 Bytes [ 77, 4C, 69, 6E, 6B, 49, 6E, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDiskFreeSpaceExW + 291 7C9EA7E2 818 Bytes [ 53, 48, 47, 65, 74, 53, 68, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILFree + 29 7C9EAB15 151 Bytes [ 6E, 72, 65, 61, 64, 4D, 61, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILFree + C1 7C9EABAD 231 Bytes [ 65, 49, 6D, 61, 67, 65, 57, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHLoadOLE + 54 7C9EAC95 140 Bytes [ 53, 68, 65, 52, 65, 6D, 6F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHLoadOLE + E1 7C9EAD22 122 Bytes [ 53, 68, 65, 6C, 6C, 45, 78, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILGetSize + D 7C9EAD9D 34 Bytes [ 53, 68, 65, 6C, 6C, 5F, 47, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILGetSize + 30 7C9EADC0 334 Bytes [ 49, 6D, 61, 67, 65, 4C, 69, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILClone + 11A 7C9EAF0F 103 Bytes [ 53, 74, 72, 53, 74, 72, 49, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILClone + 182 7C9EAF77 224 Bytes [ 68, 61, 72, 65, 64, 00, 73, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILClone + 263 7C9EB058 95 Bytes [ 00, 50, FF, 15, 60, 15, 9C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCloneFirst + 54 7C9EB0B8 36 Bytes [ 00, 00, 8B, F8, 39, 1D, C4, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCloneFirst + 7A 7C9EB0DE 3 Bytes [ 90, 90, 90 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCloneFirst + 7E 7C9EB0E2 96 Bytes [ FF, 55, 8B, EC, 83, EC, 14, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCombine + 2E 7C9EB143 7 Bytes [ 74, 1D, 8B, 07, 8B, CF, FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCombine + 36 7C9EB14B 26 Bytes [ CC, 00, 00, 00, 85, C0, 0F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCombine + 51 7C9EB166 86 Bytes CALL 7C9E83EC C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCombine + A8 7C9EB1BD 17 Bytes CALL 7C9E83EC C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCombine + BA 7C9EB1CF 37 Bytes [ 81, C1, 40, 02, 00, 00, 51, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDesktopFolder + 13 7C9EB77B 44 Bytes [ 3B, D7, 72, 1A, 77, 04, 3B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDesktopFolder + 40 7C9EB7A8 25 Bytes [ 5E, 5B, C9, C2, 10, 00, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDesktopFolder + 5A 7C9EB7C2 24 Bytes [ 15, 60, 15, 9C, 7C, 8B, F8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDesktopFolder + 73 7C9EB7DB 44 Bytes [ C7, 5F, 5E, 5D, C2, 04, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDesktopFolder + A0 7C9EB808 233 Bytes [ 90, 90, 90, 90, 90, C7, 01, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHRestricted + 38 7C9EC091 38 Bytes [ 85, C0, 74, 1E, 56, 8B, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHRestricted + 5F 7C9EC0B8 2 Bytes [ 90, 90 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHRestricted + 63 7C9EC0BC 10 Bytes [ 90, 8B, FF, 55, 8B, EC, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHRestricted + 6F 7C9EC0C8 41 Bytes [ 83, C0, 04, 50, FF, 75, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHRestricted + 99 7C9EC0F2 35 Bytes [ 4D, 08, 56, 8B, F1, 57, C1, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILRemoveLastID + 1 7C9EC1B8 4 Bytes [ EC, 83, EC, 10 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILRemoveLastID + 8 7C9EC1BF 28 Bytes [ 85, C9, 0F, 85, 06, 07, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILRemoveLastID + 25 7C9EC1DC 93 Bytes [ 8B, C1, 8D, 50, 04, C7, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILRemoveLastID + 83 7C9EC23A 104 Bytes [ F8, 7F, 05, 0E, 00, 07, 80, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILRemoveLastID + EC 7C9EC2A3 6 Bytes [ 80, 0F, 8D, C6, 74, 00 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSetSettings + 63 7C9EC413 75 Bytes [ 50, A5, 89, 45, C8, FF, 15, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSetSettings + AF 7C9EC45F 42 Bytes [ 74, 17, FF, 75, CC, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSetSettings + DA 7C9EC48A 27 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSetSettings + F6 7C9EC4A6 78 Bytes [ 0F, 8C, E4, 01, 00, 00, 56, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSetSettings + 145 7C9EC4F5 5 Bytes [ 56, 57, 68, D0, 00 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCLSIDFromString + 26 7C9EC7D9 28 Bytes [ 55, 8B, EC, 8B, 45, 08, 53, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCLSIDFromString + 43 7C9EC7F6 96 Bytes CALL CA29C801
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCLSIDFromString + A4 7C9EC857 39 Bytes [ 47, 85, C0, 74, 49, 8B, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCLSIDFromString + CC 7C9EC87F 71 Bytes [ 11, 85, C0, 7C, 18, 56, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCLSIDFromString + 114 7C9EC8C7 5 Bytes [ FF, FF, 5D, C2, 10 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILFindLastID + 2A 7C9EC9A6 80 Bytes [ 53, FF, 75, 10, 8D, 4F, F0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILFindLastID + 7B 7C9EC9F7 53 Bytes [ CE, 2B, C8, D1, F9, 51, 50, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILFindLastID + B1 7C9ECA2D 94 Bytes [ 75, 10, 53, FF, 37, FF, 15, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILFindLastID + 110 7C9ECA8C 19 Bytes [ 73, 00, 00, 00, 41, 00, 6C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILFindLastID + 124 7C9ECAA0 55 Bytes [ 49, 00, 44, 00, 50, 00, 52, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHParseDisplayName + 3E 7C9EDBAE 133 Bytes [ 0F, 84, 78, 1A, 01, 00, 83, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHParseDisplayName + C4 7C9EDC34 57 Bytes [ EC, 51, 51, 53, 56, 57, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHParseDisplayName + FF 7C9EDC6F 51 Bytes CALL 7C9EDB13 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHParseDisplayName + 133 7C9EDCA3 11 Bytes [ 55, 8B, EC, 83, EC, 18, A1, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHParseDisplayName + 13F 7C9EDCAF 29 Bytes [ 56, 8B, F1, 89, 45, FC, 8B, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHILCreateFromPath + 8C 7C9EE1CC 27 Bytes CALL 7C9EE171 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHILCreateFromPath + A8 7C9EE1E8 46 Bytes [ 00, 00, 8B, D8, 8B, 4D, FC, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHILCreateFromPath + D8 7C9EE218 33 Bytes [ 8B, 45, 14, 53, 8B, 5D, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHILCreateFromPath + FA 7C9EE23A 89 Bytes [ 8D, BD, E4, FB, FF, FF, F3, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHILCreateFromPath + 154 7C9EE294 19 Bytes [ 53, FF, 75, 14, 57, 50, FF, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCreateFromPath + 1 7C9EE2E0 8 Bytes [ EC, FF, 75, 10, FF, 75, 0C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCreateFromPath + A 7C9EE2E9 13 Bytes [ 68, 90, 44, 9C, 7C, 6A, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCreateFromPath + 18 7C9EE2F7 7 Bytes [ FF, 5D, C2, 0C, 00, 90, 90 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCreateFromPath + 22 7C9EE301 6 Bytes [ 8B, FF, 55, 8B, EC, 81 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCreateFromPath + 29 7C9EE308 52 Bytes [ 30, 02, 00, 00, A1, 48, F5, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathW + 1 7C9EED77 38 Bytes [ D8, 85, DB, 7C, 6B, 83, C6, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathW + 28 7C9EED9E 150 Bytes [ 51, 14, 8B, D8, 85, DB, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathW + BF 7C9EEE35 27 Bytes [ 8B, 75, 08, 89, 45, F8, 89, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathW + DC 7C9EEE52 13 Bytes [ 85, C0, 0F, 84, 92, 0B, 04, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathW + EA 7C9EEE60 4 Bytes [ 85, 86, 1B, 00 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderLocation + 19 7C9EF27A 16 Bytes [ 8D, 43, 03, 50, FF, 15, 24, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderLocation + 2A 7C9EF28B 33 Bytes [ FF, 85, C0, 0F, 85, 26, 17, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderLocation + 4C 7C9EF2AD 49 Bytes [ 00, 00, 85, C0, 0F, 8D, 68, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderLocation + 7E 7C9EF2DF 16 Bytes [ 8B, FF, 55, 8B, EC, 51, 83, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSpecialFolderLocation + E 7C9EF2F1 73 Bytes CALL 7C9EF13F C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSpecialFolderLocation + 58 7C9EF33B 1 Byte [ FB ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSpecialFolderLocation + 5B 7C9EF33E 3 Bytes [ 84, DC, 50 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSpecialFolderLocation + 60 7C9EF343 3 Bytes [ 66, 83, 22 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSpecialFolderLocation + 64 7C9EF347 14 Bytes [ 5F, 5E, 5B, 5D, C2, 10, 00, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCoCreateInstance 7C9EF5E2 65 Bytes [ 90, 8B, FF, 55, 8B, EC, 83, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCoCreateInstance + 42 7C9EF624 40 Bytes [ 15, A8, F2, BB, 7C, 3B, C7, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCoCreateInstance + 6B 7C9EF64D 32 Bytes [ 08, 50, FF, 51, 18, 8B, 06, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCoCreateInstance + 8C 7C9EF66E 1 Byte [ 08 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCoCreateInstance + 8E 7C9EF670 27 Bytes [ 33, DB, EB, 93, 90, 90, 90, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSpecialFolderPathW + 1A 7C9EF792 5 Bytes [ 45, 39, B5, A4, FD ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSpecialFolderPathW + 20 7C9EF798 33 Bytes [ FF, 74, 52, C7, 85, AC, FD, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSpecialFolderPathW + 42 7C9EF7BA 22 Bytes CALL 7C9EE7B4 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSpecialFolderPathW + 59 7C9EF7D1 58 Bytes [ FF, 8B, F8, 3B, FE, 7D, 9C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSpecialFolderPathW + 94 7C9EF80C 41 Bytes [ FF, 50, F3, A5, FF, 15, 3C, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsNetDrive + 2 7C9F063E 8 Bytes [ 15, 60, F5, 9E, 7C, 5D, C2, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsNetDrive + B 7C9F0647 98 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsNetDrive + 71 7C9F06AD 113 Bytes [ 8B, FF, 55, 8B, EC, 83, 3D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsNetDrive + E3 7C9F071F 7 Bytes CALL 7C9F01D6 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsNetDrive + EB 7C9F0727 18 Bytes [ DB, 75, 21, F6, 45, 15, 40, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RealDriveType + 15 7C9F0EAB 80 Bytes [ 18, 3B, C3, 74, 02, 89, 30, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DriveType + 2E 7C9F0EFC 29 Bytes [ 8B, 45, 0C, 5D, C2, 08, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DriveType + 4C 7C9F0F1A 27 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DriveType + 68 7C9F0F36 28 Bytes [ 75, 0C, FF, 75, 08, FF, 50, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DriveType + 85 7C9F0F53 50 Bytes CALL 7C9F0D0E C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DriveType + B8 7C9F0F86 21 Bytes [ 75, 0C, 53, FF, 15, 30, 1C, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetPathFromIDListW + 3B 7C9F105F 17 Bytes JMP 7C9EB1B7 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetPathFromIDListW + 4D 7C9F1071 18 Bytes [ 56, 8B, 75, 08, 57, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetPathFromIDListW + 60 7C9F1084 25 Bytes [ 75, 14, 8B, D8, 8B, CF, 89, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetPathFromIDListW + 7A 7C9F109E 47 Bytes [ 00, 49, 0F, 85, 55, 4F, 01, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetPathFromIDListW + AA 7C9F10CE 10 Bytes [ 85, DB, 8B, C3, 0F, 85, 13, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILIsEqual + 20 7C9F122F 7 Bytes [ C3, 5B, 5D, C2, 10, 00, FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILIsEqual + 28 7C9F1237 26 Bytes [ 14, 8B, 76, 18, FF, 75, 10, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILIsEqual + 43 7C9F1252 2 Bytes [ FF, 55 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILIsEqual + 46 7C9F1255 48 Bytes [ EC, 81, EC, 54, 04, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILIsEqual + 77 7C9F1286 85 Bytes [ FF, 8D, 8D, D4, FD, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathIsSlowW + 27 7C9F12DC 23 Bytes [ 3B, F3, 0F, 9F, C0, 8B, 4D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathIsSlowW + 41 7C9F12F6 5 Bytes [ 90, 90, 8B, FF, 55 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathIsSlowW + 47 7C9F12FC 144 Bytes [ EC, 51, 51, 53, 56, 57, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathIsSlowW + D8 7C9F138D 73 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathIsSlowW + 122 7C9F13D7 7 Bytes [ C0, 75, AD, B8, FF, FF, 00 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILIsParent + 14 7C9F1440 77 Bytes [ 00, B9, FF, FF, 00, 00, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILIsParent + 62 7C9F148E 79 Bytes [ FF, 50, FF, B5, 98, FE, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILIsParent + B2 7C9F14DE 90 Bytes [ FF, 8D, 48, F0, FF, B5, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILFindChild + 4D 7C9F1539 95 Bytes CALL 7CA23B92 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILFindChild + AD 7C9F1599 37 Bytes [ DB, 7C, 41, 8B, 45, 0C, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILFindChild + D3 7C9F15BF 42 Bytes [ 45, 14, 8B, 4D, 0C, 8B, 11, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILFindChild + FE 7C9F15EA 133 Bytes [ 1B, C0, 83, D8, FF, E9, C5, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILFindChild + 184 7C9F1670 13 Bytes [ EC, FD, FF, FF, 50, 8D, 45, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllGetClassObject + A6 7C9F295F 85 Bytes [ A1, AC, FA, BC, 7C, 85, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllGetClassObject + FC 7C9F29B5 5 Bytes [ 90, 90, 90, 90, 90 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllGetClassObject + 102 7C9F29BB 15 Bytes [ FF, 55, 8B, EC, 53, 56, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllGetClassObject + 112 7C9F29CB 9 Bytes [ 85, FF, BB, 02, 40, 00, 80, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllGetClassObject + 11C 7C9F29D5 62 Bytes [ 07, 8D, 4D, 0C, 51, 68, 38, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_GetImageLists + 26 7C9F3D2F 51 Bytes [ 89, 5D, F8, 33, C0, 8B, 7D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_GetImageLists + 5A 7C9F3D63 4 Bytes [ FF, 75, 20, 8B ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_GetImageLists + 5F 7C9F3D68 42 Bytes [ 08, FF, 75, 18, 83, C1, F0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_GetImageLists + 8A 7C9F3D93 63 Bytes [ 42, EB, 05, 00, FF, 75, 20, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_GetImageLists + CB 7C9F3DD4 15 Bytes [ FE, 34, 9F, 7C, AA, DF, 9F, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHBindToParent + 72 7C9F3F02 32 Bytes [ F1, FF, 75, 08, FF, 76, 04, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHBindToParent + 93 7C9F3F23 9 Bytes [ 55, 8B, EC, 83, 3D, 78, FA, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHBindToParent + 9D 7C9F3F2D 35 Bytes [ 0F, 84, 1F, E3, 00, 00, A1, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHBindToParent + C1 7C9F3F51 4 Bytes [ 90, 90, 90, 90 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHBindToParent + C6 7C9F3F56 32 Bytes [ 8B, FF, 55, 8B, EC, 56, 8B, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_GetCachedImageIndex + 1A 7C9F3FFA 45 Bytes CALL 7C9F4016 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_GetCachedImageIndex + 48 7C9F4028 348 Bytes [ 75, 08, 8B, F9, 8D, 5F, 20, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_GetCachedImageIndex + 1A5 7C9F4185 2 Bytes [ 00, 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_GetCachedImageIndex + 1AA 7C9F418A 14 Bytes [ 00, 00, 3C, 7E, 87, 3B, DE, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_GetCachedImageIndex + 1B9 7C9F4199 14 Bytes [ 52, 1C, 6A, 90, 90, 90, 90, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotifyDeregister + 2D 7C9F5457 30 Bytes [ 00, 83, F8, 34, 0F, 86, F3, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotifyDeregister + 4C 7C9F5476 64 Bytes [ 4E, 0F, 85, 9B, 3D, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotifyDeregister + 8D 7C9F54B7 10 Bytes [ 89, 7D, E0, 89, 7D, E4, 81, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotifyDeregister + 9A 7C9F54C4 35 Bytes [ 0F, 84, C8, 5D, 00, 00, 57, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotifyDeregister + BE 7C9F54E8 50 Bytes [ 75, 10, FF, 75, 0C, FF, 75, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHMapPIDLToSystemImageListIndex + 2 7C9F659A 39 Bytes [ 75, 10, FF, 75, 08, E8, C4, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHMapPIDLToSystemImageListIndex + 2B 7C9F65C3 3 Bytes [ 8B, FF, 55 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHMapPIDLToSystemImageListIndex + 2F 7C9F65C7 26 Bytes [ EC, 51, 51, 56, 57, 8B, F1, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHMapPIDLToSystemImageListIndex + 4A 7C9F65E2 55 Bytes [ 00, 8B, D8, 3B, DF, 74, 6F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHMapPIDLToSystemImageListIndex + 82 7C9F661A 93 Bytes [ C6, 0C, 89, 75, F8, 89, 7D, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotifyRegister + 1E 7C9F88F5 92 Bytes [ 8B, 4D, FC, 8B, C7, 5F, 5E, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotifyRegister + 7D 7C9F8954 30 Bytes [ 14, 8B, 06, FF, 75, 10, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotifyRegister + 9C 7C9F8973 9 Bytes [ FF, 39, 46, 1C, 0F, 8C, B7, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotifyRegister + A6 7C9F897D 55 Bytes [ EB, A3, 90, 90, 90, 90, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotifyRegister + DE 7C9F89B5 10 Bytes [ FF, 55, 8B, EC, 83, EC, 14, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_MergeMenus + 15 7C9F8FE9 37 Bytes CALL 7C9E83EC C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_MergeMenus + 3B 7C9F900F 14 Bytes [ 46, 24, 3B, C1, 8D, 50, 01, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_MergeMenus + 4A 7C9F901E 66 Bytes [ 00, 5E, 5D, C2, 04, 00, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_MergeMenus + 8D 7C9F9061 2 Bytes [ 96, FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_MergeMenus + 91 7C9F9065 15 Bytes [ EB, E1, FF, 75, 08, E8, B2, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateShellFolderView + 2 7C9FA63C 88 Bytes [ 75, 08, 8D, 8E, 40, 02, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateShellFolderView + 5B 7C9FA695 62 Bytes [ 00, 00, 85, C0, 0F, 84, 02, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateShellFolderView + 9A 7C9FA6D4 130 Bytes [ 00, FF, 75, 08, 8B, 00, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateShellFolderView + 11D 7C9FA757 5 Bytes [ 80, A6, 12, 02, 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateShellFolderView + 123 7C9FA75D 129 Bytes [ FE, F6, 86, 14, 02, 00, 00, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHMapIDListToImageListIndexAsync + 38 7C9FCB7C 27 Bytes [ 8D, 88, 00, 8E, FF, FF, 81, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHMapIDListToImageListIndexAsync + 54 7C9FCB98 6 Bytes [ 00, 6A, 0A, EB, 3F, 6A ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHMapIDListToImageListIndexAsync + 5B 7C9FCB9F 83 Bytes [ 8D, 8D, F0, FE, FF, FF, 51, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHMapIDListToImageListIndexAsync + AF 7C9FCBF3 7 Bytes [ FF, 51, 57, FF, B5, F8, FE ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHMapIDListToImageListIndexAsync + B7 7C9FCBFB 61 Bytes [ FF, 6A, 2B, 83, A5, F0, FE, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconExW + 4D 7C9FE204 78 Bytes [ CF, FF, 75, 08, 56, E8, B8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconExW + 9C 7C9FE253 31 Bytes [ 00, 68, 68, D2, 9F, 7C, 8D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconExW + BC 7C9FE273 5 Bytes [ 00, 81, 32, 9F, 7C ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconExW + C2 7C9FE279 34 Bytes [ 00, 00, 00, 7A, DF, 66, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconExW + E9 7C9FE2A0 35 Bytes CALL 7C9E8417 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCloneSpecialIDList + 3A 7C9FE585 34 Bytes [ 89, 45, DC, 8B, 45, 14, 83, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCloneSpecialIDList + 5D 7C9FE5A8 2 Bytes [ D9, A5 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCloneSpecialIDList + 60 7C9FE5AB 37 Bytes [ 15, 94, 1A, 9C, 7C, 8B, F8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCloneSpecialIDList + 86 7C9FE5D1 20 Bytes [ 03, 00, 00, 8B, 45, E8, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCloneSpecialIDList + 9B 7C9FE5E6 25 Bytes [ 56, 0C, 8B, F8, 33, F6, 3B, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHDefExtractIconW + 48 7C9FECE1 26 Bytes [ 7D, 10, 33, DB, 33, C0, 39, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHDefExtractIconW + 63 7C9FECFC 57 Bytes [ 20, 85, C0, 74, 0C, FF, 46, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHDefExtractIconW + 9D 7C9FED36 73 Bytes [ 75, 08, 8B, 46, 08, FF, 76, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHExtractIconsW + 36 7C9FED80 27 Bytes [ 59, 8B, C6, 5E, 5D, C2, 04, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHExtractIconsW + 52 7C9FED9C 24 Bytes [ 08, 50, FF, 51, 08, C7, 06, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHExtractIconsW + 6B 7C9FEDB5 54 Bytes [ 75, 0C, 57, 8B, 7D, 08, 23, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHExtractIconsW + A2 7C9FEDEC 23 Bytes [ 33, C0, EB, E3, 90, 90, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHExtractIconsW + BA 7C9FEE04 159 Bytes [ 89, 46, 0C, 8B, 45, 08, C7, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllGetVersion + 5 7C9FFA08 74 Bytes [ 81, EC, 28, 02, 00, 00, A1, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllGetVersion + 51 7C9FFA54 51 Bytes [ 00, 57, 68, 70, F5, BC, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllGetVersion + 85 7C9FFA88 6 Bytes [ 00, 00, 75, 15, 56, 53 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllGetVersion + 8C 7C9FFA8F 88 Bytes [ B5, EC, FD, FF, FF, E8, 65, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllGetVersion + E5 7C9FFAE8 14 Bytes [ 85, E4, FD, FF, FF, 89, B5, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetImageList + C 7C9FFF35 39 Bytes [ F0, FF, FF, 75, 03, 09, 46, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetImageList + 34 7C9FFF5D 13 Bytes JMP 7C9F3AFF C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetImageList + 43 7C9FFF6C 26 Bytes [ 88, F1, 9F, 7C, 6C, F1, 9F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetImageList + 5F 7C9FFF88 15 Bytes [ DC, F0, 9F, 7C, B8, F0, 9F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetImageList + 6F 7C9FFF98 11 Bytes [ 54, F0, 9F, 7C, 30, F0, 9F, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathResolve + 5B 7CA02AF5 338 Bytes [ B9, F1, 7E, AD, 7C, 89, 15, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathResolve + 1AE 7CA02C48 2 Bytes [ E1, 69 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathResolve + 1B2 7CA02C4C 17 Bytes [ 34, 4B, 17, 9B, FF, 40, D2, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathResolve + 1C4 7CA02C5E 20 Bytes [ 00, 00, 80, 54, 27, F2, 82, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathResolve + 1DA 7CA02C74 19 Bytes [ 83, 25, A0, 00, BD, 7C, 00, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteExW + 96 7CA02F99 61 Bytes [ 83, FF, 08, 0F, 8E, 51, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteExW + D4 7CA02FD7 33 Bytes [ 8B, 75, 08, 3B, F3, 75, 0C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteExW + F6 7CA02FF9 92 Bytes [ 10, 89, 91, AC, 00, BD, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteExW + 153 7CA03056 62 Bytes [ 00, 56, FF, 35, 84, 05, BD, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteExW + 192 7CA03095 30 Bytes [ 1D, 9C, 7C, 99, 2B, C2, D1, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHTestTokenMembership + 54 7CA055B3 32 Bytes [ 00, 57, FF, B6, 04, 60, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHTestTokenMembership + 75 7CA055D4 179 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHTestTokenMembership + 129 7CA05688 5 Bytes [ FF, 55, 8B, EC, 56 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHTestTokenMembership + 12F 7CA0568E 19 Bytes CALL 7CA056F6 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHTestTokenMembership + 144 7CA056A3 50 Bytes [ 0F, 85, 97, 8E, 04, 00, 83, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!OpenRegStream + 1 7CA05ABF 25 Bytes [ EC, 81, EC, 60, 02, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!OpenRegStream + 1B 7CA05AD9 24 Bytes [ 89, BD, A8, FD, FF, FF, 0F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!OpenRegStream + 34 7CA05AF2 12 Bytes [ 8D, 70, 04, 56, FF, 15, F4, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!OpenRegStream + 41 7CA05AFF 52 Bytes [ 75, 8D, 85, A0, FD, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!OpenRegStream + 76 7CA05B34 32 Bytes CALL 7CA05B8C C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILLoadFromStream + 4 7CA0693A 58 Bytes [ D8, 85, DB, 0F, 8C, 57, C1, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILLoadFromStream + 3F 7CA06975 3 Bytes [ C3, 5B, E8 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILLoadFromStream + 43 7CA06979 27 Bytes [ 1A, FE, FF, C9, C2, 10, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILLoadFromStream + 5F 7CA06995 25 Bytes [ 5D, C2, 04, 00, 48, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILLoadFromStream + 79 7CA069AF 224 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_ShowDragImage + 1 7CA08C9D 114 Bytes [ 47, 30, 85, C0, 0F, 85, 7A, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_ShowDragImage + 74 7CA08D10 2 Bytes [ 50, 53 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_ShowDragImage + 77 7CA08D13 3 Bytes [ CE, F9, FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_ShowDragImage + 7B 7CA08D17 43 Bytes [ 8B, 06, F7, D8, 1B, C0, 25, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_ShowDragImage + A7 7CA08D43 190 Bytes [ FF, 15, EC, 14, 9C, 7C, 85, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathAndSubDirW + F 7CA0B1D7 5 Bytes [ FF, 01, 00, 00, 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathAndSubDirW + 15 7CA0B1DD 131 Bytes [ B5, F8, FD, FF, FF, FF, 15, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateDirectoryExW + 17 7CA0B261 99 Bytes [ 16, 9C, 7C, 5F, 5E, 5B, C3, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateDirectoryExW + 7B 7CA0B2C5 23 Bytes [ 85, C0, 7C, 23, 8B, 46, 10, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateDirectoryExW + 93 7CA0B2DD 84 Bytes [ 46, 30, 68, 55, 04, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateDirectoryExW + E8 7CA0B332 4 Bytes [ 84, 1E, E8, 04 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateDirectoryExW + ED 7CA0B337 3 Bytes [ 6A, 43, FF ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHUpdateRecycleBinIcon + 5 7CA0BCE5 39 Bytes [ 8B, C6, 5E, 5D, C2, 04, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHUpdateRecycleBinIcon + 2D 7CA0BD0D 49 Bytes [ BD, 7C, 3B, 18, 75, E0, 33, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHUpdateRecycleBinIcon + 5F 7CA0BD3F 93 Bytes JMP 7C9F9149 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHUpdateRecycleBinIcon + BD 7CA0BD9D 49 Bytes [ FF, 8B, F0, 3B, F7, 0F, 8D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHUpdateRecycleBinIcon + EF 7CA0BDCF 69 Bytes [ FF, 75, FC, FF, 56, 18, E9, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsUserAnAdmin + 35 7CA0DB90 16 Bytes [ 07, 77, 03, 8B, 45, 08, 5D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsUserAnAdmin + 46 7CA0DBA1 19 Bytes [ 55, 8B, EC, 83, 7D, 0C, 01, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsUserAnAdmin + 5A 7CA0DBB5 5 Bytes [ 0F, 85, EA, C1, 03 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsUserAnAdmin + 60 7CA0DBBB 42 Bytes [ 53, 8B, 5D, 14, 56, 8B, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsUserAnAdmin + 8B 7CA0DBE6 16 Bytes [ C5, C1, 03, 00, 8B, 45, 10, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathProcessCommand + 41 7CA0E4CC 1 Byte [ 53 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathProcessCommand + 43 7CA0E4CE 38 Bytes [ B5, D0, FB, FF, FF, 8D, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathProcessCommand + 6A 7CA0E4F5 9 Bytes [ FF, 83, FE, FF, 0F, 84, AE, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathProcessCommand + 74 7CA0E4FF 22 Bytes [ FF, 85, D0, FB, FF, FF, 83, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathProcessCommand + 8B 7CA0E516 5 Bytes [ 89, 9D, B0, FB, FF ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragQueryFileAorW + 3D 7CA1192E 48 Bytes [ C1, FD, FF, FF, 08, 0F, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragQueryFileAorW + 6E 7CA1195F 41 Bytes [ 76, 28, 33, DB, 8D, 85, B8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragQueryFileAorW + 98 7CA11989 30 Bytes [ 40, 89, 85, F8, FD, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragQueryFileAorW + B7 7CA119A8 50 Bytes [ FF, FF, 8D, 4E, FC, E8, 46, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragQueryFileAorW + EB 7CA119DC 51 Bytes [ FF, 8B, 85, 58, FF, FF, FF, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!InternalExtractIconListA + 15 7CA1B936 5 Bytes [ 33, C8, 89, 8B, A4 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!InternalExtractIconListA + 1C 7CA1B93D 46 Bytes JMP 7CA1BDD3 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!InternalExtractIconListA + 4B 7CA1B96C 39 Bytes [ 85, C0, 0F, 85, 60, 04, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!InternalExtractIconListA + 73 7CA1B994 5 Bytes [ 89, 83, A4, 00, 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!InternalExtractIconListA + 79 7CA1B99A 58 Bytes JMP 7CA1BDD4 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSetFolderCustomSettingsW + 53 7CA1DC20 68 Bytes [ 76, 08, FF, D7, 85, C0, 74, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSetFolderCustomSettingsW + 98 7CA1DC65 25 Bytes [ 00, FF, 45, E4, 8B, 45, E4, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSetFolderCustomSettingsW + B2 7CA1DC7F 34 Bytes [ F6, D9, 1B, C9, 23, 4D, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSetFolderCustomSettingsW + D5 7CA1DCA2 14 Bytes CALL 7CA197C3 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSetFolderCustomSettingsW + E5 7CA1DCB2 43 Bytes [ F6, 46, 44, 01, 0F, 85, C4, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHSetLocalizedName + 6 7CA21652 8 Bytes [ 6C, 24, 04, 08, E9, D2, F5, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHSetLocalizedName + F 7CA2165B 28 Bytes [ 90, 90, 90, 90, 90, 83, 6C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHSetLocalizedName + 2D 7CA21679 28 Bytes [ 90, 90, 90, 90, 90, 83, 6C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHSetLocalizedName + 4B 7CA21697 57 Bytes [ F6, C3, 03, 74, 12, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHSetLocalizedName + 85 7CA216D1 14 Bytes JMP 7CA0F4F3 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFlushSFCache + 32 7CA217B0 59 Bytes [ 85, C0, 0F, 84, 86, 18, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFlushSFCache + 6E 7CA217EC 52 Bytes [ 75, 10, 0F, 84, 0D, 37, 03, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFlushSFCache + A3 7CA21821 86 Bytes [ 00, 90, 90, 90, 90, 90, 83, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFlushSFCache + FA 7CA21878 102 Bytes [ 33, C0, 89, 9D, DC, FD, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFlushSFCache + 161 7CA218DF 4 Bytes [ FD, FF, FF, 8D ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_NotifyIcon + B 7CA221E1 45 Bytes [ 83, BD, 3C, F5, FF, FF, 01, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_NotifyIcon + 39 7CA2220F 7 Bytes [ FF, 00, 09, 8D, 28, F5, FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_NotifyIcon + 41 7CA22217 18 Bytes [ 89, 85, 58, F5, FF, FF, 8D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_NotifyIcon + 54 7CA2222A 8 Bytes [ FF, 8B, F8, 85, FF, 7C, 23, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_NotifyIcon + 5D 7CA22233 2 Bytes [ 24, F5 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotification_Lock + 6 7CA228EB 9 Bytes [ FF, 8B, CB, 50, 0F, 84, F9, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotification_Lock + 10 7CA228F5 66 Bytes [ FF, B5, BC, F9, FF, FF, E8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotification_Lock + 53 7CA22938 144 Bytes [ 8B, 4D, FC, 8B, 85, C0, F9, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotification_Lock + E4 7CA229C9 2 Bytes [ EC, 56 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotification_Lock + E7 7CA229CC 47 Bytes [ 75, 08, FF, 71, 3C, E8, 3F, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractVersionResource16W + 11 7CA22C52 5 Bytes [ FC, FF, C9, C2, 04 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractVersionResource16W + 17 7CA22C58 9 Bytes [ 83, 0E, 18, EB, D5, C7, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractVersionResource16W + 22 7CA22C63 114 Bytes [ A1, 60, FA, BC, 7C, 33, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractVersionResource16W + 96 7CA22CD7 36 Bytes [ 00, FF, 15, 7C, 1A, 9C, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractVersionResource16W + BB 7CA22CFC 1 Byte [ 52 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllCanUnloadNow + 27 7CA238B4 15 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllCanUnloadNow + 37 7CA238C4 46 Bytes [ 57, 8B, 7D, 08, F7, 47, 04, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllCanUnloadNow + 66 7CA238F3 31 Bytes [ 00, 00, 85, C0, 74, 16, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllCanUnloadNow + 86 7CA23913 162 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllCanUnloadNow + 129 7CA239B6 4 Bytes [ 55, 8B, EC, 56 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathIsExe + 2 7CA23A9F 3 Bytes JMP 7CA2397C C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathIsExe + 6 7CA23AA3 108 Bytes [ FF, 39, 7D, F4, 0F, 85, F1, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathIsExe + 73 7CA23B10 30 Bytes JMP 7CA23893 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathIsExe + 92 7CA23B2F 8 Bytes JMP 7CA26B44 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathIsExe + 9B 7CA23B38 24 Bytes [ 40, 04, 8B, 34, 98, 3B, FE, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsLFNDrive + 3B 7CA23DCC 54 Bytes [ 69, 00, 6E, 00, 69, 00, 50, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsLFNDrive + 72 7CA23E03 96 Bytes [ 83, C6, 04, 81, FE, 2C, 59, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsLFNDrive + D3 7CA23E64 20 Bytes [ 9E, 7C, 0F, 85, 72, 01, 02, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsLFNDrive + E8 7CA23E79 77 Bytes [ 5E, C3, 90, 90, 90, 90, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsLFNDrive + 136 7CA23EC7 28 Bytes [ 0F, 85, 1A, 1A, 02, 00, C3, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotification_Unlock + 5 7CA24415 89 Bytes [ A1, 54, FA, BC, 7C, 85, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotification_Unlock + 5F 7CA2446F 19 Bytes [ FF, 8B, 45, 08, 3B, C3, 0F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotification_Unlock + 73 7CA24483 3 Bytes [ CE, FF, 50 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotification_Unlock + 77 7CA24487 17 Bytes [ 8B, F8, 3B, FB, 74, 23, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotification_Unlock + 8B 7CA2449B 2 Bytes [ FF, 15 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotify + B 7CA24914 3 Bytes [ 68, 64, FA ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotify + 10 7CA24919 50 Bytes CALL 7CA00BA3 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotify + 43 7CA2494C 118 Bytes [ 68, A4, FA, BC, 7C, E8, 4D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotify + BA 7CA249C3 16 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotify + CB 7CA249D4 26 Bytes [ 00, F6, 45, 08, 01, 74, 07, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_NotifyIconW + 41 7CA2A570 7 Bytes [ 64, 00, 52, 00, 75, 00, 6E ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_NotifyIconW + 49 7CA2A578 1 Byte [ 44 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_NotifyIconW + 4B 7CA2A57A 41 Bytes [ 6C, 00, 6C, 00, 00, 00, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_NotifyIconW + 75 7CA2A5A4 115 Bytes [ 63, 00, 64, 00, 6C, 00, 67, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Shell_NotifyIconW + E9 7CA2A618 74 Bytes [ 75, 00, 63, 00, 74, 00, 69, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDataFromIDListW + 17 7CA2AAD0 122 Bytes [ A2, 7C, C3, 90, 90, 90, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDataFromIDListW + 92 7CA2AB4B 8 Bytes [ 07, BD, 7C, C0, A0, A2, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDataFromIDListW + 9B 7CA2AB54 58 Bytes [ 90, 90, 90, 90, C7, 05, F0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDataFromIDListW + D6 7CA2AB8F 1 Byte [ A0 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDataFromIDListW + D8 7CA2AB91 94 Bytes [ 7C, C3, 90, 90, 90, 90, 90, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathA + FB 7CA2AD0C 5 Bytes [ BD, 7C, C0, A0, A2 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathA + 101 7CA2AD12 43 Bytes [ C3, 90, 90, 90, 90, 90, C7, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathA + 12D 7CA2AD3E 19 Bytes [ C0, A0, A2, 7C, C3, 90, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathA + 141 7CA2AD52 17 Bytes [ C3, 90, 90, 90, 90, 90, C7, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathA + 154 7CA2AD65 77 Bytes [ 90, 90, 90, C7, 05, 14, 09, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFileInfoW + 4D 7CA2B040 89 Bytes [ 3D, D0, F5, BC, 7C, 74, 0D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFileInfoW + A7 7CA2B09A 72 Bytes [ 94, AB, 01, 00, A1, 2C, 09, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFileInfoW + F0 7CA2B0E3 106 Bytes [ A1, 58, F5, BC, 7C, 85, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFileInfoW + 15B 7CA2B14E 5 Bytes [ 00, E8, 0B, 00, 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFileInfoW + 161 7CA2B154 64 Bytes [ 33, C0, 5D, C2, 0C, 00, 90, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragAcceptFiles + 14 7CA2B1BD 19 Bytes [ D8, 0D, 00, A2, A2, 7C, 89, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragAcceptFiles + 28 7CA2B1D1 155 Bytes [ 8B, 38, 4F, 78, 1C, 56, 57, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragAcceptFiles + C4 7CA2B26D 49 Bytes [ 55, 8B, EC, 53, 56, 57, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragAcceptFiles + F6 7CA2B29F 16 Bytes [ 5F, 5E, 5B, 5D, C2, 10, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragAcceptFiles + 107 7CA2B2B0 9 Bytes [ 90, 90, 90, 90, 8B, FF, 55, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetMalloc + 43 7CA2B3D8 16 Bytes [ 80, FF, 15, 30, 10, 9C, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetMalloc + 54 7CA2B3E9 9 Bytes [ 10, 9C, 7C, 8B, C6, 5E, 5D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetMalloc + 5E 7CA2B3F3 8 Bytes [ 33, F6, 46, EB, F4, B8, 17, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetMalloc + 67 7CA2B3FC 14 Bytes [ 00, 3B, F8, 0F, 86, 80, 87, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetMalloc + 76 7CA2B40B 13 Bytes [ 72, 40, 81, FF, 12, 02, 00, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILSaveToStream + 54 7CA2F480 28 Bytes [ 03, 56, 56, FF, 75, CC, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILSaveToStream + 73 7CA2F49F 82 Bytes [ 85, FF, C7, 45, FC, 01, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILSaveToStream + C6 7CA2F4F2 52 Bytes [ 00, C7, 45, D4, 02, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILSaveToStream + FB 7CA2F527 50 Bytes [ 75, F4, 8B, 46, 18, 85, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILSaveToStream + 12F 7CA2F55B 26 Bytes [ 8D, B7, B4, 01, 00, 00, 8B, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHAddToRecentDocs + 7 7CA2FD29 42 Bytes [ FF, 15, E0, 15, 9C, 7C, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHAddToRecentDocs + 32 7CA2FD54 20 Bytes [ FF, 55, 8B, EC, 56, 8B, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHAddToRecentDocs + 47 7CA2FD69 76 Bytes [ C0, 74, 12, 8B, CF, 8B, D1, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHAddToRecentDocs + 94 7CA2FDB6 45 Bytes [ 55, 8B, EC, 81, EC, 98, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHAddToRecentDocs + C2 7CA2FDE4 2 Bytes [ 9D, 70 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Win32DeleteFile + 4B 7CA30510 4 Bytes [ 84, 4C, 48, 02 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Win32DeleteFile + 50 7CA30515 54 Bytes [ 56, 57, 6A, 60, 6A, 40, BF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Win32DeleteFile + 87 7CA3054C 36 Bytes CALL 7CA304A2 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Win32DeleteFile + AC 7CA30571 16 Bytes [ 55, 8B, EC, 56, FF, 75, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Win32DeleteFile + BD 7CA30582 13 Bytes [ 15, 58, 18, 9C, 7C, 85, C0, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathYetAnotherMakeUniqueName + 6B 7CA308F4 12 Bytes [ 0A, 00, 89, B5, C6, FB, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathYetAnotherMakeUniqueName + 78 7CA30901 78 Bytes [ FF, 8D, BD, C4, FB, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathYetAnotherMakeUniqueName + C7 7CA30950 56 Bytes [ FF, 55, 8B, EC, 51, 56, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathYetAnotherMakeUniqueName + 100 7CA30989 14 Bytes [ 5E, C9, C2, 08, 00, 8D, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathYetAnotherMakeUniqueName + 10F 7CA30998 1 Byte [ FF ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathCleanupSpec + 33 7CA30A9F 63 Bytes [ FF, 6A, 00, 50, 6A, 00, E8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathCleanupSpec + 73 7CA30ADF 12 Bytes [ F3, 33, C0, F3, A7, 0F, 84, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathCleanupSpec + 80 7CA30AEC 4 Bytes [ B5, D0, FD, FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathCleanupSpec + 85 7CA30AF1 18 Bytes CALL 7C9EEF16 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathCleanupSpec + 98 7CA30B04 37 Bytes [ 8D, 95, DC, FB, FF, FF, 52, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetNewLinkInfoW + 20 7CA30B2A 16 Bytes [ 08, 50, FF, 51, 10, 8B, F0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetNewLinkInfoW + 31 7CA30B3B 39 Bytes [ 51, 08, 81, FE, 01, 40, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetNewLinkInfoW + 59 7CA30B63 53 Bytes [ 8D, 44, 43, 02, 51, 50, E8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetNewLinkInfoW + 8F 7CA30B99 12 Bytes [ FF, A5, A5, A5, A5, C7, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetNewLinkInfoW + 9C 7CA30BA6 26 Bytes [ 00, 00, 8B, 85, D4, F5, FF, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrStrIW + 58 7CA311BF 106 Bytes JMP 7C9FF007 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrStrIW + C4 7CA3122B 5 Bytes [ 53, 8D, 45, FC, 50 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrStrIW + CA 7CA31231 45 Bytes [ 75, 0C, 8B, CE, FF, 75, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrStrIW + F8 7CA3125F 33 Bytes [ 75, 08, FF, 75, 0C, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrStrIW + 11A 7CA31281 31 Bytes [ 75, 10, FF, 15, 34, 16, 9C, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFileInfo + 1 7CA31552 47 Bytes [ 4D, 10, 56, 8B, 75, 0C, 57, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFileInfo + 31 7CA31582 16 Bytes [ 50, 8D, 85, F4, FD, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFileInfo + 42 7CA31593 4 Bytes [ 8C, 9C, 00, 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFileInfo + 47 7CA31598 30 Bytes [ 83, BD, F0, FD, FF, FF, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFileInfo + 66 7CA315B7 14 Bytes CALL 7C9EBD8F C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconW + 63 7CA318A1 17 Bytes [ 5D, 14, 89, 85, C0, F7, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconW + 75 7CA318B3 11 Bytes [ B5, D0, F7, FF, FF, 89, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconW + 81 7CA318BF 1 Byte [ 9D ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconW + 83 7CA318C1 78 Bytes [ F7, FF, FF, 0F, 84, BF, 2F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconW + D2 7CA31910 1 Byte [ D7 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILGetNext + 2B 7CA3449A 10 Bytes [ 50, FF, 75, 10, FF, B5, E0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILGetNext + 36 7CA344A5 2 Bytes [ CE, B0 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILGetNext + 3A 7CA344A9 21 Bytes [ FF, B5, E0, F9, FF, FF, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILGetNext + 50 7CA344BF 15 Bytes [ FF, 8D, 85, F4, FD, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILGetNext + 60 7CA344CF 15 Bytes [ 4D, FC, 5F, 8B, C6, 5E, 5B, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ReadCabinetState + 2C 7CA346FD 54 Bytes [ C2, 10, 00, 90, 90, 90, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ReadCabinetState + 63 7CA34734 71 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ReadCabinetState + AB 7CA3477C 3 Bytes [ B6, 68, FB ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ReadCabinetState + AF 7CA34780 27 Bytes [ 85, C0, 59, 74, 35, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ReadCabinetState + CB 7CA3479C 84 Bytes [ 8B, 06, 57, FF, 75, 10, 68, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetPathFromIDList + 21 7CA34C52 94 Bytes [ 66, 00, 00, FF, 76, 28, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetPathFromIDList + 80 7CA34CB1 4 Bytes [ 75, 0C, 8B, D9 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetPathFromIDList + 85 7CA34CB6 53 Bytes CALL 7CA34BEF C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetPathFromIDList + BB 7CA34CEC 215 Bytes [ F9, FF, 15, D4, 15, 9C, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetPathFromIDList + 193 7CA34DC4 61 Bytes [ 00, 0F, 85, 58, 4A, 02, 00, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPropStgReadMultiple + 1 7CA37A62 30 Bytes [ C7, 5F, 5E, 5D, C2, 0C, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPropStgReadMultiple + 20 7CA37A81 95 Bytes CALL 7CA3796E C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPropStgReadMultiple + 80 7CA37AE1 94 Bytes [ FF, 75, 10, 8B, 06, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPropStgReadMultiple + DF 7CA37B40 82 Bytes [ FF, FF, 90, 90, 4D, 6B, A3, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPropStgReadMultiple + 132 7CA37B93 19 Bytes [ F2, 33, DB, F3, A7, 74, 05, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetRealIDL + 17 7CA38DC8 46 Bytes [ EC, 81, EC, 10, 02, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetRealIDL + 46 7CA38DF7 18 Bytes [ 80, 00, 00, 3B, F8, 0F, 8F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetRealIDL + 59 7CA38E0A 35 Bytes [ 00, 02, 00, 00, 0F, 84, 6B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetRealIDL + 7D 7CA38E2E 2 Bytes [ 00, 20 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetRealIDL + 81 7CA38E32 50 Bytes [ 0F, 84, 47, 10, 00, 00, 6A, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!FindExecutableA + B 7CA3FA07 28 Bytes [ 00, 6A, 06, FF, B0, B0, 01, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!FindExecutableA + 28 7CA3FA24 101 Bytes [ 51, 14, 85, DB, 0F, 8C, DC, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!FindExecutableW + 5 7CA3FA93 57 Bytes [ 56, 57, 6A, 00, 8B, F1, E8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!FindExecutableW + 40 7CA3FACE 17 Bytes [ 8B, 45, 24, 8D, BE, 38, 02, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!FindExecutableW + 52 7CA3FAE0 48 Bytes [ 00, FF, 75, 18, 89, 86, 3C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!FindExecutableW + 83 7CA3FB11 14 Bytes [ 55, 8B, EC, 56, 57, 68, 40, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!FindExecutableW + 92 7CA3FB20 5 Bytes [ 85, C0, 59, 74, 55 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSettings + 14 7CA3FBC1 32 Bytes [ 00, 8B, C7, 5F, 5E, 5D, C2, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSettings + 35 7CA3FBE2 17 Bytes [ 43, 3B, C3, B9, 05, 40, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSettings + 47 7CA3FBF4 8 Bytes [ F8, 03, 0F, 84, 43, 84, 01, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSettings + 50 7CA3FBFD 19 Bytes [ C0, 75, 50, 53, 56, FF, 15, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetSettings + 64 7CA3FC11 13 Bytes [ 39, 1E, 75, 18, 8B, 47, 0C, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPathPrepareForWriteW + 26 7CA409C0 5 Bytes [ 04, 31, D1, EA, 52 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPathPrepareForWriteW + 2C 7CA409C6 5 Bytes [ 6A, FF, 89, 04, BE ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPathPrepareForWriteW + 32 7CA409CC 26 Bytes [ 45, FC, FF, 30, 6A, 00, 6A, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPathPrepareForWriteW + 4D 7CA409E7 58 Bytes [ 8B, 45, FC, 47, 3B, 7D, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPathPrepareForWriteW + 88 7CA40A22 82 Bytes [ FF, FF, 33, DB, 8B, F8, 83, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DoEnvironmentSubstW + 37 7CA40D96 7 Bytes JMP 7CA4DF23 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DoEnvironmentSubstW + 3F 7CA40D9E 85 Bytes [ 83, 7D, FC, 02, 5F, 5E, 0F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DoEnvironmentSubstW + 95 7CA40DF4 26 Bytes [ 8B, F0, 8D, 84, 3E, 09, 01, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DoEnvironmentSubstW + B0 7CA40E0F 25 Bytes [ 15, 28, 16, 9C, 7C, 85, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteEx + 4 7CA40E29 38 Bytes [ 7D, 08, 83, C0, F6, 89, 43, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteEx + 2B 7CA40E50 48 Bytes [ 5E, 25, 0E, 00, 07, 80, 5B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteEx + 5C 7CA40E81 68 Bytes [ 15, 80, 14, 9C, 7C, 57, 68, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteEx + A1 7CA40EC6 88 Bytes [ 2B, 45, 0C, 1B, 55, 10, 89, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteEx + FA 7CA40F1F 7 Bytes [ 55, 8B, EC, 51, 56, 8B, F1 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteA + 4B 7CA4119B 1 Byte [ 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteA + 4D 7CA4119D 12 Bytes CALL 7C9E83EC C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteA + 5A 7CA411AA 64 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteA + 9B 7CA411EB 50 Bytes [ 08, FF, 15, B8, 1D, 9C, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteA + CE 7CA4121E 19 Bytes [ F8, 50, 68, C0, 51, 9C, 7C, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CommandLineToArgvW + 1 7CA41349 9 Bytes CALL 7C9E8480 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CommandLineToArgvW + B 7CA41353 150 Bytes [ 90, 90, 90, 90, 90, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CommandLineToArgvW + A2 7CA413EA 9 Bytes [ 83, 7E, 20, 00, 57, 0F, 84, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CommandLineToArgvW + AD 7CA413F5 78 Bytes [ FF, 15, 08, 1E, 9C, 7C, 68, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CommandLineToArgvW + FC 7CA41444 77 Bytes [ 5D, 08, 56, 57, 8B, F1, 56, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateQueryCancelAutoPlayMoniker + A 7CA41F80 84 Bytes [ 8B, FF, 55, 8B, EC, 33, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateQueryCancelAutoPlayMoniker + 5F 7CA41FD5 1 Byte [ 39 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateQueryCancelAutoPlayMoniker + 6F 7CA41FE5 53 Bytes [ 8B, F0, 8D, 7D, EC, A5, A5, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateQueryCancelAutoPlayMoniker + A5 7CA4201B 80 Bytes CALL 7C9F7D79 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateQueryCancelAutoPlayMoniker + F6 7CA4206C 70 Bytes [ 61, 00, 6D, 00, 65, 00, 00, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellAboutW + 3F 7CA62EAE 118 Bytes [ 6C, 00, 2C, 00, 2D, 00, 36, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellAboutA + 67 7CA62F25 70 Bytes [ 00, 90, 90, 78, 00, 70, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellAboutA + AE 7CA62F6C 31 Bytes [ 00, 00, 90, 90, 70, 00, 6F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellAboutA + CE 7CA62F8C 27 Bytes [ 32, 00, 30, 00, 32, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellAboutA + EA 7CA62FA8 3 Bytes [ 6C, 00, 6C ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellAboutA + EE 7CA62FAC 107 Bytes [ 2C, 00, 30, 00, 00, 00, 90, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHQueryRecycleBinW + 55 7CA66925 62 Bytes [ FF, FF, 15, B0, 1C, 9C, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHQueryRecycleBinA + 2 7CA66964 33 Bytes [ 15, AC, 15, 9C, 7C, 8D, 86, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHQueryRecycleBinA + 24 7CA66986 21 Bytes [ 15, 44, 19, 9F, 7C, 83, F8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHQueryRecycleBinA + 3A 7CA6699C 19 Bytes [ FF, 50, FF, 75, 14, E8, 7B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHQueryRecycleBinA + 4E 7CA669B0 2 Bytes [ 8D, 85 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHQueryRecycleBinA + 51 7CA669B3 66 Bytes [ FB, FF, FF, FF, 75, 10, FF, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEmptyRecycleBinW + 2 7CA66C63 6 Bytes [ FF, 53, E8, 3C, EE, FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEmptyRecycleBinW + 9 7CA66C6A 30 Bytes [ 39, B5, DC, F9, FF, FF, 74, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEmptyRecycleBinW + 29 7CA66C8A 31 Bytes [ 18, 01, 00, 00, 74, 08, 39, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEmptyRecycleBinW + 4A 7CA66CAB 14 Bytes CALL 7CA640C7 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEmptyRecycleBinW + 59 7CA66CBA 62 Bytes [ 8D, 1C, 9D, C0, 58, BD, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEmptyRecycleBinA + 2E 7CA66CF9 89 Bytes [ 35, A4, F5, BC, 7C, E8, 6E, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEmptyRecycleBinA + 88 7CA66D53 110 Bytes [ 56, 0F, 94, C1, 56, 56, 50, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEmptyRecycleBinA + F7 7CA66DC2 55 Bytes [ FF, 0F, 94, C0, 89, 41, 18, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEmptyRecycleBinA + 12F 7CA66DFA 9 Bytes [ 56, 57, 8B, 7D, 08, 89, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEmptyRecycleBinA + 139 7CA66E04 5 Bytes [ FF, 8D, 85, DC, F7 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateStdEnumFmtEtc + 18 7CA66E42 112 Bytes [ 85, C0, 0F, 84, 4A, 02, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateStdEnumFmtEtc + 89 7CA66EB3 183 Bytes [ 8D, 85, DC, F7, FF, FF, 50, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateStdEnumFmtEtc + 141 7CA66F6B 24 Bytes [ D8, BE, 04, 01, 00, 00, 56, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateStdEnumFmtEtc + 15A 7CA66F84 13 Bytes [ 08, FE, FF, FF, 50, 57, E8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateStdEnumFmtEtc + 168 7CA66F92 3 Bytes [ 32, 68, AC ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!WriteCabinetState + 7E 7CA6718D 54 Bytes [ 15, 88, 1C, 9C, 7C, 85, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!WriteCabinetState + B5 7CA671C4 15 Bytes [ FF, 00, EB, 0C, FF, 15, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!WriteCabinetState + C5 7CA671D4 135 Bytes [ 83, BD, BC, F7, FF, FF, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!WriteCabinetState + 14D 7CA6725C 7 Bytes [ 15, 60, 1C, 9C, 7C, 57, 50 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!WriteCabinetState + 155 7CA67264 39 Bytes [ B5, D8, F7, FF, FF, 89, 85, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFreeNameMappings + 2E 7CA690F7 59 Bytes [ FF, 89, 9E, 18, 02, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFreeNameMappings + 6A 7CA69133 22 Bytes [ 07, 3B, C3, 74, 09, 50, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFreeNameMappings + 81 7CA6914A 19 Bytes [ 15, F4, 15, 9C, 7C, 89, 5E, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFreeNameMappings + 95 7CA6915E 19 Bytes [ 8B, FF, 55, 8B, EC, 83, EC, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFreeNameMappings + A9 7CA69172 20 Bytes [ 76, 04, 33, DB, 89, 5D, FC, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateDirectory + 7 7CA6A8D4 1 Byte [ 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateDirectory + 9 7CA6A8D6 18 Bytes [ 41, 56, 8B, 75, 08, 57, 6A, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateDirectoryExA + 1 7CA6A8E9 15 Bytes CALL 7CA6A787 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateDirectoryExA + 11 7CA6A8F9 23 Bytes [ FF, 15, 64, 1D, 9C, 7C, 6A, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateDirectoryExA + 29 7CA6A911 50 Bytes [ 15, DC, 1D, 9C, 7C, 5F, 5E, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateDirectoryExA + 5D 7CA6A945 22 Bytes [ 00, 8B, 51, 34, 85, D2, 0F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateDirectoryExA + 74 7CA6A95C 96 Bytes [ D7, FF, B6, EC, 00, 00, 00, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFileOperationW + 24 7CA70860 27 Bytes [ 00, 8B, 86, A4, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFileOperationW + 41 7CA7087D 225 Bytes [ 00, C7, 46, 3C, 01, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFileOperationW + 123 7CA7095F 11 Bytes [ A1, 48, F5, BC, 7C, 53, 56, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFileOperationW + 12F 7CA7096B 8 Bytes [ FC, 8B, 45, 0C, 57, 8B, D8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFileOperationW + 138 7CA70974 56 Bytes [ 40, 85, C0, BF, 00, 01, 00, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFileOperation + 4B 7CA70B6F 41 Bytes [ FF, 8D, 85, F4, FD, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFileOperation + 75 7CA70B99 67 Bytes [ 85, F4, FD, FF, FF, 50, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFileOperation + B9 7CA70BDD 56 Bytes [ FF, EB, 2B, 8B, 3D, AC, 1C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFileOperation + F2 7CA70C16 16 Bytes [ FF, 8B, 46, 40, 85, C0, 0F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFileOperation + 103 7CA70C27 36 Bytes [ FF, 00, 01, 00, 00, 75, 19, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_FillCache_RunDLL + 3D 7CA716A5 27 Bytes JMP 7CA71315 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_FillCache_RunDLL + 59 7CA716C1 88 Bytes [ 00, 50, 8D, 86, F4, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_FillCache_RunDLL + B2 7CA7171A 5 Bytes [ 50, 8D, 86, F4, 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_FillCache_RunDLL + B9 7CA71721 91 Bytes CALL 7CA6BA0F C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_FillCache_RunDLLW + 20 7CA7177D 38 Bytes [ B5, 04, F9, FF, FF, E8, AD, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_FillCache_RunDLLW + 47 7CA717A4 29 Bytes [ 83, F8, FF, 74, 11, 8D, 8D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_FillCache_RunDLLW + 65 7CA717C2 11 Bytes [ FF, 68, 04, 01, 00, 00, 50, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_FillCache_RunDLLW + 71 7CA717CE 7 Bytes [ 8D, 85, B4, FD, FF, FF, 50 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_FillCache_RunDLLW + 79 7CA717D6 108 Bytes [ 15, AC, 1C, 9C, 7C, 56, 8D, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHRunControlPanel + 11 7CA72336 5 Bytes [ 5D, C2, 1C, 00, 90 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHRunControlPanel + 1A 7CA7233F 40 Bytes [ 8B, FF, 55, 8B, EC, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_RunDLL + 28 7CA72368 99 Bytes [ 5D, C2, 1C, 00, 90, 90, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_RunDLLW + 33 7CA723CC 72 Bytes [ 75, 34, 0F, B7, C0, 50, 53, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_RunDLLAsUserW + 23 7CA72415 29 Bytes [ 90, 90, 90, 90, 8B, FF, 55, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_RunDLLAsUserW + 41 7CA72433 67 Bytes [ 0C, 53, 8B, 5D, 08, 89, 45, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_RunDLLAsUserW + 85 7CA72477 45 Bytes [ 85, DB, 74, 0D, 6A, 20, 8D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_RunDLLAsUserW + B3 7CA724A5 62 Bytes [ 9C, 7C, 8B, 45, B4, 8B, 4D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Control_RunDLLAsUserW + F2 7CA724E4 25 Bytes [ D7, 66, 85, C0, 66, 89, 06, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconEx + 7 7CA72A4D 25 Bytes CALL 7CA72A4F C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DuplicateIcon + 10 7CA72A67 32 Bytes [ FF, 7C, AE, 3B, 9D, F0, FD, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DuplicateIcon + 31 7CA72A88 6 Bytes [ FF, 83, 20, 00, EB, 4D ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DuplicateIcon + 38 7CA72A8F 85 Bytes [ B5, E0, FD, FF, FF, 85, F6, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DuplicateIcon + 8E 7CA72AE5 25 Bytes [ 59, F7, FF, C9, C2, 10, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DuplicateIcon + A8 7CA72AFF 24 Bytes [ 04, 56, 89, 75, FC, FF, 15, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!FreeIconList + C 7CA72B19 22 Bytes [ 89, 75, 08, FF, B6, 88, CC, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!FreeIconList + 23 7CA72B30 88 Bytes [ 86, 8C, CC, 9D, 7C, 85, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconResInfoW + 1B 7CA72B89 53 Bytes [ B6, 94, CC, 9D, 7C, 57, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconResInfoW + 51 7CA72BBF 28 Bytes [ 6A, 00, FF, 75, FC, FF, 15, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconResInfoW + 6E 7CA72BDC 40 Bytes [ A1, 48, F5, BC, 7C, 53, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconResInfoW + 97 7CA72C05 15 Bytes CALL 7C9ED058 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconResInfoW + A7 7CA72C15 38 Bytes [ 00, 68, 01, 26, 00, 00, 53, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconResInfoA + 11 7CA73088 24 Bytes [ F3, AB, 68, 08, 02, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconResInfoA + 2A 7CA730A1 6 Bytes [ FF, 50, 8D, 85, D4, F7 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconResInfoA + 32 7CA730A9 29 Bytes CALL 7CA728BC C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconResInfoA + 50 7CA730C7 49 Bytes [ FF, 50, 68, 19, 00, 02, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconExW + 17 7CA730FA 23 Bytes [ FF, 15, 30, 1C, 9C, 7C, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconExW + 2F 7CA73112 3 Bytes [ 4D, FC, 5F ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconExW + 33 7CA73116 6 Bytes [ C6, 5E, E8, D3, 52, F7 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconExW + 3A 7CA7311D 42 Bytes [ C9, C2, 04, 00, 90, 90, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconExW + 65 7CA73148 3 Bytes [ 85, F4, FD ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconExA + 20 7CA732CE 10 Bytes [ 75, 0C, FF, 75, 10, 53, 56, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconExA + 2D 7CA732DB 24 Bytes [ F8, 56, FF, 15, 34, 16, 9C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconExA + 48 7CA732F6 57 Bytes [ 00, 74, 16, FF, B5, EC, FD, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconExA + 82 7CA73330 5 Bytes [ 75, 08, E8, 1C, FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconExA + 89 7CA73337 121 Bytes [ 5D, C2, 08, 00, 90, 90, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconW + 10 7CA733B1 115 Bytes [ 68, 08, 02, 00, 00, 89, 45, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconA + 26 7CA73425 8 Bytes [ 53, 8B, 5D, 10, 56, 8B, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractIconA + 2F 7CA7342E 63 Bytes [ 8B, 7D, 0C, 89, 45, FC, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!InternalExtractIconListW + C 7CA7346F 10 Bytes [ 33, C0, 40, EB, 05, 83, 26, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!InternalExtractIconListW + 17 7CA7347A 36 Bytes [ 4D, FC, 5F, 5E, 5B, E8, 6C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!InternalExtractIconListW + 3C 7CA7349F 36 Bytes [ 33, C0, F3, A7, 74, 1E, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!InternalExtractIconListW + 61 7CA734C4 211 Bytes [ 75, 08, 8D, 46, 04, 50, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconA + 2B 7CA73598 14 Bytes [ 40, 04, 89, 48, 10, 8B, 4D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconA + 3A 7CA735A7 26 Bytes [ 48, 0C, 89, 03, 33, C0, EB, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconA + 55 7CA735C2 10 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconA + 60 7CA735CD 51 Bytes [ 6A, 10, 33, C0, 33, C9, 5E, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ExtractAssociatedIconA + 94 7CA73601 31 Bytes [ 55, 8B, EC, 83, EC, 34, 8B, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DoEnvironmentSubstA + 4 7CA736B6 53 Bytes [ D1, 0F, AF, D1, 03, D0, 0F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DoEnvironmentSubstA + 3A 7CA736EC 114 Bytes [ FF, 89, 45, FC, EB, 40, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DoEnvironmentSubstA + AD 7CA7375F 50 Bytes [ 8D, 45, CC, 50, FF, 15, 28, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DoEnvironmentSubstA + E0 7CA73792 174 Bytes CALL CCF7F7CA
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDiskFreeSpaceA + 99 7CA73841 38 Bytes [ 15, 14, 11, 9C, 7C, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDiskFreeSpaceA + C1 7CA73869 2 Bytes [ 48, 11 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDiskFreeSpaceA + C6 7CA7386E 37 Bytes [ 3D, 4C, 12, 9C, 7C, 50, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDiskFreeSpaceA + EC 7CA73894 43 Bytes [ D3, 8B, D8, 53, FF, 75, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDiskFreeSpaceA + 118 7CA738C0 37 Bytes [ 38, 8B, 45, 1C, FF, 30, FF, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHHelpShortcuts_RunDLLW + B 7CA739DD 36 Bytes [ 75, F4, 48, 50, FF, 75, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHObjectProperties + 20 7CA73A02 26 Bytes [ FF, 75, FC, FF, 75, F8, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHObjectProperties + 3B 7CA73A1D 13 Bytes [ 15, 40, 12, 9C, 7C, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHObjectProperties + 83 7CA73A65 25 Bytes [ 0C, FF, 15, 48, 1E, 9C, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHObjectProperties + 9D 7CA73A7F 10 Bytes [ 8B, 35, 54, 12, 9C, 7C, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHObjectProperties + AA 7CA73A8C 39 Bytes [ FF, D6, 8B, C7, 5F, 5E, C9, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellMessageBoxA + 2 7CA73E03 17 Bytes [ FF, 66, 89, 01, C7, 85, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellMessageBoxA + 15 7CA73E16 24 Bytes [ 66, 39, 5D, 10, 0F, 85, 1C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellMessageBoxA + 2E 7CA73E2F 37 Bytes [ FF, D7, 83, F8, 04, 0F, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellMessageBoxA + 54 7CA73E55 56 Bytes [ FF, 6B, C0, 0E, 83, C0, 06, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellMessageBoxA + 8E 7CA73E8F 1 Byte [ 66 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFlushClipboard + D 7CA73EDC 21 Bytes [ FF, FF, 15, F0, 14, 9C, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFlushClipboard + 23 7CA73EF2 10 Bytes [ 8B, BD, D8, FD, FF, FF, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFlushClipboard + 2E 7CA73EFD 11 Bytes [ FF, 8B, 95, D8, FD, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFlushClipboard + 3A 7CA73F09 36 Bytes [ FF, 0E, 8D, B5, E4, FD, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFlushClipboard + 5F 7CA73F2E 13 Bytes [ 89, 85, DC, FD, FF, FF, 72, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathIsSlowA + 38 7CA74BB9 7 Bytes [ 75, 08, 89, 5D, D8, FF, D6 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathIsSlowA + 40 7CA74BC1 42 Bytes [ 75, 08, FF, 15, 54, 1E, 9C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathIsSlowA + 6B 7CA74BEC 118 Bytes [ 75, 08, FF, 15, B8, 1D, 9C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathIsSlowA + E2 7CA74C63 6 Bytes [ 90, 90, 90, 90, 90, 8B ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathIsSlowA + E9 7CA74C6A 58 Bytes [ 55, 8B, EC, FF, 75, 0C, 6A, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathGetShortPath + 2 7CA74F80 33 Bytes [ 8B, 45, 08, 8B, 00, 3B, C3, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathGetShortPath + 24 7CA74FA2 38 Bytes [ 75, 10, 8B, 7D, 0C, 68, 01, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathGetShortPath + 4B 7CA74FC9 55 Bytes [ DE, 1B, F6, 46, 5F, 8B, C6, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathGetShortPath + 83 7CA75001 31 Bytes [ 85, C0, 74, 16, FF, 75, 18, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathGetShortPath + A3 7CA75021 56 Bytes [ F6, 7D, 07, 57, FF, 15, 20, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsLFNDriveA + 24 7CA7511E 28 Bytes [ 8D, 45, EC, 50, FF, 15, 38, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!IsLFNDriveA + 41 7CA7513B 18 Bytes [ 55, 8B, EC, 81, EC, 14, 04, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathQualify + B 7CA7514F 40 Bytes [ 10, 89, 45, FC, 8B, 45, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathQualify + 34 7CA75178 44 Bytes CALL 7C9F3BB4 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathQualify + 61 7CA751A5 50 Bytes [ FF, A1, A4, 5D, BD, 7C, 3B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathQualify + 95 7CA751D9 10 Bytes [ 04, 00, 00, 00, 89, 9D, 54, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathQualify + A0 7CA751E4 22 Bytes [ D7, 85, C0, 75, 14, 83, BD, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathMakeUniqueName + 12 7CA7553E 19 Bytes [ 08, 68, 98, 45, A7, 7C, 68, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathMakeUniqueName + 26 7CA75552 7 Bytes [ FF, 85, C0, 75, 29, 68, 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathMakeUniqueName + 2E 7CA7555A 29 Bytes CALL 7C9ED057 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathMakeUniqueName + 4C 7CA75578 2 Bytes [ E2, F9 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PathMakeUniqueName + 4F 7CA7557B 42 Bytes [ FF, 85, C0, 75, 04, 33, C0, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PickIconDlg + 19 7CA763E0 29 Bytes [ 7D, 08, 89, 95, E0, FB, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PickIconDlg + 37 7CA763FE 7 Bytes [ 45, 0C, 8B, BD, D4, FB, FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PickIconDlg + 3F 7CA76406 4 Bytes [ 8B, 9D, D0, FB ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PickIconDlg + 44 7CA7640B 10 Bytes [ FF, 03, C0, 89, 85, C8, FB, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PickIconDlg + 4F 7CA76416 17 Bytes [ B5, DC, FB, FF, FF, 2B, C7, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHInvokePrinterCommandA + 5B 7CA77241 10 Bytes [ 15, 98, 1D, 9C, 7C, E9, E1, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHInvokePrinterCommandA + 66 7CA7724C 58 Bytes [ 35, 50, 1D, 9C, 7C, 6A, 0B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHInvokePrinterCommandA + A1 7CA77287 18 Bytes [ 15, 30, 11, 9C, 7C, 33, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHInvokePrinterCommandA + B4 7CA7729A 8 Bytes [ 76, 18, FF, 15, 2C, 11, 9C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHInvokePrinterCommandA + BD 7CA772A3 247 Bytes CALL 7CA1BEDE C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PrintersGetCommand_RunDLL + 28 7CA7739B 168 Bytes [ 56, 89, 07, FF, 15, 34, 16, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PrintersGetCommand_RunDLLW + 4C 7CA77444 2 Bytes [ 75, 10 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PrintersGetCommand_RunDLLW + 4F 7CA77447 3 Bytes [ 45, F4, 50 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PrintersGetCommand_RunDLLW + 53 7CA7744B 8 Bytes [ 75, F8, FF, 75, FC, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PrintersGetCommand_RunDLLW + 5C 7CA77454 8 Bytes [ 75, 08, FF, 75, 18, FF, 55, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PrintersGetCommand_RunDLLW + 66 7CA7745E 64 Bytes [ 75, 2E, FF, D3, 83, F8, 7A, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHAddFromPropSheetExtArray + 2 7CA77818 109 Bytes [ 3C, 00, 00, 00, C7, 85, 54, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHReplaceFromPropSheetExtArray + 18 7CA77886 74 Bytes [ F8, FF, 15, 00, 10, 9C, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHReplaceFromPropSheetExtArray + 63 7CA778D1 78 Bytes [ 80, 00, 00, 56, 89, 85, E4, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHReplaceFromPropSheetExtArray + B2 7CA77920 7 Bytes [ C7, 74, 38, 66, 39, 38, 74 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHReplaceFromPropSheetExtArray + BA 7CA77928 79 Bytes CALL 7CA349D3 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHReplaceFromPropSheetExtArray + 10B 7CA77979 5 Bytes [ 50, E8, D0, 73, 04 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreatePropSheetExtArray + 20 7CA77A66 95 Bytes [ D6, 8D, 44, 00, 02, 01, 45, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreatePropSheetExtArray + 80 7CA77AC6 14 Bytes [ C6, 5B, 5F, 5E, C9, C2, 04, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreatePropSheetExtArray + 8F 7CA77AD5 104 Bytes [ 55, 8B, EC, 6A, 00, 68, 4F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreatePropSheetExtArray + F8 7CA77B3E 70 Bytes [ 55, 8B, EC, 81, EC, 3C, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreatePropSheetExtArray + 13F 7CA77B85 21 Bytes [ FF, FF, D7, 8D, 85, EC, FB, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragQueryPoint + 1E 7CA77BD9 69 Bytes [ 34, 16, 9C, 7C, EB, 0C, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragFinish + 7 7CA77C1F 56 Bytes [ 50, 8D, 85, EC, FB, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragQueryFile + 2F 7CA77C58 43 Bytes [ 50, 56, 8D, 85, DC, F7, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragQueryFile + 5B 7CA77C84 17 Bytes [ B5, C8, F7, FF, FF, E8, 14, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragQueryFile + 6D 7CA77C96 18 Bytes [ 8D, 85, D4, F7, FF, FF, 50, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragQueryFile + 80 7CA77CA9 52 Bytes [ 8B, 85, D4, F7, FF, FF, 3B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DragQueryFile + B5 7CA77CDE 9 Bytes [ 74, 31, FF, 75, 10, 8D, 85, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RestartDialogEx + 2D 7CA783C5 17 Bytes [ 7E, 11, FF, 75, 14, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RestartDialogEx + 3F 7CA783D7 44 Bytes [ FF, FF, 75, FC, FF, 15, 34, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RestartDialogEx + 6D 7CA78405 36 Bytes [ 90, 90, 90, 8B, FF, 55, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RestartDialogEx + 93 7CA7842B 11 Bytes [ 59, 89, 85, A4, FB, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RestartDialogEx + 9F 7CA78437 28 Bytes CALL 06A78437
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RestartDialog + 7 7CA78C8C 13 Bytes [ 75, 11, 53, C7, 05, 58, 59, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RestartDialog + 15 7CA78C9A 29 Bytes [ 15, 48, 14, 9C, 7C, 57, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RestartDialog + 33 7CA78CB8 21 Bytes [ 15, 08, 16, 9C, 7C, C3, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RestartDialog + 49 7CA78CCE 8 Bytes [ A1, 48, F5, BC, 7C, 89, 45, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RestartDialog + 52 7CA78CD7 22 Bytes [ 45, 08, 89, 85, 34, FD, FF, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHOpenPropSheetW + A 7CA7964B 123 Bytes [ FF, 15, 78, 1D, 9C, 7C, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHOpenPropSheetW + 86 7CA796C7 18 Bytes [ 6A, 01, 68, 10, F0, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHOpenPropSheetW + 9B 7CA796DC 50 Bytes [ 8B, 75, 10, 83, E6, F0, 81, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHOpenPropSheetW + CE 7CA7970F 59 Bytes [ 35, A4, F5, BC, 7C, 89, 35, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHOpenPropSheetW + 10A 7CA7974B 74 Bytes [ 14, 56, FF, 75, 08, C7, 05, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CheckEscapesW + 85 7CA7B32D 9 Bytes [ 75, 10, 74, 11, 56, 68, 58, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CheckEscapesW + 8F 7CA7B337 8 Bytes [ 8D, 8D, 44, F9, FF, FF, 51, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CheckEscapesW + 98 7CA7B340 66 Bytes [ 50, 10, 53, FF, 15, 08, 16, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CheckEscapesA + 32 7CA7B383 30 Bytes [ FF, 15, 40, 1C, 9C, 7C, 83, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CheckEscapesA + 51 7CA7B3A2 57 Bytes [ 55, 8B, EC, 51, 51, E8, 24, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CheckEscapesA + 8B 7CA7B3DC 100 Bytes [ 15, 04, 16, 9C, 7C, 8D, 45, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CheckEscapesA + F0 7CA7B441 92 Bytes [ 8D, B7, BC, 00, 00, 00, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrCpyNA + 17 7CA7B49E 89 Bytes [ D6, 85, C0, 5E, 74, 0F, 50, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrNCmpW + 36 7CA7B4F9 27 Bytes [ F7, D8, 1B, C0, 23, 45, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrNCmpW + 52 7CA7B515 53 Bytes [ 65, FC, 00, 56, 8B, 75, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrNCmpA + 2 7CA7B54B 105 Bytes CALL 7CB9E284 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrNCmpA + 6C 7CA7B5B5 4 Bytes [ 35, A4, F5, BC ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrNCmpA + 71 7CA7B5BA 163 Bytes [ FF, 15, 54, 1D, 9C, 7C, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrNCmpIA + 30 7CA7B65E 26 Bytes [ 85, C0, 0F, 85, 6E, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrNCmpIA + 4B 7CA7B679 26 Bytes [ FF, 36, FF, 15, 34, 16, 9C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrNCmpIA + 66 7CA7B694 145 Bytes [ 55, 8B, EC, 81, EC, CC, 05, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrNCpyA + 35 7CA7B726 30 Bytes [ 50, 68, A4, 52, 9C, 7C, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrRStrW + 4 7CA7B745 54 Bytes [ 85, 4C, FA, FF, FF, 0F, B7, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrRStrW + 3B 7CA7B77C 360 Bytes [ FF, 50, 68, 53, 33, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheGetPathOffsetW + 75 7CA7B8E5 6 Bytes [ 00, 8D, 85, 50, FA, FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheGetDirW + 2 7CA7B8EC 35 Bytes [ 50, 53, 68, 80, 01, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheGetDirW + 26 7CA7B910 15 Bytes [ 83, A5, 4C, FA, FF, FF, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheGetDirW + 36 7CA7B920 49 Bytes [ 00, 0F, 8E, 9A, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheGetDirW + 68 7CA7B952 5 Bytes [ 00, E8, 1D, 32, F9 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheGetDirW + 6E 7CA7B958 30 Bytes [ 8B, 9D, 34, FA, FF, FF, 8B, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheGetDirA + 29 7CA7B9B5 150 Bytes [ 3B, 86, B8, 00, 00, 00, 0F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirW + 56 7CA7BA4C 84 Bytes [ 40, 5E, 5D, C2, 04, 00, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirW + AB 7CA7BAA1 5 Bytes [ 56, E8, C2, F9, FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirW + B1 7CA7BAA7 34 Bytes [ EB, 53, 57, 8B, 7D, 14, 57, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirW + D4 7CA7BACA 19 Bytes [ 15, 70, 1E, 9C, 7C, EB, 2B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirW + E8 7CA7BADE 11 Bytes [ 70, 0C, EB, E7, 8B, 4D, 14, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirA + A 7CA7BBE4 34 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirA + 2D 7CA7BC07 11 Bytes [ 00, 00, 04, 89, 45, FC, E8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirA + 39 7CA7BC13 45 Bytes [ C0, 0F, 85, CF, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheGetCurDrive + E 7CA7BC41 82 Bytes [ BC, FE, FF, FF, 89, 85, C4, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheSetCurDrive + 3B 7CA7BC94 12 Bytes [ 15, B0, 1C, 9C, 7C, EB, 06, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheSetCurDrive + 48 7CA7BCA1 74 Bytes [ 80, 8D, B9, FE, FF, FF, 40, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheFullPathA + 42 7CA7BCEC 2 Bytes [ 07, 80 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheFullPathA + 45 7CA7BCEF 59 Bytes [ 4D, FC, 5F, 5E, 5B, E8, F7, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheFullPathA + 81 7CA7BD2B 43 Bytes [ C3, 90, 90, 90, 90, 90, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheFullPathA + AD 7CA7BD57 81 Bytes [ 00, 00, 48, C7, 85, A0, FD, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheFullPathW + 4D 7CA7BDA9 38 Bytes [ 35, A4, F5, BC, 7C, FF, 15, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheFullPathW + 74 7CA7BDD0 32 Bytes [ 8B, D8, 85, DB, 74, 15, 8D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheFullPathW + 95 7CA7BDF1 10 Bytes CALL 7C9EBAEC C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheFullPathW + A0 7CA7BDFC 114 Bytes [ 8B, 4D, FC, 5E, 5B, E8, EA, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheGetDirExW + 5B 7CA7BE6F 6 Bytes [ 90, 90, 90, 90, 90, 8B ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheGetDirExW + 62 7CA7BE76 48 Bytes [ 55, 8B, EC, 81, EC, 1C, 04, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheGetDirExW + 93 7CA7BEA7 4 Bytes [ C7, 85, E8, FB ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheGetDirExW + 98 7CA7BEAC 23 Bytes [ FF, 02, 00, 00, 00, 50, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheGetDirExW + B0 7CA7BEC4 9 Bytes [ 68, 08, 02, 00, 00, 50, E8, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirExW + 33 7CA7BF44 41 Bytes [ 8B, 4D, FC, 8B, 85, E8, FB, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirExW + 5D 7CA7BF6E 21 Bytes [ 4D, 14, 53, 8B, 5D, 08, 57, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirExW + 73 7CA7BF84 52 Bytes [ FF, 89, 85, 40, F7, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirExW + A8 7CA7BFB9 7 Bytes [ 00, 00, 8D, 85, 38, F7, FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirExW + B0 7CA7BFC1 55 Bytes [ 50, 8D, 85, 44, F7, FF, FF, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirExA + 1F 7CA7C1B4 196 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirExA + E5 7CA7C27A 17 Bytes [ 0C, 8B, 45, 08, 83, C0, 10, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirExA + FA 7CA7C28F 25 Bytes [ 90, 8B, FF, 55, 8B, EC, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirExA + 114 7CA7C2A9 36 Bytes [ FF, 55, 8B, EC, 56, 8B, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheChangeDirExA + 139 7CA7C2CE 59 Bytes CALL BDB436F6
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RegenerateUserEnvironment + 1B 7CA7D301 3 Bytes [ 85, F0, EF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RegenerateUserEnvironment + 20 7CA7D306 5 Bytes [ 50, 8D, 85, E8, EF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RegenerateUserEnvironment + 26 7CA7D30C 9 Bytes [ FF, 50, FF, 36, 66, 89, BD, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RegenerateUserEnvironment + 30 7CA7D316 10 Bytes [ FF, 66, C7, 85, F2, EF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RegenerateUserEnvironment + 3B 7CA7D321 5 Bytes [ 15, 10, 17, 9C, 7C ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_CloseProperties + 11 7CA82AE5 1 Byte [ C0 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_CloseProperties + 13 7CA82AE7 77 Bytes [ 07, 66, 83, 4E, 02, FF, EB, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_CloseProperties + 61 7CA82B35 50 Bytes [ 50, 6A, 40, 8D, 85, 64, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_CloseProperties + 94 7CA82B68 71 Bytes [ 85, 54, FF, FF, FF, FF, 48, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_CloseProperties + DC 7CA82BB0 100 Bytes [ A8, FD, FF, FF, 8B, 45, 18, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_GetProperties + 18 7CA83208 11 Bytes CALL 7C9E83ED C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_GetProperties + 24 7CA83214 22 Bytes [ 90, 90, 90, 90, 90, E8, BB, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_GetProperties + 3B 7CA8322B 15 Bytes [ FF, 55, 8B, EC, 68, 00, 20, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_GetProperties + 4B 7CA8323B 71 Bytes CALL 7CA2BFF1 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_GetProperties + 93 7CA83283 78 Bytes [ 00, 74, 04, 33, C0, EB, 2C, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_SetProperties + 43 7CA83AB2 46 Bytes [ 00, 75, 07, A1, 44, B1, BD, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_SetProperties + 72 7CA83AE1 11 Bytes [ FF, 8B, F0, 85, F6, 75, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_SetProperties + 7E 7CA83AED 10 Bytes [ 00, 00, 00, 8B, 4D, 0C, 83, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_SetProperties + 8C 7CA83AFB 62 Bytes [ 40, 8B, 46, 10, A8, 01, 74, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_SetProperties + CB 7CA83B3A 22 Bytes [ 8B, 46, 40, 83, F8, FF, 74, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_OpenProperties + FB 7CA84068 31 Bytes [ DD, 9D, 7C, FF, 15, 2C, 14, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_OpenProperties + 11B 7CA84088 38 Bytes [ 15, 14, 1C, 9C, 7C, 85, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_OpenProperties + 143 7CA840B0 34 Bytes [ C9, C3, 90, 90, 90, 90, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_OpenProperties + 166 7CA840D3 11 Bytes [ 51, 8D, 8D, EC, FB, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!PifMgr_OpenProperties + 172 7CA840DF 18 Bytes [ 00, 53, 33, FF, 89, 45, FC, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheRemoveQuotesW + 6 7CA8BF81 81 Bytes [ 4D, B8, 8B, 40, 04, C1, E9, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheRemoveQuotesA + 1C 7CA8BFD3 9 Bytes [ 75, B0, 89, 75, B4, FF, D3, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheRemoveQuotesA + 26 7CA8BFDD 84 Bytes [ 21, 8B, 45, AC, 8B, 48, 04, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheRemoveQuotesA + 7B 7CA8C032 96 Bytes [ 89, 48, 22, 8D, 45, B4, 50, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheShortenPathW + 25 7CA8C093 35 Bytes [ 75, B0, C7, 45, B4, 40, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheShortenPathW + 49 7CA8C0B7 27 Bytes [ 83, 60, 02, 00, 6A, 04, 5E, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheShortenPathW + 65 7CA8C0D3 7 Bytes [ 75, B4, FF, D3, 85, C0, 75 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheShortenPathW + 6D 7CA8C0DB 28 Bytes [ 8B, 45, AC, 8B, 40, 04, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheShortenPathW + 8A 7CA8C0F8 143 Bytes [ B0, 89, 75, B4, FF, D3, 85, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheShortenPathA + 3B 7CA8C25C 61 Bytes [ 75, B4, FF, D6, 83, 65, AC, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheShortenPathA + 79 7CA8C29A 135 Bytes [ 75, B4, FF, D6, 01, 5D, A8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheShortenPathA + 101 7CA8C322 7 Bytes [ D6, 8B, 47, 04, 0F, B7, 48 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheShortenPathA + 109 7CA8C32A 22 Bytes [ 0F, B7, 40, 10, 53, C1, E1, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheShortenPathA + 120 7CA8C341 2 Bytes [ 75, B4 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheConvertPathW + 16 7CA8C5EC 17 Bytes [ 00, 80, 80, 80, 00, 8B, 42, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheConvertPathW + 28 7CA8C5FE 128 Bytes [ 8B, 42, 04, C7, 80, B4, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheConvertPathW + A9 7CA8C67F 9 Bytes [ EC, 20, FF, 75, 0C, 8D, 45, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheConvertPathW + B4 7CA8C68A 2 Bytes [ 14, 17 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SheConvertPathW + B9 7CA8C68F 61 Bytes [ 45, 08, 83, 65, F0, 00, 83, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!OpenAs_RunDLL 7CA8E029 3 Bytes [ 90, 90, 90 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!OpenAs_RunDLL + 4 7CA8E02D 28 Bytes [ FF, 55, 8B, EC, 56, 8B, F1, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!OpenAs_RunDLL + 21 7CA8E04A 9 Bytes [ 74, 6C, 83, F8, FC, 74, 0E, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!OpenAs_RunDLL + 2B 7CA8E054 20 Bytes [ 74, 37, 83, F8, FE, 0F, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!OpenAs_RunDLL + 40 7CA8E069 28 Bytes [ 15, 9C, 1A, 9C, 7C, 85, C0, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!OpenAs_RunDLLW + 2 7CA8E0E5 70 Bytes [ 15, E0, 1D, 9C, 7C, EB, 0E, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!OpenAs_RunDLLW + 49 7CA8E12C 20 Bytes [ 76, 10, FF, 15, 68, 1D, 9C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!OpenAs_RunDLLW + 5E 7CA8E141 93 Bytes [ BB, 09, 35, 00, 00, 74, 1C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!OpenAs_RunDLLW + BC 7CA8E19F 1 Byte [ 55 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!OpenAs_RunDLLW + BE 7CA8E1A1 46 Bytes [ EC, 83, EC, 30, 53, 56, 8B, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Activate_RunDLL + 1B 7CA8F0AF 29 Bytes [ FF, 07, 00, 00, 00, E8, 21, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Activate_RunDLL + 39 7CA8F0CD 39 Bytes [ 15, 28, F2, BB, 7C, 8B, 4D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Activate_RunDLL + 61 7CA8F0F5 6 Bytes [ 5D, 08, 56, 8B, 75, 10 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Activate_RunDLL + 68 7CA8F0FC 2 Bytes [ 89, 45 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Activate_RunDLL + 6B 7CA8F0FF 10 Bytes CALL 7C9F07DE C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHIsFileAvailableOffline + 4E 7CA9217E 75 Bytes [ FF, 8B, 08, 50, FF, 51, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHIsFileAvailableOffline + 9A 7CA921CA 32 Bytes CALL 7C9EB8E6 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHIsFileAvailableOffline + BB 7CA921EB 26 Bytes [ FC, FF, FF, 6A, 00, 56, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHIsFileAvailableOffline + D6 7CA92206 16 Bytes CALL 7CA91E32 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHIsFileAvailableOffline + E7 7CA92217 147 Bytes [ 15, 34, 16, 9C, 7C, 33, C0, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEnumerateUnreadMailAccountsW + 2F 7CA92549 83 Bytes CALL 7CA92486 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEnumerateUnreadMailAccountsW + 83 7CA9259D 62 Bytes [ 00, 00, 00, B6, 63, A9, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEnumerateUnreadMailAccountsW + C3 7CA925DD 6 Bytes [ 75, 08, E8, A4, 06, F8 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEnumerateUnreadMailAccountsW + CA 7CA925E4 49 Bytes [ 8B, F0, 8B, 45, 08, 8B, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEnumerateUnreadMailAccountsW + FC 7CA92616 41 Bytes [ 75, 10, FF, 75, 0C, FF, 75, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetAttributesFromDataObject + C8 7CA92A59 63 Bytes [ 74, 0C, FF, B5, B0, FB, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetAttributesFromDataObject + 109 7CA92A9A 24 Bytes [ 18, FF, 75, 14, FF, 75, 10, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetAttributesFromDataObject + 122 7CA92AB3 23 Bytes [ 74, 07, 6A, 00, FF, 75, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetAttributesFromDataObject + 13A 7CA92ACB 52 Bytes [ 55, 8B, EC, 56, FF, 75, 1C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetAttributesFromDataObject + 16F 7CA92B00 61 Bytes [ 8B, D8, 0F, B7, 05, C0, F9, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPathPrepareForWriteA + B4 7CA94AA0 17 Bytes CALL 7C9F9E2C C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPathPrepareForWriteA + C8 7CA94AB4 40 Bytes [ 05, BF, 00, 00, 40, 00, 56, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPathPrepareForWriteA + F1 7CA94ADD 11 Bytes [ 3B, C6, 8B, 5D, 10, 89, 03, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPathPrepareForWriteA + FD 7CA94AE9 89 Bytes [ 00, 6A, 13, 56, 56, 56, 56, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPathPrepareForWriteA + 157 7CA94B43 49 Bytes [ FF, D6, 85, C0, 74, 4F, 68, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetUnreadMailCountW + 2 7CA94D0A 56 Bytes CALL 7CA2D8CA C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetUnreadMailCountW + 3B 7CA94D43 4 Bytes [ FF, BE, 00, 04 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetUnreadMailCountW + 41 7CA94D49 2 Bytes [ 0F, 84 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetUnreadMailCountW + 44 7CA94D4C 82 Bytes [ 01, 00, 00, 85, C0, 75, 03, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetUnreadMailCountW + 97 7CA94D9F 6 Bytes [ 45, BC, 50, 6A, 12, 56 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHSetUnreadMailCountW + 2C 7CA94F48 32 Bytes [ 8B, 0F, 80, E1, 01, F6, D9, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHSetUnreadMailCountW + 4D 7CA94F69 6 Bytes [ 68, 74, 96, 9C, 7C, 50 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHSetUnreadMailCountW + 54 7CA94F70 53 Bytes [ D6, 8B, 07, 83, E0, 10, C1, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHSetUnreadMailCountW + 8B 7CA94FA7 93 Bytes [ FF, 75, FC, FF, D6, 8B, 07, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHSetUnreadMailCountW + E9 7CA95005 99 Bytes [ 75, FC, FF, D6, 8B, 07, 25, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetShellStyleHInstance + 1 7CA953A5 49 Bytes [ 85, F0, FD, FF, FF, 5F, 5E, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetShellStyleHInstance + 33 7CA953D7 42 Bytes [ 8B, 45, 14, 53, 8B, 5D, 10, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetShellStyleHInstance + 5E 7CA95402 2 Bytes [ FF, 15 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetShellStyleHInstance + 61 7CA95405 15 Bytes [ 1C, 9C, 7C, 33, FF, 85, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetShellStyleHInstance + 71 7CA95415 21 Bytes [ 85, EC, FD, FF, FF, 89, BD, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFormatDrive + 27 7CA982DC 2 Bytes [ 76, 30 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFormatDrive + 2A 7CA982DF 24 Bytes [ D7, 50, FF, D3, 6A, 01, 6A, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFormatDrive + 43 7CA982F8 23 Bytes [ 00, FF, 76, 30, FF, D7, 50, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFormatDrive + 5B 7CA98310 20 Bytes [ 5E, 5B, 5D, C2, 04, 00, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFormatDrive + 70 7CA98325 3 Bytes [ 00, A1, 48 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!AppCompat_RunDLLW + 2 7CA98A01 7 Bytes [ FF, 50, 53, 68, 43, 01, 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!AppCompat_RunDLLW + A 7CA98A09 35 Bytes [ FF, B5, DC, FD, FF, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!AppCompat_RunDLLW + 2F 7CA98A2E 1 Byte [ FC ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!AppCompat_RunDLLW + 34 7CA98A33 11 Bytes [ 7C, 13, FF, B5, D4, FD, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!AppCompat_RunDLLW + 42 7CA98A41 7 Bytes CALL 7CA919D7 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CDefFolderMenu_Create2 + 37 7CA9A228 23 Bytes [ 55, 8B, EC, 51, 51, 53, 56, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CDefFolderMenu_Create2 + 4F 7CA9A240 5 Bytes [ 1D, 94, 1D, 9C, 7C ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CDefFolderMenu_Create2 + 55 7CA9A246 86 Bytes [ FF, D3, 8B, CE, 89, 45, F8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CDefFolderMenu_Create2 + AC 7CA9A29D 79 Bytes CALL 7CA92AC7 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CDefFolderMenu_Create2 + FC 7CA9A2ED 33 Bytes [ F0, 85, F6, 7C, 14, 8B, 45, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_AutoScroll + 17 7CAA54DD 29 Bytes [ 85, C0, 74, 14, 81, 78, 04, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_AutoScroll + 35 7CAA54FB 6 Bytes [ 90, 90, 90, 90, 90, 8B ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_AutoScroll + 3C 7CAA5502 30 Bytes [ 55, 8B, EC, 53, 56, 8B, 35, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_AutoScroll + 5B 7CAA5521 142 Bytes [ 00, 57, FF, D6, 53, 68, 2E, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_AutoScroll + EA 7CAA55B0 66 Bytes [ 90, 90, 90, 90, 8B, FF, 55, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_DragEnterEx + 3 7CAAE9AB 122 Bytes [ F8, D1, F8, 03, D1, 3B, D3, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_DragMove + 25 7CAAEA26 68 Bytes [ 03, 57, 57, 57, 57, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_SetDragImage + 2A 7CAAEA6B 52 Bytes [ 75, F8, FF, 75, 0C, FF, D3, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_SetDragImage + 5F 7CAAEAA0 24 Bytes CALL 7CA760A4 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_SetDragImage + 78 7CAAEAB9 11 Bytes [ 75, F4, FF, 15, 58, 12, 9C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_SetDragImage + 84 7CAAEAC5 64 Bytes [ 15, 54, 12, 9C, 7C, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_DragLeave + 2A 7CAAEB06 21 Bytes [ 55, 8B, EC, 56, 57, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_DragLeave + 40 7CAAEB1C 13 Bytes CALL 7CAAE92A C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DAD_DragLeave + 4E 7CAAEB2A 146 Bytes [ FF, 75, 10, FF, 76, 50, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHDoDragDrop + 80 7CAAEBBD 77 Bytes [ EB, 4B, 39, 44, BB, 58, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHDoDragDrop + CE 7CAAEC0B 20 Bytes [ 44, BB, 58, 5F, 5B, 5D, C2, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHDoDragDrop + E3 7CAAEC20 85 Bytes [ 14, 83, 65, EC, 00, 56, 57, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHDoDragDrop + 139 7CAAEC76 53 Bytes [ D6, 8B, C7, 5F, 5E, C9, C2, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHDoDragDrop + 16F 7CAAECAC 10 Bytes [ 89, 5D, FC, 75, 6A, 57, E8, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllInstall + 46 7CAB1B72 48 Bytes [ 50, FF, D6, 83, C4, 10, 8D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllInstall + 77 7CAB1BA3 13 Bytes [ 15, 10, 10, 9C, 7C, 8B, F8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllInstall + 86 7CAB1BB2 47 Bytes [ FF, FF, B5, B8, FE, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllInstall + B6 7CAB1BE2 27 Bytes [ 90, 90, 40, 00, 78, 00, 70, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!DllInstall + D2 7CAB1BFE 97 Bytes [ 2C, 00, 2D, 00, 25, 00, 64, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHDefExtractIconA + 1D 7CAB4BF3 27 Bytes [ 00, 50, 8D, 46, 38, 50, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHDefExtractIconA + 39 7CAB4C0F 28 Bytes [ 85, C0, 74, 07, 8B, CF, E8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHDefExtractIconA + 56 7CAB4C2C 43 Bytes [ 5F, 83, 7D, 0C, 05, 75, 0B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHDefExtractIconA + 82 7CAB4C58 18 Bytes CALL 7C9EB04B C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHDefExtractIconA + 95 7CAB4C6B 118 Bytes [ 75, 1A, FF, 75, 14, C7, 46, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHValidateUNC + 3C 7CAB51DC 6 Bytes [ FF, 74, 0D, 81, F9, 38 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHValidateUNC + 43 7CAB51E3 1 Byte [ FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHValidateUNC + 45 7CAB51E5 12 Bytes JMP 7CAB52E3 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHValidateUNC + 52 7CAB51F2 21 Bytes [ 85, C0, 0F, 85, EB, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHValidateUNC + 69 7CAB5209 63 Bytes CALL 7CAB3974 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SignalFileOpen + C 7CAB595C 30 Bytes [ 55, 8B, EC, 81, EC, AC, 03, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SignalFileOpen + 2B 7CAB597B 74 Bytes [ 15, 5C, 1C, 9C, 7C, 8B, F0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SignalFileOpen + 76 7CAB59C6 3 Bytes [ 50, FC, 9D ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SignalFileOpen + 7A 7CAB59CA 37 Bytes [ 8D, 85, 5C, FC, FF, FF, 50, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SignalFileOpen + A0 7CAB59F0 11 Bytes [ 10, 9C, 7C, 89, 9D, 58, FC, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RealShellExecuteExW + 75 7CAB5B56 10 Bytes CALL 7C9F3BB4 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RealShellExecuteExW + 80 7CAB5B61 15 Bytes [ C0, 7C, 4F, 8D, 85, 54, FC, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RealShellExecuteExW + 90 7CAB5B71 11 Bytes [ 50, 6A, 00, 6A, 02, 6A, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RealShellExecuteExW + 9C 7CAB5B7D 23 Bytes [ FF, 50, 53, FF, 15, 70, 1B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RealShellExecuteA + B 7CAB5B95 11 Bytes [ 50, FF, 15, 28, 1C, 9C, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RealShellExecuteA + 17 7CAB5BA1 17 Bytes [ B6, 4C, FB, 9D, 7C, 8D, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RealShellExecuteA + 29 7CAB5BB3 11 Bytes [ 83, C6, 08, 83, FE, 50, 0F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!RealShellExecuteW + 2 7CAB5BBF 145 Bytes CALL 7CA03717 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteW + 61 7CAB5C51 115 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteW + D5 7CAB5CC5 205 Bytes [ 89, 45, 10, 75, 61, 6A, 20, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteW + 1A3 7CAB5D93 28 Bytes [ 75, 0C, FF, 15, 3C, 1C, 9C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteW + 1C0 7CAB5DB0 26 Bytes [ A1, 48, F5, BC, 7C, 56, 57, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExecuteW + 1DB 7CAB5DCB 18 Bytes CALL 7CA04965 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!GetFileNameFromBrowse + 18 7CAB72BB 5 Bytes [ 89, 9D, 0C, F1, FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!GetFileNameFromBrowse + 1E 7CAB72C1 5 Bytes [ 89, B5, D8, F0, FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!GetFileNameFromBrowse + 24 7CAB72C7 86 Bytes [ 89, 9D, DC, F0, FF, FF, 89, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!GetFileNameFromBrowse + 7C 7CAB731F 26 Bytes [ 8B, 08, 50, FF, 51, 0C, 68, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!GetFileNameFromBrowse + 97 7CAB733A 22 Bytes [ 5A, 17, 00, 00, 50, FF, 35, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILAppendID + 12 7CAB7693 35 Bytes [ FF, FF, 15, 40, 19, 9C, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILAppendID + 37 7CAB76B8 100 Bytes [ 0F, 84, 78, 04, 00, 00, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILAppendID + 9C 7CAB771D 10 Bytes CALL 7CAB6E74 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILAppendID + A7 7CAB7728 91 Bytes [ FF, 50, 8D, 85, EC, FB, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILAppendID + 103 7CAB7784 4 Bytes [ 15, 54, 1D, 9C ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCreateFromPathA + 2 7CAB78E2 29 Bytes [ FF, C7, 04, 07, 80, 75, 5F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCreateFromPathA + 20 7CAB7900 3 Bytes [ B5, 58, F1 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCreateFromPathA + 24 7CAB7904 24 Bytes [ FF, 01, 85, 4C, F1, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCreateFromPathA + 3D 7CAB791D 12 Bytes [ 8B, 01, FF, B5, 4C, F1, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ILCreateFromPathA + 4A 7CAB792A 55 Bytes [ 85, 44, F1, FF, FF, 8B, 08, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathAndSubDirA + 6B 7CAB9A8F 26 Bytes [ 8B, 45, E4, 2B, 45, EC, 33, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathAndSubDirA + 86 7CAB9AAA 78 Bytes [ 08, 8B, 45, D8, 33, D2, 39, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathAndSubDirA + D5 7CAB9AF9 4 Bytes [ 00, FF, 76, 18 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathAndSubDirA + DA 7CAB9AFE 60 Bytes [ 15, 34, 1E, 9C, 7C, 85, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetFolderPathAndSubDirA + 117 7CAB9B3B 27 Bytes [ D3, 8B, 3D, A4, 1D, 9C, 7C, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHHandleUpdateImage + 2 7CABAD48 27 Bytes CALL 7CABAD48 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHHandleUpdateImage + 1E 7CABAD64 2 Bytes [ FF, 50 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHHandleUpdateImage + 22 7CABAD68 2 Bytes [ 30, 16 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHHandleUpdateImage + 26 7CABAD6C 32 Bytes [ 8D, 44, 00, 02, 50, 8D, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHHandleUpdateImage + 47 7CABAD8D 35 Bytes [ B5, E4, FB, FF, FF, FF, 15, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotifySuspendResume + 2 7CABB30F 61 Bytes CALL 7CABA7E1 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotifySuspendResume + 40 7CABB34D 24 Bytes [ 39, 8D, 85, EC, FD, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotifySuspendResume + 59 7CABB366 12 Bytes [ B5, EC, FD, FF, FF, E8, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHChangeNotifySuspendResume + 66 7CABB373 164 Bytes [ 76, 08, FF, B5, F0, FD, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHUpdateImageW + 2A 7CABB418 19 Bytes [ 8D, 47, F0, 50, 6A, 00, E8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHUpdateImageW + 3E 7CABB42C 18 Bytes [ FF, 8D, 85, F4, FD, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHUpdateImageW + 51 7CABB43F 14 Bytes [ 75, 10, 68, 7C, 01, 9E, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHUpdateImageW + 60 7CABB44E 63 Bytes [ 75, 10, FF, 77, F8, 53, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHUpdateImageW + A0 7CABB48E 28 Bytes [ 33, C0, 8B, 4D, FC, 5F, 5E, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHUpdateImageA + 3F 7CABB56C 112 Bytes [ 3D, 68, 1C, 9C, 7C, BE, 98, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHUpdateImageA + B0 7CABB5DD 110 Bytes [ 00, 00, FF, B5, EC, FD, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHUpdateImageA + 11F 7CABB64C 83 Bytes [ FF, 85, C0, 75, 13, FF, B5, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHUpdateImageA + 174 7CABB6A1 21 Bytes [ 00, 00, 83, C6, 1C, 83, BD, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHUpdateImageA + 18A 7CABB6B7 2 Bytes [ 4D, FC ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDataFromIDListA + 2 7CAC23E2 18 Bytes [ 36, FF, 15, A4, F6, 9E, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDataFromIDListA + 16 7CAC23F6 85 Bytes [ EB, C4, C7, 45, FC, 0E, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDataFromIDListA + 6C 7CAC244C 148 Bytes [ 75, 08, FF, 75, FC, E8, 01, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDataFromIDListA + 101 7CAC24E1 6 Bytes [ 00, 00, 8B, C3, 83, E8 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetDataFromIDListA + 108 7CAC24E8 62 Bytes [ 74, 08, 2B, C1, 0F, 85, 0F, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetNewLinkInfo + 79 7CAC26D8 23 Bytes [ 51, 0C, 8B, D8, 3B, DE, 0F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetNewLinkInfo + 91 7CAC26F0 107 Bytes [ 75, 0C, FF, 15, 3C, 1A, 9C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetNewLinkInfo + FD 7CAC275C 6 Bytes JMP 7CAC2852 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetNewLinkInfo + 104 7CAC2763 61 Bytes [ 34, 8D, 60, F0, A5, 7C, 8D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetNewLinkInfo + 142 7CAC27A1 8 Bytes [ F9, 0A, 0F, 8C, A9, 00, 00, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHOpenFolderAndSelectItems + 7B 7CAC2A99 28 Bytes [ 7C, 0E, 8B, 4D, FC, F7, D9, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateShellItem 7CAC2AB6 7 Bytes [ 90, 90, 90, 90, 8B, FF, 55 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateShellItem + 8 7CAC2ABE 29 Bytes [ EC, 51, 83, 65, FC, 00, 8D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateShellItem + 26 7CAC2ADC 2 Bytes [ 4D, FC ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateShellItem + 29 7CAC2ADF 44 Bytes [ D9, 1B, C9, 83, E1, FE, 41, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateShellItem + 56 7CAC2B0C 47 Bytes [ 75, 08, 6A, 77, 6A, 06, E8, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateFileExtractIconW + 9 7CAC2C2B 18 Bytes [ 59, 8B, 55, 14, 89, 0A, C9, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateFileExtractIconW + 1C 7CAC2C3E 74 Bytes [ EC, 51, 83, 65, FC, 00, 8D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateFileExtractIconW + 67 7CAC2C89 66 Bytes [ 75, 0C, FF, 75, 08, 6A, 02, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateFileExtractIconW + AA 7CAC2CCC 79 Bytes [ 75, 08, 6A, 02, 6A, 0A, E8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateFileExtractIconW + FA 7CAC2D1C 63 Bytes [ 4D, FC, F7, D9, 1B, C9, 83, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHAppBarMessage + 87 7CAC3EE6 4 Bytes [ 8D, 85, 4C, FB ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHAppBarMessage + 8C 7CAC3EEB 36 Bytes [ FF, 50, FF, 15, 78, 15, 9C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHAppBarMessage + B1 7CAC3F10 82 Bytes [ FF, 5F, 5E, 8B, 4D, FC, 5B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHAppBarMessage + 104 7CAC3F63 42 Bytes [ FF, 89, B5, C4, F9, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHAppBarMessage + 12F 7CAC3F8E 31 Bytes [ 50, FF, 15, 4C, 1A, 9C, 7C, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHEnableServiceObject + 2 7CAC3FD1 100 Bytes [ D6, 8D, 85, F4, FD, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetInstanceExplorer + 30 7CAC4036 16 Bytes [ FF, 50, FF, 15, 14, 1B, 9C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetInstanceExplorer + 41 7CAC4047 24 Bytes [ 0F, 84, 33, 01, 00, 00, 66, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetInstanceExplorer + 5A 7CAC4060 12 Bytes [ FF, 50, FF, B5, CC, F9, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetInstanceExplorer + 67 7CAC406D 50 Bytes [ FF, 50, FF, D3, FF, B5, D0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetInstanceExplorer + 9B 7CAC40A1 15 Bytes CALL 7CA0431E C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHBrowseForFolderW + 17 7CAC6FB8 94 Bytes [ C1, C7, 00, D4, 67, 9D, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHBrowseForFolderW + 76 7CAC7017 12 Bytes [ 50, 68, 00, 80, 00, 00, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHBrowseForFolderW + 83 7CAC7024 78 Bytes [ B5, F0, FD, FF, FF, E8, 23, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHBrowseForFolderW + D3 7CAC7074 4 Bytes [ 08, 50, FF, 51 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHBrowseForFolderW + D8 7CAC7079 142 Bytes [ 8B, 4D, FC, 33, C0, 85, F6, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHBrowseForFolder + 6D 7CAC7108 11 Bytes CALL 7C9FF573 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHBrowseForFolder + 79 7CAC7114 18 Bytes [ 1D, 5C, 1D, 9C, 7C, 89, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHBrowseForFolder + 8C 7CAC7127 12 Bytes [ 50, 68, 44, 37, 00, 00, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHBrowseForFolder + 99 7CAC7134 25 Bytes [ 15, 6C, 1D, 9C, 7C, 83, 66, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHBrowseForFolder + B3 7CAC714E 143 Bytes [ 15, E0, 1D, 9C, 7C, FF, 37, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!WOWShellExecute + 29 7CAC8601 66 Bytes [ 8B, F0, EB, 02, 33, F6, 3B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!WOWShellExecute + 6C 7CAC8644 89 Bytes [ 8D, 55, EC, 52, 50, FF, 51, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!WOWShellExecute + C7 7CAC869F 60 Bytes [ 68, 28, B2, 9D, 7C, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!WOWShellExecute + 104 7CAC86DC 17 Bytes [ 75, 14, 6A, 00, 57, 50, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!WOWShellExecute + 116 7CAC86EE 51 Bytes [ 75, 05, BE, 05, 40, 00, 80, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExec_RunDLLW + 2 7CAC87D6 19 Bytes CALL 7CA9B2AD C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExec_RunDLLW + 16 7CAC87EA 28 Bytes [ EC, 56, 8D, 45, 08, 50, 6A, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExec_RunDLLW + 33 7CAC8807 9 Bytes [ 75, 10, 8B, 08, 6A, 01, 6A, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExec_RunDLLW + 3D 7CAC8811 10 Bytes [ 51, 20, 8B, F0, 8B, 45, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellExec_RunDLLW + 48 7CAC881C 26 Bytes [ 51, 08, 8B, C6, 5E, 5D, C2, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateProcessAsUserW + C 7CAC93A0 26 Bytes [ 19, 9C, 7C, F7, D8, 1B, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateProcessAsUserW + 28 7CAC93BC 18 Bytes [ 68, E0, 03, 00, 00, 6A, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateProcessAsUserW + 3B 7CAC93CF 71 Bytes [ 75, 08, FF, 15, EC, 1D, 9C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateProcessAsUserW + 83 7CAC9417 5 Bytes [ 15, 68, 1C, 9C, 7C ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateProcessAsUserW + 89 7CAC941D 16 Bytes [ F8, 3B, FE, 74, 4F, 66, 39, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHShellFolderView_Message + 2 7CACAA6E 5 Bytes [ FF, 04, 00, 00, 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHShellFolderView_Message + 8 7CACAA74 18 Bytes [ 15, 30, 1C, 9C, 7C, 85, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHShellFolderView_Message + 1B 7CACAA87 7 Bytes [ FF, 6A, 01, FF, B5, F4, F7 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHShellFolderView_Message + 23 7CACAA8F 84 Bytes CALL 7CA13719 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHShellFolderView_Message + 78 7CACAAE4 68 Bytes [ FF, 15, 00, 10, 9C, 7C, 5F, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateShellFolderViewEx + 2 7CACAF07 1 Byte [ 50 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateShellFolderViewEx + 4 7CACAF09 102 Bytes CALL 7C9EBEF9 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateShellFolderViewEx + 6B 7CACAF70 35 Bytes [ 50, 8D, 85, FC, FD, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateShellFolderViewEx + 8F 7CACAF94 18 Bytes CALL 7CA136AD C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateShellFolderViewEx + A2 7CACAFA7 24 Bytes [ 50, FF, 35, A4, F5, BC, 7C, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFind_InitMenuPopup + 55 7CACCCA3 32 Bytes [ 50, 30, 5F, 2B, D8, 5E, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFind_InitMenuPopup + 76 7CACCCC4 14 Bytes [ 08, 33, F6, 51, FF, 50, 64, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFind_InitMenuPopup + 86 7CACCCD4 30 Bytes CALL 7C9EC114 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFind_InitMenuPopup + A5 7CACCCF3 14 Bytes [ 8B, EC, 53, 56, 57, 6A, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFind_InitMenuPopup + B4 7CACCD02 16 Bytes [ 15, 70, 19, 9F, 7C, 85, C0, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFindFiles + 2 7CACE248 46 Bytes [ 75, 10, 83, C0, 0C, 50, E8, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFindFiles + 31 7CACE277 168 Bytes [ 55, 8B, EC, 51, 51, 83, 7D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFindFiles + DE 7CACE324 31 Bytes [ 8B, FF, 55, 8B, EC, 81, EC, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFindFiles + FE 7CACE344 1 Byte [ FF ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHFindFiles + 100 7CACE346 23 Bytes [ 46, 10, 57, 8B, 7E, 0C, 8B, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHStartNetConnectionDialogW + 2 7CAD197F 48 Bytes [ 7C, 6B, 8B, 46, 14, 8B, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHStartNetConnectionDialogW + 33 7CAD19B0 94 Bytes [ B6, 34, 02, 00, 00, FF, 33, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHStartNetConnectionDialogW + 92 7CAD1A0F 10 Bytes [ C9, C2, 0C, 00, 90, 90, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHStartNetConnectionDialogW + 9D 7CAD1A1A 29 Bytes [ 55, 8B, EC, 81, EC, B8, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHStartNetConnectionDialogW + BB 7CAD1A38 125 Bytes [ FF, FF, 89, 45, FC, 8B, 43, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetIconOverlayIndexW + 2A 7CAD3909 60 Bytes [ 55, 8B, EC, 8B, 4D, 08, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetIconOverlayIndexW + 69 7CAD3948 76 Bytes [ 0D, 66, 83, 38, 00, 74, 07, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetIconOverlayIndexW + B6 7CAD3995 24 Bytes [ 39, 5D, 14, 74, 0B, 6A, 02, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetIconOverlayIndexW + CF 7CAD39AE 43 Bytes CALL 7C9EBDF3 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetIconOverlayIndexA + 23 7CAD39DA 54 Bytes [ 89, 1F, 89, 1E, B8, 05, 40, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetIconOverlayIndexA + 5A 7CAD3A11 65 Bytes [ F0, 85, F6, 7C, 1A, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetIconOverlayIndexA + 9C 7CAD3A53 96 Bytes [ 7D, 0C, 89, 45, FC, 8D, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetIconOverlayIndexA + FD 7CAD3AB4 38 Bytes [ FF, 8B, 08, 50, FF, 51, 08, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHGetIconOverlayIndexA + 125 7CAD3ADC 106 Bytes [ 8B, 4D, 18, A1, 48, F5, BC, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPropStgCreate + 14 7CAD4522 31 Bytes [ 08, FF, 75, FC, 50, FF, 51, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPropStgCreate + 34 7CAD4542 102 Bytes [ FF, 55, 8B, EC, 8B, 45, 18, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPropStgCreate + 9C 7CAD45AA 24 Bytes [ 00, A1, 48, F5, BC, 7C, 53, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPropStgCreate + B5 7CAD45C3 12 Bytes [ FF, 05, 40, 00, 80, 33, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPropStgCreate + C2 7CAD45D0 44 Bytes [ 55, 0C, 39, 11, 74, 0B, 40, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPropStgWriteMultiple + 2 7CAD5170 53 Bytes [ FF, 50, FF, D6, 53, 8D, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPropStgWriteMultiple + 38 7CAD51A6 54 Bytes CALL 7CA25909 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPropStgWriteMultiple + 6F 7CAD51DD 11 Bytes [ FF, 8D, 85, F4, FD, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPropStgWriteMultiple + 7B 7CAD51E9 38 Bytes CALL 7CA0C0B3 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHPropStgWriteMultiple + A2 7CAD5210 15 Bytes [ FF, FF, D6, 85, C0, 0F, 84, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHLimitInputEdit + 3B 7CAD5E7D 27 Bytes [ 55, 8B, EC, 56, 57, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHLimitInputEdit + 57 7CAD5E99 51 Bytes [ 85, C0, 74, 21, 33, F6, F6, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHLimitInputEdit + 8B 7CAD5ECD 10 Bytes [ 55, 8B, EC, 56, 8B, 75, 14, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHLimitInputEdit + 96 7CAD5ED8 43 Bytes [ 57, FF, 75, 10, BF, 05, 40, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHLimitInputEdit + C2 7CAD5F04 31 Bytes [ EC, 56, 8B, 75, 14, 83, 26, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHMultiFileProperties + B 7CAD62F3 30 Bytes [ 15, 30, 13, 9C, 7C, 33, C0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHMultiFileProperties + 2A 7CAD6312 33 Bytes [ 8B, 46, 10, A9, 00, 00, 01, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHMultiFileProperties + 4C 7CAD6334 14 Bytes [ F9, 30, 72, 06, 66, 83, F9, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHMultiFileProperties + 5B 7CAD6343 112 Bytes [ 74, 0C, 66, 83, F9, 41, 72, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHMultiFileProperties + CC 7CAD63B4 10 Bytes [ 8B, F1, FF, 15, BC, 14, 9C, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHLoadNonloadedIconOverlayIdentifiers + 2E 7CAD6ABD 1 Byte [ 55 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHLoadNonloadedIconOverlayIdentifiers + 30 7CAD6ABF 2 Bytes [ EC, 56 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHLoadNonloadedIconOverlayIdentifiers + 33 7CAD6AC2 94 Bytes [ 8B, 7D, 08, 57, 8B, F1, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHLoadNonloadedIconOverlayIdentifiers + 92 7CAD6B21 174 Bytes [ 75, 09, 09, 46, 10, 83, 4E, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHLoadNonloadedIconOverlayIdentifiers + 141 7CAD6BD0 149 Bytes [ 00, FF, FF, 75, 0F, 83, 7E, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!FindExeDlgProc + 10 7CAF5D63 49 Bytes [ 14, 8B, F8, 85, FF, 7C, 11, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!FindExeDlgProc + 42 7CAF5D95 4 Bytes [ EC, 51, 53, 57 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!FindExeDlgProc + 47 7CAF5D9A 76 Bytes [ 7D, 08, 8D, 4F, DC, E8, FE, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!FindExeDlgProc + 94 7CAF5DE7 21 Bytes [ 11, 8B, 35, D4, 19, 9C, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!FindExeDlgProc + AA 7CAF5DFD 19 Bytes [ D6, 85, C0, 7C, 06, 8B, 45, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CallCPLEntry16 + 16 7CB26310 2 Bytes [ 45, 18 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CallCPLEntry16 + 19 7CB26313 111 Bytes [ 08, 6A, FF, 50, FF, 91, A4, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CallCPLEntry16 + 89 7CB26383 9 Bytes [ 15, F4, 1F, 9C, 7C, 39, 5D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CallCPLEntry16 + 93 7CB2638D 36 Bytes CALL 7CB26916 C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!CallCPLEntry16 + B8 7CB263B2 39 Bytes [ 45, FC, 8B, C1, 6A, 08, 8D, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Options_RunDLL + 8 7CB5C586 302 Bytes [ FF, AB, AB, AB, 8D, 85, D0, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Options_RunDLLW + 10B 7CB5C6B5 2 Bytes [ 0F, D8 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Options_RunDLLW + 10F 7CB5C6B9 30 Bytes [ 8B, F0, 85, F6, 75, 31, 57, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Options_RunDLLW + 12E 7CB5C6D8 2 Bytes CALL E6B5C6E0
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Options_RunDLLW + 132 7CB5C6DC 62 Bytes [ 6A, 0A, 56, FF, 15, 18, 1E, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!Options_RunDLLW + 171 7CB5C71B 64 Bytes [ 75, D8, FF, 75, 08, FF, 15, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateLocalServerRunDll + 1 7CB5E4F6 374 Bytes [ C6, 5E, C9, C2, 08, 00, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateLocalServerRunDll + 178 7CB5E66D 39 Bytes [ 90, 90, 90, 90, 8B, FF, 55, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateLocalServerRunDll + 1A0 7CB5E695 59 Bytes [ FF, 85, C0, 8B, 75, 1C, 74, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateLocalServerRunDll + 1DC 7CB5E6D1 8 Bytes [ 83, 65, 08, 00, F6, 06, 03, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!SHCreateLocalServerRunDll + 1E5 7CB5E6DA 88 Bytes [ 5B, 66, 89, 45, D4, 89, 5D, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!ShellMessageBoxW + 1 7CB9C972 10 Bytes [ 75, FC, 68, 31, 04, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrChrA + 1 7CB9C97D 10 Bytes [ D6, 50, FF, 75, FC, 68, 30, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrChrIA + 1 7CB9C988 32 Bytes [ 77, 08, FF, D6, 53, FF, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrCmpNA + 1 7CB9C9A9 10 Bytes [ 45, FC, 8B, 45, FC, 3B, 45, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrCmpNIA + 1 7CB9C9B4 25 Bytes [ 77, 08, 8D, 4F, 48, E8, 83, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrCmpNW + 6 7CB9C9CF 5 Bytes [ 50, 50, FF, 77, 08 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrRChrA + 1 7CB9C9D5 4 Bytes [ 15, A8, F4, BB ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrRChrA + 6 7CB9C9DA 47 Bytes [ FF, 75, 08, 8B, CF, E8, 19, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrRStrIW 7CB9CA0B 61 Bytes [ 90, 90, 90, 8B, FF, 55, 8B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrStrW + 1F 7CB9CA4B 52 Bytes [ 8B, FF, 55, 8B, EC, 83, EC, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrStrW + 56 7CB9CA82 57 Bytes [ 8B, FF, 55, 8B, EC, 81, EC, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrStrW + 90 7CB9CABC 4 Bytes [ 76, 50, FF, 15 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrStrW + 95 7CB9CAC1 27 Bytes [ 1D, 9C, 7C, 39, BD, DC, FD, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] SHELL32.dll!StrStrW + B1 7CB9CADD 21 Bytes CALL 7CB819DE C:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation)
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumPageFilesA + FFFFCF9D 76BF10ED 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumPageFilesA + FFFFCFB6 76BF1106 12 Bytes [ 00, 00, F1, 10, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumPageFilesA + FFFFCFC5 76BF1115 14 Bytes [ 00, BF, 76, 00, 10, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumPageFilesA + FFFFCFD4 76BF1124 2 Bytes [ 05, 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumPageFilesA + FFFFCFD7 76BF1127 3 Bytes [ 00, 04, 00 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetDeviceDriverBaseNameA + B 76BF1485 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetDeviceDriverBaseNameA + 27 76BF14A1 46 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetDeviceDriverBaseNameA + 57 76BF14D1 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetDeviceDriverBaseNameA + 77 76BF14F1 3 Bytes [ 00, 00, 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetDeviceDriverBaseNameA + 7B 76BF14F5 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumDeviceDrivers + 5 76BF1640 46 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumDeviceDrivers + 35 76BF1670 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumDeviceDrivers + 4E 76BF1689 5 Bytes [ 00, 00, 00, 00, 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumDeviceDrivers + 55 76BF1690 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumDeviceDrivers + 61 76BF169C 5 Bytes [ 00, 00, 00, 00, 00 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetModuleFileNameExW + 17 76BF1781 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetModuleFileNameExW + 30 76BF179A 5 Bytes [ 00, 00, 00, 00, 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetModuleFileNameExW + 36 76BF17A0 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetModuleFileNameExW + 61 76BF17CB 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetModuleFileNameExW + 6C 76BF17D6 6 Bytes [ 00, 00, 00, 00, 00, 00 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetDeviceDriverFileNameA + B 76BF1CD0 106 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetDeviceDriverFileNameA + 76 76BF1D3B 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetDeviceDriverFileNameW + D 76BF1D4D 43 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetDeviceDriverFileNameW + 39 76BF1D79 1 Byte [ 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetDeviceDriverFileNameW + 3B 76BF1D7B 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetDeviceDriverFileNameW + 57 76BF1D97 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetDeviceDriverBaseNameW + D 76BF1DA9 43 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetDeviceDriverBaseNameW + 39 76BF1DD5 1 Byte [ 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetDeviceDriverBaseNameW + 3B 76BF1DD7 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetDeviceDriverBaseNameW + 57 76BF1DF3 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetMappedFileNameW + B 76BF1E03 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetMappedFileNameW + 23 76BF1E1B 111 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetMappedFileNameW + 93 76BF1E8B 99 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetMappedFileNameA + 5F 76BF1EEF 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumProcessModules + 5 76BF1EF9 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumProcessModules + 39 76BF1F2D 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumProcessModules + 5A 76BF1F4E 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumProcessModules + 78 76BF1F6C 41 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumProcessModules + A4 76BF1F98 47 Bytes [ 00, 00, 00, 00, 00, 00, 00, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetModuleBaseNameW + C 76BF20C1 39 Bytes [ CF, 90, 7C, 50, D1, 90, 7C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetModuleBaseNameW + 34 76BF20E9 42 Bytes [ 00, 00, 00, 90, 90, 90, 90, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetModuleBaseNameW + 5F 76BF2114 25 Bytes [ 00, 8B, 40, 30, 8B, 40, 10, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetModuleBaseNameW + 7B 76BF2130 6 Bytes [ 8B, FF, 55, 8B, EC, 83 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetModuleBaseNameA + 5 76BF2137 43 Bytes [ 10, A1, 40, 50, BF, 76, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetModuleBaseNameA + 31 76BF2163 151 Bytes [ 40, 10, F6, 40, 08, 02, 74, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetModuleInformation + 61 76BF21FB 44 Bytes [ 00, A2, 12, 00, 00, B4, 12, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetModuleInformation + 8E 76BF2228 31 Bytes [ 7D, 13, 00, 00, 90, 13, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EmptyWorkingSet + F 76BF2248 48 Bytes [ 27, 14, 00, 00, 3C, 14, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EmptyWorkingSet + 40 76BF2279 8 Bytes [ 00, 11, 00, 12, 00, 13, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EmptyWorkingSet + 49 76BF2282 52 Bytes [ 15, 00, 16, 00, 17, 00, 50, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!QueryWorkingSet + 13 76BF22B7 50 Bytes [ 6D, 50, 61, 67, 65, 46, 69, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!QueryWorkingSet + 46 76BF22EA 226 Bytes [ 72, 6F, 63, 65, 73, 73, 65, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!QueryWorkingSet + 129 76BF23CD 20 Bytes [ 47, 65, 74, 4D, 6F, 64, 75, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!QueryWorkingSet + 13E 76BF23E2 274 Bytes [ 47, 65, 74, 50, 65, 72, 66, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!QueryWorkingSet + 251 76BF24F5 46 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumProcesses + 35 76BF3AAB 58 Bytes [ 71, 75, 6F, 74, 61, 20, 70, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumProcesses + 70 76BF3AE6 74 Bytes [ 69, 6C, 65, 67, 65, 20, 66, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumProcesses + BB 76BF3B31 12 Bytes [ FF, 55, 8B, EC, 8B, 45, 0C, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumProcesses + C8 76BF3B3E 1 Byte [ 6A ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumProcesses + CA 76BF3B40 50 Bytes [ FF, 75, 08, 6A, 00, 50, E8, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetProcessMemoryInfo + 97 76BF3C54 82 Bytes [ FC, B8, 01, 00, 00, C0, E9, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetProcessMemoryInfo + EB 76BF3CA8 23 Bytes [ 8D, 85, E4, FD, FF, FF, 50, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!InitializeProcessForWsWatch + F 76BF3CC0 24 Bytes [ FF, 50, FF, B5, 80, FB, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!InitializeProcessForWsWatch + 28 76BF3CD9 29 Bytes [ 3B, 05, D8, 5C, BF, 76, 0F, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetWsChanges + 2 76BF3CF7 32 Bytes [ 6B, C0, 34, 8B, 88, 98, 6D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetWsChanges + 23 76BF3D18 10 Bytes [ 89, 95, 94, FB, FF, FF, 80, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetWsChanges + 2F 76BF3D24 28 Bytes [ 00, 74, 0C, 8B, 80, 9C, 6D, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetProcessImageFileNameW + 12 76BF3D41 100 Bytes [ 76, 11, 83, AD, 94, FB, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetProcessImageFileNameW + 77 76BF3DA6 66 Bytes [ 8C, 6D, BF, 76, 01, 00, 00, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetProcessImageFileNameA + 2C 76BF3DE9 42 Bytes [ 50, 8D, 85, E4, FD, FF, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetPerformanceInfo + A 76BF3E4B 66 Bytes [ 0F, 84, C7, 05, 00, 00, 2B, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetPerformanceInfo + 4E 76BF3E8F 47 Bytes [ 35, 48, 50, BF, 76, 8D, 85, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetPerformanceInfo + 7E 76BF3EBF 119 Bytes [ 8B, 4B, 04, 8B, 15, 48, 50, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetPerformanceInfo + F6 76BF3F37 27 Bytes [ 73, 04, 83, C3, 14, 53, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!GetPerformanceInfo + 112 76BF3F53 2 Bytes [ FF, 50 ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumPageFilesW + 2C 76BF400D 19 Bytes [ 94, FB, FF, FF, 0F, 83, F4, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumPageFilesW + 40 76BF4021 78 Bytes [ 8B, D0, 2B, 95, 7C, FB, FF, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumPageFilesW + 8F 76BF4070 20 Bytes [ 50, FF, D7, 83, C4, 10, EB, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumPageFilesW + A4 76BF4085 3 Bytes [ 85, 84, FB ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumPageFilesW + A8 76BF4089 27 Bytes [ FF, 50, 53, 8B, 85, A0, FB, … ]
.text …
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumPageFilesA + 26 76BF4176 3 Bytes [ 75, 45, 39 ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumPageFilesA + 2A 76BF417A 43 Bytes [ 98, FB, FF, FF, 75, 3D, 53, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumPageFilesA + 56 76BF41A6 5 Bytes [ 50, FF, B5, 80, FB ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumPageFilesA + 62 76BF41B2 25 Bytes [ 8B, 1D, 78, 54, BF, 76, E9, … ]
.text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[216] psapi.dll!EnumPageFilesA + 7C 76BF41CC 6 Bytes [ 70, 04, 83, C0, 14, 50 ]
.text …

—- Devices - GMER 1.0.14 —-

AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)

Device \FileSystem\Fastfat \Fat A6368D20

—- Registry - GMER 1.0.14 —-

Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\AuxUserType\2
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\AuxUserType\2@ Video Clip
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\DataFormats\DefaultSet
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\DataFormats\DefaultSet@ AVIFile
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\DataFormats\GetSet
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\DataFormats\GetSet\0
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\DataFormats\GetSet\0@ Embed Source,1,8,1
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\DataFormats\GetSet\1
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\DataFormats\GetSet\1@ 3,1,32,1
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\DataFormats\GetSet\2
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\DataFormats\GetSet\2@ 8,1,1,1
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\DefaultIcon@ mplay32.exe,3
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}@
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}@
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\InprocHandler32@ ole32.dll
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\Insertable@
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\LocalServer@ mplay32.exe /avi
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\LocalServer32@ mplay32.exe /avi
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\MiscStatus@ 0
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\PersistentHandler@ {098f2470-bae0-11cd-b579-08002b30bfeb}
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\ProgID@ AVIFile
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\verb\0
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\verb\0@ &Play,0,3
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\verb\1
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\verb\1@ &Edit,0,2
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\verb\2
Reg HKLM\SOFTWARE\Classes\CLSID\{31E3FC97-DFA6-BD2D-E982-A7B9DBD87050}\verb\2@ &Open,0,2

—- EOF - GMER 1.0.14 —-

jpshortstuff

Post #6January 20, 2009, 11:50 PM UTC

Hi, Have you got a log from MalwareBytes'? Can I see a new HijackThis log as well please? Thanks.

beckpeck

Post #7January 23, 2009, 2:24 PM UTC

Hi,
Below is a new hijackthis log and attached is the malwarebytes log. Thanks again.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:19:22 AM, on 1/23/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dlcccoms.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [dlccmon.exe] "C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe"
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [Universal Installer] "C:\Program Files\ComcastUI\Universal Installer\uinstaller.exe" /fromrun /starthidden
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {15589FA1-C456-11CE-BF01-00AA0055595A} - http://w4s2.work4sure.com/c/ge/w4sgeen9.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: dlcc_device - Unknown owner - C:\WINDOWS\system32\dlcccoms.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

–
End of file - 7079 bytes

Attachments:

📎mbam_log_2009_01_23__07_17_00_.txt

jpshortstuff

Post #8January 23, 2009, 2:59 PM UTC

Hi,

You appear to have got rid of McAfee. It is essential that you have an AntiVirus and Firewall program on your computer otherwise you are leaving yourself wide open to infection. If you need them, I can give suggestions for free security software that you can use.

Open HijackThis. Hit Do A System Scan Only. Place a check next to the following items (if present):
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

Close all browsers and windows except for HijackThis and click Fix Checked.

Your Java Runtime Environment is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.

Updating Java:

Download the latest version of Java Runtime Environment (JRE) 6 Update 11.
Scroll down to where it says "Java Runtime Environment (JRE) 6 Update 11, The Java SE Runtime Environment (JRE) allows end-users to run Java applications".
Click the "Download" button to the right.
Check the box that says: "Accept License Agreement".
The page will refresh.
Click on the link to download Windows Offline Installation, Multi-language and save it to your desktop.
Close any programs you may have running - especially any web browsers.
Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
Check any item with Java Runtime Environment (JRE or J2SE) in the name.
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each Java versions.
Reboot your computer once all Java components are removed.
Then from your desktop double-click on jre-6u11-windowsi586.exe to install the newest version.

Post a new HijackThis log after this.

Also, take a look at this guide for slow computers:
http://www.malwareremoval.com/tutorials/runningslowly.php

I don't think there's any Malware involved in this.

Thanks.

beckpeck

Post #9January 24, 2009, 8:16 PM UTC

Okay…got that done… I would like to hear your suggestions for any free anti-virus software, etc. that I could get to protect my system. I am not using this pc online other than for posting to this forum right now. The computer is running far better than when we started. I will check out the link you gave as well.

Here is a new hijackthis log - thanks!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:02:39 PM, on 1/24/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\system32\dlcccoms.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [dlccmon.exe] "C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe"
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [Universal Installer] "C:\Program Files\ComcastUI\Universal Installer\uinstaller.exe" /fromrun /starthidden
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {15589FA1-C456-11CE-BF01-00AA0055595A} - http://w4s2.work4sure.com/c/ge/w4sgeen9.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: dlcc_device - Unknown owner - C:\WINDOWS\system32\dlcccoms.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

–
End of file - 7123 bytes

jpshortstuff

Post #10January 24, 2009, 10:49 PM UTC

Hi beckpeck

Log looks good

I will include links to free AntiVirus and Firewall software below.

You can now delete any other tools I had you download and use, unless you wish to keep them.

Set correct settings for files that should be hidden in Windows XP

Click Start > My Computer > Tools menu (at top of page) > Folder Options > View tab.
Under "Hidden files and folders" if necessary select Do not show hidden files and folders.
If unchecked please checkHide protected operating system files (Recommended)
If necessary check "Display content of system folders"
If necessary Uncheck Hide file extensions for known file types.
Click OK

Now that your system appears to be clean, theres just a few steps I'd like you to take to prevent any future infections.

System restore:
We will now clear your existing system restore points and establish a new clean restore point:
- Go to Start > All Programs > Accessories > System Tools > System Restore
- Select Create a restore point, and Ok it.
- Next, go to Start > Run and type in cleanmgr
- Select the More options tab
- Choose the option to clean up system restore and OK it.
  
  This will remove all restore points except the new one you just created.
Make sure you do this now, as your System Restore currently has infected files in it.
Keeping your Windows up-to-date is crucial to your computer's security. Please go to the Windows Update Site (using Internet Explorer) and download and install all critical updates on a regular basis.
You don't appear to be running any Anti-Virus software.

Install Anti-Virus software! Without any anti-virus software, your computer is wide open to infection. If you don't have any Anti-Virus software I strongly recommend you download Avast! or AVG Free
You don't appear to be running any third party Firewall software.

Install a firewall! Without a firewall you are very susceptible to being hacked, and people could gain access to your computer. If you don't have a firewall I strongly recommend you download ONE of the following:
1) Comodo
2) Agnitum
3) Sunbelt/Kerio
Make sure you update your Anti-Virus software regularly, new viruses are being developed all the time.
Some more programs that it would be useful to have [OPTIONAL but RECOMMENDED]:

Download Spybot Search and Destroy 1.5 from here
Check for Updates/ Immunize and run a Full System Scan on a regular basis.

SpywareBlaster is another real-time scanner that prevents most spyware from even being installed.
Freely available: Download SpywareBlaster

Download and install the free version of WinPatrol. This program protects your computer in a variety of ways and will work well with your existing security software. Have a look at this tutorial to help you get started with the program.

Also, please read this great article by Tony Klein: So How Did I Get Infected In First Place

Glad we could be of assistance.

Please reply to this thread once more if you are satisfied so that we can mark the problem as resolved.

Stay Clean!

jpshortstuff

beckpeck

Post #11January 25, 2009, 5:30 PM UTC

Thanks for all your time! I have installed several of your suggestions. I appreciate your assistance.

jpshortstuff

Post #12January 25, 2009, 10:34 PM UTC

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.

[Resolved] really slow programs, very slow start up

✨ Ask AI

Ask AI