Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Firefox/google searches hijacked.


  • This topic is locked This topic is locked
17 replies to this topic

#1 studiodweller

studiodweller

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 31 May 2010 - 03:58 PM

The firefox/google hijack is the last remaining 'problem' I have as evidenced by normal computer use.
I have also shut off a number of startup processes that I did not recognize or could determine from google searches (on another machine), that were most likely malware. I would prefer to have them gone from my system rather than just 'off'.
The first noticeable problem I had came from Antispywaresoft. I think I have gotten that off my system, as my machine is largely back under my control, but it could still be hiding I suppose.

I am running Windows XP.

I have run the following antispy/mal ware programs:
Malware Bytes
SUPERAntiSpyware
ESET NOD32
Spybot S&D

These were able to pick up a number of problems on my computer, but more remain.


I have prepared myself as directed in your guide.

The GMER log program did run, but it annihilated my computer. I couldn't check if it was just hogging process share because task manager wouldn't even open. I left it overnight to run and it did finally finish. Every click at the end of the process to get the log to save had about a 20 minute lag. Once it was saved I had to do a hard reset to get my computer back. (not complaining, thank you for the service, but the guide recommended i communicate problems with the process, and this definitely seemed like a problem).

Additionally, the resulting GMER log (ark.txt), is 2MB and as such cannot be attached here.



Thank you for your help, I look forward to your response.




My DDS log is as follows:

DDS (Ver_10-03-17.01) - NTFSx86
Run by Adam at 17:01:01.17 on Sun 05/30/2010
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1109 [GMT -4:00]

AV: ESET NOD32 Antivirus 4.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\System32\svchost.exe -k Akamai
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Clarus\Samsung Auto Backup\ISFGuage.exe
C:\Program Files\Clarus\Samsung Auto Backup\ISFRealTimeD.exe
C:\Program Files\Clarus\Samsung Auto Backup\ISFTimerD.exe
C:\Program Files\SMC\EZ Connect Wireless USB\WlanMonitor.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\iTunes\iTunes.exe
C:\Documents and Settings\Adam\Desktop\dds.scr

============== Pseudo HJT Report ===============

uInternet Settings,ProxyOverride = <local>
uInternet Settings,ProxyServer = http=127.0.0.1:5555
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll
TB: Contribute Toolbar: {517bdde4-e3a7-4570-b21e-2b52b6139fc7} - c:\program files\adobe\/Adobe Contribute CS3/contributeieplugin.dll
EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll
uRun: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\nero\lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [LXBTCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\LXBTtime.dll,_RunDLLEntry@16
mRun: [MSConfig] c:\windows\pchealth\helpctr\binaries\MSConfig.exe /auto
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [SkyTel] SkyTel.EXE
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe
mRun: [Adobe_ID0EYTHM] c:\progra~1\common~1\adobe\adobev~1\server\bin\VERSIO~2.EXE
mRun: [Acrobat Assistant 8.0] "c:\program files\adobe\acrobat 8.0\acrobat\Acrotray.exe"
StartupFolder: c:\docume~1\adam\startm~1\programs\startup\ezconn~1.lnk - c:\program files\smc\ez connect wireless usb\WlanMonitor.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\logite~1.lnk - c:\program files\logitech\setpoint\SetPoint.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\samsun~3.lnk - c:\program files\clarus\samsung auto backup\ISFGuage.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\samsun~2.lnk - c:\program files\clarus\samsung auto backup\ISFRealTimeD.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\samsun~1.lnk - c:\program files\clarus\samsung auto backup\ISFTimerD.exe
IE: Append to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert link target to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
TCP: NameServer = 93.188.164.138,93.188.161.247
TCP: {4A3BB94B-3388-43F2-BA2C-F51718D65B57} = 93.188.164.138,93.188.161.247
TCP: {AA302019-618D-48DC-B23D-4C06F63C0D96} = 93.188.164.138,93.188.161.247
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: AtiExtEvent - Ati2evxx.dll
Notify: LBTWlgn - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
Hosts: 127.0.0.1 www.spywareinfo.com

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\adam\applic~1\mozilla\firefox\profiles\wq86jh3j.default\
FF - component: c:\documents and settings\adam\application data\mozilla\firefox\profiles\wq86jh3j.default\extensions\piclens@cooliris.com\components\coolirisstub.dll
FF - plugin: c:\documents and settings\adam\application data\mozilla\firefox\profiles\wq86jh3j.default\extensions\piclens@cooliris.com\plugins\npcoolirisplugin.dll
FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);

============= SERVICES / DRIVERS ===============

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2009-11-16 108792]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2009-11-16 96408]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67656]
R2 Akamai;Akamai NetSession Interface;c:\windows\system32\svchost.exe -k Akamai [2006-2-28 14336]
R2 ekrn;ESET Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2009-11-16 735960]
R3 SMCSMCWirelessUSB(SMC2662W)®;SMC SMCWirelessUSB(SMC2662W)® Service for SMC EZ Connect Wireless USB Adapter(SMC2662W);c:\windows\system32\drivers\Nets6251.sys [2004-9-21 107008]
S0 akanbpi;akanbpi;c:\windows\system32\drivers\akanbpi.sys [2010-5-28 823808]
S3 cpuz129;cpuz129;\??\c:\docume~1\adam\locals~1\temp\cpuz_x32.sys --> c:\docume~1\adam\locals~1\temp\cpuz_x32.sys [?]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [2009-12-30 13192]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [2009-12-30 8456]
S3 FXDrv32;FXDrv32;\??\d:\fxdrv32.sys --> d:\FXDrv32.sys [?]
S3 SiSV;SiSV;c:\windows\system32\drivers\SiSV.sys [2008-9-5 50432]

=============== Created Last 30 ================

2010-05-30 19:18:52 0 ----a-w- c:\documents and settings\adam\defogger_reenable
2010-05-30 01:27:12 0 d-----w- c:\docume~1\alluse~1\applic~1\SUPERAntiSpyware.com
2010-05-30 01:27:12 0 d-----w- c:\docume~1\adam\applic~1\SUPERAntiSpyware.com
2010-05-30 01:27:04 0 d-----w- c:\program files\SUPERAntiSpyware
2010-05-29 02:52:57 0 d-----w- c:\docume~1\adam\applic~1\Malwarebytes
2010-05-29 02:52:20 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-05-29 02:52:19 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-05-29 02:52:19 0 d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-05-29 02:52:19 0 d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-05-29 02:41:47 0 d-----w- c:\windows\pss
2010-05-28 23:59:46 0 d-----w- c:\program files\ESET
2010-05-28 21:39:55 0 d-----w- c:\windows\system32\msapps
2010-05-28 21:38:15 823808 ----a-w- c:\windows\system32\drivers\akanbpi.sys
2010-05-28 21:38:12 69120 ----a-w- c:\windows\system32\ernel32.dll
2010-05-27 22:21:42 5632 ----a-w- c:\windows\system32\ptpusb.dll
2010-05-27 22:21:42 159232 ----a-w- c:\windows\system32\ptpusd.dll
2010-05-16 21:58:26 0 d-----w- c:\program files\Clarus
2010-05-13 02:41:20 0 d-----w- c:\program files\Spybot - Search & Destroy
2010-05-13 02:41:20 0 d-----w- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2010-05-12 02:25:56 0 d-----w- c:\program files\common files\Akamai

==================== Find3M ====================

2010-03-11 12:38:54 832512 ----a-w- c:\windows\system32\wininet.dll
2010-03-11 12:38:52 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-03-11 12:38:51 17408 ----a-w- c:\windows\system32\corpol.dll
2010-03-09 11:09:18 430080 ----a-w- c:\windows\system32\vbscript.dll
2010-03-08 17:59:18 94208 ----a-w- c:\windows\system32\dpl100.dll
2008-10-06 23:48:26 32768 -csha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008100620081007\index.dat

============= FINISH: 17:01:37.28 ===============



Attached Files



BC AdBot (Login to Remove)

 


#2 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:03:00 PM

Posted 31 May 2010 - 04:37 PM

Hello studiodweller,



Could you please look at the GMER report and copy and paste the Kernel Code Sections part? That's the part I'm most interested in from that log. Just so you know, it tends to crash some infected computers, so that isn't really unusual. Also if you still have it, the MBAM report from the last time you ran it. smile.gif Anything else you'd like to add about behavior is welcome, and we'll go from there. thumbup2.gif

Thanks,
tea
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?

#3 studiodweller

studiodweller
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 31 May 2010 - 07:33 PM

Certainly tea, thanks.

As far as additional behavior issues, my Firefox is now prone to instant exit/failure. Not frequent, but it is happening once every few hours where it never had before.

MBAB report attached. This one is from my first run-through. I've probably run it 3 times since, on only the C drive, but haven't saved the logs.

Bleeping Computer wouldn't let me post the the kernel code, too long of a message. I edited it into separate txt files to meet the max upload req., I will attach them here and into a proceeding post.

#4 studiodweller

studiodweller
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 31 May 2010 - 07:37 PM

It didn't reset my max upload with my new 'reply', and my message is still too long to paste it as in-line text. I will await your reply before attempting any other action.

Thanks,
adam.

#5 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:03:00 PM

Posted 31 May 2010 - 07:59 PM

Okay....please don't worry about attaching anything. smile.gif I prefer it be pasted in the post anyway. Use as many posts as you need to for both reports. thumbup2.gif
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?

#6 studiodweller

studiodweller
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 31 May 2010 - 08:24 PM

MBAB
________________________________________________________

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4153

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

5/29/2010 5:09:10 AM
mbam-log-2010-05-29 (05-09-10).txt

Scan type: Full scan (C:\|E:\|G:\|H:\|)
Objects scanned: 576567
Time elapsed: 2 hour(s), 25 minute(s), 19 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 2
Registry Keys Infected: 10
Registry Values Infected: 6
Registry Data Items Infected: 7
Folders Infected: 0
Files Infected: 22

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\Documents and Settings\Adam\Local Settings\Temp\qvg35o9ary.dll (Trojan.Ertfor) -> No action taken.
C:\WINDOWS\system32\u2ktzabo8s.dll (Trojan.Ertfor) -> No action taken.

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{c7ba40a1-74f2-52bd-f411-04b15a2c8953} (Trojan.Ertfor) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c7ba40a1-74f2-52bd-f411-04b15a2c8953} (Trojan.Ertfor) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c7ba40a1-74f2-52bd-f411-04b15a2c8953} (Trojan.Ertfor) -> No action taken.
HKEY_CURRENT_USER\Software\avsoft (Trojan.Fraudpack) -> No action taken.
HKEY_CURRENT_USER\Software\avsuite (Rogue.AntivirusSuite) -> No action taken.
HKEY_CURRENT_USER\Software\M5T8QL3YW3 (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\QZAIB7KITK (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\avsoft (Trojan.Fraudpack) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\avsuite (Rogue.AntivirusSuite) -> No action taken.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{c7ba40a1-74f2-52bd-f411-04b15a2c8953} (Trojan.Ertfor) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\idstrf (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\winid (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\nofolderoptions (Hijack.FolderOptions) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\m5t8ql3yw3 (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mcexecwin (Trojan.Agent) -> No action taken.

Registry Data Items Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions (Hijack.FolderOptions) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{35CEC8A3-2BE6-11D2-8773-92E220524153}\InprocServer32\(default) (Hijack.Tray) -> Bad: (C:\DOCUME~1\Adam\LOCALS~1\Temp\9714969145.dll) Good: (stobject.dll) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer (Trojan.DNSChanger) -> Data: 93.188.164.138,93.188.161.247 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 93.188.164.138,93.188.161.247 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{4a3bb94b-3388-43f2-ba2c-f51718d65b57}\NameServer (Trojan.DNSChanger) -> Data: 93.188.164.138,93.188.161.247 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{aa302019-618d-48dc-b23d-4c06f63c0d96}\DhcpNameServer (Trojan.DNSChanger) -> Data: 93.188.164.138,93.188.161.247 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{aa302019-618d-48dc-b23d-4c06f63c0d96}\NameServer (Trojan.DNSChanger) -> Data: 93.188.164.138,93.188.161.247 -> No action taken.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\Adam\Local Settings\Temp\qvg35o9ary.dll (Trojan.Ertfor) -> No action taken.
C:\WINDOWS\system32\u2ktzabo8s.dll (Trojan.Ertfor) -> No action taken.
C:\Documents and Settings\Adam\Local Settings\Application Data\asam.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Adam\Local Settings\Application Data\syssvc.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Adam\Local Settings\Application Data\hnvstxmgw\coiikuhtssd.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Adam\Local Settings\Application Data\pnmfhxcqw\qsjcswytssd.exe (Rogue.AntispywareSoft) -> No action taken.
C:\Documents and Settings\Adam\Local Settings\Temp\dHDs.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Adam\Local Settings\Temp\Ir1.exe (Malware.Packer.Gen) -> No action taken.
C:\WINDOWS\Ilyzua.exe (Malware.Packer.Gen) -> No action taken.
G:\Adam@OWNER-E2A82D030\#C\Documents and Settings\Adam\Local Settings\Application Data\pnmfhxcqw\qsjcswytssd.exe (Rogue.AntispywareSoft) -> No action taken.
G:\Adam@OWNER-E2A82D030\#C\Documents and Settings\Adam\Local Settings\Temp\qvg35o9ary.dll (Trojan.Ertfor) -> No action taken.
G:\Adam@OWNER-E2A82D030\#C\Documents and Settings\Adam\Local Settings\Temp\Ir1.exe (Malware.Packer.Gen) -> No action taken.
G:\Adam@OWNER-E2A82D030\#C\Documents and Settings\Adam\Local Settings\Temporary Internet Files\Content.IE5\GXEX49EH\n002102801r0409R444a7181Xd1e30d21Y9a1cd833Z03003f3630dP000501080[1] (Trojan.Downloader) -> No action taken.
G:\Adam@OWNER-E2A82D030\#C\Documents and Settings\Adam\Local Settings\Temporary Internet Files\Content.IE5\WN0JWHA5\rvqxfn[1].htm (Trojan.Downloader) -> No action taken.
G:\Adam@OWNER-E2A82D030\#C\Documents and Settings\Adam\Local Settings\Temporary Internet Files\Content.IE5\WN0JWHA5\hypwhc[1].htm (Trojan.Downloader) -> No action taken.
G:\Adam@OWNER-E2A82D030\#C\Documents and Settings\Adam\Local Settings\Temporary Internet Files\Content.IE5\WN0JWHA5\n002102801r0409R444a7181Xd1e30d21Y9a1cd833Z03003f3630dP000501081[1] (Malware.Packer.Gen) -> No action taken.
G:\Adam@OWNER-E2A82D030\#C\Documents and Settings\Adam\Local Settings\Temporary Internet Files\Content.IE5\YNUJOL8T\yptozgozmu[1].htm (Rogue.AntispywareSoft) -> No action taken.
G:\Adam@OWNER-E2A82D030\#C\WINDOWS\Ilyzua.exe (Malware.Packer.Gen) -> No action taken.
G:\Adam@OWNER-E2A82D030\#C\WINDOWS\system32\u2ktzabo8s.dll (Trojan.Ertfor) -> No action taken.
C:\WINDOWS\herjek.config (Malware.Trace) -> No action taken.
C:\WINDOWS\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job (Trojan.Downloader) -> No action taken.
C:\WINDOWS\Tasks\{8C3FDD81-7AE0-4605-A46A-2488B179F2A3}.job (Trojan.Downloader) -> No action taken.


#7 studiodweller

studiodweller
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 31 May 2010 - 08:26 PM

Kernel code coming in over the next however-many-it-takes posts.


---- Kernel code sections - GMER 1.0.15 ----

.text ntkrnlpa.exe!ZwCallbackReturn + 2C1C 805044B8 4 Bytes [80, 95, 93, 89]
.text ntkrnlpa.exe!ZwCallbackReturn + 2CB4 80504550 4 Bytes [00, A1, 93, 89]
.text ntkrnlpa.exe!ZwCallbackReturn + 2CE0 8050457C 4 Bytes [30, 9B, 93, 89]
.text ntkrnlpa.exe!ZwCallbackReturn + 2DB8 80504654 4 Bytes [C0, 8C, 93, 89]
.text ntkrnlpa.exe!ZwCallbackReturn + 2DD0 8050466C 4 Bytes [C0, 8F, 93, 89]
.text ...
.text ntkrnlpa.exe!KeReleaseInStackQueuedSpinLockFromDpcLevel + C72 8054173A 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 2BE 80545CAE 18 Bytes [E0, 25, 7F, FF, FF, FF, 0F, ...]
.text ntkrnlpa.exe!KiDispatchInterrupt + 2D6 80545CC6 1 Byte [00]
.text ntkrnlpa.exe!RtlPrefetchMemoryNonTemporal 805466B4 1 Byte [90]
.text hal.dll!HalBeginSystemInterrupt + 949 806E78B1 1 Byte [C0]
.text hal.dll!HalBeginSystemInterrupt + 949 806E78B1 3 Bytes [C0, 00, C0] {ROL BYTE [EAX], 0xc0}
.text hal.dll!HalBeginSystemInterrupt + 94D 806E78B5 1 Byte [F0]
.text hal.dll!HalBeginSystemInterrupt + 950 806E78B8 5 Bytes [30, 0A, 69, 44, 01]
.text hal.dll!HalBeginSystemInterrupt + 958 806E78C0 4 Bytes [E0, 08, 88, 31] {LOOPNZ 0xa; MOV [ECX], DH}
.text ...
INIT ati2mtag.sys B97A50B1 3 Bytes [63, 7A, B9] {ARPL [EDX-0x47], DI}
INIT ati2mtag.sys B97A50B5 3 Bytes [63, 7A, B9] {ARPL [EDX-0x47], DI}
INIT ati2mtag.sys B97A50B9 3 Bytes [63, 7A, B9] {ARPL [EDX-0x47], DI}
INIT ati2mtag.sys B97A50BD 3 Bytes [63, 7A, B9] {ARPL [EDX-0x47], DI}
INIT ati2mtag.sys B97A50C1 3 Bytes [63, 7A, B9] {ARPL [EDX-0x47], DI}
INIT ...
.text C:\WINDOWS\system32\DRIVERS\ati2mtag.sys section is writeable [0xB92B3000, 0x1A0D8E, 0xE8000020]
.text BIB.dll!BIBLockSmithAssertNoLocksImpl + FFFF9BE9 07001000 28 Bytes [85, FF, C7, 06, 48, 1F, 69, ...]
.text BIB.dll!BIBLockSmithAssertNoLocksImpl + FFFF9C06 0700101D 42 Bytes [0D, 00, 00, 00, 00, C9, C2, ...]
.text BIB.dll!BIBLockSmithAssertNoLocksImpl + FFFF9C31 07001048 6 Bytes [8B, 4D, F4, 64, 89, 0D]
.text BIB.dll!BIBLockSmithAssertNoLocksImpl + FFFF9C38 0700104F 16 Bytes [00, 00, 00, C9, C3, CC, CC, ...]
.text BIB.dll!BIBLockSmithAssertNoLocksImpl + FFFF9C49 07001060 59 Bytes [5F, 00, 00, 83, EC, 10, 8B, ...]
.text ...
.text BIB.dll!BIBGetVersion + 44 07006DF8 97 Bytes [75, 04, 33, C0, EB, 4E, 57, ...]
.text BIB.dll!BIBGetVersion + A6 07006E5A 55 Bytes [55, 8B, EC, F6, 45, 08, 02, ...]
.text BIB.dll!BIBGetVersion + DE 07006E92 80 Bytes [F6, 45, 08, 01, 74, 07, 57, ...]
.text BIB.dll!BIBGetVersion + 12F 07006EE3 12 Bytes [C2, 10, 00, 8B, 45, EC, 89, ...] {RET 0x10; MOV EAX, [EBP-0x14]; MOV [EBP-0x1c], EAX; MOV EAX, [EBP-0x1c]}
.text BIB.dll!BIBGetVersion + 13C 07006EF0 26 Bytes [00, 89, 45, E0, 8B, 45, E0, ...]
.text ...
.text BIB.dll!BIBInitialize4 + 7D 07007121 102 Bytes [05, 33, C0, 40, EB, 02, 33, ...]
.text BIB.dll!BIBInitialize4 + E4 07007188 14 Bytes [EB, 03, 8B, 7D, 20, FF, 75, ...] {JMP 0x5; MOV EDI, [EBP+0x20]; PUSH DWORD [EBP+0x24]; MOV EAX, [EBP-0x4]; MOV ECX, [EAX]; PUSH EDI}
.text BIB.dll!BIBInitialize4 + F3 07007197 11 Bytes [75, 1C, FF, 75, 18, FF, 75, ...] {JNZ 0x1e; PUSH DWORD [EBP+0x18]; PUSH DWORD [EBP+0x14]; PUSH DWORD [EBP+0x10]}
.text BIB.dll!BIBInitialize4 + FF 070071A3 4 Bytes [75, 0C, 56, 50] {JNZ 0xe; PUSH ESI; PUSH EAX}
.text BIB.dll!BIBInitialize4 + 104 070071A8 26 Bytes [51, 10, 8B, F0, 8B, 45, FC, ...]
.text ...
.text BIB.dll!BIBInitialize2 + F 0700738A 41 Bytes [8B, F8, 85, FF, 59, 89, 7D, ...]
.text BIB.dll!BIBInitialize + 15 070073B4 55 Bytes [8B, 45, FC, 89, 43, 1C, 8B, ...]
.text BIB.dll!BIBTerminate + 32 070073EC 42 Bytes [15, 68, 11, 69, 75, 83, 66, ...]
.text BIB.dll!BIBLockSmithAssertNoLocksImpl 07007417 8 Bytes [CC, CC, CC, CC, CC, 8B, FF, ...] {INT 3 ; INT 3 ; INT 3 ; INT 3 ; INT 3 ; MOV EDI, EDI; PUSH EBP}
.text BIB.dll!BIBLockSmithAssertNoLocksImpl + 9 07007420 3 Bytes [EC, 8B, C1] {IN AL, DX ; MOV EAX, ECX}
.text BIB.dll!BIBLockSmithAssertNoLocksImpl + D 07007424 1 Byte [4D]
.text BIB.dll!BIBLockSmithAssertNoLocksImpl + D 07007424 36 Bytes [4D, 08, 89, 48, 14, 33, C9, ...]
.text BIB.dll!BIBLockSmithAssertNoLocksImpl + 32 07007449 24 Bytes CALL 07007FCD \Program Files\Adobe\Acrobat 8.0\Acrobat\BIB.dll (Bravo Interface Binder/Adobe Systems Incorporated)
.text ...
.text ace.dll!ACEInitialize + FFFFC91E 05001000 16 Bytes [B9, 39, 73, 2C, 75, 6B, 8D, ...]
.text ace.dll!ACEInitialize + FFFFC930 05001012 76 Bytes CALL 05000361 \Program Files\Adobe\Acrobat 8.0\Acrobat\ace.dll (Adobe Color Engine/Adobe Systems Incorporated)
.text ace.dll!ACEInitialize + FFFFC97D 0500105F 53 Bytes [8B, F8, 8B, C1, C1, E9, 02, ...]
.text ace.dll!ACEInitialize + FFFFC9B3 05001095 3 Bytes [8B, 43, 20] {MOV EAX, [EBX+0x20]}
.text ace.dll!ACEInitialize + FFFFC9B7 05001099 19 Bytes [4D, 1C, 89, 01, 53, E8, CB, ...]
.text ...
.text ace.dll!ACETerminate + D 05004610 4 Bytes [FF, 85, C0, 75]
.text ace.dll!ACETerminate + 12 05004615 7 Bytes [6A, 08, 58, EB, 7E, 57, 6A]
.text ace.dll!ACETerminate + 1A 0500461D 60 Bytes [6A, 01, 6A, 00, 68, A8, 52, ...]
.text ace.dll!ACEInitDelayed + 18 0500465A 147 Bytes CALL 8A77D870
.text ace.dll!ACEInitialize + C 050046EE 19 Bytes [61, 00, 74, 00, 69, 00, 6F, ...]
.text ace.dll!ACEInitialize + 20 05004702 11 Bytes [69, 00, 6F, 00, 6E, 00, 54, ...]
.text ace.dll!ACEInitialize + 2C 0500470E 1 Byte [65]
.text ace.dll!ACEInitialize + 2C 0500470E 12 Bytes [65, 00, 00, 00, 90, 90, 90, ...]
.text ace.dll!ACEInitialize + 3A 0500471C 76 Bytes [68, 98, 56, 98, 77, E8, 9E, ...]
.text ...
.text KemXML.dll!?ms_rgbBackground@CXMLDialog@@1KA + FFFF1DC0 10901000 38 Bytes CALL 1090E51D \WINDOWS\system32\KemXML.dll (Logitech XML Support (UNICODE)/Logitech, Inc.)
.text KemXML.dll!?ms_rgbBackground@CXMLDialog@@1KA + FFFF1DE8 10901028 22 Bytes [75, 17, 8B, 4C, 24, 18, 8B, ...]
.text KemXML.dll!?ms_rgbBackground@CXMLDialog@@1KA + FFFF1DFF 1090103F 260 Bytes [EB, 84, 5E, 5B, 5F, B8, 1B, ...]
.text KemXML.dll!?ms_rgbBackground@CXMLDialog@@1KA + FFFF1F04 10901144 63 Bytes [53, 6A, 1F, 6A, 20, 51, E8, ...]
.text KemXML.dll!?ms_rgbBackground@CXMLDialog@@1KA + FFFF1F44 10901184 95 Bytes [5F, 8B, C6, 5E, 5D, 5B, 83, ...]
.text ...
.text KemXML.dll!?FormatMarkupString@CXMLParser@@QAEHPAVCOXParserElement@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + D 1090288D 34 Bytes [74, 7B, 85, ED, 74, 77, 83, ...]
.text KemXML.dll!?FormatMarkupString@CXMLParser@@QAEHPAVCOXParserElement@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 30 109028B0 63 Bytes [FF, 8B, F0, 83, C4, 08, 85, ...]
.text KemXML.dll!?FormatMarkupString@CXMLParser@@QAEHPAVCOXParserElement@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 70 109028F0 51 Bytes [F0, EB, 1C, 8B, 57, 04, 8B, ...]
.text KemXML.dll!?FormatMarkupString@CXMLParser@@QAEHPAVCOXParserElement@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + A4 10902924 80 Bytes [00, 83, C4, 04, C7, 47, 24, ...]
.text KemXML.dll!?FormatMarkupString@CXMLParser@@QAEHPAVCOXParserElement@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + F5 10902975 1 Byte [44]
.text KemXML.dll!?FormatMarkupString@CXMLParser@@QAEHPAVCOXParserElement@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + F5 10902975 27 Bytes [44, 24, 20, 50, 8D, 4C, 24, ...]
.text KemXML.dll!?FormatMarkupString@CXMLParser@@QAEHPAVCOXParserElement@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 111 10902991 7 Bytes CALL 10902030 \WINDOWS\system32\KemXML.dll (Logitech XML Support (UNICODE)/Logitech, Inc.)
.text KemXML.dll!?FormatMarkupString@CXMLParser@@QAEHPAVCOXParserElement@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 119 10902999 140 Bytes [20, 00, 8B, F0, 75, 2B, 85, ...]
.text KemXML.dll!?FormatMarkupString@CXMLParser@@QAEHPAVCOXParserElement@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 1A6 10902A26 1 Byte [6C]
.text KemXML.dll!?FormatMarkupString@CXMLParser@@QAEHPAVCOXParserElement@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 1A6 10902A26 251 Bytes [6C, 24, 18, 56, 57, 8B, 7C, ...]
.text KemXML.dll!?FindDialogElement@CXMLCustom@@QAEPAVCOXParserElement@@H@Z + 3 10902B23 32 Bytes [20, 50, 8D, 4C, 24, 14, 51, ...]
.text KemXML.dll!?RelayTooltipEvent@CXMLCustom@@QAEXPAUtagMSG@@@Z + 4 10902B44 55 Bytes [24, 20, 00, 8B, F0, 75, 2B, ...]
.text KemXML.dll!?RelayTooltipEvent@CXMLCustom@@QAEXPAUtagMSG@@@Z + 3C 10902B7C 65 Bytes [04, 8B, 42, 18, 8B, 48, 68, ...]
.text KemXML.dll!?RelayTooltipEvent@CXMLCustom@@QAEXPAUtagMSG@@@Z + 80 10902BC0 338 Bytes [83, EC, 08, 53, 55, 8B, 6C, ...]
.text KemXML.dll!?RelayTooltipEvent@CXMLCustom@@QAEXPAUtagMSG@@@Z + 1D3 10902D13 5 Bytes [F0, EB, 1D, 85, F6]
.text KemXML.dll!?RelayTooltipEvent@CXMLCustom@@QAEXPAUtagMSG@@@Z + 1D9 10902D19 1 Byte [19]
.text ...
.text KemXML.dll!?EnumChildMoveProc@CXMLCustom@@KGHPAUHWND__@@J@Z + 86 10903136 19 Bytes [74, 24, 1C, 8B, 06, 83, F8, ...]
.text KemXML.dll!?EnumChildMoveProc@CXMLCustom@@KGHPAUHWND__@@J@Z + 9A 1090314A 32 Bytes [14, 00, 00, 00, 00, C7, 44, ...]
.text KemXML.dll!?EnumChildMoveProc@CXMLCustom@@KGHPAUHWND__@@J@Z + BB 1090316B 9 Bytes [7C, 24, 1C, 8B, 47, 48, 8B, ...] {JL 0x26; SBB AL, 0x8b; INC EDI; DEC EAX; MOV EDX, [ESI+0x4]}
.text KemXML.dll!?EnumChildMoveProc@CXMLCustom@@KGHPAUHWND__@@J@Z + C5 10903175 37 Bytes [40, 04, 8D, 4C, 24, 0C, 51, ...]
.text KemXML.dll!?EnumChildMoveProc@CXMLCustom@@KGHPAUHWND__@@J@Z + EB 1090319B 5 Bytes [10, 52, 68, 00, 47]
.text ...
.text KemXML.dll!?BuildPopupMenu@CXMLCustom@@IAEHPAVCOXParserElement@@PAVCMenu@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 25 10903275 14 Bytes [8D, 54, 24, 24, 52, 89, 44, ...] {LEA EDX, [ESP+0x24]; PUSH EDX; MOV [ESP+0x34], EAX; MOV EAX, [EDI+0x68]; PUSH 0x2}
.text KemXML.dll!?BuildPopupMenu@CXMLCustom@@IAEHPAVCOXParserElement@@PAVCMenu@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 35 10903285 2 Bytes CALL 10908A21 \WINDOWS\system32\KemXML.dll (Logitech XML Support (UNICODE)/Logitech, Inc.)
.text KemXML.dll!?BuildPopupMenu@CXMLCustom@@IAEHPAVCOXParserElement@@PAVCMenu@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 3A 1090328A 10 Bytes [F0, 83, C4, 0C, 3B, F3, 75, ...]
.text KemXML.dll!?BuildPopupMenu@CXMLCustom@@IAEHPAVCOXParserElement@@PAVCMenu@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 45 10903295 52 Bytes [14, 39, 18, 0F, 86, 29, 01, ...]
.text KemXML.dll!?BuildPopupMenu@CXMLCustom@@IAEHPAVCOXParserElement@@PAVCMenu@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 7B 109032CB 21 Bytes [34, 8B, 49, 6A, 57, 89, 7C, ...]
.text KemXML.dll!?BuildPopupMenu@CXMLCustom@@IAEHPAVCOXParserElement@@PAVCMenu@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 91 109032E1 26 Bytes [00, 8B, 44, 24, 14, 3B, C3, ...]
.text KemXML.dll!?BuildPopupMenu@CXMLCustom@@IAEHPAVCOXParserElement@@PAVCMenu@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + AC 109032FC 69 Bytes [C3, 33, F6, 90, 8B, 4C, 24, ...]
.text KemXML.dll!?BuildPopupMenu@CXMLCustom@@IAEHPAVCOXParserElement@@PAVCMenu@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + F2 10903342 13 Bytes [F0, 83, C4, 14, 3B, F3, 75, ...]
.text KemXML.dll!?BuildPopupMenu@CXMLCustom@@IAEHPAVCOXParserElement@@PAVCMenu@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 100 10903350 246 Bytes [8B, 44, 24, 38, 50, E8, B6, ...]
.text KemXML.dll!?BuildPopupMenu@CXMLCustom@@IAEHPAVCOXParserElement@@PAVCMenu@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 1F7 10903447 13 Bytes [55, 04, 8B, 44, 24, 1C, 8B, ...]
.text KemXML.dll!?BuildPopupMenu@CXMLCustom@@IAEHPAVCOXParserElement@@PAVCMenu@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 206 10903456 122 Bytes [50, 51, 0B, D6, 52, 8B, C3, ...]
.text KemXML.dll!?BuildPopupMenu@CXMLCustom@@IAEHPAVCOXParserElement@@PAVCMenu@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 281 109034D1 26 Bytes [F0, 77, A6, 03, C3, CC, CC, ...]
.text KemXML.dll!?WindowProc@CXMLCustom@@MAEJIIJ@Z 109034F0 12 Bytes [33, C0, 83, 7C, 24, 08, 21, ...]
.text KemXML.dll!?WindowProc@CXMLCustom@@MAEJIIJ@Z + D 109034FD 137 Bytes [00, C3, 8B, 4C, 24, 0C, 83, ...]
.text KemXML.dll!?WindowProc@CXMLCustom@@MAEJIIJ@Z + A0 10903590 27 Bytes [B8, 3C, BA, C9, 03, C3, CC, ...]
.text KemXML.dll!?WindowProc@CXMLCustom@@MAEJIIJ@Z + C0 109035B0 44 Bytes [B8, 64, BA, C9, 03, C3, CC, ...]
.text KemXML.dll!?WindowProc@CXMLCustom@@MAEJIIJ@Z + F0 109035E0 75 Bytes [B8, A0, BA, C9, 03, C3, CC, ...]
.text ...
.text KemXML.dll!??0CXMLCustom@@QAE@AAVCXMLParser@@@Z 10903710 27 Bytes [83, EC, 0C, 56, 8B, 74, 24, ...]
.text KemXML.dll!??0CXMLCustom@@QAE@AAVCXMLParser@@@Z + 1C 1090372C 170 Bytes [18, 57, 8B, 7C, 24, 20, 56, ...]
.text KemXML.dll!??0CXMLCustom@@QAE@AAVCXMLParser@@@Z + C7 109037D7 16 Bytes CALL 1090D72D \WINDOWS\system32\KemXML.dll (Logitech XML Support (UNICODE)/Logitech, Inc.)
.text KemXML.dll!??0CXMLCustom@@QAE@AAVCXMLParser@@@Z + D8 109037E8 27 Bytes [00, 00, 8B, 54, 24, 0C, 53, ...]
.text KemXML.dll!??0CXMLCustom@@QAE@AAVCXMLParser@@@Z + F4 10903804 26 Bytes [00, 00, 6A, 04, 8D, 44, 24, ...]
.text ...
.text KemXML.dll!??1CXMLCustom@@UAE@XZ + 1F 1090385F 32 Bytes [85, C0, 75, 7D, 8B, 54, 24, ...]
.text KemXML.dll!??1CXMLCustom@@UAE@XZ + 40 10903880 15 Bytes [1C, 51, 6A, 24, 6A, 14, 56, ...]
.text KemXML.dll!??1CXMLCustom@@UAE@XZ + 50 10903890 18 Bytes [83, C4, 18, 85, C0, 75, 13, ...]
.text KemXML.dll!??1CXMLCustom@@UAE@XZ + 63 109038A3 25 Bytes [83, C4, 0C, 85, C0, 75, 36, ...]
.text KemXML.dll!??1CXMLCustom@@UAE@XZ + 7D 109038BD 5 Bytes [24, 2C, E8, 6C, 9E]
.text ...
.text KemXML.dll!?BuildMenu@CXMLCustom@@QAEHIPAVCMenu@@@Z + 10 10903B30 121 Bytes [5E, 5F, 8B, C3, 5B, C3, 5F, ...]
.text KemXML.dll!?BuildMenu@CXMLCustom@@QAEHIPAVCMenu@@@Z + 8A 10903BAA 20 Bytes [16, 83, F9, 0A, 74, 06, B8, ...]
.text KemXML.dll!?BuildMenu@CXMLCustom@@QAEHIPAVCMenu@@@Z + A0 10903BC0 69 Bytes [C3, 8B, 54, 24, 0C, C7, 02, ...]
.text KemXML.dll!?BuildMenu@CXMLCustom@@QAEHIPAVCMenu@@@Z + E6 10903C06 58 Bytes [F7, D9, 1B, C9, 81, E1, 1B, ...]
.text KemXML.dll!?BuildMenu@CXMLCustom@@QAEHIPAVCMenu@@@Z + 122 10903C42 71 Bytes [46, 10, 89, 87, 8C, 00, 00, ...]
.text ...
.text KemXML.dll!?HookWindow@CXMLCustom@@QAEXPAVCWnd@@I@Z + 1C 10903F7C 61 Bytes [48, 20, 8B, 4C, 24, 0C, 89, ...]
.text KemXML.dll!?HookWindow@CXMLCustom@@QAEXPAVCWnd@@I@Z + 5A 10903FBA 33 Bytes [83, C4, 04, 33, C0, C3, 8B, ...]
.text KemXML.dll!?HookWindow@CXMLCustom@@QAEXPAVCWnd@@I@Z + 7C 10903FDC 149 Bytes [89, 11, C3, CC, 8B, 4C, 24, ...]
.text KemXML.dll!?HookWindow@CXMLCustom@@QAEXPAVCWnd@@I@Z + 112 10904072 149 Bytes [4C, 24, 04, 8B, 49, 1C, 8B, ...]
.text KemXML.dll!?HookWindow@CXMLCustom@@QAEXPAVCWnd@@I@Z + 1A8 10904108 61 Bytes [C3, CC, CC, CC, CC, CC, CC, ...]
.text ...
.text KemXML.dll!?LoadStringW@CXMLCustom@@QAE?AV?$CStdStr@_W@@ABV2@@Z + 20 10904F40 24 Bytes [00, 89, 46, 69, 89, 46, 6D, ...]
.text KemXML.dll!?LoadStringW@CXMLCustom@@QAE?AV?$CStdStr@_W@@ABV2@@Z + 39 10904F59 67 Bytes [89, 86, 85, 00, 00, 00, 6A, ...]
.text KemXML.dll!?SetClassBackgroundColor@CXMLDialog@@QAEXK@Z + D 10904F9D 7 Bytes [00, 89, 86, A8, 00, 00, 00]
.text KemXML.dll!?DoModal@CXMLDialog@@UAEHXZ + 5 10904FA5 4 Bytes [86, AC, 00, 00]
.text KemXML.dll!?DoModal@CXMLDialog@@UAEHXZ + A 10904FAA 22 Bytes [88, 86, B0, 00, 00, 00, 89, ...]
.text KemXML.dll!?DoModal@CXMLDialog@@UAEHXZ + 22 10904FC2 5 Bytes [89, 86, BD, 00, 00]
.text KemXML.dll!?DoModal@CXMLDialog@@UAEHXZ + 28 10904FC8 84 Bytes [89, 86, C1, 00, 00, 00, 89, ...]
.text KemXML.dll!?DoModal@CXMLDialog@@UAEHXZ + 7D 1090501D 13 Bytes [68, 1C, 8B, 55, 04, 56, 8B, ...] {PUSH 0x4558b1c; PUSH ESI; MOV ESI, ECX; PUSH EDI; MOV [ESP+0xc], EAX}
.text ...
.text KemXML.dll!??1CXMLDialog@@UAE@XZ + C 1090506C 43 Bytes [8D, 4C, 24, 10, 8B, 32, 3B, ...]
.text KemXML.dll!??1CXMLDialog@@UAE@XZ + 38 10905098 85 Bytes [83, C2, 01, 85, C0, 74, 46, ...]
.text KemXML.dll!??1CXMLDialog@@UAE@XZ + 8F 109050EF 12 Bytes [8B, 4C, 24, 70, 83, E1, 01, ...] {MOV ECX, [ESP+0x70]; AND ECX, 0x1; PUSH 0x6c; MOV [EBP+0x24], ECX}
.text KemXML.dll!??1CXMLDialog@@UAE@XZ + 9C 109050FC 142 Bytes [A0, DD, FE, FF, 8B, E8, 83, ...]
.text KemXML.dll!??0CXMLDialog@@QAE@AAVCXMLParser@@IPAVCWnd@@@Z + 5D 1090518D 98 Bytes [8D, 4C, 24, 30, 8B, C7, 8A, ...]
.text KemXML.dll!?OnInitDialog@CXMLDialog@@MAEHXZ + 20 109051F0 32 Bytes [77, F1, 6A, 11, 8D, 7D, 53, ...]
.text KemXML.dll!?OnInitDialog@CXMLDialog@@MAEHXZ + 41 10905211 66 Bytes [00, 6A, 11, 8D, 7D, 42, BA, ...]
.text KemXML.dll!?OnCtlColor@CXMLDialog@@QAEPAUHBRUSH__@@PAVCDC@@PAVCWnd@@I@Z + 14 10905254 6 Bytes [46, 20, 85, C0, 74, 23]
.text KemXML.dll!?OnCtlColor@CXMLDialog@@QAEPAUHBRUSH__@@PAVCDC@@PAVCWnd@@I@Z + 1B 1090525B 24 Bytes [40, 68, 85, C0, 74, 09, 50, ...]
.text KemXML.dll!?OnCtlColor@CXMLDialog@@QAEPAUHBRUSH__@@PAVCDC@@PAVCWnd@@I@Z + 34 10905274 55 Bytes [C4, 04, C7, 46, 20, 00, 00, ...]
.text KemXML.dll!?OnCtlColor@CXMLDialog@@QAEPAUHBRUSH__@@PAVCDC@@PAVCWnd@@I@Z + 6C 109052AC 29 Bytes [10, DC, FE, FF, 83, C4, 04, ...]
.text KemXML.dll!?GetMessageMap@CXMLDialog@@MBEPBUAFX_MSGMAP@@XZ + A 109052CA 58 Bytes CALL 1022B330
.text KemXML.dll!?GetMessageMap@CXMLDialog@@MBEPBUAFX_MSGMAP@@XZ + 45 10905305 20 Bytes CALL 10904DC0 \WINDOWS\system32\KemXML.dll (Logitech XML Support (UNICODE)/Logitech, Inc.)
.text KemXML.dll!?GetMessageMap@CXMLDialog@@MBEPBUAFX_MSGMAP@@XZ + 5C 1090531C 82 Bytes [84, 98, 8C, 00, 00, 00, 74, ...]
.text KemXML.dll!?GetMessageMap@CXMLDialog@@MBEPBUAFX_MSGMAP@@XZ + AF 1090536F 77 Bytes [83, C4, 08, 85, C0, 75, E7, ...]
.text KemXML.dll!?GetMessageMap@CXMLDialog@@MBEPBUAFX_MSGMAP@@XZ + FD 109053BD 45 Bytes CALL 10904DBC \WINDOWS\system32\KemXML.dll (Logitech XML Support (UNICODE)/Logitech, Inc.)
.text KemXML.dll!??0CXMLParser@@QAE@XZ + 1B 109053EB 3 Bytes [01, 00, 00]
.text KemXML.dll!??0CXMLParser@@QAE@XZ + 1F 109053EF 58 Bytes [5E, 5F, C3, B8, 23, 27, 00, ...]
.text KemXML.dll!??0CXMLParser@@QAE@XZ + 5A 1090542A 64 Bytes [75, 07, B8, 1B, 27, 00, 00, ...]
.text KemXML.dll!??1CXMLParser@@UAE@XZ 10905470 30 Bytes [8B, 4C, 24, 04, 85, C9, 56, ...]
.text KemXML.dll!??1CXMLParser@@UAE@XZ + 1F 1090548F 39 Bytes [5E, C3, 8B, 54, 24, 0C, 83, ...]
.text KemXML.dll!??1CXMLParser@@UAE@XZ + 47 109054B7 34 Bytes [00, 5E, C3, B8, 21, 27, 00, ...]
.text KemXML.dll!??1CXMLParser@@UAE@XZ + 6A 109054DA 1 Byte [74]
.text KemXML.dll!??1CXMLParser@@UAE@XZ + 6A 109054DA 91 Bytes [74, 24, 10, 85, F6, 74, 2A, ...]
.text KemXML.dll!?GetPlainText@CXMLParser@@QAEPB_WPAVCOXParserElement@@@Z + 26 10905536 46 Bytes [C4, 0C, 85, C0, 74, 03, 33, ...]
.text KemXML.dll!?Write@CXMLParser@@IAEXPAXPAVCOXParserElement@@@Z + 5 10905565 16 Bytes [4C, 24, 0C, 85, C9, 74, 13, ...]
.text KemXML.dll!?Write@CXMLParser@@IAEXPAXPAVCOXParserElement@@@Z + 16 10905576 136 Bytes [00, 33, C0, C3, 83, C0, 20, ...]
.text KemXML.dll!?Write@CXMLParser@@IAEXPAXPAVCOXParserElement@@@Z + A0 10905600 22 Bytes [0C, 89, 37, 5E, 8B, 44, 24, ...]
.text KemXML.dll!?Write@CXMLParser@@IAEXPAXPAVCOXParserElement@@@Z + C0 10905620 46 Bytes [8B, 54, 24, 08, 33, C0, 83, ...]
.text KemXML.dll!?Write@CXMLParser@@IAEXPAXPAVCOXParserElement@@@Z + EF 1090564F 106 Bytes [95, 44, 56, 7F, 03, 8D, 41, ...]
.text ...
.text KemXML.dll!?ExpandDelimiter@CXMLParser@@SAXPB_W_WAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + CD 10905A9D 30 Bytes CALL 431469A3
.text KemXML.dll!?ExpandDelimiter@CXMLParser@@SAXPB_W_WAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + ED 10905ABD 3 Bytes [20, 83, 38]
.text KemXML.dll!?ExpandDelimiter@CXMLParser@@SAXPB_W_WAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + F1 10905AC1 26 Bytes [0F, 84, 14, 02, 00, 00, 8B, ...]
.text KemXML.dll!?ExpandDelimiter@CXMLParser@@SAXPB_W_WAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 10C 10905ADC 45 Bytes [15, D0, FA, 96, 03, 83, C4, ...]
.text KemXML.dll!?ExpandDelimiter@CXMLParser@@SAXPB_W_WAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 13A 10905B0A 1 Byte [A4]
.text KemXML.dll!?ExpandDelimiter@CXMLParser@@SAXPB_W_WAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 13A 10905B0A 80 Bytes [A4, 24, 00, 00, 00, 00, 8B, ...]
.text KemXML.dll!?ExpandDelimiter@CXMLParser@@SAXPB_W_WAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 18B 10905B5B 6 Bytes [C0, 01, 84, D2, 75, F7] {ROL BYTE [ECX], 0x84; SAL BYTE [EBP-0x9], CL}
.text KemXML.dll!?ExpandDelimiters@CXMLParser@@SAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 2 10905B62 71 Bytes [FD, 2B, C1, 8B, F1, 83, C7, ...]
.text KemXML.dll!?GetFullPath@CXMLParser@@QAEPB_WPB_W@Z + A 10905BAA 14 Bytes [8D, 44, 24, 18, 6A, 3B, 50, ...]
.text KemXML.dll!?GetFullPath@CXMLParser@@QAEPB_WPB_W@Z + 19 10905BB9 31 Bytes [85, C0, 0F, 8F, 4F, FF, FF, ...]
.text KemXML.dll!?GetFullPath@CXMLParser@@QAEPB_WPB_W@Z + 3A 10905BDA 11 Bytes [8B, 44, 24, 20, 83, 38, 00, ...]
.text KemXML.dll!?GetFullPath@CXMLParser@@QAEPB_WPB_W@Z + 47 10905BE7 154 Bytes [8B, D8, 8D, A4, 24, 00, 00, ...]
.text KemXML.dll!?GetFullPath@CXMLParser@@QAEPB_WPB_W@Z + E2 10905C82 87 Bytes [83, C0, 01, 84, D2, 75, F7, ...]
.text ...
.text KemXML.dll!?FindElement@CXMLParser@@QAEPAVCOXParserElement@@PB_W00PAV2@@Z + F3 10905F53 98 Bytes [59, C3, 8B, 4C, 24, 04, 8B, ...]
.text KemXML.dll!?FindElement@CXMLParser@@QAEPAVCOXParserElement@@PB_WHPAV2@@Z + 56 10905FB6 31 Bytes [14, 55, 8B, 6C, 24, 14, 57, ...]
.text KemXML.dll!?FindElement@CXMLParser@@QAEPAVCOXParserElement@@PB_WHPAV2@@Z + 76 10905FD6 7 Bytes [5B, C3, A1, E0, CC, DE, 03] {POP EBX; RET ; MOV EAX, [0x3decce0]}
.text KemXML.dll!?FindElement@CXMLParser@@QAEPAVCOXParserElement@@PB_WHPAV2@@Z + 80 10905FE0 46 Bytes [10, 56, 8B, 31, 03, 74, 24, ...]
.text KemXML.dll!?FindElement@CXMLParser@@QAEPAVCOXParserElement@@PB_WHPAV2@@Z + B0 10906010 130 Bytes [A1, E0, CC, DE, 03, 85, C0, ...]
.text KemXML.dll!?FindElement@CXMLParser@@QAEPAVCOXParserElement@@PB_WHPAV2@@Z + 133 10906093 105 Bytes [D0, 83, C4, 10, 8B, 5C, 24, ...]
.text KemXML.dll!?ParseIncludeFile@CXMLParser@@QAEHPB_WPAVCOXParserElement@@@Z + 1D 109060FD 79 Bytes [D2, 75, E4, 33, C0, EB, 05, ...]
.text KemXML.dll!?ParseIncludeFile@CXMLParser@@QAEHPB_WPAVCOXParserElement@@@Z + 6E 1090614E 126 Bytes [8B, F8, 83, C4, 08, 85, FF, ...]
.text KemXML.dll!?ParseIncludeFile@CXMLParser@@QAEHPB_WPAVCOXParserElement@@@Z + ED 109061CD 36 Bytes [83, C4, 0C, 01, 3E, 5F, 5E, ...]
.text KemXML.dll!?ParseIncludeFile@CXMLParser@@QAEHPB_WPAVCOXParserElement@@@Z + 112 109061F2 158 Bytes [24, 56, 57, 8B, 79, 04, 33, ...]
.text KemXML.dll!?ParseIncludeFile@CXMLParser@@QAEHPB_WPAVCOXParserElement@@@Z + 1B1 10906291 11 Bytes [1C, 8B, 1C, 91, 8B, 0B, 8B, ...] {SBB AL, 0x8b; SBB AL, 0x91; MOV ECX, [EBX]; MOV EAX, ECX; LEA ESI, [EAX+0x1]}
.text ...
.text KemXML.dll!?FindElements@CXMLParser@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_W00PAVCOXParserElement@@@Z + 1C 109067FC 3 Bytes [0C, 01, 74]
.text KemXML.dll!?FindElements@CXMLParser@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_W00PAVCOXParserElement@@@Z + 20 10906800 50 Bytes [10, 8B, 4C, 24, 18, 8B, 11, ...]
.text KemXML.dll!?FindElements@CXMLParser@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_W00PAVCOXParserElement@@@Z + 53 10906833 110 Bytes [83, C4, 0C, 01, 74, 24, 10, ...]
.text KemXML.dll!?FindElements@CXMLParser@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_W00PAVCOXParserElement@@@Z + C2 109068A2 116 Bytes JMP 109065E7 \WINDOWS\system32\KemXML.dll (Logitech XML Support (UNICODE)/Logitech, Inc.)
.text KemXML.dll!?FindElements@CXMLParser@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_W00PAVCOXParserElement@@@Z + 137 10906917 3 Bytes CALL 108F2EC1
.text KemXML.dll!?FindElements@CXMLParser@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_W00PAVCOXParserElement@@@Z + 13C 1090691C 35 Bytes [C4, 04, 5F, 8B, C6, 5E, 5D, ...]
.text KemXML.dll!?FindElements@CXMLParser@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_W00PAVCOXParserElement@@@Z + 160 10906940 22 Bytes [75, 08, 5F, B8, 11, 27, 00, ...]
.text KemXML.dll!?FindElements@CXMLParser@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_W00PAVCOXParserElement@@@Z + 177 10906957 1 Byte [EA]
.text KemXML.dll!?FindElements@CXMLParser@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_W00PAVCOXParserElement@@@Z + 177 10906957 6 Bytes JMP 61E85150
.text KemXML.dll!?FindElements@CXMLParser@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_W00PAVCOXParserElement@@@Z + 17E 1090695E 24 Bytes [00, 83, C4, 08, 83, F8, FF, ...]
.text KemXML.dll!?FindElements@CXMLParser@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_W00PAVCOXParserElement@@@Z + 197 10906977 57 Bytes [7D, 0F, 8B, 49, 04, 8B, 54, ...]
.text KemXML.dll!?BuildAliases@CXMLParser@@IAEHXZ + 31 109069B1 6 Bytes [49, 04, 8B, 09, 89, 4A]
.text KemXML.dll!?BuildAliases@CXMLParser@@IAEHXZ + 38 109069B8 24 Bytes [C3, CC, CC, CC, CC, CC, CC, ...]
.text KemXML.dll!?BuildAliases@CXMLParser@@IAEHXZ + 51 109069D1 227 Bytes [00, C3, 8B, 49, 10, 85, C9, ...]
.text KemXML.dll!?BuildAliases@CXMLParser@@IAEHXZ + 135 10906AB5 217 Bytes [83, C4, 10, 8B, CB, 8D, 9B, ...]
.text KemXML.dll!?BuildAliases@CXMLParser@@IAEHXZ + 20F 10906B8F 176 Bytes [00, 00, 89, 6C, 24, 18, E9, ...]
.text ...
.text KemXML.dll!?ParseCustomizations@CXMLParser@@QAEHXZ + 8C 10906EBC 5 Bytes [8B, F0, 83, C4, 04] {MOV ESI, EAX; ADD ESP, 0x4}
.text KemXML.dll!?ParseCustomizations@CXMLParser@@QAEHXZ + 92 10906EC2 6 Bytes [F6, 75, 23, BF, 15, 27]
.text KemXML.dll!?ParseCustomizations@CXMLParser@@QAEHXZ + 99 10906EC9 73 Bytes [00, 85, F6, 74, 09, 56, E8, ...]
.text KemXML.dll!?ParseCustomizations@CXMLParser@@QAEHXZ + E3 10906F13 48 Bytes [2F, 39, 43, 0C, 75, 10, 68, ...]
.text KemXML.dll!?ParseCustomizations@CXMLParser@@QAEHXZ + 114 10906F44 75 Bytes [55, 00, 89, 72, 08, 89, 5E, ...]
.text ...
.text KemXML.dll!?SetCustomizationFile@CXMLParser@@QAE_NPB_W0@Z + 1F 1090703F 82 Bytes [00, 83, C4, 04, 8B, E8, C7, ...]
.text KemXML.dll!??0CXMLPropertyPage@@QAE@AAVCXMLParser@@I@Z + 32 10907092 52 Bytes [5B, C3, 83, F9, 02, 75, 14, ...]
.text KemXML.dll!??0CXMLPropertyPage@@QAE@AAVCXMLParser@@I@Z + 67 109070C7 3 Bytes CALL 108F2EA1
.text KemXML.dll!??0CXMLPropertyPage@@QAE@AAVCXMLParser@@I@Z + 6B 109070CB 56 Bytes [83, C4, 04, 85, C0, 75, 09, ...]
.text KemXML.dll!??0CXMLPropertyPage@@QAE@AAVCXMLParser@@I@Z + A4 10907104 92 Bytes [74, 24, 10, 8B, 56, 04, 85, ...]
.text KemXML.dll!??1CXMLPropertyPage@@UAE@XZ + 22 10907162 4 Bytes [EB, BF, 8B, 5C]
.text KemXML.dll!??1CXMLPropertyPage@@UAE@XZ + 27 10907167 35 Bytes [1C, 8B, C3, 8D, 78, 01, 8D, ...]
.text KemXML.dll!??1CXMLPropertyPage@@UAE@XZ + 4B 1090718B 12 Bytes [8B, 4E, 04, 83, C4, 04, C7, ...]
.text KemXML.dll!??1CXMLPropertyPage@@UAE@XZ + 58 10907198 42 Bytes CALL 108F2E9C
.text KemXML.dll!?PreTranslateMessage@CXMLPropertyPage@@MAEHPAUtagMSG@@@Z + 3 109071C3 57 Bytes [CB, 8A, 01, 88, 02, 83, C1, ...]
.text KemXML.dll!?OnInitDialog@CXMLPropertyPage@@MAEHXZ + E 109071FE 8 Bytes [8B, 46, 04, 85, C0, 74, 10, ...] {MOV EAX, [ESI+0x4]; TEST EAX, EAX; JZ 0x17; PUSH EAX}
.text KemXML.dll!?OnInitDialog@CXMLPropertyPage@@MAEHXZ + 17 10907207 3 Bytes CALL 108F2EC1
.text KemXML.dll!?OnInitDialog@CXMLPropertyPage@@MAEHXZ + 1B 1090720B 190 Bytes [83, C4, 04, C7, 46, 04, 00, ...]
.text KemXML.dll!??0CXMLPropertySheet@@QAE@AAVCXMLCustom@@IPAVCWnd@@I@Z + 1A 109072CA 1 Byte [54]
.text KemXML.dll!??0CXMLPropertySheet@@QAE@AAVCXMLCustom@@IPAVCWnd@@I@Z + 1D 109072CD 46 Bytes CALL 10907C1F \WINDOWS\system32\KemXML.dll (Logitech XML Support (UNICODE)/Logitech, Inc.)
.text KemXML.dll!?GetMessageMap@CXMLPropertySheet@@MBEPBUAFX_MSGMAP@@XZ 10907300 55 Bytes [56, 8B, 74, 24, 08, 57, 33, ...]
.text KemXML.dll!?DoModal@CXMLPropertySheet@@UAEHXZ + 28 10907338 49 Bytes [46, 0C, 3B, C7, 74, 11, 68, ...]
.text KemXML.dll!?DoModal@CXMLPropertySheet@@UAEHXZ + 5A 1090736A 174 Bytes [C7, 5F, 5E, C3, 5F, B8, 21, ...]
.text KemXML.dll!?DoModal@CXMLPropertySheet@@UAEHXZ + 109 10907419 296 Bytes [0F, 84, 8F, 01, 00, 00, 6A, ...]
.text KemXML.dll!?DoModal@CXMLPropertySheet@@UAEHXZ + 232 10907542 114 Bytes JMP 10907786 \WINDOWS\system32\KemXML.dll (Logitech XML Support (UNICODE)/Logitech, Inc.)
.text KemXML.dll!?DoModal@CXMLPropertySheet@@UAEHXZ + 2A5 109075B5 179 Bytes [8B, C8, 33, C0, 83, C4, 04, ...]
.text ...
.text kemutb.dll!?dwBytesReturned@COXWatchedDir@@1KA + FFFDB2FC 10801000 13 Bytes [FF, 15, 8C, F7, 96, 03, 85, ...]
.text kemutb.dll!?dwBytesReturned@COXWatchedDir@@1KA + FFFDB30A 1080100E 43 Bytes [8D, 45, B8, 50, 8D, 8E, 64, ...]
.text kemutb.dll!?dwBytesReturned@COXWatchedDir@@1KA + FFFDB336 1080103A 15 Bytes [78, FE, FF, FF, 50, 8B, CF, ...]
.text kemutb.dll!?dwBytesReturned@COXWatchedDir@@1KA + FFFDB347 1080104B 76 Bytes [00, 50, C6, 45, FC, 02, FF, ...]
.text kemutb.dll!?dwBytesReturned@COXWatchedDir@@1KA + FFFDB394 10801098 272 Bytes [68, 38, 1B, A5, 03, 6A, F7, ...]
.text kemutb.dll!?SetPaintType@COXBackgroundPainter@@QAEXW4PaintType@@H@Z + 29 108011A9 60 Bytes [00, C6, 45, FC, 06, FF, 15, ...]
.text kemutb.dll!?SetBkColor@COXBackgroundPainter@@QAEXKH@Z + 16 108011E6 42 Bytes [FF, 68, FC, 1A, A5, 03, 6A, ...]
.text kemutb.dll!?GetBkColor@COXBackgroundPainter@@QBEKXZ + 1 10801211 46 Bytes JMP 10800FAE \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?SetOriginWnd@COXBackgroundPainter@@QAEXPAVCWnd@@H@Z + 21 10801241 188 Bytes [C7, 06, C0, 1B, A5, 03, FF, ...]
.text kemutb.dll!??1COXBackgroundPainter@@UAE@XZ + E 108012FE 43 Bytes [AE, C7, 03, 33, C5, 89, 85, ...]
.text kemutb.dll!??1COXBackgroundPainter@@UAE@XZ + 3A 1080132A 26 Bytes CALL 107FE5BB
.text kemutb.dll!??1COXBackgroundPainter@@UAE@XZ + 55 10801345 10 Bytes CALL 1022B32E
.text kemutb.dll!??1COXBackgroundPainter@@UAE@XZ + 61 10801351 73 Bytes [00, C9, C2, 04, 00, 8D, 4D, ...]
.text kemutb.dll!??1COXBackgroundPainter@@UAE@XZ + AB 1080139B 29 Bytes [6A, FD, EB, D6, 53, 8D, 4D, ...]
.text ...
.text kemutb.dll!?GetFirstPainter@COXBackgroundPainterOrganizer@@QBEPAVCOXBackgroundPainter@@AAPAU__POSITION@@@Z + 36 108016A6 10 Bytes [5E, 23, 6A, 10, 53, E8, DF, ...] {POP ESI; AND EBP, [EDX+0x10]; PUSH EBX; CALL 0xffffffffffffc0e9}
.text kemutb.dll!?GetFirstPainter@COXBackgroundPainterOrganizer@@QBEPAVCOXBackgroundPainter@@AAPAU__POSITION@@@Z + 41 108016B1 190 Bytes [75, 10, 6A, 10, 53, E8, 11, ...]
.text kemutb.dll!??0COXBackgroundPainter@@QAE@XZ + 20 10801770 12 Bytes [8B, 86, DC, 02, 00, 00, F6, ...]
.text kemutb.dll!??0COXBackgroundPainter@@QAE@XZ + 2E 1080177E 54 Bytes [00, 53, 57, 68, 64, 1C, A5, ...]
.text kemutb.dll!??0COXBackgroundPainter@@QAE@XZ + 65 108017B5 19 Bytes [4D, 0F, B7, C0, 50, 53, 8D, ...] {DEC EBP; MOVZX EAX, AX; PUSH EAX; PUSH EBX; LEA EAX, [EBP-0x3c]; PUSH EAX; LEA ECX, [EBP-0x20]; CALL [0x396f74c]}
.text kemutb.dll!??0COXBackgroundPainter@@QAE@XZ + 79 108017C9 14 Bytes [86, DC, 02, 00, 00, 33, FF, ...]
.text kemutb.dll!??0COXBackgroundPainter@@QAE@XZ + 88 108017D8 53 Bytes [FF, 15, 94, F6, 96, 03, 83, ...]
.text kemutb.dll!?Detach@COXBackgroundPainter@@QAEXH@Z + 2E 1080180E 353 Bytes [4D, FC, 8B, 45, C0, 5F, 33, ...]
.text kemutb.dll!?GetPaintableRect@COXBackgroundPainter@@IBE?AVCRect@@PAVCWnd@@@Z + 90 10801970 20 Bytes [3B, DD, 74, 55, 8B, 2D, 28, ...]
.text kemutb.dll!?GetPaintableRect@COXBackgroundPainter@@IBE?AVCRect@@PAVCWnd@@@Z + A5 10801985 1 Byte [68]
.text kemutb.dll!?GetPaintableRect@COXBackgroundPainter@@IBE?AVCRect@@PAVCWnd@@@Z + A5 10801985 96 Bytes [68, C0, 1C, A5, 03, 68, 4C, ...]
.text kemutb.dll!?DoRealizePalette@COXBackgroundPainter@@IAEIHH@Z + 26 108019E6 8 Bytes [53, 68, 82, 00, 00, 00, FF, ...] {PUSH EBX; PUSH 0x82; PUSH DWORD [ESI]}
.text kemutb.dll!?DoRealizePalette@COXBackgroundPainter@@IAEIHH@Z + 2F 108019EF 3 Bytes CALL 109DBF81 \WINDOWS\system32\PortableDeviceTypes.dll (Windows Portable Device (Parameter) Types Component/Microsoft Corporation)
.text kemutb.dll!?DoRealizePalette@COXBackgroundPainter@@IAEIHH@Z + 33 108019F3 9 Bytes [55, 6A, 4C, FF, 36, E8, 83, ...]
.text kemutb.dll!?DoRealizePalette@COXBackgroundPainter@@IAEIHH@Z + 3D 108019FD 5 Bytes [55, 6A, 47, FF, 36] {PUSH EBP; PUSH 0x47; PUSH DWORD [ESI]}
.text kemutb.dll!?DoRealizePalette@COXBackgroundPainter@@IAEIHH@Z + 43 10801A03 3 Bytes CALL 109DBF81 \WINDOWS\system32\PortableDeviceTypes.dll (Windows Portable Device (Parameter) Types Component/Microsoft Corporation)
.text ...
.text kemutb.dll!?SaveState@COXBackgroundPainter@@QAEHPB_W@Z + 56 10801AF6 7 Bytes [75, 08, 8D, 86, E0, 02, 00]
.text kemutb.dll!?SaveState@COXBackgroundPainter@@QAEHPB_W@Z + 5E 10801AFE 168 Bytes [EB, 18, 8D, 47, 26, 50, 8D, ...]
.text kemutb.dll!?IsQualified@COXBackgroundPainterOrganizer@@MAEHPAVCWnd@@@Z + 37 10801BA7 120 Bytes [89, 40, 04, 8B, 01, 89, 00, ...]
.text kemutb.dll!?IsQualified@COXBackgroundPainterOrganizer@@MAEHPAVCWnd@@@Z + B0 10801C20 36 Bytes [74, 04, 8B, F9, EB, 0A, 8B, ...]
.text kemutb.dll!?IsQualified@COXBackgroundPainterOrganizer@@MAEHPAVCWnd@@@Z + D5 10801C45 31 Bytes [75, 05, 89, 78, 04, EB, 0B, ...]
.text kemutb.dll!?IsQualified@COXBackgroundPainterOrganizer@@MAEHPAVCWnd@@@Z + F5 10801C65 11 Bytes [D6, EB, 10, 8B, 07, 8B, D7, ...] {SALC ; JMP 0x13; MOV EAX, [EDI]; MOV EDX, EDI; JMP 0xd; MOV EDX, EAX}
.text kemutb.dll!?IsQualified@COXBackgroundPainterOrganizer@@MAEHPAVCWnd@@@Z + 101 10801C71 15 Bytes [02, 80, 78, 2D, 00, 74, F6, ...]
.text ...
.text kemutb.dll!?SetWallpaper@COXBackgroundPainter@@QAEHPBVCOXDIB@@H@Z + 39 10801E39 211 Bytes CALL 1022B417
.text kemutb.dll!?Attach@COXBackgroundPainter@@QAEHPAVCWnd@@PBVCOXDIB@@W4PaintType@@K0@Z + 3D 10801F0D 5 Bytes [00, 00, 6A, 00, 6A]
.text kemutb.dll!?Attach@COXBackgroundPainter@@QAEHPAVCWnd@@PBVCOXDIB@@W4PaintType@@K0@Z + 43 10801F13 66 Bytes CALL 109E7DAF \WINDOWS\system32\PortableDeviceTypes.dll (Windows Portable Device (Parameter) Types Component/Microsoft Corporation)
.text kemutb.dll!?Attach@COXBackgroundPainter@@QAEHPAVCWnd@@PBVCOXDIB@@W4PaintType@@K0@Z + 87 10801F57 164 Bytes [14, FA, 96, 03, 59, 8D, 4D, ...]
.text kemutb.dll!?WindowProc@COXBackgroundPainter@@MAEJIIJ@Z + 8C 10801FFC 209 Bytes [FF, 15, D4, FA, 96, 03, 8B, ...]
.text kemutb.dll!?WindowProc@COXBackgroundPainter@@MAEJIIJ@Z + 15E 108020CE 67 Bytes [00, 00, 68, 90, C2, 97, 03, ...]
.text kemutb.dll!?WindowProc@COXBackgroundPainter@@MAEJIIJ@Z + 1A2 10802112 92 Bytes [74, 24, 08, 85, F6, 75, 41, ...]
.text kemutb.dll!?WindowProc@COXBackgroundPainter@@MAEJIIJ@Z + 1FF 1080216F 30 Bytes [85, FF, 74, 0E, 8B, CF, E8, ...]
.text kemutb.dll!?WindowProc@COXBackgroundPainter@@MAEJIIJ@Z + 21E 1080218E 227 Bytes [B8, E3, 97, 8B, 03, E8, 46, ...]
.text kemutb.dll!?DrawWallpaper@COXBackgroundPainter@@UAEXPAVCDC@@@Z + 12 10802272 159 Bytes [EB, 03, 89, 5D, B0, 8D, 4D, ...]
.text kemutb.dll!?DrawWallpaper@COXBackgroundPainter@@UAEXPAVCDC@@@Z + B2 10802312 44 Bytes [24, 18, FF, 74, 24, 18, 50, ...]
.text kemutb.dll!?DrawWallpaper@COXBackgroundPainter@@UAEXPAVCDC@@@Z + DF 1080233F 55 Bytes [74, 8B, 46, 40, 83, F8, 01, ...]
.text kemutb.dll!?DrawWallpaper@COXBackgroundPainter@@UAEXPAVCDC@@@Z + 117 10802377 8 Bytes [A5, 03, 68, 48, 10, A5, 03, ...]
.text kemutb.dll!?DrawWallpaper@COXBackgroundPainter@@UAEXPAVCDC@@@Z + 120 10802380 287 Bytes [10, A5, 03, FF, D6, 83, C0, ...]
.text ...
.text kemutb.dll!?GetWallpaperOrigin@COXBackgroundPainter@@MBEXAAVCPoint@@AAVCRect@@@Z + 33 10802723 7 Bytes [CE, C7, 47, 04, 03, 00, 00]
.text kemutb.dll!?GetWallpaperOrigin@COXBackgroundPainter@@MBEXAAVCPoint@@AAVCRect@@@Z + 3B 1080272B 18 Bytes CALL 10802427 \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?GetWallpaperOrigin@COXBackgroundPainter@@MBEXAAVCPoint@@AAVCRect@@@Z + 4E 1080273E 161 Bytes [75, 4C, 8B, 35, 28, F8, 96, ...]
.text kemutb.dll!?GetWallpaperOrigin@COXBackgroundPainter@@MBEXAAVCPoint@@AAVCRect@@@Z + F0 108027E0 33 Bytes [4D, 4C, FF, 15, 5C, F7, 96, ...]
.text kemutb.dll!?GetWallpaperOrigin@COXBackgroundPainter@@MBEXAAVCPoint@@AAVCRect@@@Z + 112 10802802 28 Bytes [8D, 4D, 30, FF, 15, 94, F6, ...]
.text ...
.text kemutb.dll!?Attach@COXBackgroundPainter@@QAEHPAVCWnd@@PB_WW4PaintType@@K0@Z + D 1080285D 74 Bytes [FF, 15, 70, F7, 96, 03, 8D, ...]
.text kemutb.dll!?Attach@COXBackgroundPainter@@QAEHPAVCWnd@@PB_WW4PaintType@@K0@Z + 58 108028A8 18 Bytes [15, 94, F6, 96, 03, 8B, D8, ...]
.text kemutb.dll!?Attach@COXBackgroundPainter@@QAEHPAVCWnd@@PB_WW4PaintType@@K0@Z + 6D 108028BD 53 Bytes [68, 60, 22, A5, 03, E9, 5E, ...]
.text kemutb.dll!?Attach@COXBackgroundPainter@@QAEHPAVCWnd@@PB_WW4PaintType@@K0@Z + A3 108028F3 4 Bytes [FF, FF, 56, 6A]
.text kemutb.dll!?Attach@COXBackgroundPainter@@QAEHPAVCWnd@@PB_WW4PaintType@@K0@Z + A8 108028F8 190 Bytes [8D, 85, 60, FF, FF, FF, 50, ...]
.text kemutb.dll!?Attach@COXBackgroundPainter@@QAEHPAVCWnd@@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@W4PaintType@@K0@Z + 98 108029B8 74 Bytes [FF, 68, 4C, 22, A5, 03, 50, ...]
.text kemutb.dll!?SetWallpaper@COXBackgroundPainter@@QAEHPB_WH@Z + 3 10802A03 21 Bytes [F7, 96, 03, 83, C4, 0C, 50, ...]
.text kemutb.dll!?SetWallpaper@COXBackgroundPainter@@QAEHPB_WH@Z + 19 10802A19 73 Bytes [0C, 50, 8D, 4D, A4, FF, 15, ...]
.text kemutb.dll!?SetWallpaper@COXBackgroundPainter@@QAEHPB_WH@Z + 63 10802A63 17 Bytes [45, FC, 83, C4, 0C, 39, 75, ...]
.text kemutb.dll!?SetWallpaper@COXBackgroundPainter@@QAEHPB_WH@Z + 75 10802A75 4 Bytes [00, 00, 6A, 1B] {ADD [EAX], AL; PUSH 0x1b}
.text kemutb.dll!?SetWallpaper@COXBackgroundPainter@@QAEHPB_WH@Z + 7A 10802A7A 5 Bytes CALL 107FD78F
.text ...
.text kemutb.dll!?SetWallpaper@COXBackgroundPainter@@QAEHABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + E 10802ACE 29 Bytes CALL 107FD78F
.text kemutb.dll!?SetWallpaper@COXBackgroundPainter@@QAEHABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 2C 10802AEC 138 Bytes [9F, AC, FF, FF, 83, C4, 0C, ...]
.text kemutb.dll!?SetWallpaper@COXBackgroundPainter@@QAEHABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + B7 10802B77 15 Bytes [83, C4, 20, 8D, 4D, 14, FF, ...] {ADD ESP, 0x20; LEA ECX, [EBP+0x14]; CALL [0x396f770]; MOV ECX, [EBP+0x68]}
.text kemutb.dll!?SetWallpaper@COXBackgroundPainter@@QAEHABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + C7 10802B87 42 Bytes [66, 8B, C6, 5E, 33, CD, 5B, ...]
.text kemutb.dll!?LoadState@COXBackgroundPainter@@QAEHPB_WH@Z + 23 10802BB3 16 Bytes [8B, 8D, A0, 00, 00, 00, 8B, ...]
.text kemutb.dll!?LoadState@COXBackgroundPainter@@QAEHPB_WH@Z + 34 10802BC4 23 Bytes [00, 00, 56, 8B, B5, B0, 00, ...]
.text kemutb.dll!?LoadState@COXBackgroundPainter@@QAEHPB_WH@Z + 4C 10802BDC 13 Bytes [AC, 00, 00, 00, 56, 50, 89, ...]
.text kemutb.dll!?LoadState@COXBackgroundPainter@@QAEHPB_WH@Z + 5A 10802BEA 85 Bytes [F8, FF, FF, 0F, B7, F8, 0F, ...]
.text kemutb.dll!?LoadState@COXBackgroundPainter@@QAEHPB_WH@Z + B0 10802C40 25 Bytes [83, 7D, F4, 00, 75, 4E, 83, ...]
.text ...
.text kemutb.dll!?Detach@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@H@Z + 10 10802CA0 20 Bytes [94, C1, 50, FF, 75, 84, 89, ...]
.text kemutb.dll!?Detach@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@H@Z + 25 10802CB5 100 Bytes [B7, F8, 0F, B7, C7, 83, C4, ...]
.text kemutb.dll!?Detach@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@H@Z + 8A 10802D1A 12 Bytes CALL 107FD78B
.text kemutb.dll!?Detach@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@H@Z + 97 10802D27 31 Bytes [86, 6F, 01, 00, 00, 68, 00, ...]
.text kemutb.dll!?Detach@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@H@Z + B8 10802D48 7 Bytes [0F, B7, 45, 94, 50, 53, 33]
.text ...
.text kemutb.dll!?SetWallpaper@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 2D 10802DFD 3 Bytes [45, 8C, 50]
.text kemutb.dll!?SetWallpaper@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 31 10802E01 54 Bytes [47, 01, 50, 03, F3, 56, FF, ...]
.text kemutb.dll!?SetWallpaper@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 68 10802E38 32 Bytes [5F, 5E, 8B, C3, 33, CD, 5B, ...]
.text kemutb.dll!?SetWallpaper@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 89 10802E59 19 Bytes [F1, 89, 75, F0, FF, 15, 08, ...]
.text kemutb.dll!?SetWallpaper@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 9D 10802E6D 59 Bytes [C7, 06, A0, 24, A5, 03, FF, ...]
.text kemutb.dll!?SetWallpaper@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PBVCOXDIB@@H@Z + 19 10802EA9 51 Bytes [41, 10, C3, 56, 8B, F1, E8, ...]
.text kemutb.dll!?SetWallpaper@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PBVCOXDIB@@H@Z + 4D 10802EDD 16 Bytes [4D, D4, FF, 15, 60, F7, 96, ...] {DEC EBP; AAM 0xff; ADC EAX, 0x396f760; AND DWORD [EBP-0x4], 0x0; LEA EAX, [EBP-0x2c]; PUSH EAX}
.text kemutb.dll!?SetWallpaper@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PBVCOXDIB@@H@Z + 5E 10802EEE 22 Bytes CALL 10802E4B \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?SetWallpaper@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PBVCOXDIB@@H@Z + 75 10802F05 150 Bytes CALL 1022B413
.text kemutb.dll!?SetPaintType@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@W4PaintType@@H@Z + 3C 10802F9C 2 Bytes [C7, 0C]
.text kemutb.dll!?SetPaintType@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@W4PaintType@@H@Z + 3F 10802F9F 6 Bytes [8D, 4E, 0C, C7, 06, A0]
.text kemutb.dll!?SetPaintType@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@W4PaintType@@H@Z + 46 10802FA6 60 Bytes [A5, 03, FF, 15, 58, F7, 96, ...]
.text kemutb.dll!?SetPaintType@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@W4PaintType@@H@Z + 83 10802FE3 126 Bytes [75, 08, 2B, C6, D1, F8, 50, ...]
.text kemutb.dll!?SetBkColor@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@KH@Z + 12 10803062 75 Bytes [4D, 1C, 51, 50, 8D, 4D, D4, ...]
.text kemutb.dll!?SetBkColor@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@KH@Z + 5E 108030AE 187 Bytes [75, 14, FF, 75, 10, FF, 75, ...]
.text kemutb.dll!?SetOriginWnd@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PAV2@H@Z + 2A 1080316A 2 Bytes [8D, 8D]
.text kemutb.dll!?SetOriginWnd@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PAV2@H@Z + 2D 1080316D 67 Bytes [02, 00, 00, 51, 8D, 4D, 00, ...]
.text kemutb.dll!?SetOriginWnd@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PAV2@H@Z + 71 108031B1 12 Bytes CALL 1022B32E
.text kemutb.dll!?SetOriginWnd@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PAV2@H@Z + 7E 108031BE 2 Bytes [C9, C3] {LEAVE ; RET }
.text kemutb.dll!?SetOriginWnd@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PAV2@H@Z + 81 108031C1 84 Bytes [01, 56, 8B, 71, 04, 8B, 49, ...]
.text ...
.text kemutb.dll!?IsAttached@COXBackgroundPainterOrganizer@@QBEHPBVCWnd@@@Z + 2E 1080329E 5 Bytes [47, 8B, D1, 81, E2]
.text kemutb.dll!?IsAttached@COXBackgroundPainterOrganizer@@QBEHPBVCWnd@@@Z + 34 108032A4 15 Bytes [F8, FF, FF, 81, FA, 00, D8, ...]
.text kemutb.dll!?LoadState@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PB_WH@Z + 4 108032B4 76 Bytes [55, 0C, 0F, B7, 12, 66, 85, ...]
.text kemutb.dll!?LoadState@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PB_WH@Z + 51 10803301 54 Bytes [FF, 75, 20, 85, F6, 74, 15, ...]
.text kemutb.dll!?LoadState@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PB_WH@Z + 88 10803338 100 Bytes [00, 8B, D1, C1, FA, 0C, 80, ...]
.text kemutb.dll!?LoadState@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PB_WH@Z + ED 1080339D 36 Bytes [30, 40, 47, FF, 45, 08, FF, ...]
.text kemutb.dll!?DetachFrame@COXBackgroundPainterOrganizer@@QAEHH@Z + 22 108033C2 49 Bytes [FF, 5F, 85, F6, 74, 08, 3B, ...]
.text kemutb.dll!?DetachFrame@COXBackgroundPainterOrganizer@@QAEHH@Z + 54 108033F4 95 Bytes [5D, 08, 3B, C3, 0F, 8D, 34, ...]
.text kemutb.dll!?DetachFrame@COXBackgroundPainterOrganizer@@QAEHH@Z + B4 10803454 10 Bytes CALL 1022B44E
.text kemutb.dll!?DetachFrame@COXBackgroundPainterOrganizer@@QAEHH@Z + BF 1080345F 80 Bytes [46, 68, 85, C0, 74, 07, 50, ...]
.text kemutb.dll!?SetWallpaper@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PB_WH@Z + 30 108034B0 73 Bytes [CF, C1, E1, 05, 51, 8B, 4E, ...]
.text kemutb.dll!?SetWallpaper@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PB_WH@Z + 7A 108034FA 15 Bytes [4E, 68, C1, E0, 02, C1, E7, ...] {DEC ESI; PUSH 0xc102e0c1; OUT 0x5, EAX; PUSH EDI; PUSH DWORD [ECX+EAX]; MOV [EBP-0xc], EAX}
.text kemutb.dll!?SetWallpaper@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PB_WH@Z + 8A 1080350A 13 Bytes CALL 1022B44E
.text kemutb.dll!?SetWallpaper@COXBackgroundPainterOrganizer@@QAEHPBVCWnd@@PB_WH@Z + 98 10803518 159 Bytes CALL 1012373E
.text kemutb.dll!??1COXBackgroundPainterOrganizer@@UAE@XZ + 68 108035B8 16 Bytes [0F, 95, C0, C3, 56, 8B, 74, ...] {SETNZ AL; RET ; PUSH ESI; MOV ESI, [ESP+0xc]; PUSH EDI; MOV EDI, [ESP+0xc]; JMP 0x2a}
.text kemutb.dll!??1COXBackgroundPainterOrganizer@@UAE@XZ + 79 108035C9 153 Bytes [06, 0F, BE, 04, 38, 50, 68, ...]
.text kemutb.dll!??1COXBackgroundPainterOrganizer@@UAE@XZ + 113 10803663 73 Bytes [46, 8D, 46, FF, 89, 47, 04, ...]
.text kemutb.dll!??1COXBackgroundPainterOrganizer@@UAE@XZ + 15D 108036AD 38 Bytes [7E, 10, 8B, 4D, 08, 68, C4, ...]
.text kemutb.dll!??1COXBackgroundPainterOrganizer@@UAE@XZ + 184 108036D4 68 Bytes [75, 08, FF, 15, 4C, F7, 96, ...]
.text ...
.text kemutb.dll!?Attach@COXBackgroundPainterOrganizer@@QAEHPAVCWnd@@PBVCOXDIB@@W4PaintType@@K0@Z + 22 10803A52 5 Bytes CALL 108033D4 \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?Attach@COXBackgroundPainterOrganizer@@QAEHPAVCWnd@@PBVCOXDIB@@W4PaintType@@K0@Z + 28 10803A58 11 Bytes [46, 4C, 8D, 48, 01, 89, 4E, ...] {INC ESI; DEC ESP; LEA ECX, [EAX+0x1]; MOV [ESI+0x4c], ECX; POP ESI; RET ; PUSH EBP}
.text kemutb.dll!?Attach@COXBackgroundPainterOrganizer@@QAEHPAVCWnd@@PBVCOXDIB@@W4PaintType@@K0@Z + 34 10803A64 87 Bytes [EC, 83, EC, 18, 53, 56, 8B, ...]
.text kemutb.dll!?Attach@COXBackgroundPainterOrganizer@@QAEHPAVCWnd@@PBVCOXDIB@@W4PaintType@@K0@Z + 8C 10803ABC 34 Bytes [7E, 50, 10, 75, 35, 8B, 46, ...]
.text kemutb.dll!?Attach@COXBackgroundPainterOrganizer@@QAEHPAVCWnd@@PBVCOXDIB@@W4PaintType@@K0@Z + AF 10803ADF 19 Bytes [16, 47, 3B, 7D, 0C, 7E, EA, ...]
.text ...
.text kemutb.dll!?AttachAllWindows@COXBackgroundPainterOrganizer@@QAEXPAUHWND__@@@Z + E 10803B5E 71 Bytes [8B, 4E, 68, 8B, 0C, 0B, 8B, ...]
.text kemutb.dll!?AttachAllWindows@COXBackgroundPainterOrganizer@@QAEXPAUHWND__@@@Z + 56 10803BA6 83 Bytes [0C, 0A, 8B, 44, 01, 08, 8D, ...]
.text kemutb.dll!?AttachAllWindows@COXBackgroundPainterOrganizer@@QAEXPAUHWND__@@@Z + AA 10803BFA 76 Bytes [8B, 55, CC, 89, 4C, 10, 08, ...]
.text kemutb.dll!?BackgroundPainterCBTHookProc@COXBackgroundPainterOrganizer@@KGJHIJ@Z + 37 10803C47 73 Bytes [4D, B8, 8A, 04, 08, 3C, 3F, ...]
.text kemutb.dll!?BackgroundPainterCBTHookProc@COXBackgroundPainterOrganizer@@KGJHIJ@Z + 81 10803C91 72 Bytes [F9, FF, FF, 83, C4, 0C, 84, ...]
.text kemutb.dll!?BackgroundPainterCBTHookProc@COXBackgroundPainterOrganizer@@KGJHIJ@Z + CA 10803CDA 34 Bytes [46, 68, 8B, 04, 03, 03, C7, ...]
.text kemutb.dll!?BackgroundPainterCBTHookProc@COXBackgroundPainterOrganizer@@KGJHIJ@Z + ED 10803CFD 69 Bytes [4E, 08, EB, 3D, 6A, 00, 68, ...]
.text kemutb.dll!?BackgroundPainterCBTHookProc@COXBackgroundPainterOrganizer@@KGJHIJ@Z + 133 10803D43 498 Bytes [46, 68, 8B, 04, 03, 75, 1C, ...]
.text kemutb.dll!?BackgroundPainterGetMessageHookProc@COXBackgroundPainterOrganizer@@KGJHIJ@Z + 176 10803F36 79 Bytes CALL 1022B429
.text kemutb.dll!?EnumThreadWindows@COXBackgroundPainterOrganizer@@KGHPAUHWND__@@J@Z + 36 10803F86 29 Bytes [C1, E2, 05, 8B, 7C, 17, 1C, ...]
.text kemutb.dll!?EnumThreadWindows@COXBackgroundPainterOrganizer@@KGHPAUHWND__@@J@Z + 54 10803FA4 10 Bytes [7C, 17, 18, 3B, F3, 0F, 84, ...]
.text kemutb.dll!?EnumThreadWindows@COXBackgroundPainterOrganizer@@KGHPAUHWND__@@J@Z + 5F 10803FAF 35 Bytes [8B, 55, FC, 38, 1C, 32, 0F, ...]
.text kemutb.dll!?EnumThreadWindows@COXBackgroundPainterOrganizer@@KGHPAUHWND__@@J@Z + 83 10803FD3 145 Bytes [5D, EC, 88, 5D, F4, 89, 4D, ...]
.text kemutb.dll!?Attach@COXBackgroundPainterOrganizer@@QAEHPAVCWnd@@PB_WW4PaintType@@K0@Z + 25 10804065 16 Bytes [7C, 31, 1C, 85, FF, 0F, 85, ...]
.text kemutb.dll!?Attach@COXBackgroundPainterOrganizer@@QAEHPAVCWnd@@PB_WW4PaintType@@K0@Z + 36 10804076 6 Bytes [5F, 5E, 5B, C9, C2, 0C]
.text kemutb.dll!?Attach@COXBackgroundPainterOrganizer@@QAEHPAVCWnd@@PB_WW4PaintType@@K0@Z + 3D 1080407D 55 Bytes [55, 8B, EC, 83, EC, 18, 56, ...]
.text kemutb.dll!?Attach@COXBackgroundPainterOrganizer@@QAEHPAVCWnd@@PB_WW4PaintType@@K0@Z + 75 108040B5 4 Bytes [00, C1, E7, 05] {ADD CL, AL; OUT 0x5, EAX}
.text kemutb.dll!?Attach@COXBackgroundPainterOrganizer@@QAEHPAVCWnd@@PB_WW4PaintType@@K0@Z + 7A 108040BA 22 Bytes [04, 38, 40, 39, 4D, 0C, 89, ...]
.text ...
.text kemutb.dll!?Attach@COXBackgroundPainterOrganizer@@QAEHPAVCWnd@@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@W4PaintType@@K0@Z + 51 10804161 25 Bytes [10, 75, 3C, 8B, 46, 54, 40, ...]
.text kemutb.dll!?Attach@COXBackgroundPainterOrganizer@@QAEHPAVCWnd@@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@W4PaintType@@K0@Z + 6B 1080417B 5 Bytes [74, F6, FF, FF, 84]
.text kemutb.dll!?Attach@COXBackgroundPainterOrganizer@@QAEHPAVCWnd@@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@W4PaintType@@K0@Z + 71 10804181 45 Bytes [74, 1D, 8B, 45, EC, 33, C9, ...]
.text kemutb.dll!?Attach@COXBackgroundPainterOrganizer@@QAEHPAVCWnd@@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@W4PaintType@@K0@Z + 9F 108041AF 27 Bytes [45, 08, 5E, C9, C2, 0C, 00, ...]
.text kemutb.dll!?Attach@COXBackgroundPainterOrganizer@@QAEHPAVCWnd@@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@W4PaintType@@K0@Z + BB 108041CB 41 Bytes [4E, 58, 85, C9, 74, 66, 8B, ...]
.text kemutb.dll!?AttachFrame@COXBackgroundPainterOrganizer@@QAEHPAVCFrameWnd@@PBVCOXDIB@@W4PaintType@@K@Z + 16 108041F6 57 Bytes [F8, 10, 75, 0A, 8B, 46, 54, ...]
.text kemutb.dll!?AttachFrame@COXBackgroundPainterOrganizer@@QAEHPAVCFrameWnd@@PBVCOXDIB@@W4PaintType@@K@Z + 50 10804230 24 Bytes [00, 51, FF, 76, 54, EB, AD, ...]
.text kemutb.dll!?AttachFrame@COXBackgroundPainterOrganizer@@QAEHPAVCFrameWnd@@PBVCOXDIB@@W4PaintType@@K@Z + 69 10804249 135 Bytes [F9, C1, E7, 02, 8B, 04, 38, ...]
.text kemutb.dll!?AttachFrame@COXBackgroundPainterOrganizer@@QAEHPAVCFrameWnd@@PBVCOXDIB@@W4PaintType@@K@Z + F1 108042D1 1 Byte [0C]
.text kemutb.dll!?AttachFrame@COXBackgroundPainterOrganizer@@QAEHPAVCFrameWnd@@PBVCOXDIB@@W4PaintType@@K@Z + F1 108042D1 104 Bytes [0C, 8B, 4D, F8, 68, 44, 25, ...]
.text ...
.text kemutb.dll!?AttachFrame@COXBackgroundPainterOrganizer@@QAEHPAVCFrameWnd@@PB_WW4PaintType@@K@Z + 2 10804352 72 Bytes CALL 10803F3E \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?AttachFrame@COXBackgroundPainterOrganizer@@QAEHPAVCFrameWnd@@PB_WW4PaintType@@K@Z + 4B 1080439B 20 Bytes [8B, F1, 8D, 4D, D4, 89, 45, ...]
.text kemutb.dll!?AttachFrame@COXBackgroundPainterOrganizer@@QAEHPAVCFrameWnd@@PB_WW4PaintType@@K@Z + 60 108043B0 20 Bytes [89, 5D, FC, 0F, 84, 2A, 01, ...]
.text kemutb.dll!?AttachFrame@COXBackgroundPainterOrganizer@@QAEHPAVCFrameWnd@@PB_WW4PaintType@@K@Z + 75 108043C5 48 Bytes [00, 00, 2B, C1, 0F, 84, F7, ...]
.text kemutb.dll!?AttachFrame@COXBackgroundPainterOrganizer@@QAEHPAVCFrameWnd@@PB_WW4PaintType@@K@Z + A6 108043F6 37 Bytes [46, 08, EB, 03, 8D, 46, 08, ...]
.text kemutb.dll!?AttachFrame@COXBackgroundPainterOrganizer@@QAEHPAVCFrameWnd@@IW4PaintType@@K@Z + D 1080441D 109 Bytes [84, C0, 59, 0F, 84, AE, 00, ...]
.text kemutb.dll!?AttachFrame@COXBackgroundPainterOrganizer@@QAEHPAVCFrameWnd@@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@W4PaintType@@K@Z + 6B 1080448B 5 Bytes [6A, F1, FF, FF, 84]
.text kemutb.dll!?AttachFrame@COXBackgroundPainterOrganizer@@QAEHPAVCFrameWnd@@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@W4PaintType@@K@Z + 71 10804491 166 Bytes [59, 74, 40, 8D, 45, BC, 50, ...]
.text kemutb.dll!?ClearSystemPalette@COXDIB@@SAHXZ + 28 10804538 87 Bytes [6A, 5C, B8, D0, 99, 8B, 03, ...]
.text kemutb.dll!?ClearSystemPalette@COXDIB@@SAHXZ + 80 10804590 16 Bytes [30, 8B, CF, 53, 88, 5D, D3, ...] {XOR [EBX+0x5d8853cf], CL; SAR EDI, CL; ADC EAX, 0x396f5f4; MOV EAX, [ESI+0x18]}
.text kemutb.dll!?ClearSystemPalette@COXDIB@@SAHXZ + 91 108045A1 114 Bytes [C3, 74, 2B, 8B, 46, 68, 8B, ...]
.text kemutb.dll!?CreateDIBPalette@COXDIB@@SAPAUHPALETTE__@@PAUtagBITMAPINFO@@AAH@Z + 54 10804614 34 Bytes [98, 50, FF, 15, 68, F7, 96, ...]
.text kemutb.dll!?CreateDIBPalette@COXDIB@@SAPAUHPALETTE__@@PAUtagBITMAPINFO@@AAH@Z + 77 10804637 11 Bytes [15, 6C, F7, 96, 03, 8D, 4D, ...]
.text kemutb.dll!?CreateDIBPalette@COXDIB@@SAPAUHPALETTE__@@PAUtagBITMAPINFO@@AAH@Z + 83 10804643 104 Bytes [FF, 15, 70, F7, 96, 03, 8D, ...]
.text kemutb.dll!?Empty@COXDIB@@QAEXXZ + C 108046AC 5 Bytes [5E, C2, 04, 00, 55] {POP ESI; RET 0x4; PUSH EBP}
.text kemutb.dll!?Empty@COXDIB@@QAEXXZ + 12 108046B2 98 Bytes [EC, 83, EC, 78, A1, 50, AE, ...]
.text kemutb.dll!?GetNumBitsPerPixel@COXDIB@@QBEGPAD@Z + 25 10804715 1 Byte [6A]
.text kemutb.dll!?GetNumBitsPerPixel@COXDIB@@QBEGPAD@Z + 25 10804715 69 Bytes [6A, 00, 53, 89, 45, 94, FF, ...]
.text kemutb.dll!?GetNumColors@COXDIB@@QBEGPAD@Z + 1B 1080475B 64 Bytes [00, 8B, 45, 94, 83, 4E, 3C, ...]
.text kemutb.dll!?GetNumColors@COXDIB@@QBEGPAD@Z + 5C 1080479C 15 Bytes CALL 1080326D \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?GetNumColors@COXDIB@@QBEGPAD@Z + 6C 108047AC 79 Bytes [A0, EF, 91, FF, 53, FF, 75, ...]
.text kemutb.dll!?ResizeDIB@COXDIB@@QAEHKK@Z + 1C 108047FC 1 Byte [75]
.text kemutb.dll!?ResizeDIB@COXDIB@@QAEHKK@Z + 1C 108047FC 64 Bytes [75, 8C, FF, D7, FF, 75, 94, ...]
.text kemutb.dll!?ResizeDIB@COXDIB@@QAEHKK@Z + 5E 1080483E 103 Bytes [C4, 10, 8D, 45, 98, 50, 8D, ...]
.text kemutb.dll!?ResizeDIB@COXDIB@@QAEHKK@Z + C7 108048A7 43 Bytes [00, 0F, 84, 98, 01, 00, 00, ...]
.text kemutb.dll!?ResizeDIB@COXDIB@@QAEHKK@Z + F5 108048D5 57 Bytes [3B, 5F, 14, 76, 06, FF, 15, ...]
.text ...
.text kemutb.dll!?InitBitmapInfoHeader@COXDIB@@QAEXPAUtagBITMAPINFOHEADER@@KKG@Z + 27 10804B57 108 Bytes [74, 39, 0F, B6, 07, 50, E8, ...]
.text kemutb.dll!?InitBitmapInfoHeader@COXDIB@@QAEXPAUtagBITMAPINFOHEADER@@KKG@Z + 94 10804BC4 37 Bytes [39, 7D, 14, 0F, 84, C3, 00, ...]
.text kemutb.dll!?ReadBitmapInfo@COXDIB@@IAEPAUtagBITMAPINFOHEADER@@AAVCArchive@@@Z + 1A 10804BEA 287 Bytes CALL 10804B17 \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?ReadBitmapInfo@COXDIB@@IAEPAUtagBITMAPINFOHEADER@@AAVCArchive@@@Z + 13A 10804D0A 41 Bytes [A1, 60, B9, C7, 03, 33, D2, ...]
.text kemutb.dll!?ReadBitmapInfo@COXDIB@@IAEPAUtagBITMAPINFOHEADER@@AAVCArchive@@@Z + 164 10804D34 128 Bytes [D2, F7, 35, 28, B7, C7, 03, ...]
.text kemutb.dll!?ReadBitmapInfo@COXDIB@@IAEPAUtagBITMAPINFOHEADER@@AAVCArchive@@@Z + 1E5 10804DB5 208 Bytes [E4, B5, C7, 03, A3, 1C, 5F, ...]
.text kemutb.dll!?CalcPadding@COXDIB@@IAEKKK@Z + 16 10804E86 534 Bytes [B8, C7, 03, 33, D2, F7, 35, ...]
.text kemutb.dll!?MakeCopy@COXDIB@@QAGPAUHDIB__@@XZ + 1D 1080509D 429 Bytes [5F, DA, 03, A1, 70, B4, C7, ...]
.text kemutb.dll!?GetPaletteSize@COXDIB@@QBEGPAD@Z + 4B 1080524B 16 Bytes [A3, D0, 61, DA, 03, A1, 00, ...]
.text kemutb.dll!?GetPaletteSize@COXDIB@@QBEGPAD@Z + 5C 1080525C 113 Bytes [03, A3, 14, 62, DA, 03, A1, ...]
.text kemutb.dll!?SetPaletteUsage@COXDIB@@QAEHPAVCPalette@@I@Z + 5E 108052CE 459 Bytes [A1, A4, B5, C7, 03, 33, D2, ...]
.text kemutb.dll!?CreateEmptyDIB@COXDIB@@QAEHGKK@Z + 10A 1080549A 625 Bytes [B5, C7, 03, A3, BC, 5E, DA, ...]
.text kemutb.dll!?HalfToneDitherDIB@COXDIB@@QAEHXZ + 15C 1080570C 119 Bytes [D2, F7, 35, 2C, BB, C7, 03, ...]
.text kemutb.dll!?HalfToneDitherDIB@COXDIB@@QAEHXZ + 1D4 10805784 361 Bytes [A1, A8, B8, C7, 03, 33, D2, ...]
.text kemutb.dll!??1COXDIB@@UAE@XZ + E 108058EE 145 Bytes [B4, C7, 03, 33, D2, F7, 35, ...]
.text kemutb.dll!?InitPalette@COXDIB@@IAEHPAD@Z + 61 10805981 86 Bytes [33, D2, F7, 35, 18, BB, C7, ...]
.text kemutb.dll!?InitPalette@COXDIB@@IAEHPAD@Z + B8 108059D8 290 Bytes [B6, C7, 03, 33, D2, F7, 35, ...]
.text kemutb.dll!?WriteHuge@COXDIB@@IAEXAAVCArchive@@PBXK@Z + 3B 10805AFB 132 Bytes [33, D2, F7, 35, D4, B3, C7, ...]
.text kemutb.dll!?WriteHuge@COXDIB@@IAEXAAVCArchive@@PBXK@Z + C0 10805B80 107 Bytes [03, A3, 94, 61, DA, 03, A1, ...]
.text kemutb.dll!??0COXDIB@@QAE@PAUHDIB__@@@Z + C 10805BEC 161 Bytes [03, A3, DC, 61, DA, 03, A1, ...]
.text kemutb.dll!??0COXDIB@@QAE@ABV0@@Z + E 10805C8E 576 Bytes [03, A3, 58, 60, DA, 03, A1, ...]
.text kemutb.dll!?BitmapToDIB@COXDIB@@QAEPAUHDIB__@@PAUHBITMAP__@@PAVCPalette@@@Z + B0 10805ED0 17 Bytes [00, 8B, 55, 14, 8A, 02, 88, ...]
.text kemutb.dll!?BitmapToDIB@COXDIB@@QAEPAUHDIB__@@PAUHBITMAP__@@PAVCPalette@@@Z + C2 10805EE2 65 Bytes [00, F7, F9, 89, 45, F8, 8B, ...]
.text kemutb.dll!?BitmapToDIB@COXDIB@@QAEPAUHDIB__@@PAUHBITMAP__@@PAVCPalette@@@Z + 104 10805F24 81 Bytes [00, 00, 74, 0D, 0F, B6, 4D, ...]
.text kemutb.dll!?BitmapToDIB@COXDIB@@QAEPAUHDIB__@@PAUHBITMAP__@@PAVCPalette@@@Z + 156 10805F76 53 Bytes [74, 0D, 0F, B6, 4D, F7, 81, ...]
.text kemutb.dll!?BitmapToDIB@COXDIB@@QAEPAUHDIB__@@PAUHBITMAP__@@PAVCPalette@@@Z + 18C 10805FAC 13 Bytes [00, 8B, 45, F0, 33, D2, F7, ...]
.text kemutb.dll!?IconToDIB@COXDIB@@QAEPAUHDIB__@@PAUHICON__@@VCSize@@PAVCPalette@@@Z + A 10805FBA 210 Bytes [8B, 55, 10, 3B, 15, A8, 61, ...]
.text kemutb.dll!?IconToDIB@COXDIB@@QAEPAUHDIB__@@PAUHICON__@@VCSize@@PAVCPalette@@@Z + DD 1080608D 35 Bytes CALL 11843AF1
.text kemutb.dll!?IconToDIB@COXDIB@@QAEPAUHDIB__@@PAUHICON__@@VCSize@@PAVCPalette@@@Z + 101 108060B1 4 Bytes [8B, 55, 0C, 52] {MOV EDX, [EBP+0xc]; PUSH EDX}
.text kemutb.dll!?IconToDIB@COXDIB@@QAEPAUHDIB__@@PAUHICON__@@VCSize@@PAVCPalette@@@Z + 106 108060B6 66 Bytes [90, 53, A2, FF, 83, C4, 0C, ...]
.text kemutb.dll!?IconToDIB@COXDIB@@QAEPAUHDIB__@@PAUHICON__@@VCSize@@PAVCPalette@@@Z + 149 108060F9 13 Bytes [03, C1, 8B, 4D, 0C, 88, 81, ...]
.text ...
.text kemutb.dll!?Write@COXDIB@@QAEHAAVCArchive@@@Z + 10 10806140 57 Bytes [03, D0, 8B, 45, 0C, 88, 90, ...]
.text kemutb.dll!?Write@COXDIB@@QAEHAAVCArchive@@@Z + 4A 1080617A 17 Bytes [55, 0C, 03, 4A, 40, 8B, 45, ...]
.text kemutb.dll!?Write@COXDIB@@QAEHAAVCArchive@@@Z + 5C 1080618C 21 Bytes [75, 18, 8B, 0D, 4C, 66, DA, ...]
.text kemutb.dll!?Write@COXDIB@@QAEHAAVCArchive@@@Z + 72 108061A2 150 Bytes [0C, 88, 41, 6C, 83, 3D, E8, ...]
.text kemutb.dll!?Write@COXDIB@@QAEHAAVCArchive@@@Z + 109 10806239 20 Bytes [45, 0C, 0F, B6, 48, 7D, 03, ...]
.text ...
.text kemutb.dll!?Write@COXDIB@@QAEHPAVCFile@@H@Z + E 1080628E 25 Bytes CALL 10843CF2
.text kemutb.dll!?Write@COXDIB@@QAEHPAVCFile@@H@Z + 28 108062A8 11 Bytes [00, 00, 03, CA, 8B, 55, 0C, ...]
.text kemutb.dll!?Write@COXDIB@@QAEHPAVCFile@@H@Z + 35 108062B5 6 Bytes [83, 3D, E8, 5F, DA, 03]
.text kemutb.dll!?Write@COXDIB@@QAEHPAVCFile@@H@Z + 3C 108062BC 72 Bytes [75, 1D, A1, 0C, 67, DA, 03, ...]
.text kemutb.dll!?Write@COXDIB@@QAEHPAVCFile@@H@Z + 85 10806305 3 Bytes CALL 10843D69
.text ...
.text kemutb.dll!?Read@COXDIB@@QAEHAAVCArchive@@@Z + 93 108063F3 82 Bytes [45, 0C, 88, 90, 92, 00, 00, ...]
.text kemutb.dll!?Read@COXDIB@@QAEHAAVCArchive@@@Z + E6 10806446 68 Bytes [19, 8B, 55, 0C, 0F, B6, 82, ...]
.text kemutb.dll!?Read@COXDIB@@QAEHAAVCArchive@@@Z + 12B 1080648B 25 Bytes [DA, 03, 00, 75, 1D, A1, 88, ...]
.text kemutb.dll!?Read@COXDIB@@QAEHAAVCArchive@@@Z + 145 108064A5 11 Bytes [45, 0C, 88, 90, 98, 00, 00, ...]
.text kemutb.dll!?Read@COXDIB@@QAEHAAVCArchive@@@Z + 151 108064B1 15 Bytes [DA, 03, 00, 75, 15, 8B, 0D, ...]
.text kemutb.dll!?Read@COXDIB@@QAEHPAVCFile@@@Z + 1 108064C1 52 Bytes [0C, 03, 4A, 28, 8B, 45, 0C, ...]
.text kemutb.dll!?Read@COXDIB@@QAEHPAVCFile@@@Z + 36 108064F6 222 Bytes [15, C4, 65, DA, 03, C1, E2, ...]
.text kemutb.dll!?LoadResource@COXDIB@@QAEHPB_WPAUHINSTANCE__@@@Z + 27 108065D7 71 Bytes CALL 1084403B
.text kemutb.dll!?LoadResource@COXDIB@@QAEHPB_WPAUHINSTANCE__@@@Z + 6F 1080661F 48 Bytes [75, 13, 8B, 4D, 0C, 0F, B6, ...]
.text kemutb.dll!?LoadResource@COXDIB@@QAEHPB_WPAUHINSTANCE__@@@Z + A0 10806650 11 Bytes [4D, 0C, 88, 41, 6B, 83, 3D, ...] {DEC EBP; OR AL, 0x88; INC ECX; IMUL EAX, [EBX-0x25a017c3], 0x3}
.text kemutb.dll!?LoadResource@COXDIB@@QAEHPB_WPAUHINSTANCE__@@@Z + AC 1080665C 61 Bytes [75, 18, 8B, 15, 10, 66, DA, ...]
.text kemutb.dll!?LoadResource@COXDIB@@QAEHPB_WPAUHINSTANCE__@@@Z + EB 1080669B 189 Bytes CALL 108440FF
.text kemutb.dll!?MakeBitmap@COXDIB@@QAEPAVCBitmap@@PAVCDC@@AAVCSize@@@Z + 9 10806759 134 Bytes [18, 73, 19, 8B, 4D, 14, 03, ...]
.text kemutb.dll!?MakeBitmap@COXDIB@@QAEPAVCBitmap@@PAVCDC@@AAVCSize@@@Z + 90 108067E0 90 Bytes [15, BC, 67, DA, 03, C1, E2, ...]
.text kemutb.dll!?MakeBitmap@COXDIB@@QAEPAVCBitmap@@PAVCDC@@AAVCSize@@@Z + EB 1080683B 63 Bytes [03, 4D, FC, 0F, B6, 11, 2B, ...]
.text kemutb.dll!?MakeBitmap@COXDIB@@QAEPAVCBitmap@@PAVCDC@@AAVCSize@@@Z + 12B 1080687B 125 Bytes [5F, DA, 03, 00, 75, 1E, 8B, ...]
.text kemutb.dll!?MakeBitmap@COXDIB@@QAEPAVCBitmap@@PAVCDC@@AAVCSize@@@Z + 1A9 108068F9 18 Bytes [55, 0C, 0F, B6, 82, A5, 00, ...]
.text ...
.text kemutb.dll!?Paint@COXDIB@@QAEHPAVCDC@@ABVCRect@@1@Z + 18 108069B8 21 Bytes [1D, A1, EC, 62, DA, 03, C1, ...]
.text kemutb.dll!?Paint@COXDIB@@QAEHPAVCDC@@ABVCRect@@1@Z + 2E 108069CE 74 Bytes [45, 0C, 88, 90, B5, 00, 00, ...]
.text kemutb.dll!?Paint@COXDIB@@QAEHPAVCDC@@ABVCRect@@1@Z + 79 10806A19 11 Bytes [45, 0C, 88, 50, 57, 83, 3D, ...]
.text kemutb.dll!?Paint@COXDIB@@QAEHPAVCDC@@ABVCRect@@1@Z + 85 10806A25 2 Bytes [75, 18] {JNZ 0x1a}
.text kemutb.dll!?Paint@COXDIB@@QAEHPAVCDC@@ABVCRect@@1@Z + 88 10806A28 59 Bytes [0D, 30, 67, DA, 03, C1, E1, ...]
.text ...
.text kemutb.dll!??4COXDIB@@QAEAAV0@ABV0@@Z + 15 10806B65 223 Bytes [4D, 14, 03, 4D, FC, 88, 01, ...]
.text kemutb.dll!?Write@COXDIB@@QAEHPB_W@Z + D5 10806C45 11 Bytes JMP 1080B697 \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?Write@COXDIB@@QAEHPB_W@Z + E1 10806C51 5 Bytes [75, 1E, 8B, 15, 9C]
.text kemutb.dll!?Write@COXDIB@@QAEHPB_W@Z + E7 10806C57 13 Bytes [DA, 03, C1, E2, 08, 8B, 45, ...]
.text kemutb.dll!?Write@COXDIB@@QAEHPB_W@Z + F5 10806C65 229 Bytes [00, 03, CA, 8B, 55, 0C, 88, ...]
.text kemutb.dll!?Read@COXDIB@@QAEHPB_W@Z + DD 10806D4D 214 Bytes CALL 108447B1
.text kemutb.dll!?Rotate@COXDIB@@QAEHHHH@Z + C5 10806E25 6 Bytes [83, 3D, E8, 5F, DA, 03]
.text kemutb.dll!?Rotate@COXDIB@@QAEHHHH@Z + CC 10806E2C 146 Bytes [75, 18, 8B, 15, D4, 65, DA, ...]
.text kemutb.dll!?Rotate@COXDIB@@QAEHHHH@Z + 15F 10806EBF 62 Bytes [55, 0C, 0F, B6, 82, A4, 00, ...]
.text kemutb.dll!?Rotate@COXDIB@@QAEHHHH@Z + 19E 10806EFE 297 Bytes [C1, E2, 10, 8B, 45, 0C, 0F, ...]
.text kemutb.dll!?Rotate@COXDIB@@QAEHHHH@Z + 2C8 10807028 126 Bytes [3B, 15, 64, 5F, DA, 03, 75, ...]
.text ...
.text kemutb.dll!?IsExtendedInfoSupported@COXFileWatcher@@QBEHXZ + 58 108077F8 459 Bytes [D2, F7, 35, 30, 60, DA, 03, ...]
.text kemutb.dll!?OnNotify@COXFileWatcher@@UAEHVCOXFileWatchNotifier@@@Z + A4 108079C4 16 Bytes [15, 20, 64, DA, 03, C1, E2, ...]
.text kemutb.dll!?OnNotify@COXFileWatcher@@UAEHVCOXFileWatchNotifier@@@Z + B6 108079D6 47 Bytes [03, CA, 8B, 55, 0C, 88, 8A, ...]
.text kemutb.dll!?OnNotify@COXFileWatcher@@UAEHVCOXFileWatchNotifier@@@Z + E6 10807A06 27 Bytes [FC, 0F, B6, 08, 03, 0D, C4, ...]
.text kemutb.dll!?OnNotify@COXFileWatcher@@UAEHVCOXFileWatchNotifier@@@Z + 102 10807A22 3 Bytes CALL 10845486
.text kemutb.dll!?OnNotify@COXFileWatcher@@UAEHVCOXFileWatchNotifier@@@Z + 106 10807A26 85 Bytes [75, 13, 8B, 45, 0C, 0F, B6, ...]
.text ...
.text kemutb.dll!?RemoveWatch@COXFileWatcher@@QAEXPB_W@Z + 75 10807DA5 25 Bytes [14, A1, 30, 60, DA, 03, 8A, ...]
.text kemutb.dll!?RemoveWatch@COXFileWatcher@@QAEXPB_W@Z + 8F 10807DBF 17 Bytes [78, 5F, DA, 03, 03, 55, FC, ...]
.text kemutb.dll!?RemoveWatch@COXFileWatcher@@QAEXPB_W@Z + A1 10807DD1 181 Bytes [0D, A8, 88, 0C, 10, 8B, 55, ...]
.text kemutb.dll!?RemoveWatch@COXFileWatcher@@QAEXPB_W@Z + 157 10807E87 33 Bytes [4D, CC, 3B, 0D, 60, 62, DA, ...]
.text kemutb.dll!?RemoveWatch@COXFileWatcher@@QAEXPB_W@Z + 179 10807EA9 116 Bytes [10, 8B, 55, CC, 3B, 15, 80, ...]
.text ...
.text kemutb.dll!?EnableWindowNotification@COXFileWatcher@@QAEXPB_WPAVCWnd@@H@Z + C3 108080D3 67 Bytes [15, 64, 5F, DA, 03, 8A, 54, ...]
.text kemutb.dll!?DisableWindowNotification@COXFileWatcher@@QAEXPB_W@Z + 27 10808117 145 Bytes [45, 14, 8B, 0D, EC, 5F, DA, ...]
.text kemutb.dll!?DisableWindowNotification@COXFileWatcher@@QAEXPB_W@Z + B9 108081A9 54 Bytes [55, 0C, 0F, B6, 42, 49, 03, ...]
.text kemutb.dll!?DisableWindowNotification@COXFileWatcher@@QAEXPB_W@Z + F2 108081E2 96 Bytes CALL 10845C46
.text kemutb.dll!?DisableWindowNotification@COXFileWatcher@@QAEXPB_W@Z + 153 10808243 81 Bytes [00, 00, 03, CA, 8B, 55, 0C, ...]
.text kemutb.dll!?DisableWindowNotification@COXFileWatcher@@QAEXPB_W@Z + 1A5 10808295 45 Bytes [75, 19, 8B, 45, 0C, 0F, B6, ...]
.text ...
.text kemutb.dll!??0COXFileWatcher@@QAE@H@Z + 8A 108087CA 290 Bytes [15, 78, 5F, DA, 03, 75, 21, ...]
.text kemutb.dll!?RemoveAllWatches@COXFileWatcher@@QAEXXZ + AD 108088ED 8 Bytes [CA, 8B, 55, 0C, 88, 8A, 83, ...]
.text kemutb.dll!?RemoveAllWatches@COXFileWatcher@@QAEXXZ + B7 108088F7 38 Bytes CALL 1084635B
.text kemutb.dll!?RemoveAllWatches@COXFileWatcher@@QAEXXZ + DE 1080891E 419 Bytes CALL 10846382
.text kemutb.dll!?FileWatchThreadFunction@COXFileWatcher@@KAIPAX@Z + F2 10808AC2 180 Bytes [03, 4D, FC, 88, 01, 0F, B6, ...]
.text kemutb.dll!?FileWatchThreadFunction@COXFileWatcher@@KAIPAX@Z + 1A7 10808B77 17 Bytes [75, 1D, A1, 2C, 66, DA, 03, ...]
.text kemutb.dll!?FileWatchThreadFunction@COXFileWatcher@@KAIPAX@Z + 1B9 10808B89 64 Bytes [00, 00, 03, D0, 8B, 45, 0C, ...]
.text kemutb.dll!?FileWatchThreadFunction@COXFileWatcher@@KAIPAX@Z + 1FA 10808BCA 20 Bytes [DA, 03, C1, E2, 18, 8B, 45, ...]
.text kemutb.dll!?FileWatchThreadFunction@COXFileWatcher@@KAIPAX@Z + 20F 10808BDF 24 Bytes CALL 10846643
.text ...
.text kemutb.dll!?AddWatch@COXFileWatcher@@QAEHPB_WHK@Z + 85 10808F85 35 Bytes [55, 14, 03, 55, FC, 88, 02, ...]
.text kemutb.dll!?AddWatch@COXFileWatcher@@QAEHPB_WHK@Z + A9 10808FA9 86 Bytes [60, DA, 03, 0F, AF, 05, 30, ...]
.text kemutb.dll!?AddWatch@COXFileWatcher@@QAEHPB_WHK@Z + 100 10809000 36 Bytes CALL 10846A64
.text kemutb.dll!?AddWatch@COXFileWatcher@@QAEHPB_WHK@Z + 125 10809025 3 Bytes CALL 10846A89
.text kemutb.dll!?AddWatch@COXFileWatcher@@QAEHPB_WHK@Z + 129 10809029 28 Bytes [75, 14, A1, 18, B8, C7, 03, ...]
.text ...
.text kemutb.dll!?GetFileWatchNotifier@COXFileWatcher@@QAE?AVCOXFileWatchNotifier@@K@Z + 8 10809368 25 Bytes [DA, 03, C1, E0, 10, 8B, 4D, ...]
.text kemutb.dll!?GetFileWatchNotifier@COXFileWatcher@@QAE?AVCOXFileWatchNotifier@@K@Z + 22 10809382 38 Bytes CALL 10846DE6
.text kemutb.dll!?GetFileWatchNotifier@COXFileWatcher@@QAE?AVCOXFileWatchNotifier@@K@Z + 4A 108093AA 18 Bytes [75, 1E, 8B, 15, 38, 68, DA, ...]
.text kemutb.dll!?GetFileWatchNotifier@COXFileWatcher@@QAE?AVCOXFileWatchNotifier@@K@Z + 5D 108093BD 40 Bytes [00, 00, 03, CA, 8B, 55, 0C, ...]
.text kemutb.dll!?GetFileWatchNotifier@COXFileWatcher@@QAE?AVCOXFileWatchNotifier@@K@Z + 86 108093E6 54 Bytes [75, 13, 8B, 55, 0C, 0F, B6, ...]
.text ...
.text kemutb.dll!?GetPath@COXFileWatchNotifier@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ + 12 108094F2 14 Bytes [03, 05, A8, BA, C7, 03, 8B, ...]
.text kemutb.dll!?GetPath@COXFileWatchNotifier@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ + 21 10809501 63 Bytes CALL 10846F65
.text kemutb.dll!?GetFileName@COXFileWatchNotifier@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ + 21 10809541 187 Bytes [00, 00, 03, D0, 8B, 45, 0C, ...]
.text kemutb.dll!??0COXFileWatchNotifier@@QAE@ABV0@@Z + D 108095FD 96 Bytes CALL 10847061
.text kemutb.dll!??0COXFileWatchNotifier@@QAE@ABV0@@Z + 6E 1080965E 380 Bytes [0F, 83, B8, 01, 00, 00, 8B, ...]
.text kemutb.dll!??0COXFileWatchNotifier@@QAE@PB_WHKHK00@Z + 7B 108097DB 76 Bytes [55, 14, 03, 55, FC, 88, 02, ...]
.text kemutb.dll!??0COXFileWatchNotifier@@QAE@PB_WHKHK00@Z + C8 10809828 2 Bytes [75, 18] {JNZ 0x1a}
.text kemutb.dll!??0COXFileWatchNotifier@@QAE@PB_WHKHK00@Z + CB 1080982B 76 Bytes [15, 14, 69, DA, 03, C1, E2, ...]
.text kemutb.dll!??0COXFileWatchNotifier@@QAE@PB_WHKHK00@Z + 118 10809878 73 Bytes [00, 00, 03, D0, 8B, 45, 0C, ...]
.text kemutb.dll!??0COXFileWatchNotifier@@QAE@PB_WHKHK00@Z + 162 108098C2 43 Bytes [55, 0C, 88, 4A, 53, EB, 3C, ...]
.text ...
.text kemutb.dll!?GetHookMap@COXHookWndMap@@SAAAV1@XZ + 3F 10809D5F 6 Bytes [83, 3D, E8, 5F, DA, 03]
.text kemutb.dll!?GetHookMap@COXHookWndMap@@SAAAV1@XZ + 46 10809D66 19 Bytes [75, 1E, 8B, 15, 0C, 64, DA, ...]
.text kemutb.dll!?GetHookMap@COXHookWndMap@@SAAAV1@XZ + 5B 10809D7B 17 Bytes [03, CA, 8B, 55, 0C, 88, 8A, ...]
.text kemutb.dll!?GetHookMap@COXHookWndMap@@SAAAV1@XZ + 6D 10809D8D 128 Bytes [75, 14, A1, 88, B9, C7, 03, ...]
.text kemutb.dll!?Remove@COXHookWndMap@@QAEXPAVCOXHookWnd@@@Z + 6E 10809E0E 450 Bytes [4D, 14, 03, 4D, FC, 8A, 11, ...]
.text kemutb.dll!?WindowProc@COXHookWnd@@UAEJIIJ@Z + 41 10809FD1 29 Bytes [75, 1D, A1, B4, 68, DA, 03, ...]
.text kemutb.dll!?WindowProc@COXHookWnd@@UAEJIIJ@Z + 60 10809FF0 57 Bytes CALL 10847A54
.text kemutb.dll!?WindowProc@COXHookWnd@@UAEJIIJ@Z + 9A 1080A02A 51 Bytes [45, 0C, 03, 50, 2C, 8B, 4D, ...]
.text kemutb.dll!?WindowProc@COXHookWnd@@UAEJIIJ@Z + CE 1080A05E 29 Bytes [75, 15, 8B, 15, 00, BD, C7, ...]
.text kemutb.dll!?Default@COXHookWnd@@QAEJXZ + C 1080A07C 10 Bytes [75, 1E, 8B, 15, 04, 65, DA, ...]
.text kemutb.dll!?Default@COXHookWnd@@QAEJXZ + 17 1080A087 9 Bytes [8B, 45, 0C, 0F, B6, 88, 95, ...]
.text kemutb.dll!?Default@COXHookWnd@@QAEJXZ + 21 1080A091 8 Bytes [03, CA, 8B, 55, 0C, 88, 8A, ...]
.text kemutb.dll!?Default@COXHookWnd@@QAEJXZ + 2B 1080A09B 23 Bytes CALL 10847AFF
.text kemutb.dll!?Default@COXHookWnd@@QAEJXZ + 43 1080A0B3 5 Bytes [55, 0C, 88, 4A, 79]


.text ...
.text kemutb.dll!?Add@COXHookWndMap@@QAEXPAUHWND__@@PAVCOXHookWnd@@@Z + 3 1080A233 43 Bytes [4D, 0C, 88, 41, 61, 83, 3D, ...]
.text kemutb.dll!?Add@COXHookWndMap@@QAEXPAUHWND__@@PAVCOXHookWnd@@@Z + 2F 1080A25F 127 Bytes CALL 10847CC3
.text kemutb.dll!?HookWindow@COXHookWnd@@UAEXPAVCWnd@@@Z + F 1080A2DF 76 Bytes JMP 98846A97
.text kemutb.dll!?HookWindow@COXHookWnd@@UAEXPAVCWnd@@@Z + 5C 1080A32C 5 Bytes [75, 14, A1, 9C, BC]
.text kemutb.dll!?HookWindow@COXHookWnd@@UAEXPAVCWnd@@@Z + 62 1080A332 782 Bytes [03, C1, E0, 18, 8B, 4D, 0C, ...]
.text kemutb.dll!?GetParent@COXParserObject@@QBEPAVCOXParserElement@@XZ + 1 1080A641 176 Bytes [55, FC, 3B, 55, 18, 73, 19, ...]
.text kemutb.dll!??1COXAttribute@@UAE@XZ + 23 1080A6F3 28 Bytes CALL 10848157
.text kemutb.dll!??1COXAttribute@@UAE@XZ + 40 1080A710 81 Bytes [03, C1, 8B, 4D, 0C, 88, 81, ...]
.text kemutb.dll!?GetStringValue@COXAttribute@@QAEPB_WXZ + 12 1080A762 48 Bytes CALL 108481C6
.text kemutb.dll!?GetStringValue@COXAttribute@@QAEPB_WXZ + 43 1080A793 6 Bytes [55, 0C, 0F, B6, 82, A3]
.text kemutb.dll!?GetStringValue@COXAttribute@@QAEPB_WXZ + 4A 1080A79A 22 Bytes [00, 00, 03, C1, 8B, 4D, 0C, ...]
.text kemutb.dll!?SetValue@COXAttribute@@QAEXPB_W@Z + 1 1080A7B1 21 Bytes [55, 0C, 0F, B6, 82, B9, 00, ...]
.text kemutb.dll!?SetValue@COXAttribute@@QAEXPB_W@Z + 17 1080A7C7 38 Bytes CALL 1084822B
.text kemutb.dll!?SetValue@COXAttribute@@QAEXH@Z + 1F 1080A7EF 17 Bytes CALL 10848253
.text kemutb.dll!?SetValue@COXAttribute@@QAEXH@Z + 31 1080A801 58 Bytes [00, 00, 03, 0D, A4, 68, DA, ...]
.text kemutb.dll!?IsValue@COXAttribute@@QAEHPB_WH@Z + 2C 1080A83C 50 Bytes [0D, 68, 63, DA, 03, C1, E1, ...]
.text kemutb.dll!?IsValue@COXAttribute@@QAEHPB_WH@Z + 5F 1080A86F 25 Bytes [55, 0C, 88, 4A, 75, 83, 3D, ...]
.text kemutb.dll!?IsValue@COXAttribute@@QAEHPB_WH@Z + 79 1080A889 11 Bytes [B6, 51, 64, 03, D0, 8B, 45, ...]
.text kemutb.dll!?IsValue@COXAttribute@@QAEHPB_WH@Z + 85 1080A895 47 Bytes CALL 108482F9
.text kemutb.dll!?SetErrorRptFunction@COXParser@@QAEXP6AHHPB_WHHK@ZK@Z + 5 1080A8C5 48 Bytes [15, 60, 67, DA, 03, C1, E2, ...]
.text kemutb.dll!?Parse@COXParser@@QAEHPA_WPAVCOXParserElement@@@Z + 16 1080A8F6 26 Bytes [55, 0C, 88, 8A, AB, 00, 00, ...]
.text kemutb.dll!?Parse@COXParser@@QAEHPA_WPAVCOXParserElement@@@Z + 31 1080A911 8 Bytes [0D, 28, 60, DA, 03, 89, 4D, ...] {OR EAX, 0x3da6028; MOV [EBP-0x4], ECX}
.text kemutb.dll!?Parse@COXParser@@QAEHPA_WPAVCOXParserElement@@@Z + 3A 1080A91A 70 Bytes [55, FC, 3B, 55, 18, 0F, 83, ...]
.text kemutb.dll!?UngetChar@COXParser@@IAEXH@Z + 21 1080A961 133 Bytes [15, C4, 61, DA, 03, 89, 55, ...]
.text kemutb.dll!?SaveBufferPos@COXParser@@IAEXAAUSAVEPOS@@@Z + 7 1080A9E7 272 Bytes [45, 14, 8B, 0D, 64, 5F, DA, ...]
.text kemutb.dll!?GetLiteralString@COXParser@@UAEPB_WPB_W@Z + 88 1080AAF8 22 Bytes [60, DA, 03, 8A, 94, 15, 74, ...]
.text kemutb.dll!?GetLiteralString@COXParser@@UAEPB_WPB_W@Z + 9F 1080AB0F 63 Bytes [1B, 8B, 0D, 0C, 61, DA, 03, ...]
.text kemutb.dll!?GetLiteralString@COXParser@@UAEPB_WPB_W@Z + DF 1080AB4F 35 Bytes [88, 0C, 10, 8B, 55, 94, 3B, ...]
.text kemutb.dll!?GetCharEntity@COXParser@@UAEPA_W_W@Z + 13 1080AB73 52 Bytes [FF, FF, 88, 14, 01, 8B, 45, ...]
.text kemutb.dll!?GetCharEntity@COXParser@@UAEPA_W_W@Z + 48 1080ABA8 61 Bytes [1C, 8B, 15, 64, 62, DA, 03, ...]
.text kemutb.dll!?GetCharEntity@COXParser@@UAEPA_W_W@Z + 86 1080ABE6 63 Bytes [FF, FF, 88, 14, 01, 8B, 45, ...]
.text kemutb.dll!?EncodeText@COXParser@@UAE?BVCOXQuickString@@PB_W@Z + 26 1080AC26 18 Bytes [45, 14, 8B, 0D, 74, 5F, DA, ...] {INC EBP; ADC AL, 0x8b; OR EAX, 0x3da5f74; MOV CL, [EBP+ECX-0x8c]; MOV [EAX+EDX], CL}
.text kemutb.dll!?EncodeText@COXParser@@UAE?BVCOXQuickString@@PB_W@Z + 39 1080AC39 21 Bytes [55, 94, 3B, 15, 80, 5F, DA, ...]
.text kemutb.dll!?EncodeText@COXParser@@UAE?BVCOXQuickString@@PB_W@Z + 4F 1080AC4F 59 Bytes [15, 7C, 62, DA, 03, 8A, 94, ...]
.text kemutb.dll!?EncodeText@COXParser@@UAE?BVCOXQuickString@@PB_W@Z + 8B 1080AC8B 166 Bytes [DA, 03, 75, 1C, 8B, 15, 3C, ...]
.text kemutb.dll!?WriteTabs@COXParser@@IAEHPAXH@Z + 42 1080AD32 14 Bytes [4D, 14, 8B, 15, F0, 5E, DA, ...]
.text kemutb.dll!?WriteTabs@COXParser@@IAEHPAXH@Z + 51 1080AD41 112 Bytes [88, 14, 01, 8B, 45, 94, 3B, ...]
.text kemutb.dll!?WriteTabs@COXParser@@IAEHPAXH@Z + C4 1080ADB4 205 Bytes [88, 14, 01, 8B, 45, 94, 3B, ...]
.text kemutb.dll!?WriteCData@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + A2 1080AE82 67 Bytes [75, 1E, 8B, 0D, D4, 64, DA, ...]
.text kemutb.dll!?WriteCData@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + E7 1080AEC7 28 Bytes [DA, 03, 00, 75, 17, A1, F8, ...]
.text kemutb.dll!?WriteComment@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 4 1080AEE4 50 Bytes CALL 10848948
.text kemutb.dll!?WriteComment@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 37 1080AF17 20 Bytes [45, 0C, 0F, B6, 88, 9D, 00, ...]
.text kemutb.dll!?WriteComment@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 4C 1080AF2C 16 Bytes CALL 10848990
.text kemutb.dll!?WriteComment@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 5D 1080AF3D 62 Bytes [4D, 0C, 0F, B6, 91, 80, 00, ...]
.text kemutb.dll!?WriteComment@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 9C 1080AF7C 8 Bytes [00, 8B, 15, EC, 5F, DA, 03, ...]
.text ...
.text kemutb.dll!?WriteMarkup@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 2 1080AFE2 37 Bytes [4D, 14, 03, 4D, FC, 88, 01, ...]
.text kemutb.dll!?WriteMarkup@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 28 1080B008 79 Bytes [D2, F7, 35, 30, 60, DA, 03, ...]
.text kemutb.dll!?WriteMarkup@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 78 1080B058 13 Bytes [4D, 14, 03, 4D, FC, 88, 01, ...]
.text kemutb.dll!?WriteMarkup@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 86 1080B066 231 Bytes [33, D2, F7, 35, 30, 60, DA, ...]
.text kemutb.dll!?WriteProcessingInstruction@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 6E 1080B14E 188 Bytes [73, FF, FF, FF, 33, D2, F7, ...]
.text kemutb.dll!?WriteText@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 2B 1080B20B 51 Bytes CALL 10848C6F
.text kemutb.dll!?WriteText@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 60 1080B240 13 Bytes [03, 05, EC, 66, DA, 03, 8B, ...]
.text kemutb.dll!?WriteText@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 6F 1080B24F 17 Bytes CALL 10848CB3
.text kemutb.dll!?WriteText@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 82 1080B262 17 Bytes [03, 05, 40, 69, DA, 03, 8B, ...]
.text kemutb.dll!?WriteText@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 94 1080B274 3 Bytes CALL 10848CD8
.text ...
.text kemutb.dll!?WriteObject@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 48 1080B4A8 12 Bytes [88, 50, 78, 83, 3D, E8, 5F, ...] {MOV [EAX+0x78], DL; CMP DWORD [0x3da5fe8], 0x0; JNZ 0x2a}
.text kemutb.dll!?WriteObject@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 55 1080B4B5 38 Bytes [0D, 34, 63, DA, 03, C1, E1, ...]
.text kemutb.dll!?WriteObject@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + 7C 1080B4DC 42 Bytes [15, A4, 62, DA, 03, C1, E2, ...]
.text kemutb.dll!?WriteObject@COXParser@@UAEHPAXPAVCOXParserObject@@H@Z + A7 1080B507 54 Bytes [C0, 00, 00, 00, D0, B0, 8E, ...]
.text kemutb.dll!?ReportError@COXParser@@IAAHIPB_WZZ + 1E 1080B53E 3 Bytes [03, 15, 58]
.text kemutb.dll!?ReportError@COXParser@@IAAHIPB_WZZ + 22 1080B542 10 Bytes [C7, 03, 8B, 45, 0C, 88, 90, ...] {MOV DWORD [EBX], 0x880c458b; NOP ; CWDE ; ADD [EAX], AL}
.text kemutb.dll!?ReportError@COXParser@@IAAHIPB_WZZ + 2D 1080B54D 17 Bytes CALL 10848FB1
.text kemutb.dll!?ReportError@COXParser@@IAAHIPB_WZZ + 40 1080B560 12 Bytes [03, 15, 78, BA, C7, 03, 8B, ...]
.text kemutb.dll!?ReportError@COXParser@@IAAHIPB_WZZ + 4E 1080B56E 40 Bytes CALL 10848FD2
.text ...
.text kemutb.dll!?TranslateErrorCode@COXParser@@UAEPB_WH@Z + 1 1080B601 48 Bytes [4D, 0C, 0F, B6, 51, 76, 03, ...]
.text kemutb.dll!?TranslateErrorCode@COXParser@@UAEPB_WH@Z + 32 1080B632 27 Bytes [75, 1E, 8B, 0D, 78, 68, DA, ...]
.text kemutb.dll!?TranslateErrorCode@COXParser@@UAEPB_WH@Z + 4E 1080B64E 3 Bytes [87, 00, 00]
.text kemutb.dll!?TranslateErrorCode@COXParser@@UAEPB_WH@Z + 52 1080B652 31 Bytes CALL 108490B6
.text kemutb.dll!?TranslateErrorCode@COXParser@@UAEPB_WH@Z + 72 1080B672 1 Byte [00]
.text ...
.text kemutb.dll!?InsertEntityValue@COXParser@@IAEXAAVCOXQuickString@@PB_W@Z + 38 1080B758 25 Bytes [72, FF, FF, FF, 33, D2, F7, ...]
.text kemutb.dll!?InsertEntityValue@COXParser@@IAEXAAVCOXQuickString@@PB_W@Z + 52 1080B772 10 Bytes [4D, 14, 03, 4D, FC, 88, 01, ...]
.text kemutb.dll!?InsertEntityValue@COXParser@@IAEXAAVCOXQuickString@@PB_W@Z + 5D 1080B77D 325 Bytes [FF, FF, FF, 33, D2, F7, 35, ...]
.text kemutb.dll!?InsertEntityValue@COXParser@@IAEXAAVCOXQuickString@@PB_W@Z + 1A4 1080B8C4 38 Bytes [00, 03, D0, 8B, 45, 0C, 88, ...]
.text kemutb.dll!?InsertEntityValue@COXParser@@IAEXAAVCOXQuickString@@PB_W@Z + 1CC 1080B8EC 6 Bytes [03, C1, 8B, 4D, 0C, 88]
.text ...
.text kemutb.dll!??0COXAttribute@@QAE@ABV0@@Z + 72 1080BA12 228 Bytes [55, 14, 03, 55, FC, 88, 02, ...]
.text kemutb.dll!?NumAttributes@COXParserElement@@QBEHXZ + 7 1080BAF7 142 Bytes [03, 05, C4, 61, DA, 03, 8B, ...]
.text kemutb.dll!?IsName@COXAttribute@@QAEHPB_WH@Z + 36 1080BB86 21 Bytes CALL 108495EA
.text kemutb.dll!?IsName@COXAttribute@@QAEHPB_WH@Z + 4C 1080BB9C 14 Bytes [00, 8B, 45, 0C, 66, 89, 50, ...] {ADD [EBX-0x7699f3bb], CL; PUSH EAX; SBB AL, 0x83; CMP EAX, 0x3da5fe8}
.text kemutb.dll!?IsName@COXAttribute@@QAEHPB_WH@Z + 5B 1080BBAB 44 Bytes [75, 18, 8B, 0D, AC, 65, DA, ...]
.text kemutb.dll!?IsName@COXAttribute@@QAEHPB_WH@Z + 88 1080BBD8 37 Bytes [45, 0C, 0F, B6, 88, 92, 00, ...]
.text kemutb.dll!?IsName@COXAttribute@@QAEHPB_WH@Z + AE 1080BBFE 8 Bytes [4D, 0C, 0F, B6, 51, 7F, 03, ...]
.text ...
.text kemutb.dll!??0COXToken@@QAE@XZ + 1 1080BD11 71 Bytes [55, 0C, 88, 4A, 73, 8B, 45, ...]
.text kemutb.dll!??0COXParserObject@@QAE@PAVCOXParserElement@@HPB_W@Z + 29 1080BD59 211 Bytes [0F, B6, 48, 64, 03, CA, 8B, ...]
.text kemutb.dll!??0COXAttribute@@QAE@PB_W0@Z + 7E 1080BE2E 55 Bytes CALL 10849892
.text kemutb.dll!??0COXAttribute@@QAE@PB_WH@Z + 16 1080BE66 12 Bytes [8D, 00, 00, 00, 03, C1, 8B, ...]
.text kemutb.dll!??0COXAttribute@@QAE@PB_WH@Z + 24 1080BE74 40 Bytes CALL 108498D8
.text kemutb.dll!??0COXAttribute@@QAE@PB_WH@Z + 4D 1080BE9D 49 Bytes [75, 1D, A1, 00, 69, DA, 03, ...]
.text kemutb.dll!??0COXAttribute@@QAE@PB_WH@Z + 7F 1080BECF 114 Bytes [55, 0C, 0F, B6, 42, 57, 03, ...]
.text kemutb.dll!??4COXAttribute@@QAEXAAV0@@Z + 42 1080BF42 6 Bytes CALL 108499A6
.text kemutb.dll!??4COXAttribute@@QAEXAAV0@@Z + 49 1080BF49 8 Bytes [19, 8B, 4D, 0C, 0F, B6, 91, ...]
.text kemutb.dll!??4COXAttribute@@QAEXAAV0@@Z + 52 1080BF52 14 Bytes [00, 00, 03, 15, FC, 67, DA, ...]
.text kemutb.dll!??4COXAttribute@@QAEXAAV0@@Z + 61 1080BF61 27 Bytes CALL 108499C5
.text kemutb.dll!?FindElement@COXParserElement@@QAEPAV1@PB_WH@Z + D 1080BF7D 40 Bytes [00, 00, 03, C1, 8B, 4D, 0C, ...]
.text kemutb.dll!?FindElement@COXParserElement@@QAEPAV1@PB_WH@Z + 36 1080BFA6 324 Bytes [03, CA, 8B, 55, 0C, 88, 8A, ...]
.text kemutb.dll!?FindElement@COXParserElement@@QAEPAV1@PB_WH@Z + 17C 1080C0EC 9 Bytes [00, 03, CA, 8B, 55, 0C, 88, ...]
.text kemutb.dll!?FindElement@COXParserElement@@QAEPAV1@PB_WH@Z + 188 1080C0F8 266 Bytes CALL 10849B5C
.text kemutb.dll!?FindAttribute@COXParserElement@@QAEPAVCOXAttribute@@PB_W0_N@Z + 74 1080C204 149 Bytes [FF, 33, D2, F7, 35, 30, 60, ...]
.text kemutb.dll!?FindAttribute@COXParserElement@@QAEPAVCOXAttribute@@PB_WH_N@Z + 6A 1080C29A 278 Bytes [0F, AF, 05, 30, 60, DA, 03, ...]
.text kemutb.dll!?GetNextChar@COXParser@@IAE_WHH@Z + 71 1080C3B1 75 Bytes [24, 0F, B6, 85, 70, FF, FF, ...]
.text kemutb.dll!?GetNextChar@COXParser@@IAE_WHH@Z + BD 1080C3FD 44 Bytes [88, 50, 4C, 83, 3D, E8, 5F, ...]
.text kemutb.dll!?RemoveWhiteSpace@COXParser@@IAEHXZ + 1A 1080C42A 33 Bytes [19, 8B, 4D, 0C, 0F, B6, 91, ...]
.text kemutb.dll!?RemoveWhiteSpace@COXParser@@IAEHXZ + 3C 1080C44C 55 Bytes [1E, 8B, 0D, D8, 68, DA, 03, ...]
.text kemutb.dll!?GetNameToken@COXParser@@IAEHAAVCOXQuickString@@@Z + 14 1080C484 17 Bytes [4D, 0C, 89, 51, 14, 83, 3D, ...] {DEC EBP; OR AL, 0x89; PUSH ECX; ADC AL, 0x83; CMP EAX, 0x3da5fe8; ADD [EBP+0x19], DH; MOV EDX, [EBP+0xc]}
.text kemutb.dll!?GetNameToken@COXParser@@IAEHAAVCOXQuickString@@@Z + 26 1080C496 214 Bytes [B6, 82, AE, 00, 00, 00, 03, ...]
.text kemutb.dll!?GetNameToken@COXParser@@IAEHAAVCOXQuickString@@@Z + FD 1080C56D 151 Bytes CALL 10849FD1
.text kemutb.dll!?GetNumberToken@COXParser@@IAEHAAH@Z + 95 1080C605 165 Bytes [45, 0C, 0F, B6, 88, 9A, 00, ...]
.text kemutb.dll!?GetStringToken@COXParser@@IAEHAAVCOXQuickString@@_W@Z + D 1080C6AD 36 Bytes CALL 1084A111
.text kemutb.dll!?GetStringToken@COXParser@@IAEHAAVCOXQuickString@@_W@Z + 33 1080C6D3 7 Bytes [00, 83, 3D, E8, 5F, DA, 03]
.text kemutb.dll!?GetStringToken@COXParser@@IAEHAAVCOXQuickString@@_W@Z + 3B 1080C6DB 5 Bytes [75, 12, 8B, 55, 0C] {JNZ 0x14; MOV EDX, [EBP+0xc]}
.text kemutb.dll!?GetStringToken@COXParser@@IAEHAAVCOXQuickString@@_W@Z + 41 1080C6E1 41 Bytes [42, 44, 03, 05, B8, B7, C7, ...]
.text kemutb.dll!?GetStringToken@COXParser@@IAEHAAVCOXQuickString@@_W@Z + 6B 1080C70B 17 Bytes [03, CA, 8B, 55, 0C, 88, 8A, ...]
.text ...
.text kemutb.dll!?GetToken@COXParser@@IAEHAAVCOXToken@@H@Z + 2A 1080C84A 45 Bytes [FF, 33, D2, F7, 35, 30, 60, ...]
.text kemutb.dll!?GetToken@COXParser@@IAEHAAVCOXToken@@H@Z + 58 1080C878 29 Bytes [15, EC, 5F, DA, 03, 75, 24, ...]
.text kemutb.dll!?GetToken@COXParser@@IAEHAAVCOXToken@@H@Z + 76 1080C896 36 Bytes [05, 38, 61, DA, 03, 8B, 4D, ...]
.text kemutb.dll!?GetToken@COXParser@@IAEHAAVCOXToken@@H@Z + 9B 1080C8BB 112 Bytes [B6, 85, 6F, FF, FF, FF, 33, ...]
.text kemutb.dll!?GetToken@COXParser@@IAEHAAVCOXToken@@H@Z + 10C 1080C92C 1 Byte [DA]
.text ...
.text kemutb.dll!?ParseEndTag@COXParser@@UAEHPAVCOXParserElement@@AAVCOXQuickString@@@Z + 5D 1080CA7D 29 Bytes [5F, DA, 03, 00, 75, 19, 8B, ...]
.text kemutb.dll!?ParseEndTag@COXParser@@UAEHPAVCOXParserElement@@AAVCOXQuickString@@@Z + 7C 1080CA9C 96 Bytes CALL 1084A500
.text kemutb.dll!?ParseProcessingInstruction@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + 3F 1080CAFF 6 Bytes [83, 3D, E8, 5F, DA, 03]
.text kemutb.dll!?ParseProcessingInstruction@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + 46 1080CB06 2 Bytes [75, 19] {JNZ 0x1b}
.text kemutb.dll!?ParseProcessingInstruction@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + 49 1080CB09 45 Bytes [55, 0C, 0F, B6, 82, B1, 00, ...]
.text kemutb.dll!?ParseProcessingInstruction@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + 77 1080CB37 14 Bytes [B6, 88, A7, 00, 00, 00, 03, ...]
.text kemutb.dll!?ParseProcessingInstruction@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + 86 1080CB46 81 Bytes CALL 1084A5AA
.text ...
.text kemutb.dll!?ParseMarkup@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + 3A 1080CC2A 19 Bytes CALL 1084A68E
.text kemutb.dll!?ParseMarkup@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + 4E 1080CC3E 70 Bytes [4D, 0C, 0F, B6, 91, BC, 00, ...]
.text kemutb.dll!?ParseMarkup@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + 95 1080CC85 20 Bytes [75, 13, 8B, 4D, 0C, 0F, B6, ...]
.text kemutb.dll!?ParseMarkup@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + AB 1080CC9B 23 Bytes CALL 1084A6FF
.text kemutb.dll!?ParseMarkup@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + C3 1080CCB3 43 Bytes [45, 0C, 89, 48, 3C, 83, 3D, ...]
.text ...
.text kemutb.dll!?ParseComment@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + 4F 1080D08F 23 Bytes [FF, FF, 33, D2, F7, 35, 30, ...]
.text kemutb.dll!?ParseComment@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + 67 1080D0A7 72 Bytes [55, 14, 03, 55, FC, 88, 02, ...]
.text kemutb.dll!?ParseComment@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + B0 1080D0F0 18 Bytes [33, D2, F7, 35, 30, 60, DA, ...]
.text kemutb.dll!?ParseComment@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + C3 1080D103 25 Bytes [6E, FF, FF, FF, 33, D2, F7, ...]
.text kemutb.dll!?ParseComment@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + DD 1080D11D 34 Bytes [55, 14, 03, 55, FC, 88, 02, ...]
.text ...
.text kemutb.dll!?ParseText@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + A6 1080D236 142 Bytes CALL 1084AC9A
.text kemutb.dll!?ParseText@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + 135 1080D2C5 114 Bytes [4D, 0C, 0F, B6, 91, A1, 00, ...]
.text kemutb.dll!?ParseText@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + 1A8 1080D338 77 Bytes [55, 14, 03, 55, FC, 0F, B6, ...]
.text kemutb.dll!?ParseText@COXParser@@UAEPAVCOXParserObject@@PAVCOXParserElement@@@Z + 1F6 1080D386 85 Bytes [45, 0C, 0F, B6, 88, A1, 00, ...]
.text kemutb.dll!?ParseElement@COXParser@@UAEHPAVCOXParserElement@@H@Z + D 1080D3DD 124 Bytes [8B, 45, 14, 03, 45, FC, 8A, ...]
.text kemutb.dll!?ParseElement@COXParser@@UAEHPAVCOXParserElement@@H@Z + 8A 1080D45A 131 Bytes [4D, 14, 03, 4D, FC, 88, 01, ...]
.text kemutb.dll!?ParseElement@COXParser@@UAEHPAVCOXParserElement@@H@Z + 10E 1080D4DE 57 Bytes [33, D2, F7, 35, 30, 60, DA, ...]
.text kemutb.dll!?ParseElement@COXParser@@UAEHPAVCOXParserElement@@H@Z + 149 1080D519 104 Bytes [33, D2, F7, 35, 30, 60, DA, ...]
.text kemutb.dll!?ParseElement@COXParser@@UAEHPAVCOXParserElement@@H@Z + 1B2 1080D582 209 Bytes [14, 03, 55, FC, 88, 02, 0F, ...]
.text ...
.text kemutb.dll!?WriteFile@COXParser@@QAEHPB_W@Z + 8A 1080D86A 85 Bytes [55, FC, 03, 15, 28, 60, DA, ...]
.text kemutb.dll!?WriteAttributes@COXParser@@UAEHPAXPAVCOXParserElement@@@Z + 10 1080D8C0 145 Bytes CALL 1084B324
.text kemutb.dll!?WriteAttributes@COXParser@@UAEHPAXPAVCOXParserElement@@@Z + A2 1080D952 130 Bytes [55, 14, 03, 55, FC, 88, 02, ...]
.text kemutb.dll!?WriteAttributes@COXParser@@UAEHPAXPAVCOXParserElement@@@Z + 125 1080D9D5 235 Bytes [FF, 33, D2, F7, 35, 30, 60, ...]
.text kemutb.dll!?WriteAttributes@COXParser@@UAEHPAXPAVCOXParserElement@@@Z + 211 1080DAC1 72 Bytes [FF, 33, D2, F7, 35, 30, 60, ...]
.text kemutb.dll!?WriteAttributes@COXParser@@UAEHPAXPAVCOXParserElement@@@Z + 25A 1080DB0A 26 Bytes [15, 80, B6, C7, 03, C1, E2, ...]
.text ...
.text kemutb.dll!?WriteElement@COXParser@@UAEHPAXPAVCOXParserElement@@H@Z + 2 1080DB52 141 Bytes [4D, 0C, 89, 41, 0C, 83, 3D, ...]
.text kemutb.dll!?WriteElement@COXParser@@UAEHPAXPAVCOXParserElement@@H@Z + 91 1080DBE1 167 Bytes CALL 1084B645
.text kemutb.dll!?WriteElement@COXParser@@UAEHPAXPAVCOXParserElement@@H@Z + 139 1080DC89 30 Bytes [55, 0C, 88, 4A, 68, 83, 3D, ...]
.text kemutb.dll!?WriteElement@COXParser@@UAEHPAXPAVCOXParserElement@@H@Z + 158 1080DCA8 43 Bytes [55, 0C, 88, 8A, A8, 00, 00, ...]
.text kemutb.dll!?WriteElement@COXParser@@UAEHPAXPAVCOXParserElement@@H@Z + 185 1080DCD5 78 Bytes CALL 1084B739
.text ...
.text kemutb.dll!??0COXParserElement@@QAE@XZ + 23 1080E1A3 51 Bytes [55, 0C, 0F, B6, 42, 7B, 03, ...]
.text kemutb.dll!??0COXParserElement@@QAE@XZ + 57 1080E1D7 230 Bytes [A1, 64, 5F, DA, 03, 89, 45, ...]
.text kemutb.dll!?DelObject@COXParserElement@@QAEHH@Z + 3E 1080E2BE 119 Bytes [FF, 33, D2, F7, 35, 30, 60, ...]
.text kemutb.dll!?DelObject@COXParserElement@@QAEHPAVCOXParserObject@@@Z + 16 1080E336 13 Bytes [D2, F7, 35, 30, 60, DA, 03, ...] {SAL BH, CL; XOR EAX, 0x3da6030; CMP EDX, [0x3da61a8]}
.text kemutb.dll!?DelObject@COXParserElement@@QAEHPAVCOXParserObject@@@Z + 24 1080E344 29 Bytes [24, 0F, B6, 85, 6A, FF, FF, ...]
.text kemutb.dll!?DelObject@COXParserElement@@QAEHPAVCOXParserObject@@@Z + 42 1080E362 124 Bytes [4D, 14, 03, 4D, FC, 88, 01, ...]
.text kemutb.dll!?DelAttribute@COXParserElement@@QAEHH@Z + 4F 1080E3DF 56 Bytes JMP 1080E1E1 \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?DelAttribute@COXParserElement@@QAEHH@Z + 88 1080E418 18 Bytes [1D, A1, 2C, 63, DA, 03, C1, ...]
.text kemutb.dll!?DelAttribute@COXParserElement@@QAEHH@Z + 9B 1080E42B 118 Bytes [03, D0, 8B, 45, 0C, 88, 90, ...]
.text kemutb.dll!?ParseStartTag@COXParser@@UAEPAVCOXParserElement@@PAV2@AAH@Z + 2 1080E4A2 258 Bytes [FF, FF, 33, D2, F7, 35, 30, ...]
.text kemutb.dll!?ParseStartTag@COXParser@@UAEPAVCOXParserElement@@PAV2@AAH@Z + 106 1080E5A6 19 Bytes [FF, 33, D2, F7, 35, 30, 60, ...]
.text kemutb.dll!?ParseStartTag@COXParser@@UAEPAVCOXParserElement@@PAV2@AAH@Z + 11A 1080E5BA 16 Bytes [DA, 03, 8B, 55, 14, 03, 55, ...]
.text kemutb.dll!?ParseStartTag@COXParser@@UAEPAVCOXParserElement@@PAV2@AAH@Z + 12B 1080E5CB 265 Bytes [33, D2, F7, 35, 30, 60, DA, ...]
.text kemutb.dll!?LoadFile@COXParser@@IAEPA_WPB_W@Z + 96 1080E6D6 142 Bytes [00, 03, D0, 8B, 45, 0C, 88, ...]
.text kemutb.dll!?LoadFile@COXParser@@IAEPA_WPB_W@Z + 125 1080E765 77 Bytes [0C, 88, 4A, 49, 83, 3D, E8, ...]
.text kemutb.dll!?ClearObjects@COXParserElement@@QAEXXZ + 13 1080E7B3 95 Bytes [18, 8B, 0D, F0, 67, DA, 03, ...]
.text kemutb.dll!?ClearObjects@COXParserElement@@QAEXXZ + 75 1080E815 81 Bytes CALL 1084C279
.text kemutb.dll!?ClearAttributes@COXParserElement@@QAEXXZ + 37 1080E867 162 Bytes [45, 0C, 88, 50, 60, 83, 3D, ...]
.text kemutb.dll!?ParseFile@COXParser@@QAEHPB_W@Z + A 1080E90A 15 Bytes [5F, DA, 03, 00, 75, 1E, 8B, ...] {POP EDI; FIADD DWORD [EBX]; ADD [EBP+0x1e], DH; MOV EDX, [0x3da657c]; SHL EDX, 0x18}
.text kemutb.dll!?ParseFile@COXParser@@QAEHPB_W@Z + 1A 1080E91A 11 Bytes [45, 0C, 0F, B6, 88, 8F, 00, ...] {INC EBP; OR AL, 0xf; MOV DH, 0x88; POP DWORD [EAX]; ADD [EAX], AL; ADD ECX, EDX}
.text kemutb.dll!?ParseFile@COXParser@@QAEHPB_W@Z + 26 1080E926 1 Byte [55]
.text kemutb.dll!?ParseFile@COXParser@@QAEHPB_W@Z + 26 1080E926 7 Bytes [55, 0C, 88, 8A, 8F, 00, 00]
.text kemutb.dll!?ParseFile@COXParser@@QAEHPB_W@Z + 2E 1080E92E 35 Bytes CALL 1084C392
.text ...
.text kemutb.dll!??4COXParserElement@@QAEAAV0@AAV0@@Z + 32 1080EE02 153 Bytes [FF, 33, D2, F7, 35, 30, 60, ...]
.text kemutb.dll!??4COXParser@@QAEAAV0@AAV0@@Z + 7C 1080EE9C 71 Bytes [60, DA, 03, 03, 05, D4, 5F, ...]
.text kemutb.dll!??4COXParser@@QAEAAV0@AAV0@@Z + C4 1080EEE4 26 Bytes [75, 1E, 8B, 0D, D8, 67, DA, ...]
.text kemutb.dll!??4COXParser@@QAEAAV0@AAV0@@Z + DF 1080EEFF 2 Bytes [81, 83]
.text kemutb.dll!??4COXParser@@QAEAAV0@AAV0@@Z + E2 1080EF02 65 Bytes CALL 1084C966
.text kemutb.dll!??1COXParserElement@@UAE@XZ + 14 1080EF44 13 Bytes [0C, 88, 90, AF, 00, 00, 00, ...]
.text kemutb.dll!??1COXParserElement@@UAE@XZ + 22 1080EF52 18 Bytes [75, 1E, 8B, 0D, B8, 67, DA, ...]
.text kemutb.dll!??1COXParserElement@@UAE@XZ + 37 1080EF67 23 Bytes [03, C1, 8B, 4D, 0C, 88, 81, ...]
.text kemutb.dll!??1COXParserElement@@UAE@XZ + 4F 1080EF7F 67 Bytes [DA, 03, C1, E2, 18, 8B, 45, ...]
.text kemutb.dll!??1COXParserElement@@UAE@XZ + 93 1080EFC3 246 Bytes [45, FC, EB, 0C, 8B, 4D, FC, ...]
.text kemutb.dll!??0COXParser@@QAE@XZ + EA 1080F0BA 57 Bytes [45, 0C, 88, 50, 6C, 83, 3D, ...]
.text kemutb.dll!??1COXParser@@UAE@XZ + 14 1080F0F4 30 Bytes [0C, 0F, B6, 48, 63, 03, CA, ...]
.text kemutb.dll!??1COXParser@@UAE@XZ + 33 1080F113 6 Bytes [4D, 0C, 0F, B6, 91, A2]
.text kemutb.dll!??1COXParser@@UAE@XZ + 3C 1080F11C 62 Bytes [03, D0, 8B, 45, 0C, 88, 90, ...]
.text kemutb.dll!??1COXParser@@UAE@XZ + 7B 1080F15B 7 Bytes [FF, FF, 0F, B6, 85, 66, FF]
.text kemutb.dll!??1COXParser@@UAE@XZ + 84 1080F164 80 Bytes [33, D2, F7, 35, 30, 60, DA, ...]
.text ...
.text kemutb.dll!??0COXParser@@QAE@ABV0@@Z + E9 1080F359 8 Bytes [4A, 5E, 83, 3D, E8, 5F, DA, ...]
.text kemutb.dll!??0COXParser@@QAE@ABV0@@Z + F2 1080F362 17 Bytes [75, 1D, A1, 5C, 66, DA, 03, ...]
.text kemutb.dll!??0COXParser@@QAE@ABV0@@Z + 104 1080F374 10 Bytes [00, 00, 03, D0, 8B, 45, 0C, ...]
.text kemutb.dll!??0COXParser@@QAE@ABV0@@Z + 110 1080F380 17 Bytes CALL 1084CDE4
.text kemutb.dll!??0COXParser@@QAE@ABV0@@Z + 123 1080F393 267 Bytes [00, 03, 15, BC, B5, C7, 03, ...]
.text kemutb.dll!?InsertObject@COXParserElement@@QAEPAVCOXParserObject@@HPAV2@@Z + 2F 1080F49F 39 Bytes [00, 74, 08, 8B, 4D, 08, 89, ...]
.text kemutb.dll!?InsertObject@COXParserElement@@QAEPAVCOXParserObject@@HPAV2@@Z + 57 1080F4C7 20 Bytes CALL 1080F970 \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?MoveObject@COXParserElement@@QAEPAVCOXParserObject@@HPAV2@@Z + C 1080F4DC 239 Bytes [4D, D0, 89, 71, 04, 6A, 00, ...]
.text kemutb.dll!?InsertElement@COXParserElement@@QAEPAV1@HPB_W@Z + C 1080F5CC 18 Bytes [8B, 55, D0, 88, 42, 0A, 8B, ...]
.text kemutb.dll!?InsertElement@COXParserElement@@QAEPAV1@HPB_W@Z + 1F 1080F5DF 10 Bytes CALL 1080F970 \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?InsertElement@COXParserElement@@QAEPAV1@HPB_W@Z + 2A 1080F5EA 16 Bytes [EE, 00, 83, F2, 00, 33, F0, ...]
.text kemutb.dll!?InsertElement@COXParserElement@@QAEPAV1@HPB_W@Z + 3B 1080F5FB 40 Bytes CALL 1080F970 \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?InsertElement@COXParserElement@@QAEPAV1@HPB_W@Z + 64 1080F624 31 Bytes CALL 1080F970 \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text ...
.text kemutb.dll!?AddAttribute@COXParserElement@@QAEPAVCOXAttribute@@PAV2@@Z + 16 1080F666 4 Bytes [F0, 8B, FA, 6A]
.text kemutb.dll!?AddAttribute@COXParserElement@@QAEPAVCOXAttribute@@PAV2@@Z + 1B 1080F66B 15 Bytes CALL 1080F970 \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?AddAttribute@COXParserElement@@QAEPAVCOXAttribute@@PB_W0@Z + B 1080F67B 22 Bytes [33, F0, 33, FA, 8B, 4D, D0, ...]
.text kemutb.dll!?AddAttribute@COXParserElement@@QAEPAVCOXAttribute@@PB_W0@Z + 23 1080F693 7 Bytes [00, 83, E2, 00, 35, C9, 00]
.text kemutb.dll!?AddAttribute@COXParserElement@@QAEPAVCOXAttribute@@PB_W0@Z + 2D 1080F69D 52 Bytes [F2, 00, 8B, 55, D0, 88, 42, ...]
.text kemutb.dll!?AddAttribute@COXParserElement@@QAEPAVCOXAttribute@@PB_W0@Z + 63 1080F6D3 10 Bytes [83, C4, 04, 25, FF, 00, 00, ...]
.text kemutb.dll!?AddAttribute@COXParserElement@@QAEPAVCOXAttribute@@PB_W0@Z + 6E 1080F6DE 24 Bytes [83, F0, 7D, 83, F2, 00, 8B, ...]
.text ...
.text kemutb.dll!?AddAttribute@COXParserElement@@QAEPAVCOXAttribute@@PB_WH@Z + C 1080F73C 31 Bytes CALL 1080F970 \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?AddAttribute@COXParserElement@@QAEPAVCOXAttribute@@PB_WH@Z + 2C 1080F75C 14 Bytes [00, 83, C4, 04, 25, FF, 00, ...] {ADD [EBX-0xdafb3c], AL; ADD [EAX], AL; ADD [EBX-0x49caff1e], AL}
.text kemutb.dll!?AddAttribute@COXParserElement@@QAEPAVCOXAttribute@@PB_WH@Z + 3D 1080F76D 9 Bytes [83, F2, 00, 8B, 55, D0, 88, ...] {XOR EDX, 0x0; MOV EDX, [EBP-0x30]; MOV [EDX+0x13], AL}
.text kemutb.dll!?AddAttribute@COXParserElement@@QAEPAVCOXAttribute@@PB_WH@Z + 47 1080F777 27 Bytes [45, D0, 8B, 40, 04, 99, 8B, ...]
.text kemutb.dll!?AddAttribute@COXParserElement@@QAEPAVCOXAttribute@@PB_WH@Z + 63 1080F793 22 Bytes [33, F0, 33, FA, 8B, 4D, D0, ...]
.text ...
.text kemutb.dll!?ParseAttributes@COXParser@@UAEHPAVCOXParserElement@@@Z + D 1080F80D 283 Bytes [00, 00, 00, EB, 09, 8B, 45, ...]
.text kemutb.dll!?ParseAttributes@COXParser@@UAEHPAVCOXParserElement@@@Z + 129 1080F929 118 Bytes [33, CA, 8B, 45, D0, 0F, B6, ...]
.text kemutb.dll!?ParseAttributes@COXParser@@UAEHPAVCOXParserElement@@@Z + 1A0 1080F9A0 30 Bytes [75, 78, 85, F6, 89, 85, 78, ...]
.text kemutb.dll!?ParseAttributes@COXParser@@UAEHPAVCOXParserElement@@@Z + 1BF 1080F9BF 9 Bytes [FF, FF, 6A, 00, 50, E8, 81, ...]
.text kemutb.dll!?ParseAttributes@COXParser@@UAEHPAVCOXParserElement@@@Z + 1C9 1080F9C9 11 Bytes [53, 8D, 45, 44, 6A, 1E, 50, ...]
.text ...
.text kemutb.dll!?AddObject@COXParserElement@@QAEPAVCOXParserObject@@PAV2@@Z + 16 1080FA96 20 Bytes [5D, 10, 85, DB, 89, 85, F4, ...]
.text kemutb.dll!?AddElement@COXParserElement@@QAEPAV1@PB_W@Z + D 1080FAAD 37 Bytes [56, 57, BF, 94, F5, 9F, 03, ...]
.text kemutb.dll!?AddElement@COXParserElement@@QAEPAV1@PB_W@Z + 33 1080FAD3 37 Bytes [8D, 85, FC, FB, FF, FF, 57, ...]
.text kemutb.dll!?AddElement@COXParserElement@@QAEPAV1@PB_W@Z + 59 1080FAF9 2 Bytes CALL 1080FA4C \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?AddElement@COXParserElement@@QAEPAV1@PB_W@Z + 5C 1080FAFC 185 Bytes [FF, FF, 83, C4, 10, 0F, B7, ...]
.text kemutb.dll!?FindElements@COXParserElement@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_WH@Z + 77 1080FBB7 88 Bytes [B7, A1, FF, C9, C3, CC, CC, ...]
.text kemutb.dll!?FindElements@COXParserElement@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_WH@Z + D1 1080FC11 22 Bytes [8B, 44, 24, 08, 85, C0, 75, ...]
.text kemutb.dll!?FindElements@COXParserElement@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_WH@Z + E8 1080FC28 80 Bytes [0D, 74, 69, DA, 03, 85, C9, ...]
.text kemutb.dll!?FindElements@COXParserElement@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_WH@Z + 139 1080FC79 60 Bytes [68, 18, C9, C7, 03, FF, D0, ...]
.text kemutb.dll!?FindElements@COXParserElement@@QAE?AV?$vector@PAVCOXParserObject@@V?$allocator@PAVCOXParserObject@@@std@@@std@@PB_WH@Z + 176 1080FCB6 22 Bytes [00, BE, 06, 00, 00, 00, 89, ...]
.text kemutb.dll!?AddObjectToElement@COXParser@@UAEXPAVCOXParserElement@@PAVCOXParserObject@@@Z + D 1080FCCD 117 Bytes [35, 14, C9, C7, 03, 8B, C6, ...]
.text kemutb.dll!?IsEmpty@COXQuickString@@QBEHXZ + 14 1080FD44 126 Bytes [C7, 05, 14, C9, C7, 03, 07, ...]
.text kemutb.dll!?Append@COXQuickString@@QAEH_W@Z + 73 1080FDC3 11 Bytes [D7, 33, D3, 35, B2, 08, 97, ...] {XLATB ; XOR EDX, EBX; XOR EAX, 0xac9708b2; XOR EDX, 0x0}
.text kemutb.dll!?Append@COXQuickString@@QAEH_W@Z + 7F 1080FDCF 37 Bytes [44, 24, 0C, 8B, 44, 24, 20, ...]
.text kemutb.dll!?AddString@COXQuickString@@QAEHPB_W@Z + 5 1080FDF5 268 Bytes [18, 50, 8D, 54, 24, 10, 51, ...]
.text kemutb.dll!?AddString@COXQuickString@@QAEHPB_WH@Z + 22 1080FF02 22 Bytes [4C, 24, 0C, 33, C2, 33, C1, ...]
.text kemutb.dll!?AddString@COXQuickString@@QAEHPB_WH@Z + 39 1080FF19 85 Bytes [0D, D0, CA, C7, 03, 8B, 15, ...]
.text kemutb.dll!?AddString@COXQuickString@@QAEHPB_WH@Z + 8F 1080FF6F 26 Bytes [15, FC, CA, C7, 03, 33, C1, ...]
.text kemutb.dll!?AddString@COXQuickString@@QAEHPB_WH@Z + AA 1080FF8A 95 Bytes [F1, 00, 89, 44, 24, 00, A1, ...]
.text kemutb.dll!?SetGrowBy@COXQuickString@@QAEXI@Z + A 1080FFEA 216 Bytes [00, 89, 54, 24, 10, 99, 33, ...]
.text kemutb.dll!??8COXQuickString@@QAEHPB_W@Z + 43 108100C3 147 Bytes [D7, 33, D3, 35, AD, 4F, C6, ...]
.text kemutb.dll!??8COXQuickString@@QAEHAAV0@@Z + 77 10810157 6 Bytes [C7, 03, 53, 8B, 1D, 3C] {MOV DWORD [EBX], 0x3c1d8b53}
.text kemutb.dll!??8COXQuickString@@QAEHAAV0@@Z + 7E 1081015E 125 Bytes [C7, 03, 56, 8B, 35, 38, CC, ...]
.text kemutb.dll!??9COXQuickString@@QAEHPB_W@Z + 7C 108101DC 53 Bytes [C7, 03, A0, 40, CC, C7, 03, ...]
.text kemutb.dll!??9COXQuickString@@QAEHAAV0@@Z + 32 10810212 12 Bytes [35, 88, CC, C7, 03, 57, 8B, ...] {XOR EAX, 0x3c7cc88; PUSH EDI; MOV EDI, [0x3c7cc94]}
.text kemutb.dll!??9COXQuickString@@QAEHAAV0@@Z + 3F 1081021F 87 Bytes [C1, 33, C6, 8B, D7, 33, D3, ...]
.text kemutb.dll!??9COXQuickString@@QAEHAAV0@@Z + 97 10810277 4 Bytes [C7, 03, A0, 90]
.text kemutb.dll!??9COXQuickString@@QAEHAAV0@@Z + 9C 1081027C 12 Bytes [C7, 03, 8A, 15, 88, CC, C7, ...] {MOV DWORD [EBX], 0xcc88158a; MOV DWORD [EBX], 0x18244c8a}
.text kemutb.dll!??BCOXQuickString@@QBEPB_WXZ + 9 10810289 133 Bytes [C4, 0C, 32, C2, 5F, 5E, 32, ...]
.text kemutb.dll!?Strip@COXQuickString@@QAEHXZ + 3F 1081030F 109 Bytes [28, 89, 5C, 24, 2C, FF, 15, ...]
.text kemutb.dll!?Strip@COXQuickString@@QAEHXZ + AD 1081037D 102 Bytes [C1, 33, D7, 33, C6, 33, D3, ...]
.text kemutb.dll!?Strip@COXQuickString@@QAEHXZ + 114 108103E4 28 Bytes [20, CE, C7, 03, 8A, 15, 18, ...]
.text kemutb.dll!?Strip@COXQuickString@@QAEHXZ + 131 10810401 44 Bytes [EC, 28, 8B, 0D, 48, CE, C7, ...]
.text kemutb.dll!?Strip@COXQuickString@@QAEHXZ + 15E 1081042E 262 Bytes [89, 44, 24, 0C, 8B, 44, 24, ...]
.text kemutb.dll!?TrimLeft@COXQuickString@@QAEHXZ + 95 10810535 252 Bytes [44, 24, 24, A1, 24, D2, C7, ...]
.text kemutb.dll!?SetString@COXQuickString@@QAEHPB_W@Z + 2 10810632 96 Bytes [DA, 81, F7, 16, FE, ED, 9B, ...]
.text kemutb.dll!?SetString@COXQuickString@@QAEHPB_W@Z + 63 10810693 187 Bytes [90, 90, 90, 90, 90, 90, 90, ...]
.text kemutb.dll!?SetString@COXQuickString@@QAEHPB_WH@Z + 7F 1081074F 2 Bytes [33, F9] {XOR EDI, ECX}
.text kemutb.dll!?SetString@COXQuickString@@QAEHPB_WH@Z + 82 10810752 7 Bytes [DA, 81, F7, 11, FE, ED, 9B] {FIADD DWORD [ECX-0x1201ee09]; WAIT }
.text kemutb.dll!?SetString@COXQuickString@@QAEHPB_WH@Z + 8A 1081075A 1 Byte [DE]
.text kemutb.dll!?SetString@COXQuickString@@QAEHPB_WH@Z + 8A 1081075A 105 Bytes [DE, 89, 7C, 24, 0C, 8B, 7C, ...]
.text kemutb.dll!?SetLength@COXQuickString@@QAEHI@Z + 14 108107C4 260 Bytes [0D, F8, D2, C7, 03, 53, 8B, ...]
.text kemutb.dll!??0COXQuickString@@QAE@PB_W@Z + 9 108108C9 51 Bytes [54, 24, 20, 50, 8D, 54, 24, ...]
.text kemutb.dll!??0COXQuickString@@QAE@ABV0@@Z + D 108108FD 36 Bytes [90, 90, 90, 83, EC, 10, A1, ...]
.text kemutb.dll!??0COXQuickString@@QAE@ABV0@@Z + 32 10810922 178 Bytes [DA, 81, F7, B1, E2, D7, F7, ...]
.text kemutb.dll!?GetToken@COXQuickString@@QBE?BV1@H_W@Z + 75 108109D5 40 Bytes [44, 24, 14, 8B, 44, 24, 2C, ...]
.text kemutb.dll!?GetToken@COXQuickString@@QBE?BV1@H_W@Z + 9E 108109FE 74 Bytes [54, 24, 10, 51, 52, FF, 15, ...]
.text kemutb.dll!?GetToken@COXQuickString@@QBE?BV1@H_W@Z + E9 10810A49 44 Bytes [3D, EC, D3, C7, 03, 8B, C1, ...]
.text kemutb.dll!?GetToken@COXQuickString@@QBE?BV1@H_W@Z + 117 10810A77 7 Bytes [14, 8B, 44, 24, 2C, 89, 54]
.text kemutb.dll!?GetToken@COXQuickString@@QBE?BV1@H_W@Z + 11F 10810A7F 16 Bytes [18, 99, 33, C1, 8B, 0D, 00, ...] {SBB [ECX+0xd8bc133], BL; ADD AH, DL; MOV DWORD [EBX], 0xc633d733; XOR EDX, EBX}
.text ...
.text kemutb.dll!?IsVisible@COXToolTipCtrl@@IBEHXZ + B 10810BAB 398 Bytes [D2, 33, C1, 33, D7, 33, C6, ...]
.text kemutb.dll!?GetFieldFromString@COXToolTipCtrl@@IBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@H_W@Z + 1A 10810D3A 46 Bytes [0C, 32, C2, 5F, 5E, 32, C1, ...]
.text kemutb.dll!?GetFieldFromString@COXToolTipCtrl@@IBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@H_W@Z + 49 10810D69 7 Bytes [3D, DC, D4, C7, 03, 8B, C1] {CMP EAX, 0x3c7d4dc; MOV EAX, ECX}
.text kemutb.dll!?GetFieldFromString@COXToolTipCtrl@@IBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@H_W@Z + 51 10810D71 79 Bytes [C6, 8B, D7, 33, D3, 35, BF, ...]
.text kemutb.dll!?GetFieldFromString@COXToolTipCtrl@@IBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@H_W@Z + A1 10810DC1 49 Bytes CALL B084D59A
.text kemutb.dll!?GetFieldFromString@COXToolTipCtrl@@IBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@H_W@Z + D3 10810DF3 67 Bytes [8B, 0D, 00, D5, C7, 03, 53, ...]
.text kemutb.dll!?GetFieldFromString@COXToolTipCtrl@@IBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@H_W@Z + 117 10810E37 5 Bytes [14, 8B, 44, 24, 2C] {ADC AL, 0x8b; INC ESP; AND AL, 0x2c}
.text kemutb.dll!?GetFieldFromString@COXToolTipCtrl@@IBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@H_W@Z + 11D 10810E3D 1 Byte [54]
.text kemutb.dll!?GetFieldFromString@COXToolTipCtrl@@IBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@H_W@Z + 11D 10810E3D 243 Bytes [54, 24, 18, 99, 33, C1, 8B, ...]
.text kemutb.dll!?GetFieldFromString@COXToolTipCtrl@@IBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@H_W@Z + 211 10810F31 1 Byte [EC]
.text kemutb.dll!?GetFieldFromString@COXToolTipCtrl@@IBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@H_W@Z + 211 10810F31 63 Bytes [EC, 10, A1, F0, D5, C7, 03, ...]
.text kemutb.dll!?GetFieldFromString@COXToolTipCtrl@@IBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@H_W@Z + 251 10810F71 95 Bytes [33, DB, 33, F9, 8B, 0D, 08, ...]
.text kemutb.dll!??4COXToolTipInfo@@QAEXAAUOXTOOLINFO@@@Z + 21 10810FD1 390 Bytes [8B, 35, 60, D6, C7, 03, 57, ...]
.text kemutb.dll!?SetMargin@COXToolTipCtrl@@QAEXPAUtagRECT@@@Z + 19 10811159 405 Bytes [10, 99, 33, C1, 33, D7, 33, ...]
.text kemutb.dll!??1COXToolTipCtrl@@UAE@XZ + 2F 108112EF 135 Bytes [90, 83, EC, 18, 8B, 0D, D0, ...]
.text kemutb.dll!??1COXToolTipCtrl@@UAE@XZ + B7 10811377 28 Bytes [18, 83, C4, 0C, 32, C2, 5F, ...]
.text kemutb.dll!??1COXToolTipCtrl@@UAE@XZ + D4 10811394 30 Bytes [0D, 78, DF, C7, 03, 53, 8B, ...]
.text kemutb.dll!?OnSetFocus@COXToolTipCtrl@@IAEXPAVCWnd@@@Z + 3 108113B3 10 Bytes [D7, 33, D3, 35, 67, F3, B0, ...]
.text kemutb.dll!?OnSetFocus@COXToolTipCtrl@@IAEXPAVCWnd@@@Z + E 108113BE 36 Bytes [89, 44, 24, 0C, 8B, 44, 24, ...]
.text kemutb.dll!?OnDestroy@COXToolTipCtrl@@IAEXXZ + 3 108113E3 91 Bytes [0D, 90, DF, C7, 03, 33, D7, ...]
.text kemutb.dll!?AddTool@COXToolTipCtrl@@QAEHPAVCWnd@@PB_WPBUtagRECT@@I@Z + 2F 1081143F 50 Bytes [15, CC, DF, C7, 03, 53, 56, ...]
.text kemutb.dll!?AddTool@COXToolTipCtrl@@QAEHPAVCWnd@@PB_WPBUtagRECT@@I@Z + 62 10811472 97 Bytes [DB, 33, F9, 8B, 0D, E0, DF, ...]
.text kemutb.dll!?AddTool@COXToolTipCtrl@@QAEHPAVCWnd@@PB_WPBUtagRECT@@I@Z + C4 108114D4 75 Bytes [E1, C7, 03, 57, 8B, 3D, 34, ...]
.text kemutb.dll!?AddTool@COXToolTipCtrl@@QAEHPAVCWnd@@PB_WPBUtagRECT@@I@Z + 110 10811520 121 Bytes [44, 24, 1C, A1, 4C, E1, C7, ...]
.text kemutb.dll!?DelTool@COXToolTipCtrl@@QAEXPAVCWnd@@I@Z + 4A 1081159A 65 Bytes [00, 00, 74, 18, 83, E9, 10, ...]
.text kemutb.dll!?DelTool@COXToolTipCtrl@@QAEXPAVCWnd@@I@Z + 8C 108115DC 55 Bytes [3B, 55, 0C, 8B, 45, 10, 57, ...]
.text kemutb.dll!?UpdateToolRect@COXToolTipCtrl@@QAEHPAVCWnd@@PBUtagRECT@@I@Z + 25 10811615 31 Bytes CALL 1081155D \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?UpdateToolRect@COXToolTipCtrl@@QAEHPAVCWnd@@PBUtagRECT@@I@Z + 45 10811635 49 Bytes [1F, 0F, B6, 32, 42, C1, E6, ...]
.text kemutb.dll!?UpdateToolRect@COXToolTipCtrl@@QAEHPAVCWnd@@PBUtagRECT@@I@Z + 77 10811667 4 Bytes [81, FE, FF, FF]
.text kemutb.dll!?UpdateToolRect@COXToolTipCtrl@@QAEHPAVCWnd@@PBUtagRECT@@I@Z + 7D 1081166D 9 Bytes [77, 1A, 39, 4D, 18, 75, 10, ...]
.text kemutb.dll!?UpdateToolRect@COXToolTipCtrl@@QAEHPAVCWnd@@PBUtagRECT@@I@Z + 87 10811677 18 Bytes [D8, 00, 00, 72, 08, 81, FE, ...] {FADD DWORD [EAX]; ADD [EDX+0x8], DH; CMP ESI, 0xdfff; JBE 0x74; MOV [EDI], SI; JMP 0x24}
.text ...
.text kemutb.dll!?SetMaxTipWidth@COXToolTipCtrl@@QAEHH@Z + 15 10811725 40 Bytes [38, 8B, 45, F8, 5F, C9, C3, ...]
.text kemutb.dll!?SetMaxTipWidth@COXToolTipCtrl@@QAEHH@Z + 3E 1081174E 20 Bytes [8B, D0, 33, CF, 8B, 3D, 3C, ...]
.text kemutb.dll!?SetMaxTipWidth@COXToolTipCtrl@@QAEHH@Z + 53 10811763 271 Bytes [89, 54, 24, 08, 8B, 15, 38, ...]
.text kemutb.dll!?GetTooltipText@COXToolTipCtrl@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + 43 10811873 1 Byte [44]
.text kemutb.dll!?GetTooltipText@COXToolTipCtrl@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + 43 10811873 8 Bytes [44, 24, 20, 89, 54, 24, 10, ...] {INC ESP; AND AL, 0x20; MOV [ESP+0x10], EDX; CDQ }
.text kemutb.dll!?GetTooltipText@COXToolTipCtrl@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + 4C 1081187C 22 Bytes [C1, 8B, 0D, 90, EE, C7, 03, ...]
.text kemutb.dll!?GetTooltipText@COXToolTipCtrl@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + 63 10811893 1 Byte [54]
.text kemutb.dll!?GetTooltipText@COXToolTipCtrl@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + 63 10811893 98 Bytes [54, 24, 18, 50, 8D, 54, 24, ...]
.text kemutb.dll!?GetTooltipText@COXToolTipCtrl@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + C7 108118F7 1 Byte [44]
.text kemutb.dll!?GetTooltipText@COXToolTipCtrl@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + C7 108118F7 189 Bytes [44, 24, 34, 89, 54, 24, 14, ...]
.text kemutb.dll!?GetTooltipText@COXToolTipCtrl@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + 185 108119B5 1 Byte [10]
.text kemutb.dll!?GetTooltipText@COXToolTipCtrl@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + 185 108119B5 44 Bytes [10, 8B, 44, 24, 34, 89, 54, ...]
.text kemutb.dll!?GetTooltipText@COXToolTipCtrl@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + 1B2 108119E2 147 Bytes [40, 33, F2, 99, 33, C7, 8B, ...]
.text kemutb.dll!?GetTooltipText@COXToolTipCtrl@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + 246 10811A76 2 Bytes [8B, 44]
.text kemutb.dll!?GetTooltipText@COXToolTipCtrl@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + 249 10811A79 30 Bytes [34, 89, 54, 24, 14, 99, 33, ...]
.text kemutb.dll!?GetTooltipText@COXToolTipCtrl@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + 268 10811A98 62 Bytes [1C, 8B, 54, 24, 3C, 33, C8, ...]
.text kemutb.dll!?SetLogFont@COXToolTipCtrl@@IAEHPAUtagLOGFONTW@@H@Z + 27 10811AD7 71 Bytes [15, 00, EF, C7, 03, A1, F0, ...]
.text kemutb.dll!?SetLogFont@COXToolTipCtrl@@IAEHPAUtagLOGFONTW@@H@Z + 6F 10811B1F 46 Bytes [CF, 8B, F5, 33, CB, 33, F0, ...]
.text kemutb.dll!?SetLogFont@COXToolTipCtrl@@IAEHPAUtagLOGFONTW@@H@Z + 9E 10811B4E 50 Bytes [44, 24, 18, 8B, 44, 24, 38, ...]
.text kemutb.dll!?SetLogFont@COXToolTipCtrl@@IAEHPAUtagLOGFONTW@@H@Z + D1 10811B81 34 Bytes [8B, 0D, 30, EF, C7, 03, 89, ...]
.text kemutb.dll!?CalculateInfoBoxRect@COXToolTipCtrl@@MBE?AVCRect@@AAVCPoint@@PAVCOXToolTipInfo@@AAV2@@Z + 4 10811BA4 50 Bytes [EF, C7, 03, 8B, 4C, 24, 1C, ...]
.text kemutb.dll!?CalculateInfoBoxRect@COXToolTipCtrl@@MBE?AVCRect@@AAVCPoint@@PAVCOXToolTipInfo@@AAV2@@Z + 37 10811BD7 66 Bytes [57, 8B, 3D, 40, EF, C7, 03, ...]
.text kemutb.dll!?CalculateInfoBoxRect@COXToolTipCtrl@@MBE?AVCRect@@AAVCPoint@@PAVCOXToolTipInfo@@AAV2@@Z + 7A 10811C1A 1 Byte [54]
.text kemutb.dll!?CalculateInfoBoxRect@COXToolTipCtrl@@MBE?AVCRect@@AAVCPoint@@PAVCOXToolTipInfo@@AAV2@@Z + 7A 10811C1A 35 Bytes [54, 24, 3C, 33, C8, 8B, 44, ...]
.text kemutb.dll!?CalculateInfoBoxRect@COXToolTipCtrl@@MBE?AVCRect@@AAVCPoint@@PAVCOXToolTipInfo@@AAV2@@Z + 9E 10811C3E 3 Bytes [4C, 24, 20] {DEC ESP; AND AL, 0x20}
.text ...
.text kemutb.dll!?GetToolInfoPtr@COXToolTipCtrl@@IAEPAVCOXToolTipInfo@@PAVCWnd@@I@Z + C 10811CCC 121 Bytes [D5, 89, 44, 24, 18, 8B, 44, ...]
.text kemutb.dll!?GetChildWindowFromPoint@COXToolTipCtrl@@IBEPAVCWnd@@AAUtagPOINT@@@Z + 26 10811D46 54 Bytes [8B, 74, 24, 08, 56, 89, 06, ...]
.text kemutb.dll!?GetChildWindowFromPoint@COXToolTipCtrl@@IBEPAVCWnd@@AAUtagPOINT@@@Z + 5D 10811D7D 79 Bytes [00, 00, 00, 59, FF, 74, 24, ...]
.text kemutb.dll!?GetChildWindowFromPoint@COXToolTipCtrl@@IBEPAVCWnd@@AAUtagPOINT@@@Z + AD 10811DCD 20 Bytes [81, DA, 03, 83, C4, 1C, 83, ...]
.text kemutb.dll!?DisplayToolTip@COXToolTipCtrl@@IAEXAAVCPoint@@H@Z + 2 10811DE2 98 Bytes [59, 5F, 66, 8B, C6, 5E, 5D, ...]
.text kemutb.dll!?DisplayToolTip@COXToolTipCtrl@@IAEXAAVCPoint@@H@Z + 65 10811E45 446 Bytes [FF, FF, 85, C0, 59, A3, CC, ...]
.text kemutb.dll!?OnPaint@COXToolTipCtrl@@IAEXXZ + 64 10812004 111 Bytes [FF, 85, C0, 59, A3, E4, 81, ...]
.text kemutb.dll!?OnPaint@COXToolTipCtrl@@IAEXXZ + D4 10812074 9 Bytes [51, 8B, 4D, 20, 52, 8B, 55, ...] {PUSH ECX; MOV ECX, [EBP+0x20]; PUSH EDX; MOV EDX, [EBP+0x1c]; PUSH ECX}
.text kemutb.dll!?OnPaint@COXToolTipCtrl@@IAEXXZ + DE 1081207E 132 Bytes [4D, 18, 52, 8B, 55, 14, 51, ...]
.text kemutb.dll!?OnPaint@COXToolTipCtrl@@IAEXXZ + 163 10812103 47 Bytes [00, 00, 8B, 45, 28, 83, C4, ...]
.text kemutb.dll!?OnPaint@COXToolTipCtrl@@IAEXXZ + 193 10812133 11 Bytes [EB, 53, BE, 0A, 00, 00, 00, ...]
.text ...
.text kemutb.dll!?OnLButtonDown@COXToolTipCtrl@@IAEXIVCPoint@@@Z + 1E 1081231E 25 Bytes [74, 3D, 80, 3F, 00, 74, 38, ...]
.text kemutb.dll!?OnLButtonDown@COXToolTipCtrl@@IAEXIVCPoint@@@Z + 38 10812338 25 Bytes [00, 8A, D8, 8A, 07, 50, E8, ...]
.text kemutb.dll!?OnLButtonDown@COXToolTipCtrl@@IAEXIVCPoint@@@Z + 52 10812352 17 Bytes [38, 06, 75, 0F, 46, 47, 80, ...]
.text kemutb.dll!?OnSettingChange@COXToolTipCtrl@@IAEXIPB_W@Z + 4 10812364 45 Bytes [00, 2A, C0, 5F, 5E, 5B, C2, ...]
.text kemutb.dll!?OnSettingChange@COXToolTipCtrl@@IAEXIPB_W@Z + 32 10812392 101 Bytes [FF, FF, 66, 03, C6, 41, 3B, ...]
.text kemutb.dll!?OnSetFont@COXToolTipCtrl@@IAEJIJ@Z + 58 108123F8 49 Bytes [00, 00, 00, 66, 0B, F6, 74, ...]
.text kemutb.dll!?Create@COXToolTipCtrl@@QAEHPAVCWnd@@@Z + 2A 1081242A 100 Bytes [00, 66, 0B, F6, 74, 14, 66, ...]
.text kemutb.dll!?Create@COXToolTipCtrl@@QAEHPAVCWnd@@@Z + 8F 1081248F 56 Bytes [75, FA, 2B, C1, C2, 04, 00, ...]
.text kemutb.dll!?Create@COXToolTipCtrl@@QAEHPAVCWnd@@@Z + C8 108124C8 22 Bytes JMP 9C2D17CF
.text kemutb.dll!?Create@COXToolTipCtrl@@QAEHPAVCWnd@@@Z + DF 108124DF 76 Bytes [90, 53, 56, 57, 55, 8B, 74, ...]
.text kemutb.dll!?AddTool@COXToolTipCtrl@@QAEHPAVCWnd@@IPBUtagRECT@@I@Z + 3D 1081252D 95 Bytes [0A, C0, 74, 49, 66, B9, 01, ...]
.text kemutb.dll!?GetText@COXToolTipCtrl@@QAEXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCWnd@@I@Z + D 1081258D 12 Bytes [00, 00, 00, 53, 56, 57, 8B, ...]
.text kemutb.dll!?GetText@COXToolTipCtrl@@QAEXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCWnd@@I@Z + 1A 1081259A 4 Bytes [10, 66, C7, 06] {ADC [ESI-0x39], AH; PUSH ES}
.text kemutb.dll!?GetText@COXToolTipCtrl@@QAEXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCWnd@@I@Z + 20 108125A0 75 Bytes CALL 1081262C \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?GetText@COXToolTipCtrl@@QAEXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCWnd@@I@Z + 6D 108125ED 63 Bytes [00, 2C, 37, EB, 02, 2C, 30, ...]
.text kemutb.dll!?HitTest@COXToolTipCtrl@@QBEHPAVCWnd@@UtagPOINT@@PAUOXTOOLINFO@@@Z + 2D 1081262D 11 Bytes [00, 00, 00, 53, 8A, 5C, 24, ...]
.text kemutb.dll!?HitTest@COXToolTipCtrl@@QBEHPAVCWnd@@UtagPOINT@@PAUOXTOOLINFO@@@Z + 39 10812639 64 Bytes [00, 00, 0A, C0, 74, 09, 80, ...]
.text kemutb.dll!?HitTest@COXToolTipCtrl@@QBEHPAVCWnd@@UtagPOINT@@PAUOXTOOLINFO@@@Z + 7A 1081267A 64 Bytes [FF, 0A, C0, 75, 1A, 53, E8, ...]
.text kemutb.dll!?HitTest@COXToolTipCtrl@@QBEHPAVCWnd@@UtagPOINT@@PAUOXTOOLINFO@@@Z + BB 108126BB 90 Bytes [C2, 04, 00, 8B, FF, 2B, C0, ...]
.text kemutb.dll!?GetToolInfo@COXToolTipCtrl@@QAEHAAUOXTOOLINFO@@PAVCWnd@@I@Z + 16 10812716 31 Bytes [00, 00, 00, 8D, A4, 24, 00, ...]
.text kemutb.dll!?SetToolInfo@COXToolTipCtrl@@QAEXPAUOXTOOLINFO@@@Z + 6 10812736 172 Bytes [74, 24, 18, 66, 8B, 44, 24, ...]
.text kemutb.dll!?FindToolFromPoint@COXToolTipCtrl@@IAEPAVCOXToolTipInfo@@AAUtagPOINT@@@Z + 34 108127E4 3 Bytes [11, 50, 53] {ADC [EAX+0x53], EDX}
.text kemutb.dll!?FindToolFromPoint@COXToolTipCtrl@@IAEPAVCOXToolTipInfo@@AAUtagPOINT@@@Z + 38 108127E8 2 Bytes CALL 10813031 \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?FindToolFromPoint@COXToolTipCtrl@@IAEPAVCOXToolTipInfo@@AAUtagPOINT@@@Z + 3C 108127EC 51 Bytes [0A, C0, 74, 38, 80, 7C, 24, ...]
.text kemutb.dll!?OnTimer@COXToolTipCtrl@@IAEXI@Z + 10 10812820 36 Bytes [25, FF, FF, FF, 7F, 89, 45, ...]
.text kemutb.dll!?OnTimer@COXToolTipCtrl@@IAEXI@Z + 35 10812845 10 Bytes [8D, 64, 24, 00, 8D, A4, 24, ...]
.text kemutb.dll!?OnTimer@COXToolTipCtrl@@IAEXI@Z + 40 10812850 9 Bytes [53, 56, 57, 55, 66, 2B, D2, ...]
.text kemutb.dll!?OnTimer@COXToolTipCtrl@@IAEXI@Z + 4A 1081285A 86 Bytes [24, 18, 66, 3B, CA, 74, 63, ...]
.text kemutb.dll!?OnTimer@COXToolTipCtrl@@IAEXI@Z + A1 108128B1 35 Bytes [66, 89, 56, 08, 66, 42, 66, ...]
.text ...
.text kemutb.dll!?RelayEvent@COXToolTipCtrl@@QAEXPAUtagMSG@@@Z + 60 108129D0 51 Bytes [8B, 44, 24, 04, 33, C9, 8A, ...]
.text kemutb.dll!?RelayEvent@COXToolTipCtrl@@QAEXPAUtagMSG@@@Z + 95 10812A05 25 Bytes [66, 8B, 44, 48, 10, 25, FF, ...]
.text kemutb.dll!?RelayEvent@COXToolTipCtrl@@QAEXPAUtagMSG@@@Z + B0 10812A20 65 Bytes [53, 56, 57, 55, 8B, 74, 24, ...]
.text kemutb.dll!?RelayEvent@COXToolTipCtrl@@QAEXPAUtagMSG@@@Z + F2 10812A62 26 Bytes [66, 89, 6F, 08, 66, 03, C3, ...]
.text kemutb.dll!?RelayEvent@COXToolTipCtrl@@QAEXPAUtagMSG@@@Z + 10E 10812A7E 26 Bytes [00, 00, 68, 50, 2A, 70, 03, ...]
.text ...
.text kemutb.dll!?FindFirstHandle@COXWatchedDir@@IAEHAAJ@Z + 34 10812B34 24 Bytes [69, 6E, 65, 00, 00, 00, 00, ...]
.text kemutb.dll!?FindFirstHandle@COXWatchedDir@@IAEHAAJ@Z + 4D 10812B4D 51 Bytes [00, 00, 40, 8B, 4C, 24, 08, ...]
.text kemutb.dll!?FindFirstHandle@COXWatchedDir@@IAEHAAJ@Z + 81 10812B81 7 Bytes [C2, 08, 00, 05, 00, 00, 00]
.text kemutb.dll!?FindFirstHandle@COXWatchedDir@@IAEHAAJ@Z + 89 10812B89 35 Bytes [8D, A4, 24, 00, 00, 00, 00, ...]
.text kemutb.dll!?FindFirstHandle@COXWatchedDir@@IAEHAAJ@Z + AD 10812BAD 14 Bytes [00, 00, 83, C0, 02, 8B, 4C, ...]
.text ...
.text kemutb.dll!?FindNextHandle@COXWatchedDir@@IAEHAAPAX@Z + 1F 10812CDF 31 Bytes [00, 4E, 45, 43, 39, 38, 30, ...]
.text kemutb.dll!?FindNextHandle@COXWatchedDir@@IAEHAAPAX@Z + 3F 10812CFF 49 Bytes [40, 8B, 4C, 24, 08, 81, E1, ...]
.text kemutb.dll!??0COXWatchedDir@@IAE@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@HKH@Z + 21 10812D31 32 Bytes [C2, 08, 00, 05, 00, 00, 00, ...]
.text kemutb.dll!??0COXWatchedDir@@IAE@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@HKH@Z + 42 10812D52 61 Bytes CALL 1081247D \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!??0COXWatchedDir@@IAE@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@HKH@Z + 80 10812D90 11 Bytes [46, 55, 4A, 49, 54, 53, 55, ...] {INC ESI; PUSH EBP; DEC EDX; DEC ECX; PUSH ESP; PUSH EBX; PUSH EBP; ADD [EAX], AL; ADD [EAX], AL}
.text kemutb.dll!??0COXWatchedDir@@IAE@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@HKH@Z + 8C 10812D9C 73 Bytes [00, 00, 00, 00, 68, 70, 2D, ...]
.text kemutb.dll!??1COXWatchedDir@@MAE@XZ + 46 10812DE6 49 Bytes [00, 00, 00, 8D, A4, 24, 00, ...]
.text kemutb.dll!??1COXWatchedDir@@MAE@XZ + 79 10812E19 162 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text kemutb.dll!?GetTooltipText@CToolTips@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + C 10812EBC 93 Bytes [80, 7C, 24, 08, 30, 75, 1D, ...]
.text kemutb.dll!?GetTooltipText@CToolTips@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + 6A 10812F1A 1 Byte [A4]
.text kemutb.dll!?GetTooltipText@CToolTips@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + 6A 10812F1A 18 Bytes [A4, 24, 00, 00, 00, 00, 00, ...]
.text kemutb.dll!?GetTooltipText@CToolTips@@IAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCOXToolTipInfo@@@Z + 80 10812F30 21 Bytes [83, EC, 40, 53, 56, 8B, 74, ...]
.text kemutb.dll!?GetSystemToolTipFont@CToolTips@@IBEPAUtagLOGFONTW@@XZ + 6 10812F46 12 Bytes [00, 76, 0A, 2A, C0, 5E, 5B, ...]
.text kemutb.dll!?GetSystemToolTipFont@CToolTips@@IBEPAUtagLOGFONTW@@XZ + 13 10812F53 23 Bytes [8D, 44, 24, 38, 6A, 10, 50, ...]
.text kemutb.dll!?GetSystemToolTipFont@CToolTips@@IBEPAUtagLOGFONTW@@XZ + 2B 10812F6B 28 Bytes [8D, 44, 24, 18, 6A, 10, 50, ...]
.text kemutb.dll!?GetSystemToolTipFont@CToolTips@@IBEPAUtagLOGFONTW@@XZ + 48 10812F88 11 Bytes [00, 88, 5C, 04, 18, 8D, 44, ...]
.text kemutb.dll!?GetSystemToolTipFont@CToolTips@@IBEPAUtagLOGFONTW@@XZ + 54 10812F94 89 Bytes [24, 0C, 6A, 10, 50, 8D, 44, ...]
.text kemutb.dll!??0CToolTips@@QAE@XZ + 2F 10812FEF 46 Bytes [00, 66, 8B, 06, 66, 3D, 01, ...]
.text kemutb.dll!??0CToolTips@@QAE@XZ + 60 10813020 59 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text kemutb.dll!??0CToolTips@@QAE@XZ + 9C 1081305C 25 Bytes CALL 10812C3D \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!??0CToolTips@@QAE@XZ + B6 10813076 113 Bytes [30, 70, 03, 50, 8D, 44, 24, ...]
.text kemutb.dll!?OnPaint@CToolTips@@IAEXXZ + 28 108130E8 29 Bytes CALL 1030754A \Program Files\Logitech\SetPoint\KEMHook.dll (Logitech Common Hooks (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?OnPaint@CToolTips@@IAEXXZ + 47 10813107 19 Bytes [00, 00, 8D, A4, 24, 00, 00, ...] {ADD [EAX], AL; LEA ESP, [ESP+0x0]; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text kemutb.dll!?OnPaint@CToolTips@@IAEXXZ + 5D 1081311D 23 Bytes [00, 00, 00, 83, EC, 70, 56, ...]
.text kemutb.dll!?OnPaint@CToolTips@@IAEXXZ + 75 10813135 40 Bytes CALL 1081249F \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?OnPaint@CToolTips@@IAEXXZ + 9E 1081315E 32 Bytes [FF, 8D, 44, 24, 34, 6A, 10, ...]
.text ...
.text kemutb.dll!?OnGetFont@COXToolTipCtrl@@IAEJIJ@Z + 6 108132D6 1 Byte [C9]
.text kemutb.dll!?OnGetFont@COXToolTipCtrl@@IAEJIJ@Z + 6 108132D6 3 Bytes [C9, C2, 04]
.text kemutb.dll!?OnGetFont@COXToolTipCtrl@@IAEJIJ@Z + A 108132DA 5 Bytes [8D, 9B, 00, 00, 00]
.text kemutb.dll!?RegisterTool@CToolTips@@QAEHPB_WPBUtagRECT@@I@Z + 2 108132E2 1 Byte [04]
.text kemutb.dll!?RegisterTool@CToolTips@@QAEHPB_WPBUtagRECT@@I@Z + 2 108132E2 10 Bytes [04, 56, 8B, 74, 24, 0C, 66, ...]
.text kemutb.dll!?RegisterTool@CToolTips@@QAEHPB_WPBUtagRECT@@I@Z + D 108132ED 5 Bytes [75, 33, 8D, 44, 24]
.text kemutb.dll!?RegisterTool@CToolTips@@QAEHPB_WPBUtagRECT@@I@Z + 13 108132F3 191 Bytes [50, 8D, 44, 24, 0A, 50, E8, ...]
.text kemutb.dll!?UnregisterTool@CToolTips@@QAEXI@Z + 3 108133B3 40 Bytes CALL 108146CE \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?UnregisterTool@CToolTips@@QAEXI@Z + 2C 108133DC 167 Bytes [00, 00, 00, 00, 83, EC, 04, ...]
.text kemutb.dll!?UnregisterAllTools@CToolTips@@QAEXXZ + 44 10813484 12 Bytes [00, 00, 66, 8B, 45, 12, 66, ...]
.text kemutb.dll!?UnregisterAllTools@CToolTips@@QAEXXZ + 51 10813491 32 Bytes [66, 8B, 45, 16, 66, 89, 43, ...]
.text kemutb.dll!?UpdateToolRect@CToolTips@@QAEHPBUtagRECT@@I@Z + 12 108134B2 1 Byte [45]
.text kemutb.dll!?UpdateToolRect@CToolTips@@QAEHPBUtagRECT@@I@Z + 12 108134B2 20 Bytes [45, 24, 89, 43, 28, 8D, 46, ...]
.text kemutb.dll!?UpdateToolRect@CToolTips@@QAEHPBUtagRECT@@I@Z + 29 108134C9 38 Bytes [00, 00, 00, EB, 0E, 8B, FF, ...]
.text kemutb.dll!?UpdateToolRect@CToolTips@@QAEHPBUtagRECT@@I@Z + 50 108134F0 47 Bytes [8D, 43, 98, 89, 83, AC, 00, ...]
.text kemutb.dll!?UpdateToolRect@CToolTips@@QAEHPBUtagRECT@@I@Z + 80 10813520 20 Bytes CALL 1081334D \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text ...
.text kemutb.dll!?HitTest@CToolTips@@QBEHUtagPOINT@@@Z + 2B 1081358B 53 Bytes CALL 108135AC \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?HitTest@CToolTips@@QBEHUtagPOINT@@@Z + 61 108135C1 81 Bytes CALL 108129ED \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?IsCursorInToolTip@CToolTips@@IBEHXZ + 3 10813613 6 Bytes [6A, 05, 68, EF, 00, 00]
.text kemutb.dll!?IsCursorInToolTip@CToolTips@@IBEHXZ + A 1081361A 8 Bytes [56, FF, 56, 18, 6A, 05, 68, ...]
.text kemutb.dll!?IsCursorInToolTip@CToolTips@@IBEHXZ + 14 10813624 124 Bytes [00, 56, FF, 56, 18, 6A, 05, ...]
.text kemutb.dll!?DisplayToolTip@CToolTips@@IAEXAAVCPoint@@@Z + 31 108136A1 7 Bytes [8D, 64, 24, 00, 8D, 64, 24]
.text kemutb.dll!?DisplayToolTip@CToolTips@@IAEXAAVCPoint@@@Z + 39 108136A9 5 Bytes [8D, A4, 24, 00, 00]
.text kemutb.dll!?DisplayToolTip@CToolTips@@IAEXAAVCPoint@@@Z + 40 108136B0 50 Bytes [53, 56, 57, 8B, 74, 24, 10, ...]
.text kemutb.dll!?DisplayToolTip@CToolTips@@IAEXAAVCPoint@@@Z + 74 108136E4 4 Bytes [18, 50, 56, E8]
.text kemutb.dll!?DisplayToolTip@CToolTips@@IAEXAAVCPoint@@@Z + 79 108136E9 53 Bytes [11, 00, 00, 8A, 44, 24, 14, ...]
.text ...
.text kemutb.dll!?FindToolFromPoint@CToolTips@@IAEPAVCOXToolTipInfo@@AAUtagPOINT@@@Z + 11 108137A1 1 Byte [44]
.text kemutb.dll!?FindToolFromPoint@CToolTips@@IAEPAVCOXToolTipInfo@@AAUtagPOINT@@@Z + 11 108137A1 20 Bytes [44, 24, 18, 50, 56, E8, A5, ...]
.text kemutb.dll!?FindToolFromPoint@CToolTips@@IAEPAVCOXToolTipInfo@@AAUtagPOINT@@@Z + 26 108137B6 10 Bytes [00, 00, 00, 8D, A4, 24, 00, ...] {ADD [EAX], AL; ADD [EBP+0x24a4], CL; ADD [EAX], AL}
.text kemutb.dll!?FindToolFromPoint@CToolTips@@IAEPAVCOXToolTipInfo@@AAUtagPOINT@@@Z + 31 108137C1 7 Bytes [44, 24, 04, 66, 8B, 40, 3C] {INC ESP; AND AL, 0x4; MOV AX, [EAX+0x3c]}
.text kemutb.dll!?FindToolFromPoint@CToolTips@@IAEPAVCOXToolTipInfo@@AAUtagPOINT@@@Z + 39 108137C9 57 Bytes CALL 108147D0 \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?SetLogFont@CToolTips@@QAEHPAUtagLOGFONTW@@H@Z + 6 10813806 38 Bytes [66, 8B, 7E, 5C, 57, E8, C0, ...]
.text kemutb.dll!?SetLogFont@CToolTips@@QAEHPAUtagLOGFONTW@@H@Z + 2E 1081382E 48 Bytes [00, 00, 56, 8B, 74, 24, 08, ...]
.text kemutb.dll!?SetLogFont@CToolTips@@QAEHPAUtagLOGFONTW@@H@Z + 60 10813860 8 Bytes CALL 1081484D \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?SetLogFont@CToolTips@@QAEHPAUtagLOGFONTW@@H@Z + 69 10813869 107 Bytes CALL 108147CC \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?SetLogFont@CToolTips@@QAEHPAUtagLOGFONTW@@H@Z + D5 108138D5 109 Bytes [24, E0, 32, 46, 31, 50, 66, ...]
.text kemutb.dll!?StartNewTool@COXToolTipCtrl@@IAEXPAVCOXToolTipInfo@@@Z + 23 10813943 3 Bytes [8D, 9B, 00]
.text kemutb.dll!?StartNewTool@COXToolTipCtrl@@IAEXPAVCOXToolTipInfo@@@Z + 29 10813949 21 Bytes [8D, A4, 24, 00, 00, 00, 00, ...]
.text kemutb.dll!?StartNewTool@COXToolTipCtrl@@IAEXPAVCOXToolTipInfo@@@Z + 40 10813960 74 Bytes [88, 47, 31, C6, 47, 30, 02, ...]
.text kemutb.dll!?CalculateInfoBoxRect@CToolTips@@MBE?AVCRect@@AAVCPoint@@PAVCOXToolTipInfo@@AAV2@@Z + 2B 108139AB 39 Bytes CALL 108147ED \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?CalculateInfoBoxRect@CToolTips@@MBE?AVCRect@@AAVCPoint@@PAVCOXToolTipInfo@@AAV2@@Z + 53 108139D3 4 Bytes [5E, C2, 04, 00] {POP ESI; RET 0x4}
.text kemutb.dll!?CalculateInfoBoxRect@CToolTips@@MBE?AVCRect@@AAVCPoint@@PAVCOXToolTipInfo@@AAV2@@Z + 58 108139D8 7 Bytes [FF, 8D, A4, 24, 00, 00, 00]
.text kemutb.dll!?CalculateInfoBoxRect@CToolTips@@MBE?AVCRect@@AAVCPoint@@PAVCOXToolTipInfo@@AAV2@@Z + 60 108139E0 13 Bytes [8B, 44, 24, 04, 66, 8B, 40, ...]
.text kemutb.dll!?CalculateInfoBoxRect@CToolTips@@MBE?AVCRect@@AAVCPoint@@PAVCOXToolTipInfo@@AAV2@@Z + 6E 108139EE 94 Bytes [C2, 04, 00, 8D, 64, 24, 00, ...]
.text kemutb.dll!?GetBoundsRect@COXToolTipCtrl@@MBE?AVCRect@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + D 10813A4D 107 Bytes [00, 00, 00, 33, C0, 8A, 44, ...]
.text kemutb.dll!?GetBoundsRect@COXToolTipCtrl@@MBE?AVCRect@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 79 10813AB9 27 Bytes [88, 02, 8A, 02, 0A, 01, C2, ...]
.text kemutb.dll!?GetBoundsRect@COXToolTipCtrl@@MBE?AVCRect@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 95 10813AD5 29 Bytes [10, 88, 02, 8A, 02, 0A, 01, ...]
.text kemutb.dll!?GetBoundsRect@COXToolTipCtrl@@MBE?AVCRect@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + B3 10813AF3 29 Bytes [10, 88, 02, 8A, 02, 0A, 01, ...]
.text kemutb.dll!?GetBoundsRect@COXToolTipCtrl@@MBE?AVCRect@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + D1 10813B11 32 Bytes [54, 24, 10, 88, 02, 8A, 02, ...]
.text kemutb.dll!?GetBoundsRect@COXToolTipCtrl@@MBE?AVCRect@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + F3 10813B33 10 Bytes [04, 66, C7, 40, 68, 01, 00, ...]
.text kemutb.dll!?GetBoundsRect@COXToolTipCtrl@@MBE?AVCRect@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + FE 10813B3E 61 Bytes [49, 00, C2, 04, 00, 8D, 9B, ...]
.text kemutb.dll!?GetBoundsRect@COXToolTipCtrl@@MBE?AVCRect@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 13C 10813B7C 63 Bytes [00, 00, 00, 00, 56, 8B, 74, ...]
.text kemutb.dll!?GetBoundsRect@COXToolTipCtrl@@MBE?AVCRect@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 17C 10813BBC 39 Bytes [00, 00, 00, 00, 56, 8B, 74, ...]
.text kemutb.dll!?GetBoundsRect@COXToolTipCtrl@@MBE?AVCRect@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 1A4 10813BE4 27 Bytes [C6, 40, 20, 01, C6, 40, 24, ...]
.text kemutb.dll!?GetBoundsRect@COXToolTipCtrl@@MBE?AVCRect@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 1C0 10813C00 3 Bytes [C6, 40, 2E]
.text kemutb.dll!?GetBoundsRect@COXToolTipCtrl@@MBE?AVCRect@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 1C4 10813C04 35 Bytes [C6, 40, 21, 01, C6, 40, 25, ...]
.text kemutb.dll!?GetBoundsRect@COXToolTipCtrl@@MBE?AVCRect@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 1E8 10813C28 23 Bytes [FF, 8D, A4, 24, 00, 00, 00, ...]
.text kemutb.dll!?GetBoundsRect@COXToolTipCtrl@@MBE?AVCRect@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 200 10813C40 35 Bytes [C6, 40, 48, 08, C6, 40, 46, ...]
.text kemutb.dll!?GetBoundsRect@COXToolTipCtrl@@MBE?AVCRect@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 224 10813C64 80 Bytes [C6, 40, 47, 00, C6, 40, 45, ...]
.text kemutb.dll!??1CToolTips@@UAE@XZ + 35 10813CB5 22 Bytes [40, 18, 90, 36, 70, 03, C7, ...]
.text kemutb.dll!??1CToolTips@@UAE@XZ + 4C 10813CCC 21 Bytes [C0, 37, 70, 03, C7, 40, 6C, ...]
.text kemutb.dll!??1CToolTips@@UAE@XZ + 62 10813CE2 9 Bytes [3B, 70, 03, C2, 04, 00, 8D, ...]
.text kemutb.dll!??1CToolTips@@UAE@XZ + 6C 10813CEC 32 Bytes [8D, 64, 24, 00, 56, 8B, 74, ...]
.text kemutb.dll!??1CToolTips@@UAE@XZ + 8D 10813D0D 8 Bytes [3B, 70, 03, 5E, C2, 04, 00, ...]
.text ...
.text kemutb.dll!?OnTimer@CToolTips@@IAEXI@Z + D 10813D2D 39 Bytes [8D, 49, 00, 83, EC, 04, 53, ...]
.text kemutb.dll!?OnTimer@CToolTips@@IAEXI@Z + 35 10813D55 11 Bytes [A8, C0, 75, 0A, 8D, 77, 6A, ...]
.text kemutb.dll!?OnTimer@CToolTips@@IAEXI@Z + 41 10813D61 104 Bytes [EB, 68, 66, 8B, 47, 5C, 50, ...]
.text kemutb.dll!?OnTimer@CToolTips@@IAEXI@Z + AA 10813DCA 67 Bytes [00, 66, 83, 3E, 04, 57, 75, ...]
.text kemutb.dll!?OnTimer@CToolTips@@IAEXI@Z + EE 10813E0E 34 Bytes CALL 108147CD \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text ...
.text kemutb.dll!?OnSetFont@CToolTips@@IAEJIJ@Z + 1B 10813EDB 14 Bytes [05, 00, 00, 00, 00, 8B, 44, ...]
.text kemutb.dll!?OnSetFont@CToolTips@@IAEJIJ@Z + 2A 10813EEA 45 Bytes [03, C7, 40, 38, E0, 38, 70, ...]
.text kemutb.dll!?OnSetFont@CToolTips@@IAEJIJ@Z + 58 10813F18 14 Bytes [8D, 64, 24, 00, 8D, 64, 24, ...]
.text kemutb.dll!?Create@CToolTips@@QAEHPAVCWnd@@@Z + 7 10813F27 99 Bytes [6A, 10, 8D, 5E, 20, 6A, 00, ...]
.text kemutb.dll!?Create@CToolTips@@QAEHPAVCWnd@@@Z + 6B 10813F8B 150 Bytes [83, F8, 01, 74, 11, 83, F8, ...]
.text kemutb.dll!?RelayEvent@CToolTips@@QAEXPAUtagMSG@@@Z + 12 10814022 5 Bytes [3B, 70, 03, C2, 04]
.text kemutb.dll!?RelayEvent@CToolTips@@QAEXPAUtagMSG@@@Z + 18 10814028 55 Bytes [8D, 64, 24, 00, 8D, 64, 24, ...]
.text kemutb.dll!?RelayEvent@CToolTips@@QAEXPAUtagMSG@@@Z + 50 10814060 28 Bytes [8B, 44, 24, 04, 66, 8B, 48, ...]
.text kemutb.dll!?RelayEvent@CToolTips@@QAEXPAUtagMSG@@@Z + 6F 1081407F 46 Bytes [00, 56, 8B, 74, 24, 08, 56, ...]
.text kemutb.dll!?RelayEvent@CToolTips@@QAEXPAUtagMSG@@@Z + 9E 108140AE 19 Bytes [00, 00, 8B, 4C, 24, 04, 66, ...]
.text ...
.text kemutb.dll!?GetMessageMap@CToolTips@@MBEPBUAFX_MSGMAP@@XZ + 2B 1081420B 103 Bytes [FF, 8B, 00, 8B, 40, 0C, 0B, ...]
.text kemutb.dll!?GetMessageMap@CToolTips@@MBEPBUAFX_MSGMAP@@XZ + 93 10814273 117 Bytes CALL 108133DC \WINDOWS\system32\kemutb.dll (Logitech Ultimate Toolbox (UNICODE)/Logitech, Inc.)
.text kemutb.dll!?GetMessageMap@CToolTips@@MBEPBUAFX_MSGMAP@@XZ + 109 108142E9 140 Bytes [8D, A4, 24, 00, 00, 00, 00, ...]
.text kemutb.dll!?GetMessageMap@CToolTips@@MBEPBUAFX_MSGMAP@@XZ + 196 10814376 50 Bytes [19, 83, F8, 02, 74, 59, 83, ...]
.text kemutb.dll!?GetMessageMap@CToolTips@@MBEPBUAFX_MSGMAP@@XZ + 1C9 108143A9 299 Bytes [FF, 74, 07, 66, B8, 31, 00, ...]
.text ...
.text KemUtil.dll!??1CFileName@@QAE@XZ 10701000 313 Bytes [08, FF, 4D, 08, 85, C9, 74, ...]
.text KemUtil.dll!?servicePackMinor@OSInfo@@QAEGXZ + DB 1070113B 149 Bytes JMP 03E28304 \Program Files\Adobe\Acrobat 8.0\Acrobat\Acrobat.dll (Adobe Acrobat 8.1/Adobe Systems Incorporated)
.text KemUtil.dll!?servicePackMinor@OSInfo@@QAEGXZ + 171 107011D1 24 Bytes [02, 0A, C2, 88, 07, 5F, 5E, ...]
.text KemUtil.dll!?servicePackMinor@OSInfo@@QAEGXZ + 18A 107011EA 85 Bytes [75, 08, 57, 8B, 7D, 10, D1, ...]
.text KemUtil.dll!?servicePackMinor@OSInfo@@QAEGXZ + 1E0 10701240 30 Bytes [0F, B6, 31, 8B, D6, C1, EA, ...]
.text KemUtil.dll!?servicePackMinor@OSInfo@@QAEGXZ + 1FF 1070125F 268 Bytes [4F, 41, 85, FF, 88, 16, 7F, ...]
.text KemUtil.dll!??4CFileName@@QAEAAV0@ABV0@@Z + 9C 1070136C 32 Bytes [0F, B6, 56, 02, 0F, B6, 4E, ...]
.text KemUtil.dll!??4CFileName@@QAEAAV0@ABV0@@Z + BD 1070138D 17 Bytes [E1, 0F, 8A, 0C, 01, 80, E2, ...] {LOOPZ 0x11; MOV CL, [ECX+EAX]; AND DL, 0xbf; SHR CL, 0x1; OR DL, CL; MOV ECX, [EBP-0x4]; MOV EBX, ECX}
.text KemUtil.dll!??4CFileName@@QAEAAV0@ABV0@@Z + CF 1070139F 25 Bytes [E3, 0F, 8A, 1C, 03, D0, EA, ...]
.text KemUtil.dll!??4CFileName@@QAEAAV0@ABV0@@Z + E9 107013B9 470 Bytes [4D, F8, 8B, D9, 83, E3, 0F, ...]
.text KemUtil.dll!?servicePack@OSInfo@@QAE?AV?$CStdStr@_W@@XZ + 140 10701590 20 Bytes JMP C0E38002
.text KemUtil.dll!?servicePack@OSInfo@@QAE?AV?$CStdStr@_W@@XZ + 155 107015A5 52 Bytes [5D, 08, 83, E3, 03, 8B, CB, ...]
.text KemUtil.dll!?servicePack@OSInfo@@QAE?AV?$CStdStr@_W@@XZ + 18A 107015DA 21 Bytes CALL 1A7C39E3
.text KemUtil.dll!?servicePack@OSInfo@@QAE?AV?$CStdStr@_W@@XZ + 1A0 107015F0 179 Bytes [8B, 5D, 08, 56, 8B, 30, 8B, ...]
.text KemUtil.dll!?BrowseFiles@@YA_NABV?$CStdStr@_W@@AAV1@00@Z + 35 107016A5 54 Bytes [00, 0F, B6, 56, 01, 8A, 14, ...]
.text KemUtil.dll!?BrowseFiles@@YA_NABV?$CStdStr@_W@@AAV1@00@Z + 6C 107016DC 236 Bytes JMP 10E28003
.text KemUtil.dll!?BrowseFiles@@YA_NABV?$CStdStr@_W@@AAV1@00@Z + 159 107017C9 67 Bytes [8A, 14, 3A, 83, E6, 0F, C1, ...]
.text KemUtil.dll!?BrowseFiles@@YA_NABV?$CStdStr@_W@@AAV1@00@Z + 19D 1070180D 155 Bytes [F0, 88, 01, 5F, 5D, C3, 55, ...]
.text KemUtil.dll!?BrowseFiles@@YA_NABV?$CStdStr@_W@@AAV1@00@Z + 239 107018A9 70 Bytes [83, 65, 08, 03, 8B, 4D, 08, ...]
.text ...
.text KemUtil.dll!?BrowseForFolder@@YA_NABV?$CStdStr@_W@@AAV1@PAVCWnd@@@Z + 39 10701AF9 243 Bytes [88, 0F, 74, 3F, 0F, B6, 56, ...]
.text KemUtil.dll!?BrowseForFolder@@YA_NABV?$CStdStr@_W@@AAV1@PAVCWnd@@@Z + 12D 10701BED 206 Bytes CALL 20EDA749
.text KemUtil.dll!?BrowseForFolder@@YA_NABV?$CStdStr@_W@@AAV1@PAVCWnd@@@Z + 1FC 10701CBC 1 Byte [7C]
.text KemUtil.dll!?BrowseForFolder@@YA_NABV?$CStdStr@_W@@AAV1@PAVCWnd@@@Z + 1FC 10701CBC 18 Bytes [7C, 24, 24, 89, 44, 24, 10, ...]
.text KemUtil.dll!?BrowseForFolder@@YA_NABV?$CStdStr@_W@@AAV1@PAVCWnd@@@Z + 20F 10701CCF 76 Bytes [00, 0F, B6, 4E, 01, 0F, B6, ...]
.text ...
.text KemUtil.dll!??1Clipboard@@MAE@XZ + 19 10701F09 29 Bytes [06, C1, E2, 04, 0B, D3, 0F, ...]
.text KemUtil.dll!??1Clipboard@@MAE@XZ + 37 10701F27 185 Bytes [89, 5C, 24, 1C, C1, E1, 04, ...]
.text KemUtil.dll!?open@ClipboardBase@@UAEXPAUHWND__@@@Z + 1 10701FE1 1 Byte [4C]
.text KemUtil.dll!?open@ClipboardBase@@UAEXPAUHWND__@@@Z + 1 10701FE1 330 Bytes [4C, 24, 20, 8A, 54, 08, 02, ...]
.text KemUtil.dll!?setText@ClassicClipboard@@UAE_NV?$CStdStr@_W@@I@Z + 4C 1070212C 94 Bytes [5C, 24, 2C, 8A, 1B, D0, EA, ...]
.text KemUtil.dll!?setText@ClassicClipboard@@UAE_NV?$CStdStr@_W@@I@Z + AC 1070218C 392 Bytes [2C, 8B, D5, 4D, 85, D2, 88, ...]
.text KemUtil.dll!?getText@ClassicClipboard@@UAE?AV?$CStdStr@_W@@I@Z + B5 10702315 127 Bytes [8A, 54, 38, 02, 41, 88, 11, ...]
.text KemUtil.dll!?getText@ClassicClipboard@@UAE?AV?$CStdStr@_W@@I@Z + 135 10702395 18 Bytes [89, 75, F8, 0F, 8F, D6, FE, ...] {MOV [EBP-0x8], ESI; JG 0xfffffffffffffedf; MOV EDX, [EBP+0x8]; AND EDX, 0x7; MOV EDI, EDX; DEC EDX}
.text KemUtil.dll!?getText@ClassicClipboard@@UAE?AV?$CStdStr@_W@@I@Z + 148 107023A8 6 Bytes [FF, 0F, 84, 0D, 01, 00]
.text KemUtil.dll!?getText@ClassicClipboard@@UAE?AV?$CStdStr@_W@@I@Z + 14F 107023AF 33 Bytes [0F, B6, 3E, C1, EF, 07, 6B, ...]
.text KemUtil.dll!?getText@ClassicClipboard@@UAE?AV?$CStdStr@_W@@I@Z + 171 107023D1 46 Bytes [84, E6, 00, 00, 00, 0F, B6, ...]
.text ...
.text KemUtil.dll!?TryToGetActiveObject@ComUtils@@YAJABU_GUID@@PAXPAPAUIUnknown@@@Z + 5 107024C5 1 Byte [44]
.text KemUtil.dll!?TryToGetActiveObject@ComUtils@@YAJABU_GUID@@PAXPAPAUIUnknown@@@Z + 5 107024C5 17 Bytes [44, 24, 20, 53, 55, 8B, 6C, ...] {INC ESP; AND AL, 0x20; PUSH EBX; PUSH EBP; MOV EBP, [ESP+0x24]; PUSH ESI; MOV ESI, [ESP+0x30]; PUSH EDI; MOV EDI, [EAX]}
.text KemUtil.dll!?TryToGetActiveObject@ComUtils@@YAJABU_GUID@@PAXPAPAUIUnknown@@@Z + 17 107024D7 100 Bytes CALL 34B4ADDF
.text KemUtil.dll!?TryToGetActiveObject@ComUtils@@YAJABU_GUID@@PAXPAPAUIUnknown@@@Z + 7D 1070253D 5 Bytes [C1, EF, 06, 89, 5C]
.text KemUtil.dll!?TryToGetActiveObject@ComUtils@@YAJABU_GUID@@PAXPAPAUIUnknown@@@Z + 83 10702543 19 Bytes [20, 8A, 5C, 08, 01, 8A, 0C, ...]
.text ...
.text KemUtil.dll!?GetPropLong@ComUtils@@YAJAAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W@Z + 68 10702778 158 Bytes [5C, 24, 2C, 8A, 1B, C0, EA, ...]
.text KemUtil.dll!?GetPropBool@ComUtils@@YA_NAAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W@Z + 7 10702817 33 Bytes [85, C0, A1, A4, C8, CA, 03, ...]
.text KemUtil.dll!?GetPropBool@ComUtils@@YA_NAAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W@Z + 29 10702839 1 Byte [18]
.text KemUtil.dll!?GetPropBool@ComUtils@@YA_NAAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W@Z + 29 10702839 22 Bytes [18, 8B, D9, C1, EB, 02, 8B, ...]
.text KemUtil.dll!?GetPropBool@ComUtils@@YA_NAAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W@Z + 40 10702850 33 Bytes JMP 2C9484DE
.text KemUtil.dll!?GetPropBool@ComUtils@@YA_NAAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W@Z + 62 10702872 31 Bytes [30, 8A, 4C, 08, 02, C1, EF, ...]
.text KemUtil.dll!?GetPropBool@ComUtils@@YA_NAAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W@Z + 82 10702892 43 Bytes [30, 8A, 5C, 18, 01, C0, E9, ...]
.text KemUtil.dll!?GetPropBool@ComUtils@@YA_NAAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W@Z + AE 107028BE 148 Bytes JMP 155AE9C5
.text KemUtil.dll!?SetPropBool@ComUtils@@YA_NAAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W_N@Z + 43 10702953 23 Bytes JMP E052A95A
.text KemUtil.dll!?SetPropBool@ComUtils@@YA_NAAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W_N@Z + 5B 1070296B 42 Bytes JMP D152A972
.text KemUtil.dll!?SetPropBool@ComUtils@@YA_NAAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W_N@Z + 86 10702996 2 Bytes [38, 02] {CMP [EDX], AL}
.text KemUtil.dll!?SetPropBool@ComUtils@@YA_NAAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W_N@Z + 89 10702999 27 Bytes JMP D152A9A0
.text KemUtil.dll!?SetPropBool@ComUtils@@YA_NAAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W_N@Z + A6 107029B6 22 Bytes [0F, 8F, 6C, FE, FF, FF, 8B, ...]
.text KemUtil.dll!?SetPropBool@ComUtils@@YA_NAAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W_N@Z + BD 107029CD 71 Bytes [00, 0F, B6, 0F, C1, E9, 07, ...]
.text KemUtil.dll!?GetDisp@ComUtils@@YA?AV?$CComPtr@UIDispatch@@@ATL@@AAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@3@PB_W@Z + 5 10702A15 151 Bytes [0A, D9, 88, 1E, 8A, 4A, 02, ...]
.text KemUtil.dll!?GetDisp@ComUtils@@YA?AV?$CComPtr@UIDispatch@@@ATL@@AAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@3@PB_W@Z + 9D 10702AAD 196 Bytes [C9, 0F, 84, 88, 00, 00, 00, ...]
.text KemUtil.dll!?GetActiveAppDispatch@ComUtils@@YA?AV?$CComQIPtr@UIUnknown@@$1?IID_IUnknown@@3U_GUID@@B@ATL@@PB_W@Z + 42 10702B72 133 Bytes [00, 0F, B6, 0F, 8B, D9, C1, ...]
.text KemUtil.dll!?GetActiveAppDispatch@ComUtils@@YA?AV?$CComQIPtr@UIUnknown@@$1?IID_IUnknown@@3U_GUID@@B@ATL@@PB_W@Z + C8 10702BF8 62 Bytes JMP 1AF80F7D
.text KemUtil.dll!?GetAppDispatch@ComUtils@@YA?AV?$CComPtr@UIDispatch@@@ATL@@PB_W_N@Z + 17 10702C37 33 Bytes [D0, EB, 80, E1, BF, 0A, CB, ...]
.text KemUtil.dll!?GetAppDispatch@ComUtils@@YA?AV?$CComPtr@UIDispatch@@@ATL@@PB_W_N@Z + 39 10702C59 1 Byte [7C]
.text KemUtil.dll!?GetAppDispatch@ComUtils@@YA?AV?$CComPtr@UIDispatch@@@ATL@@PB_W_N@Z + 39 10702C59 74 Bytes [7C, 24, 20, 80, E3, 8F, 0A, ...]
.text KemUtil.dll!?GetAppDispatch@ComUtils@@YA?AV?$CComPtr@UIDispatch@@@ATL@@PB_W_N@Z + 84 10702CA4 73 Bytes JMP 1B100F29 \WINDOWS\system32\msjet40.dll (Microsoft Jet Engine Library/Microsoft Corporation)
.text KemUtil.dll!?GetAppDispatch@ComUtils@@YA?AV?$CComPtr@UIDispatch@@@ATL@@PB_W_N@Z + CE 10702CEE 667 Bytes [4C, 24, 14, 47, 83, 7C, 24, ...]
.text KemUtil.dll!?GetPropW@ComUtils@@YA?AV?$CStdStr@_W@@AAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W@Z + FA 10702F8A 173 Bytes [51, 8B, 44, 24, 10, 53, 8B, ...]
.text KemUtil.dll!?GetPropW@ComUtils@@YA?AV?$CStdStr@_W@@AAV?$CComQIPtr@UIDispatch@@$1?_GUID_00020400_0000_0000_c000_000000000046@@3U__s_GUID@@B@ATL@@PB_W@Z + 1A8 10703038 50 Bytes JMP CFE18002
.text KemUtil.dll!?FindInROT@ComUtils@@YA?AV?$CComPtr@UIDispatch@@@ATL@@PB_W@Z + B 1070306B 156 Bytes [0F, 8F, 42, FF, FF, FF, 8B, ...]
.text KemUtil.dll!?FindInROT@ComUtils@@YA?AV?$CComPtr@UIDispatch@@@ATL@@PB_W@Z + A8 10703108 5 Bytes [24, 53, 55, 8B, 6C]
.text KemUtil.dll!?FindInROT@ComUtils@@YA?AV?$CComPtr@UIDispatch@@@ATL@@PB_W@Z + AE 1070310E 13 Bytes [28, 56, 8B, 30, 8B, C5, C1, ...]
.text KemUtil.dll!?FindInROT@ComUtils@@YA?AV?$CComPtr@UIDispatch@@@ATL@@PB_W@Z + BC 1070311C 34 Bytes [89, 44, 24, 18, 85, C0, A1, ...]
.text KemUtil.dll!?FindInROT@ComUtils@@YA?AV?$CComPtr@UIDispatch@@@ATL@@PB_W@Z + DF 1070313F 49 Bytes [89, 5C, 24, 10, 0F, B6, 5E, ...]
.text ...
.text KemUtil.dll!??0CWait@@QAE@XZ + F 1070358F 94 Bytes [55, 0F, B6, 0B, 0F, B6, 53, ...]
.text KemUtil.dll!??4CWait@@QAEAAV0@ABV0@@Z + 1E 107035EE 62 Bytes JMP 9C3A3FF5
.text KemUtil.dll!??4CWait@@QAEAAV0@ABV0@@Z + 5D 1070362D 250 Bytes [D7, 8A, 14, 10, 80, E2, C3, ...]
.text KemUtil.dll!??0cWave@@QAE@ABV0@@Z + 8 10703728 410 Bytes [00, 0F, B6, 0F, 0F, B6, 57, ...]
.text KemUtil.dll!??1cWave@@UAE@XZ + 153 107038C3 30 Bytes [6C, 24, 2C, 83, E5, 07, 8B, ...]
.text KemUtil.dll!?play@cWave@@QAE_NABV?$CStdStr@_W@@W4PlayModeEnum@1@@Z + 12 107038E2 33 Bytes [8A, 59, 01, 8A, 09, D0, EA, ...]
.text KemUtil.dll!?play@cWave@@QAE_NABV?$CStdStr@_W@@W4PlayModeEnum@1@@Z + 34 10703904 209 Bytes [00, 0F, B6, 0F, 83, E1, 0F, ...]
.text KemUtil.dll!?play@cWave@@QAE_NABV?$CStdStr@_W@@W4PlayModeEnum@1@@Z + 106 107039D6 138 Bytes [2C, 8A, 5B, 01, D0, EA, 80, ...]
.text KemUtil.dll!?play@cWave@@QAE_NABV?$CStdStr@_W@@W4PlayModeEnum@1@@Z + 191 10703A61 250 Bytes [8B, 45, 0C, 8B, 4D, 10, 53, ...]
.text KemUtil.dll!?FileExists@CFileName@@SA_NPB_W@Z + 5C 10703B5C 89 Bytes [88, 11, 41, 4B, 74, 1B, 0F, ...]
.text KemUtil.dll!?StripTrailingSeparator@CFileName@@SA_NAAV?$CStdStr@_W@@@Z + 23 10703BD3 51 Bytes JMP 1457BEDC
.text KemUtil.dll!?Exists@CFileName@@QBE_NXZ + 7 10703C07 23 Bytes JMP 0152BC10
.text KemUtil.dll!?Exists@CFileName@@QBE_NXZ + 1F 10703C1F 59 Bytes [80, E2, F0, 0A, CA, 46, 88, ...]
.text KemUtil.dll!??0CFileName@@QAE@PAUHINSTANCE__@@PB_W1@Z + 3B 10703C5B 2 Bytes [89, 7C]
.text KemUtil.dll!??0CFileName@@QAE@PAUHINSTANCE__@@PB_W1@Z + 3E 10703C5E 143 Bytes [10, 0F, 8F, 4B, FF, FF, FF, ...]
.text KemUtil.dll!??0CFileName@@QAE@PAUHINSTANCE__@@PB_W1@Z + CE 10703CEE 3 Bytes [51, 8B, 44]
.text KemUtil.dll!??0CFileName@@QAE@PAUHINSTANCE__@@PB_W1@Z + D2 10703CF2 39 Bytes [10, 8B, 54, 24, 0C, 53, 55, ...]
.text KemUtil.dll!??0CFileName@@QAE@PAUHINSTANCE__@@PB_W1@Z + FB 10703D1B 39 Bytes [0F, B6, 0F, 8B, F9, 8B, D1, ...]
.text ...
.text KemUtil.dll!??0CFileName@@QAE@PB_W00@Z + 12 10703DC2 11 Bytes [80, E2, C0, 46, 0A, CA, 88, ...]
.text KemUtil.dll!??0CFileName@@QAE@PB_W00@Z + 1E 10703DCE 33 Bytes [20, 47, 83, 7C, 24, 20, 00, ...]
.text KemUtil.dll!??0CFileName@@QAE@PB_W00@Z + 41 10703DF1 11 Bytes JMP 189CCAFC
.text KemUtil.dll!??0CFileName@@QAE@PB_W00@Z + 4D 10703DFD 45 Bytes JMP 4151BE04
.text KemUtil.dll!??0CFileName@@QAE@PB_W00@Z + 7B 10703E2B 122 Bytes [C0, EB, 06, 0A, D9, 88, 1E, ...]
.text ...
.text KemUtil.dll!?AppendDirectory@CFileName@@QAEXPB_W@Z + 77 10703F57 79 Bytes JMP 0A80E380
.text KemUtil.dll!?SetFilename@CFileName@@QAEXPB_W0@Z + 37 10703FA7 113 Bytes JMP 0A81E380
.text KemUtil.dll!?SetFilename@CFileName@@QAEXPB_W0@Z + A9 10704019 8 Bytes [FF, 4C, 24, 1C, 42, 42, 83, ...]
.text KemUtil.dll!?SetFilename@CFileName@@QAEXPB_W0@Z + B2 10704022 321 Bytes [1C, 00, 89, 54, 24, 24, 0F, ...]
.text KemUtil.dll!?StripPath@CFileName@@SA_NAAV?$CStdStr@_W@@@Z + C4 10704164 95 Bytes [8A, 5D, 00, C0, EB, 07, 0A, ...]
.text KemUtil.dll!?StripPath@CFileName@@SA_NAAV?$CStdStr@_W@@@Z + 124 107041C4 21 Bytes [38, 8B, 45, 08, D1, E8, 89, ...]
.text KemUtil.dll!?StripPath@CFileName@@SA_NAAV?$CStdStr@_W@@@Z + 13A 107041DA 89 Bytes [01, 0F, B6, 37, C1, E6, 04, ...]
.text KemUtil.dll!?StripPath@CFileName@@SA_NAAV?$CStdStr@_W@@@Z + 194 10704234 125 Bytes [C7, 03, 83, 7D, 0C, 00, 7F, ...]
.text KemUtil.dll!?FromPathAndFile@CFileName@@SA?AV1@PB_W00@Z + 52 107042B2 9 Bytes [89, 55, FC, C1, E6, 02, 8A, ...]
.text KemUtil.dll!?FromPathAndFile@CFileName@@SA?AV1@PB_W00@Z + 5C 107042BC 82 Bytes JMP F0E38004
.text KemUtil.dll!?FromPathAndFile@CFileName@@SA?AV1@PB_W00@Z + AF 1070430F 13 Bytes [7F, 81, 5E, 5B, F6, 45, 08, ...]
.text KemUtil.dll!?FromPathAndFile@CFileName@@SA?AV1@PB_W00@Z + BD 1070431D 55 Bytes [0F, B6, 09, C1, E1, 04, C1, ...]
.text KemUtil.dll!?FromPathAndFile@CFileName@@SA?AV1@PB_W00@Z + F5 10704355 22 Bytes [10, 8B, 54, 24, 0C, 53, 55, ...]

#8 studiodweller

studiodweller
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 31 May 2010 - 08:27 PM

.text ...
.text KemUtil.dll!?GetDrive@CFileName@@QBE?AV?$CStdStr@_W@@XZ + 88 10704428 44 Bytes JMP 8ACA0A02
.text KemUtil.dll!?GetDrive@CFileName@@QBE?AV?$CStdStr@_W@@XZ + B5 10704455 39 Bytes [03, 80, E1, CF, C0, EA, 02, ...]
.text KemUtil.dll!?GetDrive@CFileName@@QBE?AV?$CStdStr@_W@@XZ + DD 1070447D 7 Bytes [83, C6, 06, 83, 7C, 24, 20]
.text KemUtil.dll!?GetDrive@CFileName@@QBE?AV?$CStdStr@_W@@XZ + E5 10704485 202 Bytes [0F, 8F, EF, FE, FF, FF, 8B, ...]
.text KemUtil.dll!?GetPathNoDrive@CFileName@@QBE?AV?$CStdStr@_W@@XZ + C0 10704550 22 Bytes [C0, 0A, C8, 88, 4F, 01, 5F, ...]
.text KemUtil.dll!?GetPathNoDrive@CFileName@@QBE?AV?$CStdStr@_W@@XZ + D7 10704567 5 Bytes [6C, 24, 24, 56, 8B]
.text KemUtil.dll!?GetPathNoDrive@CFileName@@QBE?AV?$CStdStr@_W@@XZ + DD 1070456D 198 Bytes CALL 8CFB9C75
.text KemUtil.dll!?GetFile@CFileName@@QBE?AV?$CStdStr@_W@@XZ + B4 10704634 141 Bytes [18, 8B, 54, 24, 30, 8A, 5C, ...]
.text KemUtil.dll!?GetExtension@CFileName@@QBE?AV?$CStdStr@_W@@XZ + 52 107046C2 126 Bytes [1C, 80, E3, 8F, 0A, D3, 8A, ...]
.text KemUtil.dll!?GetExtension@CFileName@@QBE?AV?$CStdStr@_W@@XZ + D1 10704741 113 Bytes [28, 8B, 6C, 24, 18, D0, E9, ...]
.text KemUtil.dll!?Split@CFileName@@QAEXAAV?$CStdStr@_W@@0@Z + 53 107047B3 89 Bytes [0F, 8F, CF, FD, FF, FF, 8B, ...]
.text KemUtil.dll!?Split@CFileName@@QAEXAAV?$CStdStr@_W@@0@Z + AD 1070480D 41 Bytes [0F, B6, 56, 01, 0F, B6, 5E, ...]
.text KemUtil.dll!?Split@CFileName@@QAEXAAV?$CStdStr@_W@@0@Z + D7 10704837 108 Bytes [2C, 8A, 5B, 01, D0, EA, 80, ...]
.text KemUtil.dll!?GetPath@CFileName@@QBE?AV?$CStdStr@_W@@XZ + 14 107048A4 28 Bytes [00, 0F, B6, 56, 04, 0F, B6, ...]
.text KemUtil.dll!?GetPath@CFileName@@QBE?AV?$CStdStr@_W@@XZ + 31 107048C1 94 Bytes [2C, 8A, 5B, 03, 80, E2, BF, ...]
.text KemUtil.dll!?GetPath@CFileName@@QBE?AV?$CStdStr@_W@@XZ + 90 10704920 23 Bytes JMP 1AF22CA5
.text KemUtil.dll!?GetPath@CFileName@@QBE?AV?$CStdStr@_W@@XZ + A8 10704938 26 Bytes [00, 00, 0F, B6, 56, 07, 0F, ...]
.text KemUtil.dll!?GetPath@CFileName@@QBE?AV?$CStdStr@_W@@XZ + C3 10704953 30 Bytes [8B, 5C, 24, 2C, 8A, 5B, 03, ...]
.text ...
.text KemUtil.dll!?CreateDirectoryW@CFileName@@QAEHH@Z + 7B 10704A5B 166 Bytes [0A, D3, 41, 88, 11, 8A, 54, ...]
.text KemUtil.dll!?CreateDirectoryW@CFileName@@QAEHH@Z + 122 10704B02 170 Bytes [0F, B6, 57, 03, C1, E2, 02, ...]
.text KemUtil.dll!??0ForegroundAttentionGrabber@@QAE@ABV0@@Z + D 10704BAD 61 Bytes JMP D452CBB4
.text KemUtil.dll!??4ForegroundAttentionGrabber@@QAEAAV0@ABV0@@Z + 1B 10704BEB 167 Bytes [0F, B6, 0F, C1, E1, 02, 8D, ...]
.text KemUtil.dll!?doOurBlackMagic@ForegroundAttentionGrabber@@AAEXXZ + 83 10704C93 56 Bytes [24, 56, 8B, 30, 8B, C5, C1, ...]
.text KemUtil.dll!?doOurBlackMagic@ForegroundAttentionGrabber@@AAEXXZ + BC 10704CCC 336 Bytes [C1, E2, 02, 89, 54, 24, 1C, ...]
.text KemUtil.dll!??0ForegroundAttentionGrabber@@QAE@XZ + 7D 10704E1D 85 Bytes JMP 1B1030A2 \WINDOWS\system32\msjet40.dll (Microsoft Jet Engine Library/Microsoft Corporation)
.text KemUtil.dll!??0ForegroundAttentionGrabber@@QAE@XZ + D3 10704E73 62 Bytes [8B, 6C, 24, 2C, 83, E5, 07, ...]
.text KemUtil.dll!?ToString@LogiLog@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4LogiLogLevel@@@Z + 2 10704EB2 205 Bytes [D5, 4D, 85, D2, 88, 0F, 0F, ...]
.text KemUtil.dll!?Output@OutputToFILE@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z + 60 10704F80 290 Bytes [0A, D1, 88, 17, 47, 8B, CD, ...]
.text KemUtil.dll!?Output@OutputToFILE@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z + 183 107050A3 144 Bytes [4D, 0C, 42, 83, 7D, 0C, 00, ...]
.text KemUtil.dll!??1LogiLog@@UAE@XZ + 84 10705134 36 Bytes JMP F0E38004
.text KemUtil.dll!??1LogiLog@@UAE@XZ + A9 10705159 53 Bytes [41, 83, 7D, 0C, 00, 89, 4D, ...]
.text KemUtil.dll!??1LogiLog@@UAE@XZ + DF 1070518F 3 Bytes CALL 99385B98
.text KemUtil.dll!??1LogiLog@@UAE@XZ + E3 10705193 8 Bytes [88, 4F, 01, 5F, C9, C3, 51, ...] {MOV [EDI+0x1], CL; POP EDI; LEAVE ; RET ; PUSH ECX; PUSH ECX}
.text KemUtil.dll!??1LogiLog@@UAE@XZ + EC 1070519C 34 Bytes [44, 24, 10, 8B, 08, 8B, 44, ...]
.text ...
.text KemUtil.dll!?Get@LogiLog@@QAEAAV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@H@Z + 61 10705491 60 Bytes JMP 0A83E380
.text KemUtil.dll!?Get@LogiLog@@QAEAAV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@H@Z + 9E 107054CE 1 Byte [6C]
.text KemUtil.dll!?Get@LogiLog@@QAEAAV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@H@Z + 9E 107054CE 147 Bytes JMP 1B003753 \WINDOWS\system32\msjet40.dll (Microsoft Jet Engine Library/Microsoft Corporation)
.text KemUtil.dll!?Get@LogiLog@@QAEAAV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@H@Z + 132 10705562 3 Bytes [4C, 24, 14] {DEC ESP; AND AL, 0x14}
.text KemUtil.dll!?Get@LogiLog@@QAEAAV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@H@Z + 136 10705566 4 Bytes [C7, 04, 83, 7C]
.text KemUtil.dll!?Get@LogiLog@@QAEAAV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@H@Z + 13C 1070556C 194 Bytes [00, 0F, 8F, 23, FE, FF, FF, ...]
.text KemUtil.dll!?FromString@LogiLog@@QAE?AW4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z + 4F 1070562F 26 Bytes JMP 1AF239B4
.text KemUtil.dll!?FromString@LogiLog@@QAE?AW4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z + 6A 1070564A 62 Bytes [00, 00, 0F, B6, 57, 01, 83, ...]
.text KemUtil.dll!?FromString@LogiLog@@QAE?AW4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z + A9 10705689 45 Bytes JMP 88D10A04
.text KemUtil.dll!?FromString@LogiLog@@QAE?AW4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z + D7 107056B7 193 Bytes [CB, 8A, 5A, 01, 8A, 12, D0, ...]
.text KemUtil.dll!?FromString@LogiLog@@QAE?AW4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z + 19B 1070577B 39 Bytes [0F, B6, 1E, 8B, D3, C1, EA, ...]
.text KemUtil.dll!?FromString@LogiLog@@QAE?AW4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z + 1C3 107057A3 4 Bytes [5D, F8, 8A, 1C]
.text KemUtil.dll!?FromString@LogiLog@@QAE?AW4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z + 1C8 107057A8 47 Bytes [88, 19, 8A, 5C, 10, 01, 41, ...]
.text KemUtil.dll!?FromString@LogiLog@@QAE?AW4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z + 1F8 107057D8 268 Bytes [75, F8, 41, 88, 11, 8A, 14, ...]
.text KemUtil.dll!?FromString@LogiLog@@QAE?AW4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z + 305 107058E5 14 Bytes JMP C103E283
.text KemUtil.dll!?FromString@LogiLog@@QAE?AW4LogiLogLevel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z + 314 107058F4 145 Bytes JMP 88D30A04
.text KemUtil.dll!?IsMemberOf@LtWindowsPermissionsUtils@@QAEJW4enumQueryGroup@1@PAHH@Z + 16 10705986 40 Bytes [03, 8B, 7C, 24, 10, 22, CA, ...]
.text KemUtil.dll!?IsMemberOf@LtWindowsPermissionsUtils@@QAEJW4enumQueryGroup@1@PAHH@Z + 3F 107059AF 10 Bytes [4C, 24, 1C, 85, C9, 0F, 84, ...]
.text KemUtil.dll!?IsMemberOf@LtWindowsPermissionsUtils@@QAEJW4enumQueryGroup@1@PAHH@Z + 4A 107059BA 419 Bytes JMP 189CE6C5
.text KemUtil.dll!?IsMemberOf@LtWindowsPermissionsUtils@@QAEJW4enumQueryGroup@1@PAHH@Z + 1EE 10705B5E 60 Bytes [0F, 8F, 11, FF, FF, FF, 8B, ...]
.text KemUtil.dll!?IsMemberOf@LtWindowsPermissionsUtils@@QAEJW4enumQueryGroup@1@PAHH@Z + 22B 10705B9B 97 Bytes JMP D153DBA2
.text ...
.text KemUtil.dll!?IsAdministratorOrPowerUser@LtWindowsPermissionsUtils@@QAEHXZ + 7 10705E37 28 Bytes [8A, 55, 03, 8A, 5D, 02, D0, ...]
.text KemUtil.dll!?IsAdministratorOrPowerUser@LtWindowsPermissionsUtils@@QAEHXZ + 24 10705E54 227 Bytes JMP 0A80E380
.text KemUtil.dll!??0CObserver@@IAE@XZ + 8 10705F38 384 Bytes [8A, 55, 03, 8A, 5D, 02, D0, ...]
.text KemUtil.dll!??0CPlatforme@@QAE@XZ + 89 107060B9 182 Bytes [19, 8A, 5C, 38, 02, 41, 88, ...]
.text KemUtil.dll!??1CPlatforme@@UAE@XZ + 80 10706170 70 Bytes [8B, 55, 08, 83, E2, 07, 8B, ...]
.text KemUtil.dll!??1CPlatforme@@UAE@XZ + C7 107061B7 240 Bytes [C1, E3, 02, 8B, FB, 03, F8, ...]
.text KemUtil.dll!??1cWindowsHelper@@QAE@XZ + 28 107062A8 32 Bytes [01, 41, 88, 11, 8A, 50, 02, ...]
.text KemUtil.dll!??1cWindowsHelper@@QAE@XZ + 49 107062C9 513 Bytes [24, 56, 8B, 74, 24, 30, 57, ...]
.text KemUtil.dll!?QueryValueEx@CRegistry@@QAEJABV?$CStdStr@_W@@PAKPAE1@Z + B 107064CB 183 Bytes [5C, 24, 2C, 8A, 1B, C0, EA, ...]
.text KemUtil.dll!?WriteStringValue@CRegistry@@QAEJABV?$CStdStr@_W@@0@Z + 63 10706583 33 Bytes [D5, 4D, 85, D2, 0F, 84, F5, ...]
.text KemUtil.dll!?WriteStringValue@CRegistry@@QAEJABV?$CStdStr@_W@@0@Z + 85 107065A5 3 Bytes [2C, 8A, 1B]
.text KemUtil.dll!?WriteStringValue@CRegistry@@QAEJABV?$CStdStr@_W@@0@Z + 89 107065A9 178 Bytes JMP 0AD92204
.text KemUtil.dll!?BringProcessToForeground@@YA_NKPAX@Z + 6C 1070665C 275 Bytes [E2, 01, C1, E2, 02, 8D, 3C, ...]
.text KemUtil.dll!?BringProcessToForeground@@YA_NKPAX@Z + 180 10706770 58 Bytes [E5, 01, C1, E5, 02, 83, E2, ...]
.text KemUtil.dll!?ExecProgAndWaitForInit@@YA_NABV?$CStdStr@_W@@I@Z + 2B 107067AB 73 Bytes [02, 8A, 5C, 10, 03, 80, E1, ...]
.text KemUtil.dll!?ExecProgAndWaitForInit@@YA_NABV?$CStdStr@_W@@I@Z + 75 107067F5 48 Bytes [8B, 7C, 24, 1C, C0, E9, 02, ...]
.text KemUtil.dll!?ExecProgAndWaitForInit@@YA_NABV?$CStdStr@_W@@I@Z + A6 10706826 89 Bytes JMP D152E82D
.text KemUtil.dll!?ExecProgAndWaitForInit@@YA_NABV?$CStdStr@_W@@I@Z + 100 10706880 24 Bytes JMP D152E887
.text KemUtil.dll!?ExecProgAndWaitForInit@@YA_NABV?$CStdStr@_W@@I@Z + 119 10706899 213 Bytes [89, 7C, 24, 14, 0F, 8F, 16, ...]
.text ...
.text KemUtil.dll!?ExtractProgram@@YA_NABV?$CStdStr@_W@@AAV1@1@Z + 42 10706A22 160 Bytes [E1, 01, C1, E1, 02, 03, C1, ...]
.text KemUtil.dll!?ExtractProgram@@YA_NABV?$CStdStr@_W@@AAV1@1@Z + E3 10706AC3 151 Bytes [30, 8B, D1, 83, E1, 01, C1, ...]
.text KemUtil.dll!?ExtractProgram@@YA_NABV?$CStdStr@_W@@AAV1@1@Z + 17B 10706B5B 150 Bytes JMP D2004DE0
.text KemUtil.dll!?ExtractProgram@@YA_NABV?$CStdStr@_W@@AAV1@1@Z + 212 10706BF2 55 Bytes [38, 02, 8A, 54, 38, 03, D0, ...]
.text KemUtil.dll!?ExtractProgram@@YA_NABV?$CStdStr@_W@@AAV1@1@Z + 24A 10706C2A 69 Bytes JMP 64FB3639
.text ...
.text KemUtil.dll!?stripTrailingArgument@@YAXAAV?$CStdStr@_W@@@Z + 20 10706EB0 113 Bytes [85, C0, 7E, 21, 8B, 0D, A4, ...]
.text KemUtil.dll!?stripTrailingArgument@@YAXAAV?$CStdStr@_W@@@Z + 92 10706F22 203 Bytes [15, A0, C8, CA, 03, 8B, 0D, ...]
.text KemUtil.dll!?stripTrailingArgument@@YAXAAV?$CStdStr@_W@@@Z + 15E 10706FEE 16 Bytes [8B, 5D, 0C, 8B, 75, F0, 8A, ...] {MOV EBX, [EBP+0xc]; MOV ESI, [EBP-0x10]; MOV BL, [ESI+EBX]; MOV ESI, [EBP+0x10]; ADD DWORD [EBP+0xc], 0x2}
.text KemUtil.dll!?stripTrailingArgument@@YAXAAV?$CStdStr@_W@@@Z + 16F 10706FFF 32 Bytes [EB, 04, 24, F0, 0A, C3, 8B, ...]
.text KemUtil.dll!?stripTrailingArgument@@YAXAAV?$CStdStr@_W@@@Z + 190 10707020 215 Bytes [FF, FF, F6, 45, 08, 01, 74, ...]
.text ...
.text KemUtil.dll!?isValidFile@@YA_NABV?$CStdStr@_W@@_N@Z + 58 10707178 24 Bytes [C1, E2, 04, 0B, CA, 0F, AF, ...]
.text KemUtil.dll!?isValidFile@@YA_NABV?$CStdStr@_W@@_N@Z + 71 10707191 66 Bytes [16, 8A, 4D, 0C, 81, E3, C0, ...]
.text KemUtil.dll!?isValidFile@@YA_NABV?$CStdStr@_W@@_N@Z + B4 107071D4 154 Bytes [55, 10, 39, 5D, 08, 88, 0A, ...]
.text KemUtil.dll!?isValidFile@@YA_NABV?$CStdStr@_W@@_N@Z + 14F 1070726F 102 Bytes [88, 11, 33, D2, 89, 55, 0C, ...]
.text KemUtil.dll!?isValidFile@@YA_NABV?$CStdStr@_W@@_N@Z + 1B6 107072D6 30 Bytes [45, 10, 88, 11, 33, D2, 89, ...]
.text ...
.text KemUtil.dll!?ExecuteProgram@@YA_NABV?$CStdStr@_W@@0I_NPAPAX@Z + 3B 1070735B 24 Bytes [D1, D1, FA, 89, 45, F4, 85, ...]
.text KemUtil.dll!?ExecuteProgram@@YA_NABV?$CStdStr@_W@@0I_NPAPAX@Z + 54 10707374 117 Bytes [89, 4D, F8, 83, 65, F8, 01, ...]
.text KemUtil.dll!?ExecuteProgram@@YA_NABV?$CStdStr@_W@@0I_NPAPAX@Z + CB 107073EB 6 Bytes [00, EB, 04, 83, 65, 0C]
.text KemUtil.dll!?ExecuteProgram@@YA_NABV?$CStdStr@_W@@0I_NPAPAX@Z + D2 107073F2 73 Bytes [8B, 55, FC, 39, 55, 0C, 7D, ...]
.text KemUtil.dll!?ExecuteProgram@@YA_NABV?$CStdStr@_W@@0I_NPAPAX@Z + 11C 1070743C 6 Bytes [89, 7D, EC, 0F, 8F, 36]
.text ...
.text KemUtil.dll!?GetAvailableMessengers@@YAXAAV?$list@V?$CStdStr@_W@@V?$allocator@V?$CStdStr@_W@@@std@@@std@@@Z + C2 107077E2 79 Bytes [3B, C2, 89, 55, 0C, 7E, 66, ...]
.text KemUtil.dll!?GetAvailableMessengers@@YAXAAV?$list@V?$CStdStr@_W@@V?$allocator@V?$CStdStr@_W@@@std@@@std@@@Z + 112 10707832 13 Bytes [FF, 45, 10, 88, 11, 33, D2, ...]
.text KemUtil.dll!?GetAvailableMessengers@@YAXAAV?$list@V?$CStdStr@_W@@V?$allocator@V?$CStdStr@_W@@@std@@@std@@@Z + 120 10707840 26 Bytes [0C, 02, FF, 45, FC, 39, 75, ...]
.text KemUtil.dll!?GetAvailableMessengers@@YAXAAV?$list@V?$CStdStr@_W@@V?$allocator@V?$CStdStr@_W@@@std@@@std@@@Z + 13B 1070785B 283 Bytes [0F, AF, C6, 33, DB, 85, F6, ...]
.text KemUtil.dll!?GetAvailableMessengers@@YAXAAV?$list@V?$CStdStr@_W@@V?$allocator@V?$CStdStr@_W@@@std@@@std@@@Z + 257 10707977 160 Bytes [0C, 47, 3B, FA, 7C, D3, 83, ...]
.text ...
.text KemUtil.dll!?ExecuteProgram@@YA_NABV?$CStdStr@_W@@I_NPAPAX@Z + 32 10707B52 62 Bytes [15, A0, C8, CA, 03, 53, 56, ...]
.text KemUtil.dll!?ExecuteProgram@@YA_NABV?$CStdStr@_W@@I_NPAPAX@Z + 71 10707B91 75 Bytes [E3, 03, 0F, AF, DA, 83, E0, ...]
.text KemUtil.dll!?ExecuteProgram@@YA_NABV?$CStdStr@_W@@I_NPAPAX@Z + BD 10707BDD 17 Bytes [0B, 33, C9, 89, 4D, 0C, 89, ...] {OR ESI, [EBX]; LEAVE ; MOV [EBP+0xc], ECX; MOV [EBP-0x8], ECX; JMP 0x11; ADD DWORD [EBP+0xc], 0x2; XOR ECX, ECX}
.text KemUtil.dll!?ExecuteProgram@@YA_NABV?$CStdStr@_W@@I_NPAPAX@Z + CF 10707BEF 37 Bytes [45, F4, 39, 55, F4, 7C, C2, ...]
.text KemUtil.dll!?ExecuteProgram@@YA_NABV?$CStdStr@_W@@I_NPAPAX@Z + F6 10707C16 14 Bytes [FF, 4D, 08, 39, 4D, FC, 0F, ...] {DEC DWORD [EBP+0x8]; CMP [EBP-0x4], ECX; MOVZX EAX, BYTE [EDI]; JNZ 0x16; SHR EAX, 0x6}
.text KemUtil.dll!?LaunchMessenger@@YAHV?$CStdStr@_W@@@Z + 5 10707C25 22 Bytes [AF, C2, 89, 45, E4, EB, 20, ...]
.text KemUtil.dll!?LaunchMessenger@@YAHV?$CStdStr@_W@@@Z + 1C 10707C3C 47 Bytes CALL F931892C
.text KemUtil.dll!?LaunchMessenger@@YAHV?$CStdStr@_W@@@Z + 4E 10707C6E 116 Bytes [D3, EB, 09, 5D, F8, 83, 7D, ...]
.text KemUtil.dll!?LaunchMessenger@@YAHV?$CStdStr@_W@@@Z + C3 10707CE3 42 Bytes [0F, B6, 07, 8B, D8, C1, EB, ...]
.text KemUtil.dll!?LaunchMessenger@@YAHV?$CStdStr@_W@@@Z + EE 10707D0E 44 Bytes [AF, C2, 89, 5D, EC, 89, 45, ...]
.text ...
.text KemUtil.dll!?WaitForegroundWindow@CProcessFinder@@SAPAUHWND__@@XZ + 4D 10707F9D 62 Bytes [45, FC, 84, C9, 8B, 4D, F4, ...]
.text KemUtil.dll!?WaitForegroundWindow@CProcessFinder@@SAPAUHWND__@@XZ + 8C 10707FDC 104 Bytes [5B, C9, C3, 55, 8B, EC, 83, ...]
.text KemUtil.dll!?WaitForegroundWindow@CProcessFinder@@SAPAUHWND__@@XZ + F5 10708045 385 Bytes [83, 65, 0C, 00, 83, 65, FC, ...]
.text KemUtil.dll!?WaitForegroundWindow@CProcessFinder@@SAPAUHWND__@@XZ + 277 107081C7 75 Bytes [83, 65, 0C, 00, 83, 65, FC, ...]
.text KemUtil.dll!?WaitForegroundWindow@CProcessFinder@@SAPAUHWND__@@XZ + 2C3 10708213 165 Bytes CALL 10125D10
.text ...
.text KemUtil.dll!?GetForegroundProcessName@CProcessFinder@@QAE?AV?$CStdStr@_W@@J@Z + 8F 107085DF 112 Bytes [4D, 58, 99, 3B, 51, 14, 0F, ...]
.text KemUtil.dll!?GetForegroundProcessFullName@CProcessFinder@@QAE?AV?$CStdStr@_W@@J@Z + 50 10708650 10 Bytes [0F, BF, 4B, 1A, 40, 99, F7, ...] {MOVSX ECX, [EBX+0x1a]; INC EAX; CDQ ; IDIV ECX; XOR EAX, EAX}
.text KemUtil.dll!?GetForegroundProcessFullName@CProcessFinder@@QAE?AV?$CStdStr@_W@@J@Z + 5B 1070865B 88 Bytes [CA, 89, 4B, 0C, 8B, 55, 58, ...]
.text KemUtil.dll!?GetForegroundProcessFullName@CProcessFinder@@QAE?AV?$CStdStr@_W@@J@Z + B4 107086B4 95 Bytes [38, 88, 17, 47, FF, 45, 4C, ...]
.text KemUtil.dll!?GetForegroundProcessFullName@CProcessFinder@@QAE?AV?$CStdStr@_W@@J@Z + 114 10708714 205 Bytes [8D, 4D, C8, 8D, 85, 38, FF, ...]
.text KemUtil.dll!?Instantiate@CProcessFinder@@CA?AV?$auto_ptr@VCProcessFinder@@@std@@_N@Z + 92 107087E2 1 Byte [C1]
.text KemUtil.dll!?Instantiate@CProcessFinder@@CA?AV?$auto_ptr@VCProcessFinder@@@std@@_N@Z + 92 107087E2 105 Bytes [C1, 8B, 0B, C1, E0, 02, 8B, ...]
.text KemUtil.dll!?Instantiate@CProcessFinder@@CA?AV?$auto_ptr@VCProcessFinder@@@std@@_N@Z + FC 1070884C 13 Bytes CALL 106ED98A \Program Files\Logitech\SetPoint\Macros\MacroCore.dll (Logitech SetPoint User Interface (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?Instantiate@CProcessFinder@@CA?AV?$auto_ptr@VCProcessFinder@@@std@@_N@Z + 10B 1070885B 177 Bytes CALL 106E8082 \Program Files\Logitech\SetPoint\Macros\MacroCore.dll (Logitech SetPoint User Interface (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?Instantiate@CProcessFinder@@CA?AV?$auto_ptr@VCProcessFinder@@@std@@_N@Z + 1BD 1070890D 125 Bytes [3C, B8, F4, 88, 5F, 03, C3, ...]
.text ...
.text KemUtil.dll!?Instance@CProcessFinder@@SAPAV1@_N@Z + 6 10708B56 100 Bytes [8B, 50, 08, 8B, 40, 0C, 83, ...]
.text KemUtil.dll!?Instance@CProcessFinder@@SAPAV1@_N@Z + 6B 10708BBB 37 Bytes [8D, 4D, A4, 8D, 85, 14, FF, ...]
.text KemUtil.dll!?Instance@CProcessFinder@@SAPAV1@_N@Z + 91 10708BE1 32 Bytes [C6, 45, FC, 05, 89, 45, 50, ...]
.text KemUtil.dll!?Instance@CProcessFinder@@SAPAV1@_N@Z + B2 10708C02 13 Bytes [01, FF, 50, 04, 8B, 4D, 30, ...]
.text KemUtil.dll!?Instance@CProcessFinder@@SAPAV1@_N@Z + C0 10708C10 45 Bytes [45, 54, 8B, 77, 18, 83, 65, ...]
.text ...
.text KemUtil.dll!?OpenKey@CRegistry@@QAEJPAUHKEY__@@PB_WAB_N@Z + 25 10709255 197 Bytes [89, 45, 0C, 8B, 45, FC, 85, ...]
.text KemUtil.dll!?QueryValueEx@CRegistry@@QAEJPB_WPAKPAE1@Z + 2B 1070931B 247 Bytes [00, 00, 48, 0F, 84, 93, 00, ...]
.text KemUtil.dll!?GetFirstSubkey@CRegistry@@QAEPB_WXZ + 3 10709413 274 Bytes [C2, 48, 0F, 84, A0, 00, 00, ...]
.text KemUtil.dll!?ReadStringValue@CRegistry@@QAEJPB_WAAV?$CStdStr@_W@@@Z + 97 10709527 325 Bytes [00, 2B, C1, 74, 7B, 8B, C2, ...]
.text KemUtil.dll!?ClearKey@CRegistryClass@@QAEHXZ + D 1070966D 45 Bytes [F8, 6E, 5F, 03, C3, B8, 67, ...]
.text KemUtil.dll!?SetRootKey@CRegistryClass@@QAEHPAUHKEY__@@@Z + 1B 1070969B 13 Bytes [C3, B8, 47, 76, 5F, 03, C3, ...] {RET ; MOV EAX, 0x35f7647; RET ; MOV EAX, 0x35f77a8; RET }
.text KemUtil.dll!?SetRootKey@CRegistryClass@@QAEHPAUHKEY__@@@Z + 29 107096A9 70 Bytes [8B, 78, 5F, 03, C3, B8, 6D, ...]
.text KemUtil.dll!?CreateKey@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 40 107096F0 1 Byte [00]
.text KemUtil.dll!?CreateKey@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 44 107096F4 11 Bytes [57, 8B, D8, 8B, F1, E8, D0, ...]
.text KemUtil.dll!?CreateKey@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 51 10709701 4 Bytes [18, 89, 87, 8C]
.text KemUtil.dll!?CreateKey@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 56 10709706 40 Bytes [00, 00, 8B, 44, 24, 1C, 83, ...]
.text KemUtil.dll!?CreateKey@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 7F 1070972F 17 Bytes [00, 74, 1C, 8B, 4E, 20, 33, ...] {ADD [ESP+EBX-0x75], DH; DEC ESI; AND [EBX], DH; ROL BYTE [EBP+0x330574c9], CL; ROL BYTE [EAX-0x15], 0x3}
.text ...
.text KemUtil.dll!?DeleteValue@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 4B 107097CB 73 Bytes [8B, FA, 99, 52, 50, 57, 51, ...]
.text KemUtil.dll!?GetDataSize@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 35 10709815 21 Bytes [86, D4, 02, 00, 00, 6B, C0, ...]
.text KemUtil.dll!?GetDataSize@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 4B 1070982B 75 Bytes [FF, 76, 70, 99, 52, 8D, 9F, ...]
.text KemUtil.dll!?GetDataType@CRegistryClass@@QAEKV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 7 10709877 43 Bytes [43, 08, 89, 47, 08, 8B, 43, ...]
.text KemUtil.dll!?GetDataType@CRegistryClass@@QAEKV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 33 107098A3 10 Bytes [08, 83, D2, 00, 52, 50, E8, ...]
.text KemUtil.dll!?GetDataType@CRegistryClass@@QAEKV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 3E 107098AE 71 Bytes [56, 57, 53, 89, 07, 89, 57, ...]
.text KemUtil.dll!?GetSubKeyCount@CRegistryClass@@QAEHXZ + 6 107098F6 7 Bytes [00, 89, 41, 10, 8B, 47, 10]
.text KemUtil.dll!?GetSubKeyCount@CRegistryClass@@QAEHXZ + E 107098FE 14 Bytes [46, 48, 8B, 47, 14, 89, 46, ...] {INC ESI; DEC EAX; MOV EAX, [EDI+0x14]; MOV [ESI+0x4c], EAX; MOV EAX, [EDI+0x1c]; MOV [ESI+0x68], EAX}
.text KemUtil.dll!?GetSubKeyCount@CRegistryClass@@QAEHXZ + 1D 1070990D 11 Bytes [45, FC, 83, 20, 00, 33, FF, ...]
.text KemUtil.dll!?GetSubKeyCount@CRegistryClass@@QAEHXZ + 29 10709919 54 Bytes [00, 00, 74, 63, 8B, 86, D4, ...]
.text KemUtil.dll!?GetSubKeyCount@CRegistryClass@@QAEHXZ + 60 10709950 124 Bytes [88, 5F, 03, FF, 86, D4, 02, ...]
.text KemUtil.dll!?GetSubKeyName@CRegistryClass@@QAEHHAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 1D 107099CD 39 Bytes CALL 10125ABD
.text KemUtil.dll!?GetSubKeyName@CRegistryClass@@QAEHHAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 46 107099F6 72 Bytes [83, 65, 00, 00, 33, ED, 8D, ...]
.text KemUtil.dll!?GetSubKeyName@CRegistryClass@@QAEHHAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 8F 10709A3F 190 Bytes [00, 00, 3B, F5, 74, 23, 8B, ...]
.text KemUtil.dll!?GetValueCount@CRegistryClass@@QAEHXZ + AE 10709AFE 29 Bytes CALL 10125D10
.text KemUtil.dll!?KeyExists@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHKEY__@@@Z + C 10709B1C 15 Bytes [4B, 18, 8B, 53, 1C, 50, 8B, ...]
.text KemUtil.dll!?KeyExists@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHKEY__@@@Z + 1C 10709B2C 40 Bytes [FF, FF, 83, 65, EC, 00, 59, ...]
.text KemUtil.dll!?KeyExists@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHKEY__@@@Z + 46 10709B56 109 Bytes [75, CC, 8D, 85, 4C, FF, FF, ...]
.text KemUtil.dll!?SetKey@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 64 10709BC4 30 Bytes [5D, 10, FF, B3, D0, 02, 00, ...]
.text KemUtil.dll!?SetKey@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 83 10709BE3 97 Bytes CALL 10125D0C
.text KemUtil.dll!?SetKey@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + E5 10709C45 60 Bytes [45, EC, 99, 3B, 57, 0C, 0F, ...]
.text KemUtil.dll!?ValueExists@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 2 10709C82 66 Bytes [8C, 8B, 24, 01, 00, 00, FF, ...]
.text KemUtil.dll!?ValueExists@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 45 10709CC5 8 Bytes [99, 51, 52, 50, E8, 72, 12, ...]
.text KemUtil.dll!?ValueExists@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 4E 10709CCE 48 Bytes [85, C9, 8B, F8, 89, 5D, E8, ...]
.text KemUtil.dll!?RenameValue@CRegistryClass@@QAEXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0@Z + F 10709CFF 192 Bytes [8B, C6, 8D, 5C, B9, FC, E8, ...]
.text KemUtil.dll!?ReadDateTime@CRegistryClass@@QAE?AVCOleDateTime@ATL@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@3@V23@@Z + B0 10709DC0 4 Bytes [59, 59, 8B, 4D]
.text KemUtil.dll!?ReadDateTime@CRegistryClass@@QAE?AVCOleDateTime@ATL@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@3@V23@@Z + B6 10709DC6 25 Bytes [8C, 99, 24, 01, 00, 00, 89, ...]
.text KemUtil.dll!?ReadFloat@CRegistryClass@@QAENV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@N@Z + 10 10709DE0 68 Bytes [8C, 81, 24, 01, 00, 00, 50, ...]
.text KemUtil.dll!?ReadFloat@CRegistryClass@@QAENV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@N@Z + 55 10709E25 78 Bytes [01, 00, 00, 8B, 4F, 08, 50, ...]
.text KemUtil.dll!?ReadString@CRegistryClass@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@0@Z + 24 10709E74 21 Bytes CALL 1070906C \WINDOWS\system32\KemUtil.dll (Logitech Utility (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?ReadString@CRegistryClass@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@0@Z + 3A 10709E8A 32 Bytes [8D, 85, 28, FF, FF, FF, 50, ...]
.text KemUtil.dll!?ReadString@CRegistryClass@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@0@Z + 5B 10709EAB 125 Bytes CALL 1022B414
.text KemUtil.dll!?ReadString@CRegistryClass@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@0@Z + D9 10709F29 16 Bytes [89, 45, E0, 8B, 08, 89, 4D, ...]
.text KemUtil.dll!?ReadString@CRegistryClass@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@0@Z + EA 10709F3A 9 Bytes [7B, 16, 03, 8A, 53, 20, 8B, ...]
.text KemUtil.dll!?ReadString@CRegistryClass@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@0@Z + F4 10709F44 149 Bytes [73, 1C, C6, 45, FC, 01, E8, ...]
.text KemUtil.dll!?ReadDword@CRegistryClass@@QAEKV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@K@Z + 2A 10709FDA 10 Bytes CALL 107096DC \WINDOWS\system32\KemUtil.dll (Logitech Utility (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?ReadDword@CRegistryClass@@QAEKV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@K@Z + 35 10709FE5 33 Bytes [4D, D8, 89, 08, B0, 01, E8, ...]
.text KemUtil.dll!?ReadDword@CRegistryClass@@QAEKV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@K@Z + 57 1070A007 82 Bytes [00, B8, 28, A0, 8A, 03, E8, ...]
.text KemUtil.dll!?ReadBinary@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAEK@Z + 1A 1070A05A 38 Bytes [8D, 4D, 00, 89, 08, C7, 45, ...]
.text KemUtil.dll!?ReadBinary@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAEK@Z + 41 1070A081 22 Bytes [7D, 68, 8B, 4F, 08, 89, 4D, ...]
.text KemUtil.dll!?ReadBinary@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAEK@Z + 58 1070A098 20 Bytes [89, 4D, C8, 8D, 4D, BC, 51, ...]
.text KemUtil.dll!?ReadBinary@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAEK@Z + 6D 1070A0AD 22 Bytes [FF, 76, 1C, FF, 77, 20, FF, ...]
.text KemUtil.dll!?ReadBool@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 4 1070A0C4 28 Bytes [7D, 68, DF, 6F, 10, 6A, 0B, ...]
.text KemUtil.dll!?ReadBool@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 22 1070A0E2 7 Bytes [6A, 09, 59, 8D, 7D, CC, 8D]
.text KemUtil.dll!?ReadBool@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 2A 1070A0EA 161 Bytes [1C, FF, FF, FF, F3, A5, 89, ...]
.text KemUtil.dll!?ReadFont@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCFont@@@Z + 3C 1070A18C 85 Bytes [46, EB, E5, 83, 65, 54, 00, ...]
.text KemUtil.dll!?ReadFont@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCFont@@@Z + 92 1070A1E2 13 Bytes [89, 45, E0, 8D, 45, CC, 50, ...]
.text KemUtil.dll!?ReadFont@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCFont@@@Z + A0 1070A1F0 59 Bytes [59, 74, 0F, FF, 75, 6C, 8D, ...]
.text KemUtil.dll!?ReadFont@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCFont@@@Z + DC 1070A22C 57 Bytes [8B, 45, 30, 8B, 7D, 2C, 89, ...]
.text KemUtil.dll!?ReadPoint@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCPoint@@@Z + 6 1070A266 32 Bytes [46, 33, C0, EB, D1, 89, 45, ...]
.text KemUtil.dll!?ReadPoint@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCPoint@@@Z + 27 1070A287 105 Bytes [7C, 09, 3B, 41, 10, 0F, 83, ...]
.text KemUtil.dll!?ReadRect@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCRect@@@Z + 1 1070A2F1 54 Bytes [65, 30, 00, 8B, 7D, 68, 8B, ...]
.text KemUtil.dll!?ReadRect@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCRect@@@Z + 38 1070A328 185 Bytes [83, 43, 70, 01, 8B, 45, 3C, ...]
.text KemUtil.dll!?WriteDateTime@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@VCOleDateTime@3@@Z + 62 1070A3E2 50 Bytes [45, 5C, 8B, 4D, 68, 99, 3B, ...]
.text KemUtil.dll!?WriteString@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0@Z + 6 1070A416 128 Bytes [33, F6, 8B, 7D, 68, 3B, 77, ...]
.text KemUtil.dll!?WriteString@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0@Z + 87 1070A497 66 Bytes JMP 1070A3DE \WINDOWS\system32\KemUtil.dll (Logitech Utility (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?WriteString@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0@Z + CA 1070A4DA 72 Bytes [59, 5F, 5E, 5B, 83, C5, 60, ...]
.text KemUtil.dll!?WriteString@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0@Z + 113 1070A523 114 Bytes [8D, BD, 30, FF, FF, FF, E8, ...]
.text KemUtil.dll!?WriteFloat@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@N@Z + 66 1070A596 6 Bytes CALL 107FAC1F
.text KemUtil.dll!?WriteFloat@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@N@Z + 6D 1070A59D 75 Bytes [C8, 8B, 45, DC, 8B, FA, 03, ...]
.text KemUtil.dll!?WriteBool@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 29 1070A5E9 3 Bytes [85, 30, FF]
.text KemUtil.dll!?WriteBool@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 2D 1070A5ED 7 Bytes CALL 106E7F98 \Program Files\Logitech\SetPoint\Macros\MacroCore.dll (Logitech SetPoint User Interface (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?WriteBool@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 35 1070A5F5 4 Bytes [0F, 84, 91, 00]
.text KemUtil.dll!?WriteBool@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z + 3A 1070A5FA 165 Bytes [00, 83, 65, E4, 00, 83, 65, ...]
.text KemUtil.dll!?WriteDword@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@K@Z + 50 1070A6A0 4 Bytes [55, D4, 83, C4]
.text KemUtil.dll!?WriteDword@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@K@Z + 55 1070A6A5 28 Bytes [80, 7D, 13, 00, 74, 0F, FF, ...]
.text KemUtil.dll!?WriteDword@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@K@Z + 72 1070A6C2 62 Bytes CALL 106E7FE3 \Program Files\Logitech\SetPoint\Macros\MacroCore.dll (Logitech SetPoint User Interface (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?WriteFont@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCFont@@@Z + 21 1070A701 11 Bytes CALL 107FAC5D
.text KemUtil.dll!?WriteFont@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCFont@@@Z + 2D 1070A70D 33 Bytes [F8, 8B, CE, 8D, 85, 30, FF, ...]
.text KemUtil.dll!?WriteFont@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCFont@@@Z + 4F 1070A72F 86 Bytes [FF, 8B, 45, D0, 8B, 4D, C8, ...]
.text KemUtil.dll!?WriteFont@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCFont@@@Z + A6 1070A786 47 Bytes [88, 45, 13, FF, B3, D0, 02, ...]
.text KemUtil.dll!?WritePoint@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCPoint@@@Z + 6 1070A7B6 8 Bytes [08, 89, 4D, CC, 8D, 4D, CC, ...]
.text KemUtil.dll!?WritePoint@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCPoint@@@Z + F 1070A7BF 12 Bytes [C7, 45, D0, 10, 7B, 16, 03, ...]
.text KemUtil.dll!?WritePoint@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCPoint@@@Z + 1C 1070A7CC 74 Bytes [33, C0, 39, 07, C6, 45, FC, ...]
.text KemUtil.dll!?WritePoint@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCPoint@@@Z + 67 1070A817 5 Bytes [83, C4, 1C, 33, C0] {ADD ESP, 0x1c; XOR EAX, EAX}
.text KemUtil.dll!?WritePoint@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCPoint@@@Z + 6D 1070A81D 49 Bytes [3F, 89, 7D, DC, 89, 45, E4, ...]
.text KemUtil.dll!?WriteRect@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCRect@@@Z + F 1070A84F 7 Bytes [83, 43, 70, 01, 83, 53, 74]
.text KemUtil.dll!?WriteRect@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCRect@@@Z + 17 1070A857 74 Bytes [33, C0, 3B, 45, E0, 89, 45, ...]
.text KemUtil.dll!?WriteRect@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCRect@@@Z + 62 1070A8A2 53 Bytes [45, EC, 3B, 45, E0, 7D, 16, ...]
.text KemUtil.dll!??1CRegistryClass@@QAE@XZ + 8 1070A8D8 73 Bytes [CE, 8D, 85, 1C, FF, FF, FF, ...]
.text KemUtil.dll!?DeleteKey@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 24 1070A924 162 Bytes [B8, 9A, A0, 8A, 03, E8, 44, ...]
.text KemUtil.dll!?DeleteKey@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + C7 1070A9C7 64 Bytes [89, 45, 10, 8B, 45, EC, 99, ...]
.text KemUtil.dll!?DeleteKey@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 108 1070AA08 33 Bytes CALL 106E7FE0 \Program Files\Logitech\SetPoint\Macros\MacroCore.dll (Logitech SetPoint User Interface (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?DeleteKey@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 12A 1070AA2A 157 Bytes [59, 89, 3D, A4, C8, CA, 03, ...]
.text KemUtil.dll!?DeleteKey@CRegistryClass@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 1C9 1070AAC9 55 Bytes CALL 1012374D
.text ...
.text KemUtil.dll!?SendKeys_ReleaseAll@@YAXXZ + 47 1070B2A7 46 Bytes [75, 04, 89, 03, EB, 13, 8B, ...]
.text KemUtil.dll!?SendKeys_ReleaseAll@@YAXXZ + 76 1070B2D6 4 Bytes [86, 28, 04, 00] {XCHG [EAX], CH; ADD AL, 0x0}
.text KemUtil.dll!?SendKeys_ReleaseAll@@YAXXZ + 7B 1070B2DB 61 Bytes [0B, 86, 2C, 04, 00, 00, 0F, ...]
.text KemUtil.dll!?SendKeys_ReleaseAll@@YAXXZ + BB 1070B31B 54 Bytes [0B, 94, 30, DC, 02, 00, 00, ...]
.text KemUtil.dll!?SendKeys_ReleaseAll@@YAXXZ + F2 1070B352 54 Bytes [28, 89, 8C, 30, E0, 02, 00, ...]
.text ...
.text KemUtil.dll!?SendKeys@@YA?AW4SKERR@@PB_W@Z + 21 1070B621 15 Bytes [8B, 8E, 84, 00, 00, 00, 6B, ...]
.text KemUtil.dll!?SendKeys@@YA?AW4SKERR@@PB_W@Z + 31 1070B631 32 Bytes [89, 41, 10, 8B, C6, 5F, 5B, ...]
.text KemUtil.dll!?SendKeys@@YA?AW4SKERR@@PB_W@Z + 52 1070B652 140 Bytes [8B, 86, 28, 04, 00, 00, 33, ...]
.text KemUtil.dll!?SendKeys@@YA?AW4SKERR@@PB_W@Z + DF 1070B6DF 50 Bytes [8B, 8E, D4, 02, 00, 00, 6B, ...]
.text KemUtil.dll!?SendKeys@@YA?AW4SKERR@@PB_W@Z + 113 1070B713 10 Bytes [8B, 86, D4, 02, 00, 00, 8B, ...]
.text ...
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + D 1070B8FD 20 Bytes [6B, C0, 28, 8D, 84, 30, D8, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 23 1070B913 89 Bytes [6B, C0, 28, 8D, 84, 30, FC, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 7E 1070B96E 19 Bytes [68, A0, 00, 00, 00, B8, C8, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 93 1070B983 29 Bytes [83, 65, DC, 00, 83, 65, FC, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + B1 1070B9A1 184 Bytes [89, 45, B0, 8B, 08, 89, 4D, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 16B 1070BA5B 32 Bytes [66, 89, BD, BE, 01, 00, 00, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 18C 1070BA7C 157 Bytes [89, 45, 10, 8B, 46, 20, 89, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 22A 1070BB1A 83 Bytes [75, A8, FF, 83, C4, 0C, 84, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 27E 1070BB6E 65 Bytes [00, 00, 83, C4, 14, 88, 04, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 2C0 1070BBB0 42 Bytes [46, 04, 89, 85, E4, 02, 00, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 2ED 1070BBDD 20 Bytes [48, 0F, 85, 09, 01, 00, 00, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 304 1070BBF4 4 Bytes [FF, B5, B8, 01]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 30A 1070BBFA 96 Bytes CALL 106E81B0 \Program Files\Logitech\SetPoint\Macros\MacroCore.dll (Logitech SetPoint User Interface (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 36B 1070BC5B 107 Bytes [DD, 46, 30, D9, 5D, D4, 51, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 3D7 1070BCC7 4 Bytes [85, B8, 01, 00]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 3DC 1070BCCC 2 Bytes [89, 85]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 3E0 1070BCD0 127 Bytes [00, 00, 8B, 85, BC, 01, 00, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 460 1070BD50 61 Bytes CALL 106E8093 \Program Files\Logitech\SetPoint\Macros\MacroCore.dll (Logitech SetPoint User Interface (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 49E 1070BD8E 31 Bytes [43, 30, 57, FF, 75, C0, 57, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 4BE 1070BDAE 7 Bytes [50, 8B, CB, E8, 1B, C3, FD]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 4C6 1070BDB6 54 Bytes [EB, 30, 8B, 7D, C8, 8B, 43, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 4FD 1070BDED 2 Bytes [81, 04]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 501 1070BDF1 48 Bytes [8B, 43, 30, 8B, 48, 08, 8B, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 533 1070BE23 28 Bytes [C7, 45, FC, 03, 00, 00, 00, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 550 1070BE40 134 Bytes [7B, 16, 03, 8D, 75, 00, C6, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 5D7 1070BEC7 38 Bytes [51, 08, 8B, 49, 0C, 01, 55, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 5FE 1070BEEE 51 Bytes [7D, B4, 52, FF, 30, FF, 37, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 633 1070BF23 100 Bytes [00, 8B, 45, E0, 8B, 4D, E4, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 698 1070BF88 15 Bytes CALL 9970BF8F
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 6A9 1070BF99 147 Bytes [89, 48, 08, 89, 50, 0C, 8B, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 73D 1070C02D 42 Bytes CALL 9B8507BD
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 769 1070C059 16 Bytes [00, 7F, 0A, 83, 7D, C8, 00, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 77B 1070C06B 15 Bytes [00, 01, 74, 25, 83, BD, 80, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 78C 1070C07C 33 Bytes [FF, B5, BC, 01, 00, 00, FF, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 7AE 1070C09E 31 Bytes [FF, 75, 70, 99, 52, 50, E8, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 7CE 1070C0BE 82 Bytes [0B, C2, 74, 3A, 83, 45, E8, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 821 1070C111 117 Bytes CALL 1012A08C
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 897 1070C187 1 Byte [6C]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 897 1070C187 24 Bytes [6C, 8B, 43, 30, 8B, 4F, 18, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 8B0 1070C1A0 72 Bytes [86, 68, 04, 00, 00, FF, 70, ...]
.text KemUtil.dll!?SendKeysRemoveSpecialChars@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 8FB 1070C1EB 37 Bytes [C7, 45, DC, 01, 00, 00, 00, ...]
.text KemUtil.dll!?StringCut@@YA?AV?$list@V?$CStdStr@_W@@V?$allocator@V?$CStdStr@_W@@@std@@@std@@ABV?$CStdStr@_W@@H@Z + 21 1070C211 16 Bytes [59, 8B, 47, 24, 85, C0, 74, ...]
.text KemUtil.dll!?StringCut@@YA?AV?$list@V?$CStdStr@_W@@V?$allocator@V?$CStdStr@_W@@@std@@@std@@ABV?$CStdStr@_W@@H@Z + 32 1070C222 5 Bytes [A1, FF, 83, 67, 24] {MOV EAX, [0x246783ff]}
.text KemUtil.dll!?StringCut@@YA?AV?$list@V?$CStdStr@_W@@V?$allocator@V?$CStdStr@_W@@@std@@@std@@ABV?$CStdStr@_W@@H@Z + 38 1070C228 28 Bytes [59, 81, C6, 84, 00, 00, 00, ...]
.text KemUtil.dll!?StringCut@@YA?AV?$list@V?$CStdStr@_W@@V?$allocator@V?$CStdStr@_W@@@std@@@std@@ABV?$CStdStr@_W@@H@Z + 56 1070C246 47 Bytes [0F, 84, 12, FB, FF, FF, FF, ...]
.text KemUtil.dll!?StringCut@@YA?AV?$list@V?$CStdStr@_W@@V?$allocator@V?$CStdStr@_W@@@std@@@std@@ABV?$CStdStr@_W@@H@Z + 86 1070C276 24 Bytes [33, C0, 39, 45, CC, 7C, 0A, ...]
.text ...
.text KemUtil.dll!?EnsureTrailingBackslash@@YAXAAV?$CStdStr@_W@@@Z + 2 1070C4F2 79 Bytes CALL 106E8095 \Program Files\Logitech\SetPoint\Macros\MacroCore.dll (Logitech SetPoint User Interface (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?StripTrailingBackslash@@YAXAAV?$CStdStr@_W@@@Z + 12 1070C542 38 Bytes CALL 107FAC1E
.text KemUtil.dll!?StripTrailingBackslash@@YAXAAV?$CStdStr@_W@@@Z + 39 1070C569 137 Bytes CALL 107FAC1E
.text KemUtil.dll!??1CSubject@@UAE@XZ + 53 1070C5F3 87 Bytes JMP 1070C780 \WINDOWS\system32\KemUtil.dll (Logitech Utility (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?Notify@CSubject@@UAEXPAV1@@Z + B 1070C64B 98 Bytes [48, 08, 01, 4D, D0, 8B, 48, ...]
.text KemUtil.dll!?Notify@CSubject@@UAEXPAV1@@Z + 6E 1070C6AE 134 Bytes [7D, DC, 00, 0F, 87, 49, FE, ...]
.text KemUtil.dll!?Notify@CSubject@@UAEXPAV1@@Z + F5 1070C735 1 Byte [00]
.text KemUtil.dll!?Notify@CSubject@@UAEXPAV1@@Z + F5 1070C735 14 Bytes [00, 00, 8B, 47, 30, 8B, 8B, ...]
.text KemUtil.dll!?Notify@CSubject@@UAEXPAV1@@Z + 106 1070C746 5 Bytes JMP 1070C500 \WINDOWS\system32\KemUtil.dll (Logitech Utility (UNICODE)/Logitech, Inc.)
.text ...
.text KemUtil.dll!?GetDeviceVersion@SWAndDeviceInfoImpl@@EBE_NPAV?$CStdStr@_W@@@Z + 29 1070C969 18 Bytes [00, 8B, 48, 20, 89, 8D, F0, ...]
.text KemUtil.dll!?GetDeviceVersion@SWAndDeviceInfoImpl@@EBE_NPAV?$CStdStr@_W@@@Z + 3C 1070C97C 84 Bytes [48, 04, 89, 8D, E4, 02, 00, ...]
.text KemUtil.dll!?GetDeviceVersion@SWAndDeviceInfoImpl@@EBE_NPAV?$CStdStr@_W@@@Z + 92 1070C9D2 34 Bytes [8B, 75, DC, 7F, 08, 3B, F3, ...]
.text KemUtil.dll!?GetDeviceVersion@SWAndDeviceInfoImpl@@EBE_NPAV?$CStdStr@_W@@@Z + B5 1070C9F5 14 Bytes CALL 0FA11185
.text KemUtil.dll!?GetDeviceVersion@SWAndDeviceInfoImpl@@EBE_NPAV?$CStdStr@_W@@@Z + C4 1070CA04 2 Bytes [70, 3C] {JO 0x3e}
.text ...
.text KemUtil.dll!?GetSWVersionDevicePrefix@SWAndDeviceInfoImpl@@EBE_NPAV?$CStdStr@_W@@@Z + 18 1070CA58 18 Bytes [00, 00, 8B, 45, E4, 01, 45, ...]
.text KemUtil.dll!?GetPort@SWAndDeviceInfoImpl@@EBE_NPAV?$CStdStr@_W@@@Z + D 1070CA6D 145 Bytes [11, 45, 5C, FF, 45, 40, 89, ...]
.text KemUtil.dll!?GetPort@SWAndDeviceInfoImpl@@EBE_NPAV?$CStdStr@_W@@@Z + A0 1070CB00 11 Bytes [8B, 46, 10, 01, 45, C8, 8B, ...]
.text KemUtil.dll!?GetPort@SWAndDeviceInfoImpl@@EBE_NPAV?$CStdStr@_W@@@Z + AC 1070CB0C 36 Bytes [8B, 46, 24, 8B, 48, 08, 01, ...]
.text KemUtil.dll!??0cTextFile@@QAE@ABV0@@Z + 1 1070CB31 178 Bytes CALL 1012A08E
.text KemUtil.dll!?Read@cTextFile@@QAE_NABV?$CStdStr@_W@@@Z + 4 1070CBE4 39 Bytes CALL 1018D7AE
.text KemUtil.dll!?Read@cTextFile@@QAE_NABV?$CStdStr@_W@@@Z + 2C 1070CC0C 130 Bytes [FF, 8B, 4F, 30, 89, 81, D8, ...]
.text KemUtil.dll!?GetNextLine@cTextFile@@QAE_NAAV?$CStdStr@_W@@@Z + F 1070CC8F 18 Bytes [8D, 6C, 24, FC, A1, 50, AE, ...]
.text KemUtil.dll!?GetNextLine@cTextFile@@QAE_NAAV?$CStdStr@_W@@@Z + 22 1070CCA2 14 Bytes [B8, 63, A1, 8A, 03, E8, C6, ...]
.text KemUtil.dll!?GetNextLine@cTextFile@@QAE_NAAV?$CStdStr@_W@@@Z + 32 1070CCB2 24 Bytes [8B, B5, 94, 04, 00, 00, 8B, ...]
.text KemUtil.dll!?GetNextLine@cTextFile@@QAE_NAAV?$CStdStr@_W@@@Z + 4B 1070CCCB 11 Bytes JMP 1070D1FF \WINDOWS\system32\KemUtil.dll (Logitech Utility (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?GetNextLine@cTextFile@@QAE_NAAV?$CStdStr@_W@@@Z + 57 1070CCD7 27 Bytes [00, 8D, 45, 00, 53, 50, E8, ...]
.text ...
.text KemUtil.dll!?getInstanceHandle@CDynFuncLoad@@QAEPAUHINSTANCE__@@XZ + 1 1070CD01 31 Bytes [06, 89, 45, 38, 8B, 47, 30, ...]
.text KemUtil.dll!??0CDynFuncLoad@@QAE@PB_W@Z + 1 1070CD21 13 Bytes [08, 89, 4D, 00, 8B, 48, 04, ...]
.text KemUtil.dll!??0CDynFuncLoad@@QAE@PB_W@Z + F 1070CD2F 33 Bytes [4D, 08, 8B, 48, 0C, 89, 4D, ...]
.text KemUtil.dll!?getFunction@CDynFuncLoad@@QAEPAXPBD@Z + 1 1070CD51 57 Bytes [48, 7E, 66, 89, 4D, 28, 8B, ...]
.text KemUtil.dll!??0OSInfo@@QAE@ABV0@@Z + B 1070CD8B 57 Bytes [66, 89, 9D, 70, 04, 00, 00, ...]
.text KemUtil.dll!?distinguishesLeftRightModifiers@OSInfo@@QAE_NXZ + 17 1070CDC7 213 Bytes [84, FF, FE, FF, FF, FF, 75, ...]
.text KemUtil.dll!?IsUnderlying64Bit@OSInfo@@QAE_NXZ + 7D 1070CE9D 37 Bytes [00, 6A, 18, 6A, 01, E8, D9, ...]
.text KemUtil.dll!?IsUnderlying64Bit@OSInfo@@QAE_NXZ + A3 1070CEC3 17 Bytes [00, 8B, 08, 89, 8D, E0, 02, ...]
.text KemUtil.dll!?captureInfo@OSInfo@@AAEXXZ + 5 1070CED5 12 Bytes [33, C9, 83, 78, 20, 01, 0F, ...]
.text KemUtil.dll!?captureInfo@OSInfo@@AAEXXZ + 14 1070CEE4 30 Bytes [FF, 70, 3C, 8B, 70, 08, FF, ...]
.text KemUtil.dll!?captureInfo@OSInfo@@AAEXXZ + 33 1070CF03 45 Bytes [5D, E4, 8B, 75, E0, 85, DB, ...]
.text KemUtil.dll!?captureInfo@OSInfo@@AAEXXZ + 61 1070CF31 73 Bytes [EC, 8B, 47, 30, FF, 75, E8, ...]
.text KemUtil.dll!?captureInfo@OSInfo@@AAEXXZ + AB 1070CF7B 21 Bytes CALL 106E80CE \Program Files\Logitech\SetPoint\Macros\MacroCore.dll (Logitech SetPoint User Interface (UNICODE)/Logitech, Inc.)
.text ...
.text KemUtil.dll!??0OSInfo@@QAE@XZ + 4E 1070D0CE 40 Bytes [4D, B8, 89, 48, 68, 8B, 4D, ...]
.text KemUtil.dll!??0OSInfo@@QAE@XZ + 78 1070D0F8 71 Bytes [74, 78, FF, 76, 30, FF, 76, ...]
.text KemUtil.dll!?SetpointInstallDate@@YA?AV?$CStdStr@_W@@XZ + 21 1070D141 24 Bytes CALL 10475750
.text KemUtil.dll!?SetpointInstallDate@@YA?AV?$CStdStr@_W@@XZ + 3A 1070D15A 7 Bytes [47, 30, 6A, 01, FF, B0, D0]
.text KemUtil.dll!?SetpointInstallDate@@YA?AV?$CStdStr@_W@@XZ + 42 1070D162 56 Bytes [00, 00, FF, B0, CC, 00, 00, ...]
.text KemUtil.dll!?SetpointInstallDate@@YA?AV?$CStdStr@_W@@XZ + 7C 1070D19C 92 Bytes [85, C0, 74, 18, 8B, 4F, 30, ...]
.text KemUtil.dll!?SetpointInstallDate@@YA?AV?$CStdStr@_W@@XZ + D9 1070D1F9 40 Bytes CALL 10709990 \WINDOWS\system32\KemUtil.dll (Logitech Utility (UNICODE)/Logitech, Inc.)
.text ...
.text KemUtil.dll!?FindApplicationPath@@YA_NV?$CStdStr@_W@@AAV1@ABV1@@Z + BE 1070D46E 17 Bytes [5E, C3, 51, 51, 53, 55, 56, ...]
.text KemUtil.dll!?FindApplicationPath@@YA_NV?$CStdStr@_W@@AAV1@ABV1@@Z + D0 1070D480 4 Bytes CALL 10160610
.text KemUtil.dll!?FindApplicationPath@@YA_NV?$CStdStr@_W@@AAV1@ABV1@@Z + D5 1070D485 44 Bytes [59, 89, 44, 24, 14, 3B, 5C, ...]
.text KemUtil.dll!?FindApplicationPath@@YA_NV?$CStdStr@_W@@AAV1@ABV1@@Z + 102 1070D4B2 184 Bytes [83, C4, 14, 66, 3B, C5, 75, ...]
.text KemUtil.dll!?FindApplicationPath@@YA_NV?$CStdStr@_W@@AAV1@ABV1@@Z + 1BB 1070D56B 27 Bytes [66, 09, 45, FC, 83, C4, 10, ...]
.text ...
.text KemUtil.dll!?FindMostRecentProgIdPath@@YA_NABV?$CStdStr@_W@@AAV1@@Z + 95 1070D715 3 Bytes [57, 56, E8]
.text KemUtil.dll!?FindMostRecentProgIdPath@@YA_NABV?$CStdStr@_W@@AAV1@@Z + 99 1070D719 34 Bytes [45, A8, FF, 89, 44, 24, 28, ...]
.text KemUtil.dll!?FindMostRecentProgIdPath@@YA_NABV?$CStdStr@_W@@AAV1@@Z + BC 1070D73C 27 Bytes [68, AC, 98, 97, 03, 89, 44, ...]
.text KemUtil.dll!?FindMostRecentProgIdPath@@YA_NABV?$CStdStr@_W@@AAV1@@Z + D8 1070D758 218 Bytes [89, 6C, 24, 14, 0F, 8E, 85, ...]
.text KemUtil.dll!?FindMostRecentProgIdPath@@YA_NABV?$CStdStr@_W@@AAV1@@Z + 1B3 1070D833 9 Bytes [0C, 49, C3, 03, C7, 44, 24, ...]
.text ...
.text KemUtil.dll!??4CRegistry@@QAEAAV0@ABV0@@Z + B 1070D97B 133 Bytes [C7, 5F, 5E, C3, 56, 57, 33, ...]
.text KemUtil.dll!?GetSWVersionDevicePrefix@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + 71 1070DA01 50 Bytes [EC, 51, 56, 8D, 45, 08, 57, ...]
.text KemUtil.dll!?GetSWVersionDevicePrefix@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + A5 1070DA35 58 Bytes [FF, 75, 0C, FF, 75, 08, E8, ...]
.text KemUtil.dll!??0CVerInfo@@QAE@ABV0@@Z + 20 1070DA70 118 Bytes CALL 1012B03F
.text KemUtil.dll!??4CVerInfo@@QAEAAV0@ABV0@@Z + 7 1070DAE7 81 Bytes [5C, 24, 0C, 56, 57, 8B, 7C, ...]
.text KemUtil.dll!??4CVerInfo@@QAEAAV0@ABV0@@Z + 59 1070DB39 6 Bytes [83, 7D, 08, 04, 75, 44] {CMP DWORD [EBP+0x8], 0x4; JNZ 0x4a}
.text KemUtil.dll!??4CVerInfo@@QAEAAV0@ABV0@@Z + 60 1070DB40 105 Bytes [45, FC, 50, 68, DF, D9, 5F, ...]
.text KemUtil.dll!??4CVerInfo@@QAEAAV0@ABV0@@Z + CA 1070DBAA 4 Bytes CALL 10194380
.text KemUtil.dll!??4CVerInfo@@QAEAAV0@ABV0@@Z + CF 1070DBAF 13 Bytes [8B, FA, 8B, F0, 57, 56, E8, ...]
.text ...
.text KemUtil.dll!?extractExistingParameter@CSWandDeviceInfo@@ABE?AV?$CStdStr@_W@@ABV2@0@Z + 42 1070DC52 72 Bytes CALL 1014F1D6
.text KemUtil.dll!?extractExistingParameter@CSWandDeviceInfo@@ABE?AV?$CStdStr@_W@@ABV2@0@Z + 8B 1070DC9B 28 Bytes [50, A1, BC, C8, CA, 03, FF, ...]
.text KemUtil.dll!?extractExistingParameter@CSWandDeviceInfo@@ABE?AV?$CStdStr@_W@@ABV2@0@Z + A9 1070DCB9 4 Bytes CALL 101A696E
.text KemUtil.dll!?extractExistingParameter@CSWandDeviceInfo@@ABE?AV?$CStdStr@_W@@ABV2@0@Z + AE 1070DCBE 107 Bytes CALL 101A86F0
.text KemUtil.dll!?extractExistingParameter@CSWandDeviceInfo@@ABE?AV?$CStdStr@_W@@ABV2@0@Z + 11A 1070DD2A 59 Bytes [8B, C6, 5E, C2, 08, 00, 55, ...]
.text ...
.text KemUtil.dll!?GetLocale@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + 20 1070DD90 25 Bytes [8D, 45, 0C, 56, 50, 89, 55, ...]
.text KemUtil.dll!?GetLocale@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + 3A 1070DDAA 88 Bytes [75, F8, FF, 75, F4, E8, 7C, ...]
.text KemUtil.dll!?GetDeviceVersion@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + 3 1070DE03 275 Bytes CALL 1018CA30
.text KemUtil.dll!?GetSWVersion@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + F7 1070DF17 37 Bytes [11, F5, FF, FF, 83, C4, 0C, ...]
.text KemUtil.dll!?GetSWVersion@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + 11D 1070DF3D 64 Bytes CALL 10125D0C
.text KemUtil.dll!?GetPort@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + F 1070DF7F 2 Bytes CALL 1070D584 \WINDOWS\system32\KemUtil.dll (Logitech Utility (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?GetPort@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + 16 1070DF86 11 Bytes CALL 9A512D16
.text KemUtil.dll!?GetLocalEnterByUser@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + 2 1070DF92 50 Bytes CALL 1022B417
.text KemUtil.dll!?GetLocalEnterByUser@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + 35 1070DFC5 11 Bytes CALL 1037B81B
.text KemUtil.dll!?GetLocalEnterByUser@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + 41 1070DFD1 91 Bytes [08, 10, 00, 00, 8D, 85, F8, ...]
.text KemUtil.dll!?GetLocalEnterByUser@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + 9D 1070E02D 52 Bytes [1F, 50, A8, FF, 8B, DA, 8B, ...]
.text KemUtil.dll!?GetInstallTime@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + 2 1070E062 144 Bytes [FF, 83, C4, 0C, 66, 09, 46, ...]
.text KemUtil.dll!?GetInstallTime@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + 93 1070E0F3 8 Bytes [03, 09, 7D, FC, 56, FF, 75, ...] {ADD ECX, [ECX]; JGE 0x0; PUSH ESI; PUSH DWORD [EBP+0x8]}
.text KemUtil.dll!?GetInstallTime@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + 9C 1070E0FC 3 Bytes CALL 1014F1BB
.text KemUtil.dll!?GetInstallTime@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + A0 1070E100 39 Bytes CALL 10414C3D
.text KemUtil.dll!?GetInstallTime@CSWandDeviceInfo@@EBE_NPAV?$CStdStr@_W@@@Z + C8 1070E128 146 Bytes [66, 85, C0, 59, 74, 03, 09, ...]
.text KemUtil.dll!?search@CSWandDeviceInfo@@QBE?AV?$CStdStr@_W@@ABV2@@Z + 6D 1070E1BD 65 Bytes [A1, BC, C8, CA, 03, 09, 7D, ...]
.text KemUtil.dll!?search@CSWandDeviceInfo@@QBE?AV?$CStdStr@_W@@ABV2@@Z + AF 1070E1FF 71 Bytes [50, 10, 59, 59, 8B, 45, FC, ...]
.text KemUtil.dll!?search@CSWandDeviceInfo@@QBE?AV?$CStdStr@_W@@ABV2@@Z + F7 1070E247 162 Bytes CALL 10120B08
.text KemUtil.dll!?search@CSWandDeviceInfo@@QBE?AV?$CStdStr@_W@@ABV2@@Z + 19A 1070E2EA 138 Bytes [66, 85, C0, 59, 74, 04, 83, ...]
.text KemUtil.dll!?search@CSWandDeviceInfo@@QBE?AV?$CStdStr@_W@@ABV2@@Z + 225 1070E375 51 Bytes [89, 08, A1, BC, C8, CA, 03, ...]
.text ...
.text KemUtil.dll!?SetFix@CVerNum@@QAEXG@Z + 2 1070E722 12 Bytes [F0, A7, FF, 83, F8, 07, 59, ...]
.text KemUtil.dll!?SetFix@CVerNum@@QAEXG@Z + 10 1070E730 347 Bytes CALL 10191B2C
.text KemUtil.dll!??1CVerInfo@@QAE@XZ + 6C 1070E88C 39 Bytes CALL 1019A85E
.text KemUtil.dll!?GetFileVersionNum@CVerInfo@@QAEHPAVCVerNum@@@Z + 4 1070E8B4 6 Bytes CALL 1015B1C3
.text KemUtil.dll!?GetFileVersionNum@CVerInfo@@QAEHPAVCVerNum@@@Z + B 1070E8BB 6 Bytes [74, 15, 57, FF, 75, E8] {JZ 0x17; PUSH EDI; PUSH DWORD [EBP-0x18]}
.text KemUtil.dll!?GetFileVersionNum@CVerInfo@@QAEHPAVCVerNum@@@Z + 12 1070E8C2 206 Bytes [45, E0, 50, A1, FC, 78, CA, ...]
.text KemUtil.dll!?GetProductVersionNum@CVerInfo@@QAEHPAVCVerNum@@@Z + 71 1070E991 24 Bytes [59, 59, 56, 50, 8D, 4D, 94, ...]
.text KemUtil.dll!?GetProductVersionNum@CVerInfo@@QAEHPAVCVerNum@@@Z + 8A 1070E9AA 201 Bytes [FF, 75, D8, 56, FF, 75, DC, ...]
.text KemUtil.dll!??0CVerNum@@QAE@GGGG@Z + 24 1070EA74 13 Bytes [FF, 75, C4, FF, 75, C0, FF, ...]
.text KemUtil.dll!?Set@CVerNum@@QAEXPB_W@Z + 2 1070EA82 113 Bytes [83, C4, 10, 8B, F0, 8B, FA, ...]
.text KemUtil.dll!?Set@CVerNum@@QAEXPB_W@Z + 74 1070EAF4 79 Bytes CALL 10120AAA
.text KemUtil.dll!?Set@CVerNum@@QAEXPB_W@Z + C4 1070EB44 52 Bytes CALL 10120AA9
.text KemUtil.dll!?Set@CVerNum@@QAEXPB_W@Z + F9 1070EB79 68 Bytes CALL 1022B414
.text KemUtil.dll!??0CVerInfo@@QAE@XZ + 2E 1070EBBE 175 Bytes [08, 89, 4D, E0, 8D, 4D, E0, ...]
.text KemUtil.dll!??0CVerNum@@QAE@PB_W@Z + E 1070EC6E 70 Bytes [7D, 0C, 47, 3B, 7D, 10, 7F, ...]
.text KemUtil.dll!?GetFieldName@CVerInfo@@SAHW4VERFIELD@@AAV?$CStdStr@_W@@@Z + 35 1070ECB5 67 Bytes [5B, 5F, C9, C3, 55, 8B, EC, ...]
.text KemUtil.dll!?GetFieldName@CVerInfo@@SAHW4VERFIELD@@AAV?$CStdStr@_W@@@Z + 79 1070ECF9 40 Bytes CALL 1070EC4E \WINDOWS\system32\KemUtil.dll (Logitech Utility (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?GetFieldName@CVerInfo@@SAHW4VERFIELD@@AAV?$CStdStr@_W@@@Z + A2 1070ED22 108 Bytes [FF, FF, 4D, 0C, 83, 45, 08, ...]
.text KemUtil.dll!?GetFieldName@CVerInfo@@SAHW4VERFIELD@@AAV?$CStdStr@_W@@@Z + 10F 1070ED8F 7 Bytes CALL 1070ED5A \WINDOWS\system32\KemUtil.dll (Logitech Utility (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?GetFieldName@CVerInfo@@SAHW4VERFIELD@@AAV?$CStdStr@_W@@@Z + 117 1070ED97 26 Bytes [45, 0C, C1, E0, 04, 83, C4, ...]
.text KemUtil.dll!?Init@CVerInfo@@QAEHPB_W@Z + 2 1070EDB2 32 Bytes [8B, F1, 8B, 45, 14, DD, 00, ...]
.text KemUtil.dll!?Init@CVerInfo@@QAEHPB_W@Z + 24 1070EDD4 37 Bytes CALL 1022AF72
.text KemUtil.dll!?Init@CVerInfo@@QAEHPB_W@Z + 4B 1070EDFB 134 Bytes CALL 1070EDB9 \WINDOWS\system32\KemUtil.dll (Logitech Utility (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?Init@CVerInfo@@QAEHPB_W@Z + D2 1070EE82 77 Bytes [46, 04, 85, C0, 74, 1A, 8B, ...]
.text KemUtil.dll!?Init@CVerInfo@@QAEHPB_W@Z + 120 1070EED0 3 Bytes CALL 10277B53
.text ...
.text KemUtil.dll!??0CVerInfo@@QAE@PB_W@Z + 60 1070EFA0 9 Bytes CALL 101FB781
.text KemUtil.dll!??0CVerInfo@@QAE@PB_W@Z + 6A 1070EFAA 47 Bytes [75, 14, 8B, CE, 6A, 01, FF, ...]
.text KemUtil.dll!??0CVerInfo@@QAE@PB_W@Z + 9A 1070EFDA 1 Byte [10]
.text KemUtil.dll!??0CVerInfo@@QAE@PB_W@Z + 9A 1070EFDA 67 Bytes [10, 00, 55, 8B, EC, 51, 51, ...]
.text KemUtil.dll!??0CVerInfo@@QAE@PB_W@Z + DE 1070F01E 40 Bytes [75, FC, 8B, CE, FF, 75, F8, ...]
.text ...
.text KemUtil.dll!?GetStringValue@CVerInfo@@IAEHPB_WAAV?$CStdStr@_W@@@Z + A8 1070F2E8 13 Bytes [33, F6, 85, DB, 0F, 8E, A5, ...]
.text KemUtil.dll!?GetStringValue@CVerInfo@@IAEHPB_WAAV?$CStdStr@_W@@@Z + B6 1070F2F6 135 Bytes [74, 77, 8B, 45, BC, 2B, 45, ...]
.text KemUtil.dll!?GetFileVersionNum@CVerInfo@@IAEHAAV?$CStdStr@_W@@@Z + 3E 1070F37E 19 Bytes [53, FF, 30, 8D, 45, C4, 50, ...] {PUSH EBX; PUSH DWORD [EAX]; LEA EAX, [EBP-0x3c]; PUSH EAX; CALL 0xfffffffffffff8e8; ADD ESP, 0x10; MOV EDI, EBX; CMP EDI, EBX}
.text KemUtil.dll!?GetFileVersionNum@CVerInfo@@IAEHAAV?$CStdStr@_W@@@Z + 52 1070F392 59 Bytes [8C, 5B, FF, FF, FF, 8A, 5D, ...]
.text KemUtil.dll!?GetProductVersionNum@CVerInfo@@IAEHAAV?$CStdStr@_W@@@Z + E 1070F3CE 37 Bytes [FF, F6, 44, 24, 08, 01, 74, ...]
.text KemUtil.dll!?GetProductVersionNum@CVerInfo@@IAEHAAV?$CStdStr@_W@@@Z + 34 1070F3F4 3 Bytes [8B, F1, 89]
.text KemUtil.dll!?GetProductVersionNum@CVerInfo@@IAEHAAV?$CStdStr@_W@@@Z + 38 1070F3F8 42 Bytes [F0, C7, 06, B8, F8, A3, 03, ...]
.text KemUtil.dll!?GetProductVersionNum@CVerInfo@@IAEHAAV?$CStdStr@_W@@@Z + 64 1070F424 82 Bytes [FF, 8D, 8E, 94, 00, 00, 00, ...]
.text KemUtil.dll!?GetField@CVerInfo@@QAEHW4VERFIELD@@AAV?$CStdStr@_W@@@Z + 37 1070F477 25 Bytes CALL 1070F39C \WINDOWS\system32\KemUtil.dll (Logitech Utility (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?GetField@CVerInfo@@QAEHW4VERFIELD@@AAV?$CStdStr@_W@@@Z + 52 1070F492 15 Bytes [FF, F6, 44, 24, 08, 01, 74, ...] {PUSH ESI; INC ESP; AND AL, 0x8; ADD [EDI+EAX+0x56], ESI; CALL 0xffffffffffa142ae; POP ECX}
.text KemUtil.dll!?ShutDown@cVistaHelper@@MAEXXZ + 2 1070F4A2 3 Bytes [C6, 5E, C2]
.text KemUtil.dll!?ShutDown@cVistaHelper@@MAEXXZ + 6 1070F4A6 17 Bytes [00, 53, 56, 57, 8B, 7C, 24, ...]
.text KemUtil.dll!?ShutDown@cVistaHelper@@MAEXXZ + 18 1070F4B8 55 Bytes CALL 10277A5E
.text KemUtil.dll!?IsVistaHomeBasic@cVistaHelper@@IAE_NXZ + 30 1070F4F0 251 Bytes [55, 8B, EC, 51, 83, 65, FC, ...]
.text KemUtil.dll!?IsDWMCompositionEnabled@cVistaHelper@@QAE_NXZ + 2C 1070F5EC 170 Bytes [03, 8B, CB, FF, 50, 08, FF, ...]
.text KemUtil.dll!??4cWindowsHelper@@QAEAAV0@ABV0@@Z + 7 1070F697 11 Bytes [46, 18, 8B, 08, 50, FF, 51, ...]
.text KemUtil.dll!??4cWindowsHelper@@QAEAAV0@ABV0@@Z + 13 1070F6A3 143 Bytes JMP 1070F669 \WINDOWS\system32\KemUtil.dll (Logitech Utility (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?EnumChildProc@cWindowsHelper@@KGHPAUHWND__@@J@Z + 23 1070F733 24 Bytes [6A, 01, 50, FF, 51, 58, 85, ...]
.text KemUtil.dll!?EnumChildProc@cWindowsHelper@@KGHPAUHWND__@@J@Z + 3C 1070F74C 152 Bytes [04, 56, 57, 8B, F1, 33, FF, ...]
.text KemUtil.dll!?GetChildWindow@cWindowsHelper@@QAEPAUHWND__@@PAU2@V?$CStdStr@_W@@@Z + 65 1070F7E5 29 Bytes [3D, DB, FF, 5E, C9, C3, 8B, ...]
.text KemUtil.dll!?GetChildWindow@cWindowsHelper@@QAEPAUHWND__@@PAU2@V?$CStdStr@_W@@@Z + 83 1070F803 237 Bytes CALL 106A67F1 \Program Files\Logitech\SetPoint\Macros\MacroCore.dll (Logitech SetPoint User Interface (UNICODE)/Logitech, Inc.)
.text KemUtil.dll!?HandleToString@cWindowsHelper@@SA?AV?$CStdStr@_W@@PAUHWND__@@@Z + 91 1070F8F1 106 Bytes [FF, FF, 66, 85, C0, 74, 2B, ...]
.text KemUtil.dll!?HandleToString@cWindowsHelper@@SA?AV?$CStdStr@_W@@PAUHWND__@@@Z + FC 1070F95C 51 Bytes CALL 10125ABE
.text KemUtil.dll!?HandleToString@cWindowsHelper@@SA?AV?$CStdStr@_W@@PAUHWND__@@@Z + 130 1070F990 38 Bytes [83, 65, FC, 00, 8D, 45, CC, ...]
.text KemUtil.dll!?HandleToString@cWindowsHelper@@SA?AV?$CStdStr@_W@@PAUHWND__@@@Z + 157 1070F9B7 42 Bytes CALL 1022B417
.text KemUtil.dll!?HandleToString@cWindowsHelper@@SA?AV?$CStdStr@_W@@PAUHWND__@@@Z + 182 1070F9E2 30 Bytes [48, 56, 6A, 48, 8D, 45, B8, ...]
.text ...
.text KemWnd.dll!?s_pInstance@CAppCommand@@0V?$auto_ptr@VCAppCommand@@@std@@A + FFFE9AB8 10B01000 26 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?s_pInstance@CAppCommand@@0V?$auto_ptr@VCAppCommand@@@std@@A + FFFE9AD4 10B0101C 3 Bytes [00, 00, 00]
.text KemWnd.dll!?s_pInstance@CAppCommand@@0V?$auto_ptr@VCAppCommand@@@std@@A + FFFE9AD8 10B01020 20 Bytes [1A, C5, 3D, 03, 00, 00, 00, ...]
.text KemWnd.dll!?s_pInstance@CAppCommand@@0V?$auto_ptr@VCAppCommand@@@std@@A + FFFE9AED 10B01035 68 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?s_pInstance@CAppCommand@@0V?$auto_ptr@VCAppCommand@@@std@@A + FFFE9B32 10B0107A 36 Bytes [00, 00, C8, 01, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?GetWidth@cPicture@@QBEHXZ + 1A 10B010EA 3 Bytes [00, 00, 00]
.text KemWnd.dll!?GetWidth@cPicture@@QBEHXZ + 1F 10B010EF 37 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SelectRealizePalette@cPicture@@QAEHPAUHWND__@@@Z + 5 10B01115 65 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?Initialize@cPicture@@SA_NXZ + 39 10B01159 3 Bytes [00, 00, 00]
.text KemWnd.dll!?Initialize@cPicture@@SA_NXZ + 3E 10B0115E 36 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?DeInitialize@cPicture@@SAXXZ + 14 10B01184 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?DeInitialize@cPicture@@SAXXZ + 1E 10B0118E 202 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?calcSize@cPicture@@QAEXXZ + 39 10B01259 1 Byte [50]
.text KemWnd.dll!?calcSize@cPicture@@QAEXXZ + 39 10B01259 107 Bytes [50, 52, 4F, 44, 5F, 4E, 41, ...]
.text KemWnd.dll!?getRenderRect@cPicture@@QBE?AVRectF@Gdiplus@@ABVCRect@@_N1@Z + 35 10B012C5 364 Bytes [41, 5F, 50, 41, 54, 48, 3C, ...]
.text KemWnd.dll!?getRenderRect@cPicture@@QBE?AVRectF@Gdiplus@@ABVCRect@@_N1@Z + 1A2 10B01432 62 Bytes [00, 00, 24, 56, 45, 52, 53, ...]
.text KemWnd.dll!?getRenderRect@cPicture@@QBE?AVRectF@Gdiplus@@ABVCRect@@_N1@Z + 1E1 10B01471 179 Bytes [45, 55, 4C, 41, 5F, 50, 41, ...]
.text KemWnd.dll!?rotateBy270@cPicture@@QAEXXZ + 16 10B01526 177 Bytes [00, 00, 54, 6F, 75, 63, 68, ...]
.text KemWnd.dll!?rotateBy270@cPicture@@QAEXXZ + C8 10B015D8 88 Bytes [43, 70, 74, 3A, 41, 62, 6F, ...]
.text KemWnd.dll!?rotateBy270@cPicture@@QAEXXZ + 122 10B01632 76 Bytes [00, 00, 48, 65, 6C, 70, 50, ...]
.text KemWnd.dll!?rotateBy270@cPicture@@QAEXXZ + 16F 10B0167F 113 Bytes [50, 4B, 4C, 69, 74, 65, 00, ...]
.text KemWnd.dll!?rotateBy270@cPicture@@QAEXXZ + 1E1 10B016F1 19 Bytes [69, 67, 53, 69, 67, 3A, 50, ...]
.text ...
.text KemWnd.dll!?GetHeight@cPicture@@QBEHXZ + 94 10B01804 163 Bytes [53, 68, 6F, 77, 48, 69, 64, ...]
.text KemWnd.dll!?render@cPicture@@QAEXPAUHDC__@@JJ@Z + 28 10B018A8 32 Bytes [65, 41, 6C, 6C, 00, 00, 00, ...]
.text KemWnd.dll!?render@cPicture@@QAEXPAUHDC__@@JJ@Z + 4C 10B018CC 81 Bytes [41, 63, 72, 6F, 46, 6F, 72, ...]
.text KemWnd.dll!?render@cPicture@@QAEXPAUHDC__@@ABUtagRECT@@K_N2@Z + 10 10B01920 95 Bytes [41, 63, 72, 6F, 46, 6F, 72, ...]
.text KemWnd.dll!?render@cPicture@@QAEXPAUHDC__@@ABUtagRECT@@K_N2@Z + 70 10B01980 435 Bytes [44, 49, 47, 53, 49, 47, 3A, ...]
.text KemWnd.dll!??4cPicture@@QAEAAV0@ABV0@@Z + 44 10B01B34 101 Bytes [51, 18, 18, 03, C4, 19, AA, ...]
.text KemWnd.dll!?render@cPicture@@QAEXPAUHDC__@@ABUtagRECT@@_N2@Z + A 10B01B9A 17 Bytes [00, 00, 5F, 53, 68, 6F, 77, ...]
.text KemWnd.dll!?render@cPicture@@QAEXPAUHDC__@@ABUtagRECT@@_N2@Z + 1C 10B01BAC 121 Bytes [18, 27, AA, 03, 97, 29, 3F, ...]
.text KemWnd.dll!?render@cPicture@@QAEXPAUHDC__@@ABUtagRECT@@_N2@Z + 96 10B01C26 26 Bytes [0B, 03, FF, 7E, 0B, 03, 94, ...]
.text KemWnd.dll!?render@cPicture@@QAEXPAUHDC__@@ABUtagRECT@@_N2@Z + B1 10B01C41 37 Bytes [91, 0B, 03, 98, 92, 0B, 03, ...]
.text KemWnd.dll!?render@cPicture@@QAEXPAUHDC__@@ABUtagRECT@@_N2@Z + D7 10B01C67 25 Bytes [00, 0C, 2A, AA, 03, D0, 2A, ...]
.text KemWnd.dll!??0cPicture@@QAE@ABV?$CStdStr@_W@@@Z + 11 10B01C81 263 Bytes [72, 0B, 03, F6, 6F, 0B, 03, ...]
.text KemWnd.dll!??0cPicture@@QAE@ABV?$CStdStr@_W@@_N1@Z + 49 10B01D89 20 Bytes [7E, 0B, 03, 94, 7F, 0B, 03, ...]
.text KemWnd.dll!??0cPicture@@QAE@ABV?$CStdStr@_W@@_N1@Z + 5E 10B01D9E 142 Bytes [3F, 03, 56, 91, 0B, 03, 98, ...]
.text KemWnd.dll!??0cPicture@@QAE@ABV0@@Z + 1E 10B01E2E 188 Bytes JMP 330D2171
.text KemWnd.dll!?GetDefaultFont@CDefFont@@SAPAVCFont@@XZ + 8C 10B01EEC 21 Bytes [53, 68, 6F, 77, 48, 69, 64, ...]
.text KemWnd.dll!?GetDefaultFont@CDefFont@@SAPAVCFont@@XZ + A2 10B01F02 172 Bytes [69, 65, 73, 42, 61, 72, 47, ...]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHINSTANCE__@@GG@Z + 30 10B01FB0 39 Bytes [41, 5F, 5A, 6F, 6F, 6D, 4F, ...]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHINSTANCE__@@GG@Z + 58 10B01FD8 59 Bytes [41, 5F, 48, 65, 6C, 70, 47, ...]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHINSTANCE__@@GG@Z + 94 10B02014 38 Bytes [53, 6D, 5F, 4E, 2E, 70, 6E, ...]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHBITMAP__@@0@Z + C 10B0203C 4 Bytes [41, 5F, 41, 74]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHBITMAP__@@0@Z + 11 10B02041 66 Bytes [61, 63, 68, 6D, 65, 6E, 74, ...]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHBITMAP__@@0@Z + 54 10B02084 63 Bytes [41, 5F, 46, 69, 74, 57, 69, ...]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHBITMAP__@@0@Z + 94 10B020C4 162 Bytes [41, 5F, 4C, 61, 73, 74, 50, ...]
.text KemWnd.dll!?OnDestroy@CDibButton@@QAEXXZ + 77 10B02167 9 Bytes [3A, 00, 00, 00, 00, 41, 5F, ...]
.text KemWnd.dll!?OnDestroy@CDibButton@@QAEXXZ + 81 10B02171 26 Bytes [6F, 5F, 53, 6D, 5F, 4E, 2E, ...]
.text KemWnd.dll!?OnDestroy@CDibButton@@QAEXXZ + 9C 10B0218C 15 Bytes [41, 5F, 53, 61, 76, 65, 5F, ...]
.text KemWnd.dll!?OnDestroy@CDibButton@@QAEXXZ + AC 10B0219C 96 Bytes [41, 5F, 43, 6F, 6D, 62, 69, ...]
.text KemWnd.dll!?OnDestroy@CDibButton@@QAEXXZ + 110 10B02200 3 Bytes [00, 00, 00]
.text ...
.text KemWnd.dll!??1CDibButton@@UAE@XZ + D 10B0229D 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1CDibButton@@UAE@XZ + 20 10B022B0 2 Bytes [9C, 0C]
.text KemWnd.dll!??1CDibButton@@UAE@XZ + 23 10B022B3 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1CDibButton@@UAE@XZ + 3C 10B022CC 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??1CDibButton@@UAE@XZ + 52 10B022E2 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?Init@CDibButton@@AAEHXZ + E 10B0234E 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?Init@CDibButton@@AAEHXZ + 18 10B02358 19 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?Init@CDibButton@@AAEHXZ + 2F 10B0236F 3 Bytes [00, 01, 00]
.text KemWnd.dll!?Init@CDibButton@@AAEHXZ + 34 10B02374 16 Bytes [69, 00, 00, 00, A3, 0C, 00, ...]
.text KemWnd.dll!?Init@CDibButton@@AAEHXZ + 45 10B02385 14 Bytes [00, 00, 00, 73, 67, 52, 03, ...] {ADD [EAX], AL; ADD [EBX+0x67], DH; PUSH EDX; ADD EAX, [EAX]; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?Resize@CDibButton@@QAEXXZ + F 10B023BF 3 Bytes [00, 00, 00]
.text KemWnd.dll!?Resize@CDibButton@@QAEXXZ + 15 10B023C5 35 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?Resize@CDibButton@@QAEXXZ + 3A 10B023EA 6 Bytes [00, 00, B3, 16, 07, 03]
.text KemWnd.dll!?Resize@CDibButton@@QAEXXZ + 41 10B023F1 38 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?Resize@CDibButton@@QAEXXZ + 69 10B02419 23 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHINSTANCE__@@GGV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + D 10B024AD 16 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHINSTANCE__@@GGV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 21 10B024C1 14 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHINSTANCE__@@GGV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 33 10B024D3 51 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHINSTANCE__@@GGV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 68 10B02508 7 Bytes [A6, 0B, 00, 00, 00, 00, 00] {CMPSB ; OR EAX, [EAX]; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHBITMAP__@@0V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z 10B02510 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHBITMAP__@@0V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + D 10B0251D 16 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHBITMAP__@@0V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 21 10B02531 14 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHBITMAP__@@0V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 33 10B02543 44 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHBITMAP__@@0V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 63 10B02573 7 Bytes [00, 00, 00, 00, 00, 00, 00]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPAUHBITMAP__@@0V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 6B 10B0257B 14 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?DrawItem@CDibButton@@UAEXPAUtagDRAWITEMSTRUCT@@@Z + C 10B0258C 23 Bytes [05, 65, 11, 03, 00, 00, 00, ...]
.text KemWnd.dll!?DrawItem@CDibButton@@UAEXPAUtagDRAWITEMSTRUCT@@@Z + 27 10B025A7 25 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?DrawItem@CDibButton@@UAEXPAUtagDRAWITEMSTRUCT@@@Z + 42 10B025C2 20 Bytes [00, 00, 00, 00, 00, 00, 03, ...]
.text KemWnd.dll!?DrawItem@CDibButton@@UAEXPAUtagDRAWITEMSTRUCT@@@Z + 58 10B025D8 29 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?DrawItem@CDibButton@@UAEXPAUtagDRAWITEMSTRUCT@@@Z + 78 10B025F8 35 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?OnLButtonDown@CDibButton@@IAEXIVCPoint@@@Z + 5 10B02765 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnLButtonDown@CDibButton@@IAEXIVCPoint@@@Z + 13 10B02773 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?OnLButtonDown@CDibButton@@IAEXIVCPoint@@@Z + 16 10B02776 24 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnLButtonUp@CDibButton@@IAEXIVCPoint@@@Z + 10 10B02790 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?OnLButtonUp@CDibButton@@IAEXIVCPoint@@@Z + 13 10B02793 19 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnSetFocus@CDibButton@@IAEXPAVCWnd@@@Z + 7 10B027A7 7 Bytes [00, 00, 00, 00, 00, 00, 00]
.text KemWnd.dll!?OnSetFocus@CDibButton@@IAEXPAVCWnd@@@Z + F 10B027AF 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?OnSetFocus@CDibButton@@IAEXPAVCWnd@@@Z + 15 10B027B5 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [ECX], AL; ADD [EAX], AL; ADD [EAX], CL; ADD EAX, [EAX]; ADD [EDI+0x3], CL}
.text KemWnd.dll!?OnKillFocus@CDibButton@@IAEXPAVCWnd@@@Z + 7 10B027C7 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnKillFocus@CDibButton@@IAEXPAVCWnd@@@Z + C 10B027CC 29 Bytes [F1, 7F, 3D, 03, 00, 00, 00, ...]
.text KemWnd.dll!?OnMouseMove@CDibButton@@IAEXIVCPoint@@@Z + B 10B027EB 3 Bytes [00, BE, 02]
.text KemWnd.dll!?OnMouseMove@CDibButton@@IAEXIVCPoint@@@Z + F 10B027EF 64 Bytes [00, 00, 00, 00, 00, 6C, 21, ...]
.text KemWnd.dll!?OnMouseMove@CDibButton@@IAEXIVCPoint@@@Z + 50 10B02830 12 Bytes [4C, 80, 3D, 03, 00, 00, 00, ...]
.text KemWnd.dll!?OnMouseMove@CDibButton@@IAEXIVCPoint@@@Z + 5D 10B0283D 16 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EBX+0x30716], DH}
.text KemWnd.dll!?OnMouseMove@CDibButton@@IAEXIVCPoint@@@Z + 6E 10B0284E 8 Bytes [00, 00, BE, 02, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?OnSize@CDibButton@@QAEXIHH@Z + 14 10B02884 11 Bytes [01, 00, 00, 00, 0C, 03, 00, ...]
.text KemWnd.dll!?OnSize@CDibButton@@QAEXIHH@Z + 21 10B02891 19 Bytes [00, 00, 00, 1B, C6, 3D, 03, ...]
.text KemWnd.dll!?OnSize@CDibButton@@QAEXIHH@Z + 38 10B028A8 3 Bytes [00, 00, 00]
.text KemWnd.dll!?OnSize@CDibButton@@QAEXIHH@Z + 3C 10B028AC 18 Bytes [8B, BB, 3D, 03, 00, 00, 00, ...]
.text KemWnd.dll!?OnSize@CDibButton@@QAEXIHH@Z + 50 10B028C0 5 Bytes [00, 00, 00, 00, 00]
.text ...
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPB_W0@Z + D 10B02A6D 32 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPB_W0@Z + 30 10B02A90 10 Bytes [E5, 7F, 3D, 03, 00, 00, 00, ...]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPB_W0@Z + 3B 10B02A9B 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [ESI+0x2], BH}
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPB_W0@Z + 51 10B02AB1 3 Bytes [00, 00, 00]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPB_W0@Z + 56 10B02AB6 33 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPB_W0V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + C 10B02BAC 20 Bytes [7C, 01, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPB_W0V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 21 10B02BC1 14 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPB_W0V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 33 10B02BD3 44 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPB_W0V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 63 10B02C03 7 Bytes [00, 00, 00, 00, 00, 03, 00]
.text KemWnd.dll!?SetDibs@CDibButton@@QAEHPB_W0V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 6B 10B02C0B 11 Bytes [00, 29, 03, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CDibWnd@@QAE@XZ + 8 10B02C18 83 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1CDibWnd@@UAE@XZ + 2C 10B02C6C 12 Bytes [04, 00, 00, 00, 00, 00, 00, ...] {ADD AL, 0x0; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?SetDib@CDibWnd@@IAEHPAUHBITMAP__@@H@Z + A 10B02C7A 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?SetDib@CDibWnd@@IAEHPAUHBITMAP__@@H@Z + 18 10B02C88 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?SetDib@CDibWnd@@IAEHPAUHBITMAP__@@H@Z + 1B 10B02C8B 23 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetDib@CDibWnd@@IAEHPAUHBITMAP__@@H@Z + 35 10B02CA5 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetDib@CDibWnd@@IAEHPAUHBITMAP__@@H@Z + 49 10B02CB9 19 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?SetDib@CDibWnd@@QAEHPAUHINSTANCE__@@GHHK@Z + 1B 10B02E5B 1 Byte [00]
.text KemWnd.dll!?SetDib@CDibWnd@@QAEHPAUHINSTANCE__@@GHHK@Z + 1E 10B02E5E 4 Bytes [00, 00, 01, 00] {ADD [EAX], AL; ADD [EAX], EAX}
.text KemWnd.dll!?SetDib@CDibWnd@@QAEHPAUHINSTANCE__@@GHHK@Z + 24 10B02E64 2 Bytes [02, 03] {ADD AL, [EBX]}
.text KemWnd.dll!?SetDib@CDibWnd@@QAEHPAUHINSTANCE__@@GHHK@Z + 27 10B02E67 31 Bytes [00, 75, 01, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetDib@CDibWnd@@QAEHPAUHINSTANCE__@@GHHK@Z + 47 10B02E87 31 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetDib@CDibWnd@@QAEHPB_WHHK@Z + 17 10B02EA7 1 Byte [00]
.text KemWnd.dll!?SetDib@CDibWnd@@QAEHPB_WHHK@Z + 1A 10B02EAA 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?SetDib@CDibWnd@@QAEHPB_WHHK@Z + 20 10B02EB0 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?SetDib@CDibWnd@@QAEHPB_WHHK@Z + 23 10B02EB3 1 Byte [00]
.text KemWnd.dll!?SetDib@CDibWnd@@QAEHPB_WHHK@Z + 23 10B02EB3 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?DoRealizePalette@CDibWnd@@IAEIHH@Z + D 10B02EED 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?DoRealizePalette@CDibWnd@@IAEIHH@Z + 27 10B02F07 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?DoRealizePalette@CDibWnd@@IAEIHH@Z + 34 10B02F14 14 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?DoRealizePalette@CDibWnd@@IAEIHH@Z + 44 10B02F24 24 Bytes [00, 00, 00, 00, 01, 00, 00, ...]
.text KemWnd.dll!?DoRealizePalette@CDibWnd@@IAEIHH@Z + 5E 10B02F3E 23 Bytes [00, 00, D0, AB, 3D, 03, 00, ...]
.text ...
.text KemWnd.dll!?OnPaletteChanged@CDibWnd@@QAEIPAUHWND__@@@Z + 13 10B02FE3 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnPaletteChanged@CDibWnd@@QAEIPAUHWND__@@@Z + 1F 10B02FEF 29 Bytes [00, 01, 00, 00, 00, 06, 03, ...]
.text KemWnd.dll!?OnPaint@CDibWnd@@IAEXXZ + D 10B0300D 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnPaint@CDibWnd@@IAEXXZ + 14 10B03014 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnPaint@CDibWnd@@IAEXXZ + 20 10B03020 18 Bytes [BE, 02, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnPaint@CDibWnd@@IAEXXZ + 35 10B03035 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?OnPaint@CDibWnd@@IAEXXZ + 3B 10B0303B 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?GetMessageMap@CDibWnd@@MBEPBUAFX_MSGMAP@@XZ + 26 10B03236 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetMessageMap@CDibWnd@@MBEPBUAFX_MSGMAP@@XZ + 2F 10B0323F 29 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1ForegroundApplicationInfo@@UAE@XZ + D 10B0325D 17 Bytes [00, 00, 00, 12, BD, 3D, 03, ...] {ADD [EAX], AL; ADD [EDX], DL; MOV EBP, 0x33d; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??1ForegroundApplicationInfo@@UAE@XZ + 20 10B03270 24 Bytes [DF, 26, 0B, 03, 00, 00, 00, ...]
.text KemWnd.dll!??1ForegroundApplicationInfo@@UAE@XZ + 3B 10B0328B 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??1ForegroundApplicationInfo@@UAE@XZ + 43 10B03293 53 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1ForegroundApplicationInfo@@UAE@XZ + 7C 10B032CC 45 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?version@ForegroundApplicationInfo@@UBEPAVCVerNum@@XZ + 1D 10B032FD 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?version@ForegroundApplicationInfo@@UBEPAVCVerNum@@XZ + 30 10B03310 1 Byte [01]
.text KemWnd.dll!?version@ForegroundApplicationInfo@@UBEPAVCVerNum@@XZ + 33 10B03313 25 Bytes [00, 36, 03, 00, 00, 97, 04, ...]
.text KemWnd.dll!?version@ForegroundApplicationInfo@@UBEPAVCVerNum@@XZ + 4E 10B0332E 7 Bytes [00, 00, 00, 00, 00, 00, 00]
.text KemWnd.dll!?version@ForegroundApplicationInfo@@UBEPAVCVerNum@@XZ + 58 10B03338 38 Bytes [DF, 26, 0B, 03, 00, 00, 00, ...]


#9 studiodweller

studiodweller
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 31 May 2010 - 08:32 PM

.text ...
.text KemWnd.dll!??0ForegroundApplicationInfo@@QAE@XZ + 2 10B03442 7 Bytes [00, 00, 00, 00, 00, 00, 00]
.text KemWnd.dll!??0ForegroundApplicationInfo@@QAE@XZ + D 10B0344D 21 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0ForegroundApplicationInfo@@QAE@XZ + 26 10B03466 23 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0ForegroundApplicationInfo@@QAE@XZ + 3F 10B0347F 96 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0ForegroundApplicationInfo@@QAE@XZ + A3 10B034E3 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0ForegroundApplicationInfo@@AAE@ABV0@@Z + D 10B034FD 19 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX+EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??0ForegroundApplicationInfo@@AAE@ABV0@@Z + 24 10B03514 79 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0ForegroundApplicationInfo@@AAE@ABV0@@Z + 77 10B03567 41 Bytes [00, 01, 00, 00, 00, 3A, 03, ...]
.text KemWnd.dll!?fullPathName@ForegroundApplicationInfo@@UBE?AV?$CStdStr@_W@@XZ + 14 10B03594 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?exeName@ForegroundApplicationInfo@@UBE?AV?$CStdStr@_W@@XZ 10B035A0 16 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?exeName@ForegroundApplicationInfo@@UBE?AV?$CStdStr@_W@@XZ + 14 10B035B4 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?caption@ForegroundApplicationInfo@@UBE?AV?$CStdStr@_W@@XZ 10B035C0 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD EAX, [EAX]; ADD [EAX], AL; CMP EAX, [EBX]}
.text KemWnd.dll!?caption@ForegroundApplicationInfo@@UBE?AV?$CStdStr@_W@@XZ + 14 10B035D4 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?captureCurrentInformation@ForegroundApplicationInfo@@UAE_NXZ 10B035E0 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?captureCurrentInformation@ForegroundApplicationInfo@@UAE_NXZ + D 10B035ED 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?captureCurrentInformation@ForegroundApplicationInfo@@UAE_NXZ + 14 10B035F4 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?captureCurrentInformation@ForegroundApplicationInfo@@UAE_NXZ + 22 10B03602 15 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?captureCurrentInformation@ForegroundApplicationInfo@@UAE_NXZ + 33 10B03613 2 Bytes [00, 00] {ADD [EAX], AL}
.text ...
.text KemWnd.dll!??0CHiddenWnd@@QAE@XZ + 8 10B03758 80 Bytes [00, 00, 00, 00, 01, 00, 00, ...]
.text KemWnd.dll!?Create@CHiddenWnd@@UAEHPB_W0@Z + 2A 10B037AA 28 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?Create@CHiddenWnd@@UAEHPB_W0@Z + 47 10B037C7 15 Bytes [00, 89, 01, 00, 00, 00, 00, ...]
.text KemWnd.dll!?Create@CHiddenWnd@@UAEHPB_W0@Z + 58 10B037D8 36 Bytes [C5, 87, 3D, 03, 00, 00, 00, ...]
.text KemWnd.dll!?Create@CHiddenWnd@@UAEHPB_W0@Z + 7D 10B037FD 13 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?Create@CHiddenWnd@@UAEHPB_W0@Z + 8B 10B0380B 15 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!??1CHiddenWnd@@UAE@XZ + D 10B0384D 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1CHiddenWnd@@UAE@XZ + 22 10B03862 15 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1CHiddenWnd@@UAE@XZ + 32 10B03872 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??1CHiddenWnd@@UAE@XZ + 3A 10B0387A 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!??1CHiddenWnd@@UAE@XZ + 41 10B03881 13 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [ECX], AL; ADD [EAX], AL; ADD [EDI+0x3], AL}
.text ...
.text KemWnd.dll!?Shutdown@CHiddenWnd@@UAEXXZ + 12 10B038C2 3 Bytes [00, 00, 00]
.text KemWnd.dll!?Shutdown@CHiddenWnd@@UAEXXZ + 16 10B038C6 1 Byte [00]
.text KemWnd.dll!?Shutdown@CHiddenWnd@@UAEXXZ + 16 10B038C6 56 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?Shutdown@CHiddenWnd@@UAEXXZ + 4F 10B038FF 1 Byte [03]
.text KemWnd.dll!?Shutdown@CHiddenWnd@@UAEXXZ + 52 10B03902 9 Bytes [00, 00, F5, 87, 3D, 03, 00, ...] {ADD [EAX], AL; CMC ; XCHG [0x3], EDI}
.text ...
.text KemWnd.dll!?SubclassDlgItem@CHyperLink@@QAEHIPAVCWnd@@@Z + 4 10B03944 15 Bytes [2C, 21, 9F, 03, 00, 00, 00, ...] {SUB AL, 0x21; LAHF ; ADD EAX, [EAX]; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [ECX], AL; ADD [EAX], AL}
.text KemWnd.dll!?_GetBaseClass@CHyperLink@@KGPAUCRuntimeClass@@XZ + 4 10B03954 35 Bytes [49, 03, 00, 00, 8C, 01, 00, ...]
.text KemWnd.dll!?PreTranslateMessage@CHyperLink@@UAEHPAUtagMSG@@@Z + 8 10B03978 1 Byte [00]
.text KemWnd.dll!?PreTranslateMessage@CHyperLink@@UAEHPAUtagMSG@@@Z + B 10B0397B 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [ECX], AL; ADD [EAX], AL}
.text KemWnd.dll!?PreTranslateMessage@CHyperLink@@UAEHPAUtagMSG@@@Z + 18 10B03988 9 Bytes [18, 21, 9F, 03, 00, 00, 00, ...] {SBB [ECX], AH; LAHF ; ADD EAX, [EAX]; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?PreTranslateMessage@CHyperLink@@UAEHPAUtagMSG@@@Z + 23 10B03993 16 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?CtlColor@CHyperLink@@IAEPAUHBRUSH__@@PAVCDC@@I@Z + 4 10B039A4 26 Bytes [00, 00, 00, 00, 10, 21, 9F, ...]
.text KemWnd.dll!?CtlColor@CHyperLink@@IAEPAUHBRUSH__@@PAVCDC@@I@Z + 1F 10B039BF 49 Bytes [00, 00, 00, 00, 00, 19, 88, ...]
.text KemWnd.dll!?CtlColor@CHyperLink@@IAEPAUHBRUSH__@@PAVCDC@@I@Z + 52 10B039F2 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?CtlColor@CHyperLink@@IAEPAUHBRUSH__@@PAVCDC@@I@Z + 5E 10B039FE 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnNcHitTest@CHyperLink@@IAEJVCPoint@@@Z + 5 10B03A05 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?OnNcHitTest@CHyperLink@@IAEJVCPoint@@@Z + 8 10B03A08 26 Bytes [00, 00, 00, 00, 08, 21, 9F, ...]
.text KemWnd.dll!?OnSetCursor@CHyperLink@@IAEHPAVCWnd@@II@Z + 15 10B03A25 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?OnSetCursor@CHyperLink@@IAEHPAVCWnd@@II@Z + 18 10B03A28 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnSetCursor@CHyperLink@@IAEHPAVCWnd@@II@Z + 1D 10B03A2D 220 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetDefaultCursor@CHyperLink@@KAXXZ + D 10B03B0D 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetDefaultCursor@CHyperLink@@KAXXZ + 22 10B03B22 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?SetDefaultCursor@CHyperLink@@KAXXZ + 29 10B03B29 3 Bytes [00, 00, 00]
.text KemWnd.dll!?SetDefaultCursor@CHyperLink@@KAXXZ + 2F 10B03B2F 13 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetDefaultCursor@CHyperLink@@KAXXZ + 3E 10B03B3E 3 Bytes [00, 00, 00]
.text ...
.text KemWnd.dll!??0CHyperLink@@QAE@XZ + 8 10B03BE8 31 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CHyperLink@@QAE@XZ + 2A 10B03C0A 15 Bytes [00, 00, 01, 00, 00, 00, 0E, ...] {ADD [EAX], AL; ADD [EAX], EAX; ADD [EAX], AL; PUSH CS; ADD AL, 0x0; ADD DL, DH; ADD [EAX], EAX; ADD [EAX], AL}
.text KemWnd.dll!??1CHyperLink@@UAE@XZ + C 10B03C1C 19 Bytes [B2, 99, 3D, 03, 43, 03, 00, ...] {MOV DL, 0x99; CMP EAX, 0x34303; ADD [EBP+0x43033d99], BL; ADD EAX, [EAX]; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??1CHyperLink@@UAE@XZ + 23 10B03C33 22 Bytes [00, C7, 99, 3D, 03, 00, 00, ...]
.text KemWnd.dll!??1CHyperLink@@UAE@XZ + 3C 10B03C4C 3 Bytes [00, 00, 00]
.text KemWnd.dll!??1CHyperLink@@UAE@XZ + 41 10B03C51 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??1CHyperLink@@UAE@XZ + 48 10B03C58 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?OnMouseMove@CHyperLink@@IAEXIVCPoint@@@Z + A 10B03C9A 57 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnMouseMove@CHyperLink@@IAEXIVCPoint@@@Z + 44 10B03CD4 3 Bytes [01, 00, 00]
.text KemWnd.dll!?OnMouseMove@CHyperLink@@IAEXIVCPoint@@@Z + 48 10B03CD8 9 Bytes [06, 04, 00, 00, EB, 01, 00, ...] {PUSH ES; ADD AL, 0x0; ADD BL, CH; ADD [EAX], EAX; ADD [EAX], AL}
.text KemWnd.dll!?OnMouseMove@CHyperLink@@IAEXIVCPoint@@@Z + 52 10B03CE2 6 Bytes [00, 00, D0, 99, 3D, 03]
.text KemWnd.dll!?OnMouseMove@CHyperLink@@IAEXIVCPoint@@@Z + 59 10B03CE9 7 Bytes [00, 00, 00, 9D, 6C, 13, 03]
.text ...
.text KemWnd.dll!?OnLButtonDown@CHyperLink@@IAEXIVCPoint@@@Z + E 10B03D1E 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnLButtonDown@CHyperLink@@IAEXIVCPoint@@@Z + 1C 10B03D2C 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnLButtonDown@CHyperLink@@IAEXIVCPoint@@@Z + 28 10B03D38 30 Bytes [01, 00, 00, 00, 07, 04, 00, ...]
.text KemWnd.dll!?OnSetFocus@CHyperLink@@IAEXPAVCWnd@@@Z + 7 10B03D57 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?OnSetFocus@CHyperLink@@IAEXPAVCWnd@@@Z + F 10B03D5F 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?OnSetFocus@CHyperLink@@IAEXPAVCWnd@@@Z + 12 10B03D62 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?OnSetFocus@CHyperLink@@IAEXPAVCWnd@@@Z + 18 10B03D68 25 Bytes [C0, 02, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnKillFocus@CHyperLink@@IAEXPAVCWnd@@@Z + 12 10B03D82 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?OnKillFocus@CHyperLink@@IAEXPAVCWnd@@@Z + 18 10B03D88 33 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnKeyDown@CHyperLink@@IAEXIII@Z + 1A 10B03DAA 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnKeyDown@CHyperLink@@IAEXIII@Z + 22 10B03DB2 18 Bytes [00, 00, 9D, 6C, 13, 03, 00, ...] {ADD [EAX], AL; POPF ; INSB ; ADC EAX, [EBX]; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnKeyDown@CHyperLink@@IAEXIII@Z + 36 10B03DC6 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnKeyDown@CHyperLink@@IAEXIII@Z + 42 10B03DD2 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnKeyDown@CHyperLink@@IAEXIII@Z + 4F 10B03DDF 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?AdjustWindow@CHyperLink@@IAEXXZ + D 10B03E1D 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?AdjustWindow@CHyperLink@@IAEXXZ + 27 10B03E37 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?AdjustWindow@CHyperLink@@IAEXXZ + 33 10B03E43 29 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?AdjustWindow@CHyperLink@@IAEXXZ + 52 10B03E62 14 Bytes [00, 00, 01, 00, 00, 00, 0A, ...]
.text KemWnd.dll!?AdjustWindow@CHyperLink@@IAEXXZ + 62 10B03E72 68 Bytes [00, 00, C6, B5, 3D, 03, 00, ...]
.text ...
.text KemWnd.dll!?FollowLink@CHyperLink@@MAEXXZ + 7 10B04007 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?FollowLink@CHyperLink@@MAEXXZ + F 10B0400F 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?FollowLink@CHyperLink@@MAEXXZ + 12 10B04012 52 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnEraseBkgnd@CHyperLink@@QAEHPAVCDC@@@Z + 28 10B04048 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?OnEraseBkgnd@CHyperLink@@QAEHPAVCDC@@@Z + 2D 10B0404D 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?OnEraseBkgnd@CHyperLink@@QAEHPAVCDC@@@Z + 33 10B04053 56 Bytes [00, 00, 00, 00, 00, 01, 00, ...]
.text KemWnd.dll!?OnEraseBkgnd@CHyperLink@@QAEHPAVCDC@@@Z + 6D 10B0408D 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnEraseBkgnd@CHyperLink@@QAEHPAVCDC@@@Z + 78 10B04098 14 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?PreSubclassWindow@CHyperLink@@MAEXXZ + 17 10B040D7 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?PreSubclassWindow@CHyperLink@@MAEXXZ + 22 10B040E2 1 Byte [00]
.text KemWnd.dll!?PreSubclassWindow@CHyperLink@@MAEXXZ + 22 10B040E2 11 Bytes [00, 00, 05, 65, 11, 03, 00, ...] {ADD [EAX], AL; ADD EAX, 0x31165; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?PreSubclassWindow@CHyperLink@@MAEXXZ + 2F 10B040EF 51 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?PreSubclassWindow@CHyperLink@@MAEXXZ + 64 10B04124 58 Bytes [BD, 03, 00, 00, BA, 01, 00, ...]
.text ...
.text KemWnd.dll!?OnLButtonUp@CHyperLink@@IAEXIVCPoint@@@Z + 7 10B04177 13 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnLButtonUp@CHyperLink@@IAEXIVCPoint@@@Z + 17 10B04187 6 Bytes [00, BE, 03, 00, 00, BB] {ADD [ESI-0x44fffffd], BH}
.text KemWnd.dll!?OnLButtonUp@CHyperLink@@IAEXIVCPoint@@@Z + 1E 10B0418E 1 Byte [00]
.text KemWnd.dll!?OnLButtonUp@CHyperLink@@IAEXIVCPoint@@@Z + 1E 10B0418E 13 Bytes [00, 00, 00, 00, 00, 00, 37, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; AAA ; XCHG ECX, EAX; CMP EAX, 0x3}
.text KemWnd.dll!?OnLButtonUp@CHyperLink@@IAEXIVCPoint@@@Z + 2C 10B0419C 5 Bytes [B3, 16, 07, 03, 00] {MOV BL, 0x16; POP ES; ADD EAX, [EAX]}
.text ...
.text KemWnd.dll!?SetWindowTextW@CHyperLink@@QAEXPB_W@Z 10B041B0 26 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetWindowTextW@CHyperLink@@QAEXPB_W@Z + 1B 10B041CB 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?SetWindowTextW@CHyperLink@@QAEXPB_W@Z + 22 10B041D2 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?SetWindowTextW@CHyperLink@@QAEXPB_W@Z + 2E 10B041DE 19 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD EAX, [EAX]; ADD [EAX], AL; MOV EDI, 0x3}
.text KemWnd.dll!?SetWindowTextW@CHyperLink@@QAEXPB_W@Z + 42 10B041F2 35 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetFont@CHyperLink@@QAEXPAVCFont@@@Z + 16 10B04216 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?SetFont@CHyperLink@@QAEXPAVCFont@@@Z + 1D 10B0421D 25 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetFont@CHyperLink@@QAEXPAVCFont@@@Z + 38 10B04238 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetFont@CHyperLink@@QAEXPAVCFont@@@Z + 4B 10B0424B 36 Bytes [00, 04, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetFont@CHyperLink@@QAEXPAVCFont@@@Z + 71 10B04271 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?SwitchUnderline@CHyperLink@@IAEXXZ + 11 10B042A1 1 Byte [00]
.text KemWnd.dll!?SwitchUnderline@CHyperLink@@IAEXXZ + 11 10B042A1 21 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SwitchUnderline@CHyperLink@@IAEXXZ + 27 10B042B7 39 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SwitchUnderline@CHyperLink@@IAEXXZ + 50 10B042E0 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SwitchUnderline@CHyperLink@@IAEXXZ + 63 10B042F3 19 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?ModifyLinkStyle@CHyperLink@@QAEHKKH@Z + 17 10B04337 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?ModifyLinkStyle@CHyperLink@@QAEHKKH@Z + 23 10B04343 63 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?ModifyLinkStyle@CHyperLink@@QAEHKKH@Z + 63 10B04383 3 Bytes [00, 00, 00]
.text KemWnd.dll!?ModifyLinkStyle@CHyperLink@@QAEHKKH@Z + 67 10B04387 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?ModifyLinkStyle@CHyperLink@@QAEHKKH@Z + 70 10B04390 3 Bytes [00, 00, 00]
.text ...
.text KemWnd.dll!??0CImageDC@@QAE@XZ + 8 10B043C8 62 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CImageDC@@QAE@XZ + 47 10B04407 26 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CImageDC@@QAE@XZ + 62 10B04422 46 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CImageDC@@QAE@XZ + 91 10B04451 62 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CImageDC@@QAE@XZ + D0 10B04490 67 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?Init@CImageDC@@QAEHPAVCDC@@HHH@Z + 1A 10B045CA 18 Bytes [00, 00, 00, 00, 00, 00, 01, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], EAX; ADD [EAX], AL; LOOPZ 0xf; ADD [EAX], AL; FIADD WORD [ECX]; ADD [EAX], AL}
.text KemWnd.dll!?Init@CImageDC@@QAEHPAVCDC@@HHH@Z + 2E 10B045DE 36 Bytes [00, 00, E0, 95, 3D, 03, 00, ...]
.text KemWnd.dll!?Init@CImageDC@@QAEHPAVCDC@@HHH@Z + 54 10B04604 1 Byte [01]
.text KemWnd.dll!?Init@CImageDC@@QAEHPAVCDC@@HHH@Z + 54 10B04604 20 Bytes [01, 00, 00, 00, B8, 20, 9F, ...]
.text KemWnd.dll!?Init@CImageDC@@QAEHPAVCDC@@HHH@Z + 6A 10B0461A 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!??1CImageDC@@UAE@XZ + D 10B0468D 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1CImageDC@@UAE@XZ + 20 10B046A0 24 Bytes [E0, 01, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1CImageDC@@UAE@XZ + 3B 10B046BB 13 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1CImageDC@@UAE@XZ + 4A 10B046CA 6 Bytes [00, 00, 01, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], EAX; ADD [EAX], AL}
.text KemWnd.dll!??1CImageDC@@UAE@XZ + 54 10B046D4 3 Bytes [00, 00, 00]
.text ...
.text KemWnd.dll!??0CImageDC@@QAE@PAVCDC@@HHH@Z + D 10B0477D 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CImageDC@@QAE@PAVCDC@@HHH@Z + 20 10B04790 12 Bytes [BF, 02, 00, 00, 01, 00, 00, ...]
.text KemWnd.dll!??0CImageDC@@QAE@PAVCDC@@HHH@Z + 2D 10B0479D 72 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CImageDC@@QAE@PAVCDC@@HHH@Z + 79 10B047E9 7 Bytes [00, 00, 00, 00, 00, 00, 00]
.text KemWnd.dll!??0CImageDC@@QAE@PAVCDC@@HHH@Z + 81 10B047F1 30 Bytes [00, 00, 00, BF, 02, 00, 00, ...]
.text ...
.text KemWnd.dll!??1CTimerWnd@@UAE@XZ + 1 10B04891 88 Bytes [03, 00, 00, E1, 01, 00, 00, ...]
.text KemWnd.dll!??0ProcessData@@QAE@ABV0@@Z + D 10B048ED 18 Bytes [00, 00, 00, 01, 00, 00, 00, ...] {ADD [EAX], AL; ADD [ECX], AL; ADD [EAX], AL; ADD DL, CH; ADD EAX, [EAX]; ADD AH, AH; ADD [EAX], EAX; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??0ProcessData@@QAE@ABV0@@Z + 20 10B04900 62 Bytes [4A, 98, 3D, 03, 00, 00, 00, ...]
.text KemWnd.dll!??0ProcessData@@QAE@ABV0@@Z + 62 10B04942 30 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0ProcessData@@QAE@ABV0@@Z + 84 10B04964 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??0ProcessData@@QAE@ABV0@@Z + 8D 10B0496D 83 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??4ProcessData@@QAEAAV0@ABV0@@Z + 51 10B049C1 48 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??8ProcessData@@QBE_NABV0@@Z + 12 10B049F2 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??8ProcessData@@QBE_NABV0@@Z + 26 10B04A06 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??8ProcessData@@QBE_NABV0@@Z + 31 10B04A11 1 Byte [00]
.text KemWnd.dll!??8ProcessData@@QBE_NABV0@@Z + 34 10B04A14 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??8ProcessData@@QBE_NABV0@@Z + 3C 10B04A1C 6 Bytes [04, 00, 00, 00, 00, 00] {ADD AL, 0x0; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?GetProcessMonitorHandle@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@I@Z + D 10B04B3D 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetProcessMonitorHandle@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@I@Z + 27 10B04B57 13 Bytes [00, 6F, 94, 3D, 03, 00, 00, ...]
.text KemWnd.dll!?GetProcessMonitorHandle@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@I@Z + 35 10B04B65 29 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetProcessMonitorHandle@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@I@Z + 55 10B04B85 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetProcessMonitorHandle@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@I@Z + 60 10B04B90 173 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetProcessMonitorHandle@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@I@Z + 111 10B04C41 121 Bytes [00, 00, 00, 01, 00, 00, 00, ...]
.text KemWnd.dll!?GetProcessMonitorHandle@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@I@Z + 18C 10B04CBC 74 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetProcessMonitorHandle@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@I@Z + 1D7 10B04D07 16 Bytes [00, 00, 00, 00, 00, 01, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [ECX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetProcessMonitorHandle@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@I@Z + 1E9 10B04D19 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetProcessMonitorHandle@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@I@Z + 200 10B04D30 36 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetProcessMonitorHandle@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@I@Z + 225 10B04D55 46 Bytes [91, 3D, 03, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetProcessMonitorHandle@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@I@Z + 254 10B04D84 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??0ProcessMonitor@@QAE@XZ + 8 10B04D98 34 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0ProcessMonitor@@QAE@XZ + 2D 10B04DBD 28 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1ProcessMonitor@@UAE@XZ + D 10B04DDD 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1ProcessMonitor@@UAE@XZ + 22 10B04DF2 13 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1ProcessMonitor@@UAE@XZ + 33 10B04E03 1 Byte [00]
.text KemWnd.dll!??1ProcessMonitor@@UAE@XZ + 33 10B04E03 73 Bytes [00, 01, 00, 00, 00, CF, 03, ...]
.text KemWnd.dll!??1ProcessMonitor@@UAE@XZ + 7F 10B04E4F 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?ReRegisterForProccess@ProcessMonitor@@QAEXPAX@Z + D 10B04E9D 19 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?ReRegisterForProccess@ProcessMonitor@@QAEXPAX@Z + 24 10B04EB4 35 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?ReRegisterForProccess@ProcessMonitor@@QAEXPAX@Z + 4B 10B04EDB 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?ReRegisterForProccess@ProcessMonitor@@QAEXPAX@Z + 5E 10B04EEE 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?ReRegisterForProccess@ProcessMonitor@@QAEXPAX@Z + 69 10B04EF9 30 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?Destroy@ProcessMonitor@@QAEXXZ + 11 10B04FA1 7 Bytes [00, 00, 00, 6E, A1, 3D, 03]
.text KemWnd.dll!?Destroy@ProcessMonitor@@QAEXXZ + 19 10B04FA9 18 Bytes [00, 00, 00, BC, 27, 0B, 03, ...] {ADD [EAX], AL; ADD [EDI+0x30b], BH; ADD [EAX], AL; MOV DH, 0xa1; CMP EAX, 0x3}
.text KemWnd.dll!?Destroy@ProcessMonitor@@QAEXXZ + 2F 10B04FBF 108 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?Destroy@ProcessMonitor@@QAEXXZ + 9C 10B0502C 13 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?Destroy@ProcessMonitor@@QAEXXZ + AD 10B0503D 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?RegisterForProccess@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@IIJ0@Z + D 10B0521D 20 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?RegisterForProccess@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@IIJ0@Z + 25 10B05235 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?RegisterForProccess@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@IIJ0@Z + 2F 10B0523F 119 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?RegisterForProccess@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@IIJ0@Z + A7 10B052B7 14 Bytes [00, 52, 00, 00, 00, 18, 08, ...]
.text KemWnd.dll!?RegisterForProccess@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@IIJ0@Z + B9 10B052C9 154 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?RegisterForProccess@ProcessMonitor@@QAEPAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHWND__@@IIJ0@Z + 157 10B05367 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?UnRegisterForProccess@ProcessMonitor@@QAEXPAX@Z 10B05370 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?UnRegisterForProccess@ProcessMonitor@@QAEXPAX@Z + C 10B0537C 20 Bytes [01, 00, 00, 00, DB, 03, 00, ...]
.text KemWnd.dll!?UnRegisterForProccess@ProcessMonitor@@QAEXPAX@Z + 24 10B05394 35 Bytes [BC, 27, 0B, 03, 00, 00, 00, ...]
.text KemWnd.dll!?UnRegisterForProccess@ProcessMonitor@@QAEXPAX@Z + 4B 10B053BB 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?UnRegisterForProccess@ProcessMonitor@@QAEXPAX@Z + 5E 10B053CE 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?OnTimerEvent@ProcessMonitor@@CAXJ@Z + D 10B0541D 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnTimerEvent@ProcessMonitor@@CAXJ@Z + 27 10B05437 33 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnTimerEvent@ProcessMonitor@@CAXJ@Z + 4C 10B0545C 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnTimerEvent@ProcessMonitor@@CAXJ@Z + 52 10B05462 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnTimerEvent@ProcessMonitor@@CAXJ@Z + 5C 10B0546C 16 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?Construct@ProcessMonitor@@SAPAV1@XZ + D 10B056CD 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?Construct@ProcessMonitor@@SAPAV1@XZ + 23 10B056E3 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?Construct@ProcessMonitor@@SAPAV1@XZ + 31 10B056F1 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?Construct@ProcessMonitor@@SAPAV1@XZ + 36 10B056F6 3 Bytes [00, 00, 00]
.text KemWnd.dll!?Construct@ProcessMonitor@@SAPAV1@XZ + 3B 10B056FB 22 Bytes [00, 00, 00, 00, 00, 02, 00, ...]
.text ...
.text KemWnd.dll!??0CListItemData@CQuickList@@QAE@ABV01@@Z + D 10B057ED 20 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CListItemData@CQuickList@@QAE@ABV01@@Z + 25 10B05805 28 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CListItemData@CQuickList@@QAE@ABV01@@Z + 45 10B05825 105 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CListItemData@CQuickList@@QAE@ABV01@@Z + B0 10B05890 37 Bytes [01, 00, 00, 00, 50, 06, 00, ...]
.text KemWnd.dll!??0CListItemData@CQuickList@@QAE@ABV01@@Z + D9 10B058B9 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!??4CListItemData@CQuickList@@QAEAAV01@ABV01@@Z + 84 10B05954 35 Bytes [00, 00, 00, 00, 01, 00, 00, ...]
.text KemWnd.dll!??4CListItemData@CQuickList@@QAEAAV01@ABV01@@Z + A8 10B05978 32 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??4CHeaderRightClick@CQuickList@@QAEAAV01@ABV01@@Z + 19 10B05999 31 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1CQuickEdit@@UAE@XZ + 1A 10B059BA 15 Bytes [00, 00, 01, 00, 00, 00, 5A, ...]
.text KemWnd.dll!?EnableColumnNavigation@CQuickList@@QAEX_N@Z + A 10B059CA 14 Bytes [00, 00, 9B, AF, 3D, 03, 00, ...]
.text KemWnd.dll!?PreTranslateMessage@CQuickEdit@@UAEHPAUtagMSG@@@Z + 9 10B059D9 1 Byte [00]
.text KemWnd.dll!?PreTranslateMessage@CQuickEdit@@UAEHPAUtagMSG@@@Z + C 10B059DC 36 Bytes [AE, AF, 3D, 03, 00, 00, 00, ...]
.text KemWnd.dll!?PreTranslateMessage@CQuickEdit@@UAEHPAUtagMSG@@@Z + 33 10B05A03 3 Bytes [00, 00, 00]
.text KemWnd.dll!?PreTranslateMessage@CQuickEdit@@UAEHPAUtagMSG@@@Z + 37 10B05A07 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?PreTranslateMessage@CQuickEdit@@UAEHPAUtagMSG@@@Z + 3D 10B05A0D 3 Bytes [00, 00, 00]
.text ...
.text KemWnd.dll!?StopEdit@CQuickEdit@@QAEX_NI@Z + D 10B05A2D 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?StopEdit@CQuickEdit@@QAEX_NI@Z + 22 10B05A42 27 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?StopEdit@CQuickEdit@@QAEX_NI@Z + 41 10B05A61 3 Bytes [00, 00, 00]
.text KemWnd.dll!?StopEdit@CQuickEdit@@QAEX_NI@Z + 46 10B05A66 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?StopEdit@CQuickEdit@@QAEX_NI@Z + 54 10B05A74 81 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!??0CHeaderRightClick@CQuickList@@QAE@XZ + 32 10B05B12 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CHeaderRightClick@CQuickList@@QAE@XZ + 3D 10B05B1D 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??0CHeaderRightClick@CQuickList@@QAE@XZ + 48 10B05B28 20 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CHeaderRightClick@CQuickList@@QAE@XZ + 5E 10B05B3E 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CHeaderRightClick@CQuickList@@QAE@XZ + 69 10B05B49 8 Bytes [00, 00, 00, 01, 00, 00, 00, ...] {ADD [EAX], AL; ADD [ECX], AL; ADD [EAX], AL; ADD [EDX], BL}
.text ...
.text KemWnd.dll!??0CQuickEdit@@QAE@PAVCQuickList@@HHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_N@Z + C 10B05B6C 19 Bytes [9A, AE, 3D, 03, 1A, 04, 00, ...] {CALL FAR 0x4:0x1a033dae; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??0CQuickEdit@@QAE@PAVCQuickList@@HHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_N@Z + 23 10B05B83 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??0CQuickEdit@@QAE@PAVCQuickList@@HHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_N@Z + 31 10B05B91 3 Bytes [00, 00, 00]
.text KemWnd.dll!??0CQuickEdit@@QAE@PAVCQuickList@@HHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_N@Z + 36 10B05B96 70 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CQuickEdit@@QAE@PAVCQuickList@@HHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_N@Z + 7D 10B05BDD 15 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CQuickEdit@@QAE@PAVCQuickList@@HHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_N@Z + 90 10B05BF0 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??0CQuickEdit@@QAE@PAVCQuickList@@HHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_N@Z + 99 10B05BF9 13 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnKillFocus@CQuickEdit@@IAEXPAVCWnd@@@Z + 8 10B05C08 3 Bytes [00, 00, 00]
.text KemWnd.dll!?OnKillFocus@CQuickEdit@@IAEXPAVCWnd@@@Z + C 10B05C0C 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?OnKillFocus@CQuickEdit@@IAEXPAVCWnd@@@Z + 12 10B05C12 3 Bytes [00, 00, 03]
.text KemWnd.dll!?OnKillFocus@CQuickEdit@@IAEXPAVCWnd@@@Z + 16 10B05C16 1 Byte [00]
.text KemWnd.dll!?OnKillFocus@CQuickEdit@@IAEXPAVCWnd@@@Z + 16 10B05C16 12 Bytes [00, 00, 1E, 04, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?OnChar@CQuickEdit@@IAEXIII@Z + 20 10B05C80 3 Bytes [4E, 0C, 00] {DEC ESI; OR AL, 0x0}
.text KemWnd.dll!?OnChar@CQuickEdit@@IAEXIII@Z + 24 10B05C84 16 Bytes [00, 00, 00, 00, D5, B3, 3D, ...]
.text KemWnd.dll!?OnChar@CQuickEdit@@IAEXIII@Z + 35 10B05C95 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnChar@CQuickEdit@@IAEXIII@Z + 3E 10B05C9E 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnCreate@CQuickEdit@@IAEHPAUtagCREATESTRUCTW@@@Z + 8 10B05CA8 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnCreate@CQuickEdit@@IAEHPAUtagCREATESTRUCTW@@@Z + 13 10B05CB3 15 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnCreate@CQuickEdit@@IAEHPAUtagCREATESTRUCTW@@@Z + 24 10B05CC4 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnCreate@CQuickEdit@@IAEHPAUtagCREATESTRUCTW@@@Z + 2F 10B05CCF 1 Byte [00]
.text KemWnd.dll!?OnCreate@CQuickEdit@@IAEHPAUtagCREATESTRUCTW@@@Z + 2F 10B05CCF 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?OnGetDlgCode@CQuickEdit@@IAEIXZ + 5 10B05D35 112 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?Reset@CListItemData@CQuickList@@AAEXXZ + 17 10B05DA7 27 Bytes [00, 3D, 04, 00, 00, 00, 00, ...]
.text KemWnd.dll!?Reset@CListItemData@CQuickList@@AAEXXZ + 34 10B05DC4 19 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?Reset@CListItemData@CQuickList@@AAEXXZ + 4A 10B05DDA 49 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?Reset@CListItemData@CQuickList@@AAEXXZ + 7C 10B05E0C 13 Bytes [3E, 04, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetEditOnEnter@CQuickList@@QAEX_N@Z + A 10B05E1A 15 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetEditOnF2@CQuickList@@QAEX_N@Z + A 10B05E2A 15 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetEditOnDblclk@CQuickList@@QAEX_N@Z + A 10B05E3A 31 Bytes [00, 00, 00, 00, 01, 00, 00, ...]
.text KemWnd.dll!?SetEndEditOnLostFocus@CQuickList@@QAEX_N@Z + 1A 10B05E5A 63 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetEmptyMessage@CQuickList@@QAEXI@Z + D 10B05E9D 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetEmptyMessage@CQuickList@@QAEXI@Z + 22 10B05EB2 25 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetEmptyMessage@CQuickList@@QAEXI@Z + 3F 10B05ECF 37 Bytes [00, 01, 00, 00, 00, FC, 03, ...]
.text KemWnd.dll!?SetEmptyMessage@CQuickList@@QAEXI@Z + 68 10B05EF8 7 Bytes [00, 00, 00, 00, 00, 00, 00]
.text KemWnd.dll!?FillSolidRect@CQuickList@@IAEXPAVCDC@@ABUtagRECT@@K@Z 10B05F00 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?FillSolidRect@CQuickList@@IAEXPAVCDC@@ABUtagRECT@@K@Z + 18 10B05F18 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?FillSolidRect@CQuickList@@IAEXPAVCDC@@ABUtagRECT@@K@Z + 1B 10B05F1B 20 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnGetdispinfo@CQuickList@@IAEXPAUtagNMHDR@@PAJ@Z + 12 10B05F32 12 Bytes [00, 00, 01, 00, 00, 00, FB, ...]
.text KemWnd.dll!?OnGetdispinfo@CQuickList@@IAEXPAUtagNMHDR@@PAJ@Z + 20 10B05F40 49 Bytes [00, 00, 00, 00, 50, 99, 3D, ...]
.text KemWnd.dll!?OnGetdispinfo@CQuickList@@IAEXPAUtagNMHDR@@PAJ@Z + 52 10B05F72 15 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnGetdispinfo@CQuickList@@IAEXPAUtagNMHDR@@PAJ@Z + 62 10B05F82 1 Byte [00]
.text KemWnd.dll!?OnGetdispinfo@CQuickList@@IAEXPAUtagNMHDR@@PAJ@Z + 65 10B05F85 5 Bytes [00, 00, 00, 00, 00]
.text ...
.text KemWnd.dll!?SetKeyfindColumn@CQuickList@@QAEXH@Z + A 10B05FEA 27 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?StopEdit@CQuickList@@QAEX_N@Z + 16 10B06006 50 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?PreTranslateMessage@CQuickList@@UAEHPAUtagMSG@@@Z + 9 10B06039 1 Byte [00]
.text KemWnd.dll!?PreTranslateMessage@CQuickList@@UAEHPAUtagMSG@@@Z + C 10B0603C 24 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?PreTranslateMessage@CQuickList@@UAEHPAUtagMSG@@@Z + 27 10B06057 3 Bytes [00, 00, 00]
.text KemWnd.dll!?PreTranslateMessage@CQuickList@@UAEHPAUtagMSG@@@Z + 2B 10B0605B 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?PreTranslateMessage@CQuickList@@UAEHPAUtagMSG@@@Z + 30 10B06060 37 Bytes [01, 00, 00, 00, 82, 04, 00, ...]
.text KemWnd.dll!?OnLvnHotTrack@CQuickList@@IAEXPAUtagNMHDR@@PAJ@Z + 6 10B06086 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnLvnHotTrack@CQuickList@@IAEXPAUtagNMHDR@@PAJ@Z + D 10B0608D 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?PreSubclassWindow@CQuickList@@MAEXXZ + 4 10B06094 47 Bytes [01, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?PreSubclassWindow@CQuickList@@MAEXXZ + 34 10B060C4 48 Bytes [01, 00, 00, 00, 83, 04, 00, ...]
.text KemWnd.dll!?PreSubclassWindow@CQuickList@@MAEXXZ + 65 10B060F5 17 Bytes [00, 00, 00, 01, 00, 00, 00, ...]
.text KemWnd.dll!?PreSubclassWindow@CQuickList@@MAEXXZ + 77 10B06107 79 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?PreSubclassWindow@CQuickList@@MAEXXZ + C7 10B06157 34 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!??0CQuickList@@QAE@XZ + D 10B0657D 19 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CQuickList@@QAE@XZ + 24 10B06594 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CQuickList@@QAE@XZ + 2F 10B0659F 63 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CQuickList@@QAE@XZ + 70 10B065E0 45 Bytes [79, 03, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0CQuickList@@QAE@XZ + A1 10B06611 20 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!??1CQuickList@@UAE@XZ + 28 10B06668 19 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1CQuickList@@UAE@XZ + 3D 10B0667D 32 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetTextColor@CQuickList@@IAEKABVCListItemData@1@_N1@Z + 1E 10B0669E 5 Bytes [00, 00, 01, 00, 00]
.text KemWnd.dll!?GetTextColor@CQuickList@@IAEKABVCListItemData@1@_N1@Z + 24 10B066A4 6 Bytes [68, 03, 00, 00, 7B, 03]
.text KemWnd.dll!?GetTextColor@CQuickList@@IAEKABVCListItemData@1@_N1@Z + 2B 10B066AB 17 Bytes [00, 00, 00, 00, 00, 5A, 8A, ...]
.text KemWnd.dll!?GetTextColor@CQuickList@@IAEKABVCListItemData@1@_N1@Z + 3D 10B066BD 1 Byte [00]
.text KemWnd.dll!?GetTextColor@CQuickList@@IAEKABVCListItemData@1@_N1@Z + 40 10B066C0 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?GetBackColor@CQuickList@@IAEKABVCListItemData@1@_N@Z + 29 10B06779 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetBackColor@CQuickList@@IAEKABVCListItemData@1@_N@Z + 33 10B06783 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetBackColor@CQuickList@@IAEKABVCListItemData@1@_N@Z + 3D 10B0678D 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetBackColor@CQuickList@@IAEKABVCListItemData@1@_N@Z + 4B 10B0679B 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetBackColor@CQuickList@@IAEKABVCListItemData@1@_N@Z + 56 10B067A6 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?OnPaint@CQuickList@@IAEXXZ + C 10B0682C 10 Bytes [00, 00, 00, 00, 01, 00, 00, ...]
.text KemWnd.dll!?OnPaint@CQuickList@@IAEXXZ + 17 10B06837 5 Bytes [00, 75, 03, 00, 00] {ADD [EBP+0x3], DH; ADD [EAX], AL}
.text KemWnd.dll!?OnPaint@CQuickList@@IAEXXZ + 1E 10B0683E 8 Bytes [00, 00, 88, 89, 3D, 03, 00, ...] {ADD [EAX], AL; MOV [ECX+0x33d], CL}
.text KemWnd.dll!?OnPaint@CQuickList@@IAEXXZ + 28 10B06848 15 Bytes [B4, 89, 3D, 03, 00, 00, 00, ...] {MOV AH, 0x89; CMP EAX, 0x3; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnPaint@CQuickList@@IAEXXZ + 3A 10B0685A 16 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?GetSubItemRect@CQuickList@@IAEHHHHAAVCRect@@@Z + 14 10B06954 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD AL, [EAX]}
.text KemWnd.dll!?GetSubItemRect@CQuickList@@IAEHHHHAAVCRect@@@Z + 1F 10B0695F 15 Bytes [00, 81, 03, 00, 00, 49, 0C, ...]
.text KemWnd.dll!?GetSubItemRect@CQuickList@@IAEHHHHAAVCRect@@@Z + 31 10B06971 14 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetSubItemRect@CQuickList@@IAEHHHHAAVCRect@@@Z + 41 10B06981 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetSubItemRect@CQuickList@@IAEHHHHAAVCRect@@@Z + 46 10B06986 1 Byte [00]
.text ...
.text KemWnd.dll!?GetCheckboxRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@_N@Z 10B06A00 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetCheckboxRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@_N@Z + C 10B06A0C 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetCheckboxRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@_N@Z + 17 10B06A17 15 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetCheckboxRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@_N@Z + 27 10B06A27 43 Bytes [00, 83, 03, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetCheckboxRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@_N@Z + 53 10B06A53 47 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?GetImageRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@_N@Z + 1B 10B06ABB 13 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetImageRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@_N@Z + 29 10B06AC9 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetImageRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@_N@Z + 34 10B06AD4 13 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetImageRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@_N@Z + 44 10B06AE4 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD EAX, [EAX]; ADD [EAX], AL; ADD EAX, GS:[EAX]; ADD [EAX], AL}
.text KemWnd.dll!?GetImageRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@_N@Z + 59 10B06AF9 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?DrawImage@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + B 10B06C2B 19 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?DrawImage@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 20 10B06C40 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?DrawImage@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 27 10B06C47 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?DrawImage@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 3A 10B06C5A 3 Bytes [00, 00, 00]
.text KemWnd.dll!?DrawImage@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 40 10B06C60 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?DrawButton@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + C 10B06DAC 16 Bytes [79, 03, 00, 00, 00, 00, 00, ...] {JNS 0x5; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?DrawButton@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 1D 10B06DBD 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?DrawButton@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 23 10B06DC3 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?DrawButton@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 2E 10B06DCE 29 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?DrawButton@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 4D 10B06DED 44 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?GetBarSize@CQuickList@@IBEHABVCListItemData@1@ABVCRect@@@Z + 28 10B06E48 15 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetTextJustify@CQuickList@@IAEIH@Z + A 10B06E5A 3 Bytes [00, 00, 00]
.text KemWnd.dll!?GetTextJustify@CQuickList@@IAEIH@Z + F 10B06E5F 15 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetTextJustify@CQuickList@@IAEIH@Z + 20 10B06E70 21 Bytes [00, 00, 00, 00, 00, 04, 00, ...]
.text KemWnd.dll!?GetTextJustify@CQuickList@@IAEIH@Z + 38 10B06E88 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?GetTextJustify@CQuickList@@IAEIH@Z + 3E 10B06E8E 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?FullRowSelect@CQuickList@@IAE_NXZ + 5 10B06EA5 1 Byte [00]
.text KemWnd.dll!?FullRowSelect@CQuickList@@IAE_NXZ + 5 10B06EA5 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?FullRowSelect@CQuickList@@IAE_NXZ + C 10B06EAC 29 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnOdfinditem@CQuickList@@IAEHPAUtagNMHDR@@PAJ@Z + D 10B06ECD 20 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnOdfinditem@CQuickList@@IAEHPAUtagNMHDR@@PAJ@Z + 25 10B06EE5 14 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnOdfinditem@CQuickList@@IAEHPAUtagNMHDR@@PAJ@Z + 36 10B06EF6 57 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnOdfinditem@CQuickList@@IAEHPAUtagNMHDR@@PAJ@Z + 70 10B06F30 1 Byte [00]
.text KemWnd.dll!?OnOdfinditem@CQuickList@@IAEHPAUtagNMHDR@@PAJ@Z + 70 10B06F30 5 Bytes [00, 00, 00, 00, 00]
.text ...
.text KemWnd.dll!?MakeInside@CQuickList@@IAE_NAAH0@Z + C 10B06FEC 1 Byte [00]
.text KemWnd.dll!?MakeInside@CQuickList@@IAE_NAAH0@Z + C 10B06FEC 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?MakeInside@CQuickList@@IAE_NAAH0@Z + 18 10B06FF8 7 Bytes [00, 00, 00, 00, 00, 00, 00]
.text KemWnd.dll!?MakeInside@CQuickList@@IAE_NAAH0@Z + 20 10B07000 1 Byte [03]
.text KemWnd.dll!?MakeInside@CQuickList@@IAE_NAAH0@Z + 20 10B07000 6 Bytes [03, 00, 00, 00, 7E, 03] {ADD EAX, [EAX]; ADD [EAX], AL; JLE 0x9}
.text ...
.text KemWnd.dll!?OnMouseWheel@CQuickList@@IAEHIFVCPoint@@@Z + C 10B0707C 1 Byte [00]
.text KemWnd.dll!?OnMouseWheel@CQuickList@@IAEHIFVCPoint@@@Z + C 10B0707C 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnMouseWheel@CQuickList@@IAEHIFVCPoint@@@Z + 1A 10B0708A 17 Bytes [00, 00, 05, 65, 11, 03, 00, ...] {ADD [EAX], AL; ADD EAX, 0x31165; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnVScroll@CQuickList@@IAEXIIPAVCScrollBar@@@Z + C 10B0709C 1 Byte [00]
.text KemWnd.dll!?OnVScroll@CQuickList@@IAEXIIPAVCScrollBar@@@Z + C 10B0709C 27 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnVScroll@CQuickList@@IAEXIIPAVCScrollBar@@@Z + 29 10B070B9 3 Bytes [00, 00, 00]
.text KemWnd.dll!?OnVScroll@CQuickList@@IAEXIIPAVCScrollBar@@@Z + 2D 10B070BD 14 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EBX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnHScroll@CQuickList@@IAEXIIPAVCScrollBar@@@Z + C 10B070CC 27 Bytes [2D, 04, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnHScroll@CQuickList@@IAEXIIPAVCScrollBar@@@Z + 29 10B070E9 3 Bytes [00, 00, 00]
.text KemWnd.dll!?OnHScroll@CQuickList@@IAEXIIPAVCScrollBar@@@Z + 2D 10B070ED 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?MakeColumnVisible@CQuickList@@IAEXH@Z + 8 10B070F8 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?MakeColumnVisible@CQuickList@@IAEXH@Z + 11 10B07101 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?MakeColumnVisible@CQuickList@@IAEXH@Z + 19 10B07109 7 Bytes [00, 00, 00, 00, 00, 00, 00]
.text KemWnd.dll!?MakeColumnVisible@CQuickList@@IAEXH@Z + 21 10B07111 1 Byte [00]
.text KemWnd.dll!?MakeColumnVisible@CQuickList@@IAEXH@Z + 21 10B07111 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?OnToolHitTest@CQuickList@@MBEHVCPoint@@PAUtagTOOLINFOW@@@Z + A 10B0721A 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnToolHitTest@CQuickList@@MBEHVCPoint@@PAUtagTOOLINFOW@@@Z + 16 10B07226 15 Bytes [00, 00, 01, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], EAX; ADD [EAX], AL; ADD [EAX], AH; LAHF ; ADD EAX, [EAX]; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnToolHitTest@CQuickList@@MBEHVCPoint@@PAUtagTOOLINFOW@@@Z + 26 10B07236 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnToolHitTest@CQuickList@@MBEHVCPoint@@PAUtagTOOLINFOW@@@Z + 32 10B07242 59 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnToolHitTest@CQuickList@@MBEHVCPoint@@PAUtagTOOLINFOW@@@Z + 6F 10B0727F 60 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?GetItemInFocus@CQuickList@@QAEHXZ + C 10B072DC 27 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnNotify@CQuickList@@MAEHIJPAJ@Z + 8 10B072F8 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnNotify@CQuickList@@MAEHIJPAJ@Z + 11 10B07301 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnNotify@CQuickList@@MAEHIJPAJ@Z + 1F 10B0730F 23 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnNotify@CQuickList@@MAEHIJPAJ@Z + 37 10B07327 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnNotify@CQuickList@@MAEHIJPAJ@Z + 42 10B07332 61 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?IsSelected@CQuickList@@QAE_NHH@Z + 19 10B07509 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?IsSelected@CQuickList@@QAE_NHH@Z + 2C 10B0751C 5 Bytes [5E, 03, 00, 00, 00] {POP ESI; ADD EAX, [EAX]; ADD [EAX], AL}
.text KemWnd.dll!?IsSelected@CQuickList@@QAE_NHH@Z + 33 10B07523 26 Bytes [00, 82, A7, 3D, 03, 00, 00, ...]
.text KemWnd.dll!?IsSelected@CQuickList@@QAE_NHH@Z + 4F 10B0753F 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?IsSelected@CQuickList@@QAE_NHH@Z + 59 10B07549 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?GetTextRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@@Z + 14 10B07574 15 Bytes [00, 00, 00, 00, 01, 00, 00, ...]
.text KemWnd.dll!?GetTextRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@@Z + 24 10B07584 33 Bytes [00, 00, 00, 00, DB, 89, 3D, ...]
.text KemWnd.dll!?GetTextRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@@Z + 46 10B075A6 1 Byte [00]
.text KemWnd.dll!?GetTextRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@@Z + 46 10B075A6 35 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetTextRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@@Z + 6A 10B075CA 24 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetCheckboxRect@CQuickList@@QAE_NHHAAVCRect@@_N@Z + 13 10B075E3 27 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetCheckboxRect@CQuickList@@QAE_NHHAAVCRect@@_N@Z + 2F 10B075FF 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetImageRect@CQuickList@@QAE_NHHAAVCRect@@_N@Z + 13 10B07613 27 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetImageRect@CQuickList@@QAE_NHHAAVCRect@@_N@Z + 2F 10B0762F 50 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetItemData@CQuickList@@MAEAAVCListItemData@1@HH@Z + 32 10B07662 1 Byte [00]
.text KemWnd.dll!?GetItemData@CQuickList@@MAEAAVCListItemData@1@HH@Z + 32 10B07662 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetItemData@CQuickList@@MAEAAVCListItemData@1@HH@Z + 3F 10B0766F 7 Bytes [00, 00, 00, 00, 00, 00, 00]
.text KemWnd.dll!?GetItemData@CQuickList@@MAEAAVCListItemData@1@HH@Z + 47 10B07677 14 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetItemData@CQuickList@@MAEAAVCListItemData@1@HH@Z + 57 10B07687 7 Bytes [00, 00, 00, 00, 00, 00, 00]
.text ...
.text KemWnd.dll!?HitTest@CQuickList@@QAE_NABUtagPOINT@@AAH1PA_N2@Z + 18 10B07738 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?HitTest@CQuickList@@QAE_NABUtagPOINT@@AAH1PA_N2@Z + 24 10B07744 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?HitTest@CQuickList@@QAE_NABUtagPOINT@@AAH1PA_N2@Z + 34 10B07754 71 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?HitTest@CQuickList@@QAE_NABUtagPOINT@@AAH1PA_N2@Z + 7D 10B0779D 49 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?HitTest@CQuickList@@QAE_NABUtagPOINT@@AAH1PA_N2@Z + AF 10B077CF 22 Bytes [00, 03, 00, 00, 00, 18, 03, ...]
.text ...
.text KemWnd.dll!?EditSubItem@CQuickList@@QAEPAVCEdit@@HH@Z 10B07830 10 Bytes [00, 00, 00, 00, 03, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD EAX, [EAX]; ADD [EAX], AL; SBB [EBX], EAX}
.text KemWnd.dll!?EditSubItem@CQuickList@@QAEPAVCEdit@@HH@Z + D 10B0783D 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?EditSubItem@CQuickList@@QAEPAVCEdit@@HH@Z + 27 10B07857 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?EditSubItem@CQuickList@@QAEPAVCEdit@@HH@Z + 30 10B07860 15 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?EditSubItem@CQuickList@@QAEPAVCEdit@@HH@Z + 41 10B07871 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?OnToolTipText@CQuickList@@IAEHIPAUtagNMHDR@@PAJ@Z + D 10B07ADD 20 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnToolTipText@CQuickList@@IAEHIPAUtagNMHDR@@PAJ@Z + 24 10B07AF4 16 Bytes [05, 04, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnToolTipText@CQuickList@@IAEHIPAUtagNMHDR@@PAJ@Z + 36 10B07B06 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?OnToolTipText@CQuickList@@IAEHIPAUtagNMHDR@@PAJ@Z + 40 10B07B10 3 Bytes [00, 00, 00]
.text KemWnd.dll!?OnToolTipText@CQuickList@@IAEHIPAUtagNMHDR@@PAJ@Z + 45 10B07B15 43 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?GetProgressRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@_N@Z + 9 10B07C79 39 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetProgressRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@_N@Z + 31 10B07CA1 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?GetProgressRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@_N@Z + 37 10B07CA7 19 Bytes [00, 05, 65, 11, 03, 00, 00, ...]
.text KemWnd.dll!?GetProgressRect@CQuickList@@QAE_NAAVCListItemData@1@AAVCRect@@_N@Z + 4B 10B07CBB 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetTextRect@CQuickList@@QAE_NHHAAVCRect@@@Z + 13 10B07CD3 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetTextRect@CQuickList@@QAE_NHHAAVCRect@@@Z + 2A 10B07CEA 15 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?DrawTextW@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + D 10B07CFD 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?DrawTextW@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 14 10B07D04 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?DrawTextW@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 22 10B07D12 16 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?DrawTextW@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 35 10B07D25 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?DrawTextW@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 3B 10B07D2B 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?DrawProgressBar@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + E 10B0817E 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?DrawProgressBar@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 23 10B08193 21 Bytes [00, 01, 00, 00, 00, FC, 02, ...]
.text KemWnd.dll!?DrawProgressBar@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 3B 10B081AB 36 Bytes [00, 59, 9E, 3D, 03, 00, 00, ...]
.text KemWnd.dll!?DrawProgressBar@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 61 10B081D1 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?DrawProgressBar@CQuickList@@IAEXAAVCListItemData@1@PAVCDC@@@Z + 66 10B081D6 1 Byte [00]
.text ...
.text KemWnd.dll!?HitTest@CQuickList@@QAE_NABUtagPOINT@@AAVCListHitInfo@1@@Z + 1E 10B0831E 7 Bytes [00, 00, 00, 00, 00, 00, 01]
.text KemWnd.dll!?RedrawSubitems@CQuickList@@IAEXHHHHH@Z + 6 10B08326 1 Byte [00]
.text KemWnd.dll!?RedrawSubitems@CQuickList@@IAEXHHHHH@Z + 6 10B08326 10 Bytes [00, 00, 38, 04, 00, 00, 09, ...]
.text KemWnd.dll!?RedrawSubitems@CQuickList@@IAEXHHHHH@Z + 12 10B08332 12 Bytes [00, 00, 20, A7, 3D, 03, 00, ...] {ADD [EAX], AL; AND [EDI+0x33d], AH; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?RedrawSubitems@CQuickList@@IAEXHHHHH@Z + 21 10B08341 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?RedrawSubitems@CQuickList@@IAEXHHHHH@Z + 3A 10B0835A 23 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?OnDblClickEx@CQuickList@@IAEHPAUtagNMHDR@@PAJ@Z + A 10B0845A 45 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnDblClickEx@CQuickList@@IAEHPAUtagNMHDR@@PAJ@Z + 38 10B08488 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnDblClickEx@CQuickList@@IAEHPAUtagNMHDR@@PAJ@Z + 3F 10B0848F 27 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnDblClickEx@CQuickList@@IAEHPAUtagNMHDR@@PAJ@Z + 5B 10B084AB 23 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetProgressRect@CQuickList@@QAE_NHHAAVCRect@@_N@Z + 14 10B084C4 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetProgressRect@CQuickList@@QAE_NHHAAVCRect@@_N@Z + 20 10B084D0 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetProgressRect@CQuickList@@QAE_NHHAAVCRect@@_N@Z + 29 10B084D9 33 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetProgressRect@CQuickList@@QAE_NHHAAVCRect@@_N@Z + 4B 10B084FB 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?GetProgressRect@CQuickList@@QAE_NHHAAVCRect@@_N@Z + 51 10B08501 20 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?DrawItem@CQuickList@@IAEXHHPAVCDC@@@Z + D 10B0852D 20 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?DrawItem@CQuickList@@IAEXHHPAVCDC@@@Z + 25 10B08545 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?DrawItem@CQuickList@@IAEXHHPAVCDC@@@Z + 2E 10B0854E 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?DrawItem@CQuickList@@IAEXHHPAVCDC@@@Z + 37 10B08557 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?DrawItem@CQuickList@@IAEXHHPAVCDC@@@Z + 3D 10B0855D 20 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?RedrawImages@CQuickList@@QAEXHHHH@Z 10B085F0 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?RedrawImages@CQuickList@@QAEXHHHH@Z + A 10B085FA 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?RedrawImages@CQuickList@@QAEXHHHH@Z + 15 10B08605 3 Bytes [00, 00, 00]
.text KemWnd.dll!?RedrawImages@CQuickList@@QAEXHHHH@Z + 1A 10B0860A 120 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?RedrawImages@CQuickList@@QAEXHHHH@Z + 93 10B08683 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?RedrawCheckBoxs@CQuickList@@QAEXHHHH@Z + A 10B0869A 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?RedrawCheckBoxs@CQuickList@@QAEXHHHH@Z + 15 10B086A5 4 Bytes [00, 00, 00, 03] {ADD [EAX], AL; ADD [EBX], AL}
.text KemWnd.dll!?RedrawCheckBoxs@CQuickList@@QAEXHHHH@Z + 1A 10B086AA 120 Bytes [00, 00, 70, 04, 00, 00, 00, ...]
.text KemWnd.dll!?RedrawCheckBoxs@CQuickList@@QAEXHHHH@Z + 93 10B08723 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?RedrawCheckBoxs@CQuickList@@QAEXHHHH@Z + 9E 10B0872E 16 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?RedrawSubitems@CQuickList@@QAEXHHHH@Z + F 10B0873F 14 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?RedrawSubitems@CQuickList@@QAEXHHHH@Z + 1E 10B0874E 11 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?RedrawText@CQuickList@@QAEXHHHH@Z + A 10B0875A 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?RedrawText@CQuickList@@QAEXHHHH@Z + 15 10B08765 3 Bytes [00, 00, 00]
.text KemWnd.dll!?RedrawText@CQuickList@@QAEXHHHH@Z + 1A 10B0876A 47 Bytes [00, 00, 00, 00, 00, 00, 01, ...]
.text KemWnd.dll!?RedrawText@CQuickList@@QAEXHHHH@Z + 4A 10B0879A 68 Bytes [3D, 03, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?RedrawText@CQuickList@@QAEXHHHH@Z + 8F 10B087DF 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?OnEndEdit@CQuickList@@IAEXHHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_NI@Z + D 10B087FD 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnEndEdit@CQuickList@@IAEXHHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_NI@Z + 27 10B08817 21 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnEndEdit@CQuickList@@IAEXHHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_NI@Z + 3E 10B0882E 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD AL, 0x0}
.text KemWnd.dll!?OnEndEdit@CQuickList@@IAEXHHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_NI@Z + 4C 10B0883C 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnEndEdit@CQuickList@@IAEXHHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_NI@Z + 51 10B08841 25 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?SetNavigationColumn@CQuickList@@QAEXH@Z 10B088E0 34 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetNavigationColumn@CQuickList@@QAEXH@Z + 23 10B08903 3 Bytes [00, 69, 04] {ADD [ECX+0x4], CH}
.text KemWnd.dll!?SetNavigationColumn@CQuickList@@QAEXH@Z + 28 10B08908 9 Bytes [4D, 02, 00, 00, 00, 00, 00, ...] {DEC EBP; ADD AL, [EAX]; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?SetNavigationColumn@CQuickList@@QAEXH@Z + 35 10B08915 38 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SetNavigationColumn@CQuickList@@QAEXH@Z + 5D 10B0893D 2 Bytes [00, 00] {ADD [EAX], AL}
.text ...
.text KemWnd.dll!?OnCustomDraw@CQuickList@@IAEXPAUtagNMHDR@@PAJ@Z + 17 10B08AB7 1 Byte [00]
.text KemWnd.dll!?OnCustomDraw@CQuickList@@IAEXPAUtagNMHDR@@PAJ@Z + 1B 10B08ABB 3 Bytes [00, 00, 00]
.text KemWnd.dll!?OnCustomDraw@CQuickList@@IAEXPAUtagNMHDR@@PAJ@Z + 1F 10B08ABF 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?OnCustomDraw@CQuickList@@IAEXPAUtagNMHDR@@PAJ@Z + 22 10B08AC2 1 Byte [00]
.text KemWnd.dll!?OnCustomDraw@CQuickList@@IAEXPAUtagNMHDR@@PAJ@Z + 22 10B08AC2 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?TryNavigate@CQuickList@@IAEXH@Z + A 10B08B1A 15 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?TryNavigate@CQuickList@@IAEXH@Z + 1B 10B08B2B 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?TryNavigate@CQuickList@@IAEXH@Z + 26 10B08B36 1 Byte [00]
.text KemWnd.dll!?TryNavigate@CQuickList@@IAEXH@Z + 26 10B08B36 3 Bytes [00, 00, 00]
.text KemWnd.dll!?TryNavigate@CQuickList@@IAEXH@Z + 2A 10B08B3A 1 Byte [00]
.text ...
.text KemWnd.dll!?OnClickEx@CQuickList@@IAEHPAUtagNMHDR@@PAJ@Z + 34 10B08BD4 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnClickEx@CQuickList@@IAEHPAUtagNMHDR@@PAJ@Z + 39 10B08BD9 47 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnClickEx@CQuickList@@IAEHPAUtagNMHDR@@PAJ@Z + 6A 10B08C0A 16 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnClickEx@CQuickList@@IAEHPAUtagNMHDR@@PAJ@Z + 7C 10B08C1C 14 Bytes [00, 00, 00, 00, 04, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD AL, 0x0; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnClickEx@CQuickList@@IAEHPAUtagNMHDR@@PAJ@Z + 8E 10B08C2E 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!?OnKeyDown@CQuickList@@IAEXIII@Z + 9 10B08C59 62 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnKeyDown@CQuickList@@IAEXIII@Z + 49 10B08C99 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnKeyDown@CQuickList@@IAEXIII@Z + 52 10B08CA2 1 Byte [00]
.text KemWnd.dll!?OnKeyDown@CQuickList@@IAEXIII@Z + 52 10B08CA2 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnKeyDown@CQuickList@@IAEXIII@Z + 65 10B08CB5 1 Byte [00]
.text ...
.text KemWnd.dll!?SetOEMSupport@TDib@@SAXH@Z + 5 10B08DE5 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??0TDib@@QAE@ABV0@@Z + 8 10B08DF8 30 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0TDib@@QAE@ABV0@@Z + 27 10B08E17 41 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??4TDib@@QAEAAV0@ABV0@@Z + 21 10B08E41 163 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?loadResource@TDib@@QAEHPAUHBITMAP__@@@Z + 6 10B08EE6 38 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?loadResource@TDib@@QAEHPAUHBITMAP__@@@Z + 2E 10B08F0E 25 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?loadResource@TDib@@QAEHPAUHBITMAP__@@@Z + 49 10B08F29 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?loadResource@TDib@@QAEHPAUHBITMAP__@@@Z + 4C 10B08F2C 35 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?loadResource@TDib@@QAEHPAUHBITMAP__@@@Z + 72 10B08F52 19 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?loadResource@TDib@@QAEHPB_WHH@Z + 36 10B09086 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?loadResource@TDib@@QAEHPB_WHH@Z + 3D 10B0908D 7 Bytes [00, 00, 00, 00, 00, 00, 00]
.text KemWnd.dll!?loadResource@TDib@@QAEHPB_WHH@Z + 45 10B09095 1 Byte [00]
.text KemWnd.dll!?loadResource@TDib@@QAEHPB_WHH@Z + 48 10B09098 27 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?loadResource@TDib@@QAEHPB_WHH@Z + 64 10B090B4 13 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?SelectRealizePalette@TDib@@QAEHPAUHWND__@@@Z + 1E 10B0910E 14 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?SelectRealizePalette@TDib@@QAEHPAUHWND__@@@Z + 2D 10B0911D 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?SelectRealizePalette@TDib@@QAEHPAUHWND__@@@Z + 44 10B09134 3 Bytes [01, 00, 00]
.text KemWnd.dll!?SelectRealizePalette@TDib@@QAEHPAUHWND__@@@Z + 48 10B09138 8 Bytes [6D, 04, 00, 00, 51, 02, 00, ...] {INSD ; ADD AL, 0x0; ADD [ECX+0x2], DL; ADD [EAX], AL}
.text KemWnd.dll!?SelectRealizePalette@TDib@@QAEHPAUHWND__@@@Z + 53 10B09143 57 Bytes [00, 4F, B0, 3D, 03, 00, 00, ...]
.text KemWnd.dll!?draw@TDib@@QAEHPAUHDC__@@PBUtagRECT@@H@Z + 2D 10B0917D 33 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?draw@TDib@@QAEHPAUHDC__@@PBUtagRECT@@H@Z + 4F 10B0919F 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?draw@TDib@@QAEHPAUHDC__@@PBUtagRECT@@H@Z + 59 10B091A9 1 Byte [00]
.text KemWnd.dll!?draw@TDib@@QAEHPAUHDC__@@PBUtagRECT@@H@Z + 59 10B091A9 26 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?draw@TDib@@QAEHPAUHDC__@@PBUtagRECT@@H@Z + 74 10B091C4 14 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text KemWnd.dll!??0TDib@@QAE@XZ + 6 10B09306 76 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0TDib@@QAE@PB_WHH@Z + 33 10B09353 51 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0TDib@@QAE@PAUHBITMAP__@@@Z + 27 10B09387 18 Bytes [00, 00, 00, 00, 00, 01, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [ECX], AL; ADD [EAX], AL; ADD [EDX+0x60000003], CL; ADD EAX, [EAX]; ADD [EAX], AL}
.text KemWnd.dll!?drawTransparent@TDib@@QAEHPAUHDC__@@PBUtagRECT@@K@Z + C 10B0939C 23 Bytes [6F, 8B, 3D, 03, 00, 00, 00, ...]
.text KemWnd.dll!?drawTransparent@TDib@@QAEHPAUHDC__@@PBUtagRECT@@K@Z + 27 10B093B7 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?drawTransparent@TDib@@QAEHPAUHDC__@@PBUtagRECT@@K@Z + 32 10B093C2 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?drawTransparent@TDib@@QAEHPAUHDC__@@PBUtagRECT@@K@Z + 46 10B093D6 7 Bytes [00, 00, 00, 00, 00, 00, 00]
.text KemWnd.dll!?drawTransparent@TDib@@QAEHPAUHDC__@@PBUtagRECT@@K@Z + 4F 10B093DF 24 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + D 10B0952D 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 14 10B09534 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 22 10B09542 16 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 34 10B09554 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 3A 10B0955A 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 41 10B09561 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 48 10B09568 13 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 59 10B09579 27 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 75 10B09595 7 Bytes [00, 00, 00, C7, 8E, 3D, 03]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 7D 10B0959D 45 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + AD 10B095CD 10 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + B9 10B095D9 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + C3 10B095E3 19 Bytes [00, 03, 00, 00, 00, 8C, 03, ...] {ADD [EBX], AL; ADD [EAX], AL; ADD [EBX+EAX+0x0], CL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + D7 10B095F7 45 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 106 10B09626 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 10D 10B0962D 38 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 135 10B09655 8 Bytes [00, 00, 00, D6, 8C, 3D, 03, ...]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 140 10B09660 37 Bytes [0E, 8D, 3D, 03, 00, 00, 00, ...]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 167 10B09687 49 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 199 10B096B9 42 Bytes [00, 00, 00, 9C, 8C, 3D, 03, ...]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 1C5 10B096E5 26 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 1E2 10B09702 13 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 1F0 10B09710 6 Bytes [03, 00, 00, 00, 8C, 03] {ADD EAX, [EAX]; ADD [EAX], AL; MOV WORD [EBX], ES}
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 1F8 10B09718 9 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 203 10B09723 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 20A 10B0972A 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?GetResourceFileFromId@TDib@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@GPA_W@Z + 210 10B09730 154 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?loadResource@TDib@@QAEHPAUHINSTANCE__@@GHH@Z + 8D 10B097CD 3 Bytes [00, 00, 00]
.text KemWnd.dll!?loadResource@TDib@@QAEHPAUHINSTANCE__@@GHH@Z + 91 10B097D1 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?loadResource@TDib@@QAEHPAUHINSTANCE__@@GHH@Z + A3 10B097E3 1 Byte [00]
.text KemWnd.dll!?loadResource@TDib@@QAEHPAUHINSTANCE__@@GHH@Z + A6 10B097E6 5 Bytes [00, 00, 00, 00, 00]
.text KemWnd.dll!?loadResource@TDib@@QAEHPAUHINSTANCE__@@GHH@Z + AC 10B097EC 1 Byte [00]


#10 studiodweller

studiodweller
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 31 May 2010 - 08:36 PM

.text ...
.text KemWnd.dll!??0TDib@@QAE@PAUHINSTANCE__@@GHH@Z 10B09820 89 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0TDib@@QAE@PAUHINSTANCE__@@GHH@Z + 5D 10B0987D 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??0TDib@@QAE@PAUHINSTANCE__@@GHH@Z + 72 10B09892 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??0TDib@@QAE@PAUHINSTANCE__@@GHH@Z + 7B 10B0989B 15 Bytes [00, 00, 00, 00, 00, 01, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [ECX], AL; ADD [EAX], AL; ADD [EBX+EAX+0x57b0000], BL}
.text KemWnd.dll!??0TDib@@QAE@PAUHINSTANCE__@@GHH@Z + 8E 10B098AE 24 Bytes [00, 00, 27, 8C, 3D, 03, 7B, ...]
.text ...
.text KemWnd.dll!??0CTimerClass@@QAE@ABV0@@Z 10B09930 7 Bytes [00, 00, 00, 00, 00, 00, 00]
.text KemWnd.dll!??0CTimerClass@@QAE@ABV0@@Z + 8 10B09938 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??0CTimerClass@@QAE@ABV0@@Z + 15 10B09945 25 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??4CTimerClass@@QAEAAV0@ABV0@@Z + F 10B0995F 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??0CTimerClass@@QAE@XZ + 4 10B09964 7 Bytes [00, 00, 00, 00, 04, 00, 00]
.text KemWnd.dll!??0CTimerClass@@QAE@XZ + F 10B0996F 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?TimerIsStarted@CTimerClass@@IBE_NXZ + 4 10B09974 22 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?TimerIsStarted@CTimerClass@@IBE_NXZ + 1B 10B0998B 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?TimerIsStarted@CTimerClass@@IBE_NXZ + 20 10B09990 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?TimerIsStarted@CTimerClass@@IBE_NXZ + 29 10B09999 16 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?TimerIsStarted@CTimerClass@@IBE_NXZ + 3A 10B099AA 5 Bytes [00, 00, 00, 00, 00]
.text ...
.text KemWnd.dll!?TimerProc_Wrapper@CTimerClass@@CGXPAUHWND__@@IIK@Z + 71 10B0A491 63 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?TimerProc_Wrapper@CTimerClass@@CGXPAUHWND__@@IIK@Z + B2 10B0A4D2 55 Bytes [00, 00, 51, 27, 0B, 03, 00, ...]
.text KemWnd.dll!?TimerProc_Wrapper@CTimerClass@@CGXPAUHWND__@@IIK@Z + EA 10B0A50A 19 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?StopTimer@CTimerClass@@IAEXXZ + E 10B0A51E 22 Bytes [00, 00, 01, 00, 00, 00, EE, ...]
.text KemWnd.dll!?StopTimer@CTimerClass@@IAEXXZ + 25 10B0A535 30 Bytes [00, 00, 00, 98, 27, 0B, 03, ...]
.text KemWnd.dll!??1CTimerClass@@UAE@XZ + 14 10B0A554 19 Bytes [01, 00, 00, 00, 90, 1F, 9F, ...] {ADD [EAX], EAX; ADD [EAX], AL; NOP ; POP DS; LAHF ; ADD EAX, [EAX]; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??1CTimerClass@@UAE@XZ + 2B 10B0A56B 24 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?StartTimer@CTimerClass@@IAEII@Z + 14 10B0A584 20 Bytes [01, 00, 00, 00, 91, 06, 00, ...]
.text KemWnd.dll!?StartTimer@CTimerClass@@IAEII@Z + 2B 10B0A59B 11 Bytes [00, B3, 16, 07, 03, 00, 00, ...]
.text KemWnd.dll!?StartTimer@CTimerClass@@IAEII@Z + 37 10B0A5A7 1 Byte [00]
.text KemWnd.dll!?StartTimer@CTimerClass@@IAEII@Z + 37 10B0A5A7 51 Bytes [00, 00, 00, 00, 00, 05, 65, ...]
.text KemWnd.dll!?StartTimer@CTimerClass@@IAEII@Z + 6B 10B0A5DB 48 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?IsTimerRunning@CTimerWnd@@QAEHXZ + 32 10B0A6B2 9 Bytes [00, 00, 95, 06, 00, 00, 00, ...]
.text KemWnd.dll!?IsTimerRunning@CTimerWnd@@QAEHXZ + 3D 10B0A6BD 10 Bytes [00, 00, 00, 77, B1, 3D, 03, ...] {ADD [EAX], AL; ADD [EDI-0x4f], DH; CMP EAX, 0x3}
.text KemWnd.dll!?IsTimerRunning@CTimerWnd@@QAEHXZ + 48 10B0A6C8 14 Bytes [B3, 16, 07, 03, 00, 00, 00, ...]
.text KemWnd.dll!?IsTimerRunning@CTimerWnd@@QAEHXZ + 58 10B0A6D8 9 Bytes [05, 65, 11, 03, 00, 00, 00, ...] {ADD EAX, 0x31165; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?IsTimerRunning@CTimerWnd@@QAEHXZ + 62 10B0A6E2 30 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?StartTimer@CTimerWnd@@QAEXHP6AXJ@ZJ@Z + 11 10B0A701 25 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?StartTimer@CTimerWnd@@QAEXHP6AXJ@ZJ@Z + 2B 10B0A71B 29 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?KillTimer@CTimerWnd@@QAEXXZ + 1C 10B0A73C 4 Bytes [05, 65, 11, 03]
.text KemWnd.dll!?KillTimer@CTimerWnd@@QAEXXZ + 23 10B0A743 23 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnTimer@CTimerWnd@@QAEXI@Z + C 10B0A75C 2 Bytes [00, 00] {ADD [EAX], AL}
.text KemWnd.dll!?OnTimer@CTimerWnd@@QAEXI@Z + F 10B0A75F 16 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnDestroy@CTimerWnd@@QAEXXZ 10B0A770 31 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?OnDestroy@CTimerWnd@@QAEXXZ + 20 10B0A790 9 Bytes [46, B1, 3D, 03, 00, 00, 00, ...] {INC ESI; MOV CL, 0x3d; ADD EAX, [EAX]; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!?OnDestroy@CTimerWnd@@QAEXXZ + 2B 10B0A79B 24 Bytes [00, 00, 00, 00, 00, 05, 65, ...]
.text KemWnd.dll!??0CAppCommand@@QAE@ABV0@@Z + 4 10B0A7B4 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??0CAppCommand@@QAE@ABV0@@Z + B 10B0A7BB 34 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?ConvertKey@CAppCommand@@SAIW4T_KEYS@@@Z + 10 10B0A7E0 18 Bytes [49, 04, 00, 00, 27, 02, 00, ...]
.text KemWnd.dll!?ConvertKey@CAppCommand@@SAIW4T_KEYS@@@Z + 24 10B0A7F4 4 Bytes [B3, 16, 07, 03]
.text KemWnd.dll!?ConvertKey@CAppCommand@@SAIW4T_KEYS@@@Z + 2B 10B0A7FB 5 Bytes [00, 34, AD, 3D, 03]
.text KemWnd.dll!?ConvertKey@CAppCommand@@SAIW4T_KEYS@@@Z + 31 10B0A801 3 Bytes [00, 00, 00]
.text KemWnd.dll!?ConvertKey@CAppCommand@@SAIW4T_KEYS@@@Z + 37 10B0A807 3 Bytes [00, 00, 00]
.text ...
.text KemWnd.dll!?ConvertKey@CAppCommand@@SAIABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 3E 10B0A98E 31 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?ConvertKey@CAppCommand@@SAIABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 60 10B0A9B0 33 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?ConvertKey@CAppCommand@@SAIABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 82 10B0A9D2 32 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?ConvertKey@CAppCommand@@SAIABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + A4 10B0A9F4 32 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?ConvertKey@CAppCommand@@SAIABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + C6 10B0AA16 65 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!?SendToWnd@CAppCommand@@QAE_NPAUHWND__@@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z + 27 10B0AB67 26 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!?sendAppCommand@CAppCommand@@QAE_NPAUHWND__@@I_N@Z + 13 10B0AB83 55 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text KemWnd.dll!??1AppCommand2k@@UAE@XZ + 1B 10B0ABBB 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text KemWnd.dll!??1AppCommand2k@@UAE@XZ + 20 10B0ABC0 8 Bytes [3C, 0F, 9C, 03, 05, 00, 00, ...]
.text KemWnd.dll!??1AppCommand2k@@UAE@XZ + 29 10B0ABC9 22 Bytes [00, 00, 00, 24, 0F, 97, 03, ...]
.text KemWnd.dll!??1AppCommand2k@@UAE@XZ + 40 10B0ABE0 21 Bytes [00, 00, 00, 00, B8, AA, 9F, ...]
.text KemWnd.dll!??1AppCommand2k@@UAE@XZ + 56 10B0ABF6 17 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text KemWnd.dll!??0CAppCommand@@QAE@XZ + 14 10B0B7A4 100 Bytes [41, 64, 6F, 62, 65, 2F, 41, ...]
.text KemWnd.dll!??0CAppCommand@@QAE@XZ + 7C 10B0B80C 14 Bytes [41, 64, 6F, 62, 65, 2F, 41, ...] {INC ECX; OUTS DX, DWORD FS:[ESI]; BOUND ESP, [EBP+0x2f]; INC ECX; ARPL [EDX+0x6f], SI; BOUND ESP, [ECX+0x74]; DAS }
.text KemWnd.dll!??0CAppCommand@@QAE@XZ + 8B 10B0B81B 47 Bytes [72, 61, 67, 46, 6C, 61, 76, ...]
.text KemWnd.dll!??0CAppCommand@@QAE@XZ + BC 10B0B84C 241 Bytes [AC, 31, AA, 03, 26, 01, 0D, ...]
.text KemWnd.dll!?sendKeystroke@CAppCommand@@QAE_NI@Z + 3E 10B0B93E 451 Bytes [AA, 03, 26, 01, 0D, 03, B4, ...]
.text KemWnd.dll!?SendToWnd@CAppCommand@@UAE_NPAUHWND__@@I_N@Z + 32 10B0BB02 36 Bytes [11, 03, 77, BA, 09, 03, 77, ...]
.text KemWnd.dll!?SendToWnd@CAppCommand@@UAE_NPAUHWND__@@I_N@Z + 57 10B0BB27 229 Bytes [03, 5F, 3F, 3B, 03, 84, C6, ...]
.text KemWnd.dll!?SendToWnd@CAppCommand@@UAE_NPAUHWND__@@I_N@Z + 13D 10B0BC0D 411 Bytes [B0, 13, 03, B3, 16, 07, 03, ...]
.text KemWnd.dll!?Instance@CAppCommand@@SAPAV1@XZ + 59 10B0BDA9 309 Bytes [F8, 3A, 03, 64, F0, 09, 03, ...]
.text KemWnd.dll!?Instance@CAppCommand@@SAPAV1@XZ + 18F 10B0BEDF 493 Bytes [03, 9F, 98, 0C, 03, CF, E7, ...]
.text KemWnd.dll!?Instance@CAppCommand@@SAPAV1@XZ + 37D 10B0C0CD 144 Bytes [FB, 3A, 03, B7, FB, 3A, 03, ...]
.text KemWnd.dll!?Instance@CAppCommand@@SAPAV1@XZ + 40E 10B0C15E 316 Bytes [3B, 03, B3, 16, 07, 03, 05, ...]
.text KemWnd.dll!?Instance@CAppCommand@@SAPAV1@XZ + 54B 10B0C29B 23 Bytes [00, 24, 50, 41, 47, 45, 5F, ...]
.text ...
.text MacroCore.dll!CreateMacro + FFF920C0 10601000 122 Bytes CALL 0F617A55
.text MacroCore.dll!CreateMacro + FFF9213B 1060107B 18 Bytes CALL 1014B58B
.text MacroCore.dll!CreateMacro + FFF9214E 1060108E 66 Bytes CALL 101113E0
.text MacroCore.dll!CreateMacro + FFF92191 106010D1 97 Bytes [89, 45, DC, 8B, 08, 89, 4D, ...]
.text MacroCore.dll!CreateMacro + FFF921F3 10601133 13 Bytes CALL 8DE91523
.text ...
.text MacroCore.dll!?CreateDispatch@IPRPerfectScript@@QAEHPAVCOleException@@@Z + 81 10604B71 53 Bytes [00, 00, B8, 59, 4B, 4F, 03, ...]
.text MacroCore.dll!?CreateDispatch@IPRPerfectScript@@QAEHPAVCOleException@@@Z + B8 10604BA8 22 Bytes CALL 10125D0F
.text MacroCore.dll!?CreateDispatch@IPRPerfectScript@@QAEHPAVCOleException@@@Z + CF 10604BBF 45 Bytes [7B, 16, 03, 53, 8D, 4D, B8, ...]
.text MacroCore.dll!?CreateDispatch@IPRPerfectScript@@QAEHPAVCOleException@@@Z + FD 10604BED 30 Bytes [39, 70, 04, 7E, 2B, 53, 8D, ...]
.text MacroCore.dll!?CreateDispatch@IPRPerfectScript@@QAEHPAVCOleException@@@Z + 11C 10604C0C 31 Bytes [00, FF, 30, FF, 75, D8, FF, ...]
.text ...
.text MacroCore.dll!??0IPRPerfectScript@@QAE@PAUIDispatch@@@Z + 47 106052C7 64 Bytes [85, 78, FF, FF, FF, 8B, 85, ...]
.text MacroCore.dll!??0IPRPerfectScript@@QAE@PAUIDispatch@@@Z + 88 10605308 175 Bytes [2A, 00, 59, 59, 8B, 43, 08, ...]
.text MacroCore.dll!??0IPRPerfectScript@@QAE@PAUIDispatch@@@Z + 138 106053B8 187 Bytes [D0, 59, 59, EB, 15, F6, 85, ...]
.text MacroCore.dll!??0IPRPerfectScript@@QAE@PAUIDispatch@@@Z + 1F4 10605474 1 Byte [08]
.text MacroCore.dll!??0IPRPerfectScript@@QAE@PAUIDispatch@@@Z + 1F4 10605474 90 Bytes [08, 89, 4D, D0, 8D, 4D, D0, ...]
.text ...
.text MacroCore.dll!?CreateDispatch@IQPPerfectScript@@QAEHPAVCOleException@@@Z + B 106056EB 64 Bytes [EB, EF, FE, FF, C6, 45, FC, ...]
.text MacroCore.dll!?CreateDispatch@IQPPerfectScript@@QAEHPAVCOleException@@@Z + 4C 1060572C 31 Bytes [F8, C1, E7, 03, 57, E8, 0A, ...]
.text MacroCore.dll!?CreateDispatch@IQPPerfectScript@@QAEHPAVCOleException@@@Z + 6C 1060574C 7 Bytes [00, 3B, C7, 0F, 84, C9, 00]
.text MacroCore.dll!?CreateDispatch@IQPPerfectScript@@QAEHPAVCOleException@@@Z + 74 10605754 40 Bytes [00, 89, 7D, 08, 8B, 45, 08, ...]
.text MacroCore.dll!?CreateDispatch@IQPPerfectScript@@QAEHPAVCOleException@@@Z + 9D 1060577D 52 Bytes [FF, 75, 08, 8B, CB, 75, 19, ...]
.text ...
.text MacroCore.dll!??0IPRPerfectScript@@QAE@ABV0@@Z + 45 10605BC5 57 Bytes [4D, D8, 83, 4D, FC, FF, 89, ...]
.text MacroCore.dll!??0IPRPerfectScript@@QAE@ABV0@@Z + 7F 10605BFF 20 Bytes [C7, 48, F7, D8, 1B, C0, 83, ...]
.text MacroCore.dll!??0IPRPerfectScript@@QAE@ABV0@@Z + 94 10605C14 67 Bytes [C7, EB, 12, 83, F8, 01, 75, ...]
.text MacroCore.dll!??0IPRPerfectScript@@QAE@ABV0@@Z + D8 10605C58 29 Bytes CALL 1028B796
.text MacroCore.dll!??0IPRPerfectScript@@QAE@ABV0@@Z + F6 10605C76 23 Bytes CALL 05DC44D1
.text ...
.text MacroCore.dll!??4IPRPerfectScript@@QAEAAV0@ABV0@@Z + 13 10605EF3 28 Bytes [39, 4D, 40, 74, 1E, 8B, 45, ...]
.text MacroCore.dll!??4IPRPerfectScript@@QAEAAV0@ABV0@@Z + 30 10605F10 15 Bytes [83, 65, 4C, 00, 59, 59, 8D, ...] {AND DWORD [EBP+0x4c], 0x0; POP ECX; POP ECX; LEA ECX, [EBP+0x3c]; CALL 0xffffffffffc057eb; PUSH EDI}
.text MacroCore.dll!??4IPRPerfectScript@@QAEAAV0@ABV0@@Z + 40 10605F20 60 Bytes CALL 101F96FE
.text MacroCore.dll!??4IPRPerfectScript@@QAEAAV0@ABV0@@Z + 7D 10605F5D 113 Bytes [00, 83, 65, 4C, 00, 59, 59, ...]
.text MacroCore.dll!??4IPRPerfectScript@@QAEAAV0@ABV0@@Z + EF 10605FCF 116 Bytes JMP 106060F7 \Program Files\Logitech\SetPoint\Macros\MacroCore.dll (Logitech SetPoint User Interface (UNICODE)/Logitech, Inc.)
.text ...
.text MacroCore.dll!??0IPRPerfectScript@@QAE@XZ + 12 10606492 12 Bytes CALL 1028A583
.text MacroCore.dll!??0IPRPerfectScript@@QAE@XZ + 1F 1060649F 124 Bytes CALL 10127A8E
.text MacroCore.dll!??0IPRPerfectScript@@QAE@XZ + 9C 1060651C 47 Bytes CALL 106043BE \Program Files\Logitech\SetPoint\Macros\MacroCore.dll (Logitech SetPoint User Interface (UNICODE)/Logitech, Inc.)
.text MacroCore.dll!??0IPRPerfectScript@@QAE@XZ + CC 1060654C 91 Bytes [40, 20, EB, 02, 33, C0, 51, ...]
.text MacroCore.dll!??0IPRPerfectScript@@QAE@XZ + 128 106065A8 110 Bytes [FF, 83, FE, 01, 75, 11, 8B, ...]
.text ...
.text MacroCore.dll!_KeyboardFuncLL@12 + 86 1060CE06 4 Bytes [40, 0C, 33, FF]
.text MacroCore.dll!_KeyboardFuncLL@12 + 8D 1060CE0D 11 Bytes CALL 101ABA5A
.text MacroCore.dll!_KeyboardFuncLL@12 + 99 1060CE19 50 Bytes [92, A4, 00, 00, 00, 66, 85, ...]
.text MacroCore.dll!_KeyboardFuncLL@12 + CC 1060CE4C 26 Bytes [06, 6A, 01, 8B, CE, FF, 50, ...]
.text MacroCore.dll!_MouseFuncLL@12 + 7 1060CE67 68 Bytes [2E, 07, BA, FF, 8B, C8, E8, ...]
.text MacroCore.dll!_MouseFuncLL@12 + 4C 1060CEAC 83 Bytes [24, 08, FF, 71, 14, E8, 7D, ...]
.text MacroCore.dll!_MouseFuncLL@12 + A0 1060CF00 102 Bytes [D9, 8B, 4B, 0C, 8B, 01, 8B, ...]
.text MacroCore.dll!_MouseFuncLL@12 + 107 1060CF67 24 Bytes [30, B8, C5, B3, 89, 03, E8, ...]
.text MacroCore.dll!_MouseFuncLL@12 + 122 1060CF82 76 Bytes [45, F0, 50, 8D, 45, EC, 50, ...]
.text ...
.text MacroCore.dll!SetExclusiveHook + 60 1060D070 4 Bytes [FF, 90, D0, 00]
.text MacroCore.dll!SetExclusiveHook + 66 1060D076 271 Bytes [C2, 08, 00, 8B, 01, FF, A0, ...]
.text MacroCore.dll!SetExclusiveHook + 176 1060D186 143 Bytes [65, FC, 00, 6A, 00, 57, E8, ...]
.text MacroCore.dll!SetExclusiveHook + 206 1060D216 164 Bytes [45, F0, 3B, 45, E4, 72, 87, ...]
.text MacroCore.dll!SetExclusiveHook + 2AB 1060D2BB 31 Bytes [83, 7D, 0C, 00, 74, 0B, FF, ...]
.text ...
.text MacroCore.dll!??1IPRPerfectScript@@QAE@XZ + 34 10664754 212 Bytes [85, 9C, 00, 00, 00, 89, 45, ...]
.text MacroCore.dll!??1IPRPerfectScript@@QAE@XZ + 109 10664829 141 Bytes [83, 4D, FC, FF, 53, 6A, 01, ...]
.text MacroCore.dll!??1IPRPerfectScript@@QAE@XZ + 197 106648B7 116 Bytes [8E, 68, 02, 00, 00, 8B, 01, ...]
.text MacroCore.dll!??1IPRPerfectScript@@QAE@XZ + 20C 1066492C 124 Bytes [FE, FF, FF, 59, 53, 8D, 4D, ...]
.text MacroCore.dll!??1IPRPerfectScript@@QAE@XZ + 289 106649A9 296 Bytes CALL 101F96FD
.text ...
.text MacroCore.dll!Initialize + 17 1066EEE7 3 Bytes CALL 101113E4
.text MacroCore.dll!Initialize + 1B 1066EEEB 17 Bytes CALL 1022B413
.text MacroCore.dll!Initialize + 2D 1066EEFD 156 Bytes [3B, F7, 0F, 84, C6, 00, 00, ...]
.text MacroCore.dll!CreateMacro + 5A 1066EF9A 415 Bytes CALL 101B0DEC
.text MacroCore.dll!CreateMacro + 1FA 1066F13A 139 Bytes [F8, 01, 00, 00, 6A, 00, 56, ...]
.text MacroCore.dll!CreateMacro + 286 1066F1C6 845 Bytes CALL 1014F1D3
.text MacroCore.dll!CreateMacro + 5D4 1066F514 52 Bytes CALL BAC5A301
.text MacroCore.dll!CreateMacro + 609 1066F549 48 Bytes [8D, 4D, E0, C6, 45, FC, 05, ...]
.text ...
.text KGame.dll!??_7CGameManager@@6B@ + FFFF8A0C 10E01000 263 Bytes [20, 68, 65, 69, 67, 68, 74, ...]
.text KGame.dll!?SetAsUserDefined@CGameDefinition@@QAEXH@Z + 18 10E01108 18 Bytes [74, 68, 28, 7A, 73, 74, 72, ...]
.text KGame.dll!?SetAsUserDefined@CGameDefinition@@QAEXH@Z + 2B 10E0111B 690 Bytes [6F, 63, 4F, 70, 74, 42, 69, ...]
.text KGame.dll!?SetName@CGameDefinition@@QAEXABV?$CStdStr@_W@@@Z + 17E 10E013CE 168 Bytes [61, 6E, 65, 6C, 57, 69, 64, ...]
.text KGame.dll!?SetName@CGameDefinition@@QAEXABV?$CStdStr@_W@@@Z + 227 10E01477 21 Bytes [28, 6E, 61, 6D, 65, 3A, 20, ...]
.text KGame.dll!?SetName@CGameDefinition@@QAEXABV?$CStdStr@_W@@@Z + 23D 10E0148D 205 Bytes [46, 4F, 70, 74, 69, 6D, 69, ...]
.text KGame.dll!?Match@CGameDefinition@@QAEHAAV?$list@V?$CStdStr@_W@@V?$allocator@V?$CStdStr@_W@@@std@@@std@@@Z + 7B 10E0155B 492 Bytes [24, 2F, 44, 69, 61, 6C, 6F, ...]
.text KGame.dll!?Match@CGameDefinition@@QAEHAAV?$list@V?$CStdStr@_W@@V?$allocator@V?$CStdStr@_W@@@std@@@std@@@Z + 268 10E01748 110 Bytes [69, 61, 6C, 6F, 67, 73, 2F, ...]
.text KGame.dll!?Match@CGameDefinition@@QAEHAAV?$list@V?$CStdStr@_W@@V?$allocator@V?$CStdStr@_W@@@std@@@std@@@Z + 2D7 10E017B7 931 Bytes [69, 64, 74, 68, 29, 20, 7B, ...]
.text KGame.dll!??4CGameDefinition@@QAEAAV0@ABV0@@Z + 2B 10E01B5B 633 Bytes [65, 72, 20, 28, 09, 61, 6C, ...]
.text KGame.dll!?_Xlen@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@KAXXZ + 55 10E01DD5 191 Bytes [24, 2F, 44, 69, 61, 6C, 6F, ...]
.text KGame.dll!?_Xinvarg@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@KAXXZ + 55 10E01E95 270 Bytes [24, 2F, 44, 69, 61, 6C, 6F, ...]
.text KGame.dll!?_Xinvarg@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@KAXXZ + 164 10E01FA4 245 Bytes [6E, 67, 73, 27, 29, 2C, 0D, ...]
.text KGame.dll!?_Xinvarg@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@KAXXZ + 25A 10E0209A 579 Bytes [61, 76, 53, 65, 63, 75, 72, ...]
.text KGame.dll!?_Xinvarg@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@KAXXZ + 49E 10E022DE 196 Bytes [0A, 67, 4C, 61, 62, 65, 6C, ...]
.text KGame.dll!?_Xinvarg@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@KAXXZ + 563 10E023A3 375 Bytes [3D, 20, 7A, 73, 74, 72, 69, ...]
.text KGame.dll!??0?$_Vector_val@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@IAE@V?$allocator@VCGameDefinition@@@1@@Z + FB 10E0251B 64 Bytes [24, 2F, 44, 69, 61, 6C, 6F, ...]
.text KGame.dll!??0?$_Vector_val@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@IAE@V?$allocator@VCGameDefinition@@@1@@Z + 13C 10E0255C 15 Bytes [74, 68, 28, 7A, 73, 74, 72, ...]
.text KGame.dll!??0?$_Vector_val@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@IAE@V?$allocator@VCGameDefinition@@@1@@Z + 14C 10E0256C 43 Bytes [2F, 44, 69, 61, 6C, 6F, 67, ...]
.text KGame.dll!??0?$_Vector_val@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@IAE@V?$allocator@VCGameDefinition@@@1@@Z + 178 10E02598 338 Bytes [63, 6F, 6E, 64, 4D, 65, 73, ...]
.text KGame.dll!?DefaultFileName@CGameList@@AAEAAV?$CStdStr@_W@@XZ + 9B 10E026EB 335 Bytes [68, 2C, 20, 7A, 73, 74, 72, ...]
.text KGame.dll!?back@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAEAAVCGameDefinition@@XZ + 2B 10E0283B 60 Bytes [69, 6F, 6E, 73, 27, 2C, 20, ...]
.text KGame.dll!?_Buy@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@IAE_NI@Z + 18 10E02878 218 Bytes [63, 68, 69, 6C, 64, 72, 65, ...]
.text KGame.dll!?_Buy@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@IAE_NI@Z + F3 10E02953 47 Bytes [69, 63, 5F, 74, 65, 78, 74, ...]
.text KGame.dll!?_Buy@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@IAE_NI@Z + 123 10E02983 65 Bytes [72, 69, 74, 79, 2F, 50, 65, ...]
.text KGame.dll!?_Buy@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@IAE_NI@Z + 165 10E029C5 249 Bytes [69, 64, 74, 68, 20, 2D, 20, ...]
.text KGame.dll!?rend@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAE?AV?$reverse_iterator@V?$_Vector_iterator@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@@2@XZ + F 10E02ABF 684 Bytes [65, 6D, 5F, 69, 64, 3A, 20, ...]
.text KGame.dll!?_Tidy@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@IAEXXZ + C 10E02D6C 246 Bytes [69, 64, 74, 68, 2C, 20, 77, ...]
.text KGame.dll!?_Tidy@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@IAEXXZ + 103 10E02E63 32 Bytes [61, 62, 65, 6C, 50, 65, 72, ...]
.text KGame.dll!?_Tidy@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@IAEXXZ + 124 10E02E84 193 Bytes [3B, 0D, 0A, 20, 20, 20, 20, ...]
.text KGame.dll!?pop_back@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAEXXZ + 26 10E02F46 92 Bytes [61, 6C, 69, 67, 6E, 5F, 66, ...]
.text KGame.dll!?pop_back@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAEXXZ + 83 10E02FA3 1511 Bytes [65, 78, 74, 28, 6E, 61, 6D, ...]
.text KGame.dll!?SaveUserGameDefintions@CGameList@@AAEXABV?$CStdStr@_W@@@Z + AB 10E0358B 95 Bytes [69, 67, 6E, 5F, 72, 6F, 77, ...]
.text KGame.dll!?SaveUserGameDefintions@CGameList@@AAEXABV?$CStdStr@_W@@@Z + 10B 10E035EB 847 Bytes [0D, 0A, 20, 20, 20, 20, 09, ...]
.text KGame.dll!?FindApplicationInformationMatching@CGameList@@AAEHAAVCProcessInformation@@@Z + 14B 10E0393B 685 Bytes [65, 78, 74, 28, 69, 74, 65, ...]
.text KGame.dll!?ProcessActivation@CGameList@@QAEHKAAVCProcessInformation@@@Z + F9 10E03BE9 223 Bytes [69, 73, 74, 57, 69, 64, 74, ...]
.text KGame.dll!?ProcessActivation@CGameList@@QAEHKAAVCProcessInformation@@@Z + 1D9 10E03CC9 60 Bytes [68, 3D, 6D, 61, 78, 28, 7A, ...]
.text KGame.dll!?ProcessActivation@CGameList@@QAEHKAAVCProcessInformation@@@Z + 216 10E03D06 21 Bytes [69, 6E, 67, 5F, 77, 69, 64, ...]
.text KGame.dll!?ProcessActivation@CGameList@@QAEHKAAVCProcessInformation@@@Z + 22C 10E03D1C 878 Bytes [24, 61, 76, 41, 6C, 6C, 27, ...]
.text KGame.dll!?erase@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAE?AV?$_Vector_iterator@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@2@V32@0@Z + B 10E0408B 5 Bytes [61, 62, 3A, 20, 27] {POPA ; BOUND EDI, [EDX]; AND [EDI], AH}
.text KGame.dll!?erase@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAE?AV?$_Vector_iterator@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@2@V32@0@Z + 11 10E04091 30 Bytes [79, 70, 65, 27, 29, 3B, 0D, ...]
.text KGame.dll!?erase@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAE?AV?$_Vector_iterator@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@2@V32@0@Z + 30 10E040B0 9 Bytes [79, 70, 65, 27, 2C, 20, 77, ...]
.text KGame.dll!?erase@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAE?AV?$_Vector_iterator@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@2@V32@0@Z + 3A 10E040BA 4 Bytes [68, 3A, 20, 67]
.text KGame.dll!?erase@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAE?AV?$_Vector_iterator@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@2@V32@0@Z + 3F 10E040BF 132 Bytes [6F, 70, 75, 70, 57, 69, 64, ...]
.text KGame.dll!?clear@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAEXXZ + 44 10E04144 136 Bytes [24, 2F, 44, 69, 61, 6C, 6F, ...]
.text KGame.dll!??1CGameList@@UAE@XZ + 2D 10E041CD 157 Bytes [6E, 65, 78, 74, 5F, 74, 61, ...]
.text KGame.dll!??1CGameList@@UAE@XZ + CB 10E0426B 176 Bytes [20, 6E, 61, 6D, 65, 3A, 20, ...]
.text KGame.dll!?RemoveGameDefinition@CGameList@@QAEXH@Z + 5C 10E0431C 53 Bytes [69, 65, 77, 28, 61, 6C, 69, ...]
.text KGame.dll!?RemoveGameDefinition@CGameList@@QAEXH@Z + 92 10E04352 946 Bytes [28, 61, 6C, 69, 67, 6E, 5F, ...]
.text KGame.dll!?_Ufill@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@IAEPAVCGameDefinition@@PAV3@IABV3@@Z + 85 10E04705 106 Bytes [09, 09, 65, 64, 69, 74, 5F, ...]
.text KGame.dll!?_Construct_n@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAEXIABVCGameDefinition@@@Z + 50 10E04770 476 Bytes [67, 27, 2C, 20, 6E, 61, 6D, ...]
.text KGame.dll!?_Insert_n@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@IAEXV?$_Vector_iterator@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@2@IABVCGameDefinition@@@Z + 2D 10E0494D 264 Bytes [6D, 5F, 69, 64, 3A, 20, 27, ...]
.text KGame.dll!?_Insert_n@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@IAEXV?$_Vector_iterator@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@2@IABVCGameDefinition@@@Z + 136 10E04A56 1033 Bytes [27, 72, 67, 72, 70, 27, 2C, ...]
.text KGame.dll!?insert@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAE?AV?$_Vector_iterator@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@2@V32@ABVCGameDefinition@@@Z + 80 10E04E60 160 Bytes [72, 69, 6E, 67, 5F, 77, 69, ...]
.text KGame.dll!?_Assign_n@?$vector@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@IAEXIABVCGameDefinition@@@Z + 51 10E04F01 211 Bytes [61, 76, 4C, 69, 6E, 6B, 42, ...]
.text KGame.dll!?AddGameDefinitions@CGameList@@AAEXAAV?$CStdStr@_W@@H@Z + 55 10E04FD5 136 Bytes [24, 24, 2F, 44, 69, 61, 6C, ...]
.text KGame.dll!?AddGameDefinitions@CGameList@@AAEXAAV?$CStdStr@_W@@H@Z + DE 10E0505E 474 Bytes [24, 2F, 44, 69, 61, 6C, 6F, ...]
.text KGame.dll!?AddGameDefinitions@CGameList@@AAEXAAV?$CStdStr@_W@@H@Z + 2B9 10E05239 21 Bytes [72, 69, 6E, 67, 5F, 77, 69, ...]
.text KGame.dll!?AddGameDefinitions@CGameList@@AAEXAAV?$CStdStr@_W@@H@Z + 2CF 10E0524F 525 Bytes [24, 24, 61, 76, 41, 63, 74, ...]
.text KGame.dll!?AddGameDefinition@CGameList@@QAEXABV?$CStdStr@_W@@AAV?$list@V?$CStdStr@_W@@V?$allocator@V?$CStdStr@_W@@@std@@@std@@H@Z + 12D 10E0545D 1029 Bytes [29, 0D, 0A, 09, 09, 09, 09, ...]
.text KGame.dll!?AddGameDefinition@CGameList@@QAEXABV?$CStdStr@_W@@H@Z + 263 10E05863 642 Bytes [61, 6D, 65, 3A, 20, 67, 57, ...]
.text KGame.dll!?AddAppAsGame@CGameManager@@UAEXPB_W@Z + 6 10E05AE6 484 Bytes [76, 69, 65, 77, 28, 61, 6C, ...]
.text KGame.dll!??1CGameManager@@UAE@XZ + DB 10E05CCB 252 Bytes [09, 7B, 0D, 0A, 09, 09, 09, ...]
.text KGame.dll!??1CGameManager@@UAE@XZ + 1D8 10E05DC8 18 Bytes [3A, 20, 27, 72, 67, 72, 70, ...]
.text KGame.dll!??1CGameManager@@UAE@XZ + 1EB 10E05DDB 662 Bytes [24, 2F, 44, 69, 61, 6C, 6F, ...]
.text KGame.dll!??1CGameManager@@UAE@XZ + 482 10E06072 10 Bytes [0D, 0A, 09, 09, 09, 09, 09, ...] {OR EAX, 0x909090a; OR [ECX], ECX; BOUND ESI, [EBP+0x74]}
.text KGame.dll!??1CGameManager@@UAE@XZ + 48D 10E0607D 298 Bytes [6F, 6E, 28, 09, 69, 74, 65, ...]
.text ...
.text KGame.dll!??_F?$_Vector_val@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAEXXZ + 5C 10E0639C 42 Bytes [61, 76, 46, 69, 74, 57, 69, ...]
.text KGame.dll!??_F?$_Vector_val@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAEXXZ + 87 10E063C7 508 Bytes [61, 76, 46, 69, 74, 56, 69, ...]
.text KGame.dll!??_F?$_Vector_val@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAEXXZ + 284 10E065C4 42 Bytes [74, 68, 28, 29, 20, 2A, 20, ...]
.text KGame.dll!??_F?$_Vector_val@VCGameDefinition@@V?$allocator@VCGameDefinition@@@std@@@std@@QAEXXZ + 2AF 10E065EF 92 Bytes [7A, 73, 74, 72, 69, 6E, 67, ...]
.text KGame.dll!GameManager + 4C 10E0664C 488 Bytes [2F, 44, 69, 61, 6C, 6F, 67, ...]
.text KGame.dll!GameManager + 235 10E06835 354 Bytes [6F, 56, 69, 65, 77, 4F, 62, ...]
.text KGame.dll!GameManager + 398 10E06998 320 Bytes [77, 2F, 44, 6F, 63, 75, 6D, ...]
.text KGame.dll!GameManager + 4D9 10E06AD9 11 Bytes [27, 2C, 20, 6E, 61, 6D, 65, ...]
.text KGame.dll!GameManager + 4E5 10E06AE5 376 Bytes [24, 2F, 44, 69, 61, 6C, 6F, ...]
.text ...
.text GameHook.dll!?UnInstallGamingHook@@YAHXZ + FFFFFF60 10D01000 48 Bytes [40, 40, 40, 40, 24, 30, 41, ...]
.text GameHook.dll!?UnInstallGamingHook@@YAHXZ + FFFFFF91 10D01031 307 Bytes [00, 00, 00, 2E, 3F, 41, 55, ...]
.text GameHook.dll!?UnInstallGamingHook@@YAHXZ + C5 10D01165 159 Bytes [00, 00, 00, 2E, 3F, 41, 56, ...]
.text GameHook.dll!?UnInstallGamingHook@@YAHXZ + 165 10D01205 322 Bytes [00, 00, 00, 2E, 3F, 41, 56, ...]
.text GameHook.dll!?UnInstallGamingHook@@YAHXZ + 2A8 10D01348 3 Bytes [2E, 3F, 41]
.text ...
.text SetPointCOMWMP9.dll!DllUnregisterServer + FFFF0420 11201000 18 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text SetPointCOMWMP9.dll!DllUnregisterServer + FFFF0433 11201013 65 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text SetPointCOMWMP9.dll!DllUnregisterServer + FFFF0475 11201055 1 Byte [00]
.text SetPointCOMWMP9.dll!DllUnregisterServer + FFFF0475 11201055 24 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text SetPointCOMWMP9.dll!DllUnregisterServer + FFFF048F 1120106F 1 Byte [00]
.text ...
.text SetPointCOMWMP9.dll!DllCanUnloadNow + 26 1120FCA6 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text SetPointCOMWMP9.dll!DllCanUnloadNow + 34 1120FCB4 5 Bytes [00, 00, 00, 00, 00]
.text SetPointCOMWMP9.dll!DllCanUnloadNow + 3B 1120FCBB 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text SetPointCOMWMP9.dll!DllCanUnloadNow + 45 1120FCC5 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text SetPointCOMWMP9.dll!DllCanUnloadNow + 4D 1120FCCD 6 Bytes [00, 00, 00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text SetPointCOMWMP9.dll!DllGetClassObject + 1C 11210A9C 23 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text SetPointCOMWMP9.dll!DllGetClassObject + 34 11210AB4 1 Byte [00]
.text SetPointCOMWMP9.dll!DllGetClassObject + 37 11210AB7 24 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text SetPointCOMWMP9.dll!DllGetClassObject + 50 11210AD0 15 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text SetPointCOMWMP9.dll!DllGetClassObject + 63 11210AE3 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text SetPointCOMWMP9.dll!DllUnregisterServer + 2 11210BE2 82 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text SetPointCOMWMP9.dll!DllUnregisterServer + 56 11210C36 61 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text SetPointCOMWMP9.dll!DllUnregisterServer + 95 11210C75 12 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text SetPointCOMWMP9.dll!DllUnregisterServer + A4 11210C84 24 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text SetPointCOMWMP9.dll!DllUnregisterServer + BF 11210C9F 60 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text ...
.text SetPointCOMMM9.dll!DllUnregisterServer + FFFEE470 11101000 402 Bytes [1E, 48, 89, 62, 60, A0, 2D, ...]
.text SetPointCOMMM9.dll!DllUnregisterServer + FFFEE603 11101193 21 Bytes [F1, C9, FF, 87, C5, 3F, 2E, ...]
.text SetPointCOMMM9.dll!DllUnregisterServer + FFFEE619 111011A9 308 Bytes [00, 00, 01, 00, 00, 00, 16, ...]
.text SetPointCOMMM9.dll!DllUnregisterServer + FFFEE74F 111012DF 1 Byte [10]
.text SetPointCOMMM9.dll!DllUnregisterServer + FFFEE752 111012E2 131 Bytes [00, 20, 00, 00, 00, 61, 00, ...]
.text ...
.text SetPointCOMMM9.dll!DllCanUnloadNow + 7E 11111CDE 114 Bytes [00, 00, A5, 30, D3, 30, E6, ...]
.text SetPointCOMMM9.dll!DllCanUnloadNow + F1 11111D51 6 Bytes [90, 19, 00, 74, 00, 00]
.text SetPointCOMMM9.dll!DllCanUnloadNow + F8 11111D58 114 Bytes [10, 30, 20, 30, 2A, 30, C9, ...]
.text SetPointCOMMM9.dll!DllCanUnloadNow + 16C 11111DCC 547 Bytes [36, 30, A5, 30, 6A, 32, 82, ...]
.text SetPointCOMMM9.dll!DllCanUnloadNow + 390 11111FF0 489 Bytes [04, 30, 12, 30, 2E, 30, 46, ...]
.text ...
.text SetPointCOMMM9.dll!DllGetClassObject + C4 11112AF4 319 Bytes [00, E0, 1A, 00, 40, 00, 00, ...]
.text SetPointCOMMM9.dll!DllUnregisterServer + A4 11112C34 46 Bytes [94, 00, 00, 00, 2D, 30, 34, ...]
.text SetPointCOMMM9.dll!DllUnregisterServer + D3 11112C63 255 Bytes [34, 37, 35, 9B, 35, 29, 36, ...]
.text SetPointCOMMM9.dll!DllUnregisterServer + 1D3 11112D63 211 Bytes [00, 00, 30, 1B, 00, 00, 01, ...]
.text SetPointCOMMM9.dll!DllUnregisterServer + 2A7 11112E37 281 Bytes [3C, DE, 3C, F9, 3C, 28, 3D, ...]
.text SetPointCOMMM9.dll!DllUnregisterServer + 3C1 11112F51 105 Bytes [34, 27, 35, 4E, 35, 3F, 36, ...]
.text ...
.text LCabHandler.dll!??_7CCabinetExtractor@@6B@ + FFFEAC7C 10A01000 23 Bytes [FC, 8B, 45, FC, 50, 8B, 8D, ...]
.text LCabHandler.dll!??_7CCabinetExtractor@@6B@ + FFFEAC94 10A01018 54 Bytes [55, 0C, 83, BA, 68, 02, 00, ...]
.text LCabHandler.dll!??_7CCabinetExtractor@@6B@ + FFFEACCB 10A0104F 29 Bytes [55, 0C, 8B, 82, 78, 03, 00, ...]
.text LCabHandler.dll!??_7CCabinetExtractor@@6B@ + FFFEACE9 10A0106D 8 Bytes [00, 83, C1, 10, 51, E8, E5, ...] {ADD [EBX-0x17aeef3f], AL; IN EAX, 0x16}
.text LCabHandler.dll!??_7CCabinetExtractor@@6B@ + FFFEACF3 10A01077 2 Bytes [83, C4]
.text ...
.text LCabHandler.dll!?GetStatus@CCabinetBase@@QBEHXZ + 11 10A01B01 15 Bytes [8B, 85, D8, F7, FF, FF, 33, ...] {MOV EAX, [EBP-0x828]; XOR ECX, ECX; MOV CL, [EDX+EAX+0x8]; MOV EDX, [EBP-0x8]}
.text LCabHandler.dll!?GetErrorCode@CCabinetBase@@QBEHXZ + 1 10A01B11 41 Bytes [82, 04, 04, 00, 00, 8B, 95, ...]
.text LCabHandler.dll!??1CCabinetBase@@QAE@XZ + C 10A01B3C 37 Bytes [8B, 45, FC, 8B, 88, 04, 04, ...]
.text LCabHandler.dll!??1CCabinetBase@@QAE@XZ + 33 10A01B63 45 Bytes [0F, BF, 51, 02, 33, C0, 83, ...]
.text LCabHandler.dll!?ReserveHeader@CCabinetBuilder@@QAEXI@Z + 1 10A01B91 31 Bytes [95, D4, F7, FF, FF, 83, C2, ...]
.text LCabHandler.dll!?ReserveData@CCabinetBuilder@@QAEXI@Z + 1 10A01BB1 2 Bytes [91, 04]
.text LCabHandler.dll!?ReserveData@CCabinetBuilder@@QAEXI@Z + 4 10A01BB4 7 Bytes [00, 00, 8B, 45, F8, 8B, 88]
.text LCabHandler.dll!?ReserveData@CCabinetBuilder@@QAEXI@Z + C 10A01BBC 242 Bytes [04, 00, 00, 8B, 85, D4, F7, ...]
.text LCabHandler.dll!?NotifyFilePlacedProc@CCabinetBuilder@@MBEP6AHPAUCCAB@@PADJHPAX@ZXZ + 2F 10A01CAF 186 Bytes [00, 83, C1, 08, 51, 8B, 55, ...]
.text LCabHandler.dll!?NotifyProgressProc@CCabinetExtractor@@MBEP6AHW4FDINOTIFICATIONTYPE@@PAUFDINOTIFICATION@@@ZXZ + 1A 10A01D6A 67 Bytes [4D, 0C, 8B, 55, FC, 89, 54, ...]
.text LCabHandler.dll!?NotifyProgressProc@CCabinetExtractor@@MBEP6AHW4FDINOTIFICATIONTYPE@@PAUFDINOTIFICATION@@@ZXZ + 5E 10A01DAE 184 Bytes [02, 06, 06, 06, 00, 05, 05, ...]
.text LCabHandler.dll!?NotifyProgressProc@CCabinetExtractor@@MBEP6AHW4FDINOTIFICATIONTYPE@@PAUFDINOTIFICATION@@@ZXZ + 117 10A01E67 178 Bytes [C0, 01, 89, 45, FC, 83, 7D, ...]
.text LCabHandler.dll!?NotifyProgressProc@CCabinetExtractor@@MBEP6AHW4FDINOTIFICATIONTYPE@@PAUFDINOTIFICATION@@@ZXZ + 1CB 10A01F1B 106 Bytes [83, C4, 08, 89, 45, 10, EB, ...]
.text LCabHandler.dll!?NotifyProgressProc@CCabinetExtractor@@MBEP6AHW4FDINOTIFICATIONTYPE@@PAUFDINOTIFICATION@@@ZXZ + 236 10A01F86 27 Bytes JMP 10A0241D \Program Files\Logitech\SetPoint\LCabHandler.dll (Handlers Cab files with device files (UNICODE)/Logitech, Inc.)
.text ...
.text LCabHandler.dll!CabFileCreator + 43 10A02223 147 Bytes [00, 8B, 45, 0C, 0F, BF, 48, ...]
.text LCabHandler.dll!CabFileCreator + D7 10A022B7 10 Bytes CALL 10A16EBB \Program Files\Logitech\SetPoint\LCabHandler.dll (Handlers Cab files with device files (UNICODE)/Logitech, Inc.)
.text LCabHandler.dll!CabFileCreator + E2 10A022C2 18 Bytes CALL 10A17394 \Program Files\Logitech\SetPoint\LCabHandler.dll (Handlers Cab files with device files (UNICODE)/Logitech, Inc.)
.text LCabHandler.dll!CabFileCreator + F5 10A022D5 38 Bytes [00, 8D, 45, B8, 50, 8D, 4D, ...]
.text LCabHandler.dll!CabFileCreator + 11D 10A022FD 25 Bytes [00, 00, EB, 09, 8B, 45, 84, ...]
.text ...
.text LCabHandler.dll!??0CCabinetBase@@QAE@XZ + 5 10A023F5 7 Bytes JMP F8F22529
.text LCabHandler.dll!??0CCabinetBase@@QAE@XZ + D 10A023FD 101 Bytes [00, 83, C4, 08, 89, 45, 10, ...]
.text LCabHandler.dll!??0CCabinetBase@@QAE@XZ + 73 10A02463 1 Byte [40]
.text LCabHandler.dll!??0CCabinetBase@@QAE@XZ + 76 10A02466 22 Bytes [85, D2, 75, 1A, 8B, 45, 14, ...]
.text LCabHandler.dll!??0CCabinetBase@@QAE@ABV0@@Z + D 10A0247D 39 Bytes [00, 00, 83, C4, 10, EB, 31, ...]
.text LCabHandler.dll!??0CCabinetBase@@QAE@ABV0@@Z + 35 10A024A5 2 Bytes [4D, 14]
.text LCabHandler.dll!??0CCabinetBase@@QAE@ABV0@@Z + 38 10A024A8 5 Bytes [55, FC, 83, C2, 01] {PUSH EBP; CLD ; ADD EDX, 0x1}
.text LCabHandler.dll!??0CCabinetBase@@QAE@ABV0@@Z + 3E 10A024AE 24 Bytes [55, FC, EB, D8, 8B, 45, 14, ...]
.text LCabHandler.dll!??0CCabinetBase@@QAE@ABV0@@Z + 57 10A024C7 3 Bytes [45, F8, 00]
.text ...
.text LCabHandler.dll!??4CCabinetBase@@QAEAAV0@ABV0@@Z + 55 10A02545 8 Bytes [4D, F8, 83, C1, 01, 89, 4D, ...] {DEC EBP; CLC ; ADD ECX, 0x1; MOV [EBP-0x8], ECX}
.text LCabHandler.dll!??4CCabinetBase@@QAEAAV0@ABV0@@Z + 5E 10A0254E 106 Bytes [55, FC, 83, C2, 01, 89, 55, ...]
.text LCabHandler.dll!??0CCabinetBuilder@@QAE@ABV0@@Z + 49 10A025B9 61 Bytes [52, FF, 15, C8, F9, 96, 03, ...]
.text LCabHandler.dll!??0CCabinetBuilder@@QAE@ABV0@@Z + 88 10A025F8 5 Bytes [00, 00, C7, 45, E0]
.text LCabHandler.dll!??0CCabinetBuilder@@QAE@ABV0@@Z + 8F 10A025FF 13 Bytes [00, 00, C7, 45, FC, 00, 00, ...]
.text LCabHandler.dll!??0CCabinetBuilder@@QAE@ABV0@@Z + 9D 10A0260D 10 Bytes CALL 1022B326
.text LCabHandler.dll!??0CCabinetBuilder@@QAE@ABV0@@Z + A8 10A02618 7 Bytes [08, 8B, 55, 10, C7, 02, 00]
.text ...
.text LCabHandler.dll!??4CCabinetBuilder@@QAEAAV0@ABV0@@Z + 64 10A026E4 24 Bytes [02, EB, 02, EB, D4, C7, 45, ...]
.text LCabHandler.dll!??4CCabinetBuilder@@QAEAAV0@ABV0@@Z + 7D 10A026FD 52 Bytes [FF, 15, 78, FA, 96, 03, 83, ...]
.text LCabHandler.dll!??4CCabinetBuilder@@QAEAAV0@ABV0@@Z + B2 10A02732 35 Bytes CALL 99A1E9BA
.text LCabHandler.dll!??4CCabinetBuilder@@QAEAAV0@ABV0@@Z + D6 10A02756 16 Bytes [EB, DB, 8B, E5, 5D, C3, 55, ...]
.text LCabHandler.dll!??4CCabinetBuilder@@QAEAAV0@ABV0@@Z + E8 10A02768 4 Bytes [00, C7, 45, EC] {ADD BH, AL; INC EBP; IN AL, DX }
.text ...
.text LCabHandler.dll!??0CCabinetExtractor@@QAE@ABV0@@Z + 34 10A027F4 66 Bytes [85, C0, 74, 11, 0F, BE, 4D, ...]
.text LCabHandler.dll!??0CCabinetExtractor@@QAE@ABV0@@Z + 78 10A02838 17 Bytes [83, C4, 08, 89, 45, 0C, 8B, ...]
.text LCabHandler.dll!??0CCabinetExtractor@@QAE@ABV0@@Z + 8B 10A0284B 65 Bytes [83, C4, 08, 89, 45, 0C, 8B, ...]
.text LCabHandler.dll!??0CCabinetExtractor@@QAE@ABV0@@Z + CD 10A0288D 17 Bytes [EC, 83, EC, 18, C6, 45, F4, ...]
.text LCabHandler.dll!??0CCabinetExtractor@@QAE@ABV0@@Z + DF 10A0289F 8 Bytes [45, FD, C7, 45, EC, 00, 00, ...]
.text ...
.text LCabHandler.dll!??4CCabinetExtractor@@QAEAAV0@ABV0@@Z + 33 10A02943 149 Bytes [00, 8B, 45, 08, 89, 45, FC, ...]
.text LCabHandler.dll!??4CCabinetExtractor@@QAEAAV0@ABV0@@Z + CA 10A029DA 25 Bytes CALL 109F971F
.text LCabHandler.dll!??4CCabinetExtractor@@QAEAAV0@ABV0@@Z + E4 10A029F4 11 Bytes [F7, F9, 89, 55, F8, C7, 85, ...]
.text LCabHandler.dll!??4CCabinetExtractor@@QAEAAV0@ABV0@@Z + F2 10A02A02 9 Bytes [00, 8B, 55, 08, 8B, 82, 9C, ...] {ADD [EBX-0x7d74f7ab], CL; PUSHF ; ADD [EAX], EAX}
.text LCabHandler.dll!??4CCabinetExtractor@@QAEAAV0@ABV0@@Z + FC 10A02A0C 5 Bytes [8B, 88, DC, 1C, 00]
.text ...
.text LCabHandler.dll!CabFileExtractor + 23 10A02C73 7 Bytes [C7, 85, D8, FE, FF, FF, 02]
.text LCabHandler.dll!CabFileExtractor + 2C 10A02C7C 16 Bytes [00, C7, 85, B0, FE, FF, FF, ...]
.text LCabHandler.dll!CabFileExtractor + 3D 10A02C8D 7 Bytes [00, C7, 45, DC, 04, 00, 00]
.text LCabHandler.dll!CabFileExtractor + 45 10A02C95 24 Bytes [C7, 45, C0, 00, 00, 00, 00, ...]
.text LCabHandler.dll!CabFileExtractor + 60 10A02CB0 7 Bytes [C7, 85, DC, FE, FF, FF, 05]
.text ...
.text LCabHandler.dll!?FileRead@CCabinetBase@@KAIHPAXIPAH0@Z + 2B 10A02E7B 14 Bytes [00, 83, 7D, 08, 00, 74, 17, ...]
.text LCabHandler.dll!?FileRead@CCabinetBase@@KAIHPAXIPAH0@Z + 3B 10A02E8B 30 Bytes [8B, 91, EC, 0C, 00, 00, 89, ...]
.text LCabHandler.dll!?FileRead@CCabinetBase@@KAIHPAXIPAH0@Z + 5A 10A02EAA 39 Bytes CALL 109E832A \WINDOWS\system32\PortableDeviceTypes.dll (Windows Portable Device (Parameter) Types Component/Microsoft Corporation)
.text LCabHandler.dll!?FileWrite@CCabinetBase@@KAIHPAXIPAH0@Z + 22 10A02ED2 67 Bytes [82, 9C, 01, 00, 00, 8B, 88, ...]
.text LCabHandler.dll!?FileWrite@CCabinetBase@@KAIHPAXIPAH0@Z + 66 10A02F16 40 Bytes [8B, 88, F0, 0C, 00, 00, 51, ...]
.text LCabHandler.dll!?FileSeek@CCabinetBase@@KAJHJHPAHPAX@Z + F 10A02F3F 10 Bytes JMP 10A030DE \Program Files\Logitech\SetPoint\LCabHandler.dll (Handlers Cab files with device files (UNICODE)/Logitech, Inc.)
.text LCabHandler.dll!?FileSeek@CCabinetBase@@KAJHJHPAHPAX@Z + 1A 10A02F4A 70 Bytes [83, C0, 08, 50, 6A, 00, 8B, ...]
.text LCabHandler.dll!?FileSeek@CCabinetBase@@KAJHJHPAHPAX@Z + 62 10A02F92 24 Bytes [00, 00, EB, 0F, 8B, 8D, 94, ...]
.text LCabHandler.dll!?FileSeek@CCabinetBase@@KAJHJHPAHPAX@Z + 7B 10A02FAB 40 Bytes [3B, 95, A8, FE, FF, FF, 7D, ...]
.text LCabHandler.dll!?FileSeek@CCabinetBase@@KAJHJHPAHPAX@Z + A4 10A02FD4 17 Bytes [08, 7D, 2B, 8B, 4D, F4, 03, ...]
.text LCabHandler.dll!?FileClose@CCabinetBase@@KAHHPAHPAX@Z + 6 10A02FE6 18 Bytes [90, FE, FF, FF, 33, C9, 8A, ...]
.text LCabHandler.dll!?FileClose@CCabinetBase@@KAHHPAHPAX@Z + 19 10A02FF9 17 Bytes [FF, 88, 90, 50, 71, DA, 03, ...] {DEC DWORD [EAX-0x258eaf70]; ADD EBP, EBX; MOV EBP, 0xda715068; ADD EBP, EAX; AND AL, [EBX]}
.text LCabHandler.dll!?FileClose@CCabinetBase@@KAHHPAHPAX@Z + 2C 10A0300C 75 Bytes [83, C4, 04, 8B, 4D, F4, 83, ...]
.text LCabHandler.dll!?GetNextCabinet@CCabinetBuilder@@KAHPAUCCAB@@KPAX@Z + 29 10A03059 20 Bytes [04, 25, FF, 00, 00, 00, 25, ...]
.text LCabHandler.dll!?GetNextCabinet@CCabinetBuilder@@KAHPAUCCAB@@KPAX@Z + 3E 10A0306E 16 Bytes [71, DA, 03, 33, D2, 8A, 15, ...]
.text LCabHandler.dll!?GetNextCabinet@CCabinetBuilder@@KAHPAUCCAB@@KPAX@Z + 50 10A03080 80 Bytes [00, 81, E1, FF, 00, 00, 00, ...]
.text LCabHandler.dll!?NotifyFilePlaced@CCabinetBuilder@@KAHPAUCCAB@@PADJHPAX@Z + 32 10A030D2 15 Bytes [83, C4, 0C, 89, 85, A0, FE, ...] {ADD ESP, 0xc; MOV [EBP-0x160], EAX; MOV EAX, [EBP-0x160]}
.text LCabHandler.dll!?NotifyFilePlaced@CCabinetBuilder@@KAHPAUCCAB@@PADJHPAX@Z + 42 10A030E2 21 Bytes [E5, 5D, C3, 55, 8B, EC, 8B, ...]
.text LCabHandler.dll!?NotifyFilePlaced@CCabinetBuilder@@KAHPAUCCAB@@PADJHPAX@Z + 58 10A030F8 8 Bytes [4D, 08, 81, E1, FF, 00, 00, ...]
.text LCabHandler.dll!?NotifyFilePlaced@CCabinetBuilder@@KAHPAUCCAB@@PADJHPAX@Z + 61 10A03101 102 Bytes [55, 0C, 8A, 02, 32, C1, 8B, ...]
.text LCabHandler.dll!?NotifyProgress@CCabinetBuilder@@KAJIKKPAX@Z + 28 10A03168 63 Bytes [8A, 08, 32, CA, 8B, 55, 0C, ...]
.text LCabHandler.dll!?NotifyProgress@CCabinetBuilder@@KAJIKKPAX@Z + 68 10A031A8 1 Byte [C2]
.text LCabHandler.dll!?NotifyProgress@CCabinetBuilder@@KAJIKKPAX@Z + 68 10A031A8 19 Bytes [C2, 01, 89, 55, 0C, 8B, 45, ...] {RET 0x8901; PUSH EBP; OR AL, 0x8b; INC EBP; OR AL, 0x5d; RET ; PUSH EBP; MOV EBP, ESP; MOV EAX, [EBP+0x8]; POP EBP; RET ; PUSH EBP}
.text LCabHandler.dll!?NotifyProgress@CCabinetBuilder@@KAJIKKPAX@Z + 7C 10A031BC 26 Bytes [EC, 83, EC, 10, 33, C0, 81, ...]
.text LCabHandler.dll!?FlushFolder@CCabinetBuilder@@QAEHXZ + 7 10A031D7 9 Bytes [00, 8B, 82, DC, 1C, 00, 00, ...]
.text LCabHandler.dll!?FlushFolder@CCabinetBuilder@@QAEHXZ + 11 10A031E1 6 Bytes [05, 00, 00, 00, 74, 1E] {ADD EAX, 0x74000000; PUSH DS}
.text LCabHandler.dll!?FlushFolder@CCabinetBuilder@@QAEHXZ + 18 10A031E8 2 Bytes [4D, 08]
.text LCabHandler.dll!?FlushFolder@CCabinetBuilder@@QAEHXZ + 1B 10A031EB 57 Bytes [91, 9C, 01, 00, 00, 8B, 82, ...]
.text LCabHandler.dll!?FlushCabinet@CCabinetBuilder@@QAEHXZ + 25 10A03225 22 Bytes [05, 00, 00, 8B, 55, 08, 8B, ...]
.text LCabHandler.dll!??1CCabinetBuilder@@UAE@XZ + D 10A0323D 119 Bytes [89, 55, F8, 8B, 45, F8, 89, ...]
.text LCabHandler.dll!??1CCabinetBuilder@@UAE@XZ + 85 10A032B5 6 Bytes [8B, 45, FC, 8B, E5, 5D] {MOV EAX, [EBP-0x4]; MOV ESP, EBP; POP EBP}
.text LCabHandler.dll!??1CCabinetBuilder@@UAE@XZ + 8C 10A032BC 53 Bytes [55, 8B, EC, 83, EC, 10, C6, ...]
.text LCabHandler.dll!?FileWrite@CCabinetExtractor@@KAIHPAXI@Z + 2 10A032F2 6 Bytes [00, 8B, 4D, F8, D3, E2] {ADD [EBX-0x1d2c07b3], CL}
.text LCabHandler.dll!?FileWrite@CCabinetExtractor@@KAIHPAXI@Z + 9 10A032F9 58 Bytes [45, 08, 23, C2, 85, C0, 74, ...]
.text LCabHandler.dll!?FileSeek@CCabinetExtractor@@KAJHJH@Z + 14 10A03334 89 Bytes [8D, 45, EC, 50, 8B, 4D, 08, ...]
.text LCabHandler.dll!?FileClose@CCabinetExtractor@@KAHH@Z + 3F 10A0338F 29 Bytes [83, C4, 10, 6A, 00, 8D, 4D, ...]
.text LCabHandler.dll!?NotifyPartialFile@CCabinetExtractor@@MAEHV?$CStdStr@_W@@00@Z + D 10A033AD 73 Bytes [00, 83, C4, 08, 89, 45, E0, ...]
.text LCabHandler.dll!?NotifyPartialFile@CCabinetExtractor@@MAEHV?$CStdStr@_W@@00@Z + 57 10A033F7 8 Bytes [8D, 55, EC, 52, E8, B1, 01, ...]
.text LCabHandler.dll!?NotifyPartialFile@CCabinetExtractor@@MAEHV?$CStdStr@_W@@00@Z + 60 10A03400 87 Bytes [83, C4, 08, 89, 45, E4, 6A, ...]
.text LCabHandler.dll!?NotifyEnumerate@CCabinetExtractor@@MAEHGAAJAAG@Z + 8 10A03458 17 Bytes [00, 83, C4, 08, 89, 45, E4, ...] {ADD [EBX+0x458908c4], AL; IN AL, 0x6a; ADD [EBP-0x17af13bb], CL; INC EDI; ADD [EAX], EAX}
.text LCabHandler.dll!?NotifyNextCabinet@CCabinetExtractor@@MAEHV?$CStdStr@_W@@0AAV2@H@Z + A 10A0346A 31 Bytes [83, C4, 08, 89, 45, E0, 8D, ...]
.text LCabHandler.dll!?NotifyNextCabinet@CCabinetExtractor@@MAEHV?$CStdStr@_W@@0AAV2@H@Z + 2A 10A0348A 105 Bytes CALL 10A035AD \Program Files\Logitech\SetPoint\LCabHandler.dll (Handlers Cab files with device files (UNICODE)/Logitech, Inc.)
.text LCabHandler.dll!??1CCabinetExtractor@@UAE@XZ + 34 10A034F4 166 Bytes [EB, 09, 8B, 55, DC, 83, C2, ...]
.text LCabHandler.dll!??1CCabinetExtractor@@UAE@XZ + DB 10A0359B 23 Bytes [7F, 12, 8B, 4D, 14, 8B, 51, ...]
.text LCabHandler.dll!??1CCabinetExtractor@@UAE@XZ + F3 10A035B3 26 Bytes [EC, 83, EC, 08, 8B, 45, 08, ...]
.text LCabHandler.dll!??1CCabinetExtractor@@UAE@XZ + 110 10A035D0 13 Bytes [8B, 45, 08, 8B, 08, 2B, CA, ...] {MOV EAX, [EBP+0x8]; MOV ECX, [EAX]; SUB ECX, EDX; IMUL ECX, ECX, 0x9d}
.text LCabHandler.dll!??1CCabinetExtractor@@UAE@XZ + 11E 10A035DE 17 Bytes [55, FC, 6B, D2, 15, 2B, CA, ...]
.text ...
.text LCabHandler.dll!??0CCabinetBuilder@@QAE@GKKK@Z + B 10A0373B 40 Bytes [80, 73, 17, 8B, 55, F8, C1, ...]
.text LCabHandler.dll!??0CCabinetBuilder@@QAE@GKKK@Z + 34 10A03764 5 Bytes [00, 00, 25, FF, FF]
.text LCabHandler.dll!??0CCabinetBuilder@@QAE@GKKK@Z + 3A 10A0376A 63 Bytes [00, 80, E4, 7F, 89, 45, EC, ...]
.text LCabHandler.dll!??0CCabinetBuilder@@QAE@GKKK@Z + 7A 10A037AA 64 Bytes [75, 07, C7, 45, F4, 06, 00, ...]
.text LCabHandler.dll!??0CCabinetBuilder@@QAE@GKKK@Z + BB 10A037EB 15 Bytes [00, 8B, 45, F4, 8B, E5, 5D, ...]
.text LCabHandler.dll!?SetDefaultExtractPath@CCabinetExtractor@@QAEXV?$CStdStr@_W@@@Z + C 10A037FC 3 Bytes [57, C7, 85]
.text LCabHandler.dll!?SetDefaultExtractPath@CCabinetExtractor@@QAEXV?$CStdStr@_W@@@Z + 10 10A03800 43 Bytes [FE, FF, FF, 00, 00, 00, 00, ...]
.text LCabHandler.dll!?SetDefaultExtractPath@CCabinetExtractor@@QAEXV?$CStdStr@_W@@@Z + 3C 10A0382C 23 Bytes [B9, 40, 00, 00, 00, 33, C0, ...]
.text LCabHandler.dll!?SetDefaultExtractPath@CCabinetExtractor@@QAEXV?$CStdStr@_W@@@Z + 54 10A03844 79 Bytes [00, 00, 00, 00, C7, 85, E8, ...]
.text LCabHandler.dll!?SetDefaultExtractPath@CCabinetExtractor@@QAEXV?$CStdStr@_W@@@Z + A4 10A03894 58 Bytes [FE, FF, FF, 83, BD, E4, FE, ...]
.text ...
.text LCabHandler.dll!?NotifyCabinetInfo@CCabinetExtractor@@MAEHGV?$CStdStr@_W@@00G@Z + 4C 10A0392C 29 Bytes [00, 68, 48, 30, C8, 03, A1, ...]
.text LCabHandler.dll!?NotifyCabinetInfo@CCabinetExtractor@@MAEHGV?$CStdStr@_W@@00G@Z + 6A 10A0394A 86 Bytes [74, 75, 68, 60, 30, C8, 03, ...]
.text LCabHandler.dll!?NotifyCabinetInfo@CCabinetExtractor@@MAEHGV?$CStdStr@_W@@00G@Z + C1 10A039A1 29 Bytes [52, FF, 15, 6C, 71, DA, 03, ...]
.text LCabHandler.dll!?NotifyCabinetInfo@CCabinetExtractor@@MAEHGV?$CStdStr@_W@@00G@Z + DF 10A039BF 26 Bytes [00, 00, 8B, 0D, 70, 71, DA, ...]
.text LCabHandler.dll!?NotifyCabinetInfo@CCabinetExtractor@@MAEHGV?$CStdStr@_W@@00G@Z + FA 10A039DA 18 Bytes [68, 00, 10, 00, 00, FF, 15, ...]
.text ...
.text LCabHandler.dll!?NotifyFileCopy@CCabinetExtractor@@MAEHV?$CStdStr@_W@@KAAV2@AAH@Z + C 10A03B3C 37 Bytes [6A, 00, 68, FF, 00, 00, 00, ...]
.text LCabHandler.dll!?NotifyFileCopy@CCabinetExtractor@@MAEHV?$CStdStr@_W@@KAAV2@AAH@Z + 34 10A03B64 214 Bytes [C6, 85, FC, FD, FF, FF, 5C, ...]
.text LCabHandler.dll!?NotifyFileCopy@CCabinetExtractor@@MAEHV?$CStdStr@_W@@KAAV2@AAH@Z + 10B 10A03C3B 36 Bytes [8D, 85, FC, FD, FF, FF, 50, ...]
.text LCabHandler.dll!?NotifyFileCopy@CCabinetExtractor@@MAEHV?$CStdStr@_W@@KAAV2@AAH@Z + 130 10A03C60 15 Bytes [E5, 5D, C3, 55, 8B, EC, 81, ...]
.text LCabHandler.dll!?NotifyFileCopy@CCabinetExtractor@@MAEHV?$CStdStr@_W@@KAAV2@AAH@Z + 140 10A03C70 2 Bytes [00, 00] {ADD [EAX], AL}
.text ...
.text LCabHandler.dll!?FileOpen@CCabinetBase@@KAHPADHHPAHPAX@Z + C 10A0406C 6 Bytes [8B, 4D, 08, 81, E1, FF]
.text LCabHandler.dll!?FileOpen@CCabinetBase@@KAHPADHHPAHPAX@Z + 14 10A04074 30 Bytes [00, 81, E1, FF, 00, 00, 00, ...]
.text LCabHandler.dll!?FileOpen@CCabinetBase@@KAHPADHHPAHPAX@Z + 33 10A04093 4 Bytes [81, E2, FF, 00]
.text LCabHandler.dll!?FileOpen@CCabinetBase@@KAHPADHHPAHPAX@Z + 39 10A04099 16 Bytes [A1, 7C, F8, 96, 03, 8B, 08, ...]
.text LCabHandler.dll!?FileOpen@CCabinetBase@@KAHPADHHPAHPAX@Z + 4B 10A040AB 33 Bytes [89, 45, FC, 8B, 45, FC, 8B, ...]
.text ...
.text LCabHandler.dll!?FileDelete@CCabinetBuilder@@KAHPADPAHPAX@Z + 36 10A04506 8 Bytes [B8, 9C, 00, 00, 00, E9, 0D, ...]
.text LCabHandler.dll!?FileDelete@CCabinetBuilder@@KAHPADPAHPAX@Z + 40 10A04510 67 Bytes [B8, 9E, 00, 00, 00, E9, 03, ...]
.text LCabHandler.dll!?FileDelete@CCabinetBuilder@@KAHPADPAHPAX@Z + 84 10A04554 5 Bytes [00, 00, B8, E5, 00]
.text LCabHandler.dll!?FileDelete@CCabinetBuilder@@KAHPADPAHPAX@Z + 8B 10A0455B 28 Bytes JMP 10A0461D \Program Files\Logitech\SetPoint\LCabHandler.dll (Handlers Cab files with device files (UNICODE)/Logitech, Inc.)
.text LCabHandler.dll!?FileDelete@CCabinetBuilder@@KAHPADPAHPAX@Z + A9 10A04579 19 Bytes JMP 10A0461D \Program Files\Logitech\SetPoint\LCabHandler.dll (Handlers Cab files with device files (UNICODE)/Logitech, Inc.)
.text ...
.text LCabHandler.dll!?GetTempFile@CCabinetBuilder@@KAHPADHPAX@Z + D 10A045BD 5 Bytes [EB, 5E, B8, F1, 00]
.text LCabHandler.dll!?GetTempFile@CCabinetBuilder@@KAHPADHPAX@Z + 14 10A045C4 12 Bytes [EB, 57, B8, F2, 00, 00, 00, ...]
.text LCabHandler.dll!?GetTempFile@CCabinetBuilder@@KAHPADHPAX@Z + 22 10A045D2 20 Bytes [EB, 49, B8, F4, 00, 00, 00, ...]
.text LCabHandler.dll!?GetTempFile@CCabinetBuilder@@KAHPADHPAX@Z + 37 10A045E7 18 Bytes [EB, 34, B8, F8, 00, 00, 00, ...]
.text LCabHandler.dll!?GetTempFile@CCabinetBuilder@@KAHPADHPAX@Z + 4B 10A045FB 89 Bytes [00, EB, 1F, B8, FB, 00, 00, ...]
.text ...
.text LCabHandler.dll!?GetFileInfo@CCabinetBuilder@@KAHPADPAG11PAHPAX@Z + C 10A047EC 65 Bytes [74, 18, 8B, 0D, 74, 81, DA, ...]
.text LCabHandler.dll!?GetFileInfo@CCabinetBuilder@@KAHPADPAG11PAHPAX@Z + 4E 10A0482E 37 Bytes [B8, 74, 71, DA, 03, 8B, E5, ...]
.text LCabHandler.dll!?GetFileInfo@CCabinetBuilder@@KAHPADPAG11PAHPAX@Z + 74 10A04854 28 Bytes [02, 83, FA, 0D, 75, 16, 68, ...]
.text LCabHandler.dll!?GetFileInfo@CCabinetBuilder@@KAHPADPAG11PAHPAX@Z + 91 10A04871 78 Bytes [4D, 0C, 0F, BF, 51, 02, 83, ...]
.text LCabHandler.dll!?GetFileInfo@CCabinetBuilder@@KAHPADPAG11PAHPAX@Z + E0 10A048C0 50 Bytes [FF, 15, C8, F9, 96, 03, 83, ...]
.text ...
.text LCabHandler.dll!?ManufactureDiskName@CCabinetBuilder@@UAEXPAUCCAB@@@Z + 1F 10A04A4F 102 Bytes [4D, 0C, 8B, 54, 81, 08, 81, ...]
.text LCabHandler.dll!?ManufactureDiskName@CCabinetBuilder@@UAEXPAUCCAB@@@Z + 86 10A04AB6 2 Bytes [8B, 55]
.text LCabHandler.dll!?ManufactureDiskName@CCabinetBuilder@@UAEXPAUCCAB@@@Z + 89 10A04AB9 3 Bytes [03, D0, 52] {ADD EDX, EAX; PUSH EDX}
.text LCabHandler.dll!?ManufactureDiskName@CCabinetBuilder@@UAEXPAUCCAB@@@Z + 8D 10A04ABD 262 Bytes CALL 10A16EBB \Program Files\Logitech\SetPoint\LCabHandler.dll (Handlers Cab files with device files (UNICODE)/Logitech, Inc.)
.text LCabHandler.dll!?GetCabinetInfo@CCabinetExtractor@@QAEHV?$CStdStr@_W@@PAUCABINETINFO@@@Z + B4 10A04BC4 51 Bytes JMP 10A04F80 \Program Files\Logitech\SetPoint\LCabHandler.dll (Handlers Cab files with device files (UNICODE)/Logitech, Inc.)
.text LCabHandler.dll!?GetCabinetInfo@CCabinetExtractor@@QAEHV?$CStdStr@_W@@PAUCABINETINFO@@@Z + E8 10A04BF8 59 Bytes [8B, 4D, 0C, 0F, BF, 51, 02, ...]
.text LCabHandler.dll!?GetCabinetInfo@CCabinetExtractor@@QAEHV?$CStdStr@_W@@PAUCABINETINFO@@@Z + 124 10A04C34 32 Bytes [4D, 0C, 0F, BF, 51, 02, 83, ...]
.text LCabHandler.dll!?GetCabinetInfo@CCabinetExtractor@@QAEHV?$CStdStr@_W@@PAUCABINETINFO@@@Z + 145 10A04C55 86 Bytes [45, 0C, 0F, BF, 48, 02, 89, ...]
.text LCabHandler.dll!?GetCabinetInfo@CCabinetExtractor@@QAEHV?$CStdStr@_W@@PAUCABINETINFO@@@Z + 19C 10A04CAC 210 Bytes [00, 8B, 45, 0C, 0F, BF, 48, ...]
.text LCabHandler.dll!?NotifyProgress@CCabinetExtractor@@KAHW4FDINOTIFICATIONTYPE@@PAUFDINOTIFICATION@@@Z + AF 10A04D7F 39 Bytes [45, 14, 50, FF, 15, C8, F9, ...]
.text LCabHandler.dll!?NotifyProgress@CCabinetExtractor@@KAHW4FDINOTIFICATIONTYPE@@PAUFDINOTIFICATION@@@Z + D7 10A04DA7 25 Bytes [48, 08, 51, 8B, 55, FC, 52, ...]
.text LCabHandler.dll!?NotifyProgress@CCabinetExtractor@@KAHW4FDINOTIFICATIONTYPE@@PAUFDINOTIFICATION@@@Z + F1 10A04DC1 2 Bytes JMP 10A04F81 \Program Files\Logitech\SetPoint\LCabHandler.dll (Handlers Cab files with device files (UNICODE)/Logitech, Inc.)
.text LCabHandler.dll!?NotifyProgress@CCabinetExtractor@@KAHW4FDINOTIFICATIONTYPE@@PAUFDINOTIFICATION@@@Z + F5 10A04DC5 52 Bytes [8B, 4D, 0C, 0F, BF, 51, 02, ...]
.text LCabHandler.dll!?NotifyProgress@CCabinetExtractor@@KAHW4FDINOTIFICATIONTYPE@@PAUFDINOTIFICATION@@@Z + 12A 10A04DFA 19 Bytes [8B, 4D, 0C, 0F, BF, 51, 02, ...] {MOV ECX, [EBP+0xc]; MOVSX EDX, [ECX+0x2]; CMP EDX, 0x1e; JNZ 0x35; MOV DWORD [EBP-0x4], 0x3c83238}
.text ...
.text LCabHandler.dll!?AddFile@CCabinetBuilder@@QAEHV?$CStdStr@_W@@PA_WHH@Z + C 10A052CC 65 Bytes [8B, 4D, 0C, 0F, BF, 51, 02, ...]
.text LCabHandler.dll!?AddFile@CCabinetBuilder@@QAEHV?$CStdStr@_W@@PA_WHH@Z + 4F 10A0530F 23 Bytes JMP 10A057DE \Program Files\Logitech\SetPoint\LCabHandler.dll (Handlers Cab files with device files (UNICODE)/Logitech, Inc.)
.text LCabHandler.dll!?AddFile@CCabinetBuilder@@QAEHV?$CStdStr@_W@@PA_WHH@Z + 67 10A05327 131 Bytes [83, F8, 0A, 74, 48, 8B, 4D, ...]
.text LCabHandler.dll!?AddFile@CCabinetBuilder@@QAEHV?$CStdStr@_W@@PA_WHH@Z + EC 10A053AC 72 Bytes [00, EB, 09, 8B, 55, F8, 83, ...]
.text LCabHandler.dll!?AddFile@CCabinetBuilder@@QAEHV?$CStdStr@_W@@PA_WHH@Z + 135 10A053F5 30 Bytes [83, FA, 18, 74, 1C, 8B, 45, ...]
.text ...
.text LCabHandler.dll!??0CCabinetExtractor@@QAE@XZ + D 10A0560D 19 Bytes [83, 7D, FC, 00, 75, 3F, 8B, ...]
.text LCabHandler.dll!??0CCabinetExtractor@@QAE@XZ + 22 10A05622 25 Bytes [25, 00, 00, 00, 20, 85, C0, ...]
.text LCabHandler.dll!??0CCabinetExtractor@@QAE@XZ + 3C 10A0563C 79 Bytes CALL 10A1EEC6 \Program Files\Logitech\SetPoint\LCabHandler.dll (Handlers Cab files with device files (UNICODE)/Logitech, Inc.)
.text LCabHandler.dll!??0CCabinetExtractor@@QAE@XZ + 8E 10A0568E 32 Bytes [45, 0C, 0F, BF, 48, 02, 83, ...]
.text LCabHandler.dll!??0CCabinetExtractor@@QAE@XZ + B0 10A056B0 39 Bytes [83, C4, 0C, 85, C0, 74, 07, ...]
.text ...
.text LCabHandler.dll!?ExtractFiles@CCabinetExtractor@@QAEHV?$CStdStr@_W@@H@Z + 4B 10A0581B 48 Bytes [83, C4, 0C, 5D, C3, 55, 8B, ...]
.text LCabHandler.dll!?ExtractFiles@CCabinetExtractor@@QAEHV?$CStdStr@_W@@H@Z + 7C 10A0584C 5 Bytes [74, 29, 83, 7D, 10]
.text LCabHandler.dll!?ExtractFiles@CCabinetExtractor@@QAEHV?$CStdStr@_W@@H@Z + 82 10A05852 2 Bytes [74, 23] {JZ 0x25}
.text LCabHandler.dll!?ExtractFiles@CCabinetExtractor@@QAEHV?$CStdStr@_W@@H@Z + 85 10A05855 30 Bytes [4D, 10, 51, 8B, 95, F4, FB, ...]
.text LCabHandler.dll!?ExtractFiles@CCabinetExtractor@@QAEHV?$CStdStr@_W@@H@Z + A5 10A05875 49 Bytes [EB, 32, 6A, 2E, 8B, 85, F4, ...]
.text ...
.text LCabHandler.dll!?ManufactureCabinetName@CCabinetBuilder@@UAEXPAUCCAB@@@Z + 2D 10A0623D 15 Bytes [0F, 84, A1, 00, 00, 00, 8B, ...] {JZ 0xa7; MOV EAX, [EBP+0x8]; PUSH EAX; CALL 0xfffffffffffe2e4c}
.text LCabHandler.dll!?ManufactureCabinetName@CCabinetBuilder@@UAEXPAUCCAB@@@Z + 3D 10A0624D 26 Bytes [C4, 04, 8B, 4D, 08, 8B, 91, ...]
.text LCabHandler.dll!?ManufactureCabinetName@CCabinetBuilder@@UAEXPAUCCAB@@@Z + 59 10A06269 99 Bytes [68, 50, 33, C8, 03, 8B, 4D, ...]
.text LCabHandler.dll!?ManufactureCabinetName@CCabinetBuilder@@UAEXPAUCCAB@@@Z + BE 10A062CE 121 Bytes [68, 5C, 33, C8, 03, 8B, 4D, ...]
.text LCabHandler.dll!?InitCabinet@CCabinetBuilder@@QAEHV?$CStdStr@_W@@00H@Z + 59 10A06349 40 Bytes [89, 4D, F8, 8B, 55, F4, C1, ...]
.text LCabHandler.dll!?InitCabinet@CCabinetBuilder@@QAEHV?$CStdStr@_W@@00H@Z + 82 10A06372 88 Bytes [45, F4, 83, E0, 1F, 50, 68, ...]
.text LCabHandler.dll!?InitCabinet@CCabinetBuilder@@QAEHV?$CStdStr@_W@@00H@Z + DB 10A063CB 10 Bytes [00, 68, D5, 01, 00, 00, 68, ...] {ADD [EAX-0x2b], CH; ADD [EAX], EAX; ADD [EAX-0x70], CH; XOR ECX, EAX}
.text LCabHandler.dll!?InitCabinet@CCabinetBuilder@@QAEHV?$CStdStr@_W@@00H@Z + E6 10A063D6 28 Bytes CALL 109E8E01 \WINDOWS\system32\PortableDeviceTypes.dll (Windows Portable Device (Parameter) Types Component/Microsoft Corporation)
.text LCabHandler.dll!?InitCabinet@CCabinetBuilder@@QAEHV?$CStdStr@_W@@00H@Z + 103 10A063F3 76 Bytes CALL 107FAD1C
.text ...
.text LCabHandler.dll!?GetPathToRootDevicesXMLDirectory@@YAHAAV?$CStdStr@_W@@@Z + 24 10A06974 159 Bytes [04, 89, 45, F0, 8B, 55, F0, ...]
.text LCabHandler.dll!?GetPathToRootDevicesXMLDirectory@@YAHAAV?$CStdStr@_W@@@Z + C4 10A06A14 63 Bytes [83, C4, 08, 89, 45, FC, 83, ...]
.text LCabHandler.dll!?GetPathToRootDevicesXMLDirectory@@YAHAAV?$CStdStr@_W@@@Z + 104 10A06A54 14 Bytes [52, 8B, 45, FC, 05, 80, 00, ...]
.text LCabHandler.dll!?GetPathToRootDevicesXMLDirectory@@YAHAAV?$CStdStr@_W@@@Z + 113 10A06A63 77 Bytes [83, C4, 0C, 83, 7D, 18, 00, ...]
.text LCabHandler.dll!?DecryptCabFile@@YAHABV?$CStdStr@_W@@@Z + 41 10A06AB1 8 Bytes [83, C4, 0C, EB, 1A, 8B, 4D, ...] {ADD ESP, 0xc; JMP 0x1f; MOV ECX, [EBP-0x4]}
.text LCabHandler.dll!?DecryptCabFile@@YAHABV?$CStdStr@_W@@@Z + 4A 10A06ABA 19 Bytes CALL 109E832B \WINDOWS\system32\PortableDeviceTypes.dll (Windows Portable Device (Parameter) Types Component/Microsoft Corporation)
.text LCabHandler.dll!?DecryptCabFile@@YAHABV?$CStdStr@_W@@@Z + 5E 10A06ACE 27 Bytes [FF, FF, 83, 7D, F8, 00, 75, ...]
.text LCabHandler.dll!?DecryptCabFile@@YAHABV?$CStdStr@_W@@@Z + 7A 10A06AEA 99 Bytes [4D, 0C, 8B, 91, 7C, 02, 00, ...]
.text LCabHandler.dll!?DecryptCabFile@@YAHABV?$CStdStr@_W@@@Z + DE 10A06B4E 124 Bytes [0F, 84, D5, 00, 00, 00, 8B, ...]
.text ...
.text LCabHandler.dll!?GetPathToDeviceXMLDirectory@@YAHHAAV?$CStdStr@_W@@@Z + 53 10A06CF3 29 Bytes [0F, BF, 45, 10, 85, C0, 74, ...]
.text LCabHandler.dll!?GetPathToDeviceXMLDirectory@@YAHHAAV?$CStdStr@_W@@@Z + 71 10A06D11 53 Bytes [45, 0C, 33, C9, 66, 8B, 48, ...]
.text LCabHandler.dll!?GetPathToDeviceXMLDirectory@@YAHHAAV?$CStdStr@_W@@@Z + A7 10A06D47 151 Bytes [45, 08, 8B, 4D, 0C, 8B, 50, ...]
.text LCabHandler.dll!?GetDeviceXMLFullPath@@YAHHABV?$CStdStr@_W@@AAV1@@Z + 7F 10A06DDF 8 Bytes [89, 4D, FC, EB, 1C, 83, 7D, ...]
.text LCabHandler.dll!?GetDeviceXMLFullPath@@YAHHABV?$CStdStr@_W@@AAV1@@Z + 88 10A06DE8 20 Bytes [74, 09, C7, 45, FC, 01, 00, ...]
.text LCabHandler.dll!?GetDeviceXMLFullPath@@YAHHABV?$CStdStr@_W@@AAV1@@Z + 9D 10A06DFD 51 Bytes [FF, FF, FF, 8B, 45, FC, 8B, ...]
.text LCabHandler.dll!?GetDeviceXMLFullPath@@YAHHABV?$CStdStr@_W@@AAV1@@Z + D2 10A06E32 238 Bytes [81, E1, 10, F0, 00, 00, 85, ...]
.text LCabHandler.dll!?GetDeviceQuicktourFullPath@@YAHHABV?$CStdStr@_W@@AAV1@@Z + 31 10A06F21 42 Bytes [82, 80, 00, 00, 00, 89, 45, ...]
.text LCabHandler.dll!?GetDeviceQuicktourFullPath@@YAHHABV?$CStdStr@_W@@AAV1@@Z + 5C 10A06F4C 102 Bytes [00, 8B, 4D, F8, 51, 8B, 55, ...]
.text LCabHandler.dll!?GetDeviceQuicktourFullPath@@YAHHABV?$CStdStr@_W@@AAV1@@Z + C3 10A06FB3 32 Bytes [52, 6A, 01, 6A, 07, 8B, 45, ...]
.text LCabHandler.dll!?GetDeviceQuicktourFullPath@@YAHHABV?$CStdStr@_W@@AAV1@@Z + E4 10A06FD4 55 Bytes [8B, 82, 7C, 02, 00, 00, 25, ...]
.text LCabHandler.dll!?GetDeviceQuicktourFullPath@@YAHHABV?$CStdStr@_W@@AAV1@@Z + 11D 10A0700D 28 Bytes [81, E2, 00, 40, 00, 00, 85, ...]
.text LCabHandler.dll!?DecryptDeviceFile@@YAHABV?$CStdStr@_W@@H@Z + C 10A0702C 20 Bytes [83, C4, 14, 89, 45, FC, 83, ...]
.text LCabHandler.dll!?DecryptDeviceFile@@YAHABV?$CStdStr@_W@@H@Z + 21 10A07041 40 Bytes [81, E1, 00, 80, 00, 00, 85, ...]
.text LCabHandler.dll!?DecryptDeviceFile@@YAHABV?$CStdStr@_W@@H@Z + 4A 10A0706A 18 Bytes [75, 2B, 8B, 55, 0C, 8B, 82, ...] {JNZ 0x2d; MOV EDX, [EBP+0xc]; MOV EAX, [EDX+0x27c]; AND EAX, 0x10; TEST EAX, EAX; JZ 0x2d}
.text LCabHandler.dll!?DecryptDeviceFile@@YAHABV?$CStdStr@_W@@H@Z + 5D 10A0707D 51 Bytes [4D, 10, 51, 6A, 01, 6A, 0A, ...]
.text LCabHandler.dll!?DecryptDeviceFile@@YAHABV?$CStdStr@_W@@H@Z + 92 10A070B2 9 Bytes [83, 7D, 08, 00, 0F, 84, 44, ...]


.text ...
.text MacroEmail.dll!CreateMacro + FFFFBE50 10F01000 9 Bytes [25, 00, 2F, 00, 25, 00, 4D, ...]
.text MacroEmail.dll!CreateMacro + FFFFBE5A 10F0100A 1 Byte [50]
.text MacroEmail.dll!CreateMacro + FFFFBE5A 10F0100A 21 Bytes [50, 00, 61, 00, 67, 00, 65, ...]
.text MacroEmail.dll!CreateMacro + FFFFBE70 10F01020 1 Byte [65]
.text MacroEmail.dll!CreateMacro + FFFFBE70 10F01020 13 Bytes [65, 00, 20, 00, 25, 00, 4E, ...]
.text ...
.text MacroEmail.dll!Initialize + 28 10F05168 61 Bytes [63, 00, 6F, 00, 76, 00, 65, ...]
.text MacroEmail.dll!Initialize + 66 10F051A6 33 Bytes [2E, 00, 50, 00, 61, 00, 73, ...]
.text MacroEmail.dll!CreateMacro + 18 10F051C8 129 Bytes [64, 00, 20, 00, 74, 00, 6F, ...]
.text MacroEmail.dll!CreateMacro + 9A 10F0524A 1 Byte [67]
.text MacroEmail.dll!CreateMacro + 9A 10F0524A 25 Bytes [67, 00, 6E, 00, 61, 00, 74, ...]
.text MacroEmail.dll!CreateMacro + B4 10F05264 1 Byte [20]
.text MacroEmail.dll!CreateMacro + B4 10F05264 19 Bytes [20, 00, 62, 00, 65, 00, 20, ...]
.text ...
.text KEMHook.dll!RemoveHookClient + FFFFF1B0 10301000 31 Bytes [00, 00, 00, 00, 59, 5F, 5E, ...]
.text KEMHook.dll!RemoveHookClient + FFFFF1D0 10301020 118 Bytes CALL 10300ECD \Program Files\Logitech\SetPoint\KEMHook.dll (Logitech Common Hooks (UNICODE)/Logitech, Inc.)
.text KEMHook.dll!RemoveHookClient + FFFFF247 10301097 18 Bytes [CC, CC, CC, CC, CC, CC, CC, ...]
.text KEMHook.dll!RemoveHookClient + FFFFF25A 103010AA 8 Bytes [00, 00, 00, 50, 81, EC, 54, ...]
.text KEMHook.dll!RemoveHookClient + FFFFF264 103010B4 32 Bytes [A1, 50, AE, C7, 03, 33, C4, ...]
.text ...
.text KEMHook.dll!AddHookClient + 13 103017F3 71 Bytes [00, 59, 5F, 5E, 5D, 83, C4, ...]
.text KEMHook.dll!AddHookClient + 5B 1030183B 11 Bytes [74, 18, 8B, 4C, 24, 24, 8B, ...] {JZ 0x1a; MOV ECX, [ESP+0x24]; MOV EDX, [ESP+0x20]; PUSH ECX}
.text KEMHook.dll!AddHookClient + 67 10301847 81 Bytes [4C, 24, 20, 52, 51, 8B, C8, ...]
.text KEMHook.dll!AddHookClient + B9 10301899 70 Bytes [FF, C2, 08, 00, CC, CC, CC, ...]
.text KEMHook.dll!AddHookClient + 100 103018E0 80 Bytes [89, 48, 0C, 89, 48, 08, C3, ...]
.text ...
.text KEMHook.dll!RemoveHookClient + 26 10301E76 12 Bytes [90, 58, 01, 00, 00, 57, FF, ...]
.text KEMHook.dll!RemoveHookClient + 33 10301E83 64 Bytes [8B, 48, 3C, 85, C9, 74, 51, ...]
.text KEMHook.dll!RemoveHookClient + 75 10301EC5 23 Bytes [CE, FF, D2, 8B, 46, 20, 6A, ...]
.text KEMHook.dll!RemoveHookClient + 8D 10301EDD 24 Bytes CALL 102FA110
.text KEMHook.dll!RemoveHookClient + A6 10301EF6 24 Bytes [6A, 00, 51, FF, 15, C4, FD, ...]
.text ...
.text ARE.dll!ARE_Initialize + FFFFF96F 09001000 59 Bytes [46, 89, 85, 7C, FB, FF, FF, ...]
.text ARE.dll!ARE_Initialize + FFFFF9AB 0900103C 73 Bytes [FB, FF, FF, EB, CD, 83, BD, ...]
.text ARE.dll!ARE_Initialize + FFFFF9F5 09001086 18 Bytes [8B, C8, FF, D3, 8B, 85, 7C, ...]
.text ARE.dll!ARE_Initialize + FFFFFA08 09001099 770 Bytes [50, 68, B4, 78, AA, 46, 8D, ...]
.text ARE.dll!ARE_Terminate + 2E8 0900139C 241 Bytes [FC, FF, FF, FF, 15, F4, 15, ...]
.text ARE.dll!ARE_Terminate + 3DA 0900148E 34 Bytes [33, C0, 8D, 7D, E6, AB, 66, ...]
.text ARE.dll!ARE_Terminate + 3FD 090014B1 205 Bytes [8D, 85, CC, F9, FF, FF, 50, ...]
.text ARE.dll!ARE_Terminate + 4CB 0900157F 26 Bytes [0F, 85, 5F, 01, 00, 00, 8D, ...]
.text ARE.dll!ARE_Terminate + 4E6 0900159A 66 Bytes [14, AA, 46, FF, D7, 85, C0, ...]
.text ...
.text ARE.dll!ARE_Initialize + 94 09001725 16 Bytes CALL 8E46C13F
.text ARE.dll!ARE_Initialize + A6 09001737 24 Bytes [50, 68, 1C, 76, AA, 46, 8D, ...]
.text ARE.dll!ARE_Initialize + C0 09001751 23 Bytes [6A, 5C, 8D, 8D, 18, F4, FF, ...]
.text ARE.dll!ARE_Initialize + D9 0900176A 24 Bytes [50, 8D, 85, D8, F3, FF, FF, ...]
.text ARE.dll!ARE_Initialize + F2 09001783 4 Bytes [8D, 8D, 18, F4]
.text ...
.text WpdShext.dll!DllUnregisterServer + FFF9158C 16211525 126 Bytes [32, 38, 37, 20, 23, 32, 38, ...]
.text WpdShext.dll!DllUnregisterServer + FFF9160B 162115A4 10 Bytes [23, 32, 38, 37, 20, 23, 32, ...]
.text WpdShext.dll!DllUnregisterServer + FFF91616 162115AF 15 Bytes [90, 23, 32, 38, 37, 20, 53, ...]
.text WpdShext.dll!DllUnregisterServer + FFF91626 162115BF 30 Bytes [90, 23, 32, 38, 37, 20, 53, ...]
.text WpdShext.dll!DllUnregisterServer + FFF91645 162115DE 63 Bytes [90, 90, 23, 32, 38, 36, 20, ...]
.text ...
.text WpdShext.dll!_SHBindToFolderIDListParentEx@24 + 50 1627108D 1 Byte [80]
.text WpdShext.dll!_SHBindToFolderIDListParentEx@24 + 50 1627108D 149 Bytes [80, 50, 68, EC, 03, 00, 00, ...]
.text WpdShext.dll!_SHBindToFolderIDListParent@20 + 1C 16271123 56 Bytes [FF, FF, 8B, 4E, 04, 68, D8, ...]
.text WpdShext.dll!_SHBindToFolderIDListParent@20 + 55 1627115C 223 Bytes [85, C0, 75, 36, F6, 46, 2D, ...]
.text WpdShext.dll!_CDefFolderMenu_MergeMenu@16 + 5D 1627123C 238 Bytes [FF, 81, EC, 1C, 02, 00, 00, ...]
.text WpdShext.dll!_CDefFolderMenu_MergeMenu@16 + 14C 1627132B 26 Bytes CALL 15D9FB75
.text WpdShext.dll!_CDefFolderMenu_MergeMenu@16 + 167 16271346 166 Bytes [33, C0, 6A, 0E, 59, F3, AB, ...]
.text WpdShext.dll!_CDefFolderMenu_MergeMenu@16 + 20E 162713ED 3 Bytes CALL 15D9D6B5
.text WpdShext.dll!_CDefFolderMenu_MergeMenu@16 + 212 162713F1 358 Bytes [81, C5, 9C, 01, 00, 00, C9, ...]
.text ...
.text WpdShext.dll!DllGetClassObject + 1A 1627FCCA 216 Bytes [03, 99, F3, A4, 59, F7, F9, ...]
.text WpdShext.dll!DllCanUnloadNow + 7F 1627FDA3 151 Bytes [FF, 8B, 45, F4, 5F, 5E, 5B, ...]
.text WpdShext.dll!DllCanUnloadNow + 117 1627FE3B 4 Bytes [44, 18, FF, 50] {INC ESP; SBB BH, BH; PUSH EAX}
.text WpdShext.dll!DllCanUnloadNow + 11C 1627FE40 43 Bytes [75, FC, 8D, 4E, 14, E8, 61, ...]
.text WpdShext.dll!DllCanUnloadNow + 149 1627FE6D 12 Bytes [75, FC, 8D, 4E, 14, E8, 34, ...]
.text WpdShext.dll!DllCanUnloadNow + 156 1627FE7A 32 Bytes [08, 43, 3B, 5D, F8, 7C, E7, ...]
.text ...
.text WpdShext.dll!DllRegisterServer + 25 1627FF47 11 Bytes [53, 56, 8B, 75, 08, 57, 8B, ...]
.text WpdShext.dll!DllRegisterServer + 31 1627FF53 133 Bytes [8D, 43, FF, 3B, F0, 89, 5D, ...]
.text WpdShext.dll!DllUnregisterServer + 40 1627FFD9 124 Bytes [04, F1, 8D, 50, F8, 74, 03, ...]
.text WpdShext.dll!DllUnregisterServer + BD 16280056 98 Bytes [56, 8D, 45, F0, 50, E8, 1F, ...]
.text WpdShext.dll!DllUnregisterServer + 120 162800B9 19 Bytes [55, 95, FF, FF, 4E, 89, 45, ...]
.text WpdShext.dll!DllUnregisterServer + 134 162800CD 16 Bytes [5F, 5E, 5B, C9, C2, 04, 00, ...] {POP EDI; POP ESI; POP EBX; LEAVE ; RET 0x4; PUSH EBP; MOV EBP, ESP; SUB ESP, 0x88}
.text WpdShext.dll!DllUnregisterServer + 145 162800DE 30 Bytes [A4, E2, 60, 31, 53, 56, 8B, ...]
.text ...
.text audiodev.dll!DllGetClassObject + FFFE7B19 07161351 40 Bytes [FF, FF, FF, 00, 00, 00, 00, ...]
.text audiodev.dll!DllGetClassObject + FFFE7B44 0716137C 4 Bytes [7C, F4, E1, 21] {JL 0xfffffffffffffff6; LOOPZ 0x25}
.text audiodev.dll!DllGetClassObject + FFFE7B4C 07161384 4 Bytes [00, 00, 00, 00] {ADD [EAX], AL; ADD [EAX], AL}
.text audiodev.dll!DllGetClassObject + FFFE7B54 0716138C 1 Byte [00]
.text audiodev.dll!DllGetClassObject + FFFE7B58 07161390 1 Byte [00]
.text ...
.text audiodev.dll!_SHAnsiToUnicode@12 + B1 0716F0CB 192 Bytes [83, C4, 08, 85, C0, 89, 44, ...]
.text audiodev.dll!_SHAnsiToUnicode@12 + 172 0716F18C 55 Bytes [4C, 24, 14, 8B, 01, 8B, 50, ...]
.text audiodev.dll!_SHAnsiToUnicode@12 + 1AA 0716F1C4 292 Bytes CALL 07184A4F \WINDOWS\system32\audiodev.dll (Portable Media Devices Shell Extension/Microsoft Corporation)
.text audiodev.dll!_SHAnsiToUnicode@12 + 2D0 0716F2EA 21 Bytes [50, FF, 15, 50, 91, 31, 21, ...]
.text audiodev.dll!_SHAnsiToUnicode@12 + 2E6 0716F300 33 Bytes [8C, 24, F0, 02, 00, 00, 68, ...]
.text ...
.text audiodev.dll!_SHLoadRegUIStringW@16 + BF 07177C9A 99 Bytes [83, C4, 08, 8B, 7C, 24, 20, ...]
.text audiodev.dll!_SHInvokeCommandsOnContextMenu@24 + 32 07177CFF 28 Bytes [83, C4, 04, 83, F8, 06, 75, ...]
.text audiodev.dll!_SHInvokeCommandsOnContextMenu@24 + 51 07177D1E 12 Bytes [8D, 54, 24, 3C, 52, 8B, C7, ...]
.text audiodev.dll!_SHInvokeCommandsOnContextMenu@24 + 5E 07177D2B 38 Bytes [FF, 8B, 4C, 24, 30, 83, C4, ...]
.text audiodev.dll!_SHInvokeCommandsOnContextMenu@24 + 85 07177D52 115 Bytes [FF, 8D, 54, 24, 3C, 6A, 04, ...]
.text audiodev.dll!_SHInvokeCommandsOnContextMenu@24 + F9 07177DC6 87 Bytes [D5, 83, C4, 0C, 85, C0, 74, ...]
.text ...
.text audiodev.dll!_SHGetMenuFromID@8 + 2E 07177EE6 32 Bytes [5E, 30, 8D, 7C, 24, 10, 74, ...]
.text audiodev.dll!_SHGetMenuFromID@8 + 4F 07177F07 5 Bytes [C7, 02, 66, 39, 07]
.text audiodev.dll!_SHGetMenuFromID@8 + 55 07177F0D 1 Byte [E2]
.text audiodev.dll!_SHGetMenuFromID@8 + 55 07177F0D 33 Bytes [E2, 8B, 46, 30, 8B, 54, 24, ...]
.text audiodev.dll!_SHGetMenuFromID@8 + 78 07177F30 82 Bytes [83, C4, 2C, C3, 8B, 4C, 24, ...]
.text audiodev.dll!_CDefFolderMenu_MergeMenu@16 + D 07177F83 4 Bytes [20, 8D, 44, 24]
.text audiodev.dll!_CDefFolderMenu_MergeMenu@16 + 12 07177F88 60 Bytes CALL 07177D9D \WINDOWS\system32\audiodev.dll (Portable Media Devices Shell Extension/Microsoft Corporation)
.text audiodev.dll!_CDefFolderMenu_MergeMenu@16 + 4F 07177FC5 34 Bytes [00, A1, E4, F0, 31, 21, 33, ...]
.text audiodev.dll!_CDefFolderMenu_MergeMenu@16 + 72 07177FE8 43 Bytes [01, 00, 00, 8B, D9, 8D, 4C, ...]
.text audiodev.dll!_SHStringFromGUIDW@12 + F 07178014 82 Bytes [52, 66, C7, 84, 24, 38, 02, ...]
.text audiodev.dll!_SHStringFromGUIDW@12 + 62 07178067 148 Bytes [84, 99, 00, 00, 00, 89, 54, ...]
.text audiodev.dll!_SHStringFromGUIDW@12 + F7 071780FC 16 Bytes [00, 8B, 54, 24, 18, 8B, 6C, ...]
.text audiodev.dll!_SHStringFromGUIDW@12 + 108 0717810D 175 Bytes [74, 5E, 83, EF, 01, 0F, 85, ...]
.text audiodev.dll!_GUIDFromStringW@8 + 87 071781BD 6 Bytes [8D, 54, 24, 2C, 52, 6A]
.text audiodev.dll!_GUIDFromStringW@8 + 8E 071781C4 1 Byte [6A]
.text audiodev.dll!_GUIDFromStringW@8 + 8E 071781C4 29 Bytes [6A, 00, FF, 15, EC, 90, 31, ...]
.text audiodev.dll!_GUIDFromStringW@8 + AC 071781E2 29 Bytes [89, 7D, 30, 8D, B4, 24, 20, ...]
.text audiodev.dll!_GUIDFromStringW@8 + CA 07178200 134 Bytes [85, C0, 75, 5A, 83, C6, 02, ...]
.text ...
.text audiodev.dll!_SHCoCreateInstanceAC@20 + A 071782A7 31 Bytes CALL 071757A0 \WINDOWS\system32\audiodev.dll (Portable Media Devices Shell Extension/Microsoft Corporation)
.text audiodev.dll!_ParseURLW@8 + 3 071782C7 3 Bytes [D7, 83, C4]
.text audiodev.dll!_ParseURLW@8 + 7 071782CB 55 Bytes [8B, C6, 8B, 8C, 24, 20, 06, ...]
.text audiodev.dll!_ParseURLW@8 + 40 07178304 45 Bytes [53, 55, 8B, AC, 24, 20, 06, ...]
.text audiodev.dll!_ParseURLW@8 + 6F 07178333 20 Bytes [8D, 8C, 24, 32, 02, 00, 00, ...]
.text audiodev.dll!_ParseURLW@8 + 84 07178348 166 Bytes [00, 8D, 54, 24, 28, 52, 8D, ...]
.text ...
.text audiodev.dll!_SHInvokeCommandOnContextMenu@20 + 2A 07178AE0 107 Bytes [61, 7C, 05, 83, FF, 7A, 7E, ...]
.text audiodev.dll!_SHInvokeCommandOnContextMenu@20 + 96 07178B4C 91 Bytes [2B, 74, 09, 83, FD, 2F, 0F, ...]
.text audiodev.dll!_SHInvokeCommandOnContextMenu@20 + F2 07178BA8 5 Bytes [6C, 24, 30, 8B, D6] {INSB ; AND AL, 0x30; MOV EDX, ESI}
.text audiodev.dll!_SHInvokeCommandOnContextMenu@20 + F8 07178BAE 14 Bytes [E2, 03, C1, E2, 06, 83, E1, ...]
.text audiodev.dll!_SHInvokeCommandOnContextMenu@20 + 107 07178BBD 50 Bytes [80, E2, 03, 02, DB, 02, DB, ...]
.text ...
.text audiodev.dll!_CIDLData_CreateFromIDArray@16 + 11 0717952B 44 Bytes [FF, 8B, 54, 24, 18, 66, 83, ...]
.text audiodev.dll!_CIDLData_CreateFromIDArray@16 + 3F 07179559 149 Bytes [CC, CC, CC, CC, CC, CC, CC, ...]
.text audiodev.dll!DllCanUnloadNow + E 071795F0 4 Bytes CALL 07179580 \WINDOWS\system32\audiodev.dll (Portable Media Devices Shell Extension/Microsoft Corporation)
.text audiodev.dll!DllCanUnloadNow + 13 071795F5 72 Bytes JMP 2131F000 \Program Files\ESET\ESET NOD32 Antivirus\ekrnAmon.dll (ESET Amon Service/ESET)
.text audiodev.dll!DllCanUnloadNow + 5C 0717963E 52 Bytes [15, E0, 90, 31, 21, 8B, F0, ...]
.text audiodev.dll!DllCanUnloadNow + 92 07179674 68 Bytes [FF, FF, 25, 04, F0, 31, 21, ...]
.text audiodev.dll!DllCanUnloadNow + D7 071796B9 82 Bytes [C0, A3, 38, F3, 31, 21, 74, ...]
.text audiodev.dll!DllUnregisterServer + 18 07179710 5 Bytes CALL 071796A0 \WINDOWS\system32\audiodev.dll (Portable Media Devices Shell Extension/Microsoft Corporation)
.text audiodev.dll!DllUnregisterServer + 1E 07179716 6 Bytes [25, 08, F0, 31, 21, CC] {AND EAX, 0x2131f008; INT 3 }
.text audiodev.dll!DllUnregisterServer + 28 07179720 22 Bytes [8B, 44, 24, 08, 8B, 4C, 24, ...]
.text audiodev.dll!DllUnregisterServer + 43 0717973B 46 Bytes [CC, CC, CC, CC, CC, A1, 38, ...]
.text audiodev.dll!DllUnregisterServer + 72 0717976A 19 Bytes [00, A1, 38, F3, 31, 21, 83, ...] {ADD [ECX+0x2131f338], AH; ADD ESP, 0x4; TEST EAX, EAX; JZ 0x25; PUSH 0x2131b224; PUSH EAX}
.text ...
.text audiodev.dll!DllGetClassObject + 63 0717989B 22 Bytes [85, F6, 0F, 95, C0, 5E, C3, ...]
.text audiodev.dll!DllGetClassObject + 7A 071798B2 75 Bytes [FF, FF, FF, FF, 25, 14, F0, ...]
.text audiodev.dll!DllGetClassObject + C6 071798FE 235 Bytes [15, E0, 90, 31, 21, 8B, F0, ...]
.text audiodev.dll!DllGetClassObject + 1B2 071799EA 25 Bytes [00, A1, 38, F3, 31, 21, 83, ...]
.text audiodev.dll!DllGetClassObject + 1CC 07179A04 68 Bytes [F0, 85, F6, 89, 35, 20, F0, ...]
.text ...
.text gpkcsp.dll!DllMain + FFFF7B76 0FE21221 6 Bytes [8B, 01, FF, 90, 5C, 01]
.text gpkcsp.dll!DllMain + FFFF7B7E 0FE21229 8 Bytes [8B, CF, 8B, 01, FF, 90, 5C, ...]
.text gpkcsp.dll!DllMain + FFFF7B88 0FE21233 16 Bytes [8D, 65, F4, 5B, 5E, 5F, 5D, ...] {LEA ESP, [EBP-0xc]; POP EBX; POP ESI; POP EDI; POP EBP; RET 0x4; INT 3 ; INT 3 ; INT 3 ; PUSH CS; POP EDI; PUSH ES}
.text gpkcsp.dll!DllMain + FFFF7B99 0FE21244 23 Bytes [E0, B8, 74, FF, 55, 8B, EC, ...]
.text gpkcsp.dll!DllMain + FFFF7BB2 0FE2125D 20 Bytes [8B, F0, 85, F6, 74, 0C, 83, ...]
.text ...
.text gpkcsp.dll!DllRegisterServer + 2F 0FE23865 5 Bytes [C7, 45, E4, FC, 00]
.text gpkcsp.dll!DllRegisterServer + 37 0FE2386D 21 Bytes [BB, 48, 85, 66, EB, 38, C7, ...]
.text gpkcsp.dll!DllRegisterServer + 4D 0FE23883 30 Bytes [E4, FC, 00, 00, 00, 68, C4, ...]
.text gpkcsp.dll!DllRegisterServer + 6D 0FE238A3 123 Bytes [00, 68, CD, 48, 85, 66, EB, ...]
.text gpkcsp.dll!DllRegisterServer + E9 0FE2391F 45 Bytes [33, C0, F3, AB, 8B, CE, 33, ...]
.text ...
.text gpkcsp.dll!CPAcquireContext + 3C 0FE23CF0 206 Bytes [90, 20, 01, 00, 00, 8B, CE, ...]
.text gpkcsp.dll!CPAcquireContext + 10B 0FE23DBF 13 Bytes [90, 5C, 01, 00, 00, 8B, CE, ...] {NOP ; POP ESP; ADD [EAX], EAX; ADD [EBX-0xfe7432], CL; NOP ; JL 0xe}
.text gpkcsp.dll!CPAcquireContext + 119 0FE23DCD 15 Bytes [00, 85, DB, 74, 2B, 8B, CB, ...]
.text gpkcsp.dll!CPAcquireContext + 129 0FE23DDD 115 Bytes [FF, 50, 64, 85, C0, 75, 19, ...]
.text gpkcsp.dll!CPAcquireContext + 19D 0FE23E51 37 Bytes [00, 85, DB, 74, 23, 8B, CB, ...]
.text ...
.text gpkcsp.dll!CPGetProvParam + 8 0FE23F14 13 Bytes [64, 11, FE, FF, 8B, C8, 8B, ...]
.text gpkcsp.dll!CPGetProvParam + 16 0FE23F22 15 Bytes CALL 0FE05079
.text gpkcsp.dll!CPGetProvParam + 26 0FE23F32 24 Bytes [50, 68, 8B, CE, BA, 4C, 00, ...]
.text gpkcsp.dll!CPGetProvParam + 3F 0FE23F4B 5 Bytes [D0, 8B, CE, 8B, 01]
.text gpkcsp.dll!CPGetProvParam + 45 0FE23F51 29 Bytes [90, 90, 00, 00, 00, 8B, CE, ...]
.text ...
.text gpkcsp.dll!CPReleaseContext + 1C 0FE24070 12 Bytes CALL 0F60302F
.text gpkcsp.dll!CPReleaseContext + 29 0FE2407D 43 Bytes [B7, EF, 7D, FF, 8D, 65, F4, ...]
.text gpkcsp.dll!CPReleaseContext + 55 0FE240A9 3 Bytes [90, 40, 02]
.text gpkcsp.dll!CPReleaseContext + 5A 0FE240AE 57 Bytes [85, C0, 75, 05, 33, C0, 5E, ...]
.text gpkcsp.dll!CPSetProvParam + 1B 0FE240E8 40 Bytes [80, 79, 75, FF, 55, 8B, EC, ...]
.text gpkcsp.dll!CPSetProvParam + 44 0FE24111 61 Bytes [02, 00, 00, 5E, 5D, C3, 33, ...]
.text gpkcsp.dll!CPSetProvParam + 82 0FE2414F 1 Byte [FF]
.text gpkcsp.dll!CPSetProvParam + 82 0FE2414F 12 Bytes CALL 0F693BAF
.text gpkcsp.dll!CPSetProvParam + 8F 0FE2415C 13 Bytes [2C, 79, 75, FF, 8B, C2, 8D, ...]
.text ...
.text gpkcsp.dll!CPDeriveKey + 7C 0FE2422E 13 Bytes [8B, C8, 39, 01, 8B, 05, 58, ...] {MOV ECX, EAX; CMP [ECX], EAX; MOV EAX, [0x65f7e458]; MOV EDX, [EAX]; PUSH ESI}
.text gpkcsp.dll!CPDestroyKey + 8 0FE2423C 11 Bytes [80, A6, 85, FF, 5E, 5D, C3, ...]
.text gpkcsp.dll!CPDestroyKey + 14 0FE24248 24 Bytes [D7, 32, 06, 00, 79, 78, 75, ...]
.text gpkcsp.dll!CPDestroyKey + 2D 0FE24261 31 Bytes [00, 00, 33, C0, F3, AB, 8B, ...]
.text gpkcsp.dll!CPDestroyKey + 4D 0FE24281 10 Bytes [00, 8B, CE, 8B, 01, FF, 90, ...]
.text gpkcsp.dll!CPDestroyKey + 58 0FE2428C 2 Bytes [8B, CE] {MOV ECX, ESI}
.text ...
.text gpkcsp.dll!CPExportKey + 6D 0FE2431A 6 Bytes [FF, 85, C0, 0F, 84, E5] {INC DWORD [EBP-0x1a7bf040]}
.text gpkcsp.dll!CPExportKey + 74 0FE24321 32 Bytes [00, 00, 8B, 45, D4, 8B, 48, ...]
.text gpkcsp.dll!CPExportKey + 95 0FE24342 3 Bytes CALL 0F5FF500
.text gpkcsp.dll!CPExportKey + 99 0FE24346 5 Bytes [FF, 8B, C8, 39, 09]
.text gpkcsp.dll!CPExportKey + 9F 0FE2434C 32 Bytes [B8, B1, 7D, FF, 8B, F8, B9, ...]
.text ...
.text gpkcsp.dll!CPGenKey + 1C 0FE2438B 29 Bytes CALL 0F6030AE
.text gpkcsp.dll!CPGenKey + 3A 0FE243A9 16 Bytes [53, B1, 7D, FF, 8B, C8, 39, ...]
.text gpkcsp.dll!CPGenKey + 4B 0FE243BA 81 Bytes CALL 0F5FF037
.text gpkcsp.dll!CPGenKey + 9D 0FE2440C 13 Bytes [68, 52, FE, FF, 8B, F8, 8B, ...]
.text gpkcsp.dll!CPGenKey + AB 0FE2441A 79 Bytes [FF, FF, 85, C0, 74, 21, 8B, ...]
.text gpkcsp.dll!CPGenRandom + 27 0FE2446A 109 Bytes [0A, 52, FE, FF, 3B, C6, 75, ...]
.text gpkcsp.dll!CPGenRandom + 95 0FE244D8 22 Bytes [FD, 75, 75, FF, 55, 8B, EC, ...]
.text gpkcsp.dll!CPGenRandom + AC 0FE244EF 21 Bytes [33, C0, F3, AB, 8B, CE, 33, ...]
.text gpkcsp.dll!CPGetKeyParam + C 0FE24505 3 Bytes [01, 00, 00]
.text gpkcsp.dll!CPGetKeyParam + 10 0FE24509 58 Bytes [45, D8, 8B, C8, 8B, 01, FF, ...]
.text gpkcsp.dll!CPGetKeyParam + 4B 0FE24544 2 Bytes [FF, FF]
.text gpkcsp.dll!CPGetKeyParam + 4E 0FE24547 60 Bytes [8B, 45, DC, 8D, 50, 60, E8, ...]
.text gpkcsp.dll!CPGetKeyParam + 8B 0FE24584 26 Bytes [F8, C8, 83, FF, 8B, D8, 33, ...]
.text ...
.text gpkcsp.dll!CPGetUserKey + 8 0FE245DE 39 Bytes JMP F88BFF7D
.text gpkcsp.dll!CPGetUserKey + 30 0FE24606 51 Bytes CALL 0F603055
.text gpkcsp.dll!CPGetUserKey + 64 0FE2463A 49 Bytes JMP 8BFF7DE9
.text gpkcsp.dll!CPGetUserKey + 97 0FE2466D 70 Bytes [00, 8B, 4A, 5C, 85, C9, 0F, ...]
.text gpkcsp.dll!CPImportKey + 28 0FE246B4 17 Bytes JMP 006E4636
.text gpkcsp.dll!CPImportKey + 3A 0FE246C6 104 Bytes [F0, 8B, CB, 8B, 01, FF, 90, ...]
.text gpkcsp.dll!CPImportKey + A3 0FE2472F 15 Bytes [00, 00, 00, C7, 45, E8, FC, ...] {ADD [EAX], AL; ADD BH, AL; INC EBP; CALL 0x106; PUSH 0x66855820}
.text gpkcsp.dll!CPImportKey + B3 0FE2473F 91 Bytes [00, 8B, 0D, B4, C6, F6, 65, ...]
.text gpkcsp.dll!CPImportKey + 10F 0FE2479B 120 Bytes [8B, 01, FF, 90, 0C, 02, 00, ...]
.text gpkcsp.dll!CPSetKeyParam + 58 0FE24814 33 Bytes [68, 2C, 58, 85, 66, EB, 00, ...]
.text gpkcsp.dll!CPSetKeyParam + 7A 0FE24836 78 Bytes [FF, E0, 8D, 65, F4, 5B, 5E, ...]
.text gpkcsp.dll!CPSetKeyParam + C9 0FE24885 10 Bytes [85, C0, 74, 15, 8B, CE, E8, ...]
.text gpkcsp.dll!CPSetKeyParam + D4 0FE24890 12 Bytes [85, C0, 75, 0A, 8B, CE, 8B, ...]
.text gpkcsp.dll!CPSetKeyParam + E1 0FE2489D 24 Bytes [00, 5E, 5D, C3, CC, CC, CC, ...]
.text gpkcsp.dll!CPDecrypt + 10 0FE248B6 42 Bytes [55, F0, 8B, F1, 8B, CE, 8B, ...]
.text gpkcsp.dll!CPDecrypt + 3C 0FE248E2 50 Bytes CALL 0F67970E
.text gpkcsp.dll!CPDecrypt + 6F 0FE24915 36 Bytes [8B, C8, 8D, 51, 04, E8, 39, ...]
.text gpkcsp.dll!CPEncrypt + C 0FE2493A 31 Bytes CALL 0F6030AE
.text gpkcsp.dll!CPEncrypt + 2C 0FE2495A 18 Bytes [8B, 05, A4, F2, F7, 65, 8B, ...]
.text gpkcsp.dll!CPEncrypt + 3F 0FE2496D 50 Bytes CALL 0F6030B6
.text gpkcsp.dll!CPEncrypt + 72 0FE249A0 18 Bytes [76, 60, 8B, CB, 33, D2, E8, ...]
.text gpkcsp.dll!CPEncrypt + 85 0FE249B3 16 Bytes CALL 0F6030B6
.text gpkcsp.dll!CPCreateHash + B 0FE249C4 15 Bytes CALL 0F6030B8
.text gpkcsp.dll!CPCreateHash + 1B 0FE249D4 19 Bytes CALL 0F6030B0
.text gpkcsp.dll!CPCreateHash + 2F 0FE249E8 51 Bytes [FF, 76, 70, 8B, 4D, EC, BA, ...]
.text gpkcsp.dll!CPCreateHash + 63 0FE24A1C 3 Bytes [E1, 70, 75]
.text gpkcsp.dll!CPCreateHash + 67 0FE24A20 16 Bytes [55, 8B, EC, 57, 56, 53, 83, ...]
.text ...
.text gpkcsp.dll!CPDestroyHash + 26 0FE24A61 25 Bytes [90, 40, 02, 00, 00, 8B, CE, ...]
.text gpkcsp.dll!CPDestroyHash + 40 0FE24A7B 1 Byte [C8]
.text gpkcsp.dll!CPDestroyHash + 40 0FE24A7B 224 Bytes CALL 0F5FFCAF
.text gpkcsp.dll!CPHashData + 23 0FE24B5C 61 Bytes [8B, F0, 83, 7E, 08, 00, 74, ...]
.text gpkcsp.dll!CPHashData + 61 0FE24B9A 10 Bytes [85, C0, 74, 16, C6, 46, 14, ...] {TEST EAX, EAX; JZ 0x1a; MOV BYTE [ESI+0x14], 0x1; MOV ECX, ESI}
.text gpkcsp.dll!CPHashData + 6D 0FE24BA6 13 Bytes [00, 99, F7, 65, 85, C0, 74, ...]
.text gpkcsp.dll!CPHashData + 7B 0FE24BB4 44 Bytes [C6, 46, 14, 00, 8B, CE, FF, ...]
.text gpkcsp.dll!CPHashSessionKey + 26 0FE24BE1 11 Bytes [C7, 45, E4, 00, 00, 00, 00, ...]
.text gpkcsp.dll!CPHashSessionKey + 33 0FE24BEE 45 Bytes [00, 68, 7C, 5C, 85, 66, EB, ...]
.text gpkcsp.dll!CPHashSessionKey + 61 0FE24C1C 2 Bytes CALL 0FE240ED \WINDOWS\system32\gpkcsp.dll (Gemplus Cryptographic Service Provider/Microsoft Corporation)
.text gpkcsp.dll!CPHashSessionKey + 65 0FE24C20 24 Bytes [8B, D0, 8B, CE, 8B, 01, FF, ...]
.text gpkcsp.dll!CPHashSessionKey + 7E 0FE24C39 12 Bytes [00, 00, 89, 45, D8, BA, 77, ...]
.text gpkcsp.dll!CPSetHashParam + C 0FE24C46 64 Bytes CALL 0F60300E
.text gpkcsp.dll!CPSetHashParam + 4D 0FE24C87 7 Bytes [FF, 8B, D0, 8B, CE, 8B, 01]
.text gpkcsp.dll!CPSetHashParam + 55 0FE24C8F 22 Bytes [90, 98, 01, 00, 00, 8D, 65, ...]
.text gpkcsp.dll!CPSetHashParam + 6C 0FE24CA6 251 Bytes [FF, FF, 65, E7, 90, FF, 58, ...]
.text gpkcsp.dll!CPVerifySignature + B 0FE24DA2 67 Bytes [13, F2, 65, BA, CC, 06, 00, ...]
.text gpkcsp.dll!CPVerifySignature + 4F 0FE24DE6 9 Bytes [8B, F0, EB, 0C, B9, 70, A7, ...] {MOV ESI, EAX; JMP 0x10; MOV ECX, 0x6611a770}
.text gpkcsp.dll!CPVerifySignature + 59 0FE24DF0 77 Bytes [34, E2, 7D, FF, 8B, F0, 8B, ...]
.text gpkcsp.dll!CPVerifySignature + A7 0FE24E3E 10 Bytes [D6, B9, 90, 00, 13, 66, E8, ...]
.text gpkcsp.dll!CPVerifySignature + B2 0FE24E49 13 Bytes [8B, F0, 85, F6, 74, 10, 81, ...]
.text ...
.text gpkcsp.dll!DllMain + B1 0FE2975C 70 Bytes [45, E4, 8B, 50, 14, 8B, CB, ...]
.text gpkcsp.dll!DllMain + F8 0FE297A3 26 Bytes [7E, 44, 8B, D6, 8B, 4D, E0, ...]
.text gpkcsp.dll!DllMain + 113 0FE297BE 77 Bytes [8B, 01, FF, 50, 50, 8B, F8, ...]
.text gpkcsp.dll!DllMain + 161 0FE2980C 14 Bytes [55, 8B, EC, 57, 56, 53, 50, ...]
.text gpkcsp.dll!DllMain + 171 0FE2981C 18 Bytes [00, 8B, 35, C8, C6, F6, 65, ...]
.text ...
.text sccbase.dll!CPGetUserKey + FFFF3EFF 0FDA1429 146 Bytes [20, 8B, 06, 3B, 05, 9C, C6, ...]
.text sccbase.dll!CPGetUserKey + FFFF3F92 0FDA14BC 22 Bytes [AC, 8E, 7D, FF, 56, 8B, F1, ...]
.text sccbase.dll!CPGetUserKey + FFFF3FA9 0FDA14D3 328 Bytes [8E, FF, 8B, F0, 85, F6, 74, ...]
.text sccbase.dll!CPGetUserKey + FFFF40F2 0FDA161C 31 Bytes [C0, C0, 7D, FF, 55, 8B, EC, ...]
.text sccbase.dll!CPGetUserKey + FFFF4112 0FDA163C 31 Bytes [B8, C0, 7D, FF, 55, 8B, EC, ...]
.text ...
.text sccbase.dll!DllUnregisterServer + B 0FDA4518 72 Bytes [00, 00, 8B, CE, 8B, 01, FF, ...]
.text sccbase.dll!DllUnregisterServer + 54 0FDA4561 173 Bytes [90, 34, 03, 00, 00, 80, 7F, ...]
.text sccbase.dll!DllUnregisterServer + 102 0FDA460F 3 Bytes [C6, 46, 05]
.text sccbase.dll!DllUnregisterServer + 106 0FDA4613 77 Bytes [8B, D6, 8B, CF, 8B, 01, FF, ...]
.text sccbase.dll!DllUnregisterServer + 155 0FDA4662 33 Bytes CALL 0F667D20
.text ...
.text sccbase.dll!DllRegisterServer + F 0FDA4DC1 10 Bytes [8B, 07, 3B, 05, 34, C7, F6, ...] {MOV EAX, [EDI]; CMP EAX, [0x65f6c734]; JZ 0x17}
.text sccbase.dll!DllRegisterServer + 1A 0FDA4DCC 21 Bytes [0D, 34, C7, F6, 65, 8B, D7, ...]
.text sccbase.dll!DllRegisterServer + 30 0FDA4DE2 34 Bytes [42, 04, 89, 45, C8, 83, 7E, ...]
.text sccbase.dll!DllRegisterServer + 53 0FDA4E05 6 Bytes [4F, E2, 85, FF, 8B, 4E]
.text sccbase.dll!DllRegisterServer + 5A 0FDA4E0C 36 Bytes [FF, 75, C8, 8B, D7, FF, 15, ...]
.text ...
.text sccbase.dll!CPAcquireContextW + 9 0FDAC902 33 Bytes [5E, 5F, 5D, C3, CC, CC, 02, ...]
.text sccbase.dll!CPAcquireContextW + 2B 0FDAC924 112 Bytes [00, 67, 85, FF, 8B, F8, 8B, ...]
.text sccbase.dll!CPAcquireContextW + 9D 0FDAC996 15 Bytes CALL CCDA61CF
.text sccbase.dll!CPAcquireContextW + AE 0FDAC9A7 64 Bytes CALL 0F60304F
.text sccbase.dll!CPAcquireContextW + EF 0FDAC9E8 3 Bytes CALL 0F603091
.text ...
.text sccbase.dll!CPAcquireContext + 41 0FDACAB8 2 Bytes CALL 0FDACB1D \WINDOWS\system32\sccbase.dll (Infineon SICRYPT® Base Smart Card CSP/Microsoft Corporation)
.text sccbase.dll!CPAcquireContext + 45 0FDACABC 69 Bytes CALL 0FD413B0
.text sccbase.dll!CPAcquireContext + 8B 0FDACB02 18 Bytes [74, 0C, 8B, CE, BA, 01, 00, ...] {JZ 0xe; MOV ECX, ESI; MOV EDX, 0x1; CALL 0xffffffffff8bb21e; POP ESI; POP EDI; POP EBP; RET }
.text sccbase.dll!CPAcquireContext + 9E 0FDACB15 43 Bytes [D7, 0C, 00, 70, F7, 7B, FF, ...]
.text sccbase.dll!CPAcquireContext + CA 0FDACB41 142 Bytes [E5, 0C, 00, 54, FC, 7B, FF, ...]
.text ...
.text sccbase.dll!CPReleaseContext + 22 0FDACC46 45 Bytes CALL 20663241
.text sccbase.dll!CPReleaseContext + 50 0FDACC74 20 Bytes CALL 0F63FDBE
.text sccbase.dll!CPGenKey 0FDACC89 23 Bytes [74, 0C, 8B, CE, 83, 7D, F0, ...]
.text sccbase.dll!CPGenKey + 18 0FDACCA1 26 Bytes [00, 01, 0F, B6, 46, 67, 8D, ...]
.text sccbase.dll!CPGenKey + 33 0FDACCBC 106 Bytes [55, 8B, EC, 57, 56, 53, 83, ...]
.text sccbase.dll!CPDeriveKey + 33 0FDACD27 60 Bytes [15, 94, 82, F7, 65, 33, D2, ...]
.text sccbase.dll!CPDestroyKey + 2 0FDACD64 23 Bytes [F0, 8B, CE, 39, 09, E8, 2A, ...]
.text sccbase.dll!CPDestroyKey + 1A 0FDACD7C 48 Bytes CALL 0F603028
.text sccbase.dll!CPDestroyKey + 4B 0FDACDAD 1 Byte [FF]
.text sccbase.dll!CPDestroyKey + 4B 0FDACDAD 22 Bytes [FF, 8B, F0, 8B, 4D, 10, 8B, ...]
.text sccbase.dll!CPDestroyKey + 62 0FDACDC4 25 Bytes [2F, 8E, FF, 8B, D0, B9, D0, ...]
.text sccbase.dll!CPSetKeyParam + 18 0FDACDDF 58 Bytes [50, 0F, B6, 45, 0C, 50, 8B, ...]
.text sccbase.dll!CPSetKeyParam + 53 0FDACE1A 115 Bytes [65, 74, 0D, 8B, 0D, 34, C7, ...]
.text sccbase.dll!CPGetKeyParam + 59 0FDACE8E 25 Bytes [C8, FF, 15, A4, 82, F7, 65, ...]
.text sccbase.dll!CPSetProvParam + 2 0FDACEA8 63 Bytes [01, FF, 90, F0, 01, 00, 00, ...]
.text sccbase.dll!CPSetProvParam + 43 0FDACEE9 59 Bytes [00, EB, AC, 8D, 65, F4, 5B, ...]
.text sccbase.dll!CPGetProvParam + 14 0FDACF25 36 Bytes [9F, 61, 85, FF, 8B, D8, BA, ...]
.text sccbase.dll!CPGetProvParam + 39 0FDACF4A 127 Bytes [B9, 94, 45, 10, 66, E8, 74, ...]
.text sccbase.dll!CPSetHashParam + 4B 0FDACFCA 13 Bytes [00, 89, 45, F0, 8B, 45, D4, ...]
.text sccbase.dll!CPSetHashParam + 59 0FDACFD8 2 Bytes [45, F0]
.text sccbase.dll!CPSetHashParam + 5C 0FDACFDB 19 Bytes CALL 94FB26C8
.text sccbase.dll!CPGetHashParam + 2 0FDACFEF 25 Bytes CALL 0F6030B5
.text sccbase.dll!CPGetHashParam + 1C 0FDAD009 34 Bytes CALL 0F6030B8
.text sccbase.dll!CPGetHashParam + 3F 0FDAD02C 5 Bytes [50, 8B, CF, 33, D2] {PUSH EAX; MOV ECX, EDI; XOR EDX, EDX}
.text sccbase.dll!CPGetHashParam + 45 0FDAD032 22 Bytes [0A, 20, 85, FF, 50, 8B, CE, ...]
.text sccbase.dll!CPGetHashParam + 5C 0FDAD049 14 Bytes [CE, BA, 03, 00, 00, 00, E8, ...] {INTO ; MOV EDX, 0x3; CALL 0xffffffffff85606f; PUSH DWORD [EBP-0x28]}
.text ...
.text sccbase.dll!CPExportKey 0FDAD05E 14 Bytes CALL 0F6030B8
.text sccbase.dll!CPExportKey + F 0FDAD06D 92 Bytes CALL 0F6030B6
.text sccbase.dll!CPExportKey + 6C 0FDAD0CA 107 Bytes [8B, 7D, 08, 8B, CE, E8, E4, ...]
.text sccbase.dll!CPImportKey + 64 0FDAD136 57 Bytes [70, 85, C0, 74, 28, 8B, CE, ...]
.text sccbase.dll!CPEncrypt + 2D 0FDAD170 41 Bytes [50, 38, 8B, D0, 8B, 05, D0, ...]
.text sccbase.dll!CPEncrypt + 57 0FDAD19A 15 Bytes [FF, 5B, 5E, 5F, 5D, C2, 04, ...]
.text sccbase.dll!CPEncrypt + 67 0FDAD1AA 73 Bytes [00, CC, 38, E0, 0C, 00, 2C, ...]
.text sccbase.dll!CPDecrypt + 3A 0FDAD1F4 59 Bytes [04, 33, C0, EB, 1F, B9, 07, ...]
.text sccbase.dll!CPCreateHash + 2 0FDAD230 11 Bytes [F9, 8B, DA, 8B, CF, 8B, 01, ...]
.text sccbase.dll!CPCreateHash + F 0FDAD23D 41 Bytes [83, 78, 08, 00, 0F, 9F, C0, ...]
.text sccbase.dll!CPCreateHash + 39 0FDAD267 94 Bytes [90, 80, 03, 00, 00, 80, 7E, ...]
.text sccbase.dll!CPHashData + 2A 0FDAD2C6 49 Bytes [89, 4D, D8, 8B, FA, 33, D2, ...]
.text sccbase.dll!CPHashData + 5C 0FDAD2F8 201 Bytes [45, D4, 85, C0, 0F, 84, 62, ...]
.text sccbase.dll!CPDestroyHash + 4E 0FDAD3C3 24 Bytes [CC, FF, 15, BC, 82, F7, 65, ...]
.text sccbase.dll!CPSignHash + 2 0FDAD3DC 160 Bytes [F8, 8B, 07, 3B, 05, 34, C7, ...]
.text sccbase.dll!CPVerifySignature + 2F 0FDAD47D 102 Bytes CALL 0F603054
.text sccbase.dll!CPGenRandom + 22 0FDAD4E4 175 Bytes [D0, 80, 78, 04, 00, 74, 0E, ...]
.text sccbase.dll!CPGetUserKey + 6A 0FDAD594 61 Bytes [DA, B9, 18, C1, 13, 66, E8, ...]
.text sccbase.dll!CPGetUserKey + A8 0FDAD5D2 17 Bytes [CE, 8B, 01, FF, 90, 90, 03, ...] {INTO ; MOV EAX, [ECX]; CALL [EAX+0x390]; XOR EDX, EDX; MOV [ESI+0xec], EDX}
.text sccbase.dll!CPGetUserKey + BA 0FDAD5E4 63 Bytes [96, F0, 00, 00, 00, 83, 7D, ...]
.text sccbase.dll!CPGetUserKey + FA 0FDAD624 55 Bytes [01, FF, 90, 04, 01, 00, 00, ...]
.text sccbase.dll!CPGetUserKey + 132 0FDAD65C 26 Bytes [BE, 0C, 01, 00, 00, 8B, CE, ...]
.text ...
.text slbcsp.dll!CPReleaseContext + FFFEC725 0FCA15D1 17 Bytes [F7, 65, 8B, 00, 89, 85, 2C, ...]
.text slbcsp.dll!CPReleaseContext + FFFEC738 0FCA15E4 14 Bytes [00, 56, 8B, 8D, 30, EF, FF, ...]
.text slbcsp.dll!CPReleaseContext + FFFEC747 0FCA15F3 7 Bytes [8B, 05, D0, C2, F7, 65, 8B]
.text slbcsp.dll!CPReleaseContext + FFFEC74F 0FCA15FB 21 Bytes [89, 85, 28, EF, FF, FF, FF, ...]
.text slbcsp.dll!CPReleaseContext + FFFEC765 0FCA1611 259 Bytes [8B, 0D, C0, C6, F6, 65, E8, ...]
.text ...
.text slbcsp.dll!DllUnregisterServer + 7A 0FCA9BF4 52 Bytes [02, EB, 0F, 8B, 0D, 9C, C6, ...]
.text slbcsp.dll!DllUnregisterServer + AF 0FCA9C29 88 Bytes [85, C0, 75, 0C, 33, C0, 8D, ...]
.text slbcsp.dll!DllUnregisterServer + 108 0FCA9C82 13 Bytes [05, 50, EB, F6, 65, 8B, 10, ...] {ADD EAX, 0x65f6eb50; MOV EDX, [EAX]; MOV EAX, [0x65f7bbf0]}
.text slbcsp.dll!DllRegisterServer + 2 0FCA9C90 1 Byte [30]
.text slbcsp.dll!DllRegisterServer + 2 0FCA9C90 51 Bytes [30, 8B, CF, FF, 15, C0, 2B, ...]
.text slbcsp.dll!DllRegisterServer + 36 0FCA9CC4 23 Bytes [15, C8, 2B, F7, 65, 8B, 05, ...]
.text slbcsp.dll!DllRegisterServer + 4E 0FCA9CDC 29 Bytes [15, CC, 2B, F7, 65, 8B, 05, ...]
.text slbcsp.dll!DllRegisterServer + 6C 0FCA9CFA 15 Bytes [90, 38, 02, 00, 00, FF, 75, ...]
.text ...
.text slbcsp.dll!CPAcquireContext + 45 0FCB1C3E 322 Bytes CALL 0F60303C
.text slbcsp.dll!CPAcquireContext + 188 0FCB1D81 48 Bytes CALL 0F66E4BD
.text slbcsp.dll!CPAcquireContext + 1B9 0FCB1DB2 7 Bytes JMP 205683AD
.text slbcsp.dll!CPAcquireContext + 1C1 0FCB1DBA 5 Bytes [05, 00, C7, F7, 65] {ADD EAX, 0x65f7c700}
.text slbcsp.dll!CPAcquireContext + 1C7 0FCB1DC0 71 Bytes [30, 8B, CF, FF, 15, 4C, 36, ...]
.text ...
.text slbcsp.dll!CPSetProvParam + 48 0FCB1F84 3 Bytes CALL 0F66D1B1
.text slbcsp.dll!CPSetProvParam + 4C 0FCB1F88 15 Bytes [53, 8B, 55, EC, 8B, 4D, F0, ...] {PUSH EBX; MOV EDX, [EBP-0x14]; MOV ECX, [EBP-0x10]; MOV EAX, [ECX]; CALL [EAX+0x3f8]}
.text slbcsp.dll!CPSetProvParam + 5C 0FCB1F98 135 Bytes [75, EC, 53, 8B, 4D, F0, 33, ...]
.text slbcsp.dll!CPSetProvParam + E5 0FCB2021 67 Bytes [70, 36, F7, 65, 8B, F0, 85, ...]
.text slbcsp.dll!CPSetProvParam + 129 0FCB2065 3 Bytes CALL 0F66E4C1
.text ...
.text slbcsp.dll!CPDeriveKey + 71 0FCB2147 10 Bytes [CC, DA, 3B, A7, FF, F8, F9, ...]
.text slbcsp.dll!CPDeriveKey + 7C 0FCB2152 9 Bytes [00, CC, CC, CC, CC, CC, CD, ...] {ADD AH, CL; INT 3 ; INT 3 ; INT 3 ; INT 3 ; INT 0x3b; CMPSD }
.text slbcsp.dll!CPDeriveKey + 86 0FCB215C 51 Bytes [F0, F9, 8D, FF, C2, 08, 00, ...]
.text slbcsp.dll!CPDeriveKey + BA 0FCB2190 80 Bytes [5D, 08, 8B, 7B, 20, 8B, 05, ...]
.text slbcsp.dll!CPDeriveKey + 10B 0FCB21E1 10 Bytes CALL 0F66E4BD
.text ...
.text slbcsp.dll!CPDestroyKey + 14 0FCB2277 8 Bytes [8B, 10, 8B, 05, EC, BD, F7, ...] {MOV EDX, [EAX]; MOV EAX, [0x65f7bdec]}
.text slbcsp.dll!CPDestroyKey + 1D 0FCB2280 37 Bytes [30, 8B, CF, FF, 15, A4, 36, ...]
.text slbcsp.dll!CPDestroyKey + 43 0FCB22A6 41 Bytes [00, FF, 75, EC, 53, 8B, 4D, ...]
.text slbcsp.dll!CPDestroyKey + 6D 0FCB22D0 43 Bytes [C2, 04, 00, CC, CC, CC, CC, ...]
.text slbcsp.dll!CPDestroyKey + 99 0FCB22FC 88 Bytes [7C, F8, 8D, FF, 55, 8B, EC, ...]
.text ...
.text slbcsp.dll!CPDuplicateHash + 1D 0FCB23D4 49 Bytes [15, B8, 36, F7, 65, 8B, 05, ...]
.text slbcsp.dll!CPDuplicateHash + 4F 0FCB2406 53 Bytes [F0, 8B, 01, FF, 90, 10, 04, ...]
.text slbcsp.dll!CPDuplicateHash + 85 0FCB243C 31 Bytes [50, F7, 8D, FF, C2, 04, 00, ...]
.text slbcsp.dll!CPDuplicateHash + A5 0FCB245C 327 Bytes [34, EC, 8D, FF, C2, 08, 00, ...]
.text slbcsp.dll!CPDuplicateKey + 74 0FCB25A4 40 Bytes [15, D8, 36, F7, 65, 8B, 05, ...]
.text slbcsp.dll!CPDuplicateKey + 9D 0FCB25CD 6 Bytes [F7, 65, FF, 30, 8B, CF]
.text slbcsp.dll!CPDuplicateKey + A4 0FCB25D4 47 Bytes [15, E0, 36, F7, 65, 8B, 05, ...]
.text slbcsp.dll!CPDuplicateKey + D4 0FCB2604 188 Bytes CALL 9B311D3F
.text slbcsp.dll!CPExportKey + 18 0FCB26C1 77 Bytes JMP 5DE8660F
.text slbcsp.dll!CPExportKey + 66 0FCB270F 48 Bytes [FF, 75, F0, 57, 8B, CB, 33, ...]
.text slbcsp.dll!CPExportKey + 97 0FCB2740 27 Bytes [C2, 08, 00, CC, CC, CC, CC, ...]
.text slbcsp.dll!CPExportKey + B3 0FCB275C 80 Bytes CALL 148E26EE
.text slbcsp.dll!CPExportKey + 104 0FCB27AD 82 Bytes [3B, 05, 9C, C6, F6, 65, 75, ...]
.text ...
.text slbcsp.dll!CPGenKey + 28 0FCB294F 16 Bytes [FF, C2, 08, 00, CC, CC, CC, ...] {INC EDX; OR [EAX], AL; INT 3 ; INT 3 ; INT 3 ; INT 3 ; INT 3 ; RETF 0xa733; INC EAX; OUT 0x8d, AL}
.text slbcsp.dll!CPGenKey + 39 0FCB2960 195 Bytes [C2, 04, 00, CC, CC, CC, CC, ...]
.text slbcsp.dll!CPGenKey + FD 0FCB2A24 106 Bytes [15, 24, 37, F7, 65, 8B, 05, ...]
.text slbcsp.dll!CPGenKey + 168 0FCB2A8F 28 Bytes [FF, 75, EC, 53, 8B, 4D, F0, ...]
.text slbcsp.dll!CPGetKeyParam + 18 0FCB2AAC 22 Bytes [C2, 04, 00, CC, CC, CC, CC, ...]
.text slbcsp.dll!CPGetKeyParam + 2F 0FCB2AC3 28 Bytes [CC, CC, CC, CC, CC, CC, CC, ...]
.text slbcsp.dll!CPGetKeyParam + 4C 0FCB2AE0 31 Bytes [C2, 04, 00, CC, CC, CC, CC, ...]
.text slbcsp.dll!CPGetKeyParam + 6C 0FCB2B00 122 Bytes [55, 8B, EC, 57, 56, 53, 83, ...]
.text slbcsp.dll!CPGetKeyParam + E7 0FCB2B7B 100 Bytes CALL 9B312268
.text ...
.text slbcsp.dll!CPGetUserKey + 22 0FCB2D40 7 Bytes [FC, 02, 95, FF, 8B, F0, B9] {CLD ; ADD DL, [EBP-0x460f7401]}
.text slbcsp.dll!CPGetUserKey + 2A 0FCB2D48 64 Bytes JMP D8E8660F
.text slbcsp.dll!CPGetUserKey + 6B 0FCB2D89 38 Bytes [30, 8B, 4D, F0, FF, 15, 64, ...]
.text slbcsp.dll!CPGetUserKey + 92 0FCB2DB0 165 Bytes [00, 00, B8, 01, 00, 00, 00, ...]
.text slbcsp.dll!CPGetUserKey + 138 0FCB2E56 101 Bytes [85, C0, 75, 0C, 33, C0, 8D, ...]
.text slbcsp.dll!CPImportKey + F 0FCB2EBC 37 Bytes JMP 485694B7
.text slbcsp.dll!CPImportKey + 35 0FCB2EE2 57 Bytes [F0, 8B, 01, FF, 90, 78, 01, ...]
.text slbcsp.dll!CPImportKey + 6F 0FCB2F1C 38 Bytes [78, E0, 8D, FF, C2, 08, 00, ...]
.text slbcsp.dll!CPImportKey + 96 0FCB2F43 53 Bytes [CC, CC, CC, CC, CC, CC, CC, ...]
.text slbcsp.dll!CPImportKey + CD 0FCB2F7A 6 Bytes [00, 8D, 4A, DE, E8, AD] {ADD [EBP-0x521721b6], CL}
.text ...
.text slbcsp.dll!CPSetKeyParam + 2C 0FCB326D 67 Bytes [E4, FF, 15, D0, 37, F7, 65, ...]
.text slbcsp.dll!CPSetKeyParam + 70 0FCB32B1 18 Bytes [15, DC, 37, F7, 65, 8B, 05, ...] {ADC EAX, 0x65f737dc; MOV EAX, [0x65f6e9d4]; MOV EDX, [EAX]; MOV EAX, [EBP-0x18]; PUSH DWORD [EAX]}
.text slbcsp.dll!CPSetKeyParam + 83 0FCB32C4 174 Bytes [4D, E4, FF, 15, E0, 37, F7, ...]
.text slbcsp.dll!CPSetKeyParam + 132 0FCB3373 16 Bytes [56, 8B, D3, 8B, CF, E8, BB, ...]
.text slbcsp.dll!CPSetKeyParam + 143 0FCB3384 17 Bytes [56, 8B, D3, 8B, CF, E8, 2A, ...]
.text ...
.text slbcsp.dll!CPEncrypt + 98 0FCB355A 9 Bytes CALL 0F61519D
.text slbcsp.dll!CPEncrypt + A2 0FCB3564 87 Bytes [0F, 85, 45, 02, 00, 00, 56, ...]
.text slbcsp.dll!CPEncrypt + FA 0FCB35BC 5 Bytes [85, C0, 0F, 85, EB]
.text slbcsp.dll!CPEncrypt + 100 0FCB35C2 7 Bytes [00, 00, 56, 8B, D3, 8B, CF] {ADD [EAX], AL; PUSH ESI; MOV EDX, EBX; MOV ECX, EDI}
.text slbcsp.dll!CPEncrypt + 108 0FCB35CA 49 Bytes [C2, 1B, 96, FF, 85, C0, 0F, ...]
.text ...
.text slbcsp.dll!CPDecrypt + F 0FCB3643 51 Bytes CALL 0F615144
.text slbcsp.dll!CPDecrypt + 43 0FCB3677 76 Bytes [00, 56, 8B, D3, 8B, CF, E8, ...]
.text slbcsp.dll!CPDecrypt + 90 0FCB36C4 5 Bytes [CF, E8, EE, 1A, 96]
.text slbcsp.dll!CPDecrypt + 96 0FCB36CA 47 Bytes [85, C0, 0F, 85, DD, 00, 00, ...]
.text slbcsp.dll!CPDecrypt + C6 0FCB36FA 76 Bytes CALL 0F6151E7
.text ...
.text slbcsp.dll!CPCreateHash + 1 0FCB37BF 28 Bytes [01, 00, 00, 00, 8D, 65, F4, ...]
.text slbcsp.dll!CPCreateHash + 1E 0FCB37DC 6 Bytes [94, D7, 8D, FF, C2, 08]
.text slbcsp.dll!CPCreateHash + 25 0FCB37E3 59 Bytes [CC, CC, CC, CC, CC, CC, CC, ...]
.text slbcsp.dll!CPCreateHash + 61 0FCB381F 97 Bytes [FF, 55, 8B, EC, 57, 56, 53, ...]
.text slbcsp.dll!CPCreateHash + C3 0FCB3881 66 Bytes CALL 0F66E4BD
.text ...
.text slbcsp.dll!CPDestroyHash + D 0FCB393F 16 Bytes [F7, 65, 8B, 05, 20, E8, F6, ...] {MUL DWORD [EBP-0x75]; ADD EAX, 0x65f6e820; MOV EDX, [EAX]; MOV EAX, [0x65f7b1c4]}
.text slbcsp.dll!CPDestroyHash + 1E 0FCB3950 27 Bytes [30, 8B, CF, FF, 15, 18, 38, ...]
.text slbcsp.dll!CPDestroyHash + 3A 0FCB396C 53 Bytes [15, 1C, 38, F7, 65, 8B, 05, ...]
.text slbcsp.dll!CPDestroyHash + 70 0FCB39A2 13 Bytes [05, 58, EB, F6, 65, 8B, 10, ...] {ADD EAX, 0x65f6eb58; MOV EDX, [EAX]; MOV EAX, [0x65f7bba8]}
.text slbcsp.dll!CPDestroyHash + 7E 0FCB39B0 1 Byte [30]
.text ...
.text slbcsp.dll!CPGetHashParam 0FCB3A8C 97 Bytes [CC, CC, CC, CC, CC, CC, CC, ...]
.text slbcsp.dll!CPGetHashParam + 62 0FCB3AEE 10 Bytes JMP 2FE8660F
.text slbcsp.dll!CPGetHashParam + 6D 0FCB3AF9 18 Bytes [8B, F8, 8D, 57, 08, E8, 55, ...] {MOV EDI, EAX; LEA EDX, [EDI+0x8]; CALL 0xffffffffff94f55f; MOV EAX, [0x65f7c96c]; PUSH DWORD [EAX]}
.text slbcsp.dll!CPGetHashParam + 80 0FCB3B0C 57 Bytes CALL 0F66E4BC
.text slbcsp.dll!CPGetHashParam + BA 0FCB3B46 63 Bytes [05, 68, D1, F6, 65, 89, 45, ...]
.text ...
.text slbcsp.dll!CPHashData + 1D 0FCB3C5C 47 Bytes [15, 6C, 38, F7, 65, 8B, 05, ...]
.text slbcsp.dll!CPHashData + 4D 0FCB3C8C 110 Bytes [15, 74, 38, F7, 65, 8B, 05, ...]
.text slbcsp.dll!CPHashData + BC 0FCB3CFB 134 Bytes [15, 88, 38, F7, 65, 8B, 05, ...]
.text slbcsp.dll!CPHashData + 143 0FCB3D82 12 Bytes [00, FF, 75, E4, 53, 8B, 4D, ...] {ADD BH, BH; JNZ 0xffffffffffffffe8; PUSH EBX; MOV ECX, [EBP-0x18]; XOR EDX, EDX; MOV EAX, [ECX]}
.text slbcsp.dll!CPHashData + 150 0FCB3D8F 24 Bytes [90, 24, 04, 00, 00, B8, 01, ...]
.text ...
.text slbcsp.dll!CPHashSessionKey + 76 0FCB3E22 61 Bytes [00, CC, CC, CC, CC, CC, CC, ...]
.text slbcsp.dll!CPHashSessionKey + B4 0FCB3E60 44 Bytes [55, 8B, EC, 57, 56, 53, 83, ...]
.text slbcsp.dll!CPHashSessionKey + E1 0FCB3E8D 13 Bytes [50, 38, 8B, F8, B9, C8, EA, ...]
.text slbcsp.dll!CPHashSessionKey + EF 0FCB3E9B 105 Bytes [8B, F0, 8D, 56, 08, E8, B3, ...]
.text slbcsp.dll!CPHashSessionKey + 159 0FCB3F05 26 Bytes [B7, A5, 9B, FF, 85, C0, 75, ...]
.text ...
.text slbcsp.dll!CPSetHashParam + 3F 0FCB3F72 4 Bytes CALL 0F603549
.text slbcsp.dll!CPSetHashParam + 44 0FCB3F77 68 Bytes CALL 4873557B
.text slbcsp.dll!CPSetHashParam + 89 0FCB3FBC 3 Bytes [5C, DC, 8D]
.text slbcsp.dll!CPSetHashParam + 8D 0FCB3FC0 30 Bytes [C2, 04, 00, CC, CC, CC, CC, ...]
.text slbcsp.dll!CPSetHashParam + AC 0FCB3FDF 136 Bytes [FF, C2, 08, 00, CC, CC, CC, ...]
.text ...
.text slbcsp.dll!CPSignHash + 15 0FCB40B5 30 Bytes JMP 2056A6B0
.text slbcsp.dll!CPSignHash + 34 0FCB40D4 8 Bytes [8B, 10, 8B, CF, E8, D3, 90, ...]
.text slbcsp.dll!CPSignHash + 3D 0FCB40DD 130 Bytes [57, 8B, 55, F0, 8B, CB, 8B, ...]
.text slbcsp.dll!CPSignHash + C0 0FCB4160 130 Bytes [55, 8B, EC, 57, 56, 53, 83, ...]
.text slbcsp.dll!CPSignHash + 143 0FCB41E3 86 Bytes [10, 8B, 05, F0, C7, F7, 65, ...]
.text ...
.text slbcsp.dll!CPVerifySignature + 36 0FCB4308 3 Bytes CALL 0F66E4C1
.text slbcsp.dll!CPVerifySignature + 3A 0FCB430C 80 Bytes [85, C0, 75, 0C, 33, C0, 8D, ...]
.text slbcsp.dll!CPVerifySignature + 8B 0FCB435D 3 Bytes [57, 8B, 55]
.text slbcsp.dll!CPVerifySignature + 8F 0FCB4361 4 Bytes [8B, CB, 8B, 01] {MOV ECX, EBX; MOV EAX, [ECX]}
.text slbcsp.dll!CPVerifySignature + 94 0FCB4366 15 Bytes [90, D0, 0A, 00, 00, FF, 75, ...] {NOP ; ROR BYTE [EDX], 0x1; ADD [EAX], AL; PUSH DWORD [EBP-0x10]; PUSH EDI; MOV ECX, EBX; XOR EDX, EDX; MOV EAX, [ECX]}
.text ...
.text slbcsp.dll!CPGenRandom + 15 0FCB44A1 24 Bytes [8B, CB, 8B, 01, FF, 90, C8, ...]
.text slbcsp.dll!CPGenRandom + 2F 0FCB44BB 71 Bytes [B8, 01, 00, 00, 00, 8D, 65, ...]
.text slbcsp.dll!CPGenRandom + 77 0FCB4503 25 Bytes [CC, CC, CC, CC, CC, CC, CC, ...]
.text slbcsp.dll!CPGenRandom + 91 0FCB451D 216 Bytes [F3, 8D, FF, 55, 8B, EC, 57, ...]
.text slbcsp.dll!CPGenRandom + 16A 0FCB45F6 152 Bytes [90, C4, 0A, 00, 00, B8, 01, ...]
.text ...
.text slbcsp.dll!CPGetProvParam + 2C 0FCB49DF 15 Bytes [FF, C2, 08, 00, CC, CC, CC, ...] {INC EDX; OR [EAX], AL; INT 3 ; INT 3 ; INT 3 ; INT 3 ; INT 3 ; INT 3 ; INT 3 ; INT 3 ; INT 3 ; INT 3 ; INT 3 }
.text slbcsp.dll!CPGetProvParam + 3C 0FCB49EF 55 Bytes [CC, CC, CC, CC, CC, CC, CC, ...]
.text slbcsp.dll!CPGetProvParam + 74 0FCB4A27 50 Bytes [EC, 08, 89, 55, F0, 8B, D9, ...]
.text slbcsp.dll!CPGetProvParam + A7 0FCB4A5A 27 Bytes [8B, 0D, 9C, C6, F6, 65, 8B, ...]
.text slbcsp.dll!CPGetProvParam + C3 0FCB4A76 71 Bytes CALL 0F60308E
.text ...
.text slbcsp.dll!CPReleaseContext + 65 0FCB4F11 53 Bytes [15, 5C, 39, F7, 65, 8B, 05, ...]
.text slbcsp.dll!CPReleaseContext + 9B 0FCB4F47 31 Bytes [10, 8B, 05, D8, C9, F7, 65, ...]
.text slbcsp.dll!CPReleaseContext + BB 0FCB4F67 41 Bytes [30, 8B, CE, FF, 15, 6C, 39, ...]
.text slbcsp.dll!CPReleaseContext + E5 0FCB4F91 137 Bytes [37, 8B, CE, FF, 15, 74, 39, ...]
.text slbcsp.dll!CPReleaseContext + 16F 0FCB501B 15 Bytes [05, E0, C9, F7, 65, FF, 30, ...] {ADD EAX, 0x65f7c9e0; PUSH DWORD [EAX]; MOV ECX, ESI; CALL [0x65f73990]}
.text ...








_______________________________________________________

And that is all of the kernel code copy/pasted.

That is it for me tonight, as I must prepare for work tomorrow, sleep, etc.

I will back back tomorrow sometime after 6pm.


thanks,
adam.

#11 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:03:00 PM

Posted 31 May 2010 - 09:04 PM

Hello Adam,

Sleep well. smile.gif

Thank you for posting those.

I'm going to assume you let MBAM clean all those and move forward.

This tool is not a toy. If used the wrong way you could trash your computer. Please use only under direction of a Helper. If you decide to do so anyway, please do not blame me or ComboFix.

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

1. Download this file - combofix.exe
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

2. Double click combofix.exe & follow the prompts.
3. When finished, it will produce a log for you. Post that log in your next reply please.

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall.

If you have trouble running it the first time, then rename ComboFix.exe to dweller.exe and try again.

Thanks,
tea
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?

#12 studiodweller

studiodweller
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 01 June 2010 - 07:55 PM

My ComboFix log is attached.

Because I was instructed to disable antivirus software, I also disconnected from the internet (to be completely safe). However, then I was informed I did not have the recovery console installed and ComboFix was pretty much off to the races before I was able to get reconnected.

ComboFix warned me I could miss some infections without the recovery console installed, so I suspect the log attached here is incomplete. However, all of the warnings around ComboFix has me plenty spooked to touch ANYTHING unless specifically instructed by you, so I decided against running combofix a second time (while connected to the internet). I suspect you'll want me to run again while online? Please advise, thanks.


till then...

adam.

Attached Files



#13 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:03:00 PM

Posted 01 June 2010 - 08:54 PM

Hi there,

Hope your day went well. smile.gif

Part of ComboFix's routine is to take you off the internet while it's cleaning/scanning. That's why I didn't ask you to disconnect before you ran it. wink.gif

It removed some things, but you can run it again if you like. How is it running tonight after ComboFix?

tea
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?

#14 studiodweller

studiodweller
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 02 June 2010 - 03:11 PM

Both yesterday and today has been going all right. Power went out at work at noon today, so i'm getting some things done from home today.

I've got to say that from skimming these logs, just having any idea about the craziness that goes on inside these beasts is daunting. I thought I'd keep up when my family got its first personal computer back when I was in high school, but i realized pretty quickly my skillset is elsewhere and i'm much better at using them than understanding them (at least in specific terms).

Anyway, down to business, I ran ComboFix again while connected, that log is now attached.

The machine seems to be completely back under my control again.
-Firefox has been using 50% of the mem it once did.
-I don't recognize any processes in the task manager that should not be there. However, I always view the svchosts with suspicion since they are so opaque. I have 9 running right now. Not necessarily a huge number but still seems like a lot.
-My startup is almost entirely free of unrecognized programs. However, what is the story behind "dumprep 0 -k"? that one worries me.

So, I guess that is my update. excepting the svchost and dumprep questions, "I feel fine" so to speak. Are you able to tell from logs if there is anything sinister residing somewhere deep? Is there a clean bill of health? Other than an active firewall and current and activated antivirus, is there anything else I can do to stay safe?



adam.

Attached Files



#15 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:03:00 PM

Posted 02 June 2010 - 03:49 PM

Hello,

Enjoy the extra time at home. thumbup2.gif

QUOTE
Are you able to tell from logs if there is anything sinister residing somewhere deep?
ComboFix took care of that in the last run you did. I am curious though.....could you please tell me what's in this folder? c:\documents and settings\Adam\Local Settings\Application Data\pnmfhxcqw

It *could* be a random name for MBAM, or something similar, but I have to be sure before I give you the all clear.

dumprep 0 -k is a legit part of the system. Having said that, you can "msconfig" it and it may give you some speed back. It tends to slow things down, especially in an infected computer.

Let me know about that folder. smile.gif

Thanks,
tea
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users