.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetPathFromIDListW + 15 7C9E9D91 6 Bytes [ C5, BB, 7C, 89, 45, FC ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetPathFromIDListW + 1C 7C9E9D98 44 Bytes [ 45, 08, 50, 6A, 07, 8D, 45, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetPathFromIDListW + 49 7C9E9DC5 44 Bytes [ 85, C0, 0F, 85, 19, B1, FF, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetPathFromIDListW + 76 7C9E9DF2 31 Bytes CALL 7C9E9A1E C:WINDOWSsystem32SHELL32.dll (Общая библиотека оболочки Windows/Корпорация Майкрософт)
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetPathFromIDListW + 96 7C9E9E12 29 Bytes [ C0, 0F, 84, 7C, 6E, 02, 00, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!RealDriveType + 1E 7C9E9E9C 23 Bytes [ 34, 50, FF, 76, 14, E8, 63, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DriveType 7C9E9EB6 24 Bytes [ 90, 90, 8B, FF, 55, 8B, EC, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DriveType + 19 7C9E9ECF 18 Bytes [ 76, 04, FF, 75, 0C, 53, E8, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DriveType + 2C 7C9E9EE2 69 Bytes [ 74, 2C, 6A, 00, 8D, 45, 0C, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DriveType + 72 7C9E9F28 10 Bytes [ FF, 55, 8B, EC, 8B, 45, 0C, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DriveType + 7D 7C9E9F33 29 Bytes [ 7F, 0F, 87, CF, 5D, 06, 00, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!IsNetDrive + B 7C9EA04A 151 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!IsNetDrive + A4 7C9EA0E3 3 Bytes [ 8B, FF, 55 ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!IsNetDrive + A8 7C9EA0E7 122 Bytes [ EC, 51, 83, 65, FC, 00, 53, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!IsNetDrive + 123 7C9EA162 24 Bytes [ C7, 5F, 5E, C9, C3, 90, 90, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!IsNetDrive + 13C 7C9EA17B 1 Byte [ 00 ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DllGetClassObject + 3C 7C9EADA4 91 Bytes [ C5, BB, 7C, 56, 8B, 75, 0C, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DllGetClassObject + 98 7C9EAE00 16 Bytes [ B5, E0, FD, FF, FF, E8, 64, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DllGetClassObject + A9 7C9EAE11 55 Bytes [ 85, E0, FD, FF, FF, 8D, 95, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DllGetClassObject + E1 7C9EAE49 56 Bytes [ 8B, 85, E0, FD, FF, FF, 8B, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DllGetClassObject + 11A 7C9EAE82 3 Bytes [ EC, 83, EC ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHCoCreateInstance + 2 7C9EAFF2 11 Bytes CALL 7C9EB4F4 C:WINDOWSsystem32SHELL32.dll (Общая библиотека оболочки Windows/Корпорация Майкрософт)
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHCoCreateInstance + F 7C9EAFFF 37 Bytes [ FC, 66, F7, D8, 5F, 5E, 5B, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHCoCreateInstance + 37 7C9EB027 19 Bytes CALL 7C9E3A80 C:WINDOWSsystem32SHELL32.dll (Общая библиотека оболочки Windows/Корпорация Майкрософт)
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHCoCreateInstance + 4B 7C9EB03B 5 Bytes [ 90, 90, 90, 90, 8B ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHCoCreateInstance + 51 7C9EB041 30 Bytes [ 55, 8B, EC, 81, EC, 14, 02, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Shell_GetImageLists + 5E 7C9EB158 32 Bytes [ C9, C2, 10, 00, 90, 90, 90, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Shell_GetImageLists + 80 7C9EB17A 49 Bytes [ 00, 53, 8B, 5D, 18, 56, 8B, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHBindToParent + 27 7C9EB1AC 45 Bytes [ 00, 8D, 85, F4, F5, FF, FF, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHBindToParent + 55 7C9EB1DA 107 Bytes [ FF, C9, C2, 18, 00, 33, C0, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHBindToParent + C1 7C9EB246 67 Bytes [ C4, FF, FF, 8D, 85, E4, FD, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHBindToParent + 105 7C9EB28A 29 Bytes [ 8B, 55, 10, A1, 08, C5, BB, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHBindToParent + 123 7C9EB2A8 106 Bytes [ 08, 51, 33, FF, 50, 57, 89, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHSimpleIDListFromPath 7C9EB4F4 3 Bytes [ 90, 90, 90 ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHSimpleIDListFromPath + 4 7C9EB4F8 47 Bytes [ FF, 55, 8B, EC, 56, 8B, 75, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHSimpleIDListFromPath + 34 7C9EB528 10 Bytes [ C6, 5E, 5D, C2, 08, 00, 90, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHSimpleIDListFromPath + 3F 7C9EB533 62 Bytes [ 8B, FF, 55, 8B, EC, 81, EC, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathIsSlowW + 25 7C9EB572 29 Bytes [ FF, C9, C2, 08, 00, 90, 90, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathIsSlowW + 43 7C9EB590 30 Bytes [ 8B, F1, 47, 83, BE, A4, 00, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathIsSlowW + 62 7C9EB5AF 107 Bytes [ FF, 8D, 85, EC, FD, FF, FF, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathIsSlowW + CE 7C9EB61B 170 Bytes [ 55, 8B, EC, 56, 8B, 75, 08, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathIsSlowW + 179 7C9EB6C6 20 Bytes [ C7, 06, 80, 7A, 9C, 7C, 74, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!ILIsParent + A2 7C9EB7B9 116 Bytes [ 4D, 10, 56, 8B, 75, 0C, 8B, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!ILFindChild + 57 7C9EB82E 5 Bytes [ C6, 5E, 5D, C2, 0C ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!ILFindChild + 5D 7C9EB834 8 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!ILFindChild + 66 7C9EB83D 10 Bytes [ EC, 56, 57, 68, 98, 04, 00, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!ILFindChild + 71 7C9EB848 12 Bytes [ FF, FF, 85, C0, 59, 74, 44, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!ILFindChild + 7E 7C9EB855 7 Bytes [ 75, 0C, FF, 75, 08, E8, 8F ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotifyRegister + 13 7C9EE90C 38 Bytes [ 83, 7B, 34, 00, 74, 0C, FF, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotifyRegister + 3A 7C9EE933 54 Bytes [ 80, 74, 17, 5F, 5E, 5B, 5D, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotifyRegister + 71 7C9EE96A 13 Bytes [ 07, 33, C0, 5E, 5D, C2, 08, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotifyRegister + 7F 7C9EE978 83 Bytes CALL 7C9E4659 C:WINDOWSsystem32SHELL32.dll (Общая библиотека оболочки Windows/Корпорация Майкрософт)
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotifyRegister + D3 7C9EE9CC 42 Bytes [ 4B, FF, FF, 85, C0, 59, 74, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Shell_MergeMenus + 4 7C9EF77B 5 Bytes [ 75, 08, 83, 7E, 08 ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Shell_MergeMenus + A 7C9EF781 49 Bytes [ 74, 1B, 8D, 45, 14, 50, 6A, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Shell_MergeMenus + 3C 7C9EF7B3 1 Byte [ F4 ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Shell_MergeMenus + 40 7C9EF7B7 1 Byte [ 50 ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Shell_MergeMenus + 42 7C9EF7B9 2 Bytes [ 76, BD ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHCreateShellFolderView + 11 7C9F067F 37 Bytes CALL 7C9ECD0D C:WINDOWSsystem32SHELL32.dll (Общая библиотека оболочки Windows/Корпорация Майкрософт)
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHCreateShellFolderView + 37 7C9F06A5 302 Bytes [ A8, 20, 0F, 85, 84, 53, 05, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHCreateShellFolderView + 167 7C9F07D5 41 Bytes [ B8, 05, 40, 00, 80, 74, 30, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHCreateShellFolderView + 191 7C9F07FF 5 Bytes [ 75, 10, FF, 75, 0C ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHCreateShellFolderView + 198 7C9F0806 54 Bytes [ 08, 50, FF, 51, 1C, 5B, 5E, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Shell_GetCachedImageIndex + 23 7C9F6AFA 24 Bytes [ C9, C2, 10, 00, 90, 90, 90, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Shell_GetCachedImageIndex + 3C 7C9F6B13 31 Bytes [ 06, 8B, D9, 57, 8D, 7B, 7C, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Shell_GetCachedImageIndex + 5C 7C9F6B33 130 Bytes [ 55, 8B, EC, 81, EC, 28, 01, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Shell_GetCachedImageIndex + DF 7C9F6BB6 1 Byte [ 61 ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Shell_GetCachedImageIndex + E1 7C9F6BB8 1 Byte [ 6E ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHMapIDListToImageListIndexAsync + B1 7C9F7377 18 Bytes [ 55, 8B, EC, 8B, 45, 08, FF, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHMapIDListToImageListIndexAsync + C6 7C9F738C 5 Bytes [ 8B, FF, 55, 8B, EC ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHMapIDListToImageListIndexAsync + CC 7C9F7392 49 Bytes [ 45, 08, 56, 57, 8B, 7D, 10, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHMapIDListToImageListIndexAsync + FE 7C9F73C4 41 Bytes CALL 7C9E6B73 C:WINDOWSsystem32SHELL32.dll (Общая библиотека оболочки Windows/Корпорация Майкрософт)
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHMapIDListToImageListIndexAsync + 128 7C9F73EE 61 Bytes [ C8, 23, 4D, 0C, 3B, C8, 0F, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHMapPIDLToSystemImageListIndex + B 7C9F7E84 3 Bytes [ C2, 5F, 05 ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHMapPIDLToSystemImageListIndex + F 7C9F7E88 1 Byte [ 8B ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHMapPIDLToSystemImageListIndex + 11 7C9F7E8A 77 Bytes CALL 061C3A9E
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHMapPIDLToSystemImageListIndex + 5F 7C9F7ED8 65 Bytes [ 0F, 84, 9A, 45, 05, 00, 8B, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHMapPIDLToSystemImageListIndex + A1 7C9F7F1A 48 Bytes [ FF, 55, 8B, EC, 8D, 81, 64, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHDefExtractIconW + 2 7C9F997A 29 Bytes JMP 7C9F98F4 C:WINDOWSsystem32SHELL32.dll (Общая библиотека оболочки Windows/Корпорация Майкрософт)
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHDefExtractIconW + 20 7C9F9998 25 Bytes [ 55, 8B, EC, 83, EC, 40, 8B, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHDefExtractIconW + 3A 7C9F99B2 30 Bytes [ 84, AE, 1B, 00, 00, 56, 57, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHDefExtractIconW + 59 7C9F99D1 108 Bytes [ 1E, 05, 00, 8D, 45, 0C, 50, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHExtractIconsW + 15 7C9F9A3E 10 Bytes [ FF, 43, 83, C7, 1C, 3B, 5E, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHExtractIconsW + 20 7C9F9A49 23 Bytes [ 76, 38, 68, 02, 00, 00, 80, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHExtractIconsW + 39 7C9F9A62 4 Bytes CALL 7C9F9838 C:WINDOWSsystem32SHELL32.dll (Общая библиотека оболочки Windows/Корпорация Майкрософт)
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHExtractIconsW + 3E 7C9F9A67 53 Bytes [ FF, 83, 7E, 3C, 00, 5B, 74, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHExtractIconsW + 75 7C9F9A9E 3 Bytes [ 90, 90, 90 ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DllGetVersion + 6 7C9FA619 56 Bytes [ 08, 50, FF, 51, 08, FF, 75, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DllGetVersion + 3F 7C9FA652 66 Bytes CALL 7C9E5F71 C:WINDOWSsystem32SHELL32.dll (Общая библиотека оболочки Windows/Корпорация Майкрософт)
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DllGetVersion + 82 7C9FA695 19 Bytes [ 07, 80, EB, E0, 90, 90, 90, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DllGetVersion + 96 7C9FA6A9 30 Bytes [ 90, 90, 90, 90, 8B, FF, 55, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DllGetVersion + B5 7C9FA6C8 45 Bytes [ FF, 15, 0C, 13, 9C, 7C, 83, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotification_Unlock + 24 7C9FA752 23 Bytes [ 8B, 75, 10, F7, C6, 10, 00, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotification_Unlock + 3C 7C9FA76A 90 Bytes [ 15, 56, 53, FF, B5, EC, FD, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotification_Unlock + 97 7C9FA7C5 33 Bytes [ FF, 89, 85, E4, FD, FF, FF, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotification_Unlock + BA 7C9FA7E8 2 Bytes [ 85, C0 ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotification_Unlock + BD 7C9FA7EB 3 Bytes [ 85, D3, 4A ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotify + 1B 7C9FAC42 64 Bytes [ 90, 90, 90, 90, 90, 90, 84, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotify + 5D 7C9FAC84 41 Bytes [ D0, 9C, 9F, 7C, B4, 9C, 9F, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotify + 87 7C9FACAE 4 Bytes [ 31, 00, 33, 00 ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotify + 8C 7C9FACB3 34 Bytes [ 00, 66, 00, 70, 00, 69, 00, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotify + AF 7C9FACD6 7 Bytes [ 69, 00, 63, 00, 6F, 00, 6E ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!ILSaveToStream + 9D 7C9FC403 57 Bytes [ 46, 54, 50, FF, D7, 8B, 8E, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!ILSaveToStream + D7 7C9FC43D 111 Bytes [ F1, 6A, 00, FF, 36, FF, 15, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!ILSaveToStream + 147 7C9FC4AD 42 Bytes [ 46, 08, 85, C0, 74, 0B, 50, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!ILSaveToStream + 172 7C9FC4D8 42 Bytes [ 15, A0, 1C, 9C, 7C, 85, C0, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!ILSaveToStream + 19D 7C9FC503 15 Bytes [ FF, 90, 90, 90, 90, 90, 83, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHCloneSpecialIDList + 2C 7C9FD669 19 Bytes [ 90, 90, 90, 90, 8B, FF, 55, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHCloneSpecialIDList + 40 7C9FD67D 16 Bytes [ 00, FF, 75, 08, 8B, F1, FF, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHCloneSpecialIDList + 51 7C9FD68E 28 Bytes [ 42, 83, 7E, 54, 00, 75, 0A, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHCloneSpecialIDList + 6E 7C9FD6AB 38 Bytes [ 51, 18, 8B, F8, 85, FF, 7C, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHCloneSpecialIDList + 95 7C9FD6D2 75 Bytes [ C7, 5F, 5E, C9, C2, 04, 00, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathIsExe + 23 7C9FDB6B 18 Bytes [ 85, B0, FB, FF, FF, 83, C0, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathIsExe + 36 7C9FDB7E 14 Bytes [ FF, 85, C0, 0F, 85, 46, E4, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathIsExe + 45 7C9FDB8D 19 Bytes CALL 7C9FDBA4 C:WINDOWSsystem32SHELL32.dll (Общая библиотека оболочки Windows/Корпорация Майкрософт)
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathIsExe + 5C 7C9FDBA4 115 Bytes [ 90, 8B, FF, 55, 8B, EC, 6A, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathIsExe + D0 7C9FDC18 17 Bytes [ 59, 9C, 7C, FF, B5, B4, FB, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!IsLFNDrive + 23 7C9FDE8C 9 Bytes [ 85, C0, 74, 1E, 8B, 45, F8, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!IsLFNDrive + 2E 7C9FDE97 3 Bytes [ AA, F1, 00 ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!IsLFNDrive + 32 7C9FDE9B 96 Bytes [ 8D, 48, 04, 6A, 01, E8, F1, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!IsLFNDrive + 93 7C9FDEFC 48 Bytes [ 15, 68, 13, 9C, 7C, E9, 04, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!IsLFNDrive + C4 7C9FDF2D 45 Bytes JMP 7C9F53AA C:WINDOWSsystem32SHELL32.dll (Общая библиотека оболочки Windows/Корпорация Майкрософт)
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHAddToRecentDocs + 4B 7C9FE774 5 Bytes [ FF, 8B, CE, E8, 0A ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHAddToRecentDocs + 52 7C9FE77B 5 Bytes [ 00, E9, 52, F6, FF ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHAddToRecentDocs + 58 7C9FE781 117 Bytes [ 90, 90, 90, 90, 90, 8B, FF, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHAddToRecentDocs + CE 7C9FE7F7 129 Bytes [ 75, 10, FF, 75, FC, E8, D6, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHAddToRecentDocs + 150 7C9FE879 95 Bytes [ 59, 33, C0, EB, F1, 8B, 75, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Win32DeleteFile 7C9FEE68 115 Bytes [ 90, 8B, FF, 55, 8B, EC, 81, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Win32DeleteFile + 74 7C9FEEDC 22 Bytes [ 4D, FC, 5F, 5E, 5B, E8, 3A, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Win32DeleteFile + 8B 7C9FEEF3 83 Bytes [ EC, 56, 57, 6A, 01, 33, FF, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Win32DeleteFile + E0 7C9FEF48 23 Bytes [ 00, 8B, F8, F7, C7, 00, 20, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!Win32DeleteFile + F8 7C9FEF60 43 Bytes [ 90, E4, 00, 00, 00, 85, C0, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathYetAnotherMakeUniqueName + 2 7C9FF22E 152 Bytes [ 7C, 65, 53, FF, 15, 8C, 1A, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathYetAnotherMakeUniqueName + 9B 7C9FF2C7 10 Bytes [ 15, A0, 1A, 9C, 7C, 33, C0, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathYetAnotherMakeUniqueName + A7 7C9FF2D3 76 Bytes [ 33, C0, EB, F8, 90, 90, 90, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathYetAnotherMakeUniqueName + F6 7C9FF322 2 Bytes [ 5F, 5E ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathYetAnotherMakeUniqueName + FA 7C9FF326 1 Byte [ 15 ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathCleanupSpec + 79 7C9FF488 11 Bytes [ FF, 15, 00, 13, 9C, 7C, 57, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!PathCleanupSpec + 85 7C9FF494 66 Bytes CALL 7C9FF679 C:WINDOWSsystem32SHELL32.dll (Общая библиотека оболочки Windows/Корпорация Майкрософт)
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetNewLinkInfoW + 2A 7C9FF4D7 11 Bytes [ B5, DC, FD, FF, FF, 8B, F8, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetNewLinkInfoW + 36 7C9FF4E3 4 Bytes [ 89, 85, E0, FD ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetNewLinkInfoW + 3C 7C9FF4E9 1 Byte [ 8D ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetNewLinkInfoW + 3E 7C9FF4EB 2 Bytes [ F0, FD ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetNewLinkInfoW + 42 7C9FF4EF 75 Bytes [ 50, FF, B5, EC, FD, FF, FF, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!StrStrIW + D 7C9FFB18 181 Bytes [ 75, 08, FF, 15, A0, 1A, 9C, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!StrStrIW + C3 7C9FFBCE 25 Bytes [ 53, 8D, 45, FC, 50, FF, 75, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!StrStrIW + DD 7C9FFBE8 3 Bytes [ 46, 1C, 8B ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!StrStrIW + E1 7C9FFBEC 26 Bytes [ 53, FF, 75, FC, FF, 75, 10, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!StrStrIW + FC 7C9FFC07 50 Bytes CALL 7C9FFC3C C:WINDOWSsystem32SHELL32.dll (Общая библиотека оболочки Windows/Корпорация Майкрософт)
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotifyDeregister + 16 7C9FFCD5 7 Bytes [ B5, D8, F7, FF, FF, 53, FF ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotifyDeregister + 1E 7C9FFCDD 159 Bytes [ 18, 85, C0, 0F, 8D, D8, 00, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotifyDeregister + BE 7C9FFD7D 4 Bytes [ 85, C0, 7C, 2B ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotifyDeregister + C3 7C9FFD82 7 Bytes [ 55, 10, 8B, 45, FC, 8B, 08 ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotifyDeregister + CB 7C9FFD8A 37 Bytes [ E2, 01, F6, DA, 1B, D2, 81, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DllCanUnloadNow + 76 7CA0162F 31 Bytes [ 00, 83, 4D, F8, FF, 8D, 45, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DllCanUnloadNow + 97 7CA01650 30 Bytes [ 00, 89, 7D, F4, 89, 7D, FC, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DllCanUnloadNow + B6 7CA0166F 14 Bytes [ 01, 6A, 01, FF, 50, 14, E9, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DllCanUnloadNow + C5 7CA0167E 46 Bytes [ 90, 8B, FF, 55, 8B, EC, 51, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!DllCanUnloadNow + F4 7CA016AD 31 Bytes [ 5B, C9, C3, 90, 90, 90, 90, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetMalloc + 2 7CA01FE6 92 Bytes [ 50, 10, 85, C0, 0F, 8C, 31, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetMalloc + 5F 7CA02043 51 Bytes JMP 7CA01C85 C:WINDOWSsystem32SHELL32.dll (Общая библиотека оболочки Windows/Корпорация Майкрософт)
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetMalloc + 94 7CA02078 5 Bytes [ 9C, 7C, 2B, F9, C1 ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetMalloc + 9A 7CA0207E 27 Bytes [ 02, 03, F1, 8B, 16, 03, D9, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetMalloc + B6 7CA0209A 49 Bytes [ 9C, 7C, 85, D2, 89, 45, FC, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetFileInfo + B 7CA036EF 1 Byte [ 8D ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetFileInfo + D 7CA036F1 31 Bytes [ F8, 50, FF, 75, F8, 53, FF, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetFileInfo + 2D 7CA03711 56 Bytes [ 15, 8C, 1A, 9C, 7C, 8D, 74, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetFileInfo + 66 7CA0374A 32 Bytes [ 15, E4, 20, 9C, 7C, 8D, 45, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetFileInfo + 87 7CA0376B 6 Bytes [ 15, 28, 19, 9C, 7C, 8B ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetImageList + 3E 7CA03AB7 35 Bytes CALL 7C9E3A80 C:WINDOWSsystem32SHELL32.dll (Общая библиотека оболочки Windows/Корпорация Майкрософт)
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetImageList + 62 7CA03ADB 318 Bytes [ FD, FF, FF, 50, FF, 15, F8, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetImageList + 1A1 7CA03C1A 48 Bytes [ 88, 98, 02, 00, 00, 89, 4D, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetImageList + 1D2 7CA03C4B 62 Bytes [ 00, 3B, CA, 0F, 85, 54, FA, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHGetImageList + 211 7CA03C8A 8 Bytes [ C9, C2, 08, 00, 90, 90, 90, … ]
.text …
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotification_Lock + 2 7CA08B23 24 Bytes [ 15, F0, 18, 9C, 7C, 85, C0, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotification_Lock + 1B 7CA08B3C 44 Bytes [ EC, FD, FF, FF, 0F, 8C, 7F, … ]
.text C:WINDOWSsystem32svchost.exe[220] SHELL32.dll!SHChangeNotification_Lock + 48 7CA08B69 54 Bytes [ 57, 68, 7D, 00, 00, 40, 8B, … ]
