GMER 1.0.12.12027 - http://www.gmer.net Rootkit scan 2007-02-16 03:57:32 Windows 5.1.2600 Service Pack 2 ---- System - GMER 1.0.12 ---- SSDT \??\C:\WINDOWS\system32\drivers\HookCentre.sys ZwClose SSDT \??\C:\WINDOWS\system32\drivers\HookCentre.sys ZwCreateKey SSDT \??\C:\WINDOWS\system32\drivers\HookCentre.sys ZwDeleteKey SSDT \??\C:\WINDOWS\system32\drivers\HookCentre.sys ZwDeleteValueKey SSDT sptd.sys ZwEnumerateKey SSDT sptd.sys ZwEnumerateValueKey SSDT \??\C:\WINDOWS\system32\drivers\HookCentre.sys ZwOpenKey SSDT \??\C:\WINDOWS\system32\drivers\HookCentre.sys ZwOpenProcess SSDT sptd.sys ZwQueryKey SSDT sptd.sys ZwQueryValueKey SSDT \??\C:\WINDOWS\system32\drivers\HookCentre.sys ZwSetValueKey Code 88F1FEF7 IoReadTransferCount ---- Kernel code sections - GMER 1.0.12 ---- .text USBPORT.SYS!DllUnload F69E162C 5 Bytes JMP 86C186F0 .text ntdll.dll!NtClose 7C91D586 5 Bytes JMP 7203407A .text ntdll.dll!NtCreateProcess 7C91D754 5 Bytes JMP 72034205 .text ntdll.dll!NtCreateProcessEx 7C91D769 5 Bytes JMP 720340E9 .text ntdll.dll!NtCreateSection 7C91D793 5 Bytes JMP 72034098 ---- User code sections - GMER 1.0.12 ---- .text C:\WINDOWS\system32\searchindexer.exe[1320] kernel32.dll!WriteFile 7C810D87 7 Bytes JMP 7336671F C:\WINDOWS\system32\mssrch.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NlsMbOemCodePageTag + FFF84FE8 7C911000 95 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEnterCriticalSection + 5B 7C911060 547 Bytes [ 2C, 2C, 2C, 2C, 2C, 2D, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitString + 28 7C911284 188 Bytes [ B9, B8, B8, B9, B8, B8, B9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!cos + 16 7C911341 25 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!cos + 30 7C91135B 394 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_CIpow + 2F 7C9114E6 152 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_CIpow + C8 7C91157F 211 Bytes [ 75, 75, 76, 76, 76, 77, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_CIpow + 19C 7C911653 3 Bytes [ 02, 02, 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_CIpow + 1A0 7C911657 353 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!sqrt + 27 7C9117B9 167 Bytes [ 73, 73, 73, 73, 73, 6E, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_alldiv + 24 7C911861 456 Bytes [ 24, 24, 26, 26, 24, 26, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_alloca_probe + 21 7C911A2A 574 Bytes [ 2D, 2F, 2F, 2F, 32, 32, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_aullrem + 16 7C911C69 632 Bytes [ 8B, B1, B2, B2, B2, B2, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!ceil + C4 7C911EE2 467 Bytes [ 24, 24, 26, 26, 26, 26, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!memchr + 11 7C9120B6 2152 Bytes [ 77, 70, 6E, 70, 69, 6E, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strcat + 33 7C91291F 29 Bytes [ 65, 78, 74, 22, 0D, 0A, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strcat + 51 7C91293D 34 Bytes [ 70, 65, 22, 2C, 2C, 22, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strcat + 74 7C912960 196 Bytes [ 54, 79, 70, 65, 22, 2C, 2C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strcmp + 54 7C912A25 977 Bytes [ 22, 0D, 0A, 48, 4B, 43, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strspn + A 7C912DF7 29 Bytes [ 6C, 61, 79, 65, 72, 2E, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strspn + 28 7C912E15 500 Bytes [ 73, 73, 6F, 63, 69, 61, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompareMemory + 14 7C91300A 12 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompareMemory + 21 7C913017 15 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompareMemory + 31 7C913027 2 Bytes [ 04, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompareMemory + 34 7C91302A 105 Bytes [ 04, 44, 44, 44, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFillMemory + 14 7C913094 18 Bytes [ 44, 44, 44, 44, 44, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFillMemory + 27 7C9130A7 141 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlZeroMemory + 1A 7C913135 164 Bytes [ 04, 04, 04, 04, 44, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMoveMemory + 89 7C9131DA 6 Bytes [ 04, 04, 04, 04, 04, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMoveMemory + 90 7C9131E1 100 Bytes [ 44, 44, 44, 44, 44, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMoveMemory + F5 7C913246 2 Bytes [ 40, 40 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMoveMemory + F8 7C913249 239 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMoveMemory + 1E8 7C913339 6 Bytes [ 04, 04, 04, 04, 04, 04 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerAdd + 2 7C9134C7 3 Bytes [ 44, 44, 44 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerAdd + 6 7C9134CB 94 Bytes [ 44, 44, 44, 44, 44, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlExtendedLargeIntegerDivide + 5 7C91352A 352 Bytes [ 44, 44, 44, 44, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerShiftLeft + 10 7C91368B 15 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerShiftLeft + 20 7C91369B 26 Bytes [ 04, 04, 04, 04, 44, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerShiftRight + E 7C9136B6 15 Bytes [ 44, 44, 44, 44, 44, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerShiftRight + 1E 7C9136C6 44 Bytes [ 44, 44, 44, 44, 44, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerArithmeticShift + 1E 7C9136F3 20 Bytes [ 44, 44, 44, 44, 44, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerNegate + 2 7C913708 24 Bytes [ 44, 44, 44, 44, 44, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerSubtract + 2 7C913721 3 Bytes [ 44, 44, 44 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerSubtract + 6 7C913725 22 Bytes [ 44, 44, 44, 44, 44, 44, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertLongToLargeInteger + 4 7C91373C 2 Bytes [ 04, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertLongToLargeInteger + 7 7C91373F 7 Bytes [ 04, 04, 04, 04, 04, 44, 44 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertUlongToLargeInteger + 2 7C913747 148 Bytes [ 44, 44, 44, 44, 44, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertUlongToLargeInteger + 97 7C9137DC 2 Bytes [ 04, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertUlongToLargeInteger + 9A 7C9137DF 462 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCaptureContext + 15F7 7C914E3C 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCaptureContext + 15FB 7C914E40 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCaptureContext + 15FF 7C914E44 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCaptureContext + 1603 7C914E48 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCaptureContext + 1607 7C914E4C 2 Bytes [ 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtAcceptConnectPort + B 7C91D384 150 Bytes [ 6C, DB, F7, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtAccessCheckByTypeResultListAndAuditAlarmByHandle + F 7C91D41B 16 Bytes [ FF, CC, B2, 19, FF, F8, A7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtAddAtom + B 7C91D42C 62 Bytes [ D8, EA, EF, FF, 24, 51, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtAdjustPrivilegesToken + B 7C91D46B 20 Bytes [ FF, 70, AD, BF, FF, A3, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtAlertResumeThread + B 7C91D480 87 Bytes [ 23, CC, F0, FF, A7, D8, DE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtAllocateUuids + F 7C91D4D8 79 Bytes [ 09, 84, AC, A2, 30, AE, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtCallbackReturn + B 7C91D528 45 Bytes [ D8, EA, EF, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtCancelIoFile + F 7C91D556 16 Bytes [ 00, 00, 09, 81, A9, A4, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtCancelTimer + B 7C91D567 20 Bytes [ FF, 7A, E0, FF, FF, 77, B4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtClearEvent + B 7C91D57C 167 Bytes [ C0, B7, BA, FF, C6, C5, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtContinue + B 7C91D624 26 Bytes [ D8, EA, EF, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtCreateDebugObject + 11 7C91D63F 35 Bytes [ FF, D8, EA, EF, FF, D8, EA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtCreateEvent + B 7C91D663 20 Bytes JMP 6615D667 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtCreateEventPair + B 7C91D678 70 Bytes [ 24, A6, 27, FF, 00, B8, 9B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtCreateJobObject + 13 7C91D6BF 12 Bytes [ FF, D8, EA, EF, FF, D8, EA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtCreateJobSet + B 7C91D6CC 83 Bytes [ 47, 22, 09, D7, 3B, 1F, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtCreateNamedPipeFile + B 7C91D720 30 Bytes [ 4F, 83, FC, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtCreatePort 7C91D73F 23 Bytes [ FF, D8, EA, EF, FF, D8, EA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtCreateProcess + 4 7C91D758 27 Bytes [ 34, A3, CB, D3, 27, AA, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtCreateProcessEx + B 7C91D774 83 Bytes [ D8, EA, EF, FF, 24, A6, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtCreateSymbolicLinkObject + B 7C91D7C8 12 Bytes [ CD, CB, C7, FF, 47, 22, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtCreateThread + 5 7C91D7D7 68 Bytes [ 00, 32, A5, CF, DE, 29, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtCreateWaitablePort + B 7C91D81C 56 Bytes [ D4, E5, ED, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtDelayExecution + 5 7C91D855 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtDelayExecution + 7 7C91D857 24 Bytes [ 00, 2B, AC, D9, FF, 2B, AC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtDeleteAtom + B 7C91D870 83 Bytes [ C2, 5F, 06, FF, F3, A1, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtDeleteObjectAuditAlarm + B 7C91D8C4 16 Bytes [ F3, A1, 27, FF, DB, A7, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtDeleteValueKey + 7 7C91D8D5 37 Bytes [ 00, 00, 00, 43, B5, DF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtDisplayString + 3 7C91D8FB 3 Bytes [ FF, D3, 6D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtDisplayString + 7 7C91D8FF 7 Bytes [ FF, D3, 6D, 00, FF, D3, 6D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtDisplayString + F 7C91D907 16 Bytes [ FF, D3, 6D, 00, FF, D3, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtDuplicateObject + B 7C91D918 14 Bytes [ D3, 6D, 00, FF, D3, 6D, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtDuplicateToken + 5 7C91D927 68 Bytes [ FF, D3, 6D, 00, FF, DA, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtEnumerateSystemEnvironmentValuesEx + B 7C91D96C 83 Bytes [ 9B, F2, EF, FF, A9, 53, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtFindAtom + B 7C91D9C0 41 Bytes [ E2, 93, 44, FF, CF, 76, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtFlushInstructionCache + B 7C91D9EA 40 Bytes [ FF, FF, AC, FF, FF, FF, 9C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtFlushVirtualMemory + B 7C91DA14 83 Bytes [ 8D, 97, 7F, FF, 8D, 97, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtFsControlFile + B 7C91DA68 36 Bytes [ D1, FC, FF, FF, CB, FD, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtGetDevicePowerState + 6 7C91DA8D 4 Bytes [ FF, FF, FF, BA ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtGetDevicePowerState + B 7C91DA92 20 Bytes [ FF, FF, BA, FF, FF, FF, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtGetPlugPlayEvent + B 7C91DAA7 44 Bytes [ FF, 90, E6, FF, FF, BD, F2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtImpersonateAnonymousToken + F 7C91DAD5 37 Bytes [ 99, CC, 40, 67, C4, E6, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtImpersonateThread + B 7C91DAFB 20 Bytes [ FF, E0, FC, FF, FF, C7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtInitializeRegistry + B 7C91DB10 54 Bytes [ C5, FF, FF, FF, C5, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtIsSystemResumeAutomatic + 3 7C91DB47 1 Byte [ 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtIsSystemResumeAutomatic + 5 7C91DB49 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtIsSystemResumeAutomatic + 7 7C91DB4B 8 Bytes [ 01, 00, 00, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtIsSystemResumeAutomatic + 10 7C91DB54 15 Bytes [ 00, 99, CC, 40, A0, DB, F2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtListenPort + B 7C91DB64 41 Bytes [ 8F, F5, FF, FF, 7E, EA, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtLoadKey + B 7C91DB8E 20 Bytes [ FF, FF, D3, FF, FF, FF, D3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtLoadKey2 + B 7C91DBA3 33 Bytes [ FF, D3, FF, FF, FF, 9D, E6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtLockProductActivationKeys + 5 7C91DBC7 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtLockProductActivationKeys + 7 7C91DBC9 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtLockProductActivationKeys + F 7C91DBD1 37 Bytes [ 00, 00, 00, 00, 99, CC, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtLockVirtualMemory + B 7C91DBF7 18 Bytes [ FF, 96, FC, FF, FF, 2F, B9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtMakePermanentObject + 9 7C91DC0A 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtMakePermanentObject + B 7C91DC0C 56 Bytes [ EB, FE, FF, FF, E6, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtMapUserPhysicalPagesScatter + 5 7C91DC45 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtMapUserPhysicalPagesScatter + 7 7C91DC47 7 Bytes [ 02, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtMapUserPhysicalPagesScatter + F 7C91DC4F 16 Bytes [ 00, 00, 00, 00, 00, 00, 99, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtMapViewOfSection + B 7C91DC60 62 Bytes [ 99, FF, FF, FF, 99, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtNotifyChangeKey + B 7C91DC9F 20 Bytes [ FF, F8, FE, FF, FF, F4, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtNotifyChangeMultipleKeys + B 7C91DCB4 16 Bytes [ 13, 69, 83, E0, 2A, 31, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenDirectoryObject + 7 7C91DCC5 7 Bytes [ 00, 00, 02, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenDirectoryObject + F 7C91DCCD 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenEventPair + B 7C91DCF3 20 Bytes [ FF, 99, FF, FF, FF, 9E, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenFile + B 7C91DD08 66 Bytes [ BD, FC, FF, FF, 91, EA, F5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenKey + F 7C91DD4B 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenMutant + 5 7C91DD56 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenMutant + 7 7C91DD58 66 Bytes [ 1A, 99, C3, AF, E3, F4, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenProcessToken + B 7C91DD9B 37 Bytes [ FF, D7, FC, FF, FF, C6, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenSection + 7 7C91DDC1 7 Bytes [ 55, 55, 03, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenSection + F 7C91DDC9 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenSemaphore + 5 7C91DDD4 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenSemaphore + 7 7C91DDD6 24 Bytes [ 00, 00, 0D, 76, 97, 31, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenSymbolicLinkObject + B 7C91DDEF 77 Bytes [ FF, B1, FF, FF, FF, C9, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenTimer + 5 7C91DE3D 2 Bytes [ 55, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenTimer + 8 7C91DE40 6 Bytes [ 00, 00, 00, 01, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtOpenTimer + F 7C91DE47 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtPlugPlayControl + 5 7C91DE52 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtPlugPlayControl + 7 7C91DE54 100 Bytes [ 00, 00, 00, 00, 2B, 55, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtProtectVirtualMemory + 5 7C91DEBB 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtProtectVirtualMemory + 7 7C91DEBD 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtProtectVirtualMemory + F 7C91DEC5 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtPulseEvent + 5 7C91DED0 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtPulseEvent + 7 7C91DED2 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtPulseEvent + F 7C91DEDA 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryAttributesFile + 5 7C91DEE5 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryAttributesFile + 7 7C91DEE7 17 Bytes [ 00, 00, 00, 00, 00, 00, 99, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryBootEntryOrder + 4 7C91DEF9 10 Bytes [ 99, CC, 10, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryBootEntryOrder + F 7C91DF04 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryBootOptions + 5 7C91DF0F 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryBootOptions + 7 7C91DF11 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryBootOptions + F 7C91DF19 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryDebugFilterState + 5 7C91DF24 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryDebugFilterState + 7 7C91DF26 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryDebugFilterState + F 7C91DF2E 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryDefaultLocale + 5 7C91DF39 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryDefaultLocale + 7 7C91DF3B 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryDefaultLocale + F 7C91DF43 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryDefaultUILanguage + 5 7C91DF4E 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryDefaultUILanguage + 7 7C91DF50 7 Bytes [ 00, 00, 00, 00, F8, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryDefaultUILanguage + F 7C91DF58 9 Bytes [ F8, 00, 00, 00, F0, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryDirectoryFile + 5 7C91DF63 18 Bytes [ 00, 80, 00, 00, 00, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryDirectoryObject + 5 7C91DF78 1 Byte [ 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryDirectoryObject + 7 7C91DF7A 7 Bytes [ 00, 00, 80, 00, 00, 00, 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryDirectoryObject + F 7C91DF82 8 Bytes [ 00, 00, 80, 00, 00, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryEaFile + 4 7C91DF8C 2 Bytes [ 80, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryEaFile + 7 7C91DF8F 7 Bytes [ 00, 80, 00, 00, 00, 80, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryEaFile + F 7C91DF97 8 Bytes [ 00, 80, 00, 00, 00, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryEvent + 3 7C91DFA0 1 Byte [ 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryEvent + 5 7C91DFA2 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryEvent + 7 7C91DFA4 7 Bytes [ 80, 00, 00, 00, 80, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryEvent + F 7C91DFAC 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryFullAttributesFile + 5 7C91DFB7 1 Byte [ 07 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryFullAttributesFile + 7 7C91DFB9 7 Bytes [ 00, 00, 07, 00, 00, 00, 07 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryFullAttributesFile + F 7C91DFC1 8 Bytes [ 00, 00, 07, 80, 00, 00, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryInformationAtom + 4 7C91DFCB 2 Bytes [ 0F, 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryInformationAtom + 7 7C91DFCE 7 Bytes [ 00, 3F, FC, 3F, FF, FF, 28 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryInformationAtom + F 7C91DFD6 8 Bytes [ 00, 00, 10, 00, 00, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryInformationFile + 4 7C91DFE0 10 Bytes [ 01, 00, 20, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryInformationFile + F 7C91DFEB 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryInformationJobObject + 5 7C91DFF6 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryInformationJobObject + 7 7C91DFF8 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryInformationJobObject + F 7C91E000 62 Bytes [ 33, 00, 00, 04, 49, 24, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryInformationThread + F 7C91E03F 62 Bytes [ 00, 49, 12, 00, 0B, 4C, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryIntervalProfile + F 7C91E07E 37 Bytes [ 00, 00, 39, 1C, 0B, 24, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryKey + B 7C91E0A4 24 Bytes [ D8, EA, EF, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryMultipleValueKey + F 7C91E0BD 142 Bytes [ 00, 00, 00, 34, 19, 0E, 5A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQuerySecurityObject + B 7C91E14C 83 Bytes [ 73, CB, F6, FF, A6, D9, DA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQuerySystemEnvironmentValueEx + B 7C91E1A0 83 Bytes [ D1, E1, EA, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryTimerResolution + B 7C91E1F4 24 Bytes [ 58, 7E, 8C, FF, 33, 1A, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueryValueKey + F 7C91E20D 58 Bytes [ 9A, 4B, FF, 78, C7, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtQueueApcThread + B 7C91E248 83 Bytes [ D6, A2, 63, FF, DC, B2, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtReadFileScatter + B 7C91E29C 74 Bytes [ A6, 5E, 00, FF, A6, 5E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtReleaseMutant + 2 7C91E2E7 8 Bytes [ FF, 1F, 85, B8, FF, 1B, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtReleaseMutant + B 7C91E2F0 41 Bytes [ 1A, 80, B3, FF, 1A, 80, B3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtRemoveIoCompletion + B 7C91E31A 41 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtRenameKey + B 7C91E344 54 Bytes [ 99, FF, FF, FF, 99, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtReplyWaitReceivePort + 3 7C91E37B 1 Byte [ 06 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtReplyWaitReceivePort + 5 7C91E37D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtReplyWaitReceivePort + 7 7C91E37F 24 Bytes [ 00, 33, 99, CC, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtReplyWaitReceivePortEx + B 7C91E398 12 Bytes [ 33, 1A, 0D, 5D, 31, 19, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtReplyWaitReplyPort + 5 7C91E3A7 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtReplyWaitReplyPort + 7 7C91E3A9 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtReplyWaitReplyPort + F 7C91E3B1 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtRequestDeviceWakeup + 5 7C91E3BC 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtRequestDeviceWakeup + 7 7C91E3BE 28 Bytes [ 00, 00, 00, 00, 00, 00, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtRequestPort + F 7C91E3DB 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtRequestWaitReplyPort + 5 7C91E3E6 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtRequestWaitReplyPort + 7 7C91E3E8 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtRequestWaitReplyPort + F 7C91E3F0 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtRequestWakeupLatency + 5 7C91E3FB 18 Bytes [ 00, 80, 00, 00, 00, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtResetEvent + 3 7C91E40E 3 Bytes [ AC, FA, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtResetEvent + 7 7C91E412 7 Bytes [ 8A, F7, 00, 00, 45, F5, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtResetEvent + F 7C91E41A 10 Bytes [ 27, FF, 00, 00, EF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtResetWriteWatch + 5 7C91E425 30 Bytes [ 00, 07, FF, 00, 00, 38, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtRestoreKey + F 7C91E444 8 Bytes [ 40, 00, 00, 00, 01, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtResumeProcess + 5 7C91E44F 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtResumeProcess + 7 7C91E451 7 Bytes [ 02, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtResumeProcess + F 7C91E459 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtResumeThread + 5 7C91E464 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtResumeThread + 7 7C91E466 16 Bytes [ 00, 00, 00, 00, 80, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSaveKey + 4 7C91E478 19 Bytes [ 80, 00, 80, 00, 80, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSaveKeyEx + 4 7C91E48D 10 Bytes [ FF, 00, 01, 00, FF, FF, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSaveKeyEx + F 7C91E498 12 Bytes [ FF, 00, FF, 00, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSaveMergedKeys + 7 7C91E4A5 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSaveMergedKeys + F 7C91E4AD 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSecureConnectPort + 5 7C91E4B8 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSecureConnectPort + 7 7C91E4BA 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSecureConnectPort + F 7C91E4C2 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetBootEntryOrder + 5 7C91E4CD 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetBootEntryOrder + 7 7C91E4CF 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetBootEntryOrder + F 7C91E4D7 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetBootOptions + 5 7C91E4E2 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetBootOptions + 7 7C91E4E4 91 Bytes [ 83, 33, 33, 33, 33, 33, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetDefaultLocale + F 7C91E540 31 Bytes [ B7, B7, B7, 30, 8F, 7B, 7B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetEaFile + 5 7C91E560 144 Bytes [ 07, B7, B7, 30, 8F, 7B, 7B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetInformationJobObject + 3 7C91E5F1 66 Bytes [ 7B, 7B, 30, 8F, B7, B7, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetInformationProcess + 7 7C91E634 28 Bytes [ 87, 77, 77, 77, 77, 77, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetInformationThread + F 7C91E651 12 Bytes [ 00, 00, 00, 00, 8F, B7, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetInformationToken + 7 7C91E65E 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetIntervalProfile + 5 7C91E671 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetIntervalProfile + 7 7C91E673 16 Bytes [ 00, 00, 00, 88, 88, 88, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetIoCompletion + 5 7C91E686 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetIoCompletion + 7 7C91E688 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetIoCompletion + F 7C91E690 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetLdtEntries + 5 7C91E69B 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetLdtEntries + 7 7C91E69D 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetLowEventPair + 7 7C91E6B2 7 Bytes [ 00, 01, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetLowEventPair + F 7C91E6BA 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetLowWaitHighEventPair + 5 7C91E6C5 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetLowWaitHighEventPair + 7 7C91E6C7 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetLowWaitHighEventPair + F 7C91E6CF 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetQuotaInformationFile + 5 7C91E6DA 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetQuotaInformationFile + 7 7C91E6DC 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetQuotaInformationFile + F 7C91E6E4 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSecurityObject + 5 7C91E6EF 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSecurityObject + 7 7C91E6F1 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSecurityObject + F 7C91E6F9 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSystemEnvironmentValue + 5 7C91E704 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSystemEnvironmentValue + 7 7C91E706 7 Bytes [ 00, 01, 00, 00, 00, 03, 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSystemEnvironmentValue + F 7C91E70E 16 Bytes [ FF, FF, C0, 01, FF, FF, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSystemEnvironmentValueEx + B 7C91E71F 12 Bytes [ FF, FF, FF, FF, FF, 28, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSystemInformation + 3 7C91E72C 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSystemInformation + 5 7C91E72E 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSystemInformation + 7 7C91E730 7 Bytes [ 01, 00, 04, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSystemInformation + F 7C91E738 8 Bytes [ 80, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSystemPowerState + 5 7C91E743 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSystemPowerState + 7 7C91E745 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSystemPowerState + F 7C91E74D 9 Bytes [ 00, 00, 00, 00, 00, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSystemTime + 5 7C91E758 9 Bytes [ 00, 80, 80, 00, 80, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetSystemTime + F 7C91E762 16 Bytes [ 80, 00, 80, 80, 00, 00, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetThreadExecutionState + B 7C91E773 3 Bytes [ 00, 00, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetThreadExecutionState + F 7C91E777 8 Bytes [ 01, 00, FF, FF, 01, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetTimer + 3 7C91E780 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetTimer + 5 7C91E782 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetTimer + 7 7C91E784 16 Bytes [ FF, FF, 00, 01, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetTimerResolution + 5 7C91E797 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetTimerResolution + 7 7C91E799 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetTimerResolution + F 7C91E7A1 10 Bytes [ 00, 00, 00, 88, 88, 88, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetUuidSeed + 5 7C91E7AC 39 Bytes [ 8F, B7, B7, 00, B7, B7, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSetVolumeInformationFile + 3 7C91E7D4 45 Bytes [ 8F, 7B, 7B, 78, FF, 0B, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSignalAndWaitForSingleObject + 7 7C91E802 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSignalAndWaitForSingleObject + F 7C91E80A 8 Bytes [ 00, 00, FF, FF, 00, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtStartProfile + 4 7C91E814 2 Bytes [ 80, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtStartProfile + 7 7C91E817 7 Bytes [ 00, 00, 01, 00, 00, 00, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtStartProfile + F 7C91E81F 8 Bytes [ 00, 00, 01, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtStopProfile + 4 7C91E829 2 Bytes [ 01, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtStopProfile + 7 7C91E82C 7 Bytes [ 00, 01, 00, 00, 00, 01, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtStopProfile + F 7C91E834 8 Bytes [ 00, 01, 00, 00, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSuspendProcess + 3 7C91E83D 1 Byte [ 03 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSuspendProcess + 5 7C91E83F 18 Bytes [ 00, 80, FF, 00, 00, C1, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSuspendThread + 5 7C91E854 1 Byte [ 60 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSuspendThread + 7 7C91E856 7 Bytes [ 00, 00, 01, 00, 04, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSuspendThread + F 7C91E85E 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSystemDebugControl + 5 7C91E869 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSystemDebugControl + 7 7C91E86B 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtSystemDebugControl + F 7C91E873 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtTerminateJobObject + 5 7C91E87E 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtTerminateJobObject + 7 7C91E880 7 Bytes [ 00, 80, 80, 00, 80, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtTerminateJobObject + F 7C91E888 20 Bytes [ 80, 00, 80, 00, 80, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtTerminateProcess + F 7C91E89D 9 Bytes [ FF, 00, 00, 00, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtTerminateThread + 5 7C91E8A8 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtTerminateThread + 7 7C91E8AA 3 Bytes [ FF, 00, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtTerminateThread + B 7C91E8AE 181 Bytes [ 00, 00, FF, FF, FF, 00, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtUnmapViewOfSection + 5 7C91E965 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtUnmapViewOfSection + 7 7C91E967 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtUnmapViewOfSection + F 7C91E96F 93 Bytes [ 00, 00, 00, 00, 02, 37, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!NtWaitHighEventPair + 4 7C91E9CD 357 Bytes [ 87, B7, B7, B7, B7, B7, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!KiUserExceptionDispatcher + 47 7C91EB33 193 Bytes [ 0C, C4, 7B, 7B, 7B, 7B, 7B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRaiseException + 49 7C91EBF5 344 Bytes [ 7B, 7B, 7B, 7B, 7B, 7B, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strchr + 4D 7C91ED4E 31 Bytes [ FF, FF, FF, FF, 00, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strchr + 6F 7C91ED70 89 Bytes [ 00, 01, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strchr + CC 7C91EDCD 43 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strchr + FB 7C91EDFC 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strchr + 10B 7C91EE0C 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAnsiStringToUnicodeString + 3B 7C91F087 24 Bytes [ B7, B7, B7, B7, 30, 8F, 7B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAnsiStringToUnicodeString + 54 7C91F0A0 79 Bytes [ B7, B7, B7, B7, B7, B7, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAnsiStringToUnicodeString + A4 7C91F0F0 54 Bytes [ FF, FF, F8, 22, 22, 22, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAnsiStringToUnicodeString + DB 7C91F127 7 Bytes [ FF, FF, FF, FF, FF, 80, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAnsiStringToUnicodeString + E3 7C91F12F 10 Bytes [ 01, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMultiByteToUnicodeN + E 7C91F1D9 5 Bytes [ 00, 80, 00, 80, 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMultiByteToUnicodeN + 14 7C91F1DF 16 Bytes [ 00, C0, C0, C0, 00, 80, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMultiByteToUnicodeN + 25 7C91F1F0 280 Bytes [ 00, FF, FF, 00, FF, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMultiByteToUnicodeN + 13E 7C91F309 34 Bytes [ 7D, 00, 00, 00, 79, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMultiByteToUnicodeN + 161 7C91F32C 7 Bytes [ 08, 7D, 10, 00, 10, A2, 18 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNtStatusToDosErrorNoTeb + C9 7C91FC52 10 Bytes [ 01, 3A, 3A, 01, 9B, 97, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNtStatusToDosErrorNoTeb + D4 7C91FC5D 191 Bytes [ 02, 02, 84, C5, 3F, 30, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNtStatusToDosErrorNoTeb + 194 7C91FD1D 41 Bytes [ 02, 02, 02, 84, A3, 33, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNtStatusToDosErrorNoTeb + 1BE 7C91FD47 114 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNtStatusToDosErrorNoTeb + 231 7C91FDBA 34 Bytes [ 01, A2, 84, 02, 02, 02, 02, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddRefActivationContext + 10 7C9200F2 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddRefActivationContext + 14 7C9200F6 47 Bytes [ 00, 00, 5C, 41, 32, 20, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddRefActivationContext + 44 7C920126 12 Bytes [ 00, 00, 5C, 41, 32, 40, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddRefActivationContext + 51 7C920133 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddRefActivationContext + 57 7C920139 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInformationActivationContext + 12 7C9201F4 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInformationActivationContext + 2C 7C92020E 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInformationActivationContext + 3B 7C92021D 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInformationActivationContext + 47 7C920229 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInformationActivationContext + 4E 7C920230 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcslen + 2 7C92035C 54 Bytes [ D1, 93, 6D, FF, D1, 93, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcslen + 39 7C920393 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcslen + 3D 7C920397 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcslen + 45 7C92039F 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitUnicodeStringEx + 13 7C9203B8 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitUnicodeStringEx + 1E 7C9203C3 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitUnicodeStringEx + 25 7C9203CA 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitUnicodeStringEx + 3E 7C9203E3 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitUnicodeStringEx + 4E 7C9203F3 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetNtGlobalFlags + 6 7C920431 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeHeap + 5 7C920442 76 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeHeap + 52 7C92048F 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeHeap + 5C 7C920499 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeHeap + 64 7C9204A1 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeHeap + 6F 7C9204AC 35 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAllocateHeap + 5 7C9205D9 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAllocateHeap + 1E 7C9205F2 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAllocateHeap + 35 7C920609 5 Bytes [ 4B, 00, AF, 00, 4B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAllocateHeap + 3B 7C92060F 1 Byte [ BF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAllocateHeap + 3D 7C920611 5 Bytes [ 4B, 00, 80, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImageDirectoryEntryToData + 12 7C920868 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImageDirectoryEntryToData + 20 7C920876 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImageDirectoryEntryToData + 2F 7C920885 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImageDirectoryEntryToData + 3F 7C920895 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImageDirectoryEntryToData + 44 7C92089A 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeChar + 19 7C920909 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeChar + 23 7C920913 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAcquirePebLock + 12 7C92092F 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAcquirePebLock + 22 7C92093F 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReleasePebLock + 6 7C920967 35 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeAnsiString + 15 7C92098B 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeAnsiString + 36 7C9209AC 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeAnsiString + 3E 7C9209B4 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeAnsiString + 4A 7C9209C0 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeAnsiString + 5E 7C9209D4 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSizeHeap + 12 7C9209FF 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSizeHeap + 1A 7C920A07 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSizeHeap + 2D 7C920A1A 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSizeHeap + 36 7C920A23 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSizeHeap + 46 7C920A33 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReleaseActivationContext + 2E 7C920A85 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReleaseActivationContext + 33 7C920A8A 51 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsncpy + 30 7C920ABF 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsncpy + 50 7C920ADF 60 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsncpy + 8E 7C920B1D 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsncpy + 97 7C920B26 124 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsncpy + 116 7C920BA5 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteCriticalSection + 11 7C92189B 149 Bytes [ 61, 74, 65, 67, 6F, 72, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteCriticalSection + A7 7C921931 910 Bytes [ 72, 20, 3D, 20, 22, 7B, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeCriticalSection + 193 7C921CC0 92 Bytes [ 37, 32, 7D, 22, 0D, 0A, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeCriticalSection + 1F0 7C921D1D 111 Bytes [ 65, 49, 74, 65, 6D, 20, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeCriticalSection + 260 7C921D8D 629 Bytes [ 6F, 72, 20, 73, 79, 73, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeCriticalSection + 4D6 7C922003 148 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeCriticalSection + 56C 7C922099 142 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeToTimeFields + 18 7C922425 25 Bytes [ 80, 00, 00, 07, FF, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeToTimeFields + 33 7C922440 7 Bytes [ 1F, FF, 00, 00, FF, E0, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeToTimeFields + 3B 7C922448 9 Bytes [ 1F, FF, 00, 00, FF, E0, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeToTimeFields + 45 7C922452 24 Bytes [ 00, 00, FF, F0, 00, 00, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeToTimeFields + 5F 7C92246C 30 Bytes [ FF, FE, 00, 01, FF, FF, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrAccessResource + 13 7C922CB5 36 Bytes [ FE, 3F, FF, FF, FC, 0F, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrLoadAlternateResourceModule + 5 7C922CDA 25 Bytes [ 00, 00, 80, 00, 00, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrLoadAlternateResourceModule + 1F 7C922CF4 38 Bytes [ FE, 00, 00, FF, FE, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrLoadAlternateResourceModule + 46 7C922D1B 24 Bytes [ 7F, FF, 00, 00, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrLoadAlternateResourceModule + 5F 7C922D34 2 Bytes [ 28, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrLoadAlternateResourceModule + 62 7C922D37 6 Bytes [ 00, 10, 00, 00, 00, 20 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrAlternateResourcesEnabled + 8 7C922D5D 10 Bytes [ 00, 00, 00, FF, FA, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrAlternateResourcesEnabled + 13 7C922D68 7 Bytes JMP 55912E6A .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrAlternateResourcesEnabled + 1B 7C922D70 19 Bytes [ FF, DA, F7, 00, CD, C0, CA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrAlternateResourcesEnabled + 2F 7C922D84 24 Bytes [ FF, F0, F5, 00, FF, DE, E3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrAlternateResourcesEnabled + 48 7C922D9D 10 Bytes [ CC, CC, 00, FF, CE, CE, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddressInSectionTable + 12 7C922DC4 76 Bytes [ F5, D2, D2, 00, C5, A9, A9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImageRvaToSection + 2D 7C922E11 31 Bytes [ 6B, 6B, 00, 51, 4C, 4C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImageRvaToSection + 4D 7C922E31 38 Bytes [ F5, F5, 00, C6, BE, BE, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImageRvaToSection + 74 7C922E58 3 Bytes [ 4C, 4A, 4A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImageRvaToSection + 78 7C922E5C 87 Bytes [ FF, FA, FA, 00, 86, 83, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImageRvaToSection + D0 7C922EB4 31 Bytes [ DF, DF, DF, 00, DE, DE, DE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeToMultiByteN + 13 7C922FAE 61 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeToMultiByteN + 53 7C922FEE 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeToMultiByteN + 74 7C92300F 210 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToAnsiString + 1C 7C9230E2 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToAnsiString + 28 7C9230EE 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToAnsiString + 2E 7C9230F4 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToAnsiString + 41 7C923107 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToAnsiString + 57 7C92311D 51 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrLockLoaderLock + 1F 7C923190 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrLockLoaderLock + 37 7C9231A8 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrLockLoaderLock + 3F 7C9231B0 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrLockLoaderLock + 4A 7C9231BB 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrLockLoaderLock + 59 7C9231CA 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrUnlockLoaderLock + 1B 7C923244 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrUnlockLoaderLock + 27 7C923250 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrUnlockLoaderLock + 2E 7C923257 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrUnlockLoaderLock + 34 7C92325D 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrUnlockLoaderLock + 45 7C92326E 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrClientCallServer + 28 7C9232C9 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrClientCallServer + 2A 7C9232CB 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrClientCallServer + 3E 7C9232DF 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrClientCallServer + 4A 7C9232EB 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrClientCallServer + 5F 7C923300 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_strcmpi + 4D 7C9233C1 45 Bytes [ FF, 00, 00, E0, 00, 00, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualUnicodeString + 21 7C9233EF 14 Bytes [ 00, 01, FF, 00, 00, E0, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualUnicodeString + 30 7C9233FE 10 Bytes [ 00, 00, 00, 0F, 00, 00, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualUnicodeString + 3B 7C923409 16 Bytes [ 0F, 00, 00, E0, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualUnicodeString + 4C 7C92341A 51 Bytes [ 00, 00, E0, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualUnicodeString + 80 7C92344E 23 Bytes [ 00, 00, 00, 0F, 00, 00, C0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidSid + 10 7C9234A7 45 Bytes [ 00, 00, 1F, 00, 00, E0, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidSid + 3E 7C9234D5 3 Bytes [ C0, 3F, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidSid + 42 7C9234D9 3 Bytes [ 0F, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidSid + 46 7C9234DD 39 Bytes [ FF, FF, FF, 00, 0F, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidSid + 6E 7C923505 129 Bytes [ FF, FF, FF, E0, 1F, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateUnicodeStringFromAsciiz + 2A 7C9235BB 50 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsDosDeviceName_U + 2F 7C9235EF 6 Bytes [ 6E, 00, 00, 00, 5A, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsDosDeviceName_U + 36 7C9235F6 6 Bytes [ 00, 43, 00, 00, 00, 2E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsDosDeviceName_U + 3D 7C9235FD 17 Bytes [ 00, 00, 1F, 00, 00, 00, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsDosDeviceName_U + 4F 7C92360F 1 Byte [ 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsDosDeviceName_U + 51 7C923611 6 Bytes [ 00, 00, 01, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopyLuid + 19 7C92367D 21 Bytes [ 00, 00, 76, 00, 00, 00, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopySid + 11 7C923693 1 Byte [ 17 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopySid + 13 7C923695 8 Bytes [ 00, 00, 0F, 00, 00, 00, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopySid + 1C 7C92369E 18 Bytes [ 00, 03, 00, 00, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopySid + 2F 7C9236B1 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLengthSid + 13 7C9236C9 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLengthSid + 17 7C9236CD 72 Bytes [ 00, 00, 00, 00, 88, B8, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeToMultiByteSize + 44 7C923716 7 Bytes [ 00, 4E, 00, 00, 00, 3A, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeToMultiByteSize + 4C 7C92371E 25 Bytes [ 00, 27, 00, 00, 00, 1B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLockHeap + 15 7C923738 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLockHeap + 35 7C923758 97 Bytes [ AF, DE, EE, FF, B3, EC, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnlockHeap + 30 7C9237BB 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnlockHeap + 37 7C9237C2 132 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsValidHandle + 52 7C923847 115 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wcsicmp + 2B 7C9238BB 5 Bytes [ 28, 00, 00, 00, 1C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wcsicmp + 31 7C9238C1 38 Bytes [ 00, 00, 10, 00, 00, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsValidIndexHandle + 2 7C9238E8 224 Bytes CALL 651538EC .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDetermineDosPathNameType_U + 2A 7C9239C9 37 Bytes [ 00, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDetermineDosPathNameType_U + 50 7C9239EF 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDetermineDosPathNameType_U + 52 7C9239F1 18 Bytes [ F1, FF, FF, 8F, F3, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDetermineDosPathNameType_U + 65 7C923A04 64 Bytes [ 21, A7, CE, FF, 09, 8E, BF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDetermineDosPathNameType_U + A6 7C923A45 4 Bytes [ 00, 00, 04, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlPrefixUnicodeString + 13 7C924223 399 Bytes [ 65, 62, 56, 69, 65, 77, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryEnvironmentVariable_U + 12 7C9243B3 78 Bytes [ 53, 43, 5F, 44, 69, 73, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryEnvironmentVariable_U + 61 7C924402 215 Bytes [ 65, 0D, 0A, 44, 45, 53, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlExpandEnvironmentStrings_U + 8 7C9244DA 123 Bytes [ 22, 7B, 45, 43, 44, 34, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlExpandEnvironmentStrings_U + 84 7C924556 162 Bytes [ 33, 45, 2D, 31, 31, 64, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlExpandEnvironmentStrings_U + 127 7C9245F9 55 Bytes [ 20, 20, 20, 20, 20, 20, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlExpandEnvironmentStrings_U + 15F 7C924631 274 Bytes [ 6F, 6C, 64, 65, 72, 42, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlExpandEnvironmentStrings_U + 272 7C924744 731 Bytes [ 65, 46, 6F, 72, 49, 6E, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetLongestNtPathLength + 241 7C924A20 533 Bytes [ 45, 52, 52, 5F, 4E, 4F, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertSidToUnicodeString + 1D9 7C924C36 476 Bytes [ 4B, 5F, 38, 20, 20, 20, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAppendUnicodeStringToString + 5C 7C924E13 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAppendUnicodeStringToString + 65 7C924E1C 34 Bytes [ 41, 01, 00, 00, 24, 0E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFormatCurrentUserKeyPath + 1F 7C924E40 5 Bytes [ 00, 00, 00, 00, 64 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFormatCurrentUserKeyPath + 25 7C924E46 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFormatCurrentUserKeyPath + 27 7C924E48 14 Bytes [ C8, 00, 00, 00, 2C, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFormatCurrentUserKeyPath + 37 7C924E58 6 Bytes [ 58, 02, 00, 00, BC, 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFormatCurrentUserKeyPath + 3E 7C924E5F 19 Bytes [ 00, 20, 03, 00, 00, 84, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!bsearch + 11 7C92500C 67 Bytes [ 9B, 9B, 9B, FF, 7D, 7D, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!bsearch + 56 7C925051 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!bsearch + 5D 7C925058 6 Bytes [ 00, 00, 00, 00, A7, 41 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!bsearch + 64 7C92505F 52 Bytes [ AF, 99, 33, 00, 30, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!bsearch + 9A 7C925095 138 Bytes [ DF, BF, FF, FF, DB, B8, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindActivationContextSectionString + F 7C925328 68 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindActivationContextSectionString + 55 7C92536E 26 Bytes [ 00, 00, 4E, B4, FF, 9F, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindActivationContextSectionString + 72 7C92538B 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindActivationContextSectionString + 8E 7C9253A7 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindActivationContextSectionString + 91 7C9253AA 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlHashUnicodeString + 86 7C9254EB 20 Bytes [ 00, 00, 00, 00, 00, CC, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlHashUnicodeString + 9B 7C925500 36 Bytes [ EF, 91, 91, FF, FF, C2, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlHashUnicodeString + C1 7C925526 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlHashUnicodeString + C5 7C92552A 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlHashUnicodeString + CB 7C925530 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDosApplyFileIsolationRedirection_Ustr + B 7C9257AE 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDosApplyFileIsolationRedirection_Ustr + 21 7C9257C4 51 Bytes [ 25, D4, FF, FF, 3A, DF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDosApplyFileIsolationRedirection_Ustr + 55 7C9257F8 11 Bytes [ A3, A3, A3, FF, CB, CB, CB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDosApplyFileIsolationRedirection_Ustr + 61 7C925804 7 Bytes [ D7, D7, D7, FF, B1, B1, B1 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDosApplyFileIsolationRedirection_Ustr + 69 7C92580C 11 Bytes [ AA, AA, AA, FF, 8F, 8F, 8F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindCharInUnicodeString + 19 7C925B82 21 Bytes [ D0, FF, 8C, 8F, 95, BF, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindCharInUnicodeString + 2F 7C925B98 12 Bytes [ CF, A2, 8C, F4, C1, 8E, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindCharInUnicodeString + 3D 7C925BA6 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindCharInUnicodeString + 44 7C925BAD 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindCharInUnicodeString + 4C 7C925BB5 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidateUnicodeString + 2 7C925C74 57 Bytes [ F9, F9, F9, FF, F9, F9, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidateUnicodeString + 3C 7C925CAE 6 Bytes [ 00, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidateUnicodeString + 43 7C925CB5 66 Bytes [ FF, FF, FF, 86, 60, 39, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidateUnicodeString + 86 7C925CF8 11 Bytes [ CD, 67, 00, FF, 41, 75, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidateUnicodeString + 92 7C925D04 11 Bytes [ 33, 74, 1A, FF, D9, 7C, 55, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrLoadDll + 5 7C9261CF 8 Bytes [ 00, B0, 04, 00, 00, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrLoadDll + E 7C9261D8 69 Bytes [ 64, 5F, AE, A7, D7, C4, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrLoadDll + 55 7C92621F 119 Bytes [ FF, D0, 0A, 4F, C9, 63, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrLoadDll + CE 7C926298 90 Bytes [ 80, AF, A1, E7, 96, 4D, CF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrLoadDll + 129 7C9262F3 140 Bytes [ 00, F0, 00, 00, 00, C0, 15, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrGetDllHandleEx + 11 7C9265B8 6 Bytes [ 60, 16, 00, 00, A0, 15 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrGetDllHandleEx + 18 7C9265BF 87 Bytes [ 00, E4, 17, 00, 00, 78, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrGetDllHandleEx + 70 7C926617 7 Bytes [ 00, 98, 0A, 00, 00, F4, 1B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrGetDllHandleEx + 78 7C92661F 60 Bytes [ 00, FF, FF, FF, FF, 80, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrGetDllHandleEx + B5 7C92665C 27 Bytes [ A8, 16, 00, 00, 68, 17, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMultiAppendUnicodeStringBuffer + 2D 7C926748 6 Bytes [ 74, 1E, 00, 00, FC, 17 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMultiAppendUnicodeStringBuffer + 34 7C92674F 11 Bytes [ 00, 4C, 03, 00, 00, 74, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMultiAppendUnicodeStringBuffer + 40 7C92675B 8 Bytes [ 00, A0, 17, 00, 00, B8, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMultiAppendUnicodeStringBuffer + 49 7C926764 19 Bytes [ 34, 10, 00, 00, A0, 1E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMultiAppendUnicodeStringBuffer + 5D 7C926778 96 Bytes [ F0, 0D, 00, 00, D0, 1E, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDosSearchPath_U + 67 7C926E60 40 Bytes [ FF, FF, FF, FF, 05, 00, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDosSearchPath_U + 90 7C926E89 69 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDosSearchPath_U + D6 7C926ECF 12 Bytes [ 00, 05, 00, F2, 7E, 54, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDosSearchPath_U + E3 7C926EDC 46 Bytes CALL 7B926EE4 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDosSearchPath_U + 112 7C926F0B 22 Bytes [ 00, 05, 00, 60, 68, 49, 74, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrUnloadDll + 45 7C9271D0 64 Bytes [ 0C, 00, AE, DA, 49, 6E, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrUnloadDll + 87 7C927212 25 Bytes [ FF, FF, D8, 05, 00, 00, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrUnloadDll + A1 7C92722C 19 Bytes [ D4, 02, 00, 00, 05, 00, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrUnloadDll + B5 7C927240 54 Bytes [ FF, FF, FF, FF, 0F, 38, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrUnloadDll + ED 7C927278 22 Bytes [ 0C, 38, F5, E6, 46, 6F, 6C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlActivateActivationContextEx + A3 7C92752A 20 Bytes [ 65, AF, 50, 6F, 70, 75, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlActivateActivationContextEx + B9 7C927540 21 Bytes [ 40, 0D, 00, 00, 03, 00, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlActivateActivationContextEx + CF 7C927556 65 Bytes [ 9B, 5F, 76, 78, 57, 57, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlActivateActivationContextEx + 111 7C927598 26 Bytes [ CC, 0A, 00, 00, 0B, 00, F5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlActivateActivationContextEx + 12C 7C9275B3 91 Bytes [ FF, 0D, 00, 13, 5C, 70, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlActivateActivationContext + 2 7C92760F 26 Bytes [ FF, 09, 00, A9, CF, 70, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlActivateActivationContext + 1D 7C92762A 52 Bytes [ 2F, 15, 53, 65, 6C, 65, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlActivateActivationContext + 52 7C92765F 76 Bytes [ FF, 0F, 38, 16, 09, 53, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlActivateActivationContext + 9F 7C9276AC 51 Bytes [ 4F, 57, 41, 4C, 4C, 4F, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlActivateActivationContext + D3 7C9276E0 59 Bytes [ 13, 30, B5, 8D, 53, 46, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeactivateActivationContext + 33 7C92771C 31 Bytes [ FF, FF, FF, FF, 12, 30, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeactivateActivationContext + 53 7C92773C 145 Bytes [ FF, FF, FF, FF, 1A, 30, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompareUnicodeString + 1C 7C9277CE 13 Bytes [ 8C, 98, 70, 70, 73, 64, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompareUnicodeString + 2A 7C9277DC 311 Bytes [ 4C, 02, 00, 00, 0F, 00, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompareUnicodeString + 162 7C927914 29 Bytes [ 07, 00, 72, A4, 53, 75, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompareUnicodeString + 180 7C927932 9 Bytes [ 43, 57, C4, 09, 00, 00, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompareUnicodeString + 18A 7C92793C 1 Byte [ 07 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReAllocateHeap + 99 7C927A96 3 Bytes [ FF, FF, 0A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReAllocateHeap + 9D 7C927A9A 15 Bytes [ 58, 0E, 76, 4F, 70, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReAllocateHeap + AD 7C927AAA 208 Bytes [ FF, FF, FF, FF, FF, FF, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReAllocateHeap + 17E 7C927B7B 30 Bytes [ 00, A8, 13, 00, 00, 0B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReAllocateHeap + 19D 7C927B9A 20 Bytes [ DE, DD, 49, 73, 53, 65, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeFieldsToTime + 22 7C92892B 243 Bytes [ 57, 15, 00, 43, 6C, 65, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeFieldsToTime + 116 7C928A1F 94 Bytes [ 66, 69, 65, 64, 20, 73, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeFieldsToTime + 175 7C928A7E 143 Bytes [ 50, 61, 74, 68, 20, 6E, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIntegerToChar + 36 7C928B0E 231 Bytes [ 43, 61, 73, 65, 20, 73, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIntegerToChar + 11E 7C928BF6 73 Bytes [ 70, 61, 74, 68, 6E, 61, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIntegerToUnicodeString + 42 7C928C40 42 Bytes [ 6F, 6C, 64, 65, 72, 20, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToInteger + A 7C928C6B 52 Bytes [ 20, 6C, 69, 6E, 6B, 3F, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToInteger + 3F 7C928CA0 77 Bytes [ 20, 73, 79, 73, 74, 65, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToInteger + 8D 7C928CEE 231 Bytes [ 44, 65, 66, 69, 6E, 69, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToInteger + 175 7C928DD6 255 Bytes [ 45, 78, 65, 63, 75, 74, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrNewThread + 5C 7C928ED6 230 Bytes [ 50, 61, 72, 73, 65, 20, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpWaitForCriticalSection + 2E 7C928FBD 74 Bytes [ 00, 4F, 66, 66, 6C, 69, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpWaitForCriticalSection + 79 7C929008 23 Bytes [ 0A, 12, 00, 13, 5B, 7A, 7A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpWaitForCriticalSection + 91 7C929020 5 Bytes [ 00, 00, 00, 02, 6D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpWaitForCriticalSection + 97 7C929026 26 Bytes [ 0A, 12, 00, 12, 3A, 49, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpWaitForCriticalSection + B2 7C929041 3 Bytes [ 63, CA, 03 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpUnWaitCriticalSection + 1C 7C929073 132 Bytes [ 00, 00, 02, 77, 00, 05, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpUnWaitCriticalSection + A1 7C9290F8 9 Bytes [ 00, 02, 77, 00, 05, 12, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeThreadActivationContextStack + 5 7C929102 27 Bytes [ 5A, 04, 56, 56, 04, 53, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeThreadActivationContextStack + 21 7C92911E 98 Bytes [ 05, 12, 00, 03, 27, 65, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrShutdownThread + 5B 7C929181 2 Bytes [ 02, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrShutdownThread + 5E 7C929184 2 Bytes [ 05, 12 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrShutdownThread + 61 7C929187 111 Bytes [ 17, 31, 66, 5E, 5E, 5D, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrShutdownThread + D1 7C9291F7 13 Bytes [ 02, 06, 00, 05, 00, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrShutdownThread + DF 7C929205 78 Bytes [ 02, 77, 00, 05, 12, 00, 17, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReleaseResource + 2B 7C9292AE 116 Bytes [ 00, 02, 77, 00, 05, 12, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAcquireResourceExclusive + 27 7C929323 7 Bytes [ 02, 05, 00, 05, 00, 02, 5E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAcquireResourceExclusive + 2F 7C92932B 108 Bytes [ 03, 5D, 47, 13, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAcquireResourceExclusive + 9D 7C929399 30 Bytes [ 02, 77, 00, 05, 12, 00, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAcquireResourceExclusive + BD 7C9293B9 242 Bytes [ 02, 77, 00, 05, 12, 00, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAcquireResourceExclusive + 1B0 7C9294AC 33 Bytes [ 02, 12, 00, 03, 26, 64, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetUserInfoHeap + 16 7C9294CE 7 Bytes [ 02, 12, 00, 03, 26, 64, 5A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetUserInfoHeap + 1E 7C9294D6 93 Bytes [ 04, 04, 00, 10, 53, 52, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetUserInfoHeap + 7C 7C929534 6 Bytes [ 02, 12, 00, 17, 31, 66 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetUserInfoHeap + 83 7C92953B 195 Bytes [ 5C, 5C, 5B, 5B, 58, 55, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetUserInfoHeap + 147 7C9295FF 33 Bytes [ 03, 3D, 70, 6A, 00, 04, 11, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCheckForOrphanedCriticalSections + 2B 7C929727 34 Bytes [ 02, 7C, 00, 02, 12, 00, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCheckForOrphanedCriticalSections + 4E 7C92974A 112 Bytes [ 02, 12, 00, 03, 53, 79, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!towlower + 4F 7C9297BB 12 Bytes [ 66, 64, 64, 61, 3F, 1E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!towlower + 5C 7C9297C8 42 Bytes [ 02, 12, 00, 12, 3A, 49, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!towlower + 87 7C9297F3 11 Bytes [ 02, 82, 24, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!towlower + 93 7C9297FF 16 Bytes [ 03, 00, 03, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!towlower + A4 7C929810 61 Bytes [ 00, 00, 00, 02, 00, 01, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrGetProcedureAddress + 10C 7C929C94 10 Bytes [ 6E, 6C, 6C, 6B, 6B, 36, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrGetProcedureAddress + 117 7C929C9F 28 Bytes [ 00, 00, 02, 7E, 00, 0A, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrGetProcedureAddress + 134 7C929CBC 38 Bytes [ 00, 00, 00, 02, 7E, 00, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrGetProcedureAddress + 15B 7C929CE3 46 Bytes [ 12, 3A, 49, 45, 45, 42, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrGetProcedureAddress + 18A 7C929D12 28 Bytes [ 04, 00, 0A, 14, 01, 1B, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetVersion + 17 7C929D50 23 Bytes [ 00, 02, 88, 00, 0A, 12, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetVersion + 2F 7C929D68 21 Bytes [ 45, 45, 43, 43, 43, 47, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetVersion + 45 7C929D7E 39 Bytes [ 04, 04, 01, 51, 0B, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetVersion + 6D 7C929DA6 22 Bytes [ 45, 45, 43, 47, 1B, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetVersion + 84 7C929DBD 1 Byte [ 10 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetNtProductType + 8 7C929E2E 6 Bytes [ 4A, 4A, 48, 47, 1B, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetNtProductType + F 7C929E35 114 Bytes [ 00, 00, 02, 88, 00, 0A, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetNtProductType + 82 7C929EA8 47 Bytes [ 04, 11, 01, 5D, 0B, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetNtProductType + B2 7C929ED8 27 Bytes [ 00, 02, 88, 00, 0A, 12, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetNtProductType + CE 7C929EF4 32 Bytes [ 53, 53, 47, 1B, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDoesFileExists_U + DE 7C92A18E 507 Bytes [ 53, 70, 65, 63, 69, 61, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcscat + 31 7C92A38A 23 Bytes [ 47, 65, 74, 20, 74, 68, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcscat + 49 7C92A3A2 239 Bytes [ 52, 65, 74, 72, 69, 65, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualSid + 1E 7C92A492 59 Bytes [ 09, 40, 09, 00, 09, 80, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeSid + 11 7C92A4CE 27 Bytes [ 0D, 80, 1D, 00, FF, 7F, BC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeSid + 2D 7C92A4EA 3 Bytes [ FF, 7F, 58 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeSid + 31 7C92A4EE 28 Bytes [ 00, 00, 1A, 00, FF, 7F, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeSid + 4E 7C92A50B 47 Bytes [ 7F, A0, 00, 00, 00, 1A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeSid + 80 7C92A53D 10 Bytes [ FF, 57, 57, 2C, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!swprintf + 30 7C92A733 18 Bytes [ 00, 00, 00, 00, 00, 4C, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!swprintf + 43 7C92A746 17 Bytes [ 19, 80, 00, 00, 00, 00, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!swprintf + 56 7C92A759 15 Bytes [ 00, 00, 00, E0, 02, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!swprintf + 67 7C92A76A 12 Bytes [ 00, 00, 2C, 00, 64, 00, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!swprintf + 75 7C92A778 8 Bytes [ 00, 00, 00, 00, F0, 02, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidAcl + 10 7C92A805 15 Bytes [ 00, 00, 00, 38, 00, 4C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidAcl + 21 7C92A816 7 Bytes [ 00, 00, 74, 03, 00, 00, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidAcl + 29 7C92A81E 15 Bytes [ 00, 00, C0, 02, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidAcl + 39 7C92A82E 3 Bytes [ 19, 80, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidAcl + 3D 7C92A832 10 Bytes [ 00, 00, 3C, 00, 74, 00, 09, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateSecurityDescriptor + 26 7C92A89F 24 Bytes [ 00, 01, 00, 00, 00, 38, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetDaclSecurityDescriptor + 11 7C92A8B8 11 Bytes [ 02, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetDaclSecurityDescriptor + 1D 7C92A8C4 8 Bytes [ 0B, 00, 0B, 80, 6C, 03, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetDaclSecurityDescriptor + 27 7C92A8CE 25 Bytes [ 00, 00, 28, 00, 00, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetDaclSecurityDescriptor + 41 7C92A8E8 14 Bytes [ 04, 00, 00, 00, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetDaclSecurityDescriptor + 50 7C92A8F7 43 Bytes [ 00, 08, 00, 00, 00, 64, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFirstFreeAce + 21 7C92A923 20 Bytes [ 00, A0, 02, 00, 00, D4, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFirstFreeAce + 36 7C92A938 27 Bytes [ 20, 00, 00, 00, 40, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFirstFreeAce + 52 7C92A954 13 Bytes [ 54, 01, 00, 00, 98, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFirstFreeAce + 60 7C92A962 11 Bytes [ 00, 00, 1C, 00, 00, 00, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFirstFreeAce + 6C 7C92A96E 20 Bytes [ 00, 00, 02, 00, 34, 00, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateAcl + 11 7C92AA22 52 Bytes [ 00, 00, 94, 04, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateAcl + 46 7C92AA57 3 Bytes [ 00, 54, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateAcl + 4A 7C92AA5B 14 Bytes [ 00, 74, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessAllowedAce + 7 7C92AA6A 7 Bytes [ 00, 00, 54, 00, 00, 00, 70 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessAllowedAce + F 7C92AA72 29 Bytes [ 00, 00, 8C, 00, 00, 00, A8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeSid + A 7C92AA90 8 Bytes [ 11, 44, 00, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeSid + 13 7C92AA99 20 Bytes [ 00, 00, 00, F0, 04, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeSid + 28 7C92AAAE 20 Bytes [ 01, 00, 19, 00, 19, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAllocateAndInitializeSid + 12 7C92AAC5 13 Bytes [ 00, 00, 00, 08, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAllocateAndInitializeSid + 20 7C92AAD3 2 Bytes [ 00, 0A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAllocateAndInitializeSid + 23 7C92AAD6 22 Bytes [ 00, 00, 2C, 00, 02, 00, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAllocateAndInitializeSid + 3A 7C92AAED 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAllocateAndInitializeSid + 3C 7C92AAEF 44 Bytes [ 00, 00, 00, 00, 00, 1C, 05, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDosSearchPath_Ustr + B 7C92AC1A 138 Bytes [ 4C, 00, 11, 44, 09, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDosSearchPath_Ustr + 96 7C92ACA5 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDosSearchPath_Ustr + B7 7C92ACC6 10 Bytes [ 00, 00, 50, 00, 4C, 00, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDosSearchPath_Ustr + C3 7C92ACD2 23 Bytes [ 00, 00, 00, 00, 00, 00, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDosSearchPath_Ustr + DB 7C92ACEA 21 Bytes [ 0E, 00, 19, 00, 19, 80, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetOwnerSecurityDescriptor + 15 7C92AF2D 14 Bytes [ 00, 02, 60, 03, 00, 02, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetOwnerSecurityDescriptor + 24 7C92AF3C 11 Bytes [ B0, 04, 00, 00, D8, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetOwnerSecurityDescriptor + 30 7C92AF48 13 Bytes [ 7C, 06, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetOwnerSecurityDescriptor + 3F 7C92AF57 39 Bytes [ 00, 84, 00, 00, 00, BC, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetGroupSecurityDescriptor + 1D 7C92AF7F 6 Bytes [ 00, F0, 04, 00, 00, 30 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetGroupSecurityDescriptor + 24 7C92AF86 11 Bytes [ 00, 00, C8, 04, 00, 00, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetGroupSecurityDescriptor + 30 7C92AF92 20 Bytes [ 01, 00, 19, 00, 19, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetGroupSecurityDescriptor + 45 7C92AFA7 56 Bytes [ 00, 00, 00, 00, 00, 08, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDecodeSystemPointer + 18 7C92AFE0 7 Bytes [ 4C, 01, 00, 00, 0A, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDecodeSystemPointer + 20 7C92AFE8 26 Bytes [ 20, 00, 03, 00, 19, 00, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDecodeSystemPointer + 3C 7C92B004 36 Bytes [ CC, 06, 00, 00, 00, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlOpenCurrentUser + 20 7C92B029 27 Bytes [ 00, 00, 00, 2C, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlOpenCurrentUser + 3D 7C92B046 31 Bytes [ 00, 00, 1C, 00, 4C, 00, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlOpenCurrentUser + 5D 7C92B066 67 Bytes [ 00, 00, 2C, 00, 01, 00, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsncat + 36 7C92B0AA 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsncat + 3C 7C92B0B0 29 Bytes [ 08, 05, 00, 00, 30, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsncat + 5A 7C92B0CE 16 Bytes [ 64, 00, 09, 44, 03, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsncat + 6C 7C92B0E0 7 Bytes [ 0C, 00, 0C, 80, 68, 06, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsncat + 74 7C92B0E8 43 Bytes [ 11, 00, 00, 00, 98, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAllocateHandle + 32 7C92B73E 10 Bytes [ 54, 00, 11, 44, 01, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAllocateHandle + 3D 7C92B749 55 Bytes [ 00, 00, 00, B0, 0C, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetUserValueHeap + 20 7C92B781 18 Bytes [ 00, 00, 00, 1C, 00, 4C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetUserValueHeap + 33 7C92B794 2 Bytes [ 10, 0D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetUserValueHeap + 36 7C92B797 70 Bytes [ 00, 00, 00, 00, 00, 4C, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetUserValueHeap + 7D 7C92B7DE 1 Byte [ 4C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetUserValueHeap + 7F 7C92B7E0 18 Bytes [ 11, 44, 03, 00, 01, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_snwprintf + 2C 7C92C2CD 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_snwprintf + 3F 7C92C2E0 22 Bytes [ A2, 8E, 83, FF, AA, 99, 8F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_snwprintf + 57 7C92C2F8 83 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_snwprintf + AC 7C92C34D 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_snwprintf + C4 7C92C365 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindResourceDirectory_U + 1C 7C92C951 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindResourceDirectory_U + 2F 7C92C964 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindResourceDirectory_U + 41 7C92C976 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindResourceDirectory_U + 48 7C92C97D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindResourceDirectory_U + 4B 7C92C980 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetActiveActivationContext + 14 7C92CC90 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetActiveActivationContext + 1B 7C92CC97 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetActiveActivationContext + 21 7C92CC9D 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetActiveActivationContext + 31 7C92CCAD 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetActiveActivationContext + 38 7C92CCB4 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrQueryImageFileExecutionOptions + 2A 7C92D381 61 Bytes [ FF, 74, 74, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrQueryImageFileExecutionOptions + 69 7C92D3C0 77 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrQueryImageFileExecutionOptions + B7 7C92D40E 25 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrQueryImageFileExecutionOptions + D1 7C92D428 36 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrQueryImageFileExecutionOptions + F6 7C92D44D 20 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAppendPathElement + 2 7C92DB8F 30 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAppendPathElement + 23 7C92DBB0 368 Bytes [ FF, FF, FE, DA, E3, FC, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAppendPathElement + 195 7C92DD22 21 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAppendPathElement + 1AC 7C92DD39 16 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAppendPathElement + 1BE 7C92DD4B 1 Byte [ FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrDisableThreadCalloutsForDll + 8 7C92DDB3 46 Bytes [ EA, D8, DF, E6, E7, E0, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrDisableThreadCalloutsForDll + 37 7C92DDE2 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrDisableThreadCalloutsForDll + 3E 7C92DDE9 47 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrDisableThreadCalloutsForDll + 71 7C92DE1C 28 Bytes [ FF, FF, FF, FF, FF, FF, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrDisableThreadCalloutsForDll + 8F 7C92DE3A 31 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpEnsureBufferSize + 3B 7C92E972 11 Bytes [ 00, 00, 00, 00, 00, 00, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpEnsureBufferSize + 47 7C92E97E 81 Bytes [ FF, FF, FF, FB, F6, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpEnsureBufferSize + 99 7C92E9D0 107 Bytes [ FF, E6, CE, FF, FF, E2, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpEnsureBufferSize + 106 7C92EA3D 6 Bytes [ FF, FF, FF, FF, FA, F3 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpEnsureBufferSize + 10D 7C92EA44 16 Bytes [ FF, F6, EB, FF, FF, EF, E0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!vDbgPrintExWithPrefix + 5 7C92EAB0 51 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!vDbgPrintExWithPrefix + 39 7C92EAE4 27 Bytes [ 00, 50, 01, FF, 00, 4B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!vDbgPrintExWithPrefix + 55 7C92EB00 3 Bytes [ B5, 98, 98 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!vDbgPrintExWithPrefix + 59 7C92EB04 64 Bytes [ AF, 90, 90, FC, AC, 8A, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgPrintEx + 20 7C92EB45 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrFreeCaptureBuffer + A 7C92EB59 10 Bytes [ 00, 00, 00, 00, 4B, 00, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrFreeCaptureBuffer + 15 7C92EB64 85 Bytes [ 09, 99, 1E, FF, 00, 50, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrAllocateCaptureBuffer + 13 7C92EBBA 33 Bytes [ 00, 00, 00, 00, 00, 00, B6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrAllocateCaptureBuffer + 35 7C92EBDC 38 Bytes [ 93, 83, 83, EF, 8C, 6A, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrAllocateCaptureBuffer + 5C 7C92EC03 45 Bytes [ 00, C5, 93, 93, 52, C7, 98, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrAllocateMessagePointer + 29 7C92EC31 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrAllocateMessagePointer + 41 7C92EC49 52 Bytes [ 81, BD, 8F, 00, 81, BD, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrAllocateMessagePointer + 76 7C92EC7E 22 Bytes [ FF, FF, FF, FB, F6, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrAllocateMessagePointer + 8D 7C92EC95 18 Bytes [ E2, C6, FF, FF, DD, BB, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrAllocateMessagePointer + A1 7C92ECA9 22 Bytes [ C9, 96, FF, FF, C6, 91, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindCreateProcessManifest + 8 7C92FE5D 66 Bytes [ 06, 0F, 07, 0F, 08, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindCreateProcessManifest + 4B 7C92FEA0 16 Bytes [ 00, 05, 08, 03, 00, 0D, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindCreateProcessManifest + 5C 7C92FEB1 7 Bytes [ 02, 23, 00, 00, 06, 08, 03 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindCreateProcessManifest + 64 7C92FEB9 30 Bytes [ 0D, 07, 07, 00, 02, 05, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindCreateProcessManifest + 83 7C92FED8 10 Bytes [ 05, 00, 07, 0F, 01, 07, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrCreateOutOfProcessImage + 1A 7C930175 2 Bytes [ 02, 34 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrCreateOutOfProcessImage + 1D 7C930178 66 Bytes [ 0A, 0D, 00, 09, 07, 0F, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrCreateOutOfProcessImage + 60 7C9301BB 9 Bytes [ 02, 35, 00, 0C, 0D, 00, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrCreateOutOfProcessImage + 6A 7C9301C5 11 Bytes [ 00, 05, 0F, 03, 07, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrCreateOutOfProcessImage + 76 7C9301D1 16 Bytes [ 00, 0B, 0D, 00, 03, 07, 0F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrDestroyOutOfProcessImage + 31 7C9302A6 3 Bytes [ 08, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrDestroyOutOfProcessImage + 35 7C9302AA 90 Bytes [ 00, 00, 00, 02, 41, 00, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitOutOfProcessMemoryStream + 1E 7C930305 6 Bytes [ 07, 02, 0F, 01, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitOutOfProcessMemoryStream + 25 7C93030C 90 Bytes [ 00, 02, 42, 00, 0E, 0D, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitMemoryStream + 1E 7C930367 94 Bytes [ 08, 07, 0F, 0F, 0F, 0F, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReleaseMemoryStream + 21 7C9303C6 16 Bytes [ 00, 02, 4F, 00, 0C, 0D, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReleaseMemoryStream + 32 7C9303D7 25 Bytes [ 00, 00, 00, 00, 02, 50, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!qsort + 8 7C9303F1 34 Bytes [ 03, 07, 0F, 0F, 00, 04, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!qsort + 2B 7C930414 20 Bytes [ 0C, 0D, 06, 07, 05, 0F, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!qsort + 40 7C930429 17 Bytes [ 0F, 0F, 00, 04, 07, 02, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!qsort + 52 7C93043B 10 Bytes [ 03, 07, 0F, 0F, 00, 06, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!qsort + 5D 7C930446 3 Bytes [ 01, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetFrame + B 7C9304BD 10 Bytes [ 02, 5A, 20, 05, 0D, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetFrame + 16 7C9304C8 224 Bytes [ 09, 0D, 00, 00, 00, 02, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddRefMemoryStream + 10 7C9305A9 6 Bytes [ FF, 06, 0F, 03, 07, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddRefMemoryStream + 17 7C9305B0 66 Bytes [ 00, 02, 60, 00, 02, 0D, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInterfaceMemoryStream + 3E 7C9305F3 25 Bytes [ 02, 06, 00, 03, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInterfaceMemoryStream + 58 7C93060D 4 Bytes [ 00, 00, 02, 6A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInterfaceMemoryStream + 5D 7C930612 2 Bytes [ 0C, 0D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInterfaceMemoryStream + 60 7C930615 7 Bytes [ 08, 07, 0F, 0F, 0F, 08, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInterfaceMemoryStream + 6A 7C93061F 17 Bytes [ 00, 00, 02, 6A, 00, 0C, 0D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrCaptureMessageMultiUnicodeStringsInPlace + E 7C930653 3 Bytes [ 00, 07, 0F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrCaptureMessageMultiUnicodeStringsInPlace + 12 7C930657 56 Bytes [ 08, 01, 00, 00, 00, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrCaptureMessageMultiUnicodeStringsInPlace + 4B 7C930690 72 Bytes [ 07, 07, 00, 03, 0F, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrCaptureMessageMultiUnicodeStringsInPlace + 94 7C9306D9 15 Bytes [ 00, 00, 02, 6E, 00, 05, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrCaptureMessageMultiUnicodeStringsInPlace + A4 7C9306E9 6 Bytes [ 0F, 07, 07, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrCaptureMessageString + 9 7C93070F 7 Bytes [ 00, 00, 02, 24, 12, 01, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrCaptureMessageString + 11 7C930717 30 Bytes [ 00, 00, 02, 24, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrCaptureMessageString + 30 7C930736 29 Bytes [ 23, 00, 02, 0F, 01, 07, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrCaptureMessageString + 4F 7C930755 5 Bytes [ 0F, 07, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrCaptureMessageString + 55 7C93075B 10 Bytes [ 02, 22, 00, 04, 0F, 01, 07, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetLengthWithoutLastFullDosOrNtPathElement + 9 7C93077A 9 Bytes [ 00, 02, 08, 00, 07, 0F, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetLengthWithoutLastFullDosOrNtPathElement + 14 7C930785 46 Bytes [ 02, 0C, 00, 00, 0C, 08, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetLengthWithoutLastFullDosOrNtPathElement + 43 7C9307B4 11 Bytes [ 05, 00, 06, 0F, 02, 07, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetLengthWithoutLastFullDosOrNtPathElement + 50 7C9307C1 38 Bytes [ 0C, 08, 0B, 08, 0B, 08, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetLengthWithoutLastFullDosOrNtPathElement + 77 7C9307E8 113 Bytes [ 06, 0F, 02, 07, 02, 0D, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReadOutOfProcessMemoryStream + 50 7C9309AF 12 Bytes [ 0B, 00, 00, 00, 02, 23, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReadOutOfProcessMemoryStream + 5D 7C9309BC 119 Bytes [ 00, 0F, 0F, 0F, 07, 0F, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlStatMemoryStream + 22 7C930A34 69 Bytes [ 0B, 08, 0B, 08, 0B, 08, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlStatMemoryStream + 68 7C930A7A 110 Bytes [ 00, 19, 08, 0B, 08, 0B, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateActivationContext + 1E 7C930AE9 2 Bytes [ 0B, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateActivationContext + 21 7C930AEC 31 Bytes [ 08, 0B, 08, 0B, 08, 0B, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateActivationContext + 41 7C930B0C 4 Bytes [ B8, 00, 00, 0E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateActivationContext + 46 7C930B11 13 Bytes [ 0B, 08, 0B, 08, 0B, 08, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateActivationContext + 54 7C930B1F 4 Bytes [ 00, 00, 02, 0B ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFinalReleaseOutOfProcessMemoryStream + 34 7C930E68 7 Bytes [ 00, 02, 29, 00, 08, 0D, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFinalReleaseOutOfProcessMemoryStream + 3C 7C930E70 67 Bytes [ 06, 00, 00, 08, 07, 0F, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFinalReleaseOutOfProcessMemoryStream + 80 7C930EB4 43 Bytes [ 02, 0D, 00, 02, 0C, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetCurrentDirectory_U + 12 7C930EE0 28 Bytes [ 0B, 0D, 00, 07, 07, 0F, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetCurrentDirectory_U + 31 7C930EFF 8 Bytes [ 00, 00, 02, 84, 00, 0B, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetCurrentDirectory_U + 3A 7C930F08 26 Bytes [ 07, 0F, 0F, 0F, 0F, 0F, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetCurrentDirectory_U + 57 7C930F25 10 Bytes [ 02, 85, 00, 0B, 0D, 00, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetCurrentDirectory_U + 62 7C930F30 28 Bytes [ 04, 0F, 01, 08, 01, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeResource + 59 7C9311F4 87 Bytes [ C4, 5E, 2A, FF, CE, 88, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsstr + 2 7C93124C 91 Bytes [ CD, 67, 34, FF, CD, 69, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsstr + 5E 7C9312A8 41 Bytes [ CA, 60, 2B, FF, CD, 68, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsstr + 89 7C9312D3 4 Bytes [ FF, F1, CB, B9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsstr + 8E 7C9312D8 15 Bytes [ D7, 70, 3D, FF, D7, 72, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsstr + 9E 7C9312E8 26 Bytes [ CC, 65, 32, FF, CC, 64, 31, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyEnvironment + 2 7C93135C 34 Bytes [ C8, 77, 4F, FF, F0, EC, EA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyEnvironment + 25 7C93137F 11 Bytes [ FF, FF, FF, FC, FF, 6B, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyEnvironment + 31 7C93138B 40 Bytes [ 24, F5, D8, C8, 9A, FF, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyEnvironment + 5A 7C9313B4 11 Bytes [ C9, 5C, 25, FF, CB, 61, 2C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyEnvironment + 66 7C9313C0 163 Bytes [ EB, DE, D7, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSplay + 2 7C931464 43 Bytes [ F7, 90, 5B, FF, D6, 9E, 82, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSplay + 2E 7C931490 3 Bytes [ EA, 84, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSplay + 32 7C931494 24 Bytes [ F9, D9, C7, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSplay + 4C 7C9314AE 41 Bytes [ 00, 00, EF, CD, BB, 49, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDuplicateUnicodeString + 13 7C9314D8 23 Bytes JMP 689306CA .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDuplicateUnicodeString + 2B 7C9314F0 29 Bytes [ FC, CC, B2, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDuplicateUnicodeString + 4B 7C931510 48 Bytes [ 00, 00, 00, 00, F6, DA, CC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDuplicateUnicodeString + 7C 7C931541 21 Bytes [ B4, 85, FF, FF, AF, 78, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDuplicateUnicodeString + 92 7C931557 15 Bytes CALL AECF0E3E .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLookupElementGenericTable + 18 7C9315D1 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLookupElementGenericTable + 1C 7C9315D5 19 Bytes [ 00, 00, 00, F7, DB, CD, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLookupElementGenericTable + 30 7C9315E9 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLookupElementGenericTable + 37 7C9315F0 22 Bytes [ FF, FF, FF, FF, FF, FF, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLookupElementGenericTable + 4E 7C931607 4 Bytes [ FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrClientConnectToServer + A 7C93179B 20 Bytes [ B3, 00, 00, 00, AD, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrClientConnectToServer + 1F 7C9317B0 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrClientConnectToServer + 27 7C9317B8 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrClientConnectToServer + 59 7C9317EA 57 Bytes [ 00, 4D, 00, 00, 00, 0E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrClientConnectToServer + 93 7C931824 29 Bytes [ 6C, 62, 5D, CE, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetNtVersionNumbers + 83 7C93193C 175 Bytes [ C5, 56, 1E, FF, CE, 66, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrEnumerateLoadedModules + 5D 7C9319EC 44 Bytes [ EF, DE, D3, FE, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrEnumerateLoadedModules + 8A 7C931A19 18 Bytes [ FF, FF, FF, DA, 8C, 65, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrEnumerateLoadedModules + 9D 7C931A2C 69 Bytes [ D9, C6, BC, F1, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeGenericTable + 39 7C931A72 68 Bytes [ 00, 1F, 00, 00, 00, 00, F1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReadMemoryStream + 40 7C931AB7 36 Bytes [ 00, F0, DA, CC, 5D, F0, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReadMemoryStream + 66 7C931ADD 10 Bytes [ FE, F8, FF, FC, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReadMemoryStream + 71 7C931AE8 13 Bytes [ 52, 49, 45, 4F, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReadMemoryStream + 7F 7C931AF6 17 Bytes [ 00, 00, 00, 00, 00, 00, F1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlReadMemoryStream + 91 7C931B08 6 Bytes [ FD, FC, FD, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrSetDllManifestProber + 6 7C932751 10 Bytes [ 04, 00, 00, 38, BA, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrSetDllManifestProber + 11 7C93275C 29 Bytes [ 50, BA, 00, 80, 8D, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeAtomPackage + 13 7C93277B 40 Bytes [ 00, B0, BA, 00, 80, 91, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateTagHeap + 24 7C9327A4 18 Bytes [ 28, BB, 00, 80, 96, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateTagHeap + 37 7C9327B7 36 Bytes [ 80, 98, 04, 00, 00, 70, BB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetThreadPoolStartFunc + 1B 7C9327DC 2 Bytes [ D0, BB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetThreadPoolStartFunc + 1E 7C9327DF 43 Bytes [ 80, 9D, 04, 00, 00, E8, BB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetThreadPoolStartFunc + 4B 7C93280C 26 Bytes [ 60, BC, 00, 80, A3, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetThreadPoolStartFunc + 66 7C932827 23 Bytes [ 80, A6, 04, 00, 00, C0, BC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetThreadPoolStartFunc + 7E 7C93283F 127 Bytes [ 80, A9, 04, 00, 00, 08, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNormalizeProcessParams + 61 7C9328BF 15 Bytes [ 80, B9, 04, 00, 00, 88, BE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNormalizeProcessParams + 71 7C9328CF 11 Bytes [ 80, BB, 04, 00, 00, B8, BE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNormalizeProcessParams + 7D 7C9328DB 63 Bytes [ 00, D0, BE, 00, 80, BD, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNormalizeProcessParams + BE 7C93291C 7 Bytes [ 90, BF, 00, 80, C5, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNormalizeProcessParams + C6 7C932924 2 Bytes [ A8, BF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlResetRtlTranslations + 14 7C932A37 8 Bytes CALL 6C932A40 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlResetRtlTranslations + 1D 7C932A40 2 Bytes JMP 84932A49 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlResetRtlTranslations + 20 7C932A43 76 Bytes [ 00, 08, C3, 00, 80, EA, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlResetRtlTranslations + 6D 7C932A90 2 Bytes [ F3, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlResetRtlTranslations + 70 7C932A93 115 Bytes [ 00, F8, C3, 00, 80, F4, 04, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitNlsTables + 1E 7C932B8B 112 Bytes [ 00, E0, C6, 00, 80, 13, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitCodePageTable + 5E 7C932BFC 2 Bytes [ 30, C8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitCodePageTable + 61 7C932BFF 11 Bytes [ 80, 21, 05, 00, 00, 48, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitCodePageTable + 6E 7C932C0C 97 Bytes [ 60, C8, 00, 80, 23, 05, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitCodePageTable + D0 7C932C6E 36 Bytes [ 00, 80, 2F, 05, 00, 00, 98, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitCodePageTable + F6 7C932C94 150 Bytes [ F8, C9, 00, 80, 34, 05, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeNormalizeProcessParams + 61 7C933374 15 Bytes [ FF, FF, FF, FF, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeNormalizeProcessParams + 71 7C933384 22 Bytes [ FF, FF, FF, FF, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeNormalizeProcessParams + 88 7C93339B 9 Bytes [ 00, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeNormalizeProcessParams + 92 7C9333A5 16 Bytes [ FF, FF, FF, FF, FF, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeNormalizeProcessParams + A3 7C9333B6 26 Bytes [ 00, 00, 00, FF, 00, 00, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateProcessParameters + 10 7C9333D1 1 Byte [ 7F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateProcessParameters + 12 7C9333D3 35 Bytes [ 00, 0F, 00, 00, 00, 00, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateProcessParameters + 36 7C9333F7 17 Bytes [ 00, 00, 1F, 00, 00, 87, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateProcessParameters + 48 7C933409 8 Bytes [ 0F, 00, 00, 83, C0, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateProcessParameters + 51 7C933412 4 Bytes [ 00, 00, FF, C0 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrShutdownProcess + 19 7C933E08 27 Bytes [ B4, 7E, 5F, 00, 9D, 6E, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrShutdownProcess + 35 7C933E24 3 Bytes [ BC, 9C, 8A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrShutdownProcess + 39 7C933E28 59 Bytes [ BA, 9B, 8A, 00, C0, A6, 97, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrShutdownProcess + 75 7C933E64 39 Bytes [ C2, A9, 9A, 00, A8, 97, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrShutdownProcess + 9D 7C933E8C 19 Bytes [ C2, 9F, 83, 00, C1, B7, AF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyHandleTable + 18 7C933FB4 10 Bytes [ E5, F0, F3, 00, DD, F7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyHandleTable + 23 7C933FBF 60 Bytes [ 00, DD, F6, FE, 00, DC, F5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNumberGenericTableElements + 2C 7C933FFC 7 Bytes [ DB, EC, F2, 00, E1, F1, F7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNumberGenericTableElements + 34 7C934004 78 Bytes JMP 60741809 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNumberGenericTableElements + 83 7C934053 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNumberGenericTableElements + 89 7C934059 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNumberGenericTableElements + 96 7C934066 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteResource + 33 7C9340AC 50 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!toupper + 2F 7C9340E0 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!toupper + 37 7C9340E8 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!toupper + 41 7C9340F2 53 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!toupper + 78 7C934129 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!toupper + AB 7C93415C 50 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeToMultiByteN + 14 7C93456F 59 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeToMultiByteN + 51 7C9345AC 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeToMultiByteN + 77 7C9345D2 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeToMultiByteN + 9E 7C9345F9 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeToMultiByteN + CA 7C934625 58 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNtPathNameToDosPathName + 1D 7C9347B7 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNtPathNameToDosPathName + 28 7C9347C2 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNtPathNameToDosPathName + 31 7C9347CB 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNtPathNameToDosPathName + 3C 7C9347D6 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNtPathNameToDosPathName + 52 7C9347EC 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wcslwr + C 7C934BF5 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wcslwr + 25 7C934C0E 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wcslwr + 2B 7C934C14 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wcslwr + 38 7C934C21 35 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!atol + 11 7C934C45 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!atol + 21 7C934C55 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!atol + 36 7C934C6A 81 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!mbstowcs + 12 7C934CBC 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!mbstowcs + 1D 7C934CC7 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!mbstowcs + 25 7C934CCF 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!mbstowcs + 44 7C934CEE 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!mbstowcs + 52 7C934CFC 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInsertElementGenericTable + 28 7C934DE6 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInsertElementGenericTable + 2D 7C934DEB 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInsertElementGenericTable + 44 7C934E02 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInsertElementGenericTable + 5C 7C934E1A 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInsertElementGenericTable + 60 7C934E1E 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSubtreePredecessor + 1A 7C934FF6 28 Bytes [ 00, 02, 00, 00, 00, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteElementGenericTable + 15 7C935014 47 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteElementGenericTable + 45 7C935044 106 Bytes [ FF, FF, FF, FF, 75, 75, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDelete + 4F 7C9350AF 7 Bytes [ F5, F0, F4, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDelete + 59 7C9350B9 163 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDelete + FE 7C93515E 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDelete + 106 7C935166 42 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDelete + 131 7C935191 15 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConsoleMultiByteToUnicodeN + 2 7C935223 66 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConsoleMultiByteToUnicodeN + 45 7C935266 88 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConsoleMultiByteToUnicodeN + 9E 7C9352BF 32 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConsoleMultiByteToUnicodeN + BF 7C9352E0 57 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConsoleMultiByteToUnicodeN + FB 7C93531C 200 Bytes [ FF, FF, FF, FF, F3, 74, 52, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateHeap + F 7C935539 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateHeap + 19 7C935543 31 Bytes [ FF, FF, FF, FF, F3, 19, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateHeap + 39 7C935563 158 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateHeap + D9 7C935603 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateHeap + E0 7C93560A 79 Bytes [ FF, FF, FF, FF, FF, F5, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindClearBits + 73 7C935C78 94 Bytes [ F3, 53, 75, 53, 53, 53, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindClearBitsAndSet + A 7C935CD7 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindClearBitsAndSet + D 7C935CDA 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindClearBitsAndSet + 14 7C935CE1 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindClearBitsAndSet + 19 7C935CE6 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindClearBitsAndSet + 1C 7C935CE9 3 Bytes [ FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetBits + 2 7C935D02 87 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetBits + 5C 7C935D5C 14 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetBits + 6D 7C935D6D 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetBits + 72 7C935D72 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetBits + 79 7C935D79 30 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyHeap + 2 7C935D98 112 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyHeap + 75 7C935E0B 11 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyHeap + 81 7C935E17 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyHeap + 8B 7C935E21 15 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyHeap + 9B 7C935E31 3 Bytes [ FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlClearBits + 2 7C935F6B 11 Bytes [ F4, BB, BC, F5, F5, F5, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlClearBits + E 7C935F77 37 Bytes [ B4, F5, 52, 31, 53, 59, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlClearBits + 34 7C935F9D 19 Bytes [ 8B, 8B, 8B, F5, 79, 52, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAreBitsSet + 2 7C935FB1 130 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAreBitsSet + 85 7C936034 29 Bytes [ 0B, 0B, 24, 24, 24, 24, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAreBitsSet + A3 7C936052 122 Bytes [ 02, 02, 02, 02, 0C, 02, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeToOemN + 11 7C9360CD 63 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeToOemN + 53 7C93610F 310 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToOemString + 68 7C936246 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToOemString + 7A 7C936258 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToOemString + 81 7C93625F 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToOemString + 97 7C936275 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToOemString + B5 7C936293 215 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlOemToUnicodeN + 3B 7C93636B 46 Bytes [ 31, 31, 25, 25, 25, 25, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlOemToUnicodeN + 6A 7C93639A 26 Bytes [ 0F, 2C, 2C, 2E, 2C, 11, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlOemToUnicodeN + 85 7C9363B5 32 Bytes [ 1C, 1C, 1C, 41, 19, 19, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlOemToUnicodeN + A6 7C9363D6 118 Bytes [ 07, 0A, 0A, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlOemToUnicodeN + 11E 7C93644E 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlOemStringToUnicodeString + 3A 7C936493 254 Bytes [ 07, 0E, 1E, 1E, 1E, 1E, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlOemStringToUnicodeString + 139 7C936592 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlOemStringToUnicodeString + 13B 7C936594 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlOemStringToUnicodeString + 13D 7C936596 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlOemStringToUnicodeString + 13F 7C936598 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!iswctype + 91 7C936772 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!iswctype + 93 7C936774 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!iswctype + 99 7C93677A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!iswctype + 9B 7C93677C 48 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!iswdigit + 28 7C9367AD 62 Bytes [ 89, 89, A0, 2A, 84, B9, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!iswdigit + 67 7C9367EC 155 Bytes [ 01, 01, 69, 33, 1C, 1C, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!iswdigit + 103 7C936888 29 Bytes [ 05, 27, 52, 37, 52, 12, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!iswdigit + 121 7C9368A6 48 Bytes [ 2B, 21, 21, 14, 14, 34, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!iswdigit + 153 7C9368D8 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGUIDFromString + B7 7C936BBE 100 Bytes [ 11, 11, 11, 32, 17, 17, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGUIDFromString + 11C 7C936C23 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGUIDFromString + 122 7C936C29 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGUIDFromString + 136 7C936C3D 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGUIDFromString + 140 7C936C47 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetEnvironmentVariable + 9 7C936EBE 154 Bytes [ 44, 44, 44, 01, 01, 01, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetEnvironmentVariable + A6 7C936F5B 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetEnvironmentVariable + AD 7C936F62 53 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetEnvironmentVariable + E3 7C936F98 262 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetEnvironmentVariable + 1EA 7C93709F 7 Bytes [ 31, 68, C7, C7, C7, C7, C7 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRealSuccessor + 8 7C93712B 10 Bytes [ 0F, 80, 00, 00, 03, C0, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRealSuccessor + 13 7C937136 9 Bytes [ 00, 00, E0, 00, 00, 00, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRealSuccessor + 1D 7C937140 19 Bytes [ E0, 00, 00, 00, E0, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRealSuccessor + 31 7C937154 23 Bytes [ C0, 00, 00, 00, 80, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsGenericTableEmpty + 13 7C93716C 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeHandleTable + 2 7C937185 31 Bytes [ E0, 3F, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeHandleTable + 22 7C9371A5 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeHandleTable + 24 7C9371A7 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeHandleTable + 49 7C9371CC 31 Bytes [ AD, AA, AD, 00, DE, DB, DE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeHandleTable + 69 7C9371EC 19 Bytes [ C6, BA, BD, 00, E7, DB, DE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrCaptureMessageBuffer + 1F 7C937390 74 Bytes [ BD, 86, 7B, 00, BD, 8E, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsncmp + 2B 7C9373DB 52 Bytes [ 00, F7, CB, 9C, 00, CE, B2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeString + 24 7C937410 27 Bytes [ EF, C7, 8C, 00, AD, A6, 9C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeString + 40 7C93742C 11 Bytes [ EF, C3, 7B, 00, FF, B2, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeString + 4C 7C937438 35 Bytes [ FF, B6, 39, 00, FF, BA, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeString + 70 7C93745C 27 Bytes [ FF, C7, 5A, 00, FF, CB, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeString + 8C 7C937478 7 Bytes [ FF, D3, 73, 00, FF, D3, 6B ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueueWorkItem + 132 7C93780A 46 Bytes [ 8F, 1F, 00, 00, 03, 60, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueueWorkItem + 161 7C937839 3 Bytes [ 00, 00, B7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueueWorkItem + 165 7C93783D 8 Bytes [ 00, 00, B9, 00, 00, 00, B4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueueWorkItem + 16E 7C937846 18 Bytes [ 01, 54, 80, 00, 03, 1F, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueueWorkItem + 181 7C937859 4 Bytes [ 00, 00, 00, 20 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDllShutdownInProgress + 7 7C937F17 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSubAuthorityCountSid + D 7C937F2D 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSubAuthorityCountSid + 26 7C937F46 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSubAuthorityCountSid + 32 7C937F52 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSubAuthorityCountSid + 4A 7C937F6A 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSubAuthorityCountSid + 50 7C937F70 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInformationActiveActivationContext + 6 7C938080 2 Bytes [ 00, 33 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInformationActiveActivationContext + 9 7C938083 9 Bytes [ 9F, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInformationActiveActivationContext + 13 7C93808D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInformationActiveActivationContext + 15 7C93808F 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInformationActiveActivationContext + 20 7C93809A 6 Bytes [ 00, 00, CC, 66, 00, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualString + 2 7C9380A1 97 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualString + 64 7C938103 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualString + 66 7C938105 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualString + 6B 7C93810A 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualString + 6D 7C93810C 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetDaclSecurityDescriptor + 77 7C9381B0 22 Bytes [ FF, E5, CB, FF, CC, 66, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetDaclSecurityDescriptor + 8F 7C9381C8 11 Bytes [ 99, 99, 99, FF, 99, 99, 99, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetDaclSecurityDescriptor + 9B 7C9381D4 7 Bytes [ 99, 99, 99, FF, FF, F9, F4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetDaclSecurityDescriptor + A3 7C9381DC 27 Bytes [ FF, F9, F4, FF, 99, 99, 99, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMapGenericMask + 2 7C9381F8 33 Bytes [ 99, 99, 99, FF, FF, EC, DA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMapGenericMask + 24 7C93821A 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMapGenericMask + 2B 7C938221 20 Bytes [ 66, 00, 80, 11, 9D, 22, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMapGenericMask + 41 7C938237 7 Bytes [ 00, 00, 66, 00, 60, 00, 66 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMapGenericMask + 49 7C93823F 18 Bytes [ FF, 00, 00, 00, 00, C5, 97, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAreAllAccessesGranted + E 7C938252 64 Bytes [ EE, FF, FF, F6, EB, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetCriticalSectionSpinCount + 33 7C938293 8 Bytes [ AF, 00, 66, 00, 70, 04, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetCriticalSectionSpinCount + 3C 7C93829C 24 Bytes [ 00, 66, 00, FF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetCriticalSectionSpinCount + 56 7C9382B6 38 Bytes [ FF, FF, FE, FE, FE, FF, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetCriticalSectionSpinCount + 7D 7C9382DD 91 Bytes [ 00, 00, 00, 0F, 9F, D1, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetCriticalSectionSpinCount + D9 7C938339 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLookupAtomInAtomTable + D 7C938443 14 Bytes [ FF, BB, FF, FF, FF, 52, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLookupAtomInAtomTable + 1C 7C938452 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLookupAtomInAtomTable + 2E 7C938464 20 Bytes [ 2E, C2, 6B, FF, 2E, C2, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLookupAtomInAtomTable + 43 7C938479 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLookupAtomInAtomTable + 4A 7C938480 14 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!sprintf + 43 7C939171 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!sprintf + 49 7C939177 361 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindActivationContextSectionGuid + F5 7C9392E1 39 Bytes [ 10, 10, 10, 2B, 2B, 21, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindActivationContextSectionGuid + 11D 7C939309 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindActivationContextSectionGuid + 126 7C939312 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindActivationContextSectionGuid + 138 7C939324 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindActivationContextSectionGuid + 142 7C93932E 40 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsTextUnicode + 6D 7C9394D1 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsTextUnicode + 76 7C9394DA 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsTextUnicode + 93 7C9394F7 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsTextUnicode + 9D 7C939501 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsTextUnicode + AB 7C93950F 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFormatMessage + B 7C93980B 67 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFormatMessage + 4F 7C93984F 348 Bytes [ 00, 00, 00, 00, 00, 00, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFormatMessage + 1AC 7C9399AC 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFormatMessage + 1B0 7C9399B0 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFormatMessage + 1B8 7C9399B8 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtQueryValueKey + 65 7C939C2B 156 Bytes [ 09, 09, 09, 1F, 2D, 1F, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtOpenKey + 41 7C939CC8 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtOpenKey + 43 7C939CCA 12 Bytes [ 50, 41, 28, 00, 00, 00, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtOpenKey + 51 7C939CD8 15 Bytes [ 01, 00, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtOpenKey + 61 7C939CE8 17 Bytes [ C4, 0E, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtOpenKey + 73 7C939CFA 11 Bytes [ 80, 00, 00, 80, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMakeSelfRelativeSD + 4E 7C939DBC 39 Bytes [ C4, 0E, 00, 00, C4, 0E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMakeSelfRelativeSD + 76 7C939DE4 15 Bytes [ 80, 80, 00, 00, 80, 80, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMakeSelfRelativeSD + 86 7C939DF4 146 Bytes [ 00, FF, 00, 00, 00, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessAllowedAceEx + 1F 7C939E87 39 Bytes [ 00, 01, 00, 04, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAdjustPrivilege + 24 7C939EB0 31 Bytes [ 00, 80, 80, 00, 80, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAdjustPrivilege + 45 7C939ED1 178 Bytes [ FF, FF, 00, FF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDowncaseUnicodeString + 4B 7C939F84 103 Bytes [ D0, 7F, FE, FE, FE, 00, DD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDowncaseUnicodeString + B3 7C939FEC 243 Bytes [ 08, 8D, 0D, DD, DD, DD, DD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDowncaseUnicodeString + 1A7 7C93A0E0 38 Bytes [ 07, 02, 01, 00, C3, 0D, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDowncaseUnicodeString + 1CF 7C93A108 35 Bytes [ 09, 0D, 00, 00, 07, 0D, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDowncaseUnicodeString + 1F3 7C93A12C 15 Bytes [ C3, 0D, 00, 1F, 07, 08, 0B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLengthRequiredSid + F 7C93A9DB 3 Bytes [ 05, 07, 0F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLengthRequiredSid + 13 7C93A9DF 54 Bytes [ 00, 00, 00, 00, 00, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIdentifierAuthoritySid + 32 7C93AA16 3 Bytes [ 02, 08, 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIdentifierAuthoritySid + 37 7C93AA1B 14 Bytes [ 00, 00, 02, 35, 00, 0B, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIdentifierAuthoritySid + 47 7C93AA2B 76 Bytes [ 02, 35, 00, 0C, 0D, 01, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIdentifierAuthoritySid + 94 7C93AA78 43 Bytes [ 05, 0D, 00, 02, 06, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImpersonateSelf + 27 7C93AAA4 16 Bytes [ 00, 00, 00, 02, 43, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImpersonateSelf + 3A 7C93AAB7 87 Bytes [ 02, 3D, 1A, 05, 0D, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImpersonateSelf + 92 7C93AB0F 20 Bytes [ 08, 00, 00, 00, 00, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImpersonateSelf + A8 7C93AB25 85 Bytes [ 02, 41, 00, 0E, 0D, 05, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImpersonateSelf + 100 7C93AB7D 35 Bytes [ 00, 00, 02, 43, 00, 05, 0D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcscspn + 3A 7C93AEB8 16 Bytes [ 05, 0D, 00, 02, 0B, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcscspn + 4B 7C93AEC9 16 Bytes [ 02, 6E, 00, 02, 0D, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcscspn + 5D 7C93AEDB 37 Bytes [ 02, 7E, 00, 02, 07, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcscspn + 84 7C93AF02 33 Bytes [ 00, 00, 00, 02, 76, 00, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcscspn + A7 7C93AF25 44 Bytes [ 00, 00, 02, 76, 00, 06, 0D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeToSecondsSince1980 + 67 7C93B1FA 46 Bytes [ 36, 9C, 9C, 0A, 0A, 0A, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeToSecondsSince1980 + 96 7C93B229 123 Bytes [ 0B, 0B, 0B, 0B, CE, A4, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!VerSetConditionMask + 6 7C93B2A5 50 Bytes [ 00, 00, 00, 80, 00, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!VerSetConditionMask + 39 7C93B2D8 44 Bytes [ 20, 77, 00, 00, 04, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlVerifyVersionInfo + 28 7C93B305 172 Bytes [ 05, 74, FF, 47, 74, 0C, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlVerifyVersionInfo + D5 7C93B3B2 24 Bytes [ 00, 01, 28, 00, 00, 00, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlVerifyVersionInfo + EE 7C93B3CB 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlVerifyVersionInfo + 115 7C93B3F2 20 Bytes [ 80, 00, 80, 80, 00, 00, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlVerifyVersionInfo + 12B 7C93B408 6 Bytes [ 00, FF, FF, 00, FF, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteAtomFromAtomTable + 6D 7C93B54A 212 Bytes [ 01, 47, 10, 77, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteAtomFromAtomTable + 143 7C93B620 11 Bytes [ C0, C0, C0, 00, 80, 80, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteAtomFromAtomTable + 14F 7C93B62C 5 Bytes [ 00, FF, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteAtomFromAtomTable + 155 7C93B632 8 Bytes [ FF, 00, FF, 00, 00, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteAtomFromAtomTable + 15E 7C93B63B 17 Bytes [ 00, FF, FF, 00, 00, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCharToInteger + 4 7C93B685 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCharToInteger + 1A 7C93B69B 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCharToInteger + 3A 7C93B6BB 11 Bytes [ 00, 8F, F0, 0F, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCharToInteger + 46 7C93B6C7 77 Bytes [ F0, FF, 00, 00, 00, 8F, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCharToInteger + 94 7C93B715 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAtomToAtomTable + E7 7C93BEE9 6 Bytes [ FA, 11, FF, 11, F1, 1F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAtomToAtomTable + EE 7C93BEF0 159 Bytes [ A1, 1F, F1, 1F, 11, DF, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAtomToAtomTable + 18E 7C93BF90 113 Bytes [ DA, 1D, FF, FD, 1A, FF, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateAtomTable + 10 7C93C002 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateAtomTable + 1F 7C93C011 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateAtomTable + 40 7C93C032 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateAtomTable + 6B 7C93C05D 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateAtomTable + 70 7C93C062 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryAtomInAtomTable + 37 7C93C0CC 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryAtomInAtomTable + 3B 7C93C0D0 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryAtomInAtomTable + 41 7C93C0D6 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryAtomInAtomTable + 48 7C93C0DD 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryAtomInAtomTable + 4D 7C93C0E2 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompactHeap + 1F 7C93C4C0 7 Bytes [ 42, B2, DE, 00, 52, C7, F7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompactHeap + 27 7C93C4C8 15 Bytes [ 52, BE, E7, 00, 63, D3, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompactHeap + 37 7C93C4D8 10 Bytes [ 73, C7, E7, 00, 8C, D3, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompactHeap + 42 7C93C4E3 20 Bytes [ 00, BD, E7, F7, 00, D6, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompactHeap + 57 7C93C4F8 15 Bytes [ 4A, C3, F7, 00, 4A, BE, EF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeToOemN + 14 7C93CAA9 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeToOemN + 2A 7C93CABF 39 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeToOemN + 53 7C93CAE8 177 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeToOemN + 106 7C93CB9B 92 Bytes [ 00, 00, 00, 00, 00, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeToOemN + 163 7C93CBF8 54 Bytes [ 1B, 9C, C7, 00, 18, 79, 9C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeStringToOemString + C 7C93CDC5 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeStringToOemString + 16 7C93CDCF 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeStringToOemString + 22 7C93CDDB 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeStringToOemString + 28 7C93CDE1 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeStringToOemString + 2C 7C93CDE5 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlClearAllBits + 2C 7C93CEE7 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetAllBits + 22 7C93CF0E 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetAllBits + 33 7C93CF1F 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetAllBits + 49 7C93CF35 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetAllBits + 5F 7C93CF4B 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetAllBits + 75 7C93CF61 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopySecurityDescriptor + 49 7C93D11D 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopySecurityDescriptor + 57 7C93D12B 23 Bytes JMP 4B92D1B3 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopySecurityDescriptor + 6F 7C93D143 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopySecurityDescriptor + 83 7C93D157 54 Bytes [ 00, C9, 94, 96, 41, C8, 9F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetSecurityObject + 2 7C93D18E 23 Bytes [ D3, FF, FD, FC, D0, FF, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetSecurityObject + 1A 7C93D1A6 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetSecurityObject + 1F 7C93D1AB 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetSecurityObject + 23 7C93D1AF 14 Bytes [ 00, 00, 00, 00, 00, BA, 94, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetSecurityObject + 32 7C93D1BE 46 Bytes [ AE, FF, F6, EA, C8, FF, FE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeToSecondsSince1970 + 11 7C93D660 14 Bytes [ 00, 33, FF, FF, 4B, 48, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeToSecondsSince1970 + 20 7C93D66F 43 Bytes [ FF, 00, 33, FF, CF, 00, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeToSecondsSince1970 + 4C 7C93D69B 7 Bytes [ FF, C5, FD, FF, FF, B4, FD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeToSecondsSince1970 + 54 7C93D6A3 20 Bytes [ FF, A9, FE, FF, FF, 99, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeToSecondsSince1970 + 69 7C93D6B8 26 Bytes [ 00, 83, D7, DF, 00, 67, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteTimer + 9 7C93D710 76 Bytes [ FF, FF, FE, FF, FF, FF, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteTimer + 56 7C93D75D 3 Bytes [ 99, 00, 40 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteTimer + 5A 7C93D761 1 Byte [ 99 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteTimer + 5C 7C93D763 15 Bytes [ 60, 00, 99, 00, 80, 00, 99, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteTimer + 6C 7C93D773 5 Bytes [ FF, 00, 99, 00, DF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeregisterWaitEx + 1E 7C93D999 38 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeregisterWaitEx + 46 7C93D9C1 32 Bytes [ F6, EC, FF, FF, F3, E6, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeregisterWaitEx + 67 7C93D9E2 40 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeregisterWaitEx + 90 7C93DA0B 48 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeregisterWaitEx + C1 7C93DA3C 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeregisterWait + 2 7C93DCA5 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeregisterWait + 8 7C93DCAB 43 Bytes [ FF, FF, FF, FF, FF, 48, CA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeregisterWait + 34 7C93DCD7 1 Byte [ 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeregisterWait + 36 7C93DCD9 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeregisterWait + 3C 7C93DCDF 46 Bytes [ 00, 00, B1, 00, 10, 00, B0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateTimer + E 7C93DFBA 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateTimer + 14 7C93DFC0 10 Bytes [ 99, 33, 00, 60, AC, 46, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateTimer + 1F 7C93DFCB 16 Bytes [ FF, CC, 66, 00, FF, A0, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateTimer + 31 7C93DFDD 25 Bytes [ 00, 00, 00, 99, 33, 00, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateTimer + 4B 7C93DFF7 12 Bytes [ 20, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInformationAcl + 11 7C93E132 11 Bytes [ 00, 00, 00, 7F, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInformationAcl + 1D 7C93E13E 6 Bytes [ 00, 00, 04, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInformationAcl + 24 7C93E145 64 Bytes [ 00, 01, 00, 07, 04, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInformationAcl + 65 7C93E186 3 Bytes [ 00, 00, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryInformationAcl + 69 7C93E18A 24 Bytes [ 00, 00, 00, 00, 01, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetSaclSecurityDescriptor + 11 7C93E1A3 15 Bytes [ 00, 00, 00, 01, 00, 07, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetSaclSecurityDescriptor + 21 7C93E1B3 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetSaclSecurityDescriptor + 26 7C93E1B8 65 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetSaclSecurityDescriptor + 6A 7C93E1FC 44 Bytes [ 00, 00, 00, 00, 04, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSelfRelativeToAbsoluteSD + 15 7C93E229 58 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSelfRelativeToAbsoluteSD + 52 7C93E266 9 Bytes [ 01, 00, 07, 04, 00, 00, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSelfRelativeToAbsoluteSD + 5D 7C93E271 70 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSelfRelativeToAbsoluteSD + A5 7C93E2B9 58 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSelfRelativeToAbsoluteSD + E0 7C93E2F4 30 Bytes [ 00, 00, 01, 00, 07, 04, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopyString + 17 7C93E69E 15 Bytes [ 01, 00, 07, 04, 00, 00, A0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopyString + 27 7C93E6AE 21 Bytes [ 00, 00, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopyString + 3D 7C93E6C4 6 Bytes [ 00, 00, 00, 00, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopyString + 44 7C93E6CB 15 Bytes [ 00, 00, 00, 01, 00, 07, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopyString + 55 7C93E6DC 11 Bytes [ 00, 00, 00, 00, 04, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidRelativeSecurityDescriptor + F 7C93E7CE 12 Bytes [ 00, 00, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidRelativeSecurityDescriptor + 1C 7C93E7DB 12 Bytes [ 00, 70, 83, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidRelativeSecurityDescriptor + 29 7C93E7E8 10 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidRelativeSecurityDescriptor + 35 7C93E7F4 13 Bytes [ 80, 83, 01, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidRelativeSecurityDescriptor + 44 7C93E803 7 Bytes [ 00, 00, 00, 01, 00, 07, 04 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateTimerQueue + D 7C93EC05 5 Bytes [ 00, 00, 00, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateTimerQueue + 13 7C93EC0B 16 Bytes [ 00, 00, 00, 01, 00, 07, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateTimerQueue + 26 7C93EC1E 12 Bytes [ 00, 00, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateTimerQueue + 34 7C93EC2C 17 Bytes [ 50, 86, 01, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateTimerQueue + 46 7C93EC3E 1 Byte [ 01 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessDeniedAce + 7 7C93ECE7 22 Bytes [ 00, 07, 04, 00, 00, D0, 86, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessDeniedAce + 1E 7C93ECFE 29 Bytes [ 01, 00, 07, 04, 00, 00, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessDeniedAce + 3C 7C93ED1C 4 Bytes [ F0, 86, 01, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessDeniedAce + 42 7C93ED22 18 Bytes [ 00, 00, 00, 00, 00, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessDeniedAce + 55 7C93ED35 13 Bytes [ 87, 01, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlPrefixString + 1F 7C93ED68 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlPrefixString + 23 7C93ED6C 6 Bytes [ 00, 00, 00, 00, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlPrefixString + 2A 7C93ED73 32 Bytes [ 00, 00, 00, 01, 00, 07, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlPrefixString + 4B 7C93ED94 11 Bytes [ 40, 87, 01, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlPrefixString + 57 7C93EDA0 26 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_itow + 16 7C93EDBB 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_itow + 18 7C93EDBD 10 Bytes [ 00, 01, 00, 07, 04, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_itow + 23 7C93EDC8 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_itow + 36 7C93EDDB 5 Bytes [ 00, 70, 87, 01, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_itow + 3C 7C93EDE1 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetIoCompletionCallback + F 7C93EE9C 5 Bytes [ F0, 87, 01, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetIoCompletionCallback + 15 7C93EEA2 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetIoCompletionCallback + 1B 7C93EEA8 29 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetIoCompletionCallback + 39 7C93EEC6 43 Bytes [ 01, 00, 07, 04, 00, 00, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetIoCompletionCallback + 65 7C93EEF2 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRunEncodeUnicodeString + E 7C93EF4B 6 Bytes [ 00, 00, 00, 00, 00, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRunEncodeUnicodeString + 15 7C93EF52 51 Bytes [ 00, 00, 00, 00, 01, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRunEncodeUnicodeString + 49 7C93EF86 48 Bytes [ 01, 00, 07, 04, 00, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRunDecodeUnicodeString + 2C 7C93EFB7 15 Bytes [ 00, 07, 04, 00, 00, B0, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRunDecodeUnicodeString + 3C 7C93EFC7 64 Bytes [ 00, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRunDecodeUnicodeString + 7D 7C93F008 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRunDecodeUnicodeString + 82 7C93F00D 5 Bytes [ 00, 00, 00, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRunDecodeUnicodeString + 8A 7C93F015 5 Bytes [ 00, 01, 00, 07, 04 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4AddressToStringExW + 32 7C93F15A 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4AddressToStringExW + 37 7C93F15F 52 Bytes [ 00, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4AddressToStringExW + 6C 7C93F194 3 Bytes [ 00, 00, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4AddressToStringExW + 70 7C93F198 35 Bytes [ 07, 04, 00, 00, F0, 89, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4AddressToStringW + 1C 7C93F1BC 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4AddressToStringW + 20 7C93F1C0 1 Byte [ 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4AddressToStringW + 22 7C93F1C2 25 Bytes [ 00, 00, 00, 00, 01, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4AddressToStringW + 3C 7C93F1DC 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4AddressToStringW + 3E 7C93F1DE 1 Byte [ 01 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNewSecurityObject + 21 7C93F21E 3 Bytes [ 00, 00, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNewSecurityObject + 25 7C93F222 17 Bytes [ 00, 00, 00, 00, 01, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNewSecurityObject + 38 7C93F235 26 Bytes [ 00, 00, 00, 04, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_itoa + 16 7C93F250 1 Byte [ 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_itoa + 18 7C93F252 8 Bytes [ 00, 00, 00, 00, 01, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_itoa + 22 7C93F25C 19 Bytes [ 70, 8A, 01, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_itoa + 36 7C93F270 35 Bytes [ 07, 04, 00, 00, 80, 8A, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_itoa + 5A 7C93F294 19 Bytes [ 00, 00, 00, 00, 04, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetProcessIsCritical + 19 7C93F45B 16 Bytes [ 00, 00, 00, 00, 00, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetProcessIsCritical + 2A 7C93F46C 64 Bytes [ D0, 8B, 01, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetThreadIsCritical + 18 7C93F4AE 17 Bytes [ 01, 00, 07, 04, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetThreadIsCritical + 2A 7C93F4C0 17 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetThreadIsCritical + 3C 7C93F4D2 18 Bytes [ 00, 00, 00, 00, 00, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetThreadIsCritical + 4F 7C93F4E5 8 Bytes [ 8C, 01, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetThreadIsCritical + 58 7C93F4EE 22 Bytes [ 00, 00, 04, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFlushAlternateResourceModules + 21 7C93F5EE 3 Bytes [ 01, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFlushAlternateResourceModules + 25 7C93F5F2 28 Bytes [ 00, 00, 00, 00, 00, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFlushAlternateResourceModules + 43 7C93F610 20 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFlushAlternateResourceModules + 5B 7C93F628 23 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFlushAlternateResourceModules + 73 7C93F640 4 Bytes [ 04, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlApplyRXactNoFlush + D 7C93F67C 7 Bytes [ 30, 8D, 01, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlApplyRXactNoFlush + 15 7C93F684 5 Bytes [ 00, 00, 00, 00, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlApplyRXactNoFlush + 1B 7C93F68A 28 Bytes [ 00, 00, 00, 00, 01, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlApplyRXactNoFlush + 39 7C93F6A8 16 Bytes [ 07, 04, 00, 00, 50, 8D, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEraseUnicodeString + C 7C93F6B9 42 Bytes [ 00, 00, 00, 00, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEraseUnicodeString + 37 7C93F6E4 22 Bytes [ 00, 00, 00, 00, 04, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateUserSecurityObject + D 7C93F6FD 24 Bytes [ 00, 00, 00, 04, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateUserSecurityObject + 28 7C93F718 40 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateUserSecurityObject + 51 7C93F741 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateUserSecurityObject + 73 7C93F763 44 Bytes [ 00, 00, 00, 01, 00, 07, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateAndSetSD + 28 7C93F790 1 Byte [ 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateAndSetSD + 2A 7C93F792 40 Bytes [ 00, 00, 00, 00, 01, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateAndSetSD + 54 7C93F7BC 54 Bytes [ 00, 00, 00, 00, 04, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateAndSetSD + 8B 7C93F7F3 7 Bytes [ 00, 00, 00, 01, 00, 07, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateAndSetSD + 94 7C93F7FC 59 Bytes [ 30, 8E, 01, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetLengthWithoutTrailingPathSeperators + 1F 7C93FBAE 11 Bytes [ 00, 00, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetLengthWithoutTrailingPathSeperators + 2B 7C93FBBA 39 Bytes [ 00, 00, B0, 90, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetLengthWithoutTrailingPathSeperators + 54 7C93FBE3 27 Bytes [ 00, 00, 00, 01, 00, 07, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetLengthWithoutTrailingPathSeperators + 70 7C93FBFF 7 Bytes [ 00, 07, 04, 00, 00, E0, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetLengthWithoutTrailingPathSeperators + 78 7C93FC07 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryRegistryValues + 1D 7C93FC9E 9 Bytes [ 00, 00, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryRegistryValues + 27 7C93FCA8 7 Bytes [ 07, 04, 00, 00, 50, 91, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryRegistryValues + 31 7C93FCB2 8 Bytes [ 00, 00, 00, 00, 00, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryRegistryValues + 3B 7C93FCBC 22 Bytes [ 00, 00, 01, 00, 07, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryRegistryValues + 52 7C93FCD3 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCheckRegistryKey + C 7C940340 107 Bytes [ FF, D9, B4, FF, 9E, 65, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetControlSecurityDescriptor + 4B 7C9403AC 33 Bytes [ F4, EF, BC, FF, D4, BA, A3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetControlSecurityDescriptor + 6E 7C9403CF 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetControlSecurityDescriptor + 80 7C9403E1 110 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_vsnprintf + 39 7C940450 10 Bytes [ BB, 82, 69, FF, E3, D1, C5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_vsnprintf + 44 7C94045B 72 Bytes [ FF, FF, BD, 81, FF, FF, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_vsnprintf + 8D 7C9404A4 11 Bytes [ 6B, E3, FF, FF, 6B, E3, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_vsnprintf + 99 7C9404B0 3 Bytes [ C1, 88, 6B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_vsnprintf + 9D 7C9404B4 20 Bytes JMP 7493D192 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeRXact + 2 7C940B28 43 Bytes [ FF, BD, 81, FF, FF, BD, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeRXact + 30 7C940B56 20 Bytes [ 00, 00, 00, 81, BD, BF, AA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeRXact + 46 7C940B6C 11 Bytes [ 7A, F7, FF, FF, D7, 9C, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeRXact + 52 7C940B78 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeRXact + 58 7C940B7E 3 Bytes [ FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAuditAccessAce + 13 7C940D1C 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAuditAccessAce + 1A 7C940D23 113 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + 31 7C940D96 83 Bytes [ 00, 00, 00, 81, BD, BF, B2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + 86 7C940DEB 28 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + A3 7C940E08 40 Bytes [ 00, 00, 00, 00, 1B, 41, DA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + CC 7C940E31 22 Bytes [ 00, 00, 00, BD, 4B, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + E3 7C940E48 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeGenericTableAvl + 31 7C940E9E 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCheckProcessParameters + F 7C940EB2 93 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCheckProcessParameters + 6E 7C940F11 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCheckProcessParameters + 76 7C940F19 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCheckProcessParameters + 7D 7C940F20 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCheckProcessParameters + 84 7C940F27 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLockBootStatusData + 17 7C940FD4 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLockBootStatusData + 1A 7C940FD7 8 Bytes [ 00, 00, 81, BD, BF, BC, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLockBootStatusData + 23 7C940FE0 11 Bytes [ 81, FF, FF, FF, 81, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLockBootStatusData + 2F 7C940FEC 11 Bytes [ 81, FF, FF, FF, E5, A5, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLockBootStatusData + 3B 7C940FF8 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetSetBootStatusData + 105 7C941220 51 Bytes [ 74, 65, 72, 2C, 48, 65, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetSetBootStatusData + 139 7C941254 416 Bytes [ 52, 25, 5C, 48, 69, 64, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateUserProcess + 170 7C9413F5 83 Bytes [ 68, 65, 6C, 6C, 5C, 4F, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateUserProcess + 1C4 7C941449 51 Bytes [ 49, 44, 5C, 25, 43, 4C, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateUserProcess + 1F8 7C94147D 448 Bytes [ 58, 53, 5A, 25, 2C, 22, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateUserProcess + 3B9 7C94163E 13 Bytes [ 6B, 62, 61, 72, 4F, 70, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateUserProcess + 3C7 7C94164C 668 Bytes [ 68, 65, 6C, 6C, 5C, 4F, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImageRvaToVa + 8F 7C9418E9 1041 Bytes [ 43, 5F, 41, 75, 74, 6F, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImageRvaToVa + 4A1 7C941CFB 773 Bytes [ 74, 6F, 43, 4D, 53, 65, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImageRvaToVa + 7A7 7C942001 26 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImageRvaToVa + 7C2 7C94201C 11 Bytes [ 00, 00, 00, 00, 00, 09, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlImageRvaToVa + 7CF 7C942029 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRandomEx + 95 7C942A9C 88 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRandomEx + EE 7C942AF5 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRandomEx + F9 7C942B00 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRandomEx + FF 7C942B06 33 Bytes [ 00, 00, 00, 00, 00, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRandomEx + 122 7C942B29 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetHeapInformation + 9 7C942C4F 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetHeapInformation + F 7C942C55 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetHeapInformation + 19 7C942C5F 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetHeapInformation + 29 7C942C6F 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetHeapInformation + 2D 7C942C73 2 Bytes [ 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAttributeActionToRXact + 2 7C942E2E 93 Bytes [ FF, 00, 00, 00, 00, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAttributeActionToRXact + 60 7C942E8C 88 Bytes [ FF, FF, FF, FF, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAttributeActionToRXact + B9 7C942EE5 113 Bytes [ 80, 00, 00, 00, 80, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAttributeActionToRXact + 12B 7C942F57 96 Bytes [ F0, 00, 00, 00, 00, 08, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAttributeActionToRXact + 18D 7C942FB9 6 Bytes [ 00, 77, 77, 80, 00, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlApplyRXact + 67 7C94306E 51 Bytes [ 41, 75, 74, 6F, 43, 4D, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddActionToRXact + 17 7C9430A2 470 Bytes [ 78, 74, 72, 61, 63, 74, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRemoveVectoredExceptionHandler + 22 7C943279 420 Bytes [ 22, 2C, 2C, 22, 40, 73, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteAce + 8E 7C94341E 429 Bytes [ 68, 64, 6F, 63, 76, 77, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteAce + 23C 7C9435CC 25 Bytes [ 6F, 43, 4D, 4F, 45, 4D, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteAce + 256 7C9435E6 19 Bytes [ 4C, 53, 49, 44, 5C, 25, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteAce + 26A 7C9435FA 129 Bytes [ 4D, 43, 6F, 6D, 6D, 61, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteAce + 2EC 7C94367C 553 Bytes [ 45, 41, 25, 22, 2C, 22, 25, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDnsHostNameToComputerName + 17 7C943C8E 363 Bytes [ 25, 5F, 53, 59, 53, 5F, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteRegistryValue + 5A 7C943DFA 196 Bytes [ 49, 44, 5C, 25, 43, 4C, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteRegistryValue + 11F 7C943EBF 85 Bytes [ 45, 4C, 43, 41, 54, 45, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteRegistryValue + 175 7C943F15 84 Bytes [ 4C, 43, 41, 54, 45, 47, 4F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateUserThread + 28 7C943F6A 140 Bytes [ 4C, 43, 41, 54, 45, 47, 4F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateUserThread + B5 7C943FF7 27 Bytes [ 61, 6E, 65, 6C, 5C, 45, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateUserThread + D1 7C944013 20 Bytes [ 00, A8, 8C, 8C, 00, C2, A3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateUserThread + E6 7C944028 103 Bytes [ D6, BB, BB, 00, E0, C4, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeContext + F 7C944090 3 Bytes [ D4, 9F, 94 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeContext + 13 7C944094 7 Bytes [ B5, 59, 3C, 00, C7, 61, 43 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeContext + 1B 7C94409C 19 Bytes [ B8, 62, 46, 00, A8, 3E, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeContext + 2F 7C9440B0 11 Bytes [ D0, 8D, 6E, 00, AE, 76, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeContext + 3B 7C9440BC 3 Bytes [ 9D, 37, 02 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNewSecurityObjectEx + 38 7C944D4D 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNewSecurityObjectEx + 42 7C944D57 52 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNewSecurityObjectEx + 77 7C944D8C 3 Bytes [ D9, CC, CC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNewSecurityObjectEx + 7B 7C944D90 78 Bytes [ D8, CA, CA, FF, D7, C7, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNewSecurityObjectEx + CC 7C944DE1 2 Bytes [ 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualPrefixSid + 4D 7C9455D6 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualPrefixSid + 52 7C9455DB 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualPrefixSid + 70 7C9455F9 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualPrefixSid + 7A 7C945603 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEqualPrefixSid + 80 7C945609 39 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcstoul + 8 7C945958 11 Bytes [ 6F, 64, 64, FF, 84, 7F, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcstoul + 14 7C945964 11 Bytes [ C1, A6, A6, FF, C8, A7, A7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcstoul + 20 7C945970 24 Bytes [ DD, C4, C4, FF, DF, B7, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcstoul + 39 7C945989 58 Bytes [ 10, 10, C8, 00, 00, 00, AA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcstoul + 75 7C9459C5 91 Bytes [ 00, 00, 03, 00, 00, 00, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRegisterWait + 2F 7C945A22 29 Bytes [ 00, FF, 45, 45, 45, FF, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRegisterWait + 4D 7C945A40 26 Bytes [ EA, BE, BE, FF, BF, 9E, 9E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRegisterWait + 68 7C945A5B 17 Bytes [ 9A, 00, 00, 00, 6E, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRegisterWait + 7B 7C945A6E 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRegisterWait + 85 7C945A78 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wtol + 2 7C94605B 22 Bytes [ 98, 50, 4F, 4A, 50, 50, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wtol + 1A 7C946073 31 Bytes [ FF, FF, FF, FF, 1A, 93, 9A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wtol + 3B 7C946094 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wtol + 3E 7C946097 76 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wtol + 8B 7C9460E4 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCutoverTimeToSystemTime + 18 7C946540 161 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCutoverTimeToSystemTime + BA 7C9465E2 81 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCutoverTimeToSystemTime + 10C 7C946634 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCutoverTimeToSystemTime + 110 7C946638 35 Bytes [ FF, FF, FF, FF, FF, FF, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCutoverTimeToSystemTime + 134 7C94665C 40 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtEnumerateSubKey + 2 7C946A0B 66 Bytes [ F1, 99, 74, 58, 52, 79, 99, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtEnumerateSubKey + 45 7C946A4E 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtEnumerateSubKey + 48 7C946A51 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtEnumerateSubKey + 4F 7C946A58 27 Bytes [ 93, 2B, 4B, 31, 52, 59, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtEnumerateSubKey + 6C 7C946A75 63 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUniform + F 7C946B37 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUniform + 14 7C946B3C 26 Bytes [ DD, B4, DB, DC, D5, DC, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindMessage + 2 7C946B57 44 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindMessage + 2F 7C946B84 70 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindMessage + 76 7C946BCB 47 Bytes [ BC, F1, 1A, F4, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindMessage + A6 7C946BFB 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindMessage + AF 7C946C04 33 Bytes [ FF, FF, B4, DB, DB, D6, DB, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAreAnyAccessesGranted + 17 7C946D44 30 Bytes [ FF, FF, FF, FF, 75, 53, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAreAnyAccessesGranted + 36 7C946D63 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAreAnyAccessesGranted + 3D 7C946D6A 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAreAnyAccessesGranted + 42 7C946D6F 78 Bytes [ FF, 1A, 4D, 53, 53, 53, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAreAnyAccessesGranted + 92 7C946DBF 32 Bytes [ FF, FF, 75, 53, 53, 75, 53, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!__isascii + 2 7C9472B7 8 Bytes [ 00, 34, 91, F4, 00, 32, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!__isascii + B 7C9472C0 15 Bytes JMP 63149DC5 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!__isascii + 1B 7C9472D0 23 Bytes [ 45, 7D, C6, 00, A0, B9, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!__isascii + 33 7C9472E8 7 Bytes [ 61, 76, 98, 00, 2C, 52, 92 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!__isascii + 3B 7C9472F0 7 Bytes [ 1B, 50, B6, 00, D9, DF, EC ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4StringToAddressA + 1A 7C94737E 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4StringToAddressA + 24 7C947388 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4StringToAddressA + 2A 7C94738E 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4StringToAddressA + 2E 7C947392 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4StringToAddressA + 34 7C947398 97 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateEnvironment + 21 7C94749D 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateEnvironment + 25 7C9474A1 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateEnvironment + 28 7C9474A4 35 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateEnvironment + 4C 7C9474C8 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateEnvironment + 54 7C9474D0 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertSharedToExclusive + C 7C9474F1 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertSharedToExclusive + 22 7C947507 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertSharedToExclusive + 2C 7C947511 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertSharedToExclusive + 3D 7C947522 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertExclusiveToShared + 1C 7C947543 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertExclusiveToShared + 24 7C94754B 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertExclusiveToShared + 2B 7C947552 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertExclusiveToShared + 36 7C94755D 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertExclusiveToShared + 4A 7C947571 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlStartRXact + D 7C947593 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlStartRXact + 13 7C947599 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlStartRXact + 19 7C94759F 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlStartRXact + 1E 7C9475A4 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlStartRXact + 21 7C9475A7 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAbortRXact + D 7C9475E6 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAbortRXact + 13 7C9475EC 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAbortRXact + 19 7C9475F2 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAbortRXact + 21 7C9475FA 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAbortRXact + 3B 7C947614 415 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrAddRefDll + 19C 7C9477B5 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrAddRefDll + 1A3 7C9477BC 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrAddRefDll + 1BC 7C9477D5 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrAddRefDll + 1C9 7C9477E2 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrAddRefDll + 1E0 7C9477F9 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnwind + B 7C947A4B 54 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnwind + 43 7C947A83 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnwind + 65 7C947AA5 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnwind + 79 7C947AB9 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnwind + 7B 7C947ABB 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLengthSecurityDescriptor + 1B 7C947C43 58 Bytes [ 00, 3A, 33, 33, EA, 47, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLengthSecurityDescriptor + 58 7C947C80 66 Bytes [ 00, 00, 00, 06, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLengthSecurityDescriptor + 9B 7C947CC3 1 Byte [ 47 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLengthSecurityDescriptor + 9D 7C947CC5 20 Bytes [ 00, 00, 19, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLengthSecurityDescriptor + B4 7C947CDC 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetControlSecurityDescriptor + 19 7C947D03 10 Bytes [ 00, 36, 33, 33, EA, 3C, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetControlSecurityDescriptor + 24 7C947D0E 30 Bytes [ 33, FF, 3D, 33, 33, FF, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteSecurityObject + 15 7C947D2D 13 Bytes [ 00, 00, 4E, 00, 00, 00, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteSecurityObject + 23 7C947D3B 32 Bytes [ 5D, 00, 00, 00, 6B, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteSecurityObject + 44 7C947D5C 15 Bytes [ 27, 76, DC, FF, 28, 77, DD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteSecurityObject + 54 7C947D6C 70 Bytes [ 36, A1, FF, FF, 2F, 90, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetOwnerSecurityDescriptor + 11 7C947DB3 131 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetGroupSecurityDescriptor + 54 7C947E38 103 Bytes [ 33, 99, FF, FF, 30, 8F, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetGroupSecurityDescriptor + BC 7C947EA0 67 Bytes [ ED, EA, E7, FF, 96, A2, B1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetGroupSecurityDescriptor + 100 7C947EE4 18 Bytes [ 0F, 44, AB, FF, 1A, 5E, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetGroupSecurityDescriptor + 114 7C947EF8 6 Bytes [ 55, AA, FF, FF, 55, AD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetGroupSecurityDescriptor + 11B 7C947EFF 140 Bytes [ FF, 56, AF, FF, FF, 50, A2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeOemString + 24 7C947F8C 55 Bytes [ 1C, 5D, C5, FF, 1A, 57, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeOemString + 5C 7C947FC4 43 Bytes [ 7F, C2, FF, FF, 83, CB, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeOemString + 88 7C947FF0 39 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeOemString + B0 7C948018 7 Bytes [ 7E, 7E, 7E, FF, E4, E4, E4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeOemString + B8 7C948020 98 Bytes [ F4, F2, F0, FF, AA, B4, BC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAce + 5E 7C948083 115 Bytes CALL 522D8087 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAce + D2 7C9480F7 19 Bytes [ FF, 8C, D0, FF, FF, 8D, D2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAce + E6 7C94810B 41 Bytes [ FF, 8D, D4, FF, FF, 8F, D5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAce + 110 7C948135 26 Bytes [ 00, 0F, 28, 29, 43, 86, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAce + 12B 7C948150 11 Bytes [ 9B, DC, FF, FF, 9B, D9, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpdateTimer + 4 7C9483D1 24 Bytes [ 8B, 8B, FF, 8D, 8D, 8D, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpdateTimer + 1D 7C9483EA 31 Bytes [ 01, 50, 2B, 30, 72, 36, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpdateTimer + 3D 7C94840A 21 Bytes [ 5A, 6A, 34, 32, 5F, 3E, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpdateTimer + 53 7C948420 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpdateTimer + 65 7C948432 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlPcToFileHeader + 4 7C948550 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlPcToFileHeader + 2A 7C948576 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlPcToFileHeader + 31 7C94857D 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlPcToFileHeader + 37 7C948583 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlPcToFileHeader + 4F 7C94859B 90 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInterlockedPushEntrySList + 14 7C9486B6 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInterlockedPushEntrySList + 2B 7C9486CD 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInterlockedPopEntrySList + 10 7C9486F4 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInterlockedPopEntrySList + 14 7C9486F8 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInterlockedPopEntrySList + 28 7C94870C 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInterlockedPopEntrySList + 4F 7C948733 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInterlockedPopEntrySList + 53 7C948737 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryDepthSList + 4A 7C94879A 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryDepthSList + 6F 7C9487BF 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryDepthSList + 76 7C9487C6 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryDepthSList + 7F 7C9487CF 28 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryDepthSList + 9D 7C9487ED 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSystemTimeToLocalTime + A 7C948A9D 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSystemTimeToLocalTime + 14 7C948AA7 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSystemTimeToLocalTime + 37 7C948ACA 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4StringToAddressW + 15 7C948AE4 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4StringToAddressW + 1D 7C948AEC 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4StringToAddressW + 24 7C948AF3 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4StringToAddressW + 2A 7C948AF9 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4StringToAddressW + 2E 7C948AFD 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidSecurityDescriptor + 10 7C948CA5 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidSecurityDescriptor + 1E 7C948CB3 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidSecurityDescriptor + 21 7C948CB6 161 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidSecurityDescriptor + C3 7C948D58 104 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetAce + 59 7C948DC2 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetAce + 60 7C948DC9 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetAce + 64 7C948DCD 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetAce + 69 7C948DD2 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetAce + 74 7C948DDD 53 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcstol + 7 7C948EDA 44 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcstol + 35 7C948F08 57 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcstol + 71 7C948F44 162 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcscmp + 81 7C948FE8 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcscmp + 83 7C948FEA 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcscmp + 8F 7C948FF6 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcscmp + 92 7C948FF9 44 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeSListHead + 16 7C949026 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeSListHead + 1A 7C94902A 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeSListHead + 1E 7C94902E 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeSListHead + 4A 7C94905A 66 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeSListHead + 8F 7C94909F 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrIdentifyAlertableThread + 35 7C960577 30 Bytes [ 2A, B6, F7, 26, 9A, DA, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrSetPriorityClass + 1A 7C960598 68 Bytes [ FF, FF, FF, FF, FE, F7, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrCaptureTimeout + B 7C9605DD 7 Bytes [ FF, FF, FF, FF, FF, 74, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrCaptureTimeout + 13 7C9605E5 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrCaptureTimeout + 19 7C9605EB 7 Bytes [ FF, FF, F7, DC, C1, F0, BF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrCaptureTimeout + 21 7C9605F3 97 Bytes [ ED, C5, 9C, C3, BC, C9, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrProbeForRead + 2 7C960655 40 Bytes [ 3E, 8A, FF, 51, 9C, FF, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!CsrProbeForRead + 2B 7C96067E 12 Bytes [ FF, FF, FF, FF, 74, 74, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgUiConnectToDbg + 2 7C96068B 149 Bytes [ FF, FF, F5, FB, FB, 92, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgUiWaitStateChange + 14 7C960721 9 Bytes [ FF, 74, 74, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgUiWaitStateChange + 1E 7C96072B 70 Bytes [ FF, FF, FF, FF, FD, BA, D5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgUiStopDebugging + 19 7C960772 86 Bytes [ 74, 74, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgUiRemoteBreakin + 51 7C9607CC 66 Bytes [ FF, FF, FF, FF, F0, F7, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgUiIssueRemoteBreakin + 36 7C96080F 12 Bytes [ FF, FF, FF, 74, 74, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgUiDebugActiveProcess + 2 7C96081C 36 Bytes [ FF, FF, FF, FF, FF, FF, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgUiDebugActiveProcess + 27 7C960841 74 Bytes [ C7, E5, E4, 94, E1, B9, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgUiConvertStateChangeStructure + 30 7C96088C 34 Bytes [ FF, FE, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgUiConvertStateChangeStructure + 53 7C9608AF 6 Bytes [ FF, FF, FF, 74, 74, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgUiConvertStateChangeStructure + 5A 7C9608B6 81 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgUiConvertStateChangeStructure + AC 7C960908 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgUiConvertStateChangeStructure + B3 7C96090F 212 Bytes [ FF, FF, FF, FF, FF, FF, FD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrHotPatchRoutine + 4D 7C960B93 7 Bytes [ A3, 66, 33, B0, 6E, 33, CE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrHotPatchRoutine + 55 7C960B9B 337 Bytes [ 49, F1, B1, 69, FF, C7, 7A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrHotPatchRoutine + 1A7 7C960CED 194 Bytes [ FB, 2A, D7, FF, 2B, CF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrHotPatchRoutine + 26A 7C960DB0 10 Bytes [ FF, FF, 74, 74, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrHotPatchRoutine + 275 7C960DBB 160 Bytes [ FF, FE, F2, CC, A5, C3, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetUnloadEventTrace + 29 7C960E5C 154 Bytes [ FF, F1, EE, EA, B3, BC, DD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetUnloadEventTrace + C4 7C960EF7 35 Bytes [ FF, FF, FF, FF, FF, FF, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetUnloadEventTrace + E8 7C960F1B 123 Bytes [ 57, 92, F9, 8F, D1, C7, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetUnloadEventTrace + 164 7C960F97 67 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetUnloadEventTrace + 1A8 7C960FDB 11 Bytes [ 4E, 91, B1, 9A, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrQueryProcessModuleInformation + 2 7C96139B 3 Bytes [ FF, 49, BB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrQueryProcessModuleInformation + 6 7C96139F 15 Bytes [ FF, 4B, BD, FF, FF, 43, B4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrQueryProcessModuleInformation + 17 7C9613B0 75 Bytes [ 28, 90, FF, FF, 1F, 83, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrSetAppCompatDllRedirectionCallback + 45 7C9613FE 26 Bytes [ 00, 00, BA, 7B, 7F, 44, BC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrSetAppCompatDllRedirectionCallback + 60 7C961419 2 Bytes [ E6, A5 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrSetAppCompatDllRedirectionCallback + 63 7C96141C 66 Bytes [ FF, FA, B8, FF, FF, FF, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsThreadWithinLoaderCallout + 36 7C96145F 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsThreadWithinLoaderCallout + 3C 7C961465 35 Bytes [ 00, 00, 00, 1E, 6B, 98, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsThreadWithinLoaderCallout + 60 7C961489 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsThreadWithinLoaderCallout + 7F 7C9614A8 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsThreadWithinLoaderCallout + 8D 7C9614B6 198 Bytes [ 00, 00, 81, 4B, 4B, 40, CE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrInitShimEngineDynamic + 76 7C9616A0 12 Bytes [ 0C, 9F, 1E, FF, 04, 6B, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrInitShimEngineDynamic + 83 7C9616AD 20 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrInitShimEngineDynamic + 98 7C9616C2 31 Bytes [ BD, FF, CE, C4, 92, FF, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrInitShimEngineDynamic + B9 7C9616E3 56 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrInitShimEngineDynamic + F2 7C96171C 3 Bytes [ 6B, 8A, B4 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlComputePrivatizedDllName_U + 2B 7C961C8E 7 Bytes [ 00, 00, 00, 00, 00, 00, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlComputePrivatizedDllName_U + 33 7C961C96 187 Bytes [ 8B, BF, 3F, 81, 3F, FF, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlComputePrivatizedDllName_U + EF 7C961D52 11 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlComputePrivatizedDllName_U + FB 7C961D5E 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlComputePrivatizedDllName_U + 104 7C961D67 72 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSeekMemoryStream + 2 7C961F78 8 Bytes [ 8B, 5A, 58, FF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSeekMemoryStream + B 7C961F81 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSeekMemoryStream + 16 7C961F8C 70 Bytes [ 00, 00, 00, 00, 21, 86, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSeekMemoryStream + 5D 7C961FD3 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetMemoryStreamSize + 4 7C961FDC 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetMemoryStreamSize + 8 7C961FE0 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopyOutOfProcessMemoryStreamTo + 4 7C961FE9 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopyOutOfProcessMemoryStreamTo + 8 7C961FED 115 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopyMemoryStreamTo + 6F 7C962061 8 Bytes [ 00, 00, 11, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCloneMemoryStream + 4 7C96206A 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCloneMemoryStream + 8 7C96206E 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRevertMemoryStream + 4 7C962077 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRevertMemoryStream + 8 7C96207B 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRevertMemoryStream + 12 7C962085 24 Bytes [ 00, 00, 01, 44, 40, 3D, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDumpResource + 15 7C96209F 11 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDumpResource + 22 7C9620AC 11 Bytes [ FF, FC, FA, FF, FF, FA, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDumpResource + 2F 7C9620B9 36 Bytes [ F6, EE, FF, FF, F8, EB, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDumpResource + 54 7C9620DE 29 Bytes [ 00, 52, 00, 00, 00, 10, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDumpResource + 74 7C9620FE 89 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNotOwnerCriticalSection + 2 7C962158 21 Bytes [ 16, 18, 1A, C7, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNotOwnerCriticalSection + 18 7C96216E 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNotOwnerCriticalSection + 24 7C96217A 181 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetSecurityObjectEx + 9 7C962230 7 Bytes [ BA, 50, 00, FF, B2, 47, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetSecurityObjectEx + 11 7C962238 66 Bytes [ B1, 4B, 00, FF, B8, 60, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQuerySecurityObject + 2B 7C96227B 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQuerySecurityObject + 2E 7C96227E 28 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQuerySecurityObject + 4B 7C96229B 171 Bytes [ FF, CA, 65, 06, FF, C4, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQuerySecurityObject + F7 7C962347 36 Bytes [ FF, C8, 60, 00, FF, C7, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQuerySecurityObject + 11D 7C96236D 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNewInstanceSecurityObject + 2 7C962454 161 Bytes [ 83, 6B, 48, FE, 16, 17, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNewSecurityGrantedAccess + 2E 7C9624F6 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNewSecurityGrantedAccess + 35 7C9624FD 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNewSecurityGrantedAccess + 50 7C962518 17 Bytes [ 80, 00, 00, 7F, 80, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNewSecurityGrantedAccess + 63 7C96252B 52 Bytes [ 7F, 80, 00, 00, 7F, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNewSecurityGrantedAccess + 99 7C962561 5 Bytes [ 00, 00, FF, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertToAutoInheritSecurityObject + 8 7C96262D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertToAutoInheritSecurityObject + A 7C96262F 121 Bytes [ 44, 00, 00, 00, 2D, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDefaultNpAcl + 74 7C9626A9 18 Bytes [ 00, 00, 0A, 00, 00, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDefaultNpAcl + 88 7C9626BD 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDefaultNpAcl + 92 7C9626C7 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDefaultNpAcl + 97 7C9626CC 15 Bytes [ 26, 2A, 2E, 31, 8A, 51, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDefaultNpAcl + A7 7C9626DC 38 Bytes [ D3, 8B, 5F, FF, B3, 5D, 2E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertUiListToApiList + 7B 7C9629B2 22 Bytes [ 00, 8C, 00, 00, 00, 66, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertUiListToApiList + 93 7C9629CA 109 Bytes [ 00, 01, 4C, 43, 3A, 8C, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertUiListToApiList + 101 7C962A38 19 Bytes [ FF, FA, F6, FF, F3, F2, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertUiListToApiList + 115 7C962A4C 62 Bytes [ 97, CA, D3, FF, 34, A9, CC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertUiListToApiList + 154 7C962A8B 140 Bytes [ 32, 59, 4E, 42, A6, D0, 76, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateQueryDebugBuffer + 16 7C962EED 4 Bytes [ 00, 3B, FF, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateQueryDebugBuffer + 1B 7C962EF2 14 Bytes [ 3F, FF, 00, 00, 3F, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateQueryDebugBuffer + 2A 7C962F01 60 Bytes [ 00, 3F, D7, 80, 00, 3F, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateQueryDebugBuffer + 67 7C962F3E 2 Bytes [ 00, 6D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateQueryDebugBuffer + 6A 7C962F41 15 Bytes [ 00, 00, 79, 00, 00, 00, 6C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyQueryDebugBuffer + 3D 7C962FFC 179 Bytes [ E5, BB, 9C, FF, 5C, 5D, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessBackTraceInformation + 10 7C9630B0 109 Bytes [ 01, 01, 01, 01, 7B, 69, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessBackTraceInformation + 7E 7C96311E 76 Bytes [ 82, 8A, 9E, 59, 19, FE, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessBackTraceInformation + CB 7C96316B 149 Bytes [ 6B, 70, F9, F5, 01, 01, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessBackTraceInformation + 161 7C963201 58 Bytes [ 01, 01, 01, 88, 44, 21, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessBackTraceInformation + 19C 7C96323C 83 Bytes [ 29, 22, 24, 3C, 96, 36, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessHeapInformation + 47 7C963290 9 Bytes [ 01, 01, 01, 01, 01, 01, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessHeapInformation + 51 7C96329A 23 Bytes [ 01, 01, 01, 01, C2, C2, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessHeapInformation + 6A 7C9632B3 21 Bytes [ FD, 00, 1F, FF, F8, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessHeapInformation + 81 7C9632CA 10 Bytes [ FF, 1F, 00, 00, FF, 46, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessHeapInformation + 8C 7C9632D5 19 Bytes [ 00, 1F, FA, 00, 00, 07, DA, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessLockInformation + 97 7C96380C 11 Bytes [ 4C, 0F, 01, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessLockInformation + A3 7C963818 199 Bytes [ 20, 65, 5A, 48, 45, 1B, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessLockInformation + 16B 7C9638E0 72 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessDebugInformation + 40 7C96392B 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessDebugInformation + 46 7C963931 41 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessDebugInformation + 70 7C96395B 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessDebugInformation + 7B 7C963966 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryProcessDebugInformation + A0 7C96398B 1 Byte [ 10 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlApplicationVerifierStop + 1B 7C965068 3 Bytes [ B1, B1, B1 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlApplicationVerifierStop + 1F 7C96506C 19 Bytes [ AA, AA, AA, FF, 8F, 8F, 8F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlApplicationVerifierStop + 33 7C965080 75 Bytes [ 8E, 8E, 8E, FF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlApplicationVerifierStop + 7F 7C9650CC 6 Bytes [ 00, 00, 00, 00, CC, 66 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlApplicationVerifierStop + 87 7C9650D4 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueueApcWow64Thread + 2 7C9669FF 8 Bytes [ FF, 99, FF, FF, FF, 99, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueueApcWow64Thread + B 7C966A08 6 Bytes [ 99, FF, FF, FF, 99, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlZombifyActivationContext + 2 7C966A0F 19 Bytes [ FF, 99, FF, FF, FF, 99, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlZombifyActivationContext + 16 7C966A23 28 Bytes [ FF, 12, A4, D2, FF, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlZombifyActivationContext + 33 7C966A40 5 Bytes [ 7C, D9, A3, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlZombifyActivationContext + 39 7C966A46 25 Bytes [ FF, FF, FF, FF, FF, FF, A4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsActivationContextActive + 2 7C966A60 8 Bytes [ 1A, A7, 3E, FF, 00, 78, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsActivationContextActive + B 7C966A69 5 Bytes [ 00, 00, 00, 00, AD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsActivationContextActive + 11 7C966A6F 32 Bytes [ 20, 31, BE, 3C, FF, 72, D5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsActivationContextActive + 32 7C966A90 150 Bytes [ 2E, C2, 6B, FF, 2E, C2, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsActivationContextActive + C9 7C966B27 40 Bytes [ 00, 00, 00, 00, 00, 40, A6, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlComputeImportTableHash + 24 7C96805B 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlComputeImportTableHash + 2A 7C968061 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlComputeImportTableHash + 34 7C96806B 96 Bytes [ 00, CC, 66, 00, 30, D2, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlComputeImportTableHash + 95 7C9680CC 26 Bytes [ D2, 73, 13, FF, D2, 73, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlComputeImportTableHash + B0 7C9680E7 6 Bytes [ 40, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertVariantToProperty + 10 7C96856D 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertVariantToProperty + 14 7C968571 62 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertVariantToProperty + 53 7C9685B0 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertVariantToProperty + 5C 7C9685B9 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertVariantToProperty + 73 7C9685D0 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertPropertyToVariant + 10 7C96860B 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertPropertyToVariant + 14 7C96860F 40 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertPropertyToVariant + 3F 7C96863A 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertPropertyToVariant + 4A 7C968645 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlConvertPropertyToVariant + 53 7C96864E 101 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PropertyLengthAsVariant + 21 7C9686B4 7 Bytes [ 02, 9C, 0A, FF, 00, 99, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PropertyLengthAsVariant + 29 7C9686BC 19 Bytes [ 00, 78, 02, FF, 00, 41, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PropertyLengthAsVariant + 3F 7C9686D2 22 Bytes [ 00, 00, 00, 00, 00, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PropertyLengthAsVariant + 56 7C9686E9 6 Bytes [ DE, C0, FF, FF, DA, B5 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PropertyLengthAsVariant + 5D 7C9686F0 8 Bytes [ FF, D4, AB, FF, FF, D3, A7, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetUnicodeCallouts + 14 7C96873D 6 Bytes [ CA, 99, FF, FF, C5, 8F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetUnicodeCallouts + 1B 7C968744 43 Bytes [ FF, C5, 8C, FF, 7A, 48, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetUnicodeCallouts + 47 7C968770 7 Bytes [ EA, D8, BB, FF, D5, B5, 9D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetUnicodeCallouts + 4F 7C968778 82 Bytes [ BF, 8B, 83, FF, AF, 74, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetUnicodeCallouts + A2 7C9687CB 82 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgPrintReturnControlC + 5 7C96881F 76 Bytes [ 00, 1E, 1E, 1E, 10, 8C, 8C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgPrintReturnControlC + 52 7C96886C 22 Bytes [ 81, 1E, 00, 40, 81, 1E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgPrintReturnControlC + 69 7C968883 15 Bytes [ 40, A0, 35, 00, CF, 92, 2A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgPrintReturnControlC + 7B 7C968895 175 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgPrompt + 3C 7C968945 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!DbgPrompt + 41 7C96894A 61 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindEntryForAddress + 1A 7C968989 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindEntryForAddress + 2D 7C96899C 16 Bytes [ C4, 87, 81, FF, ED, AD, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindEntryForAddress + 3E 7C9689AD 63 Bytes [ 84, 81, EF, BD, 81, 81, AF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindEntryForAddress + 7F 7C9689EE 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindEntryForAddress + 87 7C9689F6 82 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrEnumResources + 46 7C968A4A 57 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrEnumResources + 80 7C968A84 16 Bytes [ 00, 4C, 01, FF, 00, 26, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrEnumResources + 92 7C968A96 25 Bytes [ 00, 00, 00, 5B, 01, 20, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrEnumResources + AC 7C968AB0 11 Bytes [ 5E, C9, 6E, FF, 04, 9F, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrEnumResources + B8 7C968ABC 60 Bytes [ 01, 9A, 07, FF, 00, 98, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindResourceEx_U + 40 7C969776 1 Byte [ 64 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindResourceEx_U + 42 7C969778 45 Bytes [ 66, 69, 6E, 69, 74, 69, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindResourceEx_U + 70 7C9697A6 29 Bytes [ 47, 65, 74, 20, 43, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindResourceEx_U + 8E 7C9697C4 239 Bytes [ 72, 72, 65, 6E, 74, 20, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!LdrFindResourceEx_U + 17E 7C9698B4 56 Bytes [ 20, 69, 6E, 20, 77, 65, 62, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCustomCPToUnicodeN + 6 7C969E6B 133 Bytes [ 70, 65, 63, 69, 61, 6C, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCustomCPToUnicodeN + 8C 7C969EF1 136 Bytes [ 57, 57, 57, 15, 00, 53, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCustomCPToUnicodeN + 115 7C969F7A 186 Bytes [ 46, 6F, 6C, 64, 65, 72, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCustomCPToUnicodeN + 1D0 7C96A035 37 Bytes [ DA, DA, FF, A1, A1, A1, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeToCustomCPN + 12 7C96A05B 142 Bytes [ 00, 00, 00, 00, 00, 81, 1E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeToCustomCPN + A1 7C96A0EA 300 Bytes [ 0E, FF, FF, F3, E7, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeToCustomCPN + 1E 7C96A217 47 Bytes [ 00, 07, 8E, C5, FF, 7F, ED, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeToCustomCPN + 4E 7C96A247 266 Bytes [ FF, 76, F2, FF, FF, 07, 8E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeToCustomCPN + 15A 7C96A353 104 Bytes [ 00, 00, 00, 00, 00, 79, 9D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeToCustomCPN + 1C3 7C96A3BC 214 Bytes [ FF, FF, E2, FF, FF, FF, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeToCustomCPN + 29B 7C96A494 211 Bytes [ BD, 4B, 00, FF, F7, F7, F7, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PfxRemovePrefix + 10 7C96AA97 232 Bytes [ 20, 1C, AC, 25, FF, 57, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PfxRemovePrefix + F9 7C96AB80 17 Bytes [ F6, F2, E7, FF, A3, AA, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PfxRemovePrefix + 10B 7C96AB92 45 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PfxRemovePrefix + 139 7C96ABC0 88 Bytes [ FF, FF, E5, FF, FF, FF, DD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PfxRemovePrefix + 192 7C96AC19 69 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PfxInsertPrefix + 2 7C96ACD0 98 Bytes [ 00, 00, 00, 00, BD, 4B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PfxInsertPrefix + 65 7C96AD33 127 Bytes [ FF, 5F, 7B, 00, FF, 00, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PfxFindPrefix + 2 7C96ADB3 6 Bytes [ FF, F6, FF, FF, FF, EA ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PfxFindPrefix + 9 7C96ADBA 5 Bytes [ FF, FF, B0, DE, EE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PfxFindPrefix + F 7C96ADC0 31 Bytes [ 9E, D9, F4, FF, 88, 84, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PfxFindPrefix + 2F 7C96ADE0 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!PfxFindPrefix + 35 7C96ADE6 5 Bytes [ FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetInformationAcl + 42 7C96AF11 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetInformationAcl + 47 7C96AF16 21 Bytes [ 00, 00, DD, 9F, 76, FF, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddCompoundAce + 11 7C96AF2C 18 Bytes [ FF, FF, FE, FF, FF, F8, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddCompoundAce + 24 7C96AF3F 16 Bytes [ FF, 9E, 65, 58, FF, 9E, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddCompoundAce + 37 7C96AF52 36 Bytes [ 00, 00, 00, 00, 00, 00, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddCompoundAce + 5C 7C96AF77 21 Bytes [ FF, 20, 82, FB, FF, A0, CA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddCompoundAce + 72 7C96AF8D 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessDeniedAceEx + 11 7C96B170 37 Bytes [ 88, B6, 88, FF, AD, CE, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAuditAccessAceEx + 13 7C96B196 17 Bytes [ 00, 00, 00, 00, 00, 00, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAuditAccessAceEx + 25 7C96B1A8 49 Bytes [ 96, CE, FC, FF, 93, CE, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessAllowedObjectAce + 1F 7C96B1DA 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessAllowedObjectAce + 26 7C96B1E1 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessAllowedObjectAce + 2B 7C96B1E6 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessAllowedObjectAce + 2E 7C96B1E9 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessAllowedObjectAce + 31 7C96B1EC 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessDeniedObjectAce + 9 7C96B211 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessDeniedObjectAce + F 7C96B217 4 Bytes [ 00, 07, 8E, C5 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessDeniedObjectAce + 14 7C96B21C 2 Bytes [ C5, FC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessDeniedObjectAce + 17 7C96B21F 2 Bytes [ FF, BD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAccessDeniedObjectAce + 1A 7C96B222 5 Bytes [ FF, FF, BD, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAuditAccessObjectAce + 26 7C96B27C 47 Bytes [ 1A, B1, 50, FF, 16, AB, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAuditAccessObjectAce + 56 7C96B2AC 11 Bytes [ 40, C0, 6C, FF, 23, B5, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAuditAccessObjectAce + 62 7C96B2B8 18 Bytes [ 1A, B1, 50, FF, 1A, B1, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddAuditAccessObjectAce + 75 7C96B2CB 50 Bytes [ 30, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyAtomTable + 14 7C96B2FE 5 Bytes [ C5, FF, 9E, 65, 58 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyAtomTable + 1A 7C96B304 11 Bytes [ E7, 91, 3A, FF, BC, 80, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyAtomTable + 28 7C96B312 66 Bytes [ 00, 00, 00, 00, 00, 00, E3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyAtomTable + 6B 7C96B355 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDestroyAtomTable + 7D 7C96B367 33 Bytes [ FF, 3B, A9, FF, FF, 47, B8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEmptyAtomTable + 22 7C96B3E3 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEmptyAtomTable + 28 7C96B3E9 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEmptyAtomTable + 53 7C96B414 28 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEmptyAtomTable + 70 7C96B431 30 Bytes [ E1, C5, FF, FF, E1, C5, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEmptyAtomTable + 8F 7C96B450 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlPinAtomInAtomTable + 97 7C96B520 7 Bytes [ 68, DE, 83, FF, 8A, EB, 9C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlPinAtomInAtomTable + 9F 7C96B528 11 Bytes [ 6B, DC, 80, FF, 29, C4, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlPinAtomInAtomTable + AB 7C96B534 27 Bytes [ DE, 67, 00, FF, DC, 68, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeRangeList + F 7C96B550 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeRangeList + 1C 7C96B55D 52 Bytes [ 00, 00, 00, A5, A5, A5, 9F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeRangeList + 53 7C96B594 125 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeRangeList + D1 7C96B612 15 Bytes [ 00, 00, 00, 00, 00, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeRangeList + E2 7C96B623 119 Bytes [ FF, D5, FF, FF, FF, D5, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeRangeList + 40 7C96B79C 83 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetFirstRange + 4F 7C96B7F0 92 Bytes [ 1D, 86, B5, FF, 89, E9, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetFirstRange + AD 7C96B84E 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetFirstRange + B3 7C96B854 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetNextRange + 16 7C96B86F 3 Bytes [ 60, 81, 1E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetNextRange + 1A 7C96B873 1 Byte [ 30 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetNextRange + 1C 7C96B875 17 Bytes [ 81, 00, 60, 16, 9C, 24, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetNextRange + 2F 7C96B888 70 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetNextRange + 76 7C96B8CF 70 Bytes [ FF, 00, 00, 00, 00, BD, 4B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopyRangeList + D 7C96B9D2 4 Bytes [ 00, 00, CA, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopyRangeList + 12 7C96B9D7 36 Bytes [ FF, CE, 58, 00, FF, CE, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopyRangeList + 37 7C96B9FC 45 Bytes [ CE, 58, 00, FF, CE, 58, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopyRangeList + 66 7C96BA2B 38 Bytes [ FF, EE, FF, FF, FF, EE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopyRangeList + 8D 7C96BA52 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindRange + 3C 7C96BB54 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindRange + 4A 7C96BB62 26 Bytes [ 00, 00, 00, 00, 00, 00, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindRange + 66 7C96BB7E 8 Bytes [ 81, FF, 1B, 41, DA, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindRange + 6F 7C96BB87 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindRange + 7A 7C96BB92 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsRangeAvailable + 1C 7C96BEB7 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsRangeAvailable + 24 7C96BEBF 69 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsRangeAvailable + 6A 7C96BF05 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsRangeAvailable + 7C 7C96BF17 132 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsRangeAvailable + 101 7C96BF9C 61 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMergeRangeLists + 89 7C96C157 88 Bytes [ CB, 8A, 9C, DB, BB, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddRange + 2 7C96C1B0 87 Bytes [ FF, FF, 74, 74, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddRange + 5B 7C96C209 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddRange + 62 7C96C210 26 Bytes [ BD, C9, F9, 50, 7E, F7, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAddRange + 7D 7C96C22B 100 Bytes [ 87, 9D, F0, 8C, B9, AE, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteRange + 57 7C96C290 177 Bytes [ 4F, B4, 7F, 67, CB, 98, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteRange + 109 7C96C342 6 Bytes [ 74, 74, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteRange + 110 7C96C349 47 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteOwnersRanges + 2 7C96C379 115 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteOwnersRanges + 76 7C96C3ED 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteOwnersRanges + 7E 7C96C3F5 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteOwnersRanges + 81 7C96C3F8 13 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteOwnersRanges + 90 7C96C407 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInvertRangeList + 2 7C96C42A 52 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInvertRangeList + 37 7C96C45F 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInvertRangeList + 3A 7C96C462 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInvertRangeList + 3F 7C96C467 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInvertRangeList + 46 7C96C46E 33 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopySidAndAttributesArray + 2 7C96C51C 95 Bytes [ FF, FF, FF, FF, FF, FF, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopySidAndAttributesArray + 62 7C96C57C 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopySidAndAttributesArray + 65 7C96C57F 89 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCopyLuidAndAttributesArray + 2 7C96C5D9 46 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetSaclSecurityDescriptor + 2 7C96C608 568 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetSaclSecurityDescriptor + 23C 7C96C842 66 Bytes [ 74, 74, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetSecurityDescriptorRMControl + 24 7C96C885 8 Bytes [ 87, B1, DE, C3, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetSecurityDescriptorRMControl + 2D 7C96C88E 176 Bytes [ FF, FF, FF, FF, 74, 74, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMapSecurityErrorToNtStatus + 51 7C96C93F 27 Bytes [ FC, 9A, B5, FA, 60, 9B, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlMapSecurityErrorToNtStatus + 6D 7C96C95B 127 Bytes [ D2, E3, D9, 43, 96, 65, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetAttributesSecurityDescriptor + 2 7C96C9DB 76 Bytes [ FF, FF, FF, FF, FC, A3, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetAttributesSecurityDescriptor + 4F 7C96CA28 22 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetAttributesSecurityDescriptor + 66 7C96CA3F 61 Bytes [ 48, 96, FF, 41, 89, FF, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetAttributesSecurityDescriptor + A4 7C96CA7D 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetAttributesSecurityDescriptor + A7 7C96CA80 70 Bytes [ DB, E0, FB, 79, 9C, F9, 3A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlZeroHeap + 4D 7C96D9F4 113 Bytes [ FF, FF, DC, DB, B4, 8B, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlZeroHeap + BF 7C96DA66 50 Bytes [ F5, 09, DB, B4, AD, 8B, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlZeroHeap + F4 7C96DA9B 53 Bytes [ FF, FF, FF, FF, F3, EE, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlZeroHeap + 12A 7C96DAD1 27 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlZeroHeap + 146 7C96DAED 3 Bytes [ FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDowncaseUnicodeChar + 2 7C96DC58 94 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToAnsiSize + 4 7C96DCB7 1 Byte [ 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToAnsiSize + 6 7C96DCB9 17 Bytes [ AD, 90, B4, 1A, 59, 59, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToAnsiSize + 18 7C96DCCB 25 Bytes [ FF, FF, FF, 09, DB, B4, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAnsiStringToUnicodeSize + D 7C96DCE5 11 Bytes [ FF, FF, FF, FF, FF, 09, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAnsiStringToUnicodeSize + 19 7C96DCF1 15 Bytes [ 8B, AD, B4, BB, 7A, 59, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeStringToAnsiString + 2 7C96DD01 13 Bytes [ FF, FF, FF, FF, FF, 19, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeStringToAnsiString + 10 7C96DD0F 42 Bytes [ B4, BB, 9A, 7A, 59, 59, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeStringToAnsiString + 3B 7C96DD3A 58 Bytes [ FF, FF, FF, FF, F5, 09, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeStringToAnsiString + 76 7C96DD75 38 Bytes [ FF, FF, F3, BC, 07, EF, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeStringToAnsiString + 9D 7C96DD9C 19 Bytes [ 2C, 4D, 99, 78, 57, 56, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToCountedOemString + 2 7C96DDB0 21 Bytes [ 9A, 53, 4D, 2C, 46, 25, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToCountedOemString + 19 7C96DDC7 116 Bytes [ FF, FF, FF, FF, FF, 1A, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToCountedOemString + 8E 7C96DE3C 39 Bytes [ FF, 1A, 75, 2C, 47, 4C, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToCountedOemString + B6 7C96DE64 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnicodeStringToCountedOemString + B9 7C96DE67 28 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeStringToCountedOemString + 2 7C96DE84 21 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeStringToCountedOemString + 19 7C96DE9B 37 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeStringToCountedOemString + 40 7C96DEC2 29 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeStringToCountedOemString + 5E 7C96DEE0 36 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpcaseUnicodeStringToCountedOemString + 83 7C96DF05 10 Bytes [ F3, F2, F4, 1A, 1B, F3, F5, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompareString + 2 7C96DF68 12 Bytes [ FF, FF, FF, FF, FF, 19, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompareString + F 7C96DF75 69 Bytes [ AD, B4, B5, A0, 59, 5E, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompareString + 55 7C96DFBB 67 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUpperString + 6 7C96DFFF 159 Bytes [ 8B, FF, FF, 74, 74, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAppendStringToString + 2 7C96E09F 162 Bytes [ FF, FF, FF, 74, 74, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindSetBits + 51 7C96E142 151 Bytes [ 74, 74, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindSetBits + E9 7C96E1DA 23 Bytes [ E4, D2, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindSetBits + 101 7C96E1F2 69 Bytes [ FE, 42, 91, FF, 3A, 8D, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindSetBits + 147 7C96E238 19 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindSetBits + 15B 7C96E24C 62 Bytes [ 46, 95, FF, 39, 82, FF, 21, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindClearRuns + 2D 7C96E3CF 60 Bytes [ FF, FF, FF, FE, DB, E4, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindClearRuns + 6A 7C96E40C 163 Bytes [ FF, FF, FF, FF, FF, FF, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindClearRuns + 10E 7C96E4B0 80 Bytes [ FF, FF, 74, 74, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindClearRuns + 15F 7C96E501 103 Bytes [ FF, 74, 74, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindClearRuns + 1C7 7C96E569 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindLongestRunClear + 2 7C96E5EB 13 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindLongestRunClear + 10 7C96E5F9 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindLongestRunClear + 17 7C96E600 63 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNumberOfClearBits + 20 7C96E640 79 Bytes [ FF, FF, 74, 74, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNumberOfSetBits + 20 7C96E690 22 Bytes [ FF, FF, 74, 74, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNumberOfSetBits + 37 7C96E6A7 163 Bytes [ F7, F8, F6, F2, EF, EE, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindNextForwardRunClear + 1 7C96E74B 56 Bytes [ 54, A8, 63, 2D, 9A, 56, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindNextForwardRunClear + 3A 7C96E784 79 Bytes [ FF, FF, FF, FA, F3, EE, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindNextForwardRunClear + 8A 7C96E7D4 321 Bytes [ FF, FF, FF, FF, FF, FF, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindMostSignificantBit + 2 7C96E916 81 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindMostSignificantBit + 55 7C96E969 13 Bytes [ FF, FF, FF, FF, F9, ED, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindMostSignificantBit + 63 7C96E977 218 Bytes [ D1, 9F, FF, C9, 8C, F0, BB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindLeastSignificantBit + 93 7C96EA52 28 Bytes [ 74, 74, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindSetBitsAndClear + 7 7C96EA6F 2 Bytes [ 32, 78 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFindSetBitsAndClear + A 7C96EA72 42 Bytes [ 1F, 5B, FE, 1A, 50, F3, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAssert2 + 2 7C96EA9D 31 Bytes [ FE, FF, FF, FF, FF, 74, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAssert2 + 22 7C96EABD 61 Bytes [ 93, FF, 3A, 80, FF, 27, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAssert2 + 61 7C96EAFC 104 Bytes [ FF, FF, FF, FF, DA, E3, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAssert2 + CA 7C96EB65 50 Bytes [ 23, 5D, FC, 1C, 50, F0, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAssert2 + FD 7C96EB98 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAssert + 2 7C96ECAB 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAssert + 8 7C96ECB1 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAssert + B 7C96ECB4 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAssert + E 7C96ECB7 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlAssert + 11 7C96ECBA 5 Bytes [ FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDebugPrintTimes + A 7C96ED16 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDebugPrintTimes + 15 7C96ED21 4 Bytes [ FF, 74, 74, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDebugPrintTimes + 1A 7C96ED26 49 Bytes [ 50, 41, 28, 00, 00, 00, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDebugPrintTimes + 4C 7C96ED58 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDebugPrintTimes + 53 7C96ED5F 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteTimerQueueEx + 2 7C96EDC3 29 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteTimerQueueEx + 20 7C96EDE1 22 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteTimerQueueEx + 37 7C96EDF8 38 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteTimerQueueEx + 5E 7C96EE1F 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteTimerQueueEx + 65 7C96EE26 30 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteTimerQueue + 2 7C96EECB 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteTimerQueue + 8 7C96EED1 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteTimerQueue + F 7C96EED8 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetTimer + 2 7C96EEE3 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetTimer + B 7C96EEEC 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCancelTimer + 2 7C96EEF3 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCancelTimer + 8 7C96EEF9 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCancelTimer + B 7C96EEFC 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCancelTimer + 12 7C96EF03 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCancelTimer + 1D 7C96EF0E 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlWalkFrameChain + C 7C96EF46 104 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlWalkFrameChain + 77 7C96EFB1 52 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlWalkFrameChain + AC 7C96EFE6 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlWalkFrameChain + B3 7C96EFED 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlWalkFrameChain + BA 7C96EFF4 108 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCaptureStackBackTrace + 42 7C96F1F3 49 Bytes [ DA, FA, DF, AD, FD, DF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCaptureStackBackTrace + 74 7C96F225 6 Bytes [ FA, 11, 11, 11, 11, 11 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCaptureStackBackTrace + 7B 7C96F22C 106 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetCallersAddress + 2D 7C96F297 43 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerToChar + F 7C96F2C3 17 Bytes [ FA, FD, 1D, FF, D1, AF, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerToChar + 22 7C96F2D6 78 Bytes [ FD, D1, 11, 11, 10, 00, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerToChar + 72 7C96F326 106 Bytes [ FF, FF, DD, A1, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerToChar + DD 7C96F391 225 Bytes [ 11, FF, FA, A1, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerToChar + 1BF 7C96F473 107 Bytes [ 11, AF, DA, A1, 11, 11, 11, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInt64ToUnicodeString + 6B 7C96F6EC 31 Bytes [ 11, 11, 11, 11, F1, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateRegistryKey + C 7C96F70C 40 Bytes [ 1F, 11, F1, 11, 1F, 1F, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateRegistryKey + 35 7C96F735 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateRegistryKey + 39 7C96F739 201 Bytes [ FF, FF, F1, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryTimeZoneInformation + 84 7C96F805 205 Bytes [ FF, FF, FF, FF, FF, FF, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetTimeZoneInformation + 2A 7C96F8D3 214 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetTimeZoneInformation + 101 7C96F9AA 25 Bytes [ FF, FD, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlProtectHeap + 2 7C96F9C4 19 Bytes [ D1, DF, FF, FF, D1, 1D, F1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlProtectHeap + 16 7C96F9D8 209 Bytes [ FD, DD, FD, 11, DF, DA, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlProtectHeap + E8 7C96FAAA 365 Bytes [ D1, 11, 1A, FF, FA, 11, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetUserFlagsHeap + F3 7C96FC18 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetUserFlagsHeap + F7 7C96FC1C 170 Bytes [ D1, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryTagHeap + 52 7C96FCC7 21 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryTagHeap + 68 7C96FCDD 9 Bytes [ FF, FF, FF, D1, 11, DF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryTagHeap + 72 7C96FCE7 128 Bytes [ FF, FF, FF, FF, FF, F1, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryTagHeap + F3 7C96FD68 75 Bytes [ 11, 11, 10, 00, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryTagHeap + 13F 7C96FDB4 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlExtendHeap + 84 7C96FE5D 148 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlExtendHeap + 119 7C96FEF2 215 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlExtendHeap + 1F1 7C96FFCA 287 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEnumProcessHeaps + 51 7C9700EA 12 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEnumProcessHeaps + 5E 7C9700F7 27 Bytes [ FF, FF, FF, FF, FF, FF, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEnumProcessHeaps + 7A 7C970113 104 Bytes [ 11, 11, FF, F1, 11, 11, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlWalkHeap + 5B 7C97017C 342 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlWalkHeap + 1B2 7C9702D3 175 Bytes [ 11, 1D, FF, FA, 11, AF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlWalkHeap + 262 7C970383 167 Bytes [ 11, 11, FF, F1, 11, 11, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlWalkHeap + 30A 7C97042B 54 Bytes [ FF, FF, FF, FF, FF, FF, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlWalkHeap + 341 7C970462 418 Bytes [ F1, 1A, FF, F1, 11, 11, 1F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlQueryHeapInformation + 67 7C970A12 17 Bytes [ F1, 11, DF, FF, 11, 11, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidateHeap + C 7C970A24 29 Bytes [ DA, FF, A1, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidateHeap + 2A 7C970A42 117 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidateHeap + A0 7C970AB8 17 Bytes [ FF, FF, FF, FF, FF, FF, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidateHeap + B2 7C970ACA 387 Bytes [ 1D, FF, F1, 11, AF, FF, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidateProcessHeaps + 14 7C970C4F 9 Bytes [ FF, FF, FF, FF, A1, 1A, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidateProcessHeaps + 1E 7C970C59 40 Bytes [ FF, FF, FF, FF, FF, FF, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlValidateProcessHeaps + 47 7C970C82 778 Bytes [ F1, 11, 11, 1A, DF, FF, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUsageHeap + 2A6 7C970F8E 154 Bytes [ FF, FF, FF, FF, FF, FA, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUsageHeap + 341 7C971029 102 Bytes [ 99, CC, 00, 01, 90, C3, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUsageHeap + 3A8 7C971090 163 Bytes [ 08, 78, A9, 00, 09, 71, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUsageHeap + 44C 7C971134 83 Bytes [ 1E, 6A, 97, 00, 2C, 7A, A8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUsageHeap + 4A0 7C971188 21 Bytes [ 77, 77, 77, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompressBuffer + C 7C9712B9 2 Bytes [ C3, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompressBuffer + F 7C9712BC 13 Bytes [ C0, 03, 00, 00, E0, 07, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompressBuffer + 1D 7C9712CA 12 Bytes [ 0C, 1A, C0, 03, 05, C1, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompressBuffer + 2A 7C9712D7 36 Bytes [ BC, 00, 00, 5E, 28, 80, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCompressBuffer + 4F 7C9712FC 5 Bytes [ 60, 00, 00, 00, 01 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDecompressBuffer + F 7C971338 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDecompressBuffer + 15 7C97133E 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDecompressBuffer + 41 7C97136A 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDecompressBuffer + 46 7C97136F 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDecompressBuffer + 4F 7C971378 41 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDecompressFragment + F 7C9713A4 5 Bytes [ 00, 00, 00, 01, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDecompressFragment + 15 7C9713AA 48 Bytes [ 00, 01, 00, 00, 00, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDecompressFragment + 47 7C9713DC 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDecompressFragment + 4C 7C9713E1 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDecompressFragment + 57 7C9713EC 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlComputeCrc32 + 20 7C971511 356 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlComputeCrc32 + 185 7C971676 178 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlComputeCrc32 + 238 7C971729 285 Bytes [ 20, 40, 08, 00, 00, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlComputeCrc32 + 356 7C971847 72 Bytes [ 01, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlComputeCrc32 + 39F 7C971890 166 Bytes [ 01, BE, F0, FF, 00, 6E, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateBootStatusDataFile + A 7C971937 9 Bytes [ 01, 33, 33, 33, 0A, 18, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateBootStatusDataFile + 14 7C971941 26 Bytes [ 66, 99, FF, F7, FA, FC, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateBootStatusDataFile + 2F 7C97195C 78 Bytes [ 00, 66, 99, FF, 27, 3E, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateBootStatusDataFile + 7F 7C9719AC 25 Bytes CALL 15FD1AB0 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateBootStatusDataFile + 99 7C9719C6 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetCurrentEnvironment + 1A 7C971B1F 80 Bytes [ FF, 17, D4, FF, FF, 29, DA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetCurrentEnvironment + 6C 7C971B71 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetCurrentEnvironment + 84 7C971B89 17 Bytes [ E0, EB, FF, EB, FB, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetCurrentEnvironment + 97 7C971B9C 37 Bytes [ 16, D3, FF, FF, 28, D9, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetCurrentEnvironment + BD 7C971BC2 9 Bytes [ 5B, B6, 01, 66, 99, FF, 26, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlExitUserThread + 25 7C971C08 53 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeUserThreadStack + 31 7C971C3E 32 Bytes [ 55, 03, 1F, 4F, 67, 23, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeUserThreadStack + 52 7C971C5F 106 Bytes [ FF, 21, D7, FF, FF, 31, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeUserThreadStack + BF 7C971CCC 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeUserThreadStack + C4 7C971CD1 55 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFreeUserThreadStack + FC 7C971D09 10 Bytes JMP 4F971400 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateSystemVolumeInformationFolder + 47 7C97213B 28 Bytes [ 02, 22, 00, 01, 08, 01, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateSystemVolumeInformationFolder + 65 7C972159 8 Bytes [ 19, 08, 0B, 08, 0B, 08, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateSystemVolumeInformationFolder + 6E 7C972162 158 Bytes [ 08, 0B, 08, 0B, 08, 0B, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateSystemVolumeInformationFolder + 10D 7C972201 16 Bytes [ 0B, 08, 0B, 08, 00, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlCreateSystemVolumeInformationFolder + 11E 7C972212 23 Bytes [ 0A, 0F, 00, 13, 08, 00, 08, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeToElapsedTimeFields + 17 7C972304 9 Bytes [ 00, 00, 00, 02, D8, 00, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeToElapsedTimeFields + 21 7C97230E 22 Bytes [ 07, 0F, 0F, 00, 09, 0F, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTimeToElapsedTimeFields + 38 7C972325 60 Bytes [ 02, 48, 00, 0A, 0D, 00, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSecondsSince1980ToTime + E 7C972362 14 Bytes [ 08, 00, 00, 02, 47, 00, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSecondsSince1980ToTime + 1D 7C972371 54 Bytes [ 00, 00, 02, 83, 00, 0B, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSecondsSince1970ToTime + 1D 7C9723A8 71 Bytes [ 03, 07, 01, 0F, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLocalTimeToSystemTime + 2E 7C9723F0 8 Bytes [ 07, 0F, 0F, 0F, 0F, 0F, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLocalTimeToSystemTime + 37 7C9723F9 54 Bytes [ 00, 00, 02, 85, 00, 0B, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRealPredecessor + F 7C972430 16 Bytes [ 01, 08, 01, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRealPredecessor + 20 7C972441 23 Bytes [ 08, 01, 07, 00, 00, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRealPredecessor + 38 7C972459 3 Bytes [ 00, 00, 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRealPredecessor + 3C 7C97245D 55 Bytes [ 00, 03, 0D, 00, 02, 06, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteNoSplay + 37 7C972495 38 Bytes [ 0B, 08, 0B, 07, 00, 0C, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteNoSplay + 5E 7C9724BC 165 Bytes [ 07, 0F, 08, 0B, 08, 07, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetElementGenericTable + 84 7C972562 28 Bytes [ 10, 0D, 02, 07, 04, 0F, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEnumerateGenericTable + 18 7C97257F 37 Bytes [ 00, 00, 02, 43, 00, 0D, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEnumerateGenericTable + 3E 7C9725A5 59 Bytes [ 08, 00, 00, 00, 02, 44, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEnumerateGenericTable + 7A 7C9725E1 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEnumerateGenericTable + 7C 7C9725E3 36 Bytes [ 0F, 0F, 08, 08, 00, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEnumerateGenericTable + A1 7C972608 246 Bytes [ 02, 0D, 00, 00, 00, 02, 8F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetElementGenericTableAvl + 2A 7C9728FB 258 Bytes [ 04, 07, 0F, 0F, 07, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNumberGenericTableElementsAvl + 58 7C9729FE 15 Bytes [ A5, 00, 0A, 0D, 00, 03, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlNumberGenericTableElementsAvl + 68 7C972A0E 50 Bytes [ 00, 02, A5, 00, 0B, 0D, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInsertElementGenericTableAvl + 2E 7C972A41 70 Bytes [ 00, 00, 02, A7, 00, 0A, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteElementGenericTableAvl + 42 7C972A88 3 Bytes [ 00, 02, A9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlDeleteElementGenericTableAvl + 46 7C972A8C 220 Bytes [ 03, 0D, 00, 02, 07, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlEnumerateGenericTableLikeADirectory + 99 7C972B69 93 Bytes [ 0D, 00, 0B, 07, 0F, 0F, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRegisterSecureMemoryCacheCallback + 7 7C972BC7 24 Bytes [ 00, 00, 00, 00, 02, B0, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRegisterSecureMemoryCacheCallback + 20 7C972BE0 16 Bytes [ 07, 0D, 00, 02, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRegisterSecureMemoryCacheCallback + 31 7C972BF1 5 Bytes [ 02, B1, 00, 06, 0D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRegisterSecureMemoryCacheCallback + 37 7C972BF7 64 Bytes [ 02, 06, 00, 02, 07, 01, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFlushSecureMemoryCache + 3C 7C972C38 168 Bytes [ 02, 0D, 00, 00, 00, 02, B4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFlushSecureMemoryCache + E5 7C972CE1 48 Bytes [ 00, 0A, 0F, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFlushSecureMemoryCache + 116 7C972D12 5 Bytes [ 00, 00, 07, 0F, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFlushSecureMemoryCache + 11E 7C972D1A 31 Bytes [ 00, 02, B9, 00, 0B, 0D, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlFlushSecureMemoryCache + 13E 7C972D3A 21 Bytes [ 0F, 00, 00, 0F, 0F, 0F, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsNameLegalDOS8Dot3 + 26 7C972F0F 103 Bytes [ 02, C7, 00, 08, 0D, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsNameLegalDOS8Dot3 + 90 7C972F79 8 Bytes [ 02, D5, 00, 07, 0D, 00, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsNameLegalDOS8Dot3 + 99 7C972F82 4 Bytes [ 0F, 00, 04, 0F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsNameLegalDOS8Dot3 + 9E 7C972F87 9 Bytes [ 05, 08, 07, 07, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIsNameLegalDOS8Dot3 + A8 7C972F91 21 Bytes [ 02, D4, 00, 07, 0D, 00, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGenerate8dot3Name + C 7C973076 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGenerate8dot3Name + 33 7C97309D 26 Bytes [ 00, 00, 00, 00, 00, 40, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGenerate8dot3Name + 4E 7C9730B8 37 Bytes [ 2E, DB, FF, FF, 1E, D6, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGenerate8dot3Name + 74 7C9730DE 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGenerate8dot3Name + 81 7C9730EB 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetLastNtStatus + 6 7C97345D 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlGetLastNtStatus + C 7C973463 18 Bytes [ 00, 00, 00, 00, 02, 33, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlSetLastWin32ErrorAndNtStatusFromNtStatus + D 7C973476 30 Bytes [ FF, FF, 85, ED, FF, FF, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRemoteCall + B 7C973495 54 Bytes [ 00, 00, 01, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRemoteCall + 43 7C9734CD 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRemoteCall + 49 7C9734D3 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRemoteCall + 4D 7C9734D7 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRemoteCall + 51 7C9734DB 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInterlockedFlushSList + 1F 7C973616 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInterlockedFlushSList + 2E 7C973625 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInterlockedFlushSList + 31 7C973628 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInterlockedFlushSList + 3B 7C973632 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInterlockedFlushSList + 4E 7C973645 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeStackTraceDataBase + 2B 7C973704 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeStackTraceDataBase + 3D 7C973716 16 Bytes [ 00, 00, 00, 00, 00, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeStackTraceDataBase + 4E 7C973727 49 Bytes [ FF, 00, 7F, 00, 00, FE, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeStackTraceDataBase + 80 7C973759 22 Bytes [ 1F, 00, 00, FC, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlInitializeStackTraceDataBase + 97 7C973770 11 Bytes [ 00, 7F, 00, 00, FF, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringA + 18 7C9738C3 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringA + 1E 7C9738C9 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringA + 28 7C9738D3 165 Bytes [ 00, 00, 00, 00, 01, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringA + CE 7C973979 268 Bytes [ 00, 00, 02, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringA + 1DC 7C973A87 50 Bytes [ 01, 40, 40, 40, 04, 24, 37, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringExA + 49 7C973B20 44 Bytes [ 95, F1, FF, FF, 31, A3, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringExA + 76 7C973B4D 135 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4AddressToStringA + 18 7C973BD5 108 Bytes [ 00, 55, 03, 1F, 4F, 67, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4AddressToStringExA + 37 7C973C42 132 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringW + 18 7C973CC9 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringW + 1E 7C973CCF 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringW + 28 7C973CD9 50 Bytes [ 40, 40, 04, 1F, 5E, 83, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringW + 5B 7C973D0C 119 Bytes CALL C8973D0D .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringW + D3 7C973D84 135 Bytes JMP 7A6D3D79 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringExW + 27 7C973F40 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringExW + 2F 7C973F48 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringExW + 36 7C973F4F 31 Bytes [ 01, 40, 40, 40, 04, 2E, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringExW + 57 7C973F70 6 Bytes [ 20, D5, FF, FF, 01, CC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6AddressToStringExW + 5F 7C973F78 150 Bytes [ 11, D2, FF, FF, 2D, DB, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressA + 2 7C97400F 103 Bytes [ FF, 93, FD, FF, FF, 76, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressA + 6A 7C974077 12 Bytes [ FF, 01, CC, FF, FF, 15, D4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressA + 77 7C974084 84 Bytes [ 4B, E5, FF, FF, 66, EF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressA + CC 7C9740D9 56 Bytes [ 8A, B8, FF, 08, C6, F6, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressA + 105 7C974112 83 Bytes [ FF, FF, 8F, FC, FF, FF, 71, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressExA + 5B 7C974388 4 Bytes [ 22, D8, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressExA + 60 7C97438D 157 Bytes [ 80, AF, FF, 21, 51, 6E, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressExA + FE 7C97442B 27 Bytes [ 11, 2B, 2B, 39, 12, 36, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressExA + 11C 7C974449 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressExA + 14F 7C97447C 6 Bytes [ 33, DC, FF, FF, 18, D4 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4StringToAddressExA + 3F 7C9745A9 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4StringToAddressExA + 4C 7C9745B6 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4StringToAddressExA + 5E 7C9745C8 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4StringToAddressExA + 6C 7C9745D6 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv4StringToAddressExA + 79 7C9745E3 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressW + 29 7C97472C 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressW + 34 7C974737 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressW + 3E 7C974741 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressW + 46 7C974749 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressW + 4B 7C97474E 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressExW + 2A 7C974A2B 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressExW + 33 7C974A34 89 Bytes [ 00, 00, 00, 01, 33, 22, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressExW + 8E 7C974A8F 85 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressExW + E4 7C974AE5 105 Bytes [ 00, 00, 02, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlIpv6StringToAddressExW + 150 7C974B51 18 Bytes [ 00, 00, 00, 00, 00, 00, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerDivide + 34 7C974C98 94 Bytes [ 7C, F1, FF, FF, D5, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerDivide + 93 7C974CF7 7 Bytes [ FF, 5A, EA, FF, FF, 81, F7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerDivide + 9B 7C974CFF 38 Bytes [ FF, 94, FD, FF, FF, 73, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerDivide + C3 7C974D27 232 Bytes [ 02, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlLargeIntegerDivide + 1AC 7C974E10 79 Bytes [ 08, CF, FF, FF, 09, CF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRandom + 2 7C974EDC 14 Bytes [ 33, DD, FF, FF, 55, E8, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRandom + 11 7C974EEB 4 Bytes [ FF, 78, F4, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRandom + 16 7C974EF0 6 Bytes [ 4D, E6, FF, FF, 21, D8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRandom + 1E 7C974EF8 59 Bytes [ 02, CC, FF, FF, 18, CC, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlRandom + 5A 7C974F34 2 Bytes [ 12, D2 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseEnumerate + 2 7C975107 11 Bytes [ FF, 87, E7, FF, FF, 86, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseEnumerate + F 7C975114 38 Bytes [ 87, E7, FF, FF, 87, E7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseEnumerate + 36 7C97513B 67 Bytes [ FF, 86, E7, FF, FF, 87, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseEnumerate + 7B 7C975180 14 Bytes [ 86, E7, FF, FF, 86, E7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseCreate + 2 7C97518F 8 Bytes [ FF, 86, E7, FF, FF, 86, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseCreate + B 7C975198 19 Bytes [ 86, E7, FF, FF, 86, E7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseCreate + 1F 7C9751AC 6 Bytes CALL 641E51B0 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseCreate + 26 7C9751B3 70 Bytes [ FF, 86, E7, FF, FF, 87, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseCreate + 6D 7C9751FA 8 Bytes [ FF, FF, 87, E7, FF, FF, 87, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseDestroy + 15 7C975294 6 Bytes CALL 651F5298 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseDestroy + 1C 7C97529B 19 Bytes [ FF, 63, DE, FD, FF, 00, 8C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseDestroy + 32 7C9752B1 109 Bytes [ 00, 00, 00, 00, 8C, C5, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseValidate + 2 7C97531F 11 Bytes CALL 651F5323 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseValidate + F 7C97532C 46 Bytes [ 87, E7, FF, FF, 86, E7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseValidate + 3E 7C97535B 27 Bytes CALL 641F535F .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseFind + 11 7C975378 2 Bytes [ 87, E8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseFind + 14 7C97537B 6 Bytes [ FF, 87, E7, FF, FF, 87 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseFind + 1B 7C975382 17 Bytes CALL 651F5386 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseFind + 2D 7C975394 15 Bytes CALL 651F5398 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseFind + 3D 7C9753A4 15 Bytes [ 87, E7, FF, FF, 87, E8, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseAdd + D 7C975568 7 Bytes CALL 6620556C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseAdd + 15 7C975570 2 Bytes [ 88, E8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseAdd + 18 7C975573 2 Bytes [ FF, 88 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseAdd + 1B 7C975576 4 Bytes [ FF, FF, 88, E8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlTraceDatabaseAdd + 20 7C97557B 7 Bytes CALL 651F557F .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnhandledExceptionFilter2 + 1C 7C975789 11 Bytes [ EA, FF, FF, 8A, EA, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnhandledExceptionFilter2 + 28 7C975795 109 Bytes [ EA, FF, FF, 8A, EA, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnhandledExceptionFilter2 + 96 7C975803 27 Bytes [ FF, 89, EA, FF, FF, 89, EA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnhandledExceptionFilter2 + B2 7C97581F 19 Bytes [ FF, 89, EA, FF, FF, 89, EA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnhandledExceptionFilter2 + C6 7C975833 25 Bytes [ FF, 89, EA, FF, FF, 89, E9, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnhandledExceptionFilter + 11 7C976100 10 Bytes [ 66, CC, FF, FF, 52, CC, E6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnhandledExceptionFilter + 1C 7C97610B 15 Bytes [ 40, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnhandledExceptionFilter + 2D 7C97611C 27 Bytes [ 00, 95, 01, 20, 00, 93, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnhandledExceptionFilter + 49 7C976138 8 Bytes [ F2, FB, F6, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlUnhandledExceptionFilter + 53 7C976142 29 Bytes [ FF, FF, F2, FB, F5, FF, 4C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtCreateKey + 2 7C9761B5 26 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtCreateKey + 1D 7C9761D0 3 Bytes [ 0B, B3, 22 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtCreateKey + 21 7C9761D4 26 Bytes [ 00, 56, 03, FF, 00, 54, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtSetValueKey + F 7C9761EF 12 Bytes [ 00, 00, 00, 00, 00, 00, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtSetValueKey + 1C 7C9761FC 6 Bytes [ 9F, EC, FF, FF, 00, CC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtSetValueKey + 23 7C976203 19 Bytes [ FF, 18, D4, FF, FF, 3E, E1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtMakeTemporaryKey + B 7C976217 13 Bytes [ FF, 81, F7, FF, FF, 41, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtMakeTemporaryKey + 1B 7C976227 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtMakeTemporaryKey + 23 7C97622F 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtMakeTemporaryKey + 2F 7C97623B 103 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!RtlpNtMakeTemporaryKey + 99 7C9762A5 81 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!isgraph + 2D 7C97FCF9 807 Bytes [ 5C, 25, 49, 50, 53, 25, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_ultow + 4A 7C980021 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_ultow + 53 7C98002A 74 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_i64tow + 2 7C980075 27 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_i64tow + 1E 7C980091 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_i64tow + 24 7C980097 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_i64tow + 27 7C98009A 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_i64tow + 2E 7C9800A1 11 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_ui64tow + 2 7C9800AD 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_ui64tow + B 7C9800B6 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_ui64tow + E 7C9800B9 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_ui64tow + 11 7C9800BC 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_ui64tow + 18 7C9800C3 11 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_lfind + 2 7C9800CF 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_lfind + D 7C9800DA 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_lfind + 16 7C9800E3 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_lfind + 19 7C9800E6 33 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_memicmp + 2 7C980108 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_memicmp + 8 7C98010E 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_memicmp + B 7C980111 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_snprintf + 2 7C980118 21 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_snprintf + 18 7C98012E 23 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_snprintf + 30 7C980146 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_snprintf + 3A 7C980150 37 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_splitpath + 2 7C980176 55 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_splitpath + 3A 7C9801AE 35 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_splitpath + 5E 7C9801D2 39 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_splitpath + 86 7C9801FA 21 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_splitpath + 9C 7C980210 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_strlwr + 2 7C9802BE 44 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_strupr + 2 7C9802EB 44 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_tolower + 2 7C980318 17 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!tolower + 2 7C98032A 58 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_toupper + 2 7C980365 17 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_vsnwprintf + 2 7C980377 19 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_vsnwprintf + 16 7C98038B 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_vsnwprintf + 1B 7C980390 20 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_vsnwprintf + 30 7C9803A5 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_vsnwprintf + 34 7C9803A9 12 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wcsupr + 2 7C9803ED 107 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wtoi64 + 28 7C980459 39 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wtoi64 + 50 7C980481 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wtoi64 + 58 7C980489 13 Bytes [ FF, FF, FE, FE, FE, E8, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!_wtoi64 + 66 7C980497 56 Bytes [ D5, 95, 57, F2, B8, 75, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!fabs + 2 7C9804D0 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!fabs + C 7C9804DA 71 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!fabs + 54 7C980522 110 Bytes [ FF, 30, DA, FB, 35, D1, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!iswalpha + B 7C980591 30 Bytes [ 2B, D9, FF, 2B, D9, FF, 2C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!iswlower + F 7C9805B0 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!iswxdigit + 2 7C9805BB 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!iswxdigit + B 7C9805C4 104 Bytes [ FF, FF, FF, FF, FF, FF, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!sscanf + 2C 7C98062D 22 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!sscanf + 43 7C980644 250 Bytes [ FF, FF, FF, FF, FF, FD, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!sscanf + 13E 7C98073F 67 Bytes [ 3F, A1, 65, 36, 9E, 63, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!sscanf + 184 7C980785 79 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!sscanf + 1D4 7C9807D5 34 Bytes [ 2B, D8, FF, 2B, D9, FF, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strtol + 2 7C9807F8 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strtol + 8 7C9807FE 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strtol + B 7C980801 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strtol + E 7C980804 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strtol + 15 7C98080B 11 Bytes [ FF, FF, FF, 82, C0, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!strtoul + 2 7C980817 96 Bytes [ FF, FF, FF, FF, FF, FD, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!vsprintf + 30 7C980878 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!vsprintf + 3A 7C980882 48 Bytes [ 86, C5, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcspbrk + D 7C9808B3 61 Bytes [ 4B, D4, 93, 59, D7, 9F, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcsspn + 2 7C9808F1 106 Bytes [ FF, FF, FF, FF, FF, 8A, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcstombs + 1F 7C98095C 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcstombs + 26 7C980963 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcstombs + 2D 7C98096A 6 Bytes [ B6, D6, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcstombs + 34 7C980971 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ntdll.dll!wcstombs + 37 7C980974 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleMaximumWindowSize + FFF8240C 7C801621 14 Bytes [ 00, 69, 00, 20, 00, 6B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeviceIoControl + B 7C801630 7 Bytes [ 65, 00, 20, 00, 6E, 00, 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeviceIoControl + 13 7C801638 5 Bytes [ 63, 00, 68, 00, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeviceIoControl + 19 7C80163E 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeviceIoControl + 1B 7C801640 41 Bytes [ 65, 00, 6E, 00, 74, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeviceIoControl + 45 7C80166A 11 Bytes [ 0D, 00, 0A, 00, 00, 00, BC, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemTime + B 7C801776 17 Bytes [ 69, 00, 67, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemTime + 1D 7C801788 87 Bytes [ 74, 00, 6C, 00, 69, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemTime + 75 7C8017E0 57 Bytes [ 6C, 00, 6C, 00, 75, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadFile + C 7C80181A 15 Bytes [ 72, 00, 66, 00, 6F, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadFile + 1C 7C80182A 15 Bytes [ 69, 00, 63, 00, 68, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadFile + 2C 7C80183A 7 Bytes [ 73, 00, 63, 00, 68, 00, 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadFile + 34 7C801842 11 Bytes [ FC, 00, 73, 00, 73, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadFile + 40 7C80184E 15 Bytes [ 6E, 00, 67, 00, 73, 00, 74, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFileA + C 7C801A30 29 Bytes [ FC, 00, 73, 00, 73, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFileA + 2A 7C801A4E 61 Bytes [ 20, 00, 61, 00, 6E, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VirtualProtectEx + 2F 7C801A8C 3 Bytes [ 45, 00, 46 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VirtualProtectEx + 33 7C801A90 53 Bytes [ 53, 00, 2D, 00, 45, 00, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VirtualProtectEx + 69 7C801AC6 37 Bytes [ 65, 00, 67, 00, 65, 00, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VirtualProtect + 1C 7C801AEC 15 Bytes [ 63, 00, 68, 00, 72, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadLibraryExW + B 7C801AFC 25 Bytes [ 73, 00, 63, 00, 68, 00, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadLibraryExW + 25 7C801B16 7 Bytes [ 01, 00, 44, 00, 61, 00, 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadLibraryExW + 2D 7C801B1E 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadLibraryExW + 2F 7C801B20 25 Bytes [ 56, 00, 65, 00, 72, 00, 7A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadLibraryExW + 49 7C801B3A 27 Bytes [ 75, 00, 72, 00, 64, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadLibraryExA + D 7C801D5C 21 Bytes [ 6C, 00, FC, 00, 73, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadLibraryExA + 23 7C801D72 13 Bytes [ 6C, 00, 67, 00, 6F, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadLibraryA + 9 7C801D80 22 Bytes [ 6D, 00, 75, 00, 73, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadLibraryA + 20 7C801D97 2 Bytes [ 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadLibraryA + 23 7C801D9A 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadLibraryA + 25 7C801D9C 13 Bytes [ 69, 00, 6E, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadLibraryA + 33 7C801DAA 3 Bytes [ F6, 00, DF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TerminateProcess + 12 7C801E28 27 Bytes [ 6F, 00, 72, 00, 69, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TerminateProcess + 2E 7C801E44 21 Bytes [ 44, 00, 69, 00, 65, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStartupInfoW + A 7C801E5A 11 Bytes [ E4, 00, 67, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStartupInfoW + 16 7C801E66 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStartupInfoW + 18 7C801E68 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStartupInfoW + 1A 7C801E6A 3 Bytes [ 69, 00, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStartupInfoW + 1E 7C801E6E 1 Byte [ 69 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStartupInfoA + C 7C801EFA 3 Bytes [ 73, 00, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStartupInfoA + 10 7C801EFE 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStartupInfoA + 12 7C801F00 27 Bytes [ 44, 00, 61, 00, 74, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStartupInfoA + 2E 7C801F1C 9 Bytes [ 73, 00, 65, 00, 6C, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStartupInfoA + 38 7C801F26 193 Bytes [ 67, 00, 20, 00, 64, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadProcessMemory + 2D 7C8021F9 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadProcessMemory + 3A 7C802206 117 Bytes [ 00, 00, 00, 00, 00, 01, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteProcessMemory + 6F 7C80227E 118 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteProcessMemory + E7 7C8022F6 261 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SleepEx + 62 7C8023FE 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SleepEx + 67 7C802403 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SleepEx + 73 7C80240F 52 Bytes [ F3, C4, B2, A5, FF, CD, CB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Sleep + 2 7C802444 11 Bytes [ CD, CB, C7, FF, CD, CB, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Sleep + E 7C802450 11 Bytes [ CD, CB, C7, FF, CD, CB, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Sleep + 1A 7C80245C 172 Bytes [ CA, C1, B9, FF, 98, 37, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReleaseMutex + 64 7C80250B 28 Bytes [ 00, 90, 30, 00, 50, 9E, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForSingleObject + 8 7C802528 35 Bytes [ D8, EA, EF, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForSingleObjectEx + C 7C80254C 23 Bytes [ D8, EA, EF, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForSingleObjectEx + 24 7C802564 17 Bytes [ 6A, 28, 05, F4, 38, 1C, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForSingleObjectEx + 37 7C802577 21 Bytes [ 04, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForSingleObjectEx + 4D 7C80258D 34 Bytes [ 00, 00, 00, A0, 43, 14, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForSingleObjectEx + 70 7C8025B0 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTickCount + 21 7C8092BD 77 Bytes [ 77, 5D, 8B, 4D, F0, 8B, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTickCount + 6F 7C80930B 248 Bytes JMP 082C8612 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFileMappingW + 76 7C809404 27 Bytes [ 0B, 00, 74, 90, 46, 80, 3E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFileMappingW + 93 7C809421 38 Bytes [ 0F, 85, 01, 01, 00, 00, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFileMappingW + BB 7C809449 20 Bytes [ 0F, BE, 7D, 0F, 57, E8, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFileMappingA + 2 7C80945E 58 Bytes [ 85, C0, 59, 74, 36, 0F, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFileMappingA + 3D 7C809499 10 Bytes [ 66, 83, 7D, F8, 10, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFileMappingA + 48 7C8094A4 5 Bytes [ 57, E8, 0B, 2E, FD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFileMappingA + 4E 7C8094AA 22 Bytes [ 85, C0, 59, 0F, 84, E5, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFileMappingA + 66 7C8094C2 18 Bytes CALL 7C7DC2B4 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForMultipleObjectsEx + B 7C809535 12 Bytes [ 80, 3E, 00, 0F, 85, 5A, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForMultipleObjectsEx + 18 7C809542 57 Bytes [ 0F, 85, 50, FE, FF, FF, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForMultipleObjectsEx + 53 7C80957D 25 Bytes [ 39, 75, 10, 0F, 84, 53, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForMultipleObjectsEx + 6D 7C809597 16 Bytes [ 75, 0C, FF, 75, 08, E8, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForMultipleObjectsEx + 7E 7C8095A8 97 Bytes [ 00, 8B, 7D, 10, 8A, 07, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetWaitableTimer + 11 7C80960A 20 Bytes [ 85, C0, 59, 74, 38, 66, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetWaitableTimer + 26 7C80961F 111 Bytes [ 0C, 0F, B7, 55, 08, 0F, AF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetWaitableTimer + 96 7C80968F 12 Bytes [ 44, 31, 0A, 3D, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetWaitableTimer + A3 7C80969C 17 Bytes CALL 7C7DC2B3 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetWaitableTimer + B5 7C8096AE 80 Bytes [ 85, C0, 59, 74, 04, 6A, 61, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrentThreadId + 4 7C80972C 28 Bytes [ 8B, 45, F0, 2B, C2, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TlsGetValue + 9 7C809749 28 Bytes [ 66, 81, FE, 80, 00, 73, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!InterlockedIncrement 7C809766 239 Bytes [ 68, 80, 00, 00, 00, 56, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MulDiv + 90 7C809856 39 Bytes CALL 7C7CB6DD .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MulDiv + B8 7C80987E 132 Bytes CALL 7C7CB6DF .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrentThread + 18 7C809903 100 Bytes [ 8B, 4D, F8, 8B, 55, 10, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalFree + 39 7C809968 46 Bytes CALL 068D5DF0 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalAlloc + A 7C809997 91 Bytes [ 55, 10, 8D, 0C, 59, 88, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalAlloc + 66 7C8099F3 37 Bytes [ 00, C0, 5F, 5E, 5B, C9, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrlenW + 10 7C809A19 79 Bytes [ 39, 5D, 0C, 0F, 84, 31, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VirtualAlloc + 18 7C809A69 216 Bytes [ 00, 00, 47, 47, 33, F6, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VirtualFreeEx + 40 7C809B42 13 Bytes [ 74, 06, 66, 3D, 58, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CloseHandle + A 7C809B51 10 Bytes [ 03, F9, 33, F6, 66, 8B, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CloseHandle + 16 7C809B5D 3 Bytes [ CC, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CloseHandle + 1A 7C809B61 30 Bytes [ BB, FF, FF, 00, 00, 66, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CloseHandle + 39 7C809B80 13 Bytes [ B7, C6, 8D, 50, D0, 3B, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CloseHandle + 47 7C809B8E 11 Bytes [ AF, D1, 8D, 44, 02, D0, 3B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TlsSetValue + D 7C809BD2 65 Bytes CALL 7C7CB6DD .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MultiByteToWideChar + 1D 7C809C15 15 Bytes [ FC, 59, 59, 8D, 44, 30, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MultiByteToWideChar + 2D 7C809C25 48 Bytes [ 45, FC, 0F, 85, 39, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MultiByteToWideChar + 5E 7C809C56 17 Bytes [ 00, C0, 5F, 5E, 5B, C9, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MultiByteToWideChar + 70 7C809C68 190 Bytes [ EC, 53, 8B, 5D, 14, 56, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MultiByteToWideChar + 12F 7C809D27 49 Bytes [ 68, 80, C3, 98, 7C, E8, D4, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsBadReadPtr + 5F 7C809E60 47 Bytes [ 0D, 4C, C3, 98, 7C, FF, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsBadWritePtr + 17 7C809E90 102 Bytes [ 00, 00, 8B, 40, 30, 56, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!InitializeCriticalSection + 6 7C809EF7 37 Bytes [ FF, 7F, 33, D2, 8B, DF, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetUserDefaultLCID + D 7C809F1D 22 Bytes [ 01, 5E, 89, 19, 5B, 5D, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetUserDefaultLCID + 24 7C809F34 48 Bytes [ 75, 10, FF, 75, 0C, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetUserDefaultLCID + 55 7C809F65 58 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetUserDefaultLCID + 90 7C809FA0 431 Bytes [ 76, 17, 8B, 45, 10, 8B, 4A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WideCharToMultiByte + 7C 7C80A150 443 Bytes [ 49, 44, 5F, 44, 6F, 63, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WideCharToMultiByte + 238 7C80A30C 27 Bytes [ 6D, 65, 6E, 74, 0D, 0A, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WideCharToMultiByte + 254 7C80A328 216 Bytes [ 77, 6F, 72, 6B, 50, 6C, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CompareStringW + A3 7C80A401 520 Bytes [ 6C, 74, 49, 63, 6F, 6E, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsBadStringPtrW + 2E 7C80A60A 284 Bytes [ 77, 6F, 72, 6B, 50, 6C, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetQueuedCompletionStatus + A 7C80A727 417 Bytes [ 74, 65, 72, 25, 5C, 25, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLocalTime + F5 7C80A8C9 575 Bytes [ 74, 65, 72, 25, 5C, 73, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcmpW + 13D 7C80AB09 407 Bytes [ 43, 44, 42, 75, 72, 6E, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindResourceExW + 19 7C80ACA1 876 Bytes [ 6D, 65, 6E, 74, 73, 25, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVersionExW + 1A9 7C80B00E 27 Bytes [ FF, 83, 2D, 68, 40, A2, 71, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVersionExW + 1C5 7C80B02A 67 Bytes [ 35, 6C, 40, A2, 71, E9, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVersionExW + 209 7C80B06E 9 Bytes [ 20, 40, A2, 71, FF, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVersionExW + 213 7C80B078 180 Bytes [ 00, C3, 90, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVersionExW + 2C8 7C80B12D 38 Bytes [ 50, FF, 15, 04, 10, A1, 71, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDriveTypeW + 2D 7C80B2FD 22 Bytes [ 0F, 85, 72, C2, FF, FF, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDriveTypeW + 44 7C80B314 87 Bytes [ 85, 3B, C2, FF, FF, FF, B5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDriveTypeW + 9C 7C80B36C 18 Bytes CALL 7C81388B C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDriveTypeW + AF 7C80B37F 28 Bytes CALL 7C802AEE C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDriveTypeW + CC 7C80B39C 46 Bytes [ 75, 18, 6A, 17, FF, 75, FC, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleFileNameW + 12 7C80B3E7 4 Bytes [ 74, 07, 50, E8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleFileNameW + 17 7C80B3EC 115 Bytes [ 76, FF, FF, 59, 89, 75, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleFileNameW + 8B 7C80B460 112 Bytes CALL 7C80D777 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleFileNameA + 2 7C80B4D1 23 Bytes [ BF, 84, 48, A2, 71, 8B, F2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleFileNameA + 1A 7C80B4E9 8 Bytes [ 00, 00, 00, 0F, 83, 85, A6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleFileNameA + 23 7C80B4F2 25 Bytes [ 8B, B5, F8, FD, FF, FF, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleFileNameA + 3D 7C80B50C 98 Bytes [ F3, A5, 8B, CA, 83, E1, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleFileNameA + A0 7C80B56F 43 Bytes [ 75, 05, 6A, 57, 5F, EB, 09, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleA + C 7C80B6AD 11 Bytes [ FF, 8D, 85, 44, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleA + 18 7C80B6B9 39 Bytes [ FF, FF, 53, 6A, 02, E8, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleA + 40 7C80B6E1 73 Bytes [ 66, 89, 46, 02, 74, 04, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleA + 8A 7C80B72B 12 Bytes [ FF, 85, C0, 0F, 84, D3, C5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleA + 97 7C80B738 8 Bytes [ FF, FF, 8B, 50, 18, 8B, D9, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFileAttributesW + 1 7C80B74D 8 Bytes [ CB, 83, E1, 03, F3, A4, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFileAttributesW + A 7C80B756 25 Bytes [ 48, FF, FF, FF, 66, 89, 4A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFileAttributesW + 24 7C80B770 40 Bytes [ 6A, 00, 6A, 00, 6A, 41, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFileAttributesW + 4D 7C80B799 4 Bytes CALL 7C80D77A C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFileAttributesW + 52 7C80B79E 56 Bytes [ 8B, 8D, 40, FF, FF, FF, 8B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsDBCSLeadByte + 30 7C80B80C 35 Bytes JMP 7C804268 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!InitializeCriticalSectionAndSpinCount + 7 7C80B830 96 Bytes [ 15, 70, 11, A1, 71, 83, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrentDirectoryW + 1A 7C80B891 129 Bytes [ 00, 6A, 04, 8D, 45, E0, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MapViewOfFile + F 7C80B914 1 Byte [ E4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MapViewOfFile + 11 7C80B916 8 Bytes [ 15, D8, 10, A1, 71, E9, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MapViewOfFile + 1B 7C80B920 72 Bytes [ 90, 90, 90, 90, 90, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MapViewOfFile + 64 7C80B969 28 Bytes [ DB, FF, FF, 8B, C8, E8, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnmapViewOfFile + 13 7C80B987 74 Bytes [ 8B, 01, 8D, 55, F8, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VirtualQuery + 1 7C80B9D2 14 Bytes [ 01, 8D, 55, DC, 89, 45, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VirtualQuery + 10 7C80B9E1 24 Bytes [ 8B, 4D, DC, 8D, 45, DC, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcpynW + B 7C80B9FA 21 Bytes [ 39, 7D, 10, 0F, 85, 40, 98, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcpynW + 21 7C80BA10 14 Bytes [ 16, 8B, F0, 39, 4E, 34, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcpynW + 30 7C80BA1F 25 Bytes JMP 7C80525E C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcpynW + 4A 7C80BA39 33 Bytes CALL 7C80605F C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcpynW + 6C 7C80BA5B 25 Bytes [ B5, 84, FD, FF, FF, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcpyW + 11 7C80BA75 5 Bytes JMP 7C807C3F C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcpyW + 17 7C80BA7B 53 Bytes [ B5, 84, FD, FF, FF, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcmpi + 10 7C80BAB1 17 Bytes [ 15, 54, 11, A1, 71, 8D, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcmpi + 23 7C80BAC4 55 Bytes [ F3, A5, 8B, 7D, F4, 33, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenFileMappingW + 22 7C80BAFC 106 Bytes CALL 7C808B3D C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenFileMappingW + 8E 7C80BB68 67 Bytes [ FF, 15, B4, 11, A1, 71, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenFileMappingA + 36 7C80BBAC 64 Bytes CALL FB0ABBB0 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindResourceW + 1F 7C80BBED 84 Bytes [ FF, 83, 65, FC, 00, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindResourceW + 76 7C80BC44 22 Bytes [ 50, FF, 15, A0, 10, A1, 71, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindResourceW + 8E 7C80BC5C 40 Bytes [ C7, 85, D8, FC, FF, FF, 7B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SizeofResource + 1C 7C80BC85 19 Bytes JMP 7C808DF9 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SizeofResource + 30 7C80BC99 53 Bytes [ 8D, 85, D8, FC, FF, FF, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsBadCodePtr 7C80BCCF 42 Bytes [ 90, 90, 90, 90, 8B, 65, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsBadCodePtr + 2B 7C80BCFA 36 Bytes JMP 7C808DE7 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsBadCodePtr + 50 7C80BD1F 162 Bytes [ 98, FF, FF, BF, 47, 27, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrlen + C 7C80BDC2 46 Bytes [ 15, A4, 11, A1, 71, 83, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrlen + 3B 7C80BDF1 14 Bytes [ C7, 45, E4, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcpy 7C80BE01 53 Bytes [ 90, 90, 90, 33, C0, 40, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcpy + 36 7C80BE37 68 Bytes [ 44, D1, FF, FF, 6A, 01, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcpy + 7B 7C80BE7C 61 Bytes [ FF, 3D, 6D, 27, 00, 00, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindResourceA + 31 7C80BEBA 44 Bytes [ 90, 90, 90, 90, 90, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindResourceA + 5E 7C80BEE7 16 Bytes [ 8B, 4D, B8, 85, C9, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindResourceA + 6F 7C80BEF8 5 Bytes [ FF, E9, 5E, E3, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindResourceA + 75 7C80BEFE 23 Bytes [ C7, 45, FC, 02, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindResourceA + 8F 7C80BF18 36 Bytes CALL 7C7D0CA0 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemDefaultLCID 7C80BF3D 43 Bytes [ 90, 90, 90, 90, 8B, 65, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetUserDefaultLangID + 5 7C80BF69 58 Bytes [ 15, A4, 11, A1, 71, E9, B9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsBadHugeWritePtr + 7 7C80BFA4 2 Bytes [ 29, AE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsBadHugeWritePtr + B 7C80BFA8 6 Bytes [ 3B, C6, 0F, 8E, 98, A9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReleaseSemaphore + 2 7C80BFAF 9 Bytes [ FF, BB, 1E, 27, 00, 00, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReleaseSemaphore + C 7C80BFB9 55 Bytes JMP 7C806946 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStringTypeExW + 2 7C80BFF1 22 Bytes [ E0, FF, FF, FF, B5, B8, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStringTypeExW + 19 7C80C008 1 Byte [ 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStringTypeExW + 1B 7C80C00A 1 Byte [ 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStringTypeExW + 1D 7C80C00C 11 Bytes [ 72, 00, 65, 00, 5C, 00, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStringTypeExW + 29 7C80C018 7 Bytes [ 72, 00, 6F, 00, 73, 00, 6F ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExitThread + 10 7C80C068 1 Byte [ 78 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExitThread + 12 7C80C06A 41 Bytes [ 70, 00, 6C, 00, 6F, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExitThread + 3C 7C80C094 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExitThread + 3E 7C80C096 5 Bytes [ 46, 00, 61, 00, 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExitThread + 44 7C80C09C 5 Bytes [ 6C, 00, 65, 00, 64 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadPriority + 14 7C80C11C 33 Bytes [ 65, 00, 20, 00, 72, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadPriority + 36 7C80C13E 13 Bytes [ 65, 00, 74, 00, 50, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadPriority + 44 7C80C14C 5 Bytes [ 69, 00, 65, 00, 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadPriority + 4A 7C80C152 13 Bytes [ 3A, 00, 20, 00, 46, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadPriority + 58 7C80C160 9 Bytes [ 64, 00, 20, 00, 74, 00, 6F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeLibraryAndExitThread + 10 7C80C180 73 Bytes [ 72, 00, 65, 00, 67, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeLibraryAndExitThread + 5A 7C80C1CA 5 Bytes [ 65, 00, 67, 00, 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeLibraryAndExitThread + 60 7C80C1D0 41 Bytes [ 73, 00, 74, 00, 72, 00, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeLibraryAndExitThread + 8A 7C80C1FA 791 Bytes [ 65, 00, 72, 00, 72, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeLibraryAndExitThread + 3A2 7C80C512 107 Bytes [ 76, 8D, 85, 98, FD, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LCMapStringW + 16 7C80CCBE 3 Bytes [ 6E, 00, 67 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LCMapStringW + 1A 7C80CCC2 1 Byte [ 2E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LCMapStringW + 1D 7C80CCC5 4 Bytes [ 00, 90, 90, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LCMapStringW + 22 7C80CCCA 17 Bytes [ 72, 00, 6F, 00, 63, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LCMapStringW + 34 7C80CCDC 7 Bytes [ 52, 00, 65, 00, 67, 00, 69 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CompareStringA + 34 7C80D0AB 2 Bytes [ 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CompareStringA + 37 7C80D0AE 3 Bytes [ 90, 90, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CompareStringA + 3B 7C80D0B2 175 Bytes [ 55, 8B, EC, 83, EC, 54, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CompareStringA + EB 7C80D162 8 Bytes [ 8B, 5D, F0, 85, DB, 75, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CompareStringA + F4 7C80D16B 70 Bytes [ 74, 3C, 32, C0, 5F, 8B, 4D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLocaleInfoA + E 7C80D270 20 Bytes [ 33, C0, 2B, F0, 74, 15, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLocaleInfoA + 23 7C80D285 149 Bytes [ FF, FF, 75, EC, EB, 0C, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLocaleInfoA + B9 7C80D31B 70 Bytes [ 8B, 40, 30, 8B, 40, 18, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLocaleInfoA + 101 7C80D363 7 Bytes [ 8B, 45, E4, C7, 00, 00, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLocaleInfoA + 10A 7C80D36C 6 Bytes [ 83, 22, 00, 83, 7D, B8 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DuplicateHandle + C 7C80DE0A 3 Bytes [ B1, 78, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DuplicateHandle + 11 7C80DE0F 14 Bytes CALL 7C7B1425 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DuplicateHandle + 21 7C80DE1F 180 Bytes [ 89, 75, DC, 83, 7D, DC, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DuplicateHandle + D6 7C80DED4 17 Bytes CALL 064D2464 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DuplicateHandle + E8 7C80DEE6 10 Bytes [ 00, 00, 00, 8B, 45, D4, E8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleW + F 7C80E44C 15 Bytes [ C7, 69, 18, 00, CE, 72, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleW + 1F 7C80E45C 63 Bytes [ C8, 77, 29, 00, D7, 7D, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleW + 5F 7C80E49C 76 Bytes [ D8, 87, 36, 00, DF, 96, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleW + AC 7C80E4E9 11 Bytes [ B0, 44, 00, EA, A8, 58, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleW + B8 7C80E4F5 3 Bytes [ B6, 57, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SearchPathW + 20 7C80E6FC 88 Bytes [ FE, ED, DC, 00, FF, F0, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SearchPathW + 79 7C80E755 41 Bytes [ 42, 79, BD, 56, 39, 0C, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SearchPathW + A3 7C80E77F 170 Bytes [ 02, 02, 02, 02, 02, 02, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FileTimeToSystemTime + 3E 7C80E82A 84 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FileTimeToLocalFileTime + 1A 7C80E880 5 Bytes [ 01, 00, 20, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FileTimeToLocalFileTime + 20 7C80E886 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FileTimeToLocalFileTime + 23 7C80E889 40 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FileTimeToLocalFileTime + 4C 7C80E8B2 38 Bytes [ 00, 06, 00, 00, 00, 11, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMutexW + 22 7C80E8D9 35 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMutexW + 46 7C80E8FD 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMutexW + 48 7C80E8FF 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMutexW + 5C 7C80E913 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMutexW + 64 7C80E91B 2 Bytes [ 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMutexA + 15 7C80E954 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMutexA + 1E 7C80E95D 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMutexA + 2A 7C80E969 63 Bytes [ 00, 00, 00, 00, 00, 00, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenMutexW + 14 7C80E9A9 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenMutexW + 21 7C80E9B6 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenMutexW + 36 7C80E9CB 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenMutexW + 49 7C80E9DE 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenMutexW + 4D 7C80E9E2 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenMutexA + B 7C80EA26 52 Bytes [ 00, 00, 00, 00, 00, 00, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenMutexA + 40 7C80EA5B 18 Bytes [ 0C, 00, 00, 00, 03, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenMutexA + 53 7C80EA6E 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileExW + B 7C80EA88 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileExW + 2C 7C80EAA9 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileExW + 36 7C80EAB3 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileExW + 45 7C80EAC2 53 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileExW + 7B 7C80EAF8 88 Bytes [ 46, 33, 29, FF, 31, 31, 31, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindClose + 73 7C80EE4A 31 Bytes [ 00, 80, 00, 00, 00, 65, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindClose + 93 7C80EE6A 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindClose + B7 7C80EE8E 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindClose + C6 7C80EE9D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindClose + C8 7C80EE9F 76 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileW + B 7C80EEEC 3 Bytes [ 9D, 37, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileW + F 7C80EEF0 15 Bytes [ 9F, 39, 00, FF, 92, 38, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileW + 1F 7C80EF00 47 Bytes [ 3A, 33, 30, FF, 2B, 2B, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileW + 4F 7C80EF30 35 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextFileW + 1A 7C80EF54 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextFileW + 23 7C80EF5D 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextFileW + 41 7C80EF7B 24 Bytes [ FF, B3, 60, 33, FF, FF, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextFileW + 5A 7C80EF94 56 Bytes [ FF, DD, BB, FF, FF, DB, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextFileW + 93 7C80EFCD 47 Bytes [ 34, 29, FF, 31, 31, 31, FB, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentVariableW + 10 7C80F104 17 Bytes [ 65, 00, 63, 00, 6F, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentVariableW + 22 7C80F116 61 Bytes [ 65, 00, 73, 00, 20, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentVariableW + 60 7C80F154 3 Bytes [ 6F, 00, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentVariableW + 64 7C80F158 5 Bytes [ 64, 00, 20, 00, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentVariableW + 6A 7C80F15E 7 Bytes [ 69, 00, 6D, 00, 65, 00, 20 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCurrentDirectoryW + 2C 7C80F31A 3 Bytes [ 20, 00, 68 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCurrentDirectoryW + 30 7C80F31E 1 Byte [ 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCurrentDirectoryW + 32 7C80F320 1 Byte [ 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCurrentDirectoryW + 34 7C80F322 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCurrentDirectoryW + 36 7C80F324 1 Byte [ 61 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileStringW + 13 7C80F970 37 Bytes [ 73, 00, 20, 00, 6C, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileStringW + 39 7C80F996 7 Bytes [ 75, 00, 72, 00, 6E, 00, 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileStringW + 41 7C80F99E 7 Bytes [ 6E, 00, 67, 00, 20, 00, 4E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileStringW + 49 7C80F9A6 29 Bytes [ 55, 00, 4C, 00, 4C, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileStringW + 67 7C80F9C4 15 Bytes [ 64, 00, 3A, 00, 20, 00, 43, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeInformationW + 17 7C80F9FC 51 Bytes [ 72, 00, 72, 00, 6F, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeInformationW + 4B 7C80FA30 23 Bytes [ 6C, 00, 65, 00, 64, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeInformationW + 63 7C80FA48 5 Bytes [ 61, 00, 6C, 00, 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeInformationW + 69 7C80FA4E 9 Bytes [ 7A, 00, 65, 00, 20, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeInformationW + 73 7C80FA58 23 Bytes [ 73, 00, 74, 00, 65, 00, 6D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalFree + 3F 7C80FC6E 27 Bytes [ 69, 00, 64, 00, 53, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalFree + 5B 7C80FC8A 21 Bytes [ 6C, 00, 65, 00, 64, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalFree + 71 7C80FCA0 49 Bytes [ 79, 00, 20, 00, 53, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalFree + A3 7C80FCD2 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalFree + A9 7C80FCD8 47 Bytes [ 47, 00, 65, 00, 74, 00, 4F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalAlloc + 25 7C80FD52 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalAlloc + 27 7C80FD54 5 Bytes [ 74, 00, 4F, 00, 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalAlloc + 2D 7C80FD5A 1 Byte [ 64 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalAlloc + 2F 7C80FD5C 49 Bytes [ 53, 00, 69, 00, 64, 00, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalAlloc + 61 7C80FD8E 9 Bytes [ 72, 00, 79, 00, 20, 00, 73, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalUnlock + 22 7C80FEA4 96 Bytes [ 74, 5A, 57, 68, 18, 9F, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalUnlock + 83 7C80FF05 24 Bytes [ FF, FF, 15, B4, 13, 62, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalLock + 5 7C80FF1E 5 Bytes [ 15, 14, 12, 62, 76 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalLock + B 7C80FF24 55 Bytes [ B5, EC, FD, FF, FF, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalLock + 43 7C80FF5C 13 Bytes [ 67, 00, 3A, 00, 20, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalLock + 51 7C80FF6A 70 Bytes [ 6C, 00, 65, 00, 64, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalLock + 98 7C80FFB1 19 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetEnvironmentVariableW + D 7C8101CB 96 Bytes [ 8B, 8B, 8B, AD, AD, AD, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetEnvironmentVariableW + 6E 7C81022C 23 Bytes [ 8B, 8B, AD, AD, AD, AD, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetEnvironmentVariableW + 86 7C810244 729 Bytes [ 71, 71, 71, 71, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateRemoteThread + F2 7C81051E 35 Bytes [ 15, 15, 14, 14, 14, 66, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateRemoteThread + 116 7C810542 476 Bytes [ 14, 66, 66, 66, 66, 66, 86, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SwitchToFiber + AD 7C81071F 31 Bytes [ 55, 55, 55, 77, 77, 77, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SwitchToFiber + CD 7C81073F 431 Bytes [ 55, 55, 55, 77, 77, 77, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFileW + 18F 7C8108EF 154 Bytes [ A7, A7, A7, A7, A7, A7, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFileW + 22A 7C81098A 3 Bytes [ 8B, 8B, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFileW + 22E 7C81098E 92 Bytes [ AD, AD, AD, AD, AD, AD, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFileW + 28B 7C8109EB 30 Bytes [ 8B, 8B, 8B, AD, AD, AD, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFileSizeEx + 1 7C810A0A 2 Bytes [ 8B, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFileSizeEx + 4 7C810A0D 248 Bytes [ 8B, AD, AD, AD, AD, AD, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CompareFileTime + 2D 7C810B06 24 Bytes [ 77, 77, 96, 96, 96, 96, 96, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SystemTimeToFileTime + 3 7C810B1F 197 Bytes [ 55, 55, 55, 77, 77, 77, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFilePointer + 57 7C810BE5 248 Bytes [ 7C, 7C, 7C, 9C, 9C, 9C, 9C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFileInformationByHandle + 71 7C810CDE 299 Bytes [ 15, 15, 14, 14, 14, 66, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteFile + 83 7C810E0A 66 Bytes [ 8B, 8B, 8B, 8B, AD, AD, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteFile + C7 7C810E4E 409 Bytes [ B3, B3, B3, B3, B3, B3, B3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenConsoleW + 7 7C810FE8 56 Bytes [ 9C, 9C, 9C, 9C, 9C, 9C, BF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenConsoleW + 40 7C811021 80 Bytes JMP 7C8110B4 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenConsoleW + 91 7C811072 14 Bytes [ C0, 6A, 01, 8D, 8D, 30, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenConsoleW + A0 7C811081 77 Bytes [ 36, 8D, 8D, 30, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidCodePage + 4 7C8110CF 18 Bytes [ 45, C8, 3B, C7, 74, 06, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidCodePage + 17 7C8110E2 57 Bytes [ 89, 5D, B0, 8B, 76, 7C, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFileAttributesExW + 27 7C81111C 76 Bytes [ FF, 59, 59, 8B, 5D, DC, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFileAttributesExW + 74 7C811169 34 Bytes [ 99, DD, F9, FF, 53, E8, 93, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFileAttributesExW + 97 7C81118C 2 Bytes [ B9, 95 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFileAttributesExW + 9B 7C811190 77 Bytes CALL 7C80A748 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVersion + 4 7C8111DE 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVersion + 6 7C8111E0 7 Bytes [ 47, 00, 65, 00, 74, 00, 43 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVersion + E 7C8111E8 5 Bytes [ 6F, 00, 6D, 00, 70 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVersion + 14 7C8111EE 1 Byte [ 75 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVersion + 16 7C8111F0 15 Bytes [ 74, 00, 65, 00, 72, 00, 4E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DisableThreadLibraryCalls + 10 7C8112A6 15 Bytes [ 20, 00, 70, 00, 72, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DisableThreadLibraryCalls + 20 7C8112B6 15 Bytes [ 72, 00, 2E, 00, 00, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DisableThreadLibraryCalls + 30 7C8112C6 3 Bytes [ 65, 00, 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DisableThreadLibraryCalls + 34 7C8112CA 1 Byte [ 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DisableThreadLibraryCalls + 36 7C8112CC 1 Byte [ 74 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLocaleInfoW + A 7C81156C 59 Bytes [ 72, 00, 20, 00, 30, 00, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLocaleInfoW + 46 7C8115A8 23 Bytes [ 45, 00, 72, 00, 72, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLocaleInfoW + 5E 7C8115C0 11 Bytes [ 65, 00, 74, 00, 74, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLocaleInfoW + 6A 7C8115CC 13 Bytes [ 20, 00, 57, 00, 62, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLocaleInfoW + 78 7C8115DA 1 Byte [ 72 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalReAlloc + 1B 7C8123D4 9 Bytes [ 00, 00, 90, 90, 47, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalReAlloc + 25 7C8123DE 5 Bytes [ 55, 00, 73, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalReAlloc + 2B 7C8123E4 53 Bytes [ 72, 00, 4E, 00, 61, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalReAlloc + 61 7C81241A 25 Bytes [ 61, 00, 74, 00, 65, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalReAlloc + 7B 7C812434 47 Bytes [ 00, 00, 90, 90, 90, 90, 90, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FlushFileBuffers + 35 7C812676 17 Bytes [ 00, 85, C0, 7C, 43, 56, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FlushFileBuffers + 47 7C812688 85 Bytes [ 94, FF, FF, 8B, F0, 85, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DisconnectNamedPipe + 40 7C8126DF 1 Byte [ 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DisconnectNamedPipe + 42 7C8126E1 2 Bytes [ C6, A6 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DisconnectNamedPipe + 46 7C8126E5 4 Bytes [ 85, C0, 75, 0D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DisconnectNamedPipe + 4B 7C8126EA 25 Bytes CALL AFF78902 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PostQueuedCompletionStatus + 12 7C812704 153 Bytes CALL 7C7E4B73 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileAttributesA + 1C 7C81279E 3 Bytes [ 6E, 00, 4E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileAttributesA + 20 7C8127A2 43 Bytes [ 61, 00, 6D, 00, 65, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemDefaultLangID + 1C 7C8127CE 9 Bytes [ 73, 00, 6C, 00, 61, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemDefaultLangID + 26 7C8127D8 23 Bytes [ 20, 00, 69, 00, 6E, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemDefaultLangID + 3E 7C8127F0 71 Bytes [ 65, 00, 20, 00, 6E, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceExW + 35 7C812838 31 Bytes [ 47, 00, 65, 00, 74, 00, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceExW + 55 7C812858 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceExW + 57 7C81285A 15 Bytes [ 64, 00, 20, 00, 66, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceExW + 67 7C81286A 25 Bytes [ 34, 00, 20, 00, 73, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceExW + 81 7C812884 175 Bytes [ 77, 00, 69, 00, 74, 00, 68, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RaiseException + F 7C812A18 41 Bytes [ 6D, 00, 65, 00, 20, 00, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RaiseException + 39 7C812A42 83 Bytes [ 6C, 76, 89, 45, E4, 33, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RaiseException + 8E 7C812A97 3 Bytes [ 66, 02, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RaiseException + 92 7C812A9B 34 Bytes [ 89, 1E, 6A, 08, 59, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RaiseException + B5 7C812ABE 25 Bytes [ 45, E0, 39, 1D, 90, 02, 6C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVersionExA + 3A 7C812B18 9 Bytes [ 75, 0C, 50, FF, 15, 4C, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVersionExA + 44 7C812B22 58 Bytes CALL 7C811B3B C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVersionExA + 7F 7C812B5D 172 Bytes [ 15, 68, 13, 62, 76, 39, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!HeapCreate + 54 7C812C0A 81 Bytes [ 75, 10, 33, DB, 8B, 7D, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProcessVersion + 39 7C812C5C 52 Bytes JMP 7C812B96 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProcessVersion + 6E 7C812C91 1 Byte [ D7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProcessVersion + 70 7C812C93 75 Bytes [ 75, CC, FF, 36, FF, D7, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProcessVersion + BC 7C812CDF 42 Bytes [ 3E, 39, 7D, B4, 74, 09, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProcessVersion + E7 7C812D0A 19 Bytes CALL 7C7D0810 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemInfo + 44 7C812D9A 21 Bytes [ 62, 00, 6C, 00, 65, 00, 54, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TlsAlloc + 11 7C812DB0 7 Bytes [ 43, 00, 53, 00, 43, 00, 3A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TlsAlloc + 19 7C812DB8 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TlsAlloc + 1B 7C812DBA 10 Bytes [ 54, 00, 6F, 00, 6F, 00, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TlsAlloc + 26 7C812DC5 30 Bytes [ 00, 78, 00, 63, 00, 65, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TlsAlloc + 45 7C812DE4 9 Bytes [ 64, 00, 64, 00, 43, 00, 6F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateSemaphoreA + 15 7C812E32 7 Bytes [ 62, 00, 6C, 00, 65, 00, 54 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateSemaphoreA + 1D 7C812E3A 31 Bytes [ 6F, 00, 42, 00, 79, 00, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateSemaphoreA + 3D 7C812E5A 41 Bytes [ 64, 00, 20, 00, 4E, 00, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCPInfo + E 7C812E84 23 Bytes [ 43, 00, 53, 00, 43, 00, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCPInfo + 26 7C812E9C 12 Bytes [ 72, 00, 6F, 00, 72, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCPInfo + 33 7C812EA9 10 Bytes [ 00, 90, 90, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCPInfo + 3E 7C812EB4 21 Bytes [ 6C, 00, 65, 00, 54, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCPInfo + 54 7C812ECA 8 Bytes [ 53, 00, 43, 00, 3A, 00, 20, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentStringsW 7C812F08 3 Bytes [ 41, 00, 62 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentStringsW + 4 7C812F0C 1 Byte [ 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentStringsW + 6 7C812F0E 31 Bytes [ 65, 00, 54, 00, 6F, 00, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommandLineA + 11 7C812F2E 1 Byte [ 79 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommandLineA + 13 7C812F30 19 Bytes [ 20, 00, 74, 00, 6F, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStdHandle + B 7C812F44 87 Bytes [ 20, 00, 43, 00, 53, 00, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ProcessIdToSessionId + 13 7C812F9C 45 Bytes [ 15, 68, 13, 62, 76, 39, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ProcessIdToSessionId + 41 7C812FCA 12 Bytes [ 45, F8, 8D, 45, F0, 50, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ProcessIdToSessionId + 4F 7C812FD8 192 Bytes [ 75, 19, FF, 15, 68, 13, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsDebuggerPresent + 6 7C813099 70 Bytes [ 90, 90, 90, 6C, 64, 61, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsDebuggerPresent + 4D 7C8130E0 43 Bytes [ 6C, 64, 61, 70, 5F, 6D, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsDebuggerPresent + 79 7C81310C 104 Bytes [ 5F, 76, 61, 6C, 75, 65, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenEventW + 35 7C813175 101 Bytes [ 90, 90, 90, 6C, 64, 61, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenEventW + 9B 7C8131DB 44 Bytes [ 45, FC, 8B, 45, FC, C9, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenEventW + C8 7C813208 30 Bytes [ FE, FF, FF, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenEventA + 1B 7C813227 43 Bytes [ FE, FF, FF, 0F, 84, 24, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenEventA + 47 7C813253 75 Bytes [ 39, 3D, 90, 02, 6C, 76, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenEventA + 93 7C81329F 28 Bytes [ 00, 65, 00, 6E, 00, 73, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenEventA + B0 7C8132BC 31 Bytes [ 70, 00, 65, 00, 64, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenEventA + D0 7C8132DC 13 Bytes [ 78, 00, 25, 00, 78, 00, 2E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLongPathNameW + 42 7C813395 14 Bytes [ D6, 8B, 3D, C0, 13, 62, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLongPathNameW + 51 7C8133A4 27 Bytes [ D7, 8B, D8, 85, DB, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLongPathNameW + 6D 7C8133C0 69 Bytes [ D7, 85, C0, 89, 03, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLongPathNameW + B3 7C813406 114 Bytes [ 45, FC, 89, 7D, C0, 89, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLongPathNameW + 126 7C813479 31 Bytes [ 75, EC, FF, D6, 40, 40, 57, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TlsFree + 11 7C8136E8 119 Bytes [ 74, 00, 61, 00, 74, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TlsFree + 89 7C813760 5 Bytes [ 61, 00, 72, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TlsFree + 8F 7C813766 1 Byte [ 47 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TlsFree + 91 7C813768 51 Bytes [ 50, 00, 4F, 00, 4C, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TlsFree + C5 7C81379C 16 Bytes [ 65, 00, 20, 00, 73, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFileAttributesExA + 5 7C8137B6 100 Bytes [ 51, 53, 8B, 5D, 18, 56, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileA + 42 7C81381B 88 Bytes [ 01, 0F, 85, 76, 61, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileA + 9B 7C813874 9 Bytes [ 76, FC, 89, 45, 18, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileA + A6 7C81387F 1 Byte [ B4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileA + A8 7C813881 17 Bytes [ 62, 76, 8B, 4D, 10, 8B, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileA + BA 7C813893 16 Bytes [ 14, 8B, 13, 89, 44, 11, 04, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFullPathNameA + 2 7C8138FE 15 Bytes [ FF, 01, 00, 00, 00, 89, B5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFullPathNameA + 12 7C81390E 75 Bytes [ FF, 76, 20, 8D, 57, 08, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFullPathNameA + 5E 7C81395A 104 Bytes [ 02, 00, 56, 8D, 85, CC, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFullPathNameA + C7 7C8139C3 3 Bytes [ 85, B4, FD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFullPathNameA + CB 7C8139C7 119 Bytes [ FF, 50, 56, 56, 56, 56, 56, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeEnvironmentStringsW 7C814AE7 58 Bytes [ 90, 52, 00, 65, 00, 70, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentVariableA + 30 7C814B22 7 Bytes [ 6C, 00, 65, 00, 64, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentVariableA + 38 7C814B2A 7 Bytes [ 65, 00, 72, 00, 72, 00, 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentVariableA + 40 7C814B32 8 Bytes [ 72, 00, 20, 00, 25, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentVariableA + 4A 7C814B3C 13 Bytes [ 90, 90, 90, 90, 52, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentVariableA + 58 7C814B4A 1 Byte [ 74 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemDirectoryA + 6B 7C814F55 8 Bytes [ 6A, 01, 8D, 4D, E8, E8, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!NlsConvertIntegerToString + 2 7C814F5E 65 Bytes [ FF, 68, 70, 61, 66, 76, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!NlsConvertIntegerToString + 44 7C814FA0 23 Bytes [ EB, 09, 8B, 45, 08, C7, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!NlsConvertIntegerToString + 5C 7C814FB8 53 Bytes [ C3, 5F, 5E, 5B, C9, C2, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!NlsConvertIntegerToString + 92 7C814FEE 9 Bytes [ 6E, 00, 64, 00, 20, 00, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!NlsConvertIntegerToString + 9C 7C814FF8 3 Bytes [ 6D, 00, 70 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseUpdateAppcompatCache + 28 7C815148 15 Bytes [ 65, 00, 63, 00, 74, 00, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseUpdateAppcompatCache + 38 7C815158 17 Bytes [ 72, 00, 20, 00, 72, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseUpdateAppcompatCache + 4A 7C81516A 7 Bytes [ 64, 00, 20, 00, 30, 00, 78 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseUpdateAppcompatCache + 52 7C815172 55 Bytes [ 25, 00, 78, 00, 00, 00, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsWow64Process + 11 7C8151AA 73 Bytes [ FF, 76, 24, FF, B5, 74, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsWow64Process + 5B 7C8151F4 5 Bytes [ 0F, 84, 54, AE, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsWow64Process + 61 7C8151FA 11 Bytes [ 81, FF, 0A, 00, 00, 80, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsWow64Process + 6D 7C815206 5 Bytes [ 81, FF, FA, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsWow64Process + 73 7C81520C 5 Bytes [ 0F, 84, AF, AD, 01 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateActCtxW + 27 7C815483 34 Bytes [ 02, 0F, 85, 9C, 00, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateActCtxW + 4A 7C8154A6 111 Bytes [ C9, C2, 18, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateActCtxW + BA 7C815516 27 Bytes [ 69, 00, 63, 00, 79, 00, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateActCtxW + D6 7C815532 45 Bytes [ 00, 00, 90, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateActCtxW + 104 7C815560 185 Bytes [ 75, 18, FF, 75, 14, FF, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryActCtxW + 2 7C8162DD 58 Bytes [ 8D, 85, 44, FC, FF, FF, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryActCtxW + 3D 7C816318 193 Bytes [ FF, 50, 56, 68, 70, 2C, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryActCtxW + FF 7C8163DA 4 Bytes [ 45, 84, 50, 8D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryActCtxW + 104 7C8163DF 142 Bytes [ 44, FC, FF, FF, 50, 56, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryActCtxW + 193 7C81646E 23 Bytes [ 00, 00, FF, D7, 3B, C6, 0F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseInitAppcompatCache + C 7C8164D9 125 Bytes [ FF, 74, 12, FF, B5, 48, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseInitAppcompatCache + 8A 7C816557 42 Bytes CALL B53764AC .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseInitAppcompatCache + B5 7C816582 14 Bytes [ FF, FF, FF, 15, 18, 12, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseInitAppcompatCache + C5 7C816592 59 Bytes [ 83, F8, 02, 0F, 85, B7, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseInitAppcompatCache + 101 7C8165CE 6 Bytes [ FF, 0F, 85, B5, F1, 01 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseCheckAppcompatCache + 42 7C816819 18 Bytes JMP 7C811563 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseCheckAppcompatCache + 55 7C81682C 30 Bytes JMP 7C81E5E6 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseCheckAppcompatCache + 75 7C81684C 353 Bytes JMP 7C83459E C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseCheckAppcompatCache + 1D7 7C8169AE 38 Bytes [ EC, 10, A1, B4, 03, 6C, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseCheckAppcompatCache + 1FE 7C8169D5 57 Bytes [ 5D, F0, 0F, 84, 94, 4D, 02, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterWaitForInputIdle + 6C 7C816FFA 1 Byte [ 79 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterWaitForInputIdle + 6E 7C816FFC 35 Bytes [ 20, 00, 6D, 00, FB, 91, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterWaitForInputIdle + 92 7C817020 9 Bytes [ 00, 8B, 4E, 60, 89, 88, 94, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterWaitForInputIdle + 9C 7C81702A 122 Bytes [ 8B, 4E, 64, 89, 88, 98, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterWaitForInputIdle + 117 7C8170A5 129 Bytes [ FF, 57, 50, FF, 75, 10, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseProcessInitPostImport + 15 7C817458 3 Bytes [ 7A, 69, 44 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseProcessInitPostImport + 19 7C81745C 155 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseProcessInitPostImport + B5 7C8174F8 16 Bytes [ 50, 50, 50, 50, 68, 98, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseProcessInitPostImport + C6 7C817509 128 Bytes CALL 7C7DA03F .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseProcessInitPostImport + 147 7C81758A 11 Bytes CALL 7C7DA03F .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNlsSectionName + 1A 7C817F97 18 Bytes CALL 7C817F29 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNlsSectionName + 2E 7C817FAB 4 Bytes CALL 7C817F2A C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNlsSectionName + 33 7C817FB0 93 Bytes [ FF, 3B, C7, 0F, 85, CE, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNlsSectionName + 91 7C81800E 260 Bytes [ 57, 53, 41, 43, 6C, 6F, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNlsSectionName + 196 7C818113 62 Bytes [ 57, 53, 41, 47, 65, 74, 53, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateProcessInternalW + 9E 7C8195B1 338 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateProcessInternalW + 1F1 7C819704 84 Bytes [ 26, B8, 04, 00, 36, B8, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateProcessInternalW + 246 7C819759 26 Bytes [ B9, 04, 00, A6, B9, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateProcessInternalW + 261 7C819774 11 Bytes [ 1E, BA, 04, 00, 2A, BA, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateProcessInternalW + 26D 7C819780 15 Bytes [ 50, BA, 04, 00, 6E, BA, 04, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BasepCheckWinSaferRestrictions + B 7C819810 12 Bytes [ 1E, BD, 04, 00, 34, BD, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BasepCheckWinSaferRestrictions + 18 7C81981D 154 Bytes [ BD, 04, 00, 62, BD, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BasepCheckWinSaferRestrictions + B3 7C8198B8 75 Bytes [ 0A, BF, 04, 00, 14, BF, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BasepCheckWinSaferRestrictions + FF 7C819904 7 Bytes [ 56, C0, 04, 00, 6E, C0, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BasepCheckWinSaferRestrictions + 107 7C81990C 23 Bytes [ 7E, C0, 04, 00, 8C, C0, 04, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetExitCodeProcess + 13 7C81AE2A 1 Byte [ 25 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetExitCodeProcess + 15 7C81AE2C 31 Bytes [ 64, 00, 00, 00, 47, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetExitCodeProcess + 35 7C81AE4C 27 Bytes [ 61, 00, 69, 00, 6C, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetExitCodeProcess + 51 7C81AE68 15 Bytes [ 61, 00, 6C, 00, 69, 00, 7A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetExitCodeProcess + 61 7C81AE78 13 Bytes [ 73, 00, 74, 00, 65, 00, 6D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VerifyConsoleIoHandle + A 7C81AEB4 57 Bytes [ A1, B4, 03, 6C, 76, 53, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VerifyConsoleIoHandle + 44 7C81AEEE 1 Byte [ E8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VerifyConsoleIoHandle + 46 7C81AEF0 26 Bytes [ FC, FF, FF, 3B, C7, 89, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VerifyConsoleIoHandle + 61 7C81AF0B 114 Bytes [ B5, D4, FD, FF, FF, 8B, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleMode + 6A 7C81AF7E 55 Bytes [ FF, 50, 57, 8D, 85, D8, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleMode + A2 7C81AFB6 84 Bytes [ B5, E0, FD, FF, FF, 6A, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleMode + F7 7C81B00B 22 Bytes [ F8, 85, FF, 74, 0D, 8D, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleMode + 10E 7C81B022 26 Bytes CALL 7C835FA4 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleMode + 12A 7C81B03E 16 Bytes CALL 7C835F10 C:\WINDOWS\system32\kernel32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleOutputCP + 2 7C81B191 70 Bytes CALL D481B193 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleOutputCP + 49 7C81B1D8 55 Bytes JMP 7C7F0E4D .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleMode + 20 7C81B210 30 Bytes JMP 7C80D242 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleMode + 3F 7C81B22F 12 Bytes [ B5, CC, FB, FF, FF, FF, B5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleMode + 4C 7C81B23C 18 Bytes [ 75, 1C, FF, 75, 18, FF, B5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleMode + 5F 7C81B24F 27 Bytes [ FF, 56, FF, 15, 4C, 10, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadUILanguage + 13 7C81B26B 47 Bytes [ 2E, 86, 01, 00, 8B, C6, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadUILanguage + 43 7C81B29B 17 Bytes JMP 7C80B2FE C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadUILanguage + 55 7C81B2AD 17 Bytes [ FF, B5, EC, FD, FF, FF, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadUILanguage + 68 7C81B2C0 36 Bytes CALL 7C83389B C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadUILanguage + 8D 7C81B2E5 148 Bytes [ FF, 75, 0C, 56, FF, 15, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleInputExeNameW + 25 7C81B37A 33 Bytes [ 7E, 01, 48, 8D, 8D, E4, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleInputExeNameW + 47 7C81B39C 20 Bytes CALL 6581B39E .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleInputExeNameW + 5C 7C81B3B1 50 Bytes [ 15, A8, 10, F4, 77, 8D, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleInputExeNameW + 8F 7C81B3E4 19 Bytes [ FF, 15, AC, 10, F4, 77, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleInputExeNameW + A3 7C81B3F8 5 Bytes [ C6, E9, 76, 31, FD ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCtrlHandler + 24 7C81B5AF 4 Bytes [ 83, BD, EC, FD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCtrlHandler + 29 7C81B5B4 52 Bytes [ FF, 00, 74, 0C, 8B, 45, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCtrlHandler + 5E 7C81B5E9 19 Bytes [ 8D, 8D, D4, FB, FF, FF, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCtrlHandler + 72 7C81B5FD 98 Bytes [ 76, 20, 8D, 8D, D4, FB, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCtrlHandler + D5 7C81B660 8 Bytes [ 66, 8B, C6, 5F, E9, 1B, 95, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleTitleW + 1B 7C81BA57 21 Bytes [ F8, FF, FF, FF, 15, 34, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleTitleW + 31 7C81BA6D 33 Bytes [ 8D, 8D, D0, FA, FF, FF, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleTitleW + 53 7C81BA8F 22 Bytes JMP 7C7F563A .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleTitleW + 6A 7C81BAA6 12 Bytes CALL 7C835EC3 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleTitleW + 77 7C81BAB3 5 Bytes CALL 7C835EC4 C:\WINDOWS\system32\kernel32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadLocale + 2 7C81BBBC 205 Bytes [ FF, FF, 37, 8D, 8D, E4, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleScreenBufferInfo + 60 7C81BC8B 11 Bytes CALL 7C835FA5 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleScreenBufferInfo + 6C 7C81BC97 159 Bytes [ 81, E7, FF, 00, 00, 00, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleScreenBufferInfo + 10C 7C81BD37 42 Bytes CALL 7C835F0F C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleScreenBufferInfo + 137 7C81BD62 12 Bytes CALL 7C833B08 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleScreenBufferInfo + 144 7C81BD6F 6 Bytes CALL 7C835FA4 C:\WINDOWS\system32\kernel32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidLocale + B 7C81C496 11 Bytes [ 6E, 00, 20, 00, 56, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidLocale + 17 7C81C4A2 33 Bytes [ 61, 00, 6E, 00, 67, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidLocale + 39 7C81C4C4 5 Bytes [ 6E, 00, 2E, 00, 0D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidLocale + 3F 7C81C4CA 21 Bytes [ 0A, 00, 00, 00, 00, 00, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidLocale + 55 7C81C4E0 15 Bytes [ 43, 00, 2D, 00, 50, 00, 69, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TerminateThread + 9 7C81CE0C 5 Bytes [ 65, 00, 69, 00, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TerminateThread + F 7C81CE12 19 Bytes [ 67, 00, 65, 00, 73, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TerminateThread + 23 7C81CE26 14 Bytes [ 20, 00, 69, 00, 73, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TerminateThread + 34 7C81CE37 28 Bytes [ 00, 0C, 01, 01, 00, 44, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TerminateThread + 51 7C81CE54 53 Bytes [ 67, 00, 20, 00, 64, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleA + 7 7C81CF2C 20 Bytes [ 74, 00, 20, 00, 77, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleA + 1C 7C81CF41 40 Bytes [ 00, 00, 00, 48, 01, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentStrings + F 7C81CF6A 1 Byte [ 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentStrings + 11 7C81CF6C 15 Bytes [ 72, 00, 64, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentStrings + 21 7C81CF7C 11 Bytes [ 65, 00, 6E, 00, 20, 00, 5A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentStrings + 2D 7C81CF88 5 Bytes [ 74, 00, 20, 00, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetEnvironmentStrings + 33 7C81CF8E 1 Byte [ 75 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileApisToOEM + 6F 7C81D0ED 291 Bytes [ B7, 65, 76, C7, 46, 04, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileApisToOEM + 193 7C81D211 134 Bytes [ FF, 51, 08, B8, 0E, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileApisToOEM + 21A 7C81D298 116 Bytes [ F6, FF, 59, 59, 8B, 3D, A0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileApisToOEM + 290 7C81D30E 51 Bytes CALL 7C795F88 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileApisToOEM + 2C4 7C81D342 180 Bytes [ 06, 8B, 08, 50, FF, 51, 08, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetStdHandle + 9 7C81DC0C 1 Byte [ 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetStdHandle + B 7C81DC0E 85 Bytes [ 6C, 00, 6C, 00, 6F, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetStdHandle + 61 7C81DC64 13 Bytes [ 65, 00, 61, 00, 74, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetStdHandle + 6F 7C81DC72 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetStdHandle + 71 7C81DC74 19 Bytes [ 61, 00, 6E, 00, 63, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CloseConsoleHandle + A 7C81DC88 13 Bytes [ 61, 00, 69, 00, 6C, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CloseConsoleHandle + 18 7C81DC96 27 Bytes [ 68, 00, 72, 00, 3D, 00, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CloseConsoleHandle + 34 7C81DCB2 19 Bytes [ 72, 00, 61, 00, 74, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CloseConsoleHandle + 48 7C81DCC6 5 Bytes [ 6D, 00, 65, 00, 53 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CloseConsoleHandle + 4E 7C81DCCC 57 Bytes [ 70, 00, 61, 00, 63, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DuplicateConsoleHandle + 9 7C81DD56 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DuplicateConsoleHandle + B 7C81DD58 55 Bytes [ 6F, 00, 20, 00, 61, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DuplicateConsoleHandle + 43 7C81DD90 22 Bytes [ 56, FF, 15, F8, 12, 62, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DuplicateConsoleHandle + 5B 7C81DDA8 18 Bytes [ 33, C0, EB, 02, 8B, 06, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DuplicateConsoleHandle + 6E 7C81DDBB 6 Bytes [ 55, 8B, EC, 81, EC, E8 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateProcessInternalA + 22 7C81DDF8 3 Bytes [ 81, 70, F6 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateProcessInternalA + 26 7C81DDFC 6 Bytes [ 8B, 5D, 08, 80, 7B, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateProcessInternalA + 2D 7C81DE03 160 Bytes [ 75, 0D, BE, 0E, 00, 07, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateProcessInternalA + CE 7C81DEA4 2 Bytes [ 8D, 7C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateProcessInternalA + D2 7C81DEA8 13 Bytes [ FF, 51, 6A, 00, 6A, 00, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeEnvironmentStringsA + A 7C81DF81 33 Bytes CALL 7C7892CC .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeEnvironmentStringsA + 2C 7C81DFA3 5 Bytes [ D7, 8B, D8, 81, E3 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeEnvironmentStringsA + 32 7C81DFA9 5 Bytes [ FF, 00, 00, 81, CB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeEnvironmentStringsA + 39 7C81DFB0 45 Bytes [ 07, 80, FF, D7, 50, 68, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeEnvironmentStringsA + 67 7C81DFDE 31 Bytes [ 15, E4, 12, 62, 76, 8B, 45, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreatePipe + B 7C81E0D2 50 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreatePipe + 3E 7C81E105 8 Bytes [ 00, 00, 3B, 00, 00, 00, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreatePipe + 47 7C81E10E 2 Bytes [ 00, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreatePipe + 4A 7C81E111 3 Bytes [ 00, 00, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreatePipe + 50 7C81E117 60 Bytes [ 8F, 00, 00, 00, 8F, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileSectionW + 17 7C81EDD4 25 Bytes [ 5D, 37, 37, FF, 5D, 37, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileSectionW + 31 7C81EDEE 16 Bytes [ 00, 2F, 00, 00, 00, 2F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileSectionW + 43 7C81EE00 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileSectionW + 4E 7C81EE0B 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileSectionW + 61 7C81EE1E 21 Bytes [ 00, 00, 00, 00, 00, 00, C6, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStringW + 1D 7C81EE69 16 Bytes [ 00, 00, 8F, 00, 00, 00, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStringW + 2E 7C81EE7A 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStringW + 35 7C81EE81 82 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStringW + 88 7C81EED4 28 Bytes [ 5D, 37, 37, FF, 5D, 37, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStringW + A5 7C81EEF1 21 Bytes [ 00, 00, 23, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TermsrvAppInstallMode + 1D 7C81EFEB 1 Byte [ 23 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TermsrvAppInstallMode + 1F 7C81EFED 7 Bytes [ 00, 00, 0B, 00, 00, 00, 0B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TermsrvAppInstallMode + 28 7C81EFF6 333 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TermsrvAppInstallMode + 176 7C81F144 345 Bytes [ 40, 40, 40, 40, 40, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetShortPathNameW + 30 7C81F29E 161 Bytes [ 44, 44, 44, 44, 44, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetShortPathNameW + D2 7C81F340 114 Bytes [ 40, 44, 44, 44, 44, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetShortPathNameW + 145 7C81F3B3 722 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetShortPathNameW + 418 7C81F686 56 Bytes [ 44, 44, 44, 44, 44, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetShortPathNameW + 451 7C81F6BF 155 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileWithProgressW + 2D 7C81F75B 118 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileWithProgressW + A4 7C81F7D2 122 Bytes [ 40, 44, 44, 44, 44, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileWithProgressW + 11F 7C81F84D 77 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileWithProgressW + 16D 7C81F89B 209 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileWithProgressW + 23F 7C81F96D 389 Bytes [ 40, 40, 40, 40, 40, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalMemoryStatusEx + 161 7C81FAF3 416 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeNameForVolumeMountPointW + 10C 7C81FC94 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeNameForVolumeMountPointW + 114 7C81FC9C 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeNameForVolumeMountPointW + 11A 7C81FCA2 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeNameForVolumeMountPointW + 124 7C81FCAC 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeNameForVolumeMountPointW + 129 7C81FCB1 58 Bytes [ F0, 40, 40, 40, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleExW + 2B 7C81FCEC 20 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleExW + 40 7C81FD01 73 Bytes [ FF, FF, FF, FF, F4, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleExW + 8B 7C81FD4C 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleExW + 91 7C81FD52 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleExW + 97 7C81FD58 67 Bytes [ FF, F0, 40, 40, 40, 40, 40, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PrivCopyFileExW + 69 7C8200C8 188 Bytes [ 00, 89, 75, EC, 81, 65, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PrivCopyFileExW + 126 7C820185 51 Bytes [ 45, 08, 0F, 84, 5B, BD, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PrivCopyFileExW + 15A 7C8201B9 17 Bytes [ 00, C0, 89, 45, 08, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PrivCopyFileExW + 16D 7C8201CC 32 Bytes [ F6, 43, 04, 40, 0F, 85, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PrivCopyFileExW + 18E 7C8201ED 81 Bytes [ 8B, FF, 55, 8B, EC, 83, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComputerNameExW + 4E 7C82023F 20 Bytes [ C0, 0F, 84, 04, 1C, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComputerNameExW + 63 7C820254 132 Bytes [ E0, F8, 8D, 51, 02, 2B, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComputerNameExW + E8 7C8202D9 74 Bytes [ 75, FC, FF, 75, F8, FF, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComputerNameExW + 133 7C820324 8 Bytes [ 75, FC, 56, 6A, 00, E8, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComputerNameExW + 13C 7C82032D 76 Bytes [ FF, 8B, 45, 08, 5F, 5E, C9, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNamesForVolumeNameW + C 7C820D20 36 Bytes [ 83, C4, 1C, 38, 1D, 21, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNamesForVolumeNameW + 31 7C820D45 33 Bytes [ FF, B0, B8, 00, 00, 00, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNamesForVolumeNameW + 53 7C820D67 98 Bytes [ 5F, 33, C0, 5E, 40, 5B, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNamesForVolumeNameW + B6 7C820DCA 96 Bytes [ 74, 20, 72, 65, 63, 6F, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNamesForVolumeNameW + 118 7C820E2C 7 Bytes [ 80, F9, 05, 0F, 84, D5, 44 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeleteTimerQueueTimer + 1E 7C82114E 64 Bytes [ 65, 75, 65, 43, 61, 6C, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateTimerQueueTimer + 12 7C82118F 393 Bytes [ 65, 75, 65, 43, 6F, 70, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemWindowsDirectoryA + 28 7C821319 73 Bytes [ 6F, 57, 00, 53, 65, 74, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetWindowsDirectoryA 7C821363 55 Bytes [ 90, 53, 65, 74, 75, 70, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetWindowsDirectoryA + 38 7C82139B 5 Bytes [ 46, 69, 65, 6C, 64 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetWindowsDirectoryA + 3E 7C8213A1 284 Bytes [ 90, 90, 90, 53, 65, 74, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProfileStringA + 29 7C8214BE 33 Bytes [ 90, 90, 53, 65, 74, 75, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProfileStringA + 4B 7C8214E0 29 Bytes [ 53, 65, 74, 75, 70, 44, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDriveTypeA + 1B 7C8214FE 150 Bytes [ 90, 90, 53, 65, 74, 75, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDriveTypeA + B2 7C821595 23 Bytes [ 90, 90, 90, 53, 65, 74, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDriveTypeA + CA 7C8215AD 6 Bytes [ 90, 90, 90, 53, 65, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDriveTypeA + D1 7C8215B4 149 Bytes [ 70, 44, 69, 47, 65, 74, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDriveTypeA + 167 7C82164A 98 Bytes [ 74, 75, 70, 44, 69, 47, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComputerNameA + 9 7C8216AD 286 Bytes [ 65, 74, 75, 70, 44, 69, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateDirectoryA + 20 7C8217CC 152 Bytes [ 53, 65, 74, 75, 70, 44, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SearchPathA + 7B 7C821865 101 Bytes [ 44, 69, 43, 72, 65, 61, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SearchPathA + E1 7C8218CB 55 Bytes [ 90, 53, 65, 74, 75, 70, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SearchPathA + 119 7C821903 68 Bytes [ 90, 53, 65, 74, 75, 70, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SearchPathA + 15E 7C821948 5 Bytes [ 49, 6E, 66, 57, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SearchPathA + 166 7C821950 37 Bytes [ 53, 65, 74, 75, 70, 43, 6F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenFile + 138 7C821ABA 342 Bytes [ 5F, 47, 65, 74, 5F, 44, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeInformationA + 6E 7C821C13 57 Bytes [ 00, 04, 82, F7, 77, E0, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeInformationA + A8 7C821C4D 36 Bytes [ 00, 00, 00, C4, 81, F7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeInformationA + CD 7C821C72 71 Bytes [ 00, 00, A8, 81, F7, 77, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeInformationA + 117 7C821CBC 28 Bytes [ 60, 81, F7, 77, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeInformationA + 134 7C821CD9 51 Bytes [ 85, F7, 77, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryDosDeviceW + 5 7C821D92 217 Bytes [ 00, 00, 74, 80, F7, 77, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryDosDeviceW + DF 7C821E6C 100 Bytes [ 94, 7F, F7, 77, 40, 84, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryDosDeviceW + 145 7C821ED2 27 Bytes [ 00, 00, 00, 84, F7, 77, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryDosDeviceW + 163 7C821EF0 4 Bytes [ 00, 7F, F7, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryDosDeviceW + 16B 7C821EF8 48 Bytes CALL 6CFA1680 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DefineDosDeviceW + B 7C821F29 36 Bytes [ 00, 00, 00, BC, 7E, F7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DefineDosDeviceW + 31 7C821F4F 94 Bytes [ 00, 94, 7E, F7, 77, A8, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DefineDosDeviceW + 92 7C821FB0 87 Bytes [ DC, 67, F7, 77, 68, 83, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DefineDosDeviceW + EA 7C822008 9 Bytes [ FF, 00, 0F, 84, F5, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DefineDosDeviceW + F4 7C822012 2 Bytes [ 6D, FE ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommTimeouts + 5D 7C822185 3 Bytes [ 03, FC, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommTimeouts + 61 7C822189 148 Bytes [ 8B, D8, 89, 9D, 68, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommTimeouts + F6 7C82221E 319 Bytes [ FE, FF, FF, 85, C0, 74, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommTimeouts + 236 7C82235E 119 Bytes [ 45, FA, FF, FF, 83, BD, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommTimeouts + 2AE 7C8223D6 105 Bytes [ FE, FF, FF, 8B, 9D, 68, FE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeResource + 172 7C826234 105 Bytes [ 90, 8B, FF, 55, 8B, EC, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeResource + 1DC 7C82629E 20 Bytes [ FF, 75, 10, FF, 75, 08, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeResource + 1F1 7C8262B3 82 Bytes [ 8B, FF, 55, 8B, EC, 83, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeResource + 244 7C826306 43 Bytes [ 0C, FF, 15, A8, 10, FC, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeResource + 270 7C826332 139 Bytes [ 10, FC, 77, 8B, 35, 78, E0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CopyFileExW + 5A 7C827B8C 18 Bytes [ 75, 14, FF, 75, 0C, E8, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CopyFileExW + 6D 7C827B9F 39 Bytes [ 8B, 4F, 0C, 89, 48, 04, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CopyFileExW + 95 7C827BC7 23 Bytes [ 5E, 5F, C9, C2, 10, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CopyFileExW + AD 7C827BDF 42 Bytes CALL 7C8293A4 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CopyFileExW + D8 7C827C0A 79 Bytes [ 17, 00, 00, C0, EB, 63, 53, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CopyFileA + B 7C8286F9 86 Bytes [ 2A, 01, 00, 26, 2A, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CopyFileA + 62 7C828750 70 Bytes [ 1C, 2C, 01, 00, 2C, 2C, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CopyFileA + AA 7C828798 100 Bytes [ 52, 2D, 01, 00, 6E, 2D, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CopyFileA + 10F 7C8287FD 62 Bytes [ 2F, 01, 00, 1C, 2F, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CopyFileA + 14E 7C82883C 75 Bytes [ 58, 30, 01, 00, 6E, 30, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumUILanguagesW + 28 7C82A904 35 Bytes [ 6E, 00, 67, 00, 53, 00, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumUILanguagesW + 4C 7C82A928 17 Bytes [ 20, 00, 47, 00, 65, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumUILanguagesW + 5E 7C82A93A 27 Bytes [ 65, 00, 63, 00, 75, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumUILanguagesW + 7A 7C82A956 15 Bytes [ 20, 00, 77, 00, 69, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumUILanguagesW + 8A 7C82A966 25 Bytes [ 00, 00, 43, 00, 68, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateNlsSecurityDescriptor + 17 7C82AC83 93 Bytes [ F4, 04, 00, 00, 00, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateNlsSecurityDescriptor + 75 7C82ACE1 53 Bytes [ 83, C4, 0C, 3B, F7, 7E, 7A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateNlsSecurityDescriptor + AB 7C82AD17 83 Bytes [ F0, 3B, F7, 74, 10, 39, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateNlsSecurityDescriptor + FF 7C82AD6B 64 Bytes [ 90, 90, 90, 90, 90, 43, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenDataFile + 14 7C82ADAC 39 Bytes [ 6F, 00, 6E, 00, 21, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenDataFile + 3C 7C82ADD4 9 Bytes [ 67, 00, 6F, 00, 6E, 00, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenDataFile + 46 7C82ADDE 31 Bytes [ 6E, 00, 6F, 00, 74, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenDataFile + 66 7C82ADFE 3 Bytes [ 6E, 00, 2E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenDataFile + 6C 7C82AE04 23 Bytes [ 90, 90, 90, 90, 43, 00, 68, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!InitAtomTable + 11 7C82AFA0 23 Bytes [ 79, 00, 20, 00, 73, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!InitAtomTable + 29 7C82AFB8 11 Bytes [ 61, 00, 62, 00, 6C, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!InitAtomTable + 35 7C82AFC4 39 Bytes [ 46, 00, 6F, 00, 72, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryInformationJobObject + 23 7C82AFEC 28 Bytes [ 46, 00, 6F, 00, 72, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryInformationJobObject + 40 7C82B009 32 Bytes [ 00, 00, 00, 00, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryInformationJobObject + 63 7C82B02C 34 Bytes [ 30, 00, 00, 80, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryInformationJobObject + 86 7C82B04F 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryInformationJobObject + 89 7C82B052 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterWaitForSingleObjectEx + C 7C82B092 3 Bytes [ 05, 00, 84 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterWaitForSingleObjectEx + 10 7C82B096 21 Bytes [ 28, 0A, 01, 00, 05, 00, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterWaitForSingleObjectEx + 26 7C82B0AC 4 Bytes [ 02, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterWaitForSingleObjectEx + 2C 7C82B0B2 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterWaitForSingleObjectEx + 36 7C82B0BC 31 Bytes [ 04, 03, 00, 00, 01, 00, 53, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VirtualLock + 2F 7C82B16E 9 Bytes [ 69, 00, 6E, 00, 64, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VirtualLock + 39 7C82B178 29 Bytes [ 73, 00, 20, 00, 53, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VirtualLock + 57 7C82B196 15 Bytes [ 2D, 00, 42, 00, 69, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VirtualLock + 68 7C82B1A7 14 Bytes [ 00, 72, 00, 29, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VirtualLock + 77 7C82B1B6 15 Bytes [ 56, 00, 65, 00, 72, 00, 73, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTimerQueueTimer + 18 7C82B286 49 Bytes [ 73, 00, 6F, 00, 66, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTimerQueueTimer + 4A 7C82B2B8 41 Bytes [ 68, 00, 74, 00, 73, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTimerQueueTimer + 74 7C82B2E2 7 Bytes [ 69, 00, 6E, 00, 61, 00, 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTimerQueueTimer + 7C 7C82B2EA 7 Bytes [ 46, 00, 69, 00, 6C, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTimerQueueTimer + 84 7C82B2F2 39 Bytes [ 6E, 00, 61, 00, 6D, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseInitAppcompatCacheSupport + 38 7C82B3C5 22 Bytes [ 00, 56, 00, 61, 00, 72, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseInitAppcompatCacheSupport + 4F 7C82B3DC 7 Bytes [ 00, 00, 00, 00, 24, 00, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseInitAppcompatCacheSupport + 57 7C82B3E4 11 Bytes [ 00, 00, 54, 00, 72, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseInitAppcompatCacheSupport + 63 7C82B3F0 1 Byte [ 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseInitAppcompatCacheSupport + 65 7C82B3F2 26 Bytes [ 61, 00, 74, 00, 69, 00, 6F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadFileEx + F 7C82BD0A 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadFileEx + 41 7C82BD3C 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadFileEx + 4C 7C82BD47 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadFileEx + 4E 7C82BD49 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadFileEx + 5F 7C82BD5A 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetHandleInformation + C 7C82BDC1 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetHandleInformation + 25 7C82BDDA 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetHandleInformation + 2C 7C82BDE1 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetHandleInformation + 36 7C82BDEB 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetHandleInformation + 38 7C82BDED 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddRefActCtx + 12 7C82BF13 46 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddRefActCtx + 42 7C82BF43 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddRefActCtx + 47 7C82BF48 55 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddRefActCtx + 7F 7C82BF80 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddRefActCtx + 9A 7C82BF9B 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateTimerQueue + 18 7C82BFEE 58 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BindIoCompletionCallback 7C82C02C 18 Bytes [ 90, B8, AC, 00, 6C, 76, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BindIoCompletionCallback + 13 7C82C03F 14 Bytes JMP 7C7A1B66 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BindIoCompletionCallback + 22 7C82C04E 11 Bytes JMP 7C7A1B66 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BindIoCompletionCallback + 2E 7C82C05A 36 Bytes [ B8, 8C, 00, 6C, 76, E9, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueueUserAPC 7C82C082 1 Byte [ 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueueUserAPC + 2 7C82C084 74 Bytes [ 25, 28, 14, 62, 76, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueueUserAPC + 4D 7C82C0CF 116 Bytes [ 53, 56, 8B, 35, 68, 13, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueueUserAPC + C2 7C82C144 11 Bytes [ 15, F8, 13, 62, 76, 8B, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueueUserAPC + CE 7C82C150 57 Bytes [ 43, 00, 4C, 00, 6F, 00, 63, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DosPathToSessionPathW + 17 7C82C1FE 90 Bytes [ 6F, 00, 61, 00, 64, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DosPathToSessionPathW + 72 7C82C259 69 Bytes [ 00, 00, 8B, 4D, FC, E8, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DosPathToSessionPathW + B8 7C82C29F 17 Bytes [ F8, FF, 15, A0, 00, 6C, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DosPathToSessionPathW + CA 7C82C2B1 12 Bytes [ 57, 57, 57, 57, 57, 57, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DosPathToSessionPathW + D7 7C82C2BE 125 Bytes [ 8B, D8, 3B, DF, 7D, 17, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetPriorityClass + 4 7C82C33C 16 Bytes [ C7, 5F, 5E, 5B, C9, C3, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetPriorityClass + 15 7C82C34D 10 Bytes [ 00, 63, 00, 61, 00, 74, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetPriorityClass + 20 7C82C358 5 Bytes [ 3A, 00, 3A, 00, 47 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetPriorityClass + 26 7C82C35E 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetPriorityClass + 28 7C82C360 7 Bytes [ 74, 00, 50, 00, 6F, 00, 6C ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalGetAtomNameW + 16 7C82C3D4 15 Bytes [ 6F, 00, 63, 00, 61, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalGetAtomNameW + 26 7C82C3E4 1 Byte [ 47 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalGetAtomNameW + 28 7C82C3E6 31 Bytes [ 65, 00, 74, 00, 50, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalGetAtomNameW + 48 7C82C406 41 Bytes [ 6F, 00, 6E, 00, 3A, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalGetAtomNameW + 72 7C82C430 5 Bytes [ 6C, 00, 65, 00, 64 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitNamedPipeW + 72 7C82C6D6 40 Bytes [ 00, 00, 18, D8, 09, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitNamedPipeW + 9B 7C82C6FF 40 Bytes [ 00, B8, D8, 09, 00, C8, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitNamedPipeW + C4 7C82C728 11 Bytes [ 4A, D9, 09, 00, 5E, D9, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitNamedPipeW + D0 7C82C734 33 Bytes [ 80, D9, 09, 00, 96, D9, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitNamedPipeW + F2 7C82C756 7 Bytes [ 00, 80, 08, 00, 00, 80, 02 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CloseProfileUserMapping + 35 7C82C8A2 21 Bytes [ 4E, 65, 74, 55, 73, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CloseProfileUserMapping + 4C 7C82C8B9 87 Bytes [ 00, 44, 73, 43, 72, 61, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetProcessShutdownParameters + 24 7C82C911 178 Bytes [ 00, 43, 6F, 52, 65, 76, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetProcessShutdownParameters + D7 7C82C9C4 68 Bytes [ 4E, 50, 43, 61, 6E, 63, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetProcessShutdownParameters + 11C 7C82CA09 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetProcessShutdownParameters + 11F 7C82CA0C 13 Bytes [ 8C, DA, 09, 00, 00, 10, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetProcessShutdownParameters + 12D 7C82CA1A 39 Bytes [ FF, FF, FF, FF, FF, FF, 98, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenSemaphoreA + 21 7C82CA68 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenSemaphoreA + 26 7C82CA6D 6 Bytes [ FF, FF, FF, CA, DA, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenSemaphoreA + 2D 7C82CA74 18 Bytes [ 70, 14, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenSemaphoreA + 40 7C82CA87 100 Bytes [ 00, 00, 00, 00, 00, 6D, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetInformationJobObject + 4D 7C82CAEC 7 Bytes [ F4, DF, 09, 00, 04, E0, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetInformationJobObject + 55 7C82CAF4 67 Bytes [ 14, E0, 09, 00, 1E, E0, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateJobObjectW + 35 7C82CB38 19 Bytes [ C6, E0, 09, 00, D0, E0, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateJobObjectW + 49 7C82CB4C 8 Bytes [ 04, E1, 09, 00, 0E, E1, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateJobObjectW + 52 7C82CB55 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateJobObjectW + 54 7C82CB57 184 Bytes [ 00, 18, E1, 09, 00, 28, E1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CancelWaitableTimer + 7 7C82CC10 23 Bytes [ F2, E4, 09, 00, 00, E5, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CancelWaitableTimer + 1F 7C82CC28 25 Bytes [ 78, E5, 09, 00, 8C, E5, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CancelWaitableTimer + 39 7C82CC42 33 Bytes [ 09, 00, 38, E6, 09, 00, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CancelWaitableTimer + 5B 7C82CC64 7 Bytes [ C8, E6, 09, 00, E6, E6, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CancelWaitableTimer + 63 7C82CC6C 43 Bytes [ 00, E7, 09, 00, 16, E7, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMailslotA + D 7C82CC98 53 Bytes [ CC, E7, 09, 00, D8, E7, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMailslotA + 43 7C82CCCE 1 Byte [ 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMailslotA + 45 7C82CCD0 83 Bytes CALL 6564CCDE .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMailslotW + 48 7C82CD24 31 Bytes [ 42, EA, 09, 00, 52, EA, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMailslotW + 68 7C82CD44 23 Bytes CALL 7A82D733 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMailslotW + 80 7C82CD5C 111 Bytes [ 58, EB, 09, 00, 80, EB, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMailslotW + F0 7C82CDCC 3 Bytes [ 58, ED, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateMailslotW + F4 7C82CDD0 27 Bytes [ 64, ED, 09, 00, 7C, ED, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetMailslotInfo + 14 7C82CDEC 7 Bytes [ 0A, EE, 09, 00, 24, EE, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetMailslotInfo + 1C 7C82CDF4 48 Bytes [ 30, EE, 09, 00, 40, EE, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetMailslotInfo + 4D 7C82CE25 6 Bytes [ EF, 09, 00, 0C, EF, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetMailslotInfo + 54 7C82CE2C 3 Bytes [ 18, EF, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetMailslotInfo + 58 7C82CE30 11 Bytes [ 24, EF, 09, 00, 30, EF, 09, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DnsHostnameToComputerNameW + 3A 7C82CEEC 19 Bytes [ BE, F2, 09, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DnsHostnameToComputerNameW + 4E 7C82CF00 7 Bytes [ 06, F3, 09, 00, 1C, F3, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DnsHostnameToComputerNameW + 56 7C82CF08 29 Bytes [ 32, F3, 09, 00, 4A, F3, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DnsHostnameToComputerNameW + 74 7C82CF26 41 Bytes [ 09, 00, FE, F3, 09, 00, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DnsHostnameToComputerNameW + 9E 7C82CF50 63 Bytes [ C0, F4, 09, 00, D4, F4, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindVolumeClose + 30 7C82CF90 3 Bytes [ B4, F5, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindVolumeClose + 34 7C82CF94 28 Bytes [ C6, F5, 09, 00, D2, F5, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeW + 16 7C82CFB1 90 Bytes [ 00, 00, 00, 2D, 03, 77, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeW + 71 7C82D00C 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeW + 7D 7C82D018 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeW + 89 7C82D024 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeW + 8C 7C82D027 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeW + 10 7C82D2BF 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeW + 2E 7C82D2DD 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeW + 40 7C82D2EF 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeW + 5E 7C82D30D 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeW + 6F 7C82D31E 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemTimeAdjustment + A 7C82D379 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemTimeAdjustment + 20 7C82D38F 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemTimeAdjustment + 40 7C82D3AF 56 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemTimeAdjustment + 79 7C82D3E8 11 Bytes [ C8, E2, 92, 7C, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemTimeAdjustment + 85 7C82D3F4 14 Bytes [ 02, 00, 00, 00, 0C, 03, 92, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleTitleW + 10 7C82D9CD 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleTitleW + 2D 7C82D9EA 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleTitleW + 35 7C82D9F2 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleTitleW + 57 7C82DA14 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleTitleW + 6A 7C82DA27 60 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteFileGather + 22 7C82DDC7 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteFileGather + 2C 7C82DDD1 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteFileGather + 31 7C82DDD6 57 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteFileGather + 6D 7C82DE12 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteFileGather + 7C 7C82DE21 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadFileScatter + 22 7C82DE73 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadFileScatter + 2C 7C82DE7D 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadFileScatter + 31 7C82DE82 64 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadFileScatter + 73 7C82DEC4 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadFileScatter + 77 7C82DEC8 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceLanguagesA + 25 7C82E025 86 Bytes [ 00, 91, 02, 51, 75, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceLanguagesA + 7C 7C82E07C 252 Bytes [ BD, 01, 47, 65, 74, 53, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceLanguagesA + 179 7C82E179 364 Bytes [ 72, 6F, 66, 69, 6C, 65, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetHandleInformation + 15A 7C82E2E6 278 Bytes [ 72, 53, 65, 72, 76, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenSemaphoreW + EF 7C82E3FE 619 Bytes [ 98, 01, 52, 70, 63, 52, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNameW + 4E 7C82E66A 88 Bytes [ 00, 00, 94, F6, 09, 00, 94, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNameW + A9 7C82E6C5 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNameW + AE 7C82E6CA 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNameW + B1 7C82E6CD 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNameW + C9 7C82E6E5 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNameA + 20 7C82E8D2 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNameA + 40 7C82E8F2 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNameA + 4B 7C82E8FD 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNameA + 70 7C82E922 63 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNameA + B0 7C82E962 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SystemTimeToTzSpecificLocalTime + B 7C82E9CC 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SystemTimeToTzSpecificLocalTime + 2C 7C82E9ED 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SystemTimeToTzSpecificLocalTime + 40 7C82EA01 105 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SystemTimeToTzSpecificLocalTime + AC 7C82EA6D 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SystemTimeToTzSpecificLocalTime + B7 7C82EA78 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumberFormatA + B 7C82EC61 63 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumberFormatA + 4C 7C82ECA2 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumberFormatA + 55 7C82ECAB 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumberFormatA + 5D 7C82ECB3 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumberFormatA + 65 7C82ECBB 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VerLanguageNameA + 1E 7C82EFD7 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VerLanguageNameA + 27 7C82EFE0 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VerLanguageNameA + 47 7C82F000 55 Bytes [ CC, A1, A1, 00, BB, 94, 94, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VerLanguageNameA + 7F 7C82F038 19 Bytes [ 4A, 42, 42, 00, D3, BD, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VerLanguageNameW + B 7C82F04C 67 Bytes [ CE, BC, BC, 00, C6, B8, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VerLanguageNameW + 4F 7C82F090 99 Bytes [ D4, 9F, 94, 00, B5, 59, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateNamedPipeW + 20 7C82F0F4 91 Bytes [ AF, A0, 95, 00, DE, 66, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateNamedPipeW + 7C 7C82F150 72 Bytes [ EB, A6, 4A, 00, F5, B6, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateNamedPipeW + C5 7C82F199 15 Bytes [ BA, 41, 00, FF, BB, 44, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateNamedPipeW + D5 7C82F1A9 15 Bytes [ C3, 55, 00, FF, C3, 56, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateNamedPipeW + E5 7C82F1B9 55 Bytes [ BD, 3A, 00, FF, BD, 42, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LockFileEx + 4A 7C82F5B3 1 Byte [ CD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LockFileEx + 4C 7C82F5B5 7 Bytes [ 80, 00, DB, FF, 00, 00, 9E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LockFileEx + 54 7C82F5BD 4 Bytes [ 00, 00, A5, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LockFileEx + 59 7C82F5C2 20 Bytes [ 00, A7, FF, 80, 01, A0, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LockFileEx + 6E 7C82F5D7 9 Bytes [ CD, C0, 00, 00, A2, 80, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CmdBatNotification + 2 7C82F60B 6 Bytes [ 00, 28, 00, 00, 00, 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CmdBatNotification + B 7C82F614 11 Bytes [ 20, 00, 00, 00, 01, 00, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CmdBatNotification + 19 7C82F622 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CmdBatNotification + 37 7C82F640 7 Bytes [ 66, 2E, 3A, 00, 75, 41, 4C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CmdBatNotification + 3F 7C82F648 63 Bytes [ 79, 3F, 4A, 00, 82, 44, 4E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FormatMessageA + 18 7C82F7B8 23 Bytes [ CE, 78, 00, 00, F1, A7, 3E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FormatMessageA + 30 7C82F7D0 20 Bytes [ CA, B6, 95, 00, FF, B6, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FormatMessageA + 45 7C82F7E5 26 Bytes [ BF, 4D, 00, FF, C2, 52, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FormatMessageA + 60 7C82F800 7 Bytes [ FF, CA, 62, 00, FF, CB, 64 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FormatMessageA + 68 7C82F808 15 Bytes [ FF, CE, 6A, 00, FF, CE, 6B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindAtomW + 11 7C82F838 3 Bytes [ FF, DA, 83 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindAtomW + 15 7C82F83C 16 Bytes [ FF, DB, 85, 00, FA, DD, 94, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindAtomW + 26 7C82F84D 19 Bytes [ E0, 8E, 00, FF, E1, 90, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindAtomW + 3A 7C82F861 6 Bytes [ E6, 9A, 00, FF, E6, 9B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindAtomW + 41 7C82F868 12 Bytes CALL 6681F90C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CopyFileW + 2 7C82F875 94 Bytes [ EF, AD, 00, C5, B6, 74, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProfileIntW + 3A 7C82F8D4 69 Bytes [ 24, AE, 2B, 00, 95, EA, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProfileIntW + 80 7C82F91A 40 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProfileIntW + A9 7C82F943 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProfileIntW + BA 7C82F954 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProfileIntW + D0 7C82F96A 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryPerformanceFrequency + 1E 7C82FA64 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryPerformanceFrequency + 21 7C82FA67 13 Bytes [ 00, 00, 31, B5, B2, B6, 2A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryPerformanceFrequency + 2F 7C82FA75 15 Bytes [ 00, 00, 00, 00, 3D, B3, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadAffinityMask + B 7C82FA85 106 Bytes [ 00, 00, 00, 00, 3C, 36, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadAffinityMask + 76 7C82FAF0 47 Bytes [ 86, 7C, 3A, 00, 5A, 9D, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadAffinityMask + A6 7C82FB20 63 Bytes [ 5E, 55, 03, 00, 00, 00, 91, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateWaitableTimerW + E 7C82FB60 30 Bytes [ 00, 01, 95, 8F, 00, 01, 95, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateWaitableTimerW + 2D 7C82FB7F 19 Bytes [ 00, 01, 00, 20, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateWaitableTimerW + 41 7C82FB93 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateWaitableTimerW + 45 7C82FB97 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateWaitableTimerW + 4C 7C82FB9E 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenThread + C 7C82FC0C 69 Bytes [ 3A, 04, 19, A5, 39, 04, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenThread + 52 7C82FC52 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenThread + 59 7C82FC59 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenThread + 7F 7C82FC7F 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenThread + 98 7C82FC98 71 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindActCtxSectionStringW + 48 7C82FD94 11 Bytes [ D7, C7, C7, FF, D7, C5, C5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindActCtxSectionStringW + 54 7C82FDA0 66 Bytes [ D5, BF, BF, FF, D5, BC, BC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindActCtxSectionStringW + 98 7C82FDE4 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindActCtxSectionStringW + A7 7C82FDF3 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindActCtxSectionStringW + B5 7C82FE01 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeleteFiber + 1B 7C82FE9F 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeleteFiber + 1F 7C82FEA3 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeleteFiber + 21 7C82FEA5 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeleteFiber + 24 7C82FEA8 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeleteFiber + 3A 7C82FEBE 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConvertFiberToThread + 6 7C82FEDD 4 Bytes [ 00, 00, 00, 40 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConvertFiberToThread + B 7C82FEE2 37 Bytes [ 20, 06, 6B, 37, 42, 66, 9E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConvertFiberToThread + 31 7C82FF08 15 Bytes [ DB, D6, D6, FF, DB, D3, D3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConvertThreadToFiber + 2 7C82FF18 23 Bytes [ D8, CB, CB, FF, D7, C7, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConvertThreadToFiber + 1A 7C82FF30 45 Bytes [ B4, 8B, 8B, FF, B7, 8B, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConvertThreadToFiber + 49 7C82FF5F 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConvertThreadToFiber + 55 7C82FF6B 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConvertThreadToFiber + 61 7C82FF77 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFiber + 9 7C82FFB8 105 Bytes [ E0, E0, E0, FF, DF, DF, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFiberEx + 53 7C830022 29 Bytes [ 64, 00, 75, 00, 6E, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateFiberEx + 71 7C830040 42 Bytes [ 6B, 00, 75, 00, 6E, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnregisterWaitEx + 9 7C83006B 30 Bytes [ 00, 54, 00, 01, 00, 53, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnregisterWaitEx + 28 7C83008A 3 Bytes [ 77, 00, 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnregisterWaitEx + 2C 7C83008E 43 Bytes [ 72, 00, 20, 00, 65, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrentActCtx + 11 7C8300BA 59 Bytes [ 0D, 00, 0A, 00, 00, 00, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CancelIo + 1C 7C8300F6 59 Bytes [ 61, 00, 6E, 00, 66, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CancelIo + 58 7C830132 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CancelIo + 5A 7C830134 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CancelIo + 5C 7C830136 1 Byte [ 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CancelIo + 5E 7C830138 1 Byte [ 61 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceW + 35 7C8301E4 27 Bytes [ 20, 00, 69, 00, 73, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceW + 51 7C830200 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceW + 53 7C830202 9 Bytes [ 6E, 00, 20, 00, 76, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceW + 5D 7C83020C 9 Bytes [ 20, 00, 65, 00, 69, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceW + 67 7C830216 25 Bytes [ 6D, 00, 20, 00, 73, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceA + 9 7C8302F6 5 Bytes [ 68, 00, 65, 00, 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceA + F 7C8302FC 35 Bytes [ 61, 00, 62, 00, 62, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceA + 33 7C830320 60 Bytes [ 20, 00, 41, 00, 62, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceA + 70 7C83035D 56 Bytes [ 00, 6E, 00, 67, 00, 73, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceA + A9 7C830396 13 Bytes [ 75, 00, 66, 00, 66, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceExA + 9 7C8303A4 5 Bytes [ 6E, 00, 74, 00, 68 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDiskFreeSpaceExA + F 7C8303AA 60 Bytes [ E4, 00, 6C, 00, 74, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetProcessWorkingSetSize + 17 7C8303E7 16 Bytes [ 00, 2D, 00, 4D, 00, 61, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetProcessWorkingSetSize + 28 7C8303F8 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetProcessWorkingSetSize + 2A 7C8303FA 39 Bytes [ 73, 00, 6F, 00, 6C, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetProcessWorkingSetSize + 52 7C830422 23 Bytes [ 6C, 00, 79, 00, 73, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetProcessWorkingSetSize + 6A 7C83043A 31 Bytes [ 65, 00, 6E, 00, 2C, 00, 20, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpandEnvironmentStringsW + 10 7C830606 29 Bytes [ 20, 00, 52, 00, 61, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpandEnvironmentStringsW + 2E 7C830624 3 Bytes [ 2E, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpandEnvironmentStringsW + 32 7C830628 23 Bytes [ 44, 00, 61, 00, 68, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpandEnvironmentStringsW + 4A 7C830640 23 Bytes [ 20, 00, 6B, 00, 65, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpandEnvironmentStringsW + 62 7C830658 29 Bytes [ 72, 00, 65, 00, 6E, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FileTimeToDosDateTime + 19 7C830676 15 Bytes [ 65, 00, 6E, 00, 20, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FileTimeToDosDateTime + 29 7C830686 7 Bytes [ 67, 00, 65, 00, 66, 00, FC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FileTimeToDosDateTime + 31 7C83068E 25 Bytes [ 68, 00, 72, 00, 74, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FileTimeToDosDateTime + 4C 7C8306A9 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FileTimeToDosDateTime + 4F 7C8306AC 19 Bytes [ 04, 01, 01, 00, 44, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempPathW + D 7C830796 23 Bytes [ 68, 00, 62, 00, 61, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempPathW + 26 7C8307AF 4 Bytes [ 00, 90, 00, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempPathW + 2B 7C8307B4 3 Bytes [ 45, 00, 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempPathW + 2F 7C8307B8 1 Byte [ 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempPathW + 31 7C8307BA 9 Bytes [ 20, 00, 7A, 00, 75, 00, 20, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateEventA + 13 7C8308C0 19 Bytes [ 61, 00, 6E, 00, 67, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateEventA + 27 7C8308D4 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateEventA + 29 7C8308D6 1 Byte [ 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateEventA + 2B 7C8308D8 66 Bytes [ 72, 00, 6F, 00, 7A, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateEventA + 6F 7C83091C 37 Bytes [ 7C, 00, 01, 00, 45, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalReAlloc + 1B 7C830942 9 Bytes [ 6C, 00, 6F, 00, 63, 00, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalReAlloc + 25 7C83094C 5 Bytes [ 65, 00, 72, 00, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalReAlloc + 2B 7C830952 14 Bytes [ 2C, 00, 20, 00, 77, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalReAlloc + 3A 7C830961 6 Bytes [ 00, 69, 00, 6E, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalReAlloc + 41 7C830968 19 Bytes [ 4F, 00, 50, 00, 4C, 00, 4F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenProcess + 28 7C830A09 12 Bytes [ 00, 72, 00, 64, 00, 65, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenProcess + 35 7C830A16 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenProcess + 37 7C830A18 25 Bytes [ 74, 00, 67, 00, 65, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenProcess + 51 7C830A32 7 Bytes [ 01, 00, 7B, 00, 4F, 00, 62 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenProcess + 59 7C830A3A 67 Bytes [ 6A, 00, 65, 00, 6B, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueueUserWorkItem + 1C 7C830A7E 37 Bytes [ 76, 00, 65, 00, 72, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueueUserWorkItem + 42 7C830AA4 121 Bytes [ 74, 00, 20, 00, 6D, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLogicalDrives + A 7C830B1E 23 Bytes [ 00, 00, E4, 00, 01, 00, 7B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLogicalDrives + 22 7C830B36 3 Bytes [ 6E, 00, 67 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLogicalDrives + 26 7C830B3A 5 Bytes [ 65, 00, 68, 00, 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLogicalDrives + 2C 7C830B40 41 Bytes [ 6C, 00, 74, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLogicalDrives + 56 7C830B6A 7 Bytes [ 65, 00, 72, 00, 20, 00, 54 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalDeleteAtom + 13 7C830BCE 23 Bytes [ 66, 00, 6F, 00, 72, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalDeleteAtom + 2B 7C830BE6 5 Bytes [ 75, 00, 6E, 00, 64 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalDeleteAtom + 31 7C830BEC 15 Bytes [ 20, 00, 62, 00, 65, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalDeleteAtom + 41 7C830BFC 21 Bytes [ 2E, 00, 0D, 00, 0A, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalDeleteAtom + 57 7C830C12 3 Bytes [ 69, 00, 74 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindAtomA + A 7C830D08 47 Bytes [ 69, 00, 67, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindAtomA + 3A 7C830D38 81 Bytes [ 0D, 00, 0A, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcmp + 16 7C830D8A 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcmp + 18 7C830D8C 19 Bytes [ 69, 00, 20, 00, 6B, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcmp + 2C 7C830DA0 19 Bytes [ 65, 00, 72, 00, 20, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcmp + 40 7C830DB4 1 Byte [ 42 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcmp + 42 7C830DB6 1 Byte [ 69 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindActCtxSectionGuid + 39 7C830F5A 37 Bytes [ 67, 00, 69, 00, 73, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindActCtxSectionGuid + 5F 7C830F80 13 Bytes [ 63, 00, 68, 00, 74, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindActCtxSectionGuid + 6D 7C830F8E 25 Bytes [ 68, 00, 61, 00, 6E, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindActCtxSectionGuid + 87 7C830FA8 11 Bytes [ 64, 00, 20, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindActCtxSectionGuid + 93 7C830FB4 5 Bytes [ 65, 00, 6C, 00, 6C ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalMemoryStatus + 36 7C831128 106 Bytes [ 4C, 64, 72, 70, 52, 65, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalMemoryStatus + A1 7C831193 8 Bytes [ 4D, DC, 51, FF, 35, 6C, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalMemoryStatus + AA 7C83119C 104 Bytes [ FF, 75, 10, FF, 75, 08, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalMemoryStatus + 113 7C831205 35 Bytes [ 0F, 84, B6, B5, FD, FF, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalMemoryStatus + 137 7C831229 20 Bytes [ 68, FC, 12, 95, 7C, 50, E9, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TransactNamedPipe + 23 7C831308 110 Bytes [ 00, 00, C0, 38, 1D, 21, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TransactNamedPipe + 92 7C831377 367 Bytes [ 75, BC, 53, 8B, 40, 30, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileAttributesW + 12 7C8314E7 140 Bytes [ B0, 8D, 45, A8, 89, 45, B4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileAttributesW + 9F 7C831574 19 Bytes [ 03, 5A, EB, 02, 33, D2, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileAttributesW + B3 7C831588 15 Bytes [ 57, FF, 71, 24, FF, 70, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileAttributesW + C3 7C831598 130 Bytes [ A9, D9, FD, FF, 83, C4, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetOverlappedResult + 57 7C83161B 25 Bytes [ 57, 68, 24, 16, 95, 7C, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadDirectoryChangesW + 6 7C831635 24 Bytes JMP 7C827616 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadDirectoryChangesW + 1F 7C83164E 8 Bytes [ FD, FF, 80, 4E, 36, 80, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadDirectoryChangesW + 28 7C831657 43 Bytes [ FD, FF, 38, 5D, D3, 74, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadDirectoryChangesW + 54 7C831683 36 Bytes [ 15, 98, 09, 92, 7C, E9, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadDirectoryChangesW + 79 7C8316A8 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComputerNameW + F7 7C8317BE 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComputerNameW + F9 7C8317C0 7 Bytes [ 53, 54, 41, 54, 49, 43, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComputerNameW + 101 7C8317C8 7 Bytes [ 44, 59, 4E, 41, 4D, 49, 43 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComputerNameW + 109 7C8317D0 11 Bytes [ 52, 45, 44, 49, 52, 45, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComputerNameW + 115 7C8317DC 15 Bytes [ 4E, 4F, 4E, 5F, 52, 45, 44, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetFileTime + 61 7C831CA6 909 Bytes [ 00, 00, 00, 00, 4C, 44, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeleteFileW + 103 7C832034 33 Bytes [ 44, 00, 65, 00, 72, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetEndOfFile + 12 7C832056 9 Bytes [ 77, 00, 61, 00, 72, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetEndOfFile + 1C 7C832060 25 Bytes [ 61, 00, 6C, 00, 73, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetEndOfFile + 36 7C83207A 105 Bytes [ 73, 00, 20, 00, 77, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetEndOfFile + A0 7C8320E4 5 Bytes [ 61, 00, 6E, 00, 67 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetEndOfFile + A6 7C8320EA 3 Bytes [ 65, 00, 67 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextChangeNotification + E 7C832121 6 Bytes [ 00, 64, 00, 65, 00, 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextChangeNotification + 15 7C832128 25 Bytes [ 20, 00, 42, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextChangeNotification + 2F 7C832142 41 Bytes [ 20, 00, 75, 00, 6E, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DosDateTimeToFileTime + 1E 7C83216C 79 Bytes [ 6E, 00, 20, 00, 7A, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DosDateTimeToFileTime + 6E 7C8321BC 21 Bytes [ 6F, 00, 63, 00, 68, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DosDateTimeToFileTime + 84 7C8321D2 11 Bytes [ 6E, 00, 6B, 00, 75, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DosDateTimeToFileTime + 90 7C8321DE 1 Byte [ 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DosDateTimeToFileTime + 92 7C8321E0 17 Bytes [ 20, 00, 64, 00, 65, 00, 73, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsBadStringPtrA + 59 7C8322B2 49 Bytes [ FC, 00, 72, 00, 20, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnlockFile + 28 7C8322E4 9 Bytes [ 65, 00, 6E, 00, 20, 00, 5A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnlockFile + 32 7C8322EE 7 Bytes [ 69, 00, 74, 00, 62, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnlockFile + 3A 7C8322F6 19 Bytes [ 73, 00, 63, 00, 68, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnlockFileEx + F 7C83230A 9 Bytes [ 65, 00, 6E, 00, 2E, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnlockFileEx + 19 7C832314 3 Bytes [ 69, 00, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnlockFileEx + 1D 7C832318 5 Bytes [ 65, 00, 20, 00, 41 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnlockFileEx + 23 7C83231E 25 Bytes [ 6E, 00, 6D, 00, 65, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnlockFileEx + 3D 7C832338 27 Bytes [ 20, 00, 7A, 00, 75, 00, 20, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LockFile + F 7C832370 9 Bytes [ 65, 00, 6E, 00, 2E, 00, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LockFile + 19 7C83237A 59 Bytes [ 00, 00, 04, 01, 01, 00, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LockFile + 55 7C8323B6 5 Bytes [ 6E, 00, 20, 00, 42 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LockFile + 5B 7C8323BC 7 Bytes [ 65, 00, 73, 00, 63, 00, 68 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LockFile + 63 7C8323C4 51 Bytes [ 72, 00, E4, 00, 6E, 00, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateDirectoryW + 26 7C8323F8 11 Bytes [ 74, 00, 20, 00, 66, 00, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateDirectoryW + 32 7C832404 17 Bytes [ 64, 00, 69, 00, 65, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateDirectoryW + 44 7C832416 2 Bytes [ 64, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateDirectoryW + 47 7C832419 22 Bytes [ 00, 6E, 00, 67, 00, 20, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateDirectoryW + 5E 7C832430 1 Byte [ 72 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalSize + 30 7C8325EC 39 Bytes [ 20, 00, FC, 00, 62, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalSize + 58 7C832614 25 Bytes [ 41, 00, 6E, 00, 7A, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalSize + 72 7C83262E 27 Bytes [ 49, 00, 44, 00, 73, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalSize + 8E 7C83264A 29 Bytes [ 63, 00, 68, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalSize + AC 7C832668 1 Byte [ 69 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeleteAtom + 13 7C8326A8 45 Bytes [ 72, 00, 76, 00, 69, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddAtomW + 15 7C8326D6 25 Bytes [ 67, 00, 74, 00, 20, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddAtomW + 2F 7C8326F0 5 Bytes [ 65, 00, 69, 00, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddAtomW + 35 7C8326F6 33 Bytes [ 65, 00, 20, 00, 4C, 00, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddAtomW + 57 7C832718 33 Bytes [ 72, 00, 76, 00, 69, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileIntW + A 7C83273A 21 Bytes [ 6E, 00, 65, 00, 6E, 00, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileIntW + 20 7C832750 1 Byte [ 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileIntW + 22 7C832752 9 Bytes [ 67, 00, 74, 00, 20, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileIntW + 2C 7C83275C 19 Bytes [ 2C, 00, 20, 00, 64, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileIntW + 40 7C832770 63 Bytes [ 20, 00, 54, 00, 65, 00, 69, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ResumeThread + 21 7C832918 27 Bytes [ 74, 00, 75, 00, 72, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ResumeThread + 3D 7C832934 39 Bytes [ 69, 00, 67, 00, 20, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ResumeThread + 65 7C83295C 31 Bytes [ 2C, 00, 20, 00, 64, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ResumeThread + 85 7C83297C 3 Bytes [ 65, 00, 62 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ResumeThread + 89 7C832980 10 Bytes [ 65, 00, 6E, 00, 65, 00, 20, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SwitchToThread + C 7C83299E 53 Bytes [ 65, 00, 73, 00, 73, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SwitchToThread + 42 7C8329D4 21 Bytes [ 64, 00, 65, 00, 6E, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpandEnvironmentStringsA + 11 7C8329EA 9 Bytes [ 6B, 00, 61, 00, 6E, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpandEnvironmentStringsA + 1B 7C8329F4 47 Bytes [ 0D, 00, 0A, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpandEnvironmentStringsA + 4B 7C832A24 21 Bytes [ 7D, 00, 0D, 00, 0A, 00, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpandEnvironmentStringsA + 61 7C832A3A 33 Bytes [ 6E, 00, 64, 00, 75, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpandEnvironmentStringsA + 83 7C832A5C 37 Bytes [ 73, 00, 20, 00, 69, 00, 73, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileStringA + 44 7C832B9A 7 Bytes [ 0D, 00, 0A, 00, 44, 00, 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileStringA + 4C 7C832BA2 11 Bytes [ 65, 00, 73, 00, 20, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileStringA + 58 7C832BAE 7 Bytes [ 6F, 00, 6C, 00, 67, 00, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileStringA + 60 7C832BB6 31 Bytes [ 20, 00, 69, 00, 6D, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileStringA + 80 7C832BD6 7 Bytes [ 75, 00, 72, 00, 63, 00, 68 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileSectionNamesA + 1F 7C832DC6 33 Bytes [ 2E, 00, 20, 00, 45, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileSectionNamesA + 41 7C832DE8 9 Bytes [ 73, 00, 65, 00, 74, 00, 7A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileSectionNamesA + 4B 7C832DF2 5 Bytes [ 6E, 00, 20, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileSectionNamesA + 51 7C832DF8 15 Bytes [ 69, 00, 6E, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileSectionNamesA + 61 7C832E08 15 Bytes [ 74, 00, 65, 00, 6C, 00, 6C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalLock + 17 7C832E34 43 Bytes [ 6E, 00, 65, 00, 72, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalLock + 43 7C832E60 13 Bytes [ 64, 00, 69, 00, 65, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalLock + 51 7C832E6E 21 Bytes [ 20, 00, 6F, 00, 64, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalLock + 67 7C832E84 73 Bytes [ 43, 00, 4C, 00, 20, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalUnlock + 1D 7C832ECE 39 Bytes [ 6C, 00, 65, 00, 20, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalUnlock + 45 7C832EF6 21 Bytes [ 68, 00, 20, 00, 77, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalUnlock + 5B 7C832F0C 39 Bytes [ 20, 00, 67, 00, 65, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalUnlock + 83 7C832F34 21 Bytes [ 56, 00, 6F, 00, 72, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalUnlock + 99 7C832F4A 27 Bytes [ 64, 00, 65, 00, 20, 00, 77, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetAtomNameW + 9 7C8330F0 48 Bytes [ 14, 50, 22, FF, 11, 50, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetAtomNameW + 3A 7C833121 23 Bytes [ 6B, 00, FF, 00, 62, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetAtomNameW + 52 7C833139 4 Bytes [ 00, 00, 16, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetAtomNameW + 58 7C83313F 44 Bytes [ 09, 00, 00, 00, 1A, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetAtomNameW + 85 7C83316C 23 Bytes [ 10, BA, E4, FF, 21, CC, F6, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteProfileStringW + 23 7C8332D4 27 Bytes [ EE, 67, 4D, FF, DB, 43, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteProfileStringW + 3F 7C8332F0 110 Bytes [ 13, BC, E6, FF, 23, CE, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenProfileUserMapping + 40 7C83335F 55 Bytes [ FF, 0F, 76, 6C, FF, 17, 8F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenProfileUserMapping + 78 7C833397 60 Bytes [ FF, 4B, 9D, 00, FF, 36, 8E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenProfileUserMapping + B5 7C8333D4 82 Bytes [ FA, 7D, 5F, FF, E7, 5A, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenProfileUserMapping + 108 7C833427 45 Bytes [ FF, 8E, 84, 00, FF, 48, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenProfileUserMapping + 136 7C833455 55 Bytes [ 84, 64, FF, EB, 61, 49, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetEnvironmentVariableA + 15 7C83348D 2 Bytes [ B6, 28 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetEnvironmentVariableA + 18 7C833490 28 Bytes [ 59, C0, 00, FF, 9D, AB, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetEnvironmentVariableA + 35 7C8334AD 14 Bytes [ 00, 00, 28, 00, 00, 00, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetEnvironmentVariableA + 45 7C8334BD 7 Bytes [ 00, 00, 00, F2, 5E, 35, 76 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetEnvironmentVariableA + 4D 7C8334C5 11 Bytes [ 73, 4C, FF, FF, 96, 79, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDateFormatW + 20 7C833795 46 Bytes [ 00, 00, 26, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDateFormatW + 4F 7C8337C4 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDateFormatW + 52 7C8337C7 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDateFormatW + 54 7C8337C9 23 Bytes [ 5F, F6, B5, 21, 7A, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDateFormatW + 6C 7C8337E1 38 Bytes [ 4A, DA, FF, 00, 33, B9, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTimeFormatW + B 7C833FDE 57 Bytes [ 00, 00, DD, DD, DD, DD, DD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTimeFormatW + 45 7C834018 6 Bytes [ F0, 09, 00, 00, 01, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTimeFormatW + 4C 7C83401F 48 Bytes [ 00, 70, FC, 94, EA, 24, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTimeFormatW + 7D 7C834050 242 Bytes [ 70, 6A, 1E, 2F, 82, 97, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTimeFormatW + 170 7C834143 163 Bytes [ 94, 81, AD, 83, A0, C1, 4D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumberFormatW + 87 7C834543 287 Bytes [ D4, 0A, 17, 10, 9C, 1C, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumberFormatW + 1A7 7C834663 73 Bytes [ F8, 0E, DF, 76, 32, 4D, BF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumberFormatW + 1F1 7C8346AD 894 Bytes [ A6, F0, A9, 32, A8, B1, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateVirtualBuffer + FA 7C834A2C 24 Bytes [ B0, 49, 94, E1, 20, D6, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateVirtualBuffer + 113 7C834A45 5 Bytes [ 85, 78, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateVirtualBuffer + 119 7C834A4B 57 Bytes [ 4D, C8, 03, F9, 50, 57, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateVirtualBuffer + 153 7C834A85 211 Bytes [ 7D, CC, EB, EE, 2B, 7D, 9C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateVirtualBuffer + 228 7C834B5A 90 Bytes [ 46, 46, 89, 75, D0, 83, 3E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FormatMessageW + 26 7C834BB5 39 Bytes [ 3C, 14, 76, 37, 3C, 2F, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FormatMessageW + 4E 7C834BDD 5 Bytes [ 56, 57, 8B, CB, E8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FormatMessageW + 54 7C834BE3 47 Bytes [ E3, FF, FF, 2B, C7, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstChangeNotificationW + 24 7C834C13 15 Bytes [ 33, C0, 8A, 06, 50, E8, 54, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstChangeNotificationW + 34 7C834C23 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstChangeNotificationW + 38 7C834C27 13 Bytes [ 04, 83, 63, 5C, 00, 83, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstChangeNotificationW + 46 7C834C35 43 Bytes [ BC, 73, 7D, 83, BD, 7C, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstChangeNotificationW + 72 7C834C61 114 Bytes [ FF, FF, 45, C0, EB, C9, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalHandle + 1B 7C834CD4 58 Bytes [ 43, 5C, C3, 83, F8, 2E, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalHandle + 56 7C834D0F 25 Bytes [ F8, 2F, 0F, 84, CC, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalHandle + 70 7C834D29 40 Bytes [ 00, 74, 1B, 3D, B5, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcat + 11 7C834D52 2 Bytes [ 40, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcat + 14 7C834D55 46 Bytes [ 00, 8B, 40, 38, 0F, B7, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcat + 43 7C834D84 12 Bytes CALL 7C83202F C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!lstrcat + 50 7C834D91 62 Bytes [ 8D, 8D, 24, FF, FF, FF, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalSize + 30 7C834DD1 95 Bytes CALL 7C832AF9 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalSize + 91 7C834E32 72 Bytes CALL 7C77C7A5 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!_lclose + 17 7C834E7B 43 Bytes [ 04, 08, 08, 08, 05, 06, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalFindAtomW + 10 7C834EA7 93 Bytes [ 55, 8B, EC, 83, EC, 0C, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextFileA + 54 7C834F05 182 Bytes [ D2, 8B, F8, 74, 24, 89, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextFileA + 10B 7C834FBC 66 Bytes [ 3B, 47, 08, 77, 1A, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrentDirectoryA + 1 7C834FFF 91 Bytes [ 07, 6A, 6A, 6A, 6A, 6A, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrentDirectoryA + 5D 7C83505B 59 Bytes [ 6A, 6A, 6A, 6A, 6A, 6A, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrentDirectoryA + 99 7C835097 20 Bytes [ 6A, 6A, 6A, 6A, 6A, 6A, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrentDirectoryA + AE 7C8350AC 71 Bytes [ 6A, 6A, 6A, 6A, 6A, 6A, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTimeZoneInformation + 35 7C8350F4 10 Bytes [ FF, FF, FF, FF, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTimeZoneInformation + 40 7C8350FF 43 Bytes [ FF, F8, 1F, 00, 00, E0, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTimeZoneInformation + 6D 7C83512C 100 Bytes [ 80, 00, FF, FF, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTimeZoneInformation + D2 7C835191 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTimeZoneInformation + D4 7C835193 8 Bytes [ 00, 80, 01, FE, 1F, 00, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProcessTimes + 23 7C8352FC 135 Bytes [ D9, CF, CF, 00, D0, C7, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemPowerStatus + 44 7C835384 7 Bytes [ DD, 9B, 74, 00, D6, A2, 83 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemPowerStatus + 4C 7C83538C 23 Bytes [ AD, A3, 9C, 00, DE, AC, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemPowerStatus + 64 7C8353A4 19 Bytes [ FF, F0, E1, 00, 9F, 9E, 9D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemPowerStatus + 78 7C8353B8 36 Bytes [ FA, B6, 58, 00, FC, C5, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!_hread + F 7C8353DD 23 Bytes [ BE, 4C, 00, FF, C4, 56, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!_hread + 27 7C8353F5 11 Bytes [ D4, 74, 00, DC, C5, 94, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!_hread + 33 7C835401 22 Bytes [ DD, 88, 00, FF, E2, 93, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!_llseek + 12 7C835418 135 Bytes [ D6, CB, AB, 00, BC, BB, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleW + 1C 7C8354A0 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleW + 29 7C8354AD 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleW + 49 7C8354CD 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleW + 4C 7C8354D0 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleW + 4F 7C8354D3 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddAtomA + A 7C8354F7 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddAtomA + 15 7C835502 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddAtomA + 25 7C835512 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalFileTimeToFileTime + B 7C83552F 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalFileTimeToFileTime + 1A 7C83553E 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalFileTimeToFileTime + 20 7C835544 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalFileTimeToFileTime + 23 7C835547 40 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalFileTimeToFileTime + 4C 7C835570 106 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FlushInstructionCache + 20 7C8355DC 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FlushInstructionCache + 27 7C8355E3 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FlushInstructionCache + 41 7C8355FD 52 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FlushInstructionCache + 76 7C835632 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FlushInstructionCache + 89 7C835645 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileExW + A 7C835665 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileExW + C 7C835667 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileExW + 1B 7C835676 665 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!NlsGetCacheUpdateCount + F7 7C835910 129 Bytes [ 6A, 6A, 6A, 6A, 6A, 6A, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FlushViewOfFile + 21 7C835992 258 Bytes [ 6A, 6A, 6A, 6A, 6A, 6A, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempFileNameW + E0 7C835A97 42 Bytes [ FF, F0, 7F, FF, 07, C0, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempFileNameW + 10C 7C835AC3 5 Bytes [ 01, 80, 1E, 18, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempFileNameW + 112 7C835AC9 19 Bytes [ 1E, 10, 01, 00, 1E, 10, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempFileNameW + 126 7C835ADD 7 Bytes [ F0, 03, FF, FF, E0, 03, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempFileNameW + 12E 7C835AE5 19 Bytes [ E0, 03, FF, FF, F0, 07, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetShortPathNameA + 4 7C835BB4 87 Bytes [ 4F, 4C, 4C, 00, DE, D7, D7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetShortPathNameA + 5C 7C835C0C 47 Bytes [ D9, 9D, 8D, 00, EE, E7, E5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetShortPathNameA + 8C 7C835C3C 7 Bytes [ C8, A7, 8C, 00, E9, BF, 99 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetShortPathNameA + 94 7C835C44 55 Bytes [ ED, C8, A8, 00, D8, BD, A4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetShortPathNameA + CC 7C835C7C 19 Bytes [ D9, BD, 92, 00, FF, BA, 42, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStringA + A 7C835D5E 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStringA + 1D 7C835D71 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStringA + 21 7C835D75 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStringA + 2E 7C835D82 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStringA + 35 7C835D89 79 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempPathA + F 7C835DD9 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempPathA + 1B 7C835DE5 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempPathA + 41 7C835E0B 41 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempPathA + 6C 7C835E36 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempPathA + 99 7C835E63 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileA + 9 7C835E98 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileA + B 7C835E9A 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileA + 16 7C835EA5 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileA + 1A 7C835EA9 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileWithProgressA + 1C 7C835ECA 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileWithProgressA + 32 7C835EE0 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileWithProgressA + 64 7C835F12 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileWithProgressA + 6C 7C835F1A 307 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindResourceExA + D7 7C83604F 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindResourceExA + E2 7C83605A 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindResourceExA + EB 7C836063 109 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalFindAtomA + E 7C8360D1 17 Bytes [ FF, 8D, 45, DC, 50, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCurrentDirectoryA + 6 7C8360E3 13 Bytes [ 56, FF, 75, 08, FF, 15, D4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCurrentDirectoryA + 14 7C8360F1 11 Bytes [ FF, 89, 5D, E0, 50, 68, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCurrentDirectoryA + 20 7C8360FD 92 Bytes CALL 7C83DF02 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!HeapCompact + 3C 7C83615A 8 Bytes [ 75, E4, FF, 15, D4, 10, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!HeapCompact + 45 7C836163 3 Bytes [ C0, 75, 2C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!HeapCompact + 49 7C836167 16 Bytes [ 75, D8, FF, 15, D8, 10, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!HeapCompact + 5A 7C836178 39 Bytes [ 89, 75, E0, 6A, 04, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!HeapCompact + 82 7C8361A0 6 Bytes [ 90, 90, 90, 90, 90, 33 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDateFormatA + 2B 7C836219 4 Bytes JMP 7C833DFF C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDateFormatA + 31 7C83621F 4 Bytes [ 53, 53, 53, 53 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDateFormatA + 36 7C836224 45 Bytes [ 15, 60, 11, A1, 71, 3B, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDateFormatA + 64 7C836252 19 Bytes [ 01, 8D, 55, DC, 89, 45, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDateFormatA + 78 7C836266 12 Bytes [ DC, 3B, C8, 75, E6, 85, F6, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTimeFormatA + 5D 7C83638A 59 Bytes [ 90, 90, 90, 90, 90, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTimeFormatA + 99 7C8363C6 5 Bytes [ FF, E9, 52, F5, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTimeFormatA + A0 7C8363CD 14 Bytes [ 76, 14, 8B, 4E, 10, E8, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTimeFormatA + AF 7C8363DC 24 Bytes [ C7, 45, E4, 7B, 27, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTimeFormatA + C9 7C8363F6 41 Bytes [ C7, 45, E4, 08, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileIntA + 1C 7C836450 25 Bytes [ FF, 89, 7E, 10, 8B, 46, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileIntA + 36 7C83646A 2 Bytes [ 41, D7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileIntA + 39 7C83646D 55 Bytes [ FF, 83, 65, FC, 00, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileIntA + 74 7C8364A8 39 Bytes CALL 7C6E0B96 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProfileIntA + 27 7C8364D0 51 Bytes [ 50, FF, 15, A4, 10, A1, 71, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProfileIntA + 5B 7C836504 25 Bytes [ FF, 7A, 27, 00, 00, E9, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProfileIntA + 75 7C83651E 7 Bytes [ FF, 50, 8B, CB, E8, 23, 34 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProfileIntA + 7D 7C836526 83 Bytes [ 00, C7, 85, D8, FC, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProfileIntA + D1 7C83657A 6 Bytes JMP 7C833667 C:\WINDOWS\system32\kernel32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!_lcreat + 2E 7C8365D3 6 Bytes [ 83, 4D, FC, FF, 33, C0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!_lcreat + 35 7C8365DA 3 Bytes [ BF, DF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!_lcreat + 39 7C8365DE 179 Bytes [ 90, 90, 90, 90, 90, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileApisToANSI + 9E 7C836694 37 Bytes [ 33, C0, 40, C3, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SignalObjectAndWait + 24 7C8366BA 100 Bytes CALL 7C834C3C C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SignalObjectAndWait + 89 7C83671F 53 Bytes [ FF, C7, 45, B4, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SignalObjectAndWait + C2 7C836758 26 Bytes CALL 9B3FAD24 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalFlags + 1 7C836773 10 Bytes CALL 7C834C3E C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalFlags + C 7C83677E 4 Bytes [ C7, 45, FC, 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalFlags + 11 7C836783 126 Bytes [ 00, 00, 8B, 4D, AC, 89, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalFlags + 90 7C836802 90 Bytes JMP 7C831288 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalFlags + EB 7C83685D 28 Bytes [ FF, 39, B5, BC, FE, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReplaceFile + F 7C836C4B 15 Bytes [ FF, 4A, 83, C0, 08, 85, D2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReplaceFile + 1F 7C836C5B 45 Bytes [ 90, 90, 90, 90, 90, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReplaceFile + 4D 7C836C89 13 Bytes [ FF, 68, 26, 27, 00, 00, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReplaceFile + 5B 7C836C97 11 Bytes [ 15, A4, 11, A1, 71, 83, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReplaceFile + 67 7C836CA3 17 Bytes [ FF, 68, 7B, 27, 00, 00, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RemoveDirectoryW + 8A 7C836FE5 12 Bytes [ FF, 15, A4, 11, A1, 71, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RemoveDirectoryW + 97 7C836FF2 190 Bytes [ 8B, 4D, 08, 6A, 04, 6A, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RemoveDirectoryW + 156 7C8370B1 445 Bytes [ 79, 50, 61, 63, 6B, 61, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RemoveDirectoryW + 314 7C83726F 24 Bytes [ 65, 4E, 61, 6D, 65, 45, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RemoveDirectoryW + 32D 7C837288 41 Bytes [ 74, 65, 73, 41, 00, 53, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetUserGeoID + 1D 7C8379AB 65 Bytes [ 51, FF, D0, EB, C3, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetUserGeoID + 5F 7C8379ED 3 Bytes [ C4, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetUserGeoID + 63 7C8379F1 103 Bytes [ 80, 7D, 08, 00, 0F, 84, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetUserGeoID + CB 7C837A59 77 Bytes [ D6, FF, 35, 70, E0, FC, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Beep + 30 7C837AA7 117 Bytes [ 56, 57, BF, 7C, E0, FC, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Beep + A7 7C837B1E 31 Bytes [ 0F, 84, 7A, 57, 00, 00, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Beep + C7 7C837B3E 72 Bytes [ 56, 8B, 35, 2C, 11, FC, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Beep + 110 7C837B87 15 Bytes [ 85, C0, 0F, 84, D9, 4A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Beep + 120 7C837B97 24 Bytes [ 33, C0, EB, F7, 90, 90, 90, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleDisplayMode + 5 7C837C58 58 Bytes [ 00, FF, 15, 54, 10, FC, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleDisplayMode + 42 7C837C95 1 Byte [ 9C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleDisplayMode + 44 7C837C97 42 Bytes [ FC, 77, 8D, 45, F4, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleDisplayMode + 6F 7C837CC2 80 Bytes [ FF, 15, A0, 10, FC, 77, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemLocalesA + 32 7C837D13 12 Bytes CALL 7C837D49 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemLocalesA + 3F 7C837D20 44 Bytes [ 17, 49, 00, 00, 85, FF, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemLocalesA + 6C 7C837D4D 44 Bytes [ EC, 83, EC, 1C, 53, 56, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemLocalesA + 99 7C837D7A 150 Bytes [ 00, 00, 3B, C3, 0F, 85, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemLocalesA + 130 7C837E11 22 Bytes [ FF, FF, 8C, 00, 00, 00, F3, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumCalendarInfoA + 19 7C83822A 71 Bytes [ 8D, 4D, FC, 51, 50, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumCalendarInfoA + 61 7C838272 64 Bytes [ 75, F4, 89, 5D, FC, FF, D7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumCalendarInfoA + A2 7C8382B3 73 Bytes [ D7, 85, C0, 0F, 85, DC, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumCalendarInfoA + EC 7C8382FD 9 Bytes [ 00, 83, 7D, F8, 04, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumCalendarInfoA + F6 7C838307 77 Bytes [ 00, 8B, 45, F0, 89, 46, 2C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseQueryModuleData + 11 7C83836B 235 Bytes [ F0, 66, 89, 46, 30, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConvertDefaultLocale + 88 7C838457 48 Bytes [ 00, 0F, B7, 46, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConvertDefaultLocale + B9 7C838488 15 Bytes [ 15, 40, 10, FC, 77, 33, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConvertDefaultLocale + C9 7C838498 29 Bytes [ 15, 50, 10, FC, 77, 6A, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConvertDefaultLocale + E7 7C8384B6 29 Bytes [ 15, 54, 10, FC, 77, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConvertDefaultLocale + 105 7C8384D4 67 Bytes CALL 7C83A9FD C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCPFileNameFromRegistry + 3D 7C838518 31 Bytes [ FF, 15, 54, 10, FC, 77, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCPFileNameFromRegistry + 5D 7C838538 133 Bytes [ 15, 48, 10, FC, 77, 33, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCPFileNameFromRegistry + E5 7C8385C0 9 Bytes [ 8B, FF, 55, 8B, EC, 81, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCPFileNameFromRegistry + EF 7C8385CA 29 Bytes [ 00, 56, 57, 33, F6, 66, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCPFileNameFromRegistry + 10D 7C8385E8 78 Bytes [ FF, 39, 35, 1C, E1, FC, 77, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumDateFormatsW + 17 7C8387F8 31 Bytes JMP 7C838748 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumDateFormatsW + 37 7C838818 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumDateFormatsW + 3A 7C83881B 37 Bytes [ F6, 56, FF, 15, 40, 11, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumDateFormatsW + 60 7C838841 130 Bytes [ 05, 08, E1, FC, 77, 04, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumTimeFormatsW + 7 7C8388C5 93 Bytes [ 56, FF, 15, 50, 10, FC, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumTimeFormatsW + 65 7C838923 40 Bytes [ 85, 25, 01, 00, 00, 56, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumTimeFormatsW + 8E 7C83894C 61 Bytes [ 00, 00, 89, 7D, EC, 53, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumTimeFormatsW + CC 7C83898A 33 Bytes [ 00, 00, 83, 7D, F0, 01, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumTimeFormatsW + EE 7C8389AC 27 Bytes [ FF, 8B, D8, 3B, DF, 74, 6F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStringTypeA + 38 7C838A44 67 Bytes [ 75, F8, FF, 15, 64, 11, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStringTypeA + 7C 7C838A88 72 Bytes [ 74, 00, 72, 00, 6F, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStringTypeA + C5 7C838AD1 14 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStringTypeA + D4 7C838AE0 8 Bytes [ FF, 85, C0, 7C, 0F, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!_hwrite + 2 7C838AE9 10 Bytes [ 75, 0C, 6A, 01, 6A, 00, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!_hwrite + D 7C838AF4 10 Bytes [ 5D, C2, 08, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!_hwrite + 18 7C838AFF 3 Bytes [ 55, 8B, EC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!_hwrite + 1C 7C838B03 20 Bytes [ EC, 04, 01, 00, 00, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!_hwrite + 31 7C838B18 40 Bytes [ 00, 56, 57, 33, C0, 6A, 2C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LCMapStringA + 2 7C838DEA 7 Bytes [ FF, FF, 3B, C3, 0F, 8C, A3 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LCMapStringA + B 7C838DF3 18 Bytes [ 00, 0F, B7, 06, 50, FF, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LCMapStringA + 1E 7C838E06 9 Bytes [ FF, FF, 0C, 00, 00, 00, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LCMapStringA + 29 7C838E11 27 Bytes [ FF, 02, 00, 00, 00, C6, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LCMapStringA + 45 7C838E2D 6 Bytes [ FF, 15, AC, 10, FC, 77 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCalendarInfoW + B 7C83902B 719 Bytes CALL 75FDBDA2 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadExecutionState + 46 7C8392FB 1265 Bytes [ 7E, 22, BC, B1, 6B, D8, 95, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SuspendThread + BB 7C8397ED 310 Bytes [ 2F, 22, 85, 38, 74, 21, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ValidateLocale + 12C 7C839924 42 Bytes JMP F6CBD7DE .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ValidateLocale + 157 7C83994F 103 Bytes [ BE, CE, 11, 0C, 64, 5B, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ValidateLocale + 1BF 7C8399B7 87 Bytes [ 67, 49, 1F, D1, ED, 1C, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ValidateLocale + 217 7C839A0F 34 Bytes [ C0, 0A, 06, 00, 00, F8, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ValidateLocale + 23A 7C839A32 767 Bytes [ 9B, E2, 30, EA, 0E, E1, EB, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetUnhandledExceptionFilter + 48 7C8447E5 154 Bytes [ 2A, 5C, E3, 42, 03, A6, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetUnhandledExceptionFilter + E3 7C844880 402 Bytes [ 89, EA, 08, B4, 5F, B9, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetUnhandledExceptionFilter + 276 7C844A13 168 Bytes [ 00, F8, 69, 18, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetUnhandledExceptionFilter + 31F 7C844ABC 159 Bytes CALL 7C7D57FE .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetUnhandledExceptionFilter + 3BF 7C844B5C 43 Bytes CALL 7C807993 C:\WINDOWS\system32\kernel32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceNamesW + 1F 7C855728 32 Bytes [ 73, 00, 63, 00, 72, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceNamesW + 40 7C855749 8 Bytes [ 00, 72, 00, 72, 00, 6F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceNamesW + 49 7C855752 47 Bytes [ 20, 00, 3D, 00, 20, 00, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceNamesW + 79 7C855782 7 Bytes [ 69, 00, 6C, 00, 65, 00, 64 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceNamesW + 81 7C85578A 1 Byte [ 20 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocalTime + D 7C85592E 15 Bytes [ 72, 00, 72, 00, 6F, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocalTime + 1D 7C85593E 11 Bytes [ 64, 00, 00, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocalTime + 29 7C85594A 7 Bytes [ 65, 00, 63, 00, 75, 00, 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocalTime + 31 7C855952 5 Bytes [ 65, 00, 55, 00, 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocalTime + 37 7C855958 74 Bytes [ 65, 00, 72, 00, 4B, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalFlags + E 7C855A1C 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalFlags + 10 7C855A1E 117 Bytes [ 20, 00, 3D, 00, 20, 00, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalFlags + 86 7C855A94 1 Byte [ 25 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalFlags + 88 7C855A96 45 Bytes [ 64, 00, 00, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalFlags + B6 7C855AC4 1 Byte [ 6C ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalHandle + 61 7C855B6A 1 Byte [ 64 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalHandle + 63 7C855B6C 49 Bytes [ 6D, 00, 69, 00, 6E, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalHandle + 95 7C855B9E 93 Bytes [ 75, 00, 72, 00, 65, 00, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalHandle + F3 7C855BFC 7 Bytes [ 72, 00, 72, 00, 6F, 00, 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LocalHandle + FB 7C855C04 5 Bytes [ 20, 00, 3D, 00, 20 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BackupSeek + 29 7C855F18 7 Bytes [ 75, 00, 65, 00, 20, 00, 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BackupSeek + 31 7C855F20 5 Bytes [ 66, 00, 20, 00, 25 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BackupSeek + 37 7C855F26 1 Byte [ 64 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BackupSeek + 39 7C855F28 11 Bytes [ 00, 00, 90, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BackupSeek + 45 7C855F34 7 Bytes [ 74, 00, 75, 00, 70, 00, 4E ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BackupRead 7C856DDF 84 Bytes [ 90, 44, 00, 65, 00, 6C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BackupRead + 55 7C856E34 29 Bytes [ 69, 00, 6E, 00, 74, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BackupRead + 73 7C856E52 13 Bytes [ 77, 00, 69, 00, 74, 00, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BackupRead + 81 7C856E60 33 Bytes [ 72, 00, 6F, 00, 72, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BackupRead + A3 7C856E82 7 Bytes [ 66, 00, 69, 00, 6C, 00, 65 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BackupWrite + 3C 7C85743A 41 Bytes [ 00, 00, 50, 0B, 01, 00, 1E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BackupWrite + 66 7C857464 15 Bytes [ 66, 2B, 00, 00, 5A, 61, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BackupWrite + 76 7C857474 6 Bytes [ 8A, 42, 00, 00, 69, 2C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BackupWrite + 7E 7C85747C 106 Bytes [ A1, 3E, 00, 00, DE, 0B, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BackupWrite + EA 7C8574E8 34 Bytes [ 69, FF, 00, 00, C9, BC, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComputerNameW + C 7C858099 41 Bytes [ 00, C0, EB, 45, 56, 8B, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComputerNameW + 36 7C8580C3 64 Bytes [ 00, C0, EB, 1A, F6, 45, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComputerNameW + 77 7C858104 23 Bytes [ 00, C7, 45, A0, 24, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComputerNameW + 8F 7C85811C 10 Bytes [ AC, 33, 05, 00, 00, C7, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComputerNameW + 9A 7C858127 13 Bytes [ C0, C7, 45, B4, 30, 05, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComputerNameExW + 24 7C8581D7 65 Bytes CALL 7C8573D1 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComputerNameExW + 66 7C858219 14 Bytes [ 75, 20, FF, 75, 1C, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComputerNameExW + 75 7C858228 142 Bytes [ 75, 0C, 53, FF, 75, E4, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComputerNameExA + 10 7C8582B7 143 Bytes CALL 7C850EBC C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComputerNameExA + A0 7C858347 43 Bytes [ 83, 7D, DC, 02, 75, 04, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComputerNameExA + 27 7C858373 13 Bytes [ 0F, 85, C2, 00, 00, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComputerNameExA + 35 7C858381 2 Bytes [ 6A, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComputerNameExA + 39 7C858385 1 Byte [ D4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComputerNameExA + 3B 7C858387 2 Bytes [ F2, EF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComputerNameExA + 3F 7C85838B 44 Bytes [ 89, 45, E0, 3B, C6, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumerateLocalComputerNamesW + 15 7C8583B8 34 Bytes [ 00, C0, 75, 19, FF, 75, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumerateLocalComputerNamesW + 38 7C8583DB 16 Bytes [ C0, 83, 4D, FC, FF, EB, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumerateLocalComputerNamesW + 4A 7C8583ED 24 Bytes [ 00, 89, 45, D8, 50, E8, 2A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumerateLocalComputerNamesW + 64 7C858407 14 Bytes [ 75, 09, C7, 45, E4, 22, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumerateLocalComputerNamesW + 73 7C858416 20 Bytes [ 15, BC, 10, B7, 71, 89, 45, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumerateLocalComputerNamesA + 23 7C858546 47 Bytes [ 89, 45, D0, 85, C0, 75, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumerateLocalComputerNamesA + 53 7C858576 128 Bytes [ D4, 50, FF, 75, 0C, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DnsHostnameToComputerNameA + 28 7C8585F7 117 Bytes [ FF, 83, 7D, CC, 00, 74, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DnsHostnameToComputerNameA + 9E 7C85866D 39 Bytes CALL 7C8584F0 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DnsHostnameToComputerNameA + C6 7C858695 44 Bytes [ 84, C0, 75, 0A, B8, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DnsHostnameToComputerNameA + F4 7C8586C3 6 Bytes JMP 7C858748 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DnsHostnameToComputerNameA + FB 7C8586CA 35 Bytes CALL 7C85288E C:\WINDOWS\system32\kernel32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddLocalAlternateComputerNameW + 2 7C858E0C 18 Bytes [ 75, DC, FF, 15, BC, 10, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddLocalAlternateComputerNameW + 15 7C858E1F 2 Bytes [ 5D, 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddLocalAlternateComputerNameW + 19 7C858E23 91 Bytes [ C2, 10, 00, 90, 90, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddLocalAlternateComputerNameW + 75 7C858E7F 7 Bytes [ 57, FF, 75, 08, E8, 71, 99 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddLocalAlternateComputerNameW + 7D 7C858E87 17 Bytes [ FF, 3B, C7, 7C, 74, 89, 7D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RemoveLocalAlternateComputerNameW + 21 7C858F90 15 Bytes [ C0, 75, 48, 83, 7D, 0C, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RemoveLocalAlternateComputerNameW + 31 7C858FA0 110 Bytes [ 75, 10, 50, FF, 75, E4, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RemoveLocalAlternateComputerNameW + A0 7C85900F 2 Bytes [ 0D, E2 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RemoveLocalAlternateComputerNameW + A4 7C859013 57 Bytes [ C3, 83, 4D, FC, FF, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RemoveLocalAlternateComputerNameA 7C859050 176 Bytes [ 90, 8B, FF, 55, 8B, EC, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocalPrimaryComputerNameW + 69 7C859102 38 Bytes [ D8, 75, 03, 89, 5E, 14, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocalPrimaryComputerNameW + 90 7C859129 6 Bytes CALL 7C859158 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocalPrimaryComputerNameW + 97 7C859130 8 Bytes [ C0, 0F, 85, A0, 7C, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocalPrimaryComputerNameW + A0 7C859139 25 Bytes [ 15, A4, 11, A1, 71, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocalPrimaryComputerNameW + BA 7C859153 19 Bytes [ FF, 90, 90, 90, 90, 90, 8B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZCopy + 2D 7C859325 64 Bytes [ 85, 00, 00, 00, 8B, 5D, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZCopy + 6E 7C859366 5 Bytes [ CF, E8, 3B, 03, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZCopy + 74 7C85936C 51 Bytes [ 8B, F0, 85, F6, 0F, 85, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZCopy + A8 7C8593A0 8 Bytes [ 33, FF, EB, B9, BE, 1E, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZCopy + B1 7C8593A9 16 Bytes JMP 7C861290 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CopyLZFile + F 7C8593BD 13 Bytes [ 8B, FF, 55, 8B, EC, 83, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetSystemTime + D 7C8593CB 2 Bytes [ 46, 34 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetSystemTime + 10 7C8593CE 7 Bytes [ 45, F0, 8B, 46, 10, 33, DB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetSystemTime + 18 7C8593D6 15 Bytes [ 45, EC, 8B, 46, 2C, 57, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetSystemTime + 28 7C8593E6 8 Bytes [ 5E, 34, 89, 5E, 10, 89, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetSystemTime + 31 7C8593EF 11 Bytes [ 5E, 30, 39, 5F, 40, 89, 5D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTimeZoneInformation + 2A 7C859488 111 Bytes [ 89, 45, 0C, 0F, 84, B3, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTimeZoneInformation + 9A 7C8594F8 20 Bytes [ F0, 89, 46, 34, 8B, 45, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTimeZoneInformation + AF 7C85950D 29 Bytes [ 46, 30, 8B, 45, FC, 5E, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTimeZoneInformation + CE 7C85952C 100 Bytes [ 85, C0, 74, 5B, 80, 7E, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetSystemTimeAdjustment + D 7C859591 18 Bytes CALL 7C85721F C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetSystemTimeAdjustment + 20 7C8595A4 14 Bytes [ D0, AC, A1, 71, D9, AC, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetSystemTimeAdjustment + 2F 7C8595B3 24 Bytes [ 55, 8B, EC, 8B, 45, 08, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TzSpecificLocalTimeToSystemTime + B 7C8595CC 57 Bytes [ 00, 00, 5D, C2, 10, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TzSpecificLocalTimeToSystemTime + 45 7C859606 149 Bytes [ C2, 0C, 00, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TzSpecificLocalTimeToSystemTime + DC 7C85969D 67 Bytes [ 8B, 46, 10, 5E, C3, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TzSpecificLocalTimeToSystemTime + 120 7C8596E1 59 Bytes [ FF, FF, FF, 60, AC, A1, 71, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TzSpecificLocalTimeToSystemTime + 15E 7C85971F 17 Bytes [ C3, 90, 90, 90, 90, 90, 8B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetClientTimeZoneInformation + 9 7C859A3A 34 Bytes [ 83, C7, 10, 8B, 45, DC, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetClientTimeZoneInformation + 2C 7C859A5D 5 Bytes [ 75, 10, FF, 75, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetClientTimeZoneInformation + 32 7C859A63 31 Bytes [ 75, 08, FF, 51, 78, 8B, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetClientTimeZoneInformation + 52 7C859A83 12 Bytes CALL 7C859CC3 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetClientTimeZoneInformation + 60 7C859A91 48 Bytes [ C2, 18, 00, 90, 90, 90, 90, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CheckRemoteDebuggerPresent + 9 7C859B27 86 Bytes [ 00, 8B, 56, 70, 03, D1, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugBreak + C 7C859B7E 115 Bytes [ 15, CC, 11, A1, 71, 8B, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugBreak + 80 7C859BF2 9 Bytes [ 8B, 5D, 0C, 83, 23, 00, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugBreak + 8A 7C859BFC 2 Bytes [ 46, 18 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugBreak + 8D 7C859BFF 37 Bytes [ C7, 45, 0C, 26, 27, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugBreak + B3 7C859C25 37 Bytes [ 00, 83, 7F, 0C, 00, 0F, 84, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OutputDebugStringA + B3 7C859E2B 3 Bytes [ 12, ED, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OutputDebugStringA + B7 7C859E2F 18 Bytes [ 8B, F0, 85, F6, 0F, 84, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OutputDebugStringA + CA 7C859E42 9 Bytes [ 75, 10, FF, 75, 0C, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OutputDebugStringA + D4 7C859E4C 9 Bytes [ 14, 8B, CE, 8B, F8, E8, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OutputDebugStringA + DE 7C859E56 15 Bytes [ 85, FF, 5F, 0F, 85, AF, 50, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugActiveProcess + 14 7C85A137 10 Bytes CALL 7C81EDB3 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugActiveProcess + 1F 7C85A142 53 Bytes [ 39, BD, 64, FE, FF, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugBreakProcess + 2 7C85A178 38 Bytes [ 53, 8D, 8D, 44, FE, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugSetProcessKillOnExit + 2 7C85A19F 15 Bytes [ FF, FF, B5, 68, FE, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugSetProcessKillOnExit + 12 7C85A1AF 31 Bytes [ 28, 50, 6A, 40, FF, 15, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugSetProcessKillOnExit + 32 7C85A1CF 49 Bytes [ 60, FE, FF, FF, 74, 11, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetThreadSelectorEntry + 19 7C85A201 66 Bytes CALL 7C81F3D1 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetThreadSelectorEntry + 5C 7C85A244 168 Bytes [ 15, 48, 13, 62, 76, 39, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetThreadSelectorEntry + 105 7C85A2ED 101 Bytes [ 74, 5B, FF, 75, 4C, 8D, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetThreadSelectorEntry + 16B 7C85A353 116 Bytes [ 15, 68, 13, 62, 76, 39, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetThreadSelectorEntry + 1E0 7C85A3C8 11 Bytes CALL 7C81EF1E C:\WINDOWS\system32\kernel32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OutputDebugStringW + 2 7C85A42F 30 Bytes JMP 7C85A206 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OutputDebugStringW + 21 7C85A44E 121 Bytes [ FF, 74, 15, 56, FF, B5, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForDebugEvent + 48 7C85A4C8 50 Bytes CALL 7C81ECE9 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForDebugEvent + 7B 7C85A4FB 7 Bytes [ 01, 00, 00, 00, EB, 61, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForDebugEvent + 83 7C85A503 13 Bytes [ 53, 4C, 39, 3D, 90, 02, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForDebugEvent + 91 7C85A511 8 Bytes [ FF, 74, 15, 56, FF, B5, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitForDebugEvent + 9B 7C85A51B 26 Bytes [ 68, D8, 01, 6A, 76, 57, E8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ContinueDebugEvent + 2B 7C85A590 31 Bytes [ 74, 08, FF, B5, 2C, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugActiveProcessStop + 7 7C85A5B0 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugActiveProcessStop + 9 7C85A5B2 4 Bytes [ FF, B5, 18, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugActiveProcessStop + E 7C85A5B7 31 Bytes [ FF, FF, D6, 39, 3D, 90, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugActiveProcessStop + 2E 7C85A5D7 9 Bytes [ 15, F8, 13, 62, 76, 8B, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DebugActiveProcessStop + 38 7C85A5E1 16 Bytes [ FF, 8B, 4D, FC, 5F, 5E, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateDirectoryExW 7C85A5F2 9 Bytes [ 90, 90, 90, 90, 90, 90, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateDirectoryExW + A 7C85A5FC 83 Bytes [ 6F, 00, 63, 00, 65, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateDirectoryExW + 5E 7C85A650 105 Bytes [ 61, 00, 6C, 00, 69, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateDirectoryExW + C8 7C85A6BA 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateDirectoryExW + CA 7C85A6BC 15 Bytes [ 64, 00, 6F, 00, 65, 00, 73, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateDirectoryExA + 3E 7C85B279 121 Bytes [ 34, 79, 34, A6, 34, D2, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetAtomNameA + 49 7C85B2F4 752 Bytes [ 00, D0, 02, 00, 24, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetAtomNameA + 33A 7C85B5E5 25 Bytes [ 30, 03, 00, DC, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetAtomNameA + 354 7C85B5FF 167 Bytes [ 31, 65, 31, 8E, 31, C0, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetAtomNameA + 3FC 7C85B6A7 167 Bytes [ 39, 0F, 3A, 26, 3A, 30, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryWin31IniFilesMappedToRegistry + 33 7C85B74F 624 Bytes [ 38, 25, 38, 2B, 38, 31, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryWin31IniFilesMappedToRegistry + 2A4 7C85B9C0 59 Bytes [ A8, 37, B0, 37, B4, 37, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryWin31IniFilesMappedToRegistry + 2E0 7C85B9FC 495 Bytes [ 50, 38, 58, 38, 5C, 38, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileStructA + C1 7C85BBEC 300 Bytes [ 64, 33, 6C, 33, 74, 33, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileStructW + 84 7C85BD19 118 Bytes CALL 6CBEA956 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetPrivateProfileStructW + FB 7C85BD90 233 Bytes [ B4, 3B, B8, 3B, BC, 3B, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStructA + 57 7C85BE7A 3 Bytes [ 4C, 33, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStructA + 5B 7C85BE7E 133 Bytes [ 54, 33, 58, 33, AC, 33, B4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStructA + E1 7C85BF04 23 Bytes [ 20, 36, 24, 36, 28, 36, 2C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStructA + F9 7C85BF1C 239 Bytes [ 50, 36, 54, 36, 58, 36, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStructW + A7 7C85C00C 43 Bytes [ CE, 9A, 7E, FF, EA, E9, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStructW + D3 7C85C038 3 Bytes [ F6, FC, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStructW + D7 7C85C03C 3 Bytes [ E4, CF, C5 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStructW + DB 7C85C040 3 Bytes [ C2, 69, 3B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WritePrivateProfileStructW + DF 7C85C044 21 Bytes [ C1, 5B, 28, FF, C7, 64, 32, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteProfileStringA + B 7C85C0C4 50 Bytes [ CC, 66, 34, FF, CA, 66, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteProfileSectionA + 2 7C85C0F7 8 Bytes [ FF, DA, AA, 93, FF, C2, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteProfileSectionA + B 7C85C100 23 Bytes [ C9, 66, 34, FF, CD, 67, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProfileSectionW + 8 7C85C118 23 Bytes [ D0, 70, 40, FF, CD, 66, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteProfileSectionW + 2 7C85C130 14 Bytes [ C3, 5F, 2D, FF, C2, 6B, 3E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteProfileSectionW + 12 7C85C140 115 Bytes [ D7, C7, BF, F7, 08, 06, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteProfileSectionW + 86 7C85C1B4 11 Bytes [ EB, D3, C8, FF, C8, 66, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteProfileSectionW + 92 7C85C1C0 55 Bytes [ CF, 69, 37, FF, CD, 66, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteProfileSectionW + CA 7C85C1F8 27 Bytes [ CE, 88, 65, FF, F4, F5, F6, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DefineDosDeviceA + 5D 7C85C322 12 Bytes [ FF, FF, 7B, 6F, 69, C9, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DefineDosDeviceA + 6A 7C85C32F 76 Bytes [ D1, FF, FF, FF, FF, FB, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryDosDeviceA + 10 7C85C37C 31 Bytes [ FF, FF, FF, FF, FF, FF, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryDosDeviceA + 30 7C85C39C 66 Bytes JMP 5C851021 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryDosDeviceA + 73 7C85C3DF 88 Bytes CALL A5B3FBE3 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryDosDeviceA + CC 7C85C438 29 Bytes [ FD, F5, F1, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!QueryDosDeviceA + EA 7C85C456 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstChangeNotificationA + F 7C85C4BA 4 Bytes [ FF, FF, FF, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstChangeNotificationA + 14 7C85C4BF 20 Bytes [ FF, FF, D1, A9, FF, FF, B9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstChangeNotificationA + 29 7C85C4D4 33 Bytes JMP 6685B3C4 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstChangeNotificationA + 4B 7C85C4F6 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstChangeNotificationA + 50 7C85C4FB 17 Bytes [ FF, D5, C4, BB, E1, 09, 06, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileExA + 37 7C85C549 2 Bytes [ BB, 8C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileExA + 3A 7C85C54C 3 Bytes [ FF, E3, D0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileExA + 3E 7C85C550 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileExA + 41 7C85C553 8 Bytes [ FF, FF, FF, FF, FF, F1, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstFileExA + 4A 7C85C55C 10 Bytes [ 3B, 32, 2D, 58, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteFileEx + 51 7C85C752 16 Bytes [ 00, 00, 20, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteFileEx + 62 7C85C763 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteFileEx + 71 7C85C772 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteFileEx + 7E 7C85C77F 9 Bytes [ 00, 00, 00, 00, 11, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteFileEx + 88 7C85C789 36 Bytes [ 00, 00, 93, 00, 00, 00, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileValidData + E 7C85C7AF 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileValidData + 18 7C85C7B9 30 Bytes [ 00, 00, 00, 00, 00, 00, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileValidData + 37 7C85C7D8 25 Bytes [ F3, E1, D7, FF, C6, B5, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileValidData + 51 7C85C7F2 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileShortNameW + 2D 7C85C824 4 Bytes [ 6C, 62, 5D, CE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileShortNameW + 34 7C85C82B 56 Bytes [ 94, 00, 00, 00, 45, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileShortNameW + 6D 7C85C864 63 Bytes [ F4, E2, D9, FF, 53, 4B, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileShortNameW + AD 7C85C8A4 59 Bytes [ F8, FF, FF, FF, F2, E0, D6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileShortNameA + 1C 7C85C8E0 47 Bytes [ B9, 47, 10, FF, E0, C9, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileShortNameA + 4C 7C85C910 23 Bytes [ F7, E7, DF, FF, D0, 6B, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileShortNameA + 64 7C85C928 19 Bytes [ F8, FC, FD, FF, E0, CD, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileShortNameA + 78 7C85C93C 51 Bytes [ C5, 56, 1E, FF, CE, 66, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFileShortNameA + AC 7C85C970 15 Bytes [ 00, 00, 00, B1, F2, E1, D9, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PrivMoveFileIdentityW + 3 7C85D0EC 1 Byte [ 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PrivMoveFileIdentityW + 5 7C85D0EE 65 Bytes [ 70, 00, 53, 00, 74, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PrivMoveFileIdentityW + 47 7C85D130 1 Byte [ 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PrivMoveFileIdentityW + 49 7C85D132 15 Bytes [ 73, 00, 5C, 00, 43, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PrivMoveFileIdentityW + 59 7C85D142 1 Byte [ 74 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCompressedFileSizeW + 47 7C85D3B8 66 Bytes [ F8, FF, D6, FF, 75, EC, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCompressedFileSizeW + 8A 7C85D3FB 1 Byte [ 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCompressedFileSizeW + 8C 7C85D3FD 19 Bytes [ 57, FF, 75, F0, FF, D6, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCompressedFileSizeW + A0 7C85D411 104 Bytes [ 0F, 00, 57, FF, 75, F0, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCompressedFileSizeW + 109 7C85D47A 50 Bytes [ D6, 85, C0, 0F, 84, DB, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCompressedFileSizeA + 14 7C85D4AD 31 Bytes [ D6, 85, C0, 0F, 84, 63, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileExA + A 7C85D4CD 44 Bytes [ 8B, 45, E0, 80, 48, 01, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileExA + 37 7C85D4FA 22 Bytes [ C0, 0F, 84, CB, D0, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileExA + 4E 7C85D511 42 Bytes [ 53, FF, 75, CC, FF, 75, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileExA + 7A 7C85D53D 35 Bytes [ 89, 75, DC, FF, 75, D8, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!MoveFileExA + 9E 7C85D561 104 Bytes CALL 7C855315 C:\WINDOWS\system32\kernel32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReplaceFileA + 91 7C85E398 336 Bytes [ DA, 5B, A7, 3E, C4, D3, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetFirmwareEnvironmentVariableW + 3D 7C85E4E9 473 Bytes [ F1, 1A, 38, 15, 4A, FA, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GlobalWire + 9 7C85E6C3 535 Bytes [ 96, 29, C4, 2B, 2A, DC, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!HeapQueryTagW + 1 7C85E8DB 319 Bytes [ 10, 32, 7E, AD, 38, E2, ED, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!HeapUnlock + 15 7C85EA1B 50 Bytes [ 00, FE, D9, 89, 24, A3, 91, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!HeapWalk + 2E 7C85EA4E 13 Bytes [ 72, 00, 20, 00, 75, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!HeapWalk + 3C 7C85EA5C 37 Bytes [ 54, 00, 6F, 00, 75, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!HeapWalk + 62 7C85EA82 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!HeapWalk + 64 7C85EA84 185 Bytes [ 6F, 00, 66, 00, 20, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!HeapQueryInformation + 19 7C85EB3E 122 Bytes [ 3A, 00, 20, 00, 52, 00, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetMailslotInfo + 61 7C85EBB9 16 Bytes [ 00, 72, 00, 69, 00, 74, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetMailslotInfo + 72 7C85EBCA 3 Bytes [ 6B, 00, 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetMailslotInfo + 76 7C85EBCE 32 Bytes [ 65, 00, 20, 00, 64, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetMailslotInfo + 97 7C85EBEF 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExtendVirtualBuffer 7C85EBF4 60 Bytes [ 90, 8B, FF, 55, 8B, EC, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExtendVirtualBuffer + 3D 7C85EC31 64 Bytes [ 90, 02, 6C, 76, 8B, 45, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VirtualBufferExceptionHandler + 1 7C85EC72 59 Bytes [ 4D, 18, 89, 01, EB, 22, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VirtualBufferExceptionHandler + 3D 7C85ECAE 79 Bytes [ 02, 6C, 76, 74, 0F, 50, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDllDirectoryW + 4E 7C85ECFE 30 Bytes [ 70, 00, 6C, 00, 65, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDllDirectoryW + 6D 7C85ED1D 52 Bytes [ 00, 77, 00, 69, 00, 74, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDllDirectoryA + C 7C85ED52 20 Bytes [ 69, 00, 61, 00, 6C, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDllDirectoryA + 21 7C85ED67 26 Bytes [ 00, 72, 00, 69, 00, 74, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDllDirectoryA + 3C 7C85ED82 79 Bytes [ 6F, 00, 65, 00, 73, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDllDirectoryA + 8C 7C85EDD2 13 Bytes [ 69, 00, 61, 00, 6C, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDllDirectoryW + 9 7C85EDE0 72 Bytes [ 78, 00, 50, 00, 61, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDllDirectoryW + 52 7C85EE29 64 Bytes [ 5D, F4, 88, 5D, F5, 88, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VerifyVersionInfoA + 24 7C85EE6A 43 Bytes [ D6, 85, C0, 75, 35, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VerifyVersionInfoA + 50 7C85EE96 130 Bytes [ 45, D0, 89, 45, F0, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UTRegister + 29 7C85EF19 29 Bytes [ D8, 50, 53, 53, 6A, 01, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UTRegister + 47 7C85EF37 88 Bytes [ 02, 6C, 76, 74, 12, 50, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDllDirectoryA + 49 7C85EF90 166 Bytes [ 3B, F3, 0F, 8E, 64, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetModuleHandleExA + 51 7C85F037 56 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceTypesA + 35 7C85F071 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceTypesA + 42 7C85F07E 43 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceTypesA + 6E 7C85F0AA 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceTypesA + 7E 7C85F0BA 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceTypesA + A1 7C85F0DD 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceNamesA + 4E 7C85F277 41 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceNamesA + 79 7C85F2A2 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceNamesA + AC 7C85F2D5 25 Bytes [ C0, 01, FF, FF, 00, 00, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceNamesA + C8 7C85F2F1 44 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceNamesA + F5 7C85F31E 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceTypesW + 42 7C85F48B 79 Bytes [ 77, 00, 00, 00, 40, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceTypesW + 92 7C85F4DB 28 Bytes [ 24, 00, 00, 00, 0F, 27, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceTypesW + AF 7C85F4F8 43 Bytes [ 7C, 7B, 7B, FF, 4D, 4D, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceTypesW + DB 7C85F524 67 Bytes [ 98, 98, 98, FF, 82, 82, 82, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceTypesW + 11F 7C85F568 43 Bytes [ C7, C7, C7, FF, E1, E1, E1, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceLanguagesW + 25 7C85F656 52 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceLanguagesW + 5B 7C85F68C 51 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceLanguagesW + 91 7C85F6C2 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceLanguagesW + 98 7C85F6C9 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumResourceLanguagesW + AE 7C85F6DF 79 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateNamedPipeA + 17 7C85FC8B 11 Bytes [ 00, FF, FF, C0, 0F, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateNamedPipeA + 23 7C85FC97 17 Bytes [ 00, 00, 06, 00, 00, 60, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateNamedPipeA + 35 7C85FCA9 24 Bytes [ 06, 00, 00, FF, FF, C0, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateNamedPipeA + 4E 7C85FCC2 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateNamedPipeA + 51 7C85FCC5 8 Bytes [ FF, F8, 7F, FF, FF, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNamedPipeHandleStateA + 16 7C85FD01 1 Byte [ 03 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNamedPipeHandleStateA + 18 7C85FD03 13 Bytes [ 00, 80, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNamedPipeHandleStateA + 26 7C85FD11 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNamedPipeHandleStateA + 28 7C85FD13 133 Bytes [ 00, 80, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNamedPipeHandleStateA + AE 7C85FD99 6 Bytes [ FF, 00, 00, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CallNamedPipeA + 2 7C85FDD0 10 Bytes [ FF, FF, 00, 00, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CallNamedPipeA + F 7C85FDDD 6 Bytes [ FF, FF, FF, FF, FF, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CallNamedPipeA + 16 7C85FDE4 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CallNamedPipeA + 1C 7C85FDEA 12 Bytes [ 00, 00, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CallNamedPipeA + 29 7C85FDF7 11 Bytes [ FF, FF, FF, 00, 00, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumaHighestNodeNumber + 15 7C85FE56 14 Bytes [ 00, 00, 00, FF, FF, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumaHighestNodeNumber + 24 7C85FE65 122 Bytes [ FF, 00, 00, FF, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumaProcessorNode + 56 7C85FEE2 129 Bytes [ 3B, FB, 33, 0F, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumaNodeProcessorMask + 4D 7C85FF66 25 Bytes [ FF, FF, F7, 78, 88, 01, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumaProcessorMap + 2 7C85FF80 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumaProcessorMap + A 7C85FF88 69 Bytes [ F7, 78, 88, 01, 18, F7, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumaAvailableMemory + A 7C85FFCE 133 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumaAvailableMemoryNode + 4A 7C860054 237 Bytes [ 01, 7E, 0E, 6A, 10, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!NumaVirtualQueryNode + 70 7C860142 56 Bytes [ 08, 8B, 0D, 30, C3, 98, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!NumaVirtualQueryNode + A9 7C86017B 112 Bytes CALL 7C860FB7 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!NumaVirtualQueryNode + 11A 7C8601EC 30 Bytes [ C0, 40, 5D, C3, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!NumaVirtualQueryNode + 139 7C86020B 84 Bytes [ 83, 3D, 70, C1, 98, 7C, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!NumaVirtualQueryNode + 18E 7C860260 35 Bytes [ 83, CF, FF, 83, FF, FF, 74, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLogicalDriveStringsW + 29 7C8603F8 99 Bytes [ FF, 55, 8B, EC, 8B, 4D, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLogicalDriveStringsW + 8D 7C86045C 20 Bytes [ C1, 30, 66, 89, 0E, 46, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLogicalDriveStringsW + A2 7C860471 28 Bytes [ 4E, 4E, 66, 8B, 0F, 66, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLogicalDriveStringsW + BF 7C86048E 35 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVolumeLabelW + 19 7C8604B2 1 Byte [ 14 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVolumeLabelW + 1C 7C8604B5 23 Bytes [ 10, FF, 75, 0C, FF, 75, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVolumeLabelW + 34 7C8604CD 11 Bytes [ 55, 8B, EC, 8B, 45, 10, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVolumeLabelW + 40 7C8604D9 21 Bytes [ 75, 0C, FF, 75, 08, E8, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVolumeLabelW + 56 7C8604EF 128 Bytes [ 55, 8B, EC, 53, 56, 8B, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CheckNameLegalDOS8Dot3W + E 7C86081F 67 Bytes [ 11, 66, 83, FA, 61, 72, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CheckNameLegalDOS8Dot3W + 52 7C860863 103 Bytes [ F3, 75, 08, 33, D2, EB, 7B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CheckNameLegalDOS8Dot3W + BA 7C8608CB 56 Bytes [ F8, 83, FF, FF, 59, 75, CA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempFileNameA + 5 7C860904 219 Bytes [ 12, 00, 00, 8B, F8, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTempFileNameA + E1 7C8609E0 34 Bytes [ 00, 00, 00, FF, 75, 08, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVolumeLabelA + 16 7C860A03 101 Bytes [ 59, 59, 5D, C3, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CheckNameLegalDOS8Dot3A + 18 7C860A69 2 Bytes [ 65, FC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CheckNameLegalDOS8Dot3A + 1B 7C860A6C 333 Bytes [ 53, 56, 8B, 75, 08, 8A, 1E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CancelDeviceWakeupRequest + 23 7C860BBA 61 Bytes [ 80, 77, 09, 85, D2, 75, 2A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetMessageWaitingIndicator + 39 7C860BF8 38 Bytes [ 03, F7, 5D, FC, 8B, 45, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetMessageWaitingIndicator + 60 7C860C1F 1 Byte [ 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetMessageWaitingIndicator + 62 7C860C21 5 Bytes [ 75, 0C, FF, 75, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetMessageWaitingIndicator + 68 7C860C27 3 Bytes [ 37, FE, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetMessageWaitingIndicator + 6C 7C860C2B 161 Bytes [ 83, C4, 10, 5D, C3, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FatalAppExitW + 23 7C860CCD 25 Bytes [ 08, 66, 8B, 10, 66, 85, D2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FatalAppExitW + 3D 7C860CE7 101 Bytes [ 11, 8B, CF, 66, 3B, CA, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FatalExit + 7 7C860D4D 34 Bytes [ DE, 2B, 45, 08, 5F, 5E, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FatalExit + 2A 7C860D70 11 Bytes [ 08, 89, 45, F8, 74, 27, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FatalExit + 36 7C860D7C 44 Bytes CALL 7C800778 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FatalExit + 63 7C860DA9 53 Bytes [ 02, 50, FF, 75, 0C, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FatalExit + 99 7C860DDF 209 Bytes [ 55, 8B, EC, 51, 51, DD, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProcessShutdownParameters + 38 7C860EB1 251 Bytes CALL B002A7A5 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemTimes + 8B 7C860FAD 75 Bytes [ 45, 18, DD, 18, 8B, C6, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemTimes + D7 7C860FF9 2 Bytes [ 45, FC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemTimes + DA 7C860FFC 33 Bytes [ 45, 08, 0F, 8F, BA, 1A, 7E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemTimes + FC 7C86101E 4 Bytes [ EC, 8D, 45, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemTimes + 102 7C861024 22 Bytes [ 04, 50, 68, 0E, 1B, 7E, 59, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProcessWorkingSetSize + 5 7C86106D 37 Bytes [ 8D, 45, 04, 83, C0, 04, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProcessWorkingSetSize + 2B 7C861093 72 Bytes [ EC, 8D, 45, 04, 83, C0, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetProcessAffinityMask + 2D 7C8610DD 3 Bytes [ 8B, FF, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetProcessPriorityBoost + 1 7C8610E1 5 Bytes [ EC, 8D, 45, 04, 83 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetProcessPriorityBoost + 7 7C8610E7 77 Bytes [ 04, 50, 68, 8E, 1C, 7E, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProcessPriorityBoost + 1A 7C861135 27 Bytes [ 04, 50, 68, 1E, 1D, 7E, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProcessPriorityBoost + 37 7C861152 3 Bytes [ 8B, FF, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProcessIoCounters + 1 7C861156 83 Bytes [ EC, 8D, 45, 04, 83, C0, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetProcessHandleCount + 24 7C8611AA 34 Bytes [ 04, 50, 68, 08, 1E, 7E, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemRegistryQuota + E 7C8611CE 15 Bytes [ 04, 83, C0, 04, 50, 68, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemRegistryQuota + 1E 7C8611DE 3 Bytes [ 62, 6D, FC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemRegistryQuota + 22 7C8611E2 30 Bytes [ 83, C4, 0C, 5D, C2, 0C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemRegistryQuota + 41 7C861201 62 Bytes CALL 7C827F41 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetSystemRegistryQuota + 80 7C861240 22 Bytes [ EC, 8D, 45, 04, 83, C0, 04, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WinExec + BE 7C86142B 36 Bytes [ 83, C4, 0C, 5D, C2, 20, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WinExec + E3 7C861450 6 Bytes [ FC, FF, 83, C4, 0C, 5D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WinExec + EA 7C861457 1 Byte [ 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WinExec + EF 7C86145C 74 Bytes [ 90, 90, 8B, FF, 55, 8B, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadModule + 29 7C8614A7 97 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadModule + 8B 7C861509 89 Bytes [ 8B, 45, 0C, 33, C9, 3B, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadModule + E5 7C861563 7 Bytes [ 55, 10, 89, 0A, 8B, 4D, D0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadModule + ED 7C86156B 26 Bytes [ 55, 18, 89, 0A, 3D, A6, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LoadModule + 108 7C861586 46 Bytes [ EC, 8B, 00, 8B, 00, 89, 45, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DosPathToSessionPathA + C 7C8617A5 156 Bytes CALL 7C864A50 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DosPathToSessionPathA + A9 7C861842 49 Bytes [ 81, 59, 90, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DosPathToSessionPathA + DC 7C861875 243 Bytes CALL 7C864A75 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DosPathToSessionPathA + 1D0 7C861969 49 Bytes [ 89, 45, DC, 33, C0, 40, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenWaitableTimerW + 17 7C86199C 107 Bytes [ DC, 68, 3C, 12, 81, 59, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenWaitableTimerW + 83 7C861A08 41 Bytes [ 75, 10, FF, 75, 0C, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenWaitableTimerW + AD 7C861A32 3 Bytes [ 8B, 00, 89 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenWaitableTimerW + B1 7C861A36 47 Bytes [ DC, 33, C0, 40, C3, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenWaitableTimerW + E1 7C861A66 11 Bytes [ 75, DC, 68, 08, 13, 81, 59, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenWaitableTimerA + 4F 7C861B3F 100 Bytes [ 83, 4D, FC, FF, 83, 7D, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTermsrvAppInstallMode + 2 7C861BA4 6 Bytes [ 75, 08, E8, 6A, 2F, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTermsrvAppInstallMode + 9 7C861BAB 32 Bytes [ 89, 45, D8, 3D, A6, 09, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTermsrvAppInstallMode + 2A 7C861BCC 22 Bytes [ DC, 33, C0, 40, C3, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTermsrvAppInstallMode + 41 7C861BE3 40 Bytes [ 4D, E0, 75, 06, 83, 4D, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTermsrvAppInstallMode + 6A 7C861C0C 13 Bytes [ 83, 7D, E4, 00, 74, 03, 6A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetThreadPriorityBoost + 2E 7C862A99 23 Bytes [ 32, 2C, 32, 34, 32, 8A, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadContext + C 7C862AB1 16 Bytes [ 3C, 0A, 3D, 20, 3D, 2C, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadContext + 1D 7C862AC2 122 Bytes [ 04, 00, 30, 00, 00, 00, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadContext + 98 7C862B3D 328 Bytes [ 36, 3E, 36, 70, 36, A6, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetThreadContext + 1E1 7C862C86 31 Bytes [ 1A, 3A, AC, 3A, DC, 3A, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetThreadTimes + A 7C862CA6 133 Bytes [ 00, 00, 95, 30, A2, 30, AF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetThreadIOPendingFlag + 23 7C862D2C 418 Bytes [ D8, 33, DC, 33, E0, 33, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnhandledExceptionFilter + 6E 7C862ED0 271 Bytes [ 01, 30, 0C, 30, 14, 30, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnhandledExceptionFilter + 17E 7C862FE0 33 Bytes [ 4C, 00, 00, 00, 4B, 33, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnhandledExceptionFilter + 1A0 7C863002 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnhandledExceptionFilter + 1A2 7C863004 13 Bytes [ 8B, F0, EB, 03, 8B, 75, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnhandledExceptionFilter + 1B0 7C863012 72 Bytes [ 15, 80, 11, A1, 71, 8B, 45, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Heap32ListNext + B 7C863A52 41 Bytes [ FF, 55, 8B, EC, 56, FF, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Heap32ListNext + 35 7C863A7C 20 Bytes [ F9, 21, 46, 44, 39, 46, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Heap32ListNext + 4A 7C863A91 2 Bytes [ FF, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Heap32ListNext + 4D 7C863A94 72 Bytes [ F1, 83, 7E, 54, 00, 75, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Heap32First 7C863ADE 75 Bytes [ 90, 90, 90, 83, 61, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Heap32First + 4C 7C863B2A 65 Bytes [ 8B, F0, 85, F6, 74, 35, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Heap32First + 8E 7C863B6C 22 Bytes [ FF, 75, FC, FF, 15, A4, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Heap32First + A5 7C863B83 2 Bytes [ FF, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Heap32First + A8 7C863B86 15 Bytes [ EC, 81, EC, 78, 02, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Heap32Next + 61 7C863C59 146 Bytes [ 7D, 10, 8B, 07, 3B, C3, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Heap32Next + F4 7C863CEC 3 Bytes [ FF, 15, A4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Heap32Next + F8 7C863CF0 18 Bytes [ A1, 71, 89, 75, FC, 33, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Heap32Next + 10B 7C863D03 58 Bytes [ FF, 0B, C6, EB, 39, 89, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Toolhelp32ReadProcessMemory + 1A 7C863D3E 8 Bytes [ FF, 8B, C6, 59, E8, D9, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Toolhelp32ReadProcessMemory + 23 7C863D47 1 Byte [ C2 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Toolhelp32ReadProcessMemory + 25 7C863D49 3 Bytes [ 00, FF, 75 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Toolhelp32ReadProcessMemory + 29 7C863D4D 9 Bytes CALL 7C85736E C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Toolhelp32ReadProcessMemory + 33 7C863D57 10 Bytes [ 15, A4, 11, A1, 71, 83, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32FirstW 7C863D64 31 Bytes [ 90, 90, 90, 90, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32FirstW + 20 7C863D84 23 Bytes [ A1, 34, 40, A2, 71, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32FirstW + 38 7C863D9C 39 Bytes [ C7, 85, 60, FD, FF, FF, 94, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32FirstW + 60 7C863DC4 40 Bytes [ 85, A0, 00, 00, 00, 8D, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32FirstW + 89 7C863DED 8 Bytes [ 00, 75, 59, 8D, 85, 54, FD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32First + 2 7C863E1F 50 Bytes [ B5, 5C, FD, FF, FF, 8B, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32First + 35 7C863E52 28 Bytes [ 15, 10, 11, A1, 71, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32First + 52 7C863E6F 4 Bytes [ 85, F8, FE, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32First + 57 7C863E74 15 Bytes [ 50, FF, 15, 14, 11, A1, 71, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32First + 67 7C863E84 45 Bytes [ FF, 8D, 50, 01, 8A, 08, 40, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32NextW + 2 7C863EF1 37 Bytes [ FF, 2B, C1, 8B, F1, 4F, 8A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32NextW + 28 7C863F17 37 Bytes [ F3, A4, FF, 15, 34, 10, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32NextW + 4E 7C863F3D 77 Bytes [ 52, 53, 5C, 45, 54, 43, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32Next + 5 7C863F95 38 Bytes [ 56, 8B, 75, 08, EB, 14, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32Next + 2C 7C863FBC 29 Bytes [ 8B, C6, EB, F7, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32Next + 4A 7C863FDA 68 Bytes [ 00, FF, 75, 08, 68, FF, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32Next + 91 7C864021 12 Bytes [ 8B, F8, 3B, FB, 75, 7F, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Process32Next + 9E 7C86402E 5 Bytes [ 80, 14, E4, 81, 59 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Thread32First + 11 7C864073 337 Bytes [ FB, 75, 30, 8B, 85, E0, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Module32FirstW + 17 7C8641C6 2 Bytes [ A1, 0A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Module32FirstW + 1B 7C8641CA 152 Bytes [ 39, 75, 10, 0F, 84, 98, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Module32FirstW + B4 7C864263 47 Bytes [ 00, F6, C5, 02, 0F, 85, 71, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Module32First + 2B 7C864293 4 Bytes [ 00, C6, 45, 0F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Module32First + 30 7C864298 44 Bytes [ 8B, 4B, 24, 3B, CF, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Module32First + 5D 7C8642C5 58 Bytes [ F1, 24, 00, 00, 84, C0, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Module32First + 98 7C864300 16 Bytes [ B8, 20, E4, 81, 59, 75, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Module32First + A9 7C864311 53 Bytes [ 46, 08, A8, 10, 0F, 85, A0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Module32NextW + 7C 7C8643C8 73 Bytes [ 15, D4, D1, 81, 59, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Module32Next + 25 7C864412 145 Bytes [ 51, 52, 50, 68, B4, A3, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Module32Next + B7 7C8644A4 30 Bytes [ 76, 44, 8B, 46, 08, FF, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Module32Next + D6 7C8644C3 131 Bytes [ 85, C0, 0F, 8C, AF, 0E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Module32Next + 15A 7C864547 48 Bytes [ 8B, 45, 14, 48, 48, 59, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!Module32Next + 18C 7C864579 12 Bytes [ 59, 8D, 84, 45, F0, FD, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateToolhelp32Snapshot 7C864B47 3 Bytes [ 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateToolhelp32Snapshot + 4 7C864B4B 28 Bytes [ FF, 55, 8B, EC, 83, EC, 2C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateToolhelp32Snapshot + 21 7C864B68 127 Bytes [ 0C, 68, D4, F4, 7D, 59, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetExpandedNameA + 19 7C864BE8 24 Bytes [ C1, 59, F7, F1, 68, D0, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetExpandedNameA + 32 7C864C01 30 Bytes [ D7, FF, 75, D8, 8D, 45, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetExpandedNameA + 51 7C864C20 7 Bytes [ 15, 48, 11, 7D, 59, 83, F8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetExpandedNameA + 59 7C864C28 131 Bytes [ 8B, 4D, D4, 89, 01, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetExpandedNameW + 30 7C864CAC 43 Bytes [ FF, FF, 15, 70, 13, 7D, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetExpandedNameW + 5C 7C864CD8 6 Bytes [ FF, 39, 9D, E8, FE, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetExpandedNameW + 63 7C864CDF 18 Bytes [ 0F, 85, 3E, 4E, 00, 00, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetExpandedNameW + 77 7C864CF3 38 Bytes [ 57, 53, FF, 15, 50, 11, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetExpandedNameW + 9F 7C864D1B 3 Bytes [ 2B, FE, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZInit + 2 7C864E2C 81 Bytes [ 75, 08, 68, 50, F7, 7D, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZInit + 54 7C864E7E 25 Bytes [ 20, 02, 74, 22, 8D, 45, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZInit + 6F 7C864E99 41 Bytes [ 00, 8B, F0, 3B, F7, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZInit + 99 7C864EC3 41 Bytes [ 65, 72, 00, 90, 90, 55, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZInit + C3 7C864EED 164 Bytes [ 45, 0C, 85, C0, 75, 06, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZCreateFileW + E 7C864F93 117 Bytes [ 0C, FF, 15, B4, D1, 81, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZCreateFileW + 84 7C865009 32 Bytes JMP 7C86529D C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZCreateFileW + A5 7C86502A 26 Bytes [ FF, FF, 03, 00, 8B, 08, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZCreateFileW + C0 7C865045 17 Bytes [ 73, 14, 89, 45, 84, 8B, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZOpenFileA + 4 7C865057 107 Bytes [ 08, 50, FF, 51, 14, 3B, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZOpenFileA + 71 7C8650C4 111 Bytes [ 6A, 0E, 59, BE, D0, 63, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZOpenFileW + 20 7C865134 52 Bytes CALL 7C7D052C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZOpenFileW + 55 7C865169 17 Bytes [ 15, A0, 00, 6C, 76, E9, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZOpenFileW + 67 7C86517B 49 Bytes [ FF, FF, 57, 56, 89, 45, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZSeek + 2 7C8651AD 6 Bytes [ 83, C4, 0C, EB, 36, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZSeek + 9 7C8651B4 21 Bytes [ 78, FF, FF, FF, 6A, 09, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZSeek + 1F 7C8651CA 8 Bytes [ 30, 8D, 45, D8, 50, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZSeek + 28 7C8651D3 15 Bytes CALL 7C855754 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZSeek + 38 7C8651E3 3 Bytes [ 47, B3, F6 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZRead + 43 7C865279 93 Bytes CALL 7C7D052A .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZRead + A1 7C8652D7 80 Bytes [ 4D, FC, 5F, 5E, 5B, E8, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZRead + F2 7C865328 25 Bytes [ 66, 00, 61, 00, 69, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZRead + 10C 7C865342 191 Bytes [ 78, 00, 25, 00, 78, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZRead + 1CC 7C865402 29 Bytes [ 25, 00, 73, 00, 00, 00, 43, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZCloseFile + 12 7C865456 45 Bytes [ 78, 00, 00, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZCloseFile + 40 7C865484 31 Bytes [ 3A, 00, 20, 00, 46, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZCloseFile + 60 7C8654A4 18 Bytes [ 69, 00, 61, 00, 6C, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZCloseFile + 75 7C8654B9 5 Bytes [ 8B, FF, 55, 8B, EC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZClose + 4 7C8654BF 72 Bytes [ 45, 08, 53, 56, 8B, F1, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZClose + 4D 7C865508 32 Bytes [ 39, 3B, 0F, 84, 23, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZClose + 6E 7C865529 35 Bytes [ 1C, 68, C8, FA, 62, 76, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZClose + 92 7C86554D 22 Bytes [ 39, 3B, 0F, 84, DE, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZClose + A9 7C865564 45 Bytes [ 39, 3B, 0F, 84, C7, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ClearCommError + 16 7C865592 52 Bytes [ 39, 3B, 0F, 84, 99, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ClearCommError + 4B 7C8655C7 45 Bytes [ 68, D4, 66, 6B, 76, 8B, CB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ClearCommError + 79 7C8655F5 3 Bytes [ B8, EE, F7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ClearCommError + 7D 7C8655F9 47 Bytes [ 8B, 1B, 3B, DF, 74, 34, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ClearCommError + AD 7C865629 17 Bytes [ C4, 0C, EB, 06, C7, 06, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetupComm + 83 7C86574A 18 Bytes [ 4F, 00, 4D, 00, 49, 00, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetupComm + 96 7C86575D 88 Bytes [ EC, 83, EC, 28, 53, 56, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EscapeCommFunction + 28 7C8657B6 6 Bytes [ 00, 07, 80, E9, EB, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EscapeCommFunction + 2F 7C8657BD 55 Bytes [ 00, 39, 1E, 57, 89, 5D, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EscapeCommFunction + 67 7C8657F5 21 Bytes [ 75, FC, 8D, 45, 10, 50, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EscapeCommFunction + 7D 7C86580B 8 Bytes [ 75, FC, FF, 15, A0, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EscapeCommFunction + 86 7C865814 78 Bytes [ 45, 10, 8B, 45, 10, 3B, 06, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommMask + 1F 7C8658A9 36 Bytes [ 5E, 5B, C9, C2, 0C, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommMask + 44 7C8658CE 21 Bytes [ 70, 00, 73, 00, 3A, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommMask + 5A 7C8658E4 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommMask + 5C 7C8658E6 39 Bytes [ 6F, 00, 20, 00, 53, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommMask + 84 7C86590E 49 Bytes [ 74, 00, 20, 00, 77, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommModemStatus + 2D 7C865940 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommModemStatus + 2F 7C865942 19 Bytes [ 6F, 00, 75, 00, 70, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommModemStatus + 43 7C865956 23 Bytes [ 6F, 00, 6E, 00, 76, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommModemStatus + 5B 7C86596E 133 Bytes [ 6E, 00, 69, 00, 63, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommProperties + 58 7C8659F4 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommProperties + 5A 7C8659F6 19 Bytes [ 66, 00, 61, 00, 69, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommProperties + 6E 7C865A0A 27 Bytes [ 68, 00, 20, 00, 30, 00, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommProperties + 8A 7C865A26 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommProperties + 8C 7C865A28 163 Bytes [ 69, 00, 74, 00, 79, 00, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommState + 78 7C865ACC 29 Bytes [ 14, 50, 53, FF, 15, 8C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommState + 96 7C865AEA 139 Bytes [ 52, 56, FF, 75, 0C, 66, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommState + 122 7C865B76 24 Bytes [ 53, 00, 61, 00, 66, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommState + 13B 7C865B8F 8 Bytes [ 00, 6C, 00, 65, 00, 6D, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommState + 144 7C865B98 1 Byte [ 6E ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PurgeComm + 8 7C865D0A 30 Bytes [ 50, FF, 52, 18, 3B, C7, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PurgeComm + 27 7C865D29 5 Bytes [ EB, 06, C7, 06, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PurgeComm + 2D 7C865D2F 22 Bytes [ 00, 00, 5F, 8B, C6, 5E, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PurgeComm + 44 7C865D46 23 Bytes [ 6D, 00, 46, 00, 69, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PurgeComm + 5C 7C865D5E 83 Bytes [ 3A, 00, 43, 00, 41, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCommMask + E 7C865DB2 76 Bytes [ 78, 00, 00, 00, 90, 90, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCommMask + 5B 7C865DFF 47 Bytes [ 10, 74, 6F, 8D, 45, 08, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCommMask + 8B 7C865E2F 104 Bytes [ 00, 57, FF, 50, 14, 3B, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCommState + 55 7C865E98 1 Byte [ 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCommState + 57 7C865E9A 23 Bytes [ 6D, 00, 65, 00, 50, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCommState + 6F 7C865EB2 23 Bytes [ 46, 00, 75, 00, 6E, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCommState + 87 7C865ECA 1 Byte [ 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCommState + 89 7C865ECC 21 Bytes [ 65, 00, 64, 00, 20, 00, 77, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCommTimeouts + 4E 7C866199 23 Bytes [ 48, 00, 00, 00, 00, 06, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCommTimeouts + 66 7C8661B1 22 Bytes [ 00, 00, 00, 00, 00, 0B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCommTimeouts + 7D 7C8661C8 113 Bytes [ 0B, 01, 0C, 00, 08, 00, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TransmitCommChar + 45 7C86623B 108 Bytes [ 48, 00, 00, 00, 00, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitCommEvent + 28 7C8662A8 5 Bytes [ 00, 00, 00, 00, 0B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitCommEvent + 2E 7C8662AE 21 Bytes [ 00, 00, 02, 00, 0B, 01, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitCommEvent + 44 7C8662C4 63 Bytes [ 0A, 01, 10, 00, F8, 10, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitCommEvent + 84 7C866304 21 Bytes [ 31, 04, 00, 00, 00, 5C, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WaitCommEvent + 9B 7C86631B 28 Bytes [ 00, 02, 00, 0B, 01, 04, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CommConfigDialogW + 21 7C86679E 12 Bytes [ 1B, 00, 1C, 00, 31, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CommConfigDialogW + 2E 7C8667AB 67 Bytes [ 00, 47, 07, 08, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CommConfigDialogW + 72 7C8667EF 1 Byte [ 5C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CommConfigDialogW + 74 7C8667F1 10 Bytes [ 00, 08, 00, 47, 03, 08, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CommConfigDialogW + 7F 7C8667FC 20 Bytes [ 00, 00, 0B, 00, 00, 00, 02, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CommConfigDialogA + 1D 7C86688E 42 Bytes [ 0B, 01, 0C, 00, 08, 00, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CommConfigDialogA + 49 7C8668BA 19 Bytes [ 00, 5C, 56, 00, CC, 00, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CommConfigDialogA + 5E 7C8668CF 55 Bytes [ 00, 0B, 01, 04, 00, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CommConfigDialogA + 97 7C866908 10 Bytes [ 00, 5C, 58, 00, 58, 00, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CommConfigDialogA + A2 7C866913 20 Bytes [ 00, 01, 00, 00, 00, 0B, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDefaultCommConfigW + 1F 7C866968 1 Byte [ 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDefaultCommConfigW + 21 7C86696A 81 Bytes [ 08, 00, 0B, 01, 08, 00, 92, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDefaultCommConfigW + 73 7C8669BC 34 Bytes [ 14, 00, 02, 00, 48, 00, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDefaultCommConfigW + 96 7C8669DF 73 Bytes [ 00, 00, 5C, 00, 00, 24, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDefaultCommConfigW + E0 7C866A29 12 Bytes [ 00, 02, 00, 13, 21, 04, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDefaultCommConfigA + 1D 7C866A5E 1 Byte [ 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDefaultCommConfigA + 1F 7C866A60 117 Bytes [ 08, 00, 0B, 01, 08, 00, 92, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDefaultCommConfigA + 95 7C866AD6 31 Bytes [ 78, 16, 48, 00, 14, 00, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDefaultCommConfigA + B6 7C866AF7 24 Bytes [ 48, 00, 00, 00, 00, 28, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDefaultCommConfigA + CF 7C866B10 40 Bytes [ 00, 00, 00, 00, 0B, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDefaultCommConfigW + 21 7C866B3A 80 Bytes [ 00, 5C, 88, 00, 08, 00, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDefaultCommConfigW + 73 7C866B8C 11 Bytes [ 0B, 00, 00, 00, 02, 00, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDefaultCommConfigW + 7F 7C866B98 21 Bytes [ 48, 00, 08, 00, 0D, 00, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDefaultCommConfigW + 95 7C866BAE 87 Bytes [ 76, 00, 12, 41, 18, 00, D4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDefaultCommConfigW + ED 7C866C06 1 Byte [ 1C ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDefaultCommConfigA + 11 7C866C22 4 Bytes [ 0B, 01, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDefaultCommConfigA + 16 7C866C27 14 Bytes [ 00, 0A, 01, 08, 00, 76, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDefaultCommConfigA + 25 7C866C36 41 Bytes [ 10, 00, 08, 00, 13, 20, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDefaultCommConfigA + 4F 7C866C60 77 Bytes [ 1C, 00, 00, 00, 0B, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetDefaultCommConfigA + 9D 7C866CAE 31 Bytes [ 28, 00, 31, 04, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ClearCommBreak + 13 7C866D04 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommConfig 7C866D09 77 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommConfig + 4E 7C866D57 17 Bytes [ FF, 15, 68, 11, 7D, 59, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommConfig + 60 7C866D69 262 Bytes [ 90, 90, 90, 90, 90, FF, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCommConfig + 167 7C866E70 213 Bytes [ 45, 0C, 83, 20, 00, 50, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNextVDMCommand + 4 7C866F47 23 Bytes [ B8, 5A, 08, 00, 00, E9, 86, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNextVDMCommand + 1C 7C866F5F 5 Bytes [ 55, 8B, EC, 8D, 45 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNextVDMCommand + 22 7C866F65 25 Bytes [ 83, C0, 04, 50, 68, 76, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNextVDMCommand + 3C 7C866F7F 47 Bytes [ 90, 90, 90, 90, 90, 8B, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNextVDMCommand + 6D 7C866FB0 50 Bytes [ F6, 45, 0C, 3F, 74, E2, F7, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExitVDM + B 7C8676A0 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExitVDM + 19 7C8676AE 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExitVDM + 39 7C8676CE 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExitVDM + 3E 7C8676D3 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExitVDM + 40 7C8676D5 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVDMCurrentDirectories + 5 7C867719 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVDMCurrentDirectories + 20 7C867734 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVDMCurrentDirectories + 38 7C86774C 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVDMCurrentDirectories + 3E 7C867752 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVDMCurrentDirectories + 49 7C86775D 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVDMCurrentDirectories + 6E 7C8678B7 98 Bytes [ 4A, 87, 74, 71, 96, 11, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVDMCurrentDirectories + D1 7C86791A 89 Bytes [ 85, 5A, 7A, 01, 0E, 0C, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVDMCurrentDirectories + 12B 7C867974 63 Bytes [ 00, 00, 00, 4A, 12, 23, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterWowExec + B 7C8679B4 117 Bytes [ 00, 00, 00, 4A, 11, 10, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterWowExec + 81 7C867A2A 26 Bytes [ 06, 4A, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterWowExec + 9C 7C867A45 13 Bytes [ 4A, 4A, 4A, 4A, 4A, 4A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterWowExec + AC 7C867A55 102 Bytes [ 00, 00, 00, 00, 4A, 4A, 4A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterWowExec + 115 7C867ABE 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetBinaryTypeW + 4 7C867BD0 55 Bytes [ 84, E7, FF, 00, 3F, B8, D7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetBinaryTypeW + 3C 7C867C08 39 Bytes [ 25, A2, CF, 00, 28, 99, BF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetBinaryTypeW + 64 7C867C30 12 Bytes [ 84, D7, FF, 00, F7, FB, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetBinaryTypeW + 73 7C867C3F 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetBinaryTypeW + 8E 7C867C5A 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VDMOperationStarted + A 7C867E23 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VDMOperationStarted + C 7C867E25 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VDMOperationStarted + 17 7C867E30 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VDMOperationStarted + 31 7C867E4A 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VDMOperationStarted + 3F 7C867E58 2 Bytes [ 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetBinaryType + F 7C86803A 7 Bytes JMP 7C867F08 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetBinaryType + 17 7C868042 15 Bytes [ 44, 00, 65, 00, 76, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetBinaryType + 27 7C868052 26 Bytes [ 63, 00, 70, 00, 00, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetBinaryType + 42 7C86806D 34 Bytes [ 83, C0, FC, 33, D2, 8B, CB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetBinaryType + 65 7C868090 26 Bytes [ 57, BF, E0, 40, D3, 76, 57, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLongPathNameA + 3C 7C8685C2 27 Bytes [ 83, 7D, 0C, 01, A1, 54, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLongPathNameA + 58 7C8685DE 46 Bytes [ 15, 5C, 11, D2, 76, 3B, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLongPathNameA + 87 7C86860D 170 Bytes [ 05, 10, 45, D3, 76, 59, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLongPathNameA + 132 7C8686B8 87 Bytes [ 25, 58, 11, D2, 76, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLongPathNameA + 18A 7C868710 9 Bytes [ FF, 90, 90, 90, 90, 90, 8B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeMountPointW + AE 7C868E5F 12 Bytes [ 76, 6B, A1, F8, 47, D3, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeMountPointW + BC 7C868E6D 18 Bytes [ C7, 45, D8, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeMountPointW + D1 7C868E82 63 Bytes [ 8B, 04, B0, 89, 45, D0, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeMountPointW + 111 7C868EC2 53 Bytes [ 00, 46, 3B, 35, F4, 47, D3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeMountPointW + 147 7C868EF8 13 Bytes [ 00, 8B, 4D, 0C, 89, 48, 0C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeMountPointW + 7 7C869064 104 Bytes [ 74, 00, 69, 00, 6F, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeMountPointW + 70 7C8690CD 50 Bytes [ 0A, 50, FF, 15, B4, 13, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeMountPointW + A3 7C869100 30 Bytes [ 83, A4, 86, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeMountPointW + C2 7C86911F 5 Bytes [ 90, 90, 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeMountPointW + C8 7C869125 154 Bytes [ FF, 55, 8B, EC, 8D, 81, 04, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVolumeMountPointW + 35 7C8693CA 20 Bytes [ FF, 50, 68, 02, 00, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVolumeMountPointW + 4A 7C8693DF 22 Bytes [ 8B, 35, 10, 12, 62, 76, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVolumeMountPointW + 61 7C8693F6 6 Bytes [ 50, 8D, 85, E0, FD, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVolumeMountPointW + 68 7C8693FD 35 Bytes [ 50, 53, 68, B4, 98, 62, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetVolumeMountPointW + 8C 7C869421 1 Byte [ EC ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeleteVolumeMountPointW + B0 7C8699E0 149 Bytes [ D6, 8D, 45, F8, 50, 68, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeleteVolumeMountPointW + 146 7C869A76 16 Bytes [ 00, 7E, 48, 33, FF, 39, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeleteVolumeMountPointW + 157 7C869A87 118 Bytes CALL 7C81BB80 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeleteVolumeMountPointW + 1CE 7C869AFE 12 Bytes [ 00, 00, 40, 53, FF, 15, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DeleteVolumeMountPointW + 1DB 7C869B0B 71 Bytes [ FE, FF, 74, 85, 39, 3D, 90, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeA + 37 7C869C36 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeA + 39 7C869C38 149 Bytes [ 75, 00, 73, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeA + CF 7C869CCE 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeA + D1 7C869CD0 31 Bytes [ 65, 00, 6D, 00, 70, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeA + F1 7C869CF0 1 Byte [ 69 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeMountPointA + 1F 7C869D38 41 Bytes [ 65, 00, 64, 00, 20, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeMountPointA + 49 7C869D62 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeMountPointA + 4B 7C869D64 151 Bytes [ 6F, 00, 66, 00, 69, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeMountPointA + E3 7C869DFC 1 Byte [ 68 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeMountPointA + E5 7C869DFE 20 Bytes [ 20, 00, 65, 00, 72, 00, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeMountPointA + 22 7C869E6B 20 Bytes [ 00, 6F, 00, 72, 00, 20, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeMountPointA + 37 7C869E80 1 Byte [ 75 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeMountPointA + 39 7C869E82 97 Bytes [ 63, 00, 68, 00, 4C, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeMountPointA + 9B 7C869EE4 17 Bytes [ 56, 8B, 75, 18, 81, E7, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindNextVolumeMountPointA + AD 7C869EF6 30 Bytes [ 75, 14, FF, 75, 10, E8, 9B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeNameForVolumeMountPointA + 1F 7C869F80 41 Bytes [ 65, 00, 43, 00, 61, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeNameForVolumeMountPointA + 49 7C869FAA 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeNameForVolumeMountPointA + 4B 7C869FAC 149 Bytes [ 20, 00, 25, 00, 6C, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeNameForVolumeMountPointA + E1 7C86A042 1 Byte [ 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumeNameForVolumeMountPointA + E3 7C86A044 31 Bytes [ 3A, 00, 20, 00, 50, 00, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNamesForVolumeNameA + 1E 7C86A11E 1 Byte [ 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNamesForVolumeNameA + 20 7C86A120 41 Bytes [ 6F, 00, 6C, 00, 69, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNamesForVolumeNameA + 4A 7C86A14A 79 Bytes [ 75, 00, 74, 00, 20, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNamesForVolumeNameA + 9A 7C86A19A 115 Bytes [ 69, 00, 6E, 00, 67, 00, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetVolumePathNamesForVolumeNameA + 10E 7C86A20E 1 Byte [ 74 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeA + 37 7C86A290 1 Byte [ 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeA + 39 7C86A292 149 Bytes [ 75, 00, 74, 00, 20, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeA + CF 7C86A328 11 Bytes [ 65, 00, 64, 00, 2C, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeA + DB 7C86A334 7 Bytes [ 25, 00, 78, 00, 00, 00, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindFirstVolumeA + E7 7C86A340 9 Bytes [ 53, 00, 65, 00, 74, 00, 50, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BuildCommDCBAndTimeoutsA + 9 7C86AEC8 114 Bytes [ 7D, FC, 68, 6C, B3, 65, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BuildCommDCBAndTimeoutsW + 1D 7C86AF3C 1 Byte [ DC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BuildCommDCBAndTimeoutsW + 21 7C86AF40 32 Bytes [ 98, 00, 6C, 76, 8B, 45, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BuildCommDCBAndTimeoutsW + 42 7C86AF61 193 Bytes [ 75, E4, 53, FF, 50, 40, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BuildCommDCBW + AA 7C86B023 93 Bytes [ FF, 8B, 50, 10, 8B, 40, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTapePosition + 3B 7C86B081 15 Bytes [ 85, C0, 0F, 85, 80, A9, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTapePosition + 5 7C86B091 40 Bytes [ 76, 35, 8B, 4D, F4, 8D, 54, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTapePosition + 2E 7C86B0BA 40 Bytes [ 75, EC, 81, C1, 5C, 03, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetTapePosition + 57 7C86B0E3 64 Bytes [ 46, 3B, 37, 0F, 83, 1B, A9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EraseTape + 9 7C86B124 31 Bytes [ A4, 50, 6A, 28, 56, E8, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EraseTape + 2A 7C86B145 14 Bytes [ 85, C0, 0F, 85, 0D, C4, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateTapePartition + 6 7C86B154 84 Bytes JMP 7C867576 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteTapemark + 21 7C86B1A9 150 Bytes [ 48, 01, 8A, 10, 40, 84, D2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetTapeParameters + 22 7C86B240 59 Bytes JMP 7C865C87 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenJobObjectW 7C86B280 63 Bytes [ 53, 59, 53, 54, 45, 4D, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenJobObjectW + 41 7C86B2C1 22 Bytes CALL 7D86EFD3 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenJobObjectW + 58 7C86B2D8 37 Bytes JMP 7C8665E8 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!TerminateJobObject + 7 7C86B2FE 101 Bytes [ FF, C7, 85, D0, FE, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateJobSet + 6 7C86B364 5 Bytes [ 89, BD, C0, FE, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateJobSet + C 7C86B36A 23 Bytes CALL 7C865C05 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateJobSet + 24 7C86B382 18 Bytes [ FE, FF, FF, FF, 15, 08, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateJobObjectA + 9 7C86B395 44 Bytes [ C0, 59, 8D, BD, DC, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateJobObjectA + 36 7C86B3C2 5 Bytes [ C8, FE, FF, FF, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateJobObjectA + 3C 7C86B3C8 2 Bytes [ 85, C0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateJobObjectA + 3F 7C86B3CB 18 Bytes [ F1, C6, 85, DB, FE, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateJobObjectA + 52 7C86B3DE 8 Bytes [ FF, 6A, 1C, 8D, 85, DC, FE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenJobObjectA + 2 7C86B3FA 82 Bytes [ 80, BD, DB, FE, FF, FF, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!OpenJobObjectA + 55 7C86B44D 85 Bytes CALL 7C874556 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateHardLinkW + 37 7C86B4A3 60 Bytes [ D6, 50, FF, 15, D8, 10, D2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateHardLinkW + 74 7C86B4E0 223 Bytes [ 45, 20, 85, C0, 74, 4E, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateHardLinkW + 154 7C86B5C0 29 Bytes [ 51, 8D, 87, 8C, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateHardLinkW + 172 7C86B5DE 17 Bytes [ 8D, 45, 08, 50, 8D, 45, B4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateHardLinkW + 184 7C86B5F0 31 Bytes [ 6A, 29, C7, 45, 08, 38, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateHardLinkA + 1D 7C86B646 109 Bytes [ FF, 8D, 3C, 03, 89, 3A, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateSocketHandle + 20 7C86B6B4 22 Bytes [ 8B, 00, 33, C9, 3D, 05, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateSocketHandle + 37 7C86B6CB 42 Bytes CALL 7C865CB4 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateSocketHandle + 62 7C86B6F6 5 Bytes JMP 7C8679D9 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ZombifyActCtx + 1 7C86B6FC 14 Bytes [ 4D, D8, 89, 01, 6A, 06, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ZombifyActCtx + 10 7C86B70B 27 Bytes [ 18, 89, 45, E4, 8B, 4D, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ZombifyActCtx + 2C 7C86B727 77 Bytes [ CA, 83, E1, 03, F3, A4, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ZombifyActCtx + 7A 7C86B775 22 Bytes [ F2, 8B, F8, F3, A5, 83, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ZombifyActCtx + 91 7C86B78C 41 Bytes [ 72, 0C, 8B, F8, 8B, D1, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateActCtxA + 11 7C86B7B6 35 Bytes [ C2, 08, 89, 55, D4, 8B, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateActCtxA + 35 7C86B7DA 17 Bytes [ 8B, 4D, D0, 89, 01, 6A, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateActCtxA + 47 7C86B7EC 7 Bytes [ 45, E4, 8B, 4D, D0, 8B, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateActCtxA + 4F 7C86B7F4 50 Bytes [ 41, 0C, 8B, 4A, 10, 8B, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateActCtxA + 82 7C86B827 5 Bytes [ 55, D0, 8B, 51, 08 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindActCtxSectionStringA + 2 7C86BB11 45 Bytes [ FF, 01, 00, 00, 00, 6A, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FindActCtxSectionStringA + 30 7C86BB3F 39 Bytes [ FF, FF, 5C, 0F, 85, E8, AE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComPlusPackageInstallStatus + 2 7C86BB67 14 Bytes [ FF, 33, C9, 3B, C7, 74, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComPlusPackageInstallStatus + 12 7C86BB77 26 Bytes [ 00, 75, 2A, 3B, CF, 74, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComPlusPackageInstallStatus + 2D 7C86BB92 10 Bytes [ FF, FF, 8B, 10, 89, 30, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetComPlusPackageInstallStatus + 38 7C86BB9D 19 Bytes [ 00, 8B, F0, 8B, C2, EB, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComPlusPackageInstallStatus + F 7C86BBB1 60 Bytes JMP 7C8661AD C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComPlusPackageInstallStatus + 4C 7C86BBEE 23 Bytes [ 54, 45, 52, 5F, 41, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComPlusPackageInstallStatus + 64 7C86BC06 28 Bytes [ 6C, 75, 72, 65, 3D, 20, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetComPlusPackageInstallStatus + 81 7C86BC23 141 Bytes CALL 7C874E4A C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseFlushAppcompatCache + 73 7C86BCB2 31 Bytes [ 57, 56, 53, FF, D0, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseDumpAppcompatCache + 11 7C86BCD2 39 Bytes JMP 7C869F0A C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseDumpAppcompatCache + 39 7C86BCFA 15 Bytes [ 6C, 00, 33, 00, 32, 00, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseDumpAppcompatCache + 49 7C86BD0A 17 Bytes [ 90, 90, 77, 00, 69, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseDumpAppcompatCache + 5B 7C86BD1C 19 Bytes [ 64, 00, 6C, 00, 6C, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseDumpAppcompatCache + 6F 7C86BD30 11 Bytes [ 6C, 00, 70, 00, 2E, 00, 64, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseCleanupAppcompatCache + F 7C86BE15 123 Bytes [ 00, 69, 00, 63, 00, 20, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseCleanupAppcompatCacheSupport + 7 7C86BE91 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseCleanupAppcompatCacheSupport + 9 7C86BE93 12 Bytes [ 00, B8, 40, D3, 76, A0, 8E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseCleanupAppcompatCacheSupport + 16 7C86BEA0 34 Bytes [ 16, 2D, 01, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseCleanupAppcompatCacheSupport + 39 7C86BEC3 10 Bytes [ C1, 8B, F2, 23, F7, 23, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BaseCleanupAppcompatCacheSupport + 45 7C86BECF 6 Bytes [ FF, 00, 75, 2D, 8B, C1 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UpdateResourceW + 2 7C86F5A5 14 Bytes [ FF, FF, FF, 20, 46, DF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UpdateResourceW + 11 7C86F5B4 27 Bytes [ 4A, 68, E5, FF, 6B, 84, EA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UpdateResourceW + 2D 7C86F5D0 15 Bytes [ 3F, 66, E7, FF, 39, 64, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UpdateResourceW + 3D 7C86F5E0 11 Bytes [ 6E, 90, F0, FF, F2, F5, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UpdateResourceW + 49 7C86F5EC 4 Bytes [ 34, 63, EC, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UpdateResourceA + 2 7C86F6AC 67 Bytes [ D1, DB, FA, FF, 1B, 4D, E5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UpdateResourceA + 46 7C86F6F0 79 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UpdateResourceA + 96 7C86F740 16 Bytes [ 53, 6E, E6, FF, 4E, 6B, E6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UpdateResourceA + A8 7C86F752 73 Bytes [ FF, FF, FF, FF, FF, FF, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EndUpdateResourceW + 28 7C86F79C 20 Bytes [ EA, ED, FC, FF, 6A, 82, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EndUpdateResourceW + 3E 7C86F7B2 48 Bytes [ FF, FF, FF, FF, FF, FF, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EndUpdateResourceW + 70 7C86F7E4 24 Bytes [ FF, FF, FF, FF, 3E, 5F, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EndUpdateResourceW + 89 7C86F7FD 6 Bytes [ FF, FF, FF, A4, B2, F2 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EndUpdateResourceW + 90 7C86F804 19 Bytes [ 4E, 6A, E6, FF, 49, 66, E4, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EndUpdateResourceA + B 7C86F954 12 Bytes [ 30, 52, DC, FF, 29, 49, CA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EndUpdateResourceA + 18 7C86F961 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EndUpdateResourceA + 1B 7C86F964 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EndUpdateResourceA + 1E 7C86F967 32 Bytes [ FF, 4F, 6D, E6, FF, 7E, 95, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EndUpdateResourceA + 3F 7C86F988 23 Bytes JMP 7C86F679 C:\WINDOWS\system32\kernel32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BeginUpdateResourceW + A 7C86FAE2 17 Bytes [ FF, DF, FF, FF, FF, 5F, F1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BeginUpdateResourceW + 1C 7C86FAF4 59 Bytes [ 52, 6F, E7, FF, 4B, 68, E6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BeginUpdateResourceW + 58 7C86FB30 16 Bytes [ 1F, 45, DE, FF, 18, 3E, D5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BeginUpdateResourceW + 69 7C86FB41 12 Bytes [ FF, FF, 5F, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BeginUpdateResourceW + 77 7C86FB4F 22 Bytes [ DF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BeginUpdateResourceA + 29 7C86FCA4 35 Bytes [ 7F, 90, D1, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BeginUpdateResourceA + 4D 7C86FCC8 7 Bytes [ 29, 51, DC, FF, 24, 4F, DF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BeginUpdateResourceA + 55 7C86FCD0 28 Bytes [ 1C, 4B, E0, FF, 15, 47, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BeginUpdateResourceA + 73 7C86FCEE 5 Bytes [ FF, FF, 19, 41, DE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!BeginUpdateResourceA + 79 7C86FCF4 11 Bytes [ 2C, 50, E1, FF, 37, 59, E3, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasW + 27 7C8700AD 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasA + 7 7C8700B9 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasA + 25 7C8700D7 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasA + 35 7C8700E7 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasA + 4F 7C870101 84 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasA + A4 7C870156 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasesLengthW + 13 7C8701B4 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasesLengthA + 7 7C8701C0 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasesLengthA + 13 7C8701CC 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasesLengthA + 23 7C8701DC 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasesLengthA + 31 7C8701EA 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasesLengthA + 47 7C870200 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasExesLengthA + 4C 7C87029E 174 Bytes [ 4D, 43, 3D, 2E, 56, 44, 5A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasExesLengthA + FB 7C87034D 59 Bytes [ 3F, BC, A0, F0, 07, A8, AA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasExesLengthA + 137 7C870389 40 Bytes [ FF, E4, C2, 28, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasExesLengthA + 160 7C8703B2 47 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasesW + 19 7C8703E2 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasesA + 7 7C8703EE 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasesA + 19 7C870400 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasesA + 23 7C87040A 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasesA + 3E 7C870425 60 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasesA + 7D 7C870464 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasExesW + 16 7C870547 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasExesA + 7 7C870553 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasExesA + 16 7C870562 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasExesA + 26 7C870572 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasExesA + 3F 7C87058B 90 Bytes [ 60, 1A, 1A, 1A, BD, 29, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleAliasExesA + 9A 7C8705E6 35 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpungeConsoleCommandHistoryW + 13 7C870622 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpungeConsoleCommandHistoryA + 7 7C87062E 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpungeConsoleCommandHistoryA + 13 7C87063A 33 Bytes [ 00, 16, 00, 00, 00, 39, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpungeConsoleCommandHistoryA + 35 7C87065C 98 Bytes [ 26, 26, 26, EB, 14, 14, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpungeConsoleCommandHistoryA + 98 7C8706BF 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ExpungeConsoleCommandHistoryA + B4 7C8706DB 48 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleNumberOfCommandsW + 2 7C87070C 15 Bytes [ DC, DC, DC, FF, AB, A3, A3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleNumberOfCommandsW + 12 7C87071C 30 Bytes [ 9C, 84, 84, FF, 5E, 54, 54, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleNumberOfCommandsA + 16 7C87073B 13 Bytes [ 40, 00, 00, 00, 1B, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleNumberOfCommandsA + 26 7C87074B 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleNumberOfCommandsA + 40 7C870765 98 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleNumberOfCommandsA + A3 7C8707C8 27 Bytes [ 7A, 7A, 7A, FF, D2, D2, D2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleNumberOfCommandsA + BF 7C8707E4 51 Bytes [ C8, A5, A5, FF, 88, 74, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleCommandHistoryLengthA + 13 7C870818 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleCommandHistoryLengthA + 1D 7C870822 39 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleCommandHistoryLengthA + 47 7C87084C 43 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleCommandHistoryLengthA + 73 7C870878 31 Bytes [ DD, DD, DD, FF, 48, 48, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleCommandHistoryLengthA + 93 7C870898 15 Bytes [ B7, 9C, 9C, FF, BD, A0, A0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleCommandHistoryW + 19 7C8709A2 11 Bytes [ 00, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleCommandHistoryA + 7 7C8709AE 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleCommandHistoryA + 19 7C8709C0 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCommandHistoryMode + A 7C8709CF 60 Bytes [ 1F, 00, 00, 00, 51, 1D, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCommandHistoryMode + 47 7C870A0C 11 Bytes [ B9, B9, B9, FF, 8B, 88, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCommandHistoryMode + 53 7C870A18 23 Bytes [ 4A, 43, 43, FF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCommandHistoryMode + 6B 7C870A30 64 Bytes [ 29, 29, 29, FF, 7C, 7A, 7A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleTitleA + 10 7C870A71 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleTitleA + 28 7C870A89 34 Bytes [ 00, 00, 61, 29, 29, 29, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleTitleA + 4B 7C870AAC 3 Bytes [ CF, CF, CF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleTitleA + 4F 7C870AB0 19 Bytes [ CB, CB, CB, FF, C8, C8, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleTitleA + 63 7C870AC4 43 Bytes [ 76, 76, 76, FF, 73, 73, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleInputExeNameW + 1F 7C870AF0 8 Bytes [ 00, 00, 00, FF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleInputExeNameW + 28 7C870AF9 16 Bytes [ 00, 00, FF, 45, 45, 45, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleInputExeNameW + 39 7C870B0A 27 Bytes [ BE, FF, E6, BA, BA, FF, A2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleInputExeNameW + 55 7C870B26 6 Bytes [ 00, 86, 00, 00, 00, 4F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleInputExeNameW + 5E 7C870B2F 10 Bytes [ 1F, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddConsoleAliasW + 23 7C870CA4 59 Bytes [ B3, 93, 93, FF, 4A, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddConsoleAliasA + 21 7C870CE0 11 Bytes [ C1, C1, C1, FF, BC, BC, BC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AddConsoleAliasA + 2D 7C870CEC 83 Bytes [ B5, B5, B5, FF, B1, B1, B1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleInputExeNameA + 44 7C870D40 15 Bytes [ 20, 20, 20, FF, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleInputExeNameA + 54 7C870D50 7 Bytes [ 53, 53, 53, FF, BE, A6, A6 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleInputExeNameA + 5C 7C870D58 7 Bytes [ DC, B4, B4, FF, E6, BB, BB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleInputExeNameA + 64 7C870D60 99 Bytes [ ED, C0, C0, FF, F4, C5, C5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleInputExeNameA + 1C 7C870DC4 47 Bytes JMP 2786F7B2 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleInputExeNameA + 4C 7C870DF4 31 Bytes [ 7B, 72, 72, FF, 55, 4E, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleInputExeNameA + 6C 7C870E14 15 Bytes [ 9B, 8B, 8B, FF, CD, AB, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleInputExeNameA + 7C 7C870E24 7 Bytes [ E6, BB, BB, FF, 8F, 79, 79 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleInputExeNameA + 84 7C870E2C 19 Bytes [ 11, 11, 11, C2, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeConsole + 15 7C8710A2 95 Bytes [ 73, 00, 6E, 00, 61, 00, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeConsole + 75 7C871102 17 Bytes [ 68, 00, 61, 00, 6C, 00, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeConsole + 87 7C871114 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeConsole + 89 7C871116 52 Bytes [ 73, 00, 20, 00, 31, 00, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FreeConsole + BE 7C87114B 10 Bytes [ 00, 6E, 00, 64, 00, 20, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AllocConsole + 5 7C871316 43 Bytes [ 6E, 00, 67, 00, 20, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AllocConsole + 33 7C871344 33 Bytes [ D0, 01, 01, 00, 7B, 00, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AllocConsole + 55 7C871366 36 Bytes [ 65, 00, 69, 00, 63, 00, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AllocConsole + 7A 7C87138B 2 Bytes [ 00, 44 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AllocConsole + 7D 7C87138E 15 Bytes [ 65, 00, 72, 00, 20, 00, 50, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AttachConsole + 5 7C8714FE 43 Bytes [ 62, 00, 65, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AttachConsole + 31 7C87152A 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AttachConsole + 33 7C87152C 137 Bytes [ 20, 00, 49, 00, 4F, 00, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AttachConsole + BD 7C8715B6 7 Bytes [ 65, 00, 69, 00, 6E, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!AttachConsole + C5 7C8715BE 1 Byte [ 77 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleInputWaitHandle + F 7C871608 25 Bytes [ 68, 00, 6C, 00, 75, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleInputWaitHandle + 29 7C871622 1 Byte [ 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleInputWaitHandle + 2B 7C871624 173 Bytes [ 74, 00, E4, 00, 6E, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleInputWaitHandle + D9 7C8716D2 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleInputWaitHandle + DB 7C8716D4 11 Bytes [ 73, 00, 74, 00, 65, 00, 6C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterConsoleVDM + 4 7C871AC6 30 Bytes [ 0D, 00, 0A, 00, 00, 00, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterConsoleVDM + 23 7C871AE5 7 Bytes [ 00, 72, 00, 65, 00, 64, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterConsoleVDM + 2B 7C871AED 14 Bytes [ 00, 6E, 00, 64, 00, 61, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterConsoleVDM + 3A 7C871AFC 117 Bytes [ 0A, 00, 55, 00, 6D, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterConsoleVDM + B0 7C871B72 113 Bytes [ 61, 00, 6E, 00, 7A, 00, 73, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleHardwareState + 3 7C871C1C 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleHardwareState + 5 7C871C1E 27 Bytes [ 6E, 00, 6F, 00, 74, 00, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleHardwareState + 21 7C871C3A 1 Byte [ 64 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleHardwareState + 23 7C871C3C 181 Bytes [ 61, 00, 73, 00, 20, 00, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleHardwareState + 9 7C871CF2 1 Byte [ 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleHardwareState + B 7C871CF4 11 Bytes [ 63, 00, 68, 00, 20, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleHardwareState + 17 7C871D00 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleHardwareState + 19 7C871D02 33 Bytes [ 64, 00, 65, 00, 6D, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleHardwareState + 3B 7C871D24 63 Bytes [ 65, 00, 75, 00, 20, 00, 7A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleKeyShortcuts + 9 7C871D72 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleKeyShortcuts + B 7C871D74 17 Bytes [ 75, 00, 6E, 00, 67, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleKeyShortcuts + 1D 7C871D86 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleKeyShortcuts + 1F 7C871D88 95 Bytes [ 72, 00, 69, 00, 65, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleKeyShortcuts + 7F 7C871DE8 31 Bytes [ 6E, 00, 67, 00, 20, 00, 77, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleMenuClose + A 7C871E3A 13 Bytes [ 2E, 00, 0D, 00, 0A, 00, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleMenuClose + 18 7C871E48 27 Bytes [ 20, 00, 57, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleMenuClose + 34 7C871E64 19 Bytes [ 4C, 00, 5F, 00, 53, 00, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleMenuClose + 48 7C871E78 69 Bytes [ 4F, 00, 46, 00, 46, 00, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleInputVDMA + 1A 7C871EBE 3 Bytes [ 2E, 00, 29 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleInputVDMA + 1E 7C871EC2 11 Bytes [ 0D, 00, 0A, 00, 00, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleInputVDMW + 7 7C871ECE 17 Bytes [ 4B, 00, 65, 00, 6E, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleInputVDMW + 19 7C871EE0 19 Bytes [ 7A, 00, 75, 00, 20, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCursor + A 7C871EF4 13 Bytes [ 65, 00, 69, 00, 63, 00, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCursor + 18 7C871F02 33 Bytes [ 44, 00, 61, 00, 73, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCursor + 3A 7C871F24 19 Bytes [ 6F, 00, 72, 00, 74, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCursor + 4E 7C871F38 53 Bytes [ 20, 00, 75, 00, 6D, 00, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ShowConsoleCursor + A 7C871F6E 13 Bytes [ 2D, 00, 4D, 00, 61, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ShowConsoleCursor + 18 7C871F7C 33 Bytes [ 72, 00, 2D, 00, 4B, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ShowConsoleCursor + 3A 7C871F9E 27 Bytes [ 6E, 00, 64, 00, 65, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ShowConsoleCursor + 56 7C871FBA 13 Bytes [ 65, 00, 6E, 00, 2E, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConsoleMenuControl + 9 7C871FC8 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConsoleMenuControl + B 7C871FCA 11 Bytes [ 67, 00, 65, 00, 6C, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConsoleMenuControl + 17 7C871FD6 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConsoleMenuControl + 19 7C871FD8 30 Bytes [ 72, 00, 74, 00, 65, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ConsoleMenuControl + 38 7C871FF7 2 Bytes [ 00, 4B ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleDisplayMode + 23 7C8720C3 202 Bytes [ 90, 53, 65, 74, 75, 70, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleDisplayMode + F0 7C872190 185 Bytes [ 53, 65, 74, 75, 70, 44, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsolePalette + 81 7C87224A 71 Bytes [ 73, 74, 61, 6E, 63, 65, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsolePalette + C9 7C872292 92 Bytes [ 90, 90, 53, 65, 74, 75, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsolePalette + 126 7C8722EF 64 Bytes [ 75, 70, 44, 69, 47, 65, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsolePalette + 167 7C872330 136 Bytes [ 69, 6F, 6E, 54, 6F, 49, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsolePalette + 1F0 7C8723B9 22 Bytes [ 79, 43, 6C, 61, 73, 73, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleInputA + B 7C8723D0 231 Bytes [ 70, 44, 69, 44, 65, 6C, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleInputW + D0 7C8724B8 190 Bytes [ 51, 75, 65, 75, 65, 43, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleInputW + 18F 7C872577 292 Bytes [ 90, 43, 4D, 5F, 47, 65, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleInputW + 2B4 7C87269C 267 Bytes [ 57, 00, 90, 90, 43, 4D, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleInputW + 3C0 7C8727A8 46 Bytes [ 9C, 75, 82, 7C, 78, F0, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleInputW + 3F0 7C8727D8 3 Bytes [ 20, 75, 82 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadConsoleOutputW + 9 7C8727EA 261 Bytes [ 82, 7C, 9E, E3, 87, 7C, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadConsoleOutputA + EB 7C8728F0 363 Bytes [ 44, 6E, 73, 52, 65, 63, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadConsoleOutputA + 257 7C872A5C 18 Bytes [ 8B, 45, 10, 89, 85, 58, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadConsoleOutputA + 26A 7C872A6F 11 Bytes [ 45, 18, 89, 85, 68, FD, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadConsoleOutputA + 276 7C872A7B 12 Bytes [ 85, 74, FC, FF, FF, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadConsoleOutputA + 283 7C872A88 5 Bytes [ FF, 83, 8D, C0, FD ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputW + 2 7C872B23 5 Bytes [ 8B, 85, 64, FD, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputW + 8 7C872B29 38 Bytes [ 0D, 00, 00, 20, 08, 89, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputA + B 7C872B50 5 Bytes [ 89, 85, 78, FD, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputA + 11 7C872B56 72 Bytes [ 53, FF, B5, 98, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputA + 5B 7C872BA0 28 Bytes [ 50, 8D, 85, 94, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputA + 78 7C872BBD 3 Bytes [ 85, C8, FD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputA + 7D 7C872BC2 25 Bytes [ 3B, C3, 0F, 8C, 74, 80, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadConsoleOutputCharacterA + 9 7C872CE2 12 Bytes [ 8D, 85, A8, FD, FF, FF, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadConsoleOutputCharacterA + 16 7C872CEF 24 Bytes [ FF, 15, 18, 10, 80, 7C, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadConsoleOutputCharacterW + 9 7C872D08 12 Bytes [ FF, 0F, 84, 09, F8, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadConsoleOutputCharacterW + 16 7C872D15 44 Bytes [ 05, 00, 00, 80, 74, 8E, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadConsoleOutputAttribute + 1D 7C872D42 32 Bytes [ FF, 3B, C3, 74, 5E, 89, 9D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadConsoleOutputAttribute + 3E 7C872D63 1 Byte [ 48 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadConsoleOutputAttribute + 40 7C872D65 6 Bytes [ 11, 8D, 60, FD, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadConsoleOutputAttribute + 47 7C872D6C 20 Bytes [ 85, EC, FC, FF, FF, 8B, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ReadConsoleOutputAttribute + 5C 7C872D81 10 Bytes [ 89, 85, A8, FC, FF, FF, 8B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputCharacterA + 6 7C872EAB 5 Bytes [ FF, 74, 2C, 6A, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputCharacterA + C 7C872EB1 6 Bytes [ 28, 8D, 85, 80, FC, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputCharacterA + 13 7C872EB8 37 Bytes [ 50, 8D, 85, A8, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputCharacterW + 13 7C872EDE 9 Bytes CALL 7C872F11 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputCharacterW + 1D 7C872EE8 24 Bytes CALL 7C854B1E C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputAttribute + 10 7C872F01 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputAttribute + 13 7C872F04 39 Bytes [ 00, 00, 00, 00, BD, FF, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputAttribute + 3B 7C872F2C 23 Bytes [ 01, 64, A1, 18, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputAttribute + 53 7C872F44 25 Bytes [ 70, 18, FF, 15, 10, 10, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!WriteConsoleOutputAttribute + 6D 7C872F5E 20 Bytes [ 83, 4D, E4, FF, 83, 4D, E0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FillConsoleOutputCharacterA 7C872FF9 26 Bytes [ 90, 90, 68, AC, 06, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FillConsoleOutputCharacterA + 1B 7C873014 6 Bytes [ D2, 61, 01, 00, F0, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FillConsoleOutputCharacterA + 22 7C87301B 120 Bytes [ 00, 01, 00, 0C, 00, 3A, 3E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateConsoleScreenBuffer + 2C 7C873094 667 Bytes [ 09, 3A, 11, 48, 23, AD, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!InvalidateConsoleDIBits + 11B 7C873330 368 Bytes [ F5, 02, 7C, 41, DA, B9, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!PeekConsoleInputA + 14 7C8734A1 531 Bytes [ CB, 27, A5, BF, 80, EF, D2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleSelectionInfo + 8C 7C8736B5 772 Bytes [ C2, 18, 85, F6, 70, 11, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrentConsoleFont + 6B 7C8739BA 105 Bytes [ D7, 3C, B2, BA, A0, A9, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GenerateConsoleCtrlEvent + 3 7C873A24 7 Bytes [ DE, 61, 01, 00, 45, 05, BB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GenerateConsoleCtrlEvent + B 7C873A2C 124 Bytes [ 38, 08, 85, E2, 30, 1A, 9B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleActiveScreenBuffer + 1 7C873AA9 2 Bytes [ 4D, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleActiveScreenBuffer + 4 7C873AAC 18 Bytes [ D1, 83, C1, 04, F7, DA, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleActiveScreenBuffer + 17 7C873ABF 5 Bytes [ 90, 90, 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleActiveScreenBuffer + 1D 7C873AC5 2 Bytes [ FF, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleActiveScreenBuffer + 20 7C873AC8 3 Bytes [ EC, 8B, 4D ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FlushConsoleInputBuffer + 4 7C873B20 21 Bytes [ 4D, 08, 89, 0B, EB, 05, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FlushConsoleInputBuffer + 1A 7C873B36 2 Bytes [ FF, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FlushConsoleInputBuffer + 1D 7C873B39 2 Bytes [ EC, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FlushConsoleInputBuffer + 20 7C873B3C 64 Bytes [ 75, 08, 85, F6, 74, 2A, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FlushConsoleInputBuffer + 61 7C873B7D 81 Bytes [ 55, 8B, EC, FF, 75, 14, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleScreenBufferSize + 3F 7C873BCF 26 Bytes [ 15, 30, 12, 4B, 77, BA, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleScreenBufferSize + 5A 7C873BEA 75 Bytes CALL 7C8065B3 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCursorPosition + 2C 7C873C36 1 Byte [ 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCursorPosition + 2E 7C873C38 66 Bytes [ 08, 8D, 55, 08, 52, 6A, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCursorPosition + 71 7C873C7B 38 Bytes [ 55, 8B, EC, 51, 51, 64, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCursorInfo + 1E 7C873CA2 4 Bytes [ 08, 50, FF, 51 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCursorInfo + 23 7C873CA7 52 Bytes [ 85, C0, 7C, 0B, 83, 7D, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCursorInfo + 58 7C873CDC 26 Bytes [ 33, C0, 85, C0, 74, 59, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCursorInfo + 73 7C873CF7 125 Bytes [ 02, 33, C0, 83, 38, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleWindowInfo + 24 7C873D75 31 Bytes [ CE, EB, 0D, 8B, 48, 04, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleWindowInfo + 44 7C873D95 22 Bytes [ C3, 5B, 5D, C2, 04, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleWindowInfo + 5B 7C873DAC 9 Bytes CALL 7C7FC78A .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleWindowInfo + 65 7C873DB6 136 Bytes [ C0, 74, 17, 6A, 04, 56, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleWindowInfo + EE 7C873E3F 15 Bytes [ 45, 1C, 01, 06, 8B, 43, 0C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ScrollConsoleScreenBufferW + 14 7C873F59 1 Byte [ 51 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ScrollConsoleScreenBufferW + 16 7C873F5B 39 Bytes [ 89, 1F, 8B, 03, 53, FF, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleTextAttribute + 1A 7C873F83 45 Bytes CALL 7C83EC82 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleTextAttribute + 48 7C873FB1 46 Bytes JMP 7C874156 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleTextAttribute + 77 7C873FE0 29 Bytes [ 00, 3B, F8, 73, 0B, 57, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleFont + 19 7C873FFE 32 Bytes [ 00, 3B, 00, A0, 91, E1, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleFont + 3A 7C87401F 429 Bytes [ 00, 93, 07, 9E, 55, 43, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleCP + 8A 7C8741CD 967 Bytes [ 12, 5C, 84, 07, 36, 69, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetNumberOfConsoleInputEvents + 28 7C874595 257 Bytes [ 6D, 13, 24, 82, DE, 9D, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLargestConsoleWindowSize + 66 7C874697 400 Bytes [ 78, 9D, F5, 1C, F4, BD, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleCursorMode + 29 7C874828 470 Bytes [ 37, 93, 6B, 04, 43, 50, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleOS2OemFormat + C2 7C8749FF 120 Bytes [ F1, AB, 60, BB, 3F, 47, A3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleOS2OemFormat + 13D 7C874A7A 46 Bytes [ 90, 90, 8B, FF, 55, 8B, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleOS2OemFormat + 16C 7C874AA9 94 Bytes [ 15, 30, 14, A5, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterConsoleIME + 4F 7C874B08 66 Bytes [ 55, 8B, EC, 51, 8B, 45, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterConsoleIME + 92 7C874B4B 17 Bytes CALL 7C829A03 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterConsoleIME + A4 7C874B5D 22 Bytes CALL 7C82958F C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!RegisterConsoleIME + BB 7C874B74 33 Bytes [ 14, A5, 77, 85, C0, 74, C5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnregisterConsoleIME + 11 7C874B97 3 Bytes [ 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnregisterConsoleIME + 15 7C874B9B 120 Bytes [ FF, 55, 8B, EC, 56, 8B, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnregisterConsoleIME + 8E 7C874C14 106 Bytes [ 75, FC, 57, FF, 15, 54, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnregisterConsoleIME + F9 7C874C7F 169 Bytes [ 75, 08, FF, 15, 5C, 14, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UnregisterConsoleIME + 1A3 7C874D29 102 Bytes [ 56, 6A, 00, FF, 75, 0C, E8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleNlsMode + 1F 7C874FA6 21 Bytes [ 15, 10, 14, A5, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleNlsMode + 35 7C874FBC 23 Bytes [ 15, E4, 13, A5, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleNlsMode + 4D 7C874FD4 211 Bytes [ 85, C0, 74, BE, FF, 75, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleNlsMode + 121 7C8750A8 3 Bytes [ 30, 8F, F7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleNlsMode + 125 7C8750AC 2 Bytes [ 35, 9C ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleNlsMode + B 7C8750E4 55 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleNlsMode + 43 7C87511C 23 Bytes [ 25, 70, D7, FF, 1B, 51, B9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleNlsMode + 5B 7C875134 3 Bytes [ 39, A9, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleNlsMode + 5F 7C875138 59 Bytes [ 3C, A6, FF, FF, 33, 8E, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleNlsMode + 9B 7C875174 3 Bytes [ 30, 31, 31 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleCharType + 48 7C8751EB 8 Bytes [ 00, 45, 45, 45, FC, 55, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleCharType + 51 7C8751F4 11 Bytes [ 45, 45, 45, FF, 94, 94, 94, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleCharType + 5D 7C875200 10 Bytes [ BF, C2, C5, FF, 8B, CF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleCharType + 69 7C87520C 34 Bytes [ 67, B9, FF, FF, 65, B9, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetConsoleCharType + 8C 7C87522F 23 Bytes [ FF, 90, BE, DF, FF, 58, 98, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLastConsoleEventActive + A 7C8754DD 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VDMConsoleOperation + 5 7C8754E9 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VDMConsoleOperation + 21 7C875505 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VDMConsoleOperation + 27 7C87550B 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VDMConsoleOperation + 48 7C87552C 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!VDMConsoleOperation + 53 7C875537 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumCalendarInfoExA + 9 7C875752 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumCalendarInfoExA + 1E 7C875767 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumTimeFormatsA + 7 7C875773 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumTimeFormatsA + 19 7C875785 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumDateFormatsA + 7 7C875791 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumDateFormatsA + 9 7C875793 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumDateFormatsA + 1B 7C8757A5 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumDateFormatsExA + 9 7C8757B3 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumDateFormatsExA + 1B 7C8757C5 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemLanguageGroupsA + 7 7C8757D1 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemLanguageGroupsA + 15 7C8757DF 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemLanguageGroupsA + 19 7C8757E3 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumLanguageGroupLocalesA + 7 7C8757EF 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumLanguageGroupLocalesA + 18 7C875800 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumLanguageGroupLocalesA + 1C 7C875804 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumUILanguagesA + 7 7C875810 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumUILanguagesA + 19 7C875822 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemCodePagesA + 7 7C87582E 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemCodePagesA + 12 7C875839 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemCodePagesA + 16 7C87583D 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetGeoInfoA + B 7C87584D 79 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetGeoInfoA + 5C 7C87589E 39 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetGeoInfoA + 84 7C8758C6 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocaleInfoA + B 7C8758D6 57 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocaleInfoA + 45 7C875910 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocaleInfoA + 66 7C875931 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocaleInfoA + 7C 7C875947 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocaleInfoA + 82 7C87594D 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCalendarInfoA + B 7C875976 43 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCalendarInfoA + 39 7C8759A4 44 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCalendarInfoA + 66 7C8759D1 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCalendarInfoA + 7E 7C8759E9 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCalendarInfoA + 98 7C875A03 40 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCalendarInfoA + B 7C875AE1 57 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCalendarInfoA + 45 7C875B1B 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCalendarInfoA + 69 7C875B3F 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCalendarInfoA + 7F 7C875B55 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCalendarInfoA + 85 7C875B5B 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrencyFormatA + B 7C875B84 63 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrencyFormatA + 4C 7C875BC5 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrencyFormatA + 55 7C875BCE 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrencyFormatA + 62 7C875BDB 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrencyFormatA + 6A 7C875BE3 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FoldStringA + A 7C875EBB 28 Bytes [ 82, 00, 00, 00, 8C, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FoldStringA + 27 7C875ED8 14 Bytes [ 4F, 33, 33, FF, 9A, 9A, 9A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FoldStringA + 36 7C875EE7 48 Bytes [ A1, 00, 00, 00, 89, 05, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FoldStringA + 67 7C875F18 27 Bytes [ 38, 36, 36, FF, DB, DB, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FoldStringA + 83 7C875F34 28 Bytes [ 16, 42, A8, FF, 20, 60, C6, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCPInfoExA + 83 7C8760CA 79 Bytes [ 00, 00, 3C, 32, 01, 00, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStringTypeExA + 4B 7C87611A 25 Bytes [ 44, 68, 63, 70, 4E, 6F, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStringTypeExA + 65 7C876134 32 Bytes [ 44, 68, 63, 70, 52, 65, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStringTypeExA + 86 7C876155 109 Bytes [ 49, 42, 42, 75, 66, 66, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStringTypeExA + F5 7C8761C4 56 Bytes [ 4D, 70, 72, 41, 64, 6D, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetStringTypeExA + 12F 7C8761FE 29 Bytes [ 4D, 70, 72, 41, 64, 6D, 69, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!NlsResetProcessLocale + D 7C8763D6 93 Bytes [ 57, 53, 32, 5F, 33, 32, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidLanguageGroup + 45 7C876434 35 Bytes [ 40, 37, 01, 00, 5C, 37, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidLanguageGroup + 69 7C876458 27 Bytes [ 12, 38, 01, 00, 2C, 38, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidLanguageGroup + 85 7C876474 11 Bytes [ 90, 38, 01, 00, AC, 38, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidLanguageGroup + 91 7C876480 103 Bytes [ C8, 38, 01, 00, DA, 38, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidLanguageGroup + F9 7C8764E8 47 Bytes [ 64, 3A, 01, 00, 6C, 3A, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidUILanguage + 1D 7C876518 75 Bytes [ F0, 3A, 01, 00, FA, 3A, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidUILanguage + 69 7C876564 15 Bytes [ D0, 3B, 01, 00, E0, 3B, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidUILanguage + 79 7C876574 15 Bytes [ 1A, 3C, 01, 00, 32, 3C, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidUILanguage + 89 7C876584 31 Bytes [ 82, 3C, 01, 00, 9A, 3C, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsValidUILanguage + A9 7C8765A4 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCalendarInfoW + 4D 7C876D68 26 Bytes [ 67, 65, 74, 61, 64, 64, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCalendarInfoW + 69 7C876D84 7 Bytes [ 25, 00, 00, 00, B0, 3D, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCalendarInfoW + 71 7C876D8C 162 Bytes [ B0, 31, 01, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCalendarInfoW + 114 7C876E2F 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCalendarInfoW + 129 7C876E44 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocaleInfoW + B 7C876E7E 46 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocaleInfoW + 3A 7C876EAD 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocaleInfoW + 3D 7C876EB0 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocaleInfoW + 4C 7C876EBF 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetLocaleInfoW + 4F 7C876EC2 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetGeoInfoW + 2A 7C878871 32 Bytes [ 30, 6A, 30, A3, 30, AA, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetGeoInfoW + 4B 7C878892 44 Bytes [ 46, 33, 50, 33, 56, 33, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetGeoInfoW + 78 7C8788BF 68 Bytes [ 35, A1, 35, CC, 35, D3, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetGeoInfoW + BD 7C878904 10 Bytes [ 43, 3B, 55, 3B, 9E, 3B, AC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetGeoInfoW + C8 7C87890F 106 Bytes [ 3C, 37, 3C, 6B, 3C, 78, 3C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemGeoID + 7 7C878BE0 37 Bytes [ 68, 33, 6C, 33, 70, 33, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemGeoID + 2E 7C878C07 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemGeoID + 35 7C878C0E 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemGeoID + 48 7C878C21 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!EnumSystemGeoID + 53 7C878C2C 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetUserGeoID + B 7C878C67 50 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetUserGeoID + 3F 7C878C9B 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetUserGeoID + 46 7C878CA2 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetUserGeoID + 51 7C878CAD 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetUserGeoID + 5E 7C878CBA 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FoldStringW + CB 7C879701 41 Bytes [ 6B, E7, 05, 2A, A5, 86, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!FoldStringW + F5 7C87972B 366 Bytes [ AC, 58, E1, 7C, D9, E7, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCPGlobal + D7 7C87989A 111 Bytes [ E5, 44, 9E, 99, A0, 7C, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCPGlobal + 147 7C87990A 264 Bytes [ CF, E4, B4, 41, 69, 49, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCPGlobal + 250 7C879A13 6 Bytes [ 00, F8, 69, 18, 00, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCPGlobal + 257 7C879A1A 17 Bytes [ 00, 00, CC, 28, A7, 62, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetCPGlobal + 269 7C879A2C 165 Bytes [ 08, D5, 82, E3, 30, 1A, 9B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCPInfoExW + 38 7C87A205 532 Bytes [ AF, D5, 80, AC, CE, 39, 7A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCPInfoExW + 24D 7C87A41A 54 Bytes [ 3E, 95, 8E, 69, 46, 0D, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCPInfoExW + 284 7C87A451 127 Bytes [ F1, 40, 8D, 3B, 42, 81, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsDBCSLeadByteEx + 3 7C87A4D1 10 Bytes [ 23, 74, BE, 15, 1A, 1C, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsDBCSLeadByteEx + E 7C87A4DC 392 Bytes [ 25, 86, 8D, 29, E0, EB, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsDBCSLeadByteEx + 197 7C87A665 133 Bytes [ 17, BC, E0, 5A, 51, 5B, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsDBCSLeadByteEx + 21D 7C87A6EB 85 Bytes [ 25, 11, 3D, DA, 5D, 96, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!IsDBCSLeadByteEx + 274 7C87A742 239 Bytes [ B1, 37, 39, FC, 5A, EF, B7, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDefaultSortkeySize + 6 7C87AA47 5 Bytes [ 85, F0, FE, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetDefaultSortkeySize + C 7C87AA4D 33 Bytes CALL 7C83AC8C C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetLinguistLangSize + 4 7C87AA6F 39 Bytes [ 31, 57, 66, 8B, 7D, 08, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ValidateLCType + 2 7C87AA97 5 Bytes [ 01, 5F, 5E, 5D, C2 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ValidateLCType + 8 7C87AA9D 34 Bytes [ 00, 90, 90, 90, 90, 90, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ValidateLCType + 2D 7C87AAC2 86 Bytes [ 57, 8B, 7D, 08, 89, 30, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ValidateLCType + 84 7C87AB19 86 Bytes [ F4, 50, 56, 66, 89, 75, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!ValidateLCType + DC 7C87AB71 8 Bytes [ E0, 83, C0, 04, 50, 6A, 5C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrencyFormatW + A 7C87B6D4 12 Bytes [ 80, 00, 00, 00, 00, 03, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrencyFormatW + 17 7C87B6E1 2 Bytes [ 03, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrencyFormatW + 1A 7C87B6E4 3 Bytes [ 80, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrencyFormatW + 1E 7C87B6E8 37 Bytes [ 00, 03, 00, 00, 80, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!GetCurrencyFormatW + 44 7C87B70E 9 Bytes [ F0, 00, 00, 01, 00, 00, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DelayLoadFailureHook + C 7C87DEB9 187 Bytes [ 8B, FF, 55, 8B, EC, 81, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DelayLoadFailureHook + C9 7C87DF76 1 Byte [ FD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DelayLoadFailureHook + CC 7C87DF79 5 Bytes [ 5F, 5E, 5B, E8, E7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DelayLoadFailureHook + D2 7C87DF7F 36 Bytes [ FB, FF, C9, C2, 04, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!DelayLoadFailureHook + F7 7C87DFA4 40 Bytes [ 00, 00, A1, 80, D2, FA, 77, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!UTUnRegister + 42 7C87E9CF 102 Bytes [ 83, C8, FF, B9, 98, C3, 98, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZStart + 4F 7C87EA36 159 Bytes [ 3B, D0, 73, 68, 53, 6A, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZStart + EF 7C87EAD6 232 Bytes JMP 7C8676A2 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZStart + 1D8 7C87EBBF 1 Byte [ 17 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZStart + 1DC 7C87EBC3 18 Bytes JMP 7C857CBF C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!LZStart + 1EF 7C87EBD6 27 Bytes [ FD, FF, 57, 6A, 02, 6A, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!CreateProcessInternalWSecure + F 7C87F20B 106 Bytes [ 0F, B6, C1, 6A, 40, 50, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleMaximumWindowSize + 64 7C87F279 24 Bytes CALL 7C844001 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleMaximumWindowSize + 80 7C87F295 172 Bytes [ 33, C0, 40, C3, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleMaximumWindowSize + 12D 7C87F342 132 Bytes [ F2, 23, 35, E4, E5, 98, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleMaximumWindowSize + 1B2 7C87F3C7 15 Bytes [ 0F, 85, BD, 2B, FE, FF, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] kernel32.dll!SetConsoleMaximumWindowSize + 1C3 7C87F3D8 67 Bytes [ 90, 90, 90, 33, C0, 40, C3, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VRipOutput + FFFA3A62 77D114E5 93 Bytes [ 00, 8B, 45, 14, 8B, 40, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VRipOutput + FFFA3AC0 77D11543 9 Bytes [ F6, 46, 16, 04, 0F, 85, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VRipOutput + FFFA3ACA 77D1154D 3 Bytes [ 64, A1, 18 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VRipOutput + FFFA3AD0 77D11553 4 Bytes [ 8B, 88, E4, 06 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VRipOutput + FFFA3AD5 77D11558 8 Bytes [ 00, 8B, 49, 0C, 0B, 88, F0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReleaseDC + 2 77D1869F 6 Bytes [ FF, 53, E8, 8E, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReleaseDC + 9 77D186A6 6 Bytes [ 3B, C3, 0F, 85, 15, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReleaseDC + 10 77D186AD 40 Bytes [ FF, 81, 7D, 10, 20, F0, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDC + F 77D186D6 34 Bytes [ 00, 48, 0F, 84, 4E, 1F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDC + 32 77D186F9 12 Bytes CALL 77D18733 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDC + 40 77D18707 3 Bytes [ 83, 7D, 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDC + 44 77D1870B 35 Bytes [ 74, AE, 66, 83, 7D, 14, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDC + 68 77D1872F 70 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowLongW + C 77D188B2 110 Bytes [ 45, FC, 81, F9, 00, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowLongW + 7B 77D18921 23 Bytes [ 7D, 08, 39, 7D, 0C, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowLongW + 93 77D18939 14 Bytes [ 75, 4D, 83, 7D, 10, 00, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowLongW + A3 77D18949 9 Bytes CALL 77D18865 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowLongW + AD 77D18953 14 Bytes [ C6, 74, 3D, 3B, C7, 74, 39, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DispatchMessageW + 2 77D18A03 30 Bytes [ FF, 89, 45, E4, 8D, 45, D4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TranslateMessageEx + 9 77D18A22 65 Bytes [ FB, FF, FF, C7, 45, D8, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TranslateMessageEx + 4B 77D18A64 31 Bytes [ 35, 24, 02, D7, 77, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowThreadProcessId + 4 77D18A84 46 Bytes [ CA, 83, E1, 03, F3, AA, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowThreadProcessId + 33 77D18AB3 19 Bytes [ 00, 00, 0F, 84, C6, 1C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowThreadProcessId + 47 77D18AC7 191 Bytes [ 86, A8, 00, 00, 00, F6, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowThreadProcessId + 107 77D18B87 14 Bytes [ 00, 0F, 87, 1C, 96, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowThreadProcessId + 116 77D18B96 95 Bytes CALL 77D0F75A .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TranslateMessage 77D18BF6 22 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TranslateMessage + 17 77D18C0D 76 Bytes [ D7, 77, 3B, CA, 0F, 86, E5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!KillTimer + 18 77D18C5A 7 Bytes [ 30, 85, F6, 0F, 84, 21, D8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!KillTimer + 21 77D18C63 6 Bytes [ 8B, C6, 5E, 5D, C2, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!KillTimer + 28 77D18C6A 26 Bytes CALL 77D18733 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!KillTimer + 43 77D18C85 56 Bytes JMP 77D184B4 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!KillTimer + 7C 77D18CBE 5 Bytes [ 00, 2B, 42, 10, 03 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PostMessageW + 22 77D18CED 25 Bytes [ B8, F7, 11, 00, 00, BA, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PostMessageW + 3C 77D18D07 20 Bytes CALL 77D0C8EC .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetUserObjectInformationW + 5 77D18D1C 5 Bytes [ 57, E8, 35, 6B, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetUserObjectInformationW + B 77D18D22 38 Bytes [ 85, C0, 56, 56, 56, 6A, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharUpperA + 1E 77D18D49 45 Bytes [ 00, 00, 85, C9, 0F, 84, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharUpperA + 4C 77D18D77 37 Bytes [ FF, 55, 8B, EC, 81, EC, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharUpperA + 72 77D18D9D 252 Bytes [ 02, 00, 53, 8B, 5D, 0C, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetSysColor + 22 77D18E9A 32 Bytes [ 85, 55, EC, 0F, 84, B4, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetSysColorBrush + 10 77D18EBB 101 Bytes [ F6, 00, 80, 0F, 84, F7, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetAppCompatFlags2 + 4B 77D18F21 23 Bytes [ 00, 8B, F0, 6A, 00, 89, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetAppCompatFlags2 + 63 77D18F39 56 Bytes [ F6, 45, EC, 40, 0F, 85, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetAppCompatFlags2 + 9C 77D18F72 154 Bytes [ A1, 80, 00, D7, 77, 8B, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetSystemMetrics + 74 77D19011 34 Bytes [ 8B, FF, 55, 8B, EC, 68, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowDC + 14 77D19035 3 Bytes [ 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowDC + 18 77D19039 57 Bytes [ FF, 55, 8B, EC, 83, EC, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetScrollInfo + 1D 77D19073 4 Bytes [ 88, 62, 01, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetScrollInfo + 22 77D19078 12 Bytes [ 39, 5E, 24, 74, 04, 8B, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetScrollInfo + 30 77D19086 1 Byte [ FC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetScrollInfo + 32 77D19088 2 Bytes [ 76, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetScrollInfo + 35 77D1908B 33 Bytes [ 76, 18, 50, 8B, 46, 14, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharUpperW + A 77D190DC 90 Bytes [ AF, D0, 3B, D1, 7E, F6, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharUpperW + 65 77D19137 7 Bytes [ F9, 89, 45, E0, 8B, C7, 99 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharUpperW + 6D 77D1913F 100 Bytes [ FB, 89, 45, E4, 8B, 45, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetProcessWindowStation + F 77D191A4 39 Bytes [ 85, C0, 89, 46, 1C, 74, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMessageW + 6 77D191CC 3 Bytes [ 4D, EC, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMessageW + A 77D191D0 7 Bytes [ F4, 39, 4D, F0, 0F, 8C, 43 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMessageW + 12 77D191D8 22 Bytes [ FF, FF, 33, C0, 40, 5F, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMessageW + 29 77D191EF 34 Bytes [ 55, 8B, EC, 68, 18, 4C, D6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMessageW + 4E 77D19214 178 Bytes [ 8B, FF, 55, 8B, EC, 6A, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PeekMessageW + 2C 77D192C7 10 Bytes CALL 77CDD4DB .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PeekMessageW + 37 77D192D2 55 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PeekMessageW + 6F 77D1930A 10 Bytes CALL 77D20F38 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PeekMessageW + 7A 77D19315 22 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PeekMessageW + 91 77D1932C 57 Bytes [ C0, 75, 0D, 6A, 57, FF, 31, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TranslateAcceleratorW + 15 77D19433 22 Bytes [ 8B, 10, 81, E2, 64, 69, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TranslateAcceleratorW + 2C 77D1944A 61 Bytes [ 89, 45, CC, 8D, 45, C0, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowLongA + 2B 77D19488 7 Bytes CALL 77CD418A .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowLongA + 33 77D19490 11 Bytes [ 45, 18, 8B, 45, 18, 3B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowLongA + 3F 77D1949C 127 Bytes [ FF, FF, 83, 7D, F8, 00, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetLastInputInfo + 28 77D1951C 92 Bytes [ 8B, FF, 55, 8B, EC, 8B, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetLastInputInfo + 86 77D1957A 18 Bytes [ 00, FF, 75, 18, 8B, 08, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetLastInputInfo + 99 77D1958D 51 Bytes JMP 77D19621 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetLastInputInfo + CD 77D195C1 1 Byte [ 89 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetLastInputInfo + CF 77D195C3 39 Bytes [ E0, 8D, 45, DC, 50, 6A, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MsgWaitForMultipleObjects 77D19689 23 Bytes [ 90, 8B, FF, 55, 8B, EC, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MsgWaitForMultipleObjects + 19 77D196A2 4 Bytes [ 18, FF, 75, 14 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MsgWaitForMultipleObjects + 1E 77D196A7 350 Bytes [ 75, 10, FF, 75, 0C, 50, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsChild + F8 77D19806 11 Bytes CALL 77D1973C C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsChild + 104 77D19812 67 Bytes [ 75, 07, B8, 01, 00, 00, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsChild + 148 77D19856 7 Bytes [ 50, 53, 89, B5, F8, FD, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsChild + 150 77D1985E 15 Bytes [ FF, 15, 88, 12, D1, 77, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsChild + 160 77D1986E 22 Bytes [ 00, 56, EB, 1F, 47, 8D, 44, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetThreadDesktop + 34 77D19A85 103 Bytes [ 0F, B7, C0, 89, 46, 18, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterClassW + 49 77D19AED 82 Bytes [ 15, C0, 14, D1, 77, 5F, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterClassW + 9C 77D19B40 39 Bytes [ 74, 20, B8, 00, 00, 00, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterClassW + C4 77D19B68 13 Bytes [ 6A, 53, FF, 75, 08, E8, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterClassW + D2 77D19B76 21 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterClassW + E8 77D19B8C 73 Bytes [ F0, 85, F6, 0F, 84, 4F, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadCursorW + 2B 77D19D94 32 Bytes [ F8, 73, 3A, 8B, 37, 85, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadCursorW + 4C 77D19DB5 92 Bytes [ 66, A9, FF, FF, 74, 0C, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadCursorW + A9 77D19E12 52 Bytes [ FF, 00, 83, A5, E0, FD, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadStringW + 11 77D19E47 50 Bytes [ 18, 00, 00, 00, C7, 85, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharLowerBuffW + 23 77D19E7A 112 Bytes [ 00, 8D, 85, EC, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharLowerBuffW + 94 77D19EEB 13 Bytes [ 02, 00, 00, 89, 85, 5C, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharLowerBuffW + A3 77D19EFA 22 Bytes [ 89, 85, 60, FF, FF, FF, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SystemParametersInfoW + C 77D19F12 106 Bytes [ FF, 8D, 86, 90, 02, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SystemParametersInfoW + 78 77D19F7E 28 Bytes [ 89, 85, 78, FF, FF, FF, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SystemParametersInfoW + 95 77D19F9B 32 Bytes [ 00, 85, C0, 74, 05, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SystemParametersInfoW + B6 77D19FBC 29 Bytes [ 40, 33, FF, 57, 6A, 04, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SystemParametersInfoW + D4 77D19FDA 149 Bytes [ 57, FF, 75, 80, FF, 15, BC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ClientThreadSetup + 66 77D1A070 5 Bytes [ 85, 4B, F2, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ClientThreadSetup + 6C 77D1A076 5 Bytes [ 01, 57, E8, 47, 7C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ClientThreadSetup + 72 77D1A07C 70 Bytes CALL 77D11C17 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ClientThreadSetup + BA 77D1A0C4 70 Bytes JMP 77D1849D C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ClientThreadSetup + 101 77D1A10B 28 Bytes [ 00, 74, 22, FF, 75, 0C, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClassW + 2 77D1A39C 43 Bytes [ 75, 14, FF, 75, 08, E8, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClassW + 2E 77D1A3C8 22 Bytes JMP 77D13519 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClassW + 45 77D1A3DF 22 Bytes [ 75, 08, FF, 56, 2C, EB, AA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClassW + 5C 77D1A3F6 12 Bytes [ 55, 8B, EC, 83, EC, 40, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClassW + 69 77D1A403 143 Bytes [ 39, 3D, B8, 04, D7, 77, 89, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!wvsprintfA + 10 77D1A620 23 Bytes CALL 77D1A52D C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!wvsprintfA + 28 77D1A638 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!wvsprintfA + 2A 77D1A63A 42 Bytes [ F6, 40, 14, 01, 0F, 85, 71, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!wvsprintfA + 55 77D1A665 133 Bytes JMP 77D184B4 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!wvsprintfA + DB 77D1A6EB 43 Bytes [ 00, 00, 8B, 08, 83, 49, 14, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!wsprintfA + D 77D1A8BA 59 Bytes [ FF, A8, 10, 75, 20, 57, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!wsprintfA + 49 77D1A8F6 8 Bytes [ 83, 78, 10, 00, 0F, 85, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!wsprintfA + 52 77D1A8FF 9 Bytes [ FF, 8B, CF, 89, 78, 10, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!wsprintfA + 5D 77D1A90A 25 Bytes CALL 77D1A878 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!wsprintfA + 78 77D1A925 125 Bytes [ 0F, 85, 18, FE, FF, FF, 6A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!wvsprintfW + 2 77D1A9D3 31 Bytes [ 39, 7E, 14, 0F, 85, A3, 82, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!wvsprintfW + 22 77D1A9F3 11 Bytes CALL 77D18C32 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!wvsprintfW + 2E 77D1A9FF 99 Bytes [ 13, 6A, 00, FF, 75, 10, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!wvsprintfW + 92 77D1AA63 21 Bytes [ D7, 77, 85, C0, 74, 24, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!wvsprintfW + A8 77D1AA79 13 Bytes [ FF, 75, 18, FF, 75, 14, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MBToWCSEx + 2 77D1ADAF 49 Bytes [ 75, B4, 57, 50, EB, EB, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MBToWCSEx + 34 77D1ADE1 5 Bytes [ 75, 08, E8, 60, 03 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MBToWCSEx + 3A 77D1ADE7 38 Bytes [ 00, 8B, F0, 85, F6, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MBToWCSEx + 61 77D1AE0E 5 Bytes [ C0, 0F, 84, 3D, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MBToWCSEx + 67 77D1AE14 10 Bytes [ FF, 83, 7A, 04, 00, 0F, 84, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharUpperBuffA + 4C 77D1AE8B 62 Bytes [ 85, C0, 0F, 84, A2, 96, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharUpperBuffA + 8C 77D1AECB 16 Bytes [ 3B, 5D, 0C, 74, 0D, 6A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharUpperBuffA + 9D 77D1AEDC 6 Bytes [ D7, 33, C0, 40, 5F, 5E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharUpperBuffA + A4 77D1AEE3 19 Bytes [ C9, C2, 14, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharToOemA + 6 77D1AEF7 96 Bytes CALL 77D1ACC1 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClipboardFormatW + 24 77D1AF58 60 Bytes [ 55, 8B, EC, 8B, 4D, 08, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClassExW + 16 77D1AF95 20 Bytes [ FF, 75, 14, FF, 75, 10, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClassExW + 2B 77D1AFAA 9 Bytes [ 75, 14, FF, 75, 10, 52, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClassExW + 35 77D1AFB4 107 Bytes [ 00, 00, EB, EA, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClassExW + A1 77D1B020 50 Bytes [ 00, 00, B8, F2, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClassExW + D4 77D1B053 50 Bytes [ 6A, 02, 5A, 2B, CA, 0F, 84, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsWinEventHookInstalled + 16 77D1B1BB 28 Bytes JMP 77D1BB79 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsWinEventHookInstalled + 33 77D1B1D8 21 Bytes CALL 77D1B147 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollDC + 11 77D1B1EE 36 Bytes CALL 77D26C7C C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollDC + 39 77D1B216 16 Bytes [ 8B, FF, 55, 8B, EC, 53, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollDC + 4B 77D1B228 5 Bytes [ 3B, 0F, 85, FB, F5 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollDC + 51 77D1B22E 10 Bytes [ 00, 8B, 43, 04, A8, 20, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollDC + 5C 77D1B239 79 Bytes [ 00, 85, F6, 0F, 85, BE, F6, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefWindowProcW + 35 77D1B371 4 Bytes [ CC, FF, 75, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefWindowProcW + 3A 77D1B376 15 Bytes [ 15, C4, 11, D1, 77, 0F, B6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefWindowProcW + 4A 77D1B386 45 Bytes [ 74, 14, 8B, 46, 04, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefWindowProcW + 78 77D1B3B4 9 Bytes [ FF, 89, 45, F8, 8B, 43, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefWindowProcW + 82 77D1B3BE 6 Bytes [ 00, D7, 77, 0F, 86, C5 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EndPaint + 4 77D1B621 28 Bytes [ CC, 80, FF, 75, A8, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OffsetRect + D 77D1B63E 54 Bytes [ 45, D4, 2B, 45, CC, 50, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OffsetRect + 44 77D1B675 69 Bytes [ 75, D8, FF, 75, D4, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClientRect + D 77D1B6BB 63 Bytes [ 15, 54, 10, D1, 77, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowRect + 27 77D1B6FB 68 Bytes [ 45, D0, 89, 45, E0, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetParent + 11 77D1B740 108 Bytes [ 75, CC, 8D, 7D, A4, D1, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetParent + 7E 77D1B7AD 57 Bytes [ 52, 50, 8D, 45, CC, 50, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetParent + B8 77D1B7E7 9 Bytes [ 75, CC, FF, 75, 0C, E8, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetParent + C2 77D1B7F1 17 Bytes JMP 77D1B449 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetParent + D5 77D1B804 23 Bytes JMP 77D30EC1 C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendMessageW + 3A 77D1B8F4 3 Bytes [ 33, F6, 39 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendMessageW + 3E 77D1B8F8 24 Bytes [ AC, 74, 0B, 6A, 01, 56, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendMessageW + 57 77D1B911 27 Bytes CALL 77D10413 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendMessageW + 73 77D1B92D 43 Bytes CALL 77D18765 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsWindow + 26 77D1B959 122 Bytes [ 00, 6A, 01, 8D, 45, 98, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsWindow + A1 77D1B9D4 12 Bytes JMP 77D1B200 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsWindow + AE 77D1B9E1 43 Bytes JMP 77D1B198 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsWindow + DA 77D1BA0D 19 Bytes [ 3B, 05, 90, 00, D7, 77, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsWindow + EF 77D1BA22 6 Bytes [ 8B, 48, 64, 2B, 48, 10 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetPropW + A 77D1BAE5 35 Bytes [ 6A, 00, 6A, 0F, FF, 75, B4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetPropW + 2F 77D1BB0A 63 Bytes [ F6, 46, 04, 40, 0F, 85, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MapWindowPoints + 1C 77D1BB4B 63 Bytes [ 76, F5, FF, FF, 83, 7D, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MapWindowPoints + 5C 77D1BB8B 94 Bytes [ 46, 04, B9, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MapWindowPoints + BB 77D1BBEA 105 Bytes CALL 77D0FBF1 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowTextW + 1E 77D1BC54 2 Bytes [ 8B, 5E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowTextW + 21 77D1BC57 39 Bytes [ 75, 18, 8B, 45, AC, 89, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindow + 2 77D1BC7F 16 Bytes JMP 77D1B0C5 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindow + 13 77D1BC90 43 Bytes [ 49, 0F, 84, 87, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindow + 3F 77D1BCBC 50 Bytes [ 8B, 46, 04, A8, 20, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindow + 72 77D1BCEF 46 Bytes [ 0C, 83, 7D, B0, 0B, 74, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindow + A1 77D1BD1E 107 Bytes CALL 77D440A3 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WindowFromPoint + 1 77D1BD8F 2 Bytes [ 31, 11 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WindowFromPoint + D 77D1BD9B 1 Byte [ 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WindowFromPoint + F 77D1BD9D 56 Bytes [ FF, 75, FC, FF, 75, 08, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScreenToClient + E 77D1BDD6 3 Bytes [ E4, FD, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScreenToClient + 12 77D1BDDA 51 Bytes [ 57, 8D, 85, FC, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScreenToClient + 46 77D1BE0E 3 Bytes [ 84, 58, 21 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScreenToClient + 4B 77D1BE13 109 Bytes [ 50, 8B, C1, 50, FF, 15, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnableWindow + 11 77D1BE82 350 Bytes [ 90, 90, 90, 90, 90, B8, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMessagePos + 4E 77D1BFE2 1 Byte [ 14 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMessagePos + 50 77D1BFE4 92 Bytes [ 75, 10, FF, 75, 0C, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowPos + 26 77D1C041 9 Bytes [ 8B, FF, 55, 8B, EC, 83, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowPos + 30 77D1C04B 35 Bytes [ 75, 0C, 83, FE, F6, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowPos + 54 77D1C06F 45 Bytes [ FF, 75, 10, 56, FF, 75, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowPos + 83 77D1C09E 15 Bytes [ 89, 7D, 0C, 89, 7D, 08, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowPos + 94 77D1C0AF 3 Bytes [ DE, C7, 01 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassLongW + 19 77D1C12A 25 Bytes [ F9, 1A, 0F, 84, F0, 65, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassLongW + 33 77D1C144 80 Bytes [ 00, 8B, B9, 3C, 09, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ClientToScreen + D 77D1C195 53 Bytes [ 35, D8, 02, D7, 77, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ClientToScreen + 43 77D1C1CB 36 Bytes [ 80, 30, 08, 00, 00, 50, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ClientToScreen + 68 77D1C1F0 47 Bytes [ 61, C7, 01, 00, 39, 4D, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyboardLayout + 2 77D1C220 16 Bytes [ 83, 7D, 10, 01, 0F, 84, CB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyboardLayout + 13 77D1C231 134 Bytes [ 0F, B7, 45, 18, 50, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsZoomed + 6 77D1C2B8 17 Bytes [ FF, FF, 85, DB, 0F, 84, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsZoomed + 18 77D1C2CA 67 Bytes [ 00, 83, 3D, 48, 04, D7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetRectEmpty + 2C 77D1C30E 4 Bytes [ 68, 80, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetRectEmpty + 31 77D1C313 34 Bytes [ 68, 48, 04, D7, 77, 6A, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetRectEmpty + 57 77D1C339 49 Bytes [ 8B, FF, 55, 8B, EC, 53, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassNameW + 31 77D1C36B 43 Bytes [ 50, 53, FF, 15, 44, 11, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassNameW + 5D 77D1C397 25 Bytes [ 15, 48, 11, D1, 77, 8B, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassNameW + 77 77D1C3B1 133 Bytes [ 33, C0, EB, F5, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMessageTime + 2F 77D1C437 8 Bytes [ 00, FE, FF, 0F, 85, 2A, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMessageTime + 38 77D1C440 160 Bytes [ 53, 8B, 5D, 08, F7, C3, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EqualRect + 38 77D1C4E1 26 Bytes [ 65, F0, 00, 85, DF, 89, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EqualRect + 53 77D1C4FC 60 Bytes [ 0F, 83, C1, 4C, 02, 00, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyState + 34 77D1C539 48 Bytes [ F6, 46, 09, 80, 0F, 84, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyState + 65 77D1C56A 14 Bytes [ 14, FF, 75, 10, FF, 75, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyState + 74 77D1C579 95 Bytes [ 5D, C2, 14, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsWindowUnicode + 3B 77D1C5D9 12 Bytes [ 75, 21, 8B, 43, 04, 48, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsWindowUnicode + 48 77D1C5E6 17 Bytes [ 81, FA, 04, 80, 00, 00, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsWindowUnicode + 5A 77D1C5F8 11 Bytes [ 0B, 05, 02, 00, FF, 76, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsWindowUnicode + 66 77D1C604 57 Bytes [ 76, 1C, FF, 76, 18, FF, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsWindowUnicode + A0 77D1C63E 4 Bytes [ 5F, 5E, 5B, C9 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallWindowProcW + 5 77D1C64F 96 Bytes [ 83, EC, 0C, 8B, 55, 30, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CopyRect + 42 77D1C6B0 249 Bytes [ D2, 8A, 51, 01, 0F, B6, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnionRect + 8D 77D1C7AA 104 Bytes [ FF, 55, 8B, EC, 6A, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnionRect + F6 77D1C813 13 Bytes [ 30, 4A, 02, 00, 83, 4D, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnionRect + 104 77D1C821 53 Bytes [ 75, E0, FF, 15, 44, 13, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnionRect + 13A 77D1C857 8 Bytes [ 00, 8B, 49, 0C, 0B, 88, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnionRect + 143 77D1C860 48 Bytes [ 00, 66, F7, C1, 20, 20, 0F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PeekMessageA + 47 77D1C9B3 34 Bytes [ D7, 77, 76, 05, 2B, 46, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PeekMessageA + 6A 77D1C9D6 23 Bytes [ 85, 3B, A9, FE, FF, 64, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PeekMessageA + 84 77D1C9F0 21 Bytes [ 66, F7, C1, 20, 20, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PeekMessageA + 9A 77D1CA06 17 Bytes [ FF, FF, 85, C0, 0F, 84, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PeekMessageA + AC 77D1CA18 5 Bytes [ FF, 75, 14, 68, 27 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PostMessageA + 3F 77D1CBC4 11 Bytes JMP 77D10A48 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PostMessageA + 4B 77D1CBD0 128 Bytes [ 14, D1, 77, 83, E1, 3F, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PostMessageA + CC 77D1CC51 71 Bytes CALL 77D18864 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PostMessageA + 114 77D1CC99 11 Bytes CALL 77D0C8D7 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PostMessageA + 120 77D1CCA5 30 Bytes [ FF, 90, 90, 90, 90, 90, 6A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumWindows 77D1CD97 1 Byte [ FB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumWindows + 2 77D1CD99 7 Bytes [ FF, 50, 8D, 85, DC, FD, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumWindows + A 77D1CDA1 11 Bytes [ 50, 56, 53, 8D, 85, D4, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumWindows + 16 77D1CDAD 48 Bytes [ 15, 00, 12, D1, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextW + 28 77D1CDDE 32 Bytes [ 0F, 84, AB, 01, 00, 00, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextW + 49 77D1CDFF 6 Bytes [ 53, 53, 53, 6A, 04, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextW + 50 77D1CE06 10 Bytes [ 15, 54, 12, D1, 77, 89, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextW + 5B 77D1CE11 74 Bytes [ 3B, C3, 0F, 84, 4E, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextW + A6 77D1CE5C 37 Bytes [ 4A, 0F, 85, 26, 0B, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MonitorFromWindow + 21 77D1CE82 48 Bytes [ 00, 83, 3A, 0C, 0F, 84, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MonitorFromWindow + 53 77D1CEB4 16 Bytes [ 8B, 5A, 14, 83, FB, 28, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMonitorInfoW + 4 77D1CEC5 12 Bytes [ D9, 89, 9D, 7C, FB, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMonitorInfoW + 11 77D1CED2 183 Bytes [ FF, 0F, AF, CE, 83, C1, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplayMonitors + 27 77D1CF8A 9 Bytes [ 15, 4C, 12, D1, 77, 8B, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplayMonitors + 31 77D1CF94 49 Bytes CALL 77D0CA90 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplayMonitors + 63 77D1CFC6 6 Bytes [ 89, 45, FC, E9, 8D, 97 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplayMonitors + 6A 77D1CFCD 7 Bytes [ FF, C7, 45, C8, 01, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplayMonitors + 72 77D1CFD5 54 Bytes JMP 77D1D0A0 C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RemovePropW + 7 77D1D3ED 54 Bytes [ FF, 55, 8B, EC, 83, EC, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RemovePropW + 3E 77D1D424 75 Bytes [ 00, 5E, C9, C2, 14, 00, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetPropW + 47 77D1D470 23 Bytes [ 6F, 9C, 01, 00, 33, C0, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetPropW + 5F 77D1D488 63 Bytes [ 03, FE, 7F, FF, 12, C2, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetPropW + 9F 77D1D4C8 45 Bytes [ 00, 90, 90, 90, 90, 90, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefWindowProcA + 8 77D1D4F6 63 Bytes [ 7A, 4B, 00, 00, 6A, 00, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefWindowProcA + 48 77D1D536 21 Bytes [ 55, 8B, EC, 8B, 4D, 08, B2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefWindowProcA + 5E 77D1D54C 22 Bytes [ 75, 10, FF, 75, 0C, 50, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefWindowProcA + 75 77D1D563 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefWindowProcA + 78 77D1D566 11 Bytes JMP 77D3EA77 C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowLongA + 13 77D1D620 14 Bytes [ 75, 0C, FF, 75, 08, E8, E1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowLongW + 4 77D1D62F 29 Bytes [ 45, 14, 83, F8, 2C, 56, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowLongW + 22 77D1D64D 25 Bytes [ 43, 04, A8, 10, 74, 17, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetActiveWindow + F 77D1D667 29 Bytes [ 89, 43, 04, 33, C0, 40, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetActiveWindow + 2D 77D1D685 26 Bytes JMP 77D1D74F C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetActiveWindow + 48 77D1D6A0 14 Bytes [ 00, F6, 46, 04, 10, 74, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetActiveWindow + 58 77D1D6B0 102 Bytes [ 00, 8B, 48, 40, 85, C9, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetUpdateRect + 20 77D1D717 55 Bytes [ F2, FE, FF, 85, C0, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetCursor + 7 77D1D750 24 Bytes [ FF, F6, C3, 02, 74, 06, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetCaretBlinkTime + 13 77D1D769 65 Bytes [ F6, C3, 08, 0F, 85, F9, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetCaretBlinkTime + 55 77D1D7AB 55 Bytes [ 8B, 40, 1C, 83, 66, 24, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawTextW + 21 77D1D7E3 12 Bytes [ 55, 8B, EC, 8B, 4D, 08, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawTextW + 2E 77D1D7F0 50 Bytes [ 56, 8B, 71, 34, 2B, F2, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UpdateWindow + 2A 77D1D823 6 Bytes [ FF, 5F, 5E, 5D, C2, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UpdateWindow + 31 77D1D82A 5 Bytes [ 83, C8, FF, EB, F5 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UpdateWindow + 3A 77D1D833 49 Bytes [ 90, 8B, FF, 55, 8B, EC, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgCtrlID + 6 77D1D86F 18 Bytes [ 45, 10, 56, 8B, 75, 08, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgCtrlID + 19 77D1D882 2 Bytes [ 3F, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgCtrlID + 1D 77D1D886 48 Bytes [ 85, C0, 0F, 85, 61, 8D, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ShowWindow + 13 77D1D8B7 5 Bytes [ 6A, 57, E8, 5D, 4E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ShowWindow + 19 77D1D8BD 73 Bytes JMP 77D3ECE5 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!BeginDeferWindowPos 77D1D907 61 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DeferWindowPos + 1D 77D1D946 172 Bytes [ 64, 26, 02, 00, 89, 07, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ShowCaret + B 77D1D9F3 43 Bytes [ 75, 14, FF, 75, 10, 8D, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsServerSideWindow + 2 77D1DA1F 88 Bytes JMP 77D1CF57 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsWindowInDestroy + 4 77D1DA78 137 Bytes [ 75, 18, 83, C6, 06, 33, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharNextW + 4 77D1DB02 50 Bytes [ 7D, 1C, C1, E6, 04, 8B, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharNextW + 37 77D1DB35 1 Byte [ 3B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharNextW + 39 77D1DB37 63 Bytes [ 10, 0F, 87, 9E, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetSystemMenu + 7 77D1DB77 6 Bytes [ 83, 65, FC, 00, 8B, 4B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetSystemMenu + E 77D1DB7E 101 Bytes [ 8B, 73, 0C, 03, 75, 18, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharLowerW + 4A 77D1DBE4 3 Bytes [ C2, 24, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharLowerW + 4E 77D1DBE8 32 Bytes [ FF, FF, FF, FF, 39, CF, D4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MoveWindow + 1D 77D1DC09 113 Bytes [ D7, 77, 89, 7D, D8, 8B, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MoveWindow + 8F 77D1DC7B 82 Bytes JMP 77D12C2D C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MoveWindow + E4 77D1DCD0 5 Bytes [ 8B, FF, 56, 57, BE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetParent + 4 77D1DCD6 26 Bytes [ 05, D7, 77, 56, FF, 15, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TrackMouseEvent + B 77D1DCF1 37 Bytes [ 85, C0, 74, 30, FF, 0D, 9C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TrackMouseEvent + 31 77D1DD17 151 Bytes CALL 77D1CAB5 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TrackMouseEvent + CA 77D1DDB0 17 Bytes [ 50, FF, 75, 08, FF, 15, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TrackMouseEvent + DC 77D1DDC2 5 Bytes [ 8D, 85, FC, FD, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TrackMouseEvent + E2 77D1DDC8 4 Bytes [ 50, FF, 15, AC ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowInfo + 42 77D1DED6 45 Bytes CALL 77D1DD8B C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowInfo + 70 77D1DF04 6 Bytes [ 50, FF, 75, 08, E8, 3D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowInfo + 78 77D1DF0C 49 Bytes [ 00, 8B, 35, 80, 13, D1, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowInfo + AA 77D1DF3E 117 Bytes [ 40, 1E, 10, 74, 87, EB, D7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InternalGetWindowText + 14 77D1DFB5 25 Bytes [ F6, 47, 1C, 01, 75, 0A, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InternalGetWindowText + 2E 77D1DFCF 23 Bytes [ 55, 8B, EC, 56, 57, 53, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CalcMenuBar + B 77D1DFE7 26 Bytes [ 75, 14, FF, 75, 10, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CalcMenuBar + 26 77D1E002 1 Byte [ 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CalcMenuBar + 28 77D1E004 32 Bytes [ EC, 83, EC, 10, 57, 8B, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CalcMenuBar + 49 77D1E025 3 Bytes [ 84, 92, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CalcMenuBar + 4E 77D1E02A 173 Bytes [ 56, FF, 75, 10, 8D, 45, F0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MonitorFromRect + 39 77D1E144 37 Bytes [ 8B, FF, 55, 8B, EC, 81, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MonitorFromRect + 5F 77D1E16A 18 Bytes [ FF, 75, 08, FF, 15, 74, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MonitorFromRect + 72 77D1E17D 93 Bytes [ 50, FF, 15, 0C, 12, D1, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MonitorFromRect + D0 77D1E1DB 59 Bytes CALL 77D0CA92 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MonitorFromRect + 10C 77D1E217 1 Byte [ 04 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawIconEx + 5B 77D1E2C1 5 Bytes [ 50, E8, D6, 1D, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawIconEx + 61 77D1E2C7 11 Bytes [ 8B, F0, 85, F6, 74, 21, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawIconEx + 6D 77D1E2D3 39 Bytes [ FF, 85, C0, 74, 11, 8B, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawIconEx + 95 77D1E2FB 69 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawIconEx + DC 77D1E342 4 Bytes [ 00, 8B, F8, 85 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetAppCompatFlags + 10 77D1E4C4 10 Bytes [ 89, 0D, BC, 07, D7, 77, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetAppCompatFlags + 1B 77D1E4CF 38 Bytes [ 5E, 5D, C2, 04, 00, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetLayeredWindowAttributes + 5 77D1E4F7 118 Bytes [ 00, 6A, 40, FF, 15, 84, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetLayeredWindowAttributes + 7C 77D1E56E 27 Bytes [ 51, 04, 89, 71, 04, FF, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetLayeredWindowAttributes + 98 77D1E58A 19 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetLayeredWindowAttributes + AC 77D1E59E 5 Bytes [ 6A, 01, FF, 75, 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetLayeredWindowAttributes + B2 77D1E5A4 92 Bytes [ 75, 0C, FF, 75, 08, E8, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDesktopWindow + 14 77D1E601 78 Bytes [ 6A, 02, 6A, 40, FF, 15, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyboardState + F 77D1E650 137 Bytes CALL 77D11A47 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetAsyncKeyState + 85 77D1E6DA 193 Bytes [ 57, FF, 15, BC, 14, D1, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MonitorFromPoint + D 77D1E79C 3 Bytes [ 65, 14, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MonitorFromPoint + 11 77D1E7A0 4 Bytes [ 84, F7, F4, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MonitorFromPoint + 16 77D1E7A5 44 Bytes [ 66, FF, 46, 30, 66, 8B, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MonitorFromPoint + 44 77D1E7D3 50 Bytes [ 0F, B7, 46, 30, 66, 8B, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MonitorFromPoint + 78 77D1E807 94 Bytes [ 57, FF, 15, C0, 14, D1, 77, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UpdateLayeredWindow + 4 77D1E897 46 Bytes [ 90, 90, 90, 90, 90, E8, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateCaret + B 77D1E8C6 52 Bytes [ 55, 8B, EC, 81, EC, E4, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallWindowProcA + 11 77D1E8FB 189 Bytes [ 89, 85, 1C, FC, FF, FF, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallWindowProcA + CF 77D1E9B9 67 Bytes [ FC, FF, FF, 89, BD, 38, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallWindowProcA + 113 77D1E9FD 51 Bytes [ B5, 58, FC, FF, FF, FF, D3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnableMenuItem + 2 77D1EA31 13 Bytes [ 50, FF, D6, 8D, 85, 4C, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnableMenuItem + 10 77D1EA3F 72 Bytes [ A0, FE, FF, FF, 50, 6A, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnableMenuItem + 59 77D1EA88 5 Bytes [ 15, D0, 14, D1, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnableMenuItem + 5F 77D1EA8E 11 Bytes [ B5, 48, FC, FF, FF, 0F, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnableMenuItem + 6B 77D1EA9A 18 Bytes [ 8B, 8D, 1C, FC, FF, FF, 0F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallNextHookEx + 2 77D1EB05 78 Bytes [ 89, 45, FC, 8B, 45, 10, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallNextHookEx + 51 77D1EB54 25 Bytes [ C9, C2, 14, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallNextHookEx + 6B 77D1EB6E 28 Bytes [ D7, 77, 89, 8D, C0, FB, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallNextHookEx + 88 77D1EB8B 46 Bytes [ 45, 08, 57, 89, 8D, C4, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallNextHookEx + B7 77D1EBBA 46 Bytes [ 3D, 3C, 13, D1, 77, 74, 6F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawTextExW + 2 77D1EC52 11 Bytes [ 89, 03, 74, 1D, 6A, 20, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawTextExW + E 77D1EC5E 19 Bytes [ 8D, 86, 44, 02, 00, 00, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawTextExW + 22 77D1EC72 6 Bytes [ 00, 8B, B5, E8, FB, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawTextExW + 29 77D1EC79 19 Bytes [ 6A, 02, 56, FF, D7, 33, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawTextExW + 3D 77D1EC8D 79 Bytes [ 8D, 85, EC, FB, FF, FF, 50, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UserLpkPSMTextOut + 2 77D1F452 2 Bytes [ 8D, 85 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UserLpkPSMTextOut + 5 77D1F455 21 Bytes [ FC, FF, FF, FF, B5, 18, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UserLpkPSMTextOut + 1B 77D1F46B 19 Bytes [ 00, 00, 39, 9D, 1C, FD, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UserLpkPSMTextOut + 31 77D1F481 15 Bytes [ FF, 15, D0, 14, D1, 77, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UserLpkPSMTextOut + 42 77D1F492 1 Byte [ 18 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UserClientDllInitialize + 21 77D1F559 14 Bytes [ 00, 3B, CA, 89, 45, F4, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UserClientDllInitialize + 30 77D1F568 9 Bytes [ DF, 01, 00, 89, 55, F8, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UserClientDllInitialize + 3A 77D1F572 2 Bytes [ 45, E8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UserClientDllInitialize + 3D 77D1F575 5 Bytes [ 75, 14, 89, 55, FC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UserClientDllInitialize + 43 77D1F57B 147 Bytes [ 75, 10, FF, 75, 0C, 50, E8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DeleteMenu + 2E 77D1FDAE 191 Bytes [ 55, 8B, EC, 83, EC, 18, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DeleteMenu + EE 77D1FE6E 11 Bytes [ 03, 00, 89, 45, EC, 6A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DeleteMenu + FA 77D1FE7A 14 Bytes [ 15, 20, 14, D1, 77, 83, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DeleteMenu + 109 77D1FE89 44 Bytes CALL 2D570D8E .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowRgnBox + 2 77D1FEB6 25 Bytes [ 90, 90, 90, 90, 90, B8, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowRgnBox + 1C 77D1FED0 44 Bytes [ FF, 55, 8B, EC, 83, 7D, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowRgnBox + 49 77D1FEFD 22 Bytes [ 9E, 00, 00, 00, 8B, 7E, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowRgnBox + 60 77D1FF14 5 Bytes [ 45, 10, 8B, 1F, 89 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowRgnBox + 66 77D1FF1A 30 Bytes CALL 77D0CA74 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateWindowExW + 4 77D1FF54 84 Bytes [ 77, 64, 2B, 77, 10, 03, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateWindowExW + 59 77D1FFA9 44 Bytes JMP 77D0F74C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateWindowExW + 86 77D1FFD6 13 Bytes JMP 77D1A354 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateWindowExW + 94 77D1FFE4 9 Bytes [ 0F, 84, 62, FD, FF, FF, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateWindowExW + 9F 77D1FFEF 5 Bytes [ 3B, 94, 88, 80, F6 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateWindowExA + 2 77D20260 59 Bytes [ 75, BC, FF, 75, 08, E8, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateWindowExA + 3E 77D2029C 10 Bytes [ FF, EB, F2, 85, C0, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateWindowExA + 49 77D202A7 37 Bytes JMP 77D20209 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateWindowExA + 6F 77D202CD 22 Bytes [ 8B, 50, 4C, 8B, 48, 48, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowRgn + 7 77D202E4 32 Bytes [ 85, C0, 89, 45, 0C, 74, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowRgn + 29 77D20306 11 Bytes [ F8, FF, D7, 6A, 05, 6A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowRgn + 35 77D20312 143 Bytes [ 15, 5C, 10, D1, 77, 6A, 1E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowRgn + C5 77D203A2 49 Bytes [ FF, 5D, C2, 04, 00, 8B, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowRgn + F7 77D203D4 34 Bytes [ 75, 08, 57, 8B, 3E, 8D, 45, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AdjustWindowRectEx + 1A 77D205BC 190 Bytes CALL 77D11A49 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AdjustWindowRectEx + D9 77D2067B 39 Bytes [ 15, 6C, 12, D1, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AdjustWindowRectEx + 101 77D206A3 16 Bytes [ 00, 8B, 35, AC, 13, D1, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AdjustWindowRectEx + 112 77D206B4 14 Bytes [ FF, 50, FF, D6, 68, 4C, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AdjustWindowRectEx + 121 77D206C3 148 Bytes [ 50, FF, D6, 8D, 85, B4, FD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CopyImage + 2 77D207F6 24 Bytes [ A1, 94, 07, D7, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CopyImage + 1D 77D20811 61 Bytes [ 90, 90, 8B, FF, 55, 8B, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CopyImage + 5C 77D20850 109 Bytes CALL 77D20713 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CopyImage + CA 77D208BE 70 Bytes [ F4, FD, FF, FF, 50, E8, C5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CopyImage + 111 77D20905 118 Bytes [ 3B, F0, 73, E5, 46, 46, F6, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SystemParametersInfoA + 3C 77D20ACE 3 Bytes [ CC, 14, D1 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SystemParametersInfoA + 40 77D20AD2 18 Bytes [ 85, C0, BF, F8, 27, D1, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SystemParametersInfoA + 53 77D20AE5 51 Bytes [ D6, 8D, 45, F0, 50, 6A, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DestroyCursor + 7 77D20B19 38 Bytes CALL E2A90A6E .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadCursorA + 2 77D20B40 10 Bytes [ 75, FC, FF, 15, D0, 14, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadCursorA + D 77D20B4B 18 Bytes [ C0, 7D, BF, EB, E7, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadCursorA + 20 77D20B5E 56 Bytes [ 00, 00, A1, B8, 01, D7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadCursorA + 5A 77D20B98 9 Bytes [ 8D, 85, 60, FF, FF, FF, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DestroyMenu + 5 77D20BA2 1 Byte [ 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DestroyMenu + 7 77D20BA4 23 Bytes [ 8D, 45, 98, 50, C7, 85, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DestroyMenu + 1F 77D20BBC 3 Bytes [ FF, FF, 40 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DestroyMenu + 23 77D20BC0 11 Bytes [ 00, 00, 89, 9D, 70, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DestroyMenu + 2F 77D20BCC 92 Bytes [ FF, FF, FF, 15, CC, 14, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetIconInfo + 2 77D20C29 23 Bytes [ 83, 7D, F8, 01, 74, 0D, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetIconInfo + 1A 77D20C41 15 Bytes JMP 77D0E533 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WCSToMBEx + B 77D20C51 18 Bytes [ 57, 43, 33, F6, 33, FF, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WCSToMBEx + 1E 77D20C64 137 Bytes [ 00, 56, 56, 6A, 03, 8D, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WCSToMBEx + A9 77D20CEF 33 Bytes [ 3B, C7, 0F, 84, CE, DD, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WCSToMBEx + CB 77D20D11 8 Bytes [ D7, 53, 68, 9C, 25, D1, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WCSToMBEx + D4 77D20D1A 3 Bytes [ 85, BC, FA ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharPrevW 77D20E07 28 Bytes [ 90, B8, BF, 11, 00, 00, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharPrevW + 1D 77D20E24 65 Bytes [ 68, 24, 01, 00, 00, 8D, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendNotifyMessageW + 17 77D20E66 6 Bytes [ 6A, 0E, E8, AE, 18, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendNotifyMessageW + 1E 77D20E6D 16 Bytes JMP 77D0E552 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendNotifyMessageW + 2F 77D20E7E 180 Bytes [ BA, 00, 03, FE, 7F, FF, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendMessageCallbackW + 58 77D20F33 5 Bytes [ 0F, 85, 99, 09, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendMessageCallbackW + 5E 77D20F39 34 Bytes [ FF, 75, 18, FF, 75, 14, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendMessageCallbackW + 81 77D20F5C 22 Bytes JMP 77D353D2 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendMessageCallbackW + 98 77D20F73 2 Bytes [ 66, 81 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendMessageCallbackW + 9B 77D20F76 68 Bytes [ A9, 02, 0F, 87, 04, 06, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharPrevA + 1 77D20FBB 60 Bytes [ 96, A8, 00, 00, 00, 85, D2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadStringA + 10 77D20FF8 10 Bytes [ FF, 66, 81, FB, A9, 02, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadStringA + 1C 77D21004 16 Bytes [ 8B, 56, 60, A1, 80, 00, D7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadStringA + 2D 77D21015 6 Bytes [ FF, 0F, 85, 92, EF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadStringA + 34 77D2101C 100 Bytes [ 8D, 14, CD, E0, EB, D6, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMessageA + 3F 77D21081 62 Bytes [ 85, D2, B9, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMessageA + 7E 77D210C0 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMessageA + 80 77D210C2 42 Bytes [ 83, 63, 2C, 00, 89, 43, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PostThreadMessageA + 11 77D210ED 49 Bytes [ 43, 1C, 85, C0, 0F, 85, 9E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PostThreadMessageA + 43 77D2111F 58 Bytes [ F8, 0C, 0F, 82, C3, 50, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PostThreadMessageA + 7E 77D2115A 56 Bytes CALL 77D21FD5 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FindWindowW + 19 77D21193 53 Bytes [ 00, 6A, FF, FF, 75, 08, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FindWindowW + 4F 77D211C9 8 Bytes [ 0F, B7, F0, 6A, 0C, C1, E6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FindWindowW + 58 77D211D2 3 Bytes [ E7, C1, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FindWindowW + 5C 77D211D6 25 Bytes [ 0F, B7, C0, 0B, F0, 56, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FindWindowW + 76 77D211F0 75 Bytes [ 0F, B7, C0, 0B, F0, 56, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PostQuitMessage + 2B 77D2123C 69 Bytes [ 8B, 80, CC, 05, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoW + 36 77D21282 25 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoW + 50 77D2129C 21 Bytes [ 4D, FC, 83, E3, 40, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoW + 66 77D212B2 50 Bytes [ BA, 9D, 02, 00, 00, 0F, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoW + 99 77D212E5 8 Bytes [ D7, 77, 0F, 85, 6D, 16, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadIconW + 4 77D212EE 4 Bytes [ B9, 74, 06, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadIconW + 9 77D212F3 26 Bytes [ 03, 7D, 08, 3B, FA, 7C, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadIconW + 24 77D2130E 104 Bytes [ 33, C0, EB, F5, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadIconA + 53 77D21377 76 Bytes [ 00, 8B, 89, D4, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadIconA + A0 77D213C4 93 Bytes [ 8B, 88, 3C, 06, 00, 00, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadIconA + FE 77D21422 27 Bytes [ 46, 44, 33, DB, 39, 5D, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadIconA + 11A 77D2143E 105 Bytes [ D1, 77, 8D, 5D, F4, 0F, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClassA + 1C 77D214A8 7 Bytes [ 10, 83, C4, 0C, 66, 3D, D4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClassA + 24 77D214B0 13 Bytes [ 66, 89, 46, 44, 73, 04, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClassA + 32 77D214BE 92 Bytes [ 73, 04, 80, 66, 4B, EF, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClassA + 8F 77D2151B 65 Bytes CALL 77D1C427 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterClassA + D1 77D2155D 14 Bytes [ 75, 1C, FF, 75, 18, FF, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDoubleClickTime + 26 77D215B9 83 Bytes JMP 77D3CB5A C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDoubleClickTime + 7A 77D2160D 49 Bytes JMP 77D1C5FC C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDoubleClickTime + AD 77D21640 38 Bytes [ 8B, 4D, 0C, 8B, 41, 28, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDoubleClickTime + D4 77D21667 2 Bytes [ 45, CC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDoubleClickTime + D7 77D2166A 2 Bytes [ 05, 7A ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetSubMenu + 33 77D21715 56 Bytes [ 88, F8, 0B, 00, 00, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetSubMenu + 6C 77D2174E 68 Bytes [ 33, F6, 39, 75, 0C, 74, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetSubMenu + B2 77D21794 16 Bytes [ BA, 00, 03, FE, 7F, FF, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetSubMenu + C3 77D217A5 40 Bytes [ 55, 8B, EC, 83, EC, 14, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetScrollBarInfo + 4 77D217CE 10 Bytes [ FF, 75, 08, 89, 4D, F4, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetScrollBarInfo + F 77D217D9 68 Bytes [ 00, 89, 45, F8, 8D, 45, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetScrollInfo + 26 77D2181E 158 Bytes [ 0F, 84, E4, 00, 00, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetScrollInfo + C5 77D218BD 102 Bytes CALL 77D15066 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetScrollInfo + 12C 77D21924 11 Bytes [ 6A, 00, 50, FF, 75, 0C, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetScrollInfo + 138 77D21930 10 Bytes CALL 77D217A0 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetScrollInfo + 143 77D2193B 46 Bytes [ 00, 53, 6A, 00, FF, 35, 24, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadMenuIndirectA + A3 77D21B24 64 Bytes [ 8B, 45, 14, 89, 45, 24, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadMenuIndirectA + E4 77D21B65 151 Bytes [ 00, 0F, B7, 71, 0E, C1, EE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadMenuIndirectA + 17C 77D21BFD 46 Bytes [ 99, F7, FB, 89, 45, D4, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadMenuIndirectA + 1AB 77D21C2C 139 Bytes [ 75, D4, 50, 53, 57, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadMenuIndirectA + 238 77D21CB9 4 Bytes [ 1C, 0F, B6, C9 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadAcceleratorsW + 8 77D21D40 31 Bytes [ FF, 8B, 4D, 10, 0F, B6, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadAcceleratorsW + 28 77D21D60 26 Bytes [ CE, F7, F9, 0F, B6, 55, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadAcceleratorsW + 43 77D21D7B 21 Bytes [ B6, 55, 10, 8B, D8, 0F, B6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadAcceleratorsW + 59 77D21D91 2 Bytes [ 7D, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadAcceleratorsW + 5C 77D21D94 18 Bytes [ 0F, 85, 12, FF, FF, FF, E9, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuItemCount + 49 77D21E27 28 Bytes [ 11, 0F, 84, 71, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuItemCount + 66 77D21E44 72 Bytes CALL 885CE44C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuItemCount + AF 77D21E8D 6 Bytes [ 75, 08, E8, D7, FD, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuItemCount + B6 77D21E94 17 Bytes [ 03, 5D, 1C, 8B, C8, C1, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuItemCount + C8 77D21EA6 43 Bytes [ 4D, F0, 0F, 85, 65, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuItemInfoA + 2 77D21F71 191 Bytes CALL 77D21F80 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuItemInfoA + C2 77D22031 28 Bytes [ 75, E4, 89, 45, F8, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuItemInfoA + DF 77D2204E 6 Bytes [ 75, 10, FF, 75, 0C, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuItemInfoA + E6 77D22055 26 Bytes CALL 77D1418B C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuItemInfoA + 104 77D22073 109 Bytes [ 90, 8B, FF, 55, 8B, EC, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterClassA + 33 77D220E1 7 Bytes [ 85, C0, 74, 1D, 83, 78, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterClassA + 3B 77D220E9 13 Bytes [ 74, 17, 8B, 48, 34, 2B, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterClassA + 49 77D220F7 23 Bytes [ 20, 00, 00, 85, 01, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterClassA + 61 77D2210F 33 Bytes [ 1C, 09, 39, 5D, E0, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterClassA + 83 77D22131 49 Bytes JMP 77D21C41 C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplayDevicesA + 45 77D221C4 34 Bytes JMP 77D18B9D C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplayDevicesA + 68 77D221E7 1 Byte [ 84 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplayDevicesA + 6B 77D221EA 31 Bytes [ 85, 05, DC, FE, FF, E9, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplayDevicesA + 8B 77D2220A 3 Bytes CALL 01D2220D .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplayDevicesA + 8F 77D2220E 26 Bytes [ 89, BD, F4, FE, FF, FF, 89, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIconIndirect 77D22D02 64 Bytes [ B8, 5D, 11, 00, 00, BA, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIconIndirect + 41 77D22D43 92 Bytes JMP 77D14E3E C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIconIndirect + 9E 77D22DA0 26 Bytes [ FF, 89, 46, 14, 8B, 85, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIconIndirect + BA 77D22DBC 22 Bytes [ 89, 86, 98, 00, 00, 00, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIconIndirect + D1 77D22DD3 51 Bytes [ FF, 50, 8D, 46, 18, 50, E8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LookupIconIdFromDirectoryEx + 14 77D2340F 79 Bytes [ 42, 42, 66, 89, 85, A0, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LookupIconIdFromDirectoryEx + 64 77D2345F 13 Bytes [ FF, 99, 2B, C2, D1, F8, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LookupIconIdFromDirectoryEx + 72 77D2346D 51 Bytes JMP 77D17705 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LookupIconIdFromDirectoryEx + A8 77D234A3 26 Bytes [ B8, 1B, 12, 00, 00, BA, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LookupIconIdFromDirectoryEx + C3 77D234BE 7 Bytes [ 03, FE, 7F, FF, 12, C2, 04 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadImageW + 2C 77D23770 5 Bytes [ 0F, 84, 6C, 0F, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadImageW + 32 77D23776 79 Bytes CALL DB56468C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadImageA + 11 77D237C6 26 Bytes [ 00, FE, FF, 0F, 85, 91, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadImageA + 2C 77D237E1 69 Bytes [ 0F, 84, 6F, F1, 00, 00, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconsW + 1A 77D23829 34 Bytes [ 81, FF, B1, 00, 00, 00, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconsW + 3E 77D2384D 37 Bytes JMP 77D35270 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconsW + 64 77D23873 91 Bytes [ 8B, 5D, 10, 85, DB, 74, 4A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconsW + C0 77D238CF 11 Bytes [ C2, 0C, 00, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconsW + CC 77D238DB 4 Bytes [ FF, 5C, 20, D4 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIconFromResourceEx + 2 77D23E6E 35 Bytes CALL 77D0C8C4 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIconFromResourceEx + 26 77D23E92 13 Bytes [ 12, 39, 84, 91, 80, F6, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIconFromResourceEx + 34 77D23EA0 39 Bytes JMP 77D35A53 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIconFromResourceEx + 5C 77D23EC8 2 Bytes [ 70, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIconFromResourceEx + 5F 77D23ECB 4 Bytes [ 53, 8B, 5D, 10 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconExW + 3F 77D23F1A 26 Bytes [ FF, FF, 89, 3E, 5F, 5E, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconExW + 5A 77D23F35 46 Bytes [ 01, 00, 00, 0F, 84, A7, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconExW + 89 77D23F64 20 Bytes [ FF, 55, 8B, EC, 6A, 01, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconExW + 9E 77D23F79 26 Bytes [ FF, 75, 0C, FF, 75, 08, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconExW + B9 77D23F94 36 Bytes JMP 77D0CCBA .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefDlgProcW + 1 77D241E3 14 Bytes [ D1, 81, E2, FF, 3F, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefDlgProcW + 10 77D241F2 36 Bytes [ 0E, 41, 81, F9, A0, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefDlgProcW + 35 77D24217 197 Bytes CALL 77D241CB C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefDlgProcW + FB 77D242DD 13 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefDlgProcW + 109 77D242EB 96 Bytes [ FF, 75, 0C, FF, 75, 08, E8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgItemTextW + 2 77D247AF 6 Bytes [ 75, 08, E8, 85, BC, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgItemTextW + 9 77D247B6 53 Bytes [ 5D, C2, 04, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgItemTextW + 3F 77D247EC 66 Bytes [ 90, 90, 90, 8B, FF, 55, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgItem + 19 77D2482F 9 Bytes CALL 77D0D8C4 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgItem + 23 77D24839 112 Bytes [ FF, 75, 0C, FF, 15, 28, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgItem + 94 77D248AA 136 Bytes [ 75, 10, FF, 75, 0C, 50, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextLengthW + 52 77D24933 54 Bytes [ 5E, 5F, 5B, C9, C2, 14, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextLengthW + 89 77D2496A 147 Bytes [ 75, 10, 0F, B7, C0, 50, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextLengthW + 11D 77D249FE 2 Bytes [ 8B, 06 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextLengthW + 120 77D24A01 4 Bytes [ C3, 8D, 48, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextLengthW + 125 77D24A06 152 Bytes [ 0E, 0F, 84, 1E, 0E, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogIndirectParamAorW + 22 77D2513B 65 Bytes [ 55, 8B, EC, 83, EC, 0C, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogIndirectParamAorW + 64 77D2517D 64 Bytes CALL 77D0D8C2 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogIndirectParamAorW + A5 77D251BE 26 Bytes [ D4, 50, FF, 75, 08, E8, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogIndirectParamAorW + C0 77D251D9 2 Bytes [ D4, 39 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogIndirectParamAorW + C3 77D251DC 22 Bytes [ 08, 53, 0F, 85, 77, 38, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InSendMessage + C 77D25BB0 31 Bytes CALL 77D0D188 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InSendMessage + 2C 77D25BD0 10 Bytes CALL 77D11F60 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InSendMessage + 38 77D25BDC 6 Bytes [ 33, C0, E9, 6D, 02, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InSendMessage + 3F 77D25BE3 44 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InSendMessage + 6C 77D25C10 47 Bytes [ 75, 20, FF, 75, 1C, FF, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetDlgItemTextW + 6 77D25C80 9 Bytes [ 89, 9D, F8, FE, FF, FF, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetDlgItemTextW + 10 77D25C8A 25 Bytes [ FF, FF, B5, E0, FE, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetDlgItemTextW + 2A 77D25CA4 61 Bytes [ 03, FE, 7F, FF, 12, C2, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendDlgItemMessageW + 8 77D25CE2 34 Bytes [ 81, E1, 01, 00, FF, FF, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendDlgItemMessageW + 2B 77D25D05 120 Bytes [ 08, 53, FF, 75, 0C, 0F, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendDlgItemMessageW + A4 77D25D7E 38 Bytes [ 85, 95, 13, 01, 00, 8B, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendDlgItemMessageW + CB 77D25DA5 148 Bytes [ 0F, 85, 54, A8, 00, 00, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendDlgItemMessageW + 160 77D25E3A 17 Bytes [ 00, 00, 0F, 87, 89, 73, FE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadBitmapA + 4F 77D25F29 239 Bytes [ 6A, FF, FF, 75, 08, E8, A4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawStateW + 45 77D26019 51 Bytes CALL 77D0FCD6 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawStateW + 79 77D2604D 42 Bytes JMP CD576F55 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawStateW + A4 77D26078 33 Bytes [ 8D, 00, 00, 53, 53, 68, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawStateW + C6 77D2609A 21 Bytes [ 0F, B7, C0, 0F, B7, D8, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawStateW + DC 77D260B0 118 Bytes [ 00, F6, 40, 23, 08, 0F, 85, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DialogBoxIndirectParamAorW + 10 77D261E2 2 Bytes [ 3B, D1 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DialogBoxIndirectParamAorW + 13 77D261E5 33 Bytes [ 86, 01, AB, FE, FF, E9, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DialogBoxIndirectParamAorW + 35 77D26207 7 Bytes [ AA, FE, FF, 3B, F7, 0F, 85 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DialogBoxIndirectParamAorW + 3D 77D2620F 2 Bytes [ AB, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DialogBoxIndirectParamAorW + 40 77D26212 17 Bytes JMP 77D10D4A C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EndDialog + 49 77D26299 9 Bytes [ 00, 0F, 84, D3, 2D, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EndDialog + 53 77D262A3 31 Bytes [ 01, 00, 3B, CF, 0F, 84, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EndDialog + 73 77D262C3 3 Bytes [ 62, 97, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EndDialog + 77 77D262C7 28 Bytes CALL 77D1ACC0 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EndDialog + 94 77D262E4 38 Bytes [ 85, FF, 0F, 85, 66, 4A, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CheckDlgButton + 23 77D265EF 263 Bytes [ 75, 10, 8D, 45, F8, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetCursorFrameInfo + 7E 77D266F7 15 Bytes [ 95, E4, FE, FF, FF, 89, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetCursorFrameInfo + 8E 77D26707 18 Bytes [ FF, 39, 85, F0, FE, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetCursorFrameInfo + A2 77D2671B 10 Bytes [ 90, 90, 90, 8B, FF, 55, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetCursorFrameInfo + AD 77D26726 28 Bytes [ 75, 0C, FF, 75, 08, 6A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetCursorFrameInfo + CA 77D26743 12 Bytes [ 75, 10, FF, 75, 0C, FF, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoExW + A 77D2799C 29 Bytes [ 0F, 84, 89, 27, 00, 00, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoExW + 28 77D279BA 29 Bytes [ 53, 56, 33, DB, 39, 55, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoExW + 47 77D279D9 20 Bytes [ 8B, 55, 08, 8B, 72, 14, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoExW + 5C 77D279EE 4 Bytes [ 85, 33, 87, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoExW + 61 77D279F3 83 Bytes [ 83, FB, 02, 0F, 84, 1C, 38, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplayDevicesW + B 77D27B1D 8 Bytes [ 00, 83, 7D, 10, 00, 74, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplayDevicesW + 14 77D27B26 68 Bytes [ CC, 00, 00, 00, 29, 45, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplayDevicesW + 59 77D27B6B 33 Bytes [ 75, 0C, FF, 15, C4, 11, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplayDevicesW + 7B 77D27B8D 47 Bytes [ 75, 0C, 8B, 75, 08, FF, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FindWindowExW + 4 77D27BBD 12 Bytes [ 75, 08, 57, 75, 08, FF, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FindWindowExW + 11 77D27BCA 34 Bytes CALL 77D0CAE4 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterShellHookWindow + 13 77D27BED 7 Bytes [ 00, 85, F6, 74, 08, 56, 57 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterShellHookWindow + 1B 77D27BF5 27 Bytes [ 15, C0, 11, D1, 77, 8B, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterShellHookWindow + 37 77D27C11 49 Bytes CALL A7568B1A .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetClassLongW + 22 77D27C43 22 Bytes [ 55, 8B, EC, FF, 75, 08, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetClassLongW + 3A 77D27C5B 11 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetClassLongW + 46 77D27C67 52 Bytes [ 75, 08, 8B, 46, 60, A8, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetClassLongW + 7B 77D27C9C 107 Bytes [ 00, 33, C9, 3B, 86, 98, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetClassLongW + E7 77D27D08 27 Bytes [ 00, 8B, 7D, 08, 8B, 47, 60, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowRgn + 32 77D27F4B 27 Bytes [ 00, 8B, B3, D0, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowRgn + 4E 77D27F67 86 Bytes [ 0F, 85, 18, E1, 00, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowRgn + A5 77D27FBE 69 Bytes [ FF, 5F, 5E, 5B, C9, C2, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowRgn + EB 77D28004 162 Bytes [ 70, 00, 00, 00, 28, 36, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowRgn + 18E 77D280A7 51 Bytes [ 31, 6B, 31, 7E, 31, 83, 31, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!BroadcastSystemMessageW + 90 77D281CC 162 Bytes [ 98, 00, 00, 00, DC, 32, EA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!BroadcastSystemMessageW + 133 77D2826F 6 Bytes [ 30, 8D, 30, AF, 30, C8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!BroadcastSystemMessageW + 13A 77D28276 44 Bytes [ D3, 30, 32, 31, 47, 31, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!BroadcastSystemMessageW + 167 77D282A3 396 Bytes [ 32, 54, 32, 58, 32, 5C, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterDeviceNotification + 89 77D28430 391 Bytes [ 83, 30, 6E, 31, C2, 31, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogParamW + CA 77D285B8 200 Bytes [ 5C, 3B, 64, 3B, 6C, 3B, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterHotKey + 1B 77D28681 139 Bytes [ 00, 00, 00, 03, 30, 5C, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterHotKey + A7 77D2870D 193 Bytes [ 3F, 3D, 3F, 69, 3F, E1, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadRemoteFonts + 65 77D287CF 5 Bytes [ 3F, 10, 3F, 1C, 3F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadRemoteFonts + 6B 77D287D5 1 Byte [ 3F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadRemoteFonts + 6D 77D287D7 537 Bytes [ 3F, 4A, 3F, 50, 3F, 87, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterUserApiHook + 143 77D289F1 113 Bytes [ 33, 05, 34, 22, 34, 28, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterUserApiHook + 1B5 77D28A63 215 Bytes [ 00, 0B, 30, 3B, 30, 48, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterUserApiHook + 28D 77D28B3B 83 Bytes [ 3B, 04, 3C, 0C, 3C, 14, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterUserApiHook + 2E1 77D28B8F 243 Bytes [ 3C, D8, 3C, DC, 3C, E0, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterUserApiHook + 3D5 77D28C83 77 Bytes [ 3E, C0, 3E, C4, 3E, C8, 3E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowStationUser + 19 77D28DFE 69 Bytes [ 48, 34, 53, 34, 62, 34, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowStationUser + 5F 77D28E44 399 Bytes [ 8C, 00, 00, 00, 3B, 31, A9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ModifyMenuW + 8 77D28FD4 274 Bytes [ 7D, 30, 81, 30, B0, 30, B6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InsertMenuW + 2D 77D290E8 115 Bytes [ 9A, 30, D9, 30, 4B, 31, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuDefaultItem + 48 77D2915C 215 Bytes [ 98, 00, 00, 00, 64, 30, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuItemInfoW + 5D 77D29234 410 Bytes [ 7F, 33, 8A, 33, 94, 33, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuItemInfoW + 1F8 77D293CF 67 Bytes [ 31, 0C, 31, 10, 31, 14, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuItemInfoW + 23C 77D29413 369 Bytes [ 31, 94, 31, 98, 31, 9C, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuState + 171 77D29585 836 Bytes [ 31, ED, 31, 00, 32, 74, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterMessagePumpHook + 1A 77D298CA 74 Bytes [ FC, 3B, 00, 3C, 04, 3C, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterMessagePumpHook + 65 77D29915 72 Bytes [ 3C, 94, 3C, 98, 3C, 9C, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SwitchDesktop + 48 77D2995E 681 Bytes [ F8, 30, 48, 31, 4C, 31, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SubtractRect + 28 77D29C08 215 Bytes [ A8, 02, 00, 00, 78, 30, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadBitmapW + 6 77D29CE0 978 Bytes [ 50, 33, 54, 33, 58, 33, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCreateStringHandleW + 1D4 77D2A0B3 55 Bytes [ 31, 08, 31, 0C, 31, 10, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCreateStringHandleW + 20C 77D2A0EB 329 Bytes [ 31, 78, 31, 7C, 31, 80, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeInitializeW + C6 77D2A235 411 Bytes [ 36, EC, 36, F0, 36, F4, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeNameService + DB 77D2A3D1 136 Bytes [ 3B, 1D, 3C, 3E, 3C, 48, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeNameService + 164 77D2A45A 94 Bytes [ 00, 00, 0D, 30, E1, 32, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeNameService + 1C3 77D2A4B9 79 Bytes [ 3D, 74, 3D, E7, 3D, 10, 3E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeNameService + 213 77D2A509 123 Bytes [ 34, 5B, 34, 68, 34, 86, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeNameService + 28F 77D2A585 125 Bytes [ C0, 02, 00, B4, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateWindowStationW + 3A 77D2AEAF 75 Bytes [ 00, 20, 30, EF, 31, 0F, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateWindowStationW + 87 77D2AEFC 3 Bytes [ 00, 00, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateWindowStationW + 8B 77D2AF00 273 Bytes [ 70, 00, 00, 00, 06, 30, A4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateWindowStationW + 19D 77D2B012 57 Bytes [ 64, 00, 65, 00, 73, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateWindowStationW + 1D7 77D2B04C 79 Bytes [ 74, 00, 20, 00, 6E, 00, 69, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDesktopW + 40 77D2B102 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDesktopW + 42 77D2B104 5 Bytes [ 65, 00, 69, 00, 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDesktopW + 48 77D2B10A 17 Bytes [ 69, 00, 67, 00, 74, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDesktopW + 5A 77D2B11C 1 Byte [ 76 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDesktopW + 5C 77D2B11E 25 Bytes [ 65, 00, 72, 00, 6E, 00, 20, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UpdatePerUserSystemParameters + 1A 77D2B232 31 Bytes [ 64, 00, 65, 00, 20, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UpdatePerUserSystemParameters + 3A 77D2B252 19 Bytes [ 65, 00, 20, 00, 67, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UpdatePerUserSystemParameters + 4E 77D2B266 13 Bytes [ 2E, 00, 0D, 00, 0A, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UpdatePerUserSystemParameters + 5C 77D2B274 1 Byte [ 44 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UpdatePerUserSystemParameters + 5E 77D2B276 9 Bytes [ 61, 00, 73, 00, 20, 00, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharAlphaNumericW + 2A 77D2B57C 21 Bytes [ 20, 00, 41, 00, 64, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharAlphaNumericW + 40 77D2B592 81 Bytes [ 69, 00, 6E, 00, 64, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterDeviceNotificationA + 19 77D2B5E4 5 Bytes [ 80, 00, 01, 00, 44 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterDeviceNotificationA + 1F 77D2B5EA 9 Bytes [ 69, 00, 65, 00, 20, 00, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterDeviceNotificationA + 29 77D2B5F4 21 Bytes [ 73, 00, 65, 00, 72, 00, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterDeviceNotificationA + 3F 77D2B60A 37 Bytes [ 64, 00, 65, 00, 72, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookW + 16 77D2B630 41 Bytes [ 6C, 00, 65, 00, 20, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnhookWindowsHook + 25 77D2B65A 29 Bytes [ 2E, 00, 0D, 00, 0A, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnhookWindowsHook + 43 77D2B678 23 Bytes [ 69, 00, 63, 00, 68, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnhookWindowsHook + 5B 77D2B690 69 Bytes [ 20, 00, 69, 00, 73, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnhookWindowsHook + A1 77D2B6D6 57 Bytes [ 6E, 00, 2E, 00, 0D, 00, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnhookWindowsHook + DB 77D2B710 3 Bytes [ 73, 00, 74 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterUserApiHook + B 77D2B79A 19 Bytes [ 20, 00, 65, 00, 69, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterUserApiHook + 1F 77D2B7AE 25 Bytes [ 73, 00, 65, 00, 20, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterUserApiHook + 39 77D2B7C8 43 Bytes [ 72, 00, 69, 00, 65, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterUserApiHook + 65 77D2B7F4 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterUserApiHook + 67 77D2B7F6 13 Bytes [ 56, 00, 65, 00, 72, 00, 7A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AllowSetForegroundWindow + 16 77D2B8E6 51 Bytes [ 72, 00, 6E, 00, 65, 00, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AllowSetForegroundWindow + 4A 77D2B91A 17 Bytes [ 69, 00, 73, 00, 64, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AllowSetForegroundWindow + 5C 77D2B92C 15 Bytes [ 66, 00, 65, 00, 68, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AllowSetForegroundWindow + 6C 77D2B93C 37 Bytes [ 65, 00, 72, 00, 62, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AllowSetForegroundWindow + 92 77D2B962 11 Bytes [ 72, 00, 61, 00, 74, 00, 69, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterMessagePumpHook + C 77D2B998 25 Bytes [ 6E, 00, 6E, 00, 20, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterMessagePumpHook + 26 77D2B9B2 157 Bytes [ 42, 00, 65, 00, 73, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterServicesProcess + 12 77D2BA50 41 Bytes [ 72, 00, 7A, 00, 65, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterServicesProcess + 3C 77D2BA7A 9 Bytes [ 65, 00, 20, 00, 64, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetLogonNotifyWindow + 5 77D2BA84 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetLogonNotifyWindow + 7 77D2BA86 7 Bytes [ 42, 00, 65, 00, 73, 00, 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetLogonNotifyWindow + F 77D2BA8E 17 Bytes [ 74, 00, 7A, 00, 20, 00, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChildWindowFromPointEx + 5 77D2BAA0 1 Byte [ 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChildWindowFromPointEx + 7 77D2BAA2 7 Bytes [ 64, 00, 65, 00, 73, 00, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChildWindowFromPointEx + F 77D2BAAA 41 Bytes [ 65, 00, 6E, 00, 73, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChildWindowFromPoint + 25 77D2BAD4 11 Bytes [ 75, 00, 73, 00, 20, 00, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChildWindowFromPoint + 31 77D2BAE0 9 Bytes [ 20, 00, 77, 00, 65, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChildWindowFromPoint + 3B 77D2BAEA 1 Byte [ 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChildWindowFromPoint + 3D 77D2BAEC 43 Bytes [ 65, 00, 6C, 00, 6E, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChildWindowFromPoint + 69 77D2BB18 5 Bytes [ 68, 00, 74, 00, 20 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AnimateWindow + A 77D2BBF0 23 Bytes [ 72, 00, 20, 00, 50, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AnimateWindow + 22 77D2BC08 1 Byte [ 66 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AnimateWindow + 24 77D2BC0A 1 Byte [ FC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AnimateWindow + 26 77D2BC0C 71 Bytes [ 72, 00, 20, 00, 64, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AnimateWindow + 6E 77D2BC54 11 Bytes [ 65, 00, 6E, 00, 2E, 00, 0D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterLogonProcess + 99 77D2C69C 46 Bytes [ 54, 00, 00, 00, E7, 30, A2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterLogonProcess + C8 77D2C6CB 36 Bytes [ 3A, 37, 3B, 94, 3B, 77, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterLogonProcess + ED 77D2C6F0 1 Byte [ A8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterLogonProcess + EF 77D2C6F2 297 Bytes [ 00, 00, 1D, 30, 2B, 30, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterLogonProcess + 219 77D2C81C 2 Bytes [ B8, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetMenuItemInfoW + 16 77D2CD27 108 Bytes [ 35, 07, 36, 15, 36, 1F, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AppendMenuW + 4A 77D2CD94 46 Bytes [ A0, 00, 00, 00, 02, 30, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AppendMenuW + 79 77D2CDC3 47 Bytes [ 36, 1A, 37, 24, 37, 6A, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AppendMenuW + A9 77D2CDF3 149 Bytes [ 3A, EB, 3A, 3F, 3B, 60, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ShowWindowAsync + 7C 77D2CE89 20 Bytes [ 39, 80, 39, 8C, 39, C2, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ShowWindowAsync + 91 77D2CE9E 34 Bytes [ 9C, 3B, 93, 3C, C2, 3C, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ShowWindowAsync + B4 77D2CEC1 360 Bytes [ 3F, CC, 3F, ED, 3F, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsExW + 37 77D2D02A 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsExW + 39 77D2D02C 29 Bytes [ 4F, 00, 53, 00, 53, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsExW + 57 77D2D04A 30 Bytes [ 72, 00, 3A, 00, 20, 00, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsExW + 76 77D2D069 38 Bytes [ 00, 65, 00, 6E, 00, 2E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsExW + 9D 77D2D090 13 Bytes [ 46, 00, 65, 00, 68, 00, 6C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsW + D 77D2D0C7 62 Bytes [ 00, 50, 00, 01, 00, 4F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!BroadcastSystemMessageExW + 22 77D2D106 16 Bytes [ 61, 00, 74, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CsrBroadcastSystemMessageExW + C 77D2D117 2 Bytes [ 00, A4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CsrBroadcastSystemMessageExW + F 77D2D11A 5 Bytes [ 01, 00, 4F, 00, 53 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CsrBroadcastSystemMessageExW + 15 77D2D120 3 Bytes [ 53, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CsrBroadcastSystemMessageExW + 19 77D2D124 3 Bytes [ 41, 00, 53 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CsrBroadcastSystemMessageExW + 1D 77D2D128 13 Bytes [ 4E, 00, 2E, 00, 31, 00, 20, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetNextDlgTabItem + 1F 77D2D272 17 Bytes [ 63, 00, 68, 00, 74, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetNextDlgTabItem + 31 77D2D284 22 Bytes [ 6D, 00, 65, 00, 6E, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetNextDlgTabItem + 48 77D2D29B 8 Bytes [ 00, 54, 00, 01, 00, 4F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrintWindow + 4 77D2D2A4 77 Bytes [ 53, 00, 20, 00, 41, 00, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeDisplaySettingsExA + 14 77D2D2F2 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeDisplaySettingsExA + 16 77D2D2F4 5 Bytes [ 4F, 00, 53, 00, 53 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeDisplaySettingsExA + 1C 77D2D2FA 11 Bytes [ 20, 00, 41, 00, 53, 00, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeDisplaySettingsExA + 28 77D2D306 35 Bytes [ 20, 00, 46, 00, 65, 00, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeDisplaySettingsExA + 4C 77D2D32A 39 Bytes [ 20, 00, 64, 00, 65, 00, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsExA + 23 77D2D3A6 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsExA + 25 77D2D3A8 5 Bytes [ 72, 00, 20, 00, 41 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsExA + 2B 77D2D3AE 11 Bytes [ 62, 00, 6C, 00, 61, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsExA + 37 77D2D3BA 35 Bytes [ 65, 00, 72, 00, 66, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsExA + 5B 77D2D3DE 11 Bytes [ 00, 00, 50, 00, 01, 00, 4F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsA + D 77D2D504 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsA + F 77D2D506 9 Bytes [ 61, 00, 6D, 00, 6D, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsA + 19 77D2D510 11 Bytes [ 6E, 00, 6B, 00, 66, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsA + 25 77D2D51C 43 Bytes [ 65, 00, 72, 00, 2E, 00, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDisplaySettingsA + 51 77D2D548 9 Bytes [ 65, 00, 72, 00, 3A, 00, 20, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateAcceleratorTableW + 5 77D2DAC0 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateAcceleratorTableW + 7 77D2DAC2 7 Bytes [ 20, 00, 66, 00, FC, 00, 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateAcceleratorTableW + F 77D2DACA 138 Bytes [ 20, 00, 41, 00, 53, 00, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateAcceleratorTableW + 9D 77D2DB58 53 Bytes [ 44, 00, 01, 00, 41, 00, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateAcceleratorTableW + D3 77D2DB8E 35 Bytes [ 64, 00, 65, 00, 2E, 00, 0D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnlockWindowStation + 5 77D2DDDE 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnlockWindowStation + 7 77D2DDE0 7 Bytes [ 41, 00, 53, 00, 4E, 00, 31 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnlockWindowStation + F 77D2DDE8 121 Bytes [ 20, 00, 55, 00, 6E, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoExA + A 77D2DE62 31 Bytes [ 2E, 00, 0D, 00, 0A, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoExA + 2A 77D2DE82 21 Bytes [ 6C, 00, 74, 00, 69, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoExA + 40 77D2DE98 3 Bytes [ 72, 00, 75 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoExA + 44 77D2DE9C 7 Bytes [ 6E, 00, 67, 00, 73, 00, 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoExA + 4C 77D2DEA4 21 Bytes [ 65, 00, 67, 00, 65, 00, 6C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowPlacement + 4 77D2DF4A 93 Bytes [ 63, 00, 68, 00, 20, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CopyIcon + 36 77D2DFA8 41 Bytes [ 77, 00, 65, 00, 69, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsDialogMessageW + 16 77D2DFD2 19 Bytes [ FC, 00, 62, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsDialogMessageW + 2A 77D2DFE6 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsDialogMessageW + 2C 77D2DFE8 8 Bytes [ 6E, 00, 2E, 00, 0D, 00, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsDialogMessageW + 35 77D2DFF1 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsDialogMessageW + 38 77D2DFF4 104 Bytes [ 3C, 00, 01, 00, 41, 00, 53, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallMsgFilterW + 2 77D2E0A8 54 Bytes JMP 77D2A2EB C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallMsgFilterW + 39 77D2E0DF 47 Bytes [ 8B, 46, 08, 99, F7, 7E, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallMsgFilterW + 69 77D2E10F 28 Bytes [ 8B, FF, 55, 8B, EC, 56, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallMsgFilterW + 86 77D2E12C 1 Byte [ 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallMsgFilterW + 88 77D2E12E 122 Bytes JMP 77D2ADF7 C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CloseDesktop + 5 77D2E3D4 5 Bytes [ 00, 0F, 85, 0D, 42 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CloseDesktop + B 77D2E3DA 52 Bytes CALL 7B57F30C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CloseDesktop + 40 77D2E40F 11 Bytes [ FF, 55, 8B, EC, 8B, 4D, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CloseDesktop + 4C 77D2E41B 96 Bytes [ 00, 3B, C8, 56, 57, 77, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CloseDesktop + AD 77D2E47C 9 Bytes [ 55, 8B, EC, 83, EC, 54, 53, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookExW + 11 77D2E4C0 100 Bytes [ 85, C0, 74, 72, 8B, 45, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookExW + 77 77D2E526 5 Bytes [ 35, 24, 02, D7, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookExW + 7D 77D2E52C 37 Bytes [ D6, 8B, C7, 5F, 5E, 5B, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookExW + A3 77D2E552 20 Bytes [ 75, 08, 33, DB, 39, 5E, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookExW + B8 77D2E567 81 Bytes [ 04, 83, 4E, 44, FF, 39, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FindWindowA + 39 77D2E5BA 56 Bytes [ 8B, C7, 83, E0, 0F, 83, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FindWindowA + 72 77D2E5F3 38 Bytes [ 83, A5, F8, FE, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FindWindowA + 99 77D2E61A 15 Bytes [ 8D, 04, 80, 8D, BC, C1, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FindWindowA + A9 77D2E62A 127 Bytes [ C0, 0F, 85, D2, ED, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FindWindowA + 129 77D2E6AA 14 Bytes [ 40, 56, 89, 46, 40, E8, 23, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetGUIThreadInfo + 9 77D2E7B2 47 Bytes [ FF, 3B, C7, 89, 85, F0, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetGUIThreadInfo + 39 77D2E7E2 3 Bytes [ FF, 8D, 51 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetGUIThreadInfo + 3D 77D2E7E6 18 Bytes [ 0F, AF, C2, 8B, 96, FC, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetGUIThreadInfo + 50 77D2E7F9 46 Bytes CALL 77D2EEAD C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetGUIThreadInfo + 7F 77D2E828 26 Bytes [ 15, C0, 11, D1, 77, FF, 73, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDesktopWindows + 16 77D2EB9A 1 Byte [ FD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDesktopWindows + 18 77D2EB9C 22 Bytes [ FF, 00, 57, FF, B5, EC, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDesktopsW + E 77D2EBB3 6 Bytes [ FF, 51, FF, B5, D0, FD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDesktopsW + 15 77D2EBBA 23 Bytes [ FF, 50, FF, B5, D8, FD, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenDesktopW + F 77D2EBD2 105 Bytes [ FF, 8B, 81, DC, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenDesktopW + 79 77D2EC3C 43 Bytes [ C6, 7A, 85, C0, 0F, 85, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenDesktopW + A5 77D2EC68 25 Bytes [ 00, 83, A5, DC, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenDesktopW + BF 77D2EC82 17 Bytes [ FF, 80, 20, 02, 50, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenDesktopW + D1 77D2EC94 43 Bytes [ 04, 80, 8D, 44, 00, 02, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PaintDesktop + B 77D2ECC0 53 Bytes [ FF, 99, FF, B5, CC, FD, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ActivateKeyboardLayout + 19 77D2ECF6 1 Byte [ 7F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ActivateKeyboardLayout + 1B 77D2ECF8 14 Bytes CALL 77D0E185 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ActivateKeyboardLayout + 2A 77D2ED07 11 Bytes [ F6, 43, 14, 80, 8B, F0, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ActivateKeyboardLayout + 36 77D2ED13 46 Bytes [ 89, 43, 18, 75, 18, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ActivateKeyboardLayout + 65 77D2ED42 20 Bytes [ FF, FF, 35, 64, 02, D7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReplyMessage + 2 77D2ED57 8 Bytes [ 0F, 84, 3E, E5, 00, 00, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReplyMessage + B 77D2ED60 14 Bytes [ FD, FF, FF, 0F, 75, 0E, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReplyMessage + 1A 77D2ED6F 28 Bytes [ FF, 01, 00, 00, 00, 3B, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharLowerA + 18 77D2ED8C 115 Bytes [ 15, A4, 13, D1, 77, 33, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharLowerA + 8C 77D2EE00 34 Bytes CALL 77D0CCC3 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharLowerA + AF 77D2EE23 68 Bytes [ 84, 26, F6, FF, FF, 6A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharLowerA + F4 77D2EE68 12 Bytes CALL 77D1A66C C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharLowerA + 101 77D2EE75 3 Bytes [ D7, F5, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharLowerBuffA + 12 77D2EEB4 41 Bytes [ 45, 08, 6A, 10, 25, F0, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharLowerBuffA + 3C 77D2EEDE 231 Bytes [ EB, F5, B8, 03, 7F, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InSendMessageEx + 35 77D2EFC6 23 Bytes [ 15, A8, 10, D1, 77, E9, C5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InSendMessageEx + 4D 77D2EFDE 45 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InSendMessageEx + 7B 77D2F00C 11 Bytes [ 34, 13, 03, B0, D0, 05, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InSendMessageEx + 87 77D2F018 47 Bytes [ CF, 03, 4D, 20, 2B, D3, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InSendMessageEx + B7 77D2F048 17 Bytes [ 2B, C2, 8B, 55, F0, D1, F8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetProcessWindowStation + 5 77D2F09C 110 Bytes [ D7, 77, 8B, 98, D4, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetProcessWindowStation + 74 77D2F10B 65 Bytes [ 8B, 75, 14, 8B, 7D, 08, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsClipboardFormatAvailable + F 77D2F14D 9 Bytes [ 00, 83, F8, 10, 0F, 84, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClipboardSequenceNumber + 5 77D2F157 14 Bytes [ 83, F8, 20, 0F, 84, 29, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClipboardSequenceNumber + 14 77D2F166 115 Bytes [ 94, C1, 41, 8B, C1, 50, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VkKeyScanExW + 46 77D2F1DA 17 Bytes [ C0, 0F, 84, 6D, F2, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VkKeyScanExW + 59 77D2F1ED 21 Bytes JMP 77D2E3E9 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VkKeyScanExW + 6F 77D2F203 17 Bytes [ 12, C2, 08, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VkKeyScanExW + 82 77D2F216 29 Bytes [ D7, 77, 8B, 80, D4, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetTopWindow + 1 77D2F234 5 Bytes [ 5D, 14, 33, FF, 89 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetTopWindow + 7 77D2F23A 50 Bytes [ F8, 2B, D8, 85, C9, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetTopWindow + 3A 77D2F26D 73 Bytes [ CF, FF, B0, FC, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetTopWindow + 84 77D2F2B7 45 Bytes [ 8D, 04, 85, 02, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateMenu + 7 77D2F2E5 121 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateMenu + 81 77D2F35F 22 Bytes [ 00, 8B, C6, 99, 2B, C2, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateMenu + 98 77D2F376 121 Bytes [ 00, 8B, 55, 14, 89, 51, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendMessageA + 56 77D2F3F0 38 Bytes [ E1, 01, 66, 89, 02, 8D, 54, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendMessageA + 7D 77D2F417 11 Bytes JMP 77D2E9A4 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendMessageA + 89 77D2F423 63 Bytes JMP 77D2EDB2 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassNameA + 2C 77D2F463 68 Bytes [ 8A, 0C, 39, 84, C1, 5F, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassNameA + 71 77D2F4A8 17 Bytes JMP 77D265B4 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassNameA + 84 77D2F4BB 41 Bytes [ 6A, 01, 6A, 01, 68, F4, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassLongA + 1C 77D2F4E5 76 Bytes [ 49, 0F, 85, EA, BB, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumThreadWindows + 21 77D2F532 11 Bytes JMP 77D1BA5D C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumThreadWindows + 2D 77D2F53E 5 Bytes [ 55, 8B, EC, 53, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowTextA + 1 77D2F544 46 Bytes [ 75, 08, 6A, 00, FF, 75, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowTextA + 31 77D2F574 59 Bytes [ 74, 1C, 6A, 02, FF, 75, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowTextA + 6D 77D2F5B0 156 Bytes [ 08, 57, 6A, 00, 56, E8, AA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetInputState + 27 77D2F64D 3 Bytes [ 0A, 79, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetInputState + 2B 77D2F651 70 Bytes [ 83, F8, 06, 0F, 86, F4, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetCaretPos + 1F 77D2F698 12 Bytes CALL 602949ED .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetCaretPos + 2C 77D2F6A5 67 Bytes [ 8B, 46, 34, 3B, 05, 90, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetScrollPos + D 77D2F6E9 21 Bytes [ FF, 83, 7D, 10, 02, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetScrollPos + 23 77D2F6FF 52 Bytes [ 68, 34, 1C, D1, 77, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetScrollPos + C 77D2F734 75 Bytes CALL 77D188D3 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetScrollRange + 21 77D2F780 8 Bytes [ 85, C1, 74, 06, F6, 46, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetScrollRange + 2A 77D2F789 7 Bytes [ 32, 3B, F7, 0F, 84, 7A, BF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetScrollRange + 33 77D2F792 19 Bytes [ 8B, 06, 51, 8D, 8D, FC, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetScrollRange + 47 77D2F7A6 21 Bytes [ 75, 10, 8D, 85, FC, FD, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetScrollRange + 5D 77D2F7BC 19 Bytes [ FF, 85, F8, FD, FF, FF, 3B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FrameRect + 7 77D2F909 76 Bytes JMP 77D2688C C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawFocusRect + 2F 77D2F956 146 Bytes [ 00, A1, 80, 00, D7, 77, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetScrollRange + 76 77D2F9E9 2 Bytes [ FF, 6A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetScrollRange + 79 77D2F9EC 123 Bytes CALL 77D10925 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ShowCursor + 23 77D2FA69 23 Bytes [ 84, 81, 8C, FF, FF, 81, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ShowCursor + 3B 77D2FA81 10 Bytes [ 65, 7C, FF, FF, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ShowCursor + 46 77D2FA8C 24 Bytes [ 55, 8B, EC, 8B, 45, 08, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TranslateAccelerator + 9 77D2FAA5 16 Bytes [ FF, 30, 0F, B7, 40, 78, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TranslateAccelerator + 1A 77D2FAB6 23 Bytes CALL 77D0FBF2 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TranslateAccelerator + 32 77D2FACE 38 Bytes [ 03, C1, 50, 8D, 45, DC, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TranslateAccelerator + 59 77D2FAF5 174 Bytes [ FF, 81, FA, 31, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ValidateRect + F 77D2FBA4 20 Bytes [ 0F, 84, C1, 03, 00, 00, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ValidateRect + 24 77D2FBB9 7 Bytes [ 04, 00, 00, 0F, 85, 0B, CA ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ValidateRect + 2C 77D2FBC1 24 Bytes CALL 77D2FA86 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawEdge + C 77D2FBDA 25 Bytes [ 5F, 5E, 33, C0, 5B, 5D, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawEdge + 26 77D2FBF4 15 Bytes JMP 77D27CB4 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawEdge + 36 77D2FC04 53 Bytes CALL 039B270B .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawEdge + 6C 77D2FC3A 145 Bytes JMP 77D28DAF C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawEdge + FE 77D2FCCC 40 Bytes [ F6, D8, 1B, C0, 40, C9, C2, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetClassLongA + 10 77D2FE59 12 Bytes [ 1A, 8B, 0E, 0F, B6, 49, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetClassLongA + 1D 77D2FE66 46 Bytes [ 51, 57, 57, 68, B1, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetClassLongA + 4C 77D2FE95 5 Bytes [ 58, 8B, FF, FF, 6A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetClassLongA + 52 77D2FE9B 19 Bytes CALL 77D2FEB5 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetClassLongA + 66 77D2FEAF 72 Bytes [ FF, FF, 90, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MapVirtualKeyA + 36 77D2FEF8 11 Bytes CALL 77D0C8F0 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MapVirtualKeyA + 42 77D2FF04 16 Bytes CALL 77D0DAED .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollWindow + 4 77D2FF15 5 Bytes [ 46, 3C, 8B, 80, A4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollWindow + B 77D2FF1C 16 Bytes [ 00, 85, C0, 0F, 84, D4, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollWindow + 1C 77D2FF2D 104 Bytes [ FF, 83, A0, 80, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollWindow + 85 77D2FF96 20 Bytes [ 33, FF, 3C, 02, 0F, 84, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollWindow + 9A 77D2FFAB 46 Bytes [ 46, 38, 3B, C7, 74, 1E, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetPropA + 2 77D2FFDA 9 Bytes [ FF, 5F, 5E, 5D, C2, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetPropA + C 77D2FFE4 22 Bytes [ D7, 77, 8B, B8, 50, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetPropA + 23 77D2FFFB 45 Bytes [ 50, 56, FF, 15, AC, 11, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetPropA + F 77D30029 61 Bytes [ 83, 7B, 30, 00, 0F, 85, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetPropA + 4D 77D30067 217 Bytes [ FF, 8B, 45, 08, 39, 45, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OemToCharBuffA + 53 77D30141 85 Bytes [ 55, 8B, EC, 51, 51, 53, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollWindowEx + 38 77D30197 66 Bytes [ C0, 0F, 8C, 02, C4, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollWindowEx + 7B 77D301DA 25 Bytes [ 5E, 5F, 5B, C9, C2, 14, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollWindowEx + 95 77D301F4 43 Bytes CALL 77D3013E C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollWindowEx + C1 77D30220 39 Bytes JMP 77D29024 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CloseClipboard + B 77D30248 28 Bytes [ 0F, 85, 4B, 99, FF, FF, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenClipboard + 16 77D30265 14 Bytes CALL 77D2FA87 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenClipboard + 25 77D30274 113 Bytes JMP 77D2FBC9 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowWord + 2 77D302E6 18 Bytes CALL 77D0FBF1 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowWord + 15 77D302F9 22 Bytes [ 8B, 5D, E0, 39, 7D, 0C, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowWord + 2C 77D30310 40 Bytes [ 00, 57, 57, 50, 68, 86, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowWord + 55 77D30339 30 Bytes CALL 77D0FBF0 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowWord + 74 77D30358 35 Bytes [ 17, 81, D4, 77, 90, 90, 90, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!BringWindowToTop + 1A 77D3039A 8 Bytes [ 00, 66, 83, 3A, 00, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowPlacement + 5 77D303A4 37 Bytes [ 00, 84, E4, 0F, 89, 81, 92, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowWord + 17 77D303CA 27 Bytes [ 39, 5D, 10, 89, 4D, 08, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowWord + 33 77D303E6 75 Bytes [ 00, 8B, 5E, 20, 8B, 46, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowWord + 7F 77D30432 188 Bytes [ 83, C8, FF, EB, F6, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeClipboardChain + 90 77D304EF 122 Bytes [ 15, 2C, 13, D1, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeClipboardChain + 10B 77D3056A 110 Bytes CALL 76D3056F .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeClipboardChain + 17A 77D305D9 4 Bytes [ 0F, 84, 1B, 7F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeClipboardChain + 17F 77D305DE 31 Bytes JMP 77D295DB C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeClipboardChain + 19F 77D305FE 32 Bytes [ FF, 66, 8B, 45, 08, 66, 39, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefFrameProcW + 14 77D3081F 6 Bytes [ 80, 4D, 09, 01, E9, C7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefFrameProcW + 1B 77D30826 48 Bytes [ 00, 00, 83, F9, 02, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefFrameProcW + 4C 77D30857 37 Bytes [ FF, 8B, 47, 04, 23, C1, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefFrameProcW + 72 77D3087D 14 Bytes JMP 77D2F6D7 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefFrameProcW + 81 77D3088C 4 Bytes [ 74, A8, 81, F9 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefMDIChildProcW + C 77D30A2B 1 Byte [ 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefMDIChildProcW + 11 77D30A30 42 Bytes [ D6, FF, 75, 10, FF, 75, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefMDIChildProcW + 3D 77D30A5C 13 Bytes [ 81, CB, 20, 00, CC, 00, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefMDIChildProcW + 4B 77D30A6A 56 Bytes [ 0C, FF, 76, 08, FF, 75, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefMDIChildProcW + 84 77D30AA3 11 Bytes CALL A5127ED7 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetAltTabInfoW + 13 77D30CF4 71 Bytes [ 89, 5F, 0C, 89, 5F, 10, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetAltTabInfoW + 5B 77D30D3C 15 Bytes CALL 77D11C16 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetAltTabInfoW + 6B 77D30D4C 29 Bytes [ 00, 8B, 45, EC, 5F, 5E, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetAltTabInfoW + 89 77D30D6A 45 Bytes [ 8B, FF, 55, 8B, EC, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClipboardData + 6 77D30D98 120 Bytes [ F8, 2D, 77, 0E, 0F, B6, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClipboardData + 7F 77D30E11 196 Bytes [ FF, 75, 14, FF, 75, 10, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClipboardData + 144 77D30ED6 100 Bytes JMP 77D11FEB C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClipboardData + 1A9 77D30F3B 15 Bytes [ FE, FF, 8B, F0, F7, DE, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClipboardData + 1B9 77D30F4B 30 Bytes [ 85, C0, 5B, 0F, 84, 43, 93, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetClipboardData + 5 77D30F7B 51 Bytes [ 56, 57, 8B, 7D, 08, 8B, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetClipboardData + 3A 77D30FB0 196 Bytes [ 5F, 5E, 5D, C2, 10, 00, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetClipboardData + FF 77D31075 15 Bytes [ 00, 89, 45, FC, 89, 45, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetClipboardData + 110 77D31086 156 Bytes [ 00, EB, ED, 33, C0, E9, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AdjustWindowRect + B 77D31123 15 Bytes JMP 77D1B083 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AdjustWindowRect + 1B 77D31133 54 Bytes [ 55, 8B, EC, 83, EC, 30, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetCaretBlinkTime + 1E 77D3116A 85 Bytes [ 16, 89, 55, E4, 8B, 53, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyboardType + F 77D311C2 40 Bytes [ 03, 8D, 4D, D0, 51, 8A, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookExA + 2 77D311EB 14 Bytes [ FF, 83, 65, FC, 00, EB, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookExA + 11 77D311FA 6 Bytes [ 90, 90, 90, 90, 90, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookExA + 18 77D31201 4 Bytes [ 55, 8B, EC, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookExA + 1D 77D31206 18 Bytes [ 75, 08, 8B, 46, 4C, F6, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookExA + 30 77D31219 3 Bytes [ 85, A7, F9 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClipboardFormatNameA + F 77D31277 21 Bytes CALL 77D32B62 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClipboardFormatNameA + 26 77D3128E 21 Bytes CALL 77D2A775 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClipboardFormatNameA + 3C 77D312A4 26 Bytes JMP 79B495B5 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClipboardFormatNameA + 57 77D312BF 43 Bytes CALL 77D1ACC0 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetUserObjectInformationA + 13 77D312EB 24 Bytes [ 3D, AC, 11, D1, 77, 8B, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetUserObjectInformationA + 2C 77D31304 84 Bytes [ 76, 78, FF, D7, A1, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsMenu + 1A 77D3135A 18 Bytes [ 7D, FC, C1, E7, 0C, 33, 7E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsMenu + 2D 77D3136D 56 Bytes [ 0B, 18, 00, 00, 8B, 46, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsMenu + 66 77D313A6 44 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsMenu + 93 77D313D3 99 Bytes [ 55, 8B, EC, 56, 8B, 75, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadKeyboardLayoutW + 2 77D31437 5 Bytes [ 75, F0, FF, 76, 78 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadKeyboardLayoutW + 8 77D3143D 5 Bytes [ 15, C4, 11, D1, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadKeyboardLayoutW + F 77D31444 61 Bytes [ 6A, 00, FF, 76, 6C, FF, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyboardLayoutNameW + 30 77D31482 1 Byte [ 5D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyboardLayoutNameW + 32 77D31484 1 Byte [ 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenu 77D3148B 110 Bytes [ B8, 38, 00, D7, 77, EB, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PaintMenuBar + B 77D314FA 71 Bytes [ 89, 7D, 08, 74, 61, 6A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadAcceleratorsA + 1E 77D31542 72 Bytes [ 75, FC, 52, FF, 15, 3C, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetLastActivePopup + 40 77D3158B 180 Bytes [ 00, 00, F7, 45, 28, EF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharToOemBuffA + 49 77D31640 67 Bytes [ D7, 77, 57, FF, 35, D8, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetOpenClipboardWindow + 22 77D31684 92 Bytes [ 00, 8B, 45, 14, A8, 18, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateSystemThreads + 28 77D316E1 18 Bytes [ 8B, 15, 80, 00, D7, 77, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateSystemThreads + 3B 77D316F4 114 Bytes [ B2, 58, 08, 00, 00, 8B, 92, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateSystemThreads + AE 77D31767 168 Bytes [ D6, 6A, 01, 68, 38, 1A, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWinEventHook + 48 77D31810 57 Bytes [ 55, 8B, EC, 81, EC, 0C, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWinEventHook + 82 77D3184A 2 Bytes [ F4, FD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWinEventHook + 86 77D3184E 10 Bytes [ 50, FF, 15, F0, 11, D1, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWinEventHook + 91 77D31859 54 Bytes [ 0F, 84, 6C, 08, 01, 00, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnhookWinEvent + 13 77D31890 53 Bytes [ 68, 18, 20, D1, 77, 57, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnhookWinEvent + 49 77D318C6 59 Bytes [ 03, D7, 77, 0F, 84, 4F, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnhookWinEvent + 85 77D31902 60 Bytes [ C0, A3, 0C, 03, D7, 77, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnhookWinEvent + C2 77D3193F 43 Bytes [ D6, 85, C0, A3, 18, 03, D7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnhookWinEvent + EF 77D3196C 196 Bytes [ A3, 20, 03, D7, 77, 0F, 84, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CheckMenuItem + 2E 77D31ABC 73 Bytes [ A3, 60, 03, D7, 77, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AppendMenuA + 27 77D31B06 62 Bytes [ 68, E4, 1D, D1, 77, 57, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AppendMenuA + 66 77D31B45 6 Bytes [ 68, A0, 1D, D1, 77, 57 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AppendMenuA + 6D 77D31B4C 55 Bytes [ D6, 85, C0, A3, 7C, 03, D7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AppendMenuA + A5 77D31B84 132 Bytes [ 68, 58, 1D, D1, 77, 57, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AppendMenuA + 12A 77D31C09 34 Bytes [ D6, 85, C0, A3, A0, 03, D7, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AttachThreadInput + 7 77D31E2A 64 Bytes [ 00, 83, FF, 04, 0F, 82, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AttachThreadInput + 48 77D31E6B 81 Bytes JMP 77D32AFD C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AttachThreadInput + 9A 77D31EBD 11 Bytes [ FF, FF, 80, 38, FF, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AttachThreadInput + A6 77D31EC9 57 Bytes [ 83, 4D, B8, FF, 8A, 48, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AttachThreadInput + E0 77D31F03 11 Bytes [ B4, 0F, 84, 48, 8E, FE, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBeep + 22 77D31F6E 1 Byte [ C3 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBeep + 25 77D31F71 28 Bytes [ 77, B5, 00, 00, 6A, 01, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBeep + 42 77D31F8E 80 Bytes [ 3B, C3, 75, E3, EB, EC, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBeep + 93 77D31FDF 7 Bytes [ 45, 0C, 89, 07, E9, DD, 8F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBeep + 9B 77D31FE7 54 Bytes [ FF, 8B, 4E, 18, 8D, 79, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DialogBoxIndirectParamW + 7 77D3204A 23 Bytes [ 69, 00, 73, 00, 74, 00, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DialogBoxIndirectParamW + 1F 77D32062 5 Bytes [ 20, 00, 52, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DialogBoxIndirectParamW + 25 77D32068 23 Bytes [ 70, 00, 6C, 00, 69, 00, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DialogBoxIndirectParamW + 3D 77D32080 13 Bytes [ 74, 00, 75, 00, 61, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DialogBoxIndirectParamW + 4B 77D3208E 17 Bytes [ 65, 00, 72, 00, 75, 00, 6E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FindWindowExA + 7 77D32122 49 Bytes [ 66, 00, 6F, 00, 72, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextA + 18 77D32154 9 Bytes [ 65, 00, 73, 00, 20, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextA + 22 77D3215E 25 Bytes [ 6D, 00, E4, 00, 6E, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextA + 3C 77D32178 14 Bytes [ 66, 00, 65, 00, 6E, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextA + 4B 77D32187 6 Bytes [ 00, 65, 00, 72, 00, 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextA + 52 77D3218E 17 Bytes [ 63, 00, 68, 00, 69, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenWindowStationA + 2B 77D321DC 19 Bytes [ 67, 00, 65, 00, 66, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenWindowStationA + 3F 77D321F0 43 Bytes [ 20, 00, 44, 00, 6F, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenWindowStationA + 6B 77D3221C 9 Bytes [ 65, 00, 6C, 00, F6, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenWindowStationA + 75 77D32226 27 Bytes [ 68, 00, 74, 00, 20, 00, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenWindowStationA + 91 77D32242 19 Bytes [ 0A, 00, 44, 00, 6F, 00, 6D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumWindowStationsA + 18 77D32316 29 Bytes [ 6C, 00, 6F, 00, 67, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumDesktopsA + 19 77D32334 113 Bytes [ 66, 00, FC, 00, 68, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenDesktopA + 6D 77D323A6 5 Bytes [ 20, 00, 61, 00, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenDesktopA + 73 77D323AC 51 Bytes [ 64, 00, 65, 00, 72, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenDesktopA + A7 77D323E0 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenDesktopA + A9 77D323E2 21 Bytes [ 72, 00, 20, 00, 67, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenDesktopA + BF 77D323F8 39 Bytes [ 44, 00, 6F, 00, 6D, 00, E4, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawFrame + 13 77D329AE 29 Bytes [ 6F, 00, 6D, 00, E4, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawFrame + 31 77D329CC 51 Bytes [ 74, 00, 72, 00, 65, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawFrame + 65 77D32A00 1 Byte [ 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawFrame + 67 77D32A02 5 Bytes [ 20, 00, 64, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawFrame + 6D 77D32A08 11 Bytes [ 72, 00, 20, 00, 43, 00, 6F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EditWndProc + 17 77D32FEE 1 Byte [ 67 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EditWndProc + 19 77D32FF0 9 Bytes [ 65, 00, 72, 00, 73, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EditWndProc + 23 77D32FFA 63 Bytes [ 73, 00, 74, 00, 20, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EditWndProc + 63 77D3303A 206 Bytes [ 00, 00, A9, 00, 00, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EditWndProc + 132 77D33109 15 Bytes [ D7, 77, 76, 05, 2B, 48, 10, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WINNLSGetIMEHotkey + 7E 77D337DA 36 Bytes [ 53, 8B, 99, A8, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WINNLSGetIMEHotkey + A3 77D337FF 37 Bytes [ 8B, C8, 89, 4D, F8, 89, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WINNLSGetIMEHotkey + C9 77D33825 15 Bytes [ 43, 10, 89, 45, 0C, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WINNLSGetIMEHotkey + D9 77D33835 12 Bytes [ 89, 43, 0C, 0F, 85, 8D, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WINNLSGetIMEHotkey + E6 77D33842 41 Bytes [ 75, FC, FF, 75, 10, E8, 16, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharUpperA + 104 77D37159 114 Bytes JMP 77D25DAD C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharUpperA + 177 77D371CC 50 Bytes [ 15, B4, 11, D1, 77, 0F, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharUpperA + 1AA 77D371FF 48 Bytes [ 0F, B7, 46, 06, 89, 85, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharUpperA + 1DB 77D37230 77 Bytes [ 89, 9D, D0, FB, FF, FF, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharUpperA + 229 77D3727E 4 Bytes [ 89, 85, E4, FB ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LockWindowUpdate + 1B 77D39629 27 Bytes JMP 77D15C3A C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LockWindowUpdate + 37 77D39645 6 Bytes [ 8D, 78, FF, E9, 73, 6D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LockWindowUpdate + 3E 77D3964C 67 Bytes [ FF, 83, 7D, 18, 00, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LockWindowUpdate + 82 77D39690 64 Bytes [ 48, 78, 89, 4D, E4, 8B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LockWindowUpdate + C3 77D396D1 87 Bytes [ FF, 48, F7, D8, 1B, C0, 83, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogIndirectParamA + 3D 77D39B3D 35 Bytes [ 8B, F0, 85, F6, 0F, 84, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogIndirectParamA + 61 77D39B61 89 Bytes [ 8B, F0, 85, F6, 8B, DF, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogIndirectParamA + BB 77D39BBB 27 Bytes JMP 77D18480 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogIndirectParamA + D7 77D39BD7 94 Bytes [ 0F, B7, 43, 2A, BA, FF, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogIndirectParamA + 136 77D39C36 105 Bytes [ 50, 8B, 45, F4, 2B, 45, EC, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxIndirectA + 40 77D3A09A 107 Bytes CALL 77D0D062 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxIndirectA + AC 77D3A106 5 Bytes [ 75, A8, 50, 50, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxIndirectA + B2 77D3A10C 63 Bytes CALL 77D10439 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxIndirectA + F2 77D3A14C 39 Bytes [ 68, 02, 0A, 00, 00, 56, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxIndirectA + 11B 77D3A175 48 Bytes [ 4E, 0C, FE, FF, 8B, 46, 34, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SoftModalMessageBox + 39 77D3A2F0 77 Bytes JMP 77D26EE8 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SoftModalMessageBox + 87 77D3A33E 37 Bytes [ 15, AC, 14, D1, 77, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SoftModalMessageBox + AD 77D3A364 20 Bytes [ 75, 06, 8B, 45, E0, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SoftModalMessageBox + C2 77D3A379 91 Bytes JMP 77D26EDF C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SoftModalMessageBox + 11E 77D3A3D5 29 Bytes [ 4D, 24, 8B, 0D, C8, 04, D7, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DialogBoxParamA + 1D 77D3B139 53 Bytes [ 0F, AF, 7D, 08, 23, C1, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DialogBoxParamA + 53 77D3B16F 43 Bytes [ 8B, 89, CC, 08, 00, 00, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DialogBoxParamA + 7F 77D3B19B 23 Bytes [ 09, 8D, 55, E0, 52, 50, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DialogBoxParamA + 97 77D3B1B3 6 Bytes [ 41, 89, 4E, 0C, E9, 40 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DialogBoxParamA + 9E 77D3B1BA 23 Bytes CALL 77D2A27B C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharLowerA + 1E 77D3B87F 55 Bytes [ 00, 0F, B7, C0, 89, 06, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharLowerA + 56 77D3B8B7 26 Bytes [ 34, 07, 00, 00, 33, C9, 8A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharLowerA + 71 77D3B8D2 7 Bytes [ 00, 33, C0, 40, E9, F5, 51 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharLowerA + 7A 77D3B8DB 53 Bytes [ 8B, 45, 08, 8B, 48, 4C, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharLowerA + B1 77D3B912 28 Bytes [ 8B, 45, 10, 85, C0, 0F, 8C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendDlgItemMessageA + 44 77D3C303 84 Bytes [ 8B, 03, 0F, B6, 40, 16, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendDlgItemMessageA + 99 77D3C358 51 Bytes [ 08, 00, 00, 8D, 45, A4, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendDlgItemMessageA + CD 77D3C38C 8 Bytes [ FF, FF, A1, 80, 00, D7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendDlgItemMessageA + D6 77D3C395 21 Bytes [ E4, 07, 00, 00, 89, 45, CC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendDlgItemMessageA + ED 77D3C3AC 61 Bytes [ FF, 75, CC, 57, FF, 15, B0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsDialogMessage + 19 77D3C67A 172 Bytes CALL 77D4B136 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawTextExA + 16 77D3C727 60 Bytes JMP 77D2FEDC C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawTextExA + 53 77D3C764 6 Bytes [ 85, C0, 0F, 84, 16, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawTextExA + 5A 77D3C76B 30 Bytes [ FF, 8B, 46, 04, 6A, 01, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawTextExA + 79 77D3C78A 9 Bytes CALL 77D12719 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawTextExA + 83 77D3C794 4 Bytes JMP 77D2B557 C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogParamA + 4 77D3C7B7 182 Bytes [ D8, 8B, 47, 08, 99, F7, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogParamA + BB 77D3C86E 70 Bytes [ 0F, 85, B1, EC, FE, FF, A9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogParamA + 102 77D3C8B5 75 Bytes [ 35, 24, 02, D7, 77, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogParamA + 14E 77D3C901 25 Bytes CALL 77D2B473 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogParamA + 16A 77D3C91D 53 Bytes [ 39, 9D, F8, FD, FF, FF, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetDlgItemTextA + 9 77D3C953 18 Bytes [ 85, C0, 0F, 84, A2, B2, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetDlgItemTextA + 1C 77D3C966 44 Bytes [ 75, 10, FF, 75, 0C, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetDlgItemTextA + 4A 77D3C994 108 Bytes [ 00, 48, 48, 0F, 84, 98, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetDlgItemTextA + B7 77D3CA01 95 Bytes [ 48, 24, 8B, 75, F8, 85, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetDlgItemTextA + 117 77D3CA61 3 Bytes [ 84, ED, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawIcon + 17 77D3D05B 99 Bytes [ FF, 50, 57, FF, 15, 70, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawIcon + 7B 77D3D0BF 95 Bytes CALL 77D10267 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawIcon + DB 77D3D11F 82 Bytes JMP 77D2E997 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawIcon + 12E 77D3D172 103 Bytes [ 2B, B5, 98, FD, FF, FF, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawIcon + 196 77D3D1DA 16 Bytes [ FF, 0F, 8D, 4E, 19, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!User32InitializeImmEntryTable + 33 77D3D3A0 30 Bytes [ 04, 0F, 83, F2, 11, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!User32InitializeImmEntryTable + 52 77D3D3BF 48 Bytes [ 74, 04, 6A, 57, EB, 26, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!User32InitializeImmEntryTable + 83 77D3D3F0 30 Bytes JMP 77D2E6C1 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!User32InitializeImmEntryTable + A2 77D3D40F 19 Bytes [ 24, FF, 35, 64, 02, D7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!User32InitializeImmEntryTable + B6 77D3D423 19 Bytes [ 74, 09, 8D, 85, FC, FE, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VkKeyScanW + A 77D3E1D8 2 Bytes [ 6A, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VkKeyScanW + D 77D3E1DB 14 Bytes [ 98, 40, 02, 00, 84, C0, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VkKeyScanW + 1C 77D3E1EA 19 Bytes [ D7, 77, F6, 40, 02, 08, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VkKeyScanW + 30 77D3E1FE 6 Bytes [ FF, 50, 68, F4, 08, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VkKeyScanW + 37 77D3E205 99 Bytes [ 8D, 85, A0, EC, FF, FF, 50, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VkKeyScanA + A 77D3E4A2 5 Bytes [ FF, 50, 6A, 02, 8D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VkKeyScanA + 10 77D3E4A8 38 Bytes [ 50, FC, FF, FF, 50, FF, B5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VkKeyScanA + 37 77D3E4CF 28 Bytes [ FF, 89, 85, 5C, FC, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VkKeyScanA + 54 77D3E4EC 35 Bytes [ 3D, D8, 02, FE, 7F, 39, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VkKeyScanA + 78 77D3E510 68 Bytes [ 03, 00, 00, 66, 83, F8, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefDlgProcA + 6 77D3E555 19 Bytes [ 85, 44, FC, FF, FF, F6, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefDlgProcA + 1A 77D3E569 20 Bytes [ FF, 44, 22, D1, 77, E9, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefDlgProcA + 2F 77D3E57E 21 Bytes [ 8B, 06, 83, F8, 08, 73, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefDlgProcA + 45 77D3E594 23 Bytes [ 8D, BE, 88, 02, 00, 00, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefDlgProcA + 5D 77D3E5AC 3 Bytes [ 6A, 00, 53 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharAlphaA + 38 77D3E5F5 9 Bytes [ B5, C0, FB, FF, FF, 8D, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharAlphaA + 43 77D3E600 35 Bytes [ 50, FF, 15, D8, 14, D1, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharAlphaA + 67 77D3E624 12 Bytes [ 40, 30, 8B, 0D, D8, 02, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharAlphaA + 74 77D3E631 35 Bytes [ 00, 74, 16, 8D, 85, B0, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharAlphaA + 98 77D3E655 12 Bytes [ 53, 8D, 85, F4, FD, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawFrameControl + 38 77D3E94F 102 Bytes [ 15, D8, 14, D1, 77, 8B, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawFrameControl + 9F 77D3E9B6 3 Bytes [ 9C, 39, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawFrameControl + A3 77D3E9BA 72 Bytes [ 8B, 06, 3B, C3, 0F, 84, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawFrameControl + EC 77D3EA03 9 Bytes [ 45, F8, 8B, 08, 89, 4D, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawFrameControl + F7 77D3EA0E 105 Bytes JMP 77D0E2FE .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoA + 10 77D3EBE7 19 Bytes [ 56, FF, D3, 83, C4, 14, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoA + 24 77D3EBFB 13 Bytes [ 50, FF, 15, 10, 00, D7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoA + 32 77D3EC09 51 Bytes CALL 77D60E98 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoA + 66 77D3EC3D 17 Bytes [ 40, 00, 00, 89, 45, C8, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassInfoA + 78 77D3EC4F 56 Bytes CALL 77D14FBB C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookA + 8 77D3ED49 9 Bytes [ 15, 44, 13, D1, 77, E9, BB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookA + 12 77D3ED53 17 Bytes [ 33, F6, 46, 89, 75, E0, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookA + 24 77D3ED65 17 Bytes [ 89, 5D, D8, 8D, 45, D8, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookA + 36 77D3ED77 2 Bytes [ 75, 14 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowsHookA + 39 77D3ED7A 16 Bytes CALL FD4BC480 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WinHelpA + 4A 77D3EE7F 5 Bytes [ 33, C0, 39, 05, 88 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WinHelpA + 50 77D3EE85 58 Bytes [ D7, 77, 75, 12, 89, 7D, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WinHelpA + 8B 77D3EEC0 1 Byte [ D3 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WinHelpA + 8D 77D3EEC2 46 Bytes [ 0D, 30, 02, D7, 77, A1, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WinHelpA + BC 77D3EEF1 13 Bytes [ 08, 89, 7D, FC, 56, FF, 15, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogIndirectParamW + 14 77D3F00B 24 Bytes JMP 77D1FF85 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogIndirectParamW + 2D 77D3F024 12 Bytes CALL 614BC141 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogIndirectParamW + 3A 77D3F031 21 Bytes [ 66, 3D, 01, 02, 0F, 85, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogIndirectParamW + 50 77D3F047 54 Bytes [ FF, 75, 10, 6A, 03, 56, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDialogIndirectParamW + 87 77D3F07E 50 Bytes [ 8B, 46, 34, 3B, 05, 90, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateMDIWindowW + 7 77D3F7EF 50 Bytes [ 27, 8B, 46, 34, 3B, 05, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateMDIWindowW + 3A 77D3F822 18 Bytes [ 75, 14, FF, 75, 10, 68, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateMDIWindowW + 4D 77D3F835 31 Bytes [ 75, 10, 68, 01, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateMDIWindowW + 6D 77D3F855 19 Bytes CALL 77D10FA4 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateMDIWindowW + 81 77D3F869 12 Bytes [ FF, 64, A1, 18, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSystemMenu + F 77D3F9CA 161 Bytes JMP 77D2C374 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSystemMenu + B2 77D3FA6D 5 Bytes [ FF, B0, D4, 05, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSystemMenu + B8 77D3FA73 40 Bytes CALL 77D10319 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSystemMenu + E1 77D3FA9C 14 Bytes [ 57, B9, 00, 00, 00, C0, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSystemMenu + F0 77D3FAAB 24 Bytes [ CA, 47, FD, FF, 8B, C8, C1, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowContextHelpId + 3D 77D3FDEE 57 Bytes [ 75, FC, FF, 75, F8, 56, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowContextHelpId + 77 77D3FE28 31 Bytes [ 15, D0, 10, D1, 77, 8A, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowContextHelpId + 97 77D3FE48 4 Bytes [ 84, BD, C0, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetWindowContextHelpId + 9C 77D3FE4D 36 Bytes [ 80, FB, 7F, 76, 18, 80, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DestroyAcceleratorTable + E 77D3FE73 65 Bytes JMP 77D2BF55 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DestroyAcceleratorTable + 51 77D3FEB6 52 Bytes [ 00, 88, 54, 01, FF, 8A, 54, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DestroyAcceleratorTable + 86 77D3FEEB 57 Bytes [ FF, 8B, 7D, 0C, 4E, 33, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DestroyAcceleratorTable + C0 77D3FF25 20 Bytes [ 8B, C8, 2B, CE, F6, C1, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DestroyAcceleratorTable + D5 77D3FF3A 39 Bytes JMP 77D29251 C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DeregisterShellHookWindow + 4 77D4029C 26 Bytes [ 7D, 90, 8B, D1, 33, C0, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DeregisterShellHookWindow + 1F 77D402B7 14 Bytes [ 50, 8B, 45, 84, 83, C0, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DeregisterShellHookWindow + 2E 77D402C6 3 Bytes [ FF, 75, 98 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DeregisterShellHookWindow + 32 77D402CA 6 Bytes [ 15, F8, 13, D1, 77, 85 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DeregisterShellHookWindow + 39 77D402D1 14 Bytes [ 7C, 24, 56, FF, 75, 90, 8D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawStateA + 16 77D4EE16 29 Bytes [ E0, C7, 45, F0, 00, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawStateA + 34 77D4EE34 116 Bytes [ 4D, F0, 83, 45, E0, 02, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextLengthA + 1E 77D4EEA9 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowTextLengthA + 20 77D4EEAB 90 Bytes [ 8B, D0, 66, 83, 3A, 2E, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuItemID + 3E 77D4EF06 14 Bytes [ 66, 83, F8, 64, 0F, 84, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ModifyMenuA + A 77D4EF15 28 Bytes [ 00, 0F, B7, C8, 33, D2, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ModifyMenuA + 27 77D4EF32 7 Bytes [ 00, 3B, CA, 0F, 84, 0A, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ModifyMenuA + 2F 77D4EF3A 223 Bytes [ FF, 83, F9, 43, 0F, 84, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeMenuA + 82 77D4F01A 31 Bytes CALL 77D4F05E C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawCaptionTempW + 1 77D4F03A 6 Bytes [ 45, 08, 33, C9, 66, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawCaptionTempW + 8 77D4F041 18 Bytes [ 66, 83, FA, 30, 72, 0A, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawCaptionTempW + 1B 77D4F054 172 Bytes [ 89, 0A, 5D, C2, 08, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetMenu + B 77D4F101 34 Bytes [ 03, CE, EB, D0, 89, 55, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetMenu + 2E 77D4F124 29 Bytes [ E0, 39, 45, F8, 0F, 8F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetMenu + 4C 77D4F142 47 Bytes JMP 77D4EF0D C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharAlphaNumericA + 9 77D4F172 59 Bytes [ 7D, D4, 30, 0F, 85, 53, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharAlphaNumericA + 45 77D4F1AE 23 Bytes [ 66, 83, 7D, DC, 00, 0F, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharAlphaNumericA + 5D 77D4F1C6 47 Bytes [ FF, FF, 90, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharAlphaNumericA + 8D 77D4F1F6 15 Bytes [ 85, FF, 0F, 8C, 60, 72, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharAlphaNumericA + 9D 77D4F206 202 Bytes [ 00, 0F, 8C, 5B, 72, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawMenuBar 77D4F39C 3 Bytes [ 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawMenuBar + 4 77D4F3A0 38 Bytes [ FF, 55, 8B, EC, 8B, 45, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyNameTextA + 13 77D4F3C7 37 Bytes [ B0, F6, FF, FF, 83, F9, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyNameTextA + 39 77D4F3ED 4 Bytes JMP 77D4ED12 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyNameTextA + 3E 77D4F3F2 44 Bytes [ 33, F6, 46, 43, 89, 5D, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InsertMenuItemA + F 77D4F41F 56 Bytes [ FF, 0F, 84, A6, F5, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InsertMenuItemA + 48 77D4F458 52 Bytes [ 00, 83, 3E, 0C, 0F, 85, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InsertMenuItemA + 7D 77D4F48D 3 Bytes JMP FE5903FB .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InsertMenuItemA + 81 77D4F491 144 Bytes [ 84, 86, FC, FF, FF, 83, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InsertMenuItemA + 113 77D4F523 31 Bytes [ C4, 6A, 00, FF, 35, 24, 02, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefFrameProcA + 1 77D4F666 35 Bytes JMP 82E1806E .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefFrameProcA + 25 77D4F68A 107 Bytes [ CF, 83, E1, 07, 40, D3, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefMDIChildProcA + 42 77D4F6F6 61 Bytes [ 86, 80, 00, 00, 00, 3B, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefMDIChildProcA + 80 77D4F734 9 Bytes [ 8B, CA, 8B, D9, C1, E9, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefMDIChildProcA + 8A 77D4F73E 45 Bytes [ CB, 83, E1, 03, F3, A4, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefMDIChildProcA + B8 77D4F76C 17 Bytes [ FF, 83, 3D, 8C, 00, D7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefMDIChildProcA + CA 77D4F77E 11 Bytes CALL 77D4CA36 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadMenuA + 7 77D4F78A 5 Bytes [ 68, CC, 01, D7, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadMenuA + E 77D4F791 12 Bytes CALL 77D4CFB3 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadMenuA + 1C 77D4F79F 13 Bytes [ 10, FF, 75, 0C, FF, 75, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadMenuA + 2A 77D4F7AD 38 Bytes CALL 77D4F7F1 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetMenuItemBitmaps + 22 77D4F7D4 16 Bytes [ 00, 00, 00, 00, C1, B3, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetMenuItemBitmaps + 33 77D4F7E5 2 Bytes [ 74, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetMenuItemBitmaps + 36 77D4F7E8 3 Bytes [ FC, D7, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetMenuItemBitmaps + 3A 77D4F7EC 4 Bytes [ C3, 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetMenuItemBitmaps + 40 77D4F7F2 3 Bytes [ 8B, FF, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WaitForInputIdle + 1 77D4F7F6 22 Bytes CALL 77D4C8EC C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WaitForInputIdle + 18 77D4F80D 71 Bytes [ 75, 14, FF, 75, 10, 51, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WaitForInputIdle + 62 77D4F857 24 Bytes [ 8B, FF, 55, 8B, EC, E8, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WaitForInputIdle + 7C 77D4F871 4 Bytes [ 00, 6A, 00, 51 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WaitForInputIdle + 81 77D4F876 105 Bytes CALL 77D4CAFA C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CopyAcceleratorTableW 77D4F95E 47 Bytes [ 90, 8B, FF, 55, 8B, EC, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InvertRect + 1C 77D4F98E 93 Bytes [ 0F, 8F, 70, 09, 00, 00, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InvertRect + 7A 77D4F9EC 11 Bytes [ 45, 08, 85, C0, 74, 1A, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InvertRect + 86 77D4F9F8 72 Bytes [ 4D, 10, 89, 48, 04, 8B, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InvertRect + CF 77D4FA41 53 Bytes [ 00, BA, 00, 03, FE, 7F, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InvertRect + 108 77D4FA7A 48 Bytes [ 8B, FF, 55, 8B, EC, 8B, 45, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateMDIWindowA + 2 77D4FAC2 23 Bytes [ FF, 5F, 5E, 5D, C2, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateMDIWindowA + 1A 77D4FADA 5 Bytes [ FF, 85, C0, 74, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateMDIWindowA + 22 77D4FAE2 14 Bytes CALL 77D4FA79 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateMDIWindowA + 34 77D4FAF4 73 Bytes [ 8B, FF, 55, 8B, EC, 8B, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateMDIWindowA + 7E 77D4FB3E 49 Bytes [ 70, 40, A5, A5, A5, A5, 5F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ShowStartGlass + 2D 77D4FE2E 51 Bytes [ 85, C0, 0F, 84, E6, 0A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ShowStartGlass + 61 77D4FE62 24 Bytes [ 37, 00, 00, 00, 85, C0, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ShowStartGlass + 7A 77D4FE7B 10 Bytes [ 55, 8B, EC, 8B, 45, 08, A9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ShowStartGlass + 85 77D4FE86 134 Bytes [ 0F, 85, 80, 72, 02, 00, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ShowStartGlass + 10C 77D4FF0D 18 Bytes [ 0F, B7, 75, 0C, 8B, 4D, 08, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OemKeyScan + 22 77D4FF5E 6 Bytes [ 00, 00, E8, 8B, C9, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OemKeyScan + 29 77D4FF65 15 Bytes [ 8B, F0, 85, F6, 0F, 84, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OemKeyScan + 39 77D4FF75 10 Bytes [ 84, 55, 0B, 00, 00, E8, 71, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OemKeyScan + 44 77D4FF80 22 Bytes [ C0, 0F, 84, 25, 47, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OemKeyScan + 5B 77D4FF97 1 Byte [ 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MapVirtualKeyW + 5 77D4FFA3 8 Bytes [ 51, 51, 8B, 45, 08, 53, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MapVirtualKeyW + E 77D4FFAC 5 Bytes [ 10, 57, 33, DB, 33 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MapVirtualKeyW + 14 77D4FFB2 74 Bytes [ 33, C9, 47, 3B, C3, 89, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuCheckMarkDimensions + 4 77D4FFFD 144 Bytes [ 00, 74, 15, F6, 40, 1E, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuCheckMarkDimensions + 95 77D5008E 6 Bytes [ C2, 08, 00, E8, 8C, 06 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuCheckMarkDimensions + 9C 77D50095 180 Bytes [ 00, EB, EB, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuCheckMarkDimensions + 151 77D5014A 57 Bytes [ 25, AC, 14, D1, 77, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuCheckMarkDimensions + 18B 77D50184 115 Bytes [ 7D, 07, 33, C0, 40, 5D, C2, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxA + 13 77D504FD 108 Bytes [ 53, FF, 75, 14, 8B, DF, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxExA + E 77D5056A 17 Bytes [ FF, FF, 0F, 99, D4, 77, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxExA + 21 77D5057D 3 Bytes [ 8B, FF, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxExA + 25 77D50581 64 Bytes [ EC, 8B, 45, 0C, 85, C0, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxExA + 66 77D505C2 307 Bytes [ 33, C0, 40, 5D, C2, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxExA + 19A 77D506F6 18 Bytes JMP 77D4D0BD C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateAcceleratorTableA + 1C 77D531C0 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateAcceleratorTableA + 1E 77D531C2 153 Bytes CALL 77D528FA C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateAcceleratorTableA + B8 77D5325C 19 Bytes [ 8B, 4D, 0C, 83, F9, 24, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateAcceleratorTableA + CC 77D53270 27 Bytes [ 00, 83, F9, 0D, 0F, 84, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateAcceleratorTableA + E8 77D5328C 46 Bytes [ 83, F9, 20, 0F, 86, 88, 05, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyboardLayoutNameA + 2E 77D53367 12 Bytes [ 00, 8B, 46, 48, 2B, 46, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyboardLayoutNameA + 3B 77D53374 109 Bytes [ 00, 48, 83, F9, 21, 75, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyboardLayoutNameA + A9 77D533E2 26 Bytes [ FB, 01, 0F, 84, 33, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKeyboardLayoutNameA + C4 77D533FD 70 Bytes [ 04, 00, 00, FF, 76, 50, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetTaskmanWindow + 30 77D53445 244 Bytes JMP 77D533A7 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UserRegisterWowHandlers + EA 77D5353A 289 Bytes [ 46, 14, 3B, 46, 18, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendNotifyMessageA + D 77D5365D 8 Bytes [ 8B, 07, 89, 45, FC, E9, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendNotifyMessageA + 16 77D53666 74 Bytes [ 00, 8B, 4E, 18, 3B, 4E, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendNotifyMessageA + 61 77D536B1 142 Bytes [ 75, 08, 89, 45, 10, FF, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendNotifyMessageA + F0 77D53740 22 Bytes CALL 77D51FF1 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendNotifyMessageA + 108 77D53758 65 Bytes [ FF, 83, 7D, F8, 00, 0F, 85, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CliImmSetHotKey + 25 77D53960 128 Bytes [ 15, AC, 14, D1, 77, 59, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadCursorFromFileA + E 77D539E1 11 Bytes [ 3B, FD, FF, 5F, 5E, 8B, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadCursorFromFileA + 1A 77D539ED 65 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadCursorFromFileA + 5C 77D53A2F 48 Bytes [ 46, 24, 85, C0, 0F, 84, D2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadCursorFromFileA + 8D 77D53A60 2 Bytes [ 4E, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadCursorFromFileA + 90 77D53A63 76 Bytes [ D8, 8B, 46, 24, 2B, C8, 51, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeEnableCallback + 1B 77D54EC9 117 Bytes [ 0D, A8, 07, D7, 77, 56, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeEnableCallback + 91 77D54F3F 82 Bytes [ D7, 77, 8D, 04, 49, 8D, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeEnableCallback + E4 77D54F92 122 Bytes [ 0B, FF, 75, 08, FF, 76, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassWord + 16 77D5500E 3 Bytes [ 89, 03, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassWord + 1A 77D55012 10 Bytes [ 83, 7D, FC, 00, 75, 1A, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassWord + 25 77D5501D 189 Bytes [ 4D, 1C, 66, 89, 08, 66, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassWord + E4 77D550DC 20 Bytes CALL 77D54E51 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClassWord + F9 77D550F1 4 Bytes CALL 77D54F66 C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumPropsA + 4 77D55275 21 Bytes [ C8, 83, E1, 03, F3, A4, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumPropsW 77D5528E 8 Bytes CALL 781558FB .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumPropsW + B 77D55299 25 Bytes CALL 77D560F2 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumPropsExA + 8 77D552B3 23 Bytes [ 15, 98, 13, D1, 77, 68, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumPropsExW + 2 77D552CB 5 Bytes [ C2, 10, 00, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumPropsExW + 8 77D552D1 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnumPropsExW + B 77D552D4 250 Bytes [ 66, 0E, D6, 77, 6F, 0E, D6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ToAscii + 16 77D553CF 116 Bytes [ D7, 0F, B7, 4E, 02, 83, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ToAsciiEx + 30 77D55446 15 Bytes [ BC, 56, FF, 15, 90, 11, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ToAsciiEx + 40 77D55456 7 Bytes [ 46, 04, 85, C0, 74, A7, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ToAsciiEx + 48 77D5545E 46 Bytes [ D3, 8B, D8, 85, DB, 74, 9E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ToAsciiEx + 77 77D5548D 77 Bytes [ FF, FF, 90, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SwitchToThisWindow + 27 77D554DB 28 Bytes [ 75, F8, FF, D6, 3B, C7, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SwitchToThisWindow + 44 77D554F8 51 Bytes [ FF, 75, DC, 53, FF, 15, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SwitchToThisWindow + 78 77D5552C 57 Bytes [ 75, 08, 53, FF, D6, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SwitchToThisWindow + B2 77D55566 3 Bytes [ EC, 51, 8D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SwitchToThisWindow + B6 77D5556A 116 Bytes [ FC, 50, 6A, 04, FF, 75, 08, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GrayStringA + 9 77D557A6 45 Bytes [ 34, 83, FA, 03, 74, 2C, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GrayStringW + 7 77D557D4 13 Bytes [ 00, 00, 75, 03, 83, C7, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GrayStringW + 15 77D557E2 16 Bytes [ 06, 81, C9, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GrayStringW + 27 77D557F4 133 Bytes [ 50, 51, 56, 57, FF, 75, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWinStationInfo + 47 77D5587A 34 Bytes [ 33, C0, 40, 5E, 5D, C2, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWinStationInfo + 6A 77D5589D 23 Bytes CALL 77D55829 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWinStationInfo + 82 77D558B5 20 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWinStationInfo + 97 77D558CA 6 Bytes [ 15, C0, 14, D1, 77, 6A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWinStationInfo + 9E 77D558D1 76 Bytes [ 6A, 06, FF, 75, 08, E8, 09, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDesktopA + 69 77D55B38 4 Bytes [ 35, 64, 02, D7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDesktopA + 6E 77D55B3D 25 Bytes CALL 77D15E2A C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDesktopA + 88 77D55B57 13 Bytes [ 30, 68, 02, 01, 00, 00, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDesktopA + 97 77D55B66 31 Bytes [ 8C, 37, 00, 00, 56, 8B, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateDesktopA + B7 77D55B86 32 Bytes [ 55, 8B, EC, 8B, 4D, 08, E8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ArrangeIconicWindows + 2 77D55BE0 41 Bytes [ 85, C0, 0F, 84, 71, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CascadeChildWindows + 15 77D55C0B 44 Bytes [ 00, 3D, 01, 02, 00, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CloseWindow + 21 77D55C38 59 Bytes [ 00, 00, 00, FF, 36, 6A, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FlashWindow + 18 77D55C74 22 Bytes [ 50, 56, 8B, 75, 14, 8D, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FlashWindow + 2F 77D55C8B 5 Bytes [ 8B, 45, FC, 8D, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FlashWindow + 35 77D55C91 28 Bytes [ 8A, 08, 40, 84, C9, 75, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDialogBaseUnits + 14 77D55CAF 83 Bytes [ 00, 8B, 45, FC, 8D, 78, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetInputDesktop + 49 77D55D03 49 Bytes [ 85, C0, 74, 33, 8B, 45, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetInputDesktop + 7B 77D55D35 4 Bytes [ 15, 8C, 13, D1 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetInputDesktop + 80 77D55D3A 5 Bytes [ 39, 7D, FC, 74, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetInputDesktop + 86 77D55D40 32 Bytes [ 75, FC, FF, 15, 8C, 13, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!KillSystemTimer 77D55D64 32 Bytes [ 90, 8B, FF, 55, 8B, EC, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OpenIcon + 6 77D55D85 102 Bytes [ FF, 55, 8B, EC, 81, EC, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetProgmanWindow + 27 77D55DEC 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetProgmanWindow + 29 77D55DEE 25 Bytes [ 13, 8D, 85, FC, FE, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetProgmanWindow + 8 77D55E08 14 Bytes [ 5E, 8B, 4D, FC, 5F, E8, 82, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowContextHelpId 77D55E18 3 Bytes [ 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowContextHelpId + 4 77D55E1C 48 Bytes [ FF, 55, 8B, EC, 83, 7D, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetCursorPos + 2 77D55E4D 43 Bytes [ FF, 00, 53, 8B, 5D, 0C, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetDoubleClickTime + 13 77D55E79 40 Bytes CALL 77D54F65 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SwapMouseButton + 9 77D55EA2 35 Bytes [ 2F, 81, 7D, 18, B0, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TileChildWindows + 15 77D55EC6 20 Bytes [ C7, 85, F8, FD, FF, FF, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadKeyboardLayoutEx + 9 77D55EDB 52 Bytes [ 8D, B5, FC, FD, FF, FF, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadKeyboardLayoutA + 18 77D55F12 14 Bytes [ EB, 0F, 57, 56, 53, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LoadKeyboardLayoutA + 29 77D55F23 71 Bytes [ 68, E0, 04, D7, 77, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnloadKeyboardLayout + 13 77D55F6B 11 Bytes [ 0C, 68, 06, 40, 00, 00, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnloadKeyboardLayout + 1F 77D55F77 69 Bytes CALL 77D1E1EC C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetDebugErrorLevel + 3A 77D55FBD 101 Bytes [ C0, 74, 0D, 68, 06, 40, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetDebugErrorLevel + A0 77D56023 10 Bytes CALL 77D560F1 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetDebugErrorLevel + AB 77D5602E 32 Bytes [ DB, 75, 05, 33, F6, 46, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetDebugErrorLevel + CC 77D5604F 39 Bytes [ 66, 8B, F0, 66, F7, DE, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetDebugErrorLevel + F4 77D56077 59 Bytes [ 75, 07, C7, 45, 18, EC, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AllowForegroundActivation + 7 77D560B3 5 Bytes [ FF, 5D, C2, 14, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DisableProcessWindowsGhosting 77D560B9 59 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateWindowStationA + 2F 77D560F5 134 Bytes [ 55, 8B, EC, 53, 8B, 5D, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuStringW 77D5617C 29 Bytes [ 90, 90, 90, 90, FF, 25, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuStringW + 1E 77D5619A 133 Bytes [ 02, 03, FF, 8B, 45, 10, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputDeviceInfoW + 30 77D56220 52 Bytes [ EC, 8B, 45, 08, 8B, 48, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputDeviceInfoW + 68 77D56258 53 Bytes [ 90, 8B, FF, 55, 8B, EC, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputDeviceInfoW + 9F 77D5628F 25 Bytes CALL 79B5E596 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputDeviceInfoW + B9 77D562A9 28 Bytes [ 4E, 0C, FF, 3B, C3, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputDeviceInfoW + D6 77D562C6 98 Bytes [ 19, 53, 6A, 08, FF, 35, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InitializeLpkHooks + 4B 77D56329 78 Bytes [ E1, 03, F3, AA, 8B, 7D, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InitializeLpkHooks + 9A 77D56378 90 Bytes [ A9, 00, 00, 00, 40, 75, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuInfo + 16 77D563D3 8 Bytes [ EC, 51, 56, 8B, 75, 08, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuInfo + 1F 77D563DC 26 Bytes [ F6, 46, 4C, 30, 89, 7D, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuInfo + 3A 77D563F7 11 Bytes CALL 77D30E67 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuInfo + 46 77D56403 111 Bytes [ 00, 75, 0D, 8B, 45, FC, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuInfo + B6 77D56473 14 Bytes [ 33, C0, 40, 8B, 4D, 0C, 85, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MenuWindowProcA + 1 77D5650C 46 Bytes [ 7E, 08, 6A, 08, 5B, EB, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MenuWindowProcA + 30 77D5653B 20 Bytes [ 48, 89, 01, 8B, 45, FC, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMessageExtraInfo 77D56550 77 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefRawInputProc + 29 77D5659E 53 Bytes CALL 77D2A6B1 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefRawInputProc + 5F 77D565D4 74 Bytes [ 7F, 1D, 3B, 7D, 08, 7F, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefRawInputProc + AA 77D5661F 115 Bytes [ 55, 8B, EC, 8B, 4D, 08, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefRawInputProc + 11E 77D56693 7 Bytes [ 7F, 04, 83, 65, 0C, 00, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DefRawInputProc + 126 77D5669B 28 Bytes [ 0C, 3B, F3, 7F, 46, 77, 36, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CopyAcceleratorTableA + 27 77D56950 9 Bytes [ 45, 0C, 08, 74, 27, BF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CopyAcceleratorTableA + 31 77D5695A 77 Bytes [ 85, C7, 74, 11, 8B, 46, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CopyAcceleratorTableA + 7F 77D569A8 128 Bytes [ 56, 8B, 75, 08, 33, DB, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CopyAcceleratorTableA + 100 77D56A29 141 Bytes [ 77, 85, C0, 74, 55, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CopyAcceleratorTableA + 18E 77D56AB7 19 Bytes [ 00, 00, 75, 19, 68, 02, 02, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateCursor + 49 77D56BF5 147 Bytes [ 59, 02, FF, 76, 10, FF, B6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIcon + 7A 77D56C89 5 Bytes [ 08, 50, FF, 75, 14 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIcon + 81 77D56C90 12 Bytes CALL 77D56429 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIcon + 8E 77D56C9D 55 Bytes [ F4, 74, 05, 39, 73, 74, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LookupIconIdFromDirectory + 4 77D56CD5 67 Bytes [ 43, 4C, 85, C7, 0F, 84, DD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIconFromResource + 2A 77D56D19 22 Bytes CALL 77D2800A C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIconFromResource + 41 77D56D30 187 Bytes [ 45, F4, F7, DE, 1B, F6, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIconFromResource + FD 77D56DEC 38 Bytes CALL 77D0D05F .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIconFromResource + 124 77D56E13 115 Bytes [ 00, 8B, 75, 08, 33, C0, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CreateIconFromResource + 198 77D56E87 61 Bytes [ 45, 10, FF, 75, FC, 80, 4B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirSelectComboBoxExW + 34 77D57132 9 Bytes [ 83, F8, 02, 0F, 87, 81, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirSelectComboBoxExW + 3E 77D5713C 86 Bytes [ 75, 08, 39, 73, 10, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirListComboBoxA + 3F 77D57193 32 Bytes [ 8B, 43, 4C, 24, 30, 3C, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirListComboBoxA + 60 77D571B4 20 Bytes [ BF, 08, 80, 00, 00, 75, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirListComboBoxA + 75 77D571C9 52 Bytes [ 83, 7D, 08, FF, 74, 55, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirListComboBoxW + 1E 77D571FF 101 Bytes CALL 77D2DDF0 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirSelectComboBoxExA + 53 77D57265 29 Bytes [ 43, 04, F6, 40, 1C, 02, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirSelectComboBoxExA + 72 77D57284 35 Bytes [ 10, 68, 02, 02, 00, 00, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirSelectComboBoxExA + 96 77D572A8 3 Bytes [ FF, EB, 11 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirSelectComboBoxExA + 9C 77D572AE 59 Bytes [ FF, 75, 10, 68, 02, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirSelectComboBoxExA + D8 77D572EA 24 Bytes [ 45, FC, 8B, 45, 08, 50, A5, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeQueryNextServer + 19 77D5757D 228 Bytes [ 0F, 84, EF, 00, 00, 00, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeQueryNextServer + FE 77D57662 9 Bytes [ 66, 89, 3E, 46, 46, 83, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeQueryNextServer + 109 77D5766D 18 Bytes [ 00, 74, 02, 4E, 4E, 83, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeQueryNextServer + 11C 77D57680 84 Bytes [ FF, 74, 18, 6A, 00, 68, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeQueryNextServer + 171 77D576D5 29 Bytes [ FF, 50, FF, 75, 18, 56, E8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeConnect + C 77D57D87 15 Bytes [ FE, 74, 79, F6, 45, 0D, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeConnect + 1C 77D57D97 35 Bytes [ 5B, 00, 66, C7, 85, AE, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeConnect + 41 77D57DBC 5 Bytes [ 15, A8, 12, D1, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeConnect + 47 77D57DC2 2 Bytes [ D8, 33 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeConnect + 4A 77D57DC5 15 Bytes [ EB, 36, F6, C3, 01, 74, 2E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeReconnect + A 77D57E2D 21 Bytes CALL 77D2ABCF C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeReconnect + 20 77D57E43 28 Bytes [ 47, 18, 48, EB, 1B, 8B, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeReconnect + 3D 77D57E60 50 Bytes [ 89, 45, FC, 8B, 4D, E4, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeReconnect + 70 77D57E93 24 Bytes [ 00, A1, B8, 01, D7, 77, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeReconnect + 89 77D57EAC 28 Bytes [ 83, CF, FF, FF, 15, B4, 12, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeDisconnect + 29 77D57FA5 58 Bytes [ 00, FF, 35, 24, 02, D7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeDisconnect + 64 77D57FE0 287 Bytes [ 85, C0, 74, 06, 83, 4E, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeConnectList + 6A 77D58100 6 Bytes [ 77, 04, E8, 73, 79, FB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeConnectList + 71 77D58107 47 Bytes [ 83, 7D, 10, 00, 8B, 5D, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeConnectList + A1 77D58137 80 Bytes [ 48, EB, 38, 8B, 4D, 0C, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeConnectList + F2 77D58188 54 Bytes [ 75, 08, 8D, 45, E0, 50, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeConnectList + 129 77D581BF 34 Bytes CALL 77D2B4D2 C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RealGetWindowClassW + 28 77D591D6 350 Bytes [ 00, 00, 2F, 31, 62, 31, A4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RecordShutdownReason + 80 77D59335 85 Bytes [ 36, 60, 36, 7D, 36, 9A, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RecordShutdownReason + D7 77D5938C 5 Bytes [ 00, A0, 04, 00, 4C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RecordShutdownReason + DE 77D59393 72 Bytes [ 00, 9D, 30, 76, 31, 55, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RecordShutdownReason + 127 77D593DC 648 Bytes [ 28, 00, 00, 00, 10, 3A, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RecordShutdownReason + 3B0 77D59665 767 Bytes [ F0, 04, 00, A4, 01, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DisplayExitWindowsWarnings + 80 77D59BC9 103 Bytes [ 3E, 04, 3E, 08, 3E, 0C, 3E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DisplayExitWindowsWarnings + E8 77D59C31 23 Bytes [ 3F, 94, 3F, 98, 3F, 9C, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DisplayExitWindowsWarnings + 100 77D59C49 41 Bytes [ 3F, C4, 3F, C8, 3F, CC, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EndTask + 16 77D59C73 13 Bytes [ 30, 08, 30, 0C, 30, 10, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EndTask + 24 77D59C81 267 Bytes [ 30, 24, 30, 28, 30, 2C, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DeviceEventWorker + DD 77D59D8D 25 Bytes [ 39, DC, 39, E0, 39, E4, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DeviceEventWorker + F7 77D59DA7 247 Bytes [ 3C, A0, 3C, A4, 3C, A8, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ExitWindowsEx + 72 77D59E9F 51 Bytes [ 33, 10, 33, 14, 33, 18, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ExitWindowsEx + A6 77D59ED3 129 Bytes [ 33, 78, 33, 7C, 33, 80, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ExitWindowsEx + 128 77D59F55 36 Bytes [ 37, C4, 37, C8, 37, CC, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ExitWindowsEx + 14D 77D59F7A 435 Bytes [ F0, 38, F4, 38, F8, 38, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UserLpkTabbedTextOut + 17B 77D5A12E 58 Bytes [ CC, 50, 6A, 03, 6A, 04, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UserLpkTabbedTextOut + 1B6 77D5A169 207 Bytes [ A1, B8, 01, D7, 77, 56, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetTabbedTextExtentW + A 77D5A239 7 Bytes [ FF, 76, 04, E8, 95, 6F, FB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetTabbedTextExtentW + 12 77D5A241 25 Bytes [ 66, 83, BD, 18, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetTabbedTextExtentA + 2 77D5A25B 22 Bytes [ 50, FF, D7, 8B, 46, 0C, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetTabbedTextExtentA + 1A 77D5A273 7 Bytes [ 8D, 85, 0C, FB, FF, FF, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetTabbedTextExtentA + 22 77D5A27B 15 Bytes [ 75, B0, FF, 15, DC, 13, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetTabbedTextExtentA + 32 77D5A28B 3 Bytes [ 83, 4D, AC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetTabbedTextExtentA + 36 77D5A28F 30 Bytes [ 8D, 45, BC, 50, 8D, 85, A0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeUninitialize + 2 77D5A2EC 103 Bytes [ 15, 48, 14, D1, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeUninitialize + 6A 77D5A354 38 Bytes [ 3C, 27, FB, FF, C9, C2, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeUninitialize + 91 77D5A37B 59 Bytes [ 45, 0C, 89, 45, C0, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeUninitialize + CD 77D5A3B7 142 Bytes [ 70, 24, 68, 24, 0B, D7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeGetLastError + 3B 77D5A446 17 Bytes [ D7, 77, 74, 1F, 64, A1, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeImpersonateClient + D 77D5A459 103 Bytes [ FF, 15, C8, 12, D1, 77, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeInitializeA + 13 77D5A4C1 60 Bytes [ 13, 59, 33, C0, 39, 05, BC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeInitializeA + 50 77D5A4FE 31 Bytes [ 00, 00, 8D, 45, B4, 50, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeInitializeA + 70 77D5A51E 35 Bytes [ 74, 24, 64, A1, 18, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeInitializeA + 94 77D5A542 171 Bytes [ 00, 00, 6A, 00, FF, 75, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeInitializeA + 140 77D5A5EE 40 Bytes [ 75, 2C, FF, 75, 28, FF, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PackDDElParam + 1A 77D5B533 14 Bytes [ 2B, C2, 85, C9, 7E, 01, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PackDDElParam + 29 77D5B542 85 Bytes [ C1, E0, 10, 0B, C1, 50, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnpackDDElParam + 1B 77D5B598 162 Bytes [ 7F, 00, 00, 56, C7, 45, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FreeDDElParam + C 77D5B63B 135 Bytes CALL 842AEF48 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReuseDDElParam + 30 77D5B6C3 51 Bytes [ 85, C0, 5F, 5E, 74, 04, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReuseDDElParam + 64 77D5B6F7 6 Bytes [ FF, 55, 8B, EC, 8B, 45 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReuseDDElParam + 6B 77D5B6FE 1 Byte [ C1 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReuseDDElParam + 6D 77D5B700 19 Bytes [ 19, 83, E0, 01, 5D, C2, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReuseDDElParam + 81 77D5B714 1 Byte [ 55 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetDlgItemInt + 7C 77D5B83D 41 Bytes [ 09, 3B, 8B, 3B, 66, 83, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgItemInt + 24 77D5B867 6 Bytes [ FF, FF, 66, 83, F8, 3B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgItemInt + 2B 77D5B86E 29 Bytes [ 0C, 66, 83, F8, 3A, 74, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgItemInt + 4A 77D5B88D 70 Bytes [ F8, 0A, 74, EA, 66, 83, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgItemInt + 91 77D5B8D4 54 Bytes [ 89, 8D, 4C, 48, D0, 03, D6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgItemInt + C8 77D5B90B 3 Bytes [ 74, 0C, 66 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CheckRadioButton + 46 77D5B9DF 80 Bytes [ 74, 3C, 39, 46, 04, 7E, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MapDialogRect + 2C 77D5BA30 57 Bytes [ 7D, 10, 6A, 41, 8D, 47, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MapDialogRect + 66 77D5BA6A 49 Bytes [ FF, F7, D8, 1B, C0, F7, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MapDialogRect + 98 77D5BA9C 90 Bytes [ 8B, 86, 20, 0A, D7, 77, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetNextDlgGroupItem + 18 77D5BAF7 1 Byte [ C0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetNextDlgGroupItem + 1A 77D5BAF9 12 Bytes [ 19, 83, C6, 0C, 81, FE, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetNextDlgGroupItem + 28 77D5BB07 31 Bytes [ 40, 5F, 5E, 5B, 5D, C2, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetNextDlgGroupItem + 49 77D5BB28 3 Bytes [ 8B, FF, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetNextDlgGroupItem + 4D 77D5BB2C 61 Bytes [ EC, 81, EC, B4, 04, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconsA + 1E 77D60585 3 Bytes CALL 77D5F867 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconsA + 22 77D60589 11 Bytes [ FF, 6A, 01, FF, 76, 08, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconsA + 2E 77D60595 44 Bytes [ 8B, 36, 3B, F3, 74, 5E, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconExA + 1 77D605C2 13 Bytes [ 0E, 8B, 49, 08, 3B, 4F, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconExA + F 77D605D0 116 Bytes CALL 77D0FD51 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconExA + 85 77D60646 64 Bytes [ 00, 3B, C8, 0F, 82, 09, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconExA + C6 77D60687 20 Bytes CALL 77D11F09 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateExtractIconExA + DC 77D6069D 3 Bytes CALL 77D18A36 C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputBuffer + 51 77D609D6 3 Bytes [ 8D, 45, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputBuffer + 55 77D609DA 92 Bytes [ 40, FC, 89, 85, DC, FD, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputBuffer + B2 77D60A37 37 Bytes [ 15, 04, 13, D1, 77, 68, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputBuffer + D8 77D60A5D 103 Bytes [ 03, FE, 7F, FF, 12, C2, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputBuffer + 140 77D60AC5 64 Bytes [ 12, C2, 14, 00, 90, 90, 90, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeAddData + 50 77D60CD9 127 Bytes [ 03, FE, 7F, FF, 12, C2, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeAddData + D3 77D60D5C 28 Bytes [ B8, CE, 11, 00, 00, BA, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeAddData + F0 77D60D79 44 Bytes [ 12, C2, 08, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeGetData 77D60DA9 11 Bytes [ 90, B8, E2, 11, 00, 00, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeGetData + C 77D60DB5 3 Bytes [ 12, C2, 14 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeGetData + 10 77D60DB9 15 Bytes [ 90, 90, 90, 90, 90, B8, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeGetData + 20 77D60DC9 35 Bytes [ 12, C2, 0C, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeGetData + 44 77D60DED 3 Bytes [ 03, FE, 7F ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeAccessData 77D60EC1 31 Bytes [ 90, B8, 10, 12, 00, 00, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeAccessData + 20 77D60EE1 119 Bytes [ 12, C2, 08, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeUnaccessData + 26 77D60F59 24 Bytes [ 12, C2, 04, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeUnaccessData + 42 77D60F75 319 Bytes [ 90, B8, 41, 12, 00, 00, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeUnaccessData + 182 77D610B5 45 Bytes [ 4E, 0C, 2B, 06, 2B, 4E, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeUnaccessData + 1B0 77D610E3 120 Bytes [ D6, 7D, 35, 8B, F7, 8B, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeUnaccessData + 229 77D6115C 102 Bytes [ C6, 5E, 5B, C9, C2, 0C, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCreateDataHandle + 28 77D61349 3 Bytes [ 12, E6, FA ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCreateDataHandle + 2C 77D6134D 41 Bytes [ 85, C0, 75, 0C, 83, 45, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCreateDataHandle + 56 77D61377 50 Bytes [ 45, D0, 89, 03, 8B, 45, D4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCreateDataHandle + 89 77D613AA 21 Bytes [ 0E, 8B, 45, E4, 8B, 4D, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCreateDataHandle + 9F 77D613C0 43 Bytes [ 45, D8, 8B, 4D, C0, 89, 45, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeFreeDataHandle + 1F 77D614B9 47 Bytes [ FF, 55, 8B, EC, 83, EC, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeFreeDataHandle + 4F 77D614E9 18 Bytes [ 45, 14, 83, E0, 01, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeFreeDataHandle + 62 77D614FC 21 Bytes CALL 1D7BBAA6 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeFreeDataHandle + 78 77D61512 108 Bytes [ 04, EB, 03, 83, C0, 03, 99, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeFreeDataHandle + E5 77D6157F 11 Bytes [ 04, 75, 09, FF, 75, 0C, 53, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WinHelpW + 44 77D617D0 20 Bytes [ 00, 66, 81, F9, C7, 02, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WinHelpW + 5A 77D617E6 23 Bytes [ 00, 66, 83, F9, 21, 72, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WinHelpW + 72 77D617FE 26 Bytes [ 00, 00, 33, C0, 66, 81, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WinHelpW + 8F 77D6181B 15 Bytes [ 74, 26, 48, 74, 04, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WinHelpW + 9F 77D6182B 118 Bytes [ 66, 83, F9, 9F, 77, 09, 0F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCmpStringHandles + 1F 77D61964 6 Bytes [ 90, 90, 8B, FF, 55, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCmpStringHandles + 26 77D6196B 88 Bytes [ 8B, 4D, 08, 8B, C1, EB, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCmpStringHandles + 7F 77D619C4 21 Bytes [ 65, F8, 00, 56, 57, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCmpStringHandles + 95 77D619DA 19 Bytes [ 75, 14, 8B, CF, D1, F9, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCmpStringHandles + A9 77D619EE 2 Bytes [ 33, 1B ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCreateStringHandleA + 21 77D61A1C 16 Bytes [ C7, FF, 75, 20, D1, E8, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCreateStringHandleA + 32 77D61A2D 52 Bytes CALL 77D13523 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCreateStringHandleA + 67 77D61A62 25 Bytes [ 74, 38, 8B, 7D, FC, 8D, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCreateStringHandleA + 81 77D61A7C 19 Bytes [ 8B, 4D, 0C, 8B, 45, FC, BE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeCreateStringHandleA + 95 77D61A90 94 Bytes [ 83, C4, 0C, 66, A5, 66, 83, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeFreeStringHandle + 4 77D61B2C 65 Bytes [ 46, 64, 2B, 46, 10, 66, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeFreeStringHandle + 46 77D61B6E 46 Bytes [ D7, 77, 0F, B7, 80, BA, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeFreeStringHandle + 77 77D61B9F 5 Bytes [ 1E, 8B, 89, 14, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeFreeStringHandle + 7D 77D61BA5 4 Bytes [ 00, 8B, 15, A4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeFreeStringHandle + 82 77D61BAA 4 Bytes [ D7, 77, 81, E1 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeKeepStringHandle + 69 77D61C2B 3 Bytes [ 86, EE, FA ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeKeepStringHandle + 6D 77D61C2F 116 Bytes [ F6, 45, 10, 04, 8D, 70, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeQueryStringW + 39 77D61CA4 47 Bytes [ 24, 8D, C1, D8, D6, 77, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeQueryStringW + 69 77D61CD4 72 Bytes [ 80, 80, 06, 00, 00, 29, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeQueryStringW + B2 77D61D1D 108 Bytes [ 0A, 66, 85, C9, 75, EF, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKBCodePage + 2A 77D61D8A 1 Byte [ 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKBCodePage + 2D 77D61D8D 25 Bytes [ 34, EB, 03, 8B, 4E, 3C, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKBCodePage + 47 77D61DA7 132 Bytes [ 2B, 0F, B7, 4E, 2A, 81, E1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKBCodePage + CC 77D61E2C 20 Bytes [ 08, 8B, 46, 64, 2B, 46, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetKBCodePage + E1 77D61E41 44 Bytes CALL 77D5931A C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirListA + A 77D634A1 106 Bytes [ 00, 3E, 03, 53, 6C, 65, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirListA + 75 77D6350C 87 Bytes [ 69, 65, 77, 4F, 66, 46, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirListW + 3F 77D63564 29 Bytes [ 47, 65, 74, 53, 79, 73, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirListW + 5D 77D63582 196 Bytes [ 43, 6F, 70, 79, 46, 69, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirListW + 122 77D63647 130 Bytes [ 43, 75, 72, 72, 65, 6E, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirSelectExA + 14 77D636CA 128 Bytes [ 50, 72, 6F, 63, 65, 73, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirSelectExW + 2F 77D6374B 32 Bytes [ 6E, 74, 65, 72, 00, 92, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirSelectExW + 50 77D6376C 41 Bytes [ D1, 01, 47, 65, 74, 54, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirSelectExW + 7A 77D63796 87 Bytes [ 6F, 6D, 41, 00, 73, 01, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirSelectExW + D2 77D637EE 147 Bytes [ 41, 02, 4C, 6F, 61, 64, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DlgDirSelectExW + 166 77D63882 45 Bytes [ F6, 00, 47, 65, 74, 41, 43, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollChildren + 1D 77D649D1 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollChildren + 2D 77D649E1 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollChildren + 50 77D64A04 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollChildren + 58 77D64A0C 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ScrollChildren + 78 77D64A2C 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CascadeWindows + 67 77D64C58 36 Bytes [ 02, 00, 01, 04, 3C, 20, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CascadeWindows + 8C 77D64C7D 41 Bytes [ 00, 02, 84, 3F, 20, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CascadeWindows + B7 77D64CA8 62 Bytes [ 57, 20, 00, 00, 06, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CascadeWindows + F6 77D64CE7 7 Bytes [ 00, 0F, 00, 05, 08, 47, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CascadeWindows + FE 77D64CEF 65 Bytes [ 00, 5B, 20, 00, 00, 0B, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TileWindows + 22 77D64DEF 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetMenuInfo + 17 77D64E0B 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeMenuW + B 77D64E21 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeMenuW + E 77D64E24 7 Bytes [ 00, 00, 00, 00, 04, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeMenuW + 16 77D64E2C 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeMenuW + 18 77D64E2E 10 Bytes [ 0A, 00, 01, 00, 00, 00, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeMenuW + 23 77D64E39 24 Bytes [ 00, 00, 00, 50, 01, 00, 80, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawMenuBarTemp + 2A 77D64F4F 4 Bytes [ 80, 4C, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawMenuBarTemp + 2F 77D64F54 29 Bytes [ 90, 07, 00, 80, 4D, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CheckMenuRadioItem + 18 77D64F72 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CheckMenuRadioItem + 1B 77D64F75 4 Bytes [ 00, 00, 00, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CheckMenuRadioItem + 22 77D64F7C 14 Bytes [ 00, 00, 07, 00, 24, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CheckMenuRadioItem + 32 77D64F8C 10 Bytes [ 08, 08, 00, 80, EC, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CheckMenuRadioItem + 3D 77D64F97 19 Bytes [ 80, 2F, 7F, 00, 00, 38, 08, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MB_GetString + 11 77D6591E 3 Bytes [ 01, 00, 07 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MB_GetString + 15 77D65922 4 Bytes [ 00, 00, 00, 16 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MB_GetString + 1A 77D65927 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MB_GetString + 1D 77D6592A 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MB_GetString + 25 77D65932 76 Bytes [ 00, 00, 00, 00, 01, 00, 07, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxTimeoutW + 43 77D65F84 14 Bytes [ 40, 1A, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxTimeoutW + 54 77D65F95 25 Bytes [ 00, 01, 00, 07, 04, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxTimeoutW + 6F 77D65FB0 14 Bytes [ 07, 04, 00, 00, 60, 1A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxTimeoutW + 7E 77D65FBF 111 Bytes [ 00, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxTimeoutA + 6C 77D66030 93 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxTimeoutA + CA 77D6608E 49 Bytes [ 00, 00, 7C, 3E, 06, 00, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxIndirectW + 2D 77D660C0 3 Bytes [ 18, 42, 06 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxIndirectW + 31 77D660C4 25 Bytes [ 34, 01, 00, 00, E4, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxIndirectW + 4D 77D660E0 12 Bytes [ 80, 44, 06, 00, 34, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxIndirectW + 5A 77D660ED 16 Bytes [ 00, 00, 00, B4, 45, 06, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxW + C 77D660FE 5 Bytes [ 00, 00, E8, 46, 06 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxW + 12 77D66104 3 Bytes [ 34, 01, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxW + 16 77D66108 27 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxW + 32 77D66124 22 Bytes [ 34, 01, 00, 00, E4, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MessageBoxW + 49 77D6613B 24 Bytes [ 00, 00, 00, 00, 00, B8, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSysColors + 14 77D66154 24 Bytes [ 34, 01, 00, 00, E4, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSysColors + 2D 77D6616D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSysColors + 2F 77D6616F 8 Bytes [ 00, 0C, 51, 06, 00, 34, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSysColors + 38 77D66178 14 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSysColors + 48 77D66188 102 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ToUnicode + 20 77D66286 48 Bytes [ 00, 00, E4, 04, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ToUnicodeEx + 21 77D662B8 11 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ToUnicodeEx + 2D 77D662C4 47 Bytes [ A8, 08, 00, 00, E4, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSystemCursor + 2B 77D662F4 3 Bytes [ A8, 10, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSystemCursor + 2F 77D662F8 19 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!mouse_event + F 77D6630C 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!mouse_event + 13 77D66310 43 Bytes CALL 5BD66317 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!mouse_event + 3F 77D6633C 19 Bytes [ 00, 00, 00, 00, B4, CC, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!keybd_event + F 77D66350 62 Bytes [ 5C, DB, 06, 00, A8, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!keybd_event + 4E 77D6638F 23 Bytes [ 00, BC, 1F, 07, 00, 68, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!keybd_event + 66 77D663A7 5 Bytes [ 00, E4, 04, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!keybd_event + 6E 77D663AF 8 Bytes [ 00, 0C, 27, 07, 00, 30, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!keybd_event + 77 77D663B8 27 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawCaption + 18 77D66975 44 Bytes [ 1E, 00, 00, 00, 1C, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawCaption + 45 77D669A2 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawCaption + 6B 77D669C8 24 Bytes [ FF, DF, 0F, FF, FF, CE, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawCaption + 84 77D669E1 2 Bytes [ C0, 07 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawCaption + 87 77D669E4 53 Bytes [ FF, C0, 0F, FF, FF, C0, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharToOemBuffW + 29 77D66A1A 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharToOemBuffW + 2F 77D66A20 88 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!OemToCharW + 43 77D66A79 35 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSysColorsTemp + 21 77D66A9F 31 Bytes [ 00, 01, DC, 00, 00, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSysColorsTemp + 41 77D66ABF 36 Bytes [ 00, 00, 20, 00, 00, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSysColorsTemp + 68 77D66AE6 30 Bytes [ 00, 00, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSysColorsTemp + 87 77D66B05 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSysColorsTemp + 8D 77D66B0B 65 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetLastErrorEx + 12 77D66B82 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InitializeWin32EntryTable + 22 77D66BA9 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InitializeWin32EntryTable + 33 77D66BBA 28 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InitializeWin32EntryTable + 50 77D66BD7 19 Bytes [ 00, 03, AE, 00, 00, 03, DE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InitializeWin32EntryTable + 64 77D66BEB 26 Bytes [ 00, 00, 20, 00, 00, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!InitializeWin32EntryTable + 7F 77D66C06 24 Bytes [ 00, 00, 03, FE, 00, 00, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnterReaderModeHelper + 2 77D67261 48 Bytes [ FF, FF, FF, F3, FE, 7F, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnterReaderModeHelper + 35 77D67294 37 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnterReaderModeHelper + 5B 77D672BA 45 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReasonCodeNeedsBugID + 12 77D672E8 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReasonCodeNeedsBugID + 2F 77D67305 272 Bytes [ 50, 00, 00, 00, 88, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReasonCodeNeedsBugID + 142 77D67418 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReasonCodeNeedsBugID + 16A 77D67440 135 Bytes [ 01, 04, 00, 00, 02, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ReasonCodeNeedsBugID + 1F2 77D674C8 7 Bytes [ FC, 01, FF, FF, F3, 8E, 7F ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!BuildReasonArray + 2 77D679B8 25 Bytes [ F8, 1F, FF, FF, F8, 3F, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!BuildReasonArray + 1C 77D679D2 11 Bytes [ FF, FF, FF, FF, FF, FF, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!BuildReasonArray + 29 77D679DF 29 Bytes [ 00, 20, 00, 00, 00, 40, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!BuildReasonArray + 49 77D679FF 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!BuildReasonArray + 52 77D67A08 12 Bytes [ FF, FF, FF, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DestroyReasons + C 77D67AA4 23 Bytes [ FF, 00, 07, FF, FF, 00, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DestroyReasons + 24 77D67ABC 23 Bytes [ F8, 00, 03, FF, F8, 80, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DestroyReasons + 3C 77D67AD4 30 Bytes [ FF, 87, FF, FF, FF, 87, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetReasonTitleFromReasonCode + F 77D67AF3 12 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetReasonTitleFromReasonCode + 1C 77D67B00 17 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetReasonTitleFromReasonCode + 2F 77D67B13 41 Bytes [ 00, 20, 00, 00, 00, 40, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetReasonTitleFromReasonCode + 5A 77D67B3E 42 Bytes [ FF, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetReasonTitleFromReasonCode + 86 77D67B6A 69 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnableScrollBar + C 77D67BD1 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnableScrollBar + 11 77D67BD6 28 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnableScrollBar + 2E 77D67BF3 22 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnableScrollBar + 45 77D67C0A 9 Bytes [ 0F, FF, C0, 00, 0F, FF, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!EnableScrollBar + 4F 77D67C14 11 Bytes [ C0, 00, 0F, FF, C0, 00, 0F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharPrevExA + 48 77D6948A 12 Bytes [ 8B, 46, 60, A9, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharPrevExA + 55 77D69497 16 Bytes [ 00, 0F, B7, C7, 85, C0, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharPrevExA + 66 77D694A8 105 Bytes [ FF, 8B, F8, FF, 75, B8, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharPrevExA + D0 77D69512 4 Bytes [ 02, 08, 0F, 85 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CharPrevExA + D5 77D69517 9 Bytes [ EF, 00, 00, 0F, B7, 45, 0C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsHungAppWindow + 6E 77D6988F 28 Bytes JMP 77D72B10 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsHungAppWindow + 8B 77D698AC 145 Bytes CALL 77D5BD8C C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsHungAppWindow + 11E 77D6993F 47 Bytes [ 18, 0F, B7, C3, 50, 56, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsHungAppWindow + 14E 77D6996F 40 Bytes [ 4C, 30, 75, 0A, 68, 98, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsHungAppWindow + 177 77D69998 44 Bytes JMP 77D72AFD C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharUpperW + D1 77D69E70 41 Bytes [ 00, 3D, 2D, 02, 00, 00, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharUpperW + FB 77D69E9A 35 Bytes [ 00, 6A, 00, 53, 56, E8, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IsCharUpperW + 11F 77D69EBE 190 Bytes [ 00, 74, DB, D3, 77, AE, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdePostAdvise + 18 77D69F7D 46 Bytes [ 4D, 56, D3, 77, 37, 56, D3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdePostAdvise + 48 77D69FAD 17 Bytes [ 0F, 83, A3, FC, FF, FF, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdePostAdvise + 5A 77D69FBF 4 Bytes [ 00, 00, FF, 24 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdePostAdvise + 5F 77D69FC4 74 Bytes [ FD, 5A, D3, 77, 85, DB, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdePostAdvise + AA 77D6A00F 37 Bytes [ 56, 8B, 75, 08, 8B, 46, 4C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeClientTransaction + 1E 77D6A280 10 Bytes [ 55, 8B, EC, 83, EC, 10, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeClientTransaction + 29 77D6A28B 11 Bytes [ 46, 4C, 24, 03, 3C, 02, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeClientTransaction + 35 77D6A297 86 Bytes CALL 77D6A6B2 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeClientTransaction + 8C 77D6A2EE 22 Bytes [ 8D, 45, 0C, 50, 57, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeClientTransaction + A3 77D6A305 94 Bytes [ 00, 8B, 45, 0C, 8B, 4E, 4C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeQueryConvInfo + 3B 77D6A7A1 1 Byte [ 4D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeQueryConvInfo + 3D 77D6A7A3 242 Bytes [ 41, 51, 6A, FC, 50, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeQueryConvInfo + 130 77D6A896 1 Byte [ C0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeQueryConvInfo + 132 77D6A898 75 Bytes [ 00, 0B, C8, 51, FF, 75, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeQueryConvInfo + 17E 77D6A8E4 11 Bytes [ 32, 33, C0, 8B, CA, 83, E1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeSetUserHandle + 7 77D6A8F0 32 Bytes [ 8B, 3D, 0C, 01, D7, 77, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeSetUserHandle + 28 77D6A911 9 Bytes [ FF, 5E, 5D, C2, 10, 00, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeSetUserHandle + 32 77D6A91B 3 Bytes [ 14, FF, 75 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeSetUserHandle + 36 77D6A91F 18 Bytes CALL 77D50720 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeSetUserHandle + 49 77D6A932 19 Bytes [ FF, 90, 90, 90, 90, 90, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeAbandonTransaction + 2 77D6A946 92 Bytes [ 8B, F0, 85, F6, 74, 38, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeAbandonTransaction + 5F 77D6A9A3 26 Bytes CALL 77D50720 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeAbandonTransaction + 7A 77D6A9BE 6 Bytes [ 90, 90, 90, 90, 90, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeAbandonTransaction + 81 77D6A9C5 62 Bytes [ 55, 8B, EC, 83, EC, 10, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeAbandonTransaction + C0 77D6AA04 130 Bytes [ 55, 8B, EC, 56, 8B, 75, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!BroadcastSystemMessage + 9 77D6AA87 9 Bytes [ 00, 8B, 4E, 24, 57, 8D, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!BroadcastSystemMessage + 16 77D6AA94 17 Bytes [ 15, 5C, 11, D1, 77, E9, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowModuleFileName + 2 77D6AAA6 24 Bytes CALL 77D6A9FF C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowModuleFileName + 1B 77D6AABF 7 Bytes JMP 77D4D874 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetWindowModuleFileName + 23 77D6AAC7 26 Bytes JMP 77D694F5 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputDeviceInfoA + 15 77D6AAE2 62 Bytes [ 55, 8B, EC, 8B, 4D, 10, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputDeviceInfoA + 54 77D6AB21 6 Bytes [ 51, FF, 70, 78, 56, 52 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputDeviceInfoA + 5B 77D6AB28 19 Bytes [ AE, 51, FE, FF, 5E, 5D, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputDeviceInfoA + 6F 77D6AB3C 27 Bytes [ FF, 85, F6, 0F, 84, 01, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputDeviceInfoA + 8B 77D6AB58 57 Bytes [ 00, 8B, 46, 6C, 89, 45, FC, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgItemTextA + 18 77D6AC36 16 Bytes [ FF, 5F, 5E, 5B, C9, C2, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetDlgItemTextA + 29 77D6AC47 80 Bytes [ EC, 83, EC, 10, 53, 56, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MapVirtualKeyExA + 41 77D6AC98 48 Bytes [ 00, 04, 00, C7, 45, DC, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MapVirtualKeyExA + 72 77D6ACC9 256 Bytes [ 8B, 76, 4C, F7, C6, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VkKeyScanExA + 7F 77D6ADCA 126 Bytes [ 85, 5D, 33, 00, 00, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallMsgFilter + 73 77D6AE49 19 Bytes [ 00, 8B, 46, 4C, A8, 04, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallMsgFilter + 87 77D6AE5D 29 Bytes [ 85, 0C, E4, 00, 00, 6A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallMsgFilter + A5 77D6AE7B 15 Bytes JMP 77D6A271 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!CallMsgFilter + B5 77D6AE8B 26 Bytes [ 81, C9, 00, 00, 00, 08, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawCaptionTempA + 16 77D6AEA6 80 Bytes [ FF, 90, 90, 90, 90, 90, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawCaptionTempA + 67 77D6AEF7 116 Bytes [ FF, FF, 7F, 0F, 8D, F1, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RealGetWindowClass + 41 77D6AF6C 89 Bytes [ 00, C7, 45, 08, 08, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeDisplaySettingsA + 6 77D6AFC6 13 Bytes [ 46, 4C, A8, 30, 0F, 85, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeDisplaySettingsA + 14 77D6AFD4 67 Bytes [ 46, 18, 8B, 4E, 18, 8B, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ChangeDisplaySettingsA + 58 77D6B018 17 Bytes [ 0F, 85, A9, 01, 01, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WINNLSEnableIME + 7 77D6B02A 11 Bytes [ FF, 53, 68, 00, 80, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WINNLSGetEnableStatus + 2 77D6B036 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!WINNLSGetEnableStatus + 4 77D6B038 14 Bytes [ C3, 5F, 5E, 5B, C9, C2, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SendIMEMessageExW + 2 77D6B047 33 Bytes [ FF, 39, 7D, 10, 74, 09, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IMPGetIMEW + 2 77D6B069 21 Bytes [ 35, 24, 02, D7, 77, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IMPGetIMEA + 7 77D6B07F 16 Bytes [ EB, B6, 6A, 20, 56, E8, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IMPQueryIMEW + 7 77D6B090 6 Bytes JMP 77D7B119 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IMPQueryIMEA 77D6B09A 20 Bytes [ 90, 8B, FF, 55, 8B, EC, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IMPSetIMEW + 4 77D6B0AF 40 Bytes [ 6F, 00, 00, 6A, 08, 5A, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IMPSetIMEA + 1C 77D6B0D8 30 Bytes [ FF, FF, 7F, 0F, 8F, 69, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IMPSetIMEA + 3B 77D6B0F7 52 Bytes [ 15, 2C, 12, D1, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IMPSetIMEA + 70 77D6B12C 152 Bytes JMP 77D6B1DB C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IMPSetIMEA + 109 77D6B1C5 71 Bytes [ 00, 6A, 00, 56, 89, 7E, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!IMPSetIMEA + 151 77D6B20D 3 Bytes JMP 77D7A255 C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!BlockInput + 1B 77D6C651 9 Bytes JMP 77D67898 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeGetQualityOfService 77D6C65E 23 Bytes [ 90, 8B, FF, 55, 8B, EC, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeSetQualityOfService + 5 77D6C677 8 Bytes [ 00, 80, 4B, 62, 10, 56, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DdeSetQualityOfService + E 77D6C680 50 Bytes [ 85, F6, 57, 0F, 85, 2F, A4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawAnimatedRects + 5 77D6C6B3 23 Bytes [ 75, 20, 8B, 8B, D0, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawAnimatedRects + 1D 77D6C6CB 21 Bytes CALL BD6087FB .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawAnimatedRects + 33 77D6C6E1 43 Bytes [ 8B, 4B, 60, F6, C1, 01, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!DrawAnimatedRects + 5F 77D6C70D 53 Bytes [ 00, 00, 8B, 4D, EC, 03, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!FlashWindowEx + B 77D6C743 12 Bytes [ EB, E1, A1, 80, 00, D7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClipboardViewer + 4 77D6C750 20 Bytes [ 89, 83, 98, 00, 00, 00, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetClipCursor + 7 77D6C765 28 Bytes [ 00, 00, 8B, 35, 80, 00, D7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetComboBoxInfo + 12 77D6C784 65 Bytes [ 8B, FF, 55, 8B, EC, 83, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetInternalWindowPos + 4 77D6C7C6 42 Bytes [ 8D, 83, 9C, 00, 00, 00, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetListBoxInfo + 7 77D6C7F1 17 Bytes [ 00, 00, 0F, B6, 45, E3, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuBarInfo + 5 77D6C803 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuBarInfo + 7 77D6C805 17 Bytes [ 83, E0, 40, 31, 43, 60, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuBarInfo + 19 77D6C817 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMenuBarInfo + 1B 77D6C819 36 Bytes [ 89, B3, C4, 00, 00, 00, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetMouseMovePointsEx + 4 77D6C83E 22 Bytes [ FF, 75, E4, FF, 75, 08, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetPriorityClipboardFormat + 7 77D6C855 16 Bytes [ 10, 00, 00, 23, C6, 31, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetPriorityClipboardFormat + 19 77D6C867 41 Bytes [ 00, 0F, 85, E6, A2, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRawInputData + 1B 77D6C891 56 Bytes [ 00, 33, F6, 39, 75, 0C, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!GetRegisteredRawInputDevices + 18 77D6C8CA 19 Bytes [ 85, 7B, 60, 0F, 85, 40, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!HiliteMenuItem + 4 77D6C8DE 19 Bytes [ FF, 75, 10, 56, 53, E8, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ImpersonateDdeClientWindow + 4 77D6C8F2 10 Bytes [ 5F, 5E, 5B, C9, C2, 0C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ImpersonateDdeClientWindow + F 77D6C8FD 11 Bytes [ 00, 00, 89, 83, A4, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ImpersonateDdeClientWindow + 1B 77D6C909 7 Bytes [ 00, 00, 89, 83, A8, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!ImpersonateDdeClientWindow + 23 77D6C911 9 Bytes [ EB, 97, FF, 75, 14, 57, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LockWorkStation + 5 77D6C91B 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LockWorkStation + 7 77D6C91D 3 Bytes JMP 77D67485 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LockWorkStation + B 77D6C921 2 Bytes [ FF, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!LockWorkStation + 11 77D6C927 63 Bytes [ 8B, FF, 55, 8B, EC, 51, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MenuItemFromPoint + 3F 77D6C967 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MenuItemFromPoint + 41 77D6C969 7 Bytes [ C1, E0, 16, 33, 46, 60, 25 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!MenuItemFromPoint + 49 77D6C971 59 Bytes [ 00, 40, 00, 31, 46, 60, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RealChildWindowFromPoint + F 77D6C9AD 11 Bytes [ 1B, C9, 41, 83, E1, 01, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RealChildWindowFromPoint + 1B 77D6C9B9 37 Bytes [ 00, 1B, C0, 40, 83, E0, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterTasklist + 5 77D6C9DF 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!RegisterTasklist + 7 77D6C9E1 96 Bytes [ 00, 89, 4E, 60, F6, 47, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateSetDbgTag + 18 77D6CA42 119 Bytes [ 8B, 48, 0C, 68, 81, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateSetRipFlags + 5 77D6CABB 9 Bytes [ 00, 4A, 51, D4, 77, 68, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateSetRipFlags + F 77D6CAC5 11 Bytes CALL 77D58C33 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!PrivateSetRipFlags + 1B 77D6CAD1 43 Bytes JMP 77D6BFA4 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSystemTimer + B 77D6CAFD 12 Bytes JMP 77D67487 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSystemTimer + 18 77D6CB0A 10 Bytes [ 0F, 84, 8A, AD, FF, FF, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!SetSystemTimer + 23 77D6CB15 19 Bytes [ 85, F6, 0F, 85, 7A, 90, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TrackPopupMenuEx + F 77D6CB29 19 Bytes JMP 77D690AA C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!TrackPopupMenuEx + 23 77D6CB3D 8 Bytes JMP 77D67C53 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UnregisterHotKey + 4 77D6CB46 90 Bytes CALL 77D4FA12 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!UserHandleGrantAccess + F 77D6CBA1 55 Bytes JMP 77D6A840 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!Win32PoolAllocationStats + 1F 77D6CBD9 168 Bytes [ 15, B0, 11, D1, 77, 6A, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!Win32PoolAllocationStats + C8 77D6CC82 183 Bytes [ 83, 4E, 0C, FF, 56, 89, 7E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!Win32PoolAllocationStats + 180 77D6CD3A 15 Bytes [ FF, 85, C0, 74, 0C, 6A, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!Win32PoolAllocationStats + 190 77D6CD4A 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!Win32PoolAllocationStats + 192 77D6CD4C 19 Bytes [ 46, 04, F6, 40, 19, 02, 0F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AlignRects + D7 77D6D16F 94 Bytes [ 00, 51, 30, 80, 30, F4, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AlignRects + 136 77D6D1CE 83 Bytes [ 07, 00, C8, 00, 00, 00, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AlignRects + 18A 77D6D222 171 Bytes [ 4B, 36, 99, 36, B4, 36, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AlignRects + 236 77D6D2CE 126 Bytes [ 31, 33, 37, 33, D9, 33, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!AlignRects + 2B5 77D6D34D 255 Bytes [ 3D, BA, 3D, D8, 3D, F2, 3D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VRipOutput + 95 77D6DB18 58 Bytes [ 4D, 3B, 64, 3B, 6B, 3B, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VRipOutput + D0 77D6DB53 153 Bytes [ 30, B0, 30, 04, 31, 10, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VRipOutput + 16C 77D6DBEF 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VRipOutput + 172 77D6DBF5 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USER32.dll!VRipOutput + 179 77D6DBFC 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!HT_Get8BPPMaskPalette + FFFBFD7D 77EF11F9 98 Bytes [ DE, 1B, F6, 46, 39, 5D, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!HT_Get8BPPMaskPalette + FFFBFDE0 77EF125C 20 Bytes [ 00, 5D, C2, 10, 00, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!HT_Get8BPPMaskPalette + FFFBFDF5 77EF1271 3 Bytes [ FF, 75, 1C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!HT_Get8BPPMaskPalette + FFFBFDF9 77EF1275 9 Bytes [ 75, 18, 56, FF, 75, 10, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!HT_Get8BPPMaskPalette + FFFBFE03 77EF127F 98 Bytes CALL 77EF7B04 C:\WINDOWS\system32\GDI32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiFlush + 5 77EF59AB 109 Bytes CALL 77EF4E39 C:\WINDOWS\system32\GDI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiReleaseDC + 13 77EF5A19 5 Bytes [ 90, 90, 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiReleaseDC + 19 77EF5A1F 127 Bytes [ FF, 55, 8B, EC, 83, EC, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDeviceCaps + 15 77EF5A9F 10 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDeviceCaps + 20 77EF5AAA 51 Bytes CALL 77EA34CE C:\WINDOWS\system32\RPCRT4.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDeviceCaps + 54 77EF5ADE 14 Bytes [ A5, EC, FD, FF, FF, 00, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDeviceCaps + 63 77EF5AED 75 Bytes [ 45, 10, BE, 07, 00, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDeviceCaps + AF 77EF5B39 17 Bytes [ 74, 1B, FF, 15, 38, 13, D1, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SelectObject + 5 77EF5B95 4 Bytes [ 14, 64, A1, 18 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SelectObject + A 77EF5B9A 55 Bytes [ 00, 00, 8B, 4D, 08, 85, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SelectObject + 42 77EF5BD2 53 Bytes [ 80, CC, 06, 00, 00, 8D, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SelectObject + 78 77EF5C08 66 Bytes [ 00, FF, 75, 10, FF, 75, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SelectObject + BC 77EF5C4C 21 Bytes [ 33, C0, 5D, C2, 10, 00, 90, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextColor + 9 77EF5DA0 33 Bytes [ 50, 6A, 01, 8D, 45, 08, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextColor + 2B 77EF5DC2 62 Bytes CALL 77EBA17E C:\WINDOWS\system32\RPCRT4.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextColor + 6A 77EF5E01 93 Bytes [ 00, 8B, 49, 0C, 0B, 88, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBkColor + 16 77EF5E5F 116 Bytes CALL A4F6D275 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBkColor + 8B 77EF5ED4 40 Bytes [ 18, 33, FF, EB, 30, 8D, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBkMode + 2 77EF5EFD 146 Bytes [ 75, 0C, FF, 75, 08, E8, CF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBkMode + 95 77EF5F90 25 Bytes [ C6, 5E, 5F, C9, C2, 0C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBkMode + AF 77EF5FAA 41 Bytes [ 75, 10, FF, 75, 0C, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBkMode + D9 77EF5FD4 73 Bytes [ 75, 0C, 51, 50, 51, E8, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateCompatibleDC + 1E 77EF601E 25 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateCompatibleDC + 38 77EF6038 194 Bytes [ EC, 5D, FF, 25, F4, 02, D7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateCompatibleDC + FB 77EF60FB 26 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateCompatibleDC + 116 77EF6116 145 Bytes [ 00, 00, 8B, 80, 30, 07, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateCompatibleDC + 1A8 77EF61A8 45 Bytes CALL B3EF61A8 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateSolidBrush + 11 77EF61D6 123 Bytes [ 15, 78, 14, D1, 77, 83, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateBitmap + 43 77EF6252 17 Bytes [ FF, FF, D6, 5E, 8B, 4D, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateBitmap + 55 77EF6264 30 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateBitmap + 74 77EF6283 66 Bytes [ 7D, 08, 8B, 37, 89, 85, 9C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateBitmap + B7 77EF62C6 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateBitmap + B9 77EF62C8 24 Bytes [ 51, 8D, 8D, C4, FE, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyPatBlt + 11 77EF62E2 43 Bytes [ 00, F6, 85, AE, FE, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyPatBlt + 3D 77EF630E 61 Bytes [ F0, EB, 65, 6A, 01, 6A, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyPatBlt + 7C 77EF634D 80 Bytes [ 00, 88, FF, B5, A0, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyPatBlt + CD 77EF639E 46 Bytes [ C9, C2, 08, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyPatBlt + FC 77EF63CD 2 Bytes [ 66, 10 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiValidateHandle 77EF649C 5 Bytes [ 90, 90, 8B, FF, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiValidateHandle + 6 77EF64A2 10 Bytes [ EC, 56, 8B, 75, 08, 56, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiValidateHandle + 11 77EF64AD 145 Bytes [ 85, C0, 74, 20, 57, 56, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiValidateHandle + A3 77EF653F 55 Bytes [ 81, F9, A9, 02, 00, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiDllInitialize + 17 77EF6577 1 Byte [ 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiDllInitialize + 1A 77EF657A 52 Bytes CALL 77EA67D1 C:\WINDOWS\system32\RPCRT4.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiDllInitialize + 4F 77EF65AF 35 Bytes CALL 77EA350C C:\WINDOWS\system32\RPCRT4.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiDllInitialize + 73 77EF65D3 27 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiDllInitialize + 8F 77EF65EF 108 Bytes [ C9, 74, 12, 3B, 4D, 08, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiProcessSetup + 1D 77EF665C 146 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiProcessSetup + B0 77EF66EF 165 Bytes [ 6A, 00, 6A, 02, 56, E8, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiProcessSetup + 157 77EF6796 12 Bytes [ 53, FF, 15, 5C, 03, D7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiProcessSetup + 164 77EF67A3 42 Bytes [ 00, 00, 83, C0, 20, 50, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiProcessSetup + 18F 77EF67CE 17 Bytes [ 50, 53, FF, 15, 78, 03, D7, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetCodePage + C 77EF6A0F 14 Bytes [ 6A, 18, 56, FF, 15, 58, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetCodePage + 1B 77EF6A1E 107 Bytes [ D7, 77, EB, 0F, 57, 50, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!IntersectClipRect + 1 77EF6A8A 37 Bytes [ 5D, 14, 56, 8B, 75, 08, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!IntersectClipRect + 27 77EF6AB0 3 Bytes [ 0F, 84, 95 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!IntersectClipRect + 2D 77EF6AB6 101 Bytes CALL 77EF6267 C:\WINDOWS\system32\GDI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetClipRgn + 13 77EF6B1C 23 Bytes CALL 77EA6931 C:\WINDOWS\system32\RPCRT4.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetClipRgn + 2B 77EF6B34 80 Bytes [ 53, FF, 75, 10, FF, 75, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetLayout + 24 77EF6B85 12 Bytes [ EB, 0E, 83, FF, 21, 75, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetLayout + 31 77EF6B92 40 Bytes [ 89, 46, 1C, 8B, 5E, 04, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetLayout + 5A 77EF6BBB 123 Bytes [ FF, 24, 85, 6B, BD, D6, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DeleteObject + A 77EF6C37 13 Bytes [ 45, 10, EB, 59, 53, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DeleteObject + 18 77EF6C45 59 Bytes [ 75, 14, 53, FF, 15, 78, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DeleteObject + 54 77EF6C81 3 Bytes [ 84, D0, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DeleteObject + 59 77EF6C86 3 Bytes [ 48, 74, 12 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DeleteObject + 5D 77EF6C8A 126 Bytes CALL 3C737B92 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DeleteDC 77EF6E98 3 Bytes [ 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DeleteDC + 4 77EF6E9C 64 Bytes [ FF, 55, 8B, EC, 56, 8B, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DeleteDC + 45 77EF6EDD 22 Bytes CALL 77EF6E53 C:\WINDOWS\system32\GDI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DeleteDC + 5D 77EF6EF5 136 Bytes [ 8B, 80, 30, 07, 00, 00, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DeleteDC + E6 77EF6F7E 45 Bytes [ 74, 5D, 8B, 0E, 8B, 41, 3C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!BitBlt + 2 77EF6FB4 30 Bytes [ 8B, 06, 3B, C3, 75, 04, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!BitBlt + 21 77EF6FD3 20 Bytes CALL 77EF63DB C:\WINDOWS\system32\GDI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!BitBlt + 36 77EF6FE8 44 Bytes CALL 77EA36D7 C:\WINDOWS\system32\RPCRT4.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!BitBlt + 63 77EF7015 13 Bytes [ 85, C0, 75, 0C, 50, 56, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!BitBlt + 71 77EF7023 18 Bytes CALL 77EF6E50 C:\WINDOWS\system32\GDI32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateCompatibleBitmap + 7B 77EF70BE 145 Bytes [ 33, DB, 53, FF, 75, 14, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateCompatibleBitmap + 10D 77EF7150 9 Bytes CALL 77EF87A7 C:\WINDOWS\system32\GDI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateCompatibleBitmap + 117 77EF715A 80 Bytes [ 4D, 10, 3B, C1, 74, 15, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateCompatibleBitmap + 168 77EF71AB 46 Bytes [ 3B, C3, 75, 2A, FF, 75, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateCompatibleBitmap + 197 77EF71DA 8 Bytes [ 45, 14, 5F, 5E, 5B, C9, C2, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateRectRgn 77EF77BF 37 Bytes [ 90, 90, 90, B8, 9B, 11, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateRectRgn + 26 77EF77E5 9 Bytes [ 90, 90, 90, 90, 90, B8, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateRectRgn + 30 77EF77EF 21 Bytes [ BA, 00, 03, FE, 7F, FF, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateRectRgn + 46 77EF7805 7 Bytes [ 03, FE, 7F, FF, 12, C2, 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateRectRgn + 4E 77EF780D 29 Bytes [ 90, 90, 90, 90, 90, B8, A3, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtSelectClipRgn + 14 77EF78C1 69 Bytes [ 90, 90, 90, 90, 90, B8, B9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtSelectClipRgn + 5A 77EF7907 59 Bytes [ BA, 00, 03, FE, 7F, FF, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtSelectClipRgn + 96 77EF7943 14 Bytes [ 03, FE, 7F, FF, 12, C3, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtSelectClipRgn + A5 77EF7952 39 Bytes [ 00, BA, 00, 03, FE, 7F, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtSelectClipRgn + CD 77EF797A 19 Bytes [ 00, BA, 00, 03, FE, 7F, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SelectClipRgn + 19 77EF7AF2 24 Bytes [ B8, 1A, 12, 00, 00, BA, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetWindowOrgEx + 17 77EF7B0B 21 Bytes [ BA, 00, 03, FE, 7F, FF, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetWindowOrgEx + 2D 77EF7B21 67 Bytes [ 03, FE, 7F, FF, 12, C2, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetWindowOrgEx + 71 77EF7B65 59 Bytes [ 90, 90, 90, 90, 90, B8, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetViewportOrgEx + 1C 77EF7BA1 9 Bytes [ 90, 90, 90, 90, 90, B8, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetViewportOrgEx + 26 77EF7BAB 5 Bytes [ BA, 00, 03, FE, 7F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetViewportOrgEx + 2C 77EF7BB1 37 Bytes [ 12, C2, 0C, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetViewportOrgEx + 52 77EF7BD7 166 Bytes [ 7F, FF, 12, C3, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetViewportOrgEx + 44 77EF7C7E 172 Bytes [ C0, 75, 4E, FF, 75, F4, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetViewportExtEx + 1 77EF7D2B 38 Bytes [ 47, 0C, 2B, 46, 04, 33, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetViewportExtEx + 28 77EF7D52 1 Byte [ 5D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetViewportExtEx + 2A 77EF7D54 45 Bytes [ 56, 57, 8B, F3, 8D, 7D, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetViewportExtEx + 58 77EF7D82 204 Bytes [ F6, 74, 30, 8B, 4D, F4, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextMetricsW + 5D 77EF7E4F 64 Bytes [ 53, 56, 57, 3B, 4D, 10, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetHFONT + 1 77EF7E90 73 Bytes [ 78, 04, 3B, D7, 89, 4D, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetHFONT + 4B 77EF7EDA 33 Bytes [ 8D, 45, E4, 89, 45, EC, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!TextOutW + 17 77EF7EFC 137 Bytes [ D0, A5, A5, A5, 89, 45, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!TextOutW + A1 77EF7F86 52 Bytes [ 5F, 5E, 5B, 74, 0E, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!TextOutW + D6 77EF7FBB 49 Bytes [ 45, 0C, 51, FF, 30, E8, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentPoint32W + 17 77EF7FED 31 Bytes [ C1, E6, 04, 8D, 5D, D0, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentPoint32W + 37 77EF800D 109 Bytes [ 8B, F8, 8B, 41, 0C, 2B, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtTextOutW + 1C 77EF807B 1 Byte [ C7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtTextOutW + 1E 77EF807D 7 Bytes [ 08, 8B, 17, 8B, 08, 89, 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtTextOutW + 26 77EF8085 78 Bytes [ 0F, 83, C7, 04, 4E, 75, E1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtTextOutW + 75 77EF80D4 125 Bytes [ DA, 89, 5D, 08, 73, 73, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetObjectType + 2F 77EF8152 28 Bytes [ 18, FF, 75, 0C, 53, E8, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetObjectType + 4C 77EF816F 53 Bytes [ 8B, 55, FC, 75, 25, 3B, DA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetObjectType + 82 77EF81A5 19 Bytes [ 03, C3, 8B, 30, 8B, 78, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetObjectType + 96 77EF81B9 18 Bytes [ E4, FA, FF, 83, C3, 10, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetObjectType + A9 77EF81CC 1 Byte [ 10 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RectVisible + D 77EF81FD 46 Bytes [ 8B, FF, 55, 8B, EC, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RectVisible + 3C 77EF822C 7 Bytes [ 75, 14, 8B, F8, 6A, 01, 53 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RectVisible + 44 77EF8234 34 Bytes [ 75, 0C, FF, 75, 08, E8, 54, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateRectRgnIndirect + 6 77EF8257 27 Bytes [ FF, 55, 8B, EC, 8B, 45, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateRectRgnIndirect + 22 77EF8273 5 Bytes [ EB, 16, 66, B8, 32 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateRectRgnIndirect + 28 77EF8279 26 Bytes [ EB, 10, 66, B8, 31, 00, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateRectRgnIndirect + 43 77EF8294 11 Bytes [ 8B, FF, 55, 8B, EC, 51, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateRectRgnIndirect + 4F 77EF82A0 127 Bytes [ 8B, 4B, 08, 56, 2B, C8, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCurrentObject + E 77EF8320 8 Bytes [ EB, 19, 24, 04, F6, D8, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCurrentObject + 17 77EF8329 26 Bytes [ E0, 3F, 83, C0, 38, EB, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCurrentObject + 32 77EF8344 24 Bytes CALL 77EC90D6 C:\WINDOWS\system32\RPCRT4.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SelectPalette + E 77EF835D 20 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SelectPalette + 23 77EF8372 62 Bytes [ 08, 83, F8, 22, 7F, 74, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetObjectW + 1D 77EF83B1 35 Bytes [ 66, 81, F9, C7, 02, 74, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetObjectW + 41 77EF83D5 53 Bytes [ B6, 82, 1F, 37, D1, 77, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetObjectW + 77 77EF840B 78 Bytes [ 66, 83, F9, 9F, 77, 09, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetObjectW + C6 77EF845A 327 Bytes [ FF, FF, 66, 81, F9, 9C, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextCharsetInfo + 139 77EF85A2 7 Bytes [ 00, 83, 65, F8, 00, 56, 57 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextCharsetInfo + 141 77EF85AA 4 Bytes [ 75, 24, 48, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextCharsetInfo + 146 77EF85AF 10 Bytes [ 20, 48, FF, 75, 1C, 8B, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PatBlt + 2 77EF85BA 80 Bytes [ 75, 14, 8B, CF, D1, F9, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PatBlt + 53 77EF860B 36 Bytes CALL 77EAA101 C:\WINDOWS\system32\RPCRT4.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PatBlt + 79 77EF8631 97 Bytes [ 76, 08, 83, 6D, FC, 02, 4F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PatBlt + DB 77EF8693 85 Bytes [ EC, 8B, 45, 08, 8A, 48, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PatBlt + 132 77EF86EA 25 Bytes [ 00, 8A, 4E, 22, 53, 33, DB, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBrushOrgEx + 13 77EF871C 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBrushOrgEx + 15 77EF871E 2 Bytes [ A1, 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBrushOrgEx + 18 77EF8721 24 Bytes [ D7, 77, 0F, B7, 80, B8, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBrushOrgEx + 31 77EF873A 107 Bytes [ D7, 77, 33, C9, 3B, 82, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBrushOrgEx + 9D 77EF87A6 81 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RestoreDC + 19 77EF8A4F 16 Bytes CALL 77EA99A4 C:\WINDOWS\system32\RPCRT4.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RestoreDC + 2A 77EF8A60 43 Bytes CALL 77EA99A4 C:\WINDOWS\system32\RPCRT4.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RestoreDC + 56 77EF8A8C 106 Bytes [ FF, 55, 8B, EC, FF, 75, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RestoreDC + C1 77EF8AF7 8 Bytes [ 00, 33, D2, 89, 55, 08, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SaveDC + 4 77EF8B00 23 Bytes [ 08, 83, F9, FF, 74, 04, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SaveDC + 1C 77EF8B18 6 Bytes [ D7, 76, E4, 83, 7D, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SaveDC + 23 77EF8B1F 19 Bytes [ 74, 0C, 8B, 46, F8, 3B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SaveDC + 37 77EF8B33 43 Bytes [ 8B, F3, 81, E6, 00, F0, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SaveDC + 63 77EF8B5F 5 Bytes [ 57, E8, 7C, 01, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextAlign + 51 77EF8BEA 3 Bytes [ 84, DB, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextAlign + 56 77EF8BEF 47 Bytes [ 81, 7D, F8, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextAlign + 86 77EF8C1F 255 Bytes [ 00, 00, 66, 81, 78, 18, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWindowOrgEx 77EF8D22 1 Byte [ 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWindowOrgEx + 2 77EF8D24 16 Bytes [ 25, 3C, 10, D1, 77, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWindowOrgEx + 13 77EF8D35 17 Bytes [ 51, 52, 50, 68, 8C, DE, D6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWindowOrgEx + 25 77EF8D47 129 Bytes [ 90, 90, 90, 90, B8, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWindowOrgEx + A7 77EF8DC9 69 Bytes JMP 77EF8D33 C:\WINDOWS\system32\GDI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMapMode + 15 77EF8E0F 12 Bytes [ D7, 77, EB, D8, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMapMode + 22 77EF8E1C 62 Bytes [ D7, 77, 90, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMapMode + 61 77EF8E5B 14 Bytes [ D7, 77, 90, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMapMode + 74 77EF8E6E 56 Bytes [ FF, 25, 50, 00, D7, 77, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMapMode + B0 77EF8EAA 13 Bytes [ 00, 00, 01, 00, 00, 00, 40, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDIBitsToDevice + 38 77EF9074 57 Bytes [ 52, 65, 67, 51, 75, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDIBitsToDevice + 72 77EF90AE 32 Bytes [ 47, 65, 74, 54, 6F, 6B, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDIBitsToDevice + 93 77EF90CF 1 Byte [ 4D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDIBitsToDevice + 96 77EF90D2 18 Bytes [ 53, 65, 74, 41, 63, 74, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDIBitsToDevice + A9 77EF90E5 39 Bytes [ 2E, 00, 00, 52, 65, 61, 64, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBSection + B 77EF9254 103 Bytes CALL 60DF925E .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBSection + 73 77EF92BC 7 Bytes [ BE, EA, 05, 00, C8, EA, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBSection + 7B 77EF92C4 87 Bytes CALL 6DEF98B3 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBSection + D3 77EF931C 39 Bytes [ 6E, EC, 05, 00, 7A, EC, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBSection + FB 77EF9344 6 Bytes [ 14, ED, 05, 00, 1E, ED ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetBkColor + F 77EF93E4 7 Bytes [ AE, EF, 05, 00, C0, EF, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetBkColor + 17 77EF93EC 55 Bytes CALL 73EF99E0 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetBkColor + 4F 77EF9424 19 Bytes [ BA, F0, 05, 00, C6, F0, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextColor + F 77EF9438 7 Bytes [ 0C, F1, 05, 00, 1A, F1, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextColor + 17 77EF9440 55 Bytes [ 26, F1, 05, 00, 34, F1, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextColor + 4F 77EF9478 11 Bytes [ 0A, F2, 05, 00, 22, F2, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextColor + 5B 77EF9484 7 Bytes [ 46, F2, 05, 00, 5A, F2, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextColor + 63 77EF948C 23 Bytes [ 66, F2, 05, 00, 76, F2, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetLayout + 13 77EF94A4 7 Bytes [ D6, F2, 05, 00, F4, F2, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetLayout + 1B 77EF94AC 7 Bytes [ 06, F3, 05, 00, 16, F3, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetLayout + 23 77EF94B4 47 Bytes [ 30, F3, 05, 00, 4C, F3, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetLayout + 53 77EF94E4 20 Bytes [ 28, F4, 05, 00, 46, F4, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetLayout + 68 77EF94F9 6 Bytes [ F4, 05, 00, 90, F4, 05 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertAndCheckDC + F 77EF952C 3 Bytes [ 58, F5, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertAndCheckDC + 13 77EF9530 11 Bytes [ 76, F5, 05, 00, 82, F5, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertAndCheckDC + 1F 77EF953C 55 Bytes [ AA, F5, 05, 00, C0, F5, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExcludeClipRect + E 77EF9574 3 Bytes [ 9E, F6, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExcludeClipRect + 12 77EF9578 31 Bytes [ AE, F6, 05, 00, C4, F6, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExcludeClipRect + 32 77EF9598 11 Bytes [ 2C, F7, 05, 00, 44, F7, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExcludeClipRect + 3E 77EF95A4 7 Bytes [ 68, F7, 05, 00, 7A, F7, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExcludeClipRect + 46 77EF95AC 27 Bytes [ 8C, F7, 05, 00, 94, F7, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetStretchBltMode + 17 77EF95C8 7 Bytes [ 20, F8, 05, 00, 2A, F8, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetStretchBltMode + 1F 77EF95D0 7 Bytes [ 34, F8, 05, 00, 42, F8, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetStretchBltMode + 27 77EF95D8 63 Bytes [ 58, F8, 05, 00, 74, F8, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetStretchBltMode + 67 77EF9618 11 Bytes [ F4, F9, 05, 00, 10, FA, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetStretchBltMode + 73 77EF9624 63 Bytes [ 38, FA, 05, 00, 4C, FA, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAlphaBlend + 18 77EF9664 7 Bytes [ 88, FB, 05, 00, A0, FB, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAlphaBlend + 20 77EF966C 19 Bytes [ B8, FB, 05, 00, C2, FB, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAlphaBlend + 34 77EF9680 15 Bytes [ 04, FC, 05, 00, 20, FC, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAlphaBlend + 44 77EF9690 61 Bytes [ 5C, FC, 05, 00, 76, FC, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAlphaBlend + 82 77EF96CE 18 Bytes [ DC, 00, 45, 78, 74, 53, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontIndirectExW + 58 77EF98EF 17 Bytes [ 00, 5F, 02, 63, 47, 65, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontIndirectExW + 6A 77EF9901 51 Bytes [ 00, 9C, 01, 47, 65, 74, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontIndirectExW + 9E 77EF9935 92 Bytes [ 75, 65, 72, 79, 46, 6F, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontIndirectExW + FB 77EF9992 156 Bytes [ 55, 01, 47, 65, 74, 43, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMapMode + 15 77EF9A2F 17 Bytes [ 00, C2, 01, 47, 65, 74, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMapMode + 27 77EF9A41 53 Bytes [ 00, 1E, 01, 47, 64, 69, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMapMode + 5D 77EF9A77 100 Bytes [ 61, 72, 73, 65, 74, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextFaceW + 15 77EF9ADC 153 Bytes [ 00, 02, 52, 65, 73, 74, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextFaceW + AF 77EF9B76 52 Bytes [ 43, 72, 65, 61, 74, 65, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextFaceW + E4 77EF9BAB 15 Bytes [ 42, 69, 74, 73, 00, 8C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextFaceW + F5 77EF9BBC 77 Bytes [ 46, 01, 47, 64, 69, 56, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextFaceW + 143 77EF9C0A 41 Bytes [ 43, 72, 65, 61, 74, 65, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CombineRgn + 13 77EF9C34 122 Bytes [ 01, 01, 47, 64, 69, 43, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CombineRgn + 8E 77EF9CAF 44 Bytes [ 01, 47, 64, 69, 43, 6F, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CombineRgn + BB 77EF9CDC 98 Bytes [ B8, 01, 47, 65, 74, 54, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CombineRgn + 11E 77EF9D3F 24 Bytes [ 00, F6, 00, 47, 64, 69, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CombineRgn + 137 77EF9D58 93 Bytes [ 49, 02, 53, 74, 72, 65, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetRectRgn + 1E 77EF9DB6 117 Bytes [ 8D, 00, 44, 65, 6C, 65, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetRectRgn + 94 77EF9E2C 136 Bytes [ 15, 02, 53, 65, 74, 42, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetRectRgn + 11D 77EF9EB5 63 Bytes [ 00, 06, 01, 47, 64, 69, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetRectRgn + 15D 77EF9EF5 16 Bytes [ 00, 46, 02, 4C, 6F, 61, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetRectRgn + 16E 77EF9F06 54 Bytes [ E1, 00, 46, 69, 6E, 64, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetRgn + 1D 77EF9F3E 209 Bytes [ 89, 00, 44, 69, 73, 61, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetRgn + EF 77EFA010 18 Bytes [ 3D, 01, 47, 65, 74, 43, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetRgn + 102 77EFA023 80 Bytes [ 00, B7, 00, 45, 78, 69, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtCreateRegion + 44 77EFA074 38 Bytes [ EA, 00, 46, 6F, 6C, 64, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtCreateRegion + 6B 77EFA09B 74 Bytes [ 00, AF, 01, 47, 65, 74, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextCharset + 2D 77EFA0E6 15 Bytes [ 57, 02, 4D, 61, 70, 56, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextCharset + 3D 77EFA0F6 107 Bytes [ 51, 00, 43, 72, 65, 61, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextCharset + A9 77EFA162 21 Bytes [ 43, 6F, 70, 79, 46, 69, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextCharset + BF 77EFA178 30 Bytes [ 82, 00, 44, 65, 6C, 65, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextCharset + DF 77EFA198 41 Bytes [ 01, 00, 41, 64, 64, 41, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetNearestColor + 1C 77EFA1C2 163 Bytes [ 47, 65, 74, 41, 74, 6F, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!TranslateCharsetInfo + 1A 77EFA266 265 Bytes [ DA, 00, 46, 69, 6E, 64, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetBrushOrgEx + A3 77EFA370 250 Bytes [ 46, 69, 6E, 64, 41, 74, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetBrushOrgEx + 19E 77EFA46B 59 Bytes [ 00, 8A, 01, 47, 65, 74, 4F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetBrushOrgEx + 1DB 77EFA4A8 69 Bytes [ 13, 03, 53, 65, 74, 4C, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetBrushOrgEx + 221 77EFA4EE 31 Bytes [ F8, 01, 47, 6C, 6F, 62, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetBrushOrgEx + 241 77EFA50E 33 Bytes [ 97, 01, 47, 65, 74, 50, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDIBits + 8B 77EFA834 1 Byte [ F1 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDIBits + 8D 77EFA836 68 Bytes [ 4E, 74, 51, 75, 65, 72, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDIBits + D2 77EFA87B 109 Bytes [ 6E, 44, 65, 63, 6F, 64, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreatePatternBrush + 10 77EFA8EA 41 Bytes [ D2, 00, 4E, 74, 4F, 70, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreatePatternBrush + 3A 77EFA914 1 Byte [ ED ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreatePatternBrush + 3C 77EFA916 55 Bytes [ 4E, 74, 51, 75, 65, 72, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBitmap + 19 77EFA94E 137 Bytes [ 62, 00, 4E, 74, 43, 61, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBitmap + A3 77EFA9D8 26 Bytes [ 6C, 49, 6E, 69, 74, 69, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBitmap + BE 77EFA9F3 137 Bytes [ 00, FF, 00, 4E, 74, 51, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBitmap + 148 77EFAA7D 66 Bytes [ 00, 4E, 74, 43, 72, 65, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBitmap + 18B 77EFAAC0 26 Bytes [ 69, 6F, 6E, 41, 63, 74, 69, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDIBits + 3B 77EFAB26 60 Bytes [ 13, 05, 77, 63, 73, 63, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDIBits + 79 77EFAB64 12 Bytes [ D9, 01, 52, 74, 6C, 43, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDIBits + 86 77EFAB71 45 Bytes [ 69, 63, 6F, 64, 65, 53, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDIBits + B4 77EFAB9F 43 Bytes [ 00, C1, 00, 4E, 74, 4F, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDIBits + E0 77EFABCB 170 Bytes [ 00, 19, 05, 77, 63, 73, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDIBColorTable + 9 77EFAC76 77 Bytes [ 4B, 03, 52, 74, 6C, 55, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!MaskBlt + 2A 77EFACC4 23 Bytes [ D6, 02, 52, 74, 6C, 4F, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!MaskBlt + 42 77EFACDC 107 Bytes [ 4E, 74, 45, 6E, 75, 6D, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreatePen + 1A 77EFAD48 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreatePen + 1E 77EFAD4C 4 Bytes [ EC, 10, 25, 42 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreatePen + 24 77EFAD52 5 Bytes [ 00, 00, 02, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreatePen + 2A 77EFAD58 1 Byte [ 23 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreatePen + 2C 77EFAD5A 23 Bytes [ 00, 00, 84, FD, 05, 00, 84, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!MoveToEx + 10 77EFAE03 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!MoveToEx + 12 77EFAE05 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!MoveToEx + 15 77EFAE08 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!MoveToEx + 17 77EFAE0A 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!MoveToEx + 21 77EFAE14 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetCharDimensions + 10 77EFAEAA 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetCharDimensions + 13 77EFAEAD 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetCharDimensions + 15 77EFAEAF 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetCharDimensions + 1C 77EFAEB6 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetCharDimensions + 22 77EFAEBC 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontW + 99 77EFB063 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontW + 9E 77EFB068 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StretchDIBits + 16 77EFB085 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StretchDIBits + 18 77EFB087 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StretchDIBits + 1B 77EFB08A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StretchDIBits + 1D 77EFB08C 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StretchDIBits + 34 77EFB0A3 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreatePalette + 13 77EFB234 3 Bytes [ 14, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreatePalette + 17 77EFB238 19 Bytes [ E5, 86, D2, 77, B2, C9, D6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreatePalette + 2B 77EFB24C 11 Bytes [ 00, 00, 00, 00, 50, F4, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDCA + 7 77EFB258 15 Bytes [ 00, 00, 00, 00, 9A, D8, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDCA + 17 77EFB268 4 Bytes [ AF, 99, D1, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDCA + 1C 77EFB26D 41 Bytes [ 00, 00, 00, 55, 00, 53, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDCA + 47 77EFB298 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDCA + 4E 77EFB29F 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!QueryFontAssocStatus + 5 77EFB3CC 42 Bytes [ 83, DA, D6, 77, F1, AF, D6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!QueryFontAssocStatus + 30 77EFB3F7 60 Bytes [ 00, 02, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!QueryFontAssocStatus + 6F 77EFB436 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!QueryFontAssocStatus + 74 77EFB43B 15 Bytes [ 00, 01, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!QueryFontAssocStatus + 85 77EFB44C 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPixel + 11 77EFB482 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPixel + 17 77EFB488 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPixel + 19 77EFB48A 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPixel + 21 77EFB492 51 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPixel + 57 77EFB4C8 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPixel + 14 77EFB50B 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPixel + 16 77EFB50D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPixel + 19 77EFB510 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPixel + 1B 77EFB512 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPixel + 24 77EFB51B 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPixelV + F 77EFB5CF 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPixelV + 11 77EFB5D1 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPixelV + 14 77EFB5D4 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPixelV + 16 77EFB5D6 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPixelV + 1F 77EFB5DF 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ModifyWorldTransform + 10 77EFB836 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ModifyWorldTransform + 12 77EFB838 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ModifyWorldTransform + 15 77EFB83B 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ModifyWorldTransform + 17 77EFB83D 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ModifyWorldTransform + 21 77EFB847 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetGraphicsMode + 10 77EFB8CB 4 Bytes [ 00, 0B, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetGraphicsMode + 15 77EFB8D0 2 Bytes [ 0C, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetGraphicsMode + 18 77EFB8D3 5 Bytes [ 00, 09, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetGraphicsMode + 1F 77EFB8DA 5 Bytes [ 00, 00, 01, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetGraphicsMode + 25 77EFB8E0 27 Bytes [ 0D, 00, 00, 00, 02, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWorldTransform + 16 77EFB99C 10 Bytes [ 00, 00, FF, 00, 00, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetWorldTransform + 6 77EFB9A7 6 Bytes [ 00, FF, 00, 00, 00, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetWorldTransform + E 77EFB9AF 5 Bytes [ 00, FF, FF, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetWorldTransform + 15 77EFB9B6 3 Bytes [ FF, 00, 24 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetWorldTransform + 19 77EFB9BA 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetSpoolMessage + 5 77EFB9D0 1 Byte [ 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetSpoolMessage + 7 77EFB9D2 9 Bytes [ 00, 00, 02, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetSpoolMessage + 11 77EFB9DC 98 Bytes [ 77, 69, 6E, 64, 6F, 77, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetSpoolMessage + 75 77EFBA40 6 Bytes [ 54, 20, 00, 00, 02, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetSpoolMessage + 7C 77EFBA47 27 Bytes [ 84, 3D, 20, 00, 00, 54, 20, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPaletteEntries + 26 77EFBA98 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPaletteEntries + 28 77EFBA9A 9 Bytes [ 04, 04, 44, 20, 00, 00, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPaletteEntries + 32 77EFBAA4 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPaletteEntries + 34 77EFBAA6 40 Bytes [ 04, 84, 4C, 20, 00, 00, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPaletteEntries + 5D 77EFBACF 18 Bytes [ 00, 5B, 20, 00, 00, 0B, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StretchBlt + 1E 77EFBB10 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StretchBlt + 20 77EFBB12 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StretchBlt + 23 77EFBB15 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StretchBlt + 25 77EFBB17 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StretchBlt + 2B 77EFBB1D 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiTransparentBlt + 29 77EFBB97 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiTransparentBlt + 2B 77EFBB99 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiTransparentBlt + 30 77EFBB9E 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiTransparentBlt + 32 77EFBBA0 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiTransparentBlt + 40 77EFBBAE 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!TextOutA + 10 77EFBC1C 37 Bytes [ 50, 01, 00, 80, 03, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!TextOutA + 36 77EFBC42 63 Bytes [ 00, 00, F0, 03, 00, 80, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumFontFamiliesExW + 30 77EFBC82 55 Bytes [ 00, 00, 80, 05, 00, 80, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumFontFamiliesExW + 6A 77EFBCBC 10 Bytes [ 28, 06, 00, 80, 3E, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumFontFamiliesExW + 75 77EFBCC7 3 Bytes [ 80, 3F, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumFontFamiliesExW + 79 77EFBCCB 3 Bytes [ 00, 58, 06 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumFontFamiliesExW + 7D 77EFBCCF 7 Bytes [ 80, 40, 00, 00, 00, 70, 06 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDCW + 43 77EFBED4 22 Bytes [ 10, 0C, 00, 80, 27, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDCW + 5A 77EFBEEB 48 Bytes [ 00, 58, 0C, 00, 80, 2A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDCW + 8B 77EFBF1C 4 Bytes CALL A86FBF2D .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDCW + 90 77EFBF21 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDCW + 92 77EFBF23 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FrameRgn + 12 77EFBFF2 8 Bytes [ 00, 00, 00, 00, 00, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FrameRgn + 1C 77EFBFFC 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FrameRgn + 1E 77EFBFFE 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FrameRgn + 20 77EFC000 2 Bytes [ 01, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FrameRgn + 23 77EFC003 7 Bytes [ 00, E0, 0E, 00, 80, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateRoundRectRgn + 11 77EFC05F 2 Bytes [ 80, 6D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateRoundRectRgn + 14 77EFC062 7 Bytes [ 00, 00, D0, 0F, 00, 80, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateRoundRectRgn + 1C 77EFC06A 28 Bytes CALL E76FC07E .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetViewportOrgEx + 18 77EFC087 3 Bytes [ 80, 72, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetViewportOrgEx + 1D 77EFC08C 15 Bytes [ 48, 10, 00, 80, 73, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetViewportOrgEx + 2D 77EFC09C 10 Bytes [ 78, 10, 00, 80, 8C, 7F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetViewportOrgEx + 38 77EFC0A7 47 Bytes [ 80, 8D, 7F, 00, 00, A8, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetViewportOrgEx + 68 77EFC0D7 28 Bytes [ 80, 93, 7F, 00, 00, 38, 11, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetFontEnumeration + 11 77EFC146 7 Bytes [ 01, 00, 01, 00, 00, 00, 28 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetFontEnumeration + 19 77EFC14E 2 Bytes [ 00, 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetFontEnumeration + 1C 77EFC151 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetFontEnumeration + 22 77EFC157 6 Bytes [ 00, 04, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetFontEnumeration + 29 77EFC15E 3 Bytes [ 01, 00, 07 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGradientFill + 1C 77EFC194 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGradientFill + 1F 77EFC197 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGradientFill + 21 77EFC199 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGradientFill + 2D 77EFC1A5 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGradientFill + 33 77EFC1AB 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDCBrushColor + 12 77EFC26D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDCBrushColor + 15 77EFC270 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDCBrushColor + 17 77EFC272 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDCBrushColor + 24 77EFC27F 44 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDCBrushColor + 52 77EFC2AD 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtEscape + B 77EFC430 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtEscape + 1F 77EFC444 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtEscape + 22 77EFC447 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtEscape + 3A 77EFC45F 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtEscape + 43 77EFC468 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!cGetTTFFromFOT + 5 77EFCB77 101 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!cGetTTFFromFOT + 6B 77EFCBDD 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!cGetTTFFromFOT + 71 77EFCBE3 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!cGetTTFFromFOT + 89 77EFCBFB 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!cGetTTFFromFOT + 93 77EFCC05 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!bMakePathNameW + 15 77EFCC7E 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!bMakePathNameW + 19 77EFCC82 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!bMakePathNameW + 3C 77EFCCA5 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!bMakePathNameW + 4D 77EFCCB6 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!bMakePathNameW + 59 77EFCCC2 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!bInitSystemAndFontsDirectoriesW + B 77EFCD23 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!bInitSystemAndFontsDirectoriesW + 1B 77EFCD33 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!bInitSystemAndFontsDirectoriesW + 28 77EFCD40 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!bInitSystemAndFontsDirectoriesW + 2E 77EFCD46 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!bInitSystemAndFontsDirectoriesW + 42 77EFCD5A 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAddFontResourceW + 33 77EFCE9C 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAddFontResourceW + 3C 77EFCEA5 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAddFontResourceW + 5E 77EFCEC7 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAddFontResourceW + 63 77EFCECC 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAddFontResourceW + 71 77EFCEDA 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnableEUDC + 5 77EFD156 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnableEUDC + 7 77EFD158 7 Bytes [ 04, 00, 00, 00, 00, 00, 07 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnableEUDC + F 77EFD160 9 Bytes [ 24, 00, 00, 00, F0, 07, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiInitSpool + 5 77EFD16A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiInitSpool + 7 77EFD16C 14 Bytes [ 08, 08, 00, 80, EC, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiInitSpool + 16 77EFD17B 36 Bytes [ 00, 38, 08, 00, 80, 94, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBitmapAttributes + 12 77EFD1A0 9 Bytes [ 04, 00, 00, 00, 00, 00, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBitmapAttributes + 1D 77EFD1AB 14 Bytes [ 00, 98, 08, 00, 80, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBitmapAttributes + 2D 77EFD1BB 19 Bytes [ 00, C8, 08, 00, 80, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBitmapAttributes + 41 77EFD1CF 66 Bytes [ 80, 06, 00, 00, 00, 10, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ClearBitmapAttributes + 1D 77EFD213 16 Bytes [ 00, D0, 09, 00, 80, 0F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ClearBitmapAttributes + 2E 77EFD224 10 Bytes [ 00, 0A, 00, 80, 11, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ClearBitmapAttributes + 39 77EFD22F 151 Bytes [ 80, 12, 00, 00, 00, 30, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetBoundsRect + 1D 77EFD2C7 58 Bytes [ 80, 25, 00, 00, 00, F8, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertToDevmodeW + 14 77EFD302 4 Bytes [ 00, 00, A0, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertToDevmodeW + 19 77EFD307 12 Bytes [ 80, 2D, 00, 00, 00, B8, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertToDevmodeW + 26 77EFD314 21 Bytes [ D0, 0C, 00, 80, 2F, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertToDevmodeW + 3E 77EFD32C 131 Bytes [ 18, 0D, 00, 80, 32, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertToDevmodeW + C2 77EFD3B0 9 Bytes [ 01, 00, 00, 00, 20, 0E, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtTextOutA + 28 77EFD47A 20 Bytes [ 00, 00, 18, 10, 00, 80, 71, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextAlign + 10 77EFD48F 163 Bytes [ 80, 73, 00, 00, 00, 60, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!LPtoDP + D 77EFD533 3 Bytes [ 00, 10, 12 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!LPtoDP + 11 77EFD537 1 Byte [ 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!LPtoDP + 13 77EFD539 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!LPtoDP + 1A 77EFD540 2 Bytes [ 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!LPtoDP + 1E 77EFD544 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetRandomRgn + 12 77EFD689 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetRandomRgn + 15 77EFD68C 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetRandomRgn + 17 77EFD68E 18 Bytes [ 00, 00, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetRandomRgn + 2B 77EFD6A2 26 Bytes [ 00, 00, 00, 00, 00, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBitmapBits + 12 77EFD6BE 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBitmapBits + 14 77EFD6C0 7 Bytes [ 04, 00, 00, 00, 00, 00, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBitmapBits + 1C 77EFD6C8 6 Bytes [ 07, 04, 00, 00, 30, 13 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBitmapBits + 24 77EFD6D0 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetBitmapBits + 2C 77EFD6D8 10 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetRgnBox + D 77EFD81B 4 Bytes [ 00, 10, 14, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetRgnBox + 12 77EFD820 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetRgnBox + 1A 77EFD828 95 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetRgnBox + 7A 77EFD888 14 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UnrealizeObject + B 77EFD898 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UnrealizeObject + D 77EFD89A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UnrealizeObject + 10 77EFD89D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UnrealizeObject + 12 77EFD89F 5 Bytes [ 00, 04, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UnrealizeObject + 18 77EFD8A5 6 Bytes [ 00, 01, 00, 07, 04, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetROP2 + 10 77EFD936 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetROP2 + 12 77EFD938 2 Bytes [ 07, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetROP2 + 15 77EFD93B 10 Bytes [ 00, D0, 14, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetROP2 + 21 77EFD947 5 Bytes [ 00, 04, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetROP2 + 28 77EFD94E 13 Bytes [ 01, 00, 07, 04, 00, 00, E0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateBrushIndirect + 14 77EFD9D3 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateBrushIndirect + 19 77EFD9D8 15 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateBrushIndirect + 29 77EFD9E8 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!LineTo + F 77EFD9FC 3 Bytes [ 50, 15, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!LineTo + 14 77EFDA01 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!LineTo + 16 77EFDA03 7 Bytes [ 00, 00, 00, 00, 00, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!LineTo + 1F 77EFDA0C 3 Bytes [ 00, 00, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!LineTo + 23 77EFDA10 9 Bytes [ 07, 04, 00, 00, 60, 15, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDCOrgEx + 11 77EFDA56 4 Bytes [ 01, 00, 07, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDCOrgEx + 16 77EFDA5B 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDCOrgEx + 18 77EFDA5D 6 Bytes [ 15, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDCOrgEx + 20 77EFDA65 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDCOrgEx + 22 77EFDA67 27 Bytes [ 00, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetWindowOrgEx + 10 77EFDA84 7 Bytes [ 00, 00, 01, 00, 07, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetWindowOrgEx + 18 77EFDA8C 7 Bytes [ B0, 15, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetWindowOrgEx + 20 77EFDA94 50 Bytes [ 00, 00, 00, 00, 04, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetWindowOrgEx + 54 77EFDAC8 7 Bytes [ 04, 00, 00, 00, 00, 00, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetWindowOrgEx + 5C 77EFDAD0 7 Bytes [ 07, 04, 00, 00, E0, 15, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!InvertRgn + 10 77EFDCE4 9 Bytes [ 40, 17, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!InvertRgn + 1B 77EFDCEF 3 Bytes [ 00, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!InvertRgn + 20 77EFDCF4 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!InvertRgn + 22 77EFDCF6 11 Bytes [ 01, 00, 07, 04, 00, 00, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!InvertRgn + 30 77EFDD04 7 Bytes [ 00, 00, 00, 00, 04, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DPtoLP + D 77EFDDFE 8 Bytes [ 01, 00, 07, 04, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DPtoLP + 17 77EFDE08 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DPtoLP + 1A 77EFDE0B 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DPtoLP + 1C 77EFDE0D 7 Bytes [ 00, 00, 00, 04, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DPtoLP + 24 77EFDE15 47 Bytes [ 00, 01, 00, 07, 04, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextMetricsA + C 77EFE074 9 Bytes [ A0, 19, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextMetricsA + 17 77EFE07F 2 Bytes [ 00, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextMetricsA + 1A 77EFE082 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextMetricsA + 1C 77EFE084 3 Bytes [ 00, 00, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextMetricsA + 20 77EFE088 7 Bytes [ 07, 04, 00, 00, B0, 19, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FillRgn + 1C 77EFE15A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FillRgn + 1E 77EFE15C 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FillRgn + 20 77EFE15E 10 Bytes [ 01, 00, 07, 04, 00, 00, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FillRgn + 2B 77EFE169 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FillRgn + 31 77EFE16F 8 Bytes [ 00, 04, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Polyline + F 77EFE1B5 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Polyline + 11 77EFE1B7 2 Bytes [ 00, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Polyline + 14 77EFE1BA 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Polyline + 16 77EFE1BC 59 Bytes [ 00, 00, 01, 00, 07, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharABCWidthsW + 18 77EFE1FA 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharABCWidthsW + 1C 77EFE1FE 13 Bytes [ 00, 00, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharABCWidthsW + 2A 77EFE20C 31 Bytes [ B0, 1A, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharABCWidthsW + 4C 77EFE22E 3 Bytes [ 00, 00, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharABCWidthsW + 50 77EFE232 5 Bytes [ 00, 00, 00, 00, 01 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidthA + D 77EFE337 12 Bytes [ 00, E4, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidthA + 1A 77EFE344 19 Bytes [ EC, 02, 00, 00, E4, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidthA + 2E 77EFE358 15 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidthA + 3E 77EFE368 14 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidthA + 4D 77EFE377 3 Bytes [ 00, E4, 04 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentPointA + 1C 77EFE68C 18 Bytes [ 00, 00, 00, 00, 5C, DC, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentPointA + 30 77EFE6A0 71 Bytes [ 44, DF, 07, 00, 30, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentPointA + 78 77EFE6E8 5 Bytes [ E4, 04, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentPointA + 7E 77EFE6EE 14 Bytes [ 00, 00, 54, FE, 07, 00, A8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentPointA + 8E 77EFE6FE 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Polygon + F 77EFE7AD 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Polygon + 11 77EFE7AF 4 Bytes [ 00, AC, 9D, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Polygon + 16 77EFE7B4 6 Bytes [ 30, 00, 00, 00, E4, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Polygon + 1E 77EFE7BC 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Polygon + 20 77EFE7BE 5 Bytes [ 00, 00, DC, 9D, 08 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetOutlineTextMetricsW + 1D 77EFE8C8 3 Bytes [ E4, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetOutlineTextMetricsW + 21 77EFE8CC 19 Bytes [ 00, 00, 00, 00, 20, BF, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontIndirectA + A 77EFE8E0 26 Bytes [ 34, BF, 08, 00, 14, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontIndirectA + 27 77EFE8FD 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontIndirectA + 29 77EFE8FF 16 Bytes [ 00, 5C, BF, 08, 00, 14, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontIndirectA + 3A 77EFE910 23 Bytes [ 70, BF, 08, 00, 14, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontIndirectA + 52 77EFE928 39 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateICW + 23 77EFEA28 5 Bytes [ E4, 04, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateICW + 2A 77EFEA2F 22 Bytes [ 00, D8, C0, 08, 00, 14, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetSystemPaletteUse + 12 77EFEA46 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetSystemPaletteUse + 14 77EFEA48 7 Bytes [ E4, 04, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetSystemPaletteUse + 1C 77EFEA50 19 Bytes [ 00, C1, 08, 00, 14, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Ellipse + F 77EFEA64 1 Byte [ 14 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Ellipse + 11 77EFEA66 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Ellipse + 13 77EFEA68 2 Bytes [ E4, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Ellipse + 16 77EFEA6B 15 Bytes [ 00, 00, 00, 00, 00, 28, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Ellipse + 26 77EFEA7B 15 Bytes [ 00, 00, 00, 00, 00, A0, C1, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetICMMode + A 77EFEAFF 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetICMMode + 17 77EFEB0C 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetICMMode + 1A 77EFEB0F 13 Bytes [ 00, FF, FF, FF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetICMMode + 28 77EFEB1D 43 Bytes [ 00, 30, 00, 00, 00, 30, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetICMMode + 54 77EFEB49 6 Bytes [ 1F, C0, 00, 00, 1F, 80 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateICA + 2 77EFEBB9 11 Bytes [ C0, 3F, FF, FF, C0, 03, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateICA + E 77EFEBC5 2 Bytes [ C0, 0F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateICA + 11 77EFEBC8 30 Bytes [ FF, C0, 1F, FF, FF, C0, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateICA + 30 77EFEBE7 26 Bytes [ FF, FF, DF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry39 + B 77EFEC02 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry39 + 16 77EFEC0D 16 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry39 + 28 77EFEC1F 3 Bytes [ 00, 40, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry39 + 2C 77EFEC23 8 Bytes [ 00, 01, 00, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry53 + 4 77EFEC2C 2 Bytes [ 80, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry53 + 7 77EFEC2F 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry53 + F 77EFEC37 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry6 + 13 77EFEC4F 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry6 + 17 77EFEC53 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry46 + 5 77EFEC5D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry46 + 7 77EFEC5F 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry46 + F 77EFEC67 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Rectangle + F 77EFEC7B 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Rectangle + 11 77EFEC7D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Rectangle + 15 77EFEC81 9 Bytes [ DC, 00, 00, 00, 20, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Rectangle + 1F 77EFEC8B 3 Bytes [ 00, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Rectangle + 25 77EFEC91 7 Bytes [ 20, 00, 00, 00, 20, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RealizePalette + 2 77EFED0B 27 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RealizePalette + 1E 77EFED27 17 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextCharacterExtra + 2 77EFED39 30 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextCharacterExtra + 21 77EFED58 4 Bytes [ 01, 00, 01, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextCharacterExtra + 27 77EFED5E 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextCharacterExtra + 29 77EFED60 5 Bytes [ 80, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextCharacterExtra + 2F 77EFED66 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiSetLastError + 9 77EFEE8C 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiSetLastError + B 77EFEE8E 9 Bytes [ 01, 00, 00, 00, 00, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiSetLastError + 15 77EFEE98 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiSetLastError + 27 77EFEEAA 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiSetLastError + 29 77EFEEAC 4 Bytes [ FF, FF, FF, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetROP2 + 2 77EFEF6A 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetROP2 + E 77EFEF76 64 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetROP2 + 4F 77EFEFB7 15 Bytes [ 00, 20, 00, 00, 00, 40, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetROP2 + 60 77EFEFC8 6 Bytes [ 80, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetROP2 + 67 77EFEFCF 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidthW + 11 77EFF314 6 Bytes [ E0, 7F, FF, FF, E2, 3F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidthW + 18 77EFF31B 20 Bytes [ FF, E7, 1F, FF, FF, FF, 8F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidthW + 2D 77EFF330 17 Bytes [ FF, F8, 3F, FF, FF, F0, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidthW + 40 77EFF343 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidthW + 49 77EFF34C 65 Bytes [ 0A, 00, 0A, 00, 28, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetOutlineTextMetricsA + F 77EFF4B1 6 Bytes [ FF, FF, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetOutlineTextMetricsA + 18 77EFF4BA 52 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetOutlineTextMetricsA + 4E 77EFF4F0 6 Bytes [ 02, 02, 00, 00, 03, DE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetOutlineTextMetricsA + 55 77EFF4F7 28 Bytes [ 00, 00, 50, 00, 00, 00, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetOutlineTextMetricsA + 72 77EFF514 23 Bytes [ 00, 50, 00, 00, 00, 50, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DeleteEnhMetaFile + 2 77EFFA6D 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DeleteEnhMetaFile + B 77EFFA76 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DeleteEnhMetaFile + 12 77EFFA7D 12 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DeleteEnhMetaFile + 20 77EFFA8B 25 Bytes [ 00, 20, 00, 00, 00, 40, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DeleteEnhMetaFile + 3B 77EFFAA6 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTransform + 2 77EFFB40 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTransform + B 77EFFB49 10 Bytes [ FF, FF, 3F, FF, FF, FE, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTransform + 16 77EFFB54 11 Bytes [ FF, FF, F8, 0F, FF, FF, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTransform + 22 77EFFB60 72 Bytes [ FF, FF, C0, 0F, FF, FF, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTransform + 6C 77EFFBAA 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CombineTransform + 12 77EFFD46 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CombineTransform + 14 77EFFD48 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CombineTransform + 1C 77EFFD50 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileHeader + 9 77EFFD5E 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileHeader + B 77EFFD60 42 Bytes [ 00, 00, 00, 00, 07, FF, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileHeader + 36 77EFFD8B 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileHeader + 42 77EFFD97 121 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetVirtualResolution + 36 77EFFE11 32 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetVirtualResolution + 57 77EFFE32 24 Bytes [ 04, 00, 00, 00, 00, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetVirtualResolution + 71 77EFFE4C 7 Bytes [ 00, 00, 00, 00, 00, 00, 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetVirtualResolution + 79 77EFFE54 4 Bytes [ 00, 80, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetVirtualResolution + 7E 77EFFE59 13 Bytes [ 80, 80, 00, 80, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextJustification + 2 77EFFF46 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextJustification + D 77EFFF51 7 Bytes [ 0F, FF, FF, FF, F0, 00, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextJustification + 16 77EFFF5A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextJustification + 18 77EFFF5C 16 Bytes [ 00, 00, 00, 00, 00, 0F, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetTextJustification + 2A 77EFFF6E 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMetaRgn + 10 77EFFFE3 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMetaRgn + 12 77EFFFE5 10 Bytes [ 7A, AE, EB, B8, 8F, 88, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMetaRgn + 1E 77EFFFF1 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMetaRgn + 22 77EFFFF5 7 Bytes [ 7A, EE, BB, B8, 88, F8, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMetaRgn + 2A 77EFFFFD 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMetaFileW + D 77F0016D 15 Bytes [ FF, FF, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMetaFileW + 1D 77F0017D 2 Bytes [ 04, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMetaFileW + 20 77F00180 15 Bytes [ 00, 04, 20, 00, 00, 02, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMetaFileW + 30 77F00190 7 Bytes [ 00, FF, FF, 00, 00, 80, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMetaFileW + 38 77F00198 19 Bytes [ 00, 40, 02, 00, 00, 20, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumEnhMetaFile + F 77F001AC 4 Bytes [ 00, 02, 40, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumEnhMetaFile + 14 77F001B1 19 Bytes [ 01, 80, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileW + E 77F001C5 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileW + 16 77F001CD 22 Bytes [ FE, 7F, FF, FF, FC, 3F, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileW + 2D 77F001E4 9 Bytes [ FF, 80, 01, FF, FF, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileW + 37 77F001EE 29 Bytes [ 00, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileW + 55 77F0020C 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileDescriptionW + 2 77F00307 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileDescriptionW + 8 77F0030D 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileDescriptionW + B 77F00310 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileDescriptionW + E 77F00313 34 Bytes [ FF, FF, CF, F3, FF, FF, 8F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileDescriptionW + 31 77F00336 29 Bytes [ 10, 07, F0, 0C, 30, 0F, F8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPolyFillMode + 2 77F00A45 34 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPolyFillMode + 25 77F00A68 29 Bytes [ FC, 78, 1F, FF, FC, 38, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPolyFillMode + 43 77F00A86 38 Bytes [ FF, FF, FC, 00, 7F, FF, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPolyFillMode + 6A 77F00AAD 4 Bytes [ 00, 0F, 00, 28 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPolyFillMode + 6F 77F00AB2 3 Bytes [ 00, 00, 20 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMiterLimit + 12 77F00B19 3 Bytes [ 02, 40, C0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMiterLimit + 16 77F00B1D 7 Bytes [ 04, 21, 40, 00, 04, 22, 40 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMiterLimit + 1E 77F00B25 11 Bytes [ 02, 44, 40, 00, 01, 88, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMiterLimit + 2A 77F00B31 15 Bytes [ 00, 20, 40, 00, 00, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMiterLimit + 3A 77F00B41 1 Byte [ 02 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetArcDirection + 7 77F00C2C 53 Bytes [ 03, FF, C0, 00, 02, 00, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetArcDirection + 3F 77F00C64 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetArcDirection + 61 77F00C86 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetArcDirection + 63 77F00C88 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetArcDirection + 6B 77F00C90 6 Bytes [ 00, 00, 00, 00, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayEnhMetaFileRecord + 2 77F00C97 24 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayEnhMetaFileRecord + 1B 77F00CB0 7 Bytes [ FC, 00, 3F, FF, FC, 00, 7F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayEnhMetaFileRecord + 23 77F00CB8 2 Bytes [ FC, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayEnhMetaFileRecord + 26 77F00CBB 32 Bytes [ FF, FC, 01, FF, FF, FC, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayEnhMetaFileRecord + 47 77F00CDC 13 Bytes [ FF, FE, 7F, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtCreatePen + 26 77F0148E 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtCreatePen + 5A 77F014C2 10 Bytes [ 00, 00, 00, 00, 80, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtCreatePen + 65 77F014CD 18 Bytes [ 80, 80, 00, 80, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtCreatePen + 78 77F014E0 3 Bytes [ C0, C0, C0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtCreatePen + 7E 77F014E6 4 Bytes [ FF, 00, 00, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateEnhMetaFileW + 26 77F026C1 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateEnhMetaFileW + 32 77F026CD 156 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateEnhMetaFileW + CF 77F0276A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateEnhMetaFileW + D2 77F0276D 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateEnhMetaFileW + DE 77F02779 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPixelFormat + 12 77F028F7 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPixelFormat + 15 77F028FA 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPixelFormat + 1C 77F02901 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPixelFormat + 24 77F02909 33 Bytes [ 2A, 15, 01, 55, 2A, 15, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPixelFormat + 46 77F0292B 20 Bytes [ FF, BF, A4, 89, FF, C5, A8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CloseEnhMetaFile + 2 77F02D38 7 Bytes [ FF, DC, B9, FF, FF, DC, B9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CloseEnhMetaFile + A 77F02D40 3 Bytes [ FF, DB, B8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CloseEnhMetaFile + E 77F02D44 7 Bytes [ F9, D6, B4, FF, EA, C9, A8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CloseEnhMetaFile + 16 77F02D4C 96 Bytes [ DF, BF, 9F, FF, D2, B4, 96, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CloseEnhMetaFile + 77 77F02DAD 6 Bytes [ E2, C6, FF, FF, E2, C5 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiComment + 20 77F03111 14 Bytes [ E2, C4, FF, FC, DE, C0, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiComment + 2F 77F03120 136 Bytes [ D4, BA, A0, FF, CF, B5, 9D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiComment + B8 77F031A9 22 Bytes [ E5, CB, FF, FF, E5, CA, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiComment + CF 77F031C0 83 Bytes [ FF, E3, C7, FF, FF, E3, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiComment + 123 77F03214 12 Bytes [ FF, EB, D7, FF, FF, EB, D8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetArcDirection + 10 77F0350C 11 Bytes [ FD, EF, E2, FF, FF, F2, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPolyFillMode + 2 77F03518 11 Bytes [ FF, F0, E2, FF, FF, F0, E1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetPolyFillMode + E 77F03524 96 Bytes [ FF, F0, E0, FF, FF, EF, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiIsMetaPrintDC + 1C 77F03585 6 Bytes JMP 61F0355D .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiIsMetaPrintDC + 23 77F0358C 31 Bytes JMP 60F03563 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiIsMetaPrintDC + 44 77F035AD 42 Bytes [ 2A, 15, E6, 55, 2A, 15, A9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiIsMetaPrintDC + 6F 77F035D8 32 Bytes [ FF, F2, E5, FF, FF, F2, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiIsMetaPrintDC + 90 77F035F9 54 Bytes [ EF, E0, FF, FF, EF, DF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMiterLimit + 18 77F036D0 15 Bytes [ 98, 32, 00, FF, 98, 32, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMiterLimit + 28 77F036E0 39 Bytes [ B9, 89, 6D, FF, FF, ED, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMiterLimit + 51 77F03709 10 Bytes [ EB, D7, FF, FF, EA, D7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMiterLimit + 5C 77F03714 47 Bytes [ FF, F2, DD, FF, FF, F2, DE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMiterLimit + 8C 77F03744 7 Bytes [ E1, D9, D0, FF, ED, E4, DB ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateEnhMetaFileA + 24 77F03C50 33 Bytes [ F4, EA, DF, FF, EE, E4, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateEnhMetaFileA + 46 77F03C72 45 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateEnhMetaFileA + 75 77F03CA1 15 Bytes [ FE, FA, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateEnhMetaFileA + 85 77F03CB1 3 Bytes [ FD, F8, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateEnhMetaFileA + 89 77F03CB5 33 Bytes [ FB, F7, FF, FF, FB, F6, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayMetaFileRecord + 14 77F03E60 3 Bytes [ EB, E0, D8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayMetaFileRecord + 18 77F03E64 8 Bytes [ FF, FF, FC, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayMetaFileRecord + 24 77F03E70 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayMetaFileRecord + 30 77F03E7C 52 Bytes [ FE, F9, F2, FF, FA, F3, ED, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayMetaFileRecord + 66 77F03EB2 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumMetaFile + 15 77F056D4 9 Bytes [ FF, F4, DF, FF, FF, EC, D6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumMetaFile + 1F 77F056DE 12 Bytes [ D6, FF, FF, FF, F3, FF, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumMetaFile + 2C 77F056EB 12 Bytes [ FF, A5, 57, 36, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumMetaFile + 39 77F056F8 7 Bytes [ FF, E5, CA, FF, FF, EA, CF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumMetaFile + 41 77F05700 19 Bytes [ FF, EB, D1, FF, E4, CA, AF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayMetaFile + 2 77F05965 4 Bytes [ 00, 00, 00, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayMetaFile + 7 77F0596A 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayMetaFile + A 77F0596D 75 Bytes [ FF, 00, 00, FF, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayMetaFile + 56 77F059B9 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayMetaFile + 59 77F059BC 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBPatternBrush + 69 77F06A4C 17 Bytes [ FF, FF, FF, FF, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyEnhMetaFileA + 2 77F06A5E 7 Bytes [ FF, FF, FF, FF, 00, 00, 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyEnhMetaFileA + B 77F06A67 22 Bytes [ 00, 00, 01, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyEnhMetaFileA + 22 77F06A7E 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyEnhMetaFileA + 24 77F06A80 3 Bytes [ 00, 01, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyEnhMetaFileA + 2A 77F06A86 12 Bytes [ 00, 00, 00, 01, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyEnhMetaFileW + C 77F06AA4 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyEnhMetaFileW + E 77F06AA6 17 Bytes [ 00, 00, 00, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyEnhMetaFileW + 20 77F06AB8 11 Bytes [ 00, 01, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyEnhMetaFileW + 2C 77F06AC4 28 Bytes [ 00, 00, 00, 00, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyEnhMetaFileW + 49 77F06AE1 6 Bytes [ 01, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumObjects + 17 77F06BE8 19 Bytes [ 00, 00, 00, 00, 7E, 72, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumObjects + 2B 77F06BFC 7 Bytes [ A1, 4D, 22, 00, A0, 4D, 22 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumObjects + 33 77F06C04 11 Bytes [ A4, 4F, 24, 00, A6, 53, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumObjects + 3F 77F06C10 65 Bytes [ 78, 48, 30, 00, 7E, 4C, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumObjects + 81 77F06C52 13 Bytes [ 2E, 00, 5A, 53, 4F, 00, B3, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWindowExtEx + 14 77F06CA8 3 Bytes [ 9C, 66, 3E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWindowExtEx + 18 77F06CAC 26 Bytes [ CE, 97, 6E, 00, C9, 97, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWindowExtEx + 33 77F06CC7 20 Bytes [ 00, C6, 73, 2D, 00, C3, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWindowExtEx + 48 77F06CDC 31 Bytes [ C0, 8B, 5F, 00, D5, 9B, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWindowExtEx + 68 77F06CFC 11 Bytes [ CB, 77, 2A, 00, C9, 76, 2C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetViewportExtEx + 13 77F06D50 3 Bytes [ CB, 6B, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetViewportExtEx + 17 77F06D54 31 Bytes [ D1, 71, 05, 00, D4, 7D, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetViewportExtEx + 37 77F06D74 67 Bytes [ D5, 8B, 3B, 00, E5, 97, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetViewportExtEx + 7B 77F06DB8 27 Bytes [ D9, 7B, 0D, 00, D5, 7A, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetViewportExtEx + 97 77F06DD4 3 Bytes [ DC, 81, 17 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMetaFileBitsEx + A3 77F0736F 143 Bytes [ BA, BA, BA, BA, BA, BA, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileBits + 51 77F073FF 51 Bytes [ 00, 80, 00, 00, 00, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileBits + 86 77F07434 1 Byte [ 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileBits + 88 77F07436 4 Bytes [ 00, 00, 80, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileBits + 8E 77F0743C 32 Bytes [ 80, 00, 00, 00, 80, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPrinterThunk + 15 77F0745D 30 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPrinterThunk + 35 77F0747D 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPrinterThunk + 40 77F07488 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPrinterThunk + 49 77F07491 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPrinterThunk + 4F 77F07497 8 Bytes [ 00, 7C, 57, 52, 00, FA, F5, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngMultiByteToWideChar + 16 77F0768C 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngMultiByteToWideChar + 23 77F07699 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngMultiByteToWideChar + 44 77F076BA 77 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngMultiByteToWideChar + 93 77F07709 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngCreatePalette + 5 77F0771D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngCreatePalette + 7 77F0771F 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngCreatePalette + F 77F07727 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngGetCurrentCodePage + 21 77F0774D 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngGetCurrentCodePage + 2D 77F07759 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngGetCurrentCodePage + 3F 77F0776B 60 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngGetCurrentCodePage + 7C 77F077A8 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngGetCurrentCodePage + 7E 77F077AA 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngDeletePalette + B 77F08136 11 Bytes [ FF, FF, F9, FF, FF, FF, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngDeletePalette + 18 77F08143 4 Bytes [ FF, F9, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngDeletePalette + 1D 77F08148 17 Bytes [ F9, FF, FF, FF, F9, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngDeletePalette + 30 77F0815B 6 Bytes [ FF, F9, FF, FF, FF, F9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngDeletePalette + 37 77F08162 7 Bytes [ FF, FF, F9, FF, FF, FF, F9 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceA + 2 77F08B7E 7 Bytes [ FF, FF, F9, FF, FF, FF, F9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceA + A 77F08B86 29 Bytes [ FF, FF, F9, FF, FF, FF, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceExA + E 77F08BA4 17 Bytes [ F9, FF, FF, FF, F9, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceExA + 20 77F08BB6 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceExA + 22 77F08BB8 5 Bytes [ F9, FF, FF, FF, F9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceExA + 28 77F08BBE 4 Bytes [ FF, FF, F9, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceExA + 2E 77F08BC4 5 Bytes [ F9, FF, FF, FF, F9 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceExW + 2 77F08C8B 14 Bytes [ FF, F9, FF, FF, FF, F9, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceExW + 12 77F08C9B 39 Bytes [ FF, F9, FF, FF, FF, F9, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceExW + 3B 77F08CC4 11 Bytes [ FD, FF, FF, FF, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceExW + 47 77F08CD0 2 Bytes [ F9, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceExW + 4A 77F08CD3 2 Bytes [ FF, F9 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumFontFamiliesA + 10 77F08D80 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumFontFamiliesA + 13 77F08D83 31 Bytes [ FF, FF, FF, FF, FF, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumFontFamiliesA + 33 77F08DA3 2 Bytes [ FF, F9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumFontFamiliesA + 36 77F08DA6 25 Bytes [ FF, FF, F9, FF, FF, FF, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumFontFamiliesA + 50 77F08DC0 23 Bytes [ F9, FF, FF, FF, F9, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AddFontResourceA + 2 77F08E1F 7 Bytes [ FF, F9, FF, FF, FF, F9, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AddFontResourceA + A 77F08E27 19 Bytes [ FF, FE, FF, FF, FF, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AddFontResourceExA + 4 77F08E3B 9 Bytes [ 18, C4, 67, 10, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AddFontResourceExA + F 77F08E46 15 Bytes [ FF, FF, FF, FF, FF, FF, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AddFontResourceExA + 20 77F08E57 6 Bytes [ FF, F9, FF, FF, FF, F9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AddFontResourceExA + 28 77F08E5F 4 Bytes [ FF, F9, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AddFontResourceExA + 2D 77F08E64 5 Bytes [ F9, FF, FF, FF, F9 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ResetDCW + 7 77F0B3E4 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ResetDCW + 16 77F0B3F3 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ResetDCW + 36 77F0B413 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ResetDCW + 38 77F0B415 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ResetDCW + 3B 77F0B418 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry16 + 5 77F0B684 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry16 + 7 77F0B686 7 Bytes [ 7A, 00, 65, 00, 69, 00, 63 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry16 + F 77F0B68E 23 Bytes [ 68, 00, 65, 00, 6E, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry1 + 13 77F0B6A6 6 Bytes [ 6E, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry1 + 1C 77F0B6AF 11 Bytes [ 00, 00, 00, 00, 00, 03, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry1 + 29 77F0B6BC 19 Bytes [ 00, 00, 4C, 00, 52, 00, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry15 + 4 77F0B6D0 25 Bytes [ 68, 00, 65, 00, 6E, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry2 + A 77F0B6EA 19 Bytes [ 73, 00, 2D, 00, 6E, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry2 + 1E 77F0B6FE 52 Bytes [ 68, 00, 74, 00, 73, 00, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry2 + 53 77F0B733 6 Bytes [ 00, 00, 00, 52, 00, 4C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry2 + 5A 77F0B73A 51 Bytes [ 4D, 00, 20, 00, 09, 00, 5A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry2 + 8E 77F0B76E 7 Bytes [ 68, 00, 2D, 00, 6C, 00, 69 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry41 + 5 77F0BA60 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry41 + 7 77F0BA62 7 Bytes [ 72, 00, 68, 00, 65, 00, 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry41 + F 77F0BA6A 17 Bytes [ 73, 00, 74, 00, 65, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry10 + E 77F0BA7D 6 Bytes [ 00, 00, 00, 03, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry10 + 15 77F0BA84 7 Bytes [ 0B, 80, 00, 00, 00, 00, 4E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry10 + 1D 77F0BA8C 1 Byte [ 41 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry10 + 1F 77F0BA8E 3 Bytes [ 44, 00, 53 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry10 + 23 77F0BA92 9 Bytes [ 09, 00, 45, 00, 72, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry43 + 5 77F0BA9C 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry43 + 7 77F0BA9E 7 Bytes [ 7A, 00, 75, 00, 6E, 00, 67 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry43 + F 77F0BAA6 29 Bytes [ 20, 00, 76, 00, 6F, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyMetaFileW + 9 77F0BAC4 21 Bytes [ 6E, 00, 20, 00, 5A, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyMetaFileW + 1F 77F0BADA 27 Bytes [ 72, 00, 6D, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyMetaFileW + 3B 77F0BAF6 11 Bytes [ 44, 00, 53, 00, 09, 00, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyMetaFileW + 47 77F0BB02 5 Bytes [ 69, 00, 6E, 00, 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyMetaFileW + 4D 77F0BB08 43 Bytes [ 6C, 00, 65, 00, 20, 00, 28, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CloseMetaFile + 8 77F0BB7D 28 Bytes [ 00, 70, 00, 69, 00, 65, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CloseMetaFile + 25 77F0BB9A 1 Byte [ 76 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CloseMetaFile + 27 77F0BB9C 1 Byte [ 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CloseMetaFile + 29 77F0BB9E 7 Bytes [ 65, 00, 72, 00, 65, 00, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CloseMetaFile + 32 77F0BBA7 6 Bytes [ 00, 00, 00, 00, 00, 03 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateMetaFileW + C 77F0BD48 19 Bytes [ 53, 00, 20, 00, 20, 00, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateMetaFileW + 20 77F0BD5C 13 Bytes [ 74, 00, 65, 00, 6E, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateMetaFileW + 2E 77F0BD6A 5 Bytes [ 6E, 00, 7A, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateMetaFileW + 34 77F0BD70 62 Bytes [ 69, 00, 63, 00, 68, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateMetaFileW + 74 77F0BDB0 13 Bytes [ 90, 00, 00, 00, 80, 00, 08, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyMetaFileA + A 77F0BF50 22 Bytes [ 26, 00, 78, 00, 69, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyMetaFileA + 22 77F0BF68 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CopyMetaFileA + 24 77F0BF6A 79 Bytes [ 00, 00, 60, F0, 26, 00, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentPoint32A + 7 77F0BFBA 20 Bytes [ 2B, 00, 46, 00, 36, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentPoint32A + 1C 77F0BFCF 79 Bytes [ 00, 90, 00, 20, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentPoint32A + 6D 77F0C020 23 Bytes [ 90, 00, 00, 00, 00, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentPoint32A + 85 77F0C038 27 Bytes [ 20, 00, 68, 00, 69, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextFaceAliasW + 9 77F0C054 5 Bytes [ 6B, 00, 65, 00, 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextFaceAliasW + F 77F0C05A 5 Bytes [ 20, 00, 52, 00, 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextFaceAliasW + 15 77F0C060 19 Bytes [ 6E, 00, 64, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextFaceAliasW + 29 77F0C074 13 Bytes [ 65, 00, 72, 00, 20, 00, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDIBColorTable + 9 77F0C082 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDIBColorTable + F 77F0C088 81 Bytes [ 00, 00, 00, 00, 02, 10, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextCharacterExtra + 10 77F0C0DA 3 Bytes [ 75, 00, 66 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextCharacterExtra + 14 77F0C0DE 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextCharacterExtra + 16 77F0C0E0 1 Byte [ 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextCharacterExtra + 18 77F0C0E2 1 Byte [ 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextCharacterExtra + 1A 77F0C0E4 51 Bytes [ 6E, 00, 6B, 00, 73, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetLayoutWidth + D 77F0C130 5 Bytes [ 6C, 00, 61, 00, 75 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetLayoutWidth + 13 77F0C136 1 Byte [ 66 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetLayoutWidth + 15 77F0C138 12 Bytes [ 20, 00, 68, 00, 69, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetLayoutWidth + 23 77F0C146 9 Bytes [ 00, 00, 00, 00, 00, 00, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetLayoutWidth + 2D 77F0C150 37 Bytes [ 62, 00, 65, 00, 72, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontData + 17 77F0C1B2 1 Byte [ 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontData + 19 77F0C1B4 7 Bytes [ 74, 00, 65, 00, 6E, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontData + 21 77F0C1BC 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontData + 2A 77F0C1C5 22 Bytes [ 10, 42, 00, 69, 00, 6C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetRasterizerCaps + 11 77F0C1DC 32 Bytes [ 65, 00, 6E, 00, 00, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextFaceA + 11 77F0C1FD 8 Bytes [ 00, 65, 00, 6E, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextFaceA + 1B 77F0C207 22 Bytes [ 00, 00, 00, 00, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextFaceA + 32 77F0C21E 23 Bytes [ 14, 00, 14, 00, DC, 00, 8C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextFaceA + 4A 77F0C236 31 Bytes [ 72, 00, 20, 00, 61, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextFaceA + 6A 77F0C256 47 Bytes [ 53, 00, 20, 00, 53, 00, 68, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RectInRegion + 11 77F0C45F 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RectInRegion + 16 77F0C464 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RectInRegion + 18 77F0C466 7 Bytes [ 00, 00, 00, 00, 00, 00, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RectInRegion + 20 77F0C46E 57 Bytes [ 49, 00, 4D, 00, 45, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RectInRegion + 5A 77F0C4A8 9 Bytes [ 64, 00, 73, 00, 63, 00, 68, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry3 + E 77F0C53E 9 Bytes [ 74, 00, 65, 00, 72, 00, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry3 + 18 77F0C548 3 Bytes [ 68, 00, 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry3 + 1C 77F0C54C 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry3 + 1E 77F0C54E 3 Bytes [ 6E, 00, 0B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry3 + 22 77F0C552 9 Bytes [ 41, 00, 75, 00, 73, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry20 + 5 77F0C55C 1 Byte [ 68 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry20 + 7 77F0C55E 7 Bytes [ 61, 00, 6C, 00, 74, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry20 + F 77F0C566 31 Bytes [ 6E, 00, 08, 00, 4E, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry20 + 2F 77F0C586 7 Bytes [ 61, 00, 6E, 00, 6E, 00, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry20 + 37 77F0C58E 5 Bytes [ 07, 00, 57, 00, 69 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry23 + 5 77F0C5A4 1 Byte [ 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry23 + 7 77F0C5A6 7 Bytes [ 6E, 00, 20, 00, 53, 00, 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry23 + F 77F0C5AE 31 Bytes [ 65, 00, 20, 00, 64, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry23 + 2F 77F0C5CE 1 Byte [ 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry23 + 31 77F0C5D0 39 Bytes [ 6D, 00, 70, 00, 75, 00, 74, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayEnhMetaFile + F 77F0C98A 33 Bytes [ 67, 00, 65, 00, 6D, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayEnhMetaFile + 31 77F0C9AC 19 Bytes [ 75, 00, 6E, 00, 74, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayEnhMetaFile + 45 77F0C9C0 11 Bytes [ 6E, 00, 20, 00, 76, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlayEnhMetaFile + 51 77F0C9CC 9 Bytes [ 57, 00, 69, 00, 6E, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!BRUSHOBJ_ulGetBrushColor + 5 77F0C9D6 1 Byte [ 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!BRUSHOBJ_ulGetBrushColor + 7 77F0C9D8 7 Bytes [ 73, 00, 20, 00, 6B, 00, 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!BRUSHOBJ_ulGetBrushColor + F 77F0C9E0 9 Bytes [ 6E, 00, 6E, 00, 20, 00, 7A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!XFORMOBJ_iGetXform + 5 77F0C9EA 1 Byte [ 6D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!XFORMOBJ_iGetXform + 7 77F0C9EC 7 Bytes [ 20, 00, 44, 00, 61, 00, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!XFORMOBJ_iGetXform + F 77F0C9F4 9 Bytes [ 65, 00, 6E, 00, 76, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FONTOBJ_pxoGetXform + 5 77F0C9FE 1 Byte [ 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FONTOBJ_pxoGetXform + 7 77F0CA00 7 Bytes [ 75, 00, 73, 00, 74, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FONTOBJ_pxoGetXform + F 77F0CA08 9 Bytes [ 66, 00, FC, 00, 68, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FONTOBJ_pifi + 5 77F0CA12 1 Byte [ 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FONTOBJ_pifi + 7 77F0CA14 7 Bytes [ 2E, 00, 0D, 00, 0A, 00, 0D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FONTOBJ_pifi + F 77F0CA1C 27 Bytes [ 0A, 00, 4D, 00, F6, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FONTOBJ_pifi + 2B 77F0CA38 19 Bytes [ 65, 00, 6E, 00, 20, 00, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FONTOBJ_pifi + 3F 77F0CA4C 11 Bytes [ 20, 00, 66, 00, 6F, 00, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngUnlockSurface + 4 77F0CA9C 25 Bytes [ 74, 00, 20, 00, 61, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngUnlockSurface + 1E 77F0CAB6 7 Bytes [ 6F, 00, 6D, 00, 70, 00, 75 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngUnlockSurface + 26 77F0CABE 15 Bytes [ 74, 00, 65, 00, 72, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngUnlockSurface + 36 77F0CACE 13 Bytes [ 6D, 00, 65, 00, 6C, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngUnlockSurface + 44 77F0CADC 1 Byte [ 20 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetColorSpace + E 77F0CD10 1 Byte [ 21 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetColorSpace + 10 77F0CD12 1 Byte [ 48 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetColorSpace + 12 77F0CD14 7 Bytes [ 61, 00, 72, 00, 64, 00, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetColorSpace + 1A 77F0CD1C 1 Byte [ 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetColorSpace + 1C 77F0CD1E 15 Bytes [ 72, 00, 65, 00, 3A, 00, 20, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SelectClipPath + D 77F0CEA0 5 Bytes [ 74, 00, 75, 00, 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SelectClipPath + 13 77F0CEA6 1 Byte [ 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SelectClipPath + 15 77F0CEA8 3 Bytes [ 69, 00, 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SelectClipPath + 19 77F0CEAC 17 Bytes [ 69, 00, 65, 00, 72, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SelectClipPath + 2B 77F0CEBE 9 Bytes [ 65, 00, 70, 00, 6C, 00, 61, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetClipRgn + D 77F0CFE2 5 Bytes [ 69, 00, 6C, 00, 22 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetClipRgn + 13 77F0CFE8 1 Byte [ 41 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetClipRgn + 15 77F0CFEA 3 Bytes [ 6E, 00, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetClipRgn + 19 77F0CFEE 7 Bytes [ 65, 00, 6E, 00, 64, 00, 75 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!OffsetClipRgn + 21 77F0CFF6 13 Bytes [ 6E, 00, 67, 00, 3A, 00, 20, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngBitBlt + 4 77F0D18C 57 Bytes [ 6D, 00, 20, 00, 72, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngBitBlt + 3E 77F0D1C6 3 Bytes [ 6E, 00, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngBitBlt + 42 77F0D1CA 5 Bytes [ 74, 00, 1C, 00, 41 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngBitBlt + 48 77F0D1D0 125 Bytes [ 6E, 00, 77, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngBitBlt + C6 77F0D24E 9 Bytes [ 65, 00, 66, 00, 75, 00, 6E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngStretchBlt + 4 77F0D360 35 Bytes [ 72, 00, 65, 00, 6E, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngStretchBlt + 28 77F0D384 3 Bytes [ FC, 00, 68 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngStretchBlt + 2C 77F0D388 7 Bytes [ 72, 00, 74, 00, 2C, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngStretchBlt + 34 77F0D390 11 Bytes [ 75, 00, 6D, 00, 20, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngStretchBlt + 40 77F0D39C 1 Byte [ 20 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!BeginPath + E 77F0D6B2 1 Byte [ 48 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!BeginPath + 10 77F0D6B4 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!BeginPath + 12 77F0D6B6 7 Bytes [ 72, 00, 75, 00, 6E, 00, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!BeginPath + 1A 77F0D6BE 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!BeginPath + 1C 77F0D6C0 15 Bytes [ 72, 00, 66, 00, 61, 00, 68, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EndPath + E 77F0D732 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EndPath + 10 77F0D734 1 Byte [ 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EndPath + 12 77F0D736 7 Bytes [ 62, 00, 69, 00, 6C, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EndPath + 1A 77F0D73E 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EndPath + 1C 77F0D740 15 Bytes [ 20, 00, 41, 00, 6E, 00, 77, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetPageHandle + 20 77F0DABA 21 Bytes [ 65, 00, 3A, 00, 20, 00, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetPageHandle + 36 77F0DAD0 3 Bytes [ 61, 00, 70 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetPageHandle + 3A 77F0DAD4 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetPageHandle + 3C 77F0DAD6 61 Bytes [ 69, 00, 6F, 00, 6E, 00, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetPageHandle + 7A 77F0DB14 7 Bytes [ 75, 00, 6C, 00, 65, 00, 4E ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEndPageEMF + 25 77F0DB6E 13 Bytes [ 74, 00, 75, 00, 72, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEndPageEMF + 33 77F0DB7C 7 Bytes [ 72, 00, 3A, 00, 20, 00, 25 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEndPageEMF + 3B 77F0DB84 6 Bytes [ 38, 00, 0D, 00, 0A, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEndPageEMF + 43 77F0DB8C 7 Bytes [ 7C, 00, 01, 00, 44, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEndPageEMF + 4B 77F0DB94 7 Bytes [ 72, 00, 20, 00, 56, 00, 65 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngDeleteSurface + 5 77F0DDBA 1 Byte [ 4E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngDeleteSurface + 7 77F0DDBC 7 Bytes [ 65, 00, 62, 00, 65, 00, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngDeleteSurface + F 77F0DDC4 17 Bytes [ 73, 00, E4, 00, 63, 00, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EndPage + D 77F0DDD6 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EndPage + F 77F0DDD8 3 Bytes [ 20, 00, 47 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EndPage + 13 77F0DDDC 17 Bytes [ 72, 00, 75, 00, 6E, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EndPage + 25 77F0DDEE 2 Bytes [ 0A, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EndPage + 28 77F0DDF1 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEndDocEMF + 2F 77F0E012 1 Byte [ 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEndDocEMF + 31 77F0E014 3 Bytes [ 01, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEndDocEMF + 35 77F0E018 1 Byte [ 40 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEndDocEMF + 37 77F0E01A 29 Bytes [ 01, 00, 01, 00, 34, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEndDocEMF + 55 77F0E038 43 Bytes [ 00, 00, 02, 00, 01, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EndDoc + 13 77F0E064 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EndDoc + 15 77F0E066 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EndDoc + 17 77F0E068 8 Bytes [ 40, 00, 01, 00, 01, 00, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EndDoc + 21 77F0E072 2 Bytes [ 46, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EndDoc + 25 77F0E076 1 Byte [ 02 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CancelDC + 10 77F0E1A4 1 Byte [ 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CancelDC + 12 77F0E1A6 13 Bytes [ 20, 20, 10, 00, 01, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CancelDC + 20 77F0E1B4 3 Bytes [ 20, 20, 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CancelDC + 24 77F0E1B8 7 Bytes [ 01, 00, 01, 00, 30, 01, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CancelDC + 2C 77F0E1C0 13 Bytes [ 0A, 00, 10, 10, 10, 00, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiDeleteSpoolFileHandle + 1F 77F0E202 21 Bytes [ A8, 25, 00, 00, 0F, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiDeleteSpoolFileHandle + 35 77F0E218 5 Bytes [ 00, 00, 01, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiDeleteSpoolFileHandle + 3B 77F0E21E 57 Bytes [ 68, 04, 00, 00, 11, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiDeleteSpoolFileHandle + 75 77F0E258 48 Bytes [ 01, 00, 08, 00, A8, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiDeleteSpoolFileHandle + A6 77F0E289 20 Bytes [ 00, 18, 00, 10, 10, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngTextOut + 5 77F0E4AC 1 Byte [ 34 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngTextOut + 7 77F0E4AE 7 Bytes [ 42, 00, 30, 00, 00, 00, 4C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngTextOut + F 77F0E4B6 1 Byte [ 16 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngTextOut + 11 77F0E4B8 7 Bytes [ 01, 00, 43, 00, 6F, 00, 6D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngTextOut + 19 77F0E4C0 13 Bytes [ 70, 00, 61, 00, 6E, 00, 79, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngStrokePath + 5 77F0E56A 1 Byte [ 49 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngStrokePath + 7 77F0E56C 7 Bytes [ 00, 00, 00, 00, 74, 00, 29 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngStrokePath + F 77F0E574 9 Bytes [ 01, 00, 46, 00, 69, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngStrokeAndFillPath + 5 77F0E57E 1 Byte [ 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngStrokeAndFillPath + 7 77F0E580 7 Bytes [ 65, 00, 72, 00, 73, 00, 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngStrokeAndFillPath + F 77F0E588 17 Bytes [ 6F, 00, 6E, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngStrokeAndFillPath + 21 77F0E59A 35 Bytes [ 36, 00, 30, 00, 30, 00, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngStrokeAndFillPath + 45 77F0E5BE 13 Bytes [ 5F, 00, 67, 00, 64, 00, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyBezierTo + F 77F0E866 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyBezierTo + 11 77F0E868 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyBezierTo + 14 77F0E86B 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyBezierTo + 16 77F0E86D 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyBezierTo + 1E 77F0E875 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolylineTo + F 77F0E913 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolylineTo + 11 77F0E915 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolylineTo + 14 77F0E918 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolylineTo + 16 77F0E91A 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolylineTo + 1E 77F0E922 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CloseFigure + E 77F0E9AE 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CloseFigure + 10 77F0E9B0 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CloseFigure + 13 77F0E9B3 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CloseFigure + 15 77F0E9B5 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CloseFigure + 1A 77F0E9BA 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StrokeAndFillPath + 10 77F0EA30 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StrokeAndFillPath + 12 77F0EA32 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StrokeAndFillPath + 15 77F0EA35 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StrokeAndFillPath + 17 77F0EA37 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StrokeAndFillPath + 1E 77F0EA3E 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCurrentPositionEx + E 77F0EB09 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCurrentPositionEx + 14 77F0EB0F 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCurrentPositionEx + 16 77F0EB11 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCurrentPositionEx + 1F 77F0EB1A 58 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCurrentPositionEx + 5B 77F0EB56 58 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidth32W + 1C 77F0EC9F 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidth32W + 22 77F0ECA5 66 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidth32W + 65 77F0ECE8 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidth32W + 6C 77F0ECEF 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidth32W + 7A 77F0ECFD 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CLIPOBJ_bEnum + 5 77F0ED31 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CLIPOBJ_bEnum + 7 77F0ED33 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CLIPOBJ_bEnum + F 77F0ED3B 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CLIPOBJ_cEnumStart + 5 77F0ED45 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CLIPOBJ_cEnumStart + 7 77F0ED47 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CLIPOBJ_cEnumStart + F 77F0ED4F 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry13 + 9 77F0ED72 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry13 + B 77F0ED74 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry13 + 30 77F0ED99 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry13 + 34 77F0ED9D 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry11 + 5 77F0EDA7 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry11 + 7 77F0EDA9 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry11 + F 77F0EDB1 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry11 + 19 77F0EDBB 70 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry11 + 62 77F0EE04 48 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetDevmodeForPage + 10 77F0EE35 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetDevmodeForPage + 1F 77F0EE44 59 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetDevmodeForPage + 5B 77F0EE80 55 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiStartDocEMF + 20 77F0EEB9 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiStartDocEMF + 2A 77F0EEC3 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiStartDocEMF + 3D 77F0EED6 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiStartDocEMF + 4C 77F0EEE5 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiStartDocEMF + 52 77F0EEEB 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiStartPageEMF + 29 77F0F0A3 312 Bytes [ 35, 08, 35, 0C, 35, 10, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StartPage + B6 77F0F1DC 45 Bytes [ F4, 32, F8, 32, FC, 32, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayPageEMF + 2 77F0F20A 56 Bytes [ 56, 38, A9, 38, E4, 38, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayPageEMF + 3B 77F0F243 320 Bytes [ 00, 7C, 00, 00, 00, 08, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayPageEMF + 17C 77F0F384 82 Bytes [ 58, 00, 00, 00, 02, 30, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayPageEMF + 1CF 77F0F3D7 4 Bytes [ 3E, 00, D0, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayPageEMF + 1D4 77F0F3DC 2 Bytes [ 4C, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngLockSurface + 172 77F0F72F 591 Bytes [ 00, 1D, 30, 46, 30, E9, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngLockSurface + 3C2 77F0F97F 428 Bytes [ 36, 25, 36, 2A, 36, 2F, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FONTOBJ_vGetInfo + 10 77F0FB2C 395 Bytes [ 64, 3B, C0, 3B, 3A, 3C, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetSpoolFileHandle + 15A 77F0FCB8 31 Bytes [ 60, 00, 00, 00, 1C, 30, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetSpoolFileHandle + 17A 77F0FCD8 91 Bytes [ 3A, 34, E4, 34, 21, 35, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetSpoolFileHandle + 1D6 77F0FD34 312 Bytes [ 9F, 33, A6, 33, AD, 33, B4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiResetDCEMF + 94 77F0FE6D 350 Bytes [ 10, 02, 00, 50, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!HT_Get8BPPFormatPalette + 3F 77F0FFCC 742 Bytes [ 88, 00, 00, 00, EC, 30, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry21 + 7 77F102B3 7 Bytes [ 00, 00, C0, 02, 00, 60, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry21 + F 77F102BB 89 Bytes [ 00, 24, 30, 50, 30, D0, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry11 + 24 77F10315 177 Bytes [ D0, 02, 00, 50, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry12 + 23 77F103C7 179 Bytes [ 36, 0A, 36, 15, 36, 1F, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry8 + 18 77F1047B 124 Bytes [ 31, FF, 31, 13, 32, B4, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry18 + 32 77F104F8 217 Bytes [ 3C, 00, 00, 00, 3A, 30, BF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry38 + 71 77F105D2 215 Bytes [ 00, 00, 3A, 30, 7C, 30, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry38 + 149 77F106AA 579 Bytes [ 00, 00, 66, 31, 6E, 31, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry38 + 38D 77F108EE 493 Bytes [ EA, 33, F6, 33, 15, 34, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry26 + 7 77F10ADC 7 Bytes [ 00, C0, 03, 00, 54, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry26 + F 77F10AE4 246 Bytes [ EF, 34, F4, 34, DC, 37, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry55 + B7 77F10BDB 451 Bytes [ 3D, 03, 3E, 0E, 3E, 12, 3E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry19 + 8E 77F10DA0 122 Bytes [ 64, 30, 6F, 30, 82, 30, D6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry19 + 109 77F10E1B 100 Bytes [ 00, 5A, 30, 60, 30, 8A, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry19 + 16E 77F10E80 25 Bytes [ 9A, 35, A1, 35, A8, 35, AF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry19 + 188 77F10E9A 71 Bytes [ 0C, 36, 23, 36, 29, 36, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry19 + 1D0 77F10EE2 33 Bytes [ 1D, 3F, 23, 3F, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FixBrushOrgEx + 5 77F1A452 48 Bytes [ 00, 00, 00, 00, 00, 00, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FixBrushOrgEx + 36 77F1A483 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FixBrushOrgEx + 48 77F1A495 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FixBrushOrgEx + 4A 77F1A497 52 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FixBrushOrgEx + 7F 77F1A4CC 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateMetaFileA + B 77F1A510 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateMetaFileA + 2F 77F1A534 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateMetaFileA + 36 77F1A53B 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateMetaFileA + 43 77F1A548 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateMetaFileA + 48 77F1A54D 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontA + 86 77F1B2E6 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontA + 9C 77F1B2FC 98 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontA + FF 77F1B35F 63 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontA + 13F 77F1B39F 45 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateFontA + 16E 77F1B3CE 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBPatternBrushPt + 2C 77F1B4D1 22 Bytes [ 1E, 0A, 20, F0, 4E, C7, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBPatternBrushPt + 43 77F1B4E8 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBPatternBrushPt + 45 77F1B4EA 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBPatternBrushPt + 4B 77F1B4F0 23 Bytes [ 0C, 02, 54, 00, 49, 00, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateDIBPatternBrushPt + 63 77F1B508 15 Bytes [ 54, 00, 74, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidth32A + B 77F1B518 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidth32A + D 77F1B51A 17 Bytes [ 00, 00, 00, 00, 02, 00, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidth32A + 1F 77F1B52C 38 Bytes [ 00, 00, 6A, 3E, 00, 1E, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidth32A + 47 77F1B554 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidth32A + 67 77F1B574 1 Byte [ 5B ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiCleanCacheDC + B 77F1B923 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiCleanCacheDC + D 77F1B925 2 Bytes [ 00, 2E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiCleanCacheDC + 10 77F1B928 77 Bytes [ 3A, 11, 78, 8D, 5B, 49, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RoundRect + 10 77F1B976 1 Byte [ 32 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RoundRect + 12 77F1B978 1 Byte [ 38 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RoundRect + 14 77F1B97A 9 Bytes [ 33, 00, 42, 00, 39, 00, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RoundRect + 1E 77F1B984 1 Byte [ 42 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RoundRect + 20 77F1B986 5 Bytes [ 32, 00, 33, 00, 43 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PaintRgn + F 77F1BA40 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PaintRgn + 11 77F1BA42 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PaintRgn + 14 77F1BA45 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PaintRgn + 16 77F1BA47 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PaintRgn + 1E 77F1BA4F 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWinMetaFileBits + 26 77F1BB0B 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWinMetaFileBits + 37 77F1BB1C 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWinMetaFileBits + 46 77F1BB2B 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWinMetaFileBits + 4F 77F1BB34 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetWinMetaFileBits + 5A 77F1BB3F 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertMetaFilePict + 1B 77F1C182 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertMetaFilePict + 1D 77F1C184 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertMetaFilePict + 2B 77F1C192 148 Bytes [ 07, 08, 09, 0A, 0B, 0C, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertMetaFilePict + C0 77F1C227 87 Bytes [ 00, 00, 9A, 9B, 00, 9C, 9D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiCreateLocalEnhMetaFile + 16 77F1C27F 137 Bytes [ AE, 00, B1, 00, B6, 00, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiCreateLocalEnhMetaFile + A1 77F1C30A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiCreateLocalEnhMetaFile + A3 77F1C30C 10 Bytes [ 00, 00, 00, 1E, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiCreateLocalEnhMetaFile + AE 77F1C317 100 Bytes [ 8A, FF, 85, FF, 7A, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceW + 7 77F1C37C 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceW + 9 77F1C37E 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceW + 15 77F1C38A 20 Bytes [ 00, 00, 00, 00, 00, A7, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Pie + 10 77F1C39F 1 Byte [ 8E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Pie + 12 77F1C3A1 1 Byte [ 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Pie + 14 77F1C3A3 9 Bytes [ 9A, 00, A4, 00, A0, 00, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Pie + 1E 77F1C3AD 3 Bytes [ 83, 00, 91 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Pie + 22 77F1C3B1 1 Byte [ 8D ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AnimatePalette + D 77F1C488 4 Bytes [ 03, 19, FF, C2 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AnimatePalette + 12 77F1C48D 14 Bytes [ 48, FF, F1, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AnimatePalette + 21 77F1C49C 35 Bytes [ 02, E4, 00, 00, FF, F4, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AnimatePalette + 45 77F1C4C0 40 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPaletteEntries + 25 77F1C4EA 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPaletteEntries + 46 77F1C50B 55 Bytes [ 2F, 00, 2A, 00, 42, 00, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPaletteEntries + 7E 77F1C543 289 Bytes [ 60, 44, 2D, 2C, 20, B0, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry15 + 1E 77F1C665 7 Bytes [ F8, 01, E0, 02, E4, 00, 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry15 + 26 77F1C66D 65 Bytes [ 1C, 00, 4A, 40, 3B, 09, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ClearBrushAttributes + 1A 77F1C6AF 732 Bytes [ 3F, 3F, CD, 11, 39, 31, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ScaleWindowExtEx + 6E 77F1C98C 77 Bytes [ 23, 22, 26, 27, 07, 27, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ScaleWindowExtEx + BC 77F1C9DA 51 Bytes [ 27, 53, 70, 3D, 2B, 2E, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ScaleWindowExtEx + F0 77F1CA0E 79 Bytes [ 16, 06, EA, 11, 23, 32, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ScaleWindowExtEx + 140 77F1CA5E 334 Bytes [ 09, 49, 17, 38, 0A, 49, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMapperFlags + 12 77F1CBAD 1 Byte [ 03 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMapperFlags + 14 77F1CBAF 35 Bytes [ 24, FF, 58, 03, 6E, 02, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMapperFlags + 38 77F1CBD3 166 Bytes [ 49, 06, 47, 0A, 2E, 32, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetColorAdjustment + 45 77F1CC7A 86 Bytes [ 23, 22, 26, 27, 37, 16, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharacterPlacementA + 21 77F1CCD1 109 Bytes [ 1F, 20, 1C, 79, 4E, 44, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharacterPlacementA + 8F 77F1CD3F 1 Byte [ E5 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharacterPlacementA + 91 77F1CD41 27 Bytes [ 0E, 00, 32, 40, 2A, 16, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharacterPlacementA + AD 77F1CD5D 93 Bytes [ 0E, 9B, 00, 9B, 0E, FB, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharacterPlacementA + 10B 77F1CDBB 65 Bytes [ 48, 04, 0F, 0D, 2B, 00, 3F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharWidthFloatA + 1F 77F1CFFC 158 Bytes [ 00, 01, FF, D9, FF, 7A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetGlyphIndicesA + B 77F1D09B 65 Bytes [ 0E, B6, 03, 09, 0B, 48, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetGlyphIndicesA + 4D 77F1D0DD 10 Bytes [ 31, 30, 01, 5D, 07, 01, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetGlyphIndicesA + 58 77F1D0E8 12 Bytes [ 2B, FE, 39, 5B, 03, 59, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetGlyphIndicesA + 65 77F1D0F5 113 Bytes [ 4C, FF, F4, 03, 34, 02, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetGlyphIndicesA + D7 77F1D167 21 Bytes [ 7F, 38, 1A, 1A, 2F, B2, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentExPointA + 96 77F1D2BB 197 Bytes [ 13, FF, F4, 03, 03, 02, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentExPointA + 15C 77F1D381 44 Bytes [ 31, 3C, 50, 62, 52, 2F, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentExPointA + 189 77F1D3AE 514 Bytes [ 15, 1B, 3B, 2B, 32, 36, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentExPointI + 54 77F1D5B1 90 Bytes [ 6C, 40, 4E, 07, 22, 03, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetTextExtentExPointI + AF 77F1D60C 207 Bytes [ 2B, 5D, 5D, 2B, 2B, 11, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharABCWidthsA + 10 77F1D6DC 168 Bytes [ 1E, 21, 27, 00, 12, 1D, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetGlyphOutlineW + 7 77F1D785 65 Bytes [ 4F, 40, 31, 34, 09, 44, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetGlyphOutlineW + 49 77F1D7C7 190 Bytes [ 3F, 3F, 2B, 2B, 2B, 11, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetGlyphOutline + 1E 77F1D886 107 Bytes [ 1E, 2F, 1E, 3F, 1E, 5F, 1E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetKerningPairs + D 77F1D8F2 90 Bytes [ 32, 3E, 02, 02, EA, 51, 91, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetKerningPairs + 68 77F1D94D 42 Bytes [ 02, 00, 0A, FF, F8, 01, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetKerningPairs + 93 77F1D978 126 Bytes [ 47, 01, 47, 0B, A5, 00, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetKerningPairs + 112 77F1D9F7 7 Bytes [ DD, FF, 7A, 01, 42, 01, DA ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetKerningPairs + 11A 77F1D9FF 1 Byte [ 14 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiRealizationInfo + 4E 77F1DC3F 309 Bytes [ 14, 16, 15, 14, 06, 23, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharacterPlacementW + DC 77F1DD75 26 Bytes [ 33, 32, 16, 15, 14, 0E, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharacterPlacementW + F7 77F1DD90 168 Bytes [ 37, 33, 0E, 03, 15, 14, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharacterPlacementW + 1A0 77F1DE39 473 Bytes [ 5D, 40, 38, 09, 06, 49, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharacterPlacementW + 37A 77F1E013 36 Bytes [ 01, 00, 4B, FF, F4, 03, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetCharacterPlacementW + 39F 77F1E038 269 Bytes [ 0D, 0C, 15, 0F, 24, 0E, 1F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry9 + 28E 77F1E705 98 Bytes [ 40, 00, 9A, 40, 61, 46, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry9 + 2F1 77F1E768 30 Bytes [ 11, 03, 0E, 2B, 2B, 2B, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry9 + 310 77F1E787 341 Bytes [ 3F, 3F, 3F, 3F, 2B, 2B, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontMemResourceEx + 5F 77F1E8DD 154 Bytes [ 01, FF, E0, FF, F4, 05, 8E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontMemResourceEx + FA 77F1E978 77 Bytes [ 12, 39, 12, 39, 12, 39, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontMemResourceEx + 148 77F1E9C6 136 Bytes [ 0D, 15, 0A, 07, 1B, 23, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontMemResourceEx + 1D1 77F1EA4F 29 Bytes [ 0A, 17, 21, 2F, 2E, 30, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontMemResourceEx + 1F0 77F1EA6E 48 Bytes [ 00, 01, 36, 04, 1A, 01, 1A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AddFontResourceTracking + 2 77F1EEC7 7 Bytes [ F4, 03, 0F, 02, E4, 00, 3B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AddFontResourceTracking + A 77F1EECF 75 Bytes [ 8E, 40, 6C, 16, 15, 16, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AddFontResourceTracking + 56 77F1EF1B 149 Bytes [ 11, 09, 40, 03, 08, 0E, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AddFontResourceTracking + EC 77F1EFB1 235 Bytes [ 32, 18, 20, 13, 13, 7B, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontResourceInfoW + 5C 77F1F09D 5 Bytes [ F4, 04, 27, 02, D9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontResourceInfoW + 62 77F1F0A3 1 Byte [ 32 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontResourceInfoW + 64 77F1F0A5 689 Bytes [ 48, 40, 2C, 08, 1F, 1E, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateScalableFontResourceW + 1AA 77F1F357 123 Bytes [ 04, 10, 10, 02, 03, 17, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!RemoveFontResourceTracking + 27 77F1F3D3 412 Bytes [ 09, 08, 09, 08, 17, 16, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetColorSpace + 1D 77F1F570 352 Bytes [ 33, 32, 16, 15, 14, 06, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CheckColorsInGamut + 9C 77F1F6D1 105 Bytes [ 4C, 40, 32, 0D, 15, 2C, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CheckColorsInGamut + 106 77F1F73B 389 Bytes [ 07, 06, 26, 37, 36, 35, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDeviceGammaRamp + D7 77F1F8C1 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDeviceGammaRamp + D9 77F1F8C3 7 Bytes [ 00, FF, 5D, 01, F4, FF, AB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDeviceGammaRamp + E1 77F1F8CB 202 Bytes [ 03, 00, 13, 40, 0A, 03, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDeviceGammaRamp + 1AC 77F1F996 154 Bytes [ CD, 2B, 11, 12, 39, 12, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDeviceGammaRamp + 247 77F1FA31 9 Bytes [ 0F, 00, 29, 00, 5E, 40, 18, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetLogColorSpaceA + 81 77F201E5 302 Bytes [ 18, 01, A6, 02, E3, 00, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ColorCorrectPalette + BA 77F20314 20 Bytes [ 35, 2F, 48, 32, 43, 0A, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ColorCorrectPalette + CF 77F20329 211 Bytes [ 3F, 3F, 3F, 3F, 2B, 2B, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ColorCorrectPalette + 1A3 77F203FD 65 Bytes [ 0D, FF, F6, 01, BC, 02, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ColorCorrectPalette + 1E5 77F2043F 82 Bytes [ 3F, 3F, 2B, 10, CD, 10, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateColorSpaceA + 12 77F20492 85 Bytes [ 0B, 09, 08, 42, 3A, 1A, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateColorSpaceA + 68 77F204E8 3 Bytes [ F0, B7, 36 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateColorSpaceA + 6C 77F204EC 47 Bytes [ 49, 36, 2D, 0A, 1C, 1F, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateColorSpaceA + 9C 77F2051C 35 Bytes [ 2A, 47, 43, 15, 03, 0E, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!CreateColorSpaceA + C0 77F20540 205 Bytes [ C4, 10, C4, 10, C4, 11, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumICMProfilesA + 6A 77F2060E 55 Bytes [ 1D, 40, 22, 10, 9D, 52, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EnumICMProfilesW + 25 77F20646 88 Bytes [ 6E, 46, 39, 2F, 16, 12, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UpdateICMRegKeyW + 2 77F2069F 10 Bytes [ F0, 40, 0A, 00, 10, 49, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UpdateICMRegKeyW + D 77F206AA 34 Bytes [ 0B, 13, B8, FF, F0, 40, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UpdateICMRegKeyW + 30 77F206CD 21 Bytes [ 0B, 0B, 08, 40, 1B, 08, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UpdateICMRegKeyW + 46 77F206E3 22 Bytes [ 3F, 3F, 3F, 3F, 10, 2B, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UpdateICMRegKeyW + 5D 77F206FA 312 Bytes [ 39, 11, 12, 39, 11, 12, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UpdateICMRegKeyA + 25 77F20833 1 Byte [ 2F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UpdateICMRegKeyA + 27 77F20835 32 Bytes [ 3F, 00, 7C, 40, 4C, 36, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UpdateICMRegKeyA + 48 77F20856 40 Bytes [ 11, 09, 0F, 2D, 06, 26, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UpdateICMRegKeyA + 71 77F2087F 26 Bytes [ 06, 38, 0E, 48, 30, 00, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UpdateICMRegKeyA + 8C 77F2089A 10 Bytes [ 00, 3F, 3F, 3F, 3F, 10, 2B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetICMProfileW + 1A 77F218B1 9 Bytes [ 0B, FF, 0C, 02, 10, 01, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetICMProfileW + 24 77F218BB 2 Bytes [ 46, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetICMProfileW + 27 77F218BE 2 Bytes [ 01, 06 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetICMProfileW + 2A 77F218C1 12 Bytes [ D6, FB, 00, 00, 0D, B5, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetICMProfileW + 37 77F218CE 27 Bytes [ 35, 01, 11, 5D, 35, 00, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetICMProfileW + A 77F219C8 2 Bytes [ 00, 1F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetICMProfileW + D 77F219CB 10 Bytes [ F6, 01, E1, 02, AA, 02, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetICMProfileW + 18 77F219D6 45 Bytes [ 01, 06, 00, 8E, BE, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetICMProfileW + 46 77F21A04 5 Bytes [ B3, 01, 01, 4E, 22 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetICMProfileW + 4C 77F21A0A 16 Bytes [ 3F, 35, 01, 35, FF, FF, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertBitmapV5 + 8 77F21F8D 403 Bytes [ 4B, 57, 08, 1B, 57, 1B, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertBitmapV5 + 19C 77F22121 19 Bytes [ 01, 00, 68, 00, 7A, 02, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertBitmapV5 + 1B0 77F22135 103 Bytes [ 06, 0E, 2B, 00, 2B, 31, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertBitmapV5 + 218 77F2219D 625 Bytes [ 3F, 3F, 2B, C4, 2B, 2B, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiConvertBitmapV5 + 48A 77F2240F 20 Bytes [ 11, 39, 39, 11, 12, 39, 39, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ColorMatchToTarget + 52 77F2273B 163 Bytes [ 11, 39, 31, 30, 01, 5D, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetRelAbs + E 77F227DF 33 Bytes [ 92, 92, 0C, 01, 03, 14, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetDCBrushColor + F 77F22801 102 Bytes [ 10, 00, 0C, B3, 0A, 03, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDCPenColor + 17 77F22868 73 Bytes [ 06, 0D, 2B, 5D, 2B, 5D, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDCPenColor + 61 77F228B2 12 Bytes [ 00, 02, FF, E0, FF, F4, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDCPenColor + 6E 77F228BF 108 Bytes [ 4E, 00, CE, 40, 89, 23, 4A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetDCPenColor + DB 77F2292C 312 Bytes [ 49, 03, 13, 09, 11, 3D, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetStretchBltMode + F 77F22A65 100 Bytes JMP 60F49F6D .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetRelAbs + 21 77F22ACA 317 Bytes [ 0F, 29, 19, 0D, 1A, 00, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiIsMetaFileDC + 2 77F22C08 16 Bytes [ 00, 0E, FF, F6, 02, 15, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiIsMetaFileDC + 13 77F22C19 1 Byte [ 8D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiIsMetaFileDC + 15 77F22C1B 80 Bytes [ 00, 00, 0A, B3, 01, 01, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SelectBrushLocal + B 77F22C6C 11 Bytes [ 0A, 1C, 40, 40, 00, 0E, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiDeleteLocalDC + 6 77F22C78 294 Bytes [ 00, 30, 09, 08, 3C, 0A, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMetaFileA + 1C 77F22D9F 577 Bytes [ E4, 00, 47, 00, 67, 40, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMetaFileA + 25E 77F22FE1 159 Bytes [ 71, C0, 08, 07, 07, 07, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMetaFileA + 2FE 77F23081 220 Bytes [ C3, FF, 18, 02, 94, 02, D2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMetaFileA + 3DB 77F2315E 163 Bytes [ 21, 07, 21, 07, 21, 07, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetMetaFileA + 47F 77F23202 292 Bytes [ 05, 1A, 48, 11, 22, 0D, 48, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetBitmapDimensionEx + B 77F2363B 60 Bytes [ 5D, FF, F4, 01, F8, 02, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ResizePalette + 28 77F23678 132 Bytes [ 04, 0C, 03, 0B, 14, 1A, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!gdiPlaySpoolStream + 9 77F236FD 133 Bytes [ 2B, 39, 31, 30, 01, 15, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!gdiPlaySpoolStream + 8F 77F23783 170 Bytes [ 14, 07, 06, 07, 14, 33, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!UpdateColors + 17 77F2382E 28 Bytes [ 01, 06, 00, D6, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AbortDoc + C 77F2384B 1 Byte [ 15 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AbortDoc + E 77F2384D 10 Bytes [ 24, 40, 1D, 2B, 04, 2B, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AbortDoc + 19 77F23858 15 Bytes [ 2B, 10, 2B, 11, 28, 13, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AbortDoc + 29 77F23868 92 Bytes [ 75, 01, 75, 0A, 0E, 00, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AbortDoc + 86 77F238C5 385 Bytes [ 32, 40, 2A, 06, 13, 06, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetAbortProc + E8 77F23A47 92 Bytes [ E3, 00, 13, 00, 42, 00, 8A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!NamedEscape + 1C 77F23AA4 75 Bytes [ 2B, 0A, 35, 31, 3A, 0A, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!NamedEscape + 68 77F23AF0 137 Bytes [ 33, 32, 16, 17, 21, 03, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DrawEscape + 40 77F23B7A 18 Bytes [ 41, FE, 93, 0F, 2A, 17, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DrawEscape + 53 77F23B8D 87 Bytes [ 03, 00, 11, FF, F6, 03, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AngleArc + F 77F23BE5 117 Bytes [ 33, 0D, 2B, 2B, 10, C4, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AngleArc + 85 77F23C5B 55 Bytes [ 45, 73, 08, 0E, 15, 30, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Arc + B 77F23C93 246 Bytes [ 8C, 37, 0F, 10, 30, 56, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ArcTo + 16 77F23D8A 26 Bytes [ 07, 21, 37, 03, FA, 1F, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ArcTo + 31 77F23DA5 38 Bytes [ 29, 00, 4E, 40, 31, 08, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ArcTo + 58 77F23DCC 318 Bytes [ 0B, 05, 14, 00, 26, 05, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!Chord + D7 77F23F0B 33 Bytes [ 01, 00, 66, 01, A8, 01, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlgBlt + D 77F23F2D 11 Bytes [ 0E, 20, 0E, 40, 0E, 04, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlgBlt + 19 77F23F39 200 Bytes [ 05, 03, 48, 11, 03, 0D, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PlgBlt + E2 77F24002 37 Bytes [ 10, 20, 10, 30, 10, 03, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtFloodFill + E 77F24028 115 Bytes [ 5D, 2B, 5D, 2B, 2B, 11, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtFloodFill + 82 77F2409C 20 Bytes [ 3F, 35, 35, 01, 35, 35, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtFloodFill + 98 77F240B2 4 Bytes [ 01, 07, 00, 8E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtFloodFill + 9D 77F240B7 1 Byte [ B6 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!ExtFloodFill + 9F 77F240B9 48 Bytes [ FA, 00, 0E, B5, 02, 01, 02, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyTextOutA + 31 77F2427F 107 Bytes [ 11, 01, DA, FE, 67, 12, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyTextOutA + 9D 77F242EB 16 Bytes [ 1D, 0A, 06, 09, 09, 11, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyTextOutA + AF 77F242FD 58 Bytes [ 21, 06, 14, 32, 3F, 3E, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyTextOutA + EA 77F24338 693 Bytes [ C4, 2B, 10, CD, 2B, 10, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StartDocW + 11F 77F245EE 11 Bytes [ 2A, 07, 5F, 1F, 23, 2E, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StartDocW + 12B 77F245FA 234 Bytes [ 20, 2B, 0A, 03, 02, 02, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StartDocW + 216 77F246E5 89 Bytes [ 13, 00, 1F, 40, 11, 0D, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StartDocW + 270 77F2473F 162 Bytes [ B1, 00, 13, 00, 27, 00, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StartDocW + 314 77F247E3 1 Byte [ E0 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StartDocA + 4 77F249ED 27 Bytes [ 38, 00, 00, 01, 07, 00, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StartDocA + 20 77F24A09 10 Bytes [ F4, 04, 27, 03, CF, 02, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StartDocA + 2B 77F24A14 100 Bytes [ 01, 07, 00, 43, 01, 1F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StartDocA + 90 77F24A79 388 Bytes [ 3F, 3F, CD, 10, C4, 10, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FlattenPath + 2E 77F24BFE 90 Bytes [ 63, 02, 53, 10, 1D, 44, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!StrokePath + 32 77F24C59 111 Bytes [ 18, 02, 28, 02, D2, 00, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FillPath + 15 77F24CC9 73 Bytes [ 2F, 2B, 31, 30, 01, 34, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FillPath + 5F 77F24D13 17 Bytes [ 01, 48, 12, 06, 0A, 0F, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FillPath + 71 77F24D25 81 Bytes [ 09, 0C, 2F, 2B, CD, 5D, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!WidenPath + 36 77F24D77 365 Bytes [ 0C, 00, F6, 00, 00, 00, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DescribePixelFormat + 3D 77F24EE5 91 Bytes [ 3C, 11, 12, 39, 39, 39, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPixelFormat + 4E 77F24F41 1 Byte [ 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPixelFormat + 50 77F24F43 21 Bytes [ 00, 01, 06, 00, D8, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPixelFormat + 66 77F24F59 7 Bytes [ C3, FF, FE, 03, C1, 02, DB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetPixelFormat + 6E 77F24F61 180 Bytes [ 0D, 00, 27, 00, 43, 40, 2C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyPolygon + 16 77F25016 244 Bytes [ 00, 02, 00, 11, FF, F6, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyPolyline + 66 77F2510B 60 Bytes [ 00, 03, EA, 03, C8, 02, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyBezier + F 77F25148 4 Bytes [ 3F, 35, 01, 35 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyBezier + 14 77F2514D 9 Bytes [ 02, FF, C3, 00, 00, 03, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyBezier + 1E 77F25157 1 Byte [ 27 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyBezier + 20 77F25159 203 Bytes [ 33, 00, 61, 40, 43, 09, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyDraw + 3A 77F25225 41 Bytes [ 10, 04, 04, 27, 90, 98, 9F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PolyDraw + 64 77F2524F 349 Bytes [ 34, 00, 7E, 40, 4F, 0D, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PtVisible + 36 77F253AD 21 Bytes [ 01, 00, 1E, FF, F4, 03, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PtVisible + 4C 77F253C3 480 Bytes [ 11, 0E, 2C, 0B, 29, 0E, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayDCScript + 98 77F255A4 15 Bytes [ 06, 04, 0C, 0E, 13, 15, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayDCScript + A8 77F255B4 204 Bytes [ 20, 0A, 8F, 00, 01, 00, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayDCScript + 175 77F25681 5 Bytes [ 0A, 03, E8, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayDCScript + 17C 77F25688 30 Bytes [ A6, 88, A6, 51, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayDCScript + 19D 77F256A9 48 Bytes [ 01, 00, 00, 03, D7, FE, CE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontAssocStatus + 11 77F25B13 57 Bytes [ 55, 00, 05, FF, C4, 00, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontAssocStatus + 4B 77F25B4D 29 Bytes [ BA, 00, 9C, 00, 05, FF, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontAssocStatus + 69 77F25B6B 23 Bytes [ CE, 00, 4F, 00, 0A, FF, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontAssocStatus + 81 77F25B83 71 Bytes [ E2, 00, 51, 00, 0A, FF, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontAssocStatus + C9 77F25BCB 45 Bytes [ E2, 00, 58, 00, 0A, FF, C4, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EudcLoadLinkW + 24 77F25D32 23 Bytes [ 00, 3C, 00, 27, 00, 10, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EudcLoadLinkW + 3D 77F25D4B 13 Bytes [ 0A, 00, 59, 00, 10, 00, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EudcUnloadLinkW + 9 77F25D59 23 Bytes [ 29, 00, 10, FF, EC, 00, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EudcUnloadLinkW + 21 77F25D71 1 Byte [ 39 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EudcUnloadLinkW + 23 77F25D73 13 Bytes [ 10, FF, 92, 00, 10, 00, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EudcUnloadLinkW + 31 77F25D81 29 Bytes [ 92, 00, 3B, 00, 10, FF, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEUDCTimeStampExW + C 77F25D9F 23 Bytes [ 92, 00, 1A, 00, 10, FF, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEUDCTimeStampExW + 24 77F25DB7 3 Bytes [ 3C, 00, 3D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEUDCTimeStampExW + 28 77F25DBB 15 Bytes [ 10, 00, 14, 00, 1B, 00, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEUDCTimeStamp + B 77F25DCB 39 Bytes [ 2F, 00, 10, 00, 14, 00, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetStringBitmapW + 22 77F25DF3 3 Bytes [ 0A, 00, 17 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetStringBitmapW + 26 77F25DF7 25 Bytes [ 10, 00, 0A, 00, 5A, 00, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetStringBitmapA + 15 77F25E11 3 Bytes [ F6, 00, 3C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetStringBitmapA + 19 77F25E15 101 Bytes [ 11, FF, 4C, 00, 2D, 00, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetStringBitmapA + 7F 77F25E7B 47 Bytes [ 11, 00, 24, 00, 29, 00, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetStringBitmapA + AF 77F25EAB 7 Bytes [ 13, FF, D8, 00, 10, 00, 14 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetStringBitmapA + B7 77F25EB3 9 Bytes [ F6, 00, 0F, 00, 14, 00, 28, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetPageCount + C 77F26621 95 Bytes [ 63, 00, 39, 00, 44, FF, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiGetPageCount + 6C 77F26681 17 Bytes [ F0, 00, 0A, 00, 45, 00, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayPrivatePageEMF + 2 77F26693 29 Bytes [ EC, 00, B2, 00, 46, FF, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayPrivatePageEMF + 20 77F266B1 43 Bytes CALL BEF318B6 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayPrivatePageEMF + 4C 77F266DD 5 Bytes [ 3B, 00, 48, FF, E9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayPrivatePageEMF + 52 77F266E3 17 Bytes [ 24, 00, 48, FF, EC, 00, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayPrivatePageEMF + 64 77F266F5 17 Bytes [ 39, 00, 48, FF, 6A, 00, B2, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayEMF + 18 77F26AD0 8 Bytes [ 00, 50, 00, 24, 00, 8F, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayEMF + 21 77F26AD9 13 Bytes [ AB, 00, 8F, FF, E3, 00, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayEMF + 2F 77F26AE7 15 Bytes [ 8F, FF, BE, 00, 29, 00, 8F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayEMF + 3F 77F26AF7 1 Byte [ 36 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiPlayEMF + 41 77F26AF9 7 Bytes [ 8F, 00, 0F, 00, 25, 00, 8F ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngReleaseSemaphore + 3 77F287FC 271 Bytes [ 04, 07, 13, 08, 49, 6E, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngQueryEMFInfo + CE 77F2890C 163 Bytes [ 2E, 20, 62, 79, 20, 52, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngQueryEMFInfo + 172 77F289B0 42 Bytes [ 6F, 72, 61, 74, 69, 6F, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngQueryEMFInfo + 19D 77F289DB 230 Bytes [ 0D, 06, 09, 2A, 86, 48, 86, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngQueryEMFInfo + 284 77F28AC2 6 Bytes [ 04, 07, 13, 08, 49, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngQueryEMFInfo + 28B 77F28AC9 70 Bytes [ 65, 72, 6E, 65, 74, 31, 17, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFilePaletteEntries + 10 77F294A2 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFilePaletteEntries + 12 77F294A4 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFilePaletteEntries + 27 77F294B9 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFilePaletteEntries + 33 77F294C5 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFilePaletteEntries + 43 77F294D5 154 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFilePixelFormat + F 77F29584 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFilePixelFormat + 11 77F29586 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFilePixelFormat + 2A 77F2959F 137 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFilePixelFormat + B4 77F29629 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!IsValidEnhMetaRecord + 26 77F29654 46 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!IsValidEnhMetaRecordOffExt + 2A 77F29683 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!IsValidEnhMetaRecordOffExt + 3A 77F29693 46 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!IsValidEnhMetaRecordOffExt + 69 77F296C2 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!IsValidEnhMetaRecordOffExt + 77 77F296D0 43 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!IsValidEnhMetaRecordOffExt + A4 77F296FD 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileA + B 77F298E5 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileA + 2B 77F29905 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileA + 32 77F2990C 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileA + 3F 77F29919 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileA + 44 77F2991E 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetWinMetaFileBits + B 77F29954 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetWinMetaFileBits + 1B 77F29964 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetWinMetaFileBits + 25 77F2996E 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetWinMetaFileBits + 2E 77F29977 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetWinMetaFileBits + 30 77F29979 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileDescriptionA + 7 77F29AAF 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileDescriptionA + 19 77F29AC1 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileDescriptionA + 39 77F29AE1 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileDescriptionA + 4C 77F29AF4 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetEnhMetaFileDescriptionA + 56 77F29AFE 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAddGlsRecord + 1B 77F2B9E3 93 Bytes [ 3C, 05, 29, FF, E1, 04, BB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAddGlsRecord + 79 77F2BA41 20 Bytes [ 06, 06, 06, 06, 06, 06, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAddGlsRecord + 8E 77F2BA56 191 Bytes [ 06, 06, 07, 07, 03, 05, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAddGlsBounds + A8 77F2BB16 11 Bytes [ 07, 06, 06, 05, 06, 06, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAddGlsBounds + B4 77F2BB22 958 Bytes [ 08, 08, 02, 04, 02, 06, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAddGlsBounds + 473 77F2BEE1 89 Bytes [ 03, 03, 06, 11, 0B, 09, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAddGlsBounds + 4CD 77F2BF3B 436 Bytes [ 07, 07, 0C, 0B, 0A, 09, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiAddGlsBounds + 682 77F2C0F0 281 Bytes [ 08, 08, 08, 08, 08, 08, 08, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiCreateLocalMetaFilePict + 37 77F2C3B6 60 Bytes [ 05, 0F, 0F, 10, 13, 12, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiCreateLocalMetaFilePict + 74 77F2C3F3 29 Bytes [ 0C, 0C, 0B, 0B, 0C, 0C, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiCreateLocalMetaFilePict + 92 77F2C411 147 Bytes [ 07, 07, 09, 0C, 06, 05, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiCreateLocalMetaFilePict + 126 77F2C4A5 199 Bytes [ 0D, 11, 0C, 0A, 06, 09, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiCreateLocalMetaFilePict + 1EE 77F2C56D 585 Bytes [ 0C, 0C, 0C, 0C, 0A, 0C, 0C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry16 + 1 77F2DB48 815 Bytes [ 01, 33, 33, 21, 2C, 42, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry16 + 331 77F2DE78 344 Bytes [ 40, 0A, 04, FE, E2, FE, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry16 + 48A 77F2DFD1 447 Bytes [ 72, A0, 3E, 02, 00, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry16 + 64A 77F2E191 486 Bytes [ 04, 0C, 05, 15, 19, 13, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiEntry16 + 831 77F2E378 195 Bytes [ FF, E6, 05, 1A, 05, 6F, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiArtificialDecrementDriver + 89 77F30626 31 Bytes [ 05, 0E, 04, 17, 00, 2B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiArtificialDecrementDriver + A9 77F30646 153 Bytes [ 19, 20, 14, 55, C0, 1D, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiArtificialDecrementDriver + 143 77F306E0 44 Bytes [ 64, 5F, 64, E3, 02, 25, F5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiArtificialDecrementDriver + 170 77F3070D 21 Bytes [ E6, 04, F5, 04, 17, 00, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiArtificialDecrementDriver + 186 77F30723 129 Bytes [ 24, 18, 0D, 0F, 23, 14, 11, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!AnyLinkedFonts + 4 77F307CA 45 Bytes [ 49, 00, 30, 2F, 17, 22, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FontIsLinked + 20 77F307F8 35 Bytes [ 39, 2F, 5D, E4, 07, 10, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FontIsLinked + 44 77F3081C 29 Bytes [ 06, 15, 26, 23, 22, 01, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FontIsLinked + 62 77F3083A 76 Bytes [ F2, 93, 4A, 3C, 7C, A1, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FontIsLinked + AF 77F30887 9 Bytes [ 3C, FE, 2C, 04, F1, 04, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FontIsLinked + B9 77F30891 1 Byte [ 2B ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry1 + C 77F308D4 151 Bytes [ 39, 01, 2F, 5D, FD, 11, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry10 + 4 77F3096C 19 Bytes [ 03, 5B, 04, 17, 00, 22, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry13 + 4 77F30980 83 Bytes [ 06, 12, 15, 15, 24, 00, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry25 + 8 77F309D4 66 Bytes [ 15, 14, 17, 26, 23, 22, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry33 + F 77F30A17 9 Bytes [ 33, FF, E6, 03, 8C, 04, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry34 + 5 77F30A21 297 Bytes [ 4E, 40, 2C, D8, 14, E9, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry56 + 53 77F30B4B 143 Bytes [ C4, D4, D4, 07, 10, FD, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry56 + E3 77F30BDB 37 Bytes [ 37, 00, 75, 40, 46, DB, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry56 + 109 77F30C01 17 Bytes [ 03, 35, 2A, 9F, 04, C0, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry56 + 11B 77F30C13 28 Bytes [ 1F, 05, 2E, 04, 00, 17, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry56 + 138 77F30C30 191 Bytes [ 17, 39, 01, 2F, FD, 39, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry0 + 90 77F30CF0 42 Bytes [ 04, D9, 03, FD, 00, 17, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!DdEntry0 + BB 77F30D1B 104 Bytes [ 00, 00, 3F, 3C, 3F, 17, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiFullscreenControl + 48 77F30D84 30 Bytes [ 00, 00, 07, 65, 03, FD, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiFullscreenControl + 67 77F30DA3 15 Bytes [ 10, 18, 0A, 21, 21, 0E, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiFullscreenControl + 77 77F30DB3 117 Bytes [ 0E, 01, 0E, 02, 08, 21, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetGlyphIndicesW + 39 77F30E29 66 Bytes [ 61, 65, 6B, 51, 8A, 0D, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetGlyphIndicesW + 7D 77F30E6D 9 Bytes [ 01, FF, EC, 00, 00, 05, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetGlyphIndicesW + 87 77F30E77 217 Bytes [ 23, 00, 6E, 40, 50, 79, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontUnicodeRanges + F 77F30F51 9 Bytes [ 01, FF, DB, FE, 19, 04, D4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontUnicodeRanges + 19 77F30F5B 1 Byte [ 2F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontUnicodeRanges + 1B 77F30F5D 57 Bytes [ 5B, 40, 36, 7A, 0B, 75, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontUnicodeRanges + 55 77F30F97 42 Bytes [ 3F, F5, FD, F5, 3F, 17, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GetFontUnicodeRanges + 80 77F30FC2 69 Bytes [ 37, 0B, 01, 16, 33, 32, 37, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiQueryFonts + 41 77F3104B 1 Byte [ 36 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiQueryFonts + 43 77F3104D 7 Bytes [ 00, 03, DF, 03, FD, 00, 1D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiQueryFonts + 4B 77F31055 46 Bytes [ 52, 40, 34, BF, 02, B9, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!GdiQueryFonts + 7A 77F31084 181 Bytes [ 42, 0F, 04, 18, 14, 42, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!SetMagicColors + 40 77F3113A 299 Bytes [ 26, 28, 32, 0A, 2F, 20, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngLineTo + 4 77F31266 20 Bytes [ 3F, 2F, 31, 30, 01, 21, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngAlphaBlend + 5 77F3127B 9 Bytes [ 3A, FE, 2C, 02, E4, 05, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!EngAlphaBlend + F 77F31285 289 Bytes [ 6E, 40, 3F, 25, 1A, 28, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!FONTOBJ_pvTrueTypeFontFile + 7 77F313A7 119 Bytes [ 18, 1F, 12, 12, 08, 12, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PATHOBJ_vEnumStart + 7 77F3141F 7 Bytes [ 26, 00, 24, 00, 00, 01, 07 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PATHOBJ_vEnumStart + F 77F31427 9 Bytes [ 8E, 01, 9B, 01, 46, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PATHOBJ_vEnumStartClipLines + 5 77F31431 9 Bytes [ 04, FF, B1, 00, 00, 06, 7E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!PATHOBJ_vEnumStartClipLines + F 77F3143B 472 Bytes [ 0F, 00, 1B, 00, 34, 00, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!HT_Get8BPPMaskPalette + 198 77F31614 100 Bytes [ 01, 26, 23, 22, 07, 36, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!HT_Get8BPPMaskPalette + 1FD 77F31679 153 Bytes [ FF, 00, 63, 00, 00, 05, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!HT_Get8BPPMaskPalette + 297 77F31713 3 Bytes [ 75, 05, 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!HT_Get8BPPMaskPalette + 29B 77F31717 1 Byte [ 26 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] GDI32.dll!HT_Get8BPPMaskPalette + 29D 77F31719 1 Byte [ 44 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfFlushEventLog + FFF98DCC 77DA16A5 22 Bytes [ C7, 0F, B7, 45, F0, 8D, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfFlushEventLog + FFF98DE3 77DA16BC 26 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfFlushEventLog + FFF9988B 77DA2164 94 Bytes [ 90, 90, 90, 90, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfFlushEventLog + FFF998EA 77DA21C3 31 Bytes CALL 77D7AB84 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfFlushEventLog + FFF9990A 77DA21E3 207 Bytes CALL 77D7FB6F C:\WINDOWS\system32\USER32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenKeyExW + 68 77DA6AE0 118 Bytes [ C1, 81, 73, 29, 47, 58, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenKeyExW + DF 77DA6B57 34 Bytes [ B1, D7, F9, 91, 49, 9B, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenKeyExW + 102 77DA6B7A 221 Bytes [ 4F, 70, ED, BE, 36, 1E, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCloseKey + 68 77DA6C58 20 Bytes [ DE, 53, B1, 28, 71, 9E, 95, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCloseKey + 7D 77DA6C6D 240 Bytes [ 19, 21, 1A, DA, C0, 4F, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCloseKey + 16E 77DA6D5E 163 Bytes [ DF, 20, E0, 8F, 0E, 7C, F1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCloseKey + 212 77DA6E02 36 Bytes [ 7F, AC, 03, D3, 59, 07, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCloseKey + 237 77DA6E27 155 Bytes [ FF, 83, 1D, 30, 88, 42, A8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryValueExW + 56 77DA701E 103 Bytes [ 08, 53, 0F, B7, 18, 3B, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryValueExW + BE 77DA7086 9 Bytes [ 00, 90, 90, 90, 90, 90, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryValueExW + C8 77DA7090 13 Bytes [ EC, 81, EC, 18, 02, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryValueExW + D6 77DA709E 36 Bytes [ 5D, 14, 56, 8B, 75, 08, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryValueExW + FB 77DA70C3 75 Bytes [ FF, 03, C6, 51, 50, E8, 4A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCreateKeyExW + 2 77DA7537 6 Bytes [ 0F, 85, EF, FD, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCreateKeyExW + 9 77DA753E 106 Bytes [ 85, E4, FD, FF, FF, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCreateKeyExW + 74 77DA75A9 16 Bytes [ 55, 8B, EC, 33, C0, 40, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCreateKeyExW + 86 77DA75BB 2 Bytes [ 85, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCreateKeyExW + 8A 77DA75BF 31 Bytes [ 53, 68, 64, 22, E0, 77, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenKeyExA + 2 77DA761D 43 Bytes [ 75, 10, FF, 75, 0C, E8, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenKeyExA + 2E 77DA7649 57 Bytes [ 90, 90, 90, 43, 4D, 5F, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenKeyExA + 68 77DA7683 14 Bytes [ 90, 73, 00, 65, 00, 74, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenKeyExA + 77 77DA7692 177 Bytes [ 69, 00, 2E, 00, 64, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenKeyW + 35 77DA7744 26 Bytes [ FF, 15, 94, 13, DA, 77, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenProcessToken + C 77DA775F 48 Bytes [ 55, 8B, EC, 81, EC, 2C, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!InitializeSecurityDescriptor + 2 77DA7790 9 Bytes [ FF, FF, 85, C0, 89, 85, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!InitializeSecurityDescriptor + C 77DA779A 42 Bytes [ 0F, 85, 66, 01, 00, 00, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityDescriptorDacl + 12 77DA77C5 61 Bytes [ 73, 2D, 8B, 8D, E0, FD, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityDescriptorDacl + 50 77DA7803 61 Bytes [ FF, 8D, 4C, 40, 09, C1, E1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityDescriptorDacl + 8E 77DA7841 14 Bytes [ FF, 8B, 4B, 3C, 8B, B5, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityDescriptorDacl + 9F 77DA7852 11 Bytes [ B5, F0, FD, FF, FF, 8B, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityDescriptorDacl + AC 77DA785F 81 Bytes JMP 88A0FB66 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryValueExA + 2E 77DA78B1 5 Bytes [ 4C, 83, 85, F4, FD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryValueExA + 35 77DA78B8 170 Bytes [ 4C, 83, 85, F0, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryValueExA + E0 77DA7963 34 Bytes [ FF, 75, 10, 56, FF, 75, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryValueExA + 103 77DA7986 30 Bytes [ B7, 1E, 8D, 43, 02, 50, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumKeyExW + 4 77DA79A5 59 Bytes JMP 7AA0FCAC .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumKeyExW + 40 77DA79E1 150 Bytes [ 0C, 8B, 75, 08, FF, 75, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumKeyExW + D8 77DA7A79 1 Byte [ 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!FreeSid + 5 77DA7A85 18 Bytes [ 51, 51, 53, 56, FF, 75, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AllocateAndInitializeSid + 7 77DA7A98 16 Bytes [ 10, 83, C6, 0C, 64, A1, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AllocateAndInitializeSid + 18 77DA7AA9 1 Byte [ 70 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AllocateAndInitializeSid + 1B 77DA7AAC 9 Bytes [ 15, 9C, 13, DA, 77, 8B, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AllocateAndInitializeSid + 25 77DA7AB6 7 Bytes [ 0A, B8, 17, 00, 00, C0, E9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AllocateAndInitializeSid + 2D 77DA7ABE 32 Bytes [ 00, 00, 00, FF, 75, 18, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!InitializeAcl + E 77DA7ADF 26 Bytes [ 8B, 55, 14, 8B, C1, C1, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AddAccessAllowedAce + 1 77DA7AFA 23 Bytes [ 4D, 18, 89, 01, 83, 7B, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AddAccessAllowedAce + 19 77DA7B12 21 Bytes [ FE, 89, 43, 08, 8B, 43, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetLengthSid + 4 77DA7B28 62 Bytes [ 43, 08, 40, 40, 89, 01, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenThreadToken + 2A 77DA7B67 9 Bytes [ 00, 10, 00, 00, 6A, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenThreadToken + 34 77DA7B71 5 Bytes [ 15, 9C, 13, DA, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetTokenInformation + 1 77DA7B77 19 Bytes [ F8, 85, FF, 75, 0A, B8, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetTokenInformation + 15 77DA7B8B 31 Bytes [ 30, 8B, 35, F4, 11, DA, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RevertToSelf + 2 77DA7BAB 56 Bytes [ FF, 85, C0, 7C, 40, 68, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RevertToSelf + 3B 77DA7BE4 30 Bytes [ 70, 18, FF, 15, 94, 13, DA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RevertToSelf + 5A 77DA7C03 65 Bytes [ 70, 18, FF, 15, 94, 13, DA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AccessCheck + 34 77DA7C45 76 Bytes [ 00, 72, 00, 79, 00, 5C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetSecurityDescriptorDacl + 3A 77DA7C92 21 Bytes [ 5C, 00, 43, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ImpersonateNamedPipeClient + 11 77DA7CA8 1 Byte [ 63 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ImpersonateNamedPipeClient + 13 77DA7CAA 37 Bytes [ 65, 00, 73, 00, 73, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MakeSelfRelativeSD + 1 77DA7CD0 4 Bytes [ 45, 08, 57, 33 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MakeSelfRelativeSD + 6 77DA7CD5 5 Bytes [ 89, 85, D8, F7, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MakeSelfRelativeSD + C 77DA7CDB 55 Bytes [ 89, BD, E0, F7, FF, FF, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MakeSelfRelativeSD + 45 77DA7D14 9 Bytes [ 00, 53, 8D, 85, 94, F7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MakeSelfRelativeSD + 4F 77DA7D1E 42 Bytes [ 15, B0, 14, DA, 77, 8B, 1D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetThreadToken + 10 77DA7E4D 39 Bytes [ 00, 68, BC, 2B, E0, 77, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AccessCheckByType + 2 77DA7E75 43 Bytes [ B5, F0, F7, FF, FF, 8B, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AccessCheckByType + 30 77DA7EA3 4 Bytes [ 85, D3, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AccessCheckByType + 35 77DA7EA8 9 Bytes [ 8B, 85, F8, F7, FF, FF, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AccessCheckByType + 3F 77DA7EB2 37 Bytes [ 00, 50, 68, 0A, 0B, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AccessCheckByType + 65 77DA7ED8 28 Bytes [ 00, 00, FF, B5, F4, F7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EqualSid + 11 77DA7EF5 29 Bytes [ FF, 89, 43, 04, 8B, 85, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EqualSid + 30 77DA7F14 43 Bytes CALL 801E0823 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EqualSid + 5C 77DA7F40 2 Bytes [ 05, 84 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EqualSid + 5F 77DA7F43 60 Bytes [ 00, 00, 50, 57, 57, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EqualSid + 9C 77DA7F80 35 Bytes [ 00, FF, B5, EC, F7, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumValueW + A9 77DA812A 33 Bytes [ F2, 7C, 8F, F1, 79, 0C, D6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumValueW + CB 77DA814C 228 Bytes [ 34, 10, 7A, 18, 1A, 50, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CheckTokenMembership + D3 77DA8231 180 Bytes [ FF, D3, 38, E0, 67, FE, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!DuplicateTokenEx + 37 77DA82E6 61 Bytes [ F6, 07, 41, 4E, 00, 0F, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!DuplicateToken + 2 77DA8324 106 Bytes [ 87, 01, 3E, AC, 43, 78, DA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!DuplicateToken + 6D 77DA838F 55 Bytes [ 7F, 36, 84, 3D, 3C, 58, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenCurrentUser + 14 77DA83C7 1 Byte [ 07 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenCurrentUser + 16 77DA83C9 680 Bytes [ 6C, E2, 9D, 44, D0, 43, F2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction036 + F4 77DA8672 40 Bytes [ F4, 96, 35, 42, D0, 5C, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction036 + 11D 77DA869B 13 Bytes [ E7, 60, 3D, 1F, 14, DF, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction036 + 12B 77DA86A9 189 Bytes [ 3D, 36, 7A, 48, 8F, 15, 8F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction036 + 1E9 77DA8767 67 Bytes [ 1F, 22, EE, 20, F3, F2, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction036 + 22D 77DA87AB 124 Bytes [ 7F, 9A, 67, 87, 1B, E0, 38, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD4Final + 31 77DA8AC3 200 Bytes [ 03, 60, 3C, 15, 03, 87, F1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD4Final + FA 77DA8B8C 64 Bytes [ C7, 38, E0, DE, F7, 70, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD4Final + 13B 77DA8BCD 378 Bytes [ 1C, 3C, 04, 3E, 3A, 0F, ED, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD4Final + 2B6 77DA8D48 181 Bytes [ 76, 80, 82, 7B, 70, 02, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD4Final + 36C 77DA8DFE 295 Bytes [ 0F, F2, 86, 80, 1D, 3E, 38, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD4Update + 18 77DA9014 31 Bytes [ 16, 2E, 60, AC, 90, 3E, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD4Update + 38 77DA9034 250 Bytes [ 88, B0, 1A, 86, 45, 9E, CB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD4Update + 133 77DA912F 15 Bytes [ 7E, 2A, FC, 1C, 70, 40, 3E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD4Update + 143 77DA913F 33 Bytes [ 9A, 7B, 06, 3B, 2E, E0, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD4Update + 165 77DA9161 1 Byte [ 08 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IdentifyCodeAuthzLevelW + 8 77DA9DCD 40 Bytes [ F3, 58, F1, 77, 6B, 38, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IdentifyCodeAuthzLevelW + 31 77DA9DF6 50 Bytes [ 07, AD, F3, 04, 26, 27, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IdentifyCodeAuthzLevelW + 64 77DA9E29 69 Bytes [ C2, B8, D7, 62, 80, 9E, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IdentifyCodeAuthzLevelW + AA 77DA9E6F 29 Bytes [ 02, 3F, 6D, 9C, DC, D3, 86, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IdentifyCodeAuthzLevelW + C8 77DA9E8D 475 Bytes [ 1C, 0A, 9B, 06, F6, 60, E2, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CloseCodeAuthzLevel + 6 77DAACB5 279 Bytes [ 97, 80, 18, 61, 5E, B2, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ComputeAccessTokenFromCodeAuthzLevel + 78 77DAADCD 462 Bytes [ 86, F8, 6C, C7, EF, 05, 3E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ComputeAccessTokenFromCodeAuthzLevel + 247 77DAAF9C 179 Bytes [ AF, F9, C8, 62, 2C, 36, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ComputeAccessTokenFromCodeAuthzLevel + 2FC 77DAB051 76 Bytes [ 94, E0, 73, 3A, C0, C3, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ComputeAccessTokenFromCodeAuthzLevel + 34A 77DAB09F 12 Bytes [ 8F, EA, 00, 9F, 33, 3C, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ComputeAccessTokenFromCodeAuthzLevel + 357 77DAB0AC 401 Bytes [ 2E, 64, A5, D0, 3A, AA, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumKeyW + 3E 77DAD687 57 Bytes [ 75, 1C, FF, 75, 18, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumKeyW + 78 77DAD6C1 55 Bytes [ 75, 30, 8D, 45, D0, 50, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumKeyW + B0 77DAD6F9 88 Bytes [ 90, 90, 90, 90, 8B, 65, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumKeyW + 109 77DAD752 33 Bytes [ 89, 33, 81, 7D, E4, 12, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumKeyW + 12C 77DAD775 29 Bytes [ C0, 39, 75, E0, 74, 0A, 8D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetValueExW + 88 77DAD854 39 Bytes [ EB, 26, 8B, 06, 85, C0, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetValueExW + B0 77DAD87C 43 Bytes [ 8B, 46, 04, 89, 47, 04, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetValueExW + DC 77DAD8A8 96 Bytes CALL 77D73FEB C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryValueW + 27 77DAD909 87 Bytes [ 15, 44, 16, DA, 77, 56, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryValueW + 82 77DAD964 82 Bytes [ 61, 00, 75, 00, 64, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegNotifyChangeKeyValue + 51 77DAD9B7 130 Bytes [ 83, C4, 0C, 5D, C2, 10, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegNotifyChangeKeyValue + D4 77DADA3A 38 Bytes [ 55, 8B, EC, 8D, 45, 04, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AllocateLocallyUniqueId + 22 77DADA61 40 Bytes [ 55, 8B, EC, 8D, 45, 04, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ImpersonateLoggedOnUser + B 77DADA8A 29 Bytes [ EC, 8D, 45, 04, 83, C0, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ImpersonateLoggedOnUser + 29 77DADAA8 102 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ImpersonateLoggedOnUser + 90 77DADB0F 29 Bytes CALL 77D68FF3 C:\WINDOWS\system32\USER32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ImpersonateLoggedOnUser + AE 77DADB2D 68 Bytes [ 50, 68, E4, 0C, DB, 77, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MapGenericMask + 7 77DADB72 34 Bytes [ 55, 8B, EC, 8D, 45, 04, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AreAllAccessesGranted + 1B 77DADB97 22 Bytes [ 8B, FF, 55, 8B, EC, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ObjectOpenAuditAlarmW + 15 77DADBAE 3 Bytes [ 43, B4, FB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ObjectOpenAuditAlarmW + 19 77DADBB2 38 Bytes [ 83, C4, 0C, 5D, C2, 10, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ObjectOpenAuditAlarmW + 40 77DADBD9 90 Bytes [ 83, C4, 0C, 5D, C2, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ObjectOpenAuditAlarmW + 9B 77DADC34 6 Bytes [ FF, 55, 8B, EC, 8D, 45 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ObjectOpenAuditAlarmW + A2 77DADC3B 228 Bytes [ 83, C0, 04, 50, 68, 88, 0E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCreateKeyExA + 64 77DAEB58 49 Bytes [ 89, 85, 7C, FF, FF, FF, BE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCreateKeyExA + 96 77DAEB8A 13 Bytes [ 3C, FF, FF, FF, 50, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCreateKeyExA + A4 77DAEB98 6 Bytes [ 53, 8D, 85, 7C, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCreateKeyExA + AB 77DAEB9F 18 Bytes [ 50, 57, FF, 15, A4, 65, E1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCreateKeyExA + BE 77DAEBB2 83 Bytes [ 15, 2C, 14, DA, 77, 39, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetValueExA + 20 77DAEC07 29 Bytes [ 88, 89, 5D, 94, BE, C2, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetValueExA + 3E 77DAEC25 68 Bytes [ 00, 00, 39, 1D, 30, 61, E1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetValueExA + 84 77DAEC6B 54 Bytes [ 75, 42, 89, 5D, 9C, EB, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetValueExA + BB 77DAECA2 31 Bytes [ 34, 07, FF, 75, 90, E8, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetValueExA + DC 77DAECC3 5 Bytes [ 90, E8, 69, FB, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteValueA + 33 77DAEE18 2 Bytes [ 9C, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteValueA + 36 77DAEE1B 25 Bytes [ 8C, 88, 5D, 9B, FF, 34, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteValueA + 50 77DAEE35 4 Bytes [ 8C, 53, 6A, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteValueA + 55 77DAEE3A 4 Bytes [ FF, 74, 06, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteValueA + 5A 77DAEE3F 29 Bytes [ 15, F4, 65, E1, 77, 8B, 45, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteValueW + A 77DAEEFB 14 Bytes [ 6C, 6C, 45, 78, 65, 63, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteValueW + 19 77DAEF0A 106 Bytes [ 68, 00, 65, 00, 6C, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteValueW + 84 77DAEF75 24 Bytes [ 55, 8B, EC, 8D, 45, 04, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteValueW + 9D 77DAEF8E 57 Bytes [ 83, C4, 0C, 5D, C2, 0C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteValueW + D7 77DAEFC8 40 Bytes [ 04, 83, C0, 04, 50, 68, 5A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaOpenPolicy + 96 77DB1CA5 52 Bytes [ 9F, 2B, D9, F5, 90, 0F, 94, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaOpenPolicy + CB 77DB1CDA 272 Bytes [ 1E, 1D, EE, 50, E2, FB, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaClose + 10F 77DB1DEB 444 Bytes [ 47, F2, 2A, C1, 60, CF, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaClose + 2CC 77DB1FA8 283 Bytes [ 43, 63, B3, F4, 54, 7C, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaClose + 3E8 77DB20C4 208 Bytes [ 1C, FD, FF, 8F, 1F, E0, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaClose + 4B9 77DB2195 14 Bytes [ E3, 46, 80, 39, E0, 7B, BC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaClose + 4C8 77DB21A4 31 Bytes [ 14, F0, 4C, D8, 4C, 61, 8D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaQueryInformationPolicy + 4F 77DB2C2E 194 Bytes [ 60, 82, 63, 52, 70, 2F, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW + 13 77DB2CF1 13 Bytes [ 0E, FC, 99, 04, 4C, 37, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW + 21 77DB2CFF 360 Bytes [ 43, 09, D8, E2, 2C, 87, 9E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW + 18A 77DB2E68 12 Bytes [ 07, F4, D6, C0, A7, F3, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW + 197 77DB2E75 44 Bytes [ 39, 56, DC, 27, 41, 76, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW + 1C4 77DB2EA2 390 Bytes [ F3, 21, E3, 38, 0C, E8, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!A_SHAInit + 1E 77DB4FE7 177 Bytes [ 00, 8B, F0, 3B, F7, 75, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!A_SHAFinal + 20 77DB5099 192 Bytes [ 90, B1, 27, 9C, E3, F1, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!A_SHAFinal + E1 77DB515A 195 Bytes [ F2, 61, DA, 83, 7C, 77, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!A_SHAFinal + 1A5 77DB521E 111 Bytes [ F8, 1D, F5, C0, F8, FF, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGenRandom + 4A 77DB528E 97 Bytes [ CF, 0F, 60, 08, FB, 2C, D2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGenRandom + AC 77DB52F0 18 Bytes [ DC, FF, FF, 83, 05, DC, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGenRandom + BF 77DB5303 2 Bytes [ D8, 43 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGenRandom + C2 77DB5306 9 Bytes [ 70, F0, 0A, 49, 10, 3D, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGenRandom + CC 77DB5310 172 Bytes CALL 0BE16AD5 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryServiceStatus + D5 77DB5F8D 33 Bytes [ A2, A9, 80, 28, E3, 0C, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryServiceStatus + F7 77DB5FAF 47 Bytes [ 6A, 87, 0A, 96, 51, 60, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryServiceStatus + 127 77DB5FDF 7 Bytes [ FF, 3F, 72, E0, 31, 0A, DC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryServiceStatus + 12F 77DB5FE7 647 Bytes [ 81, C3, 20, B0, 23, 07, BE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenServiceW + 10A 77DB626F 42 Bytes [ B7, 62, 57, 44, 8F, 66, 96, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenServiceW + 135 77DB629A 52 Bytes [ A2, 85, 23, 27, 1D, 19, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenServiceW + 16A 77DB62CF 190 Bytes [ 81, 0F, 7C, 24, C7, E2, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenServiceW + 229 77DB638E 169 Bytes [ E6, 2C, 03, 78, 18, DB, B3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenServiceW + 2D3 77DB6438 7 Bytes [ 3E, 08, 80, 61, B0, D8, 73 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsWellKnownSid + 6C 77DB6887 37 Bytes [ 62, F8, 97, 21, 06, 71, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsWellKnownSid + 93 77DB68AE 345 Bytes [ F0, 98, CE, 21, 3A, 3F, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfDeregisterEventSource + A4 77DB6A08 89 Bytes [ 9F, 3E, E0, 0C, 16, 77, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfDeregisterEventSource + FE 77DB6A62 6 Bytes [ A1, 8D, 0F, E0, 25, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfDeregisterEventSource + 105 77DB6A69 379 Bytes [ 6A, 03, C7, 6D, D0, 47, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfRegisterEventSourceA + CE 77DB6BE5 34 Bytes [ B7, 27, F1, A4, 61, 88, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfRegisterEventSourceA + F1 77DB6C08 14 Bytes [ 15, 78, 98, C0, 21, 12, 8C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfRegisterEventSourceA + 100 77DB6C17 122 Bytes [ 1C, 06, E0, 8C, 1B, 2C, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ReportEventA + 70 77DB6C92 59 Bytes [ FF, B8, 06, 86, E3, 84, 8F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ReportEventA + AC 77DB6CCE 300 Bytes [ 54, 0F, 1D, EC, 2C, E3, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfReportEventA + B6 77DB6DFB 47 Bytes [ AF, 09, BE, 55, F2, 31, 9E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfReportEventA + E6 77DB6E2B 121 Bytes [ 3F, 22, 00, BB, 53, 25, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfReportEventA + 160 77DB6EA5 375 Bytes [ FF, 8F, 04, 63, 7C, 4C, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AddAce + 6 77DB701D 10 Bytes [ A3, 0B, 98, 0E, DA, B8, A3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AddAce + 11 77DB7028 40 Bytes [ B0, 4E, 2E, 80, DF, 38, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MakeAbsoluteSD + C 77DB7051 303 Bytes [ FF, 14, C9, 6E, 32, FC, EA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsValidAcl + F6 77DB7181 148 Bytes [ CE, 17, 7B, 23, C2, 45, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsValidAcl + 18B 77DB7216 111 Bytes [ 55, 87, 5F, 35, 91, 1F, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsValidAcl + 1FB 77DB7286 194 Bytes [ C7, 07, 1F, 0E, 8C, 52, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfRegisterEventSourceW + 49 77DB7349 78 Bytes [ 3D, 0E, 3C, 29, C5, 7C, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfRegisterEventSourceW + 98 77DB7398 339 Bytes [ 8C, F7, 52, F3, 60, CC, E6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ReportEventW + 40 77DB74EC 297 Bytes [ EE, 23, 0C, DE, 63, 01, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfReportEventW + 41 77DB7616 46 Bytes [ 08, E1, 47, 1A, 21, 7A, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfReportEventW + 70 77DB7645 238 Bytes [ 87, 73, 58, EC, D8, E2, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD5Final + 2E 77DB7734 138 Bytes [ 2E, 9C, F4, DF, D0, 0E, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD5Update + 19 77DB77BF 169 Bytes [ C1, 89, E2, 4B, A5, 8F, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD5Update + C3 77DB7869 274 Bytes [ 63, EC, D1, A1, 0F, 25, BE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD5Update + 1D6 77DB797C 13 Bytes [ 1D, 48, C0, F3, 3C, 76, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD5Update + 1E4 77DB798A 15 Bytes [ CB, FF, FF, FC, 06, 1E, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MD5Update + 1F4 77DB799A 220 Bytes [ 3F, BF, 01, FC, FF, FF, 9F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptAcquireContextA + 2D 77DB7FC3 184 Bytes [ 60, 8E, 04, 6C, AC, 1E, A4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptAcquireContextA + E6 77DB807C 38 Bytes [ 04, 7E, 19, 61, 07, 51, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptAcquireContextA + 10D 77DB80A3 202 Bytes [ 29, 31, E1, 5E, 23, 71, 98, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptAcquireContextA + 1D8 77DB816E 171 Bytes [ 53, 8D, 6F, 07, 87, E2, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptAcquireContextA + 284 77DB821A 19 Bytes [ 1B, 16, 6E, 08, EC, 3E, 61, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptReleaseContext + 9C 77DB85E2 345 Bytes [ BF, C9, 7B, 04, 47, F2, 4A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptAcquireContextW + 14B 77DB873C 114 Bytes [ E3, AD, 8D, 1F, 90, D9, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptAcquireContextW + 1BE 77DB87AF 409 Bytes [ 46, C3, 3C, C7, B0, A1, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction035 + 16C 77DB8949 33 Bytes [ 7C, 4B, 8C, E7, D3, 8C, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction035 + 18E 77DB896B 85 Bytes [ CE, BB, 27, E6, 2C, 68, D4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction035 + 1E4 77DB89C1 55 Bytes [ 07, 11, C0, 86, C0, E5, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction035 + 21C 77DB89F9 238 Bytes [ 86, 3E, 3A, A2, CF, 97, 8F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction035 + 30B 77DB8AE8 92 Bytes JMP E7DED9D0 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptHashData + 122 77DBA244 422 Bytes CALL 6880278D .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptCreateHash + F2 77DBA3EB 301 Bytes [ 39, E0, 1A, 04, EE, 66, E5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetHashParam + DE 77DBA51A 475 Bytes [ D9, 79, F0, 9E, 1A, B0, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptDeriveKey + 71 77DBA6F6 673 Bytes [ 5F, DD, F0, 67, 76, B8, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptImportKey + 11F 77DBA998 6 Bytes [ 0A, 78, BB, 30, D0, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptImportKey + 126 77DBA99F 38 Bytes [ 14, D9, B0, B0, A0, 98, BB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptImportKey + 14D 77DBA9C6 116 Bytes [ FC, FF, 3F, 90, 80, 61, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptImportKey + 1C2 77DBAA3B 430 Bytes [ EF, 54, 70, 82, 41, E8, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptVerifySignatureA + 6A 77DBABEA 633 Bytes JMP 687220EF .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenSCManagerA + BD 77DBAE64 470 Bytes [ A3, 17, 58, 08, 46, 3B, 95, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnumServicesStatusA + FC 77DBB03B 333 Bytes [ 8B, 80, 93, B0, 10, 1A, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnumServicesStatusA + 24A 77DBB189 121 Bytes [ A3, 20, EF, 00, 9D, 35, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetServiceStatus + 70 77DBB203 81 Bytes [ 3F, 18, B1, FF, FF, C1, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetServiceStatus + C2 77DBB255 44 Bytes [ 8C, 80, C5, 05, 04, 58, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetServiceStatus + EF 77DBB282 232 Bytes [ 01, F8, E2, 40, 65, 5C, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetServiceStatus + 1D8 77DBB36B 151 Bytes [ FF, BD, 97, 1F, 0B, C0, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetServiceStatus + 270 77DBB403 41 Bytes [ 70, 61, 5F, 34, F0, 27, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptVerifySignatureW + 21 77DBB483 164 Bytes [ 3C, D2, F3, 86, AF, 20, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceCtrlDispatcherW + 4B 77DBB528 22 Bytes [ 5E, 40, 60, 9C, 59, D8, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceCtrlDispatcherW + 62 77DBB53F 128 Bytes [ 1E, 22, 3F, A4, 80, ED, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceCtrlDispatcherW + E3 77DBB5C0 12 Bytes [ D1, 5E, F5, DE, 0C, 7C, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceCtrlDispatcherW + F0 77DBB5CD 111 Bytes [ D7, 91, DD, E7, 12, 1C, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ControlService + 8 77DBB63D 769 Bytes [ BB, A1, CF, 80, 11, 8E, E1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegFlushKey + 37 77DBB93F 19 Bytes [ 1D, 5C, 43, E0, 47, 18, 9F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegFlushKey + 4B 77DBB953 45 Bytes [ F8, 2E, EB, 70, 70, CE, 8C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegFlushKey + 79 77DBB981 6 Bytes [ F0, 51, 4E, 02, A0, 1B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegFlushKey + 80 77DBB988 125 Bytes [ EE, 1A, 00, 3E, 44, C3, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegFlushKey + FE 77DBBA06 130 Bytes JMP BF2B3C2E .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceW + 3E 77DBBBEA 404 Bytes [ 76, 00, 97, A0, EC, E3, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceW + 1D3 77DBBD7F 16 Bytes [ 50, 6C, 30, 0F, 00, 0C, DE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceW + 1E4 77DBBD90 8 Bytes [ 93, 58, 07, 05, F4, A1, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceW + 1ED 77DBBD99 97 Bytes [ EC, 9D, 9C, 1F, 7A, 8D, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceW + 24F 77DBBDFB 144 Bytes [ E6, B3, 00, 3F, A2, C3, B9, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LogonUserExW + 1A 77DBC2D5 411 Bytes [ 08, F9, D0, C1, 27, 45, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LogonUserExW + 1B6 77DBC471 45 Bytes [ 8C, A1, 8E, 03, 50, 11, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LogonUserExW + 1E4 77DBC49F 121 Bytes [ DE, E1, 23, 82, AF, 4A, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LogonUserExW + 25E 77DBC519 204 Bytes [ 8F, 6A, 02, 84, 49, 3D, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LogonUserExW + 32B 77DBC5E6 38 Bytes [ 3F, 1A, 90, C1, A3, 4F, DB, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegGetKeySecurity + 1B 77DBC70C 113 Bytes [ 2C, 60, 73, 7C, 64, F4, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegGetKeySecurity + 8D 77DBC77E 221 Bytes [ 7F, 0A, 3E, 79, F8, B8, E1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegGetKeySecurity + 16B 77DBC85C 26 Bytes [ 33, F0, 41, 00, 38, 88, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegGetKeySecurity + 186 77DBC877 3 Bytes [ 70, E2, 1E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegGetKeySecurity + 18A 77DBC87B 246 Bytes [ 74, 0C, 00, CB, C4, 61, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetKeySecurity + 9C 77DBC972 237 Bytes [ 32, 72, 0E, 80, 78, 9B, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetKeySecurity + 18A 77DBCA60 7 Bytes [ DD, 28, 70, 27, 0A, 78, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetKeySecurity + 192 77DBCA68 183 Bytes [ 13, 05, 9C, 80, 27, 00, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateWellKnownSid + 94 77DBCB20 925 Bytes [ 7C, 3F, 30, DE, 5B, 3A, BB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction008 + 93 77DBCEBE 72 Bytes [ F8, A4, F2, 50, CC, 2E, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction010 + 2F 77DBCF07 223 Bytes [ 15, 73, 8D, F1, B5, C4, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumValueA + 9E 77DBCFE8 11 Bytes [ E1, 8E, 41, 1E, 07, 16, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumValueA + AA 77DBCFF4 12 Bytes [ 04, F3, 2E, 85, 19, 07, 96, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumValueA + B7 77DBD001 292 Bytes [ 27, F2, CB, 8C, EF, 33, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumValueA + 1DE 77DBD128 297 Bytes [ 23, 05, D3, 1D, D3, 23, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumValueA + 308 77DBD252 244 Bytes [ 86, 83, 82, EF, 60, FE, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction002 + C6 77DBF463 34 Bytes [ A0, 07, 34, F0, 1C, 3F, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction002 + E9 77DBF486 88 Bytes [ 01, EF, 00, 00, FF, E4, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction002 + 142 77DBF4DF 182 Bytes [ 31, 86, B7, 0E, 83, 1C, CA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction002 + 1F9 77DBF596 44 Bytes [ 0C, C6, 87, 72, 76, 02, F1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction002 + 226 77DBF5C3 885 Bytes [ A8, 08, 1C, FE, FF, F7, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction001 + 3F 77DBFC31 42 Bytes [ EC, 92, 0A, E3, DC, 83, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction001 + 6A 77DBFC5C 266 Bytes [ DC, 84, F0, A3, 60, 77, 8F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction004 + 18 77DBFD67 261 Bytes [ 58, CF, 10, 3E, DE, F8, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction004 + 11E 77DBFE6D 163 Bytes [ 75, 58, D1, 4F, 85, DD, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction004 + 1C2 77DBFF11 82 Bytes [ 2B, 8E, 51, 8E, F2, 2D, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction029 77DBFF64 509 Bytes [ DC, 21, 3C, 27, 3C, C1, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction005 + 8B 77DC0162 185 Bytes [ 9F, 25, 30, 87, 14, C0, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction034 + 1E 77DC021C 14 Bytes [ 3F, A0, 00, 6E, 92, 1E, CB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction034 + 2D 77DC022B 218 Bytes [ 04, 70, 51, 7C, 8A, A2, EA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaRetrievePrivateData + 30 77DC0306 13 Bytes [ EC, 05, 06, 7C, A3, B1, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaRetrievePrivateData + 3E 77DC0314 472 Bytes [ FD, 20, 50, F5, 41, 8E, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaStorePrivateData + 4C 77DC04ED 44 Bytes [ AF, 91, 46, 7A, 61, F3, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaStorePrivateData + 79 77DC051A 56 Bytes [ F9, 69, 93, CD, 1E, 07, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaStorePrivateData + B2 77DC0553 161 Bytes [ FA, 03, 08, B0, C0, 7A, BF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaStorePrivateData + 154 77DC05F5 56 Bytes [ 1A, FD, 0C, 89, 3E, 7A, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaNtStatusToWinError + 14 77DC062E 300 Bytes [ EB, FF, FF, C1, 02, 98, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredProfileLoaded + 64 77DC075B 57 Bytes [ 79, C0, 3C, 31, 31, 94, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredProfileLoaded + 9E 77DC0795 100 Bytes JMP 16D11466 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredProfileLoaded + 103 77DC07FA 175 Bytes [ 6F, 0C, 98, 71, 73, B8, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityInfo + 2B 77DC08AA 179 Bytes [ 24, 03, 43, DA, C0, F5, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegisterServiceCtrlHandlerA + B 77DC095E 374 Bytes [ 60, E0, AC, 60, B8, 40, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!I_ScSetServiceBitsW + 8D 77DC0AD5 54 Bytes [ 0A, 01, E3, 90, C1, 78, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!I_ScSetServiceBitsW + C4 77DC0B0C 113 Bytes [ 53, 07, F6, 0E, ED, 2B, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!I_ScSetServiceBitsW + 136 77DC0B7E 109 Bytes [ 7B, 52, C7, DC, 1A, 88, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!I_ScSetServiceBitsW + 1A4 77DC0BEC 260 Bytes [ 13, 08, 8D, 72, 02, 01, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!I_ScSetServiceBitsW + 2A9 77DC0CF1 43 Bytes [ 1B, C8, 43, 80, A7, 0B, 77, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegisterIdleTask + E6 77DC0F4A 235 Bytes [ 9B, F0, C7, 76, 59, 18, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetCurrentHwProfileW + 31 77DC1036 175 Bytes [ FF, 49, 03, BC, F7, 80, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetCurrentHwProfileW + E1 77DC10E6 25 Bytes [ 1D, 16, FE, 5C, ED, 2D, 7B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetCurrentHwProfileW + FC 77DC1101 219 Bytes [ C3, 06, 78, 46, 0C, FB, A8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetCurrentHwProfileW + 1D8 77DC11DD 161 Bytes [ 3F, 40, 01, CF, 13, 01, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetCurrentHwProfileW + 27A 77DC127F 34 Bytes [ 87, 05, F0, CE, 0D, 33, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetNamedSecurityInfoW + 1D 77DC12A2 186 Bytes [ 12, 80, 3D, 30, 00, 1B, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetNamedSecurityInfoW + D8 77DC135D 166 Bytes [ 07, 8C, B9, 9B, 1E, 17, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction041 + 27 77DC1404 10 Bytes [ 0C, 02, D8, 89, 77, 1C, A4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction041 + 32 77DC140F 103 Bytes [ 06, 35, 2A, CF, F7, 19, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityDescriptorControl + 27 77DC1477 24 Bytes [ AC, 86, 3C, 5C, D0, 80, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityDescriptorControl + 41 77DC1491 125 Bytes [ 07, 0C, B0, 9D, 77, 7D, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaGetUserName + 40 77DC150F 230 Bytes [ FB, F8, 03, 9E, 73, 03, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptEncrypt + 9E 77DC15F6 404 Bytes [ 7F, 10, 98, 58, A3, 07, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegLoadKeyW + 16A 77DC178B 42 Bytes [ 56, D8, 75, 80, 1D, 52, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegLoadKeyW + 195 77DC17B6 279 Bytes [ 56, B8, DB, 00, B8, 8F, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetEventLogInformation + 4E 77DC18CE 140 Bytes [ FF, 49, 38, E2, 6D, 02, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenEventLogW + 3B 77DC195B 84 Bytes [ 8F, B6, 9B, 03, B9, 98, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfOpenEventLogW + 49 77DC19B0 59 Bytes [ FF, 79, 02, 38, 1C, E0, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfOpenEventLogW + 85 77DC19EC 381 Bytes [ 97, 1D, 5C, 60, 9E, 36, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetKeyParam + 3A 77DC1B6A 227 Bytes [ 1A, E3, 79, 14, 73, 3A, 7B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetProvParam + 7D 77DC1C4E 8 Bytes [ F6, 06, 83, 3D, 18, 81, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetProvParam + 86 77DC1C57 108 Bytes [ FF, 74, 07, CE, B3, 03, EE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetProvParam + F3 77DC1CC4 151 Bytes [ C0, 45, 98, 0A, 10, 9D, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetProvParam + 18B 77DC1D5C 73 Bytes [ 45, 1E, 40, 5F, 67, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetProvParam + 1D5 77DC1DA6 127 Bytes [ F8, 60, 99, 2E, F8, EE, EE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiMofEnumerateResourcesW + DB 77DC243B 446 Bytes [ A2, 71, 7C, 53, 33, C8, E3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiMofEnumerateResourcesW + 29A 77DC25FA 193 Bytes [ F5, C2, D3, 84, 33, 40, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiPopulateDefaultsInRegistry + 61 77DC26BC 230 Bytes JMP E6030C31 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiPopulateDefaultsInRegistry + 148 77DC27A3 1157 Bytes [ 9F, 5A, D9, BC, 0C, F1, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiPopulateDefaultsInRegistry + 5CF 77DC2C2A 409 Bytes [ 49, F8, F8, 00, 9E, 73, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiPopulateDefaultsInRegistry + 769 77DC2DC4 11 Bytes [ C5, D1, 0F, 3C, E3, C0, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiPopulateDefaultsInRegistry + 775 77DC2DD0 77 Bytes [ 8F, DB, 67, 61, 18, A3, 04, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceA + 21 77DC3259 240 Bytes [ FD, FF, BF, 91, 60, 8F, 86, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceA + 112 77DC334A 213 Bytes [ DD, A4, 70, 47, 1B, 6B, BC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetInformationCodeAuthzLevelW + 50 77DC3420 297 Bytes [ 73, 3E, 64, 08, 31, 7D, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiCloseBlock + 66 77DC354A 2 Bytes [ 63, F4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiCloseBlock + 69 77DC354D 106 Bytes [ C0, E7, 0D, 3C, DA, AB, DE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegisterServiceCtrlHandlerExA + 2D 77DC35B8 63 Bytes [ B7, 2B, A3, FE, FF, CF, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiReceiveNotificationsW + 2E 77DC35F8 42 Bytes [ E5, C3, 05, BB, 2D, 82, E5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiReceiveNotificationsW + 59 77DC3623 10 Bytes [ D0, 0E, E2, 54, 9E, 86, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiReceiveNotificationsW + 64 77DC362E 80 Bytes [ A1, 7B, 3E, 06, 65, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiReceiveNotificationsW + B5 77DC367F 154 Bytes [ 83, 84, 7D, 7D, E6, 07, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiReceiveNotificationsW + 150 77DC371A 118 Bytes [ FF, FC, 04, 9E, D3, 3F, BF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryServiceConfigA + 21E 77DC5680 23 Bytes [ CB, C1, 4F, 89, F4, D0, C5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryServiceConfigA + 236 77DC5698 178 Bytes [ DF, 6C, D8, B5, C0, B7, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryServiceConfigA + 2E9 77DC574B 151 Bytes [ 78, 46, 00, 27, F4, 69, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryServiceConfigA + 381 77DC57E3 270 Bytes [ B8, 2F, 00, 60, 1B, C4, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryServiceConfigA + 490 77DC58F2 115 Bytes [ 78, 7C, F1, 71, D6, 03, F4, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryWindows31FilesMigration + D 77DC5A12 149 Bytes [ 80, 77, 10, 00, E3, 09, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryWindows31FilesMigration + A3 77DC5AA8 160 Bytes [ 41, 02, FE, AB, D6, 4C, A2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryWindows31FilesMigration + 144 77DC5B49 17 Bytes [ 37, F9, 2A, 80, B9, 00, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryWindows31FilesMigration + 156 77DC5B5B 60 Bytes [ FF, 98, 19, BA, 61, 12, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryWindows31FilesMigration + 193 77DC5B98 65 Bytes [ FB, 0E, CC, 11, 70, 49, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryAllTracesW + 17F 77DC5EE2 247 Bytes [ F7, 54, 02, BE, C0, 47, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryAllTracesW + 277 77DC5FDA 85 Bytes [ 8E, 71, 05, 39, 77, 23, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ControlTraceW + 22 77DC6030 73 Bytes [ 3D, 80, F3, 81, 33, 7A, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ControlTraceW + 6C 77DC607A 131 Bytes [ B7, 32, 9F, F0, D9, C8, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ControlTraceW + F0 77DC60FE 105 Bytes [ 83, 3A, A3, FA, 68, 03, E3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ControlTraceW + 15A 77DC6168 252 Bytes [ 9B, 23, 8C, E3, 16, F6, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ControlTraceW + 257 77DC6265 434 Bytes [ C9, 90, 9E, A9, 1E, D5, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetOldestEventLogRecord + 8 77DC6418 76 Bytes [ 00, 7F, 12, 98, 7B, 0A, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfOldestRecord + 31 77DC6465 253 Bytes [ E0, 0F, 64, 3E, 0A, C0, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfOpenEventLogA + 7C 77DC6563 279 Bytes [ E2, D1, 02, DE, 25, 0E, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfOpenEventLogA + 194 77DC667B 520 Bytes [ C0, EE, 40, 30, 28, 09, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AbortSystemShutdownW + 177 77DC6884 59 Bytes [ 80, 6E, 14, FC, E4, C2, A6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AbortSystemShutdownW + 1B3 77DC68C0 329 Bytes [ 7F, 84, 00, C7, 34, F0, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AbortSystemShutdownW + 2FD 77DC6A0A 326 Bytes [ 4E, 6D, B0, FF, FF, 07, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AbortSystemShutdownW + 444 77DC6B51 63 Bytes [ E0, A3, 35, 3B, 37, 81, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AbortSystemShutdownW + 484 77DC6B91 204 Bytes [ B0, 77, 8B, 47, 03, DC, BD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiCompareTokenLevels + 2F 77DC72C7 148 Bytes [ 09, 14, 84, 66, AE, 0F, 4A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiCompareTokenLevels + C4 77DC735C 57 Bytes [ 9A, 48, 1C, 08, CB, E2, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiCompareTokenLevels + FE 77DC7396 115 Bytes [ EA, 73, F0, 54, 29, 08, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiCompareTokenLevels + 172 77DC740A 31 Bytes [ 43, A1, 01, 40, 98, 84, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiCompareTokenLevels + 192 77DC742A 123 Bytes [ 98, B0, 1A, 20, 4C, 5A, 10, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateProcessAsUserW + C6 77DC783B 67 Bytes [ 3F, 0C, 5A, 1E, 9C, 82, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateProcessAsUserW + 10A 77DC787F 166 Bytes [ 66, 91, 01, C2, B2, FA, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateProcessAsUserW + 1B1 77DC7926 78 Bytes [ 61, AA, 04, 82, 30, ED, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateProcessAsUserW + 200 77DC7975 274 Bytes [ FF, 8F, 07, D4, ED, E0, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateProcessAsUserW + 313 77DC7A88 80 Bytes [ 28, 08, D5, 1F, F2, 38, 41, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!UnregisterTraceGuids + 35 77DC8452 99 Bytes [ 81, B0, 87, 5B, 10, A6, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!UnregisterTraceGuids + 99 77DC84B6 65 Bytes [ 6C, 82, 30, 4D, 3A, C1, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!UnregisterTraceGuids + DB 77DC84F8 650 Bytes [ A0, 86, 07, 4E, 15, 83, B1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!UnregisterTraceGuids + 366 77DC8783 129 Bytes [ AA, D6, 04, 18, CB, 07, A2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupAccountSidW + 3A 77DC8805 840 Bytes [ 8C, C9, 70, 04, 4A, 41, A8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaICLookupSids + C5 77DC8B4E 195 Bytes [ 05, A1, BA, 33, 0E, 84, 82, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaICLookupSids + 189 77DC8C12 132 Bytes [ 44, 23, 1F, 40, 28, 88, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaICLookupSids + 20E 77DC8C97 63 Bytes [ AA, AA, FC, 10, 28, 88, 86, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!InitializeSid + 1C 77DC8CD7 36 Bytes [ C6, 94, 48, 00, 62, CA, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!InitializeSid + 41 77DC8CFC 41 Bytes [ 15, 40, 2C, 9B, 0B, 10, 96, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!InitializeSid + 6B 77DC8D26 1194 Bytes [ C4, 32, 82, 68, 38, 44, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupAccountNameW + 5D 77DC91D1 119 Bytes [ 8A, 0B, 0A, C4, A4, 83, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupAccountNameW + D5 77DC9249 171 Bytes [ 9A, 41, 68, 8C, CC, 83, A7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupAccountNameW + 181 77DC92F5 18 Bytes [ 0F, 44, 41, 04, EC, 58, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupAccountNameW + 194 77DC9308 44 Bytes [ C4, 00, 10, 13, A7, 00, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaLookupNames2 + 2C 77DC9335 30 Bytes [ 8B, 03, 42, 25, AB, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaICLookupNames + 1 77DC9354 482 Bytes [ 22, 21, 20, 2C, 3D, 08, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaICLookupNames + 1E4 77DC9537 270 Bytes [ 40, 9C, 1E, 53, 28, 08, D5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaICLookupNames + 2F3 77DC9646 51 Bytes [ 88, 40, AD, DE, FD, 90, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaICLookupNames + 327 77DC967A 257 Bytes [ 62, 69, 40, 34, 08, 02, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaEnumerateAccountRights + B5 77DC977C 279 Bytes [ 54, 4A, 43, 20, 26, 1C, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteKeyW + 10 77DC9894 414 Bytes JMP 987D5D16 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteKeyW + 1AF 77DC9A33 94 Bytes [ 11, 90, 83, EB, 3A, 04, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteKeyW + 20E 77DC9A92 421 Bytes [ 1D, 2A, 28, 88, 0E, 15, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteKeyW + 3B4 77DC9C38 123 Bytes [ E6, F8, CD, 06, 4A, A3, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteKeyW + 430 77DC9CB4 7 Bytes [ 52, 30, 26, 2C, EA, B1, 82 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegisterTraceGuidsW + 17 77DCA507 102 Bytes [ B0, 20, 3A, 72, 90, A0, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegisterTraceGuidsW + 7E 77DCA56E 249 Bytes [ 29, 08, 55, 13, 19, 8C, A9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegisterTraceGuidsW + 178 77DCA668 763 Bytes [ D0, 6C, 2E, 06, 42, 65, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiNotificationRegistrationW + 57 77DCA964 128 Bytes CALL 9446F4B1 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiNotificationRegistrationW + D8 77DCA9E5 30 Bytes CALL 205CECA2 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiNotificationRegistrationW + F7 77DCAA04 13 Bytes [ 83, B0, A4, 95, 40, 98, 9E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiNotificationRegistrationW + 105 77DCAA12 95 Bytes [ 02, 66, 49, 40, 04, 46, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiNotificationRegistrationW + 165 77DCAA72 94 Bytes [ 10, 01, 59, 43, B2, 63, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiOpenBlock + E 77DCAAD1 264 Bytes [ 41, 10, 9A, F0, 48, 48, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDisablePredefinedCache + 45 77DCABDA 137 Bytes [ A8, C8, D4, 07, 1E, 0A, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDisablePredefinedCache + CF 77DCAC64 12 Bytes [ 62, FA, 41, 74, 58, 21, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDisablePredefinedCache + DC 77DCAC71 32 Bytes [ 44, C7, 63, 02, 44, 75, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDisablePredefinedCache + FD 77DCAC92 50 Bytes [ 40, 2C, 3A, 10, 15, A8, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDisablePredefinedCache + 130 77DCACC5 172 Bytes [ 00, B1, 14, 20, 3A, 00, 11, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenUserClassesRoot + 3C 77DCAFC8 163 Bytes [ 01, A2, 7A, 0A, 1C, 6C, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenUserClassesRoot + E0 77DCB06C 37 Bytes CALL 949EF0B9 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenUserClassesRoot + 107 77DCB093 18 Bytes [ 50, 00, 00, 0D, 00, 4E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenUserClassesRoot + 11A 77DCB0A6 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenUserClassesRoot + 11C 77DCB0A8 19 Bytes [ 6C, 00, 61, 00, 75, 00, 62, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiIsExecutableFileType + 23 77DCB636 7 Bytes [ 65, 00, 6E, 00, 20, 00, 68 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiIsExecutableFileType + 2B 77DCB63E 51 Bytes [ 61, 00, 74, 00, 20, 00, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiIsExecutableFileType + 5F 77DCB672 7 Bytes [ 63, 00, 68, 00, 74, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiIsExecutableFileType + 67 77DCB67A 53 Bytes [ 65, 00, 69, 00, 6E, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiIsExecutableFileType + 9E 77DCB6B1 18 Bytes [ 00, 66, 00, 73, 00, 72, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetInformationCodeAuthzPolicyW + 53 77DCB798 59 Bytes CALL 651CB7A0 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetInformationCodeAuthzPolicyW + 8F 77DCB7D4 12 Bytes [ 20, 00, 41, 00, 75, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetInformationCodeAuthzPolicyW + 9C 77DCB7E1 10 Bytes [ 00, 6D, 00, 65, 00, 20, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetInformationCodeAuthzPolicyW + A7 77DCB7EC 9 Bytes [ 61, 00, 74, 00, 20, 00, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetInformationCodeAuthzPolicyW + B1 77DCB7F6 11 Bytes [ 69, 00, 20, 00, 64, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CommandLineFromMsiDescriptor + 48 77DCB9AE 21 Bytes [ 6E, 00, 20, 00, 41, 00, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CommandLineFromMsiDescriptor + 5E 77DCB9C4 73 Bytes [ 20, 00, 5B, 00, 25, 00, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CommandLineFromMsiDescriptor + A8 77DCBA0E 1 Byte [ 54 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CommandLineFromMsiDescriptor + AA 77DCBA10 17 Bytes [ 2D, 00, 52, 00, 65, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CommandLineFromMsiDescriptor + BC 77DCBA22 35 Bytes [ 65, 00, 72, 00, 75, 00, 6E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQueryAllDataW + 2 77DCBB55 36 Bytes [ 00, 74, 00, 20, 00, 64, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQueryAllDataW + 27 77DCBB7A 5 Bytes [ 70, 00, 65, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQueryAllDataW + 2D 77DCBB80 3 Bytes [ 27, 00, 25 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQueryAllDataW + 31 77DCBB84 11 Bytes [ 31, 00, 27, 00, 20, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQueryAllDataW + 3D 77DCBB90 1 Byte [ 50 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetFileSecurityW + 14 77DCBCF2 27 Bytes [ 67, 00, 69, 00, 73, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetFileSecurityW + 30 77DCBD0E 17 Bytes [ 65, 00, 72, 00, 6E, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetFileSecurityW + 42 77DCBD20 19 Bytes [ 20, 00, 64, 00, 61, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetFileSecurityW + 56 77DCBD34 31 Bytes [ 72, 00, 75, 00, 70, 00, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetFileSecurityW + 76 77DCBD54 5 Bytes [ 6D, 00, 65, 00, 6E ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteKeyA + 15 77DCC138 5 Bytes [ 69, 00, 65, 00, 0D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteKeyA + 1B 77DCC13E 7 Bytes [ 0A, 00, 57, 00, 69, 00, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteKeyA + 23 77DCC146 23 Bytes [ 64, 00, 6F, 00, 77, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteKeyA + 3B 77DCC15E 19 Bytes [ 73, 00, 74, 00, 72, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegDeleteKeyA + 4F 77DCC172 41 Bytes [ FC, 00, 62, 00, 65, 00, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryInfoKeyA + 3F 77DCC1F4 13 Bytes [ 20, 00, 57, 00, 69, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryInfoKeyA + 4D 77DCC202 2 Bytes [ 73, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryInfoKeyA + 50 77DCC205 46 Bytes [ 00, 33, 00, 2E, 00, 31, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryInfoKeyA + 7F 77DCC234 93 Bytes [ 6F, 00, 6E, 00, 6E, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryInfoKeyA + DD 77DCC292 40 Bytes [ 20, 00, 50, 00, 72, 00, 6F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CopySid + 1C 77DCC320 22 Bytes [ 20, 00, 77, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSidToStringSidW + B 77DCC337 29 Bytes [ 00, 00, 01, 01, 00, 44, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSidToStringSidW + 29 77DCC355 2 Bytes [ 00, 25 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSidToStringSidW + 2C 77DCC358 23 Bytes [ 31, 00, 20, 00, 76, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSidToStringSidW + 44 77DCC370 51 Bytes [ 74, 00, 65, 00, 69, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSidToStringSidW + 78 77DCC3A4 5 Bytes [ 77, 00, 65, 00, 72 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenKeyA + F 77DCC42A 13 Bytes [ 6D, 00, 65, 00, 6E, 00, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenKeyA + 1D 77DCC438 5 Bytes [ F4, 01, 01, 00, 44 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenKeyA + 23 77DCC43E 3 Bytes [ 65, 00, 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenKeyA + 27 77DCC442 13 Bytes [ 20, 00, 49, 00, 6E, 00, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOpenKeyA + 35 77DCC450 7 Bytes [ 20, 00, 65, 00, 69, 00, 6E ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsTokenRestricted + 20 77DCC47E 7 Bytes [ 65, 00, 73, 00, 20, 00, 57 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsTokenRestricted + 28 77DCC486 19 Bytes [ 69, 00, 6E, 00, 64, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsTokenRestricted + 3C 77DCC49A 27 Bytes [ 20, 00, 50, 00, 72, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsTokenRestricted + 58 77DCC4B6 3 Bytes [ 67, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsTokenRestricted + 5C 77DCC4BA 11 Bytes [ 72, 00, 73, 00, 20, 00, 6B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetUserNameW + 13 77DCC4E6 1 Byte [ 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetUserNameW + 15 77DCC4E8 125 Bytes [ 20, 00, 57, 00, 69, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AdjustTokenPrivileges + 32 77DCC566 51 Bytes [ 72, 00, 75, 00, 70, 00, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AdjustTokenPrivileges + 66 77DCC59A 1 Byte [ 64 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AdjustTokenPrivileges + 68 77DCC59C 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AdjustTokenPrivileges + 6A 77DCC59E 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AdjustTokenPrivileges + 6C 77DCC5A0 1 Byte [ 25 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSidToStringSidA + 18 77DCC82E 73 Bytes [ 00, 00, 14, 03, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSidToStringSidA + 62 77DCC878 25 Bytes [ 70, 00, 61, 00, 6E, 00, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSidToStringSidA + 7C 77DCC892 36 Bytes [ 72, 00, 6F, 00, 73, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSidToStringSidA + A1 77DCC8B7 20 Bytes [ 00, 68, 00, 20, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumKeyExA + B 77DCC8CC 20 Bytes [ 63, 00, 72, 00, 69, 00, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumKeyExA + 20 77DCC8E1 52 Bytes [ 00, 72, 00, 77, 00, 65, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumKeyExA + 55 77DCC916 7 Bytes [ 2D, 00, 41, 00, 50, 00, 49 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumKeyExA + 5E 77DCC91F 5 Bytes [ 00, 74, 00, 29, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumKeyExA + 65 77DCC926 23 Bytes [ 46, 00, 69, 00, 6C, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumKeyA + B 77DCCACE 5 Bytes [ 79, 00, 73, 00, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegEnumKeyA + 11 77DCCAD4 65 Bytes [ 65, 00, 6D, 00, 20, 00, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupPrivilegeValueW + 20 77DCCB16 5 Bytes [ 74, 00, 56, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupPrivilegeValueW + 26 77DCCB1C 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupPrivilegeValueW + 28 77DCCB1E 11 Bytes [ 73, 00, 69, 00, 6F, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupPrivilegeValueW + 34 77DCCB2A 1 Byte [ 2E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupPrivilegeValueW + 36 77DCCB2C 19 Bytes [ 31, 00, 2E, 00, 32, 00, 36, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryValueA + 11 77DCCC21 36 Bytes [ 60, 00, 00, 40, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryValueA + 36 77DCCC46 416 Bytes [ B7, 3C, BD, 3C, D1, 3C, DE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryInfoKeyW + F8 77DCCDE7 41 Bytes [ 3A, BC, 3A, EE, 3A, 08, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryInfoKeyW + 122 77DCCE11 55 Bytes [ 3C, 24, 3C, 44, 3C, 4C, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityDescriptorOwner + 23 77DCCE49 198 Bytes [ A0, 00, 00, 9C, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetSecurityDescriptorControl + 36 77DCCF10 128 Bytes [ DC, 33, EC, 33, AB, 34, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ImpersonateAnonymousToken + 15 77DCCF91 7 Bytes [ C0, 00, 00, E0, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ImpersonateAnonymousToken + 1D 77DCCF99 217 Bytes [ 30, 0C, 30, 11, 30, 22, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetKernelObjectSecurity + 7C 77DCD073 135 Bytes [ 00, 80, 00, 00, 00, 15, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetNamedSecurityInfoW + 83 77DCD0FB 228 Bytes [ 30, AA, 30, DE, 30, E8, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetKernelObjectSecurity + 23 77DCD1E0 183 Bytes CALL 680EBE16 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!DeleteAce + 1A 77DCD298 146 Bytes [ 51, 33, 71, 33, 7D, 33, 82, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!DeleteAce + AD 77DCD32B 152 Bytes [ 32, 1C, 32, 20, 32, 37, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!DeleteAce + 146 77DCD3C4 57 Bytes [ CE, 3B, 25, 3C, 4C, 3C, AC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!DeleteAce + 180 77DCD3FE 243 Bytes [ 00, 00, 2D, 30, 6D, 30, 95, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetUserNameA + 29 77DCD4F2 228 Bytes [ 01, 00, 2C, 00, 00, 00, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegCreateKeyA + 1D 77DCD5D8 417 Bytes [ 29, 30, 34, 30, 96, 31, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsTextUnicode + 17D 77DCD77A 271 Bytes [ 1A, 34, 24, 34, 31, 34, 3E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsTextUnicode + 28D 77DCD88A 112 Bytes [ 96, 34, AF, 34, B7, 34, BF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsTextUnicode + 2FE 77DCD8FB 295 Bytes [ 37, 0C, 38, 14, 38, 1C, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsTextUnicode + 426 77DCDA23 210 Bytes [ 30, 5D, 30, 8E, 30, AC, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsTextUnicode + 4FB 77DCDAF8 34 Bytes [ 05, 30, 39, 30, 5C, 30, A0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ClearEventLogW + C 77DDC131 176 Bytes [ E0, 39, F0, 39, 03, 5D, 71, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ClearEventLogW + BD 77DDC1E2 32 Bytes [ 79, 18, 06, 02, 08, 1C, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ClearEventLogW + DE 77DDC203 16 Bytes [ 15, 0A, 4F, 07, 04, 06, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ClearEventLogW + EF 77DDC214 42 Bytes [ 05, 06, 2D, 11, 48, 49, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ClearEventLogW + 11A 77DDC23F 514 Bytes [ 02, 00, 44, FF, C5, 01, 9A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenBackupEventLogW + F2 77DDC442 21 Bytes [ 9F, 25, AF, 25, B0, 25, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenBackupEventLogW + 108 77DDC458 11 Bytes [ 10, D4, CC, 10, CC, 10, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenBackupEventLogW + 114 77DDC464 56 Bytes [ 3F, C5, DD, C4, 11, 12, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ReadEventLogW + 1E 77DDC49D 220 Bytes [ 17, 32, 36, 17, 07, 06, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!BackupEventLogA + 59 77DDC57A 248 Bytes [ 2E, 16, 10, 08, 01, 40, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenBackupEventLogA + E9 77DDC673 51 Bytes [ 0F, 04, 16, 6C, 3F, 2B, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetCurrentHwProfileA + 5 77DDC6A7 423 Bytes [ B8, 40, 80, 40, 55, 1D, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AdjustTokenGroups + F 77DDC84F 117 Bytes [ 16, 24, 24, 16, 15, 22, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AccessCheckByTypeAndAuditAlarmW + 4E 77DDC8C5 22 Bytes [ 20, 40, 47, 68, 11, 32, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AccessCheckByTypeAndAuditAlarmW + 65 77DDC8DC 6 Bytes [ 22, FE, A0, 08, 63, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AccessCheckByTypeAndAuditAlarmW + 6C 77DDC8E3 29 Bytes [ 63, 03, 2D, 15, 0B, 57, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AccessCheckByTypeAndAuditAlarmW + 8A 77DDC901 616 Bytes [ 5A, 01, 00, 15, 05, 01, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AccessCheckAndAuditAlarmA + E1 77DDCB6A 27 Bytes [ 40, 56, 01, 02, 15, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AccessCheckByTypeAndAuditAlarmA + 17 77DDCB86 37 Bytes [ 00, 40, 52, 03, 00, 17, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AccessCheckByTypeAndAuditAlarmA + 3D 77DDCBAC 55 Bytes [ FC, 12, C0, DF, 3D, FE, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AccessCheckByTypeAndAuditAlarmA + 75 77DDCBE4 236 Bytes [ 40, 4B, 14, 00, 15, 14, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AccessCheckByTypeResultListAndAuditAlarmA + 6D 77DDCCD1 393 Bytes [ 40, 14, 01, 14, 24, 40, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ObjectPrivilegeAuditAlarmW + A 77DDCE5B 54 Bytes [ 27, 0F, 29, 5D, E4, 0E, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ObjectPrivilegeAuditAlarmW + 41 77DDCE92 236 Bytes [ 41, 0C, 01, BB, 02, 4F, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AddAccessDeniedAceEx 77DDCF7F 33 Bytes [ 17, 40, 56, 68, 2E, 17, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AddAccessDeniedAceEx + 22 77DDCFA1 87 Bytes [ 40, 02, 05, 00, 40, 00, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AddAuditAccessAce + 32 77DDCFF9 77 Bytes [ 0A, 02, 1F, 02, 1E, 02, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AddAuditAccessAceEx + 49 77DDD047 181 Bytes [ C0, 01, B4, 00, D0, 01, B4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!AddAuditAccessObjectAce + 15 77DDD0FD 87 Bytes [ 00, 16, 01, F2, 02, 13, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!FindFirstFreeAce + 19 77DDD155 141 Bytes [ 15, 01, 8F, 01, 92, 01, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreatePrivateObjectSecurity + 32 77DDD1E3 412 Bytes [ 3F, 1A, CD, C4, 2B, 10, C5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetFileSecurityA + 1D 77DDD380 488 Bytes [ 14, 23, 22, 35, 34, 36, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupAccountSidA + 3D 77DDD569 77 Bytes [ 0C, 26, 34, 1F, 19, 1A, 93, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupAccountSidA + 8B 77DDD5B7 157 Bytes [ 17, 37, 09, 07, 15, 35, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupAccountSidA + 129 77DDD655 570 Bytes [ 04, 02, 28, 5D, 2F, 24, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupPrivilegeDisplayNameW + E1 77DDD890 54 Bytes [ BB, B2, 28, 18, 18, B9, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupPrivilegeDisplayNameW + 118 77DDD8C7 167 Bytes [ 9B, 01, E2, 40, 22, 01, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateRestrictedToken + A3 77DDD96F 286 Bytes [ 72, 01, 00, 72, 10, 72, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetWindowsAccountDomainSid + 2D 77DDDA8E 69 Bytes [ 4B, 00, 0B, 01, EB, 01, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetWindowsAccountDomainSid + 73 77DDDAD4 104 Bytes [ A0, 01, E7, 00, B0, 01, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetWindowsAccountDomainSid + DC 77DDDB3D 233 Bytes [ 1C, 15, 40, 4D, C9, CD, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EqualDomainSid + DE 77DDDC27 3 Bytes [ A0, 01, E7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EqualDomainSid + E2 77DDDC2B 673 Bytes [ B0, 01, E7, 00, 05, 01, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ObjectDeleteAuditAlarmA + 1D 77DDDECD 204 Bytes [ 14, 07, 15, 16, 15, 14, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupPrivilegeNameA + C 77DDDF9A 175 Bytes [ 04, 53, 23, 09, 09, 40, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupPrivilegeNameA + BC 77DDE04A 110 Bytes [ 08, 0A, 56, 71, 02, 79, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupPrivilegeDisplayNameA + D 77DDE0B9 91 Bytes [ FD, A0, 39, 5C, 39, 40, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupPrivilegeDisplayNameA + 69 77DDE115 100 Bytes [ 01, 06, 1C, 21, 10, 1B, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupPrivilegeDisplayNameA + CE 77DDE17A 184 Bytes [ 0C, 11, 08, 0C, 12, 08, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupPrivilegeDisplayNameA + 187 77DDE233 157 Bytes [ 0C, 06, 0A, 07, 16, 09, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupPrivilegeDisplayNameA + 225 77DDE2D1 124 Bytes [ 2B, 01, 11, 01, 24, 01, 39, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SynchronizeWindows31FilesAndWindowsNTRegistry + 167 77DDEC60 72 Bytes [ 80, 00, 03, 01, AF, 01, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SynchronizeWindows31FilesAndWindowsNTRegistry + 1B0 77DDECA9 45 Bytes [ B9, 01, 0D, 01, 05, B2, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SynchronizeWindows31FilesAndWindowsNTRegistry + 1DE 77DDECD7 755 Bytes [ 4B, B8, 01, 20, B3, A2, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SynchronizeWindows31FilesAndWindowsNTRegistry + 4D2 77DDEFCB 140 Bytes [ 14, 07, 01, 36, 35, 34, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SynchronizeWindows31FilesAndWindowsNTRegistry + 55F 77DDF058 215 Bytes [ 47, 1C, 2B, 1E, 22, 46, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LogonUserW + 3A 77DDFDE3 413 Bytes [ 32, 20, 14, 14, 1D, 2D, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LogonUserW + 1D8 77DDFF81 267 Bytes [ 83, 01, 75, B2, 28, 18, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LogonUserW + 2E4 77DE008D 158 Bytes [ 04, B2, 17, 40, 56, B9, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LogonUserW + 383 77DE012C 62 Bytes [ 58, 05, 66, 16, 9F, 0A, AF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LogonUserW + 3C2 77DE016B 115 Bytes [ 3B, B7, 17, 40, 4A, 78, 91, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiReplaceProcessThreadTokens + 15F 77DE037E 46 Bytes [ 14, 17, 17, 16, 16, 17, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiReplaceProcessThreadTokens + 18E 77DE03AD 116 Bytes [ 34, 36, 33, 32, 17, 16, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiReplaceProcessThreadTokens + 203 77DE0422 355 Bytes [ 35, 34, 33, 32, 15, 14, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiReplaceProcessThreadTokens + 367 77DE0586 104 Bytes [ 32, 05, 36, 36, 35, 34, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiReplaceProcessThreadTokens + 3D0 77DE05EF 4 Bytes [ 0B, 3B, 0C, 0F ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateProcessAsUserA + 98 77DE09F0 28 Bytes [ 01, 6A, B3, 98, 65, 28, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateProcessAsUserA + B5 77DE0A0D 92 Bytes [ 01, C6, 01, 81, 00, 28, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateProcessAsUserA + 112 77DE0A6A 92 Bytes [ 87, B7, 17, 40, 56, E0, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateProcessAsUserA + 16F 77DE0AC7 501 Bytes [ 00, 57, 01, 63, 01, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LogonUserExA + 16 77DE0CBD 119 Bytes [ 00, DF, 02, 5F, 00, 01, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptContextAddRef + 5B 77DE0D35 16 Bytes [ 40, 4D, 41, 0A, 01, 28, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptContextAddRef + 6C 77DE0D46 155 Bytes [ 49, 01, 6A, 01, 7B, 00, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptSetProvParam + 89 77DE0DE2 26 Bytes [ 01, 2B, 00, 01, 2B, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptSetProvParam + A4 77DE0DFD 146 Bytes [ 14, 06, 23, 22, 27, 06, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptEnumProviderTypesA + 27 77DE0E90 101 Bytes [ 32, 16, 01, 26, 27, 06, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptEnumProviderTypesA + 8D 77DE0EF6 620 Bytes [ 37, 36, 17, 16, 17, 17, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptEnumProvidersA + 9A 77DE1163 153 Bytes [ 02, 06, 2E, 3A, 10, 1B, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptEnumProvidersA + 134 77DE11FD 436 Bytes [ 02, 3C, 20, 2D, 37, 3F, 8C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptEnumProvidersA + 2E9 77DE13B2 196 Bytes [ 37, 06, 21, 40, 0A, 04, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptEnumProvidersA + 3AE 77DE1477 273 Bytes [ 04, 08, 01, 08, 0C, 02, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGenKey + D8 77DE1589 186 Bytes [ 09, 00, 9F, 01, E6, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptDuplicateKey + A3 77DE1644 173 Bytes [ D1, 01, C1, B2, 40, 57, D5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptSetKeyParam + 39 77DE16F2 18 Bytes [ 40, 4E, 41, 0D, 01, F5, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptSetKeyParam + 4C 77DE1705 37 Bytes [ 4C, 01, 35, 00, 95, 00, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptSetKeyParam + 72 77DE172B 28 Bytes [ B2, 17, 40, 4D, B9, 01, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptSetKeyParam + 8F 77DE1748 224 Bytes [ 4A, B8, 01, A3, B3, D2, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetUserKey + A0 77DE1829 13 Bytes [ 40, 00, 48, 02, 34, 02, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetUserKey + AE 77DE1837 23 Bytes [ C6, 01, C8, 01, F0, 00, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetUserKey + C6 77DE184F 92 Bytes [ 48, 01, F0, 02, 07, 00, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptExportKey + 4B 77DE18AC 59 Bytes [ 2B, 2B, 2B, 2B, 2B, 2B, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptExportKey + 87 77DE18E8 133 Bytes [ C4, 2B, 2B, 2B, 2B, 10, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptDuplicateHash + D 77DE196E 47 Bytes [ 32, 04, 16, 15, 14, 06, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptDuplicateHash + 3D 77DE199E 310 Bytes [ 32, 15, 14, 16, 33, 32, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptHashSessionKey + 4C 77DE1AD5 153 Bytes [ 16, 33, 32, 36, 35, 34, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptHashSessionKey + E6 77DE1B6F 43 Bytes [ 66, 58, 6A, 35, 0C, 35, A7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptHashSessionKey + 112 77DE1B9B 67 Bytes [ 68, 41, 45, 52, 35, 02, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptHashSessionKey + 156 77DE1BDF 887 Bytes [ 10, 09, 08, 06, 11, 0A, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptSetProviderA + 18E 77DE1F57 64 Bytes [ 18, 01, 4C, 02, 3A, 02, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptSetProviderExA + 7 77DE1F98 117 Bytes [ 01, 7A, 01, 79, 01, 2D, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptSetProviderExA + 7D 77DE200E 3 Bytes [ 17, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptSetProviderExA + 81 77DE2012 208 Bytes [ 19, 01, 1D, B2, 0E, 40, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptSetProviderExA + 152 77DE20E3 78 Bytes [ E2, B2, 17, 40, 58, B9, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptSetProviderExA + 1A1 77DE2132 175 Bytes [ 4A, 73, 77, 15, 40, 4A, A9, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetDefaultProviderA + 139 77DE2482 329 Bytes [ 06, 07, 06, 07, 27, 34, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetDefaultProviderA + 283 77DE25CC 800 Bytes [ 04, 7E, 4E, 98, 54, 0B, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptSetProviderW + 3C 77DE28ED 124 Bytes [ 6C, 06, 3C, 0F, 0F, 40, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptSetProviderExW + 29 77DE296A 9 Bytes [ 02, 5A, 02, 4F, 00, 28, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptSetProviderExW + 33 77DE2974 145 Bytes [ 01, 9B, 01, 96, 00, 28, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetDefaultProviderW + 2D 77DE2A06 109 Bytes [ 17, 40, 57, 26, 22, 17, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetDefaultProviderW + 9B 77DE2A74 35 Bytes [ B2, 17, 40, 56, B9, 02, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetDefaultProviderW + BF 77DE2A98 154 Bytes [ A1, 00, 17, 01, 4D, 01, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetDefaultProviderW + 15A 77DE2B33 119 Bytes [ 17, 00, 9B, 01, 76, 00, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CryptGetDefaultProviderW + 1D2 77DE2BAB 144 Bytes [ 40, 09, 15, 40, 4D, FA, FE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryRecoveryAgentsOnEncryptedFile + 2C 77DE3121 136 Bytes [ 1F, 02, 3A, 05, 02, 08, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetUserFileEncryptionKey + 4 77DE31AA 800 Bytes [ 12, 19, 1A, 14, 19, 01, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenEncryptedFileRawA + 6F 77DE34CB 659 Bytes [ 3A, 2D, 32, 30, 82, 4B, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenEncryptedFileRawA + 303 77DE375F 109 Bytes [ CD, 10, DC, 3C, 2B, 2B, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenEncryptedFileRawA + 371 77DE37CD 8 Bytes [ 01, 2B, 00, 01, 2B, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenEncryptedFileRawA + 37A 77DE37D6 458 Bytes [ 01, 2B, 00, 01, 2B, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenEncryptedFileRawA + 545 77DE39A1 93 Bytes [ 34, 26, 27, 16, 15, 14, 07, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertStringSDToSDRootDomainW + 43 77DE454E 130 Bytes [ 32, 15, 14, 16, 33, 32, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertStringSDToSDDomainW + 1B 77DE45D1 54 Bytes [ 19, 1F, 74, 22, 04, 02, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertStringSDToSDDomainW + 52 77DE4608 453 Bytes [ 3F, 0F, 13, 09, 3A, 1D, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSDToStringSDRootDomainA + 8C 77DE47CE 430 Bytes [ 26, 17, 1C, 1C, 0E, 06, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorA + 44 77DE497D 48 Bytes [ 08, 0B, 10, 08, 04, 0F, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorA + 75 77DE49AE 186 Bytes [ 64, 75, 4D, 75, 21, 09, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSecurityDescriptorToStringSecurityDescriptorA + B5 77DE4A69 122 Bytes [ 05, 12, 05, 0C, 02, 11, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSecurityDescriptorToStringSecurityDescriptorA + 130 77DE4AE4 34 Bytes [ B2, 7C, 28, 18, 41, 17, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSecurityDescriptorToStringSecurityDescriptorA + 153 77DE4B07 64 Bytes [ 18, 01, 8A, 01, 89, 01, 97, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSecurityDescriptorToStringSecurityDescriptorA + 194 77DE4B48 430 Bytes [ 00, 56, 02, F1, 02, 6B, B2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSecurityDescriptorToStringSecurityDescriptorA + 343 77DE4CF7 64 Bytes [ 01, 8A, 00, 05, 01, 8A, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MSChapSrvChangePassword + 159 77DE512C 180 Bytes [ 36, 36, 35, 34, 23, 22, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MSChapSrvChangePassword + 20E 77DE51E1 208 Bytes [ 06, 15, 14, 16, 33, 32, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MSChapSrvChangePassword + 2DF 77DE52B2 570 Bytes [ 4F, 4B, 71, 11, 53, 57, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MSChapSrvChangePassword2 + 1E9 77DE54ED 660 Bytes [ 1F, 02, 24, 52, 0B, 04, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MSChapSrvChangePassword2 + 47E 77DE5782 35 Bytes [ 07, 3B, 04, F0, 00, 66, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MSChapSrvChangePassword2 + 4A2 77DE57A6 26 Bytes [ 02, 4F, B2, 28, 18, 92, B9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MSChapSrvChangePassword2 + 4BD 77DE57C1 415 Bytes [ 02, 18, B2, 28, 18, 92, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!MSChapSrvChangePassword2 + 65D 77DE5961 82 Bytes [ 42, 01, 79, 7A, 06, 40, 4E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateProcessWithLogonW + 102 77DE5D9F 76 Bytes [ 14, 16, 15, 14, 23, 22, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateProcessWithLogonW + 14F 77DE5DEC 117 Bytes [ 34, 36, 33, 32, 16, 15, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateProcessWithLogonW + 1C5 77DE5E62 64 Bytes [ 34, 27, 16, 15, 14, 07, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateProcessWithLogonW + 206 77DE5EA3 421 Bytes [ 32, 16, 15, 14, 23, 22, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateProcessWithLogonW + 3AC 77DE6049 139 Bytes [ 0B, 11, 28, 78, 59, 06, 3B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ProcessIdleTasks + 52 77DE6D1B 125 Bytes [ 08, FE, 08, 06, 6F, 04, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!UnregisterIdleTask + 40 77DE6D99 92 Bytes [ 28, 00, 18, 01, CF, 02, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!UnregisterIdleTask + 9D 77DE6DF6 471 Bytes [ EF, 01, 8E, 00, FF, 01, 8E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction032 + 11 77DE6FCE 129 Bytes [ B9, 01, 12, 02, 51, B2, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction032 + 93 77DE7050 17 Bytes [ A1, 00, 40, 00, 48, 02, B9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SystemFunction032 + A5 77DE7062 134 Bytes [ 4B, 01, 03, B3, A6, 17, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredpEncodeCredential + 3E 77DE70E9 209 Bytes [ 97, 00, 15, 01, 8A, 01, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredpDecodeCredential + A8 77DE71BB 54 Bytes [ B2, 0E, 40, 4D, B9, 01, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredpDecodeCredential + DF 77DE71F2 506 Bytes [ 0E, 01, DE, 01, DF, 01, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredpDecodeCredential + 2DA 77DE73ED 110 Bytes [ 32, 17, 16, 16, 15, 14, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredpDecodeCredential + 349 77DE745C 701 Bytes [ 23, 22, 07, 16, 15, 14, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredpConvertTargetInfo + 99 77DE771A 163 Bytes [ 06, 70, 32, 1B, 5B, 06, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredpConvertTargetInfo + 13D 77DE77BE 625 Bytes [ 06, 0C, 04, 47, 86, 2D, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredpConvertTargetInfo + 3B0 77DE7A31 108 Bytes [ 08, 00, 0C, FE, 06, 06, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredWriteA + 35 77DE7A9E 361 Bytes [ 40, 01, 8A, 00, 60, 01, 8A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredReadA + 5F 77DE7C08 112 Bytes [ 88, 00, 17, 01, 8A, 01, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredReadA + D0 77DE7C79 69 Bytes [ 39, 2B, 31, 00, 2B, 2B, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredReadW + 3E 77DE7CBF 115 Bytes [ 01, 2B, 00, 01, 2B, 05, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredReadW + B2 77DE7D33 818 Bytes [ 14, 06, 23, 22, 26, 35, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredWriteDomainCredentialsW + 5D 77DE8066 334 Bytes [ 03, 4F, 0C, 06, 09, 1C, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredReadDomainCredentialsA + DC 77DE81B5 187 Bytes [ 40, 00, 56, 01, C4, B2, B6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredReadDomainCredentialsW + A8 77DE8271 234 Bytes [ 58, 01, A1, 00, 16, 01, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredDeleteA + A3 77DE835C 60 Bytes [ 00, 9F, 01, 77, 00, 01, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredDeleteW + 38 77DE8399 25 Bytes [ AF, 01, 78, 00, 02, 00, AF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredDeleteW + 52 77DE83B3 1 Byte [ 16 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredDeleteW + 54 77DE83B5 198 Bytes [ 00, 01, 8A, 00, 01, 00, BF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredRenameA + 73 77DE847C 604 Bytes [ 33, B8, 02, 59, B3, 0E, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredGetTargetInfoW + 50 77DE86D9 93 Bytes [ 06, 07, 06, 15, 14, 17, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredGetTargetInfoW + AE 77DE8737 422 Bytes [ 16, 15, 07, 26, 27, 15, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredGetSessionTypes + 185 77DE88DE 233 Bytes [ 33, 32, 15, 07, 33, 36, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredGetSessionTypes + 26F 77DE89C8 551 Bytes [ 01, 0D, 06, 0A, 04, 12, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredMarshalCredentialW + 7A 77DE8BF0 2 Bytes [ 24, 2C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredMarshalCredentialW + 7D 77DE8BF3 107 Bytes [ 07, 1D, 28, 0E, 3F, 36, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredIsMarshaledCredentialW + 11 77DE8C5F 123 Bytes [ 1F, 31, 43, 44, 52, 5A, BE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredUnmarshalCredentialA + 14 77DE8CDB 1 Byte [ 0D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredUnmarshalCredentialA + 16 77DE8CDD 248 Bytes [ 11, 08, 0B, 06, 05, 4A, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredIsMarshaledCredentialA + A6 77DE8DD6 1 Byte [ 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredIsMarshaledCredentialA + A8 77DE8DD8 80 Bytes [ C9, 02, 43, B6, C1, EA, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredIsMarshaledCredentialA + F9 77DE8E29 394 Bytes [ 57, 0B, B8, 02, 12, B3, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredIsMarshaledCredentialA + 284 77DE8FB4 47 Bytes [ 01, D0, 02, 39, B2, 0E, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CredIsMarshaledCredentialA + 2B4 77DE8FE4 317 Bytes [ 0F, 03, 17, 40, 4D, A8, A4, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaQueryTrustedDomainInfo + 132 77DE940A 360 Bytes [ 00, 29, 04, 4A, 3D, 38, 4F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaSetTrustedDomainInformation + 2E 77DE9573 129 Bytes [ 11, 0B, 05, 0B, 05, 0F, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaSetTrustedDomainInformation + B0 77DE95F5 303 Bytes [ 46, 70, 35, 04, 30, 0A, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaDeleteTrustedDomain + 10 77DE9725 153 Bytes [ 0A, 00, 06, FE, 0A, 05, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaDeleteTrustedDomain + AA 77DE97BF 259 Bytes [ A0, 01, F1, 00, B0, 01, F1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaDeleteTrustedDomain + 1AE 77DE98C3 94 Bytes [ 17, 40, 56, 0E, 09, 17, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaDeleteTrustedDomain + 20D 77DE9922 165 Bytes [ 16, 01, 20, 01, 24, 01, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaDeleteTrustedDomain + 2B3 77DE99C8 383 Bytes [ 06, 01, E4, 00, 40, 00, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaQueryTrustedDomainInfoByName + B1 77DE9B48 73 Bytes [ 14, 23, 22, 35, 35, 26, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaQueryTrustedDomainInfoByName + FB 77DE9B92 344 Bytes [ 32, 17, 17, 36, 33, 32, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaQueryTrustedDomainInfoByName + 254 77DE9CEB 343 Bytes [ 8A, 47, 4B, 53, 54, 4A, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaSetTrustedDomainInfoByName + 101 77DE9E43 1 Byte [ 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaSetTrustedDomainInfoByName + 103 77DE9E45 148 Bytes [ 06, 08, 08, 17, 07, 0A, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaEnumerateTrustedDomainsEx + 1D 77DE9EDA 495 Bytes [ 06, 0A, 05, 14, 16, 0A, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaQueryDomainInformationPolicy + 55 77DEA0CA 87 Bytes [ BD, B8, 98, 9C, 99, 90, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaSetDomainInformationPolicy + 31 77DEA122 194 Bytes [ C0, 01, 5D, 01, 7E, 01, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaQueryForestTrustInformation + 4 77DEA1E5 44 Bytes [ 00, 4A, 01, C2, 01, 44, B3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaQueryForestTrustInformation + 31 77DEA212 17 Bytes [ 01, 5F, 01, 60, B3, 0E, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaQueryForestTrustInformation + 43 77DEA224 234 Bytes [ 17, 40, 4B, BD, 01, 0A, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaSetForestTrustInformation + BE 77DEA30F 9 Bytes [ FF, 01, AA, 00, 03, 00, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaSetForestTrustInformation + C8 77DEA319 193 Bytes [ 9F, 01, AA, 00, 02, 71, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaSetForestTrustInformation + 18A 77DEA3DB 8 Bytes [ 01, 2B, 00, 01, 2B, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaSetForestTrustInformation + 193 77DEA3E4 104 Bytes [ 01, 2B, 01, 26, 27, 06, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaSetForestTrustInformation + 1FC 77DEA44D 318 Bytes [ 37, 27, 26, 27, 26, 27, 26, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaEnumerateAccountsWithUserRight + 45 77DEA92F 1 Byte [ 28 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaEnumerateAccountsWithUserRight + 47 77DEA931 515 Bytes [ 18, 01, 77, 01, E7, 01, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaRemoveAccountRights + F4 77DEAB35 422 Bytes [ 05, 01, 90, 01, 91, 00, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaOpenPolicySce + 8C 77DEACDC 930 Bytes [ 1A, CE, 2B, 10, C4, 2B, D4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaQuerySecurityObject + 2 77DEB07F 181 Bytes [ 28, 0D, 2A, 0B, 19, 1A, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaSetSecurityObject + 2C 77DEB135 66 Bytes [ 1F, 07, 32, 9A, 39, 44, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaSetSecurityObject + 6F 77DEB178 211 Bytes [ CF, 2B, 77, 40, 1E, 4D, 2A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaCreateAccount + 6B 77DEB24C 212 Bytes [ 03, 1A, 1B, 36, 59, 35, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaCreateTrustedDomain + 38 77DEB321 207 Bytes [ 56, 62, B4, 32, 1C, 87, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaQueryInfoTrustedDomain + 20 77DEB3F1 21 Bytes [ 28, 00, 18, 01, 46, 02, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaQueryInfoTrustedDomain + 36 77DEB407 46 Bytes [ 18, 01, 46, 02, 2B, 02, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaQueryInfoTrustedDomain + 65 77DEB436 636 Bytes [ 28, 00, 18, 01, 46, 02, A2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaEnumeratePrivileges + A 77DEB6B3 85 Bytes [ 02, B6, B6, 0E, 00, 53, 4F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaEnumeratePrivileges + 60 77DEB709 31 Bytes [ 00, 01, CD, 01, C3, B2, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaEnumeratePrivileges + 80 77DEB729 191 Bytes [ 0E, 40, 4A, B9, 01, D8, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaOpenAccount + 10 77DEB7E9 31 Bytes [ 15, 01, 84, 01, 66, 01, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaOpenAccount + 30 77DEB809 55 Bytes [ 48, 01, 46, 01, 66, 00, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaOpenAccount + 68 77DEB841 113 Bytes [ CD, 2B, 2B, 10, 1A, CE, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaEnumeratePrivilegesOfAccount + 6A 77DEB8B3 189 Bytes [ CD, 3F, C4, 2B, 2B, 10, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaRemovePrivilegesFromAccount + 48 77DEB971 225 Bytes [ 17, 16, 16, 17, 16, 37, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaSetQuotasForAccount + 4A 77DEBA53 119 Bytes [ 26, 27, 23, 22, 06, 15, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaGetSystemAccessAccount + 52 77DEBACB 119 Bytes [ 15, 14, 06, 07, 27, 34, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaSetSystemAccessAccount + 52 77DEBB43 312 Bytes [ 15, 07, 27, 26, 27, 06, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaSetSecret + A3 77DEBC7C 599 Bytes [ 15, 10, 0A, 06, 11, 15, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaQuerySecret + 197 77DEBED4 74 Bytes [ 2F, 29, 06, 06, 11, 04, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaGetRemoteUserName + 1A 77DEBF1F 794 Bytes [ 0E, 26, 17, 02, 06, 27, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaICLookupSidsWithCreds + 89 77DEC23A 402 Bytes [ AE, BC, 01, A6, 00, 40, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaLookupNames + 34 77DEC3CD 124 Bytes [ 2B, 00, 01, 2B, 00, 01, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaLookupNames + B1 77DEC44A 41 Bytes [ 35, 34, 26, 27, 16, 15, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaLookupNames + DB 77DEC474 117 Bytes [ 06, 07, 27, 34, 37, 27, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaLookupNames + 151 77DEC4EA 221 Bytes [ 14, 07, 16, 15, 14, 06, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LsaLookupNames + 22F 77DEC5C8 187 Bytes [ 53, 8D, 17, 5A, 23, 1C, 2C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!UninstallApplication + 16 77DECF1A 41 Bytes [ 34, 37, 37, 36, 33, 32, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!UninstallApplication + 40 77DECF44 208 Bytes [ 17, 17, 16, 17, 36, 33, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetLocalManagedApplications + C3 77DED015 1149 Bytes [ 15, 14, 23, 22, 37, 14, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetManagedApplicationCategories + 34 77DED493 25 Bytes [ 45, 93, 89, 0D, 56, 56, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetManagedApplicationCategories + 4E 77DED4AD 116 Bytes [ ED, FF, 00, B0, 1E, 0D, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!InstallApplication + 73 77DED522 60 Bytes [ 03, 1F, 13, 1C, 3A, 08, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!InstallApplication + B0 77DED55F 183 Bytes [ 08, 63, 4A, 17, 2C, 16, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!InstallApplication + 168 77DED617 63 Bytes [ 0D, 43, 11, 02, 02, 7B, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!InstallApplication + 1A8 77DED657 585 Bytes [ 65, AB, 2D, 09, 04, 1A, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!InstallApplication + 3F2 77DED8A1 19 Bytes [ 23, 00, 15, 01, 1F, B2, 81, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateCodeAuthzLevel + 42 77DEE6FF 5 Bytes [ 21, FF, D5, 01, 83 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateCodeAuthzLevel + 48 77DEE705 123 Bytes [ 1D, 00, 20, 00, 2C, 00, DE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateCodeAuthzLevel + C4 77DEE781 253 Bytes [ 1E, 01, 39, 00, 1E, 01, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateCodeAuthzLevel + 1C2 77DEE87F 78 Bytes [ 07, 22, 40, 56, 17, 19, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateCodeAuthzLevel + 211 77DEE8CE 218 Bytes [ 40, 12, 19, 03, A0, 03, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsTokenUntrusted + AD 77DEE9A9 34 Bytes [ 35, 00, 98, 40, 6D, 21, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsTokenUntrusted + D0 77DEE9CC 644 Bytes [ 40, 56, 04, 13, 16, 04, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsTokenUntrusted + 355 77DEEC51 81 Bytes [ 2C, 05, 05, 3C, 0F, 05, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsTokenUntrusted + 3A7 77DEECA3 209 Bytes [ 50, 53, 01, 14, 08, 60, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!IsTokenUntrusted + 479 77DEED75 459 Bytes [ 40, 52, 2C, 00, 15, 4A, 45, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferSetPolicyInformation + 12C 77DEF168 19 Bytes [ 03, 44, 00, 55, 01, 07, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferSetPolicyInformation + 140 77DEF17C 43 Bytes [ 0B, 20, 59, 20, 69, 20, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferSetPolicyInformation + 16C 77DEF1A8 50 Bytes [ 09, 40, 57, 2A, 53, 15, 2A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferSetPolicyInformation + 19F 77DEF1DB 494 Bytes [ 36, 20, 04, 35, E6, 20, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferSetPolicyInformation + 38E 77DEF3CA 188 Bytes [ 02, 0C, 1C, 33, 20, 21, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferRecordEventLogEntry + 9A 77DEF487 68 Bytes [ 1B, 50, 4B, FE, 74, 30, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferRecordEventLogEntry + DF 77DEF4CC 174 Bytes [ 6B, 01, 3E, 3C, B0, 3C, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferRecordEventLogEntry + 18E 77DEF57B 1 Byte [ 15 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferRecordEventLogEntry + 190 77DEF57D 134 Bytes [ 4A, 51, 4F, 16, 51, 53, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferRecordEventLogEntry + 217 77DEF604 66 Bytes [ D4, C4, 10, C4, 10, CD, 10, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferSetLevelInformation + 61 77DF020E 166 Bytes [ 14, 33, 32, 36, 33, 32, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferSetLevelInformation + 108 77DF02B5 9 Bytes [ 00, FF, C1, 01, 24, 02, CF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferSetLevelInformation + 112 77DF02BF 1 Byte [ 37 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferSetLevelInformation + 114 77DF02C1 73 Bytes [ AF, 40, 72, 07, 24, 01, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferSetLevelInformation + 15E 77DF030B 144 Bytes [ 1C, 04, 06, 40, 48, 1C, 0A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiChangeRegistryScope + D 77DF05F2 130 Bytes [ 04, 10, 08, 2D, 28, 13, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiChangeRegistryScope + 90 77DF0675 6 Bytes [ 0D, 05, 40, 5E, 33, 18 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiChangeRegistryScope + 97 77DF067C 19 Bytes [ 03, 04, 12, 10, 9F, 10, CF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiChangeRegistryScope + AB 77DF0690 75 Bytes [ 01, 0D, 0C, AF, 10, 01, CF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SaferiChangeRegistryScope + F7 77DF06DC 332 Bytes [ 06, 40, 48, 12, 06, 15, 18, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetNamedSecurityInfoA 77DF1544 954 Bytes [ 15, B0, 97, C0, 97, D0, 97, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetAuditedPermissionsFromAclA + 40 77DF18FF 225 Bytes [ C4, 2B, 10, D4, C4, 31, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!BuildSecurityDescriptorW + DC 77DF19E1 95 Bytes [ 39, 18, 22, 24, 06, 0A, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!BuildSecurityDescriptorW + 13D 77DF1A42 32 Bytes [ 01, 07, 00, D9, 02, 38, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!BuildSecurityDescriptorW + 15E 77DF1A63 46 Bytes [ D5, 03, C5, 04, 83, 00, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!BuildSecurityDescriptorW + 18D 77DF1A92 234 Bytes [ 00, 14, FF, C7, 04, E3, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!BuildSecurityDescriptorA + 3D 77DF1B7D 25 Bytes [ 00, 01, 06, 00, D9, F1, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!BuildSecurityDescriptorA + 57 77DF1B97 27 Bytes [ 3F, 35, 00, FF, FF, 00, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!BuildSecurityDescriptorA + 73 77DF1BB3 266 Bytes [ 01, 00, 21, FF, 68, 01, 4A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupSecurityDescriptorPartsW + 8D 77DF1CBE 261 Bytes [ 14, 06, 4D, 1A, 1C, 2B, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupSecurityDescriptorPartsW + 193 77DF1DC4 12 Bytes [ B4, 2E, 27, 11, 21, 0F, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupSecurityDescriptorPartsW + 1A0 77DF1DD1 9 Bytes [ FF, FF, FE, FF, CB, 01, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupSecurityDescriptorPartsW + 1AA 77DF1DDB 48 Bytes [ 26, 00, D7, 00, 00, 01, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupSecurityDescriptorPartsA + 2C 77DF1E0C 81 Bytes [ 01, 07, 00, D8, FF, 7F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupSecurityDescriptorPartsA + 7F 77DF1E5F 13 Bytes [ C5, 01, F0, 03, 0A, 00, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupSecurityDescriptorPartsA + 8D 77DF1E6D 35 Bytes [ D9, 3A, 00, 00, 11, 40, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupSecurityDescriptorPartsA + B1 77DF1E91 33 Bytes [ 52, 00, 02, 01, 06, 00, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!LookupSecurityDescriptorPartsA + D3 77DF1EB3 13 Bytes [ C5, 01, 6A, 03, 2D, 00, 26, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!BuildExplicitAccessWithNameA + 15 77DF1FE9 4 Bytes [ 58, 00, 00, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!BuildExplicitAccessWithNameA + 1A 77DF1FEE 345 Bytes JMP B7F41FF3 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!BuildTrusteeWithNameA + 12 77DF2148 191 Bytes [ 0F, 27, 03, B6, 4B, 42, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!BuildTrusteeWithObjectsAndSidA + 69 77DF2208 83 Bytes [ 1A, 01, 41, 00, 1A, 01, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!BuildTrusteeWithObjectsAndNameA + 22 77DF225C 338 Bytes [ C4, 31, 5D, 71, 5D, 00, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetNamedSecurityInfoExW + 9C 77DF23AF 283 Bytes [ 01, 90, 1B, A0, 1B, F0, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetNamedSecurityInfoExW + 1B8 77DF24CB 557 Bytes [ 41, 00, 4D, 01, 5B, 40, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetSecurityInfoExW + 6A 77DF26F9 18 Bytes [ 01, 00, 37, 00, CB, 00, A8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetSecurityInfoExW + 7D 77DF270C 50 Bytes [ 17, 40, 53, 09, 03, 17, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetSecurityInfoExW + B0 77DF273F 112 Bytes [ 24, 15, 16, 21, 00, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetSecurityInfoExW + 121 77DF27B0 21 Bytes [ 4A, 00, 1F, 01, 43, 00, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetSecurityInfoExW + 137 77DF27C6 897 Bytes [ 1F, 01, 3E, 50, 1F, 60, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertAccessToSecurityDescriptorA + E7 77DF2B48 332 Bytes [ 02, 2F, 37, 67, 51, 40, 4A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertAccessToSecurityDescriptorA + 234 77DF2C95 329 Bytes [ 35, 35, 34, 26, 23, 22, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSecurityDescriptorToAccessA + A0 77DF2DDF 22 Bytes [ 10, 21, 01, 39, 18, 00, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSecurityDescriptorToAccessA + B7 77DF2DF6 57 Bytes [ 40, 4D, 03, 0F, 16, 03, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSecurityDescriptorToAccessA + F1 77DF2E30 125 Bytes [ 71, 2B, 10, CE, 10, D4, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ConvertSecurityDescriptorToAccessA + 16F 77DF2EAE 381 Bytes [ 0A, 6F, 74, 0D, 40, 06, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!TrusteeAccessToObjectW + 71 77DF302C 22 Bytes [ 17, 90, 78, 01, 78, 86, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!TrusteeAccessToObjectW + 88 77DF3043 358 Bytes [ 5D, A0, 5D, 02, 5D, 5F, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!TrusteeAccessToObjectA + 111 77DF31AA 138 Bytes [ 37, 17, 07, 14, 16, 33, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!TrusteeAccessToObjectA + 19C 77DF3235 109 Bytes [ 26, 4C, 03, 1C, 15, 47, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetOverlappedAccessResults + 52 77DF32A3 219 Bytes [ 11, 03, 87, 50, 65, 46, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CancelOverlappedAccess + 16 77DF337F 347 Bytes [ 3F, DD, C5, 71, 2B, 71, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetAccessPermissionsForObjectA + 12 77DF34DB 8 Bytes [ FB, 32, 01, 0B, 32, 01, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetAccessPermissionsForObjectA + 1B 77DF34E4 60 Bytes [ 0B, 08, 1B, 08, 02, 1B, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetAccessPermissionsForObjectA + 58 77DF3521 170 Bytes [ 2C, 1A, 1D, 23, 21, 1B, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetAccessPermissionsForObjectA + 103 77DF35CC 54 Bytes [ 72, 72, 72, 00, 2B, 10, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetNamedSecurityInfoExW + 5 77DF3603 4 Bytes [ 34, 23, 07, 16 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetNamedSecurityInfoExW + A 77DF3608 126 Bytes [ 32, 37, 32, 15, 14, 06, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetNamedSecurityInfoExW + 89 77DF3687 90 Bytes [ 6D, 02, 17, 08, 0A, 55, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetNamedSecurityInfoExW + E4 77DF36E2 149 Bytes [ 60, 20, 66, 79, 78, 40, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetNamedSecurityInfoExW + 17A 77DF3778 108 Bytes [ 5D, D0, 5D, E0, 5D, 03, C0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetNamedSecurityInfoExA + A1 77DF389A 456 Bytes [ 71, 5D, 10, CE, C4, 5D, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetNamedSecurityInfoExA + 26A 77DF3A63 141 Bytes [ D5, 03, C5, 04, 50, 00, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityInfoExW + 40 77DF3AF1 140 Bytes [ 32, 33, 36, 40, 4D, 2F, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityInfoExW + CD 77DF3B7E 318 Bytes [ C4, 10, D5, CC, 2B, 10, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityInfoExA + 4 77DF3CBD 257 Bytes [ 28, 00, 34, 00, C7, 40, 91, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityInfoExA + 106 77DF3DBF 53 Bytes [ 0B, 1B, 88, 66, 2B, 4F, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityInfoExA + 13C 77DF3DF5 254 Bytes [ 35, 85, 7B, 72, 0D, 17, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityInfoExA + 23B 77DF3EF4 125 Bytes [ 07, 17, 27, 07, 22, 37, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetSecurityInfoExA + 2B9 77DF3F72 30 Bytes [ 09, 06, 59, 04, 11, 07, 73, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RemoveTraceCallback + 59 77DF5FF2 234 Bytes [ 32, 3A, 07, 06, 1A, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RemoveTraceCallback + 144 77DF60DD 4 Bytes [ 99, 05, A9, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RemoveTraceCallback + 149 77DF60E2 71 Bytes [ 89, 1A, 99, 1A, 02, 79, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RemoveTraceCallback + 191 77DF612A 165 Bytes [ 10, C4, 10, C4, 10, C4, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RemoveTraceCallback + 237 77DF61D0 22 Bytes [ EB, 29, 01, EB, 14, FB, 14, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiGetFirstTraceOffset + 15 77DF6AC7 80 Bytes [ 33, 35, 34, 36, 33, 32, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiGetFirstTraceOffset + 66 77DF6B18 416 Bytes [ 17, 3B, 39, 07, 1D, 07, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiGetTraceHeader + 9F 77DF6CB9 293 Bytes [ 25, FF, 45, 00, C7, 00, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiGetTraceHeader + 1C5 77DF6DDF 169 Bytes [ 09, 2C, 06, 48, 25, 27, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiGetTraceHeader + 26F 77DF6E89 131 Bytes [ 04, 09, 16, CF, 04, 01, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiGetTraceHeader + 2F3 77DF6F0D 47 Bytes [ D4, C4, 10, C4, 5D, 10, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiGetTraceHeader + 323 77DF6F3D 48 Bytes [ 3F, 3C, 2B, 10, C5, 2B, 3F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiCloseTraceWithCursor + 48 77DF7521 17 Bytes [ 61, 00, 74, 00, 61, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiConvertTimestamp + D 77DF7533 15 Bytes [ 32, 00, 20, 00, 55, 00, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiConvertTimestamp + 1D 77DF7543 31 Bytes [ 6F, 00, 72, 00, 74, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiGetNextEvent + 1B 77DF7563 3 Bytes [ 69, 00, 63 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiGetNextEvent + 1F 77DF7567 5 Bytes [ 72, 00, 6F, 00, 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiGetNextEvent + 25 77DF756D 1 Byte [ 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiGetNextEvent + 27 77DF756F 5 Bytes [ 66, 00, 74, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiGetNextEvent + 2D 77DF7575 33 Bytes [ 43, 00, 6F, 00, 72, 00, 70, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenTraceA + 21 77DF81C3 57 Bytes [ 04, 02, 03, 06, 07, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenTraceA + 5B 77DF81FD 1 Byte [ 0F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenTraceA + 5D 77DF81FF 76 Bytes [ 12, 00, 7A, B1, 0B, 0A, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenTraceA + AA 77DF824C 182 Bytes [ 13, 10, CD, CD, CD, CD, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenTraceW + 4B 77DF8304 58 Bytes [ 01, 00, 13, 19, 12, 11, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenTraceW + 86 77DF833F 26 Bytes [ 14, 06, 07, 16, 16, 15, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenTraceW + A1 77DF835A 230 Bytes [ 23, 28, 01, 02, C0, 79, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenTraceW + 188 77DF8441 9 Bytes [ 28, 00, 00, 02, 6F, 05, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!OpenTraceW + 192 77DF844B 4 Bytes [ 17, 00, 8D, B4 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiParseTraceEvent + 8B 77DF850B 46 Bytes [ C6, FE, 95, C8, 01, 6D, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiParseTraceEvent + BA 77DF853A 156 Bytes [ 01, 2F, 3C, B1, 0D, 0C, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiParseTraceEvent + 157 77DF85D7 103 Bytes [ 4E, 05, 55, 00, 11, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiParseTraceEvent + 1BF 77DF863F 103 Bytes [ 2F, 3C, B2, 08, 07, 05, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiOpenTraceWithCursor + 47 77DF86A7 82 Bytes [ DD, 3C, B2, 23, 22, 01, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiOpenTraceWithCursor + 9A 77DF86FA 378 Bytes [ 1D, 02, 00, 01, 11, 14, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiOpenTraceWithCursor + 215 77DF8875 49 Bytes [ 48, B4, 0B, 0A, 07, 06, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiOpenTraceWithCursor + 247 77DF88A7 125 Bytes [ 00, 13, 10, CD, CD, CD, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiOpenTraceWithCursor + 2C5 77DF8925 221 Bytes [ 40, 0A, 01, 00, 16, 00, 15, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ProcessTrace + 32 77DF8B1E 28 Bytes [ 03, 90, 05, 55, 00, 18, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ProcessTrace + 4F 77DF8B3B 111 Bytes [ 05, 04, 01, 03, 17, 2F, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ProcessTrace + BF 77DF8BAB 105 Bytes [ 17, 2F, 3C, B2, 17, 01, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ProcessTrace + 129 77DF8C15 78 Bytes [ 13, 00, 7F, B4, 0E, 0D, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ProcessTrace + 178 77DF8C64 28 Bytes [ 00, 0B, 0A, 07, 06, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartTraceA + 5D 77DF91C0 47 Bytes [ 00, 01, 00, 1A, FF, EA, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartTraceA + 8D 77DF91F0 36 Bytes [ DD, 3C, B2, 11, 10, 09, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartTraceA + B2 77DF9215 42 Bytes [ 18, 0E, 0D, 00, 17, 16, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartTraceA + DD 77DF9240 8 Bytes [ 13, 11, 12, 17, 39, 13, B1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartTraceA + E6 77DF9249 75 Bytes [ 3F, B1, 13, 07, 10, CD, 31, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartTraceW + 43 77DF970C 162 Bytes [ 04, 03, 00, 18, 17, 14, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartTraceW + E6 77DF97AF 7 Bytes [ 2E, FF, EA, 03, 66, 05, 6B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartTraceW + EE 77DF97B7 1 Byte [ 18 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartTraceW + F0 77DF97B9 137 Bytes [ 25, 00, B3, B1, 08, 07, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartTraceW + 17A 77DF9843 82 Bytes [ 14, 12, 10, DD, 3C, B6, 20, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ControlTraceA + 152 77DF9DE3 5 Bytes [ 10, 01, C7, 35, AB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ControlTraceA + 158 77DF9DE9 55 Bytes [ 0F, 29, 46, 92, 90, 51, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ControlTraceA + 190 77DF9E21 1 Byte [ 17 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ControlTraceA + 192 77DF9E23 31 Bytes [ 1F, 00, 5E, B2, 1A, 19, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ControlTraceA + 1B2 77DF9E43 7 Bytes [ C4, C0, B1, 1E, 07, 10, CD ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnableTrace + 3B 77DFA278 5 Bytes [ 0D, 0C, 02, 00, 0E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnableTrace + 42 77DFA27F 102 Bytes [ 13, 10, CD, CD, 10, CD, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnableTrace + AA 77DFA2E7 160 Bytes [ 01, 00, 22, 00, 00, 02, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnableTrace + 14B 77DFA388 197 Bytes [ 01, 11, 23, 07, 13, 33, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnableTrace + 211 77DFA44E 24 Bytes [ 3C, B1, 1E, 1D, 2F, 3C, B1, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!TraceEvent + 10 77DFA579 89 Bytes [ 22, 00, 00, 02, 27, 04, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!TraceEvent + 6A 77DFA5D3 131 Bytes [ 13, 10, CD, CD, CD, CD, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!TraceEvent + EE 77DFA657 1 Byte [ 30 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!TraceEvent + F0 77DFA659 50 Bytes [ F4, 01, CA, 04, 06, 00, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!TraceEventInstance + 25 77DFA68E 2 Bytes [ 13, 11 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!TraceEventInstance + 28 77DFA691 7 Bytes [ 12, 17, 39, 13, 14, B3, 0B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!TraceEventInstance + 30 77DFA699 303 Bytes [ 04, 02, 3F, 3F, B3, 17, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!TraceEventInstance + 160 77DFA7C9 72 Bytes [ 02, 00, 2C, FE, A1, 02, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!TraceEventInstance + 1A9 77DFA812 51 Bytes [ 11, 00, 04, 03, 00, 00, 13, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryAllTracesA + 106 77DFAAE4 64 Bytes [ 0B, 2F, 3C, B1, 0A, 09, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryAllTracesA + 147 77DFAB25 545 Bytes [ 00, 13, 10, CD, CD, 10, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnumerateTraceGuids + 16 77DFAD47 83 Bytes [ 2F, 3C, B2, 0D, 0C, 0E, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnumerateTraceGuids + 6A 77DFAD9B 129 Bytes [ 1B, 15, 14, 00, 10, 0F, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnumerateTraceGuids + EC 77DFAE1D 142 Bytes [ DD, 01, 11, FE, EF, 87, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryTraceA + 7 77DFAEAC 170 Bytes [ 13, 11, 12, 39, 13, B1, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!UpdateTraceW + D 77DFAF57 327 Bytes [ CD, CD, 10, CD, CD, 10, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!FlushTraceW + 113 77DFB09F 383 Bytes [ 33, 32, 35, 02, AB, 0D, B3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!TraceMessage + 1A 77DFB21F 140 Bytes [ B5, 01, C6, 04, 37, 00, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!TraceMessageVa + 13 77DFB2AC 409 Bytes [ 3F, 3F, B3, 1F, 09, 19, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQueryAllDataMultipleW + 39 77DFB446 10 Bytes [ 36, 36, 03, F8, FD, 27, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQueryAllDataMultipleW + 44 77DFB451 7 Bytes [ C8, 01, 11, 00, 03, 00, 0F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQueryAllDataMultipleW + 4D 77DFB45A 29 Bytes [ 02, 5B, 05, 67, 00, 19, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQueryAllDataMultipleW + 6B 77DFB478 108 Bytes [ 01, 2F, 3C, B1, 1A, 1B, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQueryAllDataMultipleW + D8 77DFB4E5 145 Bytes [ 12, 11, 0A, 09, 02, 14, 13, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQuerySingleInstanceW + AC 77DFB661 1 Byte [ 17 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQuerySingleInstanceW + AE 77DFB663 81 Bytes [ 11, 23, 11, 33, 11, 21, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQuerySingleInstanceW + 100 77DFB6B5 9 Bytes [ 01, 00, 2C, FE, AB, 01, B2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQuerySingleInstanceW + 10A 77DFB6BF 1 Byte [ 29 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQuerySingleInstanceW + 10C 77DFB6C1 57 Bytes [ 86, B1, 0F, 0E, 2F, 3C, B1, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQuerySingleInstanceMultipleW + 37 77DFB86C 5 Bytes [ CD, 10, CD, 00, B7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQuerySingleInstanceMultipleW + 3E 77DFB873 5 Bytes [ 1A, 00, 19, 18, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQuerySingleInstanceMultipleW + 44 77DFB879 181 Bytes [ 13, 10, CD, CD, 10, CD, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQuerySingleInstanceMultipleW + FA 77DFB92F 2 Bytes [ 1C, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQuerySingleInstanceMultipleW + FD 77DFB932 105 Bytes [ 18, 01, 00, 00, 13, 10, CE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQuerySingleInstanceMultipleA + D 77DFBA0A 106 Bytes [ 00, 13, 10, CD, CD, CD, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQuerySingleInstanceMultipleA + 78 77DFBA75 80 Bytes [ 01, 90, FE, 70, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQuerySingleInstanceMultipleA + C9 77DFBAC6 17 Bytes [ 04, 01, 0E, 11, 12, 17, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQuerySingleInstanceMultipleA + DB 77DFBAD8 48 Bytes [ CD, 10, CD, 31, 30, 01, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQuerySingleInstanceMultipleA + 10C 77DFBB09 227 Bytes [ 3A, 4B, 46, 29, 25, 95, 3E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiSetSingleInstanceW + C6 77DFBBED 308 Bytes [ 01, 00, 61, 00, 00, 02, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiSetSingleItemW + 5D 77DFBD22 20 Bytes [ 01, 80, 5B, 70, 6A, 61, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiSetSingleItemW + 72 77DFBD37 17 Bytes [ 5F, B1, 12, 11, 2F, 3C, B2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiSetSingleItemW + 84 77DFBD49 37 Bytes [ 07, 10, C0, C0, C4, C4, B3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiSetSingleItemW + AA 77DFBD6F 295 Bytes [ 0A, 0A, 01, 11, 0A, 08, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiExecuteMethodW + 32 77DFBE97 89 Bytes [ 40, 00, 9B, B1, 15, 14, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiExecuteMethodW + 8C 77DFBEF1 43 Bytes [ 17, 2F, 3C, B1, 23, 22, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiExecuteMethodW + B8 77DFBF1D 49 Bytes [ 04, 00, 3F, 3F, 3F, B7, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiExecuteMethodW + EA 77DFBF4F 165 Bytes [ 26, 35, 10, 21, 32, 11, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiExecuteMethodW + 190 77DFBFF5 109 Bytes [ 01, 2F, 3C, B3, 17, 14, 13, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiNotificationRegistrationA + 22 77DFC19F 100 Bytes [ 07, 23, 36, 35, 34, 27, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiFileHandleToInstanceNameW + 5F 77DFC204 38 Bytes [ 07, 06, 01, 00, 2E, 2E, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiFileHandleToInstanceNameW + 86 77DFC22B 376 Bytes [ 0E, 03, 00, 13, 10, C0, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiEnumerateGuids + 2B 77DFC3A4 34 Bytes [ B2, 21, 03, 05, 11, 12, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiEnumerateGuids + 4E 77DFC3C7 33 Bytes [ 33, 27, 23, 11, 21, 11, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiEnumerateGuids + 70 77DFC3E9 41 Bytes [ 49, 56, 3F, 05, 55, FE, A3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiEnumerateGuids + 9A 77DFC413 9 Bytes [ 03, 00, 1F, B1, 03, 02, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiEnumerateGuids + A4 77DFC41D 5 Bytes [ 01, 02, 10, DD, 3C ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiDevInstToInstanceNameW + 8 77DFC5F5 401 Bytes [ DD, 3C, 3C, B3, 0A, 09, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQueryAllDataMultipleA + 7 77DFC787 6 Bytes [ 3D, 01, 97, AB, 3E, 3E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQueryAllDataMultipleA + E 77DFC78E 43 Bytes [ 55, B5, FE, EF, 0E, 63, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiQueryAllDataMultipleA + 3A 77DFC7BA 253 Bytes [ 0D, 0C, 03, 17, 2F, 3C, B5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiSetSingleItemA + D 77DFC8B8 56 Bytes [ 00, 08, 00, 00, 13, 10, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiSetSingleItemA + 46 77DFC8F1 16 Bytes [ 13, 11, 12, 17, 39, 13, B2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiSetSingleItemA + 57 77DFC902 102 Bytes [ 10, 07, 35, 36, 35, 23, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiExecuteMethodA + 57 77DFC969 229 Bytes [ CD, CD, 10, CD, CD, 13, B1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiFileHandleToInstanceNameA + C9 77DFCA4F 160 Bytes [ 01, 02, 10, DD, 3C, B7, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiFileHandleToInstanceNameA + 16A 77DFCAF0 55 Bytes [ 02, 00, 03, F8, 00, 03, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiFileHandleToInstanceNameA + 1A2 77DFCB28 236 Bytes [ 03, 02, 02, 01, 00, 00, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiMofEnumerateResourcesA + 69 77DFCC15 9 Bytes [ 02, 00, 25, 01, 2D, 01, 99, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiMofEnumerateResourcesA + 73 77DFCC1F 68 Bytes [ 05, 00, 0B, 00, 47, 40, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiMofEnumerateResourcesA + B8 77DFCC64 17 Bytes [ 0B, 11, 12, 39, 39, 31, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiMofEnumerateResourcesA + CA 77DFCC76 50 Bytes [ 13, 01, 13, 23, 23, 86, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!WmiMofEnumerateResourcesA + FD 77DFCCA9 125 Bytes [ 2E, 2E, 2E, 2E, 2E, 2E, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!InitiateSystemShutdownExW + 7A 77E04C1F 339 Bytes [ A8, 04, 00, 00, EE, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!InitiateSystemShutdownExA + 99 77E04D73 269 Bytes [ 00, 0A, 0E, 0A, 00, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOverridePredefKey + AD 77E04E81 10 Bytes [ 06, 03, 06, 06, 06, 06, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOverridePredefKey + B8 77E04E8C 293 Bytes [ 02, 06, 06, 06, 05, 09, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOverridePredefKey + 1DE 77E04FB2 7 Bytes [ 03, 03, 06, 03, 08, 06, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegOverridePredefKey + 1E6 77E04FBA 190 Bytes [ 06, 04, 04, 04, 06, 05, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegLoadKeyA + 4A 77E05079 386 Bytes [ 07, 07, 02, 02, 08, 08, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegUnLoadKeyA + 8B 77E051FC 81 Bytes [ 04, 08, 09, 09, 09, 06, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegUnLoadKeyW + 3C 77E0524E 93 Bytes [ 0F, 00, 02, 02, 02, 04, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegReplaceKeyA + 9 77E052AC 24 Bytes [ 04, 03, 04, 08, 0B, 0B, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegReplaceKeyA + 22 77E052C5 18 Bytes [ 04, 07, 07, 07, 07, 07, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegReplaceKeyA + 35 77E052D8 202 Bytes [ 07, 07, 08, 08, 08, 09, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegReplaceKeyA + 100 77E053A3 125 Bytes [ 05, 04, 03, 04, 09, 0C, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegReplaceKeyA + 17E 77E05421 97 Bytes [ 08, 08, 08, 08, 08, 08, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegReplaceKeyW + 17 77E05483 27 Bytes [ 08, 07, 08, 07, 05, 08, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegReplaceKeyW + 33 77E0549F 549 Bytes [ 09, 0C, 0C, 0B, 09, 0B, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryMultipleValuesA + 18A 77E056C5 90 Bytes [ 0A, 09, 0B, 0E, 0A, 05, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryMultipleValuesA + 1E5 77E05720 54 Bytes [ 0A, 0A, 00, 00, 14, 1D, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryMultipleValuesA + 21C 77E05757 159 Bytes [ 0D, 0F, 0A, 0F, 0B, 09, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryMultipleValuesA + 2BC 77E057F7 288 Bytes [ 0F, 0F, 0D, 0D, 0D, 05, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryMultipleValuesW + 7B 77E05918 247 Bytes [ 04, 04, 02, 06, 12, 0B, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegQueryMultipleValuesW + 173 77E05A10 240 Bytes [ 04, 04, 02, 06, 13, 0B, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegRestoreKeyA + 8 77E05B01 7 Bytes [ 0C, 00, 00, 18, 22, 18, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegRestoreKeyA + 10 77E05B09 214 Bytes [ 04, 03, 06, 13, 0C, 18, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegRestoreKeyW + 36 77E05BE0 27 Bytes [ 0C, 0C, 0C, 0C, 0C, 0C, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegRestoreKeyW + 52 77E05BFC 88 Bytes [ 1B, 27, 1B, 00, 04, 04, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSaveKeyA + 17 77E05C55 18 Bytes [ 08, 0D, 0C, 11, 0B, 0D, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSaveKeyA + 2A 77E05C68 7 Bytes [ 0C, 0C, 0C, 0C, 0C, 0B, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSaveKeyA + 32 77E05C70 130 Bytes [ 0C, 0C, 07, 07, 07, 07, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSaveKeyA + B6 77E05CF4 157 Bytes [ 1D, 2A, 1D, 00, 05, 05, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSaveKeyW + 62 77E05D92 227 Bytes [ 08, 09, 09, 15, 15, 0D, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSaveKeyExA + 79 77E05E76 68 Bytes [ 19, 11, 0E, 0E, 11, 10, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSaveKeyExA + BE 77E05EBB 4 Bytes [ 08, 08, 08, 18 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSaveKeyExA + C3 77E05EC0 116 Bytes [ 18, 15, 15, 15, 08, 10, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSaveKeyExW + 43 77E05F35 166 Bytes [ 09, 17, 0F, 0E, 10, 10, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetValueW + 1A 77E05FDC 499 Bytes [ 25, 35, 25, 00, 06, 06, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetValueW + 20E 77E061D0 205 Bytes [ 07, 07, 06, 0B, 25, 17, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetValueW + 2DC 77E0629E 275 Bytes [ 23, 23, 23, 1F, 1F, 1F, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetValueW + 3F0 77E063B2 753 Bytes [ 15, 16, 26, 20, 26, 14, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!RegSetValueW + 6E2 77E066A4 68 Bytes [ 4B, 6B, 4B, 00, 0C, 0C, 0A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnumServiceGroupW + 28 77E06911 215 Bytes [ 28, 28, 28, 2D, 2D, 2D, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!I_ScSetServiceBitsA + 20 77E069E9 160 Bytes [ 2A, 30, 1D, 1C, 14, 1C, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetServiceBits + 31 77E06A8A 76 Bytes [ 07, 00, 06, 00, 00, 03, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnumServicesStatusExA + 48 77E06AD7 5 Bytes [ F0, 00, F0, 05, B0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnumServicesStatusExA + 4E 77E06ADD 225 Bytes [ 0D, 00, 19, 00, 63, 40, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryServiceObjectSecurity + 5E 77E06BBF 145 Bytes [ 0C, 10, 40, 4C, 1F, 1B, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetServiceObjectSecurity + 70 77E06C51 6 Bytes [ F4, 06, 3D, 05, C9, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetServiceObjectSecurity + 77 77E06C58 2 Bytes [ 00, 5A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetServiceObjectSecurity + 7A 77E06C5B 73 Bytes [ F5, 40, A0, C0, 3E, 01, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!SetServiceObjectSecurity + C4 77E06CA5 39 Bytes [ 40, 00, 07, 01, 07, 14, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ChangeServiceConfigA + 4 77E06CCD 292 Bytes [ 21, 23, 59, 58, 4E, 04, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ChangeServiceConfigA + 129 77E06DF2 84 Bytes [ 5F, 04, 1E, 0D, 24, 01, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ChangeServiceConfigA + 17E 77E06E47 247 Bytes [ 0A, 03, DB, 06, 50, 00, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ChangeServiceConfigW + DE 77E06F3F 201 Bytes [ 32, 36, 36, 35, 34, 26, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ChangeServiceConfig2W + 20 77E07009 710 Bytes [ 4C, 00, C9, 40, 8E, 40, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateServiceW + C8 77E072D1 1 Byte [ FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!CreateServiceW + CA 77E072D3 283 Bytes [ FE, AE, 01, 21, BE, 12, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnumDependentServicesA + 66 77E073EF 565 Bytes [ 03, 01, C5, 06, 37, 00, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetServiceDisplayNameW + 8C 77E07625 100 Bytes [ 11, 00, 40, 40, 2E, 1F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetServiceKeyNameA + 51 77E0768A 222 Bytes [ 13, 05, 9C, 2C, 22, 2B, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetServiceKeyNameW + 90 77E07769 1 Byte [ FC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!GetServiceKeyNameW + 92 77E0776B 157 Bytes [ 19, 04, AF, 06, 37, 00, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryServiceConfig2A + 10 77E07809 191 Bytes [ 0D, 00, 19, 00, AF, 40, 8A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryServiceConfig2A + D0 77E078C9 544 Bytes [ 10, 00, 13, 32, 12, 11, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!QueryServiceLockStatusW + 61 77E07AEA 62 Bytes [ A3, 7C, B5, FE, C7, 4A, AA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!UnlockServiceDatabase + 11 77E07B2A 45 Bytes [ 40, 63, 40, 5B, 11, 14, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!UnlockServiceDatabase + 3F 77E07B58 154 Bytes [ 70, 04, 03, 04, 0D, 0D, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnumServicesStatusW + 62 77E07BF3 113 Bytes [ 14, 06, 06, 07, 02, 60, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!EnumServicesStatusW + D4 77E07C65 501 Bytes [ 4A, 00, 7B, 40, 50, EF, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceCtrlDispatcherA + 122 77E07E5B 197 Bytes [ 13, 14, 33, 32, 37, 36, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceCtrlDispatcherA + 1E8 77E07F21 54 Bytes [ 70, 00, 03, 00, 08, 14, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceCtrlDispatcherA + 21F 77E07F58 180 Bytes [ 10, 04, 20, 04, 30, 04, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceCtrlDispatcherA + 2D4 77E0800D 26 Bytes [ 01, 92, 01, 6A, 01, 50, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!StartServiceCtrlDispatcherA + 2EF 77E08028 155 Bytes [ B6, 18, 4F, 17, 0E, 2C, 7A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!Wow64Win32ApiEntry + 64 77E082B7 358 Bytes [ 55, 06, 10, 15, 80, 09, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!Wow64Win32ApiEntry + 1CB 77E0841E 8 Bytes [ 06, 00, 15, 06, 0C, 40, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!Wow64Win32ApiEntry + 1D4 77E08427 127 Bytes [ 15, 12, 1B, 86, 05, 96, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfChangeNotify + 28 77E084A7 157 Bytes [ 02, 00, 1F, FE, DF, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfOpenBackupEventLogW + 54 77E08545 1 Byte [ 22 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfOpenBackupEventLogW + 56 77E08547 311 Bytes [ 24, 40, 13, 0C, 0A, 12, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfBackupEventLogFileW + 8E 77E0867F 155 Bytes [ BE, 04, 21, 04, 04, 00, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfReadEventLogW + 8A 77E0871B 223 Bytes [ 37, 00, 51, 40, 36, 0B, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfClearEventLogFileA + 2A 77E087FB 1 Byte [ 33 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfClearEventLogFileA + 2C 77E087FD 596 Bytes [ 0A, 06, 50, 05, 77, 00, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfFlushEventLog + 179 77E08A52 2 Bytes [ 49, 06 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfFlushEventLog + 17C 77E08A55 58 Bytes [ 2A, 06, 48, 41, 3C, 0A, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfFlushEventLog + 1B7 77E08A90 312 Bytes [ 2B, 5D, 5D, 5D, 71, 72, 71, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfFlushEventLog + 2F0 77E08BC9 506 Bytes [ 2A, 16, 40, 54, 00, 1A, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ADVAPI32.dll!ElfFlushEventLog + 4EB 77E08DC4 401 Bytes [ B4, 09, 01, 40, 4C, 03, 2B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!pfnUnmarshallRoutines + FFF770BD 77E51365 85 Bytes [ 8B, 55, 10, 85, D2, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!pfnUnmarshallRoutines + FFF77113 77E513BB 381 Bytes [ 0F, 85, AC, 04, 00, 00, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!pfnUnmarshallRoutines + FFF77291 77E51539 3 Bytes [ 83, 65, D8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!pfnUnmarshallRoutines + FFF77295 77E5153D 14 Bytes [ 8B, 4E, 08, 89, 4D, D4, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!pfnUnmarshallRoutines + FFF772A6 77E5154E 4 Bytes [ 89, 0A, 56, 6A ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!SimpleTypeAlignment + 14 77E5165C 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!SimpleTypeAlignment + 16 77E5165E 19 Bytes [ 8D, 45, E4, 50, 56, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!SimpleTypeAlignment + 2B 77E51673 14 Bytes CALL 77DFF8BF C:\WINDOWS\system32\ADVAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!SimpleTypeAlignment + 3A 77E51682 1 Byte [ 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!SimpleTypeAlignment + 3C 77E51684 67 Bytes [ 89, 45, DC, 33, C0, 83, 7D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!SimpleTypeBufferSize + 21 77E51729 1 Byte [ 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!SimpleTypeBufferSize + 23 77E5172B 50 Bytes CALL 77DFFDB3 C:\WINDOWS\system32\ADVAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!SimpleTypeBufferSize + 58 77E51760 30 Bytes CALL 77E36210 C:\WINDOWS\system32\ADVAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!SimpleTypeBufferSize + 77 77E5177F 29 Bytes [ 74, 09, 80, 48, 29, 40, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!SimpleTypeBufferSize + 96 77E5179E 8 Bytes JMP 77E502CA C:\WINDOWS\system32\RPCRT4.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!SimpleTypeMemorySize + 17 77E517DF 9 Bytes CALL 77DFF8BF C:\WINDOWS\system32\ADVAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!SimpleTypeMemorySize + 22 77E517EA 19 Bytes CALL 77E369CB C:\WINDOWS\system32\ADVAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!SimpleTypeMemorySize + 36 77E517FE 1 Byte [ 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!SimpleTypeMemorySize + 38 77E51800 34 Bytes [ 89, 45, D8, 33, C0, 8A, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!SimpleTypeMemorySize + 5C 77E51824 44 Bytes [ 3B, FE, 0F, 94, C0, 32, 45, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrTypeFlags + 4 77E55D2C 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrTypeFlags + 8 77E55D30 1 Byte [ 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrTypeFlags + C 77E55D34 5 Bytes [ 1C, A3, ED, 77, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrTypeFlags + 14 77E55D3C 21 Bytes [ D5, 36, ED, 77, D5, 36, ED, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrTypeFlags + 2C 77E55D54 5 Bytes [ E0, A8, E5, 77, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidCreate + 63 77E562AC 5 Bytes [ FF, FF, FF, FF, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidCreate + 69 77E562B2 27 Bytes [ 80, 00, FF, FF, 7F, 7F, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidCreate + 87 77E562D0 8 Bytes [ FF, FF, 7F, 7F, 7F, 7F, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidCreate + 90 77E562D9 15 Bytes [ FF, 7F, FF, FF, 7F, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidCreate + A0 77E562E9 10 Bytes [ 00, 80, FF, FF, 80, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBCacheFree + A 77E56642 13 Bytes [ 49, 00, 6E, 00, 74, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBCacheFree + 18 77E56650 9 Bytes [ 6C, 00, 4E, 00, 61, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBCacheFree + 22 77E5665A 53 Bytes [ 00, 00, 72, 00, 70, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBCacheFree + 58 77E56690 19 Bytes [ 67, 00, 68, 00, 74, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBCacheFree + 6C 77E566A4 3 Bytes [ 6F, 00, 73 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingFree + 49 77E588C4 107 Bytes [ 47, 30, 31, 31, C5, 31, D5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcRevertToSelf + 6 77E58930 136 Bytes [ 60, 00, 00, 00, 59, 30, 95, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcAllocate + 4E 77E589B9 52 Bytes [ 36, 4E, 36, 61, 36, 71, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcAllocate + 83 77E589EE 73 Bytes [ 00, 00, A0, 30, 70, 32, 82, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcAllocate + CD 77E58A38 1 Byte [ 48 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcAllocate + CF 77E58A3A 161 Bytes [ 00, 00, 63, 30, A9, 30, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcAllocate + 171 77E58ADC 124 Bytes [ 9C, 30, 6D, 31, D0, 31, 28, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcGetBuffer + 7 77E58DF8 106 Bytes [ 00, 30, 27, 30, 33, 30, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcGetBuffer + 72 77E58E63 136 Bytes [ 00, 3E, 30, 60, 30, 73, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcGetBuffer + FB 77E58EEC 379 Bytes [ 60, 3B, 64, 3B, 68, 3B, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrClientInitialize + F7 77E59068 176 Bytes [ 2D, 36, 39, 38, 40, 38, B2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrClientInitialize + 1A8 77E59119 695 Bytes [ 34, C8, 34, 2D, 35, BF, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrClientInitialize + 461 77E593D2 1 Byte [ 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrClientInitialize + 463 77E593D4 1 Byte [ DC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrClientInitialize + 467 77E593D8 82 Bytes [ 02, 30, 08, 30, 0D, 30, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrGetBuffer + 26 77E5942B 136 Bytes [ 33, 1B, 34, 36, 34, 55, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFreeBuffer + 28 77E594B4 41 Bytes [ C7, 31, D5, 31, 58, 33, B6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFreeBuffer + 52 77E594DE 58 Bytes [ 00, 00, 03, 30, 34, 31, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFullPointerXlatFree + 17 77E59519 166 Bytes [ 30, 05, 00, A4, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcFreeBuffer + 58 77E595C0 92 Bytes [ 64, 00, 00, 00, A5, 30, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcFreeBuffer + B5 77E5961D 117 Bytes [ 3F, A0, 3F, 00, 50, 05, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcFreeBuffer + 12B 77E59693 414 Bytes [ 37, 02, 38, 34, 38, 51, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrGetTypeFlags + 16F 77E59832 56 Bytes [ 00, 00, 3D, 30, A0, 30, 7A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrGetTypeFlags + 1A8 77E5986B 147 Bytes [ 3F, 32, 3F, 00, 00, 00, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrGetTypeFlags + 23C 77E598FF 75 Bytes [ 36, 1D, 36, 56, 36, 77, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrGetTypeFlags + 289 77E5994C 293 Bytes [ BB, 30, AB, 31, 29, 33, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrGetTypeFlags + 3AF 77E59A72 219 Bytes [ 45, 3C, 61, 3C, 73, 3C, 86, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrCorrelationInitialize + 44 77E59B4E 168 Bytes [ B2, 3B, B8, 3B, C1, 3B, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrCorrelationPass + 92 77E59BF7 403 Bytes [ 37, BC, 37, C0, 37, CC, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!CheckVerificationTrailer + 37 77E59D8B 8 Bytes [ 00, 00, 50, 06, 00, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!CheckVerificationTrailer + 40 77E59D94 76 Bytes [ 2E, 30, 5D, 30, E1, 30, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!CheckVerificationTrailer + 8D 77E59DE1 402 Bytes [ 38, F0, 38, F4, 38, F8, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitialize + AF 77E59F74 32 Bytes [ C9, 33, F7, 33, 36, 34, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitialize + D0 77E59F95 32 Bytes [ 39, 8D, 39, 91, 39, 95, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitialize + F1 77E59FB6 181 Bytes [ 00, 00, 3C, 30, 40, 30, DD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitialize + 1A7 77E5A06C 771 Bytes [ F0, 30, 0D, 31, 33, 31, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitialize + 4AB 77E5A370 365 Bytes [ 88, 00, 00, 00, 32, 30, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrOutInit + 148 77E5A4DF 228 Bytes [ 00, 0C, 30, 1E, 30, 2A, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrOutInit + 22E 77E5A5C5 174 Bytes [ 60, 07, 00, 48, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrAllocate + 64 77E5A674 67 Bytes [ E3, 3F, 00, 00, 00, 80, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrAllocate + A8 77E5A6B8 277 Bytes [ 78, 00, 00, 00, 17, 30, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitializeNew + 53 77E5A7CE 125 Bytes [ 7A, 39, 92, 39, 98, 39, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcImpersonateClient + 3E 77E5A84C 112 Bytes [ 0E, 30, 8F, 35, 43, 36, 54, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcRevertToSelfEx + 27 77E5A8BD 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcRevertToSelfEx + 2A 77E5A8C0 146 Bytes [ 38, 31, 3F, 31, 97, 31, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcRevertToSelfEx + BD 77E5A953 332 Bytes [ 30, 00, 31, 25, 31, 2F, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpMemoryIncrement + CB 77E5AAA0 66 Bytes [ 00, 30, 08, 00, 3C, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpMemoryIncrement + 10E 77E5AAE3 426 Bytes [ 00, 80, 30, 99, 30, 05, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpMemoryIncrement + 2B9 77E5AC8E 124 Bytes [ 00, 00, BF, 30, F7, 32, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpMemoryIncrement + 336 77E5AD0B 52 Bytes [ 32, 6C, 32, 70, 32, 74, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpMemoryIncrement + 36B 77E5AD40 118 Bytes [ 9C, 33, A0, 33, A4, 33, A8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructMarshall + 56 77E5AE3B 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructMarshall + 5C 77E5AE41 65 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructUnmarshall + 3D 77E5AE83 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructUnmarshall + 45 77E5AE8B 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructUnmarshall + 49 77E5AE8F 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructUnmarshall + 55 77E5AE9B 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructUnmarshall + 59 77E5AE9F 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrPointerFree + 13 77E5AFAB 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrPointerFree + 19 77E5AFB1 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrPointerFree + 30 77E5AFC8 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrPointerFree + 38 77E5AFD0 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrPointerFree + 43 77E5AFDB 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrPointerBufferSize + 2D 77E5B12E 27 Bytes [ A3, 56, 87, 2E, CB, F6, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrPointerUnmarshall + 18 77E5B14B 178 Bytes [ 00, 93, 9E, 00, 00, 63, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleTypeMarshall + 69 77E5B1FE 1 Byte [ 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleTypeMarshall + 6B 77E5B200 13 Bytes [ A3, 56, 87, 2E, 2C, 19, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleTypeMarshall + 79 77E5B20E 5 Bytes [ 00, 00, 3D, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleTypeMarshall + 7F 77E5B214 97 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleTypeMarshall + E1 77E5B276 3 Bytes [ 00, 29, 0C ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrOleFree + 13 77E5B360 76 Bytes JMP E748B365 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrOleFree + 60 77E5B3AD 18 Bytes CALL 0414C63B .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrOleFree + 74 77E5B3C1 10 Bytes [ 3E, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrOleFree + 80 77E5B3CD 100 Bytes [ 00, 00, F9, EC, 00, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructBufferSize + 60 77E5B432 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructBufferSize + 66 77E5B438 115 Bytes [ 00, 00, 00, 2A, EE, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructBufferSize + DA 77E5B4AC 93 Bytes [ 63, 6F, 6D, 2F, 63, 6F, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructBufferSize + 138 77E5B50A 74 Bytes [ 00, 00, 00, 00, 3A, F6, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructBufferSize + 183 77E5B555 22 Bytes [ 08, 00, 08, 00, A4, 56, 87, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructFree + 20 77E5B62C 20 Bytes [ 08, 00, A4, 56, 87, 2E, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructFree + 36 77E5B642 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructFree + 3E 77E5B64A 74 Bytes [ 00, 00, A7, 42, 01, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructFree + 89 77E5B695 5 Bytes [ 14, 00, 08, 00, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructFree + 8F 77E5B69B 15 Bytes [ A4, 56, 87, 2E, 75, FF, 8B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantArrayMarshall + 2C 77E5B795 178 Bytes [ 00, 00, 00, 00, 00, AE, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantArrayMarshall + DF 77E5B848 122 Bytes [ 14, 00, 14, 00, 08, 00, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantArrayUnmarshall + 64 77E5B8C3 49 Bytes [ FC, 09, 00, 00, 43, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantArrayFree + 16 77E5B8F5 169 Bytes [ 68, 6F, 74, 6F, 63, 6F, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantArrayFree + C0 77E5B99F 125 Bytes [ 00, 74, 05, 00, 00, 45, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantArrayFree + 13E 77E5BA1D 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantArrayFree + 145 77E5BA24 4 Bytes [ 00, EC, 01, 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantArrayFree + 14A 77E5BA29 190 Bytes [ 63, 6F, 6D, 2F, 63, 6F, 6E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqTransportType + 32 77E5C7E3 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqTransportType + 39 77E5C7EA 58 Bytes [ 00, 00, 48, 36, 03, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqTransportType + 74 77E5C825 26 Bytes [ 63, 74, 43, 6F, 6E, 74, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqTransportType + 8F 77E5C840 9 Bytes [ 00, 00, 00, 4B, 53, 9C, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqTransportType + 99 77E5C84A 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRSContextUnmarshall2 + 49 77E5CFD9 17 Bytes [ 14, 00, 08, 00, 08, 00, A4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRSContextUnmarshall2 + 5B 77E5CFEB 5 Bytes [ 48, 04, 00, 00, 46 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRSContextUnmarshall2 + 61 77E5CFF1 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRSContextUnmarshall2 + 6C 77E5CFFC 86 Bytes [ 00, A6, 2F, 04, 00, 63, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRSContextUnmarshall2 + C3 77E5D053 10 Bytes [ A4, 56, 87, 2E, 03, 57, FD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRCContextMarshall + 11 77E5D344 5 Bytes [ 14, 00, 08, 00, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRCContextMarshall + 17 77E5D34A 15 Bytes [ A4, 56, 87, 2E, 41, F4, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRCContextMarshall + 27 77E5D35A 3 Bytes [ 4D, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRCContextMarshall + 2B 77E5D35E 114 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerContextNewUnmarshall + 38 77E5D3D1 17 Bytes [ 00, 00, 00, 00, 2D, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerContextNewUnmarshall + 4A 77E5D3E3 196 Bytes [ 1D, 87, 04, 00, 63, 6F, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerContextNewUnmarshall + 111 77E5D4AA 102 Bytes [ 48, 8F, 04, 00, 63, 6F, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerContextNewUnmarshall + 178 77E5D511 109 Bytes [ 00, 00, 00, 00, 00, 8C, 98, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerContextNewUnmarshall + 1E6 77E5D57F 60 Bytes [ D9, B3, 04, 00, 63, 6F, 6D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRCContextBinding + 4C 77E5D727 7 Bytes [ 00, 3D, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRCContextBinding + 54 77E5D72F 99 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRCContextBinding + B8 77E5D793 84 Bytes [ 3D, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRCContextUnmarshall + 13 77E5D7E8 1 Byte [ 14 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRCContextUnmarshall + 15 77E5D7EA 23 Bytes [ 08, 00, 08, 00, A5, 56, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRCContextUnmarshall + 2F 77E5D804 111 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRCContextUnmarshall + 9F 77E5D874 98 Bytes [ 00, 00, 00, 00, 61, FE, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRCContextUnmarshall + 102 77E5D8D7 11 Bytes [ 40, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerContextNewMarshall + 32 77E5D944 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerContextNewMarshall + 50 77E5D962 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerContextNewMarshall + 59 77E5D96B 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRSContextMarshall2 + 16 77E5D986 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRSContextMarshall2 + 1F 77E5D98F 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRSContextMarshall2 + 2C 77E5D99C 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRSContextMarshall2 + 3D 77E5D9AD 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRSContextMarshall2 + 4C 77E5D9BC 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrContextHandleInitialize + 2A 77E5DC01 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrContextHandleInitialize + 32 77E5DC09 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrContextHandleInitialize + 3B 77E5DC12 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrContextHandleInitialize + 47 77E5DC1E 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingCopy + C 77E5DC3E 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingCopy + 12 77E5DC44 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingCopy + 19 77E5DC4B 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingCopy + 1B 77E5DC4D 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingCopy + 2A 77E5DC5C 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtStatsVectorFree + 25 77E5EA73 9 Bytes [ CE, 04, A0, 00, 48, 04, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtStatsVectorFree + 2F 77E5EA7D 69 Bytes [ BA, 00, 4B, 04, 2C, 00, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtStatsVectorFree + 75 77E5EAC3 19 Bytes [ AC, 04, 5D, 00, B9, 05, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtStatsVectorFree + 89 77E5EAD7 69 Bytes [ 28, 04, E4, FF, D8, 04, D7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtStatsVectorFree + CF 77E5EB1D 11 Bytes [ 26, 00, 46, 04, 42, 00, 73, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingToStringBindingW + 2F 77E5EC87 111 Bytes [ 4B, 04, 82, 00, 82, 04, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingParseW + 51 77E5ECF7 11 Bytes [ EC, 07, 7A, 00, 4B, 05, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingParseW + 5D 77E5ED03 59 Bytes [ 23, 05, 08, 00, 4B, 05, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingParseW + 99 77E5ED3F 10 Bytes [ 37, 04, 42, FF, D8, 05, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingParseW + A4 77E5ED4A 32 Bytes [ 00, 37, 03, EE, 00, 55, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingParseW + C5 77E5ED6B 45 Bytes [ CE, 04, 37, 00, 5F, 03, D3, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingFromStringBindingW + 2 77E5EDB7 31 Bytes [ B9, 01, CD, FE, D4, 04, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingFromStringBindingW + 22 77E5EDD7 35 Bytes [ 5F, 04, 02, 00, 35, 03, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingFromStringBindingW + 46 77E5EDFB 35 Bytes [ C4, 03, F3, 00, 32, 03, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingFromStringBindingW + 6A 77E5EE1F 31 Bytes [ 32, 04, 06, 00, 32, 04, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingFromStringBindingW + 8A 77E5EE3F 7 Bytes [ 4B, 03, 8E, 00, 73, 03, A9 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingComposeW + 3A 77E5F04B 15 Bytes [ AF, 02, 76, FF, 9B, 02, 4F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingComposeW + 4A 77E5F05B 63 Bytes [ 9D, 02, A2, FF, E1, 02, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingComposeW + 8A 77E5F09B 3 Bytes [ 25, 02, 34 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingComposeW + 8E 77E5F09F 7 Bytes [ FE, 02, BE, 00, 17, 02, A2 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingComposeW + 96 77E5F0A7 63 Bytes [ F7, 01, C9, FE, 7F, 06, AE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcParseSecurity + 9E 77E5F36B 107 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcParseSecurity + 10A 77E5F3D7 9 Bytes [ 0A, 00, 0B, 00, 0C, 00, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcParseSecurity + 114 77E5F3E1 17 Bytes [ 0F, 00, 10, 00, 11, 00, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcParseSecurity + 126 77E5F3F3 27 Bytes [ 18, 00, 19, 00, 1A, 00, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcParseSecurity + 142 77E5F40F 29 Bytes [ 85, 00, 86, 00, 87, 00, 88, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringBufferSize + 2A 77E5F487 1 Byte [ 1E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringBufferSize + 2C 77E5F489 3 Bytes [ 1F, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringBufferSize + 30 77E5F48D 43 Bytes [ 21, 00, 22, 00, 25, 00, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringBufferSize + 5C 77E5F4B9 7 Bytes [ 6B, 00, 6C, 00, 6D, 00, 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringBufferSize + 64 77E5F4C1 7 Bytes [ 7A, 00, 82, 00, E9, 00, 9D ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringMarshall + D 77E5F50D 37 Bytes [ A3, 00, 27, 00, A6, 00, 2A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringMarshall + 33 77E5F533 43 Bytes [ 38, 00, B7, 00, 39, 00, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringMarshall + 5F 77E5F55F 17 Bytes [ 46, 00, C5, 00, 48, 00, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringMarshall + 71 77E5F571 37 Bytes [ C9, 00, 4B, 00, CA, 00, CB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringMarshall + 97 77E5F597 67 Bytes [ D2, 00, D5, 00, 80, 01, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringUnmarshall + 11 77E5F5F1 1 Byte [ FA ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringUnmarshall + 13 77E5F5F3 7 Bytes [ 7B, 00, FE, 00, 7C, 00, 7D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringUnmarshall + 1C 77E5F5FC 30 Bytes [ 00, 7F, 01, 02, 00, 7E, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringUnmarshall + 3B 77E5F61B 360 Bytes [ B6, 01, BA, 01, CB, 01, D7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringUnmarshall + 1A4 77E5F784 32 Bytes [ 02, EC, 02, EF, 02, F0, 02, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructBufferSize + 4A 77E5F864 2 Bytes [ 01, E8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructBufferSize + 4D 77E5F867 2 Bytes [ 3A, 03 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructBufferSize + 50 77E5F86A 26 Bytes [ 03, 46, 03, AC, 01, AC, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructBufferSize + 6B 77E5F885 89 Bytes [ 59, 03, 5A, 03, 5B, 03, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructMarshall + 4F 77E5F8DF 199 Bytes [ 34, 03, 38, 01, AE, 00, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructUnmarshall + 5E 77E5F9A7 7 Bytes [ BA, 03, C0, 03, 4F, 03, B5 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructUnmarshall + 66 77E5F9AF 7 Bytes [ C1, 01, FC, 01, FD, 01, E5 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructUnmarshall + 6E 77E5F9B7 5 Bytes [ 03, 00, 1E, 00, 21 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructUnmarshall + 74 77E5F9BD 1 Byte [ 58 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructUnmarshall + 76 77E5F9BF 1 Byte [ 5F ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransConnectionAllocatePacket + A 77E608F3 103 Bytes [ 25, 49, 61, B0, 80, 62, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransGetThreadEvent + 56 77E6095B 348 Bytes [ 1B, B9, 00, 00, 40, 00, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransGetThreadEvent + 1B3 77E60AB8 135 Bytes [ 52, 4B, B0, 08, 50, 5B, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransGetThreadEvent + 23B 77E60B40 23 Bytes [ 73, 2B, 73, 2B, 2B, 73, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransGetThreadEvent + 253 77E60B58 6 Bytes [ 8E, 59, 18, 5F, 05, A8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransGetThreadEvent + 25A 77E60B5F 17 Bytes [ 19, 05, 3A, 00, 19, 03, B6, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingServerFromClient + 8D 77E624CB 4 Bytes [ FF, 00, 4B, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingServerFromClient + 92 77E624D0 23 Bytes [ 04, F8, 06, 78, 02, 26, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingServerFromClient + AA 77E624E8 10 Bytes [ 05, 10, 05, 3A, 02, 06, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingServerFromClient + B6 77E624F4 3 Bytes [ 00, 4B, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingServerFromClient + BA 77E624F8 19 Bytes [ 04, 5E, 06, 78, 02, 26, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructMemorySize + 40 77E627E1 7 Bytes [ 06, 01, CC, F7, 00, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructMemorySize + 48 77E627E9 142 Bytes [ 00, 00, 00, 02, 2D, 06, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructMemorySize + D7 77E62878 15 Bytes [ FF, FF, FF, EC, FF, E7, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructMemorySize + E7 77E62888 7 Bytes [ 00, 07, 01, B7, 00, F2, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleStructMemorySize + EF 77E62890 44 Bytes [ FF, FF, 00, 4B, FE, 16, 05, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringMemorySize + 61 77E62BDD 7 Bytes [ 8C, FF, E7, 08, 20, 05, 53 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringMemorySize + 69 77E62BE5 75 Bytes [ 22, 00, 36, 00, 32, 40, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringMemorySize + B5 77E62C31 59 Bytes [ 03, 21, 07, 21, 37, 23, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringMemorySize + F1 77E62C6D 61 Bytes [ 70, 82, 38, 5D, 9A, 7D, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStringMemorySize + 12F 77E62CAB 30 Bytes [ FF, 00, 4B, 00, 00, 04, 8D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcMapWin32Status + 2 77E62D0C 20 Bytes [ 00, 26, FF, E7, 04, 35, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcMapWin32Status + 17 77E62D21 15 Bytes [ 00, FF, FF, 00, 26, FF, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcMapWin32Status + 29 77E62D33 7 Bytes [ 07, 01, BB, 01, 09, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcMapWin32Status + 31 77E62D3B 24 Bytes [ 01, 00, 26, FE, 16, 04, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcMapWin32Status + 4A 77E62D54 15 Bytes [ 11, 04, 05, 20, 3B, 09, 32, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingArrayBufferSize + 54 77E63463 15 Bytes [ E7, 03, 9C, 05, A8, 00, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingArrayBufferSize + 64 77E63473 10 Bytes [ 34, 05, 23, 57, 11, 0B, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingArrayBufferSize + 6F 77E6347E 32 Bytes [ 3F, ED, 3F, ED, 12, 39, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingArrayBufferSize + 90 77E6349F 260 Bytes [ 06, 06, 15, 14, 16, 33, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingArrayMarshall + C8 77E635A4 216 Bytes [ 00, 55, FF, E7, 04, 33, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingArrayUnmarshall + BD 77E6367D 1 Byte [ 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingArrayUnmarshall + BF 77E6367F 339 Bytes [ E7, 03, 7E, 03, CF, 00, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingArrayUnmarshall + 213 77E637D3 74 Bytes [ D3, FE, 16, 03, D6, 03, CF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingArrayMemorySize + 1F 77E6381E 154 Bytes [ 35, 34, 3E, 04, 33, 32, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingArrayMemorySize + BA 77E638B9 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingArrayMemorySize + BC 77E638BB 57 Bytes [ 1A, 40, 0D, 1E, 00, 00, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingArrayMemorySize + F6 77E638F5 54 Bytes [ 8A, 3D, A3, 62, 3B, 62, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingArrayMemorySize + 12D 77E6392C 184 Bytes [ 44, FD, F4, 05, A8, FD, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructMemorySize + 79 77E639E5 220 Bytes [ 15, 11, 03, 0D, 13, 06, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionBufferSize + 8A 77E63AC2 194 Bytes [ 1D, 24, 57, 32, 07, 2C, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionMarshall + 3B 77E63B85 128 Bytes [ 1F, 00, 1A, 40, 0D, 12, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionMarshall + BC 77E63C06 132 Bytes [ 57, 2B, 07, 0C, 57, 1F, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionMarshall + 141 77E63C8B 73 Bytes [ 02, FF, DD, FE, 2F, 03, B4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionMarshall + 18B 77E63CD5 125 Bytes [ 23, 22, 26, 27, 23, 03, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionMarshall + 209 77E63D53 20 Bytes [ 1D, 0B, 00, 3F, ED, 3F, ED, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionFree + 45 77E63DC0 61 Bytes [ 74, 31, 3F, 52, 2F, 13, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionFree + 83 77E63DFE 55 Bytes [ 3F, 3F, 3F, CD, 5D, 12, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionFree + BB 77E63E36 330 Bytes [ 6D, 3D, FD, F4, 03, B6, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionUnmarshall + 13C 77E63F81 21 Bytes [ E7, 03, E3, 03, B6, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionUnmarshall + 152 77E63F97 40 Bytes [ 3F, 31, 30, 05, 22, 2E, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionUnmarshall + 17B 77E63FC0 202 Bytes [ 7B, 9B, 79, 05, 06, 14, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionMemorySize + 9A 77E6408B 384 Bytes [ 2E, 03, 35, 03, 05, 09, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionMemorySize + 21B 77E6420C 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionMemorySize + 21E 77E6420F 42 Bytes [ 06, 01, AE, 6A, 00, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionMemorySize + 249 77E6423A 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonEncapsulatedUnionMemorySize + 24C 77E6423D 6 Bytes [ 07, 01, B6, 00, B5, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransServerNewConnection + 25 77E65DDF 7 Bytes [ DD, FE, 2F, 03, B4, 05, A8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransServerNewConnection + 2D 77E65DE7 165 Bytes [ 1A, 00, 2F, 00, 1F, 40, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransServerNewConnection + D3 77E65E8D 15 Bytes [ C4, 00, 00, 03, 71, 04, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransServerNewConnection + E3 77E65E9D 273 Bytes [ 7D, 0D, 08, 08, 04, 07, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransServerNewConnection + 1F5 77E65FAF 17 Bytes [ 25, 00, 1A, 40, 0C, 23, 74, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructBufferSize + 2E 77E66680 298 Bytes [ 04, 05, 1E, 0B, 09, 74, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructBufferSize + 159 77E667AB 47 Bytes [ 9D, 85, 0D, 68, 71, 2B, 4F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructBufferSize + 189 77E667DB 8 Bytes [ 11, B7, 08, 03, 04, 7B, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructBufferSize + 192 77E667E4 50 Bytes [ 7B, 00, 3F, 3F, 3F, 12, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructBufferSize + 1C5 77E66817 19 Bytes [ 96, 00, 00, 06, 26, 04, 15, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructMarshall + AB 77E668F3 58 Bytes [ 09, 00, 0F, B6, 02, 08, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructMarshall + E6 77E6692E 5 Bytes [ 03, BA, 04, 15, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructMarshall + EC 77E66934 12 Bytes [ 00, 15, 40, 0A, 0A, 06, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructMarshall + F9 77E66941 52 Bytes [ 7B, 00, 3F, ED, 32, 3F, ED, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructMarshall + 12E 77E66976 32 Bytes [ FF, C4, 00, 00, 03, 71, 05, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructMemorySize + 32 77E66B93 4 Bytes [ 01, 21, 03, 23 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructMemorySize + 37 77E66B98 33 Bytes [ 33, 13, 0E, 03, 15, 14, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructMemorySize + 59 77E66BBA 77 Bytes [ 6B, A2, A6, 02, 3A, A9, CA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructMemorySize + A7 77E66C08 108 Bytes [ 05, 8A, 04, 15, 00, 0F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructMemorySize + 114 77E66C75 69 Bytes [ 11, 33, 05, 8A, 8A, 01, 2E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructUnmarshall + 48 77E66D21 216 Bytes [ 06, B3, 01, 1F, 29, 4F, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructUnmarshall + 121 77E66DFA 18 Bytes [ 09, 70, 09, 0C, 2F, 26, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructUnmarshall + 134 77E66E0D 19 Bytes [ 32, 00, 00, 04, 1D, 05, EE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructUnmarshall + 148 77E66E21 1 Byte [ 2D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructUnmarshall + 14A 77E66E23 90 Bytes [ 06, B3, 02, 1B, 27, 4F, 2B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleTypeUnmarshall + 2 77E66EE0 64 Bytes [ 00, 32, 00, 00, 03, 91, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleTypeUnmarshall + 43 77E66F21 29 Bytes [ 32, 00, 00, 03, 91, 05, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleTypeUnmarshall + 61 77E66F3F 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrSimpleTypeUnmarshall + 63 77E66F41 161 Bytes [ 32, FE, 16, 03, 91, 04, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructFree + 90 77E66FE3 35 Bytes [ 26, 01, 0C, 00, 00, 01, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructFree + B4 77E67007 17 Bytes [ 00, 01, 07, 01, CB, 00, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexStructFree + C6 77E67019 88 Bytes [ FF, 00, 4B, FF, E7, 03, ED, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrVaryingArrayFree + 1B 77E67073 43 Bytes [ 32, 00, 00, 04, B3, 04, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrVaryingArrayBufferSize + C 77E6709F 78 Bytes [ 02, 0D, 0A, 06, 7B, 02, 7B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrVaryingArrayBufferSize + 5B 77E670EE 190 Bytes [ 0B, 1F, FD, EC, 1F, 03, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrVaryingArrayMarshall + 79 77E671AD 203 Bytes [ 26, 01, 0E, 00, 00, 01, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrVaryingArrayUnmarshall + 93 77E67279 12 Bytes [ FF, FF, CE, FF, E7, 03, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrVaryingArrayUnmarshall + A0 77E67286 18 Bytes [ 00, 00, 01, 06, 01, B6, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrVaryingArrayUnmarshall + B3 77E67299 11 Bytes [ 32, FE, 16, 04, 0B, 04, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrVaryingArrayUnmarshall + BF 77E672A5 49 Bytes [ 00, 00, 07, 01, DF, 00, DD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrVaryingArrayUnmarshall + F1 77E672D7 78 Bytes [ 05, 00, 17, 00, 13, 40, 09, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrVaryingArrayMemorySize + 22 77E673A3 87 Bytes [ 02, 00, 32, 00, 00, 02, F1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrVaryingArrayMemorySize + 7A 77E673FB 119 Bytes [ 2D, 00, 06, B3, 01, 10, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrVaryingArrayMemorySize + F2 77E67473 2 Bytes [ 2D, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrVaryingArrayMemorySize + F5 77E67476 21 Bytes [ B3, 02, 14, 2D, 4F, 2B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrVaryingArrayMemorySize + 10B 77E6748C 20 Bytes [ 01, 07, 01, B2, 01, 4B, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoExW + 51 77E67A61 199 Bytes [ 5B, FF, E7, 04, 44, 05, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoExW + 119 77E67B29 94 Bytes [ 22, 60, 6B, 26, 3F, 52, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoExW + 178 77E67B88 16 Bytes [ 06, 26, 05, EE, 02, 26, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoExW + 189 77E67B99 9 Bytes [ 2D, 00, 06, B3, 01, 10, 1E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoExW + 194 77E67BA4 12 Bytes [ 00, 96, 00, 00, 06, 26, 05, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcLogEvent + 3D 77E6811F 1 Byte [ 1F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcLogEvent + 3F 77E68121 653 Bytes [ 2C, 00, 20, 40, 12, 05, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcLogEvent + 2CD 77E683AF 4 Bytes [ 0E, B5, 05, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcLogEvent + 2D2 77E683B4 48 Bytes [ 83, 00, 81, 00, 3F, 3F, D6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcLogEvent + 303 77E683E5 1 Byte [ 17 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexArrayFree + 6 77E6892E 10 Bytes [ 0E, 40, 09, 0C, 48, 0E, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexArrayFree + 11 77E68939 93 Bytes [ 3F, ED, 2F, 2B, 3F, 33, ED, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexArrayFree + 6F 77E68997 19 Bytes [ 9C, 01, EE, 03, 5C, 04, CA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexArrayFree + 83 77E689AB 10 Bytes [ 00, 3F, ED, 3F, 3F, 31, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexArrayFree + 8E 77E689B6 90 Bytes [ 35, 34, 37, 13, 33, 03, 06, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexArrayMarshall + 18 77E6918A 45 Bytes [ 43, 74, 5A, 3E, 0E, 6D, 9B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexArrayMarshall + 46 77E691B8 688 Bytes [ 2E, 4A, 11, 19, 17, 3A, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexArrayMemorySize + 5A 77E69469 72 Bytes [ 37, 03, 58, FE, 66, C5, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexArrayMemorySize + A3 77E694B2 47 Bytes [ 89, 54, 25, 0E, 06, 84, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexArrayMemorySize + D4 77E694E3 9 Bytes [ 01, FE, D9, FE, 16, 06, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexArrayMemorySize + DE 77E694ED 546 Bytes [ 63, 00, 33, 40, 1D, 5D, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrComplexArrayMemorySize + 301 77E69710 56 Bytes [ 09, 1D, 45, 70, 53, 03, 6F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthClientExW + 93 77E69C07 121 Bytes [ 4F, 00, 29, 40, 16, 45, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthClientW + 6F 77E69C81 385 Bytes [ 7B, 8C, 05, 03, 2D, 4F, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!CreateStubFromTypeInfo + 7E 77E69E03 24 Bytes [ 06, 78, F7, F7, FE, C2, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!CreateStubFromTypeInfo + 97 77E69E1C 16 Bytes [ FF, FF, FD, 00, 05, 3A, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!CreateStubFromTypeInfo + A8 77E69E2D 69 Bytes [ 00, 00, 02, 00, 00, 03, B6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!CreateStubFromTypeInfo + EE 77E69E73 99 Bytes [ 02, 00, 00, 05, 3A, 02, D4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!CreateStubFromTypeInfo + 152 77E69ED7 58 Bytes [ 07, 01, B7, FC, 80, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrOleAllocate + 16 77E6A1FB 2 Bytes [ 03, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrOleAllocate + 1A 77E6A1FF 67 Bytes [ 10, B7, 01, 00, 03, 01, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqObject + 37 77E6A243 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqObject + 39 77E6A245 71 Bytes [ 02, 00, 00, 03, B6, 03, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqObject + 81 77E6A28D 37 Bytes [ 7F, 01, 01, 3F, FE, 8A, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqLocalClientPID + 20 77E6A2B3 1 Byte [ 17 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqLocalClientPID + 22 77E6A2B5 15 Bytes [ 18, 00, 15, 40, 0A, 13, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqLocalClientPID + 32 77E6A2C5 49 Bytes [ 3F, F6, 5D, DD, C6, C6, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqLocalClientPID + 64 77E6A2F7 24 Bytes [ 44, FE, 8C, 05, FA, 0E, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqLocalClientPID + 7D 77E6A310 6 Bytes [ FF, FF, FC, B2, 03, B6 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetObject + 51 77E6A51F 3 Bytes [ 03, 00, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetObject + 55 77E6A523 6 Bytes [ 12, 40, 09, 02, 7A, 70 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetObject + 5C 77E6A52A 5 Bytes [ 01, 00, 8E, 04, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetObject + 62 77E6A530 26 Bytes [ 3F, F6, 5D, ED, 31, 30, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetObject + 7E 77E6A54C 19 Bytes [ 05, 3A, 02, 2D, 06, 53, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcSend + 12 77E6A817 55 Bytes [ 78, 01, AA, 02, 3B, 02, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcSend + 4B 77E6A850 323 Bytes [ 02, 15, 05, 3A, 00, 03, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcAsyncSetHandle + 12B 77E6A995 64 Bytes [ 02, FF, E7, FE, 63, 02, CA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcAsyncSetHandle + 16C 77E6A9D6 89 Bytes [ 37, 07, 06, 06, 23, 22, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcAsyncSetHandle + 1C7 77E6AA31 11 Bytes [ 02, 00, 1F, FF, E7, 03, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcAsyncSetHandle + 1D3 77E6AA3D 1 Byte [ 2A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcAsyncSetHandle + 1D5 77E6AA3F 17 Bytes [ 1D, 40, 0E, 22, 75, 1D, 4A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcReceive + 43 77E6AF13 6 Bytes [ 13, 00, 08, B1, 13, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcReceive + 4A 77E6AF1A 18 Bytes [ 2F, 2F, 31, 30, 07, 36, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcReceive + 5D 77E6AF2D 47 Bytes [ 02, 06, 07, 5E, 64, A5, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcReceive + 8D 77E6AF5D 48 Bytes [ 52, 02, FA, 05, EA, 02, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcReceive + BF 77E6AF8F 51 Bytes [ 00, 2F, CD, 2F, CD, 31, 30, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBCacheAllocate + 2C 77E6B725 10 Bytes [ 00, 02, 04, 05, 3A, 02, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBCacheAllocate + 37 77E6B730 5 Bytes [ FF, FF, 00, 4B, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBCacheAllocate + 3D 77E6B736 46 Bytes [ 05, 09, 05, 3A, 02, 06, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBCacheAllocate + 6C 77E6B765 163 Bytes [ 27, 23, 06, 07, 8E, B6, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBCacheAllocate + 110 77E6B809 25 Bytes [ 12, 00, 00, 00, 01, 00, 4B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!CreateProxyFromTypeInfo + 9C 77E6C1DD 143 Bytes [ 07, 33, 3E, 03, 37, 33, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!CreateProxyFromTypeInfo + 12C 77E6C26D 23 Bytes [ 35, 34, 3E, 02, 37, 35, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!CreateProxyFromTypeInfo + 144 77E6C285 313 Bytes [ 15, 14, 1E, 02, 17, 1E, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrGetUserMarshalInfo + 67 77E6C3BF 34 Bytes [ 05, 15, 2C, 43, 2D, 26, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrGetUserMarshalInfo + 8A 77E6C3E2 4 Bytes [ 13, 56, 4E, 39 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrGetUserMarshalInfo + 8F 77E6C3E7 383 Bytes [ 07, 00, 01, 00, 5A, FE, 71, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrUserMarshalMarshall + 67 77E6C567 166 Bytes [ 3F, ED, 3F, ED, 12, 39, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrUserMarshalMarshall + 10E 77E6C60E 247 Bytes [ 57, 4B, 87, 65, 3B, 52, 8F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrUserMarshalUnmarshall + F4 77E6C706 76 Bytes [ 06, 10, 57, 02, 0B, 00, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrUserMarshalUnmarshall + 141 77E6C753 249 Bytes [ 2D, 00, 20, 40, 12, 1D, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrUserMarshalUnmarshall + 23B 77E6C84D 63 Bytes [ 25, 11, 02, 08, 20, 3E, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrUserMarshalUnmarshall + 27B 77E6C88D 19 Bytes [ 21, 40, 12, 14, 57, 30, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrUserMarshalUnmarshall + 28F 77E6C8A1 149 Bytes [ 0B, 00, 3F, 3F, 3F, 39, 39, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrUserMarshalMemorySize + 71 77E6CBAD 86 Bytes [ 31, 40, 2B, 48, 60, 6A, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesHandleFree + 50 77E6CC04 122 Bytes [ 02, 37, 3E, 03, 33, 21, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesHandleFree + CB 77E6CC7F 9 Bytes [ 5A, FE, 6F, 03, 46, 03, CF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesHandleFree + D5 77E6CC89 6 Bytes [ 17, 40, 0C, 10, 09, 19 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesHandleFree + DC 77E6CC90 130 Bytes [ 04, 0D, 27, 57, 20, 07, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesBufferHandleReset + 17 77E6CD13 22 Bytes [ 6E, FF, E7, 03, 6E, 03, B6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesBufferHandleReset + 2E 77E6CD2A 114 Bytes [ 3F, ED, 3F, ED, 32, 31, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesBufferHandleReset + A1 77E6CD9D 61 Bytes [ 3F, ED, 3F, 3F, ED, 31, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesBufferHandleReset + DF 77E6CDDB 123 Bytes [ 1A, 14, 25, 10, 55, 57, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesBufferHandleReset + 15B 77E6CE57 375 Bytes [ 3F, 3F, 33, ED, 32, 3F, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesEncodeFixedBufferHandleCreate + FB 77E6CFCF 136 Bytes [ 3F, 3F, ED, 12, 17, 39, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeEncode2 + 78 77E6D058 380 Bytes [ 00, 01, 00, 8C, FE, 2F, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeEncode + 61 77E6D1D5 23 Bytes [ E7, 03, 98, 05, C1, 02, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeEncode + 79 77E6D1ED 67 Bytes [ 2F, 03, E4, 05, C1, 00, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeEncode + BD 77E6D231 111 Bytes [ 03, 23, 13, 36, 35, 34, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeEncode + 12D 77E6D2A1 35 Bytes [ FF, 00, 05, FF, F1, 02, 91, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeEncode + 152 77E6D2C6 30 Bytes [ 00, 06, 01, C3, BA, 00, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesDecodeBufferHandleCreate + 32 77E6D32D 11 Bytes [ 73, FF, E7, 03, C5, 05, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesDecodeBufferHandleCreate + 3E 77E6D339 11 Bytes [ 2E, 00, 00, 00, 06, 02, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesDecodeBufferHandleCreate + 4A 77E6D345 22 Bytes [ 5F, FF, E7, 05, 7B, 05, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesDecodeBufferHandleCreate + 61 77E6D35C 13 Bytes [ FF, C4, 00, 00, 03, 71, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesDecodeBufferHandleCreate + 6F 77E6D36A 66 Bytes [ FF, FF, 00, 32, 00, 00, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeDecode + 3A 77E6D3AE 6 Bytes [ 03, 79, 04, 15, 00, 0B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeDecode + 41 77E6D3B5 119 Bytes [ 17, 00, 11, B7, 04, 10, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeDecode + B9 77E6D42D 13 Bytes [ 06, 01, 1F, 00, 00, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeDecode + C7 77E6D43B 5 Bytes [ 15, 02, 06, 01, 0D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeDecode + CD 77E6D441 17 Bytes [ 00, 00, 03, 00, 4B, FF, E7, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeDecode2 + 17 77E6D487 17 Bytes [ 32, 1E, 02, 15, 14, 0E, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeDecode2 + 29 77E6D499 101 Bytes [ 15, 14, 16, 13, 21, 07, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeDecode2 + 8F 77E6D4FF 77 Bytes [ 32, 00, 00, 04, 0B, 04, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeDecode2 + DD 77E6D54D 19 Bytes [ FF, 00, 32, 00, 00, 05, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeDecode2 + F1 77E6D561 13 Bytes [ 00, 04, 7D, 04, 15, 02, 06, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidCreateSequential + 23 77E6EBEB 68 Bytes [ 3C, 05, 53, 00, 17, 00, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidCreateSequential + 68 77E6EC30 26 Bytes [ 2A, 3E, 33, 2B, 17, 05, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidCreateSequential + 84 77E6EC4C 424 Bytes [ 00, 55, FF, E7, 03, C2, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidCreateSequential + 22D 77E6EDF5 268 Bytes [ 75, 57, 33, 01, B6, 0D, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidCreateSequential + 33A 77E6EF02 5 Bytes [ 32, 16, 15, 14, 02 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqEpExA + 19 77E6F93D 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqEpExA + 1B 77E6F93F 34 Bytes [ 5F, FE, AC, 05, D3, 03, B6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerUseProtseqEp2A + 1A 77E6F962 208 Bytes [ 0B, 00, 3F, ED, 32, 3F, ED, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidToStringW + 30 77E6FA33 9 Bytes [ 3C, FF, EF, 03, C7, 03, B6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidToStringW + 3A 77E6FA3D 155 Bytes [ 28, 00, 1E, 40, 0F, 0A, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqEpA + 59 77E6FAD9 440 Bytes [ 16, 00, 2A, 00, 21, 40, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqIfExW + 12F 77E6FC93 1 Byte [ 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqIfExW + 131 77E6FC95 7 Bytes [ 37, FF, E7, 05, 3E, 03, CF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqIfExW + 139 77E6FC9D 24 Bytes [ 1E, 00, 32, 00, 20, 40, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqIfExW + 152 77E6FCB6 142 Bytes [ 3F, ED, 3F, 3F, 3F, ED, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqIfExW + 1E1 77E6FD45 1 Byte [ 02 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtEnableIdleCleanup + 2 77E700EA 106 Bytes [ 56, 21, 1A, 2B, 25, 20, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtIsServerListening + 9 77E70155 17 Bytes [ BD, 1C, 38, 51, 34, 1B, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtIsServerListening + 1B 77E70167 288 Bytes [ 37, FF, EF, 05, 95, 03, B6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseAllProtseqsIfEx + 74 77E70288 15 Bytes [ 60, 44, 25, 0D, 0A, 68, 9B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseAllProtseqsIfEx + 84 77E70298 60 Bytes [ 0E, 5E, 9B, EF, A2, 05, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseAllProtseqsIfEx + C1 77E702D5 21 Bytes [ 00, 00, 02, 00, 5F, FE, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseAllProtseqsIfEx + D7 77E702EB 23 Bytes [ 34, 00, 32, 10, 32, 20, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseAllProtseqsIfEx + EF 77E70303 62 Bytes [ 3F, 3F, ED, 3F, ED, 12, 39, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerSetAddressChangeFn + 2 77E70C13 35 Bytes [ FF, 00, 32, 00, 00, 05, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcSystemFunction001 + E 77E70C37 57 Bytes [ E7, 04, 26, 04, 2E, 02, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcSystemFunction001 + 48 77E70C71 17 Bytes [ 00, FF, FF, 00, 73, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcSystemFunction001 + 5A 77E70C83 105 Bytes [ 01, 00, 14, FF, E7, 03, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerRegisterForwardFunction + 2 77E70CED 9 Bytes [ A5, 04, 8C, 04, 62, 00, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerRegisterForwardFunction + C 77E70CF7 110 Bytes [ 2F, 00, 29, 40, 13, 2A, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerRegisterForwardFunction + 7B 77E70D66 176 Bytes [ 8F, 5B, 2A, 02, FF, 21, 3E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerRegisterForwardFunction + 12C 77E70E17 88 Bytes [ 3F, 3F, 39, 2F, ED, 3F, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerRegisterForwardFunction + 185 77E70E70 4 Bytes [ 00, 01, 00, 32 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerInqAddressChangeFn + D 77E71250 28 Bytes [ 03, AD, 05, EE, 02, 26, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerInqAddressChangeFn + 2A 77E7126D 203 Bytes [ 32, 00, 00, 04, 11, 05, 7B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerInqAddressChangeFn + F6 77E71339 4 Bytes [ 4B, FF, E7, 03 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerInqAddressChangeFn + FB 77E7133E 4 Bytes [ 04, 2E, 00, 28 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerInqAddressChangeFn + 100 77E71343 46 Bytes [ 2A, 40, 1B, 07, 7D, 0F, 05, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransDatagramAllocate + 74 77E722BC 312 Bytes [ E6, 31, 30, 25, 26, 26, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransDatagramAllocate + 1AD 77E723F5 145 Bytes [ 1D, 37, 7B, 46, 4F, 39, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransDatagramAllocate + 23F 77E72487 81 Bytes [ 1D, 40, 0E, 09, 29, 57, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransDatagramAllocate + 291 77E724D9 79 Bytes [ 13, 1E, 13, 35, 39, 3B, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransDatagramAllocate + 2E1 77E72529 460 Bytes [ 10, FF, E7, 03, BA, 04, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFullPointerQueryPointer + 1B 77E726F6 80 Bytes [ 7A, 13, 62, 8D, AD, 5E, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFullPointerQueryPointer + 6C 77E72747 107 Bytes [ 21, 07, 21, 06, 02, 02, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFullPointerXlatInit + 19 77E727B3 297 Bytes [ 38, 40, 1E, 06, 11, 7D, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFullPointerXlatInit + 145 77E728DF 29 Bytes [ 63, 00, 00, 04, 66, 05, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFullPointerXlatInit + 163 77E728FD 13 Bytes [ FF, 00, 87, 01, EE, 03, 1E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFullPointerXlatInit + 171 77E7290B 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFullPointerXlatInit + 174 77E7290E 2 Bytes [ 00, 4B ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!TowerConstruct + DC 77E72FE4 3 Bytes [ 15, 16, 16 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!TowerConstruct + E0 77E72FE8 65 Bytes [ 9E, 2C, 54, 78, 9A, B9, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!TowerConstruct + 122 77E7302A 35 Bytes [ 56, 98, D0, 79, 20, 36, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!TowerConstruct + 147 77E7304F 9 Bytes [ 02, 00, 4B, FF, E7, 03, BF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!TowerConstruct + 151 77E73059 125 Bytes [ 17, 00, 27, 00, 10, B7, 23, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtSetComTimeout + 5B 77E73137 95 Bytes [ 3F, ED, 32, 3F, ED, 12, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtSetComTimeout + BB 77E73197 161 Bytes [ 01, FF, C3, FE, 62, 03, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerCheckClientRestriction + 4B 77E73239 28 Bytes [ 06, 2A, 41, 55, 31, 76, B6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerCheckClientRestriction + 68 77E73256 10 Bytes [ 00, 05, FE, 7D, 03, 7D, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerCheckClientRestriction + 73 77E73261 41 Bytes [ 1E, 40, 0F, 04, 04, 0C, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerCheckClientRestriction + 9D 77E7328B 41 Bytes [ 23, 13, 21, 37, 01, 33, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerCheckClientRestriction + C7 77E732B5 135 Bytes [ E6, FE, 63, 03, CC, 03, B6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!TowerExplode + 72 77E7333D 7 Bytes [ 73, FF, E7, 04, 05, 05, 53 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!TowerExplode + 7A 77E73345 237 Bytes [ 25, 00, 39, 00, 1C, 40, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!TowerExplode + 168 77E73433 453 Bytes [ 4D, FF, E7, 04, 08, 05, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFullPointerFree + 64 77E735F9 248 Bytes [ 10, B7, 0A, 4A, 1E, 03, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFullPointerInsertRefId + E6 77E736F2 78 Bytes [ 21, 07, 21, 37, 36, 00, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFullPointerInsertRefId + 135 77E73741 191 Bytes [ FC, FF, E7, 03, 95, 05, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFullPointerInsertRefId + 1F5 77E73801 4 Bytes [ 01, 00, 42, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFullPointerInsertRefId + 1FA 77E73806 168 Bytes [ 03, B0, 05, 3A, 00, 10, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFullPointerInsertRefId + 2A3 77E738AF 315 Bytes [ 7E, 16, 0B, 51, 98, 37, 4A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterAuthInfoW + CB 77E739EB 31 Bytes [ E7, 04, 02, 05, 53, 00, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterAuthInfoW + EB 77E73A0B 415 Bytes [ 3F, ED, 3F, ED, 12, 39, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerInqBindings + 14E 77E73BAB 155 Bytes [ 17, 00, 2F, 00, 10, B7, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingVectorFree + 55 77E73C47 42 Bytes [ 06, 00, 65, 09, 0C, 01, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingVectorFree + 80 77E73C72 20 Bytes [ 42, 1D, FC, E2, 1D, 8F, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingVectorFree + 96 77E73C88 6 Bytes [ 03, CD, 05, 53, 00, 23 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingVectorFree + 9D 77E73C8F 44 Bytes [ 18, 40, 0B, 1F, 1C, 65, 1E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingVectorFree + CA 77E73CBC 139 Bytes [ 15, 36, 33, 21, 07, 21, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMapCommAndFaultStatus + 1B 77E73D48 139 Bytes [ 36, 36, 33, 32, 1E, 02, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMapCommAndFaultStatus + A8 77E73DD5 11 Bytes [ 01, 00, 5F, 00, 00, 03, DA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMapCommAndFaultStatus + B4 77E73DE1 22 Bytes [ 26, 40, 13, 09, 0C, 48, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMapCommAndFaultStatus + CB 77E73DF8 208 Bytes [ 3F, 3F, 12, 39, 39, 2F, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMapCommAndFaultStatus + 19C 77E73EC9 223 Bytes [ 70, FF, E7, 04, 02, 05, 53, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcIfInqId + 1D 77E7420B 209 Bytes [ 02, 00, 3F, 3F, ED, 32, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingToStringBindingA + 21 77E742DD 145 Bytes [ 34, 2E, 02, 23, 22, 06, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingToStringBindingA + B3 77E7436F 56 Bytes [ 26, 40, 15, 09, 0C, 86, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonConformantStringBufferSize + 2D 77E743A8 36 Bytes [ 16, 01, 58, 55, 28, 8E, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonConformantStringBufferSize + 52 77E743CD 340 Bytes [ EE, 02, D3, 05, 3A, 00, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNonConformantStringUnmarshall + 22 77E74522 458 Bytes [ 3F, ED, 3F, 5D, 31, 30, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcEpRegisterA + F3 77E746ED 40 Bytes [ 82, 02, 66, 02, DA, 04, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcEpRegisterA + 11C 77E74716 169 Bytes [ 33, 15, 23, 15, 23, 35, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcEpRegisterA + 1C6 77E747C0 106 Bytes [ 48, 15, 41, 59, 6F, 44, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcEpRegisterA + 231 77E7482B 40 Bytes [ 5B, FC, D3, FF, FF, FF, AF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcEpRegisterA + 25A 77E74854 12 Bytes [ FF, 8B, FE, C1, 01, F0, 02, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingParseA + 66 77E74B4E 30 Bytes [ 00, 2F, 2F, 12, 39, 2F, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingParseA + 85 77E74B6D 75 Bytes [ 54, 8C, 01, 54, FE, AC, 8C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingParseA + D1 77E74BB9 152 Bytes [ 47, 5D, FE, B9, 01, 47, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingParseA + 16A 77E74C52 4 Bytes [ 92, 84, 84, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingParseA + 16F 77E74C57 278 Bytes [ 01, 00, 73, 00, 00, 03, A7, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingToStaticStringBindingW + 9E 77E74E56 254 Bytes [ 03, A7, 04, 24, 00, 07, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerUseProtseq2W + C 77E74F55 225 Bytes [ 48, 00, 19, 40, 0A, 26, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerUseProtseq2W + EE 77E75037 11 Bytes CALL 8AE7B53F .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerUseProtseq2W + FA 77E75043 23 Bytes [ 51, 00, 27, 40, 12, 33, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerUseProtseq2W + 112 77E7505B 118 Bytes [ 2F, CD, 2F, CD, 12, 17, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerUseProtseq2W + 189 77E750D2 156 Bytes [ 28, 56, 60, 6D, 3E, 4E, 7C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterAuthInfoA + FD 77E756DF 4 Bytes [ 01, FF, F5, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterAuthInfoA + 102 77E756E4 174 Bytes [ 02, ED, 04, 2E, 00, 35, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterAuthInfoA + 1B1 77E75793 119 Bytes [ 30, 1A, 1A, 7F, 15, 1A, 1E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterAuthInfoA + 229 77E7580B 29 Bytes [ 24, 00, 1A, 40, 0D, 1E, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterAuthInfoA + 247 77E75829 99 Bytes [ 33, 32, 16, 17, 16, 16, 15, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerInqDefaultPrincNameW + 40 77E75979 60 Bytes [ 56, 03, 8B, 00, 03, 00, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerInqDefaultPrincNameW + 7D 77E759B6 6 Bytes [ 15, 14, 06, 07, 07, 1E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerInqDefaultPrincNameW + 84 77E759BD 168 Bytes [ 15, 14, 0E, 02, 23, 22, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerInqDefaultPrincNameW + 12E 77E75A67 186 Bytes [ 02, FF, F9, FF, E7, 02, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerInqDefaultPrincNameW + 1E9 77E75B22 10 Bytes [ 00, 02, 00, 78, FF, 46, 05, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqW + 2 77E760FE 32 Bytes JMP 3140D926 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqW + 23 77E7611F 151 Bytes [ 48, B0, 01, 60, 23, B0, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqExW + 63 77E761B7 68 Bytes [ 00, 00, 00, 00, 2D, 02, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqExW + A8 77E761FC 47 Bytes [ 00, 03, 00, 00, 00, 05, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqExW + D8 77E7622C 10 Bytes [ 00, 03, 00, 00, 00, 09, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqExW + E4 77E76238 3 Bytes [ 00, 03, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqExW + E9 77E7623D 5 Bytes [ 0A, 02, 88, 00, 64 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrGetDcomProtocolVersion + C 77E768E1 3 Bytes [ 75, 00, 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrGetDcomProtocolVersion + 10 77E768E5 9 Bytes [ 65, 00, 20, 00, 74, 00, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrGetDcomProtocolVersion + 1A 77E768EF 3 Bytes [ 73, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrGetDcomProtocolVersion + 1E 77E768F3 49 Bytes [ 66, 00, 6F, 00, 6E, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrGetDcomProtocolVersion + 50 77E76925 13 Bytes [ 45, 00, 55, 00, 4C, 00, 41, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingFromStringBindingA + 47 77E76BBF 952 Bytes [ 65, 00, 66, 00, 61, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingComposeA + 3B4 77E76F78 168 Bytes [ 74, 70, 75, 74, 20, 64, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingComposeA + 45D 77E77021 9 Bytes [ 64, 00, 20, 00, 61, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingComposeA + 467 77E7702B 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingComposeA + 469 77E7702D 15 Bytes [ 63, 00, 6C, 00, 65, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcStringBindingComposeA + 479 77E7703D 11 Bytes [ 70, 00, 65, 00, 61, 00, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqA + 19 77E775C9 1 Byte [ 28 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqA + 1B 77E775CB 13 Bytes [ 50, 00, 28, 00, 50, 00, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqA + 29 77E775D9 141 Bytes [ 28, 00, 50, 00, 28, 00, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerUseProtseq2A + 84 77E77667 1 Byte [ 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerUseProtseq2A + 86 77E77669 1 Byte [ 28 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerUseProtseq2A + 88 77E7766B 1 Byte [ 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerUseProtseq2A + 8A 77E7766D 3 Bytes [ 28, 00, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerUseProtseq2A + 8E 77E77671 5 Bytes [ 28, 00, 50, 00, 28 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthClientA + 2 77E78565 11 Bytes [ D8, 00, D8, FF, D8, 00, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthClientA + E 77E78571 13 Bytes [ D8, 00, DB, FF, D8, 00, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthClientA + 1C 77E7857F 21 Bytes [ DE, FF, D8, 00, DF, FF, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthClientExA + B 77E78595 15 Bytes [ E2, 00, F1, FF, E2, 00, F2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthClientExA + 1B 77E785A5 135 Bytes [ E2, 00, F5, FF, E2, 00, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthClientExA + A3 77E7862D 153 Bytes [ D8, 01, 5C, FF, D8, 01, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpReleaseTypeFormatString + 9 77E786C7 13 Bytes [ 70, 00, 06, FF, CE, 00, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpReleaseTypeFormatString + 17 77E786D5 11 Bytes [ 14, FF, CE, 00, 17, FF, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpReleaseTypeFormatString + 23 77E786E1 63 Bytes [ 1A, FF, 88, 00, 1C, FF, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpReleaseTypeFormatString + 63 77E78721 11 Bytes [ 5A, FF, CE, 00, 5B, FF, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpReleaseTypeFormatString + 6F 77E7872D 11 Bytes [ 5D, FF, CE, 00, 5E, FF, CE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpGetTypeFormatString + 2 77E79E7B 13 Bytes [ EC, 00, D6, FF, E2, 00, D7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpGetTypeFormatString + 10 77E79E89 9 Bytes [ D9, FF, E2, 00, DA, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpGetTypeFormatString + 1A 77E79E93 11 Bytes [ E2, 00, DC, FF, E2, 00, DD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpGetTypeGenCookie + 2 77E79E9F 17 Bytes [ E2, 00, DF, FF, E2, 00, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpGetTypeGenCookie + 14 77E79EB1 63 Bytes [ EF, FF, E7, 00, F0, FF, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpGetTypeGenCookie + 54 77E79EF1 33 Bytes [ FF, FF, A6, 01, 04, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpGetProcFormatString + 19 77E79F13 11 Bytes [ B0, 01, 77, FF, C4, 01, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpGetProcFormatString + 25 77E79F1F 31 Bytes [ C4, 01, 7A, FF, C4, 01, 7B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpVarVtOfTypeDesc + 10 77E79F3F 23 Bytes [ 79, 01, 88, FF, 79, 01, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpVarVtOfTypeDesc + 28 77E79F57 27 Bytes [ A1, 01, 90, FF, 8D, 01, 91, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpVarVtOfTypeDesc + 44 77E79F73 25 Bytes [ A1, 01, 97, FF, 79, 01, 98, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpReleaseTypeGenCookie + E 77E79F8D 17 Bytes [ 9E, FF, 79, 01, E6, FF, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpReleaseTypeGenCookie + 20 77E79F9F 11 Bytes [ 7E, 01, F2, FF, 4C, 01, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpReleaseTypeGenCookie + 2C 77E79FAB 39 Bytes [ BF, 01, FA, FF, BF, 01, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpReleaseTypeGenCookie + 54 77E79FD3 3 Bytes [ 74, 03, 3A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpReleaseTypeGenCookie + 58 77E79FD7 13 Bytes [ 74, 00, A3, 00, 06, FF, C4, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerListen + 4C 77E7B23F 3 Bytes [ E2, 01, 57 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerListen + 50 77E7B243 11 Bytes [ E2, 01, 58, FF, E2, 01, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerListen + 5C 77E7B24F 91 Bytes [ E2, 01, 5B, FF, E2, 01, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerListen + B8 77E7B2AB 27 Bytes [ AB, 02, 04, FF, CE, 02, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerListen + D4 77E7B2C7 7 Bytes [ 3C, 00, 83, 00, 06, FF, E2 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterIf + 12 77E7B2F7 7 Bytes [ 58, FF, E2, 00, 59, FF, E2 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterIf + 1A 77E7B2FF 13 Bytes [ 5A, FF, E2, 00, 5B, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterIf + 28 77E7B30D 9 Bytes [ E2, 00, 5E, FF, E2, 00, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterIf + 32 77E7B317 3 Bytes [ 83, FF, E2 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterIf + 37 77E7B31C 22 Bytes [ FF, E2, 00, 86, FF, E2, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorStartEnumeration + 2 77E7B48D 35 Bytes [ BA, 01, 7C, FF, BA, 01, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorStartEnumeration + 26 77E7B4B1 31 Bytes [ B0, 02, 02, FF, CE, 02, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorStartEnumeration + 46 77E7B4D1 15 Bytes [ 3C, 02, 16, 00, 3C, 00, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorStartEnumeration + 56 77E7B4E1 71 Bytes [ 14, FF, E2, 00, 2A, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorStartEnumeration + 9E 77E7B529 11 Bytes [ 85, FF, E2, 00, 86, FF, E2, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtWaitServerListen + 20 77E7B64B 29 Bytes [ E2, 01, 3C, FF, E2, 01, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtWaitServerListen + 3E 77E7B669 17 Bytes [ 5A, FF, E2, 01, 5B, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtWaitServerListen + 50 77E7B67B 111 Bytes [ E2, 01, 5F, FF, E2, 01, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtStopServerListening + 6B 77E7B6EB 1 Byte [ 0A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtStopServerListening + 6D 77E7B6ED 47 Bytes [ C4, 00, 12, FF, C4, 00, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtStopServerListening + 9D 77E7B71D 2 Bytes [ C4, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtStopServerListening + A0 77E7B720 4 Bytes [ FF, C4, 00, 57 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtStopServerListening + A5 77E7B725 3 Bytes [ C4, 00, 58 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoExW + 2 77E7B795 9 Bytes [ D8, 00, A6, FF, D8, 00, A9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoExW + C 77E7B79F 15 Bytes [ AA, FF, D8, 00, AB, FF, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoExW + 1C 77E7B7AF 31 Bytes [ B9, FF, D8, 00, BA, FF, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoExW + 3C 77E7B7CF 63 Bytes [ DA, FF, D8, 00, DB, FF, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoExW + 7C 77E7B80F 19 Bytes [ F7, FF, E2, 00, F8, FF, B0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingCopy + 17 77E7B85D 47 Bytes [ D8, 01, 2E, FF, D8, 01, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingCopy + 47 77E7B88D 19 Bytes [ D8, 01, 5C, FF, D8, 01, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingCopy + 5B 77E7B8A1 63 Bytes [ D8, 01, 61, FF, D8, 01, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingCopy + 9B 77E7B8E1 11 Bytes [ CE, 01, 8B, FF, CE, 01, 93, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingCopy + A7 77E7B8ED 9 Bytes [ CE, 01, 97, FF, E2, 01, 9E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtSetServerStackSize + 76 77E7BE4D 3 Bytes [ 85, FF, EC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtSetServerStackSize + 7A 77E7BE51 33 Bytes [ 86, FF, EC, 00, 87, FF, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtSetServerStackSize + 9C 77E7BE73 15 Bytes [ EC, 00, A1, FF, EC, 00, A2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtSetServerStackSize + AC 77E7BE83 59 Bytes [ EC, 00, A5, FF, EC, 00, A6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtSetServerStackSize + E8 77E7BEBF 17 Bytes [ EC, 00, DA, FF, EC, 00, DB, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoW + 2 77E7C089 11 Bytes [ D8, 00, 9F, FF, D8, 00, A0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoW + E 77E7C095 15 Bytes [ D8, 00, A2, FF, D8, 00, A3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoW + 1E 77E7C0A5 19 Bytes [ D8, 00, A6, FF, D8, 00, A7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoW + 32 77E7C0B9 13 Bytes [ D8, 00, AB, FF, D8, 00, AC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoW + 40 77E7C0C7 41 Bytes [ B9, FF, D8, 00, BA, FF, D8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrByteCountPointerFree + 2 77E7C3FD 8 Bytes [ 74, 01, 6B, FF, 74, 01, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrByteCountPointerFree + B 77E7C406 124 Bytes [ 01, 77, FF, 88, 01, 78, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrByteCountPointerUnmarshall + 1A 77E7C483 21 Bytes [ E2, 01, 78, FF, E2, 01, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrByteCountPointerUnmarshall + 30 77E7C499 101 Bytes [ 7D, FF, C9, 01, 7E, FF, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrByteCountPointerUnmarshall + 96 77E7C4FF 17 Bytes [ 81, FF, CE, 01, E1, FF, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrByteCountPointerUnmarshall + A8 77E7C511 81 Bytes [ CE, 01, EE, FF, D8, 01, F2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrByteCountPointerUnmarshall + FA 77E7C563 7 Bytes [ BA, 01, 2A, FF, A6, 01, 2B ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetOption + 2 77E7CD2F 16 Bytes [ 83, 02, A3, FF, BA, 02, A6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetOption + 13 77E7CD40 30 Bytes [ 02, BD, FF, 83, 02, C2, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetOption + 32 77E7CD5F 53 Bytes [ C4, 03, 0E, FF, 8D, 03, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetOption + 68 77E7CD95 37 Bytes [ B0, 00, 4A, FF, 88, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetOption + 8E 77E7CDBB 81 Bytes [ 76, FF, 9C, 00, 77, FF, 9C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructFree + 47 77E7D0BB 19 Bytes [ 28, 00, 90, 00, 04, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructFree + 5B 77E7D0CF 1 Byte [ 19 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructFree + 5D 77E7D0D1 37 Bytes [ 97, 00, 1A, FF, 97, 00, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructFree + 83 77E7D0F7 31 Bytes [ 23, FF, E2, 00, 24, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantStructFree + A3 77E7D117 19 Bytes [ 68, FF, 65, 00, 69, FF, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUnregisterIf + 61 77E7D3F5 11 Bytes [ 7E, 02, BB, FF, 9C, 02, BE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUnregisterIf + 6D 77E7D401 7 Bytes [ BA, 02, DD, 00, 3C, 02, EF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUnregisterIf + 75 77E7D409 6 Bytes [ BA, 02, F4, 00, 50, 03 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUnregisterIf + 7C 77E7D410 18 Bytes [ FF, 9C, 03, 07, FF, B0, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUnregisterIf + 8F 77E7D423 13 Bytes [ 91, 00, 04, FF, 88, 00, 0D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSmDestroyClientContext + 17 77E7D519 5 Bytes CALL 7DE9AE1D .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSmDestroyClientContext + 1D 77E7D51F 19 Bytes [ C4, 01, 08, FF, E2, 01, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSmDestroyClientContext + 31 77E7D533 15 Bytes [ C4, 01, 23, FF, C4, 01, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsDestroyClientContext + 2 77E7D543 35 Bytes [ C4, 01, 27, FF, C4, 01, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsDestroyClientContext + 26 77E7D567 127 Bytes [ E2, 01, 30, FF, E2, 01, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsDestroyClientContext + A6 77E7D5E7 59 Bytes [ A6, 02, BD, 00, 5F, 02, BE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsDestroyClientContext + E2 77E7D623 31 Bytes CALL 60EAAF27 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsDestroyClientContext + 102 77E7D643 65 Bytes [ D8, 02, FC, FF, C4, 03, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantArrayMemorySize + 20 77E7E9BF 7 Bytes [ 37, 01, F1, 00, E6, 01, F1 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantArrayMemorySize + 28 77E7E9C7 39 Bytes [ 79, 01, F1, 00, A7, 01, F1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantArrayMemorySize + 50 77E7E9EF 73 Bytes [ 06, 02, 85, 00, 8C, 02, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantArrayMemorySize + 9A 77E7EA39 59 Bytes [ 72, FF, A7, 02, 72, 00, 82, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantArrayMemorySize + D6 77E7EA75 161 Bytes [ A2, 00, 37, 05, 2E, FF, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrRangeUnmarshall + 65 77E7EB17 25 Bytes [ 5A, 04, 68, 00, 5F, 04, 9A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrRangeUnmarshall + 7F 77E7EB31 91 Bytes [ 9F, FF, D8, 04, 08, 00, 5A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrRangeUnmarshall + DB 77E7EB8D 27 Bytes [ 3E, 00, 73, 04, 3E, 00, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrRangeUnmarshall + F7 77E7EBA9 7 Bytes [ E7, 00, 37, 04, 10, FF, F6 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrRangeUnmarshall + FF 77E7EBB1 21 Bytes [ D2, 00, 37, 04, BF, 00, 5F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterIf2 + 4F 77E80949 20 Bytes [ 00, 1B, B9, 00, 00, 40, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterIf2 + 65 77E8095F 23 Bytes [ 40, 00, 59, B0, 5B, 2B, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterIf2 + 7D 77E80977 26 Bytes [ 59, 0D, B0, 5B, 2B, 2D, 2C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterIf2 + 98 77E80992 138 Bytes [ 59, B0, 5B, 2B, 2D, 2C, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterIf2 + 123 77E80A1D 71 Bytes [ 79, 02, 40, 79, 60, 79, B0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcClearMutex + 92 77E80E08 145 Bytes [ 0E, 0B, 0E, 17, 0E, 23, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcClearMutex + 124 77E80E9A 1303 Bytes [ 1B, 50, 1B, 5B, 1B, 66, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqEpW + 275 77E813B2 30 Bytes [ 88, 6A, 88, B4, 89, 0A, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqEpW + 294 77E813D1 212 Bytes [ A8, 8C, 0A, 8C, 25, 8C, 9D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterIfEx + 8B 77E814A6 50 Bytes [ A1, CA, A1, EF, A2, 2D, A2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterIfEx + BE 77E814D9 187 Bytes [ 07, 00, 0B, 00, 31, 00, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterIfEx + 17B 77E81596 324 Bytes [ 04, A2, 05, 3A, 00, 07, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterIfEx + 2C0 77E816DB 302 Bytes [ 3F, FD, 7D, E6, 18, 3F, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerRegisterIfEx + 3EF 77E8180A 78 Bytes [ 2A, FC, 95, 01, 15, 03, 47, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFixedArrayFree + 1E 77E81AED 4 Bytes [ 01, 00, 3C, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFixedArrayFree + 23 77E81AF2 388 Bytes [ 05, A8, 05, 3A, 00, 13, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFixedArrayUnmarshall + 112 77E81C77 325 Bytes [ 3F, 33, ED, 32, 3F, ED, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFixedArrayUnmarshall + 258 77E81DBD 4 Bytes [ 7D, E6, 31, 30 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFixedArrayUnmarshall + 25D 77E81DC2 86 Bytes [ 34, 2E, 02, 27, 2E, 03, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFixedArrayUnmarshall + 2B4 77E81E19 56 Bytes [ 4C, 7B, 57, 30, 01, A2, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFixedArrayUnmarshall + 2ED 77E81E52 16 Bytes [ 05, 15, 05, 3A, 00, 07, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFixedArrayMemorySize + 48 77E81FDF 21 Bytes [ 01, FF, C4, 00, 00, 05, B2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFixedArrayMemorySize + 5E 77E81FF5 86 Bytes [ 02, 09, 08, 05, 08, 03, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFixedArrayMemorySize + B5 77E8204C 142 Bytes [ B6, 05, 02, 04, 02, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFixedArrayMemorySize + 145 77E820DC 23 Bytes [ FF, FF, FF, C4, 00, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrFixedArrayMemorySize + 15D 77E820F4 25 Bytes [ FF, FF, FF, C4, 00, 00, 04, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsContextLockExclusive + A0 77E82269 311 Bytes [ 23, 40, 12, 1A, 48, 24, 1E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsContextLockExclusive + 1D8 77E823A1 11 Bytes [ 7D, FF, E7, 04, C9, 06, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsContextLockExclusive + 1E4 77E823AD 299 Bytes [ 00, 00, 07, 01, B3, 01, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsContextLockExclusive + 310 77E824D9 23 Bytes [ 07, 00, 00, 00, 07, 01, BB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsContextLockExclusive + 328 77E824F1 4 Bytes [ 81, 00, 00, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransConnectionReallocPacket + 7 77E826F4 112 Bytes [ 08, 06, 02, 02, 02, 00, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransConnectionReallocPacket + 78 77E82765 33 Bytes [ 0C, 00, 00, 00, 06, 01, AF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransConnectionReallocPacket + 9A 77E82787 31 Bytes [ E2, 00, 00, 03, 14, 06, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransConnectionReallocPacket + BA 77E827A7 109 Bytes [ 0C, 00, 00, 00, 06, 01, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransConnectionReallocPacket + 128 77E82815 81 Bytes [ 13, 40, 09, 1A, 02, 19, 08, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrRpcSsDefaultAllocate + 120 77E83721 132 Bytes [ 02, 29, 01, 04, 29, FE, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrRpcSsDefaultAllocate + 1A5 77E837A6 320 Bytes [ 3F, ED, 3F, ED, 12, 17, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcRaiseException + 48 77E838E7 1 Byte [ 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcRaiseException + 4A 77E838E9 1 Byte [ 32 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcRaiseException + 4D 77E838EC 4 Bytes [ 02, 50, 05, A8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcRaiseException + 52 77E838F1 1 Byte [ 03 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcRaiseException + 54 77E838F3 1 Byte [ 07 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcExceptionFilter + 60 77E83DF7 22 Bytes [ 1E, FF, E7, 03, 4A, 03, E1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcExceptionFilter + 77 77E83E0E 4 Bytes [ 2A, 0B, 15, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcExceptionFilter + 7C 77E83E13 348 Bytes [ 57, 0F, 07, 00, 3F, FD, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcExceptionFilter + 1D9 77E83F70 60 Bytes [ 78, EC, 7A, 05, 04, 42, 4A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcExceptionFilter + 216 77E83FAD 226 Bytes [ 11, B7, 0B, 06, 03, 07, 0A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidEqual + 15 77E84835 17 Bytes [ 55, FF, E7, 03, C6, 05, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidEqual + 28 77E84848 110 Bytes [ FF, FF, 00, 55, FF, E7, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidEqual + 97 77E848B7 5 Bytes [ AA, 00, 00, 00, 06 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidEqual + 9D 77E848BD 31 Bytes [ 87, 00, 00, FF, FF, 00, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidEqual + BD 77E848DD 247 Bytes [ E7, 03, C6, 05, A8, 00, 27, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingIsClientLocal + 72 77E84F19 49 Bytes [ 13, 22, 1B, 10, 05, A8, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingIsClientLocal + A4 77E84F4B 222 Bytes [ 8E, 00, 00, 00, 06, 01, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingIsClientLocal + 183 77E8502A 30 Bytes [ 00, 07, 01, B2, 01, 42, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingIsClientLocal + 1A2 77E85049 24 Bytes [ 00, FF, FF, 00, 32, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingIsClientLocal + 1BB 77E85062 25 Bytes [ FF, FF, 00, 32, FE, 16, 04, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!GlobalMutexClearExternal + D6 77E96444 3 Bytes [ 00, 03, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!GlobalMutexClearExternal + DA 77E96448 28 Bytes [ 00, 08, 00, 2A, 03, E4, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!GlobalMutexClearExternal + F7 77E96465 1 Byte [ 64 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!GlobalMutexClearExternal + F9 77E96467 3 Bytes [ 00, 00, 03 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!GlobalMutexClearExternal + FE 77E9646C 60 Bytes [ 00, 0B, 00, 56, 04, 84, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqComTimeout + 1A 77E97094 261 Bytes [ 20, 6D, 61, 79, 20, 75, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcAsyncAbortCall + 2E 77E9719A 135 Bytes [ 68, 69, 73, 20, 66, 6F, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcNsBindingInqEntryNameW + 1D 77E97222 1 Byte [ 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcNsBindingInqEntryNameW + 1F 77E97224 13 Bytes [ 73, 00, 20, 00, 64, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcNsBindingInqEntryNameW + 2D 77E97232 15 Bytes [ 6E, 00, 65, 00, 64, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcNsBindingInqEntryNameW + 3D 77E97242 3 Bytes [ 69, 00, 76 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcNsBindingInqEntryNameW + 41 77E97246 9 Bytes [ 65, 00, 20, 00, 61, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcNsBindingSetEntryNameA + 5 77E97250 19 Bytes [ 75, 00, 6E, 00, 63, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcNsBindingSetEntryNameW + C 77E97264 31 Bytes [ 64, 00, 20, 00, 61, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcNsBindingSetEntryNameW + 2C 77E97284 15 Bytes [ 61, 00, 72, 00, 61, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcNsBindingSetEntryNameW + 3C 77E97294 21 Bytes [ 6E, 00, 20, 00, 73, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqSecurityContext + C 77E972AA 18 Bytes [ 68, 00, 65, 00, 20, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqSecurityContext + 20 77E972BE 15 Bytes [ 66, 00, 6F, 00, 72, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqSecurityContext + 30 77E972CE 29 Bytes [ 65, 00, 20, 00, 6F, 00, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTurnOnEEInfoPropagation + 8 77E972EC 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTurnOnEEInfoPropagation + A 77E972EE 33 Bytes [ 2C, 00, 20, 00, 66, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingReset + 1A 77E97310 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingReset + 1C 77E97312 15 Bytes [ 49, 00, 74, 00, 20, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingReset + 2C 77E97322 13 Bytes [ 67, 00, 69, 00, 62, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingReset + 3A 77E97330 29 Bytes [ 63, 00, 6C, 00, 65, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoW + 19 77E9734E 1 Byte [ 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoW + 1B 77E97350 83 Bytes [ 6F, 00, 6E, 00, 61, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoW + 6F 77E973A4 9 Bytes [ 65, 00, 74, 00, 61, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoW + 79 77E973AE 13 Bytes [ 69, 00, 6E, 00, 67, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoW + 87 77E973BC 37 Bytes [ 20, 00, 73, 00, 74, 00, 79, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqWireIdForSnego + C 77E978B7 29 Bytes [ 50, 00, 28, 00, 50, 00, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqWireIdForSnego + 2A 77E978D5 33 Bytes [ 28, 00, 50, 00, 28, 00, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingHandleToAsyncHandle + C 77E978F7 29 Bytes [ 50, 00, 28, 00, 50, 00, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingHandleToAsyncHandle + 2A 77E97915 27 Bytes [ 28, 00, 50, 00, 28, 00, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingHandleToAsyncHandle + 46 77E97931 1 Byte [ 28 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingHandleToAsyncHandle + 48 77E97933 13 Bytes [ 50, 00, 28, 00, 50, 00, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingHandleToAsyncHandle + 56 77E97941 13 Bytes [ 28, 00, 50, 00, 28, 00, 50, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransIoCancelled + 2 77E98189 13 Bytes [ E2, 00, AC, FF, E2, 00, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransIoCancelled + 10 77E98197 11 Bytes [ B1, FF, E2, 00, B2, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransIoCancelled + 1C 77E981A3 5 Bytes [ B4, FF, E2, 00, B5 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransIoCancelled + 22 77E981A9 7 Bytes [ E2, 00, B6, FF, E2, 00, B7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransIoCancelled + 2A 77E981B1 3 Bytes [ E2, 00, B8 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqDefaultProtectLevel + 20 77E994D5 37 Bytes [ D8, 01, F8, FF, D8, 01, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqDefaultProtectLevel + 46 77E994FB 37 Bytes [ E2, 00, 12, FF, D8, 00, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqDefaultProtectLevel + 6C 77E99521 51 Bytes [ 3C, FF, E2, 00, 3D, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqOption + 2F 77E99555 27 Bytes [ 83, FF, E2, 00, 85, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqOption + 4B 77E99571 13 Bytes [ 9D, FF, E2, 00, 9E, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqConnId + 2 77E9957F 35 Bytes [ E2, 00, A1, FF, E2, 00, A2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqConnId + 26 77E995A3 9 Bytes [ E2, 00, AC, FF, E2, 00, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqConnId + 30 77E995AD 29 Bytes [ B0, FF, E2, 00, B1, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqConnId + 4E 77E995CB 143 Bytes [ E2, 00, B8, FF, E2, 00, B9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqConnId + DE 77E9965B 3 Bytes [ 04, FF, CE ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcNetworkInqProtseqsW + 18 77E996B5 19 Bytes [ A6, 00, 92, FF, D8, 00, 93, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcObjectInqType + 2 77E996C9 35 Bytes [ C4, 00, 9C, FF, CE, 00, 9D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcObjectInqType + 26 77E996ED 79 Bytes [ A6, 00, A5, FF, A6, 00, A6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcObjectSetType + 2 77E9973D 9 Bytes [ A6, 00, BB, FF, A6, 00, BC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcObjectSetType + C 77E99747 15 Bytes [ C1, 00, 32, 00, C2, 00, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcObjectSetType + 1C 77E99757 17 Bytes [ C5, 00, 5F, 00, D1, FF, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcProtseqVectorFreeW + 8 77E99769 9 Bytes [ D8, 00, D6, FF, A6, 00, D7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcProtseqVectorFreeW + 12 77E99773 41 Bytes [ D8, FF, A6, 00, D9, FF, A6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcProtseqVectorFreeW + 3C 77E9979D 219 Bytes [ D8, 00, E3, FF, D8, 00, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqStats + 3F 77E99879 11 Bytes [ A6, 01, 57, FF, C4, 01, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqStats + 4B 77E99885 35 Bytes [ C4, 01, 5A, FF, C4, 01, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqStats + 6F 77E998A9 79 Bytes [ E2, 01, 66, FF, E2, 01, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqDynamicEndpointA + F 77E998F9 27 Bytes [ BF, 01, FA, FF, E2, 01, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqDynamicEndpointA + 2B 77E99915 25 Bytes [ BA, 02, 05, FF, E2, 02, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqDynamicEndpointA + 45 77E9992F 19 Bytes [ D8, 01, 89, FF, D8, 01, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqDynamicEndpointA + 59 77E99943 19 Bytes [ CE, 01, E7, FF, CE, 01, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcBindingInqDynamicEndpointA + 6D 77E99957 23 Bytes [ CE, 02, 02, FF, CE, 02, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcGetAuthorizationContextForClient 77E99BA4 8 Bytes [ FF, 8D, 01, 91, FF, A1, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcGetAuthorizationContextForClient + 9 77E99BAD 69 Bytes [ A1, 01, 93, FF, 79, 01, 94, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcGetAuthorizationContextForClient + 4F 77E99BF3 1 Byte [ F8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcGetAuthorizationContextForClient + 51 77E99BF5 63 Bytes [ BF, 01, FA, FF, BF, 01, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcGetAuthorizationContextForClient + 91 77E99C35 12 Bytes [ 17, FF, 9C, 00, 19, FF, 60, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcFreeAuthorizationContext + 2 77E99C6B 7 Bytes [ C4, 00, 56, FF, C4, 00, 57 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcFreeAuthorizationContext + A 77E99C73 11 Bytes [ C4, 00, 58, FF, C4, 00, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcFreeAuthorizationContext + 16 77E99C7F 9 Bytes [ C4, 00, 5B, FF, C4, 00, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcFreeAuthorizationContext + 20 77E99C89 13 Bytes [ 5D, FF, C4, 00, 5E, FF, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqIfIds + 2 77E99C97 25 Bytes [ 9C, 00, 69, FF, 9C, 00, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqIfIds + 1C 77E99CB1 23 Bytes [ 79, FF, 88, 00, 7A, FF, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqIfIds + 34 77E99CC9 5 Bytes [ 85, FF, E2, 00, 86 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqIfIds + 3A 77E99CCF 13 Bytes [ E2, 00, 87, FF, E2, 00, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqIfIds + 48 77E99CDD 69 Bytes [ 91, FF, E2, 00, 93, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcIfIdVectorFree + 41 77E99D23 17 Bytes [ E2, 00, AA, FF, E2, 00, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcIfIdVectorFree + 53 77E99D35 31 Bytes [ B0, FF, E2, 00, B1, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqServerPrincNameW + 1B 77E99D55 5 Bytes [ B8, FF, E2, 00, B9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqServerPrincNameW + 21 77E99D5B 13 Bytes [ E2, 00, BA, FF, E2, 00, BB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqServerPrincNameW + 2F 77E99D69 17 Bytes [ CC, FF, EC, 00, CE, FF, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqServerPrincNameW + 41 77E99D7B 39 Bytes [ E2, 00, D7, FF, E2, 00, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqServerPrincNameW + 69 77E99DA3 47 Bytes [ E2, 00, EC, FF, D8, 00, EE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerInqDefaultPrincNameA + 2 77E99DE3 35 Bytes [ B0, 00, FD, FF, B0, 00, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerInqDefaultPrincNameA + 26 77E99E07 19 Bytes [ B0, 01, 6B, FF, B0, 01, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerInqDefaultPrincNameA + 3A 77E99E1B 19 Bytes [ C4, 01, 7A, FF, C4, 01, 7B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerInqDefaultPrincNameA + 4E 77E99E2F 47 Bytes [ 92, 01, 85, FF, 79, 01, 86, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerInqLocalConnAddress + 1C 77E99E5F 15 Bytes [ A1, 01, 93, FF, 79, 01, 94, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerInqLocalConnAddress + 2C 77E99E6F 11 Bytes [ A1, 01, 97, FF, 79, 01, 98, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerInqLocalConnAddress + 38 77E99E7B 47 Bytes [ 79, 01, 9A, FF, 47, 01, 9B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerInqLocalConnAddress + 68 77E99EAB 7 Bytes [ BF, 01, FC, FF, BF, 01, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerInqLocalConnAddress + 70 77E99EB3 11 Bytes [ BF, 02, 02, FF, C9, 02, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseAllProtseqsEx + 2 77E99EBF 7 Bytes [ C9, 02, 05, FF, 9C, 02, 06 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseAllProtseqsEx + A 77E99EC7 23 Bytes [ C9, 02, 07, FF, 9C, 03, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseAllProtseqsEx + 22 77E99EDF 35 Bytes [ 12, FF, C4, 00, 14, FF, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseAllProtseqsEx + 46 77E99F03 47 Bytes [ 2D, FF, C4, 00, 2E, FF, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseAllProtseqsEx + 76 77E99F33 9 Bytes [ 5B, FF, C4, 00, 5C, FF, C4, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseAllProtseqs + 1E 77E9A04F 11 Bytes [ DF, FF, E2, 00, E0, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseAllProtseqs + 2A 77E9A05B 213 Bytes [ EE, FF, E7, 00, EF, FF, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcSessionStrictContextHandle + 3C 77E9A131 61 Bytes [ 47, 01, 9B, FF, 6A, 01, 9C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcSessionStrictContextHandle + 7A 77E9A16F 23 Bytes [ 04, FF, C9, 02, 05, FF, 9C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcSessionStrictContextHandle + 92 77E9A187 1 Byte [ AC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcSessionStrictContextHandle + 94 77E9A189 11 Bytes [ 06, FF, C4, 00, 0A, FF, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcSessionStrictContextHandle + A0 77E9A195 43 Bytes [ 14, FF, C4, 00, 17, FF, 9C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcDeleteMutex + 17 77E9B0CB 83 Bytes [ FF, FF, B0, 01, 04, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcEnableWmiTrace + 4F 77E9B11F 51 Bytes [ 89, FF, 79, 01, 8B, FF, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcEnableWmiTrace + 83 77E9B153 9 Bytes [ 98, FF, 5B, 01, 99, FF, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcEnableWmiTrace + 8D 77E9B15D 11 Bytes [ 47, 01, 9B, FF, 6A, 01, 9C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcEnableWmiTrace + 99 77E9B169 281 Bytes [ 79, 01, E6, FF, C9, 01, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcFreePipeBuffer + 2 77E9B283 11 Bytes [ BA, 00, 9B, FF, B0, 00, 9D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcFreePipeBuffer + E 77E9B28F 35 Bytes [ E2, 00, 9F, FF, E2, 00, A0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcFreePipeBuffer + 32 77E9B2B3 23 Bytes [ E2, 00, AA, FF, E2, 00, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcNegotiateTransferSyntax + F 77E9B2CB 23 Bytes [ E2, 00, B2, FF, E2, 00, B3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcReallocPipeBuffer + 2 77E9B2E3 7 Bytes [ E2, 00, B8, FF, E2, 00, B9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcReallocPipeBuffer + A 77E9B2EB 59 Bytes [ E2, 00, BA, FF, E2, 00, BB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcGetCurrentCallHandle + 17 77E9B327 41 Bytes [ E2, 00, DE, FF, E2, 00, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerInqTransportType + 1A 77E9B351 3 Bytes [ F4, FF, E7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerInqTransportType + 1E 77E9B355 7 Bytes [ F5, FF, E7, 00, F6, FF, E7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerInqTransportType + 26 77E9B35D 13 Bytes [ F7, FF, E7, 00, F8, FF, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerInqTransportType + 34 77E9B36B 95 Bytes [ BA, 00, FB, FF, BA, 00, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerInqTransportType + 94 77E9B3CB 67 Bytes [ 79, 01, 88, FF, 79, 01, 89, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerTestCancel + 6 77E9B48C 26 Bytes [ FF, E2, 00, 57, FF, E2, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerTestCancel + 21 77E9B4A7 7 Bytes [ 5D, FF, E2, 00, 5E, FF, E2 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerTestCancel + 29 77E9B4AF 15 Bytes [ 5F, FF, E2, 00, 83, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerTestCancel + 39 77E9B4BF 17 Bytes [ 87, FF, E2, 00, 89, FF, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerTestCancel + 4B 77E9B4D1 9 Bytes [ EC, 00, 97, FF, EC, 00, 98, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcTestCancel + 5 77E9B4E5 59 Bytes [ E2, 00, 9E, FF, E2, 00, 9F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcGetExtendedError + 34 77E9B521 7 Bytes [ E2, 00, B1, FF, E2, 00, B2 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcGetExtendedError + 3C 77E9B529 15 Bytes [ E2, 00, B3, FF, E2, 00, B4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcGetExtendedError + 4C 77E9B539 91 Bytes [ E2, 00, B7, FF, E2, 00, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcCancelThreadEx + 2B 77E9B595 21 Bytes [ EC, 00, F3, FF, EC, 00, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcCancelThreadEx + 41 77E9B5AB 3 Bytes [ F8, FF, BA ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcCancelThreadEx + 45 77E9B5AF 32 Bytes [ F9, FF, BA, 00, FA, FF, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcCancelThreadEx + 66 77E9B5D0 46 Bytes [ FF, E2, 01, 0C, FF, E2, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcCancelThreadEx + 95 77E9B5FF 45 Bytes [ 3C, FF, E2, 01, 3D, FF, E2, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerAllocateIpPort + A5 77E9C567 10 Bytes [ 9B, FF, 65, 01, 9C, FF, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcServerAllocateIpPort + B0 77E9C572 10 Bytes [ 01, E6, FF, 83, 01, E7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcNetworkIsProtseqValidA + 2 77E9C57D 35 Bytes [ BA, 01, EE, FF, 10, 01, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcNetworkIsProtseqValidA + 26 77E9C5A1 45 Bytes [ 83, 02, 03, FF, 7E, 02, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcProtseqVectorFreeA + B 77E9C5CF 19 Bytes [ CE, 00, 0A, FF, CE, 00, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqExA + F 77E9C5E3 19 Bytes [ 56, 00, 1A, FF, 88, 00, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqIfExA + 2 77E9C5F7 35 Bytes [ CE, 00, 2D, FF, CE, 00, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqIfExA + 26 77E9C61B 23 Bytes [ CE, 00, 58, FF, CE, 00, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqIfExA + 3E 77E9C633 17 Bytes [ CE, 00, 5E, FF, CE, 00, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqIfExA + 50 77E9C645 25 Bytes [ 6A, FF, 56, 00, 75, FF, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqIfA + 15 77E9C65F 15 Bytes [ 29, 00, 7B, FF, 29, 00, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerUseProtseqIfA + 25 77E9C66F 35 Bytes [ B0, 00, 99, FF, BA, 00, 9B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcNsBindingInqEntryNameA + 14 77E9C693 119 Bytes [ BA, 00, FE, FF, BA, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcNsBindingInqEntryNameA + 8C 77E9C70B 67 Bytes [ 42, 01, 93, FF, 38, 01, 94, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidToStringA + 35 77E9C74F 35 Bytes [ 10, 01, F3, FF, 74, 01, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerInqCallAttributesA + 2 77E9C773 63 Bytes [ 7E, 02, 06, FF, 83, 02, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerInqCallAttributesA + 42 77E9C7B3 29 Bytes [ 25, FF, C4, 00, 26, FF, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerInqCallAttributesA + 60 77E9C7D1 19 Bytes [ B0, 00, 87, FF, B0, 00, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerInqCallAttributesA + 74 77E9C7E5 13 Bytes [ B0, 00, 92, FF, BA, 00, 93, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcServerInqCallAttributesA + 82 77E9C7F3 49 Bytes [ 95, FF, C4, 00, 97, FF, BA, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoExA + B 77E9C8EF 5 Bytes CALL 65EA8DF3 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoExA + 11 77E9C8F5 38 Bytes [ BA, 00, EF, FF, BA, 00, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoExA + 38 77E9C91C 28 Bytes [ FF, B0, 00, F9, FF, B0, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoExA + 55 77E9C939 39 Bytes [ B0, 01, 00, FF, BA, 01, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoExA + 7D 77E9C961 30 Bytes [ 46, 01, E1, FF, 9C, 01, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoExA + 1A 77E9C980 3 Bytes [ FF, D8, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoExA + 1F 77E9C985 17 Bytes [ C4, 00, 68, 00, 04, FF, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoExA + 31 77E9C997 49 Bytes [ CE, 00, 20, FF, CE, 00, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoExA + 63 77E9C9C9 29 Bytes [ 85, FF, CE, 00, 86, FF, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoExA + 81 77E9C9E7 17 Bytes [ CE, 00, 9E, FF, CE, 00, 9F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtInqServerPrincNameA + 11 77E9CB17 85 Bytes [ D8, 01, FD, FF, D8, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcCertGeneratePrincipalNameA + 2 77E9CB6D 51 Bytes [ CE, 00, 86, FF, CE, 00, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcCertGeneratePrincipalNameA + 36 77E9CBA1 41 Bytes [ CE, 00, A4, FF, CE, 00, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcCertGeneratePrincipalNameA + 60 77E9CBCB 67 Bytes [ B2, FF, CE, 00, B3, FF, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcNetworkInqProtseqsA + 3F 77E9CC0F 55 Bytes [ D7, FF, CE, 00, D8, FF, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidFromStringA + 16 77E9CC47 18 Bytes CALL 7BEBAF4B .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidFromStringA + 29 77E9CC5A 6 Bytes [ 01, 21, FF, BA, 01, 22 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidFromStringA + 30 77E9CC61 63 Bytes [ BA, 01, 23, FF, BA, 01, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidFromStringA + 70 77E9CCA1 15 Bytes [ B0, 01, E4, FF, C4, 01, E5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!UuidFromStringA + 80 77E9CCB1 51 Bytes [ D8, 01, F9, FF, D8, 01, FC, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoA + 7 77E9CCF1 5 Bytes [ 25, FF, CE, 00, 26 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoA + D 77E9CCF7 11 Bytes [ CE, 00, 27, FF, CE, 00, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingInqAuthInfoA + 19 77E9CD03 23 Bytes [ BA, 00, 4A, FF, E2, 00, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoA + 8 77E9CD1B 11 Bytes [ CE, 00, 91, FF, CE, 00, 93, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoA + 14 77E9CD27 13 Bytes [ E2, 00, 9D, FF, CE, 00, 9E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoA + 22 77E9CD35 81 Bytes [ A0, FF, CE, 00, A1, FF, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoA + 74 77E9CD87 28 Bytes [ CE, 00, B9, FF, CE, 00, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcBindingSetAuthInfoA + 91 77E9CDA4 6 Bytes [ 00, C4, 00, 41, 00, C5 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransDatagramAllocate2 + 77 77E9D6EF 25 Bytes [ BA, 01, 6C, FF, BA, 01, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransDatagramAllocate2 + 91 77E9D709 17 Bytes [ 7C, FF, 6A, 01, 7D, FF, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransDatagramAllocate2 + A3 77E9D71B 29 Bytes [ C4, 01, EE, FF, 56, 01, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransDatagramAllocate2 + C1 77E9D739 65 Bytes [ FC, FF, D8, 02, 02, FF, BF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransDatagramAllocate2 + 103 77E9D77B 60 Bytes [ 0C, 01, 08, FF, EC, 01, 2C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransDatagramFree + 12E 77E9E19A 51 Bytes [ 70, 63, 6C, 69, 65, 6E, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransDatagramFree + 162 77E9E1CE 186 Bytes [ 4D, 74, 4D, 71, 51, 32, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransDatagramFree + 21D 77E9E289 7 Bytes [ 4C, 71, 49, 78, 67, 53, 4F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransDatagramFree + 225 77E9E291 840 Bytes [ 64, 37, 78, 30, 52, 2B, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcTransDatagramFree + 56E 77E9E5DA 30 Bytes [ 6E, 4D, 3D, 0D, 0A, 0D, 0A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcAsyncGetCallStatus + 3F 77E9FA36 621 Bytes [ 2F, 59, 56, 6C, 58, 69, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcAsyncCancelCall + 241 77E9FCA4 67 Bytes [ 48, 41, 31, 2D, 44, 69, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcAsyncCancelCall + 285 77E9FCE8 799 Bytes [ 70, 6C, 6F, 61, 64, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcAsyncCancelCall + 5A5 77EA0008 235 Bytes [ 67, 58, 4A, 50, 6D, 71, 4A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcAsyncCancelCall + 691 77EA00F4 8 Bytes [ 68, 6F, 64, 73, 2F, 6D, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcAsyncCancelCall + 69A 77EA00FD 40 Bytes [ 69, 70, 61, 72, 74, 2F, 50, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcCertGeneratePrincipalNameW + 56 77EA053D 171 Bytes [ 75, 75, 69, 70, 39, 6E, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcCertGeneratePrincipalNameW + 102 77EA05E9 275 Bytes [ 42, 71, 37, 78, 33, 76, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcCertGeneratePrincipalNameW + 216 77EA06FD 51 Bytes [ 73, 2F, 68, 2E, 63, 6C, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcCertGeneratePrincipalNameW + 24A 77EA0731 442 Bytes [ 0D, 0A, 0D, 0A, 4E, 61, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcEpRegisterNoReplaceA + F 77EA08EC 34 Bytes [ 6A, 58, 48, 68, 66, 34, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcEpRegisterNoReplaceA + 32 77EA090F 709 Bytes [ 70, 6C, 6F, 61, 64, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcEpUnregister + 1F6 77EA0BD5 489 Bytes [ 3A, 20, 58, 34, 70, 6D, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcEpUnregister + 3E0 77EA0DBF 202 Bytes [ 45, 3D, 0D, 0A, 0D, 0A, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcEpUnregister + 4AB 77EA0E8A 183 Bytes [ 74, 70, 63, 6C, 69, 65, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcEpUnregister + 563 77EA0F42 736 Bytes [ 6F, 45, 3D, 0D, 0A, 0D, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcEpUnregister + 844 77EA1223 59 Bytes [ 70, 63, 6C, 69, 65, 6E, 74, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorSaveErrorInfo + F7 77EA144C 375 Bytes [ 31, 30, 39, 53, 70, 65, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorSaveErrorInfo + 26F 77EA15C4 548 Bytes [ 4E, 61, 6D, 65, 3A, 20, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorSaveErrorInfo + 494 77EA17E9 93 Bytes [ 46, 6F, 74, 59, 5A, 52, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorSaveErrorInfo + 4F2 77EA1847 650 Bytes [ 44, 55, 36, 75, 6D, 6A, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorLoadErrorInfo + 124 77EA1AD2 67 Bytes [ 74, 68, 72, 65, 61, 64, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorLoadErrorInfo + 168 77EA1B16 420 Bytes [ 63, 6F, 6D, 2F, 73, 75, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorLoadErrorInfo + 30D 77EA1CBB 236 Bytes [ 75, 6C, 74, 69, 70, 61, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorLoadErrorInfo + 3FA 77EA1DA8 324 Bytes [ 78, 63, 65, 70, 74, 69, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorAddRecord + E 77EA1EED 623 Bytes [ 57, 65, 77, 39, 6F, 3D, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorClearInformation + 1F2 77EA215D 31 Bytes [ 79, 6D, 61, 6E, 61, 67, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcErrorClearInformation + 212 77EA217D 426 Bytes [ 3A, 20, 32, 64, 46, 47, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtEpEltInqBegin + 140 77EA2328 209 Bytes [ 74, 70, 63, 6C, 69, 65, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtEpEltInqDone + 20 77EA23FA 93 Bytes [ 73, 2F, 4F, 70, 74, 69, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtEpEltInqNextA + 32 77EA2458 468 Bytes [ 6F, 61, 64, 65, 72, 2F, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtEpEltInqNextA + 207 77EA262D 64 Bytes [ 2F, 48, 74, 74, 70, 4D, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtEpEltInqNextA + 248 77EA266E 324 Bytes [ 6D, 37, 65, 53, 37, 30, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtEpUnregister + F2 77EA27B3 6 Bytes [ 55, 3D, 0D, 0A, 0D, 0A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtEpUnregister + F9 77EA27BA 264 Bytes [ 61, 6D, 65, 3A, 20, 63, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtEpUnregister + 202 77EA28C3 129 Bytes [ 78, 31, 79, 31, 4F, 67, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtEpEltInqNextW + 34 77EA2945 772 Bytes [ 72, 69, 67, 6D, 61, 2F, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtSetAuthorizationFn + 2CC 77EA2C4A 363 Bytes [ 70, 6C, 6F, 61, 64, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtSetAuthorizationFn + 438 77EA2DB6 301 Bytes [ 47, 61, 72, 44, 6C, 66, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtSetAuthorizationFn + 566 77EA2EE4 50 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtSetAuthorizationFn + 599 77EA2F17 240 Bytes [ 0D, 0A, 53, 48, 41, 31, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcMgmtSetAuthorizationFn + 68A 77EA3008 209 Bytes [ 70, 6C, 6F, 61, 64, 65, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrCreateServerInterfaceFromStub + 18A 77EA9CA5 795 Bytes [ 6C, 36, 6E, 59, 6C, 31, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrCreateServerInterfaceFromStub + 4A6 77EA9FC1 364 Bytes [ 70, 6C, 6F, 61, 64, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrCreateServerInterfaceFromStub + 613 77EAA12E 6 Bytes [ 2D, 44, 69, 67, 65, 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrCreateServerInterfaceFromStub + 61A 77EAA135 226 Bytes [ 3A, 20, 47, 72, 58, 41, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrCreateServerInterfaceFromStub + 6FD 77EAA218 570 Bytes [ 6F, 72, 67, 2F, 61, 70, 61, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcAsyncRegisterInfo + 322 77EAAA0B 414 Bytes [ 67, 2F, 61, 70, 61, 63, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcAsyncRegisterInfo + 4C1 77EAABAA 365 Bytes [ 70, 6C, 6F, 61, 64, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcAsyncRegisterInfo + 62F 77EAAD18 75 Bytes [ 4A, 61, 2F, 39, 63, 3D, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcAsyncRegisterInfo + 67B 77EAAD64 158 Bytes [ 38, 52, 4F, 58, 42, 58, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcAsyncRegisterInfo + 71A 77EAAE03 333 Bytes [ 2E, 63, 6C, 61, 73, 73, 0D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsContextLockShared + 8 77EB0069 196 Bytes [ 00, 08, 00, 18, A0, AB, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsContextLockShared + CD 77EB012E 1 Byte [ 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsContextLockShared + CF 77EB0130 11 Bytes [ 08, 00, 17, 9A, AB, 32, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsContextLockShared + DD 77EB013E 196 Bytes [ 00, 00, 00, 00, 36, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRSContextMarshall + 7 77EB0203 101 Bytes [ 00, 00, 00, 37, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NDRSContextUnmarshallEx + 1E 77EB0269 31 Bytes [ 00, 00, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MIDL_wchar_strlen + 1B 77EB0289 86 Bytes [ 00, 00, 00, 00, 9B, 70, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!char_from_ndr + 2F 77EB02E0 162 Bytes [ 00, 00, 00, 00, 00, CD, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsGetContextBinding + 38 77EB0383 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsGetContextBinding + 3A 77EB0385 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsGetContextBinding + 3D 77EB0388 249 Bytes [ 57, 3E, 03, 00, 63, 6F, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!data_from_ndr + 30 77EB0482 3 Bytes [ 00, 00, 21 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!data_from_ndr + 35 77EB0487 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!data_from_ndr + 44 77EB0496 22 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!data_from_ndr + 5B 77EB04AD 20 Bytes [ 65, 72, 2F, 61, 2E, 63, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!data_from_ndr + 70 77EB04C2 156 Bytes [ 00, 9A, 70, 04, 35, 8C, B0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!data_size_ndr + A 77EB0898 56 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!data_size_ndr + 43 77EB08D1 1 Byte [ 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!data_size_ndr + 45 77EB08D3 157 Bytes [ 9A, 70, 04, 35, 33, 6A, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!data_size_ndr + E3 77EB0971 1 Byte [ 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!data_size_ndr + E5 77EB0973 10 Bytes [ 9A, 70, 04, 35, 5A, D2, 30, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!tree_size_ndr + 39 77EB0A80 62 Bytes [ 00, A0, C7, 03, 00, 63, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!tree_size_ndr + 78 77EB0ABF 20 Bytes [ 9B, 02, 00, 00, 22, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!tree_size_ndr + 8D 77EB0AD4 45 Bytes [ 00, 63, 6F, 6D, 2F, 61, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!tree_size_ndr + BB 77EB0B02 22 Bytes [ 00, 9A, 70, 04, 35, 1B, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!tree_size_ndr + D4 77EB0B1B 135 Bytes [ 00, 00, 00, 00, 00, 00, 80, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!tree_peek_ndr + 61 77EB0C41 17 Bytes [ 08, 00, 9A, 70, 04, 35, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!tree_peek_ndr + 73 77EB0C53 44 Bytes [ 22, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!tree_peek_ndr + A0 77EB0C80 33 Bytes [ 79, 2E, 63, 6C, 61, 73, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!tree_peek_ndr + C3 77EB0CA3 8 Bytes [ 22, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!tree_peek_ndr + CE 77EB0CAE 12 Bytes [ 00, 00, 00, 0F, F6, 03, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!data_into_ndr + B 77EB0D9C 13 Bytes [ 00, 00, 00, 00, 47, FF, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!data_into_ndr + 19 77EB0DAA 50 Bytes [ 72, 69, 67, 6D, 61, 2F, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!data_into_ndr + 4C 77EB0DDD 4 Bytes [ 00, 01, 02, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!data_into_ndr + 51 77EB0DE2 91 Bytes [ 22, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!data_into_ndr + AF 77EB0E40 18 Bytes [ EA, 04, 04, 00, 63, 6F, 6D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!tree_into_ndr + B 77EB0FD0 61 Bytes [ 1B, 48, 04, 00, 63, 6F, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!tree_into_ndr + 49 77EB100E 6 Bytes [ 11, 04, 00, 00, 22, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!tree_into_ndr + 51 77EB1016 162 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!tree_into_ndr + F5 77EB10BA 159 Bytes [ 00, 00, 00, 00, 00, 00, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!tree_into_ndr + 195 77EB115A 53 Bytes [ 00, 00, 00, 00, 00, 00, F9, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!float_from_ndr + 2E 77EB1248 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!float_from_ndr + 31 77EB124B 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!float_from_ndr + 33 77EB124D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!float_from_ndr + 36 77EB1250 43 Bytes [ 26, 61, 04, 00, 63, 6F, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!float_from_ndr + 62 77EB127C 35 Bytes [ 14, 00, 08, 00, 08, 00, 9A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!float_array_from_ndr + 19 77EB12A0 9 Bytes [ 16, 65, 04, 00, 63, 6F, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!float_array_from_ndr + 23 77EB12AA 38 Bytes [ 72, 69, 67, 6D, 61, 2F, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!float_array_from_ndr + 4A 77EB12D1 11 Bytes [ 00, 9A, 70, 04, 35, 45, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!float_array_from_ndr + 57 77EB12DE 2 Bytes [ BC, 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!float_array_from_ndr + 5A 77EB12E1 2 Bytes [ 00, 22 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!double_from_ndr + 34 77EB1381 2 Bytes [ 00, 22 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!double_from_ndr + 37 77EB1384 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!double_from_ndr + 39 77EB1386 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!double_from_ndr + 3C 77EB1389 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!double_from_ndr + 43 77EB1390 149 Bytes [ DC, 6F, 04, 00, 63, 6F, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!double_array_from_ndr + 56 77EB1426 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!double_array_from_ndr + 59 77EB1429 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!double_array_from_ndr + 5C 77EB142C 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!double_array_from_ndr + 5F 77EB142F 157 Bytes [ 00, 3C, 76, 04, 00, 63, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!short_from_ndr + 36 77EB14CD 166 Bytes [ 00, 00, 00, 04, 7C, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!short_from_ndr_temp + 34 77EB1574 43 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!long_from_ndr + 27 77EB15A0 75 Bytes [ 00, 9A, 70, 04, 35, C0, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!long_array_from_ndr + 42 77EB15EC 38 Bytes [ 00, 08, 00, 08, 00, 9A, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!long_array_from_ndr + 69 77EB1613 70 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!enum_from_ndr + 13 77EB165A 225 Bytes [ 00, 00, 00, 00, 00, 52, 8C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!enum_from_ndr + F6 77EB173D 168 Bytes [ 9B, 03, 00, 00, 22, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!enum_from_ndr + 19F 77EB17E6 81 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!enum_from_ndr + 1F2 77EB1839 9 Bytes [ 00, 00, 00, 00, 00, 00, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!enum_from_ndr + 1FC 77EB1843 121 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!DllGetClassObject + E8 77EB2E51 22 Bytes [ 00, 26, 02, 00, 00, 2F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!DllGetClassObject + FF 77EB2E68 88 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!DllGetClassObject + 158 77EB2EC1 3 Bytes [ 5D, C8, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!DllGetClassObject + 15C 77EB2EC5 87 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!DllGetClassObject + 1B4 77EB2F1D 4 Bytes [ 00, 5E, C9, 05 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!DllRegisterServer + 30 77EB37C1 117 Bytes [ 4B, 01, 02, 14, 00, 14, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!DllRegisterServer + A6 77EB3837 7 Bytes [ 00, 00, 00, 04, 38, 06, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!DllRegisterServer + AE 77EB383F 62 Bytes [ 6F, 6D, 2F, 61, 75, 72, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrDllRegisterProxy + 35 77EB387E 73 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrDllRegisterProxy + 7F 77EB38C8 88 Bytes [ D4, 02, 00, 00, 22, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrDllRegisterProxy + D8 77EB3921 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrDllRegisterProxy + DA 77EB3923 54 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrDllRegisterProxy + 111 77EB395A 1 Byte [ 08 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrDllUnregisterProxy + 2E 77EB3AF7 65 Bytes [ 01, 02, 00, 00, 22, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrDllUnregisterProxy + 70 77EB3B39 25 Bytes [ 08, 00, 9A, 70, 04, 35, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrDllUnregisterProxy + 8B 77EB3B54 48 Bytes [ 00, 00, 00, 00, 00, 30, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrDllUnregisterProxy + BC 77EB3B85 20 Bytes [ 14, 00, 08, 00, 08, 00, 9A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrDllUnregisterProxy + D2 77EB3B9B 92 Bytes [ 22, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesIncrementalHandleReset + 1A 77EB3C94 8 Bytes [ 00, 00, 00, 00, 00, C0, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesIncrementalHandleReset + 23 77EB3C9D 56 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesIncrementalHandleReset + 5D 77EB3CD7 5 Bytes [ 4E, 02, 00, 00, 22 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesIncrementalHandleReset + 64 77EB3CDE 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesIncrementalHandleReset + 6F 77EB3CE9 49 Bytes [ B0, 66, 06, 00, 63, 6F, 6D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesProcEncodeDecode + 4C 77EB3F9B 11 Bytes [ 9A, 70, 04, 35, 9D, 45, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesProcEncodeDecode + 58 77EB3FA7 12 Bytes [ E6, 03, 00, 00, 22, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesProcEncodeDecode + 66 77EB3FB5 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesProcEncodeDecode + 6A 77EB3FB9 47 Bytes [ A4, 91, 06, 00, 63, 6F, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesProcEncodeDecode + 9A 77EB3FE9 24 Bytes [ 08, 00, 9A, 70, 04, 35, 43, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesProcEncodeDecode2 + 5 77EB4285 154 Bytes [ 00, 00, 00, 00, FC, B2, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesProcEncodeDecode2 + A1 77EB4321 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesProcEncodeDecode2 + A6 77EB4326 61 Bytes [ 00, 00, 19, B9, 06, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesProcEncodeDecode2 + E4 77EB4364 72 Bytes [ 00, 00, BC, 02, 00, 00, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesProcEncodeDecode2 + 12D 77EB43AD 21 Bytes [ 35, 2D, 5B, 9C, 09, A0, 02, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeFree2 + 1A 77EB44F6 9 Bytes [ D6, 03, 00, 00, 22, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeFree2 + 24 77EB4500 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeFree2 + 29 77EB4505 23 Bytes [ 00, 00, 00, 4E, CD, 06, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesTypeFree2 + 41 77EB451D 39 Bytes [ 75, 70, 6C, 6F, 61, 64, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesSimpleTypeAlignSize + 1D 77EB4545 151 Bytes [ 00, 56, 02, 00, 00, 22, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesSimpleTypeEncode + 79 77EB45DD 48 Bytes [ 35, 1B, CD, 8F, AE, DF, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesSimpleTypeDecode + 8 77EB460E 25 Bytes [ 70, 6C, 6F, 61, 64, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesSimpleTypeDecode + 22 77EB4628 22 Bytes [ 08, 00, 9A, 70, 04, 35, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesSimpleTypeDecode + 3A 77EB4640 152 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesSimpleTypeDecode + D4 77EB46DA 14 Bytes [ 22, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrMesSimpleTypeDecode + E3 77EB46E9 59 Bytes [ E3, 06, 00, 63, 6F, 6D, 2F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesEncodeIncrementalHandleCreate + 2F 77EB47CA 10 Bytes [ 22, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesEncodeIncrementalHandleCreate + 3B 77EB47D6 72 Bytes [ 00, 00, EF, EF, 06, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesDecodeIncrementalHandleCreate + 24 77EB4822 88 Bytes [ 00, 00, 00, 00, 00, 00, 1E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesEncodeDynBufferHandleCreate + 1B 77EB487B 57 Bytes [ 00, 63, 6F, 6D, 2F, 61, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesEncodeDynBufferHandleCreate + 55 77EB48B5 7 Bytes [ 00, 9B, 03, 00, 00, 22, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesEncodeDynBufferHandleCreate + 5D 77EB48BD 56 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesInqProcEncodingId + 34 77EB48F6 18 Bytes [ 08, 00, 08, 00, 9A, 70, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesInqProcEncodingId + 47 77EB4909 7 Bytes [ 00, 22, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesInqProcEncodingId + 51 77EB4913 48 Bytes [ 00, 00, 00, 00, 00, 8A, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesInqProcEncodingId + 82 77EB4944 83 Bytes [ 14, 00, 08, 00, 08, 00, 9A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!MesInqProcEncodingId + D6 77EB4998 101 Bytes [ 08, 00, 9A, 70, 04, 35, 85, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitializePartial + 26 77EB4B97 3 Bytes [ 7E, 17, 07 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitializePartial + 2A 77EB4B9B 17 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitializePartial + 3C 77EB4BAD 122 Bytes [ 70, 6C, 6F, 61, 64, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitializePartial + B8 77EB4C29 4 Bytes [ 22, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitializePartial + BD 77EB4C2E 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNsGetBuffer + 49 77EB4CCF 131 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNsSendReceive + 7F 77EB4D53 14 Bytes [ 14, 00, 08, 00, 08, 00, 9A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNsSendReceive + 8E 77EB4D62 24 Bytes [ 03, 00, 00, 9B, 03, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNsSendReceive + A7 77EB4D7B 41 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNsSendReceive + D1 77EB4DA5 1 Byte [ 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrNsSendReceive + D3 77EB4DA7 92 Bytes [ 08, 00, 9A, 70, 04, 35, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitializeUnmarshall + 51 77EB4E04 102 Bytes [ 00, DA, 02, 00, 00, 22, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcUserFree + 3A 77EB4E6B 39 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcUserFree + 62 77EB4E93 16 Bytes [ 14, 00, 08, 00, 08, 00, 9A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcUserFree + 73 77EB4EA4 3 Bytes [ 00, 5E, 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcUserFree + 77 77EB4EA8 5 Bytes [ 00, 22, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcUserFree + 7E 77EB4EAF 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrTypeSize + 78 77EB51A7 21 Bytes [ 00, 9A, 70, 04, 35, DB, 86, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrTypeSize + 8E 77EB51BD 67 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsBufferSize + 38 77EB5201 177 Bytes [ 00, 9A, 70, 04, 35, EF, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsBufferSize + EA 77EB52B3 36 Bytes [ 00, 08, 00, 9A, 70, 04, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsBufferSize + 10F 77EB52D8 69 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrInterfacePointerBufferSize + 21 77EB531E 135 Bytes [ 00, 00, 2C, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrPartialIgnoreClientBufferSize + 51 77EB53A6 41 Bytes [ 69, 6E, 74, 65, 72, 66, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrPartialIgnoreClientBufferSize + 7B 77EB53D0 7 Bytes [ 79, 00, 00, 00, 2C, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrPartialIgnoreClientBufferSize + 83 77EB53D8 243 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrPartialIgnoreClientBufferSize + 177 77EB54CC 175 Bytes [ 14, 00, 08, 00, 08, 00, 9A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrEncapsulatedUnionBufferSize + 73 77EB557C 75 Bytes [ D9, 02, 00, 00, 21, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructBufferSize + 1C 77EB55C8 93 Bytes [ 02, 00, 00, F7, 02, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructBufferSize + 7A 77EB5626 45 Bytes [ 00, 00, 00, 00, 00, 00, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructBufferSize + A8 77EB5654 26 Bytes [ 02, 14, 00, 14, 00, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructBufferSize + C3 77EB566F 149 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrTypeFree + 29 77EB5705 109 Bytes [ 00, 00, 00, 00, 00, 00, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsFree + 32 77EB5773 84 Bytes [ 00, 9D, CF, 07, 00, 63, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrInterfacePointerFree + 50 77EB57C8 1 Byte [ 34 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrInterfacePointerFree + 52 77EB57CA 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrInterfacePointerFree + 74 77EB57EC 170 Bytes [ 70, 6C, 6F, 61, 64, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrEncapsulatedUnionFree + 1E 77EB5897 70 Bytes [ 00, 00, 00, 86, DB, 07, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrEncapsulatedUnionFree + 65 77EB58DE 93 Bytes [ 9A, 70, 04, 35, DA, 82, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrEncapsulatedUnionFree + C3 77EB593C 104 Bytes [ 08, 00, 08, 00, 9A, 70, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrEncapsulatedUnionFree + 12C 77EB59A5 30 Bytes [ 35, 98, 74, C0, B9, BE, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrEncapsulatedUnionFree + 14B 77EB59C4 60 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructFree + 28 77EB5A01 12 Bytes [ 00, 08, 00, 9A, 70, 04, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructFree + 35 77EB5A0E 80 Bytes [ 00, 00, 79, 03, 00, 00, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrTypeMarshall + 1D 77EB5A5F 4 Bytes [ 00, 14, 00, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrTypeMarshall + 22 77EB5A64 114 Bytes [ 08, 00, 9A, 70, 04, 35, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsMarshall + 33 77EB5AD8 97 Bytes [ 34, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsMarshall + 95 77EB5B3A 80 Bytes [ 34, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsMarshall + E6 77EB5B8B 34 Bytes [ 00, 9A, 70, 04, 35, 16, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsMarshall + 109 77EB5BAE 92 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrInterfacePointerMarshall + 33 77EB5C0B 84 Bytes [ 00, DF, 72, 08, 00, 63, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerContextMarshall + E 77EB5C60 80 Bytes [ 34, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrPartialIgnoreClientMarshall + 26 77EB5CB2 28 Bytes [ 9A, 70, 04, 35, B2, C9, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrPartialIgnoreClientMarshall + 43 77EB5CCF 339 Bytes [ 00, 47, 80, 08, 00, 63, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructMarshall + 11D 77EB5E24 8 Bytes [ 21, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructMarshall + 128 77EB5E2F 291 Bytes [ 00, 00, 00, 30, 8F, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructMarshall + 24C 77EB5F53 16 Bytes [ 14, 00, 08, 00, 08, 00, 9A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructMarshall + 25D 77EB5F64 8 Bytes [ 00, 54, 06, 00, 00, 29, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructMarshall + 266 77EB5F6D 172 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrEncapsulatedUnionMarshall + 71 77EB601A 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrEncapsulatedUnionMarshall + 76 77EB601F 57 Bytes [ 00, 00, 00, 00, 00, 00, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrTypeUnmarshall + B 77EB6059 3 Bytes [ 00, 08, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrTypeUnmarshall + F 77EB605D 21 Bytes [ 00, 9A, 70, 04, 35, 3D, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrTypeUnmarshall + 25 77EB6073 170 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructUnmarshall + A9 77EB6121 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructUnmarshall + AD 77EB6125 8 Bytes [ 00, 00, 00, 00, 00, 25, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructUnmarshall + B6 77EB612E 136 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructUnmarshall + 13F 77EB61B7 16 Bytes [ 00, 08, 00, 9A, 70, 04, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructUnmarshall + 150 77EB61C8 19 Bytes [ 00, 00, 29, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsUnmarshall + D0 77EB65CD 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsUnmarshall + D4 77EB65D1 72 Bytes [ 62, 3A, 09, 00, 63, 6F, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsUnmarshall + 11E 77EB661B 75 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsUnmarshall + 16C 77EB6669 151 Bytes [ 3B, 01, 00, 00, 27, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsUnmarshall + 204 77EB6701 1 Byte [ 14 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrInterfacePointerUnmarshall + 12 77EB673B 29 Bytes [ 70, 6C, 6F, 61, 64, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrInterfacePointerUnmarshall + 30 77EB6759 27 Bytes [ 00, 08, 00, 9A, 70, 04, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrInterfacePointerUnmarshall + 4C 77EB6775 147 Bytes [ 00, 00, 00, 00, 00, C7, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerContextUnmarshall + 45 77EB6809 103 Bytes [ 35, 65, 26, 74, 79, 14, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrEncapsulatedUnionUnmarshall + C 77EB6871 230 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrEncapsulatedUnionUnmarshall + F3 77EB6958 231 Bytes [ 14, 00, 08, 00, 08, 00, 9A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsMemorySize + A3 77EB6A40 61 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsMemorySize + E1 77EB6A7E 151 Bytes [ 9A, 70, 04, 35, 8E, AB, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsMemorySize + 179 77EB6B16 215 Bytes [ 2E, 63, 6C, 61, 73, 73, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrXmitOrRepAsMemorySize + 252 77EB6BEF 77 Bytes [ 00, C7, E2, 09, 00, 63, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrInterfacePointerMemorySize + 34 77EB6C3D 77 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrInterfacePointerMemorySize + 83 77EB6C8C 50 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrInterfacePointerMemorySize + B6 77EB6CBF 15 Bytes [ 14, 00, 08, 00, 08, 00, 9A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrInterfacePointerMemorySize + C6 77EB6CCF 71 Bytes [ 00, 00, E3, 00, 00, 00, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrInterfacePointerMemorySize + 10E 77EB6D17 92 Bytes [ 08, 00, 08, 00, 9A, 70, 04, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructMemorySize + 92 77EB6F85 21 Bytes [ 01, 02, 14, 00, 14, 00, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructMemorySize + A8 77EB6F9B 15 Bytes [ 15, 03, 00, 00, 33, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructMemorySize + B8 77EB6FAB 86 Bytes JMP DAEB7A1C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructMemorySize + 110 77EB7003 200 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConformantVaryingStructMemorySize + 1DA 77EB70CD 73 Bytes [ 00, 00, 00, 0D, 84, 0A, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrUserMarshalSimpleTypeConvert + 3F 77EB796D 195 Bytes [ 00, 8E, 04, 00, 00, 34, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrUserMarshalSimpleTypeConvert + 104 77EB7A32 166 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrUserMarshalSimpleTypeConvert + 1AB 77EB7AD9 15 Bytes [ 29, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrUserMarshalSimpleTypeConvert + 1BB 77EB7AE9 76 Bytes [ 0B, 00, 63, 6F, 6D, 2F, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConvert2 + 15 77EB7B37 97 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConvert2 + 77 77EB7B99 67 Bytes [ 63, 6F, 6D, 2F, 61, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConvert + 1D 77EB7BDD 156 Bytes [ 00, 29, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConvert + BA 77EB7C7A 19 Bytes [ 02, 14, 00, 14, 00, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConvert + CE 77EB7C8E 115 Bytes [ 00, 5F, 03, 00, 00, 37, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConvert + 144 77EB7D04 93 Bytes JMP DAEB8872 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrConvert + 1A4 77EB7D64 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrGetSimpleTypeBufferSize + 13 77EB8AB4 57 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrPartialIgnoreServerInitialize + 1D 77EB8AEE 35 Bytes [ 00, 00, 9C, 70, 04, 35, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpSetRpcSsDefaults + 1F 77EB8B12 54 Bytes [ 63, 6F, 6D, 2F, 64, 72, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpSetRpcSsDefaults + 56 77EB8B49 42 Bytes [ 63, 6F, 6D, 2F, 64, 72, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpSetRpcSsDefaults + 83 77EB8B76 85 Bytes [ 16, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpSetRpcSsDefaults + D9 77EB8BCC 394 Bytes [ 63, 6F, 6D, 2F, 64, 72, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrpSetRpcSsDefaults + 264 77EB8D57 120 Bytes [ 00, 00, 00, 00, 00, 00, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrRpcSmClientFree + 38 77EB8DD0 101 Bytes [ 08, 00, 08, 00, 9A, 70, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrRpcSmClientFree + A0 77EB8E38 112 Bytes [ 00, FB, FD, 0C, 00, 63, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsAllocate + 4F 77EB8EA9 81 Bytes [ 9A, 70, 04, 35, 9D, 48, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsAllocate + A3 77EB8EFD 19 Bytes [ 00, 00, 00, 17, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsAllocate + B7 77EB8F11 51 Bytes [ 00, 63, 6F, 6D, 2F, 64, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsDisableAllocate + 2 77EB8F45 55 Bytes [ 1E, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsGetThreadHandle + 20 77EB8F7D 45 Bytes [ 08, 00, 08, 00, 9A, 70, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsSetClientAllocFree + 18 77EB8FAB 107 Bytes [ 2F, 6D, 65, 74, 61, 64, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsSetThreadHandle + 4F 77EB9017 171 Bytes [ 08, 00, 9A, 70, 04, 35, 8E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSmAllocate + 30 77EB90C3 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSmAllocate + 32 77EB90C5 306 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSmFree + 47 77EB91F8 63 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSmGetThreadHandle + 2F 77EB9238 98 Bytes [ 00, C9, 0D, 00, 00, 1E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSmSetClientAllocFree + 2A 77EB929B 187 Bytes [ 63, 6F, 6D, 2F, 64, 72, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSmSwapClientAllocFree + 2E 77EB9357 1 Byte [ 14 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSmSwapClientAllocFree + 30 77EB9359 31 Bytes [ 08, 00, 08, 00, 9A, 70, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSmSwapClientAllocFree + 50 77EB9379 119 Bytes [ 00, 00, 27, C7, 0D, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrRpcSmSetClientToOsf + 3A 77EB93F1 21 Bytes [ 08, 00, 08, 00, 9A, 70, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrRpcSmSetClientToOsf + 50 77EB9407 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrRpcSmSetClientToOsf + 60 77EB9417 208 Bytes [ 63, 6F, 6D, 2F, 64, 72, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrRpcSmSetClientToOsf + 131 77EB94E8 6 Bytes [ 00, 1E, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!RpcSsEnableAllocate + 2 77EB94EF 151 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerUnmarshall + 10 77EB9587 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerUnmarshall + 14 77EB958B 141 Bytes [ 00, 00, 00, 00, 64, FF, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerUnmarshall + A2 77EB9619 126 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerUnmarshall + 121 77EB9698 8 Bytes [ 00, 00, 9C, 70, 04, 35, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerUnmarshall + 12A 77EB96A1 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerMarshall + 27 77EB99E8 20 Bytes [ 00, 08, 00, 9A, 70, 04, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerMarshall + 3C 77EB99FD 112 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerMarshall + AD 77EB9A6E 18 Bytes [ 4B, 01, 02, 0A, 00, 0A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerMarshall + C2 77EB9A83 58 Bytes [ 00, 00, 00, 00, 00, 00, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerMarshall + FD 77EB9ABE 20 Bytes [ 08, 00, 9A, 70, 04, 35, C3, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitializeMarshall + 5B 77EBA6C9 25 Bytes [ 69, 66, 66, 2F, 63, 2E, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitializeMarshall + 75 77EBA6E3 17 Bytes [ 35, C8, 50, 36, D8, E6, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitializeMarshall + 87 77EBA6F5 90 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitializeMarshall + E3 77EBA751 65 Bytes [ 00, 4A, 30, 0F, 00, 63, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!NdrServerInitializeMarshall + 125 77EBA793 178 Bytes [ 00, A8, 07, 00, 00, 26, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcProxyNewConnection + 1B 77EC3977 19 Bytes [ 48, 03, AE, 00, 3E, 04, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcProxyNewConnection + 2F 77EC398B 45 Bytes [ 60, 04, 85, 00, 0A, 03, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcProxyNewConnection + 5D 77EC39B9 65 Bytes [ 2B, 00, 29, 04, A4, 00, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcProxyNewConnection + 9F 77EC39FB 15 Bytes [ 5E, 04, B0, 00, 60, 05, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] RPCRT4.dll!I_RpcProxyNewConnection + AF 77EC3A0B 46 Bytes [ 12, 04, A0, 00, 0E, 0A, 7F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrStrW + FFE272C7 7C9D2179 24 Bytes [ 8B, 86, 60, 02, 00, 00, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrStrW + FFE272E0 7C9D2192 11 Bytes [ 00, 8D, 95, F4, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrStrW + FFE272EC 7C9D219E 17 Bytes CALL 7C889907 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrStrW + FFE272FE 7C9D21B0 47 Bytes [ 57, 8D, 95, F4, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrStrW + FFE2732E 7C9D21E0 49 Bytes [ 00, 85, C0, 74, 05, 83, C0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDiskFreeSpaceExW + 1C 7C9FA72D 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDiskFreeSpaceExW + 3C 7C9FA74D 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDiskFreeSpaceExW + 43 7C9FA754 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDiskFreeSpaceExW + 4E 7C9FA75F 50 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDiskFreeSpaceExW + 81 7C9FA792 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFree + 1C 7C9FAAC6 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFree + 33 7C9FAADD 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFree + 37 7C9FAAE1 261 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFree + 13D 7C9FABE7 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFree + 152 7C9FABFC 43 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILFree + 9 7C9FACA5 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILFree + F 7C9FACAB 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILFree + 41 7C9FACDD 57 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILFree + 7B 7C9FAD17 80 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILFree + CC 7C9FAD68 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLoadOLE + 5 7C9FADF6 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLoadOLE + 24 7C9FAE15 35 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLoadOLE + 48 7C9FAE39 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLoadOLE + 54 7C9FAE45 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLoadOLE + 6B 7C9FAE5C 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHAlloc + 1C 7C9FAF1C 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILGetSize + 7 7C9FAF37 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILGetSize + F 7C9FAF3F 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILGetSize + 13 7C9FAF43 70 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILGetSize + 5B 7C9FAF8B 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILGetSize + 60 7C9FAF90 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILClone + 9 7C9FAF9E 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILClone + F 7C9FAFA4 48 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILClone + 40 7C9FAFD5 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILClone + 57 7C9FAFEC 56 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILClone + 90 7C9FB025 34 Bytes [ 00, 00, 02, 12, 00, 04, FA, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCloneFirst + 3E 7C9FB242 1 Byte [ 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCloneFirst + 40 7C9FB244 12 Bytes [ 92, F3, 0E, 0E, AC, FF, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCloneFirst + 4D 7C9FB251 17 Bytes [ 02, 09, 00, 03, EF, 01, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCloneFirst + 5F 7C9FB263 108 Bytes [ F3, F3, 92, F3, F3, F3, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCombine + 1B 7C9FB2D0 14 Bytes [ 01, 95, 00, 02, C6, 00, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCombine + 2A 7C9FB2DF 26 Bytes CALL 6591A4CC .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCombine + 45 7C9FB2FA 56 Bytes [ 15, 00, 00, 03, E2, E0, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCombine + 7E 7C9FB333 96 Bytes [ E2, 01, E3, 00, 02, BF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCombine + DF 7C9FB394 5 Bytes [ 00, 00, 00, 02, 1B ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDesktopFolder + 14 7C9FB91C 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDesktopFolder + 18 7C9FB920 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDesktopFolder + 30 7C9FB938 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDesktopFolder + 44 7C9FB94C 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDesktopFolder + 65 7C9FB96D 47 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHRestricted + A 7C9FC23F 24 Bytes [ 00, 00, 00, 00, 00, 00, B1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHRestricted + 23 7C9FC258 20 Bytes [ 53, CC, 82, FF, 3A, C5, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHRestricted + 38 7C9FC26D 39 Bytes [ FF, FF, FF, 62, D1, 90, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHRestricted + 60 7C9FC295 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHRestricted + 65 7C9FC29A 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILRemoveLastID + 12 7C9FC362 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILRemoveLastID + 1A 7C9FC36A 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILRemoveLastID + 1E 7C9FC36E 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILRemoveLastID + 25 7C9FC375 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILRemoveLastID + 40 7C9FC390 15 Bytes [ 1F, B8, 3D, FF, 1F, B8, 3D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSetSettings + 26 7C9FC56F 3 Bytes [ FF, 9E, 38 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSetSettings + 2A 7C9FC573 24 Bytes [ DF, 99, 33, 00, 70, 99, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSetSettings + 43 7C9FC58C 42 Bytes [ BC, 56, 00, FF, 99, 33, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSetSettings + 6E 7C9FC5B7 8 Bytes [ CF, 99, 33, 00, 20, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSetSettings + 77 7C9FC5C0 54 Bytes [ 99, 33, 00, 20, 99, 33, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCLSIDFromString + 9 7C9FC955 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCLSIDFromString + 1F 7C9FC96B 36 Bytes [ 00, 00, 00, 00, 00, 99, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCLSIDFromString + 44 7C9FC990 32 Bytes [ FF, DD, BB, FF, D4, B2, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCLSIDFromString + 66 7C9FC9B2 43 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCLSIDFromString + 94 7C9FC9E0 13 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILFindLastID + 2 7C9FCB17 39 Bytes [ FF, FF, FF, FF, FF, FF, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILFindLastID + 2A 7C9FCB3F 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILFindLastID + 3C 7C9FCB51 22 Bytes [ 99, 00, 60, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILFindLastID + 53 7C9FCB68 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILFindLastID + 64 7C9FCB79 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHParseDisplayName + 18 7C9FDD21 12 Bytes [ 8B, 45, 14, 83, 20, 00, BE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHParseDisplayName + 25 7C9FDD2E 178 Bytes [ C6, 5E, C9, C2, 10, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHParseDisplayName + D8 7C9FDDE1 18 Bytes [ 85, C0, FF, 75, 10, 74, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHParseDisplayName + EB 7C9FDDF4 80 Bytes [ FF, 15, 38, 1C, 9D, 7C, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHParseDisplayName + 13C 7C9FDE45 24 Bytes [ 15, A4, 1C, 9D, 7C, 85, C0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHILCreateFromPath + 3F 7C9FE318 42 Bytes [ 3D, FF, 00, 00, 00, 7D, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHILCreateFromPath + 6A 7C9FE343 42 Bytes [ 75, E0, 6A, 15, 6A, 00, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHILCreateFromPath + 95 7C9FE36E 20 Bytes CALL AFA2CED1 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHILCreateFromPath + AB 7C9FE384 216 Bytes [ 20, 69, 33, 25, F9, 03, CF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHILCreateFromPath + 184 7C9FE45D 57 Bytes [ C6, 5E, C9, C2, 10, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCreateFromPath + 18 7C9FE497 69 Bytes [ 10, 8B, 07, 85, C0, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCreateFromPath + 5E 7C9FE4DD 29 Bytes [ 51, 0C, 8B, 45, F8, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCreateFromPath + 7C 7C9FE4FB 14 Bytes [ F0, 52, 68, 08, 15, 9E, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCreateFromPath + 8C 7C9FE50B 60 Bytes [ 00, 75, 19, 85, C9, 74, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCreateFromPath + CA 7C9FE549 48 Bytes [ 11, 8B, 07, FF, 75, 0C, 8B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathW + B 7C9FEF0D 3 Bytes [ EC, FF, 59 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathW + 10 7C9FEF12 103 Bytes [ 5E, 5D, C2, 04, 00, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathW + 78 7C9FEF7A 6 Bytes [ 90, 90, 90, 90, 90, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathW + 7F 7C9FEF81 48 Bytes [ 56, 8B, F1, 8D, 86, 88, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathW + B0 7C9FEFB2 21 Bytes CALL 7C9FEED4 C:\WINDOWS\system32\SHELL32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderLocation + 1A 7C9FF407 64 Bytes CALL 651D7D11 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderLocation + 5B 7C9FF448 12 Bytes [ 00, 8D, 45, DC, 50, 6A, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderLocation + 68 7C9FF455 31 Bytes [ 77, 10, FF, 76, 04, FF, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSpecialFolderLocation + 6 7C9FF475 45 Bytes [ 66, 85, C0, 89, 45, EC, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSpecialFolderLocation + 34 7C9FF4A3 10 Bytes [ F4, 50, FF, 75, EC, C7, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSpecialFolderLocation + 3F 7C9FF4AE 11 Bytes [ 00, 56, FF, 75, FC, E8, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSpecialFolderLocation + 4B 7C9FF4BA 45 Bytes [ FC, 8B, 75, F4, 8B, 4D, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSpecialFolderLocation + 79 7C9FF4E8 11 Bytes [ FF, 83, 7D, F4, 00, 89, 45, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCoCreateInstance + 2 7C9FF774 74 Bytes JMP 7C9FFAB2 C:\WINDOWS\system32\SHELL32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCoCreateInstance + 4D 7C9FF7BF 7 Bytes [ FF, FF, 00, 89, 45, E8, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCoCreateInstance + 55 7C9FF7C7 91 Bytes [ 15, 18, 11, 9D, 7C, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCoCreateInstance + B1 7C9FF823 33 Bytes [ 0F, 84, 04, 02, 00, 00, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCoCreateInstance + D3 7C9FF845 34 Bytes [ 99, 2B, C2, D1, F8, 50, 8B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllGetClassObject + 1 7C9FF92A 46 Bytes [ 75, 08, 57, FF, 75, BC, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllGetClassObject + 30 7C9FF959 103 Bytes [ FC, FF, 75, F8, FF, 75, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllGetClassObject + 98 7C9FF9C1 59 Bytes [ 75, B8, FF, 75, BC, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllGetClassObject + D5 7C9FF9FE 1 Byte [ E8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllGetClassObject + D7 7C9FFA00 49 Bytes [ 15, 54, 12, 9D, 7C, EB, 78, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHBindToParent + 33 7C9FFC02 50 Bytes [ FF, 89, 85, 2C, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHBindToParent + 66 7C9FFC35 38 Bytes [ 00, 00, 8A, 43, 16, C1, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHBindToParent + 8D 7C9FFC5C 9 Bytes [ FF, FF, 00, C6, 85, 51, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHBindToParent + 97 7C9FFC66 9 Bytes [ 88, 85, 52, FF, FF, FF, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHBindToParent + A1 7C9FFC70 8 Bytes [ FF, FF, 01, 8D, 85, D4, FE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsNetDrive + 42 7CA00C31 85 Bytes [ 13, 5B, 7A, 7A, 77, 77, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsNetDrive + 98 7CA00C87 25 Bytes [ 02, A6, 00, 0A, 12, 01, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsNetDrive + B2 7CA00CA1 15 Bytes [ 17, 21, 61, 53, 52, 51, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsNetDrive + C2 7CA00CB1 69 Bytes [ 45, 44, 43, 43, 3B, 3B, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsNetDrive + 108 7CA00CF7 35 Bytes [ 00, 00, 02, A6, 00, 0A, 12, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DriveType + 1E 7CA0149C 15 Bytes [ 00, 00, 00, 00, 04, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DriveType + 2E 7CA014AC 29 Bytes [ 90, 3E, 01, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DriveType + 4D 7CA014CB 15 Bytes [ 00, 00, 00, 00, 00, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DriveType + 5D 7CA014DB 34 Bytes [ 00, B0, 3E, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DriveType + 80 7CA014FE 44 Bytes [ 00, 00, 04, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetPathFromIDListW + 10 7CA015E4 5 Bytes [ 60, 3F, 01, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetPathFromIDListW + 16 7CA015EA 50 Bytes [ 00, 00, 00, 00, 00, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetPathFromIDListW + 49 7CA0161D 8 Bytes [ 00, 00, 00, 04, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetPathFromIDListW + 52 7CA01626 35 Bytes [ 01, 00, 07, 04, 00, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetPathFromIDListW + 77 7CA0164B 2 Bytes [ 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILIsEqual + 9 7CA017C8 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILIsEqual + 2F 7CA017EE 52 Bytes [ 01, 00, 07, 04, 00, 00, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILIsEqual + 65 7CA01824 7 Bytes [ E0, 40, 01, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILIsEqual + 6F 7CA0182E 45 Bytes [ 00, 00, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILIsEqual + 9D 7CA0185C 8 Bytes [ 00, 00, 00, 00, 04, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHSimpleIDListFromPath + B 7CA018D4 13 Bytes [ 00, 00, 00, 00, 04, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHSimpleIDListFromPath + 1A 7CA018E3 18 Bytes [ 00, 60, 41, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHSimpleIDListFromPath + 2D 7CA018F6 22 Bytes [ 01, 00, 07, 04, 00, 00, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHSimpleIDListFromPath + 44 7CA0190D 26 Bytes [ 00, 01, 00, 07, 04, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHSimpleIDListFromPath + 5F 7CA01928 35 Bytes [ 07, 04, 00, 00, 90, 41, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSpecialFolderPathW + 10 7CA01967 24 Bytes [ 00, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSpecialFolderPathW + 29 7CA01980 39 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSpecialFolderPathW + 52 7CA019A9 46 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathIsSlowW + 19 7CA019D8 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathIsSlowW + 32 7CA019F1 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathIsSlowW + 37 7CA019F6 53 Bytes [ 00, 00, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathIsSlowW + 6D 7CA01A2C 6 Bytes [ 00, 00, 01, 00, 07, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathIsSlowW + 74 7CA01A33 8 Bytes [ 00, 40, 42, 01, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILIsParent + 14 7CA01A99 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILIsParent + 1D 7CA01AA2 18 Bytes [ 00, 00, 00, 00, 01, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILIsParent + 30 7CA01AB5 34 Bytes [ 00, 00, 00, 04, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILIsParent + 53 7CA01AD8 61 Bytes [ 07, 04, 00, 00, B0, 42, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILIsParent + 93 7CA01B18 39 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILFindChild + F 7CA01B54 13 Bytes [ 00, 43, 01, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILFindChild + 1E 7CA01B63 7 Bytes [ 00, 00, 00, 01, 00, 07, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILFindChild + 26 7CA01B6B 9 Bytes [ 00, 10, 43, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILFindChild + 30 7CA01B75 6 Bytes [ 00, 00, 00, 04, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILFindChild + 39 7CA01B7E 9 Bytes [ 01, 00, 07, 04, 00, 00, 20, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotifyDeregister + 1D 7CA055A6 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotifyDeregister + 2D 7CA055B6 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotifyDeregister + 30 7CA055B9 14 Bytes [ 5F, 5A, FF, 8C, 5C, 59, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotifyDeregister + 3F 7CA055C8 15 Bytes [ 8C, 5C, 59, FF, 8C, 5C, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotifyDeregister + 4F 7CA055D8 26 Bytes [ 8C, 5C, 59, FF, 9A, 62, 57, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_GetImageLists + 24 7CA05F7F 12 Bytes [ FF, EA, C2, 91, FF, 9E, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_GetImageLists + 31 7CA05F8C 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_GetImageLists + 4D 7CA05FA8 54 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_GetImageLists + 84 7CA05FDF 12 Bytes [ FF, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_GetImageLists + 91 7CA05FEC 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_GetCachedImageIndex + 1CE 7CA063EB 105 Bytes CALL 7CA06072 C:\WINDOWS\system32\SHELL32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_GetCachedImageIndex + 238 7CA06455 208 Bytes [ 45, 08, 8B, 48, 0C, 3B, CF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_GetCachedImageIndex + 30A 7CA06527 3 Bytes [ 8B, FF, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_GetCachedImageIndex + 30E 7CA0652B 2 Bytes [ EC, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_GetCachedImageIndex + 311 7CA0652E 43 Bytes [ 75, 1C, 85, F6, 74, 07, 56, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotifyRegister + 13 7CA06FDA 39 Bytes [ 75, 0C, 8B, 08, 50, FF, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotifyRegister + 3C 7CA07003 46 Bytes [ 00, 00, 00, 01, 00, 07, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotifyRegister + 6C 7CA07033 11 Bytes [ 00, 00, 00, 01, 00, 07, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotifyRegister + 78 7CA0703F 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotifyRegister + 7B 7CA07042 10 Bytes [ 00, 00, 00, 00, 00, 00, 04, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_MergeMenus + 37 7CA076FB 18 Bytes [ 00, 70, 95, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_MergeMenus + 4A 7CA0770E 14 Bytes [ 01, 00, 07, 04, 00, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_MergeMenus + 5A 7CA0771E 68 Bytes [ 00, 00, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_MergeMenus + 9F 7CA07763 44 Bytes [ 00, 00, 00, 00, 00, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_MergeMenus + CC 7CA07790 102 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateShellFolderView + C 7CA08D32 1 Byte [ 49 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateShellFolderView + E 7CA08D34 21 Bytes [ 85, C9, B8, 05, 40, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateShellFolderView + 24 7CA08D4A 12 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateShellFolderView + 31 7CA08D57 284 Bytes [ 8D, 41, 94, F7, D9, 1B, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateShellFolderView + 14E 7CA08E74 78 Bytes [ 6C, 24, 04, 08, EB, 94, 90, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHMapIDListToImageListIndexAsync + E 7CA0B240 92 Bytes [ 03, 8B, 4D, F8, 89, 46, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHMapIDListToImageListIndexAsync + 6B 7CA0B29D 134 Bytes [ F1, 89, 7D, FC, FF, 15, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHMapIDListToImageListIndexAsync + F2 7CA0B324 26 Bytes [ FF, 75, F8, 8B, 3D, F8, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHMapIDListToImageListIndexAsync + 10D 7CA0B33F 11 Bytes CALL 7C8F9C01 C:\WINDOWS\system32\kernel32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHMapIDListToImageListIndexAsync + 119 7CA0B34B 34 Bytes [ FF, C7, 45, FC, 01, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHMapPIDLToSystemImageListIndex + C0 7CA0BC21 154 Bytes [ F0, 85, F6, 7D, 13, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHMapPIDLToSystemImageListIndex + 15B 7CA0BCBC 45 Bytes [ 53, 00, 79, 00, 73, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHMapPIDLToSystemImageListIndex + 189 7CA0BCEA 21 Bytes [ 73, 00, 70, 00, 32, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHMapPIDLToSystemImageListIndex + 19F 7CA0BD00 17 Bytes [ 2D, 00, 36, 00, 31, 00, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHMapPIDLToSystemImageListIndex + 1B1 7CA0BD12 37 Bytes [ FF, 56, 8B, F1, 8B, 46, 14, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDataFromIDListW + 3C 7CA0E634 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDataFromIDListW + 42 7CA0E63A 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDataFromIDListW + 48 7CA0E640 72 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDataFromIDListW + 91 7CA0E689 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDataFromIDListW + 9E 7CA0E696 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathIsExe + 19 7CA0E75F 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathIsExe + 1D 7CA0E763 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathIsExe + 2C 7CA0E772 2 Bytes [ 99, 30 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathIsExe + 2F 7CA0E775 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathIsExe + 43 7CA0E789 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsLFNDrive + B 7CA0EA44 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsLFNDrive + 27 7CA0EA60 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsLFNDrive + 2C 7CA0EA65 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsLFNDrive + 32 7CA0EA6B 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsLFNDrive + 3B 7CA0EA74 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathResolve + 13 7CA11375 49 Bytes [ F1, 89, 85, E4, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathResolve + 45 7CA113A7 25 Bytes [ 01, 00, 00, 83, C0, 08, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathResolve + 5F 7CA113C1 28 Bytes [ F6, FD, FF, FF, 5C, 00, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathResolve + 7D 7CA113DF 33 Bytes [ FF, 8D, 85, F4, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathResolve + A0 7CA11402 46 Bytes [ 66, 39, 39, 0F, 84, 9B, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteExW + 9D 7CA11868 46 Bytes [ 85, C0, 59, 74, 1C, 8B, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteExW + CC 7CA11897 49 Bytes [ F8, 7F, 05, 0E, 00, 07, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteExW + FE 7CA118C9 17 Bytes [ FF, 55, 8B, EC, 81, EC, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteExW + 110 7CA118DB 40 Bytes [ 75, 0C, 57, 8B, 5D, 08, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteExW + 139 7CA11904 24 Bytes [ 52, 68, A0, 98, 9D, 7C, 53, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllGetVersion + D 7CA14907 128 Bytes [ 00, 57, 8D, 85, F4, FD, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllGetVersion + 8E 7CA14988 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllGetVersion + 90 7CA1498A 14 Bytes [ 57, FF, 15, B4, 1D, 9D, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHTestTokenMembership + 2 7CA14999 23 Bytes [ FF, 68, 38, 27, 9F, 7C, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHTestTokenMembership + 1A 7CA149B1 1 Byte [ 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHTestTokenMembership + 1C 7CA149B3 23 Bytes [ 00, FF, 76, 0C, FF, 15, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHTestTokenMembership + 34 7CA149CB 66 Bytes [ C9, C2, 10, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHTestTokenMembership + 78 7CA14A0F 30 Bytes [ F3, AB, 8D, 85, 2C, EF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!OpenRegStream + 77 7CA14F6D 27 Bytes [ 0F, 8C, D1, 00, 00, 00, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!OpenRegStream + 93 7CA14F89 24 Bytes [ 0F, 8C, A9, 00, 00, 00, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!OpenRegStream + AC 7CA14FA2 4 Bytes [ 81, E7, FB, BF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!OpenRegStream + B1 7CA14FA7 25 Bytes [ 7F, 81, C7, 05, 40, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!OpenRegStream + CC 7CA14FC2 56 Bytes [ 52, 50, FF, 51, 0C, 8B, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractVersionResource16W + 1E 7CA14FFB 193 Bytes [ 00, C7, 46, 10, 37, 8B, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractVersionResource16W + E1 7CA150BE 183 Bytes [ 00, 8D, 04, 40, 8B, 04, C5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractVersionResource16W + 199 7CA15176 5 Bytes [ 00, 8B, 80, A0, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractVersionResource16W + 19F 7CA1517C 76 Bytes [ 00, 8D, 04, 40, 8B, 04, C5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractVersionResource16W + 1EC 7CA151C9 10 Bytes [ 5B, C9, C2, 08, 00, 90, 90, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILLoadFromStream + 1 7CA15DE6 245 Bytes [ 08, 50, FF, 51, 08, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILLoadFromStream + F7 7CA15EDC 29 Bytes [ 4D, FC, 5F, 33, C0, 5E, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILLoadFromStream + 115 7CA15EFA 46 Bytes [ 00, A1, 48, D5, BD, 7C, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILLoadFromStream + 144 7CA15F29 21 Bytes [ 35, A4, D5, BD, 7C, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILLoadFromStream + 15A 7CA15F3F 69 Bytes [ FF, FF, 53, 57, 57, 50, 68, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_ShowDragImage + 4D 7CA17B45 1050 Bytes [ 65, 22, 2C, 2C, 22, 22, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_ShowDragImage + 468 7CA17F60 175 Bytes [ 6F, 70, 6C, 61, 79, 5C, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_ShowDragImage + 518 7CA18010 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_ShowDragImage + 51B 7CA18013 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_ShowDragImage + 521 7CA18019 20 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathAndSubDirW + 5F 7CA1A06F 43 Bytes [ 00, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateDirectoryExW + 9 7CA1A09B 257 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateDirectoryExW + 10B 7CA1A19D 535 Bytes [ 04, F9, F9, F9, F9, F8, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateDirectoryExW + 323 7CA1A3B5 123 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateDirectoryExW + 39F 7CA1A431 330 Bytes [ F0, F2, F1, F3, F3, F4, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateDirectoryExW + 4EA 7CA1A57C 387 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHUpdateRecycleBinIcon + DC 7CA1ABFF 46 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHUpdateRecycleBinIcon + 10B 7CA1AC2E 775 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHUpdateRecycleBinIcon + 413 7CA1AF36 84 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHUpdateRecycleBinIcon + 468 7CA1AF8B 131 Bytes [ F3, F1, F2, F2, F0, EF, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHUpdateRecycleBinIcon + 4EC 7CA1B00F 17 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsUserAnAdmin + 5 7CA1C9B4 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsUserAnAdmin + 7 7CA1C9B6 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsUserAnAdmin + 15 7CA1C9C4 47 Bytes [ 1C, 69, 1C, FF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsUserAnAdmin + 45 7CA1C9F4 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsUserAnAdmin + 47 7CA1C9F6 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathProcessCommand + A 7CA1D2E9 113 Bytes [ 01, 4C, 49, 53, 54, BE, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathProcessCommand + 7C 7CA1D35B 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathProcessCommand + 7E 7CA1D35D 43 Bytes [ 02, 0A, 00, 02, 09, 01, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathProcessCommand + AA 7CA1D389 41 Bytes [ 00, 00, 02, 02, 00, 02, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathProcessCommand + D4 7CA1D3B3 25 Bytes [ 00, 00, 02, 03, 00, 03, 09, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragQueryFileW + 7 7CA20709 17 Bytes [ 03, 07, 0F, 0F, 80, 07, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragQueryFileW + 19 7CA2071B 4 Bytes [ 0B, 00, 08, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragQueryFileW + 1E 7CA20720 57 Bytes [ 0F, 0F, 0F, 08, 08, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragQueryFileAorW + 36 7CA2075B 9 Bytes [ 03, 07, 0F, 0F, 00, 09, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragQueryFileAorW + 40 7CA20765 24 Bytes [ 02, 39, 00, 0C, 0D, 00, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragQueryFileAorW + 59 7CA2077E 74 Bytes [ 02, 0D, 00, 02, 09, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragQueryFileAorW + A4 7CA207C9 59 Bytes [ 05, 07, 0F, 07, 07, 07, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragQueryFileAorW + E0 7CA20805 50 Bytes [ 08, 07, 0F, 0F, 0F, 0F, 0F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!InternalExtractIconListA + 5 7CA2A782 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!InternalExtractIconListA + B 7CA2A788 10 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!InternalExtractIconListA + 16 7CA2A793 4 Bytes [ 00, 80, 20, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!InternalExtractIconListA + 1C 7CA2A799 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!InternalExtractIconListA + 23 7CA2A7A0 25 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSetFolderCustomSettingsW + 2E7 7CA2CCFD 58 Bytes [ 65, 67, 6F, 72, 69, 7A, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSetFolderCustomSettingsW + 322 7CA2CD38 45 Bytes [ 20, 20, 3D, 20, 22, 47, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSetFolderCustomSettingsW + 350 7CA2CD66 462 Bytes [ 65, 67, 6F, 72, 69, 7A, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSetFolderCustomSettingsW + 51F 7CA2CF35 120 Bytes [ 20, 20, 20, 20, 20, 3D, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSetFolderCustomSettingsW + 598 7CA2CFAE 102 Bytes [ 30, 34, 36, 34, 22, 0D, 0A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHSetLocalizedName + 2 7CA30496 33 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHSetLocalizedName + 24 7CA304B8 7 Bytes [ 00, 6B, 03, 40, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHSetLocalizedName + 2E 7CA304C2 17 Bytes [ 00, 00, 00, 00, 00, 00, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHSetLocalizedName + 40 7CA304D4 44 Bytes [ FF, FA, F7, FF, FF, F8, F1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHSetLocalizedName + 6D 7CA30501 2 Bytes [ E5, CC ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFlushSFCache + 1E 7CA305E4 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFlushSFCache + 3F 7CA30605 11 Bytes [ F2, C3, FF, FF, DF, AC, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFlushSFCache + 4B 7CA30611 24 Bytes [ FD, CA, FF, FF, FF, D7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFlushSFCache + 64 7CA3062A 9 Bytes [ ED, FF, FF, FF, DA, FF, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFlushSFCache + 6E 7CA30634 8 Bytes [ A8, 7D, 76, EE, C9, 95, 97, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_NotifyIcon + 2 7CA30C6B 44 Bytes [ FF, 13, D3, FF, FF, 3A, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_NotifyIcon + 2F 7CA30C98 27 Bytes [ 23, 8F, B9, FF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_NotifyIcon + 4B 7CA30CB4 7 Bytes [ FB, F8, F5, FF, FD, F0, E4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_NotifyIcon + 53 7CA30CBC 49 Bytes [ E6, D9, CC, FF, D1, D1, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_NotifyIcon + 87 7CA30CF0 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotification_Lock + 2 7CA319F3 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotification_Lock + 6 7CA319F7 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotification_Lock + 9 7CA319FA 20 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotification_Lock + 1F 7CA31A10 21 Bytes [ 12, A4, D2, FF, E3, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotification_Lock + 35 7CA31A26 7 Bytes [ FF, FF, DF, FF, FF, FF, DF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_NotifyIconW + 22 7CA31B7C 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_NotifyIconW + 41 7CA31B9B 14 Bytes [ 00, 00, 00, 00, 00, C7, 94, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_NotifyIconW + 51 7CA31BAB 4 Bytes [ FF, FF, F9, EE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_NotifyIconW + 57 7CA31BB1 14 Bytes [ F1, C8, FF, FF, DA, A7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Shell_NotifyIconW + 66 7CA31BC0 13 Bytes [ D6, A8, 8A, FF, B9, 86, 78, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHDefExtractIconW + 30 7CA32325 41 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHDefExtractIconW + 5A 7CA3234F 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHDefExtractIconW + 67 7CA3235C 10 Bytes [ FE, FE, FE, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHDefExtractIconW + 73 7CA32368 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHDefExtractIconW + 79 7CA3236E 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHExtractIconsW + 17 7CA323BD 10 Bytes [ 9F, CE, FF, 7D, F7, FB, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHExtractIconsW + 22 7CA323C8 3 Bytes [ 8E, 80, 76 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHExtractIconsW + 26 7CA323CC 10 Bytes [ B0, A1, 99, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHExtractIconsW + 32 7CA323D8 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHExtractIconsW + 38 7CA323DE 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetImageList + 2 7CA3375F 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetImageList + 8 7CA33765 19 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetImageList + 1C 7CA33779 17 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetImageList + 2E 7CA3378B 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetImageList + 34 7CA33791 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathA + 2 7CA33A15 9 Bytes [ DC, DB, D5, CF, 8B, AD, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathA + C 7CA33A1F 16 Bytes [ AD, AD, B4, F4, 9A, 9A, 7A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathA + 1E 7CA33A31 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathA + 20 7CA33A33 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathA + 2A 7CA33A3D 73 Bytes [ DD, DB, DC, B3, 8B, 8B, 8B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllCanUnloadNow + B 7CA341B4 11 Bytes [ E2, E2, E2, FF, E1, E1, E1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllCanUnloadNow + 17 7CA341C0 34 Bytes [ E2, E2, E2, FF, E2, E2, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllCanUnloadNow + 3A 7CA341E3 23 Bytes [ FF, EA, EA, EA, FF, FB, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllCanUnloadNow + 52 7CA341FB 23 Bytes [ FF, F4, F4, F4, FF, C7, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllCanUnloadNow + 6A 7CA34213 17 Bytes [ 03, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotification_Unlock + 24 7CA34548 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotification_Unlock + 33 7CA34557 31 Bytes [ 17, A4, 68, 0C, 95, F1, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotification_Unlock + 54 7CA34578 65 Bytes [ FF, FF, FF, FF, FD, FD, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotification_Unlock + 97 7CA345BB 19 Bytes [ FF, FF, FF, FF, FF, CC, CC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotification_Unlock + AB 7CA345CF 12 Bytes [ C0, 00, 00, 00, 7E, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotify + 1B 7CA34A38 11 Bytes [ AB, AB, AB, FF, A0, 6D, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotify + 27 7CA34A44 38 Bytes [ 5D, 66, 2F, FF, 73, 66, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotify + 51 7CA34A6E 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotify + 62 7CA34A7F 6 Bytes [ 00, FF, FF, FF, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotify + 6A 7CA34A87 52 Bytes [ 03, ED, BC, 5A, BC, C6, 71, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconExW + 136 7CA36225 519 Bytes [ 41, 54, 48, 5F, 45, 58, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconExW + 33E 7CA3642D 567 Bytes [ 52, 25, 5C, 54, 65, 6D, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCloneSpecialIDList + 1E2 7CA36665 413 Bytes [ 35, 34, 35, 30, 36, 31, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCloneSpecialIDList + 380 7CA36803 339 Bytes [ 2C, 25, 52, 45, 47, 44, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCloneSpecialIDList + 4D4 7CA36957 215 Bytes [ 4F, 52, 45, 52, 25, 5C, 54, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCloneSpecialIDList + 5AC 7CA36A2F 33 Bytes [ 61, 74, 65, 52, 65, 67, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCloneSpecialIDList + 5CE 7CA36A51 167 Bytes [ 38, 32, 31, 36, 36, 34, 35, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFileInfoW + B 7CA3ADF3 28 Bytes [ 03, 0B, 00, 00, 00, 05, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFileInfoW + 29 7CA3AE11 10 Bytes [ 03, 0B, 07, 0F, 80, 06, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFileInfoW + 34 7CA3AE1C 8 Bytes [ 00, 02, D0, 00, 01, 0B, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFileInfoW + 3D 7CA3AE25 30 Bytes [ 00, 00, 02, 0B, 00, 00, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFileInfoW + 5C 7CA3AE44 113 Bytes [ 07, 07, 0C, 0F, 01, 07, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragAcceptFiles + A 7CA3AFA8 93 Bytes [ 0B, 08, 0B, 08, 0B, 08, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragAcceptFiles + 69 7CA3B007 331 Bytes [ 74, 55, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragAcceptFiles + 1B5 7CA3B153 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragAcceptFiles + 1BD 7CA3B15B 39 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragAcceptFiles + 1E5 7CA3B183 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetMalloc + 13 7CA3B1AB 335 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetMalloc + 164 7CA3B2FC 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetMalloc + 17F 7CA3B317 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetMalloc + 18F 7CA3B327 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetMalloc + 1AF 7CA3B347 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILSaveToStream + 66 7CA3F2AA 84 Bytes [ F0, FF, 75, 08, FF, 15, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILSaveToStream + BB 7CA3F2FF 77 Bytes [ FF, 66, 3B, C3, 89, 45, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILSaveToStream + 109 7CA3F34D 2 Bytes [ 73, B3 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILSaveToStream + 10D 7CA3F351 132 Bytes CALL 7CA3E15C C:\WINDOWS\system32\SHELL32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILSaveToStream + 192 7CA3F3D6 83 Bytes [ 00, 02, 50, FF, 75, 08, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHAddToRecentDocs + 27 7CA3FB61 34 Bytes [ 00, 00, A1, 48, D5, BD, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHAddToRecentDocs + 4A 7CA3FB84 10 Bytes [ 6A, 65, 50, 8B, D9, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHAddToRecentDocs + 55 7CA3FB8F 12 Bytes [ 66, 83, 65, F8, 00, 83, C4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHAddToRecentDocs + 63 7CA3FB9D 118 Bytes [ 50, FF, 15, 98, 12, 9D, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHAddToRecentDocs + DA 7CA3FC14 41 Bytes [ D6, EB, 17, 66, 83, F8, 3A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathYetAnotherMakeUniqueName + 18B 7CA4082C 274 Bytes [ 72, 6F, 70, 65, 72, 74, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetNewLinkInfoW + 1D 7CA4093F 792 Bytes [ 47, 44, 57, 25, 2C, 30, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetNewLinkInfoW + 336 7CA40C58 132 Bytes [ 6E, 22, 0D, 0A, 48, 4B, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetNewLinkInfoW + 3BB 7CA40CDD 1080 Bytes [ 5C, 4D, 61, 79, 43, 68, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrStrIW + 197 7CA41116 19 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrStrIW + 1AB 7CA4112A 308 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrStrIW + 2E0 7CA4125F 336 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFileInfo + 47 7CA413B0 35 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFileInfo + 6B 7CA413D4 852 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconW + D3 7CA41729 422 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconW + 27A 7CA418D0 111 Bytes [ F0, AC, 8E, 00, F6, BC, A0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconW + 2EA 7CA41940 83 Bytes [ EB, A1, 81, 00, EA, 9F, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconW + 33E 7CA41994 43 Bytes [ F1, AE, 90, 00, E5, 90, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconW + 36A 7CA419C0 51 Bytes JMP 6AA4A369 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILGetNext + 2 7CA44221 54 Bytes [ F0, 40, 40, 40, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILGetNext + 3A 7CA44259 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILGetNext + 41 7CA44260 243 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILGetNext + 135 7CA44354 15 Bytes [ FF, 40, 40, 40, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILGetNext + 145 7CA44364 40 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ReadCabinetState + 7B 7CA444FC 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ReadCabinetState + 8B 7CA4450C 77 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ReadCabinetState + D9 7CA4455A 7 Bytes [ FF, FF, FF, FF, F7, 80, 40 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ReadCabinetState + E1 7CA44562 54 Bytes [ 40, 40, 40, 40, 40, 4F, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ReadCabinetState + 118 7CA44599 32 Bytes [ 04, 04, 04, 04, 04, 04, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetPathFromIDList + 39 7CA44A1A 47 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetPathFromIDList + 69 7CA44A4A 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetPathFromIDList + 6F 7CA44A50 4 Bytes [ FF, FF, 70, 0F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetPathFromIDList + 74 7CA44A55 76 Bytes [ F4, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetPathFromIDList + C1 7CA44AA2 6 Bytes [ FF, FF, FF, FF, F0, 4F ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPropStgReadMultiple + 8A 7CA478E4 7 Bytes [ 28, 01, 00, 00, E4, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPropStgReadMultiple + 93 7CA478ED 62 Bytes [ 00, 00, 00, 7C, 83, 55, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPropStgReadMultiple + D2 7CA4792C 95 Bytes [ 00, 00, 00, 00, 9C, 9C, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPropStgReadMultiple + 134 7CA4798E 13 Bytes [ 00, 00, 0C, EE, 55, 00, A8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPropStgReadMultiple + 142 7CA4799C 38 Bytes [ 00, 00, 00, 00, B4, F6, 55, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetRealIDL + 13 7CA48B38 25 Bytes [ 62, 7D, FE, 00, 0E, 03, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetRealIDL + 2D 7CA48B52 25 Bytes [ CA, 03, 01, 38, 06, 20, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetRealIDL + 47 7CA48B6C 108 Bytes [ 0E, 03, 00, 00, 09, 03, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetRealIDL + B4 7CA48BD9 15 Bytes [ 05, E2, B7, C0, D4, 06, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetRealIDL + C4 7CA48BE9 17 Bytes [ A7, 6D, 76, 8C, A4, A3, 9A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!FindExecutableA + 1F 7CA4F77F 40 Bytes [ 8B, 40, 6C, 8B, 4D, 0C, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!FindExecutableA + 48 7CA4F7A8 8 Bytes [ FF, 36, FF, 15, 0C, D3, BC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!FindExecutableA + 51 7CA4F7B1 82 Bytes [ 75, 0C, FF, 15, 48, D3, BC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!FindExecutableW + 12 7CA4F804 71 Bytes [ EC, 8B, 45, 08, 83, 48, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!FindExecutableW + 5A 7CA4F84C 75 Bytes [ 55, 8B, EC, 8B, 45, 08, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!FindExecutableW + A6 7CA4F898 52 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!FindExecutableW + DB 7CA4F8CD 9 Bytes [ 55, 8B, EC, FF, 75, 0C, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!FindExecutableW + E5 7CA4F8D7 2 Bytes [ 70, DC ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSettings + 4 7CA4F915 28 Bytes [ 45, 08, FF, 75, 0C, FF, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSettings + 21 7CA4F932 28 Bytes [ EC, 8B, 45, 08, 8B, 4D, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSettings + 40 7CA4F951 55 Bytes [ 90, 90, 8B, FF, 55, 8B, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSettings + 78 7CA4F989 17 Bytes [ 80, 5D, C2, 0C, 00, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSettings + 8A 7CA4F99B 13 Bytes [ 8B, 40, 2C, 8B, 08, 50, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPathPrepareForWriteW + 25 7CA5071F 141 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPathPrepareForWriteW + B3 7CA507AD 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPathPrepareForWriteW + BC 7CA507B6 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPathPrepareForWriteW + C1 7CA507BB 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPathPrepareForWriteW + D5 7CA507CF 40 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DoEnvironmentSubstW + A 7CA50AC9 59 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DoEnvironmentSubstW + 48 7CA50B07 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DoEnvironmentSubstW + 53 7CA50B12 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DoEnvironmentSubstW + 5B 7CA50B1A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DoEnvironmentSubstW + 5D 7CA50B1C 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteEx + A 7CA50B8F 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteEx + 26 7CA50BAB 59 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteEx + 63 7CA50BE8 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteEx + 6B 7CA50BF0 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteEx + 73 7CA50BF8 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteA + F 7CA50EBF 44 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteA + 3C 7CA50EEC 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteA + 3F 7CA50EEF 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteA + 46 7CA50EF6 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteA + 4B 7CA50EFB 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CommandLineToArgvW + 29 7CA510D1 18 Bytes [ 80, EB, 4C, 53, 57, 8B, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CommandLineToArgvW + 3C 7CA510E4 111 Bytes [ 00, 8B, 40, 04, 8B, 04, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CommandLineToArgvW + AC 7CA51154 21 Bytes [ C7, 03, 20, 00, 00, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CommandLineToArgvW + C2 7CA5116A 20 Bytes [ 09, 6A, 08, 33, C0, 8B, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CommandLineToArgvW + D7 7CA5117F 271 Bytes [ 09, 89, 08, 33, C0, EB, 98, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateQueryCancelAutoPlayMoniker + A 7CA51CF0 56 Bytes CALL 7CA508B6 C:\WINDOWS\system32\SHELL32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateQueryCancelAutoPlayMoniker + 43 7CA51D29 14 Bytes [ 6A, 00, FF, 33, 8D, BE, 94, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateQueryCancelAutoPlayMoniker + 52 7CA51D38 20 Bytes [ FF, 37, 89, 45, 08, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateQueryCancelAutoPlayMoniker + 67 7CA51D4D 7 Bytes [ 74, 15, 6A, 00, FF, 75, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateQueryCancelAutoPlayMoniker + 6F 7CA51D55 2 Bytes [ 75, 08 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellAboutW + 1F 7CA7242A 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellAboutW + 28 7CA72433 16 Bytes [ FF, FF, FF, D1, 87, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellAboutW + 39 7CA72444 23 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellAboutA + 2 7CA7245C 71 Bytes [ 31, 74, FF, 27, 63, FF, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellAboutA + 4A 7CA724A4 15 Bytes [ FF, FF, FF, FF, FF, FF, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellAboutA + 5A 7CA724B4 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellAboutA + 5D 7CA724B7 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellAboutA + 68 7CA724C2 19 Bytes [ FF, FF, D7, E2, F6, 43, 92, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHQueryRecycleBinW + 2 7CA75D99 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHQueryRecycleBinW + D 7CA75DA4 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHQueryRecycleBinW + 18 7CA75DAF 40 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHQueryRecycleBinW + 42 7CA75DD9 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHQueryRecycleBinW + 4B 7CA75DE2 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHQueryRecycleBinA + 2 7CA75E2B 33 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHQueryRecycleBinA + 25 7CA75E4E 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHQueryRecycleBinA + 28 7CA75E51 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHQueryRecycleBinA + 34 7CA75E5D 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHQueryRecycleBinA + 3A 7CA75E63 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateStdEnumFmtEtc + BB 7CA763AC 242 Bytes [ 75, 72, 65, 73, 22, 2C, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateStdEnumFmtEtc + 1AE 7CA7649F 47 Bytes [ 5C, 43, 61, 73, 63, 61, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateStdEnumFmtEtc + 1DE 7CA764CF 264 Bytes [ 53, 22, 0D, 0A, 48, 4B, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateStdEnumFmtEtc + 2E7 7CA765D8 668 Bytes [ 25, 5C, 53, 74, 61, 72, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!WriteCabinetState + 288 7CA76875 446 Bytes [ 5F, 53, 54, 41, 52, 54, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!WriteCabinetState + 447 7CA76A34 12 Bytes [ 61, 72, 74, 4D, 65, 6E, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!WriteCabinetState + 454 7CA76A41 71 Bytes [ 4D, 65, 6E, 75, 52, 75, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!WriteCabinetState + 49C 7CA76A89 87 Bytes [ 61, 72, 74, 4D, 65, 6E, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!WriteCabinetState + 4F4 7CA76AE1 68 Bytes [ 4D, 65, 6E, 75, 52, 75, 6E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFreeNameMappings + 1C 7CA785B4 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFreeNameMappings + 1F 7CA785B7 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFreeNameMappings + 29 7CA785C1 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFreeNameMappings + 2B 7CA785C3 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFreeNameMappings + 2E 7CA785C6 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateDirectory + 2 7CA79D9B 67 Bytes [ FF, FF, FF, FF, FF, 9A, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateDirectoryExA + 2B 7CA79DDF 11 Bytes [ 50, 50, F2, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateDirectoryExA + 38 7CA79DEC 16 Bytes [ FF, FF, FF, FF, F3, 53, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateDirectoryExA + 49 7CA79DFD 41 Bytes [ FF, FF, FF, FF, F4, 08, 98, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateDirectoryExA + 74 7CA79E28 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateDirectoryExA + 7A 7CA79E2E 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFileOperationW + 1B 7CA7FCF5 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFileOperationW + 24 7CA7FCFE 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFileOperationW + 36 7CA7FD10 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFileOperationW + 41 7CA7FD1B 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFileOperationW + 46 7CA7FD20 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFileOperation + 5D 7CA8001F 91 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFileOperation + B9 7CA8007B 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFileOperation + C0 7CA80082 41 Bytes [ FF, A1, 11, 11, 11, 11, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFileOperation + EA 7CA800AC 7 Bytes [ FF, A1, 1D, FF, D1, 11, 11 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFileOperation + F2 7CA800B4 6 Bytes [ FA, 11, 11, DF, F1, 1D ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_FillCache_RunDLL + 2 7CA80B08 206 Bytes [ FD, 11, 1A, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_FillCache_RunDLL + D2 7CA80BD8 759 Bytes [ FF, A1, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_FillCache_RunDLLW + 2D5 7CA80ED0 313 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_FillCache_RunDLLW + 40F 7CA8100A 28 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_FillCache_RunDLLW + 42C 7CA81027 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_FillCache_RunDLLW + 433 7CA8102E 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_FillCache_RunDLLW + 43A 7CA81035 23 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHRunControlPanel + B 7CA817CC 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHRunControlPanel + 11 7CA817D2 63 Bytes [ 80, BD, FF, FF, FF, FE, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_RunDLL + 36 7CA81812 6 Bytes [ FF, FF, FF, FF, 85, C4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_RunDLL + 3E 7CA8181A 66 Bytes [ FF, FF, FF, FF, FB, CC, 99, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_RunDLLW + 29 7CA8185E 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_RunDLLW + 2C 7CA81861 57 Bytes [ FF, FD, DE, BD, DB, 9B, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_RunDLLAsUserW + D 7CA8189B 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_RunDLLAsUserW + 10 7CA8189E 2 Bytes [ 97, D0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_RunDLLAsUserW + 13 7CA818A1 63 Bytes [ FF, FF, FF, FF, FF, FD, EE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_RunDLLAsUserW + 54 7CA818E2 4 Bytes [ D6, C7, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Control_RunDLLAsUserW + 5A 7CA818E8 40 Bytes [ FF, FF, FE, FE, FD, EE, C6, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconEx + F 7CA81EF1 17 Bytes [ 58, 24, 87, 51, 8B, B9, 9D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DuplicateIcon + 10 7CA81F03 18 Bytes [ FF, FF, FF, FF, FF, FF, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DuplicateIcon + 23 7CA81F16 116 Bytes [ 51, EB, 24, 5F, FE, 30, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DuplicateIcon + 98 7CA81F8B 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DuplicateIcon + 9B 7CA81F8E 125 Bytes [ FF, FF, FF, F4, F6, FB, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconResInfoW + 2 7CA8200C 36 Bytes [ A5, 51, 2C, FF, FF, ED, DA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconResInfoW + 27 7CA82031 6 Bytes [ DA, B7, FF, FF, D8, B0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconResInfoW + 2E 7CA82038 17 Bytes [ FF, D8, B0, FF, BD, 4B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconResInfoW + 40 7CA8204A 16 Bytes [ 4B, 70, 95, 2D, 01, FF, 98, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconResInfoW + 51 7CA8205B 7 Bytes [ FF, BD, 4B, 00, FF, 91, 52 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconResInfoA + 31 7CA82544 6 Bytes [ 81, 1E, 00, FF, 81, 1E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconResInfoA + 39 7CA8254C 11 Bytes [ 81, 1E, 00, FF, 84, 20, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconResInfoA + 45 7CA82558 3 Bytes [ BD, 4B, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconResInfoA + 49 7CA8255C 55 Bytes [ 89, 23, 00, EF, 81, 1E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconExW + 15 7CA82594 7 Bytes [ 81, 81, 81, FF, 81, 81, 81 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconExW + 1D 7CA8259C 15 Bytes [ 81, 81, 81, FF, 81, 81, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconExW + 2D 7CA825AC 19 Bytes [ 81, 81, 81, FF, 81, 81, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconExW + 41 7CA825C0 27 Bytes [ 81, 81, 81, FF, C5, 5C, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconExW + 5D 7CA825DC 11 Bytes [ 06, 1A, A4, FF, 00, 00, 81, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconExA + 2C 7CA82776 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconExA + 35 7CA8277F 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconExA + 39 7CA82783 13 Bytes [ FF, FF, FF, FF, FF, FF, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconExA + 47 7CA82791 31 Bytes [ ED, DA, FF, 58, 8A, 20, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconExA + 67 7CA827B1 3 Bytes [ DA, B6, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconW + E 7CA82847 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconW + 11 7CA8284A 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconW + 18 7CA82851 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconW + 1F 7CA82858 17 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconW + 31 7CA8286A 13 Bytes [ FF, FF, 73, D1, 89, FF, 0B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconA + E 7CA828A5 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconA + 11 7CA828A8 15 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconA + 21 7CA828B8 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconA + 2A 7CA828C1 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractIconA + 32 7CA828C9 6 Bytes [ FF, FF, FF, ED, FA, EF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!InternalExtractIconListW + 2 7CA828FD 115 Bytes [ F4, EA, FF, FF, F0, E2, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!InternalExtractIconListW + 76 7CA82971 7 Bytes [ EB, D9, FF, FF, E0, C1, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!InternalExtractIconListW + 7E 7CA82979 3 Bytes [ E0, C1, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!InternalExtractIconListW + 82 7CA8297D 18 Bytes [ E0, C1, FF, FF, DD, BD, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!InternalExtractIconListW + 95 7CA82990 11 Bytes [ FF, D4, AB, FF, FF, C4, B8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconA + 5 7CA82A0A 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconA + 2C 7CA82A31 3 Bytes [ F4, B8, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconA + 30 7CA82A35 14 Bytes [ ED, AC, FF, FF, FA, B7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconA + 3F 7CA82A44 11 Bytes [ FF, FF, E3, FF, FF, FF, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ExtractAssociatedIconA + 4C 7CA82A51 45 Bytes JMP F8502A30 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DoEnvironmentSubstA + 2 7CA82B4C 68 Bytes [ 93, 2B, 00, FF, 93, 2B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DoEnvironmentSubstA + 47 7CA82B91 86 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DoEnvironmentSubstA + 9E 7CA82BE8 16 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DoEnvironmentSubstA + AF 7CA82BF9 114 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDiskFreeSpaceA + 2C 7CA82C6C 3 Bytes [ E0, 68, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDiskFreeSpaceA + 30 7CA82C70 15 Bytes [ DA, 64, 00, FF, 6F, 60, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDiskFreeSpaceA + 40 7CA82C80 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDiskFreeSpaceA + 42 7CA82C82 13 Bytes [ 00, FF, 06, 4B, 03, FF, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDiskFreeSpaceA + 50 7CA82C90 71 Bytes [ 66, 28, 28, 40, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHHelpShortcuts_RunDLL + 8 7CA82E17 16 Bytes [ FF, 76, F2, FF, FF, 00, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHHelpShortcuts_RunDLL + 19 7CA82E28 15 Bytes [ 04, 93, 0D, FF, 1A, B1, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHHelpShortcuts_RunDLL + 29 7CA82E38 7 Bytes [ EE, FA, F3, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHHelpShortcuts_RunDLL + 31 7CA82E40 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHHelpShortcuts_RunDLL + 3B 7CA82E4A 3 Bytes [ FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHHelpShortcuts_RunDLLW + 2 7CA82E6C 7 Bytes [ 75, D3, 8C, FF, 0D, A7, 2D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHHelpShortcuts_RunDLLW + A 7CA82E74 7 Bytes [ 0C, A6, 28, FF, 09, 99, 1E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHObjectProperties + 2 7CA82E7C 32 Bytes [ 00, 50, 01, FF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHObjectProperties + 23 7CA82E9D 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHObjectProperties + 26 7CA82EA0 20 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHObjectProperties + 3B 7CA82EB5 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHObjectProperties + 42 7CA82EBC 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellMessageBoxA + 17 7CA832B0 79 Bytes [ FF, FF, FF, FF, CC, F0, DA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellMessageBoxA + 68 7CA83301 46 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellMessageBoxA + 97 7CA83330 47 Bytes [ 01, 5B, 02, FF, 01, 5B, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellMessageBoxA + C7 7CA83360 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFlushClipboard + 1 7CA83368 11 Bytes [ FF, FF, FF, FF, BD, 4B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFlushClipboard + D 7CA83374 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFlushClipboard + 12 7CA83379 11 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFlushClipboard + 1E 7CA83385 91 Bytes [ F7, EF, FF, FF, F6, EA, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFlushClipboard + 7A 7CA833E1 3 Bytes [ F2, E5, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathIsSlowA + 101 7CA8411A 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathIsSlowA + 108 7CA84121 42 Bytes [ FF, C2, C1, B2, 99, 90, A2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathIsSlowA + 134 7CA8414D 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathIsSlowA + 13D 7CA84156 27 Bytes [ C3, C2, AA, 9A, 9A, 9F, 9F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathIsSlowA + 15A 7CA84173 5 Bytes [ FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathGetShortPath + B 7CA84421 17 Bytes [ 07, 00, 00, E0, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathGetShortPath + 1D 7CA84433 50 Bytes [ 00, 80, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathGetShortPath + 50 7CA84466 32 Bytes [ 00, 00, 00, 03, 00, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathGetShortPath + 72 7CA84488 13 Bytes [ 1F, FF, 00, 00, FF, F8, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathGetShortPath + 80 7CA84496 12 Bytes [ 80, 0F, FF, FF, 00, 00, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsLFNDriveA + A 7CA8459C 19 Bytes [ DD, D0, D0, 00, 78, 71, 71, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!IsLFNDriveA + 1E 7CA845B0 60 Bytes [ A6, 9F, 9F, 00, 47, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathQualify + 11 7CA845ED 18 Bytes [ F1, E0, 00, EC, DF, CF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathQualify + 24 7CA84600 147 Bytes [ CD, F7, FF, 00, 73, D6, EE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathQualify + B8 7CA84694 31 Bytes [ F5, F5, F5, 00, F3, F3, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathQualify + D8 7CA846B4 151 Bytes CALL 63A92FA1 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathQualify + 170 7CA8474C 87 Bytes [ BA, BA, BA, 00, B9, B9, B9, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathMakeUniqueName + 97 7CA84A5B 201 Bytes [ EB, EB, EB, EB, EB, EB, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathMakeUniqueName + 161 7CA84B25 90 Bytes [ EB, EB, D1, BC, 93, 76, 7B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathMakeUniqueName + 1BC 7CA84B80 295 Bytes [ 03, 02, E1, C2, A0, AD, BC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathMakeUniqueName + 2E4 7CA84CA8 57 Bytes [ EB, EB, EB, EB, EB, EB, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PathMakeUniqueName + 31E 7CA84CE2 38 Bytes [ EB, EB, EB, EB, EB, EB, EB, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PickIconDlg + 2 7CA85861 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PickIconDlg + 6 7CA85865 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PickIconDlg + 9 7CA85868 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PickIconDlg + C 7CA8586B 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PickIconDlg + 13 7CA85872 4 Bytes [ FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHInvokePrinterCommandA + A 7CA86688 47 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHInvokePrinterCommandA + 3A 7CA866B8 15 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHInvokePrinterCommandA + 4A 7CA866C8 130 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHInvokePrinterCommandA + CD 7CA8674B 35 Bytes [ 00, 00, 00, 00, 00, 7C, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHInvokePrinterCommandA + F2 7CA86770 43 Bytes [ BC, 98, 7F, 00, D8, 05, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PrintersGetCommand_RunDLL + 80 7CA8688B 31 Bytes [ 00, 00, 00, 00, 00, 80, D3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PrintersGetCommand_RunDLLW + 1B 7CA868AB 45 Bytes [ 00, 00, 00, 00, 00, CC, D3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PrintersGetCommand_RunDLLW + 49 7CA868D9 33 Bytes [ 04, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PrintersGetCommand_RunDLLW + 6C 7CA868FC 18 Bytes [ 00, 00, 00, 00, 78, D4, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PrintersGetCommand_RunDLLW + 7F 7CA8690F 6 Bytes [ 00, 9C, D4, 7F, 00, 22 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PrintersGetCommand_RunDLLW + 87 7CA86917 5 Bytes [ 00, E4, 04, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHAddFromPropSheetExtArray + 2A 7CA86CD8 159 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHReplaceFromPropSheetExtArray + 72 7CA86D78 47 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHReplaceFromPropSheetExtArray + A2 7CA86DA8 21 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHReplaceFromPropSheetExtArray + B9 7CA86DBF 55 Bytes [ 00, B4, F3, 7F, 00, 22, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHReplaceFromPropSheetExtArray + F2 7CA86DF8 30 Bytes [ E4, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHReplaceFromPropSheetExtArray + 111 7CA86E17 7 Bytes [ 00, E4, 04, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreatePropSheetExtArray + 19 7CA86EF7 16 Bytes [ 00, E4, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreatePropSheetExtArray + 2A 7CA86F08 6 Bytes [ E4, 04, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreatePropSheetExtArray + 31 7CA86F0F 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreatePropSheetExtArray + 33 7CA86F11 14 Bytes [ FA, 7F, 00, 22, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreatePropSheetExtArray + 42 7CA86F20 15 Bytes [ 28, FA, 7F, 00, 14, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragQueryFile + 45 7CA87106 32 Bytes [ 49, 44, 5C, 25, 43, 4C, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragQueryFile + 66 7CA87127 114 Bytes [ 65, 6E, 64, 54, 6F, 4D, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragQueryFile + D9 7CA8719A 5 Bytes [ 53, 25, 22, 2C, 54 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragQueryFile + DF 7CA871A0 229 Bytes [ 72, 65, 61, 64, 69, 6E, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DragQueryFile + 1C5 7CA87286 870 Bytes [ 53, 49, 44, 5C, 25, 43, 4C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RestartDialogEx + 19 7CA87849 908 Bytes [ 74, 6D, 6C, 50, 72, 6F, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RestartDialogEx + 3A6 7CA87BD6 96 Bytes [ 43, 4C, 53, 49, 44, 5C, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RestartDialogEx + 407 7CA87C37 379 Bytes [ 69, 6F, 6E, 25, 22, 2C, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RestartDialogEx + 583 7CA87DB3 259 Bytes [ 42, 6F, 6F, 74, 52, 65, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RestartDialogEx + 687 7CA87EB7 367 Bytes [ 4B, 43, 52, 2C, 22, 43, 4C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RestartDialog + 7 7CA88124 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RestartDialog + 19 7CA88136 62 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RestartDialog + 59 7CA88176 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RestartDialog + 8C 7CA881A9 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RestartDialog + A5 7CA881C2 5 Bytes [ 00, 00, 92, 60, 5B ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHOpenPropSheetW + 25 7CA88AFE 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHOpenPropSheetW + 4C 7CA88B25 57 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHOpenPropSheetW + 87 7CA88B60 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHOpenPropSheetW + 94 7CA88B6D 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHOpenPropSheetW + 9B 7CA88B74 40 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CheckEscapesW + 1 7CA8A741 81 Bytes [ 28, 02, AF, AD, 60, 3B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CheckEscapesW + 53 7CA8A793 6 Bytes [ FF, FF, FE, FC, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CheckEscapesW + 5A 7CA8A79A 1 Byte [ F4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CheckEscapesW + 5C 7CA8A79C 59 Bytes [ EA, E2, DC, FF, 1C, 1A, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CheckEscapesW + 98 7CA8A7D8 11 Bytes [ FF, C9, 96, FF, BD, 4B, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CheckEscapesA + C 7CA8A7F5 49 Bytes [ FE, FC, FF, FF, F8, F4, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CheckEscapesA + 3F 7CA8A828 8 Bytes [ 01, 13, B5, FF, FF, D1, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CheckEscapesA + 48 7CA8A831 10 Bytes [ CF, A0, FF, FF, CA, 99, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CheckEscapesA + 53 7CA8A83C 52 Bytes [ BD, 4B, 00, FF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CheckEscapesA + 88 7CA8A871 2 Bytes [ 97, 97 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrCpyNW + 2 7CA8A8E0 19 Bytes [ FF, FF, FA, FF, FF, F8, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrCpyNW + 16 7CA8A8F4 15 Bytes [ D9, A6, A6, FF, 4B, 4B, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrCpyNW + 26 7CA8A904 47 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrCpyNA + 16 7CA8A935 14 Bytes [ DC, 9D, FF, FF, D7, 98, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrCpyNA + 25 7CA8A944 32 Bytes [ FF, C7, 8A, FF, FF, C4, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCmpW + A 7CA8A965 34 Bytes [ 00, 00, 00, BD, 4B, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCmpW + 2D 7CA8A988 4 Bytes [ FF, DC, BB, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCmpW + 32 7CA8A98D 27 Bytes [ D5, B0, FF, FF, CC, 9D, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCmpW + 4E 7CA8A9A9 10 Bytes [ D5, AB, FF, FF, D0, A4, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCmpW + 59 7CA8A9B4 27 Bytes [ FF, C9, 98, FF, FF, C7, 95, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCmpA + 2 7CA8A9E3 40 Bytes [ FF, 5C, D3, FF, FF, 5C, D3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCmpA + 2B 7CA8AA0C 167 Bytes [ 23, 9F, CE, FF, 58, BD, DE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCmpIW + 5B 7CA8AAB4 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCmpIW + 5E 7CA8AAB7 16 Bytes [ FF, EB, F8, EE, FF, 27, B2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCmpIA + 2 7CA8AAC8 31 Bytes [ 04, 9F, 10, FF, 03, 9D, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCmpIA + 22 7CA8AAE8 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCmpIA + 27 7CA8AAED 10 Bytes [ 00, 00, 00, 99, 67, 5D, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCmpIA + 32 7CA8AAF8 12 Bytes [ FF, EA, D5, FF, FF, E7, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCmpIA + 3F 7CA8AB05 6 Bytes [ E2, C6, FF, FF, E1, C2 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCpyW + 26 7CA8AB64 67 Bytes [ 00, 81, 00, FF, 76, B4, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCpyA + 1F 7CA8ABA8 27 Bytes [ BD, 81, 81, 50, D5, A5, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrNCpyA + 3B 7CA8ABC4 39 Bytes [ ED, C1, 92, FF, F3, E9, DA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrRStrW + 13 7CA8ABEC 15 Bytes [ E1, CA, A1, FF, E1, C7, 9D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrRStrW + 23 7CA8ABFC 68 Bytes [ 81, 4B, 4B, BF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrRStrW + 68 7CA8AC41 62 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrRStrA + 3A 7CA8AC80 3 Bytes [ 45, D5, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrRStrA + 3E 7CA8AC84 15 Bytes [ 00, BD, FF, FF, 11, CB, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrRStrA + 4E 7CA8AC94 20 Bytes [ 3A, 92, B6, FF, EE, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrRStrA + 63 7CA8ACA9 54 Bytes [ AD, EE, FF, 00, 4B, 81, CF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrRStrA + 9A 7CA8ACE0 15 Bytes [ 83, 83, 83, FF, A7, A7, A7, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheGetPathOffsetW + 75 7CA8AD7D 86 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheGetDirW + 53 7CA8ADD5 13 Bytes [ CF, A0, FF, FF, CA, 99, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheGetDirW + 61 7CA8ADE3 12 Bytes [ 00, BD, 4B, 00, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheGetDirW + 6E 7CA8ADF0 111 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheGetDirA + 3C 7CA8AE60 15 Bytes [ 84, 20, 00, FF, 70, 42, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheGetDirA + 4C 7CA8AE70 3 Bytes [ FF, B7, B7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheGetDirA + 50 7CA8AE74 27 Bytes [ FF, B7, B7, FF, FF, A5, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirW + 2 7CA8AE90 7 Bytes [ 4F, 1F, 1F, 40, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirW + B 7CA8AE99 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirW + 25 7CA8AEB3 12 Bytes [ 30, 03, 5C, 07, EF, 3A, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirW + 32 7CA8AEC0 8 Bytes [ 3E, 77, 28, FF, FF, E6, A9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirW + 3B 7CA8AEC9 6 Bytes [ EB, BB, FF, FF, DE, A6 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirA + 1 7CA8B073 135 Bytes [ 7D, 08, 51, 50, 57, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheSetCurDrive + A 7CA8B0FB 43 Bytes [ 33, C0, 5F, 5E, 5B, C9, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheSetCurDrive + 36 7CA8B127 251 Bytes [ 51, 20, 5D, C2, 0C, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheFullPathW + 2F 7CA8B223 131 Bytes [ 75, 03, 89, 55, F4, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheFullPathW + B3 7CA8B2A7 81 Bytes [ 8B, F1, 6A, 00, 8D, 4D, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheGetDirExW + 4D 7CA8B2F9 2 Bytes [ 75, F8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheGetDirExW + 50 7CA8B2FC 52 Bytes [ 45, E4, 57, 50, FF, D6, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheGetDirExW + 86 7CA8B332 25 Bytes [ 89, 7D, FC, F7, 5D, FC, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheGetDirExW + A0 7CA8B34C 66 Bytes [ 75, 08, FF, 15, FC, 1E, 9D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheGetDirExW + E3 7CA8B38F 65 Bytes [ 75, FC, 8D, 45, E4, 50, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirExW + 28 7CA8B3D1 10 Bytes [ F0, 00, 50, 8B, 45, EC, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirExW + 33 7CA8B3DC 120 Bytes CALL D48D29E0 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirExW + AC 7CA8B455 84 Bytes [ 55, 8B, EC, 8B, 45, 08, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirExW + 101 7CA8B4AA 40 Bytes [ 55, 8B, EC, 53, 8B, 5D, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirExW + 12A 7CA8B4D3 1 Byte [ 53 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirExA + 1B 7CA8B648 63 Bytes [ CC, AD, 9E, 7C, FF, 75, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirExA + 5B 7CA8B688 13 Bytes [ 90, 90, 90, 90, 90, 83, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirExA + 69 7CA8B696 33 Bytes [ FF, 90, 90, 90, 90, 90, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirExA + 8B 7CA8B6B8 32 Bytes [ 08, 1C, AE, 9E, 7C, E8, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheChangeDirExA + AC 7CA8B6D9 26 Bytes [ 07, 85, C0, 74, 06, 50, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RegenerateUserEnvironment + 25 7CA8C7A3 15 Bytes [ 84, C0, 74, 05, BF, A4, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RegenerateUserEnvironment + 35 7CA8C7B3 129 Bytes [ 75, 08, 56, 56, 56, 56, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RegenerateUserEnvironment + B7 7CA8C835 67 Bytes CALL 7CA93D80 C:\WINDOWS\system32\SHELL32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RegenerateUserEnvironment + FB 7CA8C879 7 Bytes [ 50, 68, B9, 00, 00, 00, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RegenerateUserEnvironment + 103 7CA8C881 196 Bytes [ 15, B4, 1D, 9D, 7C, FF, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_CloseProperties + 7 7CA91F73 103 Bytes [ 15, 90, 12, 9D, 7C, 8B, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_CloseProperties + 71 7CA91FDD 2 Bytes [ A4, 16 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_CloseProperties + 75 7CA91FE1 46 Bytes [ 83, C4, 0C, 66, 83, A6, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_CloseProperties + A4 7CA92010 17 Bytes [ 21, 00, 00, 00, 21, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_CloseProperties + B6 7CA92022 39 Bytes [ 00, 00, FF, FF, FF, FF, 70, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_GetProperties + 24 7CA926AC 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_GetProperties + 37 7CA926BF 35 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_GetProperties + 5B 7CA926E3 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_GetProperties + 5E 7CA926E6 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_GetProperties + 6F 7CA926F7 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_SetProperties + 1B 7CA92F22 11 Bytes [ 6E, 00, 61, 00, 62, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_SetProperties + 27 7CA92F2E 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_SetProperties + 39 7CA92F40 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_SetProperties + 49 7CA92F50 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_SetProperties + 6C 7CA92F73 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_OpenProperties + 30 7CA93435 20 Bytes [ FF, 50, 68, D8, A5, 9E, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_OpenProperties + 46 7CA9344B 10 Bytes [ 85, C0, 75, 19, 56, 8D, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_OpenProperties + 51 7CA93456 40 Bytes [ 50, FF, 15, 8C, 15, 9D, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_OpenProperties + 7A 7CA9347F 43 Bytes [ 8D, 85, F4, FD, FF, FF, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!PifMgr_OpenProperties + A6 7CA934AB 62 Bytes CALL 7CA93243 C:\WINDOWS\system32\SHELL32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheRemoveQuotesW + 2 7CA9B3D1 59 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheRemoveQuotesA + 2 7CA9B40D 25 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheRemoveQuotesA + 1C 7CA9B427 13 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheRemoveQuotesA + 2A 7CA9B435 29 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheRemoveQuotesA + 48 7CA9B453 39 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheRemoveQuotesA + 70 7CA9B47B 72 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheShortenPathW + 2 7CA9B4C4 34 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheShortenPathW + 26 7CA9B4E8 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheShortenPathW + 2C 7CA9B4EE 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheShortenPathW + 36 7CA9B4F8 50 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheShortenPathW + 6A 7CA9B52C 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheShortenPathA + 2 7CA9B677 33 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheShortenPathA + 25 7CA9B69A 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheShortenPathA + 28 7CA9B69D 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheShortenPathA + 2B 7CA9B6A0 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheShortenPathA + 2E 7CA9B6A3 5 Bytes [ FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheConvertPathW + 48 7CA9BA72 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheConvertPathW + 52 7CA9BA7C 112 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheConvertPathW + C3 7CA9BAED 15 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheConvertPathW + D3 7CA9BAFD 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SheConvertPathW + D9 7CA9BB03 29 Bytes [ FF, FF, F8, EC, E3, AF, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!OpenAs_RunDLL + B 7CA9D48C 27 Bytes [ CC, 66, 00, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!OpenAs_RunDLL + 27 7CA9D4A8 4 Bytes [ CC, C9, BD, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!OpenAs_RunDLL + 2C 7CA9D4AD 6 Bytes [ E5, CD, FF, FF, E3, C7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!OpenAs_RunDLL + 34 7CA9D4B5 11 Bytes [ DF, BF, FF, FF, DB, B8, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!OpenAs_RunDLL + 40 7CA9D4C1 19 Bytes [ D3, A8, FF, CC, 66, 00, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!OpenAs_RunDLLW + B 7CA9D546 64 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!OpenAs_RunDLLW + 4E 7CA9D589 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!OpenAs_RunDLLW + 59 7CA9D594 19 Bytes [ FF, DF, AD, FF, E2, B7, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!OpenAs_RunDLLW + 6D 7CA9D5A8 19 Bytes [ FF, E2, B0, FF, FF, DD, AA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!OpenAs_RunDLLW + 81 7CA9D5BC 21 Bytes [ E6, B3, 99, FF, CE, 9B, 99, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Activate_RunDLL + 24 7CA9E4E0 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Activate_RunDLL + 32 7CA9E4EE 5 Bytes [ 00, 00, DC, 9F, 75 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Activate_RunDLL + 38 7CA9E4F4 7 Bytes [ FE, FE, FE, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Activate_RunDLL + 40 7CA9E4FC 13 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Activate_RunDLL + 4E 7CA9E50A 51 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHIsFileAvailableOffline + B 7CAA157B 112 Bytes [ 00, 00, 02, 27, 00, 0C, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHIsFileAvailableOffline + 7C 7CAA15EC 48 Bytes [ 30, 30, 64, 63, 60, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHIsFileAvailableOffline + AD 7CAA161D 136 Bytes [ 02, 34, 00, 0B, FD, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHIsFileAvailableOffline + 136 7CAA16A6 188 Bytes [ 65, 3A, B8, 00, 05, 38, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHIsFileAvailableOffline + 1F3 7CAA1763 13 Bytes [ 02, 04, 00, 03, 65, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHEnumerateUnreadMailAccountsW + 13 7CAA196D 101 Bytes [ 3A, 38, 38, B8, B8, 05, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHEnumerateUnreadMailAccountsW + 79 7CAA19D3 9 Bytes [ 08, 38, B8, B8, 3A, 38, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHEnumerateUnreadMailAccountsW + 83 7CAA19DD 89 Bytes [ 00, 00, 02, 56, 00, 06, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHEnumerateUnreadMailAccountsW + DD 7CAA1A37 4 Bytes [ 00, 00, 02, 54 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHEnumerateUnreadMailAccountsW + E2 7CAA1A3C 557 Bytes [ 0D, FD, 02, 38, 01, B8, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetAttributesFromDataObject + 3A 7CAA1E0B 17 Bytes [ 00, 00, 0B, 38, 65, 65, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetAttributesFromDataObject + 4C 7CAA1E1D 76 Bytes [ 02, 7A, 00, 0C, FD, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetAttributesFromDataObject + 99 7CAA1E6A 28 Bytes [ 0D, FD, 00, 10, B8, 38, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetAttributesFromDataObject + B6 7CAA1E87 49 Bytes [ 10, 3A, B8, B8, 3A, 38, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetAttributesFromDataObject + E8 7CAA1EB9 132 Bytes [ FD, 02, 3A, 02, B8, 00, 0C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPathPrepareForWriteA + 2 7CAA3D4E 37 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPathPrepareForWriteA + 29 7CAA3D75 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPathPrepareForWriteA + 2C 7CAA3D78 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPathPrepareForWriteA + 32 7CAA3D7E 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPathPrepareForWriteA + 3A 7CAA3D86 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetUnreadMailCountW + 24 7CAA408C 27 Bytes [ 87, 87, 87, FF, 4F, 4F, 4F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetUnreadMailCountW + 41 7CAA40A9 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetUnreadMailCountW + 49 7CAA40B1 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetUnreadMailCountW + 52 7CAA40BA 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetUnreadMailCountW + 5C 7CAA40C4 39 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHSetUnreadMailCountW + 4E 7CAA42CA 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHSetUnreadMailCountW + 6D 7CAA42E9 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHSetUnreadMailCountW + 7C 7CAA42F8 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHSetUnreadMailCountW + A0 7CAA431C 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHSetUnreadMailCountW + BA 7CAA4336 81 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetShellStyleHInstance + B 7CAA470F 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetShellStyleHInstance + 2E 7CAA4732 120 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetShellStyleHInstance + A7 7CAA47AB 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetShellStyleHInstance + BE 7CAA47C2 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetShellStyleHInstance + C5 7CAA47C9 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFormatDrive + BD 7CAA76CA 19 Bytes [ 80, 00, 80, 80, 00, 00, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFormatDrive + D1 7CAA76DE 4 Bytes [ 00, 00, 00, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFormatDrive + D6 7CAA76E3 6 Bytes [ 00, FF, 00, 00, 00, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFormatDrive + DD 7CAA76EA 4 Bytes [ FF, 00, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFormatDrive + E3 7CAA76F0 65 Bytes [ FF, FF, FF, 00, 20, 77, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!AppCompat_RunDLLW + 1C 7CAA7D73 102 Bytes [ 00, 03, CC, 00, 04, 8C, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!AppCompat_RunDLLW + 83 7CAA7DDA 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!AppCompat_RunDLLW + 87 7CAA7DDE 1 Byte [ 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!AppCompat_RunDLLW + 89 7CAA7DE0 1 Byte [ 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!AppCompat_RunDLLW + 8B 7CAA7DE2 1 Byte [ 80 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CDefFolderMenu_Create + 7D 7CAA94FD 82 Bytes [ FF, FF, FF, 9A, 46, 25, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CDefFolderMenu_Create2 + 31 7CAA9550 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CDefFolderMenu_Create2 + 34 7CAA9553 24 Bytes [ FF, F5, 94, 4C, 26, 4C, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CDefFolderMenu_Create2 + 4E 7CAA956D 50 Bytes [ FF, FF, FF, FF, 1A, 46, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CDefFolderMenu_Create2 + 81 7CAA95A0 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CDefFolderMenu_Create2 + 88 7CAA95A7 10 Bytes [ FF, FF, F4, 1A, F3, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!FindExeDlgProc + 46 7CAADCE6 14 Bytes [ 86, 51, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!FindExeDlgProc + 55 7CAADCF5 89 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!FindExeDlgProc + AF 7CAADD4F 14 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!FindExeDlgProc + BE 7CAADD5E 14 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!FindExeDlgProc + CD 7CAADD6D 67 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_AutoScroll + 2 7CAB48A5 12 Bytes [ 80, 00, 00, 01, FF, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_AutoScroll + F 7CAB48B2 36 Bytes [ 00, 00, FF, 80, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_AutoScroll + 35 7CAB48D8 14 Bytes [ 01, FF, 00, 00, FF, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_AutoScroll + 45 7CAB48E8 35 Bytes [ 01, FF, 00, 00, FF, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_AutoScroll + 69 7CAB490C 2 Bytes [ FF, 80 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_DragEnterEx2 + 1A 7CABDBF9 16 Bytes [ EC, 51, 53, 56, 57, 6A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_DragEnterEx2 + 2B 7CABDC0A 30 Bytes [ 74, 20, 8B, 35, 38, 11, 9D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_DragEnterEx2 + 4A 7CABDC29 19 Bytes [ 7C, EB, 06, 33, DB, 43, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_DragEnterEx + 5 7CABDC3D 1 Byte [ 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_DragEnterEx + 7 7CABDC3F 68 Bytes [ 00, D1, FA, 03, C2, 99, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_DragEnterEx + 4C 7CABDC84 2 Bytes [ 77, CD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_DragEnterEx + 50 7CABDC88 144 Bytes [ FF, 75, 10, FF, 75, 0C, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_SetDragImage + 48 7CABDD19 36 Bytes [ 8D, 55, FC, 52, FF, 75, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_SetDragImage + 6D 7CABDD3E 36 Bytes [ 55, 8B, EC, 83, EC, 68, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_SetDragImage + 92 7CABDD63 55 Bytes [ 15, 80, 1D, 9D, 7C, 8B, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DAD_DragLeave + 2F 7CABDD9B 93 Bytes [ 15, 54, 12, 9D, 7C, E9, DD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHDoDragDrop + 2C 7CABDDF9 90 Bytes [ 75, B4, 8B, 1D, 4C, 12, 9D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHDoDragDrop + 88 7CABDE55 140 Bytes [ 75, B8, FF, 75, B0, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHDoDragDrop + 115 7CABDEE2 14 Bytes [ 53, 50, FF, 15, F0, 1F, 9D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHDoDragDrop + 124 7CABDEF1 85 Bytes [ FF, 75, 10, FF, 15, 30, 1E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHDoDragDrop + 17A 7CABDF47 20 Bytes [ 75, 18, 68, 0C, 6F, 9D, 7C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllInstall + B 7CAC0D9F 12 Bytes [ 00, 00, 00, 00, 00, DD, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllInstall + 18 7CAC0DAC 16 Bytes [ A6, 39, 00, FF, 9F, 34, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllInstall + 2A 7CAC0DBE 50 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllInstall + 5D 7CAC0DF1 2 Bytes [ 5C, 59 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!DllInstall + 60 7CAC0DF4 42 Bytes [ 8C, 5C, 59, FF, 8C, 5C, 59, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHDefExtractIconA + 2 7CAC3E40 69 Bytes [ FF, FF, 74, 74, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHDefExtractIconA + 48 7CAC3E86 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHDefExtractIconA + 52 7CAC3E90 78 Bytes [ FF, FF, 74, 74, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHDefExtractIconA + A1 7CAC3EDF 54 Bytes [ FF, FF, FF, 74, 74, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHDefExtractIconA + D8 7CAC3F16 17 Bytes [ F9, 1D, B2, F4, 01, 89, D7, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHValidateUNC + 87 7CAC448F 129 Bytes [ 07, 55, 64, 64, 64, 64, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHValidateUNC + 109 7CAC4511 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHValidateUNC + 110 7CAC4518 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHValidateUNC + 116 7CAC451E 38 Bytes [ 1A, 3D, 6C, 6C, 6C, 6C, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHValidateUNC + 13D 7CAC4545 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SignalFileOpen + 38 7CAC4BF0 99 Bytes [ 76, 76, 76, 00, 75, 75, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SignalFileOpen + 9C 7CAC4C54 3 Bytes [ 4F, 4F, 4F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SignalFileOpen + A0 7CAC4C58 3 Bytes [ 4E, 4E, 4E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SignalFileOpen + A4 7CAC4C5C 3 Bytes [ 4D, 4D, 4D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SignalFileOpen + A8 7CAC4C60 3 Bytes [ 4C, 4C, 4C ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RealShellExecuteExA + F 7CAC4CAF 47 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RealShellExecuteExA + 41 7CAC4CE1 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RealShellExecuteExA + 45 7CAC4CE5 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RealShellExecuteExA + 48 7CAC4CE8 91 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RealShellExecuteExA + A4 7CAC4D44 19 Bytes [ 00, BC, D8, D8, CE, E5, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!RealShellExecuteExW + F 7CAC4D58 387 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteW + 84 7CAC4EDC 34 Bytes [ 00, 00, AA, 63, 60, 62, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteW + A7 7CAC4EFF 28 Bytes [ A8, 62, 66, 6B, 66, 5F, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteW + C4 7CAC4F1C 36 Bytes [ 00, 00, 00, 00, B5, A2, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteW + EA 7CAC4F42 28 Bytes [ 9A, 56, 56, 56, 83, 8E, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExecuteW + 108 7CAC4F60 58 Bytes [ 00, 00, 9F, 4C, 4B, 4A, 62, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!GetFileNameFromBrowse + 15 7CAC64A4 11 Bytes [ 46, C7, EE, FF, 2B, B1, DE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!GetFileNameFromBrowse + 21 7CAC64B0 16 Bytes [ 00, 81, BD, BF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!GetFileNameFromBrowse + 32 7CAC64C1 55 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!GetFileNameFromBrowse + 6A 7CAC64F9 13 Bytes [ 81, BD, 30, 04, 65, 0B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!GetFileNameFromBrowse + 78 7CAC6507 119 Bytes [ BF, 00, 4B, 00, 10, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILAppendID + 37 7CAC68A4 28 Bytes [ A4, 70, 62, FF, DC, C7, BB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILAppendID + 54 7CAC68C1 6 Bytes [ EA, E0, FF, F3, EA, E0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILAppendID + 5B 7CAC68C8 30 Bytes [ F3, EA, E0, FF, F3, EA, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILAppendID + 7A 7CAC68E7 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILAppendID + 83 7CAC68F0 28 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCreateFromPathA + 20 7CAC6AEC 3 Bytes [ A4, 6A, 6A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCreateFromPathA + 24 7CAC6AF0 35 Bytes [ B2, B2, B2, FF, D3, D3, D3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCreateFromPathA + 48 7CAC6B14 151 Bytes [ BD, 4B, 4B, FF, 81, 34, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCreateFromPathA + E0 7CAC6BAC 27 Bytes [ FF, DC, BA, FF, FF, DA, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ILCreateFromPathA + FD 7CAC6BC9 73 Bytes [ CC, 9C, FF, FF, CB, 9A, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSpecialFolderPathA + 16 7CAC8BF8 9 Bytes [ FA, FA, FA, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetSpecialFolderPathA + 20 7CAC8C02 46 Bytes [ FF, FF, FF, FE, FE, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathAndSubDirA + 21 7CAC8C31 38 Bytes [ C1, B4, FF, FF, A5, 9E, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathAndSubDirA + 48 7CAC8C58 68 Bytes [ 80, CA, E6, FF, AD, DE, EE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathAndSubDirA + 8D 7CAC8C9D 30 Bytes [ 4B, 00, 40, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathAndSubDirA + AC 7CAC8CBC 47 Bytes [ EF, EF, EF, FF, EF, EF, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetFolderPathAndSubDirA + DC 7CAC8CEC 7 Bytes [ CA, AA, AA, FF, AD, 3F, 3F ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHHandleUpdateImage + C8 7CACA001 50 Bytes [ E4, C9, FF, FF, E3, C8, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHHandleUpdateImage + FB 7CACA034 7 Bytes [ FF, FF, D3, FF, FF, FF, D8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHHandleUpdateImage + 103 7CACA03C 75 Bytes [ BF, 9F, 91, FF, 99, 66, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHHandleUpdateImage + 14F 7CACA088 35 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHHandleUpdateImage + 173 7CACA0AC 27 Bytes [ FF, EC, B9, FF, FF, FD, CB, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotifySuspendResume + 5 7CACA505 46 Bytes CALL 6197A4F2 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotifySuspendResume + 34 7CACA534 19 Bytes [ B9, 86, 86, FF, A9, 76, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotifySuspendResume + 48 7CACA548 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotifySuspendResume + 57 7CACA557 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHChangeNotifySuspendResume + 7C 7CACA57C 11 Bytes [ E2, CF, CF, FF, DF, C7, C7, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHUpdateImageW + 5 7CACA5E6 19 Bytes [ F5, FF, DF, FF, FF, FF, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHUpdateImageW + 19 7CACA5FA 4 Bytes [ FF, FF, 00, 41 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHUpdateImageW + 1F 7CACA600 17 Bytes [ 0F, 88, FF, FF, 00, 8D, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHUpdateImageW + 32 7CACA613 21 Bytes [ 30, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHUpdateImageW + 49 7CACA62A 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHUpdateImageA + B 7CACA72B 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHUpdateImageA + 15 7CACA735 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHUpdateImageA + 33 7CACA753 2 Bytes [ FF, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHUpdateImageA + 36 7CACA756 54 Bytes [ FF, FF, FD, FF, FF, FF, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHUpdateImageA + 6D 7CACA78D 14 Bytes [ FB, FE, FF, 3B, 8B, B2, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDataFromIDListA + 62 7CAD160A 87 Bytes [ 30, 30, 64, 63, 2A, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDataFromIDListA + BA 7CAD1662 48 Bytes [ 00, 00, 00, 02, E5, 00, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDataFromIDListA + EB 7CAD1693 21 Bytes [ 00, 00, 02, E4, 00, 07, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDataFromIDListA + 101 7CAD16A9 6 Bytes [ 00, 00, 00, 00, 02, E4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetDataFromIDListA + 108 7CAD16B0 16 Bytes [ 08, 0D, 00, 03, 07, 0B, 07, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetNewLinkInfo + D1 7CAD18F8 58 Bytes [ 52, 01, 00, 00, 30, 30, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetNewLinkInfo + 10C 7CAD1933 8 Bytes [ 00, D2, 0E, 00, 00, 26, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetNewLinkInfo + 115 7CAD193C 55 Bytes [ 30, 30, 64, 63, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetNewLinkInfo + 14D 7CAD1974 34 Bytes [ 80, 13, 00, 00, 54, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetNewLinkInfo + 170 7CAD1997 3 Bytes [ 00, 6C, 02 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHOpenFolderAndSelectItems + 93 7CAD1C79 68 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateShellItem + 40 7CAD1CBE 111 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateShellItem + B0 7CAD1D2E 149 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateShellItem + 146 7CAD1DC4 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateShellItem + 167 7CAD1DE5 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateFileExtractIconW + B 7CAD1DF5 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateFileExtractIconW + 17 7CAD1E01 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateFileExtractIconW + 25 7CAD1E0F 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateFileExtractIconW + 2E 7CAD1E18 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateFileExtractIconW + 35 7CAD1E1F 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHAppBarMessage + F5 7CAD311C 117 Bytes [ 85, C0, 74, 1D, 40, 40, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLoadInProc + 13 7CAD3192 124 Bytes [ 02, 80, 5D, C2, 08, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetInstanceExplorer + 41 7CAD320F 5 Bytes [ 35, A4, D5, BD, 7C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetInstanceExplorer + 47 7CAD3215 112 Bytes [ 15, 54, 1D, 9D, 7C, 8D, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetInstanceExplorer + B8 7CAD3286 70 Bytes [ EC, 8B, 4D, 08, 8B, 41, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetInstanceExplorer + FF 7CAD32CD 98 Bytes [ 45, 08, 8B, 48, 48, D1, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetInstanceExplorer + 162 7CAD3330 18 Bytes [ A5, FF, 51, 64, EB, 05, B8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHBrowseForFolderW + 63 7CAD61CC 61 Bytes [ DC, A9, 87, FF, DC, A9, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHBrowseForFolderW + A2 7CAD620B 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHBrowseForFolderW + C8 7CAD6231 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHBrowseForFolderW + D9 7CAD6242 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHBrowseForFolderW + E4 7CAD624D 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHBrowseForFolder + B 7CAD626E 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHBrowseForFolder + 17 7CAD627A 39 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHBrowseForFolder + 40 7CAD62A3 82 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHBrowseForFolder + 94 7CAD62F7 25 Bytes [ 00, 00, 00, 00, 00, 00, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHBrowseForFolder + AE 7CAD6311 30 Bytes [ 00, 00, 00, 29, AB, 46, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExec_RunDLLW + 51 7CAD787B 28 Bytes [ 6C, 6C, 46, 6F, 6C, 64, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExec_RunDLLW + 6E 7CAD7898 766 Bytes [ 49, 44, 5F, 43, 44, 53, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExec_RunDLLW + 36D 7CAD7B97 519 Bytes [ 63, 33, 39, 65, 30, 61, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExec_RunDLLW + 575 7CAD7D9F 412 Bytes [ 49, 44, 5F, 41, 75, 74, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!ShellExec_RunDLLW + 712 7CAD7F3C 50 Bytes [ 6F, 43, 4D, 53, 65, 61, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateProcessAsUserW + 2 7CAD83EC 15 Bytes [ D8, 7E, 22, FF, D8, 7E, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateProcessAsUserW + 12 7CAD83FC 71 Bytes [ D8, 7E, 22, FF, D8, 7E, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateProcessAsUserW + 5A 7CAD8444 81 Bytes [ 1F, 93, 3C, FF, 0F, 7C, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateProcessAsUserW + AC 7CAD8496 13 Bytes [ 00, 88, 00, 00, 00, 37, 2F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateProcessAsUserW + BA 7CAD84A4 35 Bytes [ 2E, AE, 2D, FF, 16, 84, 41, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHShellFolderView_Message + 196 7CAD9C5A 163 Bytes [ 91, B0, D3, B9, 82, 6F, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHShellFolderView_Message + 23A 7CAD9CFE 230 Bytes [ 04, 6F, 00, 16, A8, B9, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHShellFolderView_Message + 321 7CAD9DE5 8 Bytes [ 9E, 9E, 9E, 10, 00, 07, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHShellFolderView_Message + 32A 7CAD9DEE 67 Bytes [ 00, 6E, 18, 18, 18, A9, CF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHShellFolderView_Message + 36E 7CAD9E32 174 Bytes [ B2, AD, AD, DB, AD, EC, 1D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateShellFolderViewEx + D6 7CADA029 15 Bytes [ 84, 00, 80, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateShellFolderViewEx + E6 7CADA039 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateShellFolderViewEx + E9 7CADA03C 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateShellFolderViewEx + 101 7CADA054 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateShellFolderViewEx + 10C 7CADA05F 28 Bytes [ 80, 00, A5, 00, EF, 14, AF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFind_InitMenuPopup + 2 7CADBCC0 75 Bytes [ FF, B6, 3B, FF, FD, B5, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFind_InitMenuPopup + 4E 7CADBD0C 19 Bytes [ 9B, 3F, 01, FF, A1, 3B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFind_InitMenuPopup + 62 7CADBD20 8 Bytes [ EC, A7, 48, FF, FF, B6, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFind_InitMenuPopup + 6B 7CADBD29 3 Bytes [ B8, 3F, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFind_InitMenuPopup + 6F 7CADBD2D 14 Bytes [ BA, 42, FF, FF, BB, 45, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFindFiles + 2 7CADD2D2 12 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFindFiles + F 7CADD2DF 14 Bytes [ FF, C9, EF, D4, FF, 0D, A7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFindFiles + 1E 7CADD2EE 18 Bytes [ 0D, FF, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFindFiles + 31 7CADD301 1 Byte [ F4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHFindFiles + 33 7CADD303 1 Byte [ FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHStartNetConnectionDialogW + 2 7CAE09B5 11 Bytes [ FF, FF, FF, FF, FB, F6, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHStartNetConnectionDialogW + E 7CAE09C1 50 Bytes [ F3, E7, FF, FF, F0, E2, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHStartNetConnectionDialogW + 41 7CAE09F4 46 Bytes [ 00, 00, 00, 00, 99, 33, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHStartNetConnectionDialogW + 70 7CAE0A23 29 Bytes [ BF, 00, 66, 00, AF, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHStartNetConnectionDialogW + 8E 7CAE0A41 22 Bytes [ DE, BC, FF, A3, 77, 74, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetIconOverlayIndexW + B 7CAE291C 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetIconOverlayIndexW + 1B 7CAE292C 59 Bytes [ CC, 66, 00, FF, C9, 63, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetIconOverlayIndexW + 58 7CAE2969 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetIconOverlayIndexW + 6C 7CAE297D 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetIconOverlayIndexW + 7B 7CAE298C 35 Bytes [ 00, 33, FF, 30, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetIconOverlayIndexA + 28 7CAE2A11 100 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetIconOverlayIndexA + 8D 7CAE2A76 100 Bytes [ C7, FF, BF, BF, BF, FF, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetIconOverlayIndexA + F2 7CAE2ADB 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetIconOverlayIndexA + F5 7CAE2ADE 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHGetIconOverlayIndexA + FD 7CAE2AE6 70 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPropStgCreate + 2 7CAE3542 83 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPropStgCreate + 56 7CAE3596 24 Bytes [ EE, EF, F2, AD, C6, D8, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPropStgCreate + 6F 7CAE35AF 23 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPropStgCreate + 87 7CAE35C7 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPropStgCreate + 8A 7CAE35CA 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPropStgWriteMultiple + 11 7CAE41B1 48 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPropStgWriteMultiple + 44 7CAE41E4 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPropStgWriteMultiple + 47 7CAE41E7 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPropStgWriteMultiple + 57 7CAE41F7 5 Bytes [ FF, FF, FF, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHPropStgWriteMultiple + 5D 7CAE41FD 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLimitInputEdit + 18 7CAE4E8C 27 Bytes [ D2, DA, DB, FF, 98, 37, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLimitInputEdit + 34 7CAE4EA8 3 Bytes [ 79, 7B, 7A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLimitInputEdit + 38 7CAE4EAC 27 Bytes [ 76, 7A, 79, FF, 73, 78, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLimitInputEdit + 54 7CAE4EC8 55 Bytes [ F3, A1, 27, FF, F3, A1, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLimitInputEdit + 8C 7CAE4F00 20 Bytes [ F3, A1, 27, FF, F3, A1, 27, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHMultiFileProperties + 2 7CAE527B 83 Bytes [ FC, EF, E5, F7, B9, 75, CA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHMultiFileProperties + 57 7CAE52D0 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHMultiFileProperties + 63 7CAE52DC 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHMultiFileProperties + 65 7CAE52DE 3 Bytes [ B1, 8F, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHMultiFileProperties + 6A 7CAE52E3 4 Bytes [ FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLoadNonloadedIconOverlayIdentifiers + B 7CAE5A2A 14 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLoadNonloadedIconOverlayIdentifiers + 1A 7CAE5A39 18 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLoadNonloadedIconOverlayIdentifiers + 2E 7CAE5A4D 17 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLoadNonloadedIconOverlayIdentifiers + 41 7CAE5A60 13 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHLoadNonloadedIconOverlayIdentifiers + 50 7CAE5A6F 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CallCPLEntry16 + 4A 7CB3A583 81 Bytes [ 10, 18, 18, 18, 9B, BD, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CallCPLEntry16 + 9C 7CB3A5D5 159 Bytes [ EC, 3E, 3E, 3E, B4, C3, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CallCPLEntry16 + 13C 7CB3A675 23 Bytes [ 00, 0C, 2A, 01, 29, 01, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CallCPLEntry16 + 154 7CB3A68D 77 Bytes [ 03, 96, 70, 70, 00, 04, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!CallCPLEntry16 + 1A2 7CB3A6DB 219 Bytes [ 1E, A8, A8, B9, B0, 91, C0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Options_RunDLL + 8 7CB6AFE0 12 Bytes [ D8, EA, EF, FF, 76, DF, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Options_RunDLL + 15 7CB6AFED 1 Byte [ 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Options_RunDLL + 17 7CB6AFEF 22 Bytes [ FF, 00, CC, FF, FF, 8A, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Options_RunDLLW + 2 7CB6B006 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Options_RunDLLW + 8 7CB6B00C 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Options_RunDLLW + B 7CB6B00F 11 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Options_RunDLLW + 17 7CB6B01B 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!Options_RunDLLW + 1E 7CB6B022 15 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateLocalServerRunDll + 2F 7CB6CF7C 13 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateLocalServerRunDll + 3D 7CB6CF8A 9 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateLocalServerRunDll + 47 7CB6CF94 135 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateLocalServerRunDll + CF 7CB6D01C 43 Bytes [ 18, 79, 9C, 00, 19, 7A, 9D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!SHCreateLocalServerRunDll + FB 7CB6D048 6 Bytes [ 0C, 72, A5, 00, 5A, C7 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrCmpNIA + 1 7CBAAE3A 43 Bytes [ 00, 00, C0, 00, 00, 00, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrRChrIA + 1 7CBAAE66 10 Bytes [ FC, 00, FF, FF, 00, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrRChrIW + 1 7CBAAE71 223 Bytes [ FF, 00, 00, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrStrW + 9F 7CBAAF51 627 Bytes [ 50, 0D, 00, 81, 49, 1A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrStrW + 313 7CBAB1C5 388 Bytes [ 00, 30, 44, 38, 04, 1C, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrStrW + 498 7CBAB34A 149 Bytes [ 02, F4, 10, 44, 00, 00, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrStrW + 52E 7CBAB3E0 59 Bytes [ F4, 00, 10, 44, 00, 00, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHELL32.dll!StrStrW + 56A 7CBAB41C 59 Bytes [ F4, 00, 10, 44, 00, 00, 12, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamWrapper + FFF99D32 77F4181D 40 Bytes [ FF, FF, FF, FF, FE, FC, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamWrapper + FFF9AAC4 77F425AF 3 Bytes [ 01, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamWrapper + FFF9AAC8 77F425B3 3 Bytes [ 01, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamWrapper + FFF9AACC 77F425B7 3 Bytes [ 02, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamWrapper + FFF9AAD0 77F425BB 3 Bytes [ 02, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathBuildRootW + E 77F4404C 1061 Bytes [ 2C, 22, 25, 50, 41, 54, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetValueW + 153 77F44472 639 Bytes [ 30, 30, 2C, 5C, 0D, 0A, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetValueW + 16B 77F446F2 75 Bytes [ 32, 2C, 31, 30, 2C, 30, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetValueW + 1B7 77F4473E 43 Bytes [ 2C, 34, 33, 2C, 37, 65, 2C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetValueW + 1E3 77F4476A 90 Bytes [ 64, 2C, 39, 31, 2C, 31, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetValueW + 23E 77F447C5 277 Bytes [ 2C, 30, 30, 2C, 64, 33, 2C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetValueW + 354 77F448DB 375 Bytes [ 36, 2C, 30, 30, 2C, 30, 30, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakeSystemFolderW + 2CA 77F44D79 319 Bytes [ 30, 2C, 30, 30, 2C, 31, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakeSystemFolderW + 40A 77F44EB9 5 Bytes [ 58, 50, 4C, 4F, 52 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakeSystemFolderW + 410 77F44EBF 276 Bytes [ 52, 25, 5C, 53, 74, 72, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakeSystemFolderW + 525 77F44FD4 96 Bytes [ 41, 55, 54, 4F, 50, 4C, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakeSystemFolderW + 586 77F45035 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrChrW + 6D 77F466EA 33 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrChrW + 8F 77F4670C 324 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindExtensionW + 38 77F46851 416 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpCW + 119 77F469F2 78 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpCW + 168 77F46A41 364 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetDriveNumberW + 14 77F46BAE 383 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRetToBufW + 3F 77F46D2E 68 Bytes [ 00, 00, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRetToBufW + 84 77F46D73 7 Bytes [ 02, 02, 02, 02, 02, 02, 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRetToBufW + 8C 77F46D7B 355 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAddBackslashW + 92 77F46EDF 64 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryValueExW + 32 77F46F20 25 Bytes [ 02, 02, 02, 02, 02, 02, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryValueExW + 4C 77F46F3A 34 Bytes [ 02, 02, 02, 02, 24, 24, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpNIW + 19 77F46F5D 190 Bytes [ 06, 2A, 33, DA, DE, DE, DD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpICA + 6C 77F4701C 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpICA + 75 77F47025 109 Bytes [ FF, B4, DB, DB, D6, DB, DC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindFileNameW + 5E 77F47095 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindFileNameW + 61 77F47098 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindFileNameW + 64 77F4709B 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindFileNameW + 67 77F4709E 30 Bytes [ F5, 75, 75, 75, 74, 75, 93, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindFileNameW + 87 77F470BE 4 Bytes [ FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpW + 2 77F470E8 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpW + 8 77F470EE 5 Bytes [ FF, 9A, 53, 53, 53 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpW + E 77F470F4 30 Bytes [ 53, 53, 4D, 4D, 4D, 25, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpW + 2D 77F47113 77 Bytes [ FF, FF, FF, FF, 1B, 4D, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpW + 7B 77F47161 151 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathBuildRootA + 2 77F473F6 49 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsRootW + 2 77F47428 38 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsRootW + 2A 77F47450 15 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsRootW + 3B 77F47461 31 Bytes [ FF, FF, FF, FF, FF, F6, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveBackslashW + 2 77F47481 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveBackslashW + B 77F4748A 26 Bytes [ FF, FF, F5, DD, B4, F2, 99, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveBackslashW + 27 77F474A6 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveBackslashW + 2C 77F474AB 29 Bytes [ 19, B5, B4, BB, EE, DD, 19, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveBackslashW + 4A 77F474C9 61 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCommonPrefixW + 1D 77F47507 21 Bytes [ CF, F5, 74, 4C, 31, 52, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCommonPrefixW + 34 77F4751E 36 Bytes [ FF, FF, FF, FF, FF, FF, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCommonPrefixW + 5B 77F47545 56 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCommonPrefixW + 94 77F4757E 27 Bytes [ AD, 8B, B4, F6, 52, 2B, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCommonPrefixW + B0 77F4759A 54 Bytes [ FF, FF, FF, BB, D5, DB, D6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IntlStrEqWorkerW + 4 77F475D1 17 Bytes [ DD, 99, 4C, 52, 1C, 1B, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IntlStrEqWorkerW + 16 77F475E3 157 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IntlStrEqWorkerW + B4 77F47681 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IntlStrEqWorkerW + B9 77F47686 53 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IntlStrEqWorkerW + EF 77F476BC 102 Bytes [ 7A, 53, 4D, 4D, 4D, 25, 4C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCanonicalizeW + 2 77F47843 37 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCanonicalizeW + 29 77F4786A 24 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCanonicalizeW + 42 77F47883 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCanonicalizeW + 45 77F47886 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCanonicalizeW + 4A 77F4788B 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCombineW + B 77F47994 139 Bytes [ 24, BB, 02, 8F, 6C, 77, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCombineW + 97 77F47A20 47 Bytes [ 37, BB, 4C, 00, 35, BB, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCombineW + C7 77F47A50 25 Bytes [ 34, 77, 01, 0F, 03, FF, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCombineW + E1 77F47A6A 101 Bytes [ 35, 77, 00, 04, 0A, AF, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAppendW + 44 77F47AD1 35 Bytes [ 00, 02, FF, B6, 88, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAppendW + 68 77F47AF5 23 Bytes [ 87, 00, 00, 01, FF, 04, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAppendW + 80 77F47B0D 48 Bytes [ FF, 04, F7, B0, 77, 03, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAppendW + B1 77F47B3E 62 Bytes [ 03, FF, B1, 77, 03, 87, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAppendW + F0 77F47B7D 16 Bytes [ F7, 09, 77, 02, 80, 98, 77, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveFileSpecW + 4D 77F47C63 159 Bytes [ 78, 04, 87, 01, 77, 03, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveFileSpecW + ED 77F47D03 12 Bytes [ 87, 0F, 77, 02, 8F, 0B, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveFileSpecW + FA 77F47D10 6 Bytes [ 0B, 77, 02, 80, 98, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveFileSpecW + 101 77F47D17 8 Bytes [ 8F, 0A, 77, 03, 87, 01, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveFileSpecW + 10A 77F47D20 13 Bytes [ 01, FF, 04, F7, 09, 77, 02, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFileExistsW + 21 77F47D6A 33 Bytes [ 04, F7, 09, 77, 02, 80, 98, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsNetworkPathW + 9 77F47D8C 55 Bytes [ 01, FF, 04, F7, 09, 77, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsNetworkPathW + 41 77F47DC4 179 Bytes [ 0B, 77, 02, 80, 98, 66, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrStrIW + 3C 77F47E78 38 Bytes [ 0B, 77, 02, 80, 98, 66, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrStrIW + 63 77F47E9F 6 Bytes [ 80, 98, 66, 02, 8F, 0A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrStrIW + 6A 77F47EA6 80 Bytes [ 03, 87, 01, 87, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrStrIW + BC 77F47EF8 68 Bytes [ 01, FF, 04, F7, 09, 77, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsUNCServerW + 1A 77F47F3D 6 Bytes [ 8F, 0B, 77, 03, 88, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsUNCServerW + 21 77F47F44 84 Bytes [ 03, FF, 0B, 77, 02, 80, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsUNCServerShareW + 50 77F47F99 30 Bytes [ 80, 28, 66, 02, 78, 49, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsUNCServerShareW + 6F 77F47FB8 27 Bytes [ 03, 77, 01, 87, 07, 77, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wvnsprintfA + 12 77F47FD4 79 Bytes [ 04, 77, 06, FF, 02, 78, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wvnsprintfA + 62 77F48024 22 Bytes [ FF, DF, DF, FF, FF, E3, E3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wvnsprintfA + 79 77F4803B 5 Bytes [ 82, 00, 00, 00, 12 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wvnsprintfA + 7F 77F48041 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wvnsprintfA + 93 77F48055 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wnsprintfA + D 77F48249 2 Bytes [ E6, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wnsprintfA + 10 77F4824C 16 Bytes JMP 49F48247 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wnsprintfA + 21 77F4825D 44 Bytes [ D1, D1, FF, FF, D4, D4, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wnsprintfA + 4E 77F4828A 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wnsprintfA + 67 77F482A3 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathStripToRootW + 14 77F483C9 10 Bytes [ D9, D9, FF, FF, D6, D6, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathStripToRootW + 1F 77F483D4 62 Bytes [ FF, D1, D1, FF, FF, CF, CF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathStripToRootW + 5E 77F48413 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathStripToRootW + 6A 77F4841F 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathStripToRootW + 6C 77F48421 41 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpLogicalW + CF 77F48524 88 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpLogicalW + 128 77F4857D 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpLogicalW + 12F 77F48584 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpLogicalW + 135 77F4858A 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpLogicalW + 14B 77F485A0 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegCloseUSKey + 18 77F48AB0 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegCloseUSKey + 20 77F48AB8 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegCloseUSKey + 29 77F48AC1 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegCloseUSKey + 42 77F48ADA 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegCloseUSKey + 5B 77F48AF3 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegOpenUSKeyA + 16 77F48B1F 9 Bytes [ 00, 00, 07, 00, 00, F0, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegOpenUSKeyA + 20 77F48B29 4 Bytes [ 01, 00, 00, E0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegOpenUSKeyA + 26 77F48B2F 22 Bytes [ 00, 00, 00, 00, 00, C0, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegOpenUSKeyA + 3D 77F48B46 7 Bytes [ 00, 00, 00, 00, 00, 00, 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegOpenUSKeyA + 45 77F48B4E 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegOpenUSKeyW + A 77F48C54 19 Bytes [ FF, FF, C0, 01, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegOpenUSKeyW + 1E 77F48C68 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegOpenUSKeyW + 21 77F48C6B 31 Bytes [ 00, 40, 00, 00, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegOpenUSKeyW + 41 77F48C8B 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegOpenUSKeyW + 63 77F48CAD 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetUSValueW + 17 77F48CC9 13 Bytes [ 00, 00, 1B, 00, 00, 00, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetUSValueW + 25 77F48CD7 1 Byte [ 1F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetUSValueW + 27 77F48CD9 57 Bytes [ 00, 00, 0D, 00, 00, 00, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetUSValueW + 62 77F48D14 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetUSValueW + 7D 77F48D2F 35 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryUSValueW + 23 77F48E58 14 Bytes [ 7D, 6C, 6C, FF, 41, 3B, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryUSValueW + 32 77F48E67 139 Bytes [ AC, 00, 00, 00, 8F, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryUSValueW + BE 77F48EF3 1 Byte [ A1 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryUSValueW + C0 77F48EF5 66 Bytes [ 00, 00, 71, 00, 00, 00, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryUSValueW + 103 77F48F38 66 Bytes [ D3, D3, D3, FF, C3, C3, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetBoolUSValueW + 27 77F48F7B 1 Byte [ AA ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetBoolUSValueW + 29 77F48F7D 8 Bytes [ 00, 00, 8C, 00, 00, 00, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetBoolUSValueW + 33 77F48F87 40 Bytes [ 25, 00, 00, 00, 0A, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetBoolUSValueW + 5C 77F48FB0 7 Bytes [ D1, D1, D1, FF, CC, CC, CC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetBoolUSValueW + 64 77F48FB8 7 Bytes [ C5, C5, C5, FF, BF, BF, BF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wvnsprintfW + 11 77F491C2 29 Bytes [ 00, 00, 00, 00, 01, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wvnsprintfW + 2F 77F491E0 10 Bytes [ 07, 04, 00, 00, 60, 27, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wvnsprintfW + 3A 77F491EB 39 Bytes [ 00, 00, 00, 00, 00, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wvnsprintfW + 62 77F49213 10 Bytes [ 00, 80, 27, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wvnsprintfW + 6D 77F4921E 3 Bytes [ 00, 00, 04 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wnsprintfW + 4A 77F493F0 18 Bytes [ 07, 04, 00, 00, C0, 28, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wnsprintfW + 5D 77F49403 22 Bytes [ 00, 00, 00, 01, 00, 07, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wnsprintfW + 74 77F4941A 71 Bytes [ 00, 00, 00, 00, 01, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wnsprintfW + BD 77F49463 15 Bytes [ 00, 00, 00, 01, 00, 07, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!wnsprintfW + CD 77F49473 6 Bytes [ 00, 00, 00, 00, 00, 04 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSetValueW + B 77F4972A 45 Bytes [ 00, 00, 00, 00, 00, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSetValueW + 3A 77F49759 52 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSetValueW + 70 77F4978F 16 Bytes [ 00, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSetValueW + 81 77F497A0 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSetValueW + 9B 77F497BA 13 Bytes [ 00, 00, 00, 00, 00, 00, 04, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocCreate + 2D 77F49E56 47 Bytes [ 01, 00, 07, 04, 00, 00, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocCreate + 5D 77F49E86 11 Bytes [ 01, 00, 07, 04, 00, 00, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocCreate + 6B 77F49E94 14 Bytes [ 00, 00, 00, 00, 04, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocCreate + 7A 77F49EA3 36 Bytes [ 00, E0, 2F, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocCreate + 9F 77F49EC8 19 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDuplicateHKey + 1D 77F4A51C 42 Bytes [ 2C, 7C, 01, 01, 01, 01, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDuplicateHKey + 48 77F4A547 149 Bytes [ 06, 1F, 1F, A9, 46, 01, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryKeyW + 6F 77F4A5DD 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryKeyW + 8E 77F4A5FC 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryKeyW + B5 77F4A623 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryKeyW + D4 77F4A642 62 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryKeyW + 113 77F4A681 62 Bytes [ 7A, B6, 50, 54, AC, D2, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToIntW + 1B 77F4AF4F 76 Bytes [ 0F, 2C, 0F, 2E, 2E, 10, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnquoteSpacesW + 1E 77F4AF9D 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnquoteSpacesW + 23 77F4AFA2 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnquoteSpacesW + 41 77F4AFC0 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnquoteSpacesW + 47 77F4AFC6 46 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveBlanksW + 19 77F4AFF5 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRChrW + 2 77F4B020 12 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRChrW + F 77F4B02D 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRChrW + 15 77F4B033 43 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathParseIconLocationW + 2 77F4B05F 15 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathParseIconLocationW + 12 77F4B06F 14 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathParseIconLocationW + 23 77F4B080 66 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathParseIconLocationW + 67 77F4B0C4 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathParseIconLocationW + 70 77F4B0CD 3 Bytes [ FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringByKeyW + 2 77F4B0E2 32 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringByKeyW + 24 77F4B104 16 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringByKeyW + 35 77F4B115 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringByKeyW + 3F 77F4B11F 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringByKeyW + 48 77F4B128 5 Bytes [ FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHFreeShared + 2 77F4B51B 16 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHFreeShared + 13 77F4B52C 9 Bytes [ FF, FF, FF, FF, FF, FF, B2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHFreeShared + 1D 77F4B536 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHFreeShared + 24 77F4B53D 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHFreeShared + 26 77F4B53F 53 Bytes [ FF, FF, FF, FF, F8, F2, EF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHAllocShared + 55 77F4B606 11 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHAllocShared + 61 77F4B612 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHAllocShared + 64 77F4B615 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHAllocShared + 67 77F4B618 31 Bytes [ FF, FF, 78, B1, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHAllocShared + 87 77F4B638 9 Bytes [ 86, 4C, DA, 99, 5A, F4, B5, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamOnFileW + 2 77F4B85B 112 Bytes [ FF, FF, FF, 78, B3, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamOnFileW + 73 77F4B8CC 19 Bytes [ FF, FF, FF, FF, FF, FF, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamOnFileW + 88 77F4B8E1 49 Bytes JMP F0AB52A6 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamOnFileW + BA 77F4B913 36 Bytes [ 29, BE, FF, 24, AA, EF, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamOnFileW + E1 77F4B93A 348 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsURLW + 9 77F4BB5A 47 Bytes [ 36, C2, 7D, 30, B4, 72, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsURLW + 39 77F4BB8A 105 Bytes [ 85, 50, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsURLW + A3 77F4BBF4 121 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsW + 2 77F4BC6E 47 Bytes [ FF, FF, FF, FF, 86, 50, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsW + 32 77F4BC9E 62 Bytes [ 31, 77, FF, 44, 8E, FF, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsW + 71 77F4BCDD 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsW + 74 77F4BCE0 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsW + 7A 77F4BCE6 11 Bytes [ 86, 51, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHLoadIndirectString + 47 77F4BEB5 9 Bytes [ FF, 80, 4C, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHLoadIndirectString + 51 77F4BEBF 85 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHLoadIndirectString + A7 77F4BF15 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHLoadIndirectString + B2 77F4BF20 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHLoadIndirectString + BB 77F4BF29 14 Bytes [ FF, C6, B2, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindFileNameA + A3 77F4C1FF 428 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindFileNameA + 250 77F4C3AC 104 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindFileNameA + 2B9 77F4C415 102 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindFileNameA + 320 77F4C47C 207 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindFileNameA + 3F0 77F4C54C 207 Bytes [ 11, 11, 11, 11, 11, 11, 11, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetPartW + 159 77F4CDAE 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetPartW + 16E 77F4CDC3 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetPartW + 179 77F4CDCE 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetPartW + 182 77F4CDD7 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetPartW + 18B 77F4CDE0 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetValueA + 2 77F4FFEC 51 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetValueA + 36 77F50020 19 Bytes [ 85, E6, FF, FF, 84, E5, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetValueA + 4A 77F50034 2 Bytes [ 85, E6 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetValueA + 4D 77F50037 3 Bytes [ FF, 84, E5 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetValueA + 51 77F5003B 16 Bytes [ FF, 85, E5, FF, FF, 85, E5, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetValueA + 9 77F5008C 2 Bytes [ 84, E6 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetValueA + C 77F5008F 3 Bytes [ FF, 84, E5 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetValueA + 11 77F50094 2 Bytes [ 84, E5 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetValueA + 14 77F50097 11 Bytes [ FF, 84, E5, FF, FF, 85, E6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetValueA + 21 77F500A4 10 Bytes [ 84, E6, FF, FF, 84, E6, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryValueExA + 9 77F501B4 2 Bytes [ 85, E6 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryValueExA + C 77F501B7 3 Bytes [ FF, 85, E6 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryValueExA + 11 77F501BC 2 Bytes [ 85, E6 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryValueExA + 14 77F501BF 4 Bytes [ FF, 85, E6, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryValueExA + 19 77F501C4 6 Bytes [ 85, E6, FF, FF, 85, E6 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRChrA + 28 77F502E8 7 Bytes [ 86, E6, FF, FF, 86, E6, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRChrA + 30 77F502F0 38 Bytes [ 85, E7, FF, FF, 86, E6, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRChrA + 58 77F50318 14 Bytes [ 85, E7, FF, FF, 85, E7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRChrA + 67 77F50327 16 Bytes [ FF, 86, E7, FF, FF, 86, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRChrA + 78 77F50338 58 Bytes [ 85, E7, FF, FF, 85, E7, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCatW + 2 77F50448 110 Bytes [ 86, E7, FF, FF, 86, E7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCatW + 71 77F504B7 48 Bytes [ FF, 86, E7, FF, FF, 86, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCatW + A2 77F504E8 2 Bytes [ 87, E7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCatW + A5 77F504EB 23 Bytes [ FF, 87, E7, FF, FF, 86, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCatW + BE 77F50504 10 Bytes [ 86, E7, FF, FF, 86, E7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAddBackslashA + 2 77F5050F 12 Bytes [ FF, 87, E7, FF, FF, 87, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAddBackslashA + F 77F5051C 3 Bytes [ 86, E7, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAddBackslashA + 13 77F50520 39 Bytes [ 86, E7, FF, FF, 86, E7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAddBackslashA + 3B 77F50548 54 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAddBackslashA + 73 77F50580 14 Bytes [ 86, E7, FF, FF, 86, E7, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryInfoUSKeyW + 2 77F5060F 24 Bytes CALL 5F7D0613 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryInfoUSKeyW + 1B 77F50628 18 Bytes CALL 607D062C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryInfoUSKeyW + 2E 77F5063B 8 Bytes CALL 607D063F .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryInfoUSKeyW + 37 77F50644 2 Bytes [ 87, E7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryInfoUSKeyW + 3A 77F50647 6 Bytes [ FF, 87, E8, FF, FF, 87 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryInfoKeyW + 74 77F50730 6 Bytes CALL 607D0734 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryInfoKeyW + 7B 77F50737 8 Bytes CALL 5F7D073B .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryInfoKeyW + 84 77F50740 3 Bytes CALL 607D0744 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryInfoKeyW + 88 77F50744 23 Bytes CALL 607D0748 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryInfoKeyW + A0 77F5075C 11 Bytes CALL 607D0760 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpNIA + 2 77F50768 103 Bytes CALL 5F7D076C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpNIA + 6A 77F507D0 7 Bytes CALL 607D07D4 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpNIA + 72 77F507D8 2 Bytes [ 87, E8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpNIA + 75 77F507DB 8 Bytes CALL 607D07DF .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpNIA + 7E 77F507E4 51 Bytes [ 87, E7, FF, FF, 87, E8, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocGetPerceivedType + 31 77F51094 7 Bytes JMP 6EC4118F .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocGetPerceivedType + 39 77F5109C 15 Bytes [ D5, F6, FE, 00, D9, F8, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocGetPerceivedType + 49 77F510AC 15 Bytes [ 00, C3, F6, 00, 01, BB, EE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocGetPerceivedType + 59 77F510BC 23 Bytes [ 0E, BD, EB, 00, 3F, AD, CC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocGetPerceivedType + 71 77F510D4 3 Bytes [ 01, AA, DD ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateShellPalette + 282 77F51B82 11 Bytes [ 00, 00, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateShellPalette + 28F 77F51B8F 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateShellPalette + 292 77F51B92 122 Bytes [ 00, 00, FF, C3, FF, FF, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateShellPalette + 30D 77F51C0D 66 Bytes [ F8, 00, 00, 1F, FF, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateShellPalette + 350 77F51C50 22 Bytes [ 00, 1F, 00, 00, C0, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStream2W + 3A 77F524B4 15 Bytes [ B9, 62, 62, FF, 5C, 7D, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStream2W + 4A 77F524C4 3 Bytes [ BF, 6F, 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStream2W + 4E 77F524C8 3 Bytes [ BF, 6F, 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStream2W + 52 77F524CC 87 Bytes [ 5F, 84, 97, FF, 25, 9B, B5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStream2W + AB 77F52525 81 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRetToStrW + 14 77F525E7 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRetToStrW + 2F 77F52602 14 Bytes [ 00, 04, 00, 62, 93, 32, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRetToStrW + 3E 77F52611 24 Bytes [ 46, 69, 46, 00, 00, 00, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRetToStrW + 57 77F5262A 70 Bytes [ 00, 19, 00, 75, 9D, 57, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetThreadRef + 1E 77F52672 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetThreadRef + 22 77F52676 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetThreadRef + 27 77F5267B 56 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetThreadRef + 60 77F526B4 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetThreadRef + 87 77F526DB 103 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMatchSpecW + B 77F527F1 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMatchSpecW + 24 77F5280A 14 Bytes [ 00, 00, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMatchSpecW + 34 77F5281A 18 Bytes [ 00, 00, FF, C0, 01, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMatchSpecW + 47 77F5282D 4 Bytes [ 80, 00, 00, 07 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMatchSpecW + 4C 77F52832 7 Bytes [ 00, 00, FF, 80, 00, 00, 01 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsFileSpecW + 2E 77F5294C 3 Bytes [ FF, 80, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsFileSpecW + 32 77F52950 3 Bytes [ 01, FF, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsFileSpecW + 36 77F52954 3 Bytes [ FF, 80, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsFileSpecW + 3A 77F52958 3 Bytes [ 01, FF, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsFileSpecW + 3E 77F5295C 3 Bytes [ FF, 80, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrTrimW + 2D 77F52ED4 23 Bytes [ F4, F5, EB, FF, F4, F5, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrTrimW + 45 77F52EEC 42 Bytes [ F7, F8, F2, FF, F8, F9, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrTrimW + 70 77F52F17 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrTrimW + 7A 77F52F21 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrTrimW + 82 77F52F29 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRStrIW + 79 77F53896 359 Bytes [ 0A, 18, 2C, 31, 31, 14, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRStrIW + 1E1 77F539FE 3 Bytes [ 03, FF, 8E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRStrIW + 1E5 77F53A02 3 Bytes [ 00, FF, 8C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRStrIW + 1E9 77F53A06 3 Bytes [ 00, 7F, 80 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRStrIW + 1ED 77F53A0A 3 Bytes [ 00, 3F, 80 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocIsDangerous + 11 77F53C64 59 Bytes [ B7, BE, 61, 00, 7F, 6E, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocIsDangerous + 4D 77F53CA0 11 Bytes [ BB, DD, 8A, 00, A8, DE, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocIsDangerous + 59 77F53CAC 12 Bytes [ FF, E0, 8F, 00, B0, D7, 95, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocIsDangerous + 66 77F53CB9 22 Bytes [ DC, A6, 00, CD, EE, AA, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocIsDangerous + 7D 77F53CD0 26 Bytes [ FA, F2, DF, 00, EB, F9, E0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetArgsW + 20 77F541B1 20 Bytes [ 98, 00, 80, 00, 98, 00, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetArgsW + 35 77F541C6 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveArgsW + 9 77F541D4 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveArgsW + 17 77F541E2 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveArgsW + 1E 77F541E9 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveArgsW + 22 77F541ED 19 Bytes [ 00, 00, 00, 00, 88, C5, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveArgsW + 36 77F54201 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsPrefixW + 14 77F542E0 15 Bytes [ D1, 93, 6D, FF, D1, 93, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsPrefixW + 24 77F542F0 16 Bytes [ 9E, 65, 58, FF, D4, 96, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsPrefixW + 35 77F54301 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsPrefixW + 55 77F54321 45 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsPrefixW + 83 77F5434F 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrStrA + 2 77F54EA8 35 Bytes [ A3, 77, 74, FF, A3, 77, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrStrA + 26 77F54ECC 13 Bytes [ 9C, 36, 00, 8F, A8, 42, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrStrA + 34 77F54EDA 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrStrA + 3A 77F54EE0 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrStrA + 3E 77F54EE4 24 Bytes [ 99, 33, 00, 8F, A8, 42, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegWriteUSValueW + 17 77F54F54 23 Bytes [ A9, 7D, 77, FF, AF, 7C, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegWriteUSValueW + 2F 77F54F6C 11 Bytes [ AF, 7C, 72, FF, AF, 7C, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegWriteUSValueW + 3B 77F54F78 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegWriteUSValueW + 44 77F54F81 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegWriteUSValueW + 4D 77F54F8A 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSKeyW + 2E 77F5504F 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSKeyW + 31 77F55052 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSKeyW + 36 77F55057 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSKeyW + 39 77F5505A 150 Bytes [ FF, FF, FF, FF, FF, FF, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumKeyExW + 39 77F550F1 7 Bytes [ FF, 66, 66, F0, 88, 8F, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumKeyExW + 42 77F550FA 7 Bytes [ FF, 66, 66, 66, 66, 66, 66 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumKeyExW + 4B 77F55103 16 Bytes [ FF, FF, F8, 88, 88, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumKeyExW + 5C 77F55114 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumKeyExW + 61 77F55119 8 Bytes [ 88, 88, 88, 88, 88, 88, 88, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryUSValueA + 76 77F551C4 22 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryUSValueA + 8D 77F551DB 62 Bytes [ FF, FF, F6, 60, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryUSValueA + CD 77F5521B 53 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryUSValueA + 103 77F55251 115 Bytes [ FF, FF, FF, FF, F0, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAddExtensionW + 1A 77F552C5 56 Bytes [ 66, 66, 66, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAddExtensionW + 54 77F552FF 26 Bytes [ FF, FF, FF, FF, F6, 66, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAddExtensionW + 70 77F5531B 15 Bytes [ F6, 66, 66, 66, 66, 66, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAddExtensionW + 80 77F5532B 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAddExtensionW + 83 77F5532E 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IsCharSpaceW + 3F 77F558A4 10 Bytes [ 99, CC, 99, 00, 99, CC, CC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IsCharSpaceW + 4A 77F558AF 2 Bytes [ 00, 99 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IsCharSpaceW + 4D 77F558B2 3 Bytes [ 00, 00, 99 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IsCharSpaceW + 51 77F558B6 1 Byte [ 33 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IsCharSpaceW + 53 77F558B8 7 Bytes [ 99, CC, 66, 00, 99, FF, 99 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCombineA + 2 77F56632 38 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCombineA + 29 77F56659 28 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCombineA + 47 77F56677 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCombineA + 51 77F56681 18 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCombineA + 65 77F56695 16 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCanonicalizeA + 2 77F567E7 32 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCanonicalizeA + 24 77F56809 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCanonicalizeA + 26 77F5680B 15 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCanonicalizeA + 36 77F5681B 13 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCanonicalizeA + 45 77F5682A 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSetValueA + 2 77F5685D 36 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSetValueA + 27 77F56882 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSetValueA + 2A 77F56885 11 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSetValueA + 36 77F56891 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSetValueA + 39 77F56894 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToIntA + 2 77F569F7 32 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToIntA + 23 77F56A18 98 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToIntA + 86 77F56A7B 19 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToIntA + 9A 77F56A8F 14 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToIntA + A9 77F56A9E 3 Bytes [ FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteKeyW + 25 77F56F79 18 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteKeyW + 38 77F56F8C 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteKeyW + 43 77F56F97 82 Bytes [ D0, A2, 7B, D1, 91, 54, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteKeyW + 96 77F56FEA 34 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteKeyW + B9 77F5700D 9 Bytes [ 99, 00, FF, 00, 99, 00, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!GetMenuPosFromID + C 77F57285 37 Bytes [ EB, C0, FF, F8, C1, 85, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!GetMenuPosFromID + 34 77F572AD 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!GetMenuPosFromID + 3B 77F572B4 47 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!GetMenuPosFromID + 6B 77F572E4 11 Bytes [ F9, C3, 89, FF, F9, C3, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!GetMenuPosFromID + 77 77F572F0 27 Bytes [ F9, C3, 89, FF, F9, C3, 89, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCSpnW + 21 77F57344 28 Bytes [ FF, ED, C4, FF, FA, CA, 93, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCSpnW + 3E 77F57361 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateThread + B 77F57371 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateThread + 22 77F57388 11 Bytes [ FB, C6, 8E, FF, FB, C6, 8E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateThread + 2E 77F57394 15 Bytes [ FB, C6, 8E, FF, FB, C6, 8E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateThread + 3E 77F573A4 11 Bytes [ FB, C6, 8E, FF, FB, C6, 8E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateThread + 4A 77F573B0 11 Bytes [ FB, C6, 8E, FF, FB, C6, 8E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegCreateUSKeyW + 2 77F57649 27 Bytes [ D7, A8, FF, FF, CC, 99, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegCreateUSKeyW + 1E 77F57665 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegCreateUSKeyW + 21 77F57668 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegCreateUSKeyW + 42 77F57689 6 Bytes [ D1, A0, FF, FF, D1, A0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegCreateUSKeyW + 4A 77F57691 2 Bytes [ D1, A0 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegCreateUSKeyA + 2 77F576B1 34 Bytes [ D1, A0, FF, FF, D1, A0, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegCreateUSKeyA + 25 77F576D4 31 Bytes [ FF, FE, DD, FF, FF, FF, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegCreateUSKeyA + 45 77F576F4 11 Bytes [ 00, 99, 00, FF, 00, 99, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegCreateUSKeyA + 51 77F57700 4 Bytes [ FF, F8, D4, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegCreateUSKeyA + 56 77F57705 6 Bytes [ E3, B8, FF, FF, D2, A2 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSetThreadRef + 2 77F57C48 3 Bytes [ FF, F2, CD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSetThreadRef + 6 77F57C4C 8 Bytes [ FF, F2, CD, FF, FF, F2, CD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSetThreadRef + F 77F57C55 17 Bytes [ F9, D6, FF, 00, 00, 00, 92, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSetThreadRef + 21 77F57C67 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSetThreadRef + 26 77F57C6C 32 Bytes [ 00, 00, 00, 00, DD, B3, 87, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateThreadRef + D 77F57C8D 46 Bytes [ F6, D1, FF, FF, F6, D1, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateThreadRef + 3C 77F57CBC 12 Bytes [ FF, F6, D1, FF, FF, F6, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateThreadRef + 49 77F57CC9 46 Bytes [ F6, D1, FF, FF, F5, D1, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateThreadRef + 78 77F57CF8 12 Bytes [ 10, 9F, 10, FF, 80, CC, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateThreadRef + 85 77F57D05 32 Bytes [ F4, CF, FF, FF, F6, D1, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteKeyA + 22 77F584F3 172 Bytes [ 28, 0E, 03, 03, 0E, 84, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteKeyA + CF 77F585A0 14 Bytes [ 04, 19, 04, 38, 00, 06, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteKeyA + DE 77F585AF 166 Bytes [ 34, 0A, 0A, 79, 16, 16, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteKeyA + 187 77F58658 34 Bytes [ 3F, 3F, 13, 3F, 13, 13, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteKeyA + 1AA 77F5867B 22 Bytes [ 29, 05, 27, 08, 1E, 00, 05, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindOnPathW + 6 77F586A5 89 Bytes [ 74, 74, 3A, 08, 3A, 13, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindOnPathW + 60 77F586FF 116 Bytes [ 0E, 0E, 03, 03, 03, 06, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindOnPathW + D5 77F58774 86 Bytes [ 6B, 39, 39, 00, 04, 90, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindOnPathW + 12C 77F587CB 83 Bytes [ 13, 08, 3A, 13, 3F, 3F, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindOnPathW + 180 77F5881F 32 Bytes [ 06, 03, 84, 0E, 0E, 03, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetUSValueW + 3B 77F58A86 184 Bytes [ 1B, 1B, 05, F0, 00, 09, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!ColorRGBToHLS + A9 77F58B40 27 Bytes [ 42, 39, 28, 28, 04, 19, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!ColorHLSToRGB + 1A 77F58B5C 260 Bytes [ 04, B1, 00, 05, C8, AA, AA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!ColorHLSToRGB + 11F 77F58C61 94 Bytes [ 09, 90, 90, 39, 6B, 28, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!ColorHLSToRGB + 17E 77F58CC0 4 Bytes [ 04, 17, 04, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!ColorHLSToRGB + 183 77F58CC5 306 Bytes [ 09, 17, 17, 0C, 17, 0C, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!ColorHLSToRGB + 2B6 77F58DF8 101 Bytes [ 04, 17, 00, 04, 1B, F0, 17, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsUNCA + 37 77F58F2C 18 Bytes [ 03, 00, 04, 0E, 00, 11, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsUNCA + 4A 77F58F3F 193 Bytes [ EC, EC, 1D, 43, 00, 04, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCanonicalizeA + 56 77F59001 62 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCanonicalizeA + 95 77F59040 100 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCanonicalizeA + FA 77F590A5 2 Bytes [ 04, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCanonicalizeA + FD 77F590A8 349 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCombineA + 106 77F59206 69 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsRelativeA + 2B 77F5924C 318 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsRelativeA + 16A 77F5938B 171 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsRelativeA + 216 77F59437 174 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsRelativeA + 2C5 77F594E6 456 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsRelativeA + 48E 77F596AF 690 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamOnFileEx + 26 77F5A18C 5 Bytes [ 00, 8B, 00, FF, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamOnFileEx + 2C 77F5A192 44 Bytes [ 00, FF, 00, 8A, 00, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamOnFileEx + 59 77F5A1BF 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamOnFileEx + 62 77F5A1C8 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamOnFileEx + 67 77F5A1CD 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringW + 34 77F5A782 33 Bytes [ 00, 01, 00, 00, 00, 08, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringW + 56 77F5A7A4 178 Bytes [ 53, EC, 7D, FF, 48, CF, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetUSValueA + 45 77F5A857 5 Bytes [ 02, 00, 00, 00, 23 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetUSValueA + 4B 77F5A85D 8 Bytes [ 00, 00, 6B, 00, 00, 00, 8F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetUSValueA + 54 77F5A866 106 Bytes [ 00, 8F, 04, 14, 06, 9B, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetUSValueA + BF 77F5A8D1 14 Bytes [ 00, 00, 69, 00, 00, 00, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetUSValueA + CE 77F5A8E0 7 Bytes [ 18, B1, 24, FF, 17, B0, 22 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrChrA + 1C 77F5A9AE 19 Bytes [ 00, 3B, 00, 00, 00, 0A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrChrA + 30 77F5A9C2 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrChrA + 36 77F5A9C8 11 Bytes [ 00, 00, 00, 00, 00, 8F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrChrA + 42 77F5A9D4 12 Bytes [ 00, 8D, 00, FF, 00, 8C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrChrA + 4F 77F5A9E1 6 Bytes [ 89, 00, FF, 00, 88, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathStripPathW + 1D 77F5AACA 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathStripPathW + 28 77F5AAD5 23 Bytes [ 68, 00, 32, 00, 68, 00, D2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathStripPathW + 40 77F5AAED 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathStripPathW + 4C 77F5AAF9 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathStripPathW + 61 77F5AB0E 335 Bytes [ 69, FF, 00, 00, 66, FF, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryW + 4E 77F5AE67 69 Bytes [ 03, 73, 73, 73, 73, 73, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryW + 94 77F5AEAD 60 Bytes [ 00, 00, 00, 00, 00, 38, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryW + D1 77F5AEEA 10 Bytes [ 08, 22, 22, 22, 22, 22, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryW + DC 77F5AEF5 73 Bytes [ 00, 00, 00, 00, 00, 00, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryW + 126 77F5AF3F 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStream2A + 11 77F5B055 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStream2A + 1C 77F5B060 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStream2A + 26 77F5B06A 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStream2A + 4C 77F5B090 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStream2A + 50 77F5B094 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetViewStatePropertyBag + 37 77F5B665 41 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetViewStatePropertyBag + 61 77F5B68F 26 Bytes [ 00, 6C, 3A, 9E, 7C, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetViewStatePropertyBag + 7C 77F5B6AA 23 Bytes [ 00, 40, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetViewStatePropertyBag + 94 77F5B6C2 1 Byte [ 1F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetViewStatePropertyBag + 96 77F5B6C4 32 Bytes [ 01, 00, 00, 00, 04, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToIntExW + 15 77F5BAD8 58 Bytes [ 9C, 72, 9F, 7C, 33, A1, B5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToInt64ExW + 23 77F5BB13 78 Bytes [ 00, 9C, 72, 9F, 7C, 43, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToInt64ExW + 72 77F5BB62 30 Bytes [ A3, 7C, 00, 00, 00, 00, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToInt64ExW + 91 77F5BB81 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToInt64ExW + AD 77F5BB9D 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToInt64ExW + B4 77F5BBA4 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStreamA + 1E 77F5BBFA 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStreamA + 22 77F5BBFE 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStreamA + 36 77F5BC12 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStreamA + 3D 77F5BC19 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStreamA + 44 77F5BC20 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRelativePathToW + 161 77F5C042 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRelativePathToW + 164 77F5C045 2 Bytes [ 02, 3B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRelativePathToW + 167 77F5C048 60 Bytes [ 0A, 12, 00, 17, 4B, 72, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRelativePathToW + 1A4 77F5C085 35 Bytes [ 00, 00, 02, 3B, 00, 0A, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRelativePathToW + 1C8 77F5C0A9 275 Bytes [ 17, 4E, 77, 76, 03, 75, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetCharTypeW + 17 77F5C1BD 27 Bytes [ 17, 21, 61, 53, 52, 51, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetCharTypeW + 33 77F5C1D9 33 Bytes [ 02, 45, 00, 0A, 12, 00, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetCharTypeW + 55 77F5C1FB 16 Bytes [ 02, 45, 00, 0A, 12, 00, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetCharTypeW + 67 77F5C20D 4 Bytes [ 04, 01, 43, 47 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetCharTypeW + 6C 77F5C212 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHLockShared + 37 77F5C27E 154 Bytes [ 0A, 12, 00, 0B, 28, 66, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteValueW + 18 77F5C319 88 Bytes [ 53, 52, 51, 51, 51, 50, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteValueW + 71 77F5C372 158 Bytes [ 5E, 5D, 5C, 5C, 5A, 5B, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteValueW + 110 77F5C411 62 Bytes [ 17, 4B, 72, 6E, 6E, 6D, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteValueW + 14F 77F5C450 21 Bytes [ 0A, 12, 00, 03, 4D, 74, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteValueW + 165 77F5C466 39 Bytes [ 00, 00, 00, 02, 45, 00, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFormatByteSizeW + 23 77F5C48E 36 Bytes [ 0A, 12, 00, 17, 4E, 77, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFormatByteSizeW + 48 77F5C4B3 24 Bytes [ 03, 53, 79, 78, 00, 04, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFormatByteSizeW + 61 77F5C4CC 36 Bytes [ 00, 00, 00, 02, 45, 00, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFormatByteSizeW + 86 77F5C4F1 3 Bytes [ 00, 0A, 12 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFormatByteSizeW + 8A 77F5C4F5 108 Bytes [ 14, 58, 7A, 7A, 7A, 79, 79, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCreateFromPathW + 22 77F5D394 7 Bytes [ FF, FF, 89, 63, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCreateFromPathW + 2A 77F5D39C 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCreateFromPathW + 2C 77F5D39E 15 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCreateFromPathW + 3C 77F5D3AE 67 Bytes [ FF, FF, FC, FB, FD, 41, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCreateFromPathW + 80 77F5D3F2 17 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsNoHistoryW + F 77F5D439 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsNoHistoryW + 1A 77F5D444 47 Bytes [ FE, E7, EA, F7, CF, D8, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetBoolUSValueA + 26 77F5D475 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetBoolUSValueA + 30 77F5D47F 27 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetBoolUSValueA + 4C 77F5D49B 13 Bytes [ DA, DE, F4, DB, DD, EF, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetBoolUSValueA + 5B 77F5D4AA 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetBoolUSValueA + 62 77F5D4B1 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumValueW + 2 77F5D513 49 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumValueW + 35 77F5D546 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumValueW + 3B 77F5D54C 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumValueW + 41 77F5D552 13 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumValueW + 4F 77F5D560 12 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHAutoComplete + 2 77F5D601 30 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHAutoComplete + 21 77F5D620 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHAutoComplete + 2B 77F5D62A 38 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHAutoComplete + 52 77F5D651 15 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHAutoComplete + 62 77F5D661 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCreateFromUrlW + 2 77F5EF37 29 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCreateFromUrlW + 22 77F5EF57 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCreateFromUrlW + 2A 77F5EF5F 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCreateFromUrlW + 2C 77F5EF61 15 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCreateFromUrlW + 3C 77F5EF71 5 Bytes [ FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlUnescapeW + 2 77F5F4BE 40 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlUnescapeW + 2B 77F5F4E7 18 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlUnescapeW + 40 77F5F4FC 25 Bytes [ FF, 1B, 09, 05, 05, 05, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlUnescapeW + 5A 77F5F516 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlUnescapeW + 5D 77F5F519 4 Bytes [ FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCanonicalizeW + 36 77F5F637 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCanonicalizeW + 40 77F5F641 37 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCanonicalizeW + 66 77F5F667 17 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCanonicalizeW + 7A 77F5F67B 24 Bytes [ FF, FF, 22, 09, 05, 05, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCanonicalizeW + 93 77F5F694 3 Bytes [ FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCombineW + 2 77F5F70B 38 Bytes [ FF, FF, 26, 0B, 06, 05, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCombineW + 29 77F5F732 37 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCombineW + 50 77F5F759 12 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCombineW + 5E 77F5F767 28 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCombineW + 7C 77F5F785 4 Bytes [ FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFormatKBSizeW + B 77F5FC4C 23 Bytes [ D9, D9, D9, 00, D7, D7, D7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFormatKBSizeW + 23 77F5FC64 35 Bytes [ CD, CD, CD, 00, CA, CA, CA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFormatKBSizeW + 47 77F5FC88 11 Bytes [ BA, BA, BA, 00, B9, B9, B9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFormatKBSizeW + 53 77F5FC94 43 Bytes [ B3, B3, B3, 00, B1, B1, B1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFormatKBSizeW + 7F 77F5FCC0 15 Bytes [ 98, 98, 98, 00, 97, 97, 97, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSkipJunction + 2 77F60162 53 Bytes [ 28, 64, FC, 1C, 4E, E4, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSkipJunction + 38 77F60198 84 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSkipJunction + 8D 77F601ED 31 Bytes [ 1F, 52, EB, 59, 75, D7, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSkipJunction + AE 77F6020E 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHSkipJunction + B8 77F60218 15 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpNA + 36 77F60A5B 32 Bytes [ FC, E7, D3, FC, BF, 79, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpNA + 57 77F60A7C 21 Bytes [ 2B, D9, FF, 2B, D9, FF, 2C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpNA + 6E 77F60A93 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpNA + 70 77F60A95 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpNA + 75 77F60A9A 541 Bytes CALL 75F60A9E .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakePrettyW + 6C 77F60CB8 9 Bytes [ FF, FF, CE, 85, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakePrettyW + 77 77F60CC3 24 Bytes [ FF, FF, FF, FF, FF, 6F, A7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakePrettyW + 90 77F60CDC 3 Bytes [ F6, 29, 68 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakePrettyW + 94 77F60CE0 34 Bytes [ 83, A2, F1, 6F, D7, A2, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakePrettyW + B7 77F60D03 42 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindExtensionA + 2 77F60F70 162 Bytes [ FD, FC, FB, D7, BE, AB, B1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSearchAndQualifyW + 61 77F61014 6 Bytes [ 00, 00, 08, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrPBrkW + 2 77F6101B 29 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrPBrkW + 20 77F61039 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrPBrkW + 26 77F6103F 72 Bytes [ FF, FF, 70, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrPBrkW + 6F 77F61088 4 Bytes [ FF, 70, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrPBrkW + 75 77F6108E 109 Bytes [ 08, FF, FF, 88, 88, 88, 88, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsSystemFolderA + 10 77F613F8 4 Bytes [ 00, 0F, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsSystemFolderA + 15 77F613FD 25 Bytes [ 00, 00, 00, 00, 0F, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsSystemFolderA + 31 77F61419 15 Bytes [ 0F, 00, 00, F8, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsSystemFolderA + 42 77F6142A 28 Bytes [ 00, 00, F8, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsSystemFolderA + 5F 77F61447 52 Bytes [ 00, 00, 0F, 00, 00, F8, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrNCatA + 31 77F615C0 50 Bytes [ 08, 08, 08, 00, 0C, 0C, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrNCatA + 64 77F615F3 36 Bytes [ 00, 93, 00, D6, 00, FF, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrNCatA + 8A 77F61619 21 Bytes [ 33, 00, 00, 00, 33, 33, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrNCatA + A0 77F6162F 36 Bytes [ 00, 00, 66, 00, 00, 00, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrNCatA + C6 77F61655 9 Bytes [ 99, 99, 00, 00, 99, CC, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlEscapeW + 2 77F619F7 31 Bytes [ EC, FF, 01, F9, FF, FC, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlEscapeW + 22 77F61A17 7 Bytes [ EC, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlEscapeW + 2A 77F61A1F 23 Bytes [ 1B, 0B, FF, 12, 00, 00, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlEscapeW + 42 77F61A37 34 Bytes [ EC, 85, 59, 85, 85, 85, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlEscapeW + 67 77F61A5C 17 Bytes [ FF, FF, FF, 92, 12, 12, 12, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetLocationA + 1C 77F61E99 18 Bytes [ 66, FF, 00, FF, FF, 66, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetLocationA + 2F 77F61EAC 52 Bytes [ 86, 86, 86, 00, 96, 96, 96, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetLocationA + 65 77F61EE2 10 Bytes [ FF, 00, 00, FF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetLocationA + 70 77F61EED 89 Bytes [ 00, 00, 00, FF, 00, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetLocationA + CA 77F61F47 12 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetLocationW + 25 77F6258C 13 Bytes CALL 65EF2672 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetLocationW + 33 77F6259A 9 Bytes [ E2, 00, 3D, B0, E4, 00, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetLocationW + 3D 77F625A4 41 Bytes [ FF, FF, E5, 00, FF, FF, E6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetLocationW + 67 77F625CE 15 Bytes [ EB, 00, FF, FF, EC, 00, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetLocationW + 77 77F625DE 31 Bytes [ EE, 00, FF, FF, EF, 00, 62, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpCA + 2 77F62E20 34 Bytes [ FF, FF, F1, FF, FC, FC, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpCA + 25 77F62E43 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpCA + 35 77F62E53 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpCA + 3C 77F62E5A 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCmpCA + 62 77F62E80 68 Bytes [ FF, FF, D3, FF, FF, FF, D5, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCreateFromUrlA + 27 77F62F5C 17 Bytes [ FF, FF, DF, FF, FF, FF, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCreateFromUrlA + 39 77F62F6E 19 Bytes [ E4, FF, FF, FF, E5, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCreateFromUrlA + 4D 77F62F82 5 Bytes [ EB, FF, FF, FF, EC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCreateFromUrlA + 53 77F62F88 3 Bytes [ FF, FF, EE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCreateFromUrlA + 59 77F62F8E 9 Bytes [ EF, FF, FF, FF, F0, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsContentTypeW + A4 77F63105 28 Bytes [ 75, 5A, 38, 38, 38, 38, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsContentTypeW + C2 77F63123 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsContentTypeW + C7 77F63128 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsContentTypeW + D0 77F63131 88 Bytes [ FF, FF, FF, FF, FF, 75, 5A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsContentTypeW + 12B 77F6318C 36 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsOpaqueW + 8 77F631DA 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsOpaqueW + F 77F631E1 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsOpaqueW + 19 77F631EB 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsOpaqueW + 20 77F631F2 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsOpaqueW + 27 77F631F9 18 Bytes [ FF, 75, 75, 75, 75, 75, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCatBuffA + 2 77F6324E 25 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCatBuffA + 1C 77F63268 11 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCatBuffA + 28 77F63274 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCatBuffA + 2B 77F63277 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCatBuffA + 2F 77F6327B 18 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsUNCServerA + 10 77F635C9 20 Bytes [ 1F, 1F, 1F, 1F, 1F, B7, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsUNCServerA + 25 77F635DE 568 Bytes [ 77, 78, 01, F1, F1, F1, F1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!HashData + 15 77F63817 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!HashData + 18 77F6381A 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!HashData + 1B 77F6381D 102 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!HashData + 82 77F63884 233 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!HashData + 16C 77F6396E 40 Bytes [ 00, 00, 00, 00, 7F, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCompareW + B 77F63998 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCompareW + 25 77F639B2 6 Bytes [ FF, FF, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCompareW + 2D 77F639BA 16 Bytes [ FF, FF, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCompareW + 3F 77F639CC 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCompareW + 46 77F639D3 19 Bytes [ FF, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetInverseCMAP + B 77F6423F 1415 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetInverseCMAP + 593 77F647C7 7 Bytes [ FD, 2D, D5, FF, 49, C8, EC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetInverseCMAP + 59C 77F647D0 90 Bytes [ FE, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetInverseCMAP + 5F7 77F6482B 348 Bytes [ 61, FF, C2, 79, FF, BD, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHGetInverseCMAP + 754 77F64988 78 Bytes [ EB, B5, BB, DA, D9, C9, C8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!ChrCmpIA + 1C 77F6C411 3 Bytes [ 03, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!ChrCmpIA + 20 77F6C415 19 Bytes [ 00, 00, 00, 00, 03, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!ChrCmpIA + 34 77F6C429 10 Bytes [ 07, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!ChrCmpIA + 3F 77F6C434 38 Bytes [ 00, 00, 00, 00, 00, 0F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrChrIA + 1F 77F6C45C 7 Bytes [ 00, 00, 00, 00, 00, FF, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrChrIA + 27 77F6C464 13 Bytes [ 00, 00, 00, 00, 03, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrChrIA + 35 77F6C472 36 Bytes [ 00, 00, 00, 00, 00, 00, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrStrIA + 9 77F6C497 34 Bytes [ 00, 0F, FF, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrStrIA + 2C 77F6C4BA 7 Bytes [ 00, 00, 00, 00, 00, 00, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrStrIA + 34 77F6C4C2 14 Bytes [ 00, 00, 00, 00, 00, 01, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrStrIA + 43 77F6C4D1 17 Bytes [ FF, 00, 00, 00, 00, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrStrIA + 55 77F6C4E3 18 Bytes [ 00, 40, 00, 00, 00, 01, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!GetAcceptLanguagesW + 2 77F6CAB4 31 Bytes [ FF, FF, D3, FF, FF, FF, E3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!GetAcceptLanguagesW + 22 77F6CAD4 8 Bytes [ FF, D2, A0, FF, FF, DF, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!GetAcceptLanguagesW + 2B 77F6CADD 36 Bytes [ DD, AB, FF, FF, D7, A4, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!GetAcceptLanguagesW + 50 77F6CB02 17 Bytes [ 00, 0C, C0, 8E, 79, FF, ED, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!GetAcceptLanguagesW + 62 77F6CB14 34 Bytes [ FF, DE, BE, FF, FF, DE, BC, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrNCatW + 20 77F6CD35 5 Bytes [ F9, F2, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrNCatW + 26 77F6CD3B 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrNCatW + 2E 77F6CD43 60 Bytes [ FF, FF, FF, FD, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrNCatW + 6B 77F6CD80 64 Bytes [ 00, 00, 00, 00, D8, A5, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrNCatW + AC 77F6CDC1 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrDupA + 8 77F6CE8C 51 Bytes [ FF, FE, FD, FF, FF, F0, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrDupA + 3C 77F6CEC0 15 Bytes [ F9, DC, BF, FF, FF, F3, E6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrDupA + 4C 77F6CED0 48 Bytes [ A5, D1, F9, FF, FF, F5, D5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUndecorateW + 2D 77F6CF02 14 Bytes [ 00, 00, E5, B1, 8B, FF, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUndecorateW + 3C 77F6CF11 27 Bytes [ CC, 99, FF, FF, CC, 99, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUndecorateW + 58 77F6CF2D 68 Bytes [ CC, 99, FF, D9, B9, 99, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUndecorateW + 9E 77F6CF73 1 Byte [ 07 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUndecorateW + A0 77F6CF75 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!ColorAdjustLuma + 2 77F81246 33 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!ColorAdjustLuma + 24 77F81268 42 Bytes [ 9E, E4, 6D, 98, E4, 40, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!ColorAdjustLuma + 4F 77F81293 59 Bytes [ 80, 39, CE, 86, 38, CF, 86, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!ColorAdjustLuma + 8B 77F812CF 91 Bytes [ 4A, 96, FF, 43, 93, FF, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!ColorAdjustLuma + E7 77F8132B 5 Bytes [ FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteValueA + 2 77F81573 12 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteValueA + F 77F81580 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteValueA + 12 77F81583 87 Bytes [ FF, EF, F0, F8, 2A, 61, F9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCopyKeyA + 28 77F815DC 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCopyKeyA + 2E 77F815E2 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCopyKeyA + 36 77F815EA 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCopyKeyA + 40 77F815F4 18 Bytes [ FF, FF, FF, FF, FE, FE, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCopyKeyA + 53 77F81607 36 Bytes [ 41, 90, FF, 46, 95, FF, 4B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCopyKeyW + 2 77F8181C 46 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCopyKeyW + 32 77F8184C 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCopyKeyW + 35 77F8184F 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCopyKeyW + 39 77F81853 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCopyKeyW + 43 77F8185D 13 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteEmptyKeyA + 2 77F81897 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteEmptyKeyA + B 77F818A0 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteEmptyKeyW + 2 77F818A7 31 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteEmptyKeyW + 23 77F818C8 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteEmptyKeyW + 26 77F818CB 11 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteEmptyKeyW + 32 77F818D7 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHDeleteEmptyKeyW + 3C 77F818E1 13 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumKeyExA + 2 77F8190B 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumKeyExA + C 77F81915 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumKeyExA + F 77F81918 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumKeyExA + 12 77F8191B 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumKeyExA + 15 77F8191E 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumValueA + 2 77F81931 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumValueA + 6 77F81935 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumValueA + 9 77F81938 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumValueA + C 77F8193B 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHEnumValueA + 11 77F81940 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryInfoKeyA + 2 77F8195C 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryInfoKeyA + B 77F81965 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryInfoKeyA + E 77F81968 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryInfoKeyA + 12 77F8196C 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHQueryInfoKeyA + 15 77F8196F 5 Bytes [ FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteUSValueA + 2 77F81A59 51 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteUSValueA + 36 77F81A8D 43 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteUSValueA + 62 77F81AB9 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteUSValueA + 69 77F81AC0 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteUSValueA + 6D 77F81AC4 28 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteUSValueW + 2 77F81B02 31 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteUSValueW + 23 77F81B23 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteUSValueW + 26 77F81B26 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteUSValueW + 30 77F81B30 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteUSValueW + 3A 77F81B3A 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteEmptyUSKeyA + 2 77F81B65 50 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteEmptyUSKeyA + 35 77F81B98 37 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteEmptyUSKeyA + 5B 77F81BBE 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteEmptyUSKeyA + 62 77F81BC5 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteEmptyUSKeyA + 6A 77F81BCD 28 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteEmptyUSKeyW + 23 77F81C2D 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteEmptyUSKeyW + 26 77F81C30 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteEmptyUSKeyW + 30 77F81C3A 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteEmptyUSKeyW + 3A 77F81C44 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegDeleteEmptyUSKeyW + 42 77F81C4C 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSKeyA + 2 77F81C6F 30 Bytes [ FF, FF, F8, F8, F8, B0, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSKeyA + 21 77F81C8E 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSKeyA + 2B 77F81C98 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSKeyA + 30 77F81C9D 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSKeyA + 35 77F81CA2 5 Bytes [ FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSValueA + 25 77F81D1C 9 Bytes [ FF, FF, FE, FE, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSValueA + 2F 77F81D26 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSValueA + 34 77F81D2B 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSValueA + 39 77F81D30 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSValueA + 3F 77F81D36 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSValueW + 2 77F81D99 66 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSValueW + 45 77F81DDC 2 Bytes [ 2D, D4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSValueW + 48 77F81DDF 2 Bytes [ 2C, D7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSValueW + 4B 77F81DE2 15 Bytes [ 2B, D9, FF, 2A, D4, FC, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegEnumUSValueW + 5C 77F81DF3 1 Byte [ FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryInfoUSKeyA + 2B 77F81E62 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryInfoUSKeyA + 30 77F81E67 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryInfoUSKeyA + 35 77F81E6C 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryInfoUSKeyA + 3B 77F81E72 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegQueryInfoUSKeyA + 3E 77F81E75 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetPathW + 11 77F81ED1 21 Bytes [ C1, E4, FE, FE, FE, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetPathW + 28 77F81EE8 9 Bytes [ FF, FF, FF, FF, FF, FF, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetPathW + 33 77F81EF3 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetPathW + 38 77F81EF8 10 Bytes [ FF, FE, FE, FD, D0, 9B, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetPathW + 43 77F81F03 76 Bytes [ C4, 7D, FF, BE, 75, FF, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetPathA + 2 77F81F50 47 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetPathA + 32 77F81F80 55 Bytes [ C4, 7C, FF, C5, 80, EF, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetPathA + 6A 77F81FB8 12 Bytes [ 2B, D7, FE, B4, D4, E4, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetPathA + 77 77F81FC5 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetPathA + 82 77F81FD0 10 Bytes [ FF, FF, FF, FF, FF, FF, D7, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegWriteUSValueA + 2B 77F82058 19 Bytes [ C7, A1, A0, CE, F7, F0, D4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegWriteUSValueA + 3F 77F8206C 11 Bytes [ F7, E7, CC, FF, D5, D0, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegWriteUSValueA + 4B 77F82078 127 Bytes [ 3F, 6C, A7, FF, 39, B6, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegWriteUSValueA + CB 77F820F8 29 Bytes [ 44, BB, EE, FF, 53, AB, CF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegWriteUSValueA + EB 77F82118 31 Bytes [ C7, A1, A0, CE, F7, F0, DD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetPathW + 13 77F822D4 2 Bytes [ 80, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetPathW + 16 77F822D7 24 Bytes [ 00, 80, 00, C9, 6C, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetPathW + 2F 77F822F0 51 Bytes [ 80, 00, 8E, FF, 80, 00, 99, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetPathW + 63 77F82324 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegGetPathW + 66 77F82327 71 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetUSValueA + 29 77F82708 2 Bytes [ 00, 07 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetUSValueA + 2C 77F8270B 26 Bytes [ FF, 00, 07, FF, FF, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetUSValueA + 47 77F82726 15 Bytes [ 00, 00, 30, 00, 00, 00, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetUSValueA + 57 77F82736 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegSetUSValueA + 5B 77F8273A 128 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrChrNW + 2E 77F8448A 165 Bytes [ 34, 00, 09, 04, 02, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrPBrkA + 3C 77F84530 10 Bytes [ 08, 00, 00, 00, 0C, 1D, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrPBrkA + 47 77F8453B 43 Bytes [ 00, 3C, 00, 07, 00, 19, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToInt64ExA + 24 77F84568 19 Bytes [ 01, 00, 00, 00, 0B, 00, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToInt64ExA + 38 77F8457C 33 Bytes [ 19, 00, 19, 80, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToInt64ExA + 5A 77F8459E 11 Bytes [ 08, 80, C0, 1D, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToInt64ExA + 66 77F845AA 19 Bytes [ 00, 00, 01, 00, 00, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToInt64ExA + 7A 77F845BE 44 Bytes [ 00, 00, 04, 00, 00, 00, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrToIntExA + 28 77F845EB 26 Bytes [ 00, 88, 1D, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrSpnA + 16 77F84606 49 Bytes [ 00, 00, C0, 00, 00, 00, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrSpnA + 48 77F84638 14 Bytes [ 01, 00, 00, 00, 38, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrSpnA + 57 77F84647 208 Bytes [ 00, 07, 00, 00, 00, F8, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCSpnIA + 1A 77F84718 441 Bytes [ 79, 6C, 65, 72, 65, 66, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IntlStrEqWorkerA + 85 77F848D2 156 Bytes [ 74, 28, 29, 3E, 0D, 0A, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrTrimA + 2F 77F8496F 21 Bytes [ 74, 3D, 62, 6F, 72, 64, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrTrimA + 45 77F84985 131 Bytes [ 74, 74, 6F, 6E, 20, 69, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRetToBSTR + 10 77F84A09 8 Bytes [ 74, 6F, 6E, 3E, 0D, 0A, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRetToBSTR + 19 77F84A12 464 Bytes [ 6C, 65, 6D, 65, 6E, 74, 3E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrChrNIW + 8 77F84BE3 31 Bytes [ 74, 28, 29, 3E, 0D, 0A, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrChrNIW + 28 77F84C03 135 Bytes [ 29, 20, 6C, 61, 79, 6F, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCSpnIW + 24 77F84C8B 2 Bytes [ 74, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrCSpnIW + 27 77F84C8E 804 Bytes [ 6E, 20, 69, 64, 3D, 61, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFormatByteSizeA + 3E 77F84FB3 46 Bytes [ 20, 69, 64, 3D, 61, 74, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRetToStrA + 11 77F84FE2 30 Bytes [ 6C, 69, 6E, 6B, 65, 6C, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRetToStrA + 30 77F85001 7 Bytes [ DA, CE, FF, FF, D8, C9, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRetToStrA + 38 77F85009 11 Bytes [ D6, C7, FF, FF, D5, C4, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRetToStrA + 44 77F85015 6 Bytes [ D2, BE, FF, FF, D0, BA ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrRetToStrA + 4B 77F8501C 22 Bytes [ FF, D1, AE, FF, FF, CE, AA, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFromTimeIntervalA + 1C 77F8522C 7 Bytes [ 00, 00, 00, 00, CC, 66, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFromTimeIntervalA + 24 77F85234 7 Bytes [ FF, FF, FF, FF, FF, FB, F6 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFromTimeIntervalA + 2C 77F8523C 3 Bytes [ FF, F8, F0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFromTimeIntervalA + 31 77F85241 10 Bytes [ F3, E7, FF, FF, F0, E2, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFromTimeIntervalA + 3D 77F8524D 2 Bytes JMP 5DF85225 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFromTimeIntervalW + 26 77F852A1 1 Byte [ 66 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFromTimeIntervalW + 28 77F852A3 20 Bytes [ 70, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFromTimeIntervalW + 3D 77F852B8 11 Bytes [ FF, D6, C7, FF, FF, D3, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFromTimeIntervalW + 49 77F852C4 23 Bytes [ A3, 77, 74, FF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!StrFromTimeIntervalW + 61 77F852DC 76 Bytes [ 01, 6B, 04, FF, 00, 66, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IsCharSpaceA + 18 77F86055 109 Bytes [ FF, FF, FF, A0, B7, F6, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IsCharSpaceA + 86 77F860C3 44 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IsCharSpaceA + B3 77F860F0 42 Bytes [ 8F, AC, ED, 92, DE, B5, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IsCharSpaceA + DE 77F8611B 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!IsCharSpaceA + E1 77F8611E 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveArgsA + 2 77F86FD8 78 Bytes [ 44, 93, FF, 41, 90, FF, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFileExistsA + 18 77F87027 6 Bytes [ FF, D8, FF, FF, FF, D8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFileExistsA + 1F 77F8702E 12 Bytes [ FF, FF, D8, FF, FF, FF, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFileExistsA + 2C 77F8703B 7 Bytes [ FF, D0, F2, F9, FF, 00, 92 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFileExistsA + 34 77F87043 45 Bytes [ FB, 03, 03, 03, 96, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFileExistsA + 62 77F87071 33 Bytes [ 00, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindSuffixArrayA + 18 77F87093 8 Bytes [ FF, 98, FE, FF, FF, 98, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindSuffixArrayA + 21 77F8709C 87 Bytes [ 98, FE, FF, FF, 98, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindSuffixArrayA + 79 77F870F4 2 Bytes [ 66, CC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindSuffixArrayA + 7C 77F870F7 29 Bytes [ FF, F3, FF, FF, FF, F3, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindSuffixArrayA + 9A 77F87115 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveExtensionA + 9 77F87127 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveExtensionA + 16 77F87134 4 Bytes [ 00, 00, 00, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveExtensionA + 1B 77F87139 10 Bytes [ 99, CC, FF, E2, F5, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveExtensionA + 26 77F87144 14 Bytes [ 99, FF, FF, FF, 99, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveExtensionA + 35 77F87153 125 Bytes [ FF, 99, FF, FF, FF, 99, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCommonPrefixA + 6C 77F871D3 48 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCommonPrefixA + 9D 77F87204 123 Bytes [ 99, FF, FF, FF, 99, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsPrefixA + 14 77F87280 36 Bytes [ 3F, B2, D9, FF, 02, 44, 5A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsPrefixA + 39 77F872A5 40 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveFileSpecA + 2 77F872CE 9 Bytes [ FF, FF, 99, FF, FF, FF, 99, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveFileSpecA + C 77F872D8 131 Bytes [ 99, FF, FF, FF, 99, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsFileSpecA + 12 77F8735C 122 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetDriveNumberA + 13 77F873D7 78 Bytes [ FF, D0, FC, FF, FF, C5, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetDriveNumberA + 62 77F87426 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetDriveNumberA + 6D 77F87431 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetDriveNumberA + 73 77F87437 39 Bytes [ 00, 00, 00, 00, 00, 00, 95, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSearchAndQualifyA + 23 77F8745F 6 Bytes [ FF, 99, FF, FF, FF, 99 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSearchAndQualifyA + 2A 77F87466 165 Bytes [ FF, FF, D3, FD, FF, FF, E6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsRootA + 53 77F8750C 10 Bytes [ FA, FD, FF, FF, E2, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsRootA + 5E 77F87517 42 Bytes [ FF, CA, FE, FF, FF, C3, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryA + B 77F87543 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryA + 1D 77F87555 5 Bytes [ 94, C6, 21, 00, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryA + 23 77F8755B 9 Bytes [ 44, 00, 8F, BE, 67, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryA + 2D 77F87565 11 Bytes [ 93, C4, B6, 00, 94, C5, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryA + 39 77F87571 16 Bytes [ 99, CC, FF, 00, 8C, BB, AD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnquoteSpacesA + 25 77F87673 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnquoteSpacesA + 39 77F87687 32 Bytes [ 01, 00, 94, C6, 42, 00, 8A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathQuoteSpacesA + 1C 77F876A8 14 Bytes [ 00, 95, C7, E4, 00, 53, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathQuoteSpacesA + 2B 77F876B7 24 Bytes [ 01, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathQuoteSpacesA + 44 77F876D0 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathQuoteSpacesA + 49 77F876D5 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathQuoteSpacesA + 4F 77F876DB 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindNextComponentA + 10 77F876F0 48 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindNextComponentA + 41 77F87721 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindNextComponentA + 5F 77F8773F 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindNextComponentA + 79 77F87759 33 Bytes [ 00, 00, 01, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindNextComponentA + 9D 77F8777D 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMatchSpecA + 11 77F87869 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMatchSpecA + 16 77F8786E 52 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMatchSpecA + 4B 77F878A3 100 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSkipRootA + 60 77F87908 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsSameRootA + 11 77F8791E 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsSameRootA + 1C 77F87929 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsSameRootA + 43 77F87950 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsURLA + C 77F87961 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsURLA + 20 77F87975 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsURLA + 32 77F87987 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsContentTypeA + B 77F87997 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsContentTypeA + 2E 77F879BA 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsContentTypeA + 4D 77F879D9 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsContentTypeA + 52 77F879DE 40 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsContentTypeA + 7B 77F87A07 104 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetCharTypeA + 64 77F87A70 59 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetCharTypeA + A2 77F87AAE 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetCharTypeA + B6 77F87AC2 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetCharTypeA + B9 77F87AC5 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathGetCharTypeA + C3 77F87ACF 63 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnmakeSystemFolderA + 10 77F87C0B 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnmakeSystemFolderA + 36 77F87C31 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnmakeSystemFolderA + 59 77F87C54 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsLFNFileSpecA + 1C 77F87C75 17 Bytes [ FF, FF, FF, FF, FF, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsLFNFileSpecA + 2E 77F87C87 8 Bytes [ FF, FF, FF, 00, 00, F8, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsLFNFileSpecA + 37 77F87C90 29 Bytes [ FF, FF, 00, 00, F8, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsLFNFileSpecA + 55 77F87CAE 11 Bytes [ 00, 00, 0F, FF, 00, 00, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUndecorateA + 2 77F87CBA 12 Bytes [ 00, 00, F8, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUndecorateA + 11 77F87CC9 142 Bytes [ 7F, 00, 00, F8, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUndecorateA + A0 77F87D58 21 Bytes [ 00, 1F, 00, 00, F0, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUndecorateA + B6 77F87D6E 33 Bytes [ 00, 00, 00, 1F, 00, 00, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUndecorateA + D8 77F87D90 20 Bytes [ 00, 7F, 00, 00, FC, 00, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakePrettyA + 83 77F880A0 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakePrettyA + 8B 77F880A8 12 Bytes [ FE, 00, 00, 00, FE, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakePrettyA + 98 77F880B5 102 Bytes [ 00, 00, 00, C0, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakePrettyA + FF 77F8811C 13 Bytes [ 28, 00, 00, 00, 10, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakePrettyA + 10D 77F8812A 1 Byte [ 08 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveBlanksA + 24 77F881DC 43 Bytes [ 59, 7F, 8D, 00, 38, 75, 8F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveBlanksA + 50 77F88208 7 Bytes [ 15, 7B, AE, 00, 17, 7D, B0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveBlanksA + 58 77F88210 43 Bytes [ 1A, 80, B3, 00, D9, CE, B3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveBackslashA + 27 77F8823C 43 Bytes [ 29, 8F, C2, 00, DA, D8, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRemoveBackslashA + 53 77F88268 129 Bytes [ 8F, CF, D3, 00, 5E, 70, D4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathStripPathA + 13 77F882EA 8 Bytes [ FF, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathStripPathA + 1D 77F882F4 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathStripPathA + 28 77F882FF 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryEmptyA + B 77F8830F 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryEmptyA + 1F 77F88323 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryEmptyA + 2F 77F88333 131 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryEmptyA + B3 77F883B7 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryEmptyA + C4 77F883C8 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathA + B 77F883D8 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathA + 2C 77F883F9 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathA + 32 77F883FF 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathA + 39 77F88406 67 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathA + 7E 77F8844B 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSetDlgItemPathA + B 77F88690 40 Bytes [ 01, 00, 20, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSetDlgItemPathA + 36 77F886BB 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSetDlgItemPathA + 3F 77F886C4 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSetDlgItemPathA + 46 77F886CB 56 Bytes [ 00, 00, 00, 00, 01, 33, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSetDlgItemPathA + 7F 77F88704 55 Bytes [ 33, 1A, 0D, 50, 33, 1A, 0D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakeSystemFolderA + 5D 77F8882F 60 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakeSystemFolderA + 9A 77F8886C 31 Bytes [ 99, 33, 00, FF, 99, 33, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakeSystemFolderA + BA 77F8888C 7 Bytes [ 99, 33, 00, FF, 99, 33, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakeSystemFolderA + C2 77F88894 26 Bytes [ 99, 33, 00, FF, 99, 33, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathMakeSystemFolderA + DD 77F888AF 2 Bytes [ FF, 99 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindOnPathA + 8 77F88EB0 35 Bytes [ D8, EA, EF, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAddExtensionA + 11 77F88ED4 87 Bytes [ D8, EA, EF, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathAddExtensionA + 69 77F88F2C 31 Bytes [ 23, 45, DB, FF, 4D, BC, B1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRelativePathToA + 2 77F88F4C 8 Bytes [ D8, EA, EF, FF, D4, 90, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRelativePathToA + B 77F88F55 26 Bytes [ 66, 00, FF, 2A, AA, 2A, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRelativePathToA + 26 77F88F70 107 Bytes [ D8, EA, EF, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRelativePathToA + 92 77F88FDC 7 Bytes [ D8, EA, EF, FF, D8, EA, EF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRelativePathToA + 9A 77F88FE4 46 Bytes [ 76, DF, F9, FF, 00, 4C, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathExA + 43 77F890FC 98 Bytes [ FF, EE, DD, FF, FF, EE, DD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathExA + A6 77F8915F 6 Bytes [ FF, 81, 1E, 00, 60, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathExA + AD 77F89166 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathExA + B2 77F8916B 15 Bytes [ 00, 00, 00, 00, 00, 81, 1E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathExA + C2 77F8917B 27 Bytes [ 40, 81, 1E, 00, AF, A6, 39, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnExpandEnvStringsA + 2 77F89439 3 Bytes [ F7, EF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnExpandEnvStringsA + 6 77F8943D 2 Bytes [ F7, EF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnExpandEnvStringsA + 9 77F89440 11 Bytes [ FF, F6, EA, FF, FF, EE, DD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnExpandEnvStringsA + 15 77F8944C 36 Bytes [ FF, E2, C5, FF, BD, 4B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnExpandEnvStringsA + 3A 77F89471 74 Bytes [ FF, FF, FF, 9F, 98, 92, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringA + 62 77F8FE3F 13 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringA + 71 77F8FE4E 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringA + 76 77F8FE53 148 Bytes [ 01, 37, B7, B7, B7, B7, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringA + 10B 77F8FEE8 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringA + 110 77F8FEED 30 Bytes [ F3, 01, 11, 11, 11, 11, 11, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringByKeyA + 2A 77F8FF42 9 Bytes [ 00, 00, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringByKeyA + 34 77F8FF4C 12 Bytes [ FF, FF, FF, FF, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringByKeyA + 42 77F8FF5A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringByKeyA + 44 77F8FF5C 24 Bytes [ FF, FF, FF, FF, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryStringByKeyA + 5F 77F8FF77 123 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryKeyA + 2D 77F9005A 4 Bytes [ 00, 00, 00, 8C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryKeyA + 32 77F9005F 7 Bytes [ FF, D5, F8, FF, FF, 7F, EA ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryKeyA + 3A 77F90067 4 Bytes [ FF, 7F, EA, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryKeyA + 3F 77F9006C 6 Bytes [ 7F, EA, FF, FF, 7F, EA ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!AssocQueryKeyA + 46 77F90073 4 Bytes [ FF, 7F, EA, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindSuffixArrayW + 6A 77F91007 8 Bytes [ FF, FF, FF, FF, 52, 4B, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathFindSuffixArrayW + 73 77F91010 24 Bytes [ 46, 4C, 2B, FF, FF, 4A, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathQuoteSpacesW + 2 77F91029 24 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathQuoteSpacesW + 1B 77F91042 65 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSkipRootW + 2 77F91084 16 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSkipRootW + 13 77F91095 31 Bytes [ 4C, 4B, 4B, FF, 07, 13, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSkipRootW + 33 77F910B5 52 Bytes [ FF, FF, FF, FF, 07, 13, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsSameRootW + B 77F910EA 14 Bytes [ FF, 13, 66, 66, FF, FF, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsSameRootW + 1A 77F910F9 12 Bytes [ 07, 13, 0A, EC, 07, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsSameRootW + 27 77F91106 36 Bytes [ FF, FF, FF, FF, FF, 4A, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsSameRootW + 4C 77F9112B 108 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsSameRootW + BA 77F91199 26 Bytes [ 07, 13, 0A, EC, 07, 07, 07, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsLFNFileSpecW + 58 77F912B2 82 Bytes [ EC, EC, EC, EC, EC, EC, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsLFNFileSpecW + AC 77F91306 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsLFNFileSpecW + B7 77F91311 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsLFNFileSpecW + C2 77F9131C 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsLFNFileSpecW + DD 77F91337 28 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRenameExtensionW + 36 77F91408 28 Bytes [ FF, EC, CC, 00, C6, D6, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathRenameExtensionW + 53 77F91425 14 Bytes [ 00, CC, 00, 00, 33, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryEmptyW + B 77F91435 18 Bytes [ 33, 99, 00, 00, 33, CC, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryEmptyW + 1F 77F91449 14 Bytes [ 66, 66, 00, 00, 66, 99, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryEmptyW + 2F 77F91459 52 Bytes [ 99, 00, 00, 00, 99, 33, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryEmptyW + 64 77F9148E 62 Bytes [ 99, 00, 00, FF, CC, 00, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathIsDirectoryEmptyW + A3 77F914CD 21 Bytes [ 66, 66, 00, 33, 66, 99, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathW + B 77F91500 10 Bytes [ 33, CC, 99, 00, 33, CC, CC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathW + 16 77F9150B 10 Bytes [ 00, 33, FF, 33, 00, 33, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathW + 21 77F91516 9 Bytes [ 99, 00, 33, FF, CC, 00, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathW + 2B 77F91520 5 Bytes [ 66, 00, 00, 00, 66 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathW + 31 77F91526 7 Bytes [ 33, 00, 66, 00, 66, 00, 66 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSetDlgItemPathW + 9F 77F91848 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSetDlgItemPathW + A4 77F9184D 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSetDlgItemPathW + A6 77F9184F 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSetDlgItemPathW + AA 77F91853 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathSetDlgItemPathW + B5 77F9185E 1 Byte [ FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathExW + F3 77F91BA5 41 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathExW + 11D 77F91BCF 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathExW + 120 77F91BD2 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathExW + 122 77F91BD4 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathCompactPathExW + 126 77F91BD8 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnExpandEnvStringsW + 4D 77F91E76 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnExpandEnvStringsW + 69 77F91E92 6 Bytes [ FF, FF, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnExpandEnvStringsW + 70 77F91E99 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnExpandEnvStringsW + 73 77F91E9C 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!PathUnExpandEnvStringsW + 8C 77F91EB5 58 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegisterValidateTemplate + 35 77F96112 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegisterValidateTemplate + 3B 77F96118 76 Bytes [ FF, FF, FF, FF, FF, FF, F5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegisterValidateTemplate + 89 77F96166 42 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegisterValidateTemplate + B6 77F96193 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHRegisterValidateTemplate + B9 77F96196 15 Bytes [ FF, F3, 4C, 4D, 4D, 53, 53, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHReleaseThreadRef + 4 77F96E2C 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHReleaseThreadRef + A 77F96E32 13 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHReleaseThreadRef + 18 77F96E40 32 Bytes [ FF, 6F, 4D, 53, 53, 53, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHReleaseThreadRef + 39 77F96E61 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHReleaseThreadRef + 3D 77F96E65 2 Bytes [ FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHIsLowMemoryMachine + 2 77F96E8B 19 Bytes [ FF, FF, FF, FF, FF, FF, F5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHIsLowMemoryMachine + 16 77F96E9F 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHIsLowMemoryMachine + 1D 77F96EA6 45 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHIsLowMemoryMachine + 4B 77F96ED4 28 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHIsLowMemoryMachine + 68 77F96EF1 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!GetAcceptLanguagesA + 62 77F9DE17 132 Bytes [ 0C, 17, 17, 05, F0, 00, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!GetAcceptLanguagesA + E7 77F9DE9C 266 Bytes [ 10, 00, 07, 02, 04, 25, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!GetAcceptLanguagesA + 1F2 77F9DFA7 109 Bytes [ 00, 0A, 2A, 00, 03, 27, 2A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!GetAcceptLanguagesA + 261 77F9E016 41 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!GetAcceptLanguagesA + 28C 77F9E041 35 Bytes [ FF, FF, FF, FF, FF, FF, 1A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCompareA + 2 77F9ED2F 48 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCompareA + 34 77F9ED61 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCompareA + 39 77F9ED66 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCompareA + 3F 77F9ED6C 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCompareA + 44 77F9ED71 5 Bytes [ FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlHashA + 2 77F9EE44 15 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlHashA + 12 77F9EE54 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlHashA + 15 77F9EE57 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlHashA + 18 77F9EE5A 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlHashA + 1B 77F9EE5D 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlHashW + 2 77F9EE7F 27 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlHashW + 1E 77F9EE9B 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlHashW + 28 77F9EEA5 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlHashW + 2A 77F9EEA7 8 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlHashW + 33 77F9EEB0 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlEscapeA + B 77F9F708 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlEscapeA + 2F 77F9F72C 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlEscapeA + 3A 77F9F737 64 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlEscapeA + 7B 77F9F778 57 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlEscapeA + B5 77F9F7B2 50 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetPartA + B 77F9F7F5 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetPartA + 2F 77F9F819 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetPartA + 37 77F9F821 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetPartA + 3F 77F9F829 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlGetPartA + 42 77F9F82C 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlUnescapeA + 38 77F9F928 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlUnescapeA + 4F 77F9F93F 44 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlUnescapeA + 7C 77F9F96C 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlUnescapeA + 8D 77F9F97D 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCreateFromPathA + B 77F9F98D 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCreateFromPathA + 2F 77F9F9B1 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCreateFromPathA + 3A 77F9F9BC 64 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCreateFromPathA + 7B 77F9F9FD 57 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlCreateFromPathA + B5 77F9FA37 50 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlApplySchemeA + B 77F9FA7A 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlApplySchemeA + 36 77F9FAA5 64 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlApplySchemeA + 77 77F9FAE6 50 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlApplySchemeA + AA 77F9FB19 43 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlApplySchemeA + D6 77F9FB45 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlApplySchemeW + B 77F9FB55 45 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlApplySchemeW + 39 77F9FB83 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlApplySchemeW + 52 77F9FB9C 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlApplySchemeW + 84 77F9FBCE 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlApplySchemeW + 8B 77F9FBD5 148 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsA + B 77F9FED4 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsA + 22 77F9FEEB 157 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsA + C0 77F9FF89 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsOpaqueA + 13 77F9FFA1 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsNoHistoryA + 13 77F9FFB9 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsNoHistoryA + 34 77F9FFDA 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsNoHistoryA + 3E 77F9FFE4 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsNoHistoryA + 46 77F9FFEC 33 Bytes [ 81, FF, FF, FF, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!UrlIsNoHistoryA + 68 77FA000E 12 Bytes [ BC, 78, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamOnFileA + 2 77FA01F3 33 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamOnFileA + 25 77FA0216 15 Bytes [ FF, FF, FF, FF, FF, FF, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamOnFileA + 36 77FA0227 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamOnFileA + 3C 77FA022D 8 Bytes [ FF, FB, FB, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamOnFileA + 45 77FA0236 31 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStreamW + 1E 77FA239C 17 Bytes [ 39, 19, D7, 00, 4D, 28, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStreamW + 30 77FA23AE 225 Bytes [ F0, 00, 2C, 00, E4, 00, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStreamW + 112 77FA2490 19 Bytes [ B9, 00, C6, 00, C9, 04, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStreamW + 126 77FA24A4 96 Bytes [ 7E, 43, 83, 00, C3, 01, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHOpenRegStreamW + 187 77FA2505 68 Bytes [ 4F, 8C, 00, C8, 22, B4, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!DllGetVersion + 10F 77FA5BB8 51 Bytes [ FF, FF, FF, FF, D4, EE, F5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!DllGetVersion + 143 77FA5BEC 113 Bytes [ 99, 99, 99, FF, 99, 99, 99, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!DllGetVersion + 1B5 77FA5C5E 37 Bytes [ 00, 00, 00, 00, 00, 00, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!DllGetVersion + 1DB 77FA5C84 5 Bytes [ 00, 00, 00, 30, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!DllGetVersion + 1E1 77FA5C8A 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!DelayLoadFailureHook + A3 77FA6BF8 144 Bytes [ F9, 10, 47, E6, 15, 44, DA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!DelayLoadFailureHook + 134 77FA6C89 31 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!DelayLoadFailureHook + 155 77FA6CAA 11 Bytes [ FA, FF, FF, FE, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!DelayLoadFailureHook + 161 77FA6CB6 21 Bytes [ EF, C3, EC, D6, AB, E5, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!DelayLoadFailureHook + 178 77FA6CCD 7 Bytes [ FF, FF, FF, FF, FF, 74, 74 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamWrapper + 24 77FA7B0F 19 Bytes [ 00, D9, A8, 8A, FF, FB, FB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamWrapper + 38 77FA7B23 37 Bytes [ FF, 00, 99, 00, FF, 00, 99, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamWrapper + 5E 77FA7B49 17 Bytes [ 00, 00, 00, 4E, B4, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamWrapper + 70 77FA7B5B 24 Bytes [ FF, 5C, C2, FF, FF, 4D, B3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SHLWAPI.dll!SHCreateStreamWrapper + 89 77FA7B74 24 Bytes [ F8, F5, ED, FF, F6, F0, E6, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WdtpInterfacePointer_UserFree + FFEDCA04 774B1931 302 Bytes [ FF, FF, FF, FF, FF, FD, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WdtpInterfacePointer_UserFree + FFEDCB33 774B1A60 149 Bytes [ FF, A4, B6, EF, 5A, A7, 7B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WdtpInterfacePointer_UserFree + FFEDCBC9 774B1AF6 901 Bytes [ 81, 51, 8B, B5, 9B, E9, EE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WdtpInterfacePointer_UserFree + FFEDCF4F 774B1E7C 9 Bytes [ FF, FF, CB, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WdtpInterfacePointer_UserFree + FFEDCF59 774B1E86 245 Bytes [ D2, B0, 94, C5, 86, 4C, FC, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrDllCanUnloadNow + 6 774CCF2F 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrDllCanUnloadNow + 14 774CCF3D 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrDllCanUnloadNow + 28 774CCF51 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrDllCanUnloadNow + 37 774CCF60 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrDllCanUnloadNow + 3B 774CCF64 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoTaskMemFree + D 774CD039 70 Bytes [ BE, 4B, 07, B0, BF, 4B, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoTaskMemAlloc + 38 774CD080 136 Bytes [ F0, 9F, 67, 09, 00, 2A, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoTaskMemAlloc + C1 774CD109 303 Bytes [ 5C, 64, 09, 30, 5E, 64, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoTaskMemAlloc + 1F2 774CD23A 94 Bytes CALL 0F56370C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoTaskMemAlloc + 251 774CD299 19 Bytes [ F1, 64, 09, C8, F2, 64, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoTaskMemAlloc + 265 774CD2AD 207 Bytes [ F9, 64, 09, 50, FB, 64, 09, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsValidInterface + 67 774CD490 396 Bytes [ A8, 4C, 66, 09, 38, 4E, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsValidInterface + 1F4 774CD61D 124 Bytes [ E2, 66, 09, 40, E4, 66, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsValidInterface + 271 774CD69A 158 Bytes [ 00, 00, 10, 13, 67, 09, A8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsValidInterface + 310 774CD739 58 Bytes [ 51, 67, 09, 50, 53, 67, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsValidInterface + 34B 774CD774 213 Bytes [ F0, 67, 67, 09, 98, 69, 67, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetMalloc + 105 774CDDFD 147 Bytes [ 00, 00, 00, 70, D9, 6A, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StringFromGUID2 + 91 774CDE93 52 Bytes [ 00, F0, 11, 6B, 09, 98, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StringFromGUID2 + C6 774CDEC8 150 Bytes [ 08, 25, 6B, 09, C0, 26, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StringFromGUID2 + 15D 774CDF5F 5 Bytes [ 00, D0, 61, 6B, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StringFromGUID2 + 163 774CDF65 40 Bytes [ 63, 6B, 09, 40, 65, 6B, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StringFromGUID2 + 18C 774CDF8E 66 Bytes [ 00, 00, B0, 73, 6B, 09, 18, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateBindCtx + 2E 774CE568 100 Bytes CALL 774CE56C C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateBindCtx + 93 774CE5CD 25 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateBindCtx + AD 774CE5E7 40 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateBindCtx + D6 774CE610 28 Bytes [ 40, 87, FF, 2E, 70, FF, 26, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateBindCtx + F3 774CE62D 31 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoSetState + 24 774CEE0A 81 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUninitialize + 26 774CEE5C 9 Bytes [ 8C, CB, E3, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUninitialize + 31 774CEE67 12 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUninitialize + 3F 774CEE75 25 Bytes [ FF, FF, FF, FF, FF, CB, E3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUninitialize + 59 774CEE8F 115 Bytes [ C7, 7F, FF, C5, 7B, FE, D2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SetErrorInfo + 69 774CEF03 19 Bytes [ C4, 7D, FF, BE, 75, FF, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SetErrorInfo + 7D 774CEF17 52 Bytes [ BB, 7D, 46, AD, 70, 3D, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateGuid + 2B 774CEF4C 32 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitializeEx + 2 774CEF6D 68 Bytes [ FF, FF, FF, E0, BC, 9E, D4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitializeEx + 47 774CEFB2 12 Bytes [ 2C, D6, FF, 2B, D8, FF, 2B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitializeEx + 54 774CEFBF 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitializeEx + 59 774CEFC4 62 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitializeEx + 98 774CF003 7 Bytes [ FF, FF, FF, D4, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!RegisterDragDrop + 2 774CF61C 4 Bytes [ FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!RegisterDragDrop + 7 774CF621 5 Bytes [ FF, E2, F2, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!RegisterDragDrop + D 774CF627 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!RegisterDragDrop + 10 774CF62A 58 Bytes [ EF, DB, CA, DD, 9E, 5F, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!RegisterDragDrop + 4B 774CF665 77 Bytes [ FF, C3, 85, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleInitialize + 1A 774CF6F4 64 Bytes [ FF, FF, FF, FF, FF, AF, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleInitialize + 5C 774CF736 24 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleInitialize + 75 774CF74F 42 Bytes [ 28, 65, FF, 1F, 55, F3, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleInitialize + A0 774CF77A 6 Bytes [ FF, FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleInitialize + A7 774CF781 138 Bytes [ FE, FE, FE, 4C, 7D, FA, 47, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateInstanceEx + 2 774CFA6D 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateInstanceEx + 8 774CFA73 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateInstanceEx + B 774CFA76 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateInstanceEx + E 774CFA79 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateInstanceEx + 11 774CFA7C 23 Bytes [ F3, EC, E7, AB, CA, DE, 1B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateInstance + 27 774CFAEA 2 Bytes [ DA, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateInstance + 2A 774CFAED 8 Bytes [ FF, FF, EB, D1, BB, ED, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateInstance + 33 774CFAF6 49 Bytes [ C1, 79, FF, CC, 84, FD, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateInstance + 65 774CFB28 77 Bytes [ FF, FF, FF, FF, FF, FF, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateInstance + B3 774CFB76 63 Bytes [ FF, FE, FE, FE, DA, A3, 71, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitialize + 13 774D2A4A 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitialize + 2F 774D2A66 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitialize + 44 774D2A7B 16 Bytes [ 00, 00, 50, 01, 30, 00, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitialize + 55 774D2A8C 52 Bytes [ 05, A0, 13, FF, 03, 9E, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitialize + 8A 774D2AC1 14 Bytes [ 56, 03, CF, 04, 80, 11, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDisconnectObject + 15 774D2D12 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDisconnectObject + 1C 774D2D19 13 Bytes [ 07, AB, DF, 02, 16, BD, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDisconnectObject + 2C 774D2D29 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDisconnectObject + 39 774D2D36 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDisconnectObject + 5F 774D2D5C 73 Bytes [ 58, 25, 25, 8F, 4B, 1E, 1E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeAllLibraries + 1A 774D3AB1 96 Bytes [ 00, 75, 07, 8B, CF, E8, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeAllLibraries + 7B 774D3B12 181 Bytes [ 8B, 00, 03, 01, EB, 02, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeAllLibraries + 131 774D3BC8 88 Bytes [ C0, 89, 45, 08, 7C, 5F, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeAllLibraries + 18A 774D3C21 12 Bytes CALL 773F72CD C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeAllLibraries + 197 774D3C2E 12 Bytes [ 45, 08, 5F, 5E, 5B, C9, C2, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateStreamOnHGlobal + A 774D641A 51 Bytes [ 13, 08, 22, 5C, 5B, 08, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateStreamOnHGlobal + 3E 774D644E 19 Bytes [ 13, 08, 25, 5C, 5B, 08, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateStreamOnHGlobal + 52 774D6462 10 Bytes [ 13, 00, D2, FF, 5B, 08, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateStreamOnHGlobal + 5D 774D646D 6 Bytes [ 00, 19, 00, 00, 00, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateStreamOnHGlobal + 65 774D6475 165 Bytes [ FF, FF, FF, 00, 00, 4C, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorage + 10 774D794D 58 Bytes [ A8, A8, 00, E7, 98, 98, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorage + 4B 774D7988 108 Bytes JMP 754E1E31 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorage + B8 774D79F5 113 Bytes JMP AF897AE3 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorage + 12A 774D7A67 100 Bytes [ 00, 48, 8C, B2, 00, 29, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorage + 18F 774D7ACC 27 Bytes [ B4, B4, B4, 00, B2, B2, B2, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetRunningObjectTable + 29 774DC25D 63 Bytes [ C2, 0C, 00, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetRunningObjectTable + 69 774DC29D 24 Bytes [ 77, 56, 89, 35, 80, D7, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetRunningObjectTable + 82 774DC2B6 44 Bytes [ 6A, 07, A3, 84, D2, FA, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetRunningObjectTable + AF 774DC2E3 10 Bytes [ 35, 94, 14, F4, 77, A3, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetRunningObjectTable + BA 774DC2EE 6 Bytes [ D6, A3, 80, D6, FA, 77 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!DllGetClassObject + 23 774DC8CA 1 Byte [ 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!DllGetClassObject + 25 774DC8CC 11 Bytes [ 67, 00, 68, 00, 52, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!DllGetClassObject + 31 774DC8D8 11 Bytes [ 46, 00, 69, 00, 6C, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!DllGetClassObject + 3D 774DC8E4 7 Bytes [ 70, 00, 65, 00, 73, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!DllGetClassObject + 45 774DC8EC 6 Bytes [ 18, 00, 04, 00, 06, 18 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromString + 1C 774DCBB8 87 Bytes [ 00, 85, C0, 8D, 85, F4, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromString + 75 774DCC11 25 Bytes JMP 774EA0FB C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromString + 8F 774DCC2B 68 Bytes [ 83, 27, 00, 85, DB, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromString + D4 774DCC70 2 Bytes [ 60, EC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromString + DB 774DCC77 166 Bytes [ 84, A2, 00, 00, 00, 57, 68, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StringFromCLSID 774DD5D0 54 Bytes [ 53, 48, 47, 65, 74, 46, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StringFromCLSID + 38 774DD608 80 Bytes [ 53, 48, 47, 65, 74, 46, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StringFromCLSID + 89 774DD659 146 Bytes [ 90, 90, 90, 53, 48, 46, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StringFromCLSID + 11C 774DD6EC 15 Bytes [ 53, 48, 41, 70, 70, 42, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StringFromCLSID + 12C 774DD6FC 34 Bytes [ 46, 69, 6E, 64, 45, 78, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoReleaseMarshalData + 34 774DEA8F 29 Bytes [ 55, 8B, EC, 83, 7D, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoReleaseMarshalData + 52 774DEAAD 14 Bytes [ 85, C0, 75, 0A, 66, 83, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoReleaseMarshalData + 61 774DEABC 9 Bytes [ FF, 75, 08, FF, 75, 08, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoReleaseMarshalData + 6B 774DEAC6 50 Bytes [ FF, F7, D8, 1B, C0, F7, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoReleaseMarshalData + 9F 774DEAFA 3 Bytes [ 4B, 86, 01 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!DcomChannelSetHResult + 60 774DF71F 94 Bytes JMP 7AED6E73 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!DcomChannelSetHResult + BF 774DF77E 21 Bytes [ 61, 00, 6E, 00, 6E, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!DcomChannelSetHResult + D5 774DF794 21 Bytes [ 53, 00, 49, 00, 44, 00, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!DcomChannelSetHResult + EB 774DF7AA 77 Bytes [ 78, 00, 78, 00, 2D, 00, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!DcomChannelSetHResult + 139 774DF7F8 1 Byte [ 74 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetMarshalSizeMax + 2 774E0D21 22 Bytes [ FF, FF, FF, 5E, AC, E2, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetMarshalSizeMax + 19 774E0D38 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetMarshalSizeMax + 1C 774E0D3B 6 Bytes [ FF, E7, F3, FB, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetMarshalSizeMax + 23 774E0D42 25 Bytes [ FF, FF, 38, 98, DB, FF, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetMarshalSizeMax + 3D 774E0D5C 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUnmarshalInterface + 2 774E0E55 35 Bytes [ FF, FF, FF, FF, FF, FF, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUnmarshalInterface + 26 774E0E79 7 Bytes [ 00, D5, FF, 00, 00, D7, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUnmarshalInterface + 2E 774E0E81 7 Bytes [ 00, D9, FF, 00, 00, DA, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUnmarshalInterface + 36 774E0E89 14 Bytes [ 00, DA, FF, 00, 00, DA, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUnmarshalInterface + 45 774E0E98 14 Bytes [ 00, 00, DC, FF, 00, 00, DD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoImpersonateClient + 1C 774E2A4B 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoImpersonateClient + 25 774E2A54 128 Bytes [ 00, 0A, 0A, 0A, 0A, 0A, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoImpersonateClient + A6 774E2AD5 9 Bytes [ 00, EC, EC, EC, EC, EC, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoImpersonateClient + B0 774E2ADF 8 Bytes [ F0, 6D, 6D, 6D, 0A, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoImpersonateClient + BA 774E2AE9 47 Bytes [ 00, 00, EB, 6D, 6D, 6D, 6D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeUnusedLibraries + 29 774E33C2 91 Bytes CALL 02C5912E .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeUnusedLibraries + 85 774E341E 38 Bytes CALL 774B0603 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeUnusedLibraries + AC 774E3445 47 Bytes [ 77, 00, 8B, CE, 5E, E9, 98, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeUnusedLibraries + DD 774E3476 61 Bytes CALL 774E3A68 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeUnusedLibraries + 11B 774E34B4 6 Bytes JMP 774B52A7 C:\WINDOWS\system32\ole32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeUnusedLibrariesEx + 78 774E35C2 11 Bytes [ 55, 8B, EC, 51, 56, 57, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeUnusedLibrariesEx + 84 774E35CE 47 Bytes [ 00, 00, 8D, 45, FC, 50, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeUnusedLibrariesEx + B4 774E35FE 59 Bytes [ FF, EB, F2, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeUnusedLibrariesEx + F0 774E363A 226 Bytes [ FF, 80, 4E, 15, 01, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeUnusedLibrariesEx + 1D3 774E371D 39 Bytes CALL 774B0603 C:\WINDOWS\system32\ole32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoMarshalInterface + 10 774E429D 1 Byte [ 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoMarshalInterface + 12 774E429F 18 Bytes [ D6, 3D, 05, 00, 00, 80, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoMarshalInterface + 25 774E42B2 71 Bytes [ 00, 00, 5E, C9, C2, 10, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoMarshalInterface + 6D 774E42FA 25 Bytes [ C0, 74, 5C, 33, FF, 47, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoMarshalInterface + 87 774E4314 14 Bytes [ 74, 3A, 3D, 3D, 01, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReleaseStgMedium 774E4BED 3 Bytes [ 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReleaseStgMedium + 4 774E4BF1 2 Bytes [ FF, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReleaseStgMedium + 7 774E4BF4 188 Bytes [ EC, 51, 8D, 45, FC, 50, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReleaseStgMedium + C4 774E4CB1 77 Bytes [ 00, 3C, D7, 4B, 77, 89, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReleaseStgMedium + 112 774E4CFF 9 Bytes CALL 2BD4D606 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetObjectContext + 117 774E52DB 262 Bytes [ 90, 6D, 69, 78, 65, 72, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetObjectContext + 21E 774E53E2 23 Bytes [ 00, 00, 32, 73, FA, 77, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetObjectContext + 236 774E53FA 17 Bytes [ 00, 00, 94, 79, FA, 77, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetObjectContext + 248 774E540C 6 Bytes [ 68, 73, FA, 77, 0D, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetObjectContext + 24F 774E5413 25 Bytes [ 00, 5B, 73, FA, 77, 0E, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateFreeThreadedMarshaler + 19 774E5C83 24 Bytes [ 00, 34, 7E, FA, 77, 9D, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateFreeThreadedMarshaler + 32 774E5C9C 31 Bytes [ 40, 83, FA, 77, A5, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateFreeThreadedMarshaler + 52 774E5CBC 6 Bytes [ 10, 84, FA, 77, B0, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateFreeThreadedMarshaler + 59 774E5CC3 4 Bytes [ 00, 34, 7E, FA ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateFreeThreadedMarshaler + 5E 774E5CC8 10 Bytes [ B3, 00, 00, 00, A3, 71, FA, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetCallContext + 13 774E5D44 15 Bytes [ A0, 83, FA, 77, 8C, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetCallContext + 23 774E5D54 37 Bytes [ B4, 76, FA, 77, 8E, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetCallContext + 49 774E5D7A 80 Bytes [ 00, 00, 71, 83, FA, 77, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetClassObject + 1A 774E5DCC 30 Bytes [ 34, 7E, FA, 77, 0D, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetClassObject + 39 774E5DEB 24 Bytes [ 00, 3C, 7E, FA, 77, 11, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetClassObject + 52 774E5E04 14 Bytes [ E7, 70, FA, 77, 14, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetClassObject + 61 774E5E13 16 Bytes [ 00, 44, 56, FA, 77, 16, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetClassObject + 72 774E5E24 357 Bytes [ 29, 7C, FA, 77, 18, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterChannelHook + 15 774E7164 4 Bytes [ FF, A2, A2, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterChannelHook + 1A 774E7169 82 Bytes [ A2, A2, FF, FF, A2, A2, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterChannelHook + 6D 774E71BC 15 Bytes [ 00, 00, 00, 00, A4, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterChannelHook + 7D 774E71CC 12 Bytes [ D4, 9E, 8F, FF, FF, A2, A2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterChannelHook + 8A 774E71D9 65 Bytes [ A2, A2, FF, FF, A2, A2, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitializeSecurity + 71 774E748E 8 Bytes [ 00, 01, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitializeSecurity + 7B 774E7498 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitializeSecurity + 84 774E74A1 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitializeSecurity + 95 774E74B2 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitializeSecurity + 9D 774E74BA 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterClassObject + 71 774E8791 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterClassObject + 74 774E8794 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterClassObject + 8B 774E87AB 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterClassObject + 9E 774E87BE 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterClassObject + AD 774E87CD 22 Bytes [ 00, 00, 0B, C5, 8C, 8C, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryClientBlanket + 11 774EAA7F 385 Bytes [ 04, 90, 9D, AF, 04, 30, 9F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryClientBlanket + 193 774EAC01 153 Bytes [ 2D, B0, 04, 98, 2E, B0, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryClientBlanket + 22D 774EAC9B 45 Bytes [ 04, D8, C8, B0, 04, 70, CA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryClientBlanket + 25B 774EACC9 143 Bytes [ D9, B0, 04, A8, DA, B0, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryClientBlanket + 2EB 774EAD59 46 Bytes CALL F7535C3F .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetPSClsid + 3A 774EB556 286 Bytes [ 66, 00, 5F, 00, 00, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetPSClsid + 159 774EB675 286 Bytes [ 00, 00, 00, C0, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetPSClsid + 278 774EB794 36 Bytes [ 2B, 10, 48, 60, 02, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetPSClsid + 29D 774EB7B9 77 Bytes [ 00, 00, 68, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetPSClsid + 2EB 774EB807 8 Bytes [ 00, 00, 00, 08, 00, 04, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoSwitchCallContext + E 774F0335 105 Bytes [ 7C, 49, 07, 18, 7D, 49, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevertToSelf + 40 774F039F 53 Bytes [ 07, 08, 42, 45, 07, 98, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevertToSelf + 76 774F03D5 149 Bytes [ 54, 45, 07, A0, 55, 45, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevertToSelf + 10C 774F046B 47 Bytes [ 07, 40, 6E, 45, 07, D8, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevertToSelf + 13C 774F049B 293 Bytes [ 07, 10, 58, 4A, 07, 68, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevertToSelf + 262 774F05C1 67 Bytes [ BC, 4A, 07, 98, BD, 4A, 07, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!FreePropVariantArray + 97 774F0E5D 427 Bytes [ 5C, 4E, 07, 98, 5D, 4E, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!FreePropVariantArray + 244 774F100A 10 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!FreePropVariantArray + 24F 774F1015 71 Bytes [ FF, FF, FE, FB, FA, FF, D5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!FreePropVariantArray + 297 774F105D 247 Bytes [ FF, FF, FF, FF, FF, 74, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!FreePropVariantArray + 38F 774F1155 69 Bytes [ FF, FF, FF, FF, FF, FF, FD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInterceptorFromTypeInfo + 6E 774F1C42 44 Bytes [ 74, 74, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInterceptorFromTypeInfo + 9B 774F1C6F 31 Bytes [ FF, FF, FF, FF, FF, FF, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInterceptorFromTypeInfo + BB 774F1C8F 5 Bytes [ FF, FF, FF, 74, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInterceptorFromTypeInfo + C1 774F1C95 9 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInterceptorFromTypeInfo + CB 774F1C9F 27 Bytes [ FF, FF, FF, FF, E5, F0, FD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromProgID + 2 774F42CE 29 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromProgID + 20 774F42EC 4 Bytes [ 92, 64, 1E, D4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromProgID + 26 774F42F2 17 Bytes [ 00, 60, 00, 00, 00, 18, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromProgID + 38 774F4304 19 Bytes [ FB, BC, 60, FF, FB, BC, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromProgID + 4C 774F4318 39 Bytes [ FB, BC, 60, FF, FB, BC, 60, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromOle1Class + 5F 774F43F2 17 Bytes [ 00, 5B, 00, 00, 00, 16, F2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromOle1Class + 71 774F4404 32 Bytes [ FB, B9, 5B, FF, FB, BA, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromOle1Class + 92 774F4425 139 Bytes [ BC, 62, FF, F7, AE, 44, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromOle1Class + 11E 774F44B1 9 Bytes [ 00, 00, 0B, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromOle1Class + 128 774F44BB 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!MkParseDisplayName + 23 774F4754 149 Bytes [ 00, FB, 30, 30, 4C, 4C, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!MkParseDisplayName + B9 774F47EA 40 Bytes [ 00, 01, E0, 00, 00, 01, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!MkParseDisplayName + E2 774F4813 27 Bytes [ 01, E0, 00, 00, 01, E0, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!MkParseDisplayName + FE 774F482F 62 Bytes [ 01, 80, 00, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!MkParseDisplayName + 13D 774F486E 1 Byte [ 04 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetObject + C 774F4E6C 49 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetObject + 3E 774F4E9E 48 Bytes [ FF, FF, FF, FF, FB, FE, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetObject + 6F 774F4ECF 151 Bytes [ FF, FF, 10, 10, 10, 10, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetObject + 107 774F4F67 194 Bytes [ C3, A6, A6, A6, A6, A6, A6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetObject + 1CA 774F502A 1 Byte [ 72 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoResumeClassObjects + 2D 774F7509 7 Bytes [ 85, C0, 7C, 0B, FF, 75, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoResumeClassObjects + 35 774F7511 39 Bytes [ 15, A0, BA, 5D, 77, 8B, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoResumeClassObjects + 5D 774F7539 31 Bytes [ C0, 7C, 07, 5D, FF, 25, A4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoResumeClassObjects + 7D 774F7559 96 Bytes CALL 7748C83D C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoSuspendClassObjects + 53 774F75BA 172 Bytes [ FF, 15, AC, BA, 5D, 77, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoSuspendClassObjects + 100 774F7667 10 Bytes [ 85, C0, 7C, 14, FF, 75, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoSuspendClassObjects + 10B 774F7672 1 Byte [ 75 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoSuspendClassObjects + 10D 774F7674 76 Bytes [ FF, 75, 08, FF, 15, C0, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoSuspendClassObjects + 15A 774F76C1 122 Bytes [ 90, 90, 8B, FF, 55, 8B, EC, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryProxyBlanket + A 774F7CFE 25 Bytes [ C0, 89, 45, 0C, 7C, 04, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryProxyBlanket + 26 774F7D1A 13 Bytes [ 8B, 08, 50, FF, 51, 08, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryProxyBlanket + 34 774F7D28 54 Bytes [ FF, 00, 80, 8B, 45, 0C, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryProxyBlanket + 6B 774F7D5F 10 Bytes [ 06, 8D, 4D, 0C, 51, 68, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryProxyBlanket + 76 774F7D6A 71 Bytes [ FF, 10, 85, C0, 7C, 18, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropVariantClear + 2A 774F8BD4 2 Bytes [ 85, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropVariantClear + 2D 774F8BD7 3 Bytes [ 8C, 72, E6 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropVariantClear + 32 774F8BDC 41 Bytes [ 8B, 45, D0, FF, 75, E4, 8A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropVariantClear + 5C 774F8C06 19 Bytes [ 75, 08, FF, 75, 10, E8, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropVariantClear + 70 774F8C1A 94 Bytes JMP 774F718B C:\WINDOWS\system32\ole32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetErrorInfo + 1D 774F9B6C 1 Byte [ 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetErrorInfo + 1F 774F9B6E 24 Bytes CALL 774705E7 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetErrorInfo + 38 774F9B87 1 Byte [ 7D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetErrorInfo + 3A 774F9B89 59 Bytes [ 81, E7, 00, 02, 00, 00, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetErrorInfo + 76 774F9BC5 51 Bytes CALL 774705E6 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevokeClassObject + 1C 774F9CAE 64 Bytes CALL 774F9BD3 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevokeClassObject + 5D 774F9CEF 36 Bytes [ 08, 50, FF, 51, 04, 5F, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevokeClassObject + 82 774F9D14 33 Bytes [ FF, 15, 20, 12, 4B, 77, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevokeClassObject + A4 774F9D36 78 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevokeClassObject + F3 774F9D85 84 Bytes [ EC, 56, 8B, 75, 08, 57, 33, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadClassStm + 2 774FA32E 63 Bytes [ 15, 60, 14, F4, 77, EB, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadClassStm + 42 774FA36E 137 Bytes CALL 774FA2CD C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadClassStm + CC 774FA3F8 74 Bytes [ 00, 00, A1, 80, D2, FA, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadClassStm + 118 774FA444 22 Bytes [ B4, 68, 10, 36, FA, 77, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadClassStm + 12F 774FA45B 38 Bytes [ 53, 8D, 45, B0, 50, 53, 53, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateGenericComposite + 49 774FA554 25 Bytes [ FF, AB, AB, AB, AB, AB, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateGenericComposite + 63 774FA56E 52 Bytes [ FF, FF, 50, 6A, 14, 8D, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateGenericComposite + 98 774FA5A3 18 Bytes [ FF, 15, 88, 14, F4, 77, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateGenericComposite + AB 774FA5B6 11 Bytes [ 45, B4, 83, 7D, B4, 64, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateGenericComposite + B7 774FA5C2 6 Bytes [ FF, 75, AC, E8, 91, 58 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetTreatAsClass + 9 774FD216 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetTreatAsClass + 23 774FD230 11 Bytes [ 12, A1, D0, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetTreatAsClass + 2F 774FD23C 22 Bytes [ 7A, E0, FF, FF, 7A, E0, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetTreatAsClass + 46 774FD253 4 Bytes [ FF, 7A, E0, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetTreatAsClass + 4B 774FD258 23 Bytes [ 7A, E0, FF, FF, 7A, E0, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetComCatalog + 15 774FF02D 17 Bytes [ 89, 5D, 80, 89, 5D, 84, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetComCatalog + 27 774FF03F 12 Bytes [ 53, 68, 88, 01, 00, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetComCatalog + 34 774FF04C 19 Bytes [ 00, 83, F8, FF, 0F, 84, 97, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetComCatalog + 48 774FF060 77 Bytes CALL 7750BA4D C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetComCatalog + 97 774FF0AF 105 Bytes [ 14, FF, 75, B4, 68, 84, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetHGlobalFromStream + 2D 7750298C 19 Bytes [ 50, FA, 24, 00, F8, FB, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetHGlobalFromStream + 41 775029A0 92 Bytes [ D0, FF, 24, 00, 70, 12, A9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoTaskMemRealloc + 1F 775029FD 563 Bytes [ 31, A9, 04, 28, 33, A9, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!RevokeDragDrop + 202 77502C31 13 Bytes [ DE, 22, 00, 78, E0, 22, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!RevokeDragDrop + 211 77502C40 46 Bytes [ 58, E4, 22, 00, 00, E6, 22, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!RevokeDragDrop + 240 77502C6F 72 Bytes [ 00, 98, 7F, 24, 00, 38, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFileTimeNow + 44 77502CB8 152 Bytes [ 60, 9C, 24, 00, 10, 9E, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFileTimeNow + DE 77502D52 48 Bytes [ 00, 00, B8, 84, AA, 04, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFileTimeNow + 10F 77502D83 20 Bytes [ 00, 48, 98, AA, 04, 00, 9A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFileTimeNow + 124 77502D98 177 Bytes [ B8, A0, AA, 04, 70, A2, AA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFileTimeNow + 1D8 77502E4C 20 Bytes [ C8, E3, AA, 04, 70, E5, AA, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserFree + 5C 77502F24 111 Bytes [ 28, 35, AB, 04, C8, 36, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetClipboard + 59 77502F94 16 Bytes [ 98, 5E, AB, 04, 38, 60, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetClipboard + 6C 77502FA7 22 Bytes [ 00, 70, 65, AB, 04, 10, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetClipboard + 85 77502FC0 34 Bytes [ D0, 6D, AB, 04, 78, 6F, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetClipboard + A9 77502FE4 31 Bytes [ 80, 7B, AB, 04, 18, 7D, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetClipboard + C9 77503004 22 Bytes [ 28, 00, 00, 00, 30, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleUninitialize + 60 775033D3 53 Bytes [ FF, FF, FF, FF, FF, FF, F3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleUninitialize + 97 7750340A 41 Bytes [ F3, FB, 73, 08, 77, 47, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleUninitialize + C1 77503434 198 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleUninitialize + 188 775034FB 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleUninitialize + 18A 775034FD 5 Bytes [ 00, 00, 00, 00, 01 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleQueryLinkFromData + 15 77503537 23 Bytes [ 00, 00, 01, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleQueryLinkFromData + 2D 7750354F 25 Bytes [ 00, 00, 01, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleQueryCreateFromData + 15 77503569 9 Bytes [ 01, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleQueryCreateFromData + 21 77503575 7 Bytes [ 00, 00, 00, 00, 01, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleQueryCreateFromData + 29 7750357D 15 Bytes [ 00, 00, 00, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleQueryCreateFromData + 39 7750358D 14 Bytes [ 00, 00, 00, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleQueryCreateFromData + 49 7750359D 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoLockObjectExternal + 3D 77503D60 11 Bytes [ EC, D9, A6, 00, F3, E9, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoLockObjectExternal + 49 77503D6C 107 Bytes [ FF, F2, BF, 00, F3, F0, DE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoLockObjectExternal + B5 77503DD8 19 Bytes [ EE, FC, FE, 00, F7, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoLockObjectExternal + C9 77503DEC 59 Bytes [ C7, F4, FC, 00, C9, F5, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoLockObjectExternal + 105 77503E28 489 Bytes [ D1, F6, FD, 00, DE, F8, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateFileMoniker + 3A 77504012 14 Bytes [ 64, 00, 6C, 00, 6C, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateFileMoniker + 49 77504021 29 Bytes [ 8B, 07, 85, C0, 0F, 85, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateFileMoniker + 67 7750403F 33 Bytes [ B5, F0, FD, FF, FF, 8B, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateFileMoniker + 89 77504061 4 Bytes [ B5, F0, FD, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateFileMoniker + 8E 77504066 12 Bytes [ FF, B5, E4, FD, FF, FF, 68, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetCurrentProcess + D 7750469C 65 Bytes [ C7, 81, C6, F8, 7C, A2, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetCurrentProcess + 4F 775046DE 17 Bytes [ C6, 83, F0, FF, 03, DA, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetCurrentProcess + 61 775046F0 11 Bytes [ 2A, 43, 03, F8, C1, C7, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetCurrentProcess + 6D 775046FC 289 Bytes [ 03, FB, 8B, 69, 38, 0B, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetStandardMarshal + A 7750481E 46 Bytes [ 69, 2C, 0B, C3, 33, C2, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetStandardMarshal + 39 7750484D 33 Bytes [ F0, FF, 03, F7, 8B, 69, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetStandardMarshal + 5B 7750486F 61 Bytes [ 48, 04, 03, D1, 89, 18, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetStandardMarshal + 99 775048AD 41 Bytes JMP 774EFADC C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetStandardMarshal + C3 775048D7 2 Bytes [ F0, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgSetTimes + 6 775054C5 5 Bytes [ 50, FF, B5, 78, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgSetTimes + C 775054CB 6 Bytes [ FF, 89, 85, 6C, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgSetTimes + 13 775054D2 2 Bytes [ FF, D6 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgSetTimes + 16 775054D5 22 Bytes [ C0, 0F, 84, CF, FE, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgSetTimes + 2D 775054EC 2 Bytes [ B5, 6C ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorageEx + 15 7750AFB4 18 Bytes [ 50, B6, FF, FF, 37, 8A, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorageEx + 28 7750AFC7 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorageEx + 2D 7750AFCC 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorageEx + 44 7750AFE3 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorageEx + 51 7750AFF0 28 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorageOnHandle + 7 7750E108 155 Bytes [ 70, 44, 69, 4F, 70, 65, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorageOnHandle + A3 7750E1A4 450 Bytes [ 70, 44, 69, 47, 65, 74, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorageOnHandle + 266 7750E367 420 Bytes [ 90, 53, 65, 74, 75, 70, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorageOnHandle + 40B 7750E50C 18 Bytes [ 70, 43, 6F, 6D, 6D, 69, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorageOnHandle + 41F 7750E520 9 Bytes [ 53, 65, 74, 75, 70, 43, 6C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSaveToStream + 34 7750F54A 21 Bytes [ BF, 00, BF, BF, 00, 00, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSaveToStream + 4B 7750F561 11 Bytes [ FF, FF, 00, FF, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSaveToStream + 57 7750F56D 54 Bytes [ FF, 00, 00, FF, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteClassStm + 1B 7750F5A4 2 Bytes [ 08, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteClassStm + 1E 7750F5A7 17 Bytes [ FF, F9, 9F, 70, 00, 08, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteClassStm + 30 7750F5B9 61 Bytes [ FF, 70, 00, 08, F0, 00, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteClassStm + 6E 7750F5F7 16 Bytes [ 00, 80, 03, 00, 00, 80, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteClassStm + 7F 7750F608 10 Bytes [ 80, 03, 00, 00, 80, 03, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreateDocfile + 63 77514D4E 56 Bytes [ 00, 00, A0, F8, 4E, 77, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreateDocfile + 9D 77514D88 17 Bytes [ 00, 00, 00, 00, C0, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreateDocfile + AF 77514D9A 15 Bytes [ 00, 00, C0, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreateDocfile + C0 77514DAB 5 Bytes [ 00, C0, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreateDocfile + C6 77514DB1 141 Bytes [ 00, 00, 46, 3E, 01, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteClassStg 77515F73 39 Bytes [ 90, 47, 64, 69, 70, 53, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteClassStg + 29 77515F9C 233 Bytes [ 47, 64, 69, 70, 53, 61, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadClassStg + E9 77516086 76 Bytes [ 55, 1A, 66, 89, 14, 41, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadClassStg + 136 775160D3 86 Bytes [ FF, FF, 8B, 45, FC, C9, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadClassStg + 18D 7751612A 39 Bytes [ EB, 10, 90, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadClassStg + 1B8 77516155 76 Bytes [ 90, 8B, FF, 55, 8B, EC, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadClassStg + 206 775161A3 32 Bytes [ 00, 66, 39, 50, 30, 8B, 7D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreateStorageEx + 2 775171B4 8 Bytes [ 00, 00, 00, 5E, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreateStorageEx + B 775171BD 57 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreateStorageEx + 45 775171F7 28 Bytes [ 00, 55, 55, 55, 8F, 6A, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreateStorageEx + 62 77517214 23 Bytes [ 89, 89, 89, FF, 8A, 8A, 8A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreateStorageEx + 7A 7751722C 11 Bytes [ 40, 40, 40, FF, 3B, 3B, 3B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteFmtUserTypeStg + 31 775176DF 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteFmtUserTypeStg + 3E 775176EC 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteFmtUserTypeStg + 52 77517700 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteFmtUserTypeStg + 5A 77517708 52 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteFmtUserTypeStg + 8F 7751773D 37 Bytes [ 00, 00, 07, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteStringStream + 23 77517971 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteStringStream + 45 77517993 20 Bytes [ 00, 85, 85, 85, FF, 78, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteStringStream + 5A 775179A8 32 Bytes [ B4, 95, 85, FF, EC, D9, CF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteStringStream + 7B 775179C9 61 Bytes [ 33, FF, FF, 00, 33, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteStringStream + B9 77517A07 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleIsRunning + 48 7751971A 57 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleIsRunning + 82 77519754 43 Bytes [ 75, 00, 72, 00, 69, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleIsRunning + AE 77519780 7 Bytes [ 68, 00, 61, 00, 66, 00, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleIsRunning + B6 77519788 7 Bytes [ 65, 00, 6E, 00, 2E, 00, 0F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleIsRunning + BE 77519790 7 Bytes [ 4B, 00, 6F, 00, 6E, 00, 73 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!MonikerRelativePathTo + 49 7751A065 183 Bytes [ 50, 61, 74, 68, 46, 69, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!MonikerRelativePathTo + 101 7751A11D 283 Bytes [ 44, 72, 69, 76, 65, 4E, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!MonikerRelativePathTo + 21D 7751A239 52 Bytes [ 68, 49, 73, 52, 65, 6C, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!MonikerRelativePathTo + 252 7751A26E 55 Bytes [ 50, 61, 74, 68, 49, 73, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!MonikerRelativePathTo + 28A 7751A2A6 88 Bytes [ 50, 61, 74, 68, 49, 73, 55, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegGetMiscStatus + 85 7751A4AE 389 Bytes [ 50, 61, 74, 68, 52, 65, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegGetMiscStatus + 20B 7751A634 53 Bytes [ 6E, 71, 75, 6F, 74, 65, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegGetMiscStatus + 241 7751A66A 28 Bytes [ 53, 48, 43, 6F, 70, 79, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegGetMiscStatus + 25E 7751A687 319 Bytes [ 74, 65, 00, 53, 48, 43, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HENHMETAFILE_UserMarshal + 40 7751A7C7 65 Bytes [ 53, 48, 47, 65, 74, 49, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HENHMETAFILE_UserMarshal + 82 7751A809 50 Bytes [ 74, 61, 74, 65, 50, 72, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HENHMETAFILE_UserMarshal + B5 7751A83C 56 Bytes [ 53, 74, 72, 69, 6E, 67, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HENHMETAFILE_UserMarshal + EE 7751A875 98 Bytes [ 48, 4F, 70, 65, 6E, 52, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HENHMETAFILE_UserMarshal + 151 7751A8D8 95 Bytes [ 52, 65, 67, 43, 6C, 6F, 73, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetAutoConvert + 26 7751B24E 35 Bytes [ 00, 00, D4, 9D, 5B, 00, A8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetAutoConvert + 4A 7751B272 20 Bytes [ 5B, 00, 68, 04, 00, 00, E4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetAutoConvert + 5F 7751B287 27 Bytes [ 00, E4, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetAutoConvert + 7B 7751B2A3 3 Bytes CALL 5B51B2A9 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetAutoConvert + 7F 7751B2A7 71 Bytes [ 00, E4, 04, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateDataAdviseHolder + 1A 7751B65F 15 Bytes [ 00, DC, 4B, 5E, 00, A8, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateDataAdviseHolder + 2B 7751B670 14 Bytes [ 84, 54, 5E, 00, 68, 05, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateDataAdviseHolder + 3A 7751B67F 13 Bytes [ 00, EC, 59, 5E, 00, A8, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateDataAdviseHolder + 48 7751B68D 46 Bytes [ 00, 00, 00, 94, 7F, 5E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateDataAdviseHolder + 77 7751B6BC 65 Bytes [ 00, 00, 00, 00, 8C, 97, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInstanceFromFile + 24 7751B700 3 Bytes [ 6C, B5, 5E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInstanceFromFile + 28 7751B704 41 Bytes [ A8, 25, 00, 00, E4, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInstanceFromFile + 54 7751B730 3 Bytes [ 24, F0, 5E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInstanceFromFile + 58 7751B734 15 Bytes [ 68, 05, 00, 00, E4, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInstanceFromFile + 68 7751B744 95 Bytes [ 68, 04, 00, 00, E4, 04, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateLinkFromData + 2F 7751B9BC 16 Bytes [ 00, 00, 00, 00, CC, BB, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateLinkFromData + 42 7751B9CF 19 Bytes [ 00, 74, C4, 60, 00, 68, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateLinkFromDataEx + B 7751B9E3 67 Bytes [ 00, A8, 25, 00, 00, E4, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateLinkFromDataEx + 4F 7751BA27 12 Bytes [ 00, E4, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateLinkFromDataEx + 5C 7751BA34 18 Bytes CALL 5B51BA3B .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateLinkFromDataEx + 6F 7751BA47 35 Bytes [ 00, E4, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateLinkFromDataEx + 95 7751BA6D 49 Bytes [ 00, 00, 00, 04, 2E, 61, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoIsHandlerConnected + 45 7751C8D1 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoIsHandlerConnected + 54 7751C8E0 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoIsHandlerConnected + 69 7751C8F5 62 Bytes [ 00, 00, 00, 00, 01, 01, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoIsHandlerConnected + A8 7751C934 74 Bytes [ 08, 08, 08, 08, 08, 08, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoIsHandlerConnected + F3 7751C97F 60 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateOleAdviseHolder + 1A 7751CA54 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateOleAdviseHolder + 2C 7751CA66 13 Bytes [ 00, 00, 00, 00, 01, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateOleAdviseHolder + 3A 7751CA74 13 Bytes [ 00, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateOleAdviseHolder + 48 7751CA82 81 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateOleAdviseHolder + 9A 7751CAD4 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadFmtUserTypeStg + 59 7751DDD8 23 Bytes [ 8A, EA, FF, FF, 8A, EA, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadFmtUserTypeStg + 71 7751DDF0 74 Bytes [ 8A, EA, FF, FF, 8A, EA, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadFmtUserTypeStg + BC 7751DE3B 5 Bytes [ FF, 65, E0, FC, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadFmtUserTypeStg + C2 7751DE41 42 Bytes [ 8C, C5, FF, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadFmtUserTypeStg + ED 7751DE6C 30 Bytes [ 8B, EB, FF, FF, 8B, EC, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSave + 2C 7751F36A 11 Bytes [ FE, 89, 48, 14, 8B, 4D, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSave + 38 7751F376 10 Bytes [ 5D, C2, 10, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSave + 43 7751F381 27 Bytes [ 55, 8B, EC, 8B, 45, 08, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSave + 60 7751F39E 58 Bytes [ 0C, 89, 01, 33, C0, 5D, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSave + 9B 7751F3D9 54 Bytes [ 55, 8B, EC, 8B, 45, 08, 83, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetHGlobalFromILockBytes + 17 77520A06 21 Bytes [ 69, 00, 65, 00, 20, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetHGlobalFromILockBytes + 2D 77520A1C 21 Bytes [ 69, 00, 20, 00, 75, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetHGlobalFromILockBytes + 43 77520A32 19 Bytes [ 66, 00, 6C, 00, 69, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetHGlobalFromILockBytes + 57 77520A46 13 Bytes [ 68, 00, 65, 00, 6E, 00, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetHGlobalFromILockBytes + 65 77520A54 37 Bytes [ 01, 00, FF, FF, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateILockBytesOnHGlobal + 17 77520E1A 13 Bytes [ 68, 00, 6C, 00, FC, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateILockBytesOnHGlobal + 25 77520E28 17 Bytes [ 75, 00, 6E, 00, 67, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateILockBytesOnHGlobal + 37 77520E3A 5 Bytes [ 72, 00, 65, 00, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateILockBytesOnHGlobal + 3D 77520E40 15 Bytes [ 20, 00, 67, 00, 65, 00, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateILockBytesOnHGlobal + 4D 77520E50 5 Bytes [ 53, 00, 69, 00, 65 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreateDocfileOnILockBytes + 23 77520F56 11 Bytes [ 6C, 00, 6C, 00, 20, 00, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreateDocfileOnILockBytes + 30 77520F63 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreateDocfileOnILockBytes + 4C 77520F7F 4 Bytes [ 00, 26, 00, 49 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreateDocfileOnILockBytes + 51 77520F84 9 Bytes [ 67, 00, 6E, 00, 6F, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreateDocfileOnILockBytes + 5B 77520F8E 9 Bytes [ 65, 00, 72, 00, 65, 00, 6E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateErrorInfo + C 775220AD 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateErrorInfo + E 775220AF 14 Bytes [ FF, FF, FF, 00, 00, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateErrorInfo + 1D 775220BE 12 Bytes [ FF, FF, FF, FF, 00, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateErrorInfo + 2B 775220CC 20 Bytes [ FF, FF, FF, FF, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateErrorInfo + 40 775220E1 6 Bytes [ FF, 00, 00, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserSize + B 77522AC9 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserSize + 1F 77522ADD 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserSize + 2C 77522AEA 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserSize + 3F 77522AFD 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserSize + 54 77522B12 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserMarshal + B 77522B3F 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserMarshal + 2A 77522B5E 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserMarshal + 3F 77522B73 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserMarshal + 4C 77522B80 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserMarshal + 6C 77522BA0 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserMarshal + 11 77522BB6 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserMarshal + 25 77522BCA 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserMarshal + 3E 77522BE3 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserMarshal + 49 77522BEE 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserMarshal + 5E 77522C03 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserSize + 10 77522C2E 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserSize + 1E 77522C3C 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserSize + 25 77522C43 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserSize + 31 77522C4F 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserSize + 3A 77522C58 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserFree + 18 77522CA4 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserFree + 29 77522CB5 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserFree + 2C 77522CB8 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserFree + 32 77522CBE 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserFree + 43 77522CCF 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserUnmarshal + 18 77522D44 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserUnmarshal + 1C 77522D48 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserUnmarshal + 36 77522D62 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserUnmarshal + 3A 77522D66 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!STGMEDIUM_UserUnmarshal + 52 77522D7E 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserUnmarshal + 1C 77522E79 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserUnmarshal + 20 77522E7D 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserUnmarshal + 26 77522E83 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserUnmarshal + 48 77522EA5 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLIPFORMAT_UserUnmarshal + 60 77522EBD 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HGLOBAL_UserMarshal + 27 775231E1 12 Bytes [ 85, C0, 74, 06, FF, 15, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HGLOBAL_UserMarshal + 34 775231EE 27 Bytes CALL C7C97D05 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HGLOBAL_UserMarshal + 50 7752320A 38 Bytes [ 8B, CB, FF, 10, 8B, 03, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HGLOBAL_UserMarshal + 77 77523231 80 Bytes [ 01, 66, 89, 46, 0C, 8B, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HGLOBAL_UserSize + 2F 77523282 13 Bytes [ 60, 5D, 77, FF, 15, 98, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HGLOBAL_UserSize + 3D 77523290 177 Bytes [ 25, 6A, 09, 59, 33, C0, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HGLOBAL_UserSize + EF 77523342 13 Bytes [ 00, 0D, 00, 00, 07, 80, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HGLOBAL_UserSize + FD 77523350 84 Bytes [ 83, 7D, F8, 00, 75, 0B, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HGLOBAL_UserSize + 152 775233A5 218 Bytes CALL 7756B1B3 C:\WINDOWS\system32\ole32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSetClipboard + AE 775239FE 53 Bytes [ 51, 10, 8B, F8, BB, D5, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSetClipboard + E4 77523A34 3 Bytes [ FF, 7C, 1D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSetClipboard + E8 77523A38 53 Bytes [ 75, E4, 8D, 46, 08, 8B, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSetClipboard + 11E 77523A6E 21 Bytes [ FF, 50, 28, 85, C0, 0F, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSetClipboard + 134 77523A84 39 Bytes [ B8, 05, 40, 00, 80, E9, AD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoIsOle1Class + 22 775248B6 62 Bytes JMP 77524C4F C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StringFromIID + 3C 775248F7 178 Bytes [ 90, 90, 33, C0, 40, C3, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StringFromIID + EF 775249AA 89 Bytes [ 3F, 83, D1, 00, 0F, AC, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StringFromIID + 149 77524A04 6 Bytes [ 8B, 4D, 9C, 8B, 75, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StringFromIID + 150 77524A0B 77 Bytes [ BD, 78, FF, FF, FF, 2B, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StringFromIID + 19E 77524A59 27 Bytes JMP 774EA005 C:\WINDOWS\system32\ole32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ProgIDFromCLSID + 25 77524B97 35 Bytes [ 8B, 80, 80, 0F, 00, 00, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ProgIDFromCLSID + 4B 77524BBD 14 Bytes [ 0F, 8D, 6D, 53, FC, FF, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ProgIDFromCLSID + 5A 77524BCC 133 Bytes [ 45, BC, 3B, 85, 74, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ProgIDFromCLSID + E0 77524C52 26 Bytes [ 00, 00, 8B, 80, 80, 0F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ProgIDFromCLSID + FB 77524C6D 12 Bytes [ 83, BD, 68, FF, FF, FF, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateItemMoniker + 20 775252A4 42 Bytes [ 45, 08, 74, 09, 50, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateItemMoniker + 4B 775252CF 128 Bytes CALL 77520452 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateItemMoniker + CC 77525350 21 Bytes [ 8B, C6, 8B, 4D, FC, 5F, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateItemMoniker + E2 77525366 65 Bytes [ FF, 55, 8B, EC, 81, EC, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateItemMoniker + 125 775253A9 33 Bytes [ 15, A8, 16, F4, 77, 8D, 8D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterMessageFilter + 2 77525771 62 Bytes [ 8B, C6, 5E, 8B, 4D, FC, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterMessageFilter + 41 775257B0 12 Bytes [ FF, 75, 0C, 50, FF, 15, 98, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterMessageFilter + 4E 775257BD 77 Bytes [ 00, 00, F6, 45, 18, 08, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterMessageFilter + 9C 7752580B 46 Bytes [ B5, 8C, FC, FF, FF, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterMessageFilter + CB 7752583A 80 Bytes [ 89, 46, 08, 68, 04, 01, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSetMenuDescriptor + 1D 77526157 49 Bytes [ 00, 03, 46, 78, EB, 02, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSetMenuDescriptor + 4F 77526189 34 Bytes [ 8B, 75, 10, 8B, C1, C1, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSetMenuDescriptor + 72 775261AC 91 Bytes CALL 71DE523C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromProgIDEx + A 77526208 9 Bytes [ 00, 90, 90, 90, 90, 90, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromProgIDEx + 14 77526212 150 Bytes [ EC, 83, EC, 0C, 53, 56, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromProgIDEx + AB 775262A9 94 Bytes [ 07, 8B, 08, 8D, 9E, 8C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromProgIDEx + 10A 77526308 12 Bytes [ 90, 90, 90, 90, 83, 6C, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CLSIDFromProgIDEx + 11A 77526318 66 Bytes [ 83, 79, 0C, 00, 74, 03, 33, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateClassMoniker + C 77526A9B 11 Bytes [ 75, 10, FF, 75, 0C, 50, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateClassMoniker + 18 77526AA7 166 Bytes [ 45, 18, 8B, 08, 50, FF, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateClassMoniker + BF 77526B4E 42 Bytes [ 00, 8D, 45, B0, 50, 57, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateClassMoniker + EA 77526B79 86 Bytes CALL 77591276 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateClassMoniker + 141 77526BD0 183 Bytes [ 00, 8D, 45, B0, 50, 57, E8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInterfaceAndReleaseStream + 28 77526DEE 56 Bytes [ 00, 00, 8B, 45, A0, 3B, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInterfaceAndReleaseStream + 61 77526E27 3 Bytes [ 45, A8, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInterfaceAndReleaseStream + 67 77526E2D 64 Bytes [ 4D, B0, 89, 51, 0C, 8B, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInterfaceAndReleaseStream + A8 77526E6E 75 Bytes CALL 774B65AE C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoMarshalInterThreadInterfaceInStream + 4 77526EBA 69 Bytes CALL 774B07A5 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoMarshalInterThreadInterfaceInStream + 4A 77526F00 104 Bytes [ 75, 10, 50, 56, 53, E8, A3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoMarshalInterThreadInterfaceInStream + B3 77526F69 80 Bytes [ 8B, 45, 0C, 89, 75, E4, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoMarshalInterThreadInterfaceInStream + 104 77526FBA 76 Bytes [ 39, 7D, 10, 75, 0A, BB, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoMarshalInterThreadInterfaceInStream + 151 77527007 75 Bytes [ 8B, 07, 89, 45, 20, 8B, 5D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoWaitForMultipleHandles + 3D 7752717E 75 Bytes [ 75, 1C, FF, 75, 18, 53, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoWaitForMultipleHandles + 8A 775271CB 22 Bytes [ 5D, C2, 18, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoWaitForMultipleHandles + A1 775271E2 68 Bytes [ 74, 53, 8B, 5D, 0C, 85, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoWaitForMultipleHandles + E6 77527227 91 Bytes [ 15, B4, 11, F4, 77, 5F, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoWaitForMultipleHandles + 142 77527283 62 Bytes [ 00, 5F, 5E, 8B, C3, 5B, 5D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILEPICT_UserMarshal + A0 77543005 28 Bytes [ 89, 7F, 7F, 7F, 7F, 7F, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILEPICT_UserMarshal + BD 77543022 605 Bytes [ 89, 89, 89, 89, 7F, 7F, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILEPICT_UserSize + 225 77543280 404 Bytes [ 94, 94, 94, 94, 94, 94, B7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILEPICT_UserSize + 3BA 77543415 7 Bytes [ 66, 8B, 45, 0C, 66, 89, 45 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILEPICT_UserSize + 3C2 7754341D 158 Bytes [ 8D, 45, FC, 50, 8D, 45, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILEPICT_UserSize + 461 775434BC 15 Bytes [ F0, 85, F6, 74, 19, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILEPICT_UserSize + 472 775434CD 72 Bytes [ 74, 0B, 56, FF, 15, EC, 17, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteOleStg + 3D 77544F7A 72 Bytes [ FF, FF, FF, FF, 37, B7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteOleStg + 86 77544FC3 6 Bytes [ FF, FF, 77, 38, 00, 8F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteOleStg + 8D 77544FCA 176 Bytes [ 77, 77, 77, 77, 73, 33, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteOleStg + 13E 7754507B 217 Bytes [ 38, 0C, 38, 10, 38, 14, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!WriteOleStg + 218 77545155 25 Bytes [ 3B, 94, 3B, 98, 3B, 98, 3C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadStringStream + 7D 77545ACF 99 Bytes [ 00, 21, 30, 89, 31, 97, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadStringStream + E1 77545B33 117 Bytes [ 30, C4, 30, E5, 30, EC, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadStringStream + 157 77545BA9 628 Bytes [ 20, 02, 00, 24, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegGetUserType + D5 77545E1E 67 Bytes [ 00, 00, 7E, 30, 8E, 30, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegGetUserType + 119 77545E62 166 Bytes [ 00, 00, 72, 32, 05, 33, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegGetUserType + 1C0 77545F09 4 Bytes [ C0, 02, 00, 94 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegGetUserType + 1C5 77545F0E 265 Bytes [ 00, 00, 6E, 30, 74, 30, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegGetUserType + 2CF 77546018 38 Bytes [ FF, 56, 53, FF, 75, 08, E8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadOleStg + E 77547221 30 Bytes [ F1, 8B, 46, 0C, 85, C0, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadOleStg + 2D 77547240 17 Bytes [ 7E, 0C, 5F, FF, 46, 08, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadOleStg + 3F 77547252 80 Bytes [ 55, 8B, EC, 8B, 45, 08, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadOleStg + 90 775472A3 231 Bytes [ 73, 39, 75, FC, 0F, 8C, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ReadOleStg + 178 7754738B 195 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDoAutoConvert + 27 77547491 25 Bytes [ 43, 10, 89, 43, 44, 5F, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDoAutoConvert + 41 775474AB 143 Bytes [ 75, 08, 57, FF, 75, 0C, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDoAutoConvert + D1 7754753B 109 Bytes [ FF, 55, 8B, EC, 51, 53, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDoAutoConvert + 13F 775475A9 25 Bytes [ 0F, 8C, 6D, 32, 04, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDoAutoConvert + 159 775475C3 1 Byte [ 08 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoBuildVersion + B 7754790F 3 Bytes [ 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoBuildVersion + F 77547913 27 Bytes [ FF, 55, 8B, EC, 83, 7D, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoBuildVersion + 2C 77547930 134 Bytes [ FF, 5D, C2, 14, 00, B8, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoBuildVersion + B3 775479B7 209 Bytes [ F0, 85, F6, 7C, 22, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoBuildVersion + 185 77547A89 41 Bytes [ 75, 18, 8B, 08, FF, 75, 10, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegEnumVerbs 77547C35 6 Bytes [ 90, 90, 8B, FF, 55, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegEnumVerbs + 7 77547C3C 43 Bytes [ 83, EC, 2C, 56, 57, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegEnumVerbs + 33 77547C68 1 Byte [ 57 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegEnumVerbs + 35 77547C6A 15 Bytes [ 75, F8, 53, FF, 50, 28, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegEnumVerbs + 45 77547C7A 4 Bytes [ 84, 23, 4C, 04 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleLoad + 35 77547FA9 4 Bytes [ 5D, C2, 08, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleLoad + 3A 77547FAE 48 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleLoad + 6C 77547FE0 6 Bytes [ 90, 90, 90, 90, 90, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleLoad + 73 77547FE7 204 Bytes [ 55, 8B, EC, 8B, 45, 10, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleLoad + 140 775480B4 31 Bytes [ FE, 00, 00, 00, C0, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsEqualGUID + 1D 775484CA 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsAccelerator + 20 775484EF 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsAccelerator + 28 775484F7 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsAccelerator + 2A 775484F9 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsAccelerator + 2D 775484FC 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsAccelerator + 3F 7754850E 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleTranslateAccelerator + 18 77548690 32 Bytes [ 01, 00, 20, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleTranslateAccelerator + 3B 775486B3 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleTranslateAccelerator + 6D 775486E5 18 Bytes [ 1A, 0D, 50, 33, 1A, 0D, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleTranslateAccelerator + 80 775486F8 118 Bytes [ 33, 1A, 0D, 50, 33, 1A, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleTranslateAccelerator + F9 77548771 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateMenuDescriptor + 2 77548988 52 Bytes [ D8, EA, EF, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateMenuDescriptor + 39 775489BF 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateMenuDescriptor + 51 775489D7 32 Bytes [ A0, B8, 8E, 77, FF, D8, EA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateMenuDescriptor + 72 775489F8 103 Bytes [ D8, EA, EF, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateMenuDescriptor + DA 77548A60 22 Bytes [ 99, 33, 00, FF, 33, 1A, 0D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HGLOBAL_UserFree + 2 77548BB0 67 Bytes [ D8, EA, EF, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HGLOBAL_UserUnmarshal + 1C 77548BF4 54 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDestroyMenuDescriptor + C 77548C2C 15 Bytes [ 6C, DB, F7, FF, 6C, DB, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDestroyMenuDescriptor + 1C 77548C3C 51 Bytes [ D8, EA, EF, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDestroyMenuDescriptor + 50 77548C70 15 Bytes [ D8, EA, EF, FF, D8, EA, EF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDestroyMenuDescriptor + 60 77548C80 7 Bytes [ 6C, 8E, F7, FF, 6C, 8E, F7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDestroyMenuDescriptor + 68 77548C88 27 Bytes [ 6C, 8E, F7, FF, CD, DF, EE, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleInitializeWOW + C 77549436 13 Bytes [ 6C, 00, 74, 00, 75, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleInitializeWOW + 1A 77549444 71 Bytes [ 69, 00, 6E, 00, 73, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleInitializeWOW + 63 7754948D 48 Bytes [ 00, 20, 00, 56, 00, 6F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleInitializeWOW + 94 775494BE 33 Bytes [ 74, 00, 69, 00, 73, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleInitializeWOW + B6 775494E0 15 Bytes [ 2E, 00, 72, 00, 50, 00, 61, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitializeWOW + C 775495C9 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitializeWOW + 12 775495CF 22 Bytes [ 00, 00, 00, 00, 00, 0B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitializeWOW + 29 775495E6 21 Bytes [ 66, 00, 65, 00, 72, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInitializeWOW + 3F 775495FC 65 Bytes [ 66, 00, 74, 00, 61, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUnmarshalHresult + 34 7754963E 3 Bytes [ 65, 00, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUnmarshalHresult + 38 77549642 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUnmarshalHresult + 3E 77549648 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUnloadingWOW + 14 77549661 8 Bytes [ 00, 74, 00, 65, 00, 69, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUnloadingWOW + 1D 7754966A 9 Bytes [ 6E, 00, 20, 00, 6F, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUnloadingWOW + 27 77549674 5 Bytes [ 72, 00, 20, 00, 4F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUnloadingWOW + 2D 7754967A 43 Bytes [ 72, 00, 64, 00, 6E, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoUnloadingWOW + 59 775496A6 17 Bytes [ 65, 00, 72, 00, 6E, 00, 0E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SetConvertStg + 27F 7754A265 32 Bytes [ 50, 50, 50, 50, 50, 72, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SetConvertStg + 2A0 7754A286 30 Bytes [ 50, 50, 50, 50, 72, 72, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SetConvertStg + 2BF 7754A2A5 268 Bytes [ 50, 50, 50, 50, 50, 72, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SetConvertStg + 3CC 7754A3B2 32 Bytes [ C0, C0, C0, C0, E0, E0, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SetConvertStg + 3ED 7754A3D3 1654 Bytes [ C0, C0, C0, E0, E0, E0, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleFlushClipboard + 259 7754AA4A 356 Bytes [ 72, 72, 72, 72, 72, 72, 91, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleFlushClipboard + 3BE 7754ABAF 630 Bytes [ E4, C0, C0, C0, C0, C0, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleFlushClipboard + 635 7754AE26 61 Bytes [ 50, 50, 50, 50, 72, 72, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleFlushClipboard + 673 7754AE64 257 Bytes [ 50, 50, 50, 50, 50, 50, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleFlushClipboard + 775 7754AF66 121 Bytes [ 56, 56, 56, 56, 97, 97, 97, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateEx + 2 7754B7A8 13 Bytes CALL 77523A8D C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateEx + 10 7754B7B6 57 Bytes CALL 77523ACC C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateEx + 4A 7754B7F0 33 Bytes [ 83, E0, 08, 50, 8D, 85, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateEx + 6C 7754B812 13 Bytes CALL 7752386F C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateEx + 7A 7754B820 38 Bytes [ 0F, 8C, 72, 7F, FD, FF, 8B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreate + 13 7754B927 178 Bytes [ 08, 83, C6, 02, 56, 8B, CB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreate + C6 7754B9DA 50 Bytes CALL 7752B6F8 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreate + F9 7754BA0D 129 Bytes [ 39, 53, 08, 0F, 84, 03, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreate + 17B 7754BA8F 27 Bytes [ 33, C9, 66, 89, 37, 41, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreate + 197 7754BAAB 109 Bytes [ 3B, C6, 89, 45, FC, 0F, 85, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromDataEx + 11 7754BDF2 47 Bytes [ F6, 45, 17, 40, 0F, 84, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromDataEx + 41 7754BE22 9 Bytes CALL 7752B863 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromDataEx + 4B 7754BE2C 242 Bytes [ 07, C7, 47, 04, 4C, D4, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromData + 42 7754BF1F 3 Bytes [ 83, 63, 14 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromData + 46 7754BF23 76 Bytes JMP 7752B8CD C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromData + 93 7754BF70 6 Bytes [ 24, 0F, 84, 86, A8, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromData + 9A 7754BF77 6 Bytes [ 57, FF, B5, 24, FD, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromData + A1 7754BF7E 115 Bytes [ FF, B5, 2C, FD, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateObjrefMoniker + AD 7754C4E5 6 Bytes [ 45, 45, 45, 45, 45, 68 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateObjrefMoniker + B4 7754C4EC 26 Bytes [ 68, 68, 68, 68, 82, 82, 82, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateObjrefMoniker + CF 7754C507 450 Bytes [ 45, 45, 45, 68, 68, 68, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateObjrefMoniker + 292 7754C6CA 28 Bytes [ 78, 78, 78, 78, 78, 1C, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateObjrefMoniker + 2AF 7754C6E7 535 Bytes [ 57, 57, 57, 78, 78, 78, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!BindMoniker + 1C3 7754C8FF 37 Bytes [ CA, 24, 24, 24, 45, 45, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!BindMoniker + 1E9 7754C925 62 Bytes [ 45, 45, 45, 45, 45, 68, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!BindMoniker + 228 7754C964 196 Bytes [ 4B, 4B, 4B, 4B, 4B, 4B, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!BindMoniker + 2ED 7754CA29 255 Bytes [ 51, 73, 73, 73, 73, 73, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!BindMoniker + 3ED 7754CB29 31 Bytes [ 57, 78, 78, 78, 78, 78, 78, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!MonikerCommonPrefixWith + 3E 7754DE7E 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!MonikerCommonPrefixWith + 47 7754DE87 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!MonikerCommonPrefixWith + 4E 7754DE8E 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!MonikerCommonPrefixWith + 5A 7754DE9A 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!MonikerCommonPrefixWith + 65 7754DEA5 69 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateStdProgressIndicator + 4 7754E9CC 54 Bytes CALL 775305E6 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateStdProgressIndicator + 3C 7754EA04 1 Byte [ F8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateStdProgressIndicator + 3E 7754EA06 45 Bytes CALL 775417EB C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateStdProgressIndicator + 6C 7754EA34 15 Bytes [ 4D, F8, 85, C9, 75, E3, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateStdProgressIndicator + 7C 7754EA44 161 Bytes [ 83, AB, 4D, FE, FF, 8B, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetClassFile 7754EAEA 13 Bytes [ 83, 6C, 24, 04, 04, EB, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetClassFile + E 7754EAF8 24 Bytes [ 55, 8B, EC, 56, 8B, 75, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetClassFile + 27 7754EB11 42 Bytes [ C7, 5F, 5E, 5D, C2, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetClassFile + 54 7754EB3E 90 Bytes CALL 7754EAD5 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetClassFile + AF 7754EB99 36 Bytes [ 55, 0C, 53, 8B, 5D, 08, 56, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetCallerTID + 35 775520AC 98 Bytes [ 53, 61, 6D, 45, 6E, 75, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetClassVersion + 2A 7755210F 21 Bytes [ 90, 53, 61, 6D, 43, 72, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetClassVersion + 40 77552125 102 Bytes [ 6E, 00, 90, 53, 61, 6D, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetClassVersion + A7 7755218C 47 Bytes [ 18, B2, F7, 77, FF, 78, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetClassVersion + D7 775521BC 42 Bytes [ 54, 72, 61, 63, 65, 56, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetClassVersion + 102 775521E7 85 Bytes [ 65, 72, 45, 78, 57, 00, 90, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoTreatAsClass + C0 7755279C 19 Bytes [ 78, 71, FA, 77, 78, B9, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoTreatAsClass + D4 775527B0 59 Bytes [ 48, B9, F7, 77, 3B, 71, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoTreatAsClass + 110 775527EC 232 Bytes [ 3B, 71, FA, 77, 94, B8, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoTreatAsClass + 1F9 775528D5 26 Bytes [ 90, 90, 90, 52, 61, 73, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoTreatAsClass + 214 775528F0 265 Bytes [ 52, 61, 73, 51, 75, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterInitializeSpy + 7 775529FA 237 Bytes [ 74, 61, 74, 75, 73, 57, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterInitializeSpy + F5 77552AE8 20 Bytes [ 4C, 6F, 61, 64, 49, 46, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterInitializeSpy + 10A 77552AFD 153 Bytes [ 75, 6C, 6C, 54, 72, 65, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevokeInitializeSpy + A 77552B97 170 Bytes [ 90, CC, BC, F7, 77, 68, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetState + 2E 77552C42 313 Bytes [ 90, 90, 62, 50, 72, 69, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryReleaseObject + 113 77552D7C 47 Bytes [ 72, 48, 69, 62, 65, 72, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryReleaseObject + 143 77552DAC 71 Bytes [ A0, 83, FA, 77, 03, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryReleaseObject + 18B 77552DF4 16 Bytes [ 92, 7B, FA, 77, 0C, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryReleaseObject + 19C 77552E05 12 Bytes [ 84, FA, 77, 0E, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryReleaseObject + 1A9 77552E12 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterMallocSpy + 14 77552E93 142 Bytes [ 00, AA, 7A, FA, 77, 31, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterMallocSpy + A3 77552F22 39 Bytes [ 00, 00, AA, 7A, FA, 77, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterMallocSpy + CB 77552F4A 37 Bytes [ 00, 00, C4, 7A, FA, 77, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevokeMallocSpy + 21 77552F70 15 Bytes [ 63, 00, 00, 00, C4, 7A, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevokeMallocSpy + 31 77552F80 7 Bytes [ 65, 00, 00, 00, C4, 7A, FA ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevokeMallocSpy + 39 77552F88 41 Bytes [ 66, 00, 00, 00, AA, 7A, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevokeMallocSpy + 63 77552FB2 37 Bytes [ 00, 00, 91, 7A, FA, 77, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRevokeMallocSpy + 89 77552FD8 77 Bytes [ 72, 00, 00, 00, 15, 7A, FA, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetHookInterface + 1A 77553740 25 Bytes [ 65, 00, 6E, 00, 64, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HkOleRegisterObject + 15 7755375A 19 Bytes [ 69, 00, 63, 00, 68, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HkOleRegisterObject + 29 7755376E 53 Bytes [ 66, 00, FC, 00, 68, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HkOleRegisterObject + 5F 775537A4 11 Bytes [ 65, 00, 69, 00, 6D, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HkOleRegisterObject + 6B 775537B0 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HkOleRegisterObject + 6D 775537B2 1 Byte [ 73 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!EnableHookObject + 12 775539DE 27 Bytes [ 65, 00, 69, 00, 20, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!EnableHookObject + 2E 775539FA 35 Bytes [ 6E, 00, 64, 00, 61, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!EnableHookObject + 52 77553A1E 85 Bytes [ 6B, 00, 74, 00, 20, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!EnableHookObject + A8 77553A74 81 Bytes [ 69, 00, 65, 00, 72, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!EnableHookObject + FA 77553AC6 48 Bytes [ 61, 00, 6D, 00, 6D, 00, 2E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsValidPtrIn + 2 77554595 13 Bytes CALL 7753044A C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsValidPtrIn + 10 775545A3 7 Bytes CALL 7753044A C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsValidPtrIn + 18 775545AB 21 Bytes CALL 7753044A C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsValidPtrIn + 2E 775545C1 47 Bytes [ 02, 56, 8B, F1, 0F, 84, 2A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!IsValidPtrOut + 2A 775545F1 119 Bytes [ 00, 90, 90, 90, 90, 90, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetStdMarshalEx + 68 77554669 6 Bytes [ 8D, 46, 34, 50, E8, 0D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetStdMarshalEx + 6F 77554670 44 Bytes [ 00, 00, 83, 7E, 30, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetStdMarshalEx + 9C 7755469D 7 Bytes [ EB, EF, 90, 90, 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetStdMarshalEx + A4 775546A5 58 Bytes [ FF, 55, 8B, EC, 56, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetStdMarshalEx + DF 775546E0 14 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDeactivateObject + 7 7755488C 107 Bytes [ 10, 8B, 75, 08, 3B, 46, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDeactivateObject + 74 775548F9 1 Byte [ 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDeactivateObject + 76 775548FB 24 Bytes [ 40, 14, 8B, 4D, 18, 89, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDeactivateObject + 92 77554917 68 Bytes [ 8B, FF, 55, 8B, EC, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoReactivateObject + 44 7755495C 3 Bytes [ 48, 64, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoReactivateObject + 48 77554960 107 Bytes [ 8A, 56, 8B, 70, 14, 8B, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoAllowSetForegroundWindow + 3C 775549CC 4 Bytes [ FF, 56, 8B, F1 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoAllowSetForegroundWindow + 41 775549D1 97 Bytes [ 46, 28, 85, C0, C7, 06, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRetireServer + 1E 77554A33 12 Bytes JMP 77564D93 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetProcessIdentifier + 7 77554A40 36 Bytes JMP 77564D83 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetContextToken + 1 77554A65 56 Bytes [ 45, 08, 53, 56, 57, 89, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetSystemSecurityPermissions + 3 77554A9E 70 Bytes [ F8, 75, 07, 5F, 5E, 5B, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetSystemSecurityPermissions + 4B 77554AE6 3 Bytes [ 8B, FF, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetDefaultContext + 1 77554AEA 2 Bytes [ EC, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetDefaultContext + 4 77554AED 25 Bytes CALL 775549CA C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetDefaultContext + 1E 77554B07 160 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetDefaultContext + BF 77554BA8 61 Bytes [ 8B, FF, 55, 8B, EC, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetDefaultContext + FD 77554BE6 6 Bytes [ 09, 5F, 89, 48, 20, 5E ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetCancelObject + A 775550BC 3 Bytes [ 08, 00, 13 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetCancelObject + E 775550C0 172 Bytes [ 08, 00, D6, 00, 50, 21, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCancelCall + 25 7755516D 59 Bytes [ 00, 13, A1, 14, 00, 5E, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoTestCancel + 21 775551A9 9 Bytes [ 21, 08, 00, 0B, 00, 48, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoTestCancel + 2B 775551B3 22 Bytes [ 00, 48, 00, 10, 00, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoEnableCallCancellation + 9 775551CA 13 Bytes [ 5E, 01, 0B, 00, 20, 00, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoEnableCallCancellation + 17 775551D8 5 Bytes [ 50, 21, 28, 00, 0B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoEnableCallCancellation + 1D 775551DE 55 Bytes [ 13, 20, 2C, 00, 12, 00, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDisableCallCancellation + E 77555216 9 Bytes [ 08, 00, 0B, 00, 10, 00, 92, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDisableCallCancellation + 18 77555220 5 Bytes [ 14, 00, 08, 00, 13 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDisableCallCancellation + 1E 77555226 29 Bytes [ 18, 00, 9E, 01, 50, 21, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDisableCallCancellation + 3C 77555244 1 Byte [ 3C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDisableCallCancellation + 3E 77555246 8 Bytes [ 08, 00, 46, 05, 08, 05, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoSetCancelObject + 36 77555694 76 Bytes [ 39, CC, 55, 77, 1C, 47, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoSetCancelObject + 83 775556E1 38 Bytes [ 20, 5D, 77, EE, 38, 5D, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoSetCancelObject + AA 77555708 96 Bytes [ F2, 43, 5D, 77, 97, 3A, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoSetCancelObject + 10B 77555769 17 Bytes [ 20, 5D, 77, D0, CC, 55, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoSetCancelObject + 11D 7755577B 12 Bytes [ 77, 4F, 37, 5D, 77, 8E, 37, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryAuthenticationServices + 1B 775558CC 6 Bytes [ 00, 00, 00, 46, CF, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryAuthenticationServices + 22 775558D3 31 Bytes [ 00, 00, 00, 00, 00, C0, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryAuthenticationServices + 42 775558F3 12 Bytes [ 00, 00, 00, 00, 00, C0, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryAuthenticationServices + 4F 77555900 24 Bytes [ 00, 00, 00, 00, 2B, 09, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoQueryAuthenticationServices + 69 7755591A 26 Bytes [ 00, 00, 04, 00, 00, 00, 12, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateObjectInContext + CD 77559B91 42 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateObjectInContext + F8 77559BBC 27 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateObjectInContext + 114 77559BD8 10 Bytes [ 04, 04, 04, 04, 04, 04, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateObjectInContext + 11F 77559BE3 57 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoCreateObjectInContext + 159 77559C1D 31 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetApartmentID + 7A 7755B46D 171 Bytes [ D7, 3B, 07, 20, D9, 3B, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetApartmentID + 126 7755B519 30 Bytes [ 1A, 3C, 07, A8, 1B, 3C, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetApartmentID + 145 7755B538 40 Bytes [ 88, 25, 3C, 07, 18, 27, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetApartmentID + 16E 7755B561 39 Bytes [ C0, 3D, 07, 78, C1, 3D, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetApartmentID + 196 7755B589 284 Bytes [ CE, 3D, 07, F8, CF, 3D, 07, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterPSClsid + A 7755C712 7 Bytes [ 08, 00, 33, 6C, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterPSClsid + 12 7755C71A 3 Bytes [ 06, 00, 1C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterPSClsid + 16 7755C71E 109 Bytes [ 4A, 00, 08, 00, 47, 06, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterPSClsid + 84 7755C78C 40 Bytes [ 08, 00, 47, 03, 08, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoPushServiceDomain + 9 7755C7B5 44 Bytes [ 00, 08, 00, 47, 04, 08, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoPushServiceDomain + 36 7755C7E2 13 Bytes [ 10, 00, 0E, 00, 08, 00, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoPopServiceDomain + 9 7755C7F0 31 Bytes [ 00, 00, 48, 00, 04, 00, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoPopServiceDomain + 29 7755C810 1 Byte [ 22 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoPopServiceDomain + 2B 7755C812 4 Bytes [ 44, 02, 08, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoPopServiceDomain + 31 7755C818 27 Bytes [ 00, 00, 00, 00, 10, 20, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoPopServiceDomain + 4D 7755C834 1 Byte [ 24 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterSurrogateEx + 1B 7755E269 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterSurrogateEx + 33 7755E281 150 Bytes [ 00, 00, 00, A9, 40, 5C, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterSurrogateEx + CA 7755E318 37 Bytes [ 67, 40, 5C, 77, 1E, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterSurrogateEx + F2 7755E340 115 Bytes [ 00, 00, 00, 00, 50, 1F, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterSurrogateEx + 166 7755E3B4 19 Bytes [ 93, 40, 5C, 77, FA, DD, 4D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UpdateDCOMSettings + A 7755F5DC 9 Bytes [ 15, D8, 12, 4B, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UpdateDCOMSettings + 14 7755F5E6 5 Bytes [ 89, FD, FF, BE, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UpdateDCOMSettings + 1A 7755F5EC 15 Bytes JMP 775380F3 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UpdateDCOMSettings + 2A 7755F5FC 31 Bytes [ 80, 4D, 16, 08, 3B, D1, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UpdateDCOMSettings + 4A 7755F61C 41 Bytes [ C7, 45, FC, 00, F0, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterSurrogate + 33 775661BF 47 Bytes [ 00, F6, 46, 01, 40, 75, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterSurrogate + 63 775661EF 90 Bytes CALL 7756602D C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoRegisterSurrogate + BE 7756624A 50 Bytes CALL 77565C7C C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInstanceFromIStorage + 20 7756627D 20 Bytes [ 83, 66, 08, 00, EB, 4C, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoLoadLibrary + B 77566292 74 Bytes [ 3C, 8B, 46, 08, 85, C0, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeLibrary + 3B 775662DD 36 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFreeLibrary + 60 77566302 163 Bytes [ 75, 08, 8D, 45, F8, 8B, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInstall + 7F 775663A6 9 Bytes [ 8D, 73, F0, 74, 7B, A8, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInstall + 89 775663B0 45 Bytes [ 45, FC, 50, 0F, B7, 03, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInstall + B7 775663DE 125 Bytes [ 50, 04, EB, 54, A8, 40, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInstall + 135 7756645C 71 Bytes [ 43, 04, 8B, 4D, FC, 89, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoInstall + 17D 775664A4 60 Bytes [ 45, FC, 8B, 4D, 0C, 83, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFileTimeToDosDateTime + 3D 7756B0D4 17 Bytes [ FF, 89, 18, 8B, 03, 53, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFileTimeToDosDateTime + 4F 7756B0E6 11 Bytes [ B5, F4, FD, FF, FF, 8B, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoFileTimeToDosDateTime + 5D 7756B0F4 34 Bytes [ 0E, 8B, 85, F4, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDosDateTimeToFileTime + 4 7756B117 23 Bytes [ 03, 53, FF, 50, 08, FF, B5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDosDateTimeToFileTime + 1C 7756B12F 9 Bytes [ 74, 6A, 8D, 85, EC, FD, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDosDateTimeToFileTime + 26 7756B139 32 Bytes [ B5, F0, FD, FF, FF, E8, 4F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDosDateTimeToFileTime + 47 7756B15A 13 Bytes [ FD, FF, FF, 89, 85, E8, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoDosDateTimeToFileTime + 55 7756B168 26 Bytes JMP 74143E6F .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInterceptor + 87 77570223 230 Bytes [ 07, C0, 36, 36, 07, 68, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInterceptor + 16E 7757030A 6 Bytes [ 38, 07, F0, 5E, 38, 07 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInterceptor + 175 77570311 344 Bytes [ 60, 38, 07, 30, 62, 38, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInterceptor + 2CE 7757046A 89 Bytes [ 00, 00, B0, 95, 35, 07, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CoGetInterceptor + 328 775704C4 173 Bytes [ D8, B6, 35, 07, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_CStdStubBuffer_QueryInterface + 9 77570572 242 Bytes [ 37, 07, F0, 8C, 37, 07, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_CStdStubBuffer_Disconnect + 15 77570665 141 Bytes CALL 77570DA1 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrStubForwardingFunction + 6F 775706F3 188 Bytes [ 00, 70, 1D, 38, 07, 18, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrStubForwardingFunction + 12C 775707B0 9 Bytes [ 98, 21, 3A, 07, 28, 23, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrStubForwardingFunction + 136 775707BA 109 Bytes [ 00, 00, 20, 25, 3A, 07, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrStubForwardingFunction + 1A4 77570828 111 Bytes [ 50, 24, 37, 07, E0, 25, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrStubForwardingFunction + 214 77570898 480 Bytes CALL F75E3FEC .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_IUnknown_Release_Proxy + 10C 77570A7A 72 Bytes [ 00, 00, 10, 9E, 39, 07, 98, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_IUnknown_Release_Proxy + 156 77570AC4 44 Bytes [ 90, B7, 39, 07, 20, B9, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_IUnknown_Release_Proxy + 183 77570AF1 23 Bytes [ 67, 3B, 07, B0, 68, 3B, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_IUnknown_Release_Proxy + 19B 77570B09 88 Bytes [ 70, 3B, 07, 30, 72, 3B, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_IUnknown_Release_Proxy + 1F4 77570B62 20 Bytes CALL DF5E46F8 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrClientCall2_va + F0 77574715 16 Bytes [ 80, 0D, 00, E4, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrClientCall2_va + 101 77574726 168 Bytes [ A2, 30, B4, 30, F8, 30, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrClientCall2_va + 1AA 775747CF 46 Bytes [ 3C, AB, 3C, B7, 3C, C5, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrClientCall2_va + 1DB 77574800 336 Bytes [ 03, 30, 48, 30, 67, 30, A8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrClientCall2_va + 32C 77574951 1 Byte [ 3F ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrClientCall2 + A8 77574B75 225 Bytes [ 35, 98, 35, A0, 35, C1, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrClientCall2 + 18A 77574C57 665 Bytes [ 3C, D2, 3C, 04, 3D, 09, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrClientCall2 + 424 77574EF1 255 Bytes [ 30, 0E, 00, A0, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrClientCall2 + 524 77574FF1 61 Bytes [ 3B, 5C, 3B, 6A, 3B, B6, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrClientCall2 + 562 7757502F 53 Bytes [ 2E, 45, 58, 45, 00, 37, 2E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrDllGetClassObject + 2F 7757523F 66 Bytes JMP 7756989E C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrDllGetClassObject + 72 77575282 197 Bytes CALL 7756B24A C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrDllGetClassObject + 138 77575348 13 Bytes [ 77, 68, 7C, 23, F5, 77, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrDllGetClassObject + 146 77575356 27 Bytes [ 15, 38, 14, F4, 77, 8B, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrDllGetClassObject + 162 77575372 134 Bytes [ FF, D6, 85, C0, 7C, 0A, 83, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrDllUnregisterProxy + D 77575F61 4 Bytes CALL 77569C96 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrDllUnregisterProxy + 12 77575F66 38 Bytes JMP 77575A34 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrDllUnregisterProxy + 3A 77575F8E 3 Bytes [ 99, FE, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrDllUnregisterProxy + 3E 77575F92 26 Bytes [ 85, C0, 0F, 85, D4, F8, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrDllUnregisterProxy + 59 77575FAD 220 Bytes [ 85, FF, 7C, 27, 75, 1A, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrStubCall2 + D2 7757608A 24 Bytes CALL 775638B1 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrStubCall2 + EB 775760A3 9 Bytes [ 83, BD, 4C, FF, FF, FF, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrStubCall2 + F5 775760AD 13 Bytes [ 75, 10, 8D, 85, 44, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrStubCall2 + 104 775760BC 1 Byte [ 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!ComPs_NdrStubCall2 + 106 775760BE 3 Bytes [ 8D, 8D, 70 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HBITMAP_UserSize + 2 7758997B 40 Bytes [ FF, C1, CA, F7, FF, FF, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HBITMAP_UserSize + 2B 775899A4 43 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HBITMAP_UserSize + 57 775899D0 119 Bytes [ C9, 96, 7F, FF, 13, 93, CC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HBITMAP_UserMarshal + 4F 77589A48 21 Bytes [ B4, EE, F7, FF, 13, 93, CC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HBITMAP_UserMarshal + 65 77589A5E 14 Bytes [ FF, FF, FF, FE, FE, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HBITMAP_UserMarshal + 74 77589A6D 218 Bytes [ A6, 98, FF, D0, 98, 87, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HBITMAP_UserMarshal + 14F 77589B48 54 Bytes [ 0C, A3, 2A, FF, 00, 50, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HBITMAP_UserMarshal + 186 77589B7F 11 Bytes [ FF, 98, F0, FF, FF, 6F, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HBITMAP_UserUnmarshal + 2 77589B8B 40 Bytes [ FF, 23, 81, AD, FF, 00, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HBITMAP_UserUnmarshal + 2B 77589BB4 7 Bytes [ 01, 5B, 02, FF, 37, E2, 6A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HBITMAP_UserUnmarshal + 33 77589BBC 6 Bytes [ 01, 5B, 02, FF, 01, 5B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HBITMAP_UserUnmarshal + 3B 77589BC4 86 Bytes [ 01, 5B, 02, FF, 6D, E1, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HBITMAP_UserUnmarshal + 93 77589C1C 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILEPICT_UserFree + 2A 77589D92 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILEPICT_UserFree + 40 77589DA8 7 Bytes [ FF, F7, EF, FF, FF, F2, E3 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILEPICT_UserFree + 48 77589DB0 7 Bytes [ FF, EF, DE, FF, FF, E9, D4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILEPICT_UserFree + 50 77589DB8 39 Bytes [ FF, E7, D0, FF, FF, E1, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HENHMETAFILE_UserUnmarshal + 18 77589DE0 19 Bytes [ 81, FF, FF, FF, 81, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HENHMETAFILE_UserUnmarshal + 2C 77589DF4 3 Bytes [ BD, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HENHMETAFILE_UserUnmarshal + 30 77589DF8 154 Bytes [ 23, 88, 45, FF, 16, 96, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILE_UserMarshal + 16 77589E95 98 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILE_UserMarshal + 7A 77589EF9 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILE_UserMarshal + 7D 77589EFC 37 Bytes [ 00, 00, 00, 00, 81, 1E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILE_UserMarshal + A3 77589F22 22 Bytes [ 00, 00, 00, 00, 00, 00, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILE_UserUnmarshal + 12 77589F39 61 Bytes [ FF, D1, FF, FF, FF, E6, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILE_UserUnmarshal + 50 77589F77 93 Bytes [ FC, 00, 4B, 00, 40, 02, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILE_UserUnmarshal + AE 77589FD5 13 Bytes [ 00, 00, 00, BD, 4B, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILE_UserUnmarshal + BC 77589FE3 11 Bytes [ FF, 32, 5E, FF, FF, 32, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HMETAFILE_UserFree + 2 77589FEF 38 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HPALETTE_UserSize 7758A017 3 Bytes [ 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HPALETTE_UserSize + 4 7758A01B 36 Bytes [ FF, 55, 8B, EC, 8B, 4D, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HPALETTE_UserSize + 29 7758A040 124 Bytes [ C1, EA, 08, 0B, C2, 5D, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HPALETTE_UserMarshal + 5E 7758A0BD 85 Bytes [ FF, C3, 90, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HPALETTE_UserMarshal + B4 7758A113 44 Bytes [ 00, 32, C0, 5D, C2, 18, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HPALETTE_UserMarshal + E1 7758A140 210 Bytes [ 00, 32, C0, C2, 14, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HPALETTE_UserMarshal + 1B4 7758A213 1 Byte [ 0F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HPALETTE_UserMarshal + 1B6 7758A215 90 Bytes [ 45, 08, 85, C0, 75, 05, 6A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HPALETTE_UserUnmarshal + 1C 7758A290 37 Bytes [ 00, C2, 10, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!HPALETTE_UserUnmarshal + 43 7758A2B7 69 Bytes CALL 7758BEAD C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SNB_UserSize + 19 7758A2FD 47 Bytes [ 55, 8B, EC, 6A, 7F, E8, A8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SNB_UserMarshal 7758A32D 151 Bytes [ 90, 90, 90, 90, 6A, 7F, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SNB_UserMarshal + 9B 7758A3C8 171 Bytes [ 8B, FF, 55, 8B, EC, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SNB_UserUnmarshal + AB 7758A474 182 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SNB_UserFree 7758A52B 56 Bytes [ 90, 90, 90, 90, 6A, 08, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SNB_UserFree + 39 7758A564 73 Bytes [ 03, 83, 20, 00, B8, 05, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SNB_UserFree + 84 7758A5AF 35 Bytes [ 90, 90, 90, C2, 0C, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SNB_UserFree + A8 7758A5D3 41 Bytes [ C6, 00, 00, 33, C0, 5D, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SNB_UserFree + D2 7758A5FD 177 Bytes [ 83, 20, 00, 33, C0, 5D, C2, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleLockRunning + 31 775988A7 88 Bytes [ 55, 8B, EC, 81, EC, 08, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSetContainedObject + 34 77598900 32 Bytes [ C9, C2, 08, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleNoteObjectVisible + 2 77598921 15 Bytes [ 15, 50, 10, F4, 77, 5D, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleNoteObjectVisible + 12 77598931 34 Bytes [ 55, 8B, EC, FF, 75, 20, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleNoteObjectVisible + 35 77598954 6 Bytes [ 00, 90, 90, 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleNoteObjectVisible + 3C 7759895B 9 Bytes [ FF, 55, 8B, EC, 33, C0, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleNoteObjectVisible + 46 77598965 28 Bytes [ 75, 18, FF, 75, 14, 50, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SetDocumentBitStg + 19 77598C4F 7 Bytes [ 85, FC, FE, FF, FF, 50, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SetDocumentBitStg + 21 77598C57 2 Bytes [ 08, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!SetDocumentBitStg + 25 77598C5B 18 Bytes CALL 7755B01C C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!GetConvertStg + A 77598C6E 39 Bytes [ FF, 55, 8B, EC, 56, 8B, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDraw + 6 77598C96 10 Bytes [ 83, FF, 01, 74, 0F, 83, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDraw + 11 77598CA1 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDraw + 13 77598CA3 26 Bytes [ 48, EB, 04, 85, FF, 75, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDraw + 2E 77598CBE 32 Bytes [ 10, 74, 16, 85, FF, 75, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDraw + 4F 77598CDF 7 Bytes [ FF, 75, 10, FF, 75, 0C, 50 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDuplicateData + 42 77598F94 7 Bytes [ 00, 00, 8D, B5, F8, FE, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDuplicateData + 4A 77598F9C 9 Bytes [ EB, 0A, C7, 85, F4, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDuplicateData + 54 77598FA6 25 Bytes [ 00, 00, 56, FF, 15, 6C, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDuplicateData + 6E 77598FC0 46 Bytes CALL 7756D85B C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleDuplicateData + 9D 77598FEF 37 Bytes [ FF, 75, 0C, FF, 75, 08, E8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateStaticFromData + 29 77599703 183 Bytes [ 07, 18, A7, 33, 07, A8, A7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateStaticFromData + E1 775997BB 32 Bytes [ 07, F8, EB, 33, 07, 90, ED, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateStaticFromData + 102 775997DC 436 Bytes [ 48, F7, 33, 07, E0, F8, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateStaticFromData + 2B7 77599991 95 Bytes [ F6, 32, 07, 98, F7, 32, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateStaticFromData + 317 775999F1 290 Bytes CALL B760CD11 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateLinkEx + 73 77599BB1 159 Bytes [ 70, 35, 07, D8, 71, 35, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateLinkToFileEx + 35 77599C51 465 Bytes [ 99, 36, 07, F0, 9A, 36, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromFileEx + 43 77599E23 252 Bytes [ 07, 00, 9A, 34, 07, 90, 9A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromFileEx + 140 77599F20 192 Bytes [ 00, CE, 36, 07, B8, CF, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromFileEx + 201 77599FE1 60 Bytes [ 15, 37, 07, 00, 17, 37, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromFileEx + 23E 7759A01E 1 Byte [ 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromFileEx + 240 7759A020 15 Bytes [ 50, 21, 0C, 00, 08, 00, 70, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateLink + 2E 7759A12E 73 Bytes [ 0B, 00, 1C, 00, 38, 00, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateLinkToFile + 2D 7759A178 1 Byte [ 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateLinkToFile + 2F 7759A17A 73 Bytes [ 08, 00, 70, 00, 0C, 00, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromFile + 2E 7759A1C4 103 Bytes [ 13, 01, 08, 00, 08, 06, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromFile + 96 7759A22C 11 Bytes [ 00, 00, 00, 00, 13, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromFile + A2 7759A238 20 Bytes [ 08, 00, 08, 00, 33, 6C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromFile + B7 7759A24D 28 Bytes [ 01, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateFromFile + D4 7759A26A 57 Bytes [ 08, 00, 13, 00, 14, 00, 4E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateDataCache + 7 7759C012 68 Bytes [ F8, 15, 0F, 8F, B3, 55, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateDataCache + 4C 7759C057 49 Bytes [ FF, 83, F8, 0B, 7E, E2, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateDataCache + 7E 7759C089 28 Bytes [ FF, FF, FF, D3, 85, C0, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateDataCache + 9B 7759C0A6 3 Bytes [ B5, 6C, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!CreateDataCache + 9F 7759C0AA 11 Bytes [ FF, FF, 15, 40, 10, 4B, 77, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!DoDragDrop + 17 775A0408 6 Bytes [ FF, FF, 81, BE, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!DoDragDrop + 1E 775A040F 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!DoDragDrop + 21 775A0412 66 Bytes [ FC, DE, BF, CD, 8E, 52, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!DoDragDrop + 64 775A0455 57 Bytes [ FF, FD, F0, E4, E0, A0, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!DoDragDrop + 9F 775A0490 36 Bytes [ FF, FF, D0, BB, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateEmbeddingHelper + 3D 775A1B1C 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateEmbeddingHelper + 44 775A1B23 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateEmbeddingHelper + 49 775A1B28 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateEmbeddingHelper + 50 775A1B2F 67 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateEmbeddingHelper + 95 775A1B74 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateDefaultHandler + D 775A1BE4 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateDefaultHandler + F 775A1BE6 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateDefaultHandler + 1E 775A1BF5 14 Bytes [ 1E, FF, 40, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateDefaultHandler + 2E 775A1C05 59 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleCreateDefaultHandler + 6A 775A1C41 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSetAutoConvert + B 775A1C51 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSetAutoConvert + 17 775A1C5D 75 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSetAutoConvert + 63 775A1CA9 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSetAutoConvert + 66 775A1CAC 73 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleSetAutoConvert + B0 775A1CF6 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleMetafilePictFromIconAndLabel + 1A 775A27A9 72 Bytes [ 00, 00, F6, 05, 0C, DC, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleMetafilePictFromIconAndLabel + 63 775A27F2 7 Bytes [ 83, 3D, 84, D2, FA, 77, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleMetafilePictFromIconAndLabel + 6B 775A27FA 2 Bytes [ 10, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleMetafilePictFromIconAndLabel + 6E 775A27FD 23 Bytes [ 75, 10, FF, 75, 0C, 57, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleMetafilePictFromIconAndLabel + 87 775A2816 12 Bytes [ 50, 8D, 85, AC, F7, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetIconOfFile + 2B 775A2C72 1 Byte [ FB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetIconOfFile + 2D 775A2C74 17 Bytes [ 6A, 09, 59, 83, C7, 20, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetIconOfFile + 40 775A2C87 14 Bytes [ 6A, 20, 8D, 47, 46, 50, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetIconOfFile + 4F 775A2C96 90 Bytes [ 0F, B7, 43, 46, 0F, B7, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetIconOfFile + AA 775A2CF1 26 Bytes [ B5, BC, F9, FF, FF, FF, 15, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetIconOfClass + 2E 775A2F5F 17 Bytes [ FF, 8D, 85, DC, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetIconOfClass + 40 775A2F71 20 Bytes [ FF, 53, FF, 15, B4, 10, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetIconOfClass + 55 775A2F86 111 Bytes [ 8B, C6, 8B, 4D, FC, 5F, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetIconOfClass + C5 775A2FF6 15 Bytes [ FF, 57, 56, FF, 15, FC, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleGetIconOfClass + D5 775A3006 38 Bytes CALL 775A23A6 C:\WINDOWS\system32\ole32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegEnumFormatEtc + 69 775A3E0A 42 Bytes [ 7F, 08, 50, FF, 51, 08, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegEnumFormatEtc + 95 775A3E36 65 Bytes [ C9, C3, 90, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegEnumFormatEtc + D7 775A3E78 6 Bytes [ 75, 0C, 50, FF, 51, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegEnumFormatEtc + DE 775A3E7F 8 Bytes [ 76, 08, 8B, D8, EB, D6, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleRegEnumFormatEtc + E7 775A3E88 45 Bytes [ 08, 6A, 00, FF, 75, 14, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertIStorageToOLESTREAM + C 775A9678 29 Bytes [ 08, 39, 73, 34, 0F, 86, EA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertIStorageToOLESTREAM + 2A 775A9696 50 Bytes [ 15, B4, 11, F4, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertIStorageToOLESTREAMEx + 2 775A96C9 148 Bytes [ 30, FF, 70, 04, 57, 68, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertIStorageToOLESTREAMEx + 97 775A975E 19 Bytes [ 83, 4E, 0C, 04, FF, 75, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertIStorageToOLESTREAMEx + AB 775A9772 99 Bytes [ 90, 90, 31, 2E, 33, 2E, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertIStorageToOLESTREAMEx + 10F 775A97D6 161 Bytes [ 0D, 56, FF, 75, 10, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertIStorageToOLESTREAMEx + 1B1 775A9878 25 Bytes [ 89, 45, BC, 5F, 74, 03, 89, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertOLESTREAMToIStorage + 16 775A99C8 6 Bytes [ 18, 6A, 08, 33, C0, 59 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertOLESTREAMToIStorage + 1D 775A99CF 42 Bytes [ BD, 60, F9, FF, FF, F3, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertOLESTREAMToIStorage + 48 775A99FA 56 Bytes [ FF, F3, AB, 6A, 02, 58, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertOLESTREAMToIStorage + 81 775A9A33 22 Bytes [ FF, C7, 85, 5C, F9, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertOLESTREAMToIStorage + 98 775A9A4A 72 Bytes [ C7, 85, AC, FB, FF, FF, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertOLESTREAMToIStorageEx + 40 775A9A93 15 Bytes [ 66, C7, 45, F0, EE, 38, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertOLESTREAMToIStorageEx + 50 775A9AA3 32 Bytes [ C6, 45, F5, E5, 88, 5D, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertOLESTREAMToIStorageEx + 71 775A9AC4 12 Bytes CALL 775BFCBA C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertOLESTREAMToIStorageEx + 7E 775A9AD1 31 Bytes [ 0F, 84, 17, 01, 00, 00, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!OleConvertOLESTREAMToIStorageEx + 9E 775A9AF1 10 Bytes [ B9, 82, 00, 00, 00, 8D, BD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UtGetDvtd16Info + 1A 775AA768 50 Bytes [ 0A, 2A, 00, 07, 29, 2A, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UtGetDvtd16Info + 4D 775AA79B 18 Bytes [ 71, 6A, 74, 6A, 74, 3A, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UtGetDvtd16Info + 60 775AA7AE 377 Bytes [ 04, 19, 00, 1B, 38, 38, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UtConvertDvtd16toDvtd32 + B0 775AA928 71 Bytes [ 17, 0C, AE, AE, AE, 6E, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UtConvertDvtd16toDvtd32 + F8 775AA970 268 Bytes [ 0E, 84, 0E, 0E, 49, 4B, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UtGetDvtd32Info + 14 775AAA7D 149 Bytes [ 2D, 00, 18, A7, 2D, AC, AC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UtGetDvtd32Info + AA 775AAB13 46 Bytes [ 32, 01, 21, 04, 32, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UtGetDvtd32Info + D9 775AAB42 132 Bytes [ 04, 19, 00, 1B, 38, 38, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UtConvertDvtd32toDvtd16 + 4E 775AABC7 28 Bytes [ F0, 00, 43, 03, 03, 0E, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UtConvertDvtd32toDvtd16 + 6B 775AABE4 585 Bytes [ B0, A8, B9, 6F, 6F, 36, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UtConvertDvtd32toDvtd16 + 2B5 775AAE2E 25 Bytes [ EC, 43, 43, AD, AD, AD, B2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UtConvertDvtd32toDvtd16 + 2CF 775AAE48 32 Bytes [ 53, 53, D6, 79, 79, 0A, 0A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!UtConvertDvtd32toDvtd16 + 2F0 775AAE69 520 Bytes [ 10, 3A, 08, 6A, 6A, 71, 71, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorageOnILockBytes + 53 775AC0E3 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorageOnILockBytes + 5A 775AC0EA 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorageOnILockBytes + 73 775AC103 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorageOnILockBytes + 7B 775AC10B 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenStorageOnILockBytes + 7F 775AC10F 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgIsStorageILockBytes + 26 775AC40B 70 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgIsStorageILockBytes + 6D 775AC452 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgIsStorageILockBytes + 85 775AC46A 40 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgIsStorageILockBytes + AF 775AC494 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgIsStorageILockBytes + CF 775AC4B4 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropVariantChangeType + 40 775B3A77 90 Bytes [ 55, 8B, EC, 51, 53, 56, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropVariantChangeType + 9B 775B3AD2 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropVariantChangeType + 9D 775B3AD4 6 Bytes [ EB, E3, 90, 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropVariantChangeType + A4 775B3ADB 23 Bytes [ 8B, FF, 55, 8B, EC, 56, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropVariantChangeType + BC 775B3AF3 74 Bytes [ 39, 4E, 08, 75, 28, 39, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!FmtIdToPropStgName + 41 775B3B3E 39 Bytes [ 08, 85, F6, 57, 8B, 3D, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropStgNameToFmtId + A 775B3B67 256 Bytes CALL 7753FF88 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreatePropStg + AF 775B3C68 22 Bytes [ 8B, FF, 55, 8B, EC, 81, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreatePropStg + C6 775B3C7F 11 Bytes [ 00, 68, 00, 02, 00, 00, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreatePropStg + D2 775B3C8B 156 Bytes [ 89, 45, FC, 8B, 45, 08, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreatePropStg + 16F 775B3D28 82 Bytes JMP 0301302F .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenPropStg + 41 775B3D7B 123 Bytes [ FF, FF, 7F, 76, 07, B8, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenPropStg + BD 775B3DF7 121 Bytes [ FD, FF, FF, 50, 8D, 85, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenPropStg + 137 775B3E71 259 Bytes [ 56, FF, 15, C4, 14, 4B, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreatePropSetStg + DA 775B3F76 132 Bytes [ 80, FF, 15, 3C, 10, 4B, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreatePropSetStg + 15F 775B3FFB 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgCreatePropSetStg + 161 775B3FFD 914 Bytes JMP 94785D32 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropVariantCopy + 76 775B4390 481 Bytes [ 96, 96, 96, 96, 96, 96, B9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropVariantCopy + 258 775B4572 65 Bytes [ 8B, 8B, 8B, 8B, AD, AD, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropVariantCopy + 29A 775B45B4 61 Bytes [ 8B, 8B, AD, AD, AD, AD, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropVariantCopy + 2D8 775B45F2 549 Bytes [ 8B, 8B, 8B, 8B, AD, AD, AD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!PropVariantCopy + 4FE 775B4818 313 Bytes [ C4, C4, C4, C4, C4, C5, C5, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgConvertVariantToProperty + 18 775B5DD6 5 Bytes [ 8D, 85, 74, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgConvertVariantToProperty + 1E 775B5DDC 14 Bytes [ 50, 56, C7, 45, 80, 05, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgConvertVariantToProperty + 2D 775B5DEB 25 Bytes [ D8, 85, DB, 0F, 84, 59, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgPropertyLengthAsVariant + 2 775B5E05 8 Bytes [ 0F, 84, 42, 01, 00, 00, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgPropertyLengthAsVariant + B 775B5E0E 2 Bytes [ B5, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgPropertyLengthAsVariant + E 775B5E11 21 Bytes CALL 77576354 C:\WINDOWS\system32\ole32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgPropertyLengthAsVariant + 24 775B5E27 338 Bytes [ 83, A5, 7C, FF, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgConvertPropertyToVariant + 13F 775B5F7A 25 Bytes [ 66, 00, 6F, 00, 5C, 00, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgConvertPropertyToVariant + 159 775B5F94 1 Byte [ 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgConvertPropertyToVariant + 15B 775B5F96 56 Bytes [ 00, 00, 5C, 00, 53, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgConvertPropertyToVariant + 194 775B5FCF 107 Bytes [ 00, 5C, 00, 53, 00, 74, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgConvertPropertyToVariant + 200 775B603B 83 Bytes [ 3F, 6A, 23, 6A, 5C, 6A, 2F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenAsyncDocfileOnIFillLockBytes + 30 775C067B 163 Bytes [ 69, 6E, 67, 46, 72, 65, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgOpenAsyncDocfileOnIFillLockBytes + D4 775C071F 363 Bytes [ 77, FC, 7D, FA, 77, 54, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgGetIFillLockBytesOnFile + 93 775C088B 23 Bytes [ 90, 61, 63, 6D, 53, 74, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgGetIFillLockBytesOnFile + AB 775C08A3 165 Bytes [ 61, 6D, 43, 6F, 6E, 76, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgGetIFillLockBytesOnFile + 151 775C0949 52 Bytes [ 74, 44, 69, 73, 63, 6F, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgGetIFillLockBytesOnFile + 188 775C0980 27 Bytes [ 4D, 50, 52, 55, 49, 5F, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] ole32.dll!StgGetIFillLockBytesOnFile + 1A4 775C099C 212 Bytes [ 4D, 50, 52, 55, 49, 5F, 57, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetEnumerateComputerNames + FFFBB3F0 597D1491 76 Bytes [ 6A, 05, 52, 50, FF, 51, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetEnumerateComputerNames + FFFBB96E 597D1A0F 4 Bytes [ 8B, 45, 18, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetEnumerateComputerNames + FFFBB973 597D1A14 27 Bytes [ 85, C0, 76, 0F, 33, C9, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetEnumerateComputerNames + FFFBB98F 597D1A30 59 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetEnumerateComputerNames + FFFBB9CB 597D1A6C 34 Bytes [ 00, A1, 04, 60, 5D, 77, 56, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNtStatusToApiStatus + 11 597D3C21 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNtStatusToApiStatus + 18 597D3C28 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNtStatusToApiStatus + 2B 597D3C3B 43 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNtStatusToApiStatus + 5A 597D3C6A 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNtStatusToApiStatus + 6A 597D3C7A 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetApiBufferFree 597D7750 27 Bytes [ 3B, C6, 89, 55, 08, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetApiBufferFree + 1D 597D776D 116 Bytes [ 0F, B7, 75, 14, 8D, 46, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetApiBufferFree + 92 597D77E2 55 Bytes [ 30, 74, 06, 8B, 02, 52, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetApiBufferFree + CA 597D781A 65 Bytes [ 75, F0, 8D, 4D, E0, 51, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetApiBufferFree + 10C 597D785C 12 Bytes [ 55, 8B, EC, 51, 83, 65, FC, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAccessCheckAndAudit + 59 597D8724 29 Bytes JMP 597C479C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAccessCheckAndAudit + 77 597D8742 1 Byte [ FB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAccessCheckAndAudit + 79 597D8744 5 Bytes [ 85, EF, BF, FE, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAccessCheckAndAudit + 81 597D874C 257 Bytes [ 8B, 4D, FC, 8B, 11, 53, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareGetInfo + F0 597D884E 166 Bytes [ FF, FF, 8B, 45, 0C, 8D, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareGetInfo + 197 597D88F5 52 Bytes [ FC, 66, 83, F9, 21, 75, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareGetInfo + 1CC 597D892A 129 Bytes [ 73, 00, 6F, 00, 6C, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareGetInfo + 24E 597D89AC 33 Bytes [ 84, 02, 6F, FC, FF, E9, 2A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareGetInfo + 270 597D89CE 79 Bytes CALL 597A1CAC .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpDbgPrint + 4A 597D8A94 14 Bytes [ FF, 6A, 27, 56, FF, 15, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpDbgPrint + 59 597D8AA3 68 Bytes [ 6A, 10, FF, 75, 0C, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpDbgPrint + 9E 597D8AE8 37 Bytes [ FF, 15, D8, 12, 4B, 77, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpDbgPrint + C4 597D8B0E 34 Bytes JMP 597CE310 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpDbgPrint + E7 597D8B31 16 Bytes [ 15, 58, 12, 4B, 77, 85, C0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetApiBufferAllocate + 13 597D8C1C 1 Byte [ EC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetApiBufferAllocate + 15 597D8C1E 121 Bytes [ 66, E6, 02, 00, C3, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpIsRemote + 5F 597D8C9B 48 Bytes [ 6A, 00, 68, 64, 19, 4B, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCopyStringToBuffer + 30 597D8CCC 74 Bytes [ 00, 00, 81, C6, C8, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCopyStringToBuffer + 7B 597D8D17 4 Bytes [ 50, 0C, EB, 1C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCopyStringToBuffer + 80 597D8D1C 14 Bytes [ 75, 14, 56, FF, 50, 10, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCopyStringToBuffer + 8F 597D8D2B 14 Bytes [ 06, 56, 74, 05, FF, 50, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCopyStringToBuffer + 9E 597D8D3A 2 Bytes [ FF, 50 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareEnum + 8 597D8E6D 3 Bytes [ EA, BC, F9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareEnum + C 597D8E71 42 Bytes [ 8B, 06, 83, B8, FC, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareEnum + 37 597D8E9C 19 Bytes JMP 597795F1 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareEnum + 4C 597D8EB1 45 Bytes JMP 59776380 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareEnum + 7A 597D8EDF 19 Bytes [ 06, 56, FF, 50, 04, 83, C6, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerSetServiceBitsEx + 30 597D8F90 43 Bytes [ FF, BF, 0E, 00, 07, 80, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerSetServiceBitsEx + 5C 597D8FBC 5 Bytes [ 35, 00, 60, 5D, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerSetServiceBitsEx + 62 597D8FC2 10 Bytes [ 15, 50, 61, 5D, 77, E9, F2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerSetServiceBitsEx + 71 597D8FD1 34 Bytes [ 33, C0, 40, C3, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerSetServiceBitsEx + 97 597D8FF7 67 Bytes CALL 607DE7B4 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetJoinInformation + 23 597D98C7 19 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetJoinInformation + 37 597D98DB 116 Bytes [ 83, 20, 00, 53, 56, 57, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetJoinInformation + AC 597D9950 27 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetJoinInformation + C8 597D996C 87 Bytes [ 00, 33, C0, 5D, C2, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRemoteComputerSupports + 23 597D99C4 24 Bytes CALL 597D99F2 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRemoteComputerSupports + 3C 597D99DD 57 Bytes [ 00, 8B, 4D, FC, 5F, 8B, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRemoteComputerSupports + 76 597D9A17 21 Bytes [ 7D, 10, 89, 85, 74, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRemoteComputerSupports + 8D 597D9A2E 70 Bytes CALL 597D96BD C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaGetInfo + 3B 597D9A75 9 Bytes [ 3B, C3, 74, 09, 8B, C8, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaGetInfo + 45 597D9A7F 18 Bytes [ 00, 8B, D8, 85, DB, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaGetInfo + 58 597D9A92 7 Bytes [ 45, 84, 50, A5, 8D, 85, 70 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaGetInfo + 61 597D9A9B 145 Bytes [ FF, 68, 38, 44, 4C, 77, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaUserGetInfo + 55 597D9B2D 11 Bytes [ B5, 7C, FF, FF, FF, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaUserGetInfo + 61 597D9B39 2 Bytes [ B5, 70 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaUserGetInfo + 64 597D9B3C 13 Bytes CALL 597B444A .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaUserGetInfo + 72 597D9B4A 90 Bytes CALL 597DA2B0 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaUserGetInfo + CD 597D9BA5 69 Bytes [ 00, 53, FF, 15, 20, 12, 4B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwPathType + A 597D9E19 56 Bytes CALL C069F3A9 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwPathType + 43 597D9E52 173 Bytes [ 4C, 77, 89, 8C, B3, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwPathType + F1 597D9F00 28 Bytes [ 00, 00, 89, 8B, B0, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwPathType + 10E 597D9F1D 50 Bytes [ 00, 00, BE, 20, 00, 4C, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwPathType + 141 597D9F50 15 Bytes [ 45, 0C, 6A, FF, 89, B3, C0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetPathCanonicalize + 33 597D9FF4 8 Bytes [ 49, 04, 8D, 04, 40, 8D, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetPathCanonicalize + 3C 597D9FFD 6 Bytes [ 01, 8D, 55, E9, F8, DD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetPathCanonicalize + 44 597DA005 65 Bytes [ 90, 90, 90, 90, 90, B8, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetPathCanonicalize + 86 597DA047 67 Bytes JMP 597D7DF9 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetPathCanonicalize + CA 597DA08B 69 Bytes [ FF, 90, 90, 90, 90, 90, B8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwPathCanonicalize 597DA0F9 19 Bytes [ 90, B8, 57, 02, 00, 00, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwPathCanonicalize + 15 597DA10E 14 Bytes JMP 597D7DFD C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwPathCanonicalize + 24 597DA11D 18 Bytes JMP 597D7DFD C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwPathCanonicalize + 37 597DA130 60 Bytes [ FF, 90, 90, 90, 90, 90, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwPathCanonicalize + 74 597DA16D 15 Bytes [ 90, 90, 90, 90, 90, B8, 5F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUseGetInfo 597DA313 11 Bytes [ 90, 90, 90, B8, 7B, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUseGetInfo + C 597DA31F 76 Bytes [ FF, 90, 90, 90, 90, 90, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUseGetInfo + 5D 597DA370 12 Bytes [ B8, 81, 02, 00, 00, E9, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUseGetInfo + 6C 597DA37F 40 Bytes [ B8, 82, 02, 00, 00, E9, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUseEnum 597DA3A8 13 Bytes [ 90, 90, 90, 90, B8, 85, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUseEnum + E 597DA3B6 8 Bytes [ 90, 90, 90, 90, 90, B8, 86, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUseEnum + 17 597DA3BF 119 Bytes JMP 597D7DFC C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUseEnum + 8F 597DA437 15 Bytes JMP 597D7DFC C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUseEnum + 9F 597DA447 3 Bytes JMP 597D7DFD C:\WINDOWS\system32\NETAPI32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserGetInfo + 13 597DAA54 120 Bytes [ FF, 90, 90, 90, 90, 90, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserGetInfo + 8C 597DAACD 6 Bytes [ 90, 90, 90, 90, 90, B8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserGetInfo + 93 597DAAD4 22 Bytes JMP 597D7DFA C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserGetInfo + AA 597DAAEB 58 Bytes [ 90, 90, 90, 90, 90, B8, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserGetInfo + E5 597DAB26 130 Bytes [ FF, 90, 90, 90, 90, 90, B8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwNameValidate + 1D 597DAF1E 59 Bytes JMP 597D7DFD C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwNameValidate + 59 597DAF5A 13 Bytes JMP 597D7DFD C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwNameValidate + 68 597DAF69 29 Bytes JMP 597D7DFD C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwNameValidate + 86 597DAF87 43 Bytes JMP 597D7DFD C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwNameValidate + B3 597DAFB4 50 Bytes JMP 597D7DFD C:\WINDOWS\system32\NETAPI32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetNameCanonicalize + 9B 597DB2F9 865 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetServerEnum + 15D 597DB65B 103 Bytes [ 44, 44, 44, 44, 44, 44, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetServerEnum + 1C5 597DB6C3 199 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetServerEnum + 28D 597DB78B 1340 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxRemoteApi + 409 597DBCC8 202 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxRemoteApi + 4D4 597DBD93 16 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxRemoteApi + 4E5 597DBDA4 3 Bytes [ 04, 04, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxRemoteApi + 4E9 597DBDA8 30 Bytes [ 04, 04, 04, 04, 04, 04, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxRemoteApi + 508 597DBDC7 255 Bytes [ 40, 40, 40, 40, 40, 40, 40, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetapipBufferAllocate + C6 597DC015 82 Bytes [ 65, 72, 45, 76, 65, 6E, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetapipBufferAllocate + 119 597DC068 38 Bytes [ 65, 78, 74, 00, 43, 72, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetapipBufferAllocate + 141 597DC090 53 Bytes [ 43, 72, 79, 70, 74, 45, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetapipBufferAllocate + 177 597DC0C6 58 Bytes [ 79, 70, 74, 43, 72, 65, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetapipBufferAllocate + 1B2 597DC101 52 Bytes [ 90, 90, 90, 41, 6C, 6C, 6F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpIsUncComputerNameValid + 41 597DCAA8 181 Bytes [ 3D, 3C, 10, F4, 77, 74, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpIsUncComputerNameValid + F7 597DCB5E 130 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpIsUncComputerNameValid + 17B 597DCBE2 49 Bytes CALL 597A3F0D .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpIsUncComputerNameValid + 1AE 597DCC15 16 Bytes [ A1, 80, D2, FA, 77, 56, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpIsUncComputerNameValid + 1C0 597DCC27 40 Bytes [ 8D, 95, FC, FE, FF, FF, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleFreeMemory + 23 597DCC50 52 Bytes [ FC, FE, FF, FF, 50, 56, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleFreeMemory + 59 597DCC86 22 Bytes [ 74, 65, 57, 8B, 7D, 18, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleFreeMemory + 70 597DCC9D 18 Bytes [ 10, 74, 06, 85, FF, 75, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleFreeMemory + 83 597DCCB0 28 Bytes [ 75, 10, FF, 75, 0C, 56, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleFreeMemory + A1 597DCCCE 35 Bytes [ 74, 1C, 3D, 03, 01, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleGetPrimaryDomainInformation + C 597DCD39 25 Bytes [ 75, 20, FF, 75, 1C, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleGetPrimaryDomainInformation + 26 597DCD53 6 Bytes [ 83, FF, 10, 74, 16, 85 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleGetPrimaryDomainInformation + 2D 597DCD5A 55 Bytes [ 75, 30, 85, C0, 74, 2C, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleGetPrimaryDomainInformation + 65 597DCD92 27 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleGetPrimaryDomainInformation + 81 597DCDAE 211 Bytes [ 75, 06, 83, 7E, 08, 00, 74, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameW + F 597DCEE8 9 Bytes [ 68, 04, 01, 00, 00, 8D, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameW + 19 597DCEF2 6 Bytes [ FF, 50, 56, E8, 2F, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameW + 20 597DCEF9 19 Bytes [ 00, 85, C0, 74, 12, C7, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameWithAccountW + C 597DCF0E 99 Bytes [ EB, 0A, C7, 85, F0, FD, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameWithAccountW + 70 597DCF72 14 Bytes [ F0, FE, FF, FF, 68, 04, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameWithAccountW + 7F 597DCF81 26 Bytes CALL 597E4435 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameWithAccountW + 9A 597DCF9C 9 Bytes [ EB, 0A, C7, 85, F4, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameWithAccountW + A4 597DCFA6 16 Bytes [ 00, 00, 56, FF, 15, 6C, 14, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetPathType + FB 597DD435 30 Bytes [ 5B, 33, 07, 18, 5D, 33, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetPathType + 11A 597DD454 271 Bytes [ 30, 67, 33, 07, D0, 68, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetPathType + 22A 597DD564 85 Bytes [ C0, 48, B8, 04, 68, 4A, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetPathType + 280 597DD5BA 275 Bytes [ B8, 04, 88, 68, B8, 04, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUseAdd + B7 597DD6CE 735 Bytes [ 33, 07, B8, 91, 33, 07, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetNameValidate + 2DE 597DD9AE 211 Bytes [ 33, 07, 90, 02, 33, 07, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetNameValidate + 3B2 597DDA82 404 Bytes [ 35, 07, 80, 02, 35, 07, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetNameValidate + 547 597DDC17 49 Bytes [ 07, B8, 84, 36, 07, 60, 86, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetNameValidate + 579 597DDC49 439 Bytes [ 96, 36, 07, B0, 97, 36, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetNameValidate + 731 597DDE01 514 Bytes [ 8C, 34, 07, 78, 8D, 34, 07, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetNameCompare + 3 597DEF30 59 Bytes [ 08, 01, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetNameCompare + 3F 597DEF6C 46 Bytes [ 08, 00, 0A, 01, 10, 00, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetNameCompare + 6E 597DEF9B 9 Bytes [ 00, 0E, 0D, 48, 00, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetNameCompare + 78 597DEFA5 52 Bytes [ 21, 0C, 00, 08, 00, 70, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetNameCompare + AD 597DEFDA 3 Bytes [ 50, 21, 14 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwNameCompare + 5C 597DF193 113 Bytes [ 90, 63, 73, 63, 64, 6C, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwNameCompare + CE 597DF205 92 Bytes [ 90, 90, 90, 61, 75, 74, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwNameCompare + 12D 597DF264 21 Bytes [ 48, 88, F7, 77, 12, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwNameCompare + 144 597DF27B 62 Bytes [ 00, 0C, 8B, F7, 77, 25, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwNameCompare + 183 597DF2BA 18 Bytes [ 00, 00, B8, 90, F7, 77, 83, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpLogonPutUnicodeString + 58 597DF3AA 87 Bytes [ 00, 00, 54, B4, F7, 77, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpLogonPutUnicodeString + B0 597DF402 32 Bytes [ 00, 00, 20, C1, F7, 77, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpLogonPutUnicodeString + D2 597DF424 38 Bytes [ F8, 7B, FA, 77, 02, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpLogonPutUnicodeString + FA 597DF44C 32 Bytes [ 68, CE, F7, 77, 0C, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpLogonPutUnicodeString + 11C 597DF46E 43 Bytes [ F7, 77, 29, 00, 00, 00, B8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpInitOemString + 124 597DFBDF 358 Bytes [ 90, 57, 54, 48, 65, 6C, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpApiStatusToNtStatus + B 597DFD46 193 Bytes [ FA, 77, 74, 8F, F7, 77, AC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareAdd + 20 597DFE08 135 Bytes [ 5F, 57, 69, 6E, 53, 74, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareAdd + A8 597DFE90 38 Bytes [ 57, 69, 6E, 53, 74, 61, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareDel 597DFEB8 121 Bytes [ 57, 69, 6E, 53, 74, 61, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareDel + 7A 597DFF32 183 Bytes [ 90, 90, 57, 69, 6E, 53, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareDel + 132 597DFFEA 71 Bytes [ F7, 77, 29, 7C, FA, 77, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareDel + 17A 597E0032 59 Bytes [ 47, 08, 3B, C3, 74, 07, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerSetServiceBits + 16 597E006E 46 Bytes [ 83, C0, 05, 83, E0, FC, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerSetServiceBits + 45 597E009D 11 Bytes [ 00, 00, 0F, 84, 99, 26, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerSetServiceBits + 54 597E00AC 23 Bytes [ 15, 40, 10, 4B, 77, E9, 9B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerSetServiceBits + 6C 597E00C4 50 Bytes [ 66, 83, F8, 61, 72, 21, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetPrivilege + 2B 597E00F7 73 Bytes [ FF, 35, 00, 60, 5D, 77, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetPrivilege + 76 597E0142 28 Bytes [ 0F, 84, 79, 4F, 03, 00, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetPrivilege + 93 597E015F 40 Bytes [ 8B, F8, 85, FF, 0F, 8C, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetPrivilege + BC 597E0188 117 Bytes [ FF, D6, 85, C0, 0F, 85, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetPrivilege + 132 597E01FE 162 Bytes [ 6A, 00, FF, 75, 0C, 51, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLogonGetTimeServiceParentDomain + 60 597E02A1 14 Bytes [ 53, 56, 57, 8B, D9, 74, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLogonGetTimeServiceParentDomain + 6F 597E02B0 216 Bytes [ 3B, F7, 0F, 84, 13, EC, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLogonGetTimeServiceParentDomain + 14A 597E038B 14 Bytes [ 00, 80, 75, 0E, FF, 75, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLogonGetTimeServiceParentDomain + 159 597E039A 118 Bytes [ 00, 00, 43, 8B, CE, E8, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLogonGetTimeServiceParentDomain + 1D0 597E0411 79 Bytes [ 55, 8B, EC, 56, 8B, F1, E8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocWStrFromWStr + B 597E0F62 48 Bytes JMP 597B45E4 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocWStrFromWStr + 3C 597E0F93 160 Bytes [ 00, 33, C0, 3B, C7, 7C, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocWStrFromWStr + DD 597E1034 4 Bytes [ 8B, 7D, D0, 85 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocWStrFromWStr + E2 597E1039 45 Bytes [ 74, 2D, 33, F6, 39, 75, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocWStrFromWStr + 110 597E1067 147 Bytes [ 77, 33, F6, 39, 75, E0, 0F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareSetInfo + 23 597E1187 94 Bytes [ 85, C0, 0F, 85, 7D, 03, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareSetInfo + 82 597E11E6 1 Byte [ 03 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareSetInfo + 84 597E11E8 6 Bytes [ 00, 3B, C2, E9, 76, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareSetInfo + 8B 597E11EF 100 Bytes [ 00, 8A, 0D, 7A, D7, FA, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareSetInfo + F0 597E1254 42 Bytes [ 00, 85, C9, 0F, 85, AF, 02, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRegisterDomainNameChangeNotification + 17 597E1495 14 Bytes [ 55, 8B, EC, 53, 33, DB, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRegisterDomainNameChangeNotification + 27 597E14A5 67 Bytes [ 75, 26, 8B, 35, EC, 13, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRegisterDomainNameChangeNotification + 6B 597E14E9 60 Bytes [ FF, 83, FE, 22, 77, 1D, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRegisterDomainNameChangeNotification + A8 597E1526 71 Bytes [ 53, 56, 57, 8D, 75, 0C, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRegisterDomainNameChangeNotification + F0 597E156E 95 Bytes [ 00, 85, C0, 74, 19, 89, 5D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameAdd 597E16AA 70 Bytes [ 90, 90, 90, 66, 83, 38, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameAdd + 47 597E16F1 52 Bytes [ 06, 74, 14, 4A, 85, D2, 7F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameAdd + 7C 597E1726 19 Bytes [ 8B, 45, 08, 5D, C2, 0C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameAdd + 90 597E173A 293 Bytes [ 39, 7D, 08, 74, 2A, 56, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameDel + E2 597E1860 3 Bytes [ 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameDel + E6 597E1864 9 Bytes [ 8B, FF, 55, 8B, EC, 81, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameDel + F0 597E186E 7 Bytes [ 00, F7, 45, 08, DF, 7E, 07 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameDel + F8 597E1876 23 Bytes [ A1, 80, D2, FA, 77, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameDel + 110 597E188E 4 Bytes [ 00, F7, 45, 08 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetSiteNameW + 3B 597E271A 29 Bytes [ 8B, FF, 55, 8B, EC, 53, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetSiteNameW + 59 597E2738 42 Bytes [ 00, 8B, 8E, D8, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetSiteNameW + 85 597E2764 18 Bytes [ 83, F8, 0A, 0F, 83, 86, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetSiteNameW + 98 597E2777 65 Bytes [ 86, CC, 00, 00, 00, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetSiteNameW + DA 597E27B9 104 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsEnumerateDomainTrustsW 597E2824 55 Bytes [ 90, 90, 8B, FF, 55, 8B, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsEnumerateDomainTrustsW + 38 597E285C 20 Bytes [ 15, 20, 12, 4B, 77, 33, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsEnumerateDomainTrustsW + 4D 597E2871 19 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsEnumerateDomainTrustsW + 61 597E2885 61 Bytes [ 5D, C2, 04, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsEnumerateDomainTrustsW + A0 597E28C4 1 Byte [ C3 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerGetInfo + 28 597E29E6 21 Bytes CALL 597B47D7 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerGetInfo + 3E 597E29FC 93 Bytes [ 8B, 46, 20, 3B, C3, 74, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerGetInfo + 9C 597E2A5A 50 Bytes [ 08, 6A, 00, 50, FF, 51, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerGetInfo + CF 597E2A8D 122 Bytes [ 8E, FE, FF, FF, 8B, CE, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerGetInfo + 14B 597E2B09 8 Bytes [ 54, CA, 4B, 77, C7, 86, AC, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceGetInfo + 2B 597E2E2C 33 Bytes [ 79, 14, AB, AB, AB, AB, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceGetInfo + 4D 597E2E4E 89 Bytes [ FF, FF, FF, 75, 08, 8D, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceGetInfo + A8 597E2EA9 6 Bytes [ 00, 5E, 89, 8B, A4, 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceGetInfo + B0 597E2EB1 62 Bytes [ 8B, C3, 5B, 5D, C2, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceGetInfo + F0 597E2EF1 49 Bytes CALL 597E2D94 C:\WINDOWS\system32\NETAPI32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerEnum + 7 597E5042 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerEnum + 24 597E505F 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerEnum + 2C 597E5067 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerEnum + 2F 597E506A 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerEnum + 33 597E506E 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerEnumEx + 5 597E5078 74 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerEnumEx + 51 597E50C4 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerEnumEx + 57 597E50CA 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerEnumEx + 5E 597E50D1 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerEnumEx + 68 597E50DB 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpPackString + 15 597E59DC 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpPackString + 34 597E59FB 52 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpPackString + 69 597E5A30 80 Bytes [ 45, CE, E6, FF, 45, CE, E6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpPackString + BC 597E5A83 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpPackString + E3 597E5AAA 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetQueryDisplayInformation + 2F 597E5C4F 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetQueryDisplayInformation + 39 597E5C59 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetQueryDisplayInformation + 51 597E5C71 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetQueryDisplayInformation + 5A 597E5C7A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetQueryDisplayInformation + 5D 597E5C7D 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserGetLocalGroups + 66 597E5EDA 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserGetLocalGroups + 7D 597E5EF1 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserGetLocalGroups + 8C 597E5F00 35 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserGetLocalGroups + B1 597E5F25 36 Bytes [ D4, C1, FF, FF, D0, BB, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserGetLocalGroups + D7 597E5F4B 55 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserModalsGet + E1 597E62EF 6 Bytes [ 00, 00, 8B, 80, 80, 0F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserModalsGet + E8 597E62F6 5 Bytes [ 00, 8D, B0, 10, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserModalsGet + EF 597E62FD 30 Bytes [ 8B, 06, 85, C0, 0F, 85, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserModalsGet + 10E 597E631C 72 Bytes [ C2, 04, 00, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserModalsGet + 157 597E6365 177 Bytes [ 89, 48, 20, 5D, C2, 14, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetAlertRaise + 2D 597ED897 284 Bytes [ 56, FF, 75, 14, FF, 36, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetAlertRaiseEx + 79 597ED9B4 78 Bytes [ 75, 10, FF, 75, 0C, 68, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetApiBufferReallocate + 9 597EDA03 92 Bytes [ 50, FF, 51, 04, 33, C0, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetApiBufferSize + 1E 597EDA60 215 Bytes [ FB, FF, FF, 56, 50, 56, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetListCanonicalize + 4D 597EDB38 29 Bytes [ 55, 8B, EC, 83, EC, 64, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetListCanonicalize + 6B 597EDB56 44 Bytes [ 39, 35, A8, 97, 5D, 77, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetListCanonicalize + 99 597EDB84 64 Bytes [ 8B, F8, 85, FF, 7C, 35, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetListCanonicalize + DB 597EDBC6 6 Bytes [ 5E, 0F, 85, 98, F7, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetListCanonicalize + E2 597EDBCD 11 Bytes JMP 597ED374 C:\WINDOWS\system32\NETAPI32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetPathCompare + 31 597EDD1A 11 Bytes CALL 597EC6EB C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetPathCompare + 3D 597EDD26 7 Bytes CALL 597D4AF3 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetPathCompare + 45 597EDD2E 51 Bytes [ C0, 75, 1B, 8B, 33, 85, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetPathCompare + 79 597EDD62 71 Bytes [ F6, 56, FF, 35, 00, 60, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetPathCompare + C1 597EDDAA 166 Bytes [ 15, 20, 14, 4B, 77, 8B, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetConfigGet + 50 597EDE51 106 Bytes [ B6, F0, 60, 5D, 77, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetConfigGetAll + 32 597EDEBC 53 Bytes [ 97, 5D, 77, FF, D6, 6A, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetConfigGetAll + 69 597EDEF3 56 Bytes [ 6B, FC, FF, FF, 0F, 8E, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetConfigGetAll + A2 597EDF2C 80 Bytes [ 0F, 84, 8C, 69, 04, 00, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetConfigGetAll + F3 597EDF7D 21 Bytes [ 0A, C7, 05, A8, 97, 5D, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetConfigGetAll + 109 597EDF93 10 Bytes [ C9, C3, 90, 90, 90, 90, 90, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetConfigSet + 53 597EE0B8 61 Bytes [ D9, D3, 4C, 77, 6A, 00, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetConfigSet + 91 597EE0F6 76 Bytes [ 60, FE, FF, 68, BA, D3, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetErrorLogRead + 1 597EE143 32 Bytes JMP 597D41C5 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetErrorLogRead + 22 597EE164 86 Bytes [ 6A, 18, 6A, 00, FF, 35, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUnregisterDomainNameChangeNotification + 2A 597EE1BB 13 Bytes [ 00, C7, 45, FC, 0E, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUnregisterDomainNameChangeNotification + 39 597EE1CA 60 Bytes [ 8B, FF, 56, BE, 60, 94, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetStatisticsGet + 3A 597EE207 31 Bytes [ 55, 8B, EC, 83, EC, 0C, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetStatisticsGet + 5A 597EE227 7 Bytes [ C9, C3, 90, 90, 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetStatisticsGet + 62 597EE22F 13 Bytes CALL E4F63F9C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetStatisticsGet + 70 597EE23D 35 Bytes [ 68, BA, D3, 4C, 77, 68, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetStatisticsGet + 94 597EE261 6 Bytes [ 90, 90, 90, 90, 90, 8B ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessAdd + 42 597EE485 3 Bytes [ 39, 7D, 18 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessAdd + 46 597EE489 35 Bytes [ 84, 53, 98, 00, 00, F6, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessAdd + 6A 597EE4AD 110 Bytes CALL 597EF4EB C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessAdd + D9 597EE51C 21 Bytes [ 8B, 45, 24, A9, 80, CC, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessAdd + EF 597EE532 66 Bytes [ 7D, 10, 60, 0F, 84, BF, 97, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessDel + 34 597EE5D0 105 Bytes [ 0F, 8D, 45, F4, 50, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessEnum + 14 597EE63A 104 Bytes [ 75, 20, 8D, 4B, 06, 66, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessEnum + 7D 597EE6A3 81 Bytes [ 00, 00, 00, 33, F6, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessEnum + CF 597EE6F5 104 Bytes [ 39, 75, 08, 7C, 39, B9, CC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessEnum + 138 597EE75E 5 Bytes [ 15, 50, 61, 5D, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessEnum + 13E 597EE764 33 Bytes [ 75, 20, 56, FF, 35, 00, 60, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessGetInfo + 28 597EE7C9 5 Bytes [ 89, 9D, D0, FB, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessGetInfo + 2F 597EE7D0 33 Bytes [ 15, FC, 12, 4B, 77, 39, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessGetInfo + 51 597EE7F2 207 Bytes CALL 697EE7F2 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessGetInfo + 121 597EE8C2 6 Bytes [ FF, 50, 8D, 85, D0, FB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessGetInfo + 128 597EE8C9 16 Bytes [ FF, 50, 8D, 85, 60, FB, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessGetUserPerms + 2 597EE911 110 Bytes [ 85, C0, 0F, 85, 49, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessGetUserPerms + 71 597EE980 23 Bytes [ FF, A3, 70, 6F, 5D, 77, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessGetUserPerms + 89 597EE998 21 Bytes [ B5, C8, FB, FF, FF, 8D, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessGetUserPerms + A0 597EE9AF 9 Bytes [ 25, FF, FF, 00, 00, 89, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessGetUserPerms + AA 597EE9B9 17 Bytes [ FF, FF, B5, DC, FB, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessSetInfo + 2 597EE9CB 329 Bytes [ 0F, 85, EE, CF, 00, 00, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessSetInfo + 14C 597EEB15 16 Bytes [ FF, 5F, 8D, 45, BC, 89, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessSetInfo + 15D 597EEB26 22 Bytes [ 50, 57, 8D, 85, 7C, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessSetInfo + 174 597EEB3D 4 Bytes [ FF, D6, 85, C0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetAccessSetInfo + 179 597EEB42 110 Bytes [ 1D, 24, 12, 4B, 77, 0F, 84, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetUserPasswordSet + 2 597EEBDD 159 Bytes [ FF, FF, 00, 8D, 85, 7C, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetUserPasswordSet + A2 597EEC7D 54 Bytes [ D7, 85, C0, 74, 28, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetUserPasswordSet + D9 597EECB4 1 Byte [ 79 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetUserPasswordSet + DB 597EECB6 25 Bytes [ 73, 00, 74, 00, 65, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!RxNetUserPasswordSet + F5 597EECD0 1 Byte [ 6F ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAccessCheck + 16 597F151F 39 Bytes CALL 5B5F982B .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAccessCheck + 3E 597F1547 21 Bytes [ 85, C0, 75, BE, 56, E8, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAccessCheck + 54 597F155D 50 Bytes [ 55, 8B, EC, 8D, 45, 04, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAccessCheck + 87 597F1590 11 Bytes JMP 597DA543 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAccessCheck + 93 597F159C 100 Bytes [ 55, 8B, EC, 83, EC, 14, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpInitFtinfoContext + 2A 597F1601 86 Bytes CALL 597E1771 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpInitFtinfoContext + 81 597F1658 36 Bytes [ 7D, 0C, 89, 45, FC, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpInitFtinfoContext + A6 597F167D 64 Bytes CALL 597D436D C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpInitFtinfoContext + E7 597F16BE 39 Bytes [ 85, F0, F7, FF, FF, 8B, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpInitFtinfoContext + 10F 597F16E6 96 Bytes [ EC, 83, EC, 0C, 53, 8B, 5D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCopyFtinfoContext + 18 597F19B6 13 Bytes [ 39, 7D, FC, 0F, 84, 23, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCopyFtinfoContext + 26 597F19C4 73 Bytes [ 01, 0F, 84, 97, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCopyFtinfoContext + 70 597F1A0E 95 Bytes [ 4D, F8, 66, 89, 08, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCopyFtinfoContext + D0 597F1A6E 27 Bytes [ 8B, FF, 55, 8B, EC, 51, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCleanFtinfoContext + 18 597F1A8A 17 Bytes [ 08, 56, FF, 75, 20, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCleanFtinfoContext + 2A 597F1A9C 2 Bytes [ 75, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCleanFtinfoContext + 2D 597F1A9F 42 Bytes [ 75, 08, 50, FF, 51, 0C, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCleanFtinfoContext + 59 597F1ACB 45 Bytes [ 00, BE, 28, 95, 5D, 77, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCleanFtinfoContext + 87 597F1AF9 220 Bytes CALL 597E801D C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocFtinfoEntry + 44 597F1BD6 13 Bytes [ D8, 85, DB, 75, 5E, 57, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocFtinfoEntry + 52 597F1BE4 123 Bytes [ F4, 8D, 44, 00, 28, 50, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocFtinfoEntry + CE 597F1C60 105 Bytes CALL 597F1CD8 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAddTlnFtinfoEntry + 39 597F1CCA 92 Bytes [ FF, C7, 45, F8, 0E, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAddTlnFtinfoEntry + 96 597F1D27 8 Bytes [ 00, 0F, 86, D5, 59, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAddTlnFtinfoEntry + 9F 597F1D30 100 Bytes [ 14, 8D, 4D, EC, FF, 75, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAddTlnFtinfoEntry + 104 597F1D95 39 Bytes [ 75, 10, 6A, 04, 59, BF, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAddTlnFtinfoEntry + 12C 597F1DBD 90 Bytes [ 5A, FF, FF, 83, C0, 07, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpMergeFtinfo + 5 597F1E18 3 Bytes CALL 5980122A C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpMergeFtinfo + A 597F1E1D 119 Bytes [ 8B, 45, 10, 8B, 40, C0, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpMergeFtinfo + 82 597F1E95 37 Bytes [ 55, 08, 8B, 42, 0C, 53, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpMergeFtinfo + A8 597F1EBB 32 Bytes JMP E52511C2 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpMergeFtinfo + C9 597F1EDC 110 Bytes [ 45, 10, 5D, C2, 10, 00, 33, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocConfigName + 5B 597F2301 3 Bytes [ FF, FF, C7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocConfigName + 5F 597F2305 159 Bytes [ 80, 14, 00, 00, 00, FF, D3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocStrFromWStr + 34 597F23A5 129 Bytes [ 83, F9, 39, 77, 9A, 80, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocWStrFromStr + 43 597F2427 26 Bytes [ 55, 8B, EC, 8B, 45, 08, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocWStrFromStr + 5E 597F2442 3 Bytes [ 1C, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocWStrFromStr + 62 597F2446 11 Bytes [ 5D, C2, 08, 00, 32, C0, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocWStrFromStr + 6F 597F2453 3 Bytes [ 8B, FF, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpAllocWStrFromStr + 73 597F2457 2 Bytes [ EC, 56 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpHexDump + 16 597F2559 25 Bytes [ 50, FF, 75, 0C, B9, 50, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpHexDump + 30 597F2573 82 Bytes [ 85, C0, 74, CC, EB, F3, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpHexDump + 83 597F25C6 118 Bytes [ 4D, 0C, 8B, 41, 04, 3B, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpHexDump + FA 597F263D 9 Bytes [ F1, 8B, 46, 1C, 85, C0, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpHexDump + 104 597F2647 157 Bytes [ 00, 00, 83, 3E, 00, 74, 11, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCloseConfigData + 2 597F2AFA 48 Bytes [ 50, 04, 33, C0, EB, D9, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpDeleteSecurityObject + 7 597F2B2B 5 Bytes [ FF, 90, 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpDeleteSecurityObject + D 597F2B31 42 Bytes [ 8B, FF, 55, 8B, EC, 83, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpDeleteSecurityObject + 38 597F2B5C 87 Bytes [ 5E, 5D, C2, 1C, 00, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpDeleteSecurityObject + 90 597F2BB4 28 Bytes [ 00, 83, 7D, 18, 03, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpDeleteSecurityObject + AD 597F2BD1 73 Bytes CALL 597F2C38 C:\WINDOWS\system32\NETAPI32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpCreateSecurityObject + 6 597F2E5E 144 Bytes [ 53, 10, 89, 3A, 0F, 84, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetConfigBool + 2F 597F2EEF 87 Bytes [ 7C, 3A, 04, 8B, D1, C1, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetConfigBool + 87 597F2F47 22 Bytes [ 90, 83, 6C, 24, 04, 04, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetConfigBool + 9E 597F2F5E 143 Bytes [ 75, 0C, 57, 6A, 04, 59, BF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetConfigBool + 12E 597F2FEE 4 Bytes [ 33, C0, EB, F8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetConfigBool + 134 597F2FF4 92 Bytes [ 90, 90, 90, 8B, FF, 55, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetConfigDword + 3C 597F3053 149 Bytes [ 8B, CA, BF, 50, D0, 4B, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetConfigDword + D2 597F30E9 102 Bytes [ 8B, 45, 08, 83, C7, 04, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetConfigDword + 139 597F3150 7 Bytes [ 85, C0, 0F, 8C, 89, 0A, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetConfigDword + 141 597F3158 303 Bytes [ 8B, 45, 10, 8B, 08, 56, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetConfigValue + 7A 597F3289 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetConfigValue + 9B 597F32AA 107 Bytes [ 00, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetDomainName + 28 597F3316 33 Bytes [ 08, 06, 06, 4C, 00, F1, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetDomainName + 4C 597F333A 5 Bytes [ 0E, 00, 4C, 00, D4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetDomainName + 52 597F3340 39 Bytes [ 4C, 00, DC, FF, 08, 08, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetDomainName + 7A 597F3368 20 Bytes [ 4C, 00, A8, FF, 5C, 5B, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetDomainName + 8F 597F337D 44 Bytes [ 4C, 00, CD, FF, 08, 36, 08, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpLocalTimeZoneOffset + 19 597F33C8 137 Bytes [ 46, 5C, 14, 00, 14, 00, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpLocalTimeZoneOffset + A3 597F3452 90 Bytes [ 1B, 03, 10, 00, 19, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpLocalTimeZoneOffset + FE 597F34AD 75 Bytes [ 00, 00, 00, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpLocalTimeZoneOffset + 14A 597F34F9 148 Bytes [ 36, 4C, 00, B8, FF, 36, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpLocalTimeZoneOffset + 1DF 597F358E 9 Bytes [ 12, 08, 25, 5C, 46, 5C, 10, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpStringToNetBiosName + 6E 597F383B 59 Bytes [ 8D, 47, 04, 50, C7, 06, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosStatusToApiStatus + 14 597F3877 27 Bytes JMP 598021FE C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosStatusToApiStatus + 30 597F3893 266 Bytes [ 04, 59, BF, 64, 19, 4B, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpSmbCheck + 14 597F399E 202 Bytes [ 4E, 0C, 85, D2, 75, DA, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpSmbCheck + DF 597F3A69 137 Bytes [ F1, 90, 90, 90, 90, 90, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosReset + 2B 597F3AF3 106 Bytes [ F4, 89, 7D, FC, 0F, 86, 8F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosAddName + 3D 597F3B5E 42 Bytes [ FF, 37, 8B, 4D, 08, E8, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosAddName + 68 597F3B89 96 Bytes [ 00, 72, 81, 8B, 4D, 08, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosGetAdapterNumbers 597F3BED 22 Bytes [ 90, 8B, FF, 55, 8B, EC, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosGetAdapterNumbers + 18 597F3C05 104 Bytes [ 5D, C2, 04, 00, 33, C0, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosCall + 33 597F3C6E 214 Bytes [ 8B, F8, 85, FF, 7C, 19, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosSend + 26 597F3D45 15 Bytes [ F8, 50, 6A, 01, 68, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosSend + 36 597F3D55 44 Bytes [ FF, 15, 58, 10, 4B, 77, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosSend + 63 597F3D82 7 Bytes [ 8B, FF, 55, 8B, EC, 53, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosReceive + 4 597F3D8A 16 Bytes [ 75, 08, 8B, 46, 04, 33, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosReceive + 15 597F3D9B 125 Bytes [ B9, 1C, D0, 4B, 77, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosReceive + 93 597F3E19 44 Bytes [ 33, C0, 5D, C2, 04, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosReceive + C1 597F3E47 287 Bytes [ 83, 66, 18, 00, 33, C0, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpNetBiosReceive + 1E1 597F3F67 54 Bytes [ 0C, 57, 6A, 04, 59, BF, FC, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpOpenConfigData + 1 597F3FB2 30 Bytes [ 4D, 10, 83, C0, FC, 89, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpOpenConfigData + 23 597F3FD4 41 Bytes [ 8B, FF, 55, 8B, EC, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsUserPropertyFree + 29 597F3FFE 45 Bytes [ 45, 0C, 53, 56, 57, 6A, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsUserPropertyFree + 57 597F402C 53 Bytes [ 8B, CA, BF, 50, D0, 4B, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsUserPropertyFree + 8D 597F4062 3 Bytes [ 83, C0, F8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsUserPropertyFree + 91 597F4066 38 Bytes [ 08, 50, FF, 51, 04, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsUserPropertyFree + B8 597F408D 19 Bytes [ 7D, 08, FF, 75, 0C, 8B, CF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsSetUserProperty + 23 597F41D9 35 Bytes [ 00, 3B, D6, 0F, 87, 5A, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsSetUserProperty + 49 597F41FF 58 Bytes [ 8B, FF, 55, 8B, EC, 83, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsSetUserProperty + 84 597F423A 88 Bytes [ 55, B0, 0F, 84, 6D, 64, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsSetUserProperty + DD 597F4293 31 Bytes [ 45, F4, 8B, 41, 20, 52, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsSetUserProperty + FD 597F42B3 8 Bytes [ C4, 01, 0F, 84, 5E, 65, 04, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsSetUserPropertyWithLength + 25 597F4572 19 Bytes CALL 597F3BD7 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsSetUserPropertyWithLength + 39 597F4586 2 Bytes [ EC, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsSetUserPropertyWithLength + 3C 597F4589 49 Bytes [ 75, 08, FF, 75, 0C, 8B, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsSetUserPropertyWithLength + 70 597F45BD 6 Bytes [ 08, 89, 01, E8, F0, E0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsSetUserPropertyWithLength + 77 597F45C4 141 Bytes [ FF, 33, C0, 5E, 5D, C2, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsQueryUserProperty + 6F 597F4652 235 Bytes [ FF, 55, 8B, EC, 8B, 45, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsQueryUserProperty + 15B 597F473E 74 Bytes [ 45, FC, 85, F6, 74, 06, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsQueryUserProperty + 1A6 597F4789 40 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsQueryUserProperty + 1CF 597F47B2 26 Bytes [ 33, C0, 5E, 5D, C2, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsQueryUserPropertyWithLength + 4 597F47CD 5 Bytes [ 08, 50, FF, 51, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsQueryUserPropertyWithLength + A 597F47D3 163 Bytes [ C6, 5E, C2, 04, 00, 57, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsQueryUserPropertyWithLength + AE 597F4877 23 Bytes [ 08, 8B, 49, 24, 8B, 0C, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsQueryUserPropertyWithLength + C6 597F488F 12 Bytes [ 14, 8B, 45, 08, 83, C0, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpParmsQueryUserPropertyWithLength + D3 597F489C 189 Bytes [ 34, 06, 8B, 06, 56, FF, 50, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpStoreIntialDcRecord + 18 597F604C 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpStoreIntialDcRecord + 2D 597F6061 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpStoreIntialDcRecord + 39 597F606D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpStoreIntialDcRecord + 3B 597F606F 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpStoreIntialDcRecord + 57 597F608B 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpTStrArrayEntryCount + 4 597FA4A3 59 Bytes [ 45, 0C, 89, 18, 33, C0, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpTStrArrayEntryCount + 40 597FA4DF 37 Bytes [ 5D, 14, 56, 89, 4D, C4, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpTStrArrayEntryCount + 66 597FA505 124 Bytes [ 15, 70, 14, F4, 77, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpTStrArrayEntryCount + E3 597FA582 31 Bytes [ 8B, 7D, B0, 3B, FB, 74, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpTStrArrayEntryCount + 103 597FA5A2 21 Bytes [ 00, 8B, 45, DC, 8B, 4D, C4, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpUpgradePreNT5JoinInfo + F 597FD4BC 49 Bytes [ 4F, 50, 45, 4E, 42, 4F, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpUpgradePreNT5JoinInfo + 41 597FD4EE 83 Bytes [ 54, 00, 57, 49, 4E, 39, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpUpgradePreNT5JoinInfo + 95 597FD542 69 Bytes [ 35, 50, 52, 49, 4E, 54, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpUpgradePreNT5JoinInfo + DB 597FD588 10 Bytes [ 46, 4C, 55, 53, 48, 4E, 4F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpUpgradePreNT5JoinInfo + E6 597FD593 15 Bytes [ 41, 4C, 57, 41, 59, 53, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwPathCompare + B 597FF48E 23 Bytes [ 75, 0C, 68, 18, B9, 5D, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwPathCompare + 23 597FF4A6 20 Bytes JMP 597E18B9 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwPathCompare + 38 597FF4BB 262 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwPathCompare + 13F 597FF5C2 30 Bytes [ 80, 8B, F9, 7C, 37, 84, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpwPathCompare + 15E 597FF5E1 36 Bytes [ 8B, 08, 03, 4E, 54, FF, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!Netbios + 1 598016C6 148 Bytes [ 35, 78, 16, F4, 77, 68, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!Netbios + 96 5980175B 51 Bytes [ A3, E4, DE, FA, 77, 5F, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!Netbios + CA 5980178F 226 Bytes [ 90, 4D, 4C, 5F, 4C, 42, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!Netbios + 1AD 59801872 15 Bytes [ 00, 56, 8B, 35, 78, 16, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!Netbios + 1BD 59801882 9 Bytes [ CC, A9, F9, 77, A3, 80, DC, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleDemoteDc + 6 59801B3D 11 Bytes [ 00, 6A, 01, 68, D4, 66, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleServerSaveStateForUpgrade + 7 59801B49 16 Bytes [ 16, F4, 77, 8B, 4D, FC, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleUpgradeDownlevelServer + D 59801B5A 23 Bytes [ C9, C2, 08, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleUpgradeDownlevelServer + 25 59801B72 15 Bytes [ 75, 0C, FF, 75, 08, E8, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleUpgradeDownlevelServer + 35 59801B82 8 Bytes [ 53, 56, 57, 74, 3F, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleUpgradeDownlevelServer + 3E 59801B8B 59 Bytes [ 35, 70, 14, F4, 77, 33, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleUpgradeDownlevelServer + 7B 59801BC8 1 Byte [ 0C ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!CredpValidateTargetName + 42 5980222F 14 Bytes JMP 59802180 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!CredpValidateTargetName + 51 5980223E 52 Bytes [ 33, C9, EB, 80, 33, C0, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!CredpValidateTargetName + 86 59802273 55 Bytes [ 51, 0C, 8D, 46, 14, 50, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!CredpValidateTargetName + BE 598022AB 27 Bytes JMP 59802652 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!CredpValidateTargetName + DA 598022C7 26 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetDisplayInformationIndex + 9 598026BE 82 Bytes [ 80, 80, 0F, 00, 00, 8B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetDisplayInformationIndex + 5D 59802712 10 Bytes [ FF, 8D, 8E, 98, 02, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetDisplayInformationIndex + 68 5980271D 101 Bytes [ FF, 8D, 8E, 3C, 02, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetDisplayInformationIndex + CE 59802783 55 Bytes [ 00, 8B, 08, 03, 8E, 88, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupAdd + 35 598027BD 147 Bytes [ 80, 80, 0F, 00, 00, 8B, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupAdd + CA 59802852 214 Bytes [ 8B, 30, 03, 71, 18, 8B, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupAdd + 1A1 59802929 33 Bytes [ 00, 8B, 80, 80, 0F, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupAdd + 1C4 5980294C 59 Bytes [ 8B, 80, 80, 0F, 00, 00, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupAdd + 201 59802989 33 Bytes JMP 597FD30A C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupAddUser 598029AD 16 Bytes [ 90, 90, 8B, FF, 55, 8B, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupAddUser + 11 598029BE 27 Bytes [ 8D, 46, 14, 50, 6A, 01, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupAddUser + 2D 598029DA 4 Bytes [ 5E, 5D, C2, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupAddUser + 32 598029DF 94 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupDelUser + 5 59802A48 39 Bytes [ 56, 8B, 75, 1C, 85, F6, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupDelUser + 2D 59802A70 97 Bytes [ 0F, 85, FB, 17, 06, 00, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupEnum + 44 59802AD2 84 Bytes [ 75, 08, 57, 89, 45, FC, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupEnum + 9C 59802B2A 3 Bytes [ 3E, 2A, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupEnum + A1 59802B2F 5 Bytes [ 4D, A0, E8, E8, 7B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupEnum + A7 59802B35 29 Bytes [ FF, 3B, C7, 7C, 60, 39, 7E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupEnum + C5 59802B53 51 Bytes [ 70, 50, 8D, 4D, 90, E8, F3, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupGetInfo + 14 59802F82 75 Bytes [ 8B, 00, 53, 56, 8B, 75, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupGetInfo + 60 59802FCE 179 Bytes [ 55, 8B, EC, 51, 83, 3D, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupGetUsers + 56 59803082 8 Bytes [ 45, 14, 85, C0, 74, 03, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupGetUsers + 60 5980308C 96 Bytes [ 06, 58, 5D, C2, 10, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupGetUsers + C1 598030ED 113 Bytes [ 6A, 06, 58, 5D, C2, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupGetUsers + 133 5980315F 16 Bytes [ 90, 90, 90, 90, 90, 6A, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupGetUsers + 144 59803170 2 Bytes [ FF, 55 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupSetInfo + 35 59803357 10 Bytes [ 90, 90, 90, 90, 90, 66, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupSetInfo + 40 59803362 219 Bytes [ 90, 90, 90, 90, 90, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupSetInfo + 11C 5980343E 50 Bytes [ B8, 39, 01, 00, C0, 5D, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupSetInfo + 14F 59803471 83 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupSetInfo + 1A3 598034C5 16 Bytes [ 8B, 45, 1C, 85, C0, 74, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupSetUsers + 12 59803512 64 Bytes [ 55, 8B, EC, 8B, 45, 10, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGroupSetUsers + 55 59803555 47 Bytes [ FF, 25, C8, 14, F4, 77, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupAdd + 2E 59803585 1 Byte [ 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupAdd + 30 59803587 36 Bytes [ 33, F6, 56, 68, D8, 85, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupAdd + 55 598035AC 40 Bytes [ 56, 56, 68, 0C, 78, F4, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupAdd + 7E 598035D5 121 Bytes [ 90, 90, 90, 43, 4C, 53, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupAdd + F8 5980364F 94 Bytes [ 23, FF, FF, FF, 85, C0, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupDel + D 598036AE 3 Bytes [ C0, EB, 0A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupDel + 12 598036B3 2 Bytes [ 14, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupDel + 15 598036B6 34 Bytes [ 10, 53, 57, FF, D0, 8B, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupDel + 3A 598036DB 60 Bytes [ 0D, D8, DF, FA, 77, 85, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupDel + 77 59803718 139 Bytes [ FF, 50, FF, D6, A3, D8, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupEnum + 62 598037A5 56 Bytes [ AB, CD, EF, C7, 40, 10, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupEnum + 9C 598037DF 329 Bytes [ 00, 00, 3B, CE, 57, 89, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupEnum + 1E6 59803929 2 Bytes [ 2B, D0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupEnum + 1E9 5980392C 77 Bytes JMP E7406C33 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupEnum + 239 5980397C 309 Bytes [ F3, AB, 8B, 4D, FC, 5F, 5E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupGetInfo + 40 59803AF6 46 Bytes [ 25, 08, D0, FA, 77, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupGetMembers 59803B29 368 Bytes [ FF, 25, 1C, D0, FA, 77, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupGetMembers + 171 59803C9A 52 Bytes [ FF, 90, 90, 90, 90, 90, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupGetMembers + 1A6 59803CCF 52 Bytes [ 90, 90, 90, 90, 90, FF, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupGetMembers + 1DB 59803D04 8 Bytes [ C4, 91, FA, 77, E8, 85, 88, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupGetMembers + 1E4 59803D0D 121 Bytes [ 5A, 59, FF, E0, 90, 90, 90, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupSetInfo + 5F 59804035 30 Bytes [ 68, 00, 90, 50, D0, F7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupSetInfo + 7E 59804054 15 Bytes [ 4E, 65, 74, 44, 72, 69, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupSetInfo + 8E 59804064 140 Bytes [ 6C, 61, 63, 65, 73, 57, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLocalGroupSetInfo + 11B 598040F1 279 Bytes [ D4, F7, 77, 34, 7E, FA, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserAdd + A9 59804209 143 Bytes [ D2, F7, 77, DE, 7D, FA, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserAdd + 139 59804299 59 Bytes [ 90, 90, 90, 4E, 65, 74, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserAdd + 175 598042D5 17 Bytes [ 90, 90, 90, 4E, 65, 74, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserAdd + 187 598042E7 64 Bytes [ 55, 73, 65, 72, 43, 68, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserAdd + 1C8 59804328 143 Bytes [ 4E, 65, 74, 53, 68, 61, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserDel + 55 598043B9 18 Bytes [ 65, 6E, 64, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserDel + 68 598043CC 229 Bytes [ 70, 47, 65, 74, 4D, 65, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserDel + 14F 598044B3 260 Bytes [ 90, 44, 73, 47, 65, 74, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserEnum + 77 598045B8 55 Bytes [ 50, 76, 6B, 47, 65, 74, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserEnum + AF 598045F0 72 Bytes [ 00, 90, 90, 90, 46, 72, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserEnum + F8 59804639 97 Bytes [ D6, F7, 77, A0, 83, FA, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserEnum + 15A 5980469B 151 Bytes [ 65, 72, 79, 00, 90, 52, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserEnum + 1F2 59804733 615 Bytes [ 90, 47, 72, 61, 64, 69, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserSetInfo + DF 5980499B 144 Bytes [ 90, 4D, 50, 52, 55, 49, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserGetGroups + 58 59804A2C 54 Bytes [ 67, 00, 90, 90, 4D, 50, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserGetGroups + 8F 59804A63 466 Bytes [ 90, 90, 90, 90, 90, 28, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserGetGroups + 262 59804C36 27 Bytes [ 47, 65, 74, 48, 61, 6E, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserGetGroups + 27E 59804C52 491 Bytes [ 44, 65, 6C, 65, 74, 65, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserSetGroups + 1B9 59804E3E 177 Bytes [ 90, 90, 4D, 70, 72, 41, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserSetGroups + 26B 59804EF0 341 Bytes [ 4D, 70, 72, 41, 64, 6D, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserSetGroups + 3C1 59805046 23 Bytes [ BA, F5, FE, FF, 8D, 5F, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserSetGroups + 3D9 5980505E 153 Bytes [ 5F, 5E, 5B, C9, C3, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserModalsSet + 3A 598050F8 40 Bytes [ 0C, 89, 01, 8B, 4E, 24, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserModalsSet + 64 59805122 19 Bytes [ FF, F6, 45, 08, 01, 74, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserModalsSet + 78 59805136 134 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserModalsSet + FF 598051BD 53 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserModalsSet + 135 598051F3 51 Bytes [ 8B, 45, 0C, 25, 00, 00, 02, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserChangePassword + 10 598056B6 24 Bytes [ EC, 56, 8B, 75, 08, 8D, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserChangePassword + 29 598056CF 31 Bytes [ C2, 04, 00, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserChangePassword + 49 598056EF 15 Bytes [ 75, FC, FF, 75, 08, 8B, CE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserChangePassword + 59 598056FF 21 Bytes [ 50, 08, 5E, 8B, C7, 5F, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUserChangePassword + 6F 59805715 37 Bytes [ 45, 08, 83, 65, FC, 00, 53, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceControl + 37 59807646 29 Bytes [ 13, BC, FF, FF, 6A, 1E, 59, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceControl + 55 59807664 58 Bytes [ 55, 8B, EC, 56, BE, A0, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceEnum + 1 5980769F 2 Bytes [ 45, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceEnum + 4 598076A2 33 Bytes [ 40, 0C, 8B, 08, 50, FF, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceEnum + 26 598076C4 14 Bytes [ FF, 90, 90, 90, 90, 90, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceEnum + 35 598076D3 2 Bytes [ 19, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceEnum + 39 598076D7 4 Bytes [ F6, 45, 08, 01 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceInstall + 1 59807724 11 Bytes [ 08, 8D, 55, FC, 52, 68, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceInstall + D 59807730 38 Bytes [ 11, 85, C0, 7C, 14, 8B, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceInstall + 34 59807757 106 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceInstall + 9F 598077C2 10 Bytes [ 8B, 15, B4, 87, 5D, 77, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServiceInstall + AA 598077CD 138 Bytes [ A3, B4, 87, 5D, 77, E9, F9, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetScheduleJobAdd + 13 59807BFC 132 Bytes [ 8B, F8, C1, E7, 02, 8B, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetScheduleJobAdd + 98 59807C81 88 Bytes [ 53, 14, 8B, 36, 83, 45, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetScheduleJobDel + 31 59807CDA 11 Bytes [ 00, 00, 8B, 08, 50, FF, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetScheduleJobDel + 40 59807CE9 98 Bytes [ 8B, FF, 55, 8B, EC, 53, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetScheduleJobDel + A3 59807D4C 9 Bytes [ A1, 18, 00, 00, 00, 8B, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetScheduleJobDel + AD 59807D56 16 Bytes [ 00, 8B, 40, 58, 85, C0, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetScheduleJobEnum 59807D69 257 Bytes [ 90, 90, F6, 41, 15, 01, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetScheduleJobGetInfo + 13 59807E6C 7 Bytes [ 00, F7, D8, 1B, C0, 25, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetScheduleJobGetInfo + 1B 59807E74 65 Bytes [ 07, 80, 5E, 5D, C2, 18, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetScheduleJobGetInfo + 5D 59807EB6 44 Bytes [ 8D, 45, FC, 50, FF, 75, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetScheduleJobGetInfo + 8A 59807EE3 219 Bytes [ 55, 8B, EC, 83, EC, 10, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetScheduleJobGetInfo + 166 59807FBF 40 Bytes CALL 59808109 C:\WINDOWS\system32\NETAPI32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserServerEnum + 42 5980838D 22 Bytes [ 8B, F0, F7, DE, 1B, F6, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserServerEnum + 5A 598083A5 2 Bytes [ 39, 7D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserServerEnum + 5D 598083A8 20 Bytes [ 0F, 85, 78, EE, 00, 00, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserServerEnum + 72 598083BD 22 Bytes CALL 597BB076 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserServerEnum + 89 598083D4 21 Bytes [ 00, 04, 0F, 85, 5E, EE, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserQueryOtherDomains + 8 59808449 3 Bytes [ 8B, 87, FB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserQueryOtherDomains + C 5980844D 20 Bytes [ 8B, F0, 85, F6, 0F, 8C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserQueryOtherDomains + 21 59808462 4 Bytes [ 00, 02, 00, 0D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserQueryOtherDomains + 27 59808468 7 Bytes [ 08, 00, C1, E8, 06, 81, E3 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserQueryOtherDomains + 2F 59808470 48 Bytes [ 10, 00, 00, 6A, 00, 0B, C3, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserResetNetlogonState + 2F 59808568 51 Bytes [ 0C, 3B, C3, 74, 46, 3D, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserResetNetlogonState + 63 5980859C 127 Bytes CALL 597C5BE1 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserDebugCall + 1B 5980861C 38 Bytes [ 00, 00, 8D, 45, D0, 50, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserDebugCall + 42 59808643 152 Bytes [ F0, 85, F6, 0F, 85, B9, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserDebugTrace + 1B 598086DC 39 Bytes [ 00, 00, 8B, F0, 85, F6, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserDebugTrace + 43 59808704 81 Bytes CALL 597B4A6E .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserDebugTrace + 95 59808756 28 Bytes CALL E5808758 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserDebugTrace + B3 59808774 196 Bytes [ 0F, 8C, AF, 01, 00, 00, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserQueryStatistics + B9 5980883A 37 Bytes [ 56, 57, FF, 75, 10, 8B, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserResetStatistics + 17 59808860 3 Bytes [ 00, 83, 3B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserResetStatistics + 1B 59808864 207 Bytes [ 0F, 84, 3C, BF, FF, FF, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetBrowserStatisticsGet + 23 59808934 61 Bytes [ 66, FE, FF, FF, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetBrowserStatisticsGet + 62 59808973 45 Bytes CALL 597F6C83 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetBrowserStatisticsGet + 90 598089A1 15 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetBrowserStatisticsGet + A0 598089B1 401 Bytes [ 10, 33, C0, 57, 33, FF, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserQueryEmulatedDomains + 5B 59808B44 186 Bytes [ 5D, C2, 04, 00, 8B, 08, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserQueryEmulatedDomains + 117 59808C00 3 Bytes [ 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserQueryEmulatedDomains + 11B 59808C04 31 Bytes [ FF, 55, 8B, EC, 56, 8B, F1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserQueryEmulatedDomains + 13E 59808C27 162 Bytes [ 90, C7, 01, 04, E5, 4B, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_BrowserQueryEmulatedDomains + 1E1 59808CCA 111 Bytes [ F8, 0F, B7, 05, C4, 73, 5D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsGetClientInfo + 45 5980920E 137 Bytes [ 89, 4D, FC, 74, 68, 39, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsGetClientInfo + CF 59809298 12 Bytes [ 45, F8, 5B, C9, C2, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsGetClientInfo + DC 598092A5 36 Bytes [ FF, 55, 8B, EC, 81, EC, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsGetClientInfo + 102 598092CB 13 Bytes [ 9C, 13, F4, 77, 68, A4, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsGetClientInfo + 110 598092D9 336 Bytes CALL 5980916F C:\WINDOWS\system32\NETAPI32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsSetClientInfo + 8E 598095A7 140 Bytes [ 8B, 45, 10, 5F, 5E, C9, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsSetClientInfo + 11B 59809634 204 Bytes [ 00, 90, 90, 90, 90, 90, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsSetClientInfo + 1E8 59809701 306 Bytes [ 15, 54, 10, F4, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsSetClientInfo + 31B 59809834 39 Bytes [ 74, 19, 68, F0, 68, F7, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsSetClientInfo + 343 5980985C 20 Bytes [ E0, 6A, 78, FF, 15, 84, 11, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAddStdRoot + 47 5980A255 105 Bytes [ 15, 74, 17, 4B, 77, 89, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAddStdRoot + B1 5980A2BF 3 Bytes [ D0, F3, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAddStdRoot + B5 5980A2C3 8 Bytes [ 85, C0, 75, 42, 66, 39, BD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAddStdRoot + BE 5980A2CC 6 Bytes [ FF, FF, 75, 2C, 8D, 85 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAddStdRoot + C5 5980A2D3 28 Bytes [ FA, FF, FF, 50, 8D, 85, 54, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAddStdRootForced + 19 5980A2F2 50 Bytes [ FF, 15, 3C, 10, 4B, 77, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAddStdRootForced + 4C 5980A325 69 Bytes [ FF, B5, 8C, FA, FF, FF, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAddStdRootForced + 93 5980A36C 36 Bytes [ FC, 8B, 45, 0C, 57, 8B, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAddStdRootForced + B9 5980A392 71 Bytes [ 2C, 13, 4B, 77, EB, 6A, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsGetDcAddress + 22 5980A3DB 174 Bytes [ 00, 80, C7, 85, 50, FD, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemoveStdRoot + 11 5980A48A 41 Bytes [ 55, 8B, EC, 81, EC, 04, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemoveStdRoot + 3B 5980A4B4 37 Bytes [ 15, D8, 12, 4B, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemoveStdRoot + 61 5980A4DA 21 Bytes [ 35, 78, 12, 4B, 77, 8D, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemoveStdRoot + 77 5980A4F0 1 Byte [ FD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemoveStdRoot + 79 5980A4F2 66 Bytes [ FF, 50, FF, D6, 68, 14, 7C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsManagerInitialize + C 5980A535 29 Bytes [ 55, 8B, EC, 8B, 45, 08, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsManagerInitialize + 2A 5980A553 3 Bytes [ 33, C0, 33 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsManagerInitialize + 2E 5980A557 97 Bytes [ 39, 45, 0C, 76, 1D, 56, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsManagerInitialize + 91 5980A5BA 6 Bytes [ 89, BD, 48, FD, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsManagerInitialize + 98 5980A5C1 9 Bytes [ BD, 58, FD, FF, FF, 89, BD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsIsThisADomainName + 49 5980B0EA 1 Byte [ E2 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsIsThisADomainName + 4B 5980B0EC 74 Bytes [ 7F, FF, FF, 89, 11, 8B, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsIsThisADomainName + 96 5980B137 2 Bytes [ 4D, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsIsThisADomainName + 99 5980B13A 16 Bytes [ 49, 24, 89, 08, 33, C0, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsIsThisADomainName + AA 5980B14B 43 Bytes JMP 5978612B .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAddFtRoot + 56 5980B1E7 18 Bytes [ FF, 55, 8B, EC, 8B, 45, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAddFtRoot + 69 5980B1FA 69 Bytes [ 5D, C2, 04, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAddFtRoot + AF 5980B240 15 Bytes [ 64, A1, 18, 00, 00, 00, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAddFtRoot + BF 5980B250 68 Bytes [ 02, 8B, B8, BC, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAddFtRoot + 104 5980B295 53 Bytes [ FC, 00, 89, 45, 08, 74, 04, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemoveFtRoot + 6 5980B4AF 37 Bytes [ 49, 03, 80, 83, 00, 18, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemoveFtRoot + 2C 5980B4D5 28 Bytes [ 5D, 08, 8B, 43, 44, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemoveFtRoot + 4A 5980B4F3 73 Bytes [ 00, FF, 48, 08, 75, 37, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemoveFtRoot + 94 5980B53D 83 Bytes [ FF, 0D, 00, 40, 00, 00, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemoveFtRoot + E8 5980B591 8 Bytes [ 50, 18, 01, 50, 10, 83, 60, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemoveFtRootForced + 3A 5980B6C3 69 Bytes [ EC, 51, 64, A1, 18, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemoveFtRootForced + 80 5980B709 17 Bytes [ FC, 80, 60, 0D, FB, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemoveFtRootForced + 92 5980B71B 10 Bytes [ 55, 8B, EC, 51, 57, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemoveFtRootForced + 9D 5980B726 14 Bytes [ 51, 68, 9F, 42, 56, 77, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemoveFtRootForced + AC 5980B735 42 Bytes [ 00, 00, FF, 15, 0C, 13, 4B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsGetInfo + 1 5980B8BA 10 Bytes [ 01, 6A, 00, 6A, 00, 68, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsGetInfo + C 5980B8C5 21 Bytes [ 75, 08, 68, 90, BC, 5D, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsGetInfo + 22 5980B8DB 24 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsGetInfo + 3B 5980B8F4 285 Bytes [ 6A, 00, 68, 78, BC, 5D, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsEnum + 9 5980BA12 20 Bytes [ C9, 8D, 50, 04, 23, CA, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsEnum + 1F 5980BA28 98 Bytes [ 02, 80, 89, 13, 89, 4B, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsEnum + 82 5980BA8B 13 Bytes [ FF, A1, 3C, C6, 5D, 77, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsEnum + 90 5980BA99 100 Bytes [ 8B, D3, 52, 8B, D6, 52, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsEnum + F5 5980BAFE 61 Bytes [ 5E, 5B, C9, C2, 04, 00, 90, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsManagerGetConfigInfo + 37 5980BCB8 7 Bytes [ 6E, 00, 0A, 01, 08, 00, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsManagerGetConfigInfo + 3F 5980BCC0 7 Bytes [ 13, 21, 0C, 00, 9C, 00, 0B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsManagerGetConfigInfo + 47 5980BCC8 7 Bytes [ 10, 00, 00, 01, 0B, 00, 14 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsManagerGetConfigInfo + 4F 5980BCD0 53 Bytes [ 04, 01, 13, 20, 18, 00, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsManagerGetConfigInfo + 85 5980BD06 7 Bytes [ 00, 00, 02, 00, 05, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsManagerSendSiteInfo + E 5980BDDF 3 Bytes [ 70, 04, 51 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsManagerSendSiteInfo + 12 5980BDE3 1 Byte [ 48 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsManagerSendSiteInfo + 14 5980BDE5 17 Bytes CALL 597885F2 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsManagerSendSiteInfo + 26 5980BDF7 18 Bytes [ EC, 64, A1, 18, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsManagerSendSiteInfo + 39 5980BE0A 20 Bytes [ 8B, 40, 24, 8B, 40, 40, 5D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAdd + 4D 5980C13C 59 Bytes [ 60, DE, 35, 07, E0, DF, 35, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsAdd + 89 5980C178 220 Bytes [ 50, 8B, 37, 07, F0, 8C, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemove + 4 5980C255 23 Bytes [ DE, 37, 07, 10, E0, 37, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemove + 1C 5980C26D 6 Bytes CALL 5980C9A9 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemove + 23 5980C274 61 Bytes [ 28, EA, 37, 07, B8, EB, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemove + 63 5980C2B4 167 Bytes [ 88, 01, 38, 07, 18, 03, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsRemove + 10B 5980C35C 71 Bytes [ 18, FF, 39, 07, 90, 00, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsSetInfo + 1B 5980C3A4 28 Bytes [ A0, 19, 3A, 07, 58, 1B, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsSetInfo + 39 5980C3C2 389 Bytes [ 00, 00, 20, 25, 3A, 07, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsSetInfo + 1BF 5980C548 96 Bytes [ A0, 26, 39, 07, 38, 28, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsSetInfo + 220 5980C5A9 339 Bytes [ 00, 00, 00, B0, 4B, 39, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetDfsSetInfo + 374 5980C6FD 92 Bytes [ 68, 3B, 07, 50, 6A, 3B, 07, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcOpenW + 1C 5980D030 43 Bytes [ 0C, FF, 15, 00, 10, F4, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcOpenW + 48 5980D05C 120 Bytes [ 0C, 57, 8B, 7D, 08, 33, DB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcOpenA + 3C 5980D0D5 113 Bytes [ 8B, 4D, FC, 8B, 85, F4, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNextW + 2 5980D147 85 Bytes [ FF, 75, 08, 8B, CE, E8, 9E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNextW + 58 5980D19D 6 Bytes [ 51, 8D, 8D, FC, FE, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNextW + 5F 5980D1A4 90 Bytes [ 51, 8D, 8D, F8, FE, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNextA + 13 5980D1FF 18 Bytes [ EC, 83, EC, 0C, 57, 33, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNextA + 26 5980D212 1 Byte [ 45 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNextA + 28 5980D214 44 Bytes [ 50, 68, 3C, 62, FA, 77, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNextA + 55 5980D241 18 Bytes [ FF, FF, 8B, F8, 8B, C7, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNextA + 68 5980D254 183 Bytes [ 73, 00, 00, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcCloseW + 5F 5980D30D 86 Bytes [ 8B, 4D, FC, 8B, 45, 98, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcCloseW + B6 5980D364 11 Bytes [ 56, 00, 65, 00, 72, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcCloseW + C2 5980D370 5 Bytes [ 6E, 00, 5C, 00, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcCloseW + C8 5980D376 45 Bytes [ 6F, 00, 6C, 00, 69, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcCloseW + F6 5980D3A4 5 Bytes [ 4C, 00, 69, 00, 73 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetAnyDCName + 8 5980D521 15 Bytes CALL 597AB595 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetAnyDCName + 18 5980D531 23 Bytes [ 8B, F0, 81, E6, FF, FF, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetAnyDCName + 30 5980D549 7 Bytes [ 4D, FC, 5F, 8B, C6, 5E, 5B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetAnyDCName + 38 5980D551 3 Bytes [ DB, DA, F9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetAnyDCName + 3C 5980D555 4 Bytes [ C9, C2, 0C, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesA + 17 5980D5E1 11 Bytes [ EC, 83, EC, 54, A1, 80, D2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesA + 23 5980D5ED 68 Bytes [ 0C, 6A, 27, 8D, 4D, AC, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesA + 68 5980D632 16 Bytes [ 90, 90, 25, 00, 73, 00, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesA + 79 5980D643 24 Bytes [ 00, 78, 00, 70, 00, 6C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesA + 92 5980D65C 9 Bytes [ 46, 00, 54, 00, 57, 00, 41, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesW + 14 5980D7AD 98 Bytes [ 45, 08, 51, 50, 33, F6, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesW + 77 5980D810 19 Bytes [ 4D, FC, 8B, C6, 5E, E8, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesW + 8B 5980D824 3 Bytes [ 66, 00, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesW + 8F 5980D828 1 Byte [ 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesW + 91 5980D82A 49 Bytes [ 61, 00, 72, 00, 65, 00, 5C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesExA + C 5980D8ED 60 Bytes [ FF, 85, C0, 75, 02, 33, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesExA + 4A 5980D92B 18 Bytes CALL 5980D884 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesExA + 60 5980D941 34 Bytes [ 90, 8B, FF, 55, 8B, EC, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesExA + 83 5980D964 16 Bytes [ FF, 50, 33, F6, 57, 46, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesExA + 94 5980D975 36 Bytes [ 8D, 85, F0, FD, FF, FF, 50, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesExW + 2F 5980DBD8 23 Bytes [ 08, 83, 20, 00, 6A, 13, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesExW + 4A 5980DBF3 5 Bytes [ 6A, 13, 58, C2, 18 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesExW + 50 5980DBF9 12 Bytes [ 90, 90, 90, 90, 90, 6A, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesExW + 5E 5980DC07 42 Bytes CALL 5980FEAD C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsAddressToSiteNamesExW + 89 5980DC32 51 Bytes [ 83, C8, FF, C3, 90, 90, 90, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcSiteCoverageA + 1A 5980DDC3 34 Bytes [ 12, 8A, 59, 01, 8A, D3, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcSiteCoverageA + 3D 5980DDE6 38 Bytes [ EB, 06, 7E, 0B, 40, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcSiteCoverageA + 65 5980DE0E 3 Bytes [ 8B, FF, 55 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcSiteCoverageA + 69 5980DE12 77 Bytes [ EC, 8B, 45, 0C, 8B, 08, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcSiteCoverageA + B7 5980DE60 28 Bytes CALL 5980DC95 C:\WINDOWS\system32\NETAPI32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcSiteCoverageW + 7C 5980DFC5 109 Bytes [ EC, 8B, 45, 0C, C7, 00, 1E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcSiteCoverageW + EA 5980E033 28 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcSiteCoverageW + 107 5980E050 108 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameWithAccountA + 5D 5980E0BE 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameWithAccountA + 75 5980E0D6 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameWithAccountA + 8D 5980E0EE 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameWithAccountA + A5 5980E106 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameWithAccountA + CD 5980E12E 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetDCName + 33 5980E3D2 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetDCName + 3C 5980E3DB 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetDCName + 58 5980E3F7 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetDCName + 62 5980E401 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetDCName + 69 5980E408 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsValidateSubnetNameA + 9 5980E58A 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsValidateSubnetNameA + 3B 5980E5BC 101 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetSiteNameA + 61 5980E622 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetSiteNameA + 74 5980E635 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameA + 16 5980E650 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameA + 18 5980E652 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetDcNameA + 24 5980E65E 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerReqChallenge + 10 5980E673 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerReqChallenge + 21 5980E684 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerReqChallenge + 30 5980E693 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerReqChallenge + 32 5980E695 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerReqChallenge + 59 5980E6BC 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerAuthenticate + 10 5980E6E1 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerAuthenticate + 27 5980E6F8 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerAuthenticate + 36 5980E707 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerAuthenticate + 38 5980E709 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerAuthenticate + 5F 5980E730 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerAuthenticate2 + 10 5980E751 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerAuthenticate2 + 2A 5980E76B 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerAuthenticate2 + 39 5980E77A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerAuthenticate2 + 3B 5980E77C 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerAuthenticate2 + 62 5980E7A3 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerAuthenticate3 + 10 5980E7C9 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerAuthenticate3 + 2D 5980E7E6 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerAuthenticate3 + 3C 5980E7F5 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerAuthenticate3 + 3E 5980E7F7 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerAuthenticate3 + 65 5980E81E 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerPasswordSet + 10 5980E841 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerPasswordSet + 2A 5980E85B 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerPasswordSet + 39 5980E86A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerPasswordSet + 3B 5980E86C 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerPasswordSet + 62 5980E893 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerPasswordSet2 + 10 5980E8B9 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerPasswordSet2 + 2A 5980E8D3 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerPasswordSet2 + 39 5980E8E2 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerPasswordSet2 + 3B 5980E8E4 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerPasswordSet2 + 62 5980E90B 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseDeltas + 10 5980E931 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseDeltas + 16 5980E937 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseDeltas + 31 5980E952 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseDeltas + 40 5980E961 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseDeltas + 42 5980E963 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseSync + 10 5980E9B1 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseSync + 16 5980E9B7 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseSync + 31 5980E9D2 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseSync + 40 5980E9E1 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseSync + 42 5980E9E3 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseSync2 + 10 5980EA31 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseSync2 + 16 5980EA37 28 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseSync2 + 34 5980EA55 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseSync2 + 43 5980EA64 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseSync2 + 45 5980EA66 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetAccountDeltas + 10 5980EAB1 39 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetAccountDeltas + 39 5980EADA 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetAccountDeltas + 48 5980EAE9 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetAccountDeltas + 4A 5980EAEB 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetAccountDeltas + 6B 5980EB0C 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetAccountSync + 10 5980EB31 39 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetAccountSync + 39 5980EB5A 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetAccountSync + 48 5980EB69 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetAccountSync + 4A 5980EB6B 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetAccountSync + 6B 5980EB8C 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonControl + 10 5980EBB1 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonControl + 14 5980EBB5 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonControl + 26 5980EBC7 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonControl + 3D 5980EBDE 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonControl + 3F 5980EBE0 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonControl2 + 10 5980EC29 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonControl2 + 14 5980EC2D 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonControl2 + 2A 5980EC43 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonControl2 + 35 5980EC4E 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonControl2 + 3E 5980EC57 39 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseRedo + 10 5980ED09 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseRedo + 16 5980ED0F 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseRedo + 2E 5980ED27 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseRedo + 3D 5980ED36 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDatabaseRedo + 3F 5980ED38 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetEnumerateTrustedDomains + 23 5980ED94 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetEnumerateTrustedDomains + 3E 5980EDAF 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetEnumerateTrustedDomains + 40 5980EDB1 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetEnumerateTrustedDomains + 67 5980EDD8 64 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetEnumerateTrustedDomains + A9 5980EE1A 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsEnumerateDomainTrustsA + 3E 5980EFD9 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsEnumerateDomainTrustsA + 43 5980EFDE 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsEnumerateDomainTrustsA + 5E 5980EFF9 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsEnumerateDomainTrustsA + 79 5980F014 2 Bytes [ BC, 39 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsEnumerateDomainTrustsA + 7C 5980F017 28 Bytes [ 70, FF, FF, FF, 0F, 85, 27, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonGetDomainInfo + 43 5980F365 60 Bytes [ 1D, 7C, 10, 4B, 77, 50, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonGetDomainInfo + 80 5980F3A2 31 Bytes [ 75, C8, FF, 15, 8C, 10, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLogonSetServiceBits + 12 5980F3C3 26 Bytes [ C8, 53, 57, FF, 15, B4, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLogonSetServiceBits + 2D 5980F3DE 3 Bytes [ 7C, 0B, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLogonSetServiceBits + 31 5980F3E2 37 Bytes [ B8, 8B, 0D, D8, 71, 5D, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetLogonSetServiceBits + 57 5980F408 32 Bytes [ 90, 90, 90, 90, A1, 30, 8E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetlogonGetTrustRid + 11 5980F42A 5 Bytes [ 35, 00, 60, 5D, 77 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetlogonGetTrustRid + 17 5980F430 20 Bytes [ 15, 54, 61, 5D, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetlogonGetTrustRid + 2C 5980F445 13 Bytes [ CA, 83, E1, 03, F3, A4, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetlogonGetTrustRid + 3A 5980F453 95 Bytes [ 8B, FF, 55, 8B, EC, 51, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetlogonComputeServerDigest + 32 5980F4B3 147 Bytes [ F8, 8B, C1, 03, F2, C1, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetlogonComputeClientDigest + 56 5980F547 88 Bytes [ 15, CC, 12, 4B, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerPasswordGet + 3F 5980F5A0 77 Bytes [ 17, 05, 00, 39, 75, 08, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerTrustPasswordsGet + 15 5980F5EE 56 Bytes [ F8, 76, 50, 8D, 4D, 08, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerTrustPasswordsGet + 4E 5980F627 3 Bytes [ 00, 00, 39 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerTrustPasswordsGet + 52 5980F62B 49 Bytes [ F8, 75, 07, C7, 45, F8, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetServerGetTrustInfo + C 5980F65D 131 Bytes CALL 5980F778 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsDeregisterDnsHostRecordsW + 10 5980F6E1 36 Bytes [ 57, 68, 70, 9D, 5D, 77, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsDeregisterDnsHostRecordsW + 35 5980F706 225 Bytes [ 00, 00, 50, FF, D6, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetForestTrustInformationW + 1C 5980F7E8 9 Bytes [ 15, 74, 10, 4B, 77, 8B, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetForestTrustInformationW + 26 5980F7F2 17 Bytes [ FF, 35, 00, 60, 5D, 77, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetForestTrustInformationW + 38 5980F804 20 Bytes [ 01, 0F, 84, 65, 54, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetForestTrustInformationW + 4D 5980F819 25 Bytes [ E1, 03, F3, A4, 33, C0, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsGetForestTrustInformationW + 67 5980F833 10 Bytes [ 55, 8B, EC, 5D, FF, 25, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetGetForestTrustInformation 5980F841 15 Bytes [ 90, 8B, FF, 55, 8B, EC, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetGetForestTrustInformation + 10 5980F851 22 Bytes [ 00, 00, 0F, 85, 33, EE, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetGetForestTrustInformation + 27 5980F868 13 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetGetForestTrustInformation + 35 5980F876 113 Bytes [ 4D, 18, 53, 56, 57, B8, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsMergeForestTrustInformationW + 37 5980F8E8 51 Bytes [ 35, 00, 60, 5D, 77, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsMergeForestTrustInformationW + 6B 5980F91C 10 Bytes [ 55, 0C, 53, 8B, 5D, 08, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsMergeForestTrustInformationW + 76 5980F927 26 Bytes [ 10, 56, 33, F6, 57, 89, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsMergeForestTrustInformationW + 91 5980F942 81 Bytes [ 66, 89, B5, 94, FD, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsMergeForestTrustInformationW + E3 5980F994 91 Bytes [ 84, 7D, 8C, FB, FF, FF, 66, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetGetDCList + 11 5980FA73 4 Bytes [ B5, 7C, FB, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetGetDCList + 16 5980FA78 10 Bytes [ 53, 68, AC, DA, 4B, 77, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetGetDCList + 22 5980FA84 15 Bytes CALL 5980F86D C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetGetDCList + 32 5980FA94 61 Bytes [ FF, 74, 20, B9, CC, 6D, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetGetDCList + 70 5980FAD2 31 Bytes [ FF, 74, 0C, FF, B5, 88, FB, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonUasLogon + 5A 5980FB61 31 Bytes [ 85, C0, 0F, 84, 2B, 51, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonUasLogoff + 10 5980FB81 52 Bytes CALL 597F4848 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonUasLogoff + 45 5980FBB6 117 Bytes [ 14, 01, 74, 03, 83, CB, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonSamLogon + 54 5980FC2D 245 Bytes CALL 597F45E3 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonSamLogonEx + 1A 5980FD23 38 Bytes [ 45, FC, 53, 8D, 45, F8, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonSamLogonEx + 41 5980FD4A 7 Bytes [ 90, 90, 90, 90, 90, 8B, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonSamLogonEx + 49 5980FD52 14 Bytes [ 8B, EC, F6, 05, 68, 61, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonSamLogonEx + 58 5980FD61 17 Bytes [ 5D, 90, 90, 90, 90, 90, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonSamLogonEx + 6A 5980FD73 86 Bytes [ 08, 83, 65, F8, 00, 53, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonSamLogoff + 21 5980FDCA 60 Bytes [ 85, C0, 89, 45, FC, 0F, 8C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonSamLogoff + 5E 5980FE07 37 Bytes CALL 598224A4 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonSendToSam + C 5980FE2D 37 Bytes [ 75, 10, FF, 75, 0C, E8, 42, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetLogonSendToSam + 33 5980FE54 93 Bytes [ F8, 85, C0, 5F, 5E, 5B, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NlBindingAddServerToCache + 21 5980FEB2 7 Bytes [ 85, C0, 0F, 85, 50, F6, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NlBindingAddServerToCache + 29 5980FEBA 36 Bytes [ FF, 05, 4C, 8B, 5D, 77, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NlBindingAddServerToCache + 4E 5980FEDF 65 Bytes [ 10, 8B, CB, FF, 75, 0C, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NlBindingAddServerToCache + 91 5980FF22 199 Bytes [ 8B, 45, B0, 89, 43, 38, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NlBindingSetAuthInfo + 57 5980FFEA 52 Bytes [ FF, FF, 90, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NlBindingSetAuthInfo + 8D 59810020 63 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NlBindingSetAuthInfo + CD 59810060 56 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NlBindingRemoveServerFromCache + 34 59810099 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NlBindingRemoveServerFromCache + 5F 598100C4 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NlBindingRemoveServerFromCache + 7E 598100E3 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NlBindingRemoveServerFromCache + A2 59810107 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NlBindingRemoveServerFromCache + A7 5981010C 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameEnum + 22 59810D9F 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameEnum + 38 59810DB5 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameEnum + 3F 59810DBC 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameEnum + 54 59810DD1 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameEnum + 60 59810DDD 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameGetInfo + 12 59810EB3 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameGetInfo + 19 59810EBA 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameGetInfo + 1D 59810EBE 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameGetInfo + 21 59810EC2 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageNameGetInfo + 32 59810ED3 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleAbortDownlevelServerUpgrade + 6 59810FD5 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetReplExportDirEnum + 6 59810FE0 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!DsRoleCancel + 6 59810FEB 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetAuditWrite + 6 59810FF6 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsGetVersion + 13 59811019 18 Bytes [ 00, 90, 90, 5C, 00, 41, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsGetVersion + 26 5981102C 7 Bytes [ 54, 00, 79, 00, 70, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsGetVersion + 2E 59811034 6 Bytes [ 5C, 00, 25, 00, 64, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsGetVersion + 36 5981103C 3 Bytes [ 30, 00, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsGetVersion + 3A 59811040 3 Bytes [ 25, 75, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsCreateLocalPartition + 11 598110DA 1 Byte [ 46 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsCreateLocalPartition + 13 598110DC 3 Bytes [ 46, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsCreateLocalPartition + 17 598110E0 3 Bytes [ 43, 00, 46 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsCreateLocalPartition + 1B 598110E4 25 Bytes [ 5F, 00, 50, 00, 45, 00, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsCreateLocalPartition + 35 598110FE 7 Bytes [ 50, 00, 41, 00, 4C, 00, 45 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsDeleteLocalPartition + 13 598111B4 7 Bytes [ 90, 90, 90, 90, 50, 00, 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsDeleteLocalPartition + 1B 598111BC 13 Bytes [ 6F, 00, 74, 00, 6F, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsDeleteLocalPartition + 29 598111CA 7 Bytes [ 53, 00, 74, 00, 64, 00, 46 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsDeleteLocalPartition + 31 598111D2 7 Bytes [ 69, 00, 6C, 00, 65, 00, 45 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsDeleteLocalPartition + 39 598111DA 35 Bytes [ 64, 00, 69, 00, 74, 00, 69, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsSetLocalVolumeState + 11 5981127A 1 Byte [ 4C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsSetLocalVolumeState + 13 5981127C 3 Bytes [ 45, 00, 43 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsSetLocalVolumeState + 17 59811280 3 Bytes [ 4E, 00, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsSetLocalVolumeState + 1B 59811284 23 Bytes [ 33, 00, 32, 00, 2E, 00, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsSetLocalVolumeState + 33 5981129C 7 Bytes [ 50, 00, 72, 00, 65, 00, 73 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsSetServerInfo + 5D 59811396 19 Bytes [ 5C, 00, 5A, 00, 3A, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsSetServerInfo + 71 598113AA 61 Bytes [ 4E, 00, 43, 00, 5C, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsSetServerInfo + AF 598113E8 33 Bytes [ 40, 00, 07, 00, 41, 00, 11, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsCreateExitPoint + 11 5981140A 1 Byte [ 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsCreateExitPoint + 13 5981140C 169 Bytes [ 2D, 89, 5B, 77, 5D, 89, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsCreateExitPoint + BD 598114B6 35 Bytes [ 2E, 00, 74, 00, 6D, 00, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsDeleteExitPoint + 11 598114DA 1 Byte [ 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsDeleteExitPoint + 13 598114DC 3 Bytes [ 65, 00, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsDeleteExitPoint + 17 598114E0 3 Bytes [ 74, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsDeleteExitPoint + 1B 598114E4 15 Bytes [ 43, 00, 61, 00, 74, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsDeleteExitPoint + 2B 598114F4 7 Bytes [ 65, 00, 73, 00, 20, 00, 4D ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsModifyPrefix + 11 598115A2 1 Byte [ 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsModifyPrefix + 13 598115A4 3 Bytes [ 74, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsModifyPrefix + 17 598115A8 3 Bytes [ 67, 00, 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsModifyPrefix + 1B 598115AC 13 Bytes [ 72, 00, 69, 00, 65, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsModifyPrefix + 29 598115BA 7 Bytes [ 6E, 00, 61, 00, 67, 00, 65 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsFixLocalVolume + 5A 598116AB 20 Bytes [ 90, 53, 48, 47, 65, 74, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsFixLocalVolume + 6F 598116C0 19 Bytes [ 1A, A1, E5, 42, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsFixLocalVolume + 83 598116D4 179 Bytes [ 53, 01, 00, 00, E4, A6, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsManagerReportSiteInfo + 5F 59811788 11 Bytes JMP 358121D7 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsManagerReportSiteInfo + 6B 59811794 15 Bytes [ 9C, 01, 0C, 00, D4, 1B, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsManagerReportSiteInfo + 7B 598117A4 107 Bytes [ 1F, 0D, 03, 00, 60, 4E, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsManagerReportSiteInfo + E7 59811810 11 Bytes [ 6E, AA, 03, 00, F4, 7C, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsManagerReportSiteInfo + F3 5981181C 31 Bytes [ 18, 49, 0A, 00, 4F, 71, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsGetFtServers + 2F 598119E8 11 Bytes [ 20, 22, 12, 00, DD, 21, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsGetFtServers + 3B 598119F4 19 Bytes [ 68, 9D, 0D, 00, 65, 2F, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsGetFtServers + 4F 59811A08 35 Bytes [ 7F, 9E, 0D, 00, 38, 9E, 0D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsGetFtServers + 73 59811A2C 11 Bytes [ DD, 21, 12, 00, 70, 22, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetDfsGetFtServers + 7F 59811A38 63 Bytes [ 84, B4, 03, 00, CF, 84, 09, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetConnectionEnum + 27 59812044 195 Bytes [ C3, C8, 01, 00, DA, C8, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetConnectionEnum + EB 59812108 7 Bytes [ 34, CC, 01, 00, 4F, CC, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetConnectionEnum + F3 59812110 59 Bytes [ 70, CC, 01, 00, 81, CC, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetFileClose + 13 5981214C 3 Bytes [ 9D, CD, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetFileClose + 17 59812150 3 Bytes [ B5, CD, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetFileClose + 1B 59812154 27 Bytes [ C5, CD, 01, 00, D5, CD, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetFileClose + 37 59812170 11 Bytes [ 71, CE, 01, 00, 85, CE, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetFileClose + 43 5981217C 1 Byte [ 01 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetFileEnum + 25 59812226 1 Byte [ 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetFileEnum + 27 59812228 31 Bytes [ 57, 00, 58, 00, 59, 00, 5A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetFileEnum + 47 59812248 39 Bytes [ 67, 00, 68, 00, 69, 00, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetFileEnum + 6F 59812270 7 Bytes [ 7B, 00, 7C, 00, 7D, 00, 7E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetFileEnum + 77 59812278 1 Byte [ 7F ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetFileGetInfo + 17 59812338 1 Byte [ DF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetFileGetInfo + 19 5981233A 3 Bytes [ E0, 00, E1 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetFileGetInfo + 1D 5981233E 3 Bytes [ E2, 00, E3 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetFileGetInfo + 21 59812342 15 Bytes [ E4, 00, E5, 00, E6, 00, E7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetFileGetInfo + 31 59812352 7 Bytes [ EC, 00, ED, 00, EE, 00, EF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetSessionDel + E 59812407 245 Bytes [ 01, 46, 01, 47, 01, 48, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetSessionEnum + 3C 598124FD 150 Bytes [ 6E, 64, 57, 69, 6E, 64, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetSessionEnum + D3 59812594 50 Bytes [ 00, 43, 6F, 44, 65, 61, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetSessionEnum + 106 598125C7 1 Byte [ 63 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetSessionEnum + 109 598125CA 130 Bytes [ 6E, 65, 63, 74, 4F, 62, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetSessionGetInfo + 6C 5981264D 229 Bytes [ 43, 6F, 46, 72, 65, 65, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareCheck + 2A 59812733 144 Bytes [ 43, 6F, 47, 65, 74, 44, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareCheck + BB 598127C4 75 Bytes [ 43, 6F, 47, 65, 74, 4D, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareDelSticky + 17 59812810 54 Bytes [ 43, 6F, 47, 65, 74, 50, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareDelSticky + 4E 59812847 123 Bytes [ 43, 6F, 47, 65, 74, 53, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareDelSticky + CA 598128C3 38 Bytes [ 69, 7A, 65, 53, 65, 63, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareEnumSticky + 9 598128EA 32 Bytes [ 6F, 49, 6E, 76, 61, 6C, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetShareEnumSticky + 2A 5981290B 258 Bytes [ 43, 6F, 49, 73, 48, 61, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerDiskEnum + 1D 59812A0E 180 Bytes [ 72, 79, 52, 65, 6C, 65, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerDiskEnum + D2 59812AC3 105 Bytes [ 61, 74, 65, 00, 43, 6F, 52, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerSetInfo + 34 59812B2D 190 Bytes [ 43, 6F, 52, 65, 76, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerSetInfo + F3 59812BEC 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerSetInfo + F5 59812BEE 165 Bytes [ 43, 6F, 54, 61, 73, 6B, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerSetInfo + 19B 59812C94 6 Bytes [ 66, 00, 43, 6F, 6D, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerSetInfo + 1A2 59812C9B 6 Bytes [ 5F, 43, 53, 74, 64, 53 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerTransportAdd + 32 59812CEB 21 Bytes [ 67, 53, 65, 72, 76, 65, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerTransportAdd + 48 59812D01 70 Bytes [ 43, 6F, 6D, 50, 73, 5F, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerTransportAdd + 8F 59812D48 19 Bytes [ 00, 43, 6F, 6D, 50, 73, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerTransportAdd + A4 59812D5D 107 Bytes [ 5F, 49, 6E, 76, 6F, 6B, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerTransportAdd + 110 59812DC9 80 Bytes [ 43, 6F, 6D, 50, 73, 5F, 49, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerTransportDel + 50 59812E91 72 Bytes [ 43, 6F, 6D, 50, 73, 5F, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerTransportDel + 99 59812EDA 242 Bytes [ 65, 72, 50, 72, 6F, 78, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerTransportEnum + C4 59812FCD 30 Bytes [ 6F, 6E, 69, 6B, 65, 72, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerTransportEnum + E3 59812FEC 87 Bytes [ 74, 65, 4F, 6C, 65, 41, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRemoteTOD + 3B 59813044 292 Bytes [ 44, 63, 6F, 6D, 43, 68, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRemoteTOD + 160 59813169 51 Bytes [ 52, 75, 6E, 6E, 69, 6E, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRemoteTOD + 195 5981319E 210 Bytes [ 00, 48, 41, 43, 43, 45, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRemoteTOD + 268 59813271 1 Byte [ 68 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRemoteTOD + 26A 59813273 8 Bytes [ 6C, 00, 48, 44, 43, 5F, 55, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerTransportAddEx + 9E 59813697 426 Bytes [ 4F, 6C, 65, 43, 72, 65, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerComputerNameAdd + 179 59813842 133 Bytes [ 4F, 6C, 65, 49, 73, 43, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerComputerNameAdd + 1FF 598138C8 165 Bytes [ 65, 72, 79, 43, 72, 65, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerComputerNameDel + 50 5981396E 153 Bytes [ 65, 74, 43, 6C, 69, 70, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerComputerNameDel + EA 59813A08 250 Bytes [ 79, 73, 41, 6C, 6C, 6F, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetServerComputerNameDel + 1E5 59813B03 381 Bytes [ 53, 4E, 42, 5F, 55, 73, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetFileSecurity + 35 59813C81 58 Bytes [ 53, 74, 67, 49, 73, 53, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetFileSecurity + 70 59813CBC 7 Bytes [ 53, 74, 67, 4F, 70, 65, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpGetFileSecurity + 78 59813CC4 609 Bytes [ 72, 6F, 70, 53, 74, 67, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpSetFileSecurity + 1E4 59813F29 40 Bytes [ 33, C0, 40, C2, 04, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpSetFileSecurity + 20D 59813F52 32 Bytes [ 46, 18, 5E, C3, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpSetFileSecurity + 22E 59813F73 2 Bytes [ 00, C3 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpSetFileSecurity + 233 59813F78 157 Bytes [ 90, 90, 8B, FF, 55, 8B, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetpSetFileSecurity + 2D1 59814016 50 Bytes [ 75, 18, 8D, 4E, F8, FF, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaSetInfo + 4 59814BD5 23 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaSetInfo + 1C 59814BED 4 Bytes [ FF, 81, C1, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaSetInfo + 21 59814BF2 27 Bytes [ 00, 00, 81, C9, 00, 00, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaSetInfo + 3D 59814C0E 7 Bytes [ B8, FF, 00, 03, 80, EB, F5 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaSetInfo + 45 59814C16 38 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaUserEnum + 21 59814CC2 95 Bytes [ 84, C0, 5F, 74, 0F, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaUserEnum + 81 59814D22 41 Bytes [ 83, C0, 04, 3B, F0, 0F, 82, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaUserEnum + AB 59814D4C 154 Bytes [ C7, 21, 5D, FC, 39, 5D, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaUserEnum + 146 59814DE7 67 Bytes [ 75, 0C, FF, 75, 08, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaUserSetInfo + 37 59814E2C 66 Bytes [ 00, 89, 45, FC, 89, 4D, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaUserSetInfo + 7A 59814E6F 172 Bytes [ F0, 90, 90, 90, 90, 90, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaTransportEnum + 53 59814F1C 59 Bytes [ 44, 06, 1C, 8B, 50, 10, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaTransportEnum + 8F 59814F58 2 Bytes [ 85, C0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaTransportEnum + 93 59814F5C 115 Bytes [ 10, 7C, 63, 56, 6A, 04, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaTransportEnum + 107 59814FD0 52 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaTransportAdd 59815005 141 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaTransportAdd + 8E 59815093 2 Bytes [ AC, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaTransportAdd + 91 59815096 12 Bytes [ 00, 89, 83, B8, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaTransportAdd + 9E 598150A3 21 Bytes [ 89, 83, C0, 00, 00, 00, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaTransportAdd + B4 598150B9 40 Bytes [ 00, 00, 8D, 7B, 04, 57, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaTransportDel + 13 598150E4 52 Bytes CALL 597DF312 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaTransportDel + 48 59815119 7 Bytes [ 00, 00, 5D, C2, 18, 00, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaTransportDel + 53 59815124 13 Bytes [ 8B, FF, 55, 8B, EC, 83, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetWkstaTransportDel + 61 59815132 149 Bytes CALL 052CFCE2 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageBufferSend + 2F 598151C8 19 Bytes [ 8B, 4D, 08, 85, C9, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageBufferSend + 43 598151DC 123 Bytes [ 02, 00, 83, 7D, 10, 04, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageBufferSend + BF 59815258 9 Bytes CALL 597D42AE C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageBufferSend + C9 59815262 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetMessageBufferSend + CB 59815264 90 Bytes CALL 59815006 C:\WINDOWS\system32\NETAPI32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetWkstaResetDfsCache + 21 598153AA 56 Bytes [ 33, C0, 5E, C3, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetWkstaResetDfsCache + 5A 598153E3 7 Bytes [ FF, 50, 8D, 8D, E0, FD, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetWkstaResetDfsCache + 62 598153EB 15 Bytes CALL 598110C0 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetWkstaResetDfsCache + 72 598153FB 90 Bytes CALL 598110BF C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!I_NetWkstaResetDfsCache + CD 59815456 19 Bytes [ 89, B5, D4, FB, FF, FF, 83, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetJoinDomain + 47 59815811 8 Bytes JMP 59845E9C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetJoinDomain + 50 5981581A 30 Bytes [ FF, FF, BE, EE, 53, 77, D1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetJoinDomain + 6F 59815839 46 Bytes [ 08, 56, 89, 45, D8, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetJoinDomain + 9E 59815868 3 Bytes [ F8, 89, 75 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetJoinDomain + A2 5981586C 71 Bytes [ C7, 45, D0, 18, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUnjoinDomain + E 59815947 23 Bytes [ 18, C7, 00, 80, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUnjoinDomain + 27 59815960 8 Bytes [ 83, F8, 40, 0F, 85, A8, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUnjoinDomain + 30 59815969 5 Bytes [ C7, 06, 07, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUnjoinDomain + 36 5981596F 18 Bytes [ EB, A9, 90, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetUnjoinDomain + 49 59815982 169 Bytes [ 53, 56, 33, F6, 39, 75, 08, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRenameMachineInDomain + 2F 59815A68 6 Bytes [ C0, 7E, 32, 81, FE, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRenameMachineInDomain + 37 59815A70 7 Bytes [ C0, 74, 20, 81, FE, 7F, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRenameMachineInDomain + 3F 59815A78 78 Bytes [ C0, 74, 0E, 81, FE, 98, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRenameMachineInDomain + 8E 59815AC7 80 Bytes [ 00, C0, 0F, 84, C4, 7D, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRenameMachineInDomain + DF 59815B18 80 Bytes [ C0, 7E, 34, 81, FE, 01, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetValidateName + 40 59815B69 82 Bytes [ 00, 0D, 00, 00, 07, 80, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetValidateName + 93 59815BBC 60 Bytes [ 0C, 0C, 07, 0C, 0C, 0C, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetValidateName + D1 59815BFA 17 Bytes [ 8B, 80, 80, 0F, 00, 00, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetValidateName + E3 59815C0C 169 Bytes [ 55, 8B, EC, 56, 8B, F1, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetJoinableOUs + 26 59815CB7 12 Bytes [ 00, 8B, 80, 80, 0F, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetJoinableOUs + 34 59815CC5 1 Byte [ F8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetJoinableOUs + 36 59815CC7 3 Bytes CALL 598097E3 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetJoinableOUs + 3A 59815CCB 50 Bytes [ FF, 3B, C3, 89, 45, 08, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetGetJoinableOUs + 6D 59815CFE 264 Bytes JMP 59815C75 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetAddAlternateComputerName + 36 59815E07 54 Bytes JMP 5981C937 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetAddAlternateComputerName + 6F 59815E40 4 Bytes [ 8B, FF, 55, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetAddAlternateComputerName + 74 59815E45 112 Bytes [ 51, 51, 56, 57, 8B, 79, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetAddAlternateComputerName + E5 59815EB6 6 Bytes [ C9, C2, 0C, 00, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetAddAlternateComputerName + EE 59815EBF 39 Bytes [ 8B, FF, 55, 8B, EC, 51, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRemoveAlternateComputerName + 26 59815EE7 25 Bytes [ 75, 08, 89, 01, 8B, CE, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRemoveAlternateComputerName + 40 59815F01 13 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRemoveAlternateComputerName + 4E 59815F0F 17 Bytes [ 56, 57, 33, FF, 66, 39, BB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRemoveAlternateComputerName + 61 59815F22 16 Bytes [ 8D, 8E, D0, 00, 00, 00, 39, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetRemoveAlternateComputerName + 72 59815F33 3 Bytes [ 80, 80, 0F ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetSetPrimaryComputerName + 4 59815FB5 44 Bytes [ 90, 90, 8B, FF, 55, 8B, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetSetPrimaryComputerName + 31 59815FE2 6 Bytes [ 00, 00, 8B, 80, 80, 0F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetSetPrimaryComputerName + 38 59815FE9 6 Bytes [ 00, 8B, 00, 03, 01, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetSetPrimaryComputerName + 3F 59815FF0 9 Bytes [ 8B, 08, 6A, 01, 8D, 55, B4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetSetPrimaryComputerName + 49 59815FFA 149 Bytes [ 51, 24, 85, C0, 7C, 1F, 83, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetEnumerateComputerNames + 17 598160B8 23 Bytes JMP 59818A7D C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetEnumerateComputerNames + 2F 598160D0 29 Bytes JMP 597E4F46 C:\WINDOWS\system32\NETAPI32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetEnumerateComputerNames + 4D 598160EE 101 Bytes [ 89, 4D, FC, 8B, CE, 89, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetEnumerateComputerNames + B3 59816154 32 Bytes [ 8B, 08, 03, 4E, 6C, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] NETAPI32.dll!NetEnumerateComputerNames + D4 59816175 197 Bytes [ 45, FC, 3B, 86, 88, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiEncryptPasswords + FFFF507F 71B71189 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiEncryptPasswords + FFFF5085 71B7118F 14 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiEncryptPasswords + FFFF5094 71B7119E 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiEncryptPasswords + FFFF5097 71B711A1 5 Bytes [ FF, FF, FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiEncryptPasswords + FFFF509D 71B711A7 7 Bytes [ FF, FF, FF, FF, FF, FF, FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCloseHandle + 3 71B71EFB 13 Bytes [ 37, A2, 66, 36, B1, 74, 3F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCloseHandle + 11 71B71F09 34 Bytes [ C5, 7F, EC, B9, 83, 79, E2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCloseHandle + 34 71B71F2C 66 Bytes [ FF, FF, FF, FF, FF, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCloseHandle + 77 71B71F6F 145 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCloseHandle + 10A 71B72002 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamConnect + C 71B738B5 47 Bytes [ FF, 8B, 76, 64, 85, F6, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamConnect + 3E 71B738E7 82 Bytes [ 00, 83, A1, C8, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamConnect + 92 71B7393B 77 Bytes [ F6, 47, 0C, 20, 0F, 85, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamConnect + E0 71B73989 101 Bytes [ 00, 8B, 45, 14, 89, 30, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamConnect + 147 71B739F0 1 Byte [ 8B ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamFreeMemory + C 71B73A58 30 Bytes [ 55, 8B, EC, 8B, 4D, 10, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamFreeMemory + 2B 71B73A77 123 Bytes [ 8B, 7D, 0C, B8, 05, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamLookupDomainInSamServer + 53 71B73AF3 12 Bytes [ 50, 08, 33, C0, 40, 5F, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamLookupDomainInSamServer + 61 71B73B01 3 Bytes [ 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamLookupDomainInSamServer + 65 71B73B05 30 Bytes [ FF, 55, 8B, EC, 51, 56, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamLookupDomainInSamServer + 84 71B73B24 20 Bytes [ FF, 25, F4, 15, 4B, 77, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenDomain + 11 71B73B39 33 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenDomain + 33 71B73B5B 59 Bytes [ 04, 75, 3F, 8B, 4F, 40, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenDomain + 6F 71B73B97 23 Bytes [ 83, 65, FC, 00, 5E, 5B, B9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenDomain + 87 71B73BAF 24 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenDomain + A0 71B73BC8 13 Bytes [ F1, 0F, 83, 82, 4F, 05, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateDomainsInSamServer + B 71B73C37 46 Bytes [ 75, 18, 33, C0, 66, 8B, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateDomainsInSamServer + 3A 71B73C66 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateDomainsInSamServer + 3D 71B73C69 1 Byte [ 1C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateDomainsInSamServer + 41 71B73C6D 63 Bytes [ FF, 75, 10, FF, 75, 0C, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateDomainsInSamServer + 81 71B73CAD 91 Bytes CALL 71C64D97 C:\WINDOWS\System32\NETUI0.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamLookupNamesInDomain + 68 71B73F74 42 Bytes [ 8B, 08, 50, FF, 51, 04, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamLookupNamesInDomain + 93 71B73F9F 37 Bytes [ FF, 75, D8, 8D, 45, D4, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamLookupNamesInDomain + BA 71B73FC6 112 Bytes [ F8, 89, 04, 91, 33, D2, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamLookupNamesInDomain + 12B 71B74037 101 Bytes [ 76, 1F, 33, C0, 66, 8B, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenUser + 19 71B7409D 30 Bytes [ FF, 74, 34, 8B, 5D, F4, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenUser + 38 71B740BC 5 Bytes [ 61, 5D, 77, 83, C6 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenUser + 3E 71B740C2 31 Bytes [ 4B, 75, E5, 57, 6A, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenUser + 5E 71B740E2 30 Bytes [ FF, 35, 00, 60, 5D, 77, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenUser + 7D 71B74101 8 Bytes [ 55, 8B, EC, F6, 81, AC, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetAliasMembership 71B741D8 12 Bytes [ 90, 90, 90, 90, 8B, FF, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetAliasMembership + D 71B741E5 59 Bytes [ F1, 33, FF, 39, 7E, 5C, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetAliasMembership + 49 71B74221 22 Bytes CALL 71B6FE39 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetAliasMembership + 61 71B74239 42 Bytes [ 5F, 5E, C9, C3, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetAliasMembership + 8C 71B74264 3 Bytes [ 5F, CF, FE ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetGroupsForUser 71B742A8 129 Bytes [ 90, 90, 8B, FF, 55, 8B, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetGroupsForUser + 82 71B7432A 2 Bytes [ 46, 5C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetGroupsForUser + 85 71B7432D 41 Bytes [ 08, 50, FF, 51, 08, E9, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamRidToSid + 7 71B74357 60 Bytes JMP 71B611C5 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamRidToSid + 44 71B74394 9 Bytes [ 8B, 3D, B4, 87, 5D, 77, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamRidToSid + 4E 71B7439E 12 Bytes [ B0, 87, 5D, 77, 8B, 15, B4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamRidToSid + 5B 71B743AB 49 Bytes [ 55, 08, A3, B4, 87, 5D, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamRidToSid + 8D 71B743DD 42 Bytes [ 53, 56, 57, 64, A1, 18, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetCompatibilityMode + 24 71B74431 41 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryDisplayInformation + 4 71B7445B 74 Bytes [ 00, 00, 00, 8B, 80, 80, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryDisplayInformation + 4F 71B744A6 18 Bytes [ 00, 8B, 43, 28, A9, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryDisplayInformation + 62 71B744B9 50 Bytes JMP 71B72D30 C:\WINDOWS\System32\SAMLIB.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryDisplayInformation + 95 71B744EC 129 Bytes [ 00, A1, C8, 71, 5D, 77, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryDisplayInformation + 117 71B7456E 14 Bytes [ 55, 8B, EC, 51, 51, 57, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamLookupIdsInDomain + 4 71B7457D 8 Bytes [ 80, 80, 0F, 00, 00, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamLookupIdsInDomain + D 71B74586 37 Bytes [ FC, 0F, 84, 41, 1D, 05, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamLookupIdsInDomain + 33 71B745AC 9 Bytes [ 89, 30, 33, C0, 5E, 5F, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamLookupIdsInDomain + 3D 71B745B6 6 Bytes [ 90, 90, 90, 90, 90, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamLookupIdsInDomain + 44 71B745BD 133 Bytes [ 55, 8B, EC, 51, 51, 83, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryInformationDomain 71B746B8 57 Bytes [ 90, 90, 8B, FF, 53, 56, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryInformationDomain + 3B 71B746F3 21 Bytes [ 83, 7D, 18, 00, 8B, 98, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryInformationDomain + 51 71B74709 54 Bytes [ 85, C0, 0F, 85, 4F, A6, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryInformationDomain + 89 71B74741 1 Byte [ 1C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryInformationDomain + 95 71B7474D 30 Bytes [ 51, 51, 57, 8B, F9, 64, A1, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQuerySecurityObject + 1F 71B74790 43 Bytes [ 8B, 45, F8, 5F, C9, C2, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQuerySecurityObject + 4B 71B747BC 37 Bytes [ 7D, 10, 8D, 56, 08, 89, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQuerySecurityObject + 71 71B747E2 96 Bytes [ C7, 83, C0, 03, 83, E0, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQuerySecurityObject + D2 71B74843 14 Bytes [ 0F, 85, 6F, A5, 00, 00, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQuerySecurityObject + E1 71B74852 6 Bytes [ 75, 14, 8B, 18, 52, 51 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamTestPrivateFunctionsDomain + 17 71B78EB9 34 Bytes [ 4B, 14, 85, C9, C7, 45, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamTestPrivateFunctionsDomain + 3A 71B78EDC 31 Bytes [ 42, 00, 00, 00, 89, 45, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamTestPrivateFunctionsDomain + 5A 71B78EFC 148 Bytes [ 82, 3C, FC, 04, 00, 03, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamTestPrivateFunctionsDomain + EF 71B78F91 2 Bytes [ 1D, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamTestPrivateFunctionsDomain + F3 71B78F95 23 Bytes CALL 71B6121A .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiChangePasswordUser2 + 3 71B790EF 63 Bytes [ 2C, 04, 00, 5F, 8B, C6, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiChangePasswordUser2 + 43 71B7912F 139 Bytes [ 5F, 89, 48, 08, 5E, 5D, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiChangePasswordUser2 + D0 71B791BC 24 Bytes [ FF, C9, C3, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiChangePasswordUser2 + E9 71B791D5 4 Bytes [ 85, C0, 7C, 12 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiChangePasswordUser2 + EE 71B791DA 3 Bytes [ AA, 89, FE ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiOemChangePasswordUser2 + AC 71B793B5 25 Bytes CALL 71B612AD .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiOemChangePasswordUser2 + C6 71B793CF 23 Bytes [ 75, 0C, 8B, 08, FF, 75, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiOemChangePasswordUser2 + DE 71B793E7 11 Bytes [ 90, 90, 90, 90, 6A, 01, B9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiOemChangePasswordUser2 + EA 71B793F3 7 Bytes [ B6, 84, FE, FF, C2, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiOemChangePasswordUser2 + F4 71B793FD 34 Bytes [ 90, 90, 8B, FF, 55, 8B, EC, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiSetDSRMPasswordOWF + A 71B79669 14 Bytes [ 00, FF, 15, 00, 13, 4B, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiSetDSRMPasswordOWF + 19 71B79678 10 Bytes [ FF, 15, 24, 12, 4B, 77, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetSecurityObject + 6 71B79683 17 Bytes [ 36, 00, 00, 74, 0C, 81, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetSecurityObject + 18 71B79695 6 Bytes [ 75, 0C, 53, E8, 93, 43 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetSecurityObject + 20 71B7969D 51 Bytes [ 89, 45, FC, 8B, CE, E8, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetSecurityObject + 54 71B796D1 28 Bytes [ 75, 08, 53, FF, 75, 0C, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetSecurityObject + 71 71B796EE 1 Byte [ 55 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamShutdownSamServer + 27 71B79790 57 Bytes [ 00, 04, 00, 0D, FF, FF, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamShutdownSamServer + 61 71B797CA 49 Bytes CALL 71B7109F C:\WINDOWS\System32\SAMLIB.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetInformationDomain + B 71B797FC 5 Bytes [ 33, F6, E9, 92, 7A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetInformationDomain + 11 71B79802 114 Bytes [ FF, 83, 4E, 04, 08, E9, E3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetInformationDomain + 85 71B79876 10 Bytes [ 8B, FF, 55, 8B, EC, 56, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateGroupInDomain + 8 71B79881 2 Bytes [ A0, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateGroupInDomain + C 71B79885 49 Bytes [ 85, C0, 0F, 85, 29, 07, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateGroupInDomain + 3F 71B798B8 30 Bytes [ 20, 5E, 0F, 85, 6D, C8, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateGroupInDomain + 5E 71B798D7 26 Bytes [ FF, 51, 04, 8B, 45, FC, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateGroupInDomain + 79 71B798F2 132 Bytes [ 75, 20, 8B, F1, FF, 75, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateGroupsInDomain + 16 71B79977 7 Bytes [ 20, 89, 86, B8, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateGroupsInDomain + 1E 71B7997F 4 Bytes [ 2F, 64, A1, 18 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateGroupsInDomain + 23 71B79984 24 Bytes [ 00, 00, 8B, 80, 80, 0F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateGroupsInDomain + 3D 71B7999E 84 Bytes [ 00, 8B, 18, 3B, DF, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateGroupsInDomain + 93 71B799F4 34 Bytes [ 90, 90, 90, 8B, FF, 55, 8B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateUserInDomain + C 71B79A35 22 Bytes [ 53, 56, 57, 8B, F9, BB, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateUserInDomain + 23 71B79A4C 13 Bytes [ 80, 4E, 02, 04, 57, B9, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateUserInDomain + 31 71B79A5A 28 Bytes [ FF, 80, 66, 03, EF, 8B, CB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateUserInDomain + 4E 71B79A77 49 Bytes [ 55, 8B, EC, 53, 56, 8B, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateUserInDomain + 80 71B79AA9 11 Bytes [ B8, 80, 0F, 00, 00, 85, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateUsersInDomain + 2E 71B79B3F 2 Bytes [ 8B, C8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateUsersInDomain + 31 71B79B42 26 Bytes [ 0D, 00, 00, 00, 8B, 75, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateUsersInDomain + 4C 71B79B5D 55 Bytes [ 83, A6, C8, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateUsersInDomain + 84 71B79B95 21 Bytes [ 04, 85, 60, 95, 5D, 77, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateUsersInDomain + 9A 71B79BAB 64 Bytes [ 83, F8, 09, 0F, 83, 54, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateAliasInDomain + B 71B79BEC 74 Bytes [ D7, 50, FF, 15, E4, 12, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateAliasInDomain + 56 71B79C37 26 Bytes [ 75, 0C, 57, 6A, 04, 59, BF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateAliasInDomain + 71 71B79C52 7 Bytes [ 45, 08, 89, 02, 8B, 08, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateAliasInDomain + 79 71B79C5A 54 Bytes [ 51, 04, 33, C0, 5F, 5E, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateAliasInDomain + B0 71B79C91 89 Bytes [ 7D, 08, 33, F6, 3B, FE, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateAliasesInDomain + 23 71B79CEC 40 Bytes CALL 71B613D7 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamEnumerateAliasesInDomain + 4D 71B79D16 143 Bytes [ 0C, 56, FF, 10, 89, 45, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetDisplayEnumerationIndex + 15 71B79DA6 157 Bytes [ 08, FF, D0, 8B, D8, EB, C5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenGroup + B 71B79E44 37 Bytes CALL 71B79218 C:\WINDOWS\System32\SAMLIB.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenGroup + 31 71B79E6A 49 Bytes [ 75, 23, B8, C8, 06, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenGroup + 64 71B79E9D 47 Bytes CALL 71B8FDC0 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenGroup + 94 71B79ECD 13 Bytes [ FF, FF, 0F, 85, F6, 27, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenGroup + A2 71B79EDB 73 Bytes [ 0F, 85, 28, 28, 05, 00, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryInformationGroup + C 71B79F25 20 Bytes [ 50, 04, 8B, 06, 8D, 8D, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryInformationGroup + 21 71B79F3A 37 Bytes [ 0F, 8D, 11, 28, 05, 00, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryInformationGroup + 47 71B79F60 36 Bytes [ F3, F7, DE, 8D, 83, A8, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryInformationGroup + 6C 71B79F85 53 Bytes [ 8D, 83, A4, 01, 00, 00, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryInformationGroup + A2 71B79FBB 55 Bytes [ 85, 44, FF, FF, FF, 3B, C1, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetInformationGroup + 35 71B7A042 16 Bytes [ 56, 89, 7D, F8, 89, 7D, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetInformationGroup + 46 71B7A053 3 Bytes [ 00, 6A, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetInformationGroup + 4B 71B7A058 3 Bytes [ E5, 60, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetInformationGroup + 4F 71B7A05C 72 Bytes [ 3B, C7, 7C, 49, 8B, 5D, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamAddMemberToGroup + 14 71B7A0A5 86 Bytes [ 8E, 8F, 00, 00, 8D, 65, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamAddMemberToGroup + 6B 71B7A0FC 52 Bytes [ 51, 0C, 8B, 4D, FC, 5F, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamDeleteGroup + 18 71B7A131 186 Bytes JMP 71B7A0A7 C:\WINDOWS\System32\SAMLIB.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamRemoveMemberFromGroup + 43 71B7A1EC 21 Bytes [ 53, 8D, 4D, C0, 51, 57, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamRemoveMemberFromGroup + 59 71B7A202 30 Bytes CALL 71B65486 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamRemoveMemberFromGroup + 78 71B7A221 27 Bytes [ 75, C0, 56, FF, 50, 30, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetMembersInGroup + C 71B7A23D 23 Bytes [ 51, 08, 39, 7D, C4, 8B, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetMembersInGroup + 24 71B7A255 64 Bytes [ 3B, C7, 7D, 8D, EB, EB, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetMembersInGroup + 65 71B7A296 53 Bytes [ 08, 50, FF, 51, 08, 8B, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetMembersInGroup + 9B 71B7A2CC 99 Bytes [ 14, 85, C0, 7C, 13, 83, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetMemberAttributesOfGroup + 29 71B7A332 81 Bytes [ FC, 50, FF, 51, 18, 5E, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetMemberAttributesOfGroup + 7B 71B7A384 74 Bytes [ FF, 8B, F8, 85, FF, 0F, 8C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenAlias + 40 71B7A3D1 19 Bytes [ 8B, 80, 80, 0F, 00, 00, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenAlias + 54 71B7A3E5 20 Bytes CALL 75B7A4A3 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenAlias + 69 71B7A3FA 6 Bytes [ 09, 48, 0C, 8B, 47, 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenAlias + 70 71B7A401 22 Bytes [ F8, 02, 0F, 84, 2A, 06, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamOpenAlias + 87 71B7A418 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryInformationAlias + 2D 71B7A49E 28 Bytes [ 8D, 5F, 14, 83, 3B, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryInformationAlias + 4A 71B7A4BB 4 Bytes [ 00, 8B, 0B, 57 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryInformationAlias + 4F 71B7A4C0 2 Bytes [ 2E, 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryInformationAlias + 53 71B7A4C4 36 Bytes CALL E934654E .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamQueryInformationAlias + 78 71B7A4E9 199 Bytes [ 85, C0, 0F, 84, 5F, 05, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamDeleteAlias + 30 71B7A5B1 181 Bytes [ FF, 8B, F0, 85, F6, 7C, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamAddMemberToAlias + 56 71B7A667 5 Bytes [ 85, C0, 89, 06, 7C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamAddMemberToAlias + 5C 71B7A66D 15 Bytes [ 8D, 75, D4, A5, A5, A5, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamAddMemberToAlias + 6C 71B7A67D 12 Bytes [ 8B, 4D, FC, 5F, 5E, 8B, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamAddMemberToAlias + 79 71B7A68A 25 Bytes [ C9, C2, 08, 00, 8B, 45, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamRemoveMemberFromAlias + B 71B7A6A4 202 Bytes [ 55, 8B, EC, 51, 56, 8D, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamRemoveMemberFromForeignDomain + 4E 71B7A76F 4 Bytes [ 8B, FF, 53, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamRemoveMemberFromForeignDomain + 53 71B7A774 36 Bytes [ F1, 33, DB, F6, 46, 39, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamRemoveMemberFromForeignDomain + 78 71B7A799 166 Bytes [ 15, D0, 18, 4B, 77, 64, A1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetMembersInAlias + 97 71B7A840 2 Bytes [ 45, E8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamGetMembersInAlias + 9B 71B7A844 50 Bytes [ 33, F6, 3B, C6, 89, 75, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamAddMultipleMembersToAlias + 17 71B7A878 104 Bytes [ 00, 8B, 80, 80, 0F, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamAddMultipleMembersToAlias + 80 71B7A8E1 35 Bytes [ 55, 8B, EC, 8D, 45, 04, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamRemoveMultipleMembersFromAlias + 4 71B7A905 131 Bytes [ 90, 8B, FF, 55, 8B, EC, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamRemoveMultipleMembersFromAlias + 88 71B7A989 55 Bytes [ 8B, 0D, D8, 8D, 5D, 77, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamDeleteUser + 20 71B7A9C1 67 Bytes [ 00, 00, 5D, C2, 0C, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamDeleteUser + 64 71B7AA05 18 Bytes [ 51, 04, 33, C0, 5F, 5E, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamDeleteUser + 77 71B7AA18 64 Bytes [ FF, 57, 57, 57, 57, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamDeleteUser + B8 71B7AA59 20 Bytes [ 83, CB, FF, 8B, C3, E9, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamDeleteUser + CF 71B7AA70 36 Bytes [ 8D, 4D, 98, 56, FF, B5, 58, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetInformationUser + F 71B7AAB1 27 Bytes CALL 71B65281 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetInformationUser + 2B 71B7AACD 93 Bytes JMP 71B91827 C:\WINDOWS\System32\ntlanman.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetInformationUser + 89 71B7AB2B 61 Bytes JMP 71B7694A C:\WINDOWS\System32\SAMLIB.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetInformationUser + C7 71B7AB69 11 Bytes [ 8B, 4D, FC, 5F, 8B, C6, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamSetInformationUser + D3 71B7AB75 35 Bytes [ C9, C3, 56, BE, CC, 6D, 5D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiLmChangePasswordUser + 39 71B7B096 14 Bytes JMP 71B611C4 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiLmChangePasswordUser + 48 71B7B0A5 35 Bytes [ 56, BE, F8, 6D, 5D, 77, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiLmChangePasswordUser + 6C 71B7B0C9 47 Bytes [ B9, 28, 6E, 5D, 77, A3, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiLmChangePasswordUser + 9C 71B7B0F9 33 Bytes [ 68, BA, D3, 4C, 77, 68, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiChangePasswordUser + 12 71B7B11B 61 Bytes [ A3, B4, 87, 5D, 77, A3, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiChangePasswordUser + 50 71B7B159 41 Bytes [ 53, B9, C0, 61, 5D, 77, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiChangePasswordUser + 7A 71B7B183 25 Bytes [ 51, 04, 8B, 75, 08, 8B, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiChangePasswordUser + 94 71B7B19D 98 Bytes [ 05, 34, 72, 5D, 77, 5F, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiChangePasswordUser + F7 71B7B200 60 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamChangePasswordUser + 4 71B7B345 12 Bytes [ 90, 90, 90, 90, 8B, FF, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamChangePasswordUser + 11 71B7B352 272 Bytes [ 5D, 77, 0F, 85, 5A, D0, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamChangePasswordUser + 122 71B7B463 9 Bytes [ 3B, C7, 0F, 8C, 15, 03, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamChangePasswordUser + 12C 71B7B46D 1 Byte [ 24 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamChangePasswordUser + 12E 71B7B46F 133 Bytes [ E0, 0C, 83, F8, 0C, 0F, 84, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamChangePasswordUser3 + 42 71B7BA37 17 Bytes [ 8D, 0C, 00, A3, A8, 92, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamChangePasswordUser3 + 54 71B7BA49 2 Bytes [ B5, 60 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamChangePasswordUser3 + 59 71B7BA4E 25 Bytes [ 8B, FA, F3, A5, A3, 04, 8E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamChangePasswordUser3 + 73 71B7BA68 16 Bytes [ 00, 09, 05, D0, 6D, 5D, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamChangePasswordUser3 + 84 71B7BA79 22 Bytes CALL 71B611C4 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamChangePasswordUser2 + 2 71B7BAD1 63 Bytes [ 15, 98, 18, 4B, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamChangePasswordUser2 + 43 71B7BB12 2 Bytes [ 6C, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamChangePasswordUser2 + 47 71B7BB16 27 Bytes [ 5F, 8D, 45, BC, 89, 85, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamChangePasswordUser2 + 64 71B7BB33 2 Bytes [ 64, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamChangePasswordUser2 + 68 71B7BB37 21 Bytes [ 89, BD, 74, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiSetBootKeyInformation + C 71B7BB84 42 Bytes [ FF, 8B, F8, FF, D6, 03, F8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiSetBootKeyInformation + 38 71B7BBB0 52 Bytes [ FF, 50, FF, 15, 7C, 12, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiSetBootKeyInformation + 6E 71B7BBE6 3 Bytes [ 39, 85, 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiSetBootKeyInformation + 73 71B7BBEB 196 Bytes [ FF, 0F, 85, 1D, 5C, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiChangeKeys + 27 71B7BCB0 21 Bytes [ 5C, 00, 73, 00, 79, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiChangeKeys + 3D 71B7BCC6 1 Byte [ 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiChangeKeys + 3F 71B7BCC8 17 Bytes [ 6E, 00, 6C, 00, 6F, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiChangeKeys + 51 71B7BCDA 56 Bytes [ 65, 00, 00, 00, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiChangeKeys + 8A 71B7BD13 102 Bytes [ 90, 90, 90, 8B, FF, 55, 8B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateUser2InDomain + 9 71B7BED9 39 Bytes [ 00, 8B, 3D, 78, 12, 4B, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateUser2InDomain + 32 71B7BF02 73 Bytes CALL 71B61385 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateUser2InDomain + 7C 71B7BF4C 46 Bytes [ D3, 85, C0, 8B, 35, 24, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateUser2InDomain + AB 71B7BF7B 169 Bytes [ FF, 15, 30, 12, 4B, 77, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamCreateUser2InDomain + 155 71B7C025 30 Bytes [ CA, 83, E1, 03, F3, A4, 5F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiEncryptPasswords + 38 71B7C142 8 Bytes JMP 65A9C449 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiEncryptPasswords + 41 71B7C14B 64 Bytes [ C8, 83, E1, 03, F3, A4, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiEncryptPasswords + 82 71B7C18C 46 Bytes [ 8D, 45, FC, 50, 8D, 45, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiEncryptPasswords + B1 71B7C1BB 44 Bytes [ 8B, 45, F4, 3B, C6, 74, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] SAMLIB.dll!SamiEncryptPasswords + DE 71B7C1E8 30 Bytes [ 8B, 45, 08, 8B, 40, 04, 83, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopResetPolicySettingStatus + FFF712E6 766214DD 18 Bytes [ 00, 20, 00, 75, 00, 70, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopResetPolicySettingStatus + FFF712F9 766214F0 78 Bytes [ 20, 00, 73, 00, 74, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopResetPolicySettingStatus + FFF71349 76621540 51 Bytes [ 55, 00, 70, 00, 64, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopResetPolicySettingStatus + FFF7137D 76621574 11 Bytes [ 20, 00, 74, 00, 6F, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopResetPolicySettingStatus + FFF71389 76621580 9 Bytes [ 6C, 00, 6F, 00, 63, 00, 61, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetUserProfileDirectoryW + B 7662635A 47 Bytes [ 28, 00, 73, 00, 29, 00, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetUserProfileDirectoryW + 3B 7662638A 5 Bytes [ 67, 00, 2E, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetUserProfileDirectoryW + 41 76626390 7 Bytes [ 50, 00, 72, 00, 6F, 00, 63 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetUserProfileDirectoryW + 49 76626398 93 Bytes [ 65, 00, 73, 00, 73, 00, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetUserProfileDirectoryW + A7 766263F6 39 Bytes [ 6E, 00, 67, 00, 20, 00, 41, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAllUsersProfileDirectoryW + 11 766266AA 91 Bytes [ 20, 00, 61, 00, 70, 00, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAllUsersProfileDirectoryW + 6D 76626706 13 Bytes [ 2E, 00, 20, 00, 52, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAllUsersProfileDirectoryW + 7B 76626714 21 Bytes [ 6E, 00, 20, 00, 63, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAllUsersProfileDirectoryW + 91 7662672A 17 Bytes [ 30, 00, 38, 00, 58, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAllUsersProfileDirectoryW + A3 7662673C 41 Bytes [ 6F, 00, 63, 00, 65, 00, 73, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!CreateEnvironmentBlock + 70 766269FD 119 Bytes [ 68, 8C, 54, 62, 76, 68, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!CreateEnvironmentBlock + E9 76626A76 101 Bytes CALL 7659C19F .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!CreateEnvironmentBlock + 14F 76626ADC 136 Bytes JMP 76626DD9 C:\WINDOWS\system32\USERENV.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!CreateEnvironmentBlock + 1D8 76626B65 94 Bytes [ FF, 8B, F8, 3B, FB, 7D, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!CreateEnvironmentBlock + 237 76626BC4 74 Bytes [ 6C, 76, 85, C0, 75, 5A, 8B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetDefaultUserProfileDirectoryW + 6C 7662760F 100 Bytes [ 08, 74, 0F, 68, 08, B5, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetDefaultUserProfileDirectoryW + D1 76627674 21 Bytes CALL 76625150 C:\WINDOWS\system32\USERENV.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetDefaultUserProfileDirectoryW + E8 7662768B 10 Bytes [ 68, BC, B2, 6A, 76, 53, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetDefaultUserProfileDirectoryW + F4 76627697 9 Bytes [ 83, C4, 18, EB, 15, 50, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetDefaultUserProfileDirectoryW + FF 766276A2 10 Bytes [ 68, BC, B2, 6A, 76, 53, 56, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ExpandEnvironmentStringsForUserW + 27 76627752 15 Bytes [ 65, 00, 20, 00, 2D, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ExpandEnvironmentStringsForUserW + 37 76627762 19 Bytes [ 69, 00, 7A, 00, 65, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ExpandEnvironmentStringsForUserW + 4B 76627776 7 Bytes [ 38, 00, 58, 00, 2E, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ExpandEnvironmentStringsForUserW + 53 7662777E 27 Bytes [ 90, 90, 4C, 00, 6F, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ExpandEnvironmentStringsForUserW + 6F 7662779A 1 Byte [ 46 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DestroyEnvironmentBlock + 9 76627C9E 5 Bytes [ 54, 00, 2E, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DestroyEnvironmentBlock + F 76627CA4 15 Bytes [ 90, 90, 90, 90, 4C, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DestroyEnvironmentBlock + 1F 76627CB4 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DestroyEnvironmentBlock + 21 76627CB6 1 Byte [ 2D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DestroyEnvironmentBlock + 23 76627CB8 1 Byte [ 20 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RegisterGPNotification + E 7662866F 24 Bytes [ 00, 69, 00, 65, 00, 73, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RegisterGPNotification + 27 76628688 15 Bytes [ 67, 00, 2E, 00, 00, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RegisterGPNotification + 37 76628698 7 Bytes [ 6B, 00, 41, 00, 63, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RegisterGPNotification + 3F 766286A0 17 Bytes [ 41, 00, 70, 00, 70, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RegisterGPNotification + 51 766286B2 7 Bytes [ 20, 00, 4E, 00, 6F, 00, 6E ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!UnregisterGPNotification + 53 76628784 9 Bytes [ 47, 00, 65, 00, 74, 00, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!UnregisterGPNotification + 5D 7662878E 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!UnregisterGPNotification + 5F 76628790 3 Bytes [ 53, 00, 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!UnregisterGPNotification + 63 76628794 5 Bytes [ 64, 00, 20, 00, 66 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!UnregisterGPNotification + 69 7662879A 1 Byte [ 61 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!WaitForMachinePolicyForegroundProcessing + E 76628A58 57 Bytes [ 32, 00, 78, 00, 25, 00, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!WaitForMachinePolicyForegroundProcessing + 48 76628A92 1 Byte [ 30 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!WaitForMachinePolicyForegroundProcessing + 4A 76628A94 1 Byte [ 34 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!WaitForMachinePolicyForegroundProcessing + 4C 76628A96 1 Byte [ 78 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!WaitForMachinePolicyForegroundProcessing + 4E 76628A98 1 Byte [ 20 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetProfileType + 71 76628FB2 13 Bytes [ 90, 90, 90, 90, 90, 90, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetProfileType + 7F 76628FC0 21 Bytes [ 3A, 00, 3A, 00, 49, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetProfileType + 95 76628FD6 37 Bytes [ 65, 00, 20, 00, 2D, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetProfileType + BB 76628FFC 61 Bytes [ 63, 00, 63, 00, 65, 00, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetProfileType + F9 7662903A 9 Bytes [ 73, 00, 6F, 00, 70, 00, 43, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!WaitForUserPolicyForegroundProcessing + F 7662915E 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!WaitForUserPolicyForegroundProcessing + 11 76629160 15 Bytes [ 6F, 00, 72, 00, 20, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!WaitForUserPolicyForegroundProcessing + 21 76629170 17 Bytes [ 65, 00, 74, 00, 75, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!WaitForUserPolicyForegroundProcessing + 33 76629182 21 Bytes [ 55, 00, 4C, 00, 4C, 00, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!WaitForUserPolicyForegroundProcessing + 49 76629198 9 Bytes [ 6F, 00, 6E, 00, 20, 00, 6F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetNextFgPolicyRefreshInfo + 6 766295D5 3 Bytes [ FF, 3B, F7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetNextFgPolicyRefreshInfo + A 766295D9 127 Bytes [ F0, 89, 7B, 0C, 89, 7B, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetNextFgPolicyRefreshInfo + 8B 7662965A 88 Bytes [ 83, C4, 0C, FF, 75, 08, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetNextFgPolicyRefreshInfo + E5 766296B4 165 Bytes [ 83, C4, 0C, BF, 57, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetNextFgPolicyRefreshInfo + 18B 7662975A 12 Bytes [ FF, 75, 1C, 8D, 4D, DC, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!LoadUserProfileW + 20 7662A2E7 33 Bytes [ FF, FF, 0F, 84, F2, 07, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!LoadUserProfileW + 43 7662A30A 4 Bytes CALL 765AC3AB .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!LoadUserProfileW + 48 7662A30F 15 Bytes [ 8B, 07, 53, 8D, 8D, 5C, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!LoadUserProfileW + 59 7662A320 4 Bytes [ FF, 89, 9D, 5C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!LoadUserProfileW + 5F 7662A326 155 Bytes [ FF, 57, FF, 50, 18, 3B, C3, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopLoggingEnabled + E 7662E705 38 Bytes [ 02, 6C, 76, 74, 0B, 50, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopLoggingEnabled + 36 7662E72D 42 Bytes [ FF, B5, 00, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopLoggingEnabled + 61 7662E758 14 Bytes [ 15, A0, 00, 6C, 76, 8B, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopLoggingEnabled + 70 7662E767 26 Bytes [ 51, 08, 8B, C7, 5B, 8B, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopLoggingEnabled + 8B 7662E782 17 Bytes [ 52, 00, 65, 00, 67, 00, 69, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!EnterCriticalPolicySection + 7 7662F1F6 11 Bytes [ 66, 00, 69, 00, 6C, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!EnterCriticalPolicySection + 13 7662F202 57 Bytes [ 73, 00, 70, 00, 65, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!EnterCriticalPolicySection + 4D 7662F23C 19 Bytes [ 63, 00, 68, 00, 74, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!EnterCriticalPolicySection + 61 7662F250 1 Byte [ 62 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!EnterCriticalPolicySection + 63 7662F252 15 Bytes [ 61, 00, 72, 00, 2E, 00, 0D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!FreeGPOListW + 11 76631B48 42 Bytes [ 2D, 33, 39, 33, B9, 35, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!FreeGPOListW + 3C 76631B73 5 Bytes [ 37, 5E, 37, 70, 37 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!FreeGPOListW + 42 76631B79 506 Bytes [ 37, 82, 3A, 92, 3A, 9B, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!FreeGPOListW + 23D 76631D74 115 Bytes [ 74, 00, 00, 00, 8E, 3C, 95, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!FreeGPOListW + 2B1 76631DE8 83 Bytes [ 58, 00, 00, 00, 01, 30, 10, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!LeaveCriticalPolicySection + 11 7663446A 55 Bytes [ 63, 00, 68, 00, 74, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!LeaveCriticalPolicySection + 4B 766344A4 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!LeaveCriticalPolicySection + 4D 766344A6 1 Byte [ 67 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!LeaveCriticalPolicySection + 51 766344AA 1 Byte [ 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!LeaveCriticalPolicySection + 53 766344AC 1 Byte [ 74 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetProfilesDirectoryW + 16 7666365F 22 Bytes [ 00, 02, 00, 34, 00, 20, 03, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetProfilesDirectoryW + 2D 76663676 29 Bytes [ 34, 00, 28, 03, 00, 00, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetProfilesDirectoryW + 4B 76663694 17 Bytes [ 16, 00, 03, 80, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetProfilesDirectoryW + 5D 766636A6 10 Bytes [ 35, 00, 16, 00, 03, 80, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetProfilesDirectoryW + 68 766636B1 16 Bytes [ 00, 34, 00, 40, 03, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!LoadUserProfileA + 4D 76667458 173 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!LoadUserProfileA + FB 76667506 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!LoadUserProfileA + FF 7666750A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!LoadUserProfileA + 101 7666750C 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!LoadUserProfileA + 103 7666750E 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetProfilesDirectoryA + 32 76667B81 146 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetProfilesDirectoryA + C5 76667C14 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetProfilesDirectoryA + CB 76667C1A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetProfilesDirectoryA + CD 76667C1C 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetProfilesDirectoryA + CF 76667C1E 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetDefaultUserProfileDirectoryA + 18 76667CEB 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetDefaultUserProfileDirectoryA + 32 76667D05 146 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetDefaultUserProfileDirectoryA + C5 76667D98 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetDefaultUserProfileDirectoryA + C7 76667D9A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetDefaultUserProfileDirectoryA + C9 76667D9C 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAllUsersProfileDirectoryA + 32 76667EA7 146 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAllUsersProfileDirectoryA + C5 76667F3A 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAllUsersProfileDirectoryA + CD 76667F42 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAllUsersProfileDirectoryA + CF 76667F44 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAllUsersProfileDirectoryA + D1 76667F46 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetUserProfileDirectoryA + 31 76668048 153 Bytes [ 98, 00, 84, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetUserProfileDirectoryA + CB 766680E2 1 Byte [ 5A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetUserProfileDirectoryA + CD 766680E4 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetUserProfileDirectoryA + CF 766680E6 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetUserProfileDirectoryA + D1 766680E8 3 Bytes [ 02, 08, 01 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ExpandEnvironmentStringsForUserA + B3 766683EC 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ExpandEnvironmentStringsForUserA + B5 766683EE 1 Byte [ 30 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ExpandEnvironmentStringsForUserA + B7 766683F0 5 Bytes [ FC, 6F, E7, 7F, 18 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ExpandEnvironmentStringsForUserA + BD 766683F6 3 Bytes [ C7, 01, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ExpandEnvironmentStringsForUserA + C1 766683FA 3 Bytes [ 5E, 66, 18 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetGPOListA + 62 7666898B 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetGPOListA + 7D 766689A6 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetGPOListA + 8A 766689B3 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetGPOListA + A2 766689CB 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetGPOListA + A5 766689CE 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!FreeGPOListA + 25 76668A32 104 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!FreeGPOListA + 8E 76668A9B 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAppliedGPOListA + 9 76668AA9 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAppliedGPOListA + F 76668AAF 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAppliedGPOListA + 30 76668AD0 44 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAppliedGPOListA + 5D 76668AFD 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAppliedGPOListA + 6B 76668B0B 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DeleteProfileA + 31 76668BCC 95 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DeleteProfileA + 92 76668C2D 35 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DeleteProfileA + B6 76668C51 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DeleteProfileA + BF 76668C5A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DeleteProfileA + C1 76668C5C 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!CheckXForestLogon + 43 76670840 37 Bytes [ 31, 00, 2E, 00, 44, 00, 4F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!CheckXForestLogon + 69 76670866 1 Byte [ 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!CheckXForestLogon + 6B 76670868 35 Bytes [ DC, 1A, C9, 77, AE, CE, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!CheckXForestLogon + 91 7667088E 7 Bytes [ 00, 00, 00, 72, 05, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!CheckXForestLogon + 9B 76670898 52 Bytes [ 22, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DeleteProfileW + 9 76674B0A 133 Bytes [ 74, 00, 5F, 00, 53, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DeleteProfileW + 8F 76674B90 27 Bytes [ 63, 00, 72, 00, 69, 00, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DeleteProfileW + AC 76674BAD 79 Bytes [ 00, 00, 00, CE, A9, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DeleteProfileW + FC 76674BFD 10 Bytes [ 00, 00, 00, 14, 01, 52, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DeleteProfileW + 107 76674C08 11 Bytes [ 68, 00, 74, 00, 5F, 00, 53, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!UnloadUserProfile + 47 7667D4EE 763 Bytes [ 0D, 86, 2A, CD, 3F, 84, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!UnloadUserProfile + 343 7667D7EA 17 Bytes [ 76, 4D, E0, BE, 45, 2F, 4F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!UnloadUserProfile + 355 7667D7FC 136 Bytes [ 49, 3A, 97, ED, FA, 5C, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!UnloadUserProfile + 3DE 7667D885 7 Bytes [ C8, 00, 31, C9, C1, 1E, 2C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!UnloadUserProfile + 3E6 7667D88D 385 Bytes [ 40, DA, C0, 53, 2B, 7D, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RefreshPolicy + AE 7668E50D 6 Bytes [ 00, 01, 00, D0, 01, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RefreshPolicy + B5 7668E514 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RefreshPolicy + B7 7668E516 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RefreshPolicy + B9 7668E518 1 Byte [ 24 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RefreshPolicy + BB 7668E51A 1 Byte [ 49 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RefreshPolicyEx + 1F 7668F442 7 Bytes [ 00, 00, 00, 00, 00, 00, 48 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RefreshPolicyEx + 29 7668F44C 77 Bytes [ 18, 00, 00, 00, 00, 11, 4A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RefreshPolicyEx + 78 7668F49B 152 Bytes [ 00, 78, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RefreshPolicyEx + 111 7668F534 9 Bytes [ 00, 00, 00, 00, 00, A0, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RefreshPolicyEx + 11B 7668F53E 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ProcessGroupPolicyCompletedEx + 1E 7668F6F3 14 Bytes [ FF, 82, 79, 47, 11, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ProcessGroupPolicyCompletedEx + 2D 7668F702 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ProcessGroupPolicyCompletedEx + 51 7668F726 88 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ProcessGroupPolicyCompletedEx + AB 7668F780 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ProcessGroupPolicyCompletedEx + BC 7668F791 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ProcessGroupPolicyCompleted + 7 76690312 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ProcessGroupPolicyCompleted + 19 76690324 75 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ProcessGroupPolicyCompleted + 65 76690370 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ProcessGroupPolicyCompleted + 77 76690382 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ProcessGroupPolicyCompleted + 88 76690393 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetPreviousFgPolicyRefreshInfo + 16 7669224F 20 Bytes [ 00, 0C, 02, 43, 00, 48, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetPreviousFgPolicyRefreshInfo + 2B 76692264 31 Bytes [ 44, 00, 4F, 00, 43, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ForceSyncFgPolicy + 12 76692284 202 Bytes [ 00, 00, 11, 00, 0E, 9C, 2C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ForceSyncFgPolicy + DE 76692350 213 Bytes [ 6A, E1, 00, 00, 00, 00, 27, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ForceSyncFgPolicy + 1B4 76692426 1 Byte [ 2E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ForceSyncFgPolicy + 1B6 76692428 26 Bytes [ 64, 00, 6F, 00, 63, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!ForceSyncFgPolicy + 1D1 76692443 56 Bytes [ 00, 00, 00, 11, 00, 76, 25, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAppliedGPOListW + B 76693B7E 57 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAppliedGPOListW + 46 76693BB9 53 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAppliedGPOListW + 7D 76693BF0 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAppliedGPOListW + 8E 76693C01 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetAppliedGPOListW + 9C 76693C0F 2 Bytes [ 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GenerateRsopPolicy + D0 76696589 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GenerateRsopPolicy + ED 766965A6 41 Bytes [ 00, 00, 4F, 07, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GenerateRsopPolicy + 118 766965D1 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GenerateRsopPolicy + 12E 766965E7 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GenerateRsopPolicy + 14C 76696605 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetGPOListW + 13C 766976EB 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetGPOListW + 146 766976F5 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetGPOListW + 14E 766976FD 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetGPOListW + 15A 76697709 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!GetGPOListW + 16E 7669771D 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopAccessCheckByType + 211 766AD42E 337 Bytes [ 5A, 9F, B3, DD, 7E, 26, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopAccessCheckByType + 363 766AD580 164 Bytes [ 7F, 42, 78, 3B, 85, E1, A6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopAccessCheckByType + 408 766AD625 580 Bytes [ 1B, BA, 45, 0B, 9A, 3A, BA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopAccessCheckByType + 64D 766AD86A 564 Bytes [ A9, 54, E3, AF, 5B, BE, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopAccessCheckByType + 882 766ADA9F 947 Bytes [ 6C, 14, 0B, 8E, B7, C9, E1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopFileAccessCheck + 382 766ADE53 350 Bytes [ 6C, BC, 2F, 28, 66, 13, ED, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DllCanUnloadNow + 5 766ADFB2 608 Bytes [ 12, 65, 95, 8C, 68, 54, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DllUnregisterServer + 98 766AE213 403 Bytes [ 1C, 60, 35, F3, FE, 90, B2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DllUnregisterServer + 22C 766AE3A7 2 Bytes [ 41, 66 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DllUnregisterServer + 22F 766AE3AA 11 Bytes [ 04, 8C, 24, 06, 86, 3A, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DllGetClassObject + A 766AE3B6 273 Bytes [ 08, 48, C4, 56, FA, 47, F1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DllGetClassObject + 11C 766AE4C8 476 Bytes [ 4E, B3, 02, 02, BF, 2C, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DllGetClassObject + 2F9 766AE6A5 4 Bytes [ 03, 8F, 88, 29 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DllGetClassObject + 2FE 766AE6AA 315 Bytes [ C0, E3, BF, 2E, D6, 3C, 93, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!DllGetClassObject + 43A 766AE7E6 146 Bytes [ D8, BE, 58, 95, 42, 21, 34, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopSetPolicySettingStatus + 8C 766AF075 167 Bytes [ 9C, DD, A5, 73, A3, BF, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopSetPolicySettingStatus + 134 766AF11D 351 Bytes [ B6, 03, 7A, 04, B0, 1B, BB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopSetPolicySettingStatus + 294 766AF27D 14 Bytes [ 43, 0A, D9, 59, 26, 05, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopSetPolicySettingStatus + 2A3 766AF28C 201 Bytes [ 65, E1, 8C, DE, 2A, 7B, A7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopSetPolicySettingStatus + 36D 766AF356 261 Bytes [ 3A, E7, 66, FB, F7, 3F, B0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopResetPolicySettingStatus + 8D 766B0284 67 Bytes [ 34, 6A, A6, 8C, 56, E3, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopResetPolicySettingStatus + D1 766B02C8 8 Bytes [ 53, 8C, FF, 9F, 89, 31, 8C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopResetPolicySettingStatus + DA 766B02D1 197 Bytes [ 4F, FA, DF, E3, 54, 18, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopResetPolicySettingStatus + 1A0 766B0397 6 Bytes [ B9, DB, 3F, A0, FA, 35 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] USERENV.dll!RsopResetPolicySettingStatus + 1A7 766B039E 97 Bytes [ 24, 4A, C8, AD, FB, 1E, DD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!TranslateNameA + FFFF5059 77FC1185 9 Bytes [ 0F, 84, 44, 01, 00, 00, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!TranslateNameA + FFFF5063 77FC118F 2 Bytes [ 83, 7D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!TranslateNameA + FFFF5067 77FC1193 4 Bytes [ 0F, 86, 36, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!TranslateNameA + FFFF506C 77FC1198 73 Bytes [ 00, 8B, 45, 10, 83, C6, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!TranslateNameA + FFFF51E7 77FC1313 16 Bytes [ 80, 5E, 5B, C9, C2, 1C, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetUserNameExW + 2 77FC1C7C 173 Bytes CALL 77FBF5EA .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetUserNameExW + B0 77FC1D2A 13 Bytes [ 45, EC, 89, 5D, F4, 7E, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetUserNameExW + BE 77FC1D38 58 Bytes [ 3B, C3, 59, 74, 13, 8B, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetUserNameExW + F9 77FC1D73 290 Bytes CALL 77FBF987 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetUserNameExA + C2 77FC1E96 11 Bytes [ 70, 00, 43, 00, 72, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetUserNameExA + CE 77FC1EA2 11 Bytes [ 65, 00, 54, 00, 6F, 00, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetUserNameExA + DA 77FC1EAE 5 Bytes [ 20, 00, 2D, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetUserNameExA + E0 77FC1EB4 9 Bytes [ 45, 00, 78, 00, 70, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetUserNameExA + EA 77FC1EBE 21 Bytes [ 64, 00, 47, 00, 72, 00, 70, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!CredMarshalTargetInfo + 41 77FC1F3B 72 Bytes [ 00, 6F, 00, 70, 00, 43, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!CredMarshalTargetInfo + 8A 77FC1F84 17 Bytes [ 20, 00, 75, 00, 73, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!CredMarshalTargetInfo + 9C 77FC1F96 83 Bytes [ 72, 00, 6F, 00, 72, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!CredMarshalTargetInfo + F0 77FC1FEA 302 Bytes [ 6C, 00, 69, 00, 7A, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!CredMarshalTargetInfo + 21F 77FC2119 52 Bytes [ 68, 40, 5C, 67, 76, 50, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaFreeReturnBuffer + E 77FC2179 11 Bytes [ 8D, 85, AC, EB, FF, FF, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaFreeReturnBuffer + 1A 77FC2185 40 Bytes [ FF, 50, 8D, 85, 4C, EB, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaCallAuthenticationPackage + 1B 77FC21AE 20 Bytes [ FF, 50, FF, 15, F4, 12, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaCallAuthenticationPackage + 30 77FC21C3 5 Bytes [ E4, F9, FF, FF, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaCallAuthenticationPackage + 36 77FC21C9 7 Bytes [ D6, 68, 94, 5B, 67, 76, 8D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaCallAuthenticationPackage + 3E 77FC21D1 2 Bytes [ E4, F9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaCallAuthenticationPackage + 42 77FC21D5 7 Bytes [ 50, FF, D7, FF, B5, 9C, EB ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!FreeContextBuffer + C 77FC289A 11 Bytes [ 25, 00, 5C, 00, 73, 00, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!FreeContextBuffer + 18 77FC28A6 11 Bytes [ 65, 00, 6D, 00, 33, 00, 32, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!FreeContextBuffer + 24 77FC28B2 63 Bytes [ 70, 00, 70, 00, 6D, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!FreeContextBuffer + 64 77FC28F2 9 Bytes [ 65, 00, 50, 00, 72, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!FreeContextBuffer + 6E 77FC28FC 17 Bytes [ 69, 00, 6C, 00, 65, 00, 3A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!EnumerateSecurityPackagesW + 16 77FC2A3C 11 Bytes [ 79, 00, 00, 00, 44, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!EnumerateSecurityPackagesW + 22 77FC2A48 119 Bytes [ 74, 00, 65, 00, 50, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!EnumerateSecurityPackagesW + 9A 77FC2AC0 21 Bytes [ 74, 00, 4C, 00, 6F, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!EnumerateSecurityPackagesW + B0 77FC2AD6 11 Bytes [ 74, 00, 77, 00, 61, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!EnumerateSecurityPackagesW + BC 77FC2AE2 1 Byte [ 4D ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!FreeCredentialsHandle + 11 77FC2BB2 75 Bytes [ 90, 90, 90, 90, 90, 90, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!FreeCredentialsHandle + 5D 77FC2BFE 5 Bytes [ 63, 00, 61, 00, 75 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!FreeCredentialsHandle + 63 77FC2C04 1 Byte [ 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!FreeCredentialsHandle + 65 77FC2C06 31 Bytes [ 65, 00, 20, 00, 69, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!FreeCredentialsHandle + 85 77FC2C26 15 Bytes [ 64, 00, 20, 00, 68, 00, 61, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!DeleteSecurityContext + 27 77FC2D44 23 Bytes [ 64, 00, 00, 00, 44, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!DeleteSecurityContext + 3F 77FC2D5C 45 Bytes [ 69, 00, 6C, 00, 65, 00, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!DeleteSecurityContext + 6D 77FC2D8A 7 Bytes [ 25, 00, 73, 00, 2C, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!DeleteSecurityContext + 75 77FC2D92 5 Bytes [ 65, 00, 72, 00, 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!DeleteSecurityContext + 7B 77FC2D98 10 Bytes [ 6F, 00, 72, 00, 20, 00, 25, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AcquireCredentialsHandleW + 61 77FC3174 62 Bytes [ C0, 29, F5, 84, C0, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AcquireCredentialsHandleW + A0 77FC31B3 7 Bytes [ 00, C0, 29, F5, 84, C0, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AcquireCredentialsHandleW + A9 77FC31BC 92 Bytes [ C0, 29, F5, 84, C0, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AcquireCredentialsHandleW + 106 77FC3219 8 Bytes [ 04, 00, 00, C0, 29, F5, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AcquireCredentialsHandleW + 10F 77FC3222 105 Bytes [ 00, 00, C0, 29, F5, 84, C0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!MakeSignature + 7E 77FC3365 73 Bytes [ 29, F5, 84, C0, 04, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!VerifySignature + 14 77FC33AF 44 Bytes [ 84, C0, 04, 00, 00, C0, 29, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!VerifySignature + 41 77FC33DC 22 Bytes [ C0, 29, F5, 84, C0, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaLogonUser + B 77FC33F3 71 Bytes [ 00, C0, 29, F5, 84, C0, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaLogonUser + 53 77FC343B 48 Bytes [ 00, C0, 29, F5, 84, C0, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaLogonUser + 84 77FC346C 62 Bytes [ C0, 29, F5, 84, C0, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaLogonUser + C4 77FC34AC 38 Bytes [ C0, 29, F5, 84, C0, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaLogonUser + EB 77FC34D3 39 Bytes [ 00, C0, 29, F5, 84, C0, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QueryCredentialsAttributesW + 23 77FC34FB 70 Bytes [ 00, C0, 29, F5, 84, C0, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QueryCredentialsAttributesW + 6A 77FC3542 209 Bytes [ 00, 00, C0, 29, F5, 84, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QueryCredentialsAttributesW + 13C 77FC3614 103 Bytes [ C0, 29, F5, 84, C0, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QueryCredentialsAttributesW + 1A4 77FC367C 39 Bytes [ C0, 29, F5, 84, C0, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QueryCredentialsAttributesW + 1CC 77FC36A4 8 Bytes [ C0, 29, F5, 84, C0, 04, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QuerySecurityPackageInfoW + 30 77FC38A5 16 Bytes [ 00, 00, 00, 00, 00, 00, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QuerySecurityPackageInfoW + 41 77FC38B6 35 Bytes [ 01, 00, DC, BA, 38, F8, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QuerySecurityPackageInfoW + 65 77FC38DA 44 Bytes [ 00, 00, 00, 00, 00, 00, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QuerySecurityPackageInfoW + 92 77FC3907 59 Bytes [ 00, 00, 10, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QuerySecurityPackageInfoW + CE 77FC3943 36 Bytes [ 10, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!InitSecurityInterfaceA + 14 77FC3981 51 Bytes [ 00, 00, 00, 18, 77, EB, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!InitSecurityInterfaceA + 49 77FC39B6 57 Bytes [ 00, 00, 38, 8A, E1, E3, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!InitSecurityInterfaceA + 83 77FC39F0 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!InitSecurityInterfaceA + A6 77FC3A13 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!InitSecurityInterfaceA + AD 77FC3A1A 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaRegisterPolicyChangeNotification + 7 77FC4ADC 21 Bytes [ 69, 00, 6D, 00, 70, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaRegisterPolicyChangeNotification + 1D 77FC4AF2 1 Byte [ 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaRegisterPolicyChangeNotification + 1F 77FC4AF4 3 Bytes [ 75, 00, 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaRegisterPolicyChangeNotification + 23 77FC4AF8 15 Bytes [ 65, 00, 72, 00, 00, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaRegisterPolicyChangeNotification + 33 77FC4B08 15 Bytes [ 6F, 00, 72, 00, 65, 00, 55, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaLookupAuthenticationPackage + A 77FC4BBC 11 Bytes [ 6E, 00, 67, 00, 20, 00, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaLookupAuthenticationPackage + 16 77FC4BC8 5 Bytes [ 68, 00, 20, 00, 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaLookupAuthenticationPackage + 1C 77FC4BCE 49 Bytes [ 20, 00, 6E, 00, 65, 00, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaLookupAuthenticationPackage + 4E 77FC4C00 13 Bytes [ 6F, 00, 20, 00, 69, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaLookupAuthenticationPackage + 5C 77FC4C0E 53 Bytes [ 6E, 00, 67, 00, 20, 00, 61, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaRegisterLogonProcess 77FC4D27 8 Bytes [ 90, 52, 00, 65, 00, 73, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaRegisterLogonProcess + 9 77FC4D30 1 Byte [ 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaRegisterLogonProcess + B 77FC4D32 39 Bytes [ 72, 00, 65, 00, 55, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaRegisterLogonProcess + 33 77FC4D5A 45 Bytes [ 20, 00, 62, 00, 65, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaRegisterLogonProcess + 61 77FC4D88 1 Byte [ 73 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaConnectUntrusted + 9 77FC4EB4 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaConnectUntrusted + B 77FC4EB6 61 Bytes [ 55, 00, 73, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaConnectUntrusted + 49 77FC4EF4 17 Bytes [ 65, 00, 49, 00, 6D, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaConnectUntrusted + 5B 77FC4F06 1 Byte [ 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaConnectUntrusted + 5D 77FC4F08 13 Bytes [ 6C, 00, 65, 00, 64, 00, 2E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AcceptSecurityContext + 13 77FC537C 29 Bytes [ 6B, 00, 4C, 00, 6F, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AcceptSecurityContext + 31 77FC539A 23 Bytes [ 61, 00, 69, 00, 6C, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AcceptSecurityContext + 49 77FC53B2 28 Bytes [ 6F, 00, 63, 00, 61, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AcceptSecurityContext + 67 77FC53D0 77 Bytes [ 52, 00, 53, 00, 4F, 00, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AcceptSecurityContext + B5 77FC541E 13 Bytes [ 65, 00, 72, 00, 3A, 00, 3A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QueryContextAttributesW + B8 77FC550F 27 Bytes [ 00, 8D, 5E, 18, 68, 24, B5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QueryContextAttributesW + D4 77FC552B 29 Bytes [ C8, FA, 62, 76, 8B, CB, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!ImpersonateSecurityContext + 12 77FC5549 3 Bytes [ 64, EF, F7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!ImpersonateSecurityContext + 16 77FC554D 54 Bytes [ 39, 3B, 0F, 84, DE, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!RevertSecurityContext + 9 77FC5584 227 Bytes [ 5E, 2C, 68, 04, 67, 6B, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!RevertSecurityContext + ED 77FC5668 17 Bytes [ 47, 00, 70, 00, 4C, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!RevertSecurityContext + FF 77FC567A 5 Bytes [ 74, 00, 4C, 00, 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!RevertSecurityContext + 105 77FC5680 75 Bytes [ 67, 00, 67, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!RevertSecurityContext + 151 77FC56CC 45 Bytes [ 61, 00, 6E, 00, 64, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!InitializeSecurityContextW + 30 77FC5C1A 3 Bytes [ 6F, 00, 67 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!InitializeSecurityContextW + 34 77FC5C1E 5 Bytes [ 42, 00, 6C, 00, 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!InitializeSecurityContextW + 3A 77FC5C24 7 Bytes [ 62, 00, 50, 00, 72, 00, 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!InitializeSecurityContextW + 42 77FC5C2C 7 Bytes [ 70, 00, 65, 00, 72, 00, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!InitializeSecurityContextW + 4A 77FC5C34 3 Bytes [ 79, 00, 3A ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecCacheSspiPackages + B 77FC5F76 41 Bytes [ 72, 00, 3D, 00, 30, 00, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecCacheSspiPackages + 35 77FC5FA0 15 Bytes [ 72, 00, 74, 00, 79, 00, 3A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecCacheSspiPackages + 45 77FC5FB0 11 Bytes [ 20, 00, 66, 00, 61, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecCacheSspiPackages + 51 77FC5FBC 78 Bytes [ 64, 00, 20, 00, 77, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecCacheSspiPackages + A0 77FC600B 18 Bytes [ FF, 51, 08, 33, C0, E9, D2, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaDeregisterLogonProcess + 9 77FC7C66 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaDeregisterLogonProcess + B 77FC7C68 11 Bytes [ 20, 00, 42, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaDeregisterLogonProcess + 17 77FC7C74 11 Bytes [ 7A, 00, 65, 00, 72, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaDeregisterLogonProcess + 23 77FC7C80 9 Bytes [ 63, 00, 68, 00, 20, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaDeregisterLogonProcess + 2D 77FC7C8A 85 Bytes [ 67, 00, 65, 00, 6D, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!CredUnmarshalTargetInfo + 18 77FC8544 27 Bytes [ 73, 00, 72, 00, 65, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!CredUnmarshalTargetInfo + 34 77FC8560 1 Byte [ 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!CredUnmarshalTargetInfo + 36 77FC8562 7 Bytes [ 20, 00, 53, 00, 69, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!CredUnmarshalTargetInfo + 3E 77FC856A 72 Bytes [ 20, 00, 73, 00, 69, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!CredUnmarshalTargetInfo + 87 77FC85B3 46 Bytes [ 00, 65, 00, 6E, 00, 6E, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecGetLocaleSpecificEncryptionRules + 6F 77FC8B3E 1 Byte [ 63 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecGetLocaleSpecificEncryptionRules + 71 77FC8B40 1 Byte [ 68 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecGetLocaleSpecificEncryptionRules + 73 77FC8B42 11 Bytes [ 65, 00, 72, 00, 77, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecGetLocaleSpecificEncryptionRules + 7F 77FC8B4E 49 Bytes [ 65, 00, 20, 00, 62, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecGetLocaleSpecificEncryptionRules + B1 77FC8B80 33 Bytes [ 53, 00, 69, 00, 65, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AddSecurityPackageW + 1D 77FC8BA2 53 Bytes [ 64, 00, 6D, 00, 69, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AddSecurityPackageA + 14 77FC8BD8 7 Bytes [ 6C, 00, 65, 00, 20, 00, 42 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AddSecurityPackageA + 1C 77FC8BE0 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AddSecurityPackageA + 1E 77FC8BE2 65 Bytes [ 6E, 00, 75, 00, 74, 00, 7A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!DeleteSecurityPackageA + 8 77FC8C24 76 Bytes [ 2E, 00, 20, 00, 53, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!DeleteSecurityPackageA + 55 77FC8C71 58 Bytes [ 00, 7A, 00, 65, 00, 72, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!DeleteSecurityPackageA + 90 77FC8CAC 19 Bytes [ 67, 00, 65, 00, 6E, 00, 2C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!DeleteSecurityPackageA + A4 77FC8CC0 37 Bytes [ 69, 00, 65, 00, 20, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!DeleteSecurityPackageA + CA 77FC8CE6 180 Bytes [ 6C, 00, 20, 00, 76, 00, 6F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecInitUserModeContext + 38 77FC9F93 126 Bytes [ 75, FC, C7, 45, F8, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecDeleteUserModeContext + 6A 77FCA012 23 Bytes [ 6D, 00, 69, 00, 6E, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecDeleteUserModeContext + 82 77FCA02A 123 Bytes [ 20, 00, 77, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecDeleteUserModeContext + FE 77FCA0A6 23 Bytes [ 68, 00, 72, 00, 20, 00, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecDeleteUserModeContext + 116 77FCA0BE 119 Bytes [ 6E, 00, 6E, 00, 74, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecDeleteUserModeContext + 18E 77FCA136 23 Bytes [ 65, 00, 72, 00, 20, 00, 4F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaUnregisterPolicyChangeNotification + 7 77FCA1D2 27 Bytes [ 64, 00, 20, 00, 65, 00, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaUnregisterPolicyChangeNotification + 23 77FCA1EE 11 Bytes [ 20, 00, 50, 00, 72, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaEnumerateLogonSessions + 7 77FCA1FA 31 Bytes [ 6C, 00, 20, 00, 67, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaGetLogonSessionData + 8 77FCA21A 17 Bytes [ 64, 00, 20, 00, 73, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaGetLogonSessionData + 1A 77FCA22C 31 Bytes [ 72, 00, 7A, 00, 65, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaGetLogonSessionData + 3A 77FCA24C 11 Bytes [ FC, 00, 67, 00, 62, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!LsaGetLogonSessionData + 46 77FCA258 99 Bytes [ 0D, 00, 0A, 00, 45, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AddCredentialsW + 32 77FCA2BC 43 Bytes [ 69, 00, 65, 00, 20, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AddCredentialsA + 9 77FCA2E8 33 Bytes [ 72, 00, 20, 00, 50, 00, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AddCredentialsA + 2B 77FCA30A 25 Bytes [ 76, 00, 65, 00, 72, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!AddCredentialsA + 45 77FCA324 53 Bytes [ 74, 00, 65, 00, 6E, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!ApplyControlToken + 26 77FCA35A 27 Bytes [ 65, 00, 20, 00, 77, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!ApplyControlToken + 42 77FCA376 11 Bytes [ 65, 00, 6D, 00, 20, 00, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!EnumerateSecurityPackagesA + 7 77FCA382 21 Bytes [ 6E, 00, 64, 00, 61, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!EnumerateSecurityPackagesA + 1D 77FCA398 11 Bytes [ 20, 00, 61, 00, 6E, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!EnumerateSecurityPackagesA + 29 77FCA3A4 73 Bytes [ 65, 00, 6C, 00, 64, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!CompleteAuthToken + 26 77FCA3EE 27 Bytes [ 64, 00, 65, 00, 20, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!CompleteAuthToken + 42 77FCA40A 39 Bytes [ 42, 00, 65, 00, 69, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QuerySecurityContextToken + 23 77FCA432 3 Bytes [ 65, 00, 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QuerySecurityContextToken + 27 77FCA436 43 Bytes [ 64, 00, 75, 00, 6E, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QuerySecurityContextToken + 53 77FCA462 73 Bytes [ 77, 00, 69, 00, 72, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QueryContextAttributesA + 45 77FCA4AC 16 Bytes [ 69, 00, 63, 00, 68, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SetContextAttributesW + C 77FCA4BD 80 Bytes [ 00, 72, 00, 6F, 00, 66, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SetContextAttributesW + 5D 77FCA50E 97 Bytes [ 69, 00, 6C, 00, 20, 00, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SetContextAttributesA + 5D 77FCA570 21 Bytes [ 69, 00, 6E, 00, 65, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QueryCredentialsAttributesA + 11 77FCA586 17 Bytes [ E4, 00, 72, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QueryCredentialsAttributesA + 24 77FCA599 10 Bytes [ 00, 7A, 00, 65, 00, 72, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QueryCredentialsAttributesA + 2F 77FCA5A4 37 Bytes [ 6F, 00, 66, 00, 69, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!QueryCredentialsAttributesA + 55 77FCA5CA 121 Bytes [ 65, 00, 73, 00, 65, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!DecryptMessage + 26 77FCA644 35 Bytes [ 20, 00, 66, 00, 65, 00, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!DecryptMessage + 4A 77FCA668 39 Bytes [ 74, 00, 65, 00, 6D, 00, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!ExportSecurityContext + 23 77FCA690 11 Bytes [ 65, 00, 72, 00, 20, 00, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!ExportSecurityContext + 2F 77FCA69C 2 Bytes [ 7A, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!ExportSecurityContext + 32 77FCA69F 160 Bytes [ 00, 65, 00, 72, 00, 6B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!ImportSecurityContextW + 76 77FCA740 23 Bytes [ 29, 00, 20, 00, 77, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!ImportSecurityContextA + 13 77FCA758 37 Bytes [ 74, 00, 20, 00, 67, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!ImportSecurityContextA + 39 77FCA77E 11 Bytes [ 64, 00, 65, 00, 6E, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!ImportSecurityContextA + 45 77FCA78A 153 Bytes [ 74, 00, 20, 00, 65, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!InitializeSecurityContextA + 34 77FCA824 9 Bytes [ 65, 00, 6D, 00, 62, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!InitializeSecurityContextA + 3E 77FCA82E 9 Bytes [ 65, 00, 63, 00, 68, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!InitializeSecurityContextA + 48 77FCA838 9 Bytes [ 67, 00, 75, 00, 6E, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!InitializeSecurityContextA + 52 77FCA842 25 Bytes [ 6E, 00, 20, 00, 6F, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!InitializeSecurityContextA + 6C 77FCA85C 151 Bytes [ 72, 00, 6B, 00, 70, 00, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslGetProfilePackageW + 52 77FCAE6A 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslGetProfilePackageW + 54 77FCAE6C 25 Bytes [ 64, 00, 65, 00, 20, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslGetProfilePackageW + 6E 77FCAE86 88 Bytes [ 6E, 00, 64, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslGetProfilePackageW + C7 77FCAEDF 146 Bytes [ 00, 6F, 00, 66, 00, 69, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslGetProfilePackageW + 15A 77FCAF72 1 Byte [ 20 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslIdentifyPackageA + A 77FCB11D 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslIdentifyPackageA + 29 77FCB13C 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslIdentifyPackageW + A 77FCB14B 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslIdentifyPackageW + 29 77FCB16A 41 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslIdentifyPackageW + 53 77FCB194 69 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslIdentifyPackageW + 99 77FCB1DA 62 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslIdentifyPackageW + D8 77FCB219 47 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslInitializeSecurityContextW + 2A 77FCB2E4 46 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslInitializeSecurityContextW + 5B 77FCB315 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslInitializeSecurityContextW + 6D 77FCB327 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslInitializeSecurityContextW + 6F 77FCB329 66 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslInitializeSecurityContextW + B2 77FCB36C 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslInitializeSecurityContextA + 2A 77FCB3ED 46 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslInitializeSecurityContextA + 5B 77FCB41E 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslInitializeSecurityContextA + 6D 77FCB430 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslInitializeSecurityContextA + 6F 77FCB432 66 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslInitializeSecurityContextA + B2 77FCB475 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslAcceptSecurityContext + 2B 77FCB4F7 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslAcceptSecurityContext + 44 77FCB510 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslAcceptSecurityContext + 4B 77FCB517 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslAcceptSecurityContext + 50 77FCB51C 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SaslAcceptSecurityContext + 55 77FCB521 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecpFreeMemory + 34 77FCB78F 52 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecpFreeMemory + 6A 77FCB7C5 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecpFreeMemory + 85 77FCB7E0 39 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecpFreeMemory + AD 77FCB808 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecpFreeMemory + B0 77FCB80B 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecpTranslateNameEx + A 77FCBAEC 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecpTranslateNameEx + 10 77FCBAF2 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecpTranslateNameEx + 2F 77FCBB11 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecpTranslateNameEx + 52 77FCBB34 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecpTranslateName + 21 77FCBB5A 44 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecpTranslateName + 4F 77FCBB88 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecpTranslateName + 57 77FCBB90 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecpTranslateName + 5F 77FCBB98 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!SecpTranslateName + 68 77FCBBA1 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetComputerObjectNameW + B 77FCBEB3 76 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetComputerObjectNameW + 59 77FCBF01 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetComputerObjectNameW + 7A 77FCBF22 41 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetComputerObjectNameW + A4 77FCBF4C 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetComputerObjectNameW + A6 77FCBF4E 105 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetComputerObjectNameA + 13 77FCC08D 1 Byte [ 3E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!GetComputerObjectNameA + 15 77FCC08F 345 Bytes [ 3E, A6, 3E, 00, 00, 00, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!TranslateNameA + BD 77FCC1E9 266 Bytes [ 35, F4, 35, 0F, 36, 4A, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!TranslateNameA + 1C8 77FCC2F4 204 Bytes [ A8, 30, B1, 30, C3, 30, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!TranslateNameA + 295 77FCC3C1 72 Bytes [ 33, 26, 33, 4F, 33, 1E, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!TranslateNameA + 2DF 77FCC40B 97 Bytes [ 00, 00, 30, 16, 30, 1C, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] Secur32.dll!TranslateNameA + 341 77FCC46D 62 Bytes [ 35, FF, 35, 0B, 36, 40, 36, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConfirmZoneCrossingW + FFF83B84 77181551 20 Bytes [ 59, 33, D2, 8B, C7, F7, F1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConfirmZoneCrossingW + FFF83B99 77181566 204 Bytes [ 4D, DC, 88, 1C, 01, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConfirmZoneCrossingW + FFF83C66 77181633 61 Bytes [ B7, 45, F4, FF, 34, 85, 5C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConfirmZoneCrossingW + FFF83CA4 77181671 12 Bytes [ 15, 58, 11, 18, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConfirmZoneCrossingW + FFF83CB2 7718167F 33 Bytes [ FF, 75, 08, FF, 15, 94, 11, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheEntryA + A 771852E8 35 Bytes [ 00, 00, 00, 00, 42, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheEntryA + 2E 7718530C 9 Bytes [ 69, 00, 63, 00, 72, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheEntryA + 38 77185316 1 Byte [ 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheEntryA + 3A 77185318 19 Bytes [ 66, 00, 74, 00, AE, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheEntryA + 4E 7718532C 33 Bytes [ 73, 00, AE, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoExA + 5A 77186570 210 Bytes [ 50, FF, D6, 89, 85, 1C, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoExA + 12E 77186644 70 Bytes [ 63, 61, 63, 68, 65, 31, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoExA + 175 7718668B 30 Bytes [ FF, 55, 8B, EC, 81, EC, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoExA + 194 771866AA 10 Bytes CALL 7711B6FD C:\WINDOWS\system32\OLEAUT32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoExA + 19F 771866B5 5 Bytes [ 50, 8D, 8D, 74, FD ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryOptionA + BD 7718724D 26 Bytes [ F6, FF, FF, 8B, 70, 1C, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryOptionA + D8 77187268 3 Bytes [ C0, 08, 89 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryOptionA + DD 7718726D 12 Bytes [ F6, FF, FF, 3B, C3, 76, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryOptionA + EA 7718727A 16 Bytes JMP 7718761A C:\WINDOWS\system32\WININET.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryOptionA + FB 7718728B 67 Bytes [ 8A, 02, 88, 01, 42, 41, 84, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheHeaderData + 1E 77187628 17 Bytes [ B5, 78, F6, FF, FF, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheHeaderData + 30 7718763A 71 Bytes [ 74, 5F, FF, B5, 7C, F6, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheHeaderData + 79 77187683 6 Bytes [ 74, 0C, FF, B5, 78, F6 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheHeaderData + 81 7718768B 14 Bytes [ FF, 15, 70, 12, 18, 77, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheHeaderData + 90 7718769A 85 Bytes [ 00, 83, 4D, FC, FF, 83, BD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenW + 5F 7718AF78 3 Bytes [ 3D, 12, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenW + 63 7718AF7C 73 Bytes [ 00, 0F, 83, 9B, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenW + AD 7718AFC6 119 Bytes CALL 1D18AFC9 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenW + 125 7718B03E 4 Bytes [ 00, 68, 94, 31 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenW + 12B 7718B044 1 Byte [ E8 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionA + 2 7718B1CA 108 Bytes CALL 7718FC6D C:\WINDOWS\system32\WININET.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionA + 6F 7718B237 70 Bytes [ FD, FF, FF, 51, 6A, 04, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionA + B6 7718B27E 12 Bytes [ 00, 50, 68, 5C, 31, 20, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionA + C3 7718B28B 33 Bytes [ 83, C4, 10, 85, C0, 75, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionA + E5 7718B2AD 67 Bytes [ 3F, 20, 74, F8, 83, BB, 20, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionW + 11 7718BC21 23 Bytes [ 86, 24, 02, 00, 00, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionW + 29 7718BC39 46 Bytes [ D7, 5F, 5E, C3, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionW + 58 7718BC68 48 Bytes [ 00, 89, 82, 44, 12, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionW + 89 7718BC99 54 Bytes [ 89, 82, 64, 12, 00, 00, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionW + C0 7718BCD0 45 Bytes [ F1, 56, 20, 77, 19, 57, 20, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCreateUrlA + 1C 7719253B 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCreateUrlA + 2C 7719254B 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCreateUrlA + 3C 7719255B 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCreateUrlA + 3F 7719255E 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCreateUrlA + 45 77192564 43 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpOpenRequestA + 2 77192ACB 114 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpOpenRequestA + 76 77192B3F 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpOpenRequestA + 95 77192B5E 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpOpenRequestA + 9D 77192B66 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpOpenRequestA + A9 77192B72 27 Bytes [ 00, 00, F2, F2, F2, 0D, E2, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCanonicalizeUrlA + E 7719339C 5 Bytes [ 22, 00, 56, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCanonicalizeUrlA + 14 771933A2 33 Bytes [ 72, 00, 62, 00, 69, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCanonicalizeUrlA + 36 771933C4 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCanonicalizeUrlA + 38 771933C6 3 Bytes [ 6E, 00, 22 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCanonicalizeUrlA + 3C 771933CA 25 Bytes [ 2E, 00, 20, 00, 45, 00, 73, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConnectA + A 7719342C 138 Bytes [ 68, 00, 65, 00, 72, 00, 7A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConnectA + 95 771934B7 20 Bytes [ 00, 00, 00, 00, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConnectA + AA 771934CC 22 Bytes [ FF, FF, 82, 00, 43, 00, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConnectA + C1 771934E3 4 Bytes [ 00, 01, 00, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConnectA + C6 771934E8 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpAddRequestHeadersA + 20 771940BA 17 Bytes [ 6E, 00, 67, 00, 65, 00, 7A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpAddRequestHeadersA + 32 771940CC 21 Bytes [ 20, 00, 5A, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpAddRequestHeadersA + 48 771940E2 9 Bytes [ 20, 00, 77, 00, 75, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpAddRequestHeadersA + 52 771940EC 37 Bytes [ 65, 00, 20, 00, 67, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpAddRequestHeadersA + 78 77194112 3 Bytes [ 62, 00, 64 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCloseHandle + 1C 77194D78 35 Bytes [ 76, 00, 6F, 00, 6E, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCloseHandle + 40 77194D9C 9 Bytes [ 6E, 00, 64, 00, 20, 00, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCloseHandle + 4A 77194DA6 17 Bytes [ 6E, 00, 6E, 00, 77, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCloseHandle + 5C 77194DB8 27 Bytes [ 09, 00, 41, 00, 62, 00, 62, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCloseHandle + 78 77194DD4 9 Bytes [ 66, 00, 6C, 00, 69, 00, 6E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenA + A 771958AC 47 Bytes [ 76, 00, 69, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenA + 3A 771958DC 1 Byte [ 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenA + 3C 771958DE 35 Bytes [ 74, 00, 6C, 00, 69, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenA + 60 77195902 21 Bytes [ 67, 00, 61, 00, 6E, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenA + 76 77195918 15 Bytes [ 65, 00, 72, 00, 72, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenUrlA + 29 77195B97 48 Bytes [ 00, 74, 00, 20, 00, 64, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenUrlA + 5A 77195BC8 17 Bytes [ 6B, 00, 74, 00, 69, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenUrlA + 6C 77195BDA 67 Bytes [ 6B, 00, 6D, 00, 61, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenUrlA + B0 77195C1E 7 Bytes [ 74, 00, 20, 00, 75, 00, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenUrlA + B8 77195C26 9 Bytes [ 67, 00, FC, 00, 6C, 00, 74, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestA + 9 771961C2 23 Bytes [ 65, 00, 69, 00, 6E, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestA + 21 771961DA 39 Bytes [ 6E, 00, 20, 00, 44, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestA + 4B 77196204 35 Bytes [ 44, 00, 01, 00, 44, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestA + 6F 77196228 11 Bytes [ 73, 00, 74, 00, 20, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestA + 7B 77196234 1 Byte [ FC ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCrackUrlA + 1E 771973BD 81 Bytes [ 31, 10, 31, 20, 31, 30, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCrackUrlA + 70 7719740F 572 Bytes [ 3C, 0C, 3C, 18, 3C, 24, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCrackUrlA + 2AD 7719764C 5 Bytes [ 00, 60, 01, 00, 40 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCrackUrlA + 2B3 77197652 24 Bytes [ 00, 00, EA, 31, FA, 31, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCrackUrlA + 2CC 7719766B 40 Bytes [ 37, EE, 38, 9E, 3A, AA, 3A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpQueryInfoA + 15 771977DF 119 Bytes [ 30, 90, 30, 97, 30, BF, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpQueryInfoA + 8E 77197858 5 Bytes [ 00, C0, 01, 00, A8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpQueryInfoA + 95 7719785F 300 Bytes [ 00, 0F, 30, 2A, 30, 31, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpQueryInfoA + 1C2 7719798C 362 Bytes [ D1, 3B, DB, 3B, 22, 3C, 71, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpQueryInfoA + 32E 77197AF8 14 Bytes [ 64, 31, 78, 31, F8, 31, 59, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetReadFile + 117 77198209 5 Bytes [ B0, 04, 00, C4, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetReadFile + 11D 7719820F 195 Bytes [ 00, 51, 30, A4, 30, CF, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetReadFile + 1E1 771982D3 375 Bytes [ 00, 67, 31, 76, 31, 87, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetReadFile + 359 7719844B 81 Bytes [ 3C, 16, 3C, 1F, 3C, 25, 3C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetReadFile + 3AB 7719849D 42 Bytes [ 3F, 11, 3F, 27, 3F, 33, 3F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetUnlockRequestFile + 25 7719B9F3 28 Bytes [ 00, DC, A6, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetUnlockRequestFile + 42 7719BA10 6 Bytes [ 00, 00, 00, 00, 00, 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetUnlockRequestFile + 4A 7719BA18 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetUnlockRequestFile + 4C 7719BA1A 43 Bytes [ FF, FF, 48, 52, 00, 00, 1D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetUnlockRequestFile + 79 7719BA47 20 Bytes [ FF, 70, 52, 00, 00, 6E, 5C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetLockRequestFile + 1E 7719C642 28 Bytes [ 40, 00, 8E, 07, 18, 1A, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetLockRequestFile + 3C 7719C660 21 Bytes [ FF, FF, FF, FF, 38, 5D, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetLockRequestFile + 53 7719C677 12 Bytes [ 00, 00, 00, 00, 00, A0, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetLockRequestFile + 61 7719C685 20 Bytes [ 00, 00, 00, 00, 10, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetLockRequestFile + 76 7719C69A 10 Bytes [ 3A, 00, 78, 09, 18, 1A, 05, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestExW + 12 7719E9D3 24 Bytes [ 00, 30, 00, 00, 00, 4C, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestExW + 2B 7719E9EC 5 Bytes [ 49, 00, 33, 00, 30 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestExW + 31 7719E9F2 71 Bytes [ 00, 00, A4, 0C, 08, 00, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestExW + 7A 7719EA3B 1 Byte [ 0D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestExW + 7C 7719EA3D 24 Bytes [ 00, 24, 00, 49, 00, 33, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConnectW + 37 7719EE37 13 Bytes [ 00, 0C, 1A, 08, 00, 24, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConnectW + 45 7719EE45 22 Bytes [ 00, 38, 1A, 08, 00, 24, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConnectW + 5C 7719EE5C 23 Bytes [ 33, 00, 30, 00, 00, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConnectW + 74 7719EE74 21 Bytes [ 24, 00, 49, 00, 33, 00, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConnectW + 8A 7719EE8A 2 Bytes [ 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpAddRequestHeadersW + 2D 7719EF22 1 Byte [ 30 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpAddRequestHeadersW + 2F 7719EF24 9 Bytes [ 00, 00, F8, 1C, 08, 00, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpAddRequestHeadersW + 39 7719EF2E 15 Bytes [ 33, 00, 30, 00, 00, 00, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpAddRequestHeadersW + 49 7719EF3E 51 Bytes [ 30, 00, 00, 00, 50, 1D, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpAddRequestHeadersW + 7D 7719EF72 21 Bytes [ 49, 00, 33, 00, 30, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpOpenRequestW + 5D 7719F466 21 Bytes [ 49, 00, 33, 00, 30, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpOpenRequestW + 73 7719F47C 21 Bytes [ F4, 2C, 08, 00, 24, 00, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpOpenRequestW + 89 7719F492 1 Byte [ 33 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpOpenRequestW + 8B 7719F494 21 Bytes [ 30, 00, 00, 00, 4C, 2D, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpOpenRequestW + A1 7719F4AA 33 Bytes [ 24, 00, 49, 00, 33, 00, 30, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DetectAutoProxyUrl + 17 7719FB7A 15 Bytes [ 00, 00, F4, 42, 08, 00, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DetectAutoProxyUrl + 27 7719FB8A 5 Bytes [ 20, 43, 08, 00, 24 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DetectAutoProxyUrl + 2D 7719FB90 43 Bytes [ 49, 00, 33, 00, 30, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DetectAutoProxyUrl + 59 7719FBBC 55 Bytes [ 33, 00, 30, 00, 00, 00, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DetectAutoProxyUrl + 91 7719FBF4 13 Bytes [ 33, 00, 30, 00, 00, 00, 80, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindCloseUrlCache + 2A 771A1707 27 Bytes [ 00, 00, 00, 00, 00, 66, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindCloseUrlCache + 46 771A1723 7 Bytes [ 00, FF, FF, FF, FF, 44, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindCloseUrlCache + 4E 771A172B 15 Bytes [ 00, 00, 10, 00, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindCloseUrlCache + 5E 771A173B 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindCloseUrlCache + 62 771A173F 28 Bytes [ 00, 26, 3D, 1A, 1A, 05, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheEntryA + 9 771A1873 6 Bytes [ 00, DF, C2, 1A, 1A, 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheEntryA + 10 771A187A 20 Bytes [ 00, 00, 40, 72, D9, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheEntryA + 26 771A1890 12 Bytes [ 01, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheEntryA + 33 771A189D 9 Bytes [ 00, 00, 00, 1A, C3, 1A, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheEntryA + 3D 771A18A7 4 Bytes [ 00, 37, 72, D9 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCanonicalizeUrlW + 9 771A192B 7 Bytes [ 00, 11, 72, D9, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCanonicalizeUrlW + 11 771A1933 47 Bytes [ 00, FF, FF, FF, FF, 44, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCanonicalizeUrlW + 41 771A1963 16 Bytes [ FF, 44, 00, 00, 00, 00, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCanonicalizeUrlW + 52 771A1974 4 Bytes [ 3E, 45, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCanonicalizeUrlW + 59 771A197B 22 Bytes [ 00, D5, 42, 1A, 1A, 05, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoA + 49 771A1B42 7 Bytes [ 00, 00, FF, FF, FF, FF, 44 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoA + 51 771A1B4A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoA + 53 771A1B4C 33 Bytes [ 00, 10, 00, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoA + 75 771A1B6E 51 Bytes [ 00, 00, FF, FF, FF, FF, 44, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CommitUrlCacheEntryA + 20 771A1BA2 10 Bytes [ 00, 00, 00, 10, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CommitUrlCacheEntryA + 2B 771A1BAD 7 Bytes [ 00, 00, 00, B1, 42, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CommitUrlCacheEntryA + 35 771A1BB7 17 Bytes [ 00, 9A, 42, 1A, 1A, 05, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CommitUrlCacheEntryA + 47 771A1BC9 147 Bytes [ FF, FF, FF, 44, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CommitUrlCacheEntryA + DB 771A1C5D 33 Bytes [ 00, 00, 00, 98, 41, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheContainerA + 16 771A1CA5 21 Bytes [ FF, FF, FF, 44, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheContainerA + 2C 771A1CBB 29 Bytes [ 00, 00, 00, 00, 00, C2, DF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheContainerA + 4A 771A1CD9 36 Bytes [ 10, 00, 00, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheContainerA + 20 771A1CFE 4 Bytes [ FF, FF, 44, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheContainerA + 27 771A1D05 7 Bytes [ 10, 00, 00, 01, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheContainerA + 2F 771A1D0D 52 Bytes [ 00, 00, 00, DE, 40, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheContainerA + 64 771A1D42 19 Bytes [ 00, 00, CC, EC, 1A, 1A, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheContainerA + 78 771A1D56 57 Bytes [ FF, FF, 44, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IsHostInProxyBypassList + 2 771A3352 16 Bytes [ FF, FF, 44, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IsHostInProxyBypassList + 14 771A3364 51 Bytes [ DF, 05, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IsHostInProxyBypassList + 48 771A3398 10 Bytes [ 18, E1, 1A, 1A, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IsHostInProxyBypassList + 53 771A33A3 32 Bytes [ 00, 00, 00, 00, 00, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IsHostInProxyBypassList + 74 771A33C4 16 Bytes [ 82, E2, 1A, 1A, 05, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetConnectedStateExW + 45 771A36EF 21 Bytes [ FF, 44, 00, 00, 00, 00, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetConnectedStateExW + 5C 771A3706 28 Bytes [ 00, 00, DB, E5, 1A, 1A, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetConnectedStateExW + 7A 771A3724 10 Bytes [ 01, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetConnectedStateExW + 86 771A3730 20 Bytes [ 00, 00, 00, 00, B4, E4, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetConnectedStateExW + 9C 771A3746 42 Bytes [ FF, FF, 44, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCombineUrlA + 13 771A4313 6 Bytes [ 00, 01, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCombineUrlA + 1A 771A431A 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCombineUrlA + 3D 771A433D 20 Bytes [ 10, 00, 00, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCombineUrlA + 52 771A4352 5 Bytes [ 1A, 1A, 05, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCombineUrlA + 58 771A4358 74 Bytes [ 0A, 57, 5B, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryOptionW + B 771A5A6A 84 Bytes [ 00, 00, 00, 00, 00, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryOptionW + 61 771A5AC0 31 Bytes [ 28, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryOptionW + 81 771A5AE0 39 Bytes [ 28, 00, 08, 00, 44, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryOptionW + AA 771A5B09 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryOptionW + B1 771A5B10 2 Bytes [ 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenUrlW + 45 771A5BB7 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenUrlW + 5C 771A5BCE 23 Bytes [ 00, 00, B8, AB, 74, 30, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenUrlW + 75 771A5BE7 19 Bytes [ 00, 60, 11, 1B, 1A, 05, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenUrlW + 8A 771A5BFC 7 Bytes [ 40, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetOpenUrlW + 93 771A5C05 82 Bytes [ 00, 00, 00, 14, 00, 14, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetConnectedState + A 771A5C58 1 Byte [ 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetConnectedState + C 771A5C5A 11 Bytes [ 00, 00, 00, 00, 00, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetConnectedState + 18 771A5C66 39 Bytes [ 00, 00, 1A, 4D, F2, 44, 34, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetConnectedState + 42 771A5C90 30 Bytes [ 04, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetConnectedState + 62 771A5CB0 5 Bytes [ 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpQueryInfoW + 22 771A5FC0 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpQueryInfoW + 24 771A5FC2 17 Bytes [ 00, 00, 00, 00, 00, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpQueryInfoW + 36 771A5FD4 18 Bytes [ 44, 00, 01, 00, 38, 00, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpQueryInfoW + 4A 771A5FE8 7 Bytes [ 50, C0, 1F, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpQueryInfoW + 52 771A5FF0 33 Bytes [ EC, 91, 04, F5, 72, 51, C7, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoExW + 1E 771A6884 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoExW + 21 771A6887 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoExW + 23 771A6889 8 Bytes [ BA, 23, F7, 10, 37, E3, 86, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoExW + 2C 771A6892 9 Bytes [ FF, FF, 78, 77, 00, 00, 97, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoExW + 36 771A689C 14 Bytes [ 00, 00, 03, 00, F0, 12, 1B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieW + 7 771A71CE 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieW + 9 771A71D0 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieW + 19 771A71E0 35 Bytes [ AC, 2A, AD, D8, 59, AE, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetConnectedStateEx + 1A 771A7204 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetConnectedStateEx + 1D 771A7207 61 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetConnectedStateEx + 5B 771A7245 37 Bytes [ 00, 00, 00, 02, 00, 00, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetConnectedStateEx + 82 771A726C 5 Bytes [ 00, 00, 00, 00, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetConnectedStateEx + 88 771A7272 25 Bytes [ 00, 00, 40, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheEntry + 18 771A7992 12 Bytes [ 08, 00, 44, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheEntry + 26 771A79A0 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheEntry + 34 771A79AE 24 Bytes [ 00, 00, 36, 15, 1B, 1A, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheEntry + 4D 771A79C7 34 Bytes [ 00, 68, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheEntry + 70 771A79EA 1 Byte [ 20 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UnlockUrlCacheEntryStream + 51 771A7CE3 6 Bytes [ 00, 40, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UnlockUrlCacheEntryStream + 59 771A7CEB 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UnlockUrlCacheEntryStream + 5D 771A7CEF 17 Bytes [ 00, 05, 00, 06, 00, 28, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UnlockUrlCacheEntryStream + 6F 771A7D01 21 Bytes [ 01, 00, 00, 02, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UnlockUrlCacheEntryStream + 86 771A7D18 57 Bytes [ 80, 00, 00, 00, 18, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UnlockUrlCacheEntryFile + 26 771A7D52 23 Bytes [ 00, 00, 40, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UnlockUrlCacheEntryFile + 3E 771A7D6A 11 Bytes [ 27, 00, 44, 00, 01, 00, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UnlockUrlCacheEntryFile + 4A 771A7D76 22 Bytes [ 00, 00, 2A, 4B, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UnlockUrlCacheEntryFile + 62 771A7D8E 64 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UnlockUrlCacheEntryFile + A3 771A7DCF 10 Bytes [ 60, 37, 60, 31, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryDataAvailable + 1D 771A8A04 4 Bytes [ 40, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryDataAvailable + 23 771A8A0A 13 Bytes [ 00, 00, 00, 00, 00, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryDataAvailable + 31 771A8A18 27 Bytes [ 50, 00, 27, 00, 44, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryDataAvailable + 4D 771A8A34 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryDataAvailable + 51 771A8A38 10 Bytes [ 01, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetStatusCallback + 7 771A905B 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetStatusCallback + 12 771A9066 38 Bytes [ 00, 00, 20, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetStatusCallback + 3A 771A908E 21 Bytes [ 00, 00, 01, 00, 00, 00, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetStatusCallback + 50 771A90A4 7 Bytes [ 28, 00, 00, 00, 28, 00, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetStatusCallback + 58 771A90AC 35 Bytes [ 44, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieExW + 2E 771A9419 29 Bytes [ 98, CB, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieExW + 4D 771A9438 21 Bytes [ 87, 18, 1B, 1A, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieExW + 63 771A944E 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieExW + 65 771A9450 20 Bytes [ 70, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieExW + 7B 771A9466 7 Bytes [ 00, 00, 05, 00, 06, 00, 28 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieExA + 2D 771A9503 6 Bytes [ 00, 00, 00, 00, 00, 15 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieExA + 34 771A950A 1 Byte [ 16 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieExA + 36 771A950C 11 Bytes [ 28, 00, 08, 00, 28, 00, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieExA + 42 771A9518 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieExA + 62 771A9538 15 Bytes [ A7, 18, 1B, 1A, 05, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ReadUrlCacheEntryStream + 31 771A986C 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ReadUrlCacheEntryStream + 33 771A986E 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ReadUrlCacheEntryStream + 35 771A9870 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ReadUrlCacheEntryStream + 49 771A9884 4 Bytes [ 40, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ReadUrlCacheEntryStream + 4E 771A9889 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetTimeFromSystemTime + 28 771A9D10 40 Bytes [ A2, 19, 1B, 1A, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetTimeFromSystemTime + 52 771A9D3A 97 Bytes [ 00, 00, 00, 00, 00, 00, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetTimeFromSystemTime + B4 771A9D9C 5 Bytes [ 28, 00, 08, 00, 28 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetTimeFromSystemTime + BA 771A9DA2 37 Bytes [ 08, 00, 18, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetTimeFromSystemTime + E0 771A9DC8 14 Bytes [ B9, 19, 1B, 1A, 05, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetDialState + 1E 771C2DF1 44 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetDialStateW + 28 771C2E1E 9 Bytes [ C7, 01, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetDialStateW + 32 771C2E28 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetDialStateW + 36 771C2E2C 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetDialStateW + 39 771C2E2F 38 Bytes [ 00, 00, 00, 00, 10, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetDialStateW + 61 771C2E57 18 Bytes [ 00, 01, 00, 00, 00, 40, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetDialW + A 771C3031 59 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetDialW + 47 771C306E 7 Bytes [ 00, 00, 01, 00, 00, 00, 40 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetDialW + 4F 771C3076 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetDialW + 5F 771C3086 7 Bytes [ 38, 00, 60, 00, 38, 00, A4 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetDialW + 67 771C308E 9 Bytes [ 01, 00, 00, 00, 20, 08, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetDial + B 771C3585 48 Bytes [ 00, 00, 00, 00, 00, 00, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetDial + 3C 771C35B6 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetDial + 3F 771C35B9 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetDial + 54 771C35CE 98 Bytes [ 01, 00, 00, 00, D8, 03, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetHangUp + 34 771C3631 24 Bytes [ 9F, BE, 4F, 8D, F3, C6, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetHangUp + 4F 771C364C 58 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetHangUp + 8B 771C3688 62 Bytes [ 1B, 00, 01, 00, 28, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetHangUp + CB 771C36C8 17 Bytes [ 88, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetHangUp + DE 771C36DB 16 Bytes [ 00, 00, 00, 00, 00, 07, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAutodial + B 771C3713 45 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAutodial + 3B 771C3743 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAutodial + 48 771C3750 9 Bytes [ 00, 00, 00, 00, CD, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAutodial + 54 771C375C 137 Bytes [ 00, 00, 00, 00, A0, 86, 7E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAutodial + DF 771C37E7 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAutodialHangup + 28 771C3A93 1 Byte [ 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAutodialHangup + 2A 771C3A95 35 Bytes [ 00, 00, 00, 72, 95, 9A, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAutodialHangup + 4E 771C3AB9 44 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAutodialHangup + 7D 771C3AE8 117 Bytes [ 28, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAutodialHangup + F3 771C3B5E 29 Bytes [ 2F, 00, 58, 00, 2F, 00, 44, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAutodialCallback + 20 771C3BB9 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAutodialCallback + 35 771C3BCE 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAutodialCallback + 47 771C3BE0 29 Bytes [ 7C, 4D, 1B, 1A, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAutodialCallback + 66 771C3BFF 38 Bytes [ 00, 01, 00, 00, 00, 40, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAutodialCallback + 8E 771C3C27 29 Bytes [ 00, 01, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGoOnlineW + 24 771C3DE5 67 Bytes [ 00, 00, 00, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGoOnlineW + 6A 771C3E2B 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGoOnlineW + 85 771C3E46 94 Bytes [ 00, 00, 40, 0B, 5F, 04, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGoOnlineW + E4 771C3EA5 140 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGoOnline + 38 771C3F32 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGoOnline + 3A 771C3F34 47 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGoOnline + 6A 771C3F64 110 Bytes [ 00, 00, 00, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGoOnline + D9 771C3FD3 34 Bytes [ 10, 00, 00, 00, 00, 88, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGoOnline + FC 771C3FF6 56 Bytes [ C7, 01, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DllInstall + B 771C5AAC 57 Bytes [ 00, 00, 00, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DllInstall + 47 771C5AE8 63 Bytes [ 5D, 51, 1B, 1A, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DllInstall + 87 771C5B28 23 Bytes [ 38, 00, 30, 00, 02, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DllInstall + 9F 771C5B40 24 Bytes [ 3A, 31, 89, F6, 72, 51, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DllInstall + B8 771C5B59 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCertByURL + 1C 771C8128 167 Bytes [ 01, 00, 00, 00, 40, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetFilePointer + 55 771C81D0 22 Bytes [ 3A, 56, 1B, 1A, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetFilePointer + 6C 771C81E7 31 Bytes [ 00, 28, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetLastResponseInfoA + 1C 771C8208 14 Bytes [ 28, 00, 08, 00, 44, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetLastResponseInfoA + 2D 771C8219 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetLastResponseInfoA + 4C 771C8238 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetLastResponseInfoA + 51 771C823D 12 Bytes [ 00, 00, 00, 88, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetLastResponseInfoA + 5F 771C824B 50 Bytes [ 00, 40, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAttemptConnect + 1A 771C83AE 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAttemptConnect + 1C 771C83B0 17 Bytes [ 5C, 56, 1B, 1A, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAttemptConnect + 2E 771C83C2 39 Bytes [ 00, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAttemptConnect + 58 771C83EC 120 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAttemptConnect + D3 771C8467 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetShowSecurityInfoByURL + B 771C86B8 50 Bytes [ 88, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetShowSecurityInfoByURL + 3F 771C86EC 60 Bytes [ 00, 00, 00, 00, AF, 72, D9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetShowSecurityInfoByURL + 7C 771C8729 10 Bytes [ 7C, 76, 10, 24, 50, C7, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetShowSecurityInfoByURL + 89 771C8736 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetShowSecurityInfoByURL + 96 771C8743 11 Bytes [ 00, CD, 01, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetWriteFile + 26 771C894F 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetWriteFile + 2B 771C8954 15 Bytes [ 00, 00, 00, 00, 88, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetWriteFile + 3B 771C8964 4 Bytes [ 40, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetWriteFile + 41 771C896A 32 Bytes [ 00, 00, 00, 00, 00, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetWriteFile + 62 771C898B 86 Bytes [ 00, 00, 00, 00, 00, E8, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetFindNextFileA + 1D 771C8BB5 8 Bytes [ 00, 00, 00, 1B, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetFindNextFileA + 27 771C8BBF 4 Bytes [ 00, 28, 00, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetFindNextFileA + 2C 771C8BC4 14 Bytes [ 44, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetFindNextFileA + 3C 771C8BD4 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetFindNextFileA + 41 771C8BD9 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetReadFileExA + 28 771C8E98 4 Bytes [ 88, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetReadFileExA + 2E 771C8E9E 14 Bytes [ 00, 00, 01, 00, 00, 00, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetReadFileExA + 3E 771C8EAE 3 Bytes [ 00, 00, 07 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetReadFileExA + 42 771C8EB2 95 Bytes [ 07, 00, 28, 00, 30, 00, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetReadFileExA + A4 771C8F14 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCheckConnectionA + A 771C9014 35 Bytes [ 06, 00, 05, 00, A8, 0F, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCheckConnectionA + 30 771C903A 53 Bytes [ 00, 00, 00, 00, 00, 00, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCheckConnectionA + 66 771C9070 5 Bytes [ 14, 00, 14, 00, 28 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCheckConnectionA + 6C 771C9076 17 Bytes [ 38, 00, 60, 00, 38, 00, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCheckConnectionA + 7F 771C9089 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ForceNexusLookupExW + 9 771C9465 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ForceNexusLookupExW + D 771C9469 5 Bytes [ 00, 01, 00, 28, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ForceNexusLookupExW + 13 771C946F 22 Bytes [ 00, 28, 00, 08, 00, 44, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ForceNexusLookupExW + 2A 771C9486 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ForceNexusLookupExW + 32 771C948E 7 Bytes [ 00, 00, 92, 58, 1B, 1A, 05 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ForceNexusLookup + 11 771C94AC 12 Bytes [ 00, 00, 00, 00, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ForceNexusLookup + 1E 771C94B9 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ForceNexusLookup + 24 771C94BF 18 Bytes [ 00, 07, 00, 07, 00, 28, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateMD5SSOHash + B 771C94D2 53 Bytes [ 30, 00, 06, 00, 00, 00, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateMD5SSOHash + 41 771C9508 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateMD5SSOHash + 4F 771C9516 15 Bytes [ 00, 00, CC, 2C, 87, 10, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateMD5SSOHash + 5F 771C9526 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateMD5SSOHash + 67 771C952E 68 Bytes [ 00, 00, 00, 00, 00, 00, CD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCombineUrlW + D 771C9824 6 Bytes [ 54, 86, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCombineUrlW + 14 771C982B 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCombineUrlW + 1B 771C9832 52 Bytes [ 00, 00, 00, 00, 00, 00, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCombineUrlW + 51 771C9868 22 Bytes [ 00, 10, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCombineUrlW + 69 771C9880 25 Bytes [ FD, 58, 1B, 1A, 05, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetFindNextFileW + B 771C98CD 108 Bytes [ 00, 00, 00, 9C, 29, DF, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetFindNextFileW + 78 771C993A 27 Bytes [ 00, 10, 00, 00, 00, 00, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetFindNextFileW + 94 771C9956 3 Bytes [ 00, 00, 28 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetFindNextFileW + 99 771C995B 40 Bytes [ 00, 00, 00, 00, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetFindNextFileW + C3 771C9985 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCrackUrlW + A 771C99E8 55 Bytes [ A6, C2, BB, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCrackUrlW + 42 771C9A20 10 Bytes [ 34, B6, 90, 10, 24, 50, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCrackUrlW + 4E 771C9A2C 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCrackUrlW + 5D 771C9A3B 36 Bytes [ 00, CD, 01, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCrackUrlW + 82 771C9A60 23 Bytes [ 33, 59, 1B, 1A, 05, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCreateUrlW + B 771C9D26 87 Bytes [ 00, 00, 00, 00, 62, 31, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCreateUrlW + 63 771C9D7E 9 Bytes [ 00, 00, 38, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCreateUrlW + 6D 771C9D88 17 Bytes [ 01, 00, 00, 00, 40, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCreateUrlW + 7F 771C9D9A 7 Bytes [ 07, 00, 28, 00, 08, 00, 30 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCreateUrlW + 87 771C9DA2 26 Bytes [ 08, 00, 44, 00, 01, 00, 38, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetLastResponseInfoW + 35 771CA468 116 Bytes [ 73, 5A, 1B, 1A, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetLastResponseInfoW + AA 771CA4DD 52 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCheckConnectionW + 30 771CA512 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCheckConnectionW + 5B 771CA53D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCheckConnectionW + 5E 771CA540 75 Bytes [ 28, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCheckConnectionW + AB 771CA58D 50 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetCheckConnectionW + DE 771CA5C0 38 Bytes [ 38, 00, 30, 00, 02, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetShowSecurityInfoByURLW + 24 771CA5E9 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetShowSecurityInfoByURLW + 49 771CA60E 17 Bytes [ C7, 01, 02, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetShowSecurityInfoByURLW + 5B 771CA620 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetShowSecurityInfoByURLW + 5E 771CA623 76 Bytes [ 00, CD, 01, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetShowSecurityInfoByURLW + AB 771CA670 108 Bytes [ 60, 00, 38, 00, 54, 86, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAlgIdToStringW + 38 771CA6DD 28 Bytes CALL 9B2D3C5C .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAlgIdToStringW + 55 771CA6FA 61 Bytes [ 00, 10, 00, 00, 00, 00, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAlgIdToStringW + 93 771CA738 1 Byte [ 60 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAlgIdToStringW + 95 771CA73A 149 Bytes [ 38, 00, 54, 86, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSecurityProtocolToStringW + 55 771CA7D0 26 Bytes [ E0, 5A, 1B, 1A, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSecurityProtocolToStringW + 70 771CA7EB 34 Bytes [ 00, 40, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSecurityProtocolToStringW + 95 771CA810 59 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSecurityProtocolToStringW + D1 771CA84C 17 Bytes [ 00, 00, 00, 00, 07, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSecurityProtocolToStringW + E3 771CA85E 1 Byte [ 01 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionExA + 2C 771CA9E4 53 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionExW + 31 771CAA1A 114 Bytes [ 00, 00, 40, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionExW + A4 771CAA8D 65 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionExW + E6 771CAACF 68 Bytes [ 00, 01, 00, 00, 00, 40, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionExW + 12B 771CAB14 99 Bytes [ AE, CE, C6, 01, 40, 6A, C8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetOptionExW + 18F 771CAB78 5 Bytes [ 6F, 5B, 1B, 1A, 05 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ResumeSuspendedDownload + 46 771CD4D8 39 Bytes [ 14, 14, 04, 66, AE, CE, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ResumeSuspendedDownload + 6E 771CD500 55 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ResumeSuspendedDownload + A7 771CD539 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ResumeSuspendedDownload + B1 771CD543 49 Bytes [ 10, 00, 00, 00, 00, A9, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ResumeSuspendedDownload + E4 771CD576 7 Bytes [ 00, 00, 1B, 00, 01, 00, 28 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryFortezzaStatus + 9 771CE396 41 Bytes [ CF, 20, A0, 46, 60, 31, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetQueryFortezzaStatus + 33 771CE3C0 202 Bytes [ 50, 00, 32, 00, 32, 00, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetFortezzaCommand + 9D 771CE48B 14 Bytes [ 00, 00, 00, 00, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetFortezzaCommand + AC 771CE49A 28 Bytes [ 00, 00, 00, 00, 00, 00, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetFortezzaCommand + C9 771CE4B7 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetFortezzaCommand + CE 771CE4BC 42 Bytes [ 00, 00, 00, 00, F8, 46, 60, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetFortezzaCommand + F9 771CE4E7 40 Bytes [ 00, 01, 00, 00, 00, 40, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!_GetFileExtensionFromUrl + 2E 771CECC5 9 Bytes [ 00, 00, 00, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!_GetFileExtensionFromUrl + 38 771CECCF 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!_GetFileExtensionFromUrl + 3F 771CECD6 223 Bytes [ 00, 00, 0E, 00, 0F, 00, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!_GetFileExtensionFromUrl + 121 771CEDB8 157 Bytes [ 98, 98, CB, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!_GetFileExtensionFromUrl + 1C1 771CEE58 20 Bytes [ 30, 00, 00, 00, 70, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileA + 16 771D2C2F 51 Bytes [ 00, 02, 00, 00, 10, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileA + 4C 771D2C65 5 Bytes [ 00, 00, 00, 02, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileA + 52 771D2C6B 1 Byte [ 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileA + 54 771D2C6D 11 Bytes [ 00, 00, 00, 8E, 6B, 1B, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileA + 60 771D2C79 31 Bytes [ 6B, 1B, 1A, 05, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpPutFileA + 32 771D2D61 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpPutFileA + 3B 771D2D6A 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpPutFileA + 3D 771D2D6C 12 Bytes [ 28, 00, 00, 00, 28, 00, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpPutFileA + 4C 771D2D7B 47 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpPutFileA + 7E 771D2DAD 73 Bytes [ 00, 00, 00, 01, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpDeleteFileA + 1D 771D3925 6 Bytes [ 00, 00, 00, 14, 00, 14 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpDeleteFileA + 24 771D392C 3 Bytes [ 28, 00, 38 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpDeleteFileA + 28 771D3930 15 Bytes [ 60, 00, 38, 00, AC, 86, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpDeleteFileA + 39 771D3941 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpDeleteFileA + 3E 771D3946 116 Bytes [ 00, 00, 64, 10, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRenameFileA + 1C 771D3ADE 11 Bytes [ 00, 00, 43, 6D, 1B, 1A, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRenameFileA + 28 771D3AEA 14 Bytes [ 00, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRenameFileA + 38 771D3AFA 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRenameFileA + 3D 771D3AFF 27 Bytes [ 00, 14, 00, 14, 00, 28, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRenameFileA + 59 771D3B1B 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpCreateDirectoryA + 26 771D3CCE 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpCreateDirectoryA + 2B 771D3CD3 14 Bytes [ 00, 00, 00, 00, 00, 14, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpCreateDirectoryA + 3A 771D3CE2 5 Bytes [ 38, 00, AC, 86, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpCreateDirectoryA + 40 771D3CE8 31 Bytes [ 00, 00, D0, 04, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpCreateDirectoryA + 60 771D3D08 3 Bytes [ EE, D1, 46 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRemoveDirectoryA + 1C 771D3E88 6 Bytes [ C5, 6D, 1B, 1A, 05, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRemoveDirectoryA + 24 771D3E90 19 Bytes [ C5, 6D, 1B, 1A, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRemoveDirectoryA + 38 771D3EA4 4 Bytes [ 40, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRemoveDirectoryA + 3E 771D3EAA 29 Bytes [ 00, 00, 00, 00, 00, 00, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRemoveDirectoryA + 5C 771D3EC8 86 Bytes [ 0C, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpSetCurrentDirectoryA + 1D 771D402B 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpSetCurrentDirectoryA + 24 771D4032 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpSetCurrentDirectoryA + 29 771D4037 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpSetCurrentDirectoryA + 3E 771D404C 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpSetCurrentDirectoryA + 5D 771D406B 86 Bytes [ 00, 00, 00, 00, 00, 30, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetCurrentDirectoryA + 1C 771D41DF 5 Bytes [ 00, 04, 16, 03, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetCurrentDirectoryA + 23 771D41E6 25 Bytes [ 00, 00, C0, BD, 0A, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetCurrentDirectoryA + 3D 771D4200 27 Bytes [ CF, 20, 00, 00, 00, 00, CF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetCurrentDirectoryA + 59 771D421C 9 Bytes [ 00, 00, 00, 00, C7, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetCurrentDirectoryA + 63 771D4226 48 Bytes [ 00, 00, 16, 00, 3C, 00, 41, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpCommandA + 26 771D4392 3 Bytes [ 62, 31, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpCommandA + 2B 771D4397 15 Bytes [ 00, 68, 4A, 60, 31, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpCommandA + 3C 771D43A8 4 Bytes [ 00, 00, 22, 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpCommandA + 41 771D43AD 28 Bytes [ 00, 00, 00, 00, 00, 62, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpCommandA + 5E 771D43CA 93 Bytes [ 22, 02, 00, 00, 00, 00, 7A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileSize + 1F 771D45A8 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileSize + 24 771D45AD 16 Bytes [ 00, 00, 00, 1B, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileSize + 35 771D45BE 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileSize + 3A 771D45C3 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileSize + 55 771D45DE 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpFindFirstFileA + 9 771D53A9 35 Bytes [ 00, 40, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpOpenFileA + 7 771D53CD 72 Bytes [ 00, 00, 00, CF, 20, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpOpenFileA + 50 771D5416 17 Bytes [ 50, 00, 32, 00, 32, 00, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpOpenFileA + 62 771D5428 21 Bytes [ 85, 70, 1B, 1A, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpOpenFileA + 79 771D543F 3 Bytes [ 00, 48, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpOpenFileA + 7F 771D5445 20 Bytes [ 00, 00, 00, 01, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpFindFirstFileW + A 771D571A 46 Bytes [ 08, 00, 44, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpFindFirstFileW + 3B 771D574B 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpFindFirstFileW + 40 771D5750 18 Bytes [ 88, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpFindFirstFileW + 54 771D5764 62 Bytes [ 00, 00, 00, 00, 07, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpFindFirstFileW + 93 771D57A3 128 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpDeleteFileW + 1B 771D5824 26 Bytes [ 28, 00, 2C, 00, 58, 00, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpDeleteFileW + 36 771D583F 120 Bytes [ 00, C8, BA, 23, F7, 10, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRenameFileW + 1E 771D58B8 7 Bytes [ 60, 00, 38, 00, 04, 87, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRenameFileW + 28 771D58C2 9 Bytes [ E0, 05, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRenameFileW + 33 771D58CD 61 Bytes JMP 771DAA37 C:\WINDOWS\system32\WININET.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRenameFileW + 71 771D590B 23 Bytes [ 10, 00, 00, 00, 00, 66, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRenameFileW + 89 771D5923 1 Byte [ 78 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpOpenFileW + 1A 771D59B6 24 Bytes [ 00, 00, 88, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpOpenFileW + 33 771D59CF 126 Bytes [ 00, 07, 00, 07, 00, 28, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpCreateDirectoryW + 1C 771D5A4F 67 Bytes [ 00, 20, DC, CE, 2D, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpCreateDirectoryW + 60 771D5A93 73 Bytes [ 00, 30, 87, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRemoveDirectoryW + 1A 771D5ADE 24 Bytes [ 00, 00, 24, 00, 49, 00, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpRemoveDirectoryW + 33 771D5AF7 115 Bytes [ 00, 4B, 71, 1B, 1A, 05, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpSetCurrentDirectoryW + 1A 771D5B6C 110 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpSetCurrentDirectoryW + 89 771D5BDB 38 Bytes [ 00, 00, 00, 00, 00, 1B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetCurrentDirectoryW + 24 771D5C04 16 Bytes [ 00, 00, 00, 00, 81, 71, 1B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetCurrentDirectoryW + 37 771D5C17 199 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpCommandW + 1A 771D5CE0 44 Bytes [ 01, 00, 00, 00, 40, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpCommandW + 47 771D5D0D 97 Bytes [ 00, 00, 00, C8, BA, 23, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpCommandW + A9 771D5D6F 43 Bytes [ 00, 01, 00, 00, 00, 40, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileW + 28 771D5D9C 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileW + 2C 771D5DA0 55 Bytes [ ED, B4, 49, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileW + 65 771D5DD9 52 Bytes [ 00, 00, 10, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileW + 9B 771D5E0F 29 Bytes [ 00, 00, 00, 00, 10, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileW + BA 771D5E2E 12 Bytes [ 00, 00, 28, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpPutFileW + 22 771D60B4 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpPutFileW + 29 771D60BB 3 Bytes [ 10, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpPutFileW + 2E 771D60C0 18 Bytes [ 18, 72, 1B, 1A, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpPutFileW + 42 771D60D4 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpPutFileW + 46 771D60D8 16 Bytes [ 28, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpGetFileEx + 79 771D6447 74 Bytes [ 00, 70, 72, 1B, 1A, 05, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpPutFileEx + 46 771D6492 44 Bytes [ FF, FF, 88, 7B, 00, 00, D7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpPutFileEx + 73 771D64BF 22 Bytes [ 00, 24, 00, 49, 00, 33, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpPutFileEx + 8A 771D64D6 9 Bytes [ 00, 00, 87, 72, 1B, 1A, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpPutFileEx + 94 771D64E0 1 Byte [ 98 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FtpPutFileEx + 96 771D64E2 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherCreateLocatorA + 3E 771D9D87 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherCreateLocatorA + 40 771D9D89 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherCreateLocatorA + 43 771D9D8C 40 Bytes [ A0, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherCreateLocatorA + 6E 771D9DB7 11 Bytes [ 00, A0, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherCreateLocatorA + 7B 771D9DC4 3 Bytes [ 00, 10, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherGetLocatorTypeA + 16 771D9F8B 26 Bytes [ 00, 00, 00, 26, 00, DE, 91, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherGetLocatorTypeA + 32 771D9FA7 11 Bytes [ 00, 00, 10, 00, 00, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherGetLocatorTypeA + 3E 771D9FB3 5 Bytes [ 00, 98, 3D, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherGetLocatorTypeA + 45 771D9FBA 15 Bytes [ 9C, 3D, 68, 5C, 6D, 19, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherGetLocatorTypeA + 55 771D9FCA 88 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherFindFirstFileA + 54 771DA6FC 6 Bytes [ 48, 0C, 00, 00, 3A, 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherFindFirstFileA + 5E 771DA706 11 Bytes [ 17, 00, 86, 2A, 21, 13, 05, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherFindFirstFileA + 6B 771DA713 3 Bytes [ 00, A0, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherFindFirstFileA + 70 771DA718 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherFindFirstFileA + 84 771DA72C 38 Bytes [ 4A, 1B, 01, 00, 00, 00, 36, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherOpenFileA + 2F 771DAC0C 18 Bytes [ 00, 00, 00, 00, A0, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherOpenFileA + 42 771DAC1F 51 Bytes [ 00, FF, FF, FF, FF, F8, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherOpenFileA + 77 771DAC54 34 Bytes [ 18, 36, 00, 00, 00, 00, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherOpenFileA + 9B 771DAC78 35 Bytes [ FF, FF, FF, FF, 48, 11, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherOpenFileA + C0 771DAC9D 64 Bytes [ 00, 00, 00, 00, 10, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherGetAttributeA + D 771DB01F 46 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherCreateLocatorW + 2B 771DB04F 12 Bytes [ 00, 00, 10, 00, 00, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherCreateLocatorW + 38 771DB05C 16 Bytes [ 3C, 5E, 00, 00, 00, 00, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherCreateLocatorW + 4A 771DB06E 17 Bytes [ 00, 00, A0, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherCreateLocatorW + 5C 771DB080 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherCreateLocatorW + 5E 771DB082 30 Bytes [ FF, FF, B8, 14, 00, 00, 29, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherGetLocatorTypeW + 25 771DB1FF 45 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherGetLocatorTypeW + 53 771DB22D 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherGetLocatorTypeW + 61 771DB23B 36 Bytes [ FF, 48, 16, 00, 00, 13, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherFindFirstFileW + B 771DB261 49 Bytes [ 10, 00, 00, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherFindFirstFileW + 3E 771DB294 17 Bytes [ 98, 16, 00, 00, EB, 3A, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherFindFirstFileW + 51 771DB2A7 14 Bytes [ 00, 00, 00, 00, 00, A0, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherFindFirstFileW + 61 771DB2B7 52 Bytes [ 00, 00, 10, 00, 00, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherFindFirstFileW + 96 771DB2EC 20 Bytes CALL 371DB307 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherOpenFileW + 2B 771DB438 59 Bytes [ A0, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherOpenFileW + 67 771DB474 3 Bytes [ FF, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherOpenFileW + 6B 771DB478 43 Bytes [ 50, 18, 00, 00, AB, 21, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherOpenFileW + 97 771DB4A4 41 Bytes [ 78, 18, 00, 00, B1, 44, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GopherOpenFileW + C1 771DB4CE 41 Bytes [ FF, FF, A0, 18, 00, 00, 14, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetInitializeAutoProxyDll + 35 771DE298 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetInitializeAutoProxyDll + 41 771DE2A4 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetInitializeAutoProxyDll + 69 771DE2CC 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetInitializeAutoProxyDll + 6F 771DE2D2 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetInitializeAutoProxyDll + 7E 771DE2E1 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!PrivacySetZonePreferenceW + 11 771E1D24 35 Bytes [ 00, 00, 03, 00, 82, 04, 17, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!PrivacySetZonePreferenceW + 37 771E1D4A 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!PrivacySetZonePreferenceW + 4C 771E1D5F 8 Bytes [ 00, 20, 01, 30, 00, 43, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!PrivacySetZonePreferenceW + 55 771E1D68 9 Bytes [ 41, 00, 36, 00, 33, 00, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!PrivacySetZonePreferenceW + 5F 771E1D72 1 Byte [ 31 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!PrivacyGetZonePreferenceW + 12 771E1EA1 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!PrivacyGetZonePreferenceW + 1B 771E1EAA 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!PrivacyGetZonePreferenceW + 21 771E1EB0 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!PrivacyGetZonePreferenceW + 28 771E1EB7 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!PrivacyGetZonePreferenceW + 2E 771E1EBD 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpCheckDavCompliance + 22 771E26D7 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpCheckDavCompliance + 28 771E26DD 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpCheckDavCompliance + 31 771E26E6 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpCheckDavCompliance + 3C 771E26F1 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpCheckDavCompliance + 45 771E26FA 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestW + 37 771E2B73 10 Bytes [ FF, 82, 79, 47, 11, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestW + 42 771E2B7E 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestW + 6D 771E2BA9 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestW + 70 771E2BAC 89 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestW + CA 771E2C06 24 Bytes [ 03, 00, F6, E5, 11, E1, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestExA + 30 771E2C71 48 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpSendRequestExA + 61 771E2CA2 29 Bytes [ 00, 00, 00, 00, 03, 00, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpEndRequestA + 19 771E2CC0 65 Bytes [ 96, B3, 9F, 6F, 30, C2, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpEndRequestW + 29 771E2D02 2 Bytes [ 2E, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpEndRequestW + 2C 771E2D05 152 Bytes [ 00, 58, 00, 30, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpEndRequestW + C7 771E2DA0 51 Bytes [ 01, 00, 00, 00, 00, 00, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpEndRequestW + FB 771E2DD4 147 Bytes [ 00, 00, 00, 00, 31, 01, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!HttpEndRequestW + 190 771E2E69 40 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetPerSiteCookieDecisionA + 15 771E3633 95 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetPerSiteCookieDecisionA + 75 771E3693 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetPerSiteCookieDecisionW + 19 771E36B1 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetPerSiteCookieDecisionW + 1E 771E36B6 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetPerSiteCookieDecisionW + 2F 771E36C7 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetPerSiteCookieDecisionW + 3E 771E36D6 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetPerSiteCookieDecisionW + 69 771E3701 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetPerSiteCookieDecisionA + 1E 771E37A4 45 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetPerSiteCookieDecisionA + 4C 771E37D2 37 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetPerSiteCookieDecisionW + 23 771E37FA 13 Bytes [ 00, 00, 00, 00, 00, 00, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetPerSiteCookieDecisionW + 31 771E3808 15 Bytes [ AC, E3, 11, E1, 03, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetPerSiteCookieDecisionW + 41 771E3818 15 Bytes CALL 771E381E C:\WINDOWS\system32\WININET.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetPerSiteCookieDecisionW + 51 771E3828 125 Bytes [ 05, 00, 00, 00, 36, E6, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetPerSiteCookieDecisionW + CF 771E38A6 156 Bytes [ 03, 00, 58, 00, 00, 00, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetEnumPerSiteCookieDecisionA + 6B 771E3943 8 Bytes [ 6F, 30, C2, C6, 01, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetEnumPerSiteCookieDecisionA + 74 771E394C 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetEnumPerSiteCookieDecisionW + 17 771E3968 24 Bytes [ 6E, 00, 6C, 00, 69, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetEnumPerSiteCookieDecisionW + 30 771E3981 49 Bytes [ 00, 53, 00, 74, 00, 61, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetEnumPerSiteCookieDecisionW + 64 771E39B5 28 Bytes [ 00, 00, 00, 40, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetEnumPerSiteCookieDecisionW + 82 771E39D3 76 Bytes [ 00, 00, 00, 00, 00, 31, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetClearAllPerSiteCookieDecisions + 28 771E3A22 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetClearAllPerSiteCookieDecisions + 2F 771E3A29 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetClearAllPerSiteCookieDecisions + 31 771E3A2B 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetClearAllPerSiteCookieDecisions + 3B 771E3A35 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetClearAllPerSiteCookieDecisions + 4A 771E3A44 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieA + 11 771E59D2 10 Bytes [ FF, FF, 82, 79, 47, 11, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieA + 1C 771E59DD 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieA + 3C 771E59FD 31 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieA + 5D 771E5A1E 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetGetCookieA + 66 771E5A27 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetCookieA + 7 771E5BAE 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetCookieA + 9 771E5BB0 28 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetCookieA + 26 771E5BCD 84 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetCookieExW + 52 771E5C24 7 Bytes [ 00, 00, 00, 00, 05, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetCookieExW + 5A 771E5C2C 21 Bytes [ 0F, E7, 00, 00, 90, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetCookieExW + 71 771E5C43 106 Bytes [ 00, 00, 00, 00, 00, 48, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetCookieExW + DC 771E5CAE 46 Bytes [ 01, 00, FF, E6, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetCookieExW + 10C 771E5CDE 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetCookieExA + 5E 771E5F49 69 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetCookieW + 43 771E5F91 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetCookieW + 4B 771E5F99 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetCookieW + 62 771E5FB0 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetCookieW + 77 771E5FC5 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSetCookieW + 7A 771E5FC8 54 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetTimeToSystemTime + 1C 771E625F 45 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetTimeToSystemTime + 4A 771E628D 139 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetTimeFromSystemTimeW + 87 771E6319 58 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetTimeToSystemTimeW + 25 771E6354 45 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetTimeToSystemTimeW + 53 771E6382 53 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetTimeToSystemTimeW + 8A 771E63B9 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetTimeToSystemTimeW + 91 771E63C0 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetTimeToSystemTimeW + 9F 771E63CE 15 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UrlZonesDetach + 1B 771EA635 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UrlZonesDetach + 2C 771EA646 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UrlZonesDetach + 42 771EA65C 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UrlZonesDetach + 59 771EA673 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UrlZonesDetach + 72 771EA68C 67 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheContainerA + 14 771EFC0F 26 Bytes [ 00, 09, 00, 02, 00, 38, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheContainerA + 30 771EFC2B 24 Bytes JMP 7720FC30 C:\WINDOWS\system32\WININET.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheContainerA + 49 771EFC44 67 Bytes [ 00, 00, 00, 00, 48, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheContainerA + 3F 771EFC88 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheEntryA + 1D 771EFCAA 46 Bytes [ 00, 00, 18, 00, 01, 00, 86, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheEntryA + 4C 771EFCD9 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheEntryA + 4E 771EFCDB 44 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheEntryA + 7B 771EFD08 110 Bytes [ 4D, 00, 42, 00, 35, 00, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RetrieveUrlCacheEntryFileA + 6A 771EFD77 10 Bytes [ 00, 33, 00, 33, 00, 46, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RetrieveUrlCacheEntryFileA + 75 771EFD82 49 Bytes [ 42, 00, 35, 00, 30, 00, 2D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RetrieveUrlCacheEntryStreamA + 2D 771EFDB4 1 Byte [ 31 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RetrieveUrlCacheEntryStreamA + 2F 771EFDB6 19 Bytes [ 2E, 00, 68, 00, 74, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RetrieveUrlCacheEntryStreamA + 45 771EFDCC 12 Bytes [ 00, 00, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RetrieveUrlCacheEntryStreamA + 53 771EFDDA 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RetrieveUrlCacheEntryStreamA + 58 771EFDDF 28 Bytes [ 00, 40, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryInfoA + 32 771EFF36 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryInfoA + 48 771EFF4C 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryInfoA + 66 771EFF6A 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheEntryExA + A 771EFF79 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheEntryExA + 2D 771EFF9C 47 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheEntryExA + 5D 771EFFCC 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheEntryExA + 71 771EFFE0 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheEntryExA + 80 771EFFEF 47 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheEntryExA + 2B 771F001F 82 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FreeUrlCacheSpaceA + 14 771F0073 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FreeUrlCacheSpaceA + 2A 771F0089 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FreeUrlCacheSpaceA + 43 771F00A2 39 Bytes [ 00, 00, 00, 00, 02, 00, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryGroup + 23 771F00CA 24 Bytes [ 38, A4, B1, 04, C7, 01, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryGroup + 3D 771F00E4 23 Bytes [ 00, 00, 00, 00, 20, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryGroup + 55 771F00FC 30 Bytes [ 70, 00, 73, 00, 2E, 00, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryGroup + 74 771F011B 24 Bytes [ 00, 18, 00, 00, 00, 64, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheGroupAttributeA + 14 771F0134 17 Bytes [ 82, 79, 47, 11, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheGroupAttributeA + 28 771F0148 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheGroupAttributeA + 3D 771F015D 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheGroupAttributeA + 54 771F0174 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheGroupAttributeA + 57 771F0177 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheGroupAttributeA + B 771F01A5 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheGroupAttributeA + 2B 771F01C5 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheGroupAttributeA + 44 771F01DE 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheGroupAttributeA + 5D 771F01F7 46 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IsUrlCacheEntryExpiredA + 2C 771F0228 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IsUrlCacheEntryExpiredA + 37 771F0233 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IsUrlCacheEntryExpiredA + 4A 771F0246 65 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IsUrlCacheEntryExpiredA + 8E 771F028A 65 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IsUrlCacheEntryExpiredA + D0 771F02CC 205 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheGroupAttributeW + B 771F04A3 162 Bytes [ 00, 00, 00, 03, 00, 58, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheGroupAttributeW + AE 771F0546 15 Bytes [ C6, 01, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheGroupAttributeW + B 771F0558 11 Bytes [ 20, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheGroupAttributeW + 17 771F0564 13 Bytes [ 54, 00, 4B, 00, 75, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheGroupAttributeW + 25 771F0572 97 Bytes [ 72, 00, 74, 00, 69, 00, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheGroupAttributeW + 87 771F05D4 98 Bytes [ 82, 79, 47, 11, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheGroupAttributeW + EA 771F0637 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheConfigInfoW + B 771F06EC 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheConfigInfoW + 20 771F0701 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheConfigInfoW + 39 771F071A 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheConfigInfoW + 5C 771F073D 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheConfigInfoW + 66 771F0747 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheConfigInfoW + D 771F0786 57 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheEntryW + 37 771F07C2 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheEntryW + 43 771F07CE 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheEntryW + 5A 771F07E5 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheEntryW + 6C 771F07F7 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheEntryW + 6F 771F07FA 55 Bytes [ 00, 00, 00, 00, 00, 00, 46, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CommitUrlCacheEntryW + 55 771F09BC 8 Bytes [ 00, 00, 00, 00, 3A, E9, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CommitUrlCacheEntryW + 5F 771F09C6 15 Bytes [ 07, 00, 90, 00, 7A, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CommitUrlCacheEntryW + 6F 771F09D6 37 Bytes [ 04, 00, A0, 3A, 8F, 45, 55, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CommitUrlCacheEntryW + 95 771F09FC 23 Bytes [ 00, 00, 00, 00, 80, 00, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CommitUrlCacheEntryW + AD 771F0A14 16 Bytes [ 31, 00, 20, 00, 59, 00, 6F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoW + 9 771F0D5D 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoW + B 771F0D5F 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheEntryInfoW + 1D 771F0D71 63 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryInfoW + 3B 771F0DB1 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryInfoW + 66 771F0DDC 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryInfoW + 69 771F0DDF 82 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryInfoW + BC 771F0E32 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryInfoW + D5 771F0E4B 80 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheEntryExW + A 771F0FE7 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheEntryExW + 31 771F100E 60 Bytes [ 00, 00, 11, 00, 02, 00, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheEntryExW + 38 771F104B 38 Bytes [ 00, 18, 00, 00, 00, 00, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FreeUrlCacheSpaceW + 24 771F1074 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FreeUrlCacheSpaceW + 30 771F1080 42 Bytes [ 00, 00, 00, 00, 20, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FreeUrlCacheSpaceW + 5B 771F10AB 2 Bytes [ 00, 18 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FreeUrlCacheSpaceW + 5E 771F10AE 75 Bytes CALL 771F10B3 C:\WINDOWS\system32\WININET.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FreeUrlCacheSpaceW + AA 771F10FA 51 Bytes [ 43, 00, 33, 00, 7E, 00, 31, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UnlockUrlCacheEntryFileW + 30 771F1163 42 Bytes [ 00, 00, 00, 00, 00, 2B, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UnlockUrlCacheEntryFileW + 5B 771F118E 1 Byte [ 30 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UnlockUrlCacheEntryFileW + 5D 771F1190 83 Bytes [ 33, 00, 2D, 00, 39, 00, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UnlockUrlCacheEntryFileW + B1 771F11E4 23 Bytes [ 00, 00, 00, 00, 00, 10, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UnlockUrlCacheEntryFileW + CA 771F11FD 13 Bytes [ 00, 00, 00, 31, 01, 31, 9C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheEntryW + 30 771F1245 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheEntryW + 5B 771F1270 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheEntryW + 5E 771F1273 82 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheEntryW + B1 771F12C6 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheEntryW + CA 771F12DF 68 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IsUrlCacheEntryExpiredW + 30 771F1324 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IsUrlCacheEntryExpiredW + 5B 771F134F 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IsUrlCacheEntryExpiredW + 5E 771F1352 82 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IsUrlCacheEntryExpiredW + B1 771F13A5 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IsUrlCacheEntryExpiredW + CA 771F13BE 117 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryGroupW + 5B 771F1434 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryGroupW + 5E 771F1437 82 Bytes [ 00, 10, 00, 00, 00, 60, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryGroupW + B1 771F148A 23 Bytes [ 00, 00, 00, 00, 00, 00, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryGroupW + CA 771F14A3 37 Bytes [ 00, 00, 00, 03, 00, 58, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheEntryGroupW + F0 771F14C9 65 Bytes [ 84, 47, 7F, 30, C2, C6, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheContainerW + 42 771F150C 8 Bytes [ 80, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheContainerW + 4B 771F1515 102 Bytes [ 00, 02, 00, 62, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheContainerW + B2 771F157C 16 Bytes [ 2E, 00, 64, 00, 62, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheContainerW + C3 771F158D 8 Bytes [ 00, 00, 00, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheContainerW + CC 771F1596 15 Bytes [ 04, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheContainerW + 22 771F174A 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheContainerW + 4D 771F1775 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheContainerW + 50 771F1778 75 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheContainerW + 9D 771F17C5 47 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheContainerW + CD 771F17F5 162 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheContainerW + 9E 771F1898 184 Bytes [ 30, 00, 00, 00, 78, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheContainerW + B5 771F1952 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheContainerW + BA 771F1957 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheContainerW + C3 771F1960 6 Bytes [ 20, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheContainerW + CB 771F1968 55 Bytes [ 23, 01, 41, 00, 64, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheContainerW + 103 771F19A0 1 Byte [ 6E ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RetrieveUrlCacheEntryFileW + 1E 771F1A9B 53 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RetrieveUrlCacheEntryStreamW + 32 771F1AD2 59 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RetrieveUrlCacheEntryStreamW + 70 771F1B10 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RetrieveUrlCacheEntryStreamW + 7B 771F1B1B 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RetrieveUrlCacheEntryStreamW + 87 771F1B27 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RetrieveUrlCacheEntryStreamW + 91 771F1B31 49 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheEntryW + 15 771F1C96 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheEntryW + 17 771F1C98 13 Bytes [ 30, 00, 00, 00, 78, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheEntryW + 25 771F1CA6 55 Bytes [ 03, 00, 5A, 00, 00, 00, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheEntryW + 34 771F1CDF 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheEntryW + 49 771F1CF4 3 Bytes [ 53, 00, 35 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheEntryW + 4D 771F1CF8 27 Bytes [ 42, 00, 35, 00, 43, 00, 7E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheHeaderData + 12 771F1D14 23 Bytes [ B0, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheHeaderData + 2B 771F1D2D 35 Bytes [ 00, 08, 00, 24, 8A, A7, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IncrementUrlCacheHeaderData + 1F 771F1D51 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!IncrementUrlCacheHeaderData + 2B 771F1D5D 18 Bytes [ 00, 00, 00, 21, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!LoadUrlCacheContent + E 771F1D70 11 Bytes [ 42, 00, 35, 00, 43, 00, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!LoadUrlCacheContent + 1A 771F1D7C 39 Bytes [ 35, 00, 2D, 00, 31, 00, 36, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!LoadUrlCacheContent + 42 771F1DA4 21 Bytes [ 36, 00, 39, 00, 43, 00, 37, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!LoadUrlCacheContent + 58 771F1DBA 41 Bytes [ 74, 00, 6D, 00, 6C, 00, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!UpdateUrlCacheContentPath + 11 771F1DE5 15 Bytes [ 00, 00, 00, 00, 10, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheGroup + B 771F1DF5 16 Bytes [ 00, 00, 00, 49, 05, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheGroup + 1C 771F1E06 19 Bytes [ 01, 00, FF, FF, FF, FF, 82, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheGroup + 31 771F1E1B 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!CreateUrlCacheGroup + 46 771F1E30 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheGroup + 14 771F1E49 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheGroup + 2A 771F1E5F 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteUrlCacheGroup + 43 771F1E78 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheGroup + A 771F1E87 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheGroup + E 771F1E8B 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheGroup + 24 771F1EA1 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheGroup + 3B 771F1EB8 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindFirstUrlCacheGroup + 5A 771F1ED7 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheGroup + 9 771F1EED 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheGroup + 1F 771F1F03 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheGroup + 2C 771F1F10 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheGroup + 35 771F1F19 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!FindNextUrlCacheGroup + 4E 771F1F32 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RegisterUrlCacheNotification + 14 771F1F4B 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RegisterUrlCacheNotification + 30 771F1F67 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RegisterUrlCacheNotification + 49 771F1F80 51 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RegisterUrlCacheNotification + 7D 771F1FB4 59 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RegisterUrlCacheNotification + B9 771F1FF0 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RunOnceUrlCache + F 771F22B0 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RunOnceUrlCache + 17 771F22B8 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RunOnceUrlCache + 1D 771F22BE 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RunOnceUrlCache + 2D 771F22CE 82 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!RunOnceUrlCache + 81 771F2322 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteIE3Cache + B 771F30FB 35 Bytes [ 00, 00, 00, 00, 00, 0C, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteIE3Cache + 30 771F3120 30 Bytes [ 8A, EA, 00, 00, 00, 00, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteIE3Cache + 4F 771F313F 1 Byte [ 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteIE3Cache + 51 771F3141 106 Bytes [ B0, 39, 9F, DB, 96, C6, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!DeleteIE3Cache + BD 771F31AD 57 Bytes [ 00, 00, 00, 7B, EA, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheConfigInfoA + 13 771F324D 38 Bytes [ 00, 00, 00, 46, C7, 3E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheConfigInfoA + 3A 771F3274 123 Bytes [ 2E, 00, 6D, 00, 34, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheConfigInfoA + B6 771F32F0 91 Bytes [ C0, EA, 00, 00, 00, 00, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheConfigInfoA + 112 771F334C 30 Bytes [ 73, 00, 20, 00, 64, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!GetUrlCacheConfigInfoA + 132 771F336C 24 Bytes [ 00, 00, 00, 00, C0, EA, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheConfigInfoA + 12 771F4152 81 Bytes [ 74, 00, 00, 00, 00, 00, D0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheConfigInfoA + 64 771F41A4 33 Bytes [ 74, 00, 27, 00, 73, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheConfigInfoA + 86 771F41C6 6 Bytes [ 6D, 00, 34, 00, 61, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheConfigInfoA + 8E 771F41CE 64 Bytes [ 00, 00, 06, EC, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!SetUrlCacheConfigInfoA + D0 771F4210 23 Bytes [ FB, D8, 43, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetAlgIdToStringA + 9F 771FB7B3 166 Bytes [ 00, 00, 00, 19, 00, 70, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetSecurityProtocolToStringA + A2 771FB85A 72 Bytes [ 3E, 00, 00, 00, 00, 00, 8F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ShowCertificate + 5 771FB8A3 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ShowCertificate + 8 771FB8A6 10 Bytes [ 48, 00, C0, EE, 8C, 9C, 54, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ShowClientAuthCerts + 6 771FB8B1 162 Bytes [ EB, 82, 28, 72, 98, C6, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ParseX509EncodedCertificateForListBoxEntry + 9E 771FB954 19 Bytes [ 33, 00, 20, 00, 54, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ParseX509EncodedCertificateForListBoxEntry + B2 771FB968 3 Bytes [ 2E, 00, 6D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ParseX509EncodedCertificateForListBoxEntry + B6 771FB96C 63 Bytes [ 34, 00, 61, 00, A1, EE, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ParseX509EncodedCertificateForListBoxEntry + F6 771FB9AC 59 Bytes [ 00, 00, 00, 00, 2D, 70, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ParseX509EncodedCertificateForListBoxEntry + 132 771FB9E8 6 Bytes [ 70, 00, 60, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ShowSecurityInfo + B 771FC370 35 Bytes [ 43, 00, 61, 00, 6E, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ShowSecurityInfo + 2F 771FC394 24 Bytes [ 2E, 00, 6D, 00, 34, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ShowSecurityInfo + 49 771FC3AE 47 Bytes [ 00, 00, CE, EE, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ShowSecurityInfo + 79 771FC3DE 39 Bytes [ 00, 00, 87, 02, 44, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ShowSecurityInfo + A1 771FC406 29 Bytes [ 34, 00, 41, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ShowX509EncodedCertificate + 30 771FCD2B 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ShowX509EncodedCertificate + 3B 771FCD36 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ShowX509EncodedCertificate + 42 771FCD3D 29 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ShowX509EncodedCertificate + 62 771FCD5D 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!ShowX509EncodedCertificate + 7C 771FCD77 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetErrorDlg + 31 771FD5AE 22 Bytes [ 7E, 00, 31, 00, 2E, 00, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetErrorDlg + 49 771FD5C6 26 Bytes [ 07, 00, 80, 00, 6E, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetErrorDlg + 64 771FD5E1 34 Bytes [ 88, DC, D7, E1, 96, C6, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetErrorDlg + 88 771FD605 14 Bytes [ 00, 00, 00, 20, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetErrorDlg + 97 771FD614 5 Bytes [ 37, 00, 20, 00, 49 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConfirmZoneCrossing + 47 771FD9C8 75 Bytes [ 20, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConfirmZoneCrossingW + 47 771FDA14 40 Bytes [ 00, 00, 1F, 00, 00, 77, F5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConfirmZoneCrossingW + 71 771FDA3E 7 Bytes [ 00, 00, C3, 5C, 38, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConfirmZoneCrossingW + 79 771FDA46 40 Bytes [ 00, 00, 20, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConfirmZoneCrossingW + A2 771FDA6F 16 Bytes [ 00, 83, EF, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] WININET.dll!InternetConfirmZoneCrossingW + B3 771FDA80 144 Bytes [ D2, A6, 00, 00, 00, 00, 1F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CollectCertPerformanceData + FFF827F3 77A5153D 174 Bytes [ 3C, 24, 3D, 63, 3D, 89, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CollectCertPerformanceData + FFF828A2 77A515EC 31 Bytes [ 98, 00, 00, 00, 0C, 30, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CollectCertPerformanceData + FFF828C2 77A5160C 123 Bytes [ 7D, 33, 03, 34, 35, 34, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CollectCertPerformanceData + FFF8293E 77A51688 495 Bytes [ 57, 30, 19, 31, 0E, 32, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CollectCertPerformanceData + FFF82B2E 77A51878 86 Bytes [ DC, 00, 00, 00, 09, 30, 41, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptDetachTls + 64 77A5425F 184 Bytes [ 00, 28, 79, AC, 04, C8, 7A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFlushLruCache + 4D 77A54318 40 Bytes [ A8, BE, AC, 04, 40, C0, AC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptCreateLruCache + 1F 77A54341 12 Bytes [ CE, AC, 04, 60, D0, AC, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptCreateLruCache + 2C 77A5434E 126 Bytes [ 00, 00, 28, D4, AC, 04, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptCreateLruCache + AB 77A543CD 44 Bytes [ 02, AD, 04, E0, 03, AD, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptAllocTls + 1A 77A543FA 14 Bytes [ AD, 04, D8, 13, AD, 04, A0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptAllocTls + 2A 77A5440A 144 Bytes [ 00, 00, F8, B1, AB, 04, A8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptInstallAsn1Module + 4C 77A5449B 6 Bytes [ 04, 48, AC, AD, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptInstallAsn1Module + 54 77A544A3 3 Bytes [ 00, 70, AE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptInstallAsn1Module + 58 77A544A7 42 Bytes [ 04, A0, AF, AD, 04, 60, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptInstallAsn1Module + 83 77A544D2 85 Bytes [ 00, 00, 50, 05, AA, 04, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptInstallAsn1Module + D9 77A54528 249 Bytes [ B8, 23, AA, 04, 58, 25, AA, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptRegisterSmartCardStore + 36 77A54CBC 76 Bytes [ 28, D6, B0, 04, B8, D7, B0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptRegisterSmartCardStore + 83 77A54D09 4 Bytes [ F3, B0, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptRegisterSmartCardStore + 88 77A54D0E 70 Bytes [ 00, 00, 10, F5, B0, 04, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptRegisterSmartCardStore + D0 77A54D56 24 Bytes [ 00, 00, D8, E1, AE, 04, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptRegisterSmartCardStore + EA 77A54D70 11 Bytes JMP 63055223 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgSignCTL + 30 77A552BD 24 Bytes [ 00, 00, 00, 70, F7, B8, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgSignCTL + 49 77A552D6 26 Bytes [ B8, 04, 00, 00, 00, 00, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgSignCTL + 64 77A552F1 704 Bytes [ 00, 00, 00, 50, 0A, 32, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgSignCTL + 327 77A555B4 21 Bytes [ D8, 66, B8, 04, 78, 68, B8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgSignCTL + 33F 77A555CC 21 Bytes [ 18, 6F, B8, 04, C8, 70, B8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetIntendedKeyUsage + 31 77A56BD5 2 Bytes [ FF, 36 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetIntendedKeyUsage + 34 77A56BD8 6 Bytes [ 76, 04, 57, E8, 63, 30 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetIntendedKeyUsage + 3B 77A56BDF 32 Bytes [ 00, 3B, C3, 89, 45, 08, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetIntendedKeyUsage + 5C 77A56C00 144 Bytes CALL 2511F06D .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetIntendedKeyUsage + ED 77A56C91 94 Bytes CALL 727054E6 .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptInitOIDFunctionSet + 22 77A57A2F 9 Bytes [ 8B, 45, EC, 8B, 00, 8B, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptInitOIDFunctionSet + 2C 77A57A39 162 Bytes [ 33, C0, 40, C3, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptInstallOIDFunctionAddress + 1D 77A57ADC 1 Byte [ 83 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptInstallOIDFunctionAddress + 1F 77A57ADE 10 Bytes [ 03, 0F, 85, 8E, CD, FD, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptInstallOIDFunctionAddress + 2A 77A57AE9 5 Bytes [ 0F, 84, 46, CD, FD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptInstallOIDFunctionAddress + 30 77A57AEF 21 Bytes [ 83, 26, 00, 83, 66, FC, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptInstallOIDFunctionAddress + 47 77A57B06 1 Byte [ F8 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumSystemStoreLocation + 3A 77A58370 80 Bytes [ D7, 56, 89, 5E, 2C, 89, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumSystemStoreLocation + 8C 77A583C2 3 Bytes [ 00, 57, 6A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumSystemStoreLocation + 90 77A583C6 157 Bytes [ 59, 33, C0, 6A, 11, 8D, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumSystemStoreLocation + 12E 77A58464 5 Bytes [ FF, 70, 48, 6A, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumSystemStoreLocation + 134 77A5846A 54 Bytes [ 15, 64, 12, A5, 77, 85, C0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetOIDFunctionAddress + 1E 77A59BF6 70 Bytes [ 75, D0, 8B, BD, 78, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetOIDFunctionAddress + 65 77A59C3D 29 Bytes [ 00, 90, 90, 90, 90, 90, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetOIDFunctionAddress + 83 77A59C5B 108 Bytes [ 53, AD, 77, 89, 45, FC, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetOIDFunctionAddress + F1 77A59CC9 7 Bytes [ 04, 03, 0F, 85, D7, 04, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetOIDFunctionAddress + F9 77A59CD1 9 Bytes [ F6, 40, 08, 80, 0F, 84, CD, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFreeOIDFunctionAddress + 27 77A59D98 37 Bytes [ FF, B0, B4, 00, 00, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFreeOIDFunctionAddress + 4D 77A59DBE 117 Bytes CALL 1E995DF6 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetDefaultCryptProv + 23 77A59E35 25 Bytes [ 00, 56, FF, 15, 5C, 12, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetDefaultCryptProv + 3D 77A59E4F 179 Bytes [ 45, DC, 6A, 13, 50, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPRetrieveSubjectGuid + 93 77A59F03 6 Bytes [ D6, 85, C0, 75, 09, C7 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPRetrieveSubjectGuid + 9A 77A59F0A 53 Bytes [ BC, 05, 00, 00, 00, EB, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPRetrieveSubjectGuid + D2 77A59F42 159 Bytes [ D6, 85, C0, 75, 09, C7, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPRetrieveSubjectGuid + 172 77A59FE2 249 Bytes [ A6, 77, 56, FF, 15, E4, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPRetrieveSubjectGuid + 26C 77A5A0DC 21 Bytes [ F8, 7B, 4F, 07, 88, 7D, 4F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegQueryInfoKeyU + 16 77A5A333 25 Bytes [ 07, 98, 5F, 50, 07, 40, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegQueryInfoKeyU + 30 77A5A34D 2 Bytes [ 68, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegQueryInfoKeyU + 33 77A5A350 248 Bytes [ A0, 69, 50, 07, 40, 6B, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegQueryInfoKeyU + 12C 77A5A449 107 Bytes [ 00, 00, 00, F8, 8C, 5F, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegOpenHKCUKeyExU + 23 77A5A4B7 188 Bytes [ 00, 30, 80, 51, 07, D8, 81, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegOpenKeyExU + B4 77A5A574 56 Bytes [ 80, CA, 51, 07, 28, CC, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegOpenKeyExU + ED 77A5A5AD 122 Bytes [ DF, 51, 07, 28, E1, 51, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegOpenKeyExU + 168 77A5A628 20 Bytes [ 80, 27, 5D, 09, 20, 29, 5D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegOpenKeyExU + 17D 77A5A63D 248 Bytes [ 2F, 5D, 09, 30, 31, 5D, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegOpenKeyExU + 278 77A5A738 44 Bytes [ 18, 8F, 5D, 09, B8, 90, 5D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptReadTrustedPublisherDWORDValueFromRegistry + 27 77A5A7B4 22 Bytes [ 80, D6, 49, 07, 20, D8, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptReadTrustedPublisherDWORDValueFromRegistry + 3F 77A5A7CC 69 Bytes [ B0, DE, 49, 07, 48, E0, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptReadTrustedPublisherDWORDValueFromRegistry + 85 77A5A812 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptReadTrustedPublisherDWORDValueFromRegistry + 87 77A5A814 29 Bytes [ B0, 54, 51, 07, 48, 56, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptReadTrustedPublisherDWORDValueFromRegistry + A5 77A5A832 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumOIDFunction + 1B8 77A5AC2D 61 Bytes [ 4C, 5E, 09, B0, 53, 63, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumOIDFunction + 1F6 77A5AC6B 119 Bytes [ 09, B8, 6C, 63, 09, 68, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumOIDFunction + 26E 77A5ACE3 512 Bytes [ 00, F0, 4A, 60, 09, A8, 4C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumOIDFunction + 472 77A5AEE7 5 Bytes [ 00, F8, 14, 61, 09 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumOIDFunction + 478 77A5AEED 215 Bytes [ 16, 61, 09, 28, 18, 61, 09, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegEnumValueU + 74 77A5B160 286 Bytes [ 2B, 4D, 10, 8B, 45, 14, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegEnumValueU + 193 77A5B27F 75 Bytes [ 55, 8B, EC, 53, 56, 8B, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegEnumValueU + 1DF 77A5B2CB 37 Bytes [ F0, FF, 15, 4C, 12, A5, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegEnumValueU + 205 77A5B2F1 23 Bytes [ 04, C6, 01, 0D, 41, C6, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegEnumValueU + 21D 77A5B309 9 Bytes [ 45, 08, 83, FE, 01, 8A, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertDuplicateCRLContext + 219 77A5C46F 26 Bytes [ 09, 00, 00, 00, 00, D0, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertDuplicateCRLContext + 234 77A5C48A 473 Bytes [ 00, 00, 98, 06, 8C, 09, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetTls + 1AE 77A5C664 366 Bytes [ 38, B5, 8C, 09, D8, B6, 8C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetTls + 31D 77A5C7D3 87 Bytes [ 00, A8, 45, 96, 09, 38, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetTls + 375 77A5C82B 11 Bytes [ 0E, 00, 23, 00, 0E, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetTls + 381 77A5C837 23 Bytes [ 0E, D0, 26, 00, 0E, 78, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetTls + 399 77A5C84F 6 Bytes [ 0E, D0, 2F, 00, 0E, C8 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindExtension + B9 77A5E9F7 24 Bytes [ F1, 75, 03, 6A, 10, 58, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindExtension + D2 77A5EA10 35 Bytes [ C0, 74, 5D, 57, 33, C0, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindExtension + F6 77A5EA34 18 Bytes CALL 77A49A5E .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindExtension + 109 77A5EA47 18 Bytes [ 15, 64, 14, A5, 77, 83, 7D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindExtension + 11C 77A5EA5A 162 Bytes [ 75, FC, FF, 75, 08, FF, 15, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddStoreToCollection + 23 77A5EB5A 11 Bytes [ 00, 00, 23, D8, 0F, 95, C1, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddStoreToCollection + 2F 77A5EB66 16 Bytes [ 23, D8, 83, F3, 70, 0F, 94, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddStoreToCollection + 40 77A5EB77 5 Bytes [ 06, 00, 00, 33, D8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddStoreToCollection + 46 77A5EB7D 73 Bytes [ 94, C1, 23, D1, 33, C9, BB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddStoreToCollection + 90 77A5EBC7 69 Bytes [ 01, 00, 00, 89, 45, FC, 8D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFindOIDInfo + 13 77A5F612 35 Bytes [ F7, D8, 1B, C0, F7, D8, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFindOIDInfo + 37 77A5F636 22 Bytes [ 4D, F8, 51, 8D, 4D, 0C, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFindOIDInfo + 4E 77A5F64D 8 Bytes [ 00, 00, 56, 8B, 75, 10, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFindOIDInfo + 57 77A5F656 96 Bytes [ 8B, FE, AA, 8B, 3D, 64, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFindOIDInfo + B8 77A5F6B7 10 Bytes [ 16, 80, 0E, 20, 8D, 46, 4C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegCreateHKCUKeyExU + 35 77A5F71D 2 Bytes [ 5C, 14 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegCreateHKCUKeyExU + 39 77A5F721 78 Bytes [ F7, D8, 1B, C0, F7, D8, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegCreateHKCUKeyExU + 88 77A5F770 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegCreateHKCUKeyExU + 8A 77A5F772 4 Bytes [ 8B, 46, 04, 03 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegCreateHKCUKeyExU + 8F 77A5F777 32 Bytes CALL 77A5EC2B C:\WINDOWS\system32\CRYPT32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegQueryValueExU + 18 77A5FFAD 1 Byte [ FC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegQueryValueExU + 1A 77A5FFAF 77 Bytes [ 15, C8, 14, A5, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegQueryValueExU + 68 77A5FFFD 68 Bytes [ 75, 0C, FF, 10, FF, 75, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegQueryValueExU + AD 77A60042 20 Bytes CALL 77A5FFDE C:\WINDOWS\system32\CRYPT32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegQueryValueExU + C2 77A60057 6 Bytes [ EC, 51, 51, 6A, 08, 8D ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptDecodeObjectEx + A 77A60288 22 Bytes [ A5, 77, 85, C0, 75, 62, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptDecodeObjectEx + 21 77A6029F 21 Bytes [ EB, 4F, FF, 75, 1C, 50, 68, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptDecodeObjectEx + 37 77A602B5 8 Bytes [ 8B, F8, 85, FF, 75, 0D, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptDecodeObjectEx + 40 77A602BE 3 Bytes [ D6, 85, C0 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptDecodeObjectEx + 44 77A602C2 34 Bytes [ 01, 47, 85, FF, 74, 21, 83, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertControlStore + 9 77A60390 40 Bytes [ 57, C1, E6, 0E, 81, CE, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertControlStore + 32 77A603B9 49 Bytes [ 57, 50, C7, 45, F8, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertControlStore + 64 77A603EB 177 Bytes [ 0F, 84, 83, 01, 00, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertDuplicateStore + 71 77A6049D 31 Bytes [ 75, FC, FF, 15, C8, 12, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertDuplicateStore + 93 77A604BF 90 Bytes [ 3B, C7, 0F, 84, 21, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertDuplicateStore + EE 77A6051A 4 Bytes [ FF, 57, 6A, 02 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertDuplicateStore + F3 77A6051F 9 Bytes [ 75, E0, FF, 75, E4, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertDuplicateStore + FD 77A60529 113 Bytes [ 0D, F9, FF, FF, 85, C0, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashCertificate + 5E 77A6059B 3 Bytes [ 50, 57, 68 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashCertificate + 62 77A6059F 1 Byte [ 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashCertificate + 64 77A605A1 16 Bytes CALL 77A5E653 C:\WINDOWS\system32\CRYPT32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashCertificate + 75 77A605B2 51 Bytes [ 15, 4C, 12, A5, 77, 33, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashCertificate + AA 77A605E7 11 Bytes [ 00, 70, 00, 37, 00, 63, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddSerializedElementToStore + 19 77A6064E 74 Bytes [ 51, 56, 56, 56, 56, 89, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddSerializedElementToStore + 64 77A60699 90 Bytes [ 55, 8B, EC, 51, 51, 53, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddSerializedElementToStore + BF 77A606F4 37 Bytes [ 75, 20, C1, EE, 0F, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddSerializedElementToStore + E5 77A6071A 42 Bytes [ FF, 5F, 5E, 8B, C3, 5B, C9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddSerializedElementToStore + 110 77A60745 121 Bytes [ 05, 83, E0, 01, 50, FF, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFreeCRLContext + 2 77A6085C 42 Bytes [ FF, 75, 0C, 33, F6, 46, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertOpenStore + A 77A60889 100 Bytes [ 89, 7D, FC, 74, 14, 8B, 0B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertOpenStore + 6F 77A608EE 81 Bytes [ 45, F0, 0F, 84, 91, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertOpenStore + C1 77A60940 38 Bytes [ C0, 74, 16, 8B, 06, 8B, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertOpenStore + E8 77A60967 38 Bytes [ 74, 1C, FF, 75, F0, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptImportPublicKeyInfo + 6 77A6098E 31 Bytes [ FF, 8B, 5D, F8, 3B, DF, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptImportPublicKeyInfoEx + 2 77A609AE 69 Bytes CALL 77A2B4CD .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptImportPublicKeyInfoEx + 48 77A609F4 53 Bytes [ 56, 89, 4D, FC, 74, 3C, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptImportPublicKeyInfoEx + 7E 77A60A2A 21 Bytes [ 8B, F0, FF, 75, 0C, E8, 9C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptImportPublicKeyInfoEx + 94 77A60A40 8 Bytes CALL 77A66B47 C:\WINDOWS\system32\CRYPT32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptImportPublicKeyInfoEx + 9D 77A60A49 154 Bytes [ F0, 8B, C6, 5E, C9, C2, 1C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetCRLContextProperty + 3B 77A60B80 57 Bytes [ 89, 7D, FC, FF, 75, 10, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetCRLContextProperty + 76 77A60BBB 136 Bytes [ 85, C0, 74, 06, 8B, 45, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetCRLContextProperty + FF 77A60C44 7 Bytes [ 85, C0, 74, 03, 83, 26, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetCRLContextProperty + 107 77A60C4C 48 Bytes CALL 77A5BC0B C:\WINDOWS\system32\CRYPT32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetCRLContextProperty + 138 77A60C7D 37 Bytes [ 39, 02, 75, 29, 33, D2, 42, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetAsn1Decoder + 10 77A60D81 121 Bytes [ 75, 0F, 68, 57, 00, 07, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetAsn1Decoder + 8A 77A60DFB 17 Bytes CALL 77A60695 C:\WINDOWS\system32\CRYPT32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetAsn1Decoder + 9C 77A60E0D 22 Bytes [ DC, 50, 8D, 45, E4, 50, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetAsn1Decoder + B3 77A60E24 118 Bytes [ FF, F7, D8, 1B, C0, 23, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetAsn1Decoder + 12A 77A60E9B 111 Bytes CALL 77A5CEED C:\WINDOWS\system32\CRYPT32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgCountersignEncoded + B 77A60FCD 48 Bytes CALL 77A34E6B .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgCountersignEncoded + 3C 77A60FFE 51 Bytes [ 15, 08, FC, FF, 75, 0C, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgCountersignEncoded + 70 77A61032 58 Bytes [ 15, DC, 13, A5, 77, 5D, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgCountersignEncoded + AB 77A6106D 219 Bytes [ FF, 75, 08, FF, 15, EC, 13, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgCountersignEncoded + 187 77A61149 93 Bytes [ FF, 76, 04, FF, 75, FC, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetCertificateChain + 1B 77A6125E 86 Bytes [ 00, 00, 56, 8B, 75, 10, 57, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetCertificateChain + 72 77A612B5 10 Bytes [ 00, 80, 39, 45, FC, 75, 12, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetCertificateChain + 7D 77A612C0 23 Bytes [ 75, 0C, 83, C6, 60, E8, 1F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetCertificateChain + 95 77A612D8 25 Bytes [ 15, 5C, 14, A5, 77, F7, D8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetCertificateChain + AF 77A612F2 61 Bytes [ EC, 8B, 45, 08, 85, C0, 74, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertOIDToAlgId + 4B 77A6148E 6 Bytes [ 75, 08, E8, 0C, D7, F9 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertOIDToAlgId + 52 77A61495 74 Bytes [ 8B, F0, 85, F6, 74, 36, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertOIDToAlgId + 9D 77A614E0 84 Bytes [ 8D, 4D, 08, 51, 50, B9, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertOIDToAlgId + F2 77A61535 39 Bytes [ 90, 90, 90, 43, 72, 79, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertOIDToAlgId + 11A 77A6155D 84 Bytes CALL 77A61395 C:\WINDOWS\system32\CRYPT32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptDecodeObject + E 77A62A9C 18 Bytes [ 55, 8B, EC, 8B, 45, 0C, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptDecodeObject + 21 77A62AAF 31 Bytes CALL CB1DD76A .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptDecodeObject + 41 77A62ACF 99 Bytes CALL 779F3ECE .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptDecodeObject + A5 77A62B33 49 Bytes [ FF, 5E, C3, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptDecodeObject + D7 77A62B65 9 Bytes [ 45, 08, 8B, 40, 58, 3B, 43, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCompareIntegerBlob + 3 77A62D98 89 Bytes [ 72, 6C, 52, 65, 74, 72, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCompareIntegerBlob + 5D 77A62DF2 99 Bytes [ 70, 00, 3A, 00, 00, 00, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCompareCertificate + 3C 77A62E56 1 Byte [ 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCompareCertificate + 40 77A62E5A 27 Bytes CALL 77A62B38 C:\WINDOWS\system32\CRYPT32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCompareCertificate + 5C 77A62E76 17 Bytes [ 39, 7D, FC, 74, 2F, 57, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCompareCertificate + 6E 77A62E88 59 Bytes CALL 779FA239 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCompareCertificate + AA 77A62EC4 128 Bytes [ 55, 8B, EC, 81, EC, 1C, 02, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSetCRLContextProperty + 2 77A6362D 5 Bytes [ 76, 08, 50, E8, 9D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSetCRLContextProperty + 8 77A63633 39 Bytes [ F9, FF, 8B, 46, 10, 66, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSetCRLContextProperty + 30 77A6365B 26 Bytes [ 5F, 8B, C6, 5E, 5B, C9, C3, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCompareCertificateName + 15 77A63676 5 Bytes [ 65, 00, 71, 00, 2E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCompareCertificateName + 1B 77A6367C 53 Bytes [ 74, 00, 78, 00, 74, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCompareCertificateName + 51 77A636B2 55 Bytes [ 2F, 00, 2F, 00, 77, 00, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCompareCertificateName + 89 77A636EA 13 Bytes [ 2E, 00, 63, 00, 6F, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCompareCertificateName + 97 77A636F8 5 Bytes [ 64, 00, 6F, 00, 77 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptAddRefLruEntry + 96 77A63947 103 Bytes [ 7D, E0, 76, 53, 8B, 4E, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptAddRefLruEntry + FE 77A639AF 11 Bytes [ 57, FF, 76, 04, 89, 3E, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptAddRefLruEntry + 10A 77A639BB 68 Bytes [ 43, 24, 85, C0, 74, 44, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptAddRefLruEntry + 14F 77A63A00 34 Bytes [ 75, F0, 8B, 7D, DC, 83, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptAddRefLruEntry + 172 77A63A23 11 Bytes [ 8B, 49, 34, 3B, C1, 89, 45, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertSyncStore + 47 77A640EC 16 Bytes [ C0, 0F, 84, 92, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertSyncStore + 58 77A640FD 75 Bytes [ D8, 89, 85, 64, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertSyncStore + A4 77A64149 5 Bytes [ FF, 53, 89, 85, 60 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertSyncStore + AB 77A64150 20 Bytes [ FF, 8D, 45, D4, 50, 8D, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertSyncStore + C0 77A64165 5 Bytes [ D6, 85, C0, 74, 1B ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCertificateInStore + B0 77A65028 8 Bytes [ 75, 08, 89, 06, E8, 06, FD, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCertificateInStore + B9 77A65031 47 Bytes [ 85, C0, 89, 46, 04, 75, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCertificateInStore + E9 77A65061 45 Bytes [ 74, 08, FF, 76, 04, E8, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCertificateInStore + 117 77A6508F 7 Bytes [ 34, B8, 85, F6, 74, 15, 83 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCertificateInStore + 11F 77A65097 35 Bytes CALL 77A73874 C:\WINDOWS\system32\CRYPT32.dll .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptReleaseLruEntry + 29 77A653A7 14 Bytes [ 66, 83, 3F, 00, 0F, 84, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptReleaseLruEntry + 38 77A653B6 122 Bytes [ FF, 85, C0, 0F, 85, F1, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptReleaseLruEntry + B3 77A65431 6 Bytes [ 68, 08, 13, A8, 77, 53 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptReleaseLruEntry + BA 77A65438 186 Bytes [ 15, 48, 10, A5, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptReleaseLruEntry + 175 77A654F3 1 Byte [ 5D ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptInsertLruEntry + 46 77A65708 83 Bytes [ E3, A8, 77, FF, 34, 30, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptInsertLruEntry + 9A 77A6575C 8 Bytes [ FF, 33, C0, 40, 5F, C9, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptInsertLruEntry + A3 77A65765 34 Bytes [ 90, 90, 90, 53, 00, 79, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptInsertLruEntry + C6 77A65788 31 Bytes [ 69, 00, 6F, 00, 6E, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptInsertLruEntry + E6 77A657A8 26 Bytes [ C0, 00, 00, 50, 33, F6, 56, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyRevocation + 4E 77A65F30 45 Bytes [ 65, 00, 00, 00, 49, 5F, 43, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyRevocation + 7C 77A65F5E 6 Bytes [ 45, 0C, FF, 75, 10, 0D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyRevocation + 83 77A65F65 184 Bytes [ C0, 00, 00, 50, FF, 75, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyRevocation + 13C 77A6601E 28 Bytes [ 00, 83, 65, 14, DF, 66, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyRevocation + 159 77A6603B 109 Bytes [ 45, 14, 8B, 5D, 18, 23, C6, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyTimeValidity + 1 77A66508 5 Bytes [ 45, 0C, 56, 89, 45 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyTimeValidity + 7 77A6650E 221 Bytes [ 8B, 45, 10, 57, 89, 45, F0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetLruEntryData + 55 77A665EC 55 Bytes [ 15, 4C, 12, A5, 77, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetLruEntryData + 8D 77A66624 107 Bytes [ 45, 1C, 89, 30, 8B, C7, 5F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetLruEntryData + F9 77A66690 16 Bytes [ 3B, C3, 89, 45, FC, 0F, 84, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetLruEntryData + 10A 77A666A1 57 Bytes [ 00, 85, C0, 0F, 84, A7, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetLruEntryData + 145 77A666DC 216 Bytes [ 83, F8, FF, 89, 45, 08, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyCertificateSignatureEx + 3C 77A66FF0 67 Bytes [ 83, 7D, 10, 03, 75, 05, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyCertificateSignatureEx + 80 77A67034 55 Bytes [ 10, 8B, 5D, 14, 89, 37, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyCertificateSignatureEx + B8 77A6706C 27 Bytes [ 7C, 1A, 8D, 47, 08, 50, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyCertificateSignatureEx + D4 77A67088 69 Bytes [ 8B, 45, 10, F6, 00, 80, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyCertificateSignatureEx + 11A 77A670CE 1 Byte [ FF ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptCreateLruEntry 77A672BC 3 Bytes [ 90, 90, 90 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptCreateLruEntry + 4 77A672C0 30 Bytes [ FF, 55, 8B, EC, 83, 7D, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptCreateLruEntry + 23 77A672DF 6 Bytes [ 85, C0, 0F, 84, D9, AE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptCreateLruEntry + 2A 77A672E6 17 Bytes CALL 77A672FD C:\WINDOWS\system32\CRYPT32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptCreateLruEntry + 3C 77A672F8 62 Bytes [ 00, 90, 90, 90, 90, 90, 8B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFindLruEntry + 12 77A6739D 116 Bytes [ 00, 68, 00, 10, 00, 00, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptEnumMatchingLruEntries + 42 77A67412 19 Bytes [ 00, FF, 75, 1C, FF, 75, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptEnumMatchingLruEntries + 56 77A67426 12 Bytes [ D0, 8B, D8, 85, F6, 74, 18, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptEnumMatchingLruEntries + 64 77A67434 3 Bytes [ 56, 8B, F8 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptEnumMatchingLruEntries + 68 77A67438 20 Bytes [ 15, 00, 12, A5, 77, 57, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptEnumMatchingLruEntries + 7D 77A6744D 10 Bytes [ 90, 90, 90, 4D, 00, 69, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCTLsInStore + 1 77A6774D 36 Bytes JMP 034C6A54 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCTLsInStore + 26 77A67772 30 Bytes [ C9, 74, 10, 50, 6A, 00, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCTLsInStore + 46 77A67792 78 Bytes [ FF, 15, 08, 12, A5, 77, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCTLsInStore + 95 77A677E1 99 Bytes [ FF, 75, 14, FF, 75, 10, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCTLsInStore + F9 77A67845 18 Bytes [ FF, 55, 8B, EC, FF, 75, 08, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCRLInStore + 4B 77A6799A 5 Bytes [ 73, 00, 74, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCRLInStore + 5B 77A679AA 76 Bytes [ 51, 53, 56, 57, 33, F6, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetDefaultOIDDllList + 8 77A679F7 103 Bytes CALL 77A53F57 C:\WINDOWS\system32\CRYPT32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetDefaultOIDDllList + 72 77A67A61 119 Bytes JMP 77A67B12 C:\WINDOWS\system32\CRYPT32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetDefaultOIDDllList + EA 77A67AD9 12 Bytes [ 0F, 8C, 2B, E3, 00, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetDefaultOIDDllList + F7 77A67AE6 145 Bytes [ 08, 01, 00, 00, 00, FF, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetDefaultOIDDllList + 189 77A67B78 1 Byte [ F6 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetDefaultOIDFunctionAddress + 2 77A67C3F 19 Bytes [ 8B, C6, 5E, C9, C2, 14, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetDefaultOIDFunctionAddress + 16 77A67C53 15 Bytes [ EC, 83, EC, 5C, A1, 00, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetDefaultOIDFunctionAddress + 26 77A67C63 19 Bytes [ 7D, 0C, 56, 89, 45, FC, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetDefaultOIDFunctionAddress + 3A 77A67C77 10 Bytes [ 00, 8B, 46, 28, 84, E4, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetDefaultOIDFunctionAddress + 45 77A67C82 35 Bytes [ 00, A9, 00, 00, 02, 00, 0F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCertificateInCRL + 3E 77A67F2E 13 Bytes [ B5, D0, FE, FF, FF, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCertificateInCRL + 4C 77A67F3C 3 Bytes [ 8E, 87, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCertificateInCRL + 50 77A67F40 119 Bytes [ 90, 90, 90, 90, 90, 6A, 28, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCertificateInCRL + C8 77A67FB8 102 Bytes [ C0, 0F, 84, E2, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCertificateInCRL + 12F 77A6801F 79 Bytes [ 02, 04, 04, 20, 00, 04, 04, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgClose + 7A 77A68934 15 Bytes [ 74, 00, 53, 00, 76, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgClose + 8A 77A68944 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgClose + 8C 77A68946 8 Bytes [ 53, 00, 74, 00, 61, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgClose + 95 77A6894F 6 Bytes [ 00, 50, 00, 6F, 00, 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgClose + 9C 77A68956 33 Bytes [ 69, 00, 63, 00, 79, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFreeCertificateChain + 3B 77A69359 96 Bytes CALL 779EB8B2 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFreeCertificateChain + 9C 77A693BA 63 Bytes [ 15, 4C, 12, A5, 77, E9, 82, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFreeCertificateChain + DC 77A693FA 19 Bytes [ 07, 80, FF, 15, 4C, 12, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFreeCertificateChain + F0 77A6940E 18 Bytes [ 75, 18, 56, 56, FF, D7, 3B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFreeCertificateChain + 103 77A69421 61 Bytes [ 75, 0C, FF, 75, 08, FF, 15, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertComparePublicKeyInfo + 77 77A698D6 6 Bytes [ 90, 90, 90, 90, 90, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertComparePublicKeyInfo + 7E 77A698DD 22 Bytes [ 55, 8B, EC, 81, EC, 14, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertComparePublicKeyInfo + 95 77A698F4 150 Bytes [ 35, F8, 11, A5, 77, 57, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertComparePublicKeyInfo + 12C 77A6998B 15 Bytes [ 50, FF, 15, 60, 12, A5, 77, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertComparePublicKeyInfo + 13D 77A6999C 92 Bytes [ EB, 03, 48, 89, 07, 8D, 85, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyCertificateChainPolicy + 33 77A69A7F 9 Bytes CALL 779F22EB .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyCertificateChainPolicy + 3D 77A69A89 5 Bytes [ B5, F4, FE, FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyCertificateChainPolicy + 44 77A69A90 13 Bytes [ 0C, 56, FF, 15, 98, 13, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyCertificateChainPolicy + 52 77A69A9E 21 Bytes [ 8B, F8, 8D, 85, F8, FE, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyCertificateChainPolicy + 68 77A69AB4 9 Bytes [ D8, 1B, F8, FF, C9, C2, 0C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashToBeSigned + F 77A69AD1 80 Bytes [ 25, 9C, 13, A5, 77, 5D, E9, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashToBeSigned + 60 77A69B22 7 Bytes [ FF, FF, 75, 0C, FF, 75, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashToBeSigned + 68 77A69B2A 103 Bytes [ 15, A0, 13, A5, 77, FF, B5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashToBeSigned + D0 77A69B92 49 Bytes [ 6A, 1C, 5B, 6A, 04, 5F, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashToBeSigned + 102 77A69BC4 14 Bytes CALL 77A19D9A .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetSubjectCertificateFromStore + 36 77A6A06F 70 Bytes [ B5, F4, FA, FF, FF, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetSubjectCertificateFromStore + 7E 77A6A0B7 36 Bytes [ 00, E0, 2C, 08, 00, 0C, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetSubjectCertificateFromStore + A3 77A6A0DC 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetSubjectCertificateFromStore + A5 77A6A0DE 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetSubjectCertificateFromStore + A8 77A6A0E1 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEncodeObjectEx + 89 77A6A17A 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEncodeObjectEx + 8C 77A6A17D 2 Bytes [ FF, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEncodeObjectEx + 8F 77A6A180 13 Bytes [ DA, 2D, 08, 00, 60, 11, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEncodeObjectEx + 9D 77A6A18E 18 Bytes [ FF, FF, FF, FF, FF, FF, E6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEncodeObjectEx + B0 77A6A1A1 18 Bytes [ FF, FF, FF, FF, FF, FF, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPGetSignedDataMsg + C2 77A6A9A6 73 Bytes [ 47, 65, 74, 4C, 65, 6E, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPGetSignedDataMsg + 10C 77A6A9F0 55 Bytes [ A0, 00, 43, 72, 79, 70, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPGetSignedDataMsg + 144 77A6AA28 173 Bytes [ 50, 61, 72, 61, 6D, 00, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPGetSignedDataMsg + 1F2 77A6AAD6 13 Bytes [ 43, 72, 79, 70, 74, 47, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPGetSignedDataMsg + 200 77A6AAE4 23 Bytes [ 52, 65, 67, 4E, 6F, 74, 69, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgGetParam + 6F 77A6B019 89 Bytes [ 72, 65, 65, 4C, 69, 62, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgGetParam + CA 77A6B074 25 Bytes [ 91, 02, 51, 75, 65, 72, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgGetParam + E4 77A6B08E 121 Bytes [ D1, 01, 47, 65, 74, 54, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgGetParam + 15E 77A6B108 526 Bytes [ 55, 6E, 68, 61, 6E, 64, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgGetParam + 36E 77A6B318 31 Bytes [ CF, 00, 46, 69, 6E, 64, 46, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetEnhancedKeyUsage + 2A 77A6B7F2 65 Bytes [ 6A, 01, 47, 65, 74, 4C, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetEnhancedKeyUsage + 6C 77A6B834 71 Bytes [ 5D, 01, 47, 65, 74, 53, 79, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetEnhancedKeyUsage + B4 77A6B87C 27 Bytes [ DC, 01, 4D, 65, 73, 73, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetEnhancedKeyUsage + D0 77A6B898 157 Bytes [ C9, 01, 4C, 6F, 61, 64, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetEnhancedKeyUsage + 16E 77A6B936 1 Byte [ 41 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindAttribute + 9 77A6C116 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindAttribute + 25 77A6C132 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindAttribute + 2F 77A6C13C 64 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindAttribute + 70 77A6C17D 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindAttribute + 75 77A6C182 36 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgControl + 18 77A6C4D2 35 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgControl + 3E 77A6C4F8 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgControl + 50 77A6C50A 75 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgControl + 9D 77A6C557 32 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgControl + BE 77A6C578 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetAsn1Encoder + 19 77A6D33B 15 Bytes [ 00, 00, 00, 00, 00, 1C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetAsn1Encoder + 29 77A6D34B 38 Bytes [ 00, 06, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetAsn1Encoder + 52 77A6D374 15 Bytes [ 00, 00, 00, 00, 1C, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetAsn1Encoder + 62 77A6D384 1 Byte [ 06 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetAsn1Encoder + 64 77A6D386 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgUpdate + 38 77A6D8A3 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgUpdate + 3C 77A6D8A7 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgUpdate + 42 77A6D8AD 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgUpdate + 58 77A6D8C3 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgUpdate + 63 77A6D8CE 4 Bytes [ 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgOpenToDecode + 14 77A6DE27 8 Bytes [ 00, D8, 1D, A7, 77, 31, 23, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgOpenToDecode + 1D 77A6DE30 6 Bytes [ A4, BA, A5, 77, 32, 23 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgOpenToDecode + 24 77A6DE37 7 Bytes [ 00, 08, 12, A8, 77, 33, 23 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgOpenToDecode + 2D 77A6DE40 91 Bytes [ 24, B9, A5, 77, 8C, 23, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgOpenToDecode + 89 77A6DE9C 1 Byte [ 21 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgVerifyCountersignatureEncodedEx + 2A 77A6DF61 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgVerifyCountersignatureEncodedEx + 2F 77A6DF66 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgVerifyCountersignatureEncodedEx + 31 77A6DF68 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgVerifyCountersignatureEncodedEx + 43 77A6DF7A 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgVerifyCountersignatureEncodedEx + 50 77A6DF87 14 Bytes [ FF, 64, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPLoad + A 77A6EB18 45 Bytes [ 04, 00, 00, 00, 00, 00, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPLoad + 39 77A6EB47 32 Bytes [ 00, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPLoad + 5A 77A6EB68 63 Bytes [ 07, 04, 00, 00, 48, 08, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPLoad + 9A 77A6EBA8 5 Bytes [ 04, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPLoad + A0 77A6EBAE 15 Bytes [ 01, 00, 07, 04, 00, 00, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPVerifyIndirectData + A 77A6EBBE 41 Bytes [ 00, 00, 04, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPVerifyIndirectData + 35 77A6EBE9 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPVerifyIndirectData + 3F 77A6EBF3 23 Bytes [ 00, 00, 00, 01, 00, 07, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPVerifyIndirectData + 58 77A6EC0C 6 Bytes [ 00, 00, 01, 00, 07, 04 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPVerifyIndirectData + 5F 77A6EC13 31 Bytes [ 00, B8, 08, 00, 00, C8, 88, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptTouchLruEntry + 12 77A6ED88 26 Bytes [ 24, BB, 08, 00, 1C, 07, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptTouchLruEntry + 2E 77A6EDA4 26 Bytes [ 00, 00, 00, 00, 58, C5, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptTouchLruEntry + 49 77A6EDBF 5 Bytes [ 00, E4, 04, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptTouchLruEntry + 51 77A6EDC7 4 Bytes [ 00, FC, CC, 08 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptTouchLruEntry + 56 77A6EDCC 10 Bytes [ 38, 01, 00, 00, E4, 04, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptSetTls + D 77A6F022 3 Bytes [ 5B, E4, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptSetTls + 11 77A6F026 73 Bytes CALL 77A2B4CF .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptSetTls + 5B 77A6F070 31 Bytes [ DA, 89, 50, 04, 03, D1, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptSetTls + 7B 77A6F090 11 Bytes [ 8B, 4D, FC, 8B, 55, 18, F7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptSetTls + 87 77A6F09C 59 Bytes [ F7, D8, 89, 0A, 5B, C9, C2, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCertificatesInStore + 6B 77A6FC8A 14 Bytes [ 55, 8B, EC, FF, 75, 24, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCertificatesInStore + 7A 77A6FC99 5 Bytes [ 75, 1C, FF, 75, 18 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCertificatesInStore + 80 77A6FC9F 19 Bytes [ 75, 14, FF, 75, 10, 6A, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCertificatesInStore + 95 77A6FCB4 25 Bytes [ 8B, FF, 55, 8B, EC, 83, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCertificatesInStore + AF 77A6FCCE 165 Bytes [ 08, 89, 4D, F4, 5F, 74, 11, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCertificateChainEngine + A 77A70786 5 Bytes [ 72, 00, 72, 00, 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCertificateChainEngine + 10 77A7078C 1 Byte [ 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCertificateChainEngine + 12 77A7078E 3 Bytes [ 73, 00, 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCertificateChainEngine + 16 77A70792 25 Bytes [ 65, 00, 6E, 00, 2D, 00, 56, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCertificateChainEngine + 30 77A707AC 5 Bytes [ 73, 00, 70, 00, 75 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCRLsInStore + 10 77A70C38 65 Bytes [ 1A, 00, 52, 00, 69, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCRLsInStore + 52 77A70C7A 6 Bytes [ 65, 00, 73, 00, 20, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCRLsInStore + 59 77A70C81 38 Bytes [ 00, 6E, 00, 74, 00, 72, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCRLsInStore + 80 77A70CA8 17 Bytes [ 0A, 00, 45, 00, 69, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCRLsInStore + 92 77A70CBA 75 Bytes [ 6E, 00, 6B, 00, 75, 00, 6E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRemoveStoreFromCollection + 1A 77A70E0E 1 Byte [ 0A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRemoveStoreFromCollection + 1C 77A70E10 31 Bytes [ 4B, 00, 72, 00, 69, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRemoveStoreFromCollection + 3C 77A70E30 37 Bytes [ 73, 00, 74, 00, 69, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertUpdateStore + 12 77A70E56 11 Bytes [ 61, 00, 6E, 00, 7A, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertUpdateStore + 1E 77A70E62 19 Bytes [ 6C, 00, 65, 00, 20, 00, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertUpdateStore + 32 77A70E76 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertUpdateStore + 34 77A70E78 29 Bytes [ 69, 00, 6F, 00, 6E, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertUpdateStore + 52 77A70E96 41 Bytes [ 31, 00, 21, 00, 64, 00, 21, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptRemoveLruEntry + 16 77A70F3E 25 Bytes [ 74, 00, 69, 00, 6F, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptRemoveLruEntry + 30 77A70F58 29 Bytes [ 65, 00, 6B, 00, 74, 00, 6B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptRemoveLruEntry + 4E 77A70F76 85 Bytes [ 21, 00, 0A, 00, 63, 00, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptRemoveLruEntry + A4 77A70FCC 1 Byte [ 75 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptRemoveLruEntry + A6 77A70FCE 37 Bytes [ 67, 00, 72, 00, 69, 00, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptQueryObject + 4 77A70FF4 16 Bytes [ 20, 00, 28, 00, 25, 00, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptQueryObject + 15 77A71005 90 Bytes [ 45, EC, FF, 15, A0, 12, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptQueryObject + 70 77A71060 6 Bytes [ 10, 57, 33, C0, 83, 3E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptQueryObject + 77 77A71067 19 Bytes [ 8D, 7D, EC, AB, AB, AB, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptQueryObject + 8B 77A7107B 54 Bytes [ 80, 4D, EC, 80, 8D, 46, 08, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEncodedCRLToStore + 4 77A7128E 21 Bytes [ 45, 14, 89, 38, EB, 43, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEncodedCRLToStore + 1A 77A712A4 25 Bytes CALL 77A46AD7 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEncodedCRLToStore + 34 77A712BE 65 Bytes [ F6, 03, 40, 74, 0D, C7, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEncodedCRLToStore + 76 77A71300 87 Bytes [ 55, 8B, EC, 83, EC, 14, F6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEncodedCRLToStore + CF 77A71359 50 Bytes [ FF, 85, C0, 75, 15, 39, 45, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegDeleteValueU + 11 77A720A6 45 Bytes [ 25, 00, 31, 00, 21, 00, 64, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegDeleteValueU + 3F 77A720D4 115 Bytes [ 67, 00, 65, 00, 6C, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegDeleteValueU + B3 77A72148 1 Byte [ 75 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegDeleteValueU + B5 77A7214A 23 Bytes [ 73, 00, 67, 00, 65, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegDeleteValueU + CD 77A72162 91 Bytes [ 3D, 00, 4B, 00, 65, 00, 69, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMemAlloc + 14 77A72438 7 Bytes [ 68, 00, 74, 00, 6C, 00, 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMemAlloc + 1C 77A72440 25 Bytes [ 6E, 00, 69, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMemAlloc + 36 77A7245A 19 Bytes [ 32, 00, 21, 00, 73, 00, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMemAlloc + 4A 77A7246E 21 Bytes [ 64, 00, 21, 00, 5D, 00, 41, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMemAlloc + 60 77A72484 1 Byte [ 72 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSerializeCRLStoreElement + 1D 77A728FC 47 Bytes [ 31, 00, 31, 00, 21, 00, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSerializeCRLStoreElement + 4D 77A7292C 13 Bytes [ 25, 00, 31, 00, 34, 00, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSerializeCRLStoreElement + 5B 77A7293A 19 Bytes [ 21, 00, 3A, 00, 25, 00, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSerializeCRLStoreElement + 6F 77A7294E 51 Bytes [ 25, 00, 31, 00, 36, 00, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSerializeCRLStoreElement + A3 77A72982 45 Bytes [ 31, 00, 39, 00, 21, 00, 30, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegSetValueExU + 12 77A72FAC 8 Bytes [ 2E, 00, 32, 00, 53, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegSetValueExU + 1B 77A72FB5 34 Bytes [ 00, 6C, 00, FC, 00, 73, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegSetValueExU + 3E 77A72FD8 39 Bytes [ 65, 00, 69, 00, 6E, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegSetValueExU + 66 77A73000 7 Bytes [ 20, 00, 6D, 00, 69, 00, 67 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegSetValueExU + 6E 77A73008 37 Bytes [ 72, 00, 69, 00, 65, 00, 72, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetFileVersion + 5 77A7320A 11 Bytes [ 20, 00, 64, 00, 65, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetFileVersion + 11 77A73216 71 Bytes [ 72, 00, 69, 00, 76, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetFileVersion + 59 77A7325E 17 Bytes [ 44, 00, 65, 00, 72, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetFileVersion + 6B 77A73270 1 Byte [ 74 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetFileVersion + 6D 77A73272 33 Bytes [ 65, 00, 20, 00, 41, 00, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptProtectData + E 77A73EC8 63 Bytes [ 64, 00, 65, 00, 6E, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptProtectData + 4E 77A73F08 7 Bytes [ 73, 00, 73, 00, 79, 00, 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptProtectData + 56 77A73F10 9 Bytes [ 74, 00, 65, 00, 6D, 00, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptProtectData + 60 77A73F1A 23 Bytes [ 72, 00, 73, 00, 69, 00, 6F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptProtectData + 78 77A73F32 23 Bytes [ 67, 00, 72, 00, 61, 00, 66, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnprotectData + 41 77A740E2 7 Bytes [ 73, 00, 70, 00, 75, 00, 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnprotectData + 49 77A740EA 9 Bytes [ 6B, 00, 74, 00, 65, 00, 20, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnprotectData + 53 77A740F4 19 Bytes [ FC, 00, 72, 00, 20, 00, 4B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnprotectData + 67 77A74108 39 Bytes [ 72, 00, 74, 00, 69, 00, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnprotectData + 8F 77A74130 5 Bytes [ 72, 00, 69, 00, 63 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFreeLruCache + 14 77A74514 9 Bytes [ 72, 00, 73, 00, 74, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFreeLruCache + 1E 77A7451E 21 Bytes [ 6C, 00, 75, 00, 6E, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFreeLruCache + 34 77A74534 11 Bytes [ 20, 00, 5A, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFreeLruCache + 40 77A74540 37 Bytes [ 66, 00, 69, 00, 6B, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFreeLruCache + 66 77A74566 7 Bytes [ 6D, 00, 61, 00, 74, 00, 69 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptUninstallAsn1Module + E 77A745D0 37 Bytes [ 67, 00, 65, 00, 62, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFreeTls + 1C 77A745F6 23 Bytes [ 63, 00, 68, 00, 6C, 00, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFreeTls + 34 77A7460E 29 Bytes [ 70, 00, 72, 00, 69, 00, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFreeTls + 52 77A7462C 15 Bytes [ 73, 00, 65, 00, 6C, 00, 24, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFreeTls + 62 77A7463C 45 Bytes [ 66, 00, 66, 00, 65, 00, 6E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFreeTls + 90 77A7466A 80 Bytes [ 73, 00, 74, 00, 61, 00, 6E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CloseCertPerformanceData + 56 77A81D1A 25 Bytes [ 85, C0, 74, CF, 83, 4F, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CloseCertPerformanceData + 71 77A81D35 3 Bytes [ 0B, CB, FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CloseCertPerformanceData + 75 77A81D39 25 Bytes [ 85, C0, 74, B0, 8B, 45, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CreateFileU + 4 77A81D53 82 Bytes [ 58, 04, EB, 50, 8B, 40, 1C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CreateFileU + 57 77A81DA6 24 Bytes [ FF, 8B, 45, 08, 3B, 58, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CreateFileU + 70 77A81DBF 16 Bytes [ FF, FF, EB, 06, 8B, 40, 2C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CreateFileU + 81 77A81DD0 18 Bytes CALL 77A7EA74 C:\WINDOWS\system32\CRYPT32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CreateFileU + 94 77A81DE3 46 Bytes [ 8B, 47, 38, 85, C0, 8B, 4F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptAcquireContextU + 6 77A82403 14 Bytes [ 8A, 9C, 01, 00, 6A, 01, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptAcquireContextU + 15 77A82412 2 Bytes [ 40, 5E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptAcquireContextU + 18 77A82415 42 Bytes [ C2, 08, 00, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptAcquireContextU + 43 77A82440 20 Bytes [ EC, 33, C0, 8D, 7D, CC, AB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptAcquireContextU + 58 77A82455 109 Bytes [ 89, 5D, F8, C7, 45, CC, 14, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignHashU + 22 77A824C3 11 Bytes [ 83, 65, F8, 00, 8B, 43, 08, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignHashU + 2E 77A824CF 6 Bytes [ 6A, 1B, 8D, 45, FC, 50 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignHashU + 35 77A824D6 64 Bytes CALL 77A2D62E .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignHashU + 76 77A82517 9 Bytes [ 75, 0C, FF, 75, 08, E8, 0E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignHashU + 80 77A82521 49 Bytes [ 8B, F8, 85, FF, 75, 73, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifySignatureU + 16 77A82553 10 Bytes CALL 77A3A60A .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifySignatureU + 21 77A8255E 21 Bytes [ 8B, 78, 08, 8B, 4D, F0, 33, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifySignatureU + 37 77A82574 33 Bytes [ 75, 10, 8B, 5B, 04, FF, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifySignatureU + 5A 77A82597 44 Bytes [ E4, 33, FF, FF, 75, E8, E8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifySignatureU + 87 77A825C4 106 Bytes [ 8B, C7, 5F, 5E, 5B, C9, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSetProviderU + 3E 77A8262F 22 Bytes [ 85, C0, 74, 3E, 81, 7D, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSetProviderU + 55 77A82646 24 Bytes [ 46, 18, FF, 76, 24, FF, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSetProviderU + 6E 77A8265F 25 Bytes CALL 77A2618F .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSetProviderU + 89 77A8267A 1 Byte [ FC ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSetProviderU + 8B 77A8267C 39 Bytes [ 57, 53, FF, 15, B0, 10, A5, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumProvidersU + 43 77A82844 68 Bytes [ 5F, 8B, C6, 5E, 5B, C9, C2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumProvidersU + 88 77A82889 46 Bytes [ 85, C0, 75, 04, 21, 06, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumProvidersU + B7 77A828B8 100 Bytes [ FF, 89, 7D, F8, 89, 7D, EC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumProvidersU + 11C 77A8291D 53 Bytes CALL 77A3A2F2 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumProvidersU + 152 77A82953 48 Bytes CALL 77A38B0A .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegCreateKeyExU + 6 77A82984 3 Bytes [ E6, A7, FA ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegCreateKeyExU + A 77A82988 18 Bytes CALL 77A3A2D9 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegCreateKeyExU + 20 77A8299E 79 Bytes [ 90, 8B, FF, 55, 8B, EC, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegCreateKeyExU + 70 77A829EE 109 Bytes [ 75, 14, FF, 75, 10, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!RegCreateKeyExU + DE 77A82A5C 62 Bytes [ D6, 85, C0, 74, 25, FF, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptBinaryToStringA 77A834E9 6 Bytes [ 90, 90, 8B, FF, 55, 8B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptBinaryToStringA + 7 77A834F0 71 Bytes [ 51, 51, 8B, 45, 0C, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptBinaryToStringA + 4F 77A83538 13 Bytes [ 75, 0C, FF, D7, 85, C0, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptBinaryToStringA + 5D 77A83546 176 Bytes [ 0C, FF, D7, 85, C0, 75, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptBinaryToStringA + 10E 77A835F7 57 Bytes [ F6, 74, 1C, F6, 06, 80, 74, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptBinaryToStringW + BC 77A838C3 89 Bytes [ A5, 77, 85, C0, 74, C7, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptBinaryToStringW + 116 77A8391D 47 Bytes [ 04, 33, C0, EB, 4C, 8D, 46, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptBinaryToStringW + 146 77A8394D 177 Bytes [ 75, 0C, FF, 15, C0, 14, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptStringToBinaryA + C 77A839FF 17 Bytes [ FF, FF, 85, C0, 74, DC, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptStringToBinaryA + 1E 77A83A11 45 Bytes [ 50, 56, 6A, 04, 57, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptStringToBinaryA + 4C 77A83A3F 88 Bytes [ EC, 51, 8B, 45, 0C, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptStringToBinaryA + A5 77A83A98 14 Bytes [ FF, 85, C0, 74, D8, 81, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptStringToBinaryA + B4 77A83AA7 100 Bytes [ 75, 0C, FF, 15, C0, 14, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptStringToBinaryW + 27 77A83B0C 37 Bytes [ EC, 8B, 45, 0C, 85, C0, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptStringToBinaryW + 4D 77A83B32 95 Bytes [ 02, 57, FF, 15, 30, 14, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptStringToBinaryW + AD 77A83B92 41 Bytes [ 40, 56, 8B, 75, 10, 56, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptStringToBinaryW + D7 77A83BBC 258 Bytes [ EA, FF, 75, FC, FF, 75, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptStringToBinaryW + 1DA 77A83CBF 58 Bytes [ 0B, 80, 8D, 73, 04, E8, D2, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindSubjectInSortedCTL + B0 77A86CBE 6 Bytes [ FF, 55, 8B, EC, 8B, 45 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindSubjectInSortedCTL + B7 77A86CC5 11 Bytes [ 85, C0, 75, 03, 6A, 10, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindSubjectInSortedCTL + C3 77A86CD1 191 Bytes [ 4D, 0C, 51, 50, 53, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumSubjectInSortedCTL + 88 77A86D91 66 Bytes [ EC, 51, 8B, 45, 0C, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumSubjectInSortedCTL + CB 77A86DD4 25 Bytes [ 35, 3C, 14, A5, 77, 8D, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumSubjectInSortedCTL + E5 77A86DEE 37 Bytes [ 50, 53, FF, 75, 0C, FF, 15, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumSubjectInSortedCTL + 10B 77A86E14 175 Bytes [ D6, 85, C0, 74, CE, 8D, 47, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumSubjectInSortedCTL + 1BB 77A86EC4 8 Bytes [ 15, 54, 14, A5, 77, F7, D8, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCRLContextProperties + 27 77A8701A 8 Bytes [ 15, D0, 12, A5, 77, 53, EB, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCRLContextProperties + 31 77A87024 75 Bytes CALL 77A6243E C:\WINDOWS\system32\CRYPT32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCRLContextProperties + 7D 77A87070 61 Bytes [ 39, 5D, F8, 74, 08, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCRLContextProperties + BB 77A870AE 11 Bytes [ 00, 8D, 45, FC, 50, FF, 76, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumCRLContextProperties + C7 77A870BA 34 Bytes [ 00, 85, C0, 74, 34, FF, 75, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetStoreProperty + 5C 77A872CA 23 Bytes [ 8B, 45, 0C, 89, 46, 04, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetStoreProperty + 74 77A872E2 11 Bytes [ 46, 08, 85, C0, 74, 06, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetStoreProperty + 80 77A872EE 37 Bytes [ 8B, 76, 04, 85, F6, 74, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetStoreProperty + A6 77A87314 2 Bytes [ 07, 56 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetStoreProperty + A9 77A87317 3 Bytes [ 7C, 76, FA ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindSubjectInCTL + 2 77A87399 87 Bytes [ EB, 02, 33, C0, 85, C0, 5E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindSubjectInCTL + 5A 77A873F1 65 Bytes [ 00, 90, 90, 90, 90, 90, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindSubjectInCTL + 9C 77A87433 246 Bytes [ D3, 83, 7E, 18, 00, 75, 5B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindSubjectInCTL + 193 77A8752A 51 Bytes [ CC, 12, A5, 77, 83, FF, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindSubjectInCTL + 1C7 77A8755E 70 Bytes [ 01, 75, 0E, FF, 75, FC, 83, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCTLEntryFromCertificateContextProperties + 19 77A8785C 22 Bytes [ D8, 3B, DF, 59, 74, 15, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCTLEntryFromCertificateContextProperties + 31 77A87874 24 Bytes [ 08, EB, 0E, 68, 0E, 00, 07, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCTLEntryFromCertificateContextProperties + 4A 77A8788D 1 Byte [ 0C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCTLEntryFromCertificateContextProperties + 4C 77A8788F 22 Bytes [ 18, 89, 78, 04, EB, 07, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCTLEntryFromCertificateContextProperties + 63 77A878A6 88 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertDeleteCRLFromStore + 6 77A88146 34 Bytes [ 75, 10, EB, 13, 56, FF, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddCRLLinkToStore + 7 77A88169 104 Bytes [ C6, EB, F7, 90, 90, 90, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCTLInStore + 1E 77A881D2 8 Bytes [ 77, 38, 89, 7E, 34, EB, 09, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCTLInStore + 27 77A881DB 100 Bytes [ FC, 89, 78, 58, 89, 7E, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCTLInStore + 8C 77A88240 53 Bytes [ 34, B8, FF, 15, A0, 12, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCTLInStore + C2 77A88276 73 Bytes [ F3, AB, 8B, 45, 08, 89, 06, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindCTLInStore + 10C 77A882C0 85 Bytes [ 10, 04, 4B, 8D, 7C, 47, 02, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateContext 77A88479 25 Bytes [ 90, 8B, FF, 55, 8B, EC, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateContext + 1A 77A88493 30 Bytes CALL 77A87804 C:\WINDOWS\system32\CRYPT32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateContext + 39 77A884B2 43 Bytes [ 90, 90, 90, 90, 90, 8B, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateContext + 65 77A884DE 49 Bytes [ 46, 30, 85, C0, 74, 13, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateContext + 97 77A88510 19 Bytes [ EC, 83, EC, 30, 53, 8B, 5D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSaveStore + 14 77A88952 17 Bytes [ 00, 00, 85, F6, 74, 12, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSaveStore + 26 77A88964 98 Bytes [ 12, A5, 77, 57, FF, D3, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSaveStore + 89 77A889C7 201 Bytes [ 15, 84, 10, A5, 77, 85, C0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddCRLContextToStore + 2 77A88A91 1 Byte [ FF ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddCRLContextToStore + 4 77A88A93 145 Bytes [ 45, 10, 89, 85, E4, FC, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetCRLFromStore + 3A 77A88B25 128 Bytes [ C3, 74, 1A, 8D, 85, F8, FE, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCRLContext + F 77A88BA6 113 Bytes CALL 01A88BA7 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCTLContext + C 77A88C18 5 Bytes [ FF, 8D, 85, F4, FD ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCTLContext + 12 77A88C1E 6 Bytes [ FF, 50, 8D, 85, F8, FE ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCTLContext + 1A 77A88C26 58 Bytes [ 50, FF, B5, E4, FC, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCTLContext + 55 77A88C61 8 Bytes [ FF, 33, DB, 43, E9, 11, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateCTLContext + 5E 77A88C6A 59 Bytes [ 90, 90, 54, 61, 72, 00, 43, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetKeyIdentifierProperty + 34 77A892AB 97 Bytes [ 18, 00, 00, 00, 89, 03, 89, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSetKeyIdentifierProperty + 4 77A8930D 41 Bytes [ 4A, 78, 89, 48, 2C, 8B, 4A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSetKeyIdentifierProperty + 2E 77A89337 5 Bytes [ 00, 00, 89, 48, 40 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSetKeyIdentifierProperty + 34 77A8933D 47 Bytes [ 8A, 90, 00, 00, 00, 89, 48, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSetKeyIdentifierProperty + 64 77A8936D 117 Bytes [ 00, 00, 89, 48, 58, 8B, 8A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSetKeyIdentifierProperty + DA 77A893E3 74 Bytes [ 00, 89, 88, 88, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumKeyIdentifierProperties + 4 77A895B1 56 Bytes CALL 50E45DB9 .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumKeyIdentifierProperties + 3D 77A895EA 2 Bytes [ 8D, 45 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumKeyIdentifierProperties + 40 77A895ED 27 Bytes [ 50, 8B, C6, 2B, 45, 0C, 50, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumKeyIdentifierProperties + 5D 77A8960A 3 Bytes [ 75, 1E, 2B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumKeyIdentifierProperties + 62 77A8960F 16 Bytes [ 6A, 01, 8D, 45, FC, 50, 8D, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetIssuerCertificateFromStore + 1 77A89897 8 Bytes [ EC, 8B, 4D, 08, 8B, 01, 85, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetIssuerCertificateFromStore + A 77A898A0 82 Bytes [ 51, 08, 53, 56, 74, 50, 8B, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetIssuerCertificateFromStore + 5D 77A898F3 10 Bytes [ 01, EB, 0C, 8B, 45, 10, 83, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetIssuerCertificateFromStore + 68 77A898FE 3 Bytes [ 0C, 83, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetIssuerCertificateFromStore + 6C 77A89902 139 Bytes [ 5E, 5B, 5D, C2, 0C, 00, 90, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifySubjectCertificateContext + 46 77A8998E 24 Bytes [ 4D, 10, 89, 31, 8B, 4D, 0C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifySubjectCertificateContext + 5F 77A899A7 30 Bytes [ FF, 55, 8B, EC, 51, 8B, 4D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifySubjectCertificateContext + 7E 77A899C6 32 Bytes [ 7D, FC, 89, 4D, 08, 78, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifySubjectCertificateContext + 9F 77A899E7 58 Bytes [ C8, 5E, 03, F9, 8B, 4D, FC, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptAcquireCertificatePrivateKey + 4 77A89A22 36 Bytes [ 45, 08, 8B, 50, 04, 89, 51, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptAcquireCertificatePrivateKey + 29 77A89A47 10 Bytes [ 8B, FE, AB, AB, 66, AB, 8D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptAcquireCertificatePrivateKey + 34 77A89A52 51 Bytes [ 75, 08, FF, 15, 44, 13, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptAcquireCertificatePrivateKey + 68 77A89A86 229 Bytes [ F8, 88, 46, 03, 8A, 45, FA, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptAcquireCertificatePrivateKey + 14E 77A89B6C 27 Bytes [ 15, 08, 13, A5, 77, 85, C0, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSetCertificateContextPropertiesFromCTLEntry + 52 77A89C93 124 Bytes [ 00, 00, 8B, 3D, 08, 12, A5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSetCertificateContextPropertiesFromCTLEntry + CF 77A89D10 19 Bytes [ 75, 07, 68, A1, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSetCertificateContextPropertiesFromCTLEntry + E3 77A89D24 22 Bytes [ FF, 85, C0, 89, 45, FC, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSetCertificateContextPropertiesFromCTLEntry + FA 77A89D3B 36 Bytes [ CA, 83, E1, 03, F3, A4, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSetCertificateContextPropertiesFromCTLEntry + 11F 77A89D60 54 Bytes [ 15, 08, 12, A5, 77, 50, FF, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertOpenSystemStoreW + 10 77A89E59 26 Bytes [ FF, 45, 10, 47, EB, 0D, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertOpenSystemStoreW + 2B 77A89E74 36 Bytes [ 66, 85, DB, 0F, 84, D2, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEncodedCertificateToSystemStoreA + C 77A89E99 150 Bytes [ 8B, 45, FC, 0F, B7, 00, 0F, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEncodedCertificateToSystemStoreW + 59 77A89F30 26 Bytes [ 45, 10, 80, E3, 3F, 47, 80, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEncodedCertificateToSystemStoreW + 74 77A89F4B 10 Bytes [ C5, 00, 00, 00, 66, 8B, 02, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEncodedCertificateToSystemStoreW + 7F 77A89F56 28 Bytes [ 77, 16, 83, 7D, 14, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEncodedCertificateToSystemStoreW + 9C 77A89F73 159 Bytes [ 4D, 8B, 45, 14, 85, C0, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEncodedCertificateToSystemStoreW + 13E 77A8A015 118 Bytes [ 00, 1D, 00, 46, 00, 69, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSetEnhancedKeyUsage + B 77A8A366 97 Bytes [ 20, 00, 77, 00, 75, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSetEnhancedKeyUsage + 6D 77A8A3C8 41 Bytes [ 20, 00, 67, 00, 65, 00, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSetEnhancedKeyUsage + 97 77A8A3F2 97 Bytes [ 65, 00, 20, 00, 64, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSetEnhancedKeyUsage + F9 77A8A454 1 Byte [ 66 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertSetEnhancedKeyUsage + FB 77A8A456 71 Bytes [ FC, 00, 67, 00, 65, 00, 6E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetValidUsages + B 77A8A536 81 Bytes [ 74, 00, 0A, 00, 38, 00, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetValidUsages + 5D 77A8A588 23 Bytes [ FC, 00, 74, 00, 7A, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetValidUsages + 75 77A8A5A0 1 Byte [ 31 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetValidUsages + 77 77A8A5A2 11 Bytes [ 21, 00, 73, 00, 21, 00, 3E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetValidUsages + 83 77A8A5AE 9 Bytes [ 5A, 00, 75, 00, 67, 00, 65, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEnhancedKeyUsageIdentifier + 34 77A8A8A2 1 Byte [ 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEnhancedKeyUsageIdentifier + 36 77A8A8A4 15 Bytes [ 3D, 00, 25, 00, 32, 00, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEnhancedKeyUsageIdentifier + 46 77A8A8B4 1 Byte [ 79 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEnhancedKeyUsageIdentifier + 48 77A8A8B6 177 Bytes [ 70, 00, 20, 00, 64, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAddEnhancedKeyUsageIdentifier + FA 77A8A968 51 Bytes [ 72, 00, 75, 00, 6E, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRemoveEnhancedKeyUsageIdentifier + 2F 77A8A99C 29 Bytes [ 6E, 00, 00, 00, 13, 00, 53, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRemoveEnhancedKeyUsageIdentifier + 4D 77A8A9BA 113 Bytes [ 70, 00, 72, 00, 6F, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRemoveEnhancedKeyUsageIdentifier + BF 77A8AA2C 33 Bytes [ 67, 00, 61, 00, 6E, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRemoveEnhancedKeyUsageIdentifier + E1 77A8AA4E 7 Bytes [ 6B, 00, 61, 00, 74, 00, 20 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRemoveEnhancedKeyUsageIdentifier + E9 77A8AA56 19 Bytes [ 62, 00, 6C, 00, 6F, 00, 63, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetDefaultCryptProvForEncrypt + C 77A8ABC6 11 Bytes [ 53, 00, 2D, 00, 4E, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetDefaultCryptProvForEncrypt + 18 77A8ABD2 13 Bytes [ 3D, 00, 0E, 00, 58, 00, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetDefaultCryptProvForEncrypt + 26 77A8ABE0 1 Byte [ 2D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetDefaultCryptProvForEncrypt + 28 77A8ABE2 17 Bytes [ 41, 00, 64, 00, 72, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetDefaultCryptProvForEncrypt + 3A 77A8ABF4 17 Bytes [ 56, 00, 65, 00, 72, 00, 7A, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertIsRDNAttrsInCertificateName + 3C 77A8AD28 15 Bytes [ 6E, 00, 66, 00, 6F, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertIsRDNAttrsInCertificateName + 4C 77A8AD38 1 Byte [ 6F ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertIsRDNAttrsInCertificateName + 4E 77A8AD3A 17 Bytes [ 6E, 00, 65, 00, 6E, 00, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertIsRDNAttrsInCertificateName + 60 77A8AD4C 13 Bytes [ 3B, 00, 5B, 00, 25, 00, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertIsRDNAttrsInCertificateName + 6E 77A8AD5A 1 Byte [ 5D ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignCertificate + A 77A8AE8C 55 Bytes [ 20, 00, 64, 00, 65, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignCertificate + 42 77A8AEC4 1 Byte [ 66 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignCertificate + 44 77A8AEC6 3 Bytes [ 69, 00, 6B ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignCertificate + 48 77A8AECA 1 Byte [ 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignCertificate + 4A 77A8AECC 33 Bytes [ 74, 00, 61, 00, 75, 00, 73, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignAndEncodeCertificate + 43 77A8B08F 108 Bytes [ 00, 20, 00, 41, 00, 6C, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignAndEncodeCertificate + B0 77A8B0FC 129 Bytes [ 6C, 00, FC, 00, 73, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyCRLTimeValidity + 4C 77A8B17E 5 Bytes [ 5D, 00, 5A, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyCRLTimeValidity + 52 77A8B184 23 Bytes [ 72, 00, 74, 00, 69, 00, 66, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyCRLTimeValidity + 6A 77A8B19C 101 Bytes [ 68, 00, 74, 00, 6C, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyCRLRevocation + 1E 77A8B202 101 Bytes [ 65, 00, 6E, 00, 64, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertAlgIdToOID + 24 77A8B268 83 Bytes [ 74, 00, 65, 00, 69, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindRDNAttr + 4A 77A8B2BC 233 Bytes [ 72, 00, 72, 00, 6C, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashPublicKeyInfo + 16 77A8B3A6 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashPublicKeyInfo + 18 77A8B3A8 41 Bytes [ 20, 00, 49, 00, 64, 00, 3D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashPublicKeyInfo + 42 77A8B3D2 79 Bytes [ 75, 00, 61, 00, 6C, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashPublicKeyInfo + 92 77A8B422 1 Byte [ 69 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashPublicKeyInfo + 94 77A8B424 49 Bytes [ 6E, 00, 69, 00, 65, 00, 6E, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptExportPublicKeyInfoEx + 18 77A8BE9A 45 Bytes [ 68, 00, E4, 00, 6C, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptExportPublicKeyInfoEx + 46 77A8BEC8 41 Bytes [ 73, 00, 73, 00, 74, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptExportPublicKeyInfoEx + 70 77A8BEF2 63 Bytes [ 32, 00, 21, 00, 73, 00, 21, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptCreateKeyIdentifierFromCSP + 14 77A8BF32 1 Byte [ 73 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptCreateKeyIdentifierFromCSP + 16 77A8BF34 49 Bytes [ 74, 00, 65, 00, 3D, 00, 25, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptCreateKeyIdentifierFromCSP + 48 77A8BF66 123 Bytes [ 72, 00, 74, 00, 65, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptInstallDefaultContext + 1F 77A8BFE2 1 Byte [ 0A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptInstallDefaultContext + 21 77A8BFE4 43 Bytes [ 23, 00, 5B, 00, 25, 00, 31, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptInstallDefaultContext + 4D 77A8C010 1 Byte [ 41 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptInstallDefaultContext + 4F 77A8C012 45 Bytes [ 6E, 00, 64, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptInstallDefaultContext + 7D 77A8C040 1 Byte [ 65 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUninstallDefaultContext + 17 77A8C13E 49 Bytes [ 67, 00, 65, 00, 6E, 00, 1A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUninstallDefaultContext + 49 77A8C170 149 Bytes [ 73, 00, 6F, 00, 6E, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUninstallDefaultContext + DF 77A8C206 112 Bytes [ 75, 00, 74, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUninstallDefaultContext + 150 77A8C277 198 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUninstallDefaultContext + 217 77A8C33E 9 Bytes [ 65, 00, 73, 00, 20, 00, 44, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFindCertificateKeyProvInfo + 12 77A8C514 7 Bytes [ EC, 00, 01, 00, 44, 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFindCertificateKeyProvInfo + 1A 77A8C51C 31 Bytes [ 72, 00, 20, 00, 61, 00, 75, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFindCertificateKeyProvInfo + 3A 77A8C53C 65 Bytes [ 6B, 00, 74, 00, 75, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFindCertificateKeyProvInfo + 7C 77A8C57E 9 Bytes [ 65, 00, 74, 00, 65, 00, 72, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFindCertificateKeyProvInfo + 86 77A8C588 3 Bytes [ 74, 00, 61 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyCertificateSignature + 31 77A8C730 51 Bytes [ 20, 00, 53, 00, 74, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetPublicKeyLength + 2F 77A8C764 5 Bytes [ 65, 00, 6C, 00, 6C ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetPublicKeyLength + 35 77A8C76A 5 Bytes [ 65, 00, 72, 00, 3A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetPublicKeyLength + 3B 77A8C770 5 Bytes [ 20, 00, 3C, 00, 25 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetPublicKeyLength + 41 77A8C776 1 Byte [ 31 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetPublicKeyLength + 43 77A8C778 1 Byte [ 3E ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateSelfSignCertificate + 8 77A8C895 2 Bytes [ 00, 65 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateSelfSignCertificate + B 77A8C898 1 Byte [ 72 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateSelfSignCertificate + D 77A8C89A 139 Bytes [ 72, 00, 65, 00, 69, 00, 63, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateSelfSignCertificate + 99 77A8C926 19 Bytes [ 75, 00, 74, 00, 6F, 00, 6D, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertCreateSelfSignCertificate + AD 77A8C93A 33 Bytes [ 65, 00, 20, 00, 41, 00, 6B, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRegisterSystemStore + 22 77A8DE81 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRegisterSystemStore + 25 77A8DE84 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRegisterSystemStore + 47 77A8DEA6 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRegisterSystemStore + 5F 77A8DEBE 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRegisterSystemStore + 6C 77A8DECB 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRegisterPhysicalStore + A 77A8DF00 73 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRegisterPhysicalStore + 55 77A8DF4B 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRegisterPhysicalStore + 63 77A8DF59 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRegisterPhysicalStore + 72 77A8DF68 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRegisterPhysicalStore + 89 77A8DF7F 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertUnregisterSystemStore + 3B 77A8E104 9 Bytes [ 54, 00, 58, 00, 54, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertUnregisterSystemStore + 45 77A8E10E 12 Bytes [ 65, 00, 30, 00, 00, 00, A8, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertUnregisterSystemStore + 54 77A8E11D 60 Bytes [ 00, 02, 00, 8E, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertUnregisterSystemStore + 91 77A8E15A 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertUnregisterSystemStore + 94 77A8E15D 2 Bytes [ 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertUnregisterPhysicalStore + 27 77A8E204 25 Bytes [ 82, 79, 47, 11, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertUnregisterPhysicalStore + 41 77A8E21E 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertUnregisterPhysicalStore + 57 77A8E234 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertUnregisterPhysicalStore + 64 77A8E241 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertUnregisterPhysicalStore + 67 77A8E244 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumSystemStore + 47 77A8E514 51 Bytes [ A0, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumSystemStore + 7B 77A8E548 11 Bytes [ 18, E2, 36, D7, EF, DA, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumSystemStore + 87 77A8E554 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumSystemStore + 93 77A8E560 3 Bytes [ 20, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumSystemStore + 97 77A8E564 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumPhysicalStore + 10 77A8EB45 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumPhysicalStore + 13 77A8EB48 12 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumPhysicalStore + 20 77A8EB55 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumPhysicalStore + 35 77A8EB6A 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertEnumPhysicalStore + 41 77A8EB76 96 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindChainInStore + 1C 77A905DC 16 Bytes [ 00, 00, 00, 00, 06, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindChainInStore + 2D 77A905ED 9 Bytes [ 00, 00, 00, 00, 70, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindChainInStore + 37 77A905F7 98 Bytes [ 00, 00, 62, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindChainInStore + 9A 77A9065A 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFindChainInStore + 9D 77A9065D 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRDNValueToStrW + 35 77A90877 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRDNValueToStrW + 3E 77A90880 6 Bytes [ 00, 00, 00, 00, CF, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRDNValueToStrW + 47 77A90889 28 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRDNValueToStrW + 64 77A908A6 1 Byte [ 03 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRDNValueToStrW + 66 77A908A8 49 Bytes [ 5A, 00, 00, 00, 18, 00, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertNameToStrW + 12 77A9190F 121 Bytes [ 00, 80, 00, 00, 00, 48, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertNameToStrW + 8C 77A91989 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertNameToStrA + 9 77A91997 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertNameToStrA + B 77A91999 74 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertNameToStrA + 56 77A919E4 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertNameToStrA + 66 77A919F4 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertNameToStrA + 68 77A919F6 50 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertStrToNameW + 53 77A91D02 1 Byte [ 2E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertStrToNameW + 55 77A91D04 3 Bytes [ 50, 00, 44 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertStrToNameW + 59 77A91D08 15 Bytes [ 46, 00, 6E, 00, 66, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertStrToNameW + 6A 77A91D19 8 Bytes [ 00, 00, 00, 00, 00, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertStrToNameW + 73 77A91D22 3 Bytes [ 00, 00, 18 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertStrToNameA + 31 77A9222E 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertStrToNameA + 38 77A92235 155 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertStrToNameA + D4 77A922D1 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertStrToNameA + EF 77A922EC 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertStrToNameA + F1 77A922EE 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetNameStringW + 34 77A9263D 40 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetNameStringW + 5E 77A92667 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetNameStringW + 86 77A9268F 33 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetNameStringW + A9 77A926B2 55 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetNameStringW + E2 77A926EB 28 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetNameStringA + 9 77A928DA 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetNameStringA + B 77A928DC 80 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertGetNameStringA + 5C 77A9292D 119 Bytes [ 00, 1E, 00, 9A, E6, 79, E0, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRDNValueToStrA + 73 77A929A5 15 Bytes [ 00, 00, 00, 80, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRDNValueToStrA + 83 77A929B5 159 Bytes [ 00, 04, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRDNValueToStrA + 125 77A92A57 63 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRDNValueToStrA + 167 77A92A99 57 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertRDNValueToStrA + 1A3 77A92AD5 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyCTLUsage + F7 77A92D0A 71 Bytes [ 61, 00, 67, 00, 65, 00, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyCTLUsage + 13F 77A92D52 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyCTLUsage + 14E 77A92D61 52 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyCTLUsage + 183 77A92D96 7 Bytes [ 72, 00, 5F, 00, 46, 00, 52 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertVerifyCTLUsage + 18B 77A92D9E 9 Bytes [ 5F, 00, 50, 00, 52, 00, 45, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptCreateAsyncHandle + 26 77A93754 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptCreateAsyncHandle + 3E 77A9376C 21 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptCreateAsyncHandle + 54 77A93782 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptCreateAsyncHandle + 77 77A937A5 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptCreateAsyncHandle + 7E 77A937AC 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSetAsyncParam + 1A 77A938DD 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetAsyncParam + 1A 77A938FC 37 Bytes [ 33, 00, 7E, 00, 31, 00, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetAsyncParam + 40 77A93922 20 Bytes [ 00, 00, 18, 00, 01, 00, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptCloseAsyncHandle + 10 77A93937 82 Bytes [ 01, 9A, E6, 79, E0, B1, 04, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetMessageSignerCount + 44 77A9398A 32 Bytes [ 61, 00, 6D, 00, 65, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetMessageSignerCount + 65 77A939AB 47 Bytes [ 00, 50, 00, 00, 00, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetMessageCertificates + 2B 77A939DB 85 Bytes [ 00, 00, 00, 00, 00, 62, 6A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashMessage + 51 77A93A31 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashMessage + 5E 77A93A3E 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashMessage + 6E 77A93A4E 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashMessage + 88 77A93A68 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptHashMessage + 8E 77A93A6E 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEncryptMessage + 67 77A94312 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEncryptMessage + 7B 77A94326 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEncryptMessage + 84 77A9432F 44 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyMessageHash + 28 77A9435C 20 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyDetachedMessageHash + 10 77A94371 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyDetachedMessageHash + 12 77A94373 23 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyDetachedMessageHash + 2A 77A9438B 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignMessageWithKey + B 77A9439B 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignMessageWithKey + 25 77A943B5 82 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignMessageWithKey + 78 77A94408 11 Bytes [ 7C, BF, 51, E6, 03, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignMessageWithKey + 84 77A94414 29 Bytes [ 38, 00, 01, 00, 10, 02, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignMessageWithKey + A2 77A94432 13 Bytes [ 01, 0D, 00, 00, 00, 00, 10, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyMessageSignatureWithKey + 1D 77A9456C 99 Bytes [ 69, 00, 73, 00, 70, 00, 6C, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyMessageSignatureWithKey + 81 77A945D0 1 Byte [ 06 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyMessageSignatureWithKey + 83 77A945D2 157 Bytes [ 00, 00, 00, 00, 00, 00, 40, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyMessageSignatureWithKey + 121 77A94670 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyMessageSignatureWithKey + 133 77A94682 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignMessage + 8A 77A94D5B 195 Bytes [ 00, 00, 00, 00, 00, 20, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignAndEncryptMessage + BF 77A94E1F 13 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignAndEncryptMessage + CF 77A94E2F 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignAndEncryptMessage + D1 77A94E31 190 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignAndEncryptMessage + 191 77A94EF1 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSignAndEncryptMessage + 19E 77A94EFE 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyMessageSignature + 2F 77A95201 53 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptVerifyDetachedMessageSignature + 31 77A95237 50 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptDecryptMessage + 2E 77A9526A 248 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptDecryptAndVerifyMessageSignature + F4 77A95363 62 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptDecodeMessage + 3A 77A953A2 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEncodeObject + D 77A953B4 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEncodeObject + F 77A953B6 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEncodeObject + 21 77A953C8 48 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEncodeObject + 52 77A953F9 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEncodeObject + 7D 77A95424 25 Bytes [ 00, 00, 00, 00, 05, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSetOIDFunctionValue + 2E 77A9B830 1 Byte [ 05 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSetOIDFunctionValue + 30 77A9B832 7 Bytes [ 00, 00, 00, 00, 00, 00, 10 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSetOIDFunctionValue + 38 77A9B83A 105 Bytes [ 00, 00, 60, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSetOIDFunctionValue + A2 77A9B8A4 52 Bytes [ 00, 00, 03, 00, 5A, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetOIDFunctionValue + 30 77A9B8D9 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetOIDFunctionValue + 32 77A9B8DB 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptGetOIDFunctionValue + 38 77A9B8E1 126 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptRegisterOIDFunction + 1C 77A9B960 33 Bytes [ 20, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptRegisterOIDFunction + 3E 77A9B982 21 Bytes [ 61, 00, 67, 00, 65, 00, 4E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptRegisterOIDFunction + 54 77A9B998 52 Bytes [ 2E, 00, 74, 00, 78, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptRegisterOIDFunction + 89 77A9B9CD 14 Bytes [ 00, 00, 00, 9A, 68, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnregisterOIDFunction + A 77A9B9DC 23 Bytes [ 00, 00, 00, 00, 31, 06, A6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnregisterOIDFunction + 22 77A9B9F4 23 Bytes [ 82, 79, 47, 11, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnregisterOIDFunction + 3A 77A9BA0C 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnregisterOIDFunction + 3C 77A9BA0E 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnregisterOIDFunction + 3E 77A9BA10 3 Bytes [ 00, 00, 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptRegisterDefaultOIDFunction + 19 77A9BB60 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptRegisterDefaultOIDFunction + 22 77A9BB69 34 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptRegisterDefaultOIDFunction + 46 77A9BB8D 54 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptRegisterDefaultOIDFunction + 7F 77A9BBC6 53 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptRegisterDefaultOIDFunction + B7 77A9BBFE 17 Bytes [ 00, 00, 46, 49, 4C, 45, 30, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnregisterDefaultOIDFunction + 22 77A9BCDB 30 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnregisterDefaultOIDFunction + 41 77A9BCFA 1 Byte [ 37 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnregisterDefaultOIDFunction + 43 77A9BCFC 206 Bytes [ 35, 00, 7E, 00, 31, 00, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnregisterDefaultOIDFunction + 112 77A9BDCB 27 Bytes [ 00, 00, 00, 00, 00, 00, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnregisterDefaultOIDFunction + 12E 77A9BDE7 19 Bytes [ 00, 31, 06, B3, 5D, 7D, 11, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptRegisterOIDInfo + 19 77A9BF3C 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptRegisterOIDInfo + 24 77A9BF47 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptRegisterOIDInfo + 30 77A9BF53 27 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptRegisterOIDInfo + 4C 77A9BF6F 53 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptRegisterOIDInfo + 82 77A9BFA5 45 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnregisterOIDInfo + 36 77A9C00E 370 Bytes [ 00, 00, 3A, 00, 02, 00, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnregisterOIDInfo + 1A9 77A9C181 36 Bytes [ 00, 61, 00, 67, 00, 65, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnregisterOIDInfo + 1CF 77A9C1A7 21 Bytes [ 00, 01, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnregisterOIDInfo + 1E5 77A9C1BD 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptUnregisterOIDInfo + 1E8 77A9C1C0 43 Bytes [ 40, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFindLocalizedName + F 77A9C467 66 Bytes CALL E80F714B .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFindLocalizedName + 52 77A9C4AA 52 Bytes [ 00, 00, 18, 00, 01, 00, 16, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFindLocalizedName + 89 77A9C4E1 159 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFindLocalizedName + 129 77A9C581 62 Bytes [ 00, 61, 00, 67, 00, 65, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFindLocalizedName + 168 77A9C5C0 11 Bytes [ 06, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumOIDInfo + 13 77A9CE91 28 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumOIDInfo + 32 77A9CEB0 14 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumOIDInfo + 43 77A9CEC1 76 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumOIDInfo + 90 77A9CF0E 42 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptEnumOIDInfo + BB 77A9CF39 25 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFormatObject + 2E 77A9D205 89 Bytes [ F0, 6A, E1, FF, FF, FF, FF, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFormatObject + 88 77A9D25F 79 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFormatObject + D8 77A9D2AF 56 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFormatObject + 111 77A9D2E8 92 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptFormatObject + 16E 77A9D345 10 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMemRealloc + AC 77AA5D7E 1 Byte [ 67 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMemRealloc + AE 77AA5D80 87 Bytes [ 75, 00, 61, 00, 67, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMemRealloc + 106 77AA5DD8 105 Bytes [ 70, 66, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMemRealloc + 170 77AA5E42 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMemRealloc + 17B 77AA5E4D 55 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertProtectFunction + B 77AA71A8 68 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertProtectFunction + 52 77AA71EF 8 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertProtectFunction + 5B 77AA71F8 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertProtectFunction + 5D 77AA71FA 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertProtectFunction + 68 77AA7205 116 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertSrvProtectFunction + 19 77AA839A 46 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertSrvProtectFunction + 4A 77AA83CB 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertSrvProtectFunction + 54 77AA83D5 4 Bytes [ 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertSrvProtectFunction + 5B 77AA83DC 41 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CertSrvProtectFunction + 85 77AA8406 157 Bytes [ 03, 00, 69, 72, 3D, E0, 03, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptUnregisterSmartCardStore + C 77AA84D0 14 Bytes [ 54, 48, 9D, 32, F0, DA, C6, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptUnregisterSmartCardStore + 1B 77AA84DF 28 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFindSmartCardCertInStore + 18 77AA84FC 8 Bytes [ 5F, 00, 7E, 00, 31, 00, 2E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFindSmartCardCertInStore + 21 77AA8505 2 Bytes [ 00, 44 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFindSmartCardCertInStore + 24 77AA8508 1 Byte [ 46 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFindSmartCardCertInStore + 26 77AA850A 3 Bytes [ 2E, 00, 70 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFindSmartCardCertInStore + 2A 77AA850E 1 Byte [ 64 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptAddSmartCardCertToStore + 2F 77AA8699 9 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptAddSmartCardCertToStore + 39 77AA86A3 22 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptAddSmartCardCertToStore + 50 77AA86BA 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptAddSmartCardCertToStore + 64 77AA86CE 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptAddSmartCardCertToStore + 75 77AA86DF 26 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptInstallOssGlobal + 31 77AA87DA 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptInstallOssGlobal + 42 77AA87EB 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetOssGlobal + E 77AA87FE 15 Bytes [ 00, 00, 46, 49, 4C, 45, 30, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetOssGlobal + 1F 77AA880F 18 Bytes [ 00, 17, 00, 02, 00, 38, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetOssGlobal + 33 77AA8823 43 Bytes [ 00, 00, 00, 00, 00, 05, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetOssGlobal + 60 77AA8850 54 Bytes [ 00, C4, 56, 13, 54, 2A, C5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetOssGlobal + 97 77AA8887 24 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgCalculateEncodedLength + D 77AB12D8 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgCalculateEncodedLength + 11 77AB12DC 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgCalculateEncodedLength + 16 77AB12E1 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgCalculateEncodedLength + 18 77AB12E3 7 Bytes [ 00, 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgCalculateEncodedLength + 20 77AB12EB 11 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgDuplicate + 86 77AB32E9 24 Bytes [ 00, 61, 00, 67, 00, 65, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgDuplicate + 9F 77AB3302 18 Bytes [ 49, 00, 51, 00, 2E, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgDuplicate + B2 77AB3315 80 Bytes [ 00, 30, 00, 90, 00, 7E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgDuplicate + 103 77AB3366 69 Bytes [ 73, 00, 70, 00, 6C, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgDuplicate + 14B 77AB33AE 5 Bytes [ 00, 00, 16, 05, 01 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgVerifyCountersignatureEncoded + A 77AB49ED 1 Byte [ 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgVerifyCountersignatureEncoded + C 77AB49EF 32 Bytes [ 00, 20, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgVerifyCountersignatureEncoded + 2D 77AB4A10 73 Bytes [ 75, 00, 61, 00, 67, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgVerifyCountersignatureEncoded + 77 77AB4A5A 89 Bytes [ 43, 00, 54, 2A, C5, 01, 8A, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgVerifyCountersignatureEncoded + D1 77AB4AB4 71 Bytes [ 64, 00, 65, 00, 5F, 00, 41, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgOpenToEncode + C 77AB8209 6 Bytes [ 21, 75, 01, 54, 2A, C5 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgOpenToEncode + 13 77AB8210 213 Bytes [ 14, 32, B8, 63, 70, 28, C7, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgCountersign + 2A 77AB82E6 1 Byte [ 79 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgCountersign + 2C 77AB82E8 3 Bytes [ 4C, 00, 61 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgCountersign + 30 77AB82EC 1 Byte [ 6E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgCountersign + 32 77AB82EE 25 Bytes [ 67, 00, 75, 00, 61, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgCountersign + 4C 77AB8308 1 Byte [ 5F ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgGetAndVerifySigner + 26 77AB8606 1 Byte [ 1E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgGetAndVerifySigner + 28 77AB8608 148 Bytes [ 00, 4E, A6, 02, 54, 2A, C5, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgEncodeAndSignCTL + D 77AB869D 8 Bytes [ 00, 00, 00, 16, 05, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgEncodeAndSignCTL + 16 77AB86A6 33 Bytes [ 1E, 00, 00, 4E, A6, 02, 54, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgEncodeAndSignCTL + 39 77AB86C9 38 Bytes [ 70, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgEncodeAndSignCTL + 60 77AB86F0 8 Bytes [ 4C, 00, 61, 00, 6E, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptMsgEncodeAndSignCTL + 69 77AB86F9 168 Bytes [ 00, 61, 00, 67, 00, 65, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPRemoveProvider + A 77ABDC88 197 Bytes [ 4C, 00, 61, 00, 6E, 00, 67, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPRemoveProvider + D0 77ABDD4E 89 Bytes [ 2E, 00, 74, 00, 78, 00, 74, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPAddProvider + A 77ABDDA8 19 Bytes [ 1E, 01, 44, 00, 69, 00, 73, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPAddProvider + 1E 77ABDDBC 9 Bytes [ 6E, 00, 67, 00, 75, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPAddProvider + 28 77ABDDC6 7 Bytes [ 65, 00, 4E, 00, 61, 00, 6D ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPAddProvider + 30 77ABDDCE 7 Bytes [ 65, 00, 73, 00, 2E, 00, 66 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPAddProvider + 38 77ABDDD6 1 Byte [ 72 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPPutSignedDataMsg + 3F 77ABDFA2 5 Bytes [ 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPPutSignedDataMsg + 45 77ABDFA8 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPPutSignedDataMsg + 57 77ABDFBA 17 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPPutSignedDataMsg + 69 77ABDFCC 38 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPPutSignedDataMsg + 90 77ABDFF3 59 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPRemoveSignedDataMsg + 37 77ABE02F 36 Bytes [ 00, 00, 00, C5, 01, 7E, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPRemoveSignedDataMsg + 5C 77ABE054 36 Bytes [ 00, 00, 1E, 00, 00, 6A, F4, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPRemoveSignedDataMsg + 81 77ABE079 14 Bytes [ 60, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPCreateIndirectData + A 77ABE088 52 Bytes [ 20, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPCreateIndirectData + 3F 77ABE0BD 74 Bytes [ 00, 00, 00, 16, 05, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPCreateIndirectData + 8A 77ABE108 133 Bytes [ 42, 00, 41, 00, 33, 00, 7E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPRetrieveSubjectGuidForCatalogFile + 81 77ABE18E 5 Bytes [ 65, 00, 84, 05, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPRetrieveSubjectGuidForCatalogFile + 87 77ABE194 5 Bytes [ 00, 00, 32, 00, 70 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPRetrieveSubjectGuidForCatalogFile + 8D 77ABE19A 1 Byte [ 5A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPRetrieveSubjectGuidForCatalogFile + 8F 77ABE19C 44 Bytes [ 00, 00, 00, 00, 16, 05, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptSIPRetrieveSubjectGuidForCatalogFile + BC 77ABE1C9 1 Byte [ 70 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptImportPKCS8 + 34 77ABF0EA 42 Bytes [ FE, 0A, 54, 2A, C5, 01, F2, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptImportPKCS8 + 60 77ABF116 19 Bytes [ 00, 00, 1E, 01, 44, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptImportPKCS8 + 74 77ABF12A 6 Bytes [ 61, 00, 6E, 00, 67, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptImportPKCS8 + 7B 77ABF131 20 Bytes [ 00, 61, 00, 67, 00, 65, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptImportPKCS8 + 90 77ABF146 41 Bytes [ 6F, 00, 5F, 00, 46, 00, 4F, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptExportPKCS8 + 26 77ABF31F 10 Bytes [ 00, 16, 05, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptExportPKCS8 + 31 77ABF32A 49 Bytes [ FE, 0A, 54, 2A, C5, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptExportPKCS8 + 65 77ABF35E 78 Bytes [ 00, 00, 1E, 01, 44, 00, 69, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptExportPKCS8 + B4 77ABF3AD 187 Bytes [ 00, 00, 00, 16, 05, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CryptExportPKCS8 + 170 77ABF469 46 Bytes [ 70, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXImportCertStore + 31 77ABF779 6 Bytes [ 00, 61, 00, 6E, 00, 67 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXImportCertStore + 38 77ABF780 19 Bytes [ 75, 00, 61, 00, 67, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXImportCertStore + 4C 77ABF794 1 Byte [ 67 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXImportCertStore + 4E 77ABF796 41 Bytes [ 61, 00, 5F, 00, 49, 00, 45, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXImportCertStore + 78 77ABF7C0 63 Bytes [ 00, B6, 2F, 0C, 54, 2A, C5, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXExportCertStore + 2D 77ABF8D4 7 Bytes [ 00, 00, 2B, 00, 90, 00, 7E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXExportCertStore + 36 77ABF8DD 6 Bytes [ 00, 00, 00, 16, 05, 01 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXExportCertStore + 3F 77ABF8E6 1 Byte [ 1E ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXExportCertStore + 42 77ABF8E9 58 Bytes [ B6, 2F, 0C, 54, 2A, C5, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXExportCertStore + 7D 77ABF924 19 Bytes [ 69, 00, 73, 00, 70, 00, 6C, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXIsPFXBlob + 1E 77ABFA3B 9 Bytes [ 00, 00, 00, 00, 00, 04, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXIsPFXBlob + 28 77ABFA45 72 Bytes [ 00, 00, 00, 20, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXExportCertStoreEx + 20 77ABFA8E 2 Bytes [ 15, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXExportCertStoreEx + 23 77ABFA91 52 Bytes [ 00, 7E, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXExportCertStoreEx + 5A 77ABFAC8 4 Bytes [ 04, 58, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXExportCertStoreEx + 61 77ABFACF 28 Bytes [ 00, 20, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!PFXExportCertStoreEx + 7E 77ABFAEC 19 Bytes [ 6E, 00, 67, 00, 75, 00, 61, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertDuplicateCertificateChain + D 77AC9F30 6 Bytes [ 00, 00, 00, 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertDuplicateCertificateChain + 14 77AC9F37 135 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertDuplicateCertificateChain + 9C 77AC9FBF 18 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertDuplicateCertificateChain + AF 77AC9FD2 16 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertDuplicateCertificateChain + C1 77AC9FE4 19 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFreeCertificateChainEngine + 8 77ACA01E 25 Bytes CALL 77ACA032 C:\WINDOWS\system32\CRYPT32.dll .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFreeCertificateChainEngine + 23 77ACA039 3 Bytes [ 00, 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertFreeCertificateChainEngine + 27 77ACA03D 17 Bytes [ 00, 00, 00, DF, 05, 01, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertResyncCertificateChainEngine + D 77ACA04F 112 Bytes [ 00, 16, 05, 01, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertResyncCertificateChainEngine + 7E 77ACA0C0 29 Bytes [ 16, 05, 01, 00, 00, 00, 1E, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertResyncCertificateChainEngine + 9C 77ACA0DE 49 Bytes [ C7, 01, F0, 34, 7A, 63, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertResyncCertificateChainEngine + CE 77ACA110 14 Bytes [ 31, 00, 2E, 00, 54, 00, 58, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CertResyncCertificateChainEngine + DD 77ACA11F 15 Bytes [ 00, DB, 08, 01, 00, 00, 00, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!ChainWlxLogoffEvent + 3A 77ACA16E 19 Bytes [ 00, 00, 0C, 02, 44, 00, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptGetLruEntryIdentifier + F 77ACA182 203 Bytes [ 2E, 00, 54, 00, 58, 00, 54, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFindLruEntryData + 26 77ACA24E 29 Bytes [ 00, 00, 0C, 02, 44, 00, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFindLruEntryData + 44 77ACA26C 5 Bytes [ 67, 00, 65, 00, AB ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFindLruEntryData + 4A 77ACA272 81 Bytes [ 01, 00, 00, 00, 15, 00, 70, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptFindLruEntryData + 9C 77ACA2C4 105 Bytes [ 49, 00, 33, 00, 32, 00, 38, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptEnableLruOfEntries + 14 77ACA32E 37 Bytes [ 00, 00, 0C, 02, 44, 00, 49, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptEnableLruOfEntries + 3A 77ACA354 3 Bytes [ 00, 00, 22 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptEnableLruOfEntries + 3E 77ACA358 3 Bytes [ 70, 00, 5A ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptEnableLruOfEntries + 42 77ACA35C 95 Bytes [ 00, 00, 00, 00, 16, 05, 01, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!I_CryptEnableLruOfEntries + A2 77ACA3BC 13 Bytes [ 67, 00, 65, 00, 2F, 05, 01, ... ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!OpenCertPerformanceData + 7 77ACEBF6 59 Bytes [ 00, 00, 00, 00, 00, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!OpenCertPerformanceData + 43 77ACEC32 21 Bytes [ 00, 00, 00, 00, 00, 00, 10, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!OpenCertPerformanceData + 59 77ACEC48 50 Bytes [ 48, 00, 00, 00, 18, 00, 00, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!OpenCertPerformanceData + 8C 77ACEC7B 2 Bytes [ 00, 00 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!OpenCertPerformanceData + 8F 77ACEC7E 1 Byte [ 00 ] .text ... .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CollectCertPerformanceData + 1E 77ACED68 17 Bytes [ 1E, 01, 43, 00, 75, 00, 65, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CollectCertPerformanceData + 30 77ACED7A 25 Bytes [ 61, 00, 6E, 00, 75, 00, 61, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CollectCertPerformanceData + 4A 77ACED94 5 Bytes [ 63, 00, 69, 00, 64 ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CollectCertPerformanceData + 50 77ACED9A 19 Bytes [ 61, 00, 73, 00, 2E, 00, 78, ... ] .text C:\PROGRA~1\MOBILE~1\bin\PHONES~2.EXE[5416] CRYPT32.dll!CollectCertPerformanceData + 64 77ACEDAE 11 Bytes [ 00, 00, 01, 00, 00, 00, 00, ... ] .text ... ---- Devices - GMER 1.0.12 ---- Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA 86FD21D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_PNP 86FD21D8 Device \Driver\Tcpip \Device\Ip IRP_MJ_DEVICE_CONTROL [F794BA7C] GDTdiIcpt.sys Device \Driver\Tcpip \Device\Ip IRP_MJ_INTERNAL_DEVICE_CONTROL [F794BA7C] GDTdiIcpt.sys Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CREATE 86C171D8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CLOSE 86C171D8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_POWER 86C171D8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_SYSTEM_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_PNP 86C171D8 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CREATE 86C171D8 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CLOSE 86C171D8 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_POWER 86C171D8 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_SYSTEM_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_PNP 86C171D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CLOSE 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_READ 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_WRITE 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_FLUSH_BUFFERS 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_DEVICE_CONTROL 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_INTERNAL_DEVICE_CONTROL 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SHUTDOWN 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_POWER 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SYSTEM_CONTROL 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_PNP 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CLOSE 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_READ 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_WRITE 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_FLUSH_BUFFERS 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_DEVICE_CONTROL 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_INTERNAL_DEVICE_CONTROL 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SHUTDOWN 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_POWER 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SYSTEM_CONTROL 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_PNP 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CLOSE 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_READ 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_WRITE 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_FLUSH_BUFFERS 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_DEVICE_CONTROL 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_INTERNAL_DEVICE_CONTROL 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SHUTDOWN 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_POWER 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SYSTEM_CONTROL 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_PNP 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CLOSE 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_READ 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_WRITE 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_FLUSH_BUFFERS 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_DEVICE_CONTROL 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_INTERNAL_DEVICE_CONTROL 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SHUTDOWN 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_POWER 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SYSTEM_CONTROL 86F6C1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_PNP 86F6C1D8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_CREATE 86C171D8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_CLOSE 86C171D8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_POWER 86C171D8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_SYSTEM_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_PNP 86C171D8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_CREATE 86C171D8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_CLOSE 86C171D8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_POWER 86C171D8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_SYSTEM_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_PNP 86C171D8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_CREATE 86BEA1D8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_CLOSE 86BEA1D8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_DEVICE_CONTROL 86BEA1D8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 86BEA1D8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_POWER 86BEA1D8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_SYSTEM_CONTROL 86BEA1D8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_PNP 86BEA1D8 Device \Driver\Tcpip \Device\Tcp IRP_MJ_DEVICE_CONTROL [F794BA7C] GDTdiIcpt.sys Device \Driver\Tcpip \Device\Tcp IRP_MJ_INTERNAL_DEVICE_CONTROL [F794BA7C] GDTdiIcpt.sys Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_PNP 86FD41D8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 86B92498 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE 86B92498 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ 86B92498 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 86B92498 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 86B92498 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 86B92498 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 86B92498 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 86B92498 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 86B92498 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 86B92498 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 86B92498 Device \Driver\00000041 \Device\00000065 IRP_MJ_POWER [F73DFDB6] sptd.sys Device \Driver\00000041 \Device\00000065 IRP_MJ_SYSTEM_CONTROL [F73F573C] sptd.sys Device \Driver\00000041 \Device\00000065 IRP_MJ_PNP [F73EE77E] sptd.sys Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 86B92498 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSE 86B92498 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_READ 86B92498 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 86B92498 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 86B92498 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 86B92498 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 86B92498 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 86B92498 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 86B92498 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 86B92498 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 86B92498 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CREATE 86FD31D8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CLOSE 86FD31D8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_DEVICE_CONTROL 86FD31D8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 86FD31D8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_POWER 86FD31D8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_SYSTEM_CONTROL 86FD31D8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_PNP 86FD31D8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 86FD31D8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSE 86FD31D8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 86FD31D8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 86FD31D8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER 86FD31D8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 86FD31D8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 86FD31D8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 86FD31D8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSE 86FD31D8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 86FD31D8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 86FD31D8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 86FD31D8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 86FD31D8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 86FD31D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_CREATE 86FD31D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_CLOSE 86FD31D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_DEVICE_CONTROL 86FD31D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_INTERNAL_DEVICE_CONTROL 86FD31D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_POWER 86FD31D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_SYSTEM_CONTROL 86FD31D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_PNP 86FD31D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CREATE 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_READ 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_WRITE 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_FLUSH_BUFFERS 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_DEVICE_CONTROL 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_INTERNAL_DEVICE_CONTROL 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SHUTDOWN 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CLEANUP 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_POWER 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SYSTEM_CONTROL 86FD41D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_PNP 86FD41D8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 85D871D8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLOSE 85D871D8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_DEVICE_CONTROL 85D871D8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_INTERNAL_DEVICE_CONTROL 85D871D8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLEANUP 85D871D8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_PNP 85D871D8 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE 85D871D8 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLOSE 85D871D8 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_DEVICE_CONTROL 85D871D8 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_INTERNAL_DEVICE_CONTROL 85D871D8 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLEANUP 85D871D8 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_PNP 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{FF872A65-BDC7-4676-A5D8-E1126CB188AC} IRP_MJ_CREATE 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{FF872A65-BDC7-4676-A5D8-E1126CB188AC} IRP_MJ_CLOSE 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{FF872A65-BDC7-4676-A5D8-E1126CB188AC} IRP_MJ_DEVICE_CONTROL 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{FF872A65-BDC7-4676-A5D8-E1126CB188AC} IRP_MJ_INTERNAL_DEVICE_CONTROL 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{FF872A65-BDC7-4676-A5D8-E1126CB188AC} IRP_MJ_CLEANUP 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{FF872A65-BDC7-4676-A5D8-E1126CB188AC} IRP_MJ_PNP 85D871D8 Device \Driver\Tcpip \Device\Udp IRP_MJ_DEVICE_CONTROL [F794BA7C] GDTdiIcpt.sys Device \Driver\Tcpip \Device\Udp IRP_MJ_INTERNAL_DEVICE_CONTROL [F794BA7C] GDTdiIcpt.sys Device \Driver\Tcpip \Device\RawIp IRP_MJ_DEVICE_CONTROL [F794BA7C] GDTdiIcpt.sys Device \Driver\Tcpip \Device\RawIp IRP_MJ_INTERNAL_DEVICE_CONTROL [F794BA7C] GDTdiIcpt.sys Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_CREATE 86C171D8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_CLOSE 86C171D8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_POWER 86C171D8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_SYSTEM_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_PNP 86C171D8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_CREATE 86C171D8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_CLOSE 86C171D8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_POWER 86C171D8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_SYSTEM_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_PNP 86C171D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSE 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_READ 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 866B71D8 Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_DEVICE_CONTROL [F794BA7C] GDTdiIcpt.sys Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_INTERNAL_DEVICE_CONTROL [F794BA7C] GDTdiIcpt.sys Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_CREATE 86C171D8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_CLOSE 86C171D8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_POWER 86C171D8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_SYSTEM_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_PNP 86C171D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSE 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_READ 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 866B71D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 866B71D8 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_CREATE 86C171D8 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_CLOSE 86C171D8 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_POWER 86C171D8 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_SYSTEM_CONTROL 86C171D8 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_PNP 86C171D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{95A95914-C22A-417D-9500-E68445CFC005} IRP_MJ_CREATE 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{95A95914-C22A-417D-9500-E68445CFC005} IRP_MJ_CLOSE 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{95A95914-C22A-417D-9500-E68445CFC005} IRP_MJ_DEVICE_CONTROL 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{95A95914-C22A-417D-9500-E68445CFC005} IRP_MJ_INTERNAL_DEVICE_CONTROL 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{95A95914-C22A-417D-9500-E68445CFC005} IRP_MJ_CLEANUP 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{95A95914-C22A-417D-9500-E68445CFC005} IRP_MJ_PNP 85D871D8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_CREATE 86BEA1D8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_CLOSE 86BEA1D8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_DEVICE_CONTROL 86BEA1D8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 86BEA1D8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_POWER 86BEA1D8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_SYSTEM_CONTROL 86BEA1D8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_PNP 86BEA1D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 86FD41D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_READ 86FD41D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_WRITE 86FD41D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_FLUSH_BUFFERS 86FD41D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_DEVICE_CONTROL 86FD41D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_INTERNAL_DEVICE_CONTROL 86FD41D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SHUTDOWN 86FD41D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CLEANUP 86FD41D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_POWER 86FD41D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SYSTEM_CONTROL 86FD41D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_PNP 86FD41D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{ACA5E75F-02B9-43D9-A82D-BD5B9FFA5115} IRP_MJ_CREATE 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{ACA5E75F-02B9-43D9-A82D-BD5B9FFA5115} IRP_MJ_CLOSE 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{ACA5E75F-02B9-43D9-A82D-BD5B9FFA5115} IRP_MJ_DEVICE_CONTROL 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{ACA5E75F-02B9-43D9-A82D-BD5B9FFA5115} IRP_MJ_INTERNAL_DEVICE_CONTROL 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{ACA5E75F-02B9-43D9-A82D-BD5B9FFA5115} IRP_MJ_CLEANUP 85D871D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{ACA5E75F-02B9-43D9-A82D-BD5B9FFA5115} IRP_MJ_PNP 85D871D8 Device \Driver\a5uiepsq \Device\Scsi\a5uiepsq1Port2Path0Target0Lun0 IRP_MJ_CREATE 86B7B1D8 Device \Driver\a5uiepsq \Device\Scsi\a5uiepsq1Port2Path0Target0Lun0 IRP_MJ_CLOSE 86B7B1D8 Device \Driver\a5uiepsq \Device\Scsi\a5uiepsq1Port2Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 86B7B1D8 Device \Driver\a5uiepsq \Device\Scsi\a5uiepsq1Port2Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 86B7B1D8 Device \Driver\a5uiepsq \Device\Scsi\a5uiepsq1Port2Path0Target0Lun0 IRP_MJ_POWER 86B7B1D8 Device \Driver\a5uiepsq \Device\Scsi\a5uiepsq1Port2Path0Target0Lun0 IRP_MJ_SYSTEM_CONTROL 86B7B1D8 Device \Driver\a5uiepsq \Device\Scsi\a5uiepsq1Port2Path0Target0Lun0 IRP_MJ_PNP 86B7B1D8 Device \Driver\a5uiepsq \Device\Scsi\a5uiepsq1 IRP_MJ_CREATE 86B7B1D8 Device \Driver\a5uiepsq \Device\Scsi\a5uiepsq1 IRP_MJ_CLOSE 86B7B1D8 Device \Driver\a5uiepsq \Device\Scsi\a5uiepsq1 IRP_MJ_DEVICE_CONTROL 86B7B1D8 Device \Driver\a5uiepsq \Device\Scsi\a5uiepsq1 IRP_MJ_INTERNAL_DEVICE_CONTROL 86B7B1D8 Device \Driver\a5uiepsq \Device\Scsi\a5uiepsq1 IRP_MJ_POWER 86B7B1D8 Device \Driver\a5uiepsq \Device\Scsi\a5uiepsq1 IRP_MJ_SYSTEM_CONTROL 86B7B1D8 Device \Driver\a5uiepsq \Device\Scsi\a5uiepsq1 IRP_MJ_PNP 86B7B1D8 Device \FileSystem\Fastfat \Fat IRP_MJ_CREATE 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_CLOSE 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_READ 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_WRITE 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_INFORMATION 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_SET_INFORMATION 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_EA 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_SET_EA 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_FLUSH_BUFFERS 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_VOLUME_INFORMATION 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_SET_VOLUME_INFORMATION 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_DIRECTORY_CONTROL 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_FILE_SYSTEM_CONTROL 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CONTROL 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_SHUTDOWN 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_LOCK_CONTROL 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_CLEANUP 86688470 Device \FileSystem\Fastfat \Fat IRP_MJ_PNP 86688470 Device \FileSystem\Fastfat \Fat FastIoCheckIfPossible B852C1F9 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CREATE 86CAC698 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLOSE 86CAC698 Device \FileSystem\Cdfs \Cdfs IRP_MJ_READ 86CAC698 Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_INFORMATION 86CAC698 Device \FileSystem\Cdfs \Cdfs IRP_MJ_SET_INFORMATION 86CAC698 Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_VOLUME_INFORMATION 86CAC698 Device \FileSystem\Cdfs \Cdfs IRP_MJ_DIRECTORY_CONTROL 86CAC698 Device \FileSystem\Cdfs \Cdfs IRP_MJ_FILE_SYSTEM_CONTROL 86CAC698 Device \FileSystem\Cdfs \Cdfs IRP_MJ_DEVICE_CONTROL 86CAC698 Device \FileSystem\Cdfs \Cdfs IRP_MJ_SHUTDOWN 86CAC698 Device \FileSystem\Cdfs \Cdfs IRP_MJ_LOCK_CONTROL 86CAC698 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLEANUP 86CAC698 Device \FileSystem\Cdfs \Cdfs IRP_MJ_PNP 86CAC698 ---- EOF - GMER 1.0.12 ----