Source: C:\Users\user\Desktop\7f3c2473d1e6.exe |
Code function: 0_2_00B6730B LdrInitializeThunk,LdrInitializeThunk,LdrInitializeThunk,LdrInitializeThunk,FindFirstFileExW, |
0_2_00B6730B |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0041543D wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,FindNextFileA,FindClose, |
1_2_0041543D |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00414CC8 wsprintfA,FindFirstFileA,_memset,_memset,StrCmpCA,StrCmpCA,wsprintfA,StrCmpCA,wsprintfA,wsprintfA,_memset,lstrcatA,strtok_s,strtok_s,_memset,lstrcatA,strtok_s,PathMatchSpecA,DeleteFileA,CopyFileA,__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z,DeleteFileA,strtok_s,strtok_s,FindNextFileA,FindClose, |
1_2_00414CC8 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00409D1C FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,StrCmpCA,DeleteFileA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose, |
1_2_00409D1C |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040D5C6 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose, |
1_2_0040D5C6 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040B5DF FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,FindNextFileA,FindClose, |
1_2_0040B5DF |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00401D80 FindFirstFileA,StrCmpCA,StrCmpCA,FindFirstFileA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,CopyFileA,DeleteFileA,FindNextFileA,FindClose, |
1_2_00401D80 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040BF4D FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,FindNextFileA, |
1_2_0040BF4D |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00415FD1 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,wsprintfA,StrCmpCA,wsprintfA,wsprintfA,PathMatchSpecA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,CopyFileA,DeleteFileA,FindNextFileA,FindClose, |
1_2_00415FD1 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040B93F FindFirstFileA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose, |
1_2_0040B93F |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00415B0B GetProcessHeap,HeapAlloc,wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,wsprintfA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,lstrcatA,lstrcatA,lstrlenA,lstrlenA, |
1_2_00415B0B |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040CD37 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,lstrlenA,DeleteFileA,CopyFileA,FindNextFileA,FindClose, |
1_2_0040CD37 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 8_2_00A5730B LdrInitializeThunk,LdrInitializeThunk,LdrInitializeThunk,LdrInitializeThunk,FindFirstFileExW, |
8_2_00A5730B |
Source: C:\Users\user\Desktop\7f3c2473d1e6.exe |
Code function: 4x nop then mov eax, dword ptr fs:[00000030h] |
0_2_00B7938D |
Source: C:\Users\user\Desktop\7f3c2473d1e6.exe |
Code function: 4x nop then mov dword ptr [ebp-04h], eax |
0_2_00B7938D |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr fs:[00000030h] |
1_2_004014AD |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov dword ptr [ebp-04h], eax |
1_2_004014AD |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov byte ptr [edi], al |
8_2_00A9A095 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then movzx esi, byte ptr [edx+eax-01h] |
8_2_00A740F0 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then movzx edx, word ptr [esp+eax*4+000000ACh] |
8_2_00A740F0 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov byte ptr [edi], al |
8_2_00A9A00C |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+20h] |
8_2_00A7E1F9 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov word ptr [edx], ax |
8_2_00A92160 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+08h] |
8_2_00A7C174 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov byte ptr [edi], al |
8_2_00A9A3EF |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov byte ptr [edi], al |
8_2_00A9A3E1 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+08h] |
8_2_00A7E450 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then movzx ecx, word ptr [edi] |
8_2_00A92500 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov ebx, eax |
8_2_00A72560 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov ebp, eax |
8_2_00A72560 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp al, 2Eh |
8_2_00A946BF |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+14h] |
8_2_00A926B0 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then jmp eax |
8_2_00A92780 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
8_2_00A949EB |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
8_2_00AAEAC5 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then movzx edx, byte ptr [esi+edi] |
8_2_00A6CA30 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov byte ptr [edi], al |
8_2_00A9AA7A |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
8_2_00AAEB3A |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h |
8_2_00AACB70 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then jmp dword ptr [00451A70h] |
8_2_00A96C48 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp word ptr [ecx+eax+02h], 0000h |
8_2_00A88C51 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
8_2_00A96D20 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then movzx eax, byte ptr [ebx+edx-06h] |
8_2_00A6ED10 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then movzx esi, byte ptr [edx+ebp] |
8_2_00A6ED10 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esi+08h] |
8_2_00A7AD42 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov dword ptr [esp], 00000000h |
8_2_00A82EE0 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp word ptr [ebp+edi+02h], 0000h |
8_2_00A8EED0 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+24h] |
8_2_00A94E0E |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esi+00000080h] |
8_2_00A7AE0D |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov byte ptr [edi], al |
8_2_00A9AE68 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov byte ptr [edi], al |
8_2_00A9AE68 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov byte ptr [ebx], al |
8_2_00A9AE68 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov byte ptr [edi], al |
8_2_00A9AE68 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov word ptr [eax], dx |
8_2_00A88FB0 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov esi, ebx |
8_2_00AB0F98 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F8FD61B8h |
8_2_00A870B6 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
8_2_00A91020 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov byte ptr [ebx], al |
8_2_00A7B03C |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
8_2_00AAD06B |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov dword ptr [esp+34h], edx |
8_2_00A691D2 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov word ptr [eax], cx |
8_2_00A8F130 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov word ptr [eax], cx |
8_2_00A8F130 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+00000688h] |
8_2_00A852CC |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then dec ebx |
8_2_00AA72D0 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+08h] |
8_2_00A7D22D |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+08h] |
8_2_00A7D21D |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov dword ptr [esp+08h], ecx |
8_2_00A69265 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov dword ptr [esp+18h], 3602043Ah |
8_2_00A973A8 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov dword ptr [esp+50h], 00000000h |
8_2_00A7D39C |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], D518DBA1h |
8_2_00AA73C0 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], D1A85EEEh |
8_2_00AA73C0 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
8_2_00A953C2 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov word ptr [eax], dx |
8_2_00A893D9 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then movzx eax, word ptr [esi+ecx] |
8_2_00AA9580 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], 7789B0CBh |
8_2_00AAF510 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+000000D0h] |
8_2_00A85612 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-000000C0h] |
8_2_00A777F7 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+68h] |
8_2_00AAF700 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+24h] |
8_2_00A958EA |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh |
8_2_00AB18F0 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then movzx ebx, byte ptr [edx] |
8_2_00AA38D0 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh |
8_2_00AB1A80 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+54h] |
8_2_00A87A91 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then movzx edx, byte ptr [esi+ebx] |
8_2_00A6DAE0 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+04h] |
8_2_00A77AE0 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov byte ptr [ebx], al |
8_2_00A9BADE |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov byte ptr [ebx], al |
8_2_00A9BADE |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov byte ptr [ebx], al |
8_2_00A9BADE |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov byte ptr [ebx], al |
8_2_00A9BADE |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp byte ptr [ebp+ebx+00h], 00000000h |
8_2_00A95A2B |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 62429966h |
8_2_00AABA40 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then jmp dword ptr [0045042Ch] |
8_2_00A87A53 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+08h] |
8_2_00A7BBFC |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+04h] |
8_2_00A93B36 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
8_2_00AABC80 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp eax, C0000004h |
8_2_00A85CDE |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp word ptr [ecx+edx+02h], 0000h |
8_2_00AB1C00 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp dword ptr [ebp+edx*8+00h], 9ECF05EBh |
8_2_00AB1C00 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then xor eax, eax |
8_2_00A93DD6 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
8_2_00A75EA0 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov eax, dword ptr [esp+10h] |
8_2_00A75EA0 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], 69F07BF2h |
8_2_00A8FE08 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then jmp eax |
8_2_00A7DE1A |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], F3285E74h |
8_2_00AAFF80 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then mov ebx, dword ptr [edi+04h] |
8_2_00A97F90 |
Source: C:\ProgramData\HDBGDHDAEC.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 64567875h |
8_2_00AABF20 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 64567875h |
9_2_00444040 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov dword ptr [esp+08h], ecx |
9_2_00401000 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov dword ptr [esp], 00000000h |
9_2_0041B000 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [eax], dx |
9_2_004210D0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+08h] |
9_2_0041508C |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov dword ptr [esp+50h], 00000000h |
9_2_0041508C |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], F3285E74h |
9_2_004480A0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov ebx, dword ptr [edi+04h] |
9_2_004300B0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
9_2_00429140 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+00000688h] |
9_2_0041D1D0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F8FD61B8h |
9_2_0041F1D6 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
9_2_0044518B |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov dword ptr [esp+18h], 3602043Ah |
9_2_0042F1B0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [eax], cx |
9_2_00427250 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [eax], cx |
9_2_00427250 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx esi, byte ptr [edx+eax-01h] |
9_2_0040C210 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx edx, word ptr [esp+eax*4+000000ACh] |
9_2_0040C210 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov dword ptr [esp+34h], edx |
9_2_004012F2 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [edx], ax |
9_2_0042A280 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+08h] |
9_2_00414294 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
9_2_0042D295 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+24h] |
9_2_0042D295 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+20h] |
9_2_00416319 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [ebx], al |
9_2_00433335 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [edi], al |
9_2_00433335 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then dec ebx |
9_2_0043F3F0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx ecx, word ptr [edi] |
9_2_0042A3A8 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+14h] |
9_2_0042A3A8 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [eax], dx |
9_2_004214D3 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
9_2_0042D4D4 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+24h] |
9_2_0042D4D4 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], D518DBA1h |
9_2_0043F4E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], D1A85EEEh |
9_2_0043F4E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [eax], dx |
9_2_004214EA |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+08h] |
9_2_00416574 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+24h] |
9_2_0042C510 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [edi], al |
9_2_00431670 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [edi], al |
9_2_00431670 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [edi], al |
9_2_00431670 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [edi], al |
9_2_00431670 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [edi], al |
9_2_00431670 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [ebx], al |
9_2_00431670 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [edi], al |
9_2_00431670 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+000000D0h] |
9_2_0041D672 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], 7789B0CBh |
9_2_00447630 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp al, 2Eh |
9_2_0042C6E1 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
9_2_0042C6E1 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov ebx, eax |
9_2_0040A680 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov ebp, eax |
9_2_0040A680 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx eax, word ptr [esi+ecx] |
9_2_004416A0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+000000D0h] |
9_2_0041D733 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+08h] |
9_2_00416866 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+68h] |
9_2_00447820 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+04h] |
9_2_0042B830 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then xor eax, eax |
9_2_0042B830 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp eax |
9_2_0042A8A0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-000000C0h] |
9_2_0040F917 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+08h] |
9_2_00412920 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+00000080h] |
9_2_00412920 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [ebx], al |
9_2_00412920 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp dword ptr [00451A70h] |
9_2_0042E927 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx ebx, byte ptr [edx] |
9_2_0043B9F0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+24h] |
9_2_0042DA0A |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh |
9_2_00449A10 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp byte ptr [ebp+ebx+00h], 00000000h |
9_2_0042DB4B |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx edx, byte ptr [esi+edi] |
9_2_00404B50 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 62429966h |
9_2_00443B60 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp dword ptr [0045042Ch] |
9_2_0041FB73 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
9_2_00446BE5 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov esi, ebx |
9_2_00448BE0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [ebx], al |
9_2_00433BFE |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [ebx], al |
9_2_00433BFE |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh |
9_2_00449BA0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+54h] |
9_2_0041FBB1 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp word ptr [ecx+eax+02h], 0000h |
9_2_00420C4C |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
9_2_00446C5A |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx edx, byte ptr [esi+ebx] |
9_2_00405C00 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+04h] |
9_2_0040FC00 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h |
9_2_00444C90 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], 69F07BF2h |
9_2_00427D03 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp word ptr [ecx+edx+02h], 0000h |
9_2_00449D20 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [ebp+edx*8+00h], 9ECF05EBh |
9_2_00449D20 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp eax, C0000004h |
9_2_0041DDFF |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
9_2_00443DA0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
9_2_0042EE40 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp eax |
9_2_00415E11 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx eax, byte ptr [ebx+edx-06h] |
9_2_00406E30 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx esi, byte ptr [edx+ebp] |
9_2_00406E30 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov esi, ebx |
9_2_00448F50 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
9_2_0040DFC0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+10h] |
9_2_0040DFC0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp word ptr [ebp+edi+02h], 0000h |
9_2_00426FF0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [ebx], al |
9_2_00433F92 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [ebx], al |
9_2_00433F92 |