Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00409B60 CryptUnprotectData,LocalAlloc,memcpy,LocalFree, |
1_2_00409B60 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040C820 memset,lstrlenA,CryptStringToBinaryA,PK11_GetInternalKeySlot,PK11_Authenticate,PK11SDR_Decrypt,memcpy,lstrcatA,lstrcatA,PK11_FreeSlot,lstrcatA, |
1_2_0040C820 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00407240 GetProcessHeap,HeapAlloc,CryptUnprotectData,WideCharToMultiByte,LocalFree, |
1_2_00407240 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00409AC0 CryptStringToBinaryA,LocalAlloc,CryptStringToBinaryA,LocalFree, |
1_2_00409AC0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00418EA0 CryptBinaryToStringA,GetProcessHeap,HeapAlloc,CryptBinaryToStringA, |
1_2_00418EA0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C516C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer, |
1_2_6C516C80 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C66A9A0 PK11SDR_Decrypt,PORT_NewArena_Util,SEC_QuickDERDecodeItem_Util,PORT_FreeArena_Util,SECITEM_ZfreeItem_Util,PK11_GetInternalKeySlot,PK11_Authenticate,PORT_FreeArena_Util,PK11_ListFixedKeysInSlot,SECITEM_ZfreeItem_Util,PK11_FreeSymKey,PK11_FreeSymKey,PORT_FreeArena_Util,PK11_FreeSymKey,SECITEM_ZfreeItem_Util, |
1_2_6C66A9A0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C664440 PK11_PrivDecrypt, |
1_2_6C664440 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C634420 SECKEY_DestroyEncryptedPrivateKeyInfo,memset,PORT_FreeArena_Util,SECITEM_ZfreeItem_Util,SECITEM_ZfreeItem_Util,SECITEM_ZfreeItem_Util,free, |
1_2_6C634420 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C6644C0 PK11_PubEncrypt, |
1_2_6C6644C0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C6B25B0 PK11_Encrypt,memcpy,PR_SetError,PK11_Encrypt, |
1_2_6C6B25B0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C648670 PK11_ExportEncryptedPrivKeyInfo, |
1_2_6C648670 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C66A650 PK11SDR_Encrypt,PORT_NewArena_Util,PK11_GetInternalKeySlot,PK11_Authenticate,SECITEM_ZfreeItem_Util,TlsGetValue,EnterCriticalSection,PR_Unlock,PK11_CreateContextBySymKey,PK11_GetBlockSize,PORT_Alloc_Util,memcpy,SECITEM_ZfreeItem_Util,PORT_FreeArena_Util,SECITEM_ZfreeItem_Util,PK11_FreeSymKey,PORT_ArenaAlloc_Util,PK11_CipherOp,SEC_ASN1EncodeItem_Util,SECITEM_ZfreeItem_Util,PORT_FreeArena_Util,PK11_DestroyContext, |
1_2_6C66A650 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C64E6E0 PK11_AEADOp,TlsGetValue,EnterCriticalSection,PORT_Alloc_Util,PK11_Encrypt,PORT_Alloc_Util,memcpy,memcpy,PR_SetError,PR_SetError,PR_Unlock,PR_SetError,PR_Unlock,PK11_Decrypt,PR_GetCurrentThread,PK11_Decrypt,PK11_Encrypt,memcpy,memcpy,PR_SetError,free, |
1_2_6C64E6E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C68A730 SEC_PKCS12AddCertAndKey,PORT_ArenaMark_Util,PORT_ArenaMark_Util,PK11_FindKeyByAnyCert,SECKEY_DestroyPrivateKey,PORT_ArenaAlloc_Util,PR_SetError,PR_SetError,PK11_GetInternalKeySlot,PK11_FindKeyByAnyCert,SECKEY_DestroyPrivateKey,PORT_ArenaAlloc_Util,SECKEY_DestroyEncryptedPrivateKeyInfo,strlen,PR_SetError,PORT_FreeArena_Util,PORT_FreeArena_Util,PORT_ArenaAlloc_Util,PR_SetError, |
1_2_6C68A730 |
Source: C:\Users\user\Desktop\45Ywq5ad5H.exe |
Code function: 0_2_009E9ABF FindFirstFileExW, |
0_2_009E9ABF |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040E430 FindFirstFileA,StrCmpCA,StrCmpCA,FindNextFileA, |
1_2_0040E430 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00414910 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,wsprintfA,StrCmpCA,wsprintfA,wsprintfA,PathMatchSpecA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,CopyFileA,DeleteFileA,FindNextFileA,FindClose, |
1_2_00414910 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040BE70 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,StrCmpCA,DeleteFileA,StrCmpCA,FindNextFileA,FindClose, |
1_2_0040BE70 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_004016D0 FindFirstFileA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose, |
1_2_004016D0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040DA80 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,FindNextFileA,FindClose, |
1_2_0040DA80 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00413EA0 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,FindNextFileA,FindClose, |
1_2_00413EA0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040F6B0 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose, |
1_2_0040F6B0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_004138B0 wsprintfA,FindFirstFileA,lstrcatA,StrCmpCA,StrCmpCA,wsprintfA,PathMatchSpecA,CoInitialize,CoUninitialize,lstrcatA,lstrlenA,StrCmpCA,wsprintfA,wsprintfA,PathMatchSpecA,wsprintfA,CopyFileA,__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z,DeleteFileA,FindNextFileA,FindClose, |
1_2_004138B0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00414570 GetProcessHeap,HeapAlloc,wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,wsprintfA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,lstrcatA,lstrcatA,lstrlenA,lstrlenA, |
1_2_00414570 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040ED20 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,lstrlenA,DeleteFileA,CopyFileA,FindNextFileA,FindClose, |
1_2_0040ED20 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040DE10 FindFirstFileA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose, |
1_2_0040DE10 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 18_2_000D9ABF FindFirstFileExW, |
18_2_000D9ABF |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then movzx ebx, word ptr [ecx] |
18_2_00118051 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp+0Ch] |
18_2_0011A0B9 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov dword ptr [esp], 00000000h |
18_2_001082E8 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then movzx eax, word ptr [esi+ecx] |
18_2_0012E318 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov word ptr [eax], cx |
18_2_0010A3BF |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], 7789B0CBh |
18_2_001343F8 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then movzx ebx, byte ptr [edx] |
18_2_00128528 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then movzx ecx, word ptr [edi+eax] |
18_2_001345E8 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
18_2_00132601 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov word ptr [eax], cx |
18_2_0011665F |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, ebx |
18_2_0010264D |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
18_2_0011A687 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 62429966h |
18_2_001307F8 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov byte ptr [edi], al |
18_2_00120813 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then jmp dword ptr [0044FDB4h] |
18_2_00102849 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp word ptr [ecx+eax+02h], 0000h |
18_2_0010A86A |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F8FD61B8h |
18_2_0010C89C |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh |
18_2_001368A8 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then jmp eax |
18_2_000FE914 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then movzx edx, byte ptr [esi+ebx] |
18_2_000F2928 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
18_2_0012093D |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then jmp eax |
18_2_000FE9A5 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh |
18_2_00136A38 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp+000006B8h] |
18_2_0010AA47 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp+40h] |
18_2_000FEAC6 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp word ptr [ebp+edi+02h], 0000h |
18_2_00114AD8 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], A70A987Fh |
18_2_0012CB36 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov byte ptr [edi], al |
18_2_00120B22 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov byte ptr [edi], al |
18_2_00120B43 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp+04h] |
18_2_000FCB78 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
18_2_00136BB8 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [ebp+edx*8+00h], 9ECF05EBh |
18_2_00136BB8 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
18_2_0011AC81 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov word ptr [eax], cx |
18_2_00114D38 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
18_2_00112D48 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp+40h] |
18_2_000FED6B |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then movzx ecx, word ptr [ebp+00h] |
18_2_000F8D88 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
18_2_0012CE48 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], F3285E74h |
18_2_00134E98 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
18_2_00134E98 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov word ptr [edx], 0000h |
18_2_0010CEB7 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then jmp ecx |
18_2_00132EAE |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then jmp eax |
18_2_00116EC4 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
18_2_00120F18 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esi+14h] |
18_2_00120F18 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h |
18_2_00130F18 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov dword ptr [esp+1Ch], 5E46585Eh |
18_2_0011CF30 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esi+04h] |
18_2_00100F6F |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then jmp ecx |
18_2_00132F6C |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov word ptr [eax], dx |
18_2_0010F138 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov word ptr [esi], ax |
18_2_0010F138 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov ebp, eax |
18_2_000F71D8 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], C274D4CAh |
18_2_00133290 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
18_2_0011F2B8 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], C274D4CAh |
18_2_00133390 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp+0Ch] |
18_2_001193AF |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esi+04h] |
18_2_0010340E |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then movzx ebx, byte ptr [ecx+esi+25h] |
18_2_000F5468 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov word ptr [eax], dx |
18_2_0010F540 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
18_2_0011B56A |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp+08h] |
18_2_001336C7 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], 27BAF212h |
18_2_00133833 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], F3285E74h |
18_2_00115824 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then movzx edx, byte ptr [esi+edi] |
18_2_000F1878 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h |
18_2_00131918 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov ebx, dword ptr [edi+04h] |
18_2_0011DA58 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp word ptr [eax+esi+02h], 0000h |
18_2_0011BB20 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then jmp eax |
18_2_00117B48 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov word ptr [edx], ax |
18_2_00117B69 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], C85F7986h |
18_2_00119BA8 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
18_2_00119BA8 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], C85F7986h |
18_2_00119BA8 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then jmp eax |
18_2_00115C1B |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
18_2_00135C62 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then cmp byte ptr [ebx], 00000000h |
18_2_00103CBA |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov edi, ecx |
18_2_00101D02 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then movzx edi, byte ptr [ecx+esi] |
18_2_000F3D78 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-10h] |
18_2_000FDDC4 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esi+20h] |
18_2_00103E69 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov ecx, dword ptr [edx] |
18_2_000EDED8 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then dec ebx |
18_2_0012BF08 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
18_2_0011FF74 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then jmp ecx |
18_2_000F5FB0 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
18_2_0011FFD5 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
18_2_000F9FE8 |
Source: C:\Users\userJKECGDBFCB.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
18_2_000F9FE8 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
19_2_0040D110 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
19_2_0040D110 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], C274D4CAh |
19_2_004463B8 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], 27BAF212h |
19_2_0044695B |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+04h] |
19_2_0040FCA0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h |
19_2_00444040 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov ecx, dword ptr [edx] |
19_2_00401000 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+20h] |
19_2_00416F91 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then dec ebx |
19_2_0043F030 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp ecx |
19_2_00446094 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+0Ch] |
19_2_0042D1E1 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [eax], dx |
19_2_00422260 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [esi], ax |
19_2_00422260 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+04h] |
19_2_004142FC |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov ebp, eax |
19_2_0040A300 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
19_2_004323E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
19_2_004323E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
19_2_004323E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [edi], al |
19_2_004323E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
19_2_004323E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+14h] |
19_2_004323E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx eax, word ptr [esi+ecx] |
19_2_00441440 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [eax], cx |
19_2_0041D457 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+0Ch] |
19_2_0042C470 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
19_2_0042E40C |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov dword ptr [esp], 00000000h |
19_2_0041B410 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], C274D4CAh |
19_2_004464B8 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [eax], cx |
19_2_00429510 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], 7789B0CBh |
19_2_00447520 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+04h] |
19_2_00416536 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx ebx, byte ptr [ecx+esi+25h] |
19_2_00408590 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx ebx, byte ptr [edx] |
19_2_0043B650 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
19_2_0042E66A |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
19_2_00445700 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx ecx, word ptr [edi+eax] |
19_2_00447710 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+08h] |
19_2_004467EF |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
19_2_0042D7AF |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [eax], dx |
19_2_004228E9 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp word ptr [ecx+eax+02h], 0000h |
19_2_0041D961 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 62429966h |
19_2_00443920 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh |
19_2_004499D0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx edx, byte ptr [esi+edi] |
19_2_004049A0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h |
19_2_00444A40 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx edx, byte ptr [esi+ebx] |
19_2_00405A50 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp eax |
19_2_00411A3C |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp eax |
19_2_00411ACD |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh |
19_2_00449B60 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+000006B8h] |
19_2_0041DB6F |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F8FD61B8h |
19_2_0041DB6F |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+04h] |
19_2_00413BE2 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+40h] |
19_2_00411BEE |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov ebx, dword ptr [edi+04h] |
19_2_00430B80 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp word ptr [eax+esi+02h], 0000h |
19_2_0042EC48 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp word ptr [ebp+edi+02h], 0000h |
19_2_00427C00 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], A70A987Fh |
19_2_0043FC20 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], C85F7986h |
19_2_0042CCD0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
19_2_0042CCD0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], C85F7986h |
19_2_0042CCD0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
19_2_00449CE0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [ebp+edx*8+00h], 9ECF05EBh |
19_2_00449CE0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp eax |
19_2_0042AC91 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [edx], ax |
19_2_0042AC91 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov dword ptr [esp+1Ch], 5E46585Eh |
19_2_0042FD10 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
19_2_0042DD29 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
19_2_00448D8A |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx ebx, word ptr [ecx] |
19_2_0042AE57 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [eax], cx |
19_2_00427E60 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
19_2_00425E70 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov edi, ecx |
19_2_00414E2A |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-10h] |
19_2_00410EEC |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+40h] |
19_2_00411E93 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx edi, byte ptr [ecx+esi] |
19_2_00406EA0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx ecx, word ptr [ebp+00h] |
19_2_0040BEB0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp byte ptr [ebx], 00000000h |
19_2_00416EBF |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp eax |
19_2_00429F62 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
19_2_0043FF70 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], F3285E74h |
19_2_00447FC0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
19_2_00447FC0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp ecx |
19_2_00408FD0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp ecx |
19_2_00445FD6 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [edx], 0000h |
19_2_0041FFDF |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+20h] |
19_2_00416F91 |