Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00419D60 NtCreateFile, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00419E10 NtReadFile, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00419E90 NtClose, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00419F40 NtAllocateVirtualMemory, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00419DB3 NtReadFile, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00419E8A NtClose, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00419F3B NtAllocateVirtualMemory, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C398F0 NtReadVirtualMemory,LdrInitializeThunk, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39840 NtDelayExecution,LdrInitializeThunk, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39860 NtQuerySystemInformation,LdrInitializeThunk, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C399A0 NtCreateSection,LdrInitializeThunk, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39910 NtAdjustPrivilegesToken,LdrInitializeThunk, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39A50 NtCreateFile,LdrInitializeThunk, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39A00 NtProtectVirtualMemory,LdrInitializeThunk, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39A20 NtResumeThread,LdrInitializeThunk, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C395D0 NtClose,LdrInitializeThunk, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39540 NtReadFile,LdrInitializeThunk, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C396E0 NtFreeVirtualMemory,LdrInitializeThunk, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39660 NtAllocateVirtualMemory,LdrInitializeThunk, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39780 NtMapViewOfSection,LdrInitializeThunk, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C397A0 NtUnmapViewOfSection,LdrInitializeThunk, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39710 NtQueryInformationToken,LdrInitializeThunk, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C398A0 NtWriteVirtualMemory, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C3B040 NtSuspendThread, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39820 NtEnumerateKey, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C399D0 NtCreateProcessEx, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39950 NtQueueApcThread, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39A80 NtOpenDirectoryObject, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39A10 NtQuerySection, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C3A3B0 NtGetContextThread, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39B00 NtSetValueKey, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C395F0 NtQueryInformationFile, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39560 NtWriteFile, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39520 NtWaitForSingleObject, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C3AD30 NtSetContextThread, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C396D0 NtCreateKey, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39650 NtQueryValueKey, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39670 NtQueryInformationProcess, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39610 NtEnumerateValueKey, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39FE0 NtCreateMutant, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39760 NtOpenProcess, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39770 NtSetInformationFile, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C3A770 NtOpenThread, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C3A710 NtOpenProcessToken, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C39730 NtQueryVirtualMemory, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_1_00419D60 NtCreateFile, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_1_00419E10 NtReadFile, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_1_00419E90 NtClose, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_1_00419F40 NtAllocateVirtualMemory, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9710 NtQueryInformationToken,LdrInitializeThunk, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9FE0 NtCreateMutant,LdrInitializeThunk, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9780 NtMapViewOfSection,LdrInitializeThunk, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9A50 NtCreateFile,LdrInitializeThunk, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C96D0 NtCreateKey,LdrInitializeThunk, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C96E0 NtFreeVirtualMemory,LdrInitializeThunk, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9540 NtReadFile,LdrInitializeThunk, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9910 NtAdjustPrivilegesToken,LdrInitializeThunk, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C95D0 NtClose,LdrInitializeThunk, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C99A0 NtCreateSection,LdrInitializeThunk, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9840 NtDelayExecution,LdrInitializeThunk, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9860 NtQuerySystemInformation,LdrInitializeThunk, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9760 NtOpenProcess, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9770 NtSetInformationFile, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034CA770 NtOpenThread, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9B00 NtSetValueKey, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034CA710 NtOpenProcessToken, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9730 NtQueryVirtualMemory, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C97A0 NtUnmapViewOfSection, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034CA3B0 NtGetContextThread, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9650 NtQueryValueKey, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9660 NtAllocateVirtualMemory, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9670 NtQueryInformationProcess, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9A00 NtProtectVirtualMemory, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9610 NtEnumerateValueKey, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9A10 NtQuerySection, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9A20 NtResumeThread, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9A80 NtOpenDirectoryObject, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9950 NtQueueApcThread, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9560 NtWriteFile, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9520 NtWaitForSingleObject, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034CAD30 NtSetContextThread, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C99D0 NtCreateProcessEx, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C95F0 NtQueryInformationFile, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034CB040 NtSuspendThread, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C9820 NtEnumerateKey, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C98F0 NtReadVirtualMemory, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C98A0 NtWriteVirtualMemory, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_02BB9E90 NtClose, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_02BB9E10 NtReadFile, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_02BB9D60 NtCreateFile, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_02BB9E8A NtClose, |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_02BB9DB3 NtReadFile, |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 0_2_023D166E mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 0_2_023D1886 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C8B8D0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C8B8D0 mov ecx, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C8B8D0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C8B8D0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C8B8D0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C8B8D0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF9080 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C73884 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C73884 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF58EC mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C220A0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C220A0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C220A0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C220A0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C220A0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C220A0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C390AF mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2F0BF mov ecx, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2F0BF mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2F0BF mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C10050 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C10050 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB2073 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC1074 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C77016 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C77016 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C77016 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC4015 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC4015 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C0B02A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C0B02A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C0B02A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C0B02A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2002D mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2002D mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2002D mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2002D mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2002D mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C841E8 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C1C182 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2A185 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C22990 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFB1E1 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFB1E1 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFB1E1 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C769A6 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C261A0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C261A0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C751BE mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C751BE mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C751BE mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C751BE mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C1B944 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C1B944 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF9100 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF9100 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF9100 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFB171 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFB171 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFC962 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C14120 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C14120 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C14120 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C14120 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C14120 mov ecx, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2513A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2513A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C22ACB mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF52A5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF52A5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF52A5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF52A5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF52A5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C22AE4 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2D294 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2D294 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C0AAB0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C0AAB0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2FAB0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CBEA55 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C84257 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFAA16 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFAA16 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CAB260 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CAB260 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC8A62 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF5210 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF5210 mov ecx, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF5210 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF5210 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C3927A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C08A0A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C13A1C mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CBAA16 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CBAA16 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C34A2C mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C34A2C mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF9240 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF9240 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF9240 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF9240 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C753CA mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C753CA mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C203E2 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C203E2 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C203E2 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C203E2 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C203E2 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C203E2 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C1DBE9 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB138A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CAD380 mov ecx, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C01B8F mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C01B8F mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2B390 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C22397 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC5BA5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C24BAD mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C24BAD mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C24BAD mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC8B58 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C23B7A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C23B7A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB131B mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFDB60 mov ecx, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFF358 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFDB40 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC8CD6 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB14FB mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C76CF0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C76CF0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C76CF0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C0849B mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2A44B mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C8C450 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C8C450 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C1746D mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC740D mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC740D mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC740D mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB1C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB1C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB1C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB1C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB1C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB1C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB1C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB1C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB1C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB1C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB1C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB1C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB1C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB1C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C76C0A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C76C0A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C76C0A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C76C0A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2BC2C mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C76DC9 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C76DC9 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C76DC9 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C76DC9 mov ecx, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C76DC9 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C76DC9 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C0D5E0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C0D5E0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CBFDE2 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CBFDE2 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CBFDE2 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CBFDE2 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF2D8A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF2D8A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF2D8A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF2D8A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF2D8A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CA8DF1 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2FD9B mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2FD9B mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC05AC mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC05AC mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C235A1 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C21DB5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C21DB5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C21DB5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C33D43 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C73540 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFAD30 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C17D50 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C1C577 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C1C577 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C7A537 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CBE539 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C03D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C03D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C03D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C03D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C03D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C03D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C03D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C03D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C03D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C03D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C03D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C03D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C03D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC8D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C24D3B mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C24D3B mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C24D3B mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C38EC7 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CAFEC0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C236CC mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC8ED6 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C216E0 mov ecx, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C076E2 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C8FE87 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C746A7 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC0EA5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC0EA5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC0EA5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C07E41 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C07E41 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C07E41 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C07E41 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C07E41 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C07E41 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CBAE44 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CBAE44 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFE620 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C0766D mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C1AE73 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C1AE73 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C1AE73 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C1AE73 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C1AE73 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFC600 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFC600 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BFC600 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C28E00 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CB1608 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2A61C mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2A61C mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CAFE3F mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C337F5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C77794 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C77794 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C77794 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C08794 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C0EF40 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF4F2E mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00BF4F2E mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C0FF60 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC8F6A mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC070D mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00CC070D mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2A70E mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2A70E mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C1F716 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C8FF10 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C8FF10 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\Quotation.exe | Code function: 1_2_00C2E730 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0348DB40 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0349EF40 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03558B58 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0348F358 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0348DB60 mov ecx, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0349FF60 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034B3B7A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034B3B7A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03558F6A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0351FF10 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0351FF10 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0354131B mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0355070D mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0355070D mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03484F2E mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03484F2E mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034BE730 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03491B8F mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03491B8F mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0353D380 mov ecx, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0354138A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03555BA5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03489240 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03489240 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03489240 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03489240 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03497E41 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03497E41 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03497E41 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03497E41 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03497E41 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03497E41 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0349766D mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0353B260 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0353B260 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C927A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03558A62 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0348C600 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0348C600 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0348C600 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0348E620 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0353FE3F mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03558ED6 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034B36CC mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0353FEC0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034B16E0 mov ecx, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034976E2 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0351FE87 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034BD294 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034BD294 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034852A5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034852A5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034852A5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034852A5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034852A5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03550EA5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03550EA5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03550EA5 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_035046A7 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034BFAB0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034AB944 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034AB944 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C3D43 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03503540 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034A7D50 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0348B171 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0348B171 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034AC577 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034AC577 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03489100 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03489100 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03489100 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03558D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034A4120 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034A4120 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034A4120 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034A4120 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034A4120 mov ecx, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034B4D3B mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034B4D3B mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034B4D3B mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034B513A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034B513A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0348AD30 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03493D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03493D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03493D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03493D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03493D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03493D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03493D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03493D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03493D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03493D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03493D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03493D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03493D34 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03538DF1 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0348B1E1 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0348B1E1 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0348B1E1 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03482D8A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03482D8A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03482D8A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03482D8A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03482D8A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034AC182 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034BA185 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034BFD9B mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034BFD9B mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034B35A1 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0351C450 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0351C450 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034A0050 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034A0050 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03551074 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03542073 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034A746D mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03554015 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03554015 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03507016 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03507016 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03507016 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03541C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03541C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03541C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03541C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03541C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03541C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03541C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03541C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03541C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03541C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03541C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03541C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03541C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03541C06 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0355740D mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0355740D mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0355740D mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03506C0A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03506C0A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03506C0A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03506C0A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0349B02A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0349B02A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0349B02A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0349B02A mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034BBC2C mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0351B8D0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0351B8D0 mov ecx, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0351B8D0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0351B8D0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0351B8D0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_0351B8D0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03558CD6 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_035414FB mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03489080 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03503884 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_03503884 mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034C90AF mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034BF0BF mov ecx, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034BF0BF mov eax, dword ptr fs:[00000030h] |
Source: C:\Windows\SysWOW64\netsh.exe | Code function: 8_2_034BF0BF mov eax, dword ptr fs:[00000030h] |