| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 612FB5 second address: 612FBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 612FBA second address: 612FC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 612FC0 second address: 612893 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3B90Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c sub dword ptr [ebp+122D2389h], esi 0x00000012 push dword ptr [ebp+122D0FBDh] 0x00000018 mov dword ptr [ebp+122D23EEh], edx 0x0000001e call dword ptr [ebp+122D2394h] 0x00000024 pushad 0x00000025 clc 0x00000026 xor eax, eax 0x00000028 jmp 00007EFC6CC3B918h 0x0000002d mov edx, dword ptr [esp+28h] 0x00000031 pushad 0x00000032 add dword ptr [ebp+122D23EEh], edi 0x00000038 popad 0x00000039 mov dword ptr [ebp+122D2C38h], eax 0x0000003f pushad 0x00000040 mov ebx, dword ptr [ebp+122D2B1Ch] 0x00000046 cld 0x00000047 popad 0x00000048 mov esi, 0000003Ch 0x0000004d jmp 00007EFC6CC3B914h 0x00000052 add esi, dword ptr [esp+24h] 0x00000056 pushad 0x00000057 sub ebx, 300ED6D4h 0x0000005d mov dword ptr [ebp+122D22BEh], ebx 0x00000063 popad 0x00000064 lodsw 0x00000066 jg 00007EFC6CC3B912h 0x0000006c add eax, dword ptr [esp+24h] 0x00000070 or dword ptr [ebp+122D22BEh], edx 0x00000076 mov ebx, dword ptr [esp+24h] 0x0000007a mov dword ptr [ebp+122D2382h], ebx 0x00000080 nop 0x00000081 pushad 0x00000082 push eax 0x00000083 push edx 0x00000084 pushad 0x00000085 popad 0x00000086 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 612893 second address: 6128B5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007EFC6CDFD470h 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jo 00007EFC6CDFD468h 0x00000015 push eax 0x00000016 pop eax 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 6128B5 second address: 6128BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 783F7C second address: 783F80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 77B710 second address: 77B726 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a js 00007EFC6CC3B906h 0x00000010 jnp 00007EFC6CC3B906h 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 783583 second address: 783589 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 783589 second address: 78358F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 783883 second address: 783896 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007EFC6CDFD46Ch 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7868E2 second address: 786948 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 pushad 0x0000000a popad 0x0000000b pop eax 0x0000000c jmp 00007EFC6CC3B912h 0x00000011 popad 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 jmp 00007EFC6CC3B914h 0x0000001b mov eax, dword ptr [eax] 0x0000001d jmp 00007EFC6CC3B90Bh 0x00000022 mov dword ptr [esp+04h], eax 0x00000026 push eax 0x00000027 push edx 0x00000028 je 00007EFC6CC3B91Ch 0x0000002e jmp 00007EFC6CC3B916h 0x00000033 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7869A5 second address: 786A56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CDFD473h 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c jnl 00007EFC6CDFD498h 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push eax 0x00000016 call 00007EFC6CDFD468h 0x0000001b pop eax 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 add dword ptr [esp+04h], 00000014h 0x00000028 inc eax 0x00000029 push eax 0x0000002a ret 0x0000002b pop eax 0x0000002c ret 0x0000002d mov edi, esi 0x0000002f push 00000000h 0x00000031 mov edi, dword ptr [ebp+122D291Ch] 0x00000037 call 00007EFC6CDFD469h 0x0000003c jmp 00007EFC6CDFD472h 0x00000041 push eax 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 jmp 00007EFC6CDFD478h 0x0000004b rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786A56 second address: 786A71 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3B917h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786A71 second address: 786A89 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CDFD46Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 pop eax 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786A89 second address: 786AC3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3B910h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b jmp 00007EFC6CC3B916h 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 push eax 0x00000015 push edx 0x00000016 jl 00007EFC6CC3B90Ch 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786AC3 second address: 786AC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786AC7 second address: 786AD1 instructions: 0x00000000 rdtsc 0x00000002 jp 00007EFC6CC3B90Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786C89 second address: 786C8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786C8D second address: 786C93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786C93 second address: 786CA6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jnc 00007EFC6CDFD466h 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786CA6 second address: 786D57 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007EFC6CC3B908h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 jnl 00007EFC6CC3B91Bh 0x00000019 pop eax 0x0000001a push 00000003h 0x0000001c mov edi, dword ptr [ebp+122D2A9Ch] 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push edi 0x00000027 call 00007EFC6CC3B908h 0x0000002c pop edi 0x0000002d mov dword ptr [esp+04h], edi 0x00000031 add dword ptr [esp+04h], 0000001Ah 0x00000039 inc edi 0x0000003a push edi 0x0000003b ret 0x0000003c pop edi 0x0000003d ret 0x0000003e mov dword ptr [ebp+122D1F62h], edi 0x00000044 push 00000003h 0x00000046 mov ecx, eax 0x00000048 call 00007EFC6CC3B909h 0x0000004d jns 00007EFC6CC3B923h 0x00000053 push eax 0x00000054 jmp 00007EFC6CC3B90Ah 0x00000059 mov eax, dword ptr [esp+04h] 0x0000005d pushad 0x0000005e jnl 00007EFC6CC3B908h 0x00000064 jnp 00007EFC6CC3B90Ch 0x0000006a push eax 0x0000006b push edx 0x0000006c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786D57 second address: 786DE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov eax, dword ptr [eax] 0x00000007 jno 00007EFC6CDFD478h 0x0000000d mov dword ptr [esp+04h], eax 0x00000011 pushad 0x00000012 pushad 0x00000013 jmp 00007EFC6CDFD46Dh 0x00000018 jmp 00007EFC6CDFD473h 0x0000001d popad 0x0000001e jmp 00007EFC6CDFD475h 0x00000023 popad 0x00000024 pop eax 0x00000025 and ecx, 0354BC80h 0x0000002b lea ebx, dword ptr [ebp+124477EEh] 0x00000031 jmp 00007EFC6CDFD474h 0x00000036 add cx, 99C8h 0x0000003b xchg eax, ebx 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 push esi 0x00000041 pop esi 0x00000042 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786DE0 second address: 786DE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786DE4 second address: 786DEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786DEA second address: 786DF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786DF0 second address: 786E05 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007EFC6CDFD466h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push edi 0x00000011 pop edi 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786E71 second address: 786E76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 786E76 second address: 786E80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007EFC6CDFD466h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 778016 second address: 778029 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CC3B90Fh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 778029 second address: 77803B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CDFD46Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A4E60 second address: 7A4E64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A4E64 second address: 7A4E6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A4E6D second address: 7A4E73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A53D9 second address: 7A540A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007EFC6CDFD477h 0x0000000b jmp 00007EFC6CDFD46Fh 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A540A second address: 7A540E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A5592 second address: 7A55C5 instructions: 0x00000000 rdtsc 0x00000002 jno 00007EFC6CDFD47Bh 0x00000008 jnl 00007EFC6CDFD46Ch 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push esi 0x00000013 push edi 0x00000014 pop edi 0x00000015 push esi 0x00000016 pop esi 0x00000017 pop esi 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A58A5 second address: 7A58CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 pushad 0x0000000a jmp 00007EFC6CC3B919h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A58CA second address: 7A58ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CDFD46Eh 0x00000009 popad 0x0000000a jmp 00007EFC6CDFD46Bh 0x0000000f popad 0x00000010 push eax 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A58ED second address: 7A58F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A58F7 second address: 7A58FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A5A31 second address: 7A5A3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007EFC6CC3B906h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A6D99 second address: 7A6D9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A6D9D second address: 7A6DA1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A6DA1 second address: 7A6DAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A6DAD second address: 7A6DB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A6DB1 second address: 7A6DB5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A6DB5 second address: 7A6DC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7A6DC3 second address: 7A6DC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 77D191 second address: 77D19E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jbe 00007EFC6CC3B906h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 77D19E second address: 77D1B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 jbe 00007EFC6CDFD466h 0x0000000c pop ecx 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push edi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 77D1B2 second address: 77D1C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007EFC6CC3B90Eh 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 77D1C5 second address: 77D1CA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7ADAA4 second address: 7ADAAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7ADAAA second address: 7ADAAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B1BF3 second address: 7B1C2D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007EFC6CC3B910h 0x0000000d jmp 00007EFC6CC3B90Fh 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007EFC6CC3B910h 0x0000001a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B1D63 second address: 7B1D8F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CDFD46Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e pop ebx 0x0000000f jmp 00007EFC6CDFD470h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B1D8F second address: 7B1DA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CC3B90Eh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B1DA3 second address: 7B1DAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B1DAE second address: 7B1DB6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B2030 second address: 7B2034 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B3980 second address: 7B3984 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B3984 second address: 7B39AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a popad 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007EFC6CDFD479h 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B39AE second address: 7B39DA instructions: 0x00000000 rdtsc 0x00000002 jnc 00007EFC6CC3B90Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d push edx 0x0000000e jns 00007EFC6CC3B918h 0x00000014 jmp 00007EFC6CC3B912h 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B458F second address: 7B45A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFC6CDFD472h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B4790 second address: 7B47A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFC6CC3B90Eh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B47A2 second address: 7B47A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B4C20 second address: 7B4C41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007EFC6CC3B90Fh 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jo 00007EFC6CC3B910h 0x00000012 pushad 0x00000013 push edi 0x00000014 pop edi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B5157 second address: 7B515C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B515C second address: 7B51EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push esi 0x0000000b call 00007EFC6CC3B908h 0x00000010 pop esi 0x00000011 mov dword ptr [esp+04h], esi 0x00000015 add dword ptr [esp+04h], 0000001Bh 0x0000001d inc esi 0x0000001e push esi 0x0000001f ret 0x00000020 pop esi 0x00000021 ret 0x00000022 movzx edi, cx 0x00000025 push 00000000h 0x00000027 jmp 00007EFC6CC3B917h 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push edx 0x00000031 call 00007EFC6CC3B908h 0x00000036 pop edx 0x00000037 mov dword ptr [esp+04h], edx 0x0000003b add dword ptr [esp+04h], 00000016h 0x00000043 inc edx 0x00000044 push edx 0x00000045 ret 0x00000046 pop edx 0x00000047 ret 0x00000048 jmp 00007EFC6CC3B915h 0x0000004d push eax 0x0000004e push esi 0x0000004f pushad 0x00000050 jmp 00007EFC6CC3B912h 0x00000055 push eax 0x00000056 push edx 0x00000057 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B5A8B second address: 7B5AB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CDFD46Ah 0x00000009 popad 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f jmp 00007EFC6CDFD475h 0x00000014 pop edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B5AB5 second address: 7B5B00 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007EFC6CC3B90Ch 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push eax 0x00000013 call 00007EFC6CC3B908h 0x00000018 pop eax 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d add dword ptr [esp+04h], 00000017h 0x00000025 inc eax 0x00000026 push eax 0x00000027 ret 0x00000028 pop eax 0x00000029 ret 0x0000002a push 00000000h 0x0000002c mov si, 81C4h 0x00000030 xchg eax, ebx 0x00000031 push eax 0x00000032 push edx 0x00000033 push edi 0x00000034 jmp 00007EFC6CC3B90Ah 0x00000039 pop edi 0x0000003a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B5B00 second address: 7B5B05 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B5B05 second address: 7B5B11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B9747 second address: 7B974D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BBDFF second address: 7BBE16 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007EFC6CC3B90Ch 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B9497 second address: 7B94AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007EFC6CDFD470h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B9F5F second address: 7B9F65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B94AC second address: 7B94BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jp 00007EFC6CDFD470h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C094D second address: 7C0951 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C0951 second address: 7C095F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C095F second address: 7C0963 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C0963 second address: 7C0969 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C1E73 second address: 7C1EDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jmp 00007EFC6CC3B916h 0x0000000b nop 0x0000000c mov ebx, dword ptr [ebp+122D2524h] 0x00000012 push 00000000h 0x00000014 jmp 00007EFC6CC3B910h 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push edx 0x0000001e call 00007EFC6CC3B908h 0x00000023 pop edx 0x00000024 mov dword ptr [esp+04h], edx 0x00000028 add dword ptr [esp+04h], 0000001Ch 0x00000030 inc edx 0x00000031 push edx 0x00000032 ret 0x00000033 pop edx 0x00000034 ret 0x00000035 mov dword ptr [ebp+122D231Ah], edx 0x0000003b xchg eax, esi 0x0000003c push eax 0x0000003d push edx 0x0000003e push ebx 0x0000003f push edx 0x00000040 pop edx 0x00000041 pop ebx 0x00000042 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C11DD second address: 7C11F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CDFD46Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C11F4 second address: 7C11F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C11F9 second address: 7C1272 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007EFC6CDFD466h 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e nop 0x0000000f mov bl, 1Eh 0x00000011 push dword ptr fs:[00000000h] 0x00000018 or ebx, 658E9240h 0x0000001e mov dword ptr fs:[00000000h], esp 0x00000025 call 00007EFC6CDFD479h 0x0000002a mov ebx, edx 0x0000002c pop edi 0x0000002d mov eax, dword ptr [ebp+122D0E65h] 0x00000033 mov edi, dword ptr [ebp+122D27BFh] 0x00000039 push FFFFFFFFh 0x0000003b push 00000000h 0x0000003d push ebx 0x0000003e call 00007EFC6CDFD468h 0x00000043 pop ebx 0x00000044 mov dword ptr [esp+04h], ebx 0x00000048 add dword ptr [esp+04h], 00000015h 0x00000050 inc ebx 0x00000051 push ebx 0x00000052 ret 0x00000053 pop ebx 0x00000054 ret 0x00000055 nop 0x00000056 pushad 0x00000057 jng 00007EFC6CDFD468h 0x0000005d push ecx 0x0000005e pop ecx 0x0000005f push esi 0x00000060 push eax 0x00000061 push edx 0x00000062 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C2E84 second address: 7C2E88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C2E88 second address: 7C2EE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 mov dword ptr [esp], eax 0x0000000a sub dword ptr [ebp+122D35A5h], ebx 0x00000010 push 00000000h 0x00000012 or ebx, 2DC1095Eh 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push ecx 0x0000001d call 00007EFC6CDFD468h 0x00000022 pop ecx 0x00000023 mov dword ptr [esp+04h], ecx 0x00000027 add dword ptr [esp+04h], 0000001Bh 0x0000002f inc ecx 0x00000030 push ecx 0x00000031 ret 0x00000032 pop ecx 0x00000033 ret 0x00000034 or dword ptr [ebp+122D1C8Dh], eax 0x0000003a xchg eax, esi 0x0000003b jmp 00007EFC6CDFD46Ch 0x00000040 push eax 0x00000041 jbe 00007EFC6CDFD474h 0x00000047 pushad 0x00000048 push eax 0x00000049 push edx 0x0000004a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C2EE2 second address: 7C2EE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C4FA0 second address: 7C4FA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C4FA5 second address: 7C5003 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007EFC6CC3B918h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e clc 0x0000000f mov bl, D7h 0x00000011 push 00000000h 0x00000013 mov edi, ecx 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push edi 0x0000001a call 00007EFC6CC3B908h 0x0000001f pop edi 0x00000020 mov dword ptr [esp+04h], edi 0x00000024 add dword ptr [esp+04h], 0000001Ah 0x0000002c inc edi 0x0000002d push edi 0x0000002e ret 0x0000002f pop edi 0x00000030 ret 0x00000031 push eax 0x00000032 push eax 0x00000033 push edx 0x00000034 push esi 0x00000035 jmp 00007EFC6CC3B90Dh 0x0000003a pop esi 0x0000003b rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C61AE second address: 7C6214 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop esi 0x00000006 push eax 0x00000007 jmp 00007EFC6CDFD474h 0x0000000c nop 0x0000000d clc 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push edx 0x00000015 call 00007EFC6CDFD468h 0x0000001a pop edx 0x0000001b mov dword ptr [esp+04h], edx 0x0000001f add dword ptr [esp+04h], 0000001Ch 0x00000027 inc edx 0x00000028 push edx 0x00000029 ret 0x0000002a pop edx 0x0000002b ret 0x0000002c sub dword ptr [ebp+122D1F84h], ebx 0x00000032 xchg eax, esi 0x00000033 pushad 0x00000034 jmp 00007EFC6CDFD46Eh 0x00000039 push edx 0x0000003a pushad 0x0000003b popad 0x0000003c pop edx 0x0000003d popad 0x0000003e push eax 0x0000003f pushad 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 pop eax 0x00000044 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C70A2 second address: 7C70A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C70A8 second address: 7C70AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C6352 second address: 7C63BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 and ebx, dword ptr [ebp+122D2B40h] 0x0000000f push dword ptr fs:[00000000h] 0x00000016 mov edi, edx 0x00000018 mov dword ptr fs:[00000000h], esp 0x0000001f push 00000000h 0x00000021 push ebp 0x00000022 call 00007EFC6CC3B908h 0x00000027 pop ebp 0x00000028 mov dword ptr [esp+04h], ebp 0x0000002c add dword ptr [esp+04h], 0000001Ah 0x00000034 inc ebp 0x00000035 push ebp 0x00000036 ret 0x00000037 pop ebp 0x00000038 ret 0x00000039 push esi 0x0000003a sub ebx, dword ptr [ebp+122D21A9h] 0x00000040 pop ebx 0x00000041 mov eax, dword ptr [ebp+122D0EE9h] 0x00000047 mov edi, dword ptr [ebp+1244764Eh] 0x0000004d push FFFFFFFFh 0x0000004f mov edi, dword ptr [ebp+122D2204h] 0x00000055 push eax 0x00000056 push eax 0x00000057 push edx 0x00000058 push eax 0x00000059 push edx 0x0000005a jg 00007EFC6CC3B906h 0x00000060 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C63BA second address: 7C63C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C80CF second address: 7C80D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C80D4 second address: 7C8166 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007EFC6CDFD46Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d mov ebx, dword ptr [ebp+122D1CDBh] 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ecx 0x00000018 call 00007EFC6CDFD468h 0x0000001d pop ecx 0x0000001e mov dword ptr [esp+04h], ecx 0x00000022 add dword ptr [esp+04h], 0000001Ch 0x0000002a inc ecx 0x0000002b push ecx 0x0000002c ret 0x0000002d pop ecx 0x0000002e ret 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push ecx 0x00000034 call 00007EFC6CDFD468h 0x00000039 pop ecx 0x0000003a mov dword ptr [esp+04h], ecx 0x0000003e add dword ptr [esp+04h], 00000019h 0x00000046 inc ecx 0x00000047 push ecx 0x00000048 ret 0x00000049 pop ecx 0x0000004a ret 0x0000004b jmp 00007EFC6CDFD46Ch 0x00000050 xchg eax, esi 0x00000051 push edi 0x00000052 js 00007EFC6CDFD46Ch 0x00000058 jnl 00007EFC6CDFD466h 0x0000005e pop edi 0x0000005f push eax 0x00000060 pushad 0x00000061 pushad 0x00000062 jo 00007EFC6CDFD466h 0x00000068 push ecx 0x00000069 pop ecx 0x0000006a popad 0x0000006b pushad 0x0000006c jng 00007EFC6CDFD466h 0x00000072 push eax 0x00000073 push edx 0x00000074 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C7262 second address: 7C72D9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 ja 00007EFC6CC3B909h 0x0000000f push dword ptr fs:[00000000h] 0x00000016 mov edi, ecx 0x00000018 mov dword ptr fs:[00000000h], esp 0x0000001f sbb bx, FD03h 0x00000024 mov eax, dword ptr [ebp+122D1401h] 0x0000002a mov dword ptr [ebp+122D368Dh], eax 0x00000030 mov bl, 91h 0x00000032 push FFFFFFFFh 0x00000034 push 00000000h 0x00000036 push ebx 0x00000037 call 00007EFC6CC3B908h 0x0000003c pop ebx 0x0000003d mov dword ptr [esp+04h], ebx 0x00000041 add dword ptr [esp+04h], 0000001Ah 0x00000049 inc ebx 0x0000004a push ebx 0x0000004b ret 0x0000004c pop ebx 0x0000004d ret 0x0000004e jmp 00007EFC6CC3B919h 0x00000053 push eax 0x00000054 push edx 0x00000055 push eax 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7CB064 second address: 7CB069 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7CA233 second address: 7CA23E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7CC159 second address: 7CC15D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7CC15D second address: 7CC16D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3B90Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7CC16D second address: 7CC172 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7C91B4 second address: 7C91C2 instructions: 0x00000000 rdtsc 0x00000002 jno 00007EFC6CC3B906h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7CE0D5 second address: 7CE0D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 776605 second address: 776615 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007EFC6CC3B906h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7D0406 second address: 7D040C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 776615 second address: 77664F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 pushad 0x0000000a jmp 00007EFC6CC3B912h 0x0000000f push ebx 0x00000010 jg 00007EFC6CC3B906h 0x00000016 pop ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007EFC6CC3B914h 0x0000001e rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7D910F second address: 7D9113 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7D88F1 second address: 7D88FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007EFC6CC3B90Eh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7D88FD second address: 7D892C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007EFC6CDFD46Bh 0x0000000b popad 0x0000000c jc 00007EFC6CDFD49Bh 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007EFC6CDFD475h 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7DF3F1 second address: 7DF3FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7DF3FD second address: 7DF41A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 js 00007EFC6CDFD466h 0x0000000f popad 0x00000010 popad 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 pushad 0x00000019 popad 0x0000001a pushad 0x0000001b popad 0x0000001c popad 0x0000001d rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7DF41A second address: 7DF420 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7DF420 second address: 7DF440 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007EFC6CDFD473h 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7DF5BB second address: 7DF5BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E084C second address: 7E0856 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E5792 second address: 7E57A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007EFC6CC3B906h 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E57A0 second address: 7E57AA instructions: 0x00000000 rdtsc 0x00000002 je 00007EFC6CDFD466h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 771461 second address: 77147F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CC3B916h 0x00000009 popad 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E4398 second address: 7E439C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E439C second address: 7E43A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E43A0 second address: 7E43A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E43A6 second address: 7E43B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007EFC6CC3B90Bh 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E49D4 second address: 7E4A03 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 jmp 00007EFC6CDFD477h 0x0000000c jmp 00007EFC6CDFD46Fh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E4CD0 second address: 7E4CD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E4CD4 second address: 7E4CDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E4FAA second address: 7E4FC0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a ja 00007EFC6CC3B906h 0x00000010 jbe 00007EFC6CC3B906h 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E4FC0 second address: 7E4FE2 instructions: 0x00000000 rdtsc 0x00000002 jc 00007EFC6CDFD466h 0x00000008 jmp 00007EFC6CDFD474h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E4FE2 second address: 7E4FE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E4FE6 second address: 7E4FFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007EFC6CDFD468h 0x0000000e jnp 00007EFC6CDFD47Ah 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E517F second address: 7E518C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jo 00007EFC6CC3B906h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E518C second address: 7E51BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007EFC6CDFD46Ch 0x0000000e jmp 00007EFC6CDFD479h 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E5359 second address: 7E535F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E535F second address: 7E5363 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E5363 second address: 7E5388 instructions: 0x00000000 rdtsc 0x00000002 ja 00007EFC6CC3B906h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007EFC6CC3B916h 0x00000011 push ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7E5610 second address: 7E5617 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 779C7F second address: 779C8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 js 00007EFC6CC3B906h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7ED719 second address: 7ED71F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BE16C second address: 7BE1C4 instructions: 0x00000000 rdtsc 0x00000002 jg 00007EFC6CC3B908h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov ch, C2h 0x0000000d mov dword ptr [ebp+122D3648h], eax 0x00000013 lea eax, dword ptr [ebp+1247EE7Ch] 0x00000019 push 00000000h 0x0000001b push esi 0x0000001c call 00007EFC6CC3B908h 0x00000021 pop esi 0x00000022 mov dword ptr [esp+04h], esi 0x00000026 add dword ptr [esp+04h], 00000017h 0x0000002e inc esi 0x0000002f push esi 0x00000030 ret 0x00000031 pop esi 0x00000032 ret 0x00000033 mov dword ptr [ebp+1244450Dh], ebx 0x00000039 nop 0x0000003a push eax 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007EFC6CC3B914h 0x00000042 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BE1C4 second address: 7BE1E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007EFC6CDFD478h 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BE1E8 second address: 7BE1EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BE1EE second address: 79E000 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push ebp 0x0000000c call 00007EFC6CDFD468h 0x00000011 pop ebp 0x00000012 mov dword ptr [esp+04h], ebp 0x00000016 add dword ptr [esp+04h], 0000001Bh 0x0000001e inc ebp 0x0000001f push ebp 0x00000020 ret 0x00000021 pop ebp 0x00000022 ret 0x00000023 call dword ptr [ebp+122D214Bh] 0x00000029 jmp 00007EFC6CDFD472h 0x0000002e push edi 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BE7DC second address: 7BE7E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BE7E0 second address: 7BE808 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 jmp 00007EFC6CDFD477h 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 push esi 0x00000012 push eax 0x00000013 push edx 0x00000014 push esi 0x00000015 pop esi 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BE808 second address: 7BE898 instructions: 0x00000000 rdtsc 0x00000002 jno 00007EFC6CC3B906h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b mov eax, dword ptr [eax] 0x0000000d jno 00007EFC6CC3B922h 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 jl 00007EFC6CC3B918h 0x0000001d pop eax 0x0000001e push 00000000h 0x00000020 push esi 0x00000021 call 00007EFC6CC3B908h 0x00000026 pop esi 0x00000027 mov dword ptr [esp+04h], esi 0x0000002b add dword ptr [esp+04h], 0000001Dh 0x00000033 inc esi 0x00000034 push esi 0x00000035 ret 0x00000036 pop esi 0x00000037 ret 0x00000038 add ecx, 3E4BE028h 0x0000003e push B923BF97h 0x00000043 pushad 0x00000044 jmp 00007EFC6CC3B910h 0x00000049 push edi 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BE9AB second address: 7BE9B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BE9B1 second address: 7BE9CA instructions: 0x00000000 rdtsc 0x00000002 jp 00007EFC6CC3B908h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], esi 0x0000000f sbb di, 8170h 0x00000014 push eax 0x00000015 pushad 0x00000016 push edi 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BE9CA second address: 7BE9D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BE9D3 second address: 7BE9D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BEC0B second address: 7BEC11 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BEC11 second address: 7BEC34 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3B910h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jp 00007EFC6CC3B912h 0x00000010 js 00007EFC6CC3B90Ch 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BECDB second address: 7BECDF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BECDF second address: 7BECED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnc 00007EFC6CC3B906h 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BECED second address: 7BECF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BECF1 second address: 7BED26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a mov edx, eax 0x0000000c push 00000004h 0x0000000e jmp 00007EFC6CC3B916h 0x00000013 nop 0x00000014 push eax 0x00000015 push edx 0x00000016 push ecx 0x00000017 jmp 00007EFC6CC3B90Ch 0x0000001c pop ecx 0x0000001d rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BED26 second address: 7BED2B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BED2B second address: 7BED31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BED31 second address: 7BED40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BED40 second address: 7BED45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BED45 second address: 7BED4F instructions: 0x00000000 rdtsc 0x00000002 jng 00007EFC6CDFD46Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BF5B9 second address: 7BF5D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jbe 00007EFC6CC3B906h 0x00000011 js 00007EFC6CC3B906h 0x00000017 popad 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BF5D1 second address: 7BF5D6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7ECA2F second address: 7ECA4C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a jmp 00007EFC6CC3B912h 0x0000000f pop edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7ED10D second address: 7ED112 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7ED286 second address: 7ED290 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007EFC6CC3B906h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7ED290 second address: 7ED2B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CDFD46Eh 0x00000007 jmp 00007EFC6CDFD470h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7F2D13 second address: 7F2D19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7F2D19 second address: 7F2D1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7F2D1F second address: 7F2D23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7F1C57 second address: 7F1C5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7F1C5B second address: 7F1C61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7F1C61 second address: 7F1C6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7F21BB second address: 7F21CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jnc 00007EFC6CC3B908h 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7F588C second address: 7F5892 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7F5892 second address: 7F58AA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007EFC6CC3B90Eh 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7FF31A second address: 7FF31E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7FF31E second address: 7FF328 instructions: 0x00000000 rdtsc 0x00000002 jg 00007EFC6CC3B906h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7FDD4E second address: 7FDD5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jns 00007EFC6CDFD466h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7FDD5B second address: 7FDD63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7FE040 second address: 7FE046 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7FE046 second address: 7FE04A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7FE04A second address: 7FE04E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7FE4B5 second address: 7FE4C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007EFC6CC3B906h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7FE620 second address: 7FE62F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CDFD46Bh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7FE62F second address: 7FE647 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jmp 00007EFC6CC3B90Ah 0x0000000c jp 00007EFC6CC3B906h 0x00000012 pop edi 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7FE647 second address: 7FE65D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CDFD46Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7FE65D second address: 7FE663 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7FE663 second address: 7FE669 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 8019F0 second address: 801A0D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007EFC6CC3B90Fh 0x0000000b jc 00007EFC6CC3B90Eh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 773031 second address: 773035 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 773035 second address: 773053 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3B90Eh 0x00000007 jnp 00007EFC6CC3B906h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 8015DA second address: 8015DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 804911 second address: 804927 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnl 00007EFC6CC3B906h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jne 00007EFC6CC3B906h 0x00000014 push edi 0x00000015 pop edi 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 804267 second address: 80426B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80B7EB second address: 80B7F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80B7F4 second address: 80B7F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80B7F8 second address: 80B810 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3B914h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 76F95D second address: 76F98A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007EFC6CDFD46Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007EFC6CDFD477h 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 76F98A second address: 76F9A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3B917h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 76F9A5 second address: 76F9C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 js 00007EFC6CDFD4A7h 0x0000000d pushad 0x0000000e jmp 00007EFC6CDFD470h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A146 second address: 80A14A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A14A second address: 80A16B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CDFD46Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007EFC6CDFD46Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A16B second address: 80A16F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A16F second address: 80A18A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CDFD477h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A18A second address: 80A1A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ecx 0x00000008 jmp 00007EFC6CC3B90Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A1A6 second address: 80A1AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A2D9 second address: 80A2DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A2DF second address: 80A2E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A2E3 second address: 80A2E9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A2E9 second address: 80A2F3 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007EFC6CDFD47Dh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A2F3 second address: 80A30F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CC3B911h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A30F second address: 80A313 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A313 second address: 80A343 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3B919h 0x00000007 jmp 00007EFC6CC3B910h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A343 second address: 80A349 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A5FB second address: 80A60C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3B90Ch 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BEF02 second address: 7BEF4F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jp 00007EFC6CDFD466h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d sub ecx, 758C18C1h 0x00000013 push 00000004h 0x00000015 push 00000000h 0x00000017 push ecx 0x00000018 call 00007EFC6CDFD468h 0x0000001d pop ecx 0x0000001e mov dword ptr [esp+04h], ecx 0x00000022 add dword ptr [esp+04h], 0000001Bh 0x0000002a inc ecx 0x0000002b push ecx 0x0000002c ret 0x0000002d pop ecx 0x0000002e ret 0x0000002f mov cx, E437h 0x00000033 nop 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007EFC6CDFD46Ch 0x0000003d rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BEF4F second address: 7BEF55 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7BEF55 second address: 7BEF66 instructions: 0x00000000 rdtsc 0x00000002 je 00007EFC6CDFD468h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A9F2 second address: 80A9FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007EFC6CC3B906h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80A9FE second address: 80AA23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007EFC6CDFD478h 0x0000000a push eax 0x0000000b push edx 0x0000000c jc 00007EFC6CDFD466h 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 76F953 second address: 76F95D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80AB71 second address: 80AB75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80AB75 second address: 80AB90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CC3B910h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80AB90 second address: 80ABA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007EFC6CDFD46Fh 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80B51E second address: 80B529 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edi 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80B529 second address: 80B52E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80E953 second address: 80E981 instructions: 0x00000000 rdtsc 0x00000002 jno 00007EFC6CC3B908h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007EFC6CC3B90Eh 0x00000012 jmp 00007EFC6CC3B911h 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80E981 second address: 80E993 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007EFC6CDFD466h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jo 00007EFC6CDFD46Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80E993 second address: 80E9AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CC3B90Fh 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80E9AA second address: 80E9AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80EB0E second address: 80EB19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80EB19 second address: 80EB29 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CDFD46Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80EB29 second address: 80EB32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80EE12 second address: 80EE17 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80F089 second address: 80F08D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 80F1D7 second address: 80F201 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007EFC6CDFD466h 0x00000008 jmp 00007EFC6CDFD476h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 jne 00007EFC6CDFD466h 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 812511 second address: 812516 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 812516 second address: 812530 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007EFC6CDFD475h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 811F29 second address: 811F2E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 811F2E second address: 811F36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 811F36 second address: 811F3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81222E second address: 81223D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 jnc 00007EFC6CDFD466h 0x0000000b pop ecx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81223D second address: 812260 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007EFC6CC3B911h 0x0000000f je 00007EFC6CC3B90Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 812260 second address: 812267 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 818713 second address: 818718 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 818718 second address: 81872E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CDFD471h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 819229 second address: 81922D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81922D second address: 819252 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007EFC6CDFD466h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007EFC6CDFD476h 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 819252 second address: 819258 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81953A second address: 819560 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007EFC6CDFD46Bh 0x0000000f jmp 00007EFC6CDFD471h 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 819560 second address: 81956C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007EFC6CC3B906h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81956C second address: 819597 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CDFD46Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jno 00007EFC6CDFD466h 0x00000011 jmp 00007EFC6CDFD473h 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 819E49 second address: 819E6E instructions: 0x00000000 rdtsc 0x00000002 jo 00007EFC6CC3B906h 0x00000008 jbe 00007EFC6CC3B906h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007EFC6CC3B915h 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81A189 second address: 81A1CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 jnp 00007EFC6CDFD46Ch 0x0000000d jo 00007EFC6CDFD466h 0x00000013 jne 00007EFC6CDFD47Ch 0x00000019 jmp 00007EFC6CDFD474h 0x0000001e push eax 0x0000001f pop eax 0x00000020 popad 0x00000021 pushad 0x00000022 push esi 0x00000023 jmp 00007EFC6CDFD46Dh 0x00000028 pop esi 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c popad 0x0000002d rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81A1CD second address: 81A1D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81A1D1 second address: 81A1E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CDFD46Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81A460 second address: 81A486 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CC3B90Dh 0x00000009 popad 0x0000000a jmp 00007EFC6CC3B914h 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81D645 second address: 81D65A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 jo 00007EFC6CDFD48Ah 0x0000000c pushad 0x0000000d ja 00007EFC6CDFD466h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81D7D6 second address: 81D7DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81D7DC second address: 81D7E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jbe 00007EFC6CDFD466h 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81D939 second address: 81D93F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81DC2A second address: 81DC30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81DC30 second address: 81DC36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81DC36 second address: 81DC55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007EFC6CDFD476h 0x0000000d pop eax 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81DC55 second address: 81DC94 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007EFC6CC3B90Ah 0x00000008 pop eax 0x00000009 push ebx 0x0000000a jmp 00007EFC6CC3B911h 0x0000000f jl 00007EFC6CC3B906h 0x00000015 pop ebx 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007EFC6CC3B914h 0x0000001f rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81DC94 second address: 81DCB3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CDFD479h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81DCB3 second address: 81DCB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81DE3B second address: 81DE3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81DE3F second address: 81DE45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 81E111 second address: 81E115 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 77D18D second address: 77D191 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 82A6E0 second address: 82A6E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 82A6E6 second address: 82A6EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 82A6EA second address: 82A70D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007EFC6CDFD478h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 82A70D second address: 82A727 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jng 00007EFC6CC3B919h 0x0000000b jmp 00007EFC6CC3B90Dh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 828AC6 second address: 828ACA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 828ACA second address: 828AED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CC3B919h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 828AED second address: 828AF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 828DCB second address: 828DCF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 828DCF second address: 828DD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 828DD5 second address: 828E09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007EFC6CC3B912h 0x0000000b pushad 0x0000000c jmp 00007EFC6CC3B919h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 828E09 second address: 828E15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007EFC6CDFD466h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 828F5A second address: 828F70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CC3B910h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 828F70 second address: 828F76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 8290C3 second address: 8290CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 8293C2 second address: 8293D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CDFD46Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 829EE8 second address: 829EEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 829EEE second address: 829F08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007EFC6CDFD474h 0x0000000c jmp 00007EFC6CDFD46Eh 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 82D97A second address: 82D9A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007EFC6CC3B90Bh 0x0000000e jmp 00007EFC6CC3B913h 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 831403 second address: 831437 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007EFC6CDFD471h 0x0000000d jmp 00007EFC6CDFD479h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 834928 second address: 834943 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007EFC6CC3B915h 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 834943 second address: 834981 instructions: 0x00000000 rdtsc 0x00000002 ja 00007EFC6CDFD466h 0x00000008 jns 00007EFC6CDFD466h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop edi 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007EFC6CDFD46Eh 0x00000018 pushad 0x00000019 jmp 00007EFC6CDFD474h 0x0000001e jc 00007EFC6CDFD466h 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 834981 second address: 834986 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 8342F7 second address: 83431F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007EFC6CDFD46Ah 0x0000000b popad 0x0000000c pushad 0x0000000d jc 00007EFC6CDFD466h 0x00000013 jo 00007EFC6CDFD466h 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c pop esi 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 83431F second address: 834325 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 834325 second address: 83432A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 834496 second address: 83449A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 83449A second address: 8344A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 8344A0 second address: 8344BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFC6CC3B918h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 840E61 second address: 840E65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 840E65 second address: 840E71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007EFC6CCDAB06h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 840E71 second address: 840E78 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 844032 second address: 844037 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 844037 second address: 844053 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007EFC6CC3EDD5h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 8456C1 second address: 8456C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 847C94 second address: 847C98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 847C98 second address: 847C9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 847C9E second address: 847CB4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDD2h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 8550DB second address: 8550DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 8550DF second address: 8550E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 8550E3 second address: 8550E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 85FDA3 second address: 85FDAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 85E811 second address: 85E82D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007EFC6CCDAB11h 0x0000000d push edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 85E96A second address: 85E974 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 85E974 second address: 85E97A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 85E97A second address: 85E9AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDD6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push edx 0x0000000b jmp 00007EFC6CC3EDD4h 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 85E9AD second address: 85E9B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 85E9B3 second address: 85E9B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 8636C9 second address: 8636CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 867259 second address: 86726A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 push esi 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a ja 00007EFC6CC3EDC6h 0x00000010 pop esi 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 873C2C second address: 873C43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CCDAB0Ah 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e pop eax 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 873C43 second address: 873C5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFC6CC3EDD2h 0x00000009 je 00007EFC6CC3EDC6h 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 870520 second address: 870545 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007EFC6CCDAB11h 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 ja 00007EFC6CCDAB22h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 881D98 second address: 881DB8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007EFC6CC3EDD1h 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 881BD2 second address: 881BF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007EFC6CCDAB1Ah 0x0000000a push edx 0x0000000b pop edx 0x0000000c jmp 00007EFC6CCDAB12h 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 881BF0 second address: 881BF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 881BF6 second address: 881BFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 881BFA second address: 881BFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 881BFE second address: 881C11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007EFC6CCDAB06h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push esi 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89B1E3 second address: 89B1FF instructions: 0x00000000 rdtsc 0x00000002 jc 00007EFC6CC3EDC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jbe 00007EFC6CC3EDD2h 0x00000010 jns 00007EFC6CC3EDC6h 0x00000016 jg 00007EFC6CC3EDC6h 0x0000001c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89B1FF second address: 89B20A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jnl 00007EFC6CCDAB06h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89BA12 second address: 89BA16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89BA16 second address: 89BA36 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007EFC6CCDAB16h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c push edx 0x0000000d pop edx 0x0000000e pop esi 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89BA36 second address: 89BA55 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDD9h 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89BA55 second address: 89BA76 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e jmp 00007EFC6CCDAB13h 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89BA76 second address: 89BA7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89BA7A second address: 89BA84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89BA84 second address: 89BA88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89BA88 second address: 89BA8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89BA8E second address: 89BA94 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89BBBD second address: 89BBC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89BD40 second address: 89BD68 instructions: 0x00000000 rdtsc 0x00000002 jng 00007EFC6CC3EDCCh 0x00000008 jns 00007EFC6CC3EDC6h 0x0000000e push edi 0x0000000f jmp 00007EFC6CC3EDD7h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89BD68 second address: 89BD7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007EFC6CCDAB0Eh 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89EBD6 second address: 89EBDC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89EBDC second address: 89EBE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89EBE2 second address: 89EBE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89EDE8 second address: 89EDEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89F11E second address: 89F144 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDD8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 pushad 0x00000011 popad 0x00000012 pop esi 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 89F144 second address: 89F174 instructions: 0x00000000 rdtsc 0x00000002 jne 00007EFC6CCDAB1Fh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c jng 00007EFC6CCDAB10h 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 8A1B6D second address: 8A1BA8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007EFC6CC3EDD7h 0x00000008 pop esi 0x00000009 jmp 00007EFC6CC3EDD4h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 pushad 0x00000012 jc 00007EFC6CC3EDC6h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 8A1BA8 second address: 8A1BBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFC6CCDAB0Ch 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 8A1BBA second address: 8A1BCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 je 00007EFC6CC3EDC8h 0x0000000b pushad 0x0000000c popad 0x0000000d jnp 00007EFC6CC3EDCCh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 8A1BCF second address: 8A1BDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007EFC6CCDAB0Ch 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F70B89 second address: 4F70B8F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F70B8F second address: 4F70BDB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007EFC6CCDAB19h 0x0000000e mov ebp, esp 0x00000010 jmp 00007EFC6CCDAB0Eh 0x00000015 pop ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007EFC6CCDAB17h 0x0000001d rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F70BDB second address: 4F70BE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F70BE1 second address: 4F70BE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F30568 second address: 4F3057F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDD3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F3057F second address: 4F30584 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F30584 second address: 4F305D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007EFC6CC3EDD5h 0x0000000a sbb esi, 5B62F4A6h 0x00000010 jmp 00007EFC6CC3EDD1h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 pop ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007EFC6CC3EDD8h 0x00000023 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F305D6 second address: 4F305DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F305DA second address: 4F305E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F208FA second address: 4F20900 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20900 second address: 4F20940 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, ah 0x00000005 pushfd 0x00000006 jmp 00007EFC6CC3EDD1h 0x0000000b and si, 33F6h 0x00000010 jmp 00007EFC6CC3EDD1h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007EFC6CC3EDCCh 0x00000021 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F70179 second address: 4F7017D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F7017D second address: 4F70183 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F70183 second address: 4F701BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007EFC6CCDAB0Ch 0x00000009 and cx, DFD8h 0x0000000e jmp 00007EFC6CCDAB0Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 pop ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007EFC6CCDAB15h 0x0000001f rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F701BF second address: 4F701CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFC6CC3EDCCh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F60EA7 second address: 4F60F15 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007EFC6CCDAB17h 0x00000008 pop eax 0x00000009 mov ebx, 7A51137Ch 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 pushad 0x00000013 mov di, cx 0x00000016 pushfd 0x00000017 jmp 00007EFC6CCDAB0Ch 0x0000001c sub ch, FFFFFF98h 0x0000001f jmp 00007EFC6CCDAB0Bh 0x00000024 popfd 0x00000025 popad 0x00000026 xchg eax, ebp 0x00000027 pushad 0x00000028 call 00007EFC6CCDAB14h 0x0000002d mov bl, ch 0x0000002f pop edx 0x00000030 mov ecx, 520617D3h 0x00000035 popad 0x00000036 mov ebp, esp 0x00000038 pushad 0x00000039 mov ebx, eax 0x0000003b push eax 0x0000003c push edx 0x0000003d mov di, si 0x00000040 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F60F15 second address: 4F60F4C instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007EFC6CC3EDCAh 0x00000008 or cl, 00000058h 0x0000000b jmp 00007EFC6CC3EDCBh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 popad 0x00000014 pop ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007EFC6CC3EDD5h 0x0000001c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F60F4C second address: 4F60F52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F30605 second address: 4F3060B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F3060B second address: 4F306C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007EFC6CCDAB0Ch 0x00000008 pop esi 0x00000009 pushfd 0x0000000a jmp 00007EFC6CCDAB0Bh 0x0000000f add cx, 429Eh 0x00000014 jmp 00007EFC6CCDAB19h 0x00000019 popfd 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d xchg eax, ebp 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007EFC6CCDAB0Ch 0x00000025 adc ax, 9498h 0x0000002a jmp 00007EFC6CCDAB0Bh 0x0000002f popfd 0x00000030 movzx esi, dx 0x00000033 popad 0x00000034 push eax 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 pushfd 0x00000039 jmp 00007EFC6CCDAB17h 0x0000003e xor ax, 3A0Eh 0x00000043 jmp 00007EFC6CCDAB19h 0x00000048 popfd 0x00000049 pushfd 0x0000004a jmp 00007EFC6CCDAB10h 0x0000004f xor al, FFFFFF88h 0x00000052 jmp 00007EFC6CCDAB0Bh 0x00000057 popfd 0x00000058 popad 0x00000059 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F306C9 second address: 4F306CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F306CF second address: 4F30716 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007EFC6CCDAB17h 0x0000000e mov ebp, esp 0x00000010 jmp 00007EFC6CCDAB16h 0x00000015 pop ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007EFC6CCDAB0Ah 0x0000001f rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F30716 second address: 4F30725 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDCBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F30725 second address: 4F3073A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007EFC6CCDAB0Fh 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F706A1 second address: 4F706CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDD0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f call 00007EFC6CC3EDCDh 0x00000014 pop esi 0x00000015 popad 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F706CA second address: 4F7072D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CCDAB0Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and dword ptr [eax], 00000000h 0x0000000c pushad 0x0000000d push ecx 0x0000000e mov dx, 23FEh 0x00000012 pop edx 0x00000013 pushfd 0x00000014 jmp 00007EFC6CCDAB14h 0x00000019 adc ah, FFFFFFC8h 0x0000001c jmp 00007EFC6CCDAB0Bh 0x00000021 popfd 0x00000022 popad 0x00000023 and dword ptr [eax+04h], 00000000h 0x00000027 jmp 00007EFC6CCDAB16h 0x0000002c pop ebp 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 mov bl, 1Eh 0x00000032 mov edx, esi 0x00000034 popad 0x00000035 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20845 second address: 4F2084F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 26E364A2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F60930 second address: 4F60936 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F7047E second address: 4F704AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDD9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007EFC6CC3EDCCh 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F704AA second address: 4F704D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CCDAB0Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007EFC6CCDAB16h 0x0000000f mov ebp, esp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F704D8 second address: 4F704DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F704DC second address: 4F704E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50937 second address: 4F5093D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F5093D second address: 4F50941 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50941 second address: 4F50945 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50945 second address: 4F509A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007EFC6CCDAB0Bh 0x0000000e mov ebp, esp 0x00000010 jmp 00007EFC6CCDAB16h 0x00000015 mov eax, dword ptr [ebp+08h] 0x00000018 jmp 00007EFC6CCDAB10h 0x0000001d and dword ptr [eax], 00000000h 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 pushfd 0x00000024 jmp 00007EFC6CCDAB0Ch 0x00000029 and cx, A898h 0x0000002e jmp 00007EFC6CCDAB0Bh 0x00000033 popfd 0x00000034 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F4043E second address: 4F4046B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDD9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b movzx ecx, bx 0x0000000e mov cx, dx 0x00000011 popad 0x00000012 push eax 0x00000013 pushad 0x00000014 pushad 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F4046B second address: 4F40496 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov cx, 4279h 0x00000009 popad 0x0000000a xchg eax, ebp 0x0000000b pushad 0x0000000c jmp 00007EFC6CCDAB12h 0x00000011 popad 0x00000012 mov ebp, esp 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 movsx edi, si 0x0000001a movzx ecx, dx 0x0000001d popad 0x0000001e rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F40496 second address: 4F404C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007EFC6CC3EDCAh 0x00000008 mov ecx, 3196A201h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov eax, dword ptr [ebp+08h] 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007EFC6CC3EDD3h 0x0000001a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F00181 second address: 4F0018B instructions: 0x00000000 rdtsc 0x00000002 mov dh, 0Dh 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 mov edx, eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F0018B second address: 4F00205 instructions: 0x00000000 rdtsc 0x00000002 mov ax, 4575h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007EFC6CC3EDD0h 0x00000011 mov ebp, esp 0x00000013 jmp 00007EFC6CC3EDD0h 0x00000018 and esp, FFFFFFF8h 0x0000001b pushad 0x0000001c push esi 0x0000001d jmp 00007EFC6CC3EDCDh 0x00000022 pop esi 0x00000023 mov ebx, 43AE37D4h 0x00000028 popad 0x00000029 push ebx 0x0000002a jmp 00007EFC6CC3EDD8h 0x0000002f mov dword ptr [esp], ecx 0x00000032 jmp 00007EFC6CC3EDD0h 0x00000037 xchg eax, ebx 0x00000038 push eax 0x00000039 push edx 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d popad 0x0000003e rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F00205 second address: 4F00209 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F00209 second address: 4F0020F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F0020F second address: 4F0022E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx ecx, di 0x00000006 mov bx, F332h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007EFC6CCDAB0Fh 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F0022E second address: 4F002C6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop esi 0x00000005 pushfd 0x00000006 jmp 00007EFC6CC3EDCBh 0x0000000b sub ax, A5DEh 0x00000010 jmp 00007EFC6CC3EDD9h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebx 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007EFC6CC3EDCCh 0x00000021 or eax, 4CC77DD8h 0x00000027 jmp 00007EFC6CC3EDCBh 0x0000002c popfd 0x0000002d mov ch, 4Ch 0x0000002f popad 0x00000030 mov ebx, dword ptr [ebp+10h] 0x00000033 jmp 00007EFC6CC3EDCBh 0x00000038 xchg eax, esi 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c pushfd 0x0000003d jmp 00007EFC6CC3EDCBh 0x00000042 sbb esi, 61F02D4Eh 0x00000048 jmp 00007EFC6CC3EDD9h 0x0000004d popfd 0x0000004e push esi 0x0000004f pop edi 0x00000050 popad 0x00000051 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F002C6 second address: 4F002E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFC6CCDAB18h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F002E2 second address: 4F0030D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDCBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f call 00007EFC6CC3EDD5h 0x00000014 pop ecx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F0030D second address: 4F003AD instructions: 0x00000000 rdtsc 0x00000002 movsx edi, cx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov bx, si 0x0000000a popad 0x0000000b xchg eax, esi 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007EFC6CCDAB12h 0x00000013 jmp 00007EFC6CCDAB15h 0x00000018 popfd 0x00000019 push ecx 0x0000001a pushfd 0x0000001b jmp 00007EFC6CCDAB17h 0x00000020 or cx, 402Eh 0x00000025 jmp 00007EFC6CCDAB19h 0x0000002a popfd 0x0000002b pop esi 0x0000002c popad 0x0000002d mov esi, dword ptr [ebp+08h] 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 mov ebx, esi 0x00000035 pushfd 0x00000036 jmp 00007EFC6CCDAB14h 0x0000003b add eax, 2A4510D8h 0x00000041 jmp 00007EFC6CCDAB0Bh 0x00000046 popfd 0x00000047 popad 0x00000048 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F003AD second address: 4F003B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F003B3 second address: 4F003B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F003B7 second address: 4F003D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a jmp 00007EFC6CC3EDCAh 0x0000000f mov bx, cx 0x00000012 popad 0x00000013 mov dword ptr [esp], edi 0x00000016 pushad 0x00000017 mov di, cx 0x0000001a push ecx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F003D9 second address: 4F0041B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 test esi, esi 0x00000008 jmp 00007EFC6CCDAB0Eh 0x0000000d je 00007EFCDEE18D2Ch 0x00000013 pushad 0x00000014 mov ecx, edx 0x00000016 popad 0x00000017 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000001e pushad 0x0000001f mov edi, 07A354C8h 0x00000024 mov ebx, 4BFCF574h 0x00000029 popad 0x0000002a je 00007EFCDEE18D25h 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 mov dx, si 0x00000036 mov ch, C2h 0x00000038 popad 0x00000039 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F0041B second address: 4F00421 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F00421 second address: 4F00447 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CCDAB14h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edx, dword ptr [esi+44h] 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push edi 0x00000012 pop ecx 0x00000013 movsx edx, ax 0x00000016 popad 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F00447 second address: 4F0047C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, 3634h 0x00000007 pushfd 0x00000008 jmp 00007EFC6CC3EDCDh 0x0000000d sub ah, FFFFFFF6h 0x00000010 jmp 00007EFC6CC3EDD1h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 or edx, dword ptr [ebp+0Ch] 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F0047C second address: 4F004EE instructions: 0x00000000 rdtsc 0x00000002 mov si, B7DFh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, 5B3EF2FBh 0x0000000d popad 0x0000000e test edx, 61000000h 0x00000014 jmp 00007EFC6CCDAB0Eh 0x00000019 jne 00007EFCDEE18CF0h 0x0000001f pushad 0x00000020 movzx esi, di 0x00000023 push edi 0x00000024 pushfd 0x00000025 jmp 00007EFC6CCDAB16h 0x0000002a xor cx, C0A8h 0x0000002f jmp 00007EFC6CCDAB0Bh 0x00000034 popfd 0x00000035 pop eax 0x00000036 popad 0x00000037 test byte ptr [esi+48h], 00000001h 0x0000003b pushad 0x0000003c movsx edi, cx 0x0000003f mov ebx, eax 0x00000041 popad 0x00000042 jne 00007EFCDEE18CC9h 0x00000048 pushad 0x00000049 mov bx, cx 0x0000004c push eax 0x0000004d push edx 0x0000004e mov cx, 9C87h 0x00000052 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20AB5 second address: 4F20B03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 xchg eax, ebp 0x00000007 jmp 00007EFC6CC3EDD4h 0x0000000c push eax 0x0000000d jmp 00007EFC6CC3EDCBh 0x00000012 xchg eax, ebp 0x00000013 jmp 00007EFC6CC3EDD6h 0x00000018 mov ebp, esp 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007EFC6CC3EDCAh 0x00000023 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20B03 second address: 4F20B12 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CCDAB0Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20C3E second address: 4F20C44 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20C44 second address: 4F20C72 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CCDAB0Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007EFC6CCDAB17h 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20C72 second address: 4F20C8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFC6CC3EDD4h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20C8A second address: 4F20CAC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, 00000000h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007EFC6CCDAB13h 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20CAC second address: 4F20CCE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007EFC6CC3EDCFh 0x00000008 pop eax 0x00000009 mov di, 82FCh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 test esi, esi 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20CCE second address: 4F20CD2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20CD2 second address: 4F20CD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20CD8 second address: 4F20D3F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007EFC6CCDAB15h 0x00000009 adc cl, 00000006h 0x0000000c jmp 00007EFC6CCDAB11h 0x00000011 popfd 0x00000012 push esi 0x00000013 pop edi 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 je 00007EFCDEDF0189h 0x0000001d jmp 00007EFC6CCDAB0Ah 0x00000022 cmp dword ptr [esi+08h], DDEEDDEEh 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c jmp 00007EFC6CCDAB19h 0x00000031 popad 0x00000032 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20D3F second address: 4F20D94 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDD1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, esi 0x0000000b jmp 00007EFC6CC3EDCEh 0x00000010 je 00007EFCDED54405h 0x00000016 jmp 00007EFC6CC3EDD0h 0x0000001b test byte ptr [770C6968h], 00000002h 0x00000022 pushad 0x00000023 mov cl, 8Eh 0x00000025 movsx ebx, si 0x00000028 popad 0x00000029 jne 00007EFCDED543F4h 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 popad 0x00000035 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20D94 second address: 4F20D98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20D98 second address: 4F20D9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20D9E second address: 4F20DD4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CCDAB16h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [ebp+0Ch] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007EFC6CCDAB17h 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20DD4 second address: 4F20E1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, dl 0x00000005 pushfd 0x00000006 jmp 00007EFC6CC3EDD0h 0x0000000b sub ah, FFFFFFB8h 0x0000000e jmp 00007EFC6CC3EDCBh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ebx 0x00000018 jmp 00007EFC6CC3EDD6h 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 mov dh, cl 0x00000023 mov dh, 52h 0x00000025 popad 0x00000026 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20E1C second address: 4F20E32 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CCDAB0Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20E32 second address: 4F20E36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20E36 second address: 4F20E3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20E3A second address: 4F20E40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20E40 second address: 4F20E46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20E46 second address: 4F20E4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20E4A second address: 4F20E6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 jmp 00007EFC6CCDAB10h 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20E6A second address: 4F20E6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20E6E second address: 4F20E72 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20E72 second address: 4F20E78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20E78 second address: 4F20EAC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, ecx 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 pushad 0x0000000a mov bh, cl 0x0000000c mov bx, 2838h 0x00000010 popad 0x00000011 push dword ptr [ebp+14h] 0x00000014 jmp 00007EFC6CCDAB17h 0x00000019 push dword ptr [ebp+10h] 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20EAC second address: 4F20EC7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDD7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20EC7 second address: 4F20ECD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20ECD second address: 4F20ED1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20ED1 second address: 4F20ED5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20EFF second address: 4F20F05 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20F05 second address: 4F20F0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20F0B second address: 4F20F0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F20F0F second address: 4F20F32 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 pushad 0x0000000a mov dx, cx 0x0000000d mov cl, EBh 0x0000000f popad 0x00000010 pop ebx 0x00000011 pushad 0x00000012 mov bl, 31h 0x00000014 push eax 0x00000015 push edx 0x00000016 call 00007EFC6CCDAB0Ch 0x0000001b pop ecx 0x0000001c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F200F4 second address: 4F200FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F200FA second address: 4F2010B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFC6CCDAB0Dh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F2010B second address: 4F2010F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F2010F second address: 4F2013F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007EFC6CCDAB0Dh 0x0000000e mov ebp, esp 0x00000010 jmp 00007EFC6CCDAB0Eh 0x00000015 pop ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 push edx 0x0000001a pop esi 0x0000001b movsx edi, si 0x0000001e popad 0x0000001f rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F2013F second address: 4F20151 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFC6CC3EDCEh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F10D8F second address: 4F10DC3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CCDAB0Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov edx, esi 0x0000000e mov ah, 52h 0x00000010 popad 0x00000011 pop ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007EFC6CCDAB17h 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F10DC3 second address: 4F10DC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F10DC7 second address: 4F10DCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F10DCD second address: 4F10DD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F10DD3 second address: 4F10DD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F90875 second address: 4F908AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, ah 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007EFC6CC3EDCAh 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007EFC6CC3EDCDh 0x0000001a jmp 00007EFC6CC3EDCBh 0x0000001f popfd 0x00000020 mov ecx, 2A3CAB8Fh 0x00000025 popad 0x00000026 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F8077B second address: 4F80795 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CCDAB16h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F80795 second address: 4F807A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFC6CC3EDCEh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F807A7 second address: 4F807AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F807AB second address: 4F807F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a mov ch, bl 0x0000000c push esi 0x0000000d pushad 0x0000000e popad 0x0000000f pop edx 0x00000010 popad 0x00000011 mov ebp, esp 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007EFC6CC3EDCCh 0x0000001a or si, 5A38h 0x0000001f jmp 00007EFC6CC3EDCBh 0x00000024 popfd 0x00000025 popad 0x00000026 pop ebp 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007EFC6CC3EDD0h 0x0000002e rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F2067D second address: 4F206B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CCDAB11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007EFC6CCDAB11h 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007EFC6CCDAB0Dh 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F206B4 second address: 4F206BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F206BA second address: 4F20715 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CCDAB13h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e mov bx, ax 0x00000011 pushfd 0x00000012 jmp 00007EFC6CCDAB10h 0x00000017 and ecx, 5CE2D178h 0x0000001d jmp 00007EFC6CCDAB0Bh 0x00000022 popfd 0x00000023 popad 0x00000024 pop ebp 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007EFC6CCDAB15h 0x0000002c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F809F4 second address: 4F80A50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, 628Dh 0x00000007 push ecx 0x00000008 pop edi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ebp, esp 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007EFC6CC3EDD1h 0x00000017 adc ch, 00000016h 0x0000001a jmp 00007EFC6CC3EDD1h 0x0000001f popfd 0x00000020 pushfd 0x00000021 jmp 00007EFC6CC3EDD0h 0x00000026 add ecx, 3B268038h 0x0000002c jmp 00007EFC6CC3EDCBh 0x00000031 popfd 0x00000032 popad 0x00000033 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F80A50 second address: 4F80ABB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007EFC6CCDAB12h 0x00000009 sub esi, 26A67A98h 0x0000000f jmp 00007EFC6CCDAB0Bh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push dword ptr [ebp+0Ch] 0x0000001b jmp 00007EFC6CCDAB16h 0x00000020 push dword ptr [ebp+08h] 0x00000023 pushad 0x00000024 mov eax, 47F8260Dh 0x00000029 mov dl, al 0x0000002b popad 0x0000002c call 00007EFC6CCDAB09h 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007EFC6CCDAB10h 0x00000038 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F80ABB second address: 4F80AC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F80AC1 second address: 4F80AC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F80AC5 second address: 4F80ADF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDCDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F80ADF second address: 4F80AF9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CCDAB16h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F80B8F second address: 4F80B93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F80B93 second address: 4F80B99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F80B99 second address: 4F80BFD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDD2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 movzx eax, al 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007EFC6CC3EDCDh 0x00000015 or si, A486h 0x0000001a jmp 00007EFC6CC3EDD1h 0x0000001f popfd 0x00000020 pushfd 0x00000021 jmp 00007EFC6CC3EDD0h 0x00000026 adc si, 8F28h 0x0000002b jmp 00007EFC6CC3EDCBh 0x00000030 popfd 0x00000031 popad 0x00000032 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B653D second address: 7B6549 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B6549 second address: 7B654F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B654F second address: 7B6554 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 7B687C second address: 7B689C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007EFC6CC3EDD5h 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50CF0 second address: 4F50D15 instructions: 0x00000000 rdtsc 0x00000002 mov bx, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 mov ecx, ebx 0x0000000a popad 0x0000000b popad 0x0000000c push ebp 0x0000000d pushad 0x0000000e mov cx, 6F4Dh 0x00000012 mov ecx, 4B5CB349h 0x00000017 popad 0x00000018 mov dword ptr [esp], ebp 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e mov bx, 2914h 0x00000022 mov ecx, edx 0x00000024 popad 0x00000025 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50DD3 second address: 4F50DD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50DD9 second address: 4F50DDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50DDD second address: 4F50DEC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov al, 4Eh 0x0000000e popad 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50DEC second address: 4F50E30 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, E1h 0x00000005 pushfd 0x00000006 jmp 00007EFC6CCDAB14h 0x0000000b adc al, 00000038h 0x0000000e jmp 00007EFC6CCDAB0Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, esi 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007EFC6CCDAB15h 0x0000001f rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50E30 second address: 4F50E55 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDD1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007EFC6CC3EDCDh 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50E55 second address: 4F50E8A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 03C2h 0x00000007 mov bx, 9A0Eh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jmp 00007EFC6CCDAB14h 0x00000014 xchg eax, edi 0x00000015 pushad 0x00000016 movzx esi, di 0x00000019 mov bx, 376Eh 0x0000001d popad 0x0000001e mov edi, dword ptr [ebp+08h] 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50E8A second address: 4F50F82 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007EFC6CC3EDD7h 0x00000008 sub eax, 7F6C04CEh 0x0000000e jmp 00007EFC6CC3EDD9h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 mov edi, esi 0x00000018 popad 0x00000019 mov dword ptr [esp+24h], 00000000h 0x00000021 jmp 00007EFC6CC3EDCAh 0x00000026 lock bts dword ptr [edi], 00000000h 0x0000002b pushad 0x0000002c pushfd 0x0000002d jmp 00007EFC6CC3EDCEh 0x00000032 sub cx, 2878h 0x00000037 jmp 00007EFC6CC3EDCBh 0x0000003c popfd 0x0000003d popad 0x0000003e jc 00007EFCDECD02F7h 0x00000044 pushad 0x00000045 pushfd 0x00000046 jmp 00007EFC6CC3EDCBh 0x0000004b sbb eax, 70B7983Eh 0x00000051 jmp 00007EFC6CC3EDD9h 0x00000056 popfd 0x00000057 pushfd 0x00000058 jmp 00007EFC6CC3EDD0h 0x0000005d jmp 00007EFC6CC3EDD5h 0x00000062 popfd 0x00000063 popad 0x00000064 pop edi 0x00000065 pushad 0x00000066 mov dx, ax 0x00000069 jmp 00007EFC6CC3EDD8h 0x0000006e popad 0x0000006f pop esi 0x00000070 push eax 0x00000071 push edx 0x00000072 push eax 0x00000073 push edx 0x00000074 pushad 0x00000075 popad 0x00000076 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50F82 second address: 4F50F88 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50F88 second address: 4F50F8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50F8E second address: 4F50F92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50AAF second address: 4F50AF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 2314h 0x00000007 call 00007EFC6CC3EDCDh 0x0000000c pop eax 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 xchg eax, esi 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushfd 0x00000015 jmp 00007EFC6CC3EDD6h 0x0000001a sub cx, 65F8h 0x0000001f jmp 00007EFC6CC3EDCBh 0x00000024 popfd 0x00000025 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50AF3 second address: 4F50B06 instructions: 0x00000000 rdtsc 0x00000002 mov eax, 4A311F2Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov esi, dword ptr [ebp+08h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50B06 second address: 4F50B0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50B0A second address: 4F50B10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50B10 second address: 4F50B6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CC3EDD6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ecx, ecx 0x0000000b pushad 0x0000000c call 00007EFC6CC3EDD7h 0x00000011 mov dl, al 0x00000013 pop edx 0x00000014 mov ebx, eax 0x00000016 popad 0x00000017 xchg eax, edi 0x00000018 jmp 00007EFC6CC3EDCCh 0x0000001d push eax 0x0000001e jmp 00007EFC6CC3EDCBh 0x00000023 xchg eax, edi 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50B6A second address: 4F50B6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50B6E second address: 4F50B74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50B74 second address: 4F50BDE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, ecx 0x00000005 pushfd 0x00000006 jmp 00007EFC6CCDAB14h 0x0000000b or esi, 33CC26A8h 0x00000011 jmp 00007EFC6CCDAB0Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov eax, 00000001h 0x0000001f pushad 0x00000020 mov dx, ax 0x00000023 mov dx, cx 0x00000026 popad 0x00000027 lock cmpxchg dword ptr [esi], ecx 0x0000002b pushad 0x0000002c movzx esi, bx 0x0000002f mov bx, 1908h 0x00000033 popad 0x00000034 mov ecx, eax 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 call 00007EFC6CCDAB18h 0x0000003e pop ecx 0x0000003f pushad 0x00000040 popad 0x00000041 popad 0x00000042 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50BDE second address: 4F50BE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50BE4 second address: 4F50C13 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFC6CCDAB18h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp ecx, 01h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007EFC6CCDAB0Ah 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50C13 second address: 4F50C17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50C17 second address: 4F50C1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\0Q6EWqWu4N.exe |
RDTSC instruction interceptor: First address: 4F50C1D second address: 4F50C23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
