Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D24ED second address: 9D24F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D24F3 second address: 9D24F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D24F7 second address: 9D24FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D24FD second address: 9D250A instructions: 0x00000000 rdtsc 0x00000002 je 00007F3070BEB5D8h 0x00000008 pushad 0x00000009 popad 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D250A second address: 9D2524 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F30707E4B3Fh 0x00000010 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D2524 second address: 9D252E instructions: 0x00000000 rdtsc 0x00000002 je 00007F3070BEB5F5h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9C4DD1 second address: 9C4DD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D150D second address: 9D1521 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push esi 0x00000006 jmp 00007F3070BEB5DBh 0x0000000b pushad 0x0000000c popad 0x0000000d pop esi 0x0000000e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D1521 second address: 9D153D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F30707E4B46h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D153D second address: 9D1541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D1541 second address: 9D1545 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D1688 second address: 9D1694 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jng 00007F3070BEB5D6h 0x0000000c rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D1846 second address: 9D185E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F30707E4B43h 0x00000009 popad 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D19A6 second address: 9D19AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D19AB second address: 9D19BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D19BF second address: 9D19C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D19C3 second address: 9D19F8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Ch 0x00000007 jp 00007F30707E4B36h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 pushad 0x00000012 jmp 00007F30707E4B43h 0x00000017 push ecx 0x00000018 push edi 0x00000019 pop edi 0x0000001a pushad 0x0000001b popad 0x0000001c pop ecx 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D19F8 second address: 9D19FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D1B3C second address: 9D1B60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 jmp 00007F30707E4B45h 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007F30707E4B36h 0x00000014 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D5BEB second address: 9D5C1B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5DAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b push esi 0x0000000c push eax 0x0000000d pushad 0x0000000e popad 0x0000000f pop eax 0x00000010 pop esi 0x00000011 nop 0x00000012 xor dword ptr [ebp+122D1940h], ebx 0x00000018 push 00000000h 0x0000001a mov edx, dword ptr [ebp+122D38C1h] 0x00000020 push CDEF103Bh 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 push esi 0x0000002a pop esi 0x0000002b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D5C1B second address: 9D5C25 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F30707E4B36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D5C25 second address: 9D5C8E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F3070BEB5DBh 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add dword ptr [esp], 3210F045h 0x00000012 or edi, dword ptr [ebp+122D3721h] 0x00000018 push 00000003h 0x0000001a mov dword ptr [ebp+122D1954h], eax 0x00000020 add dword ptr [ebp+122D17F3h], ecx 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push edx 0x0000002b call 00007F3070BEB5D8h 0x00000030 pop edx 0x00000031 mov dword ptr [esp+04h], edx 0x00000035 add dword ptr [esp+04h], 0000001Ah 0x0000003d inc edx 0x0000003e push edx 0x0000003f ret 0x00000040 pop edx 0x00000041 ret 0x00000042 mov cx, di 0x00000045 push 00000003h 0x00000047 mov esi, dword ptr [ebp+122D35CDh] 0x0000004d push B967C171h 0x00000052 pushad 0x00000053 push eax 0x00000054 push edx 0x00000055 jnl 00007F3070BEB5D6h 0x0000005b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D5C8E second address: 9D5D15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B45h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jbe 00007F30707E4B38h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 xor dword ptr [esp], 7967C171h 0x00000019 lea ebx, dword ptr [ebp+12450ABDh] 0x0000001f push 00000000h 0x00000021 push edi 0x00000022 call 00007F30707E4B38h 0x00000027 pop edi 0x00000028 mov dword ptr [esp+04h], edi 0x0000002c add dword ptr [esp+04h], 0000001Ch 0x00000034 inc edi 0x00000035 push edi 0x00000036 ret 0x00000037 pop edi 0x00000038 ret 0x00000039 mov dh, 22h 0x0000003b push ecx 0x0000003c sub dword ptr [ebp+122D1C4Dh], ecx 0x00000042 pop edi 0x00000043 xchg eax, ebx 0x00000044 pushad 0x00000045 pushad 0x00000046 pushad 0x00000047 popad 0x00000048 jmp 00007F30707E4B3Eh 0x0000004d popad 0x0000004e push eax 0x0000004f push edx 0x00000050 jmp 00007F30707E4B44h 0x00000055 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D5D83 second address: 9D5DC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop esi 0x00000006 push eax 0x00000007 push ecx 0x00000008 push ecx 0x00000009 jg 00007F3070BEB5D6h 0x0000000f pop ecx 0x00000010 pop ecx 0x00000011 nop 0x00000012 mov dword ptr [ebp+122D194Dh], edx 0x00000018 push 00000000h 0x0000001a mov dword ptr [ebp+122D18ECh], esi 0x00000020 push CF317A0Dh 0x00000025 pushad 0x00000026 jmp 00007F3070BEB5E8h 0x0000002b push ebx 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D5DC4 second address: 9D5E33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 add dword ptr [esp], 30CE8673h 0x0000000d pushad 0x0000000e call 00007F30707E4B3Ch 0x00000013 adc ah, FFFFFF9Eh 0x00000016 pop ebx 0x00000017 ja 00007F30707E4B3Bh 0x0000001d popad 0x0000001e push 00000003h 0x00000020 mov dword ptr [ebp+122DB734h], ebx 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push ebx 0x0000002b call 00007F30707E4B38h 0x00000030 pop ebx 0x00000031 mov dword ptr [esp+04h], ebx 0x00000035 add dword ptr [esp+04h], 00000014h 0x0000003d inc ebx 0x0000003e push ebx 0x0000003f ret 0x00000040 pop ebx 0x00000041 ret 0x00000042 mov dx, 0B79h 0x00000046 push 00000003h 0x00000048 sub edx, 0B50D8A6h 0x0000004e push 639FF20Fh 0x00000053 push eax 0x00000054 push edx 0x00000055 push ecx 0x00000056 jmp 00007F30707E4B3Ah 0x0000005b pop ecx 0x0000005c rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D5E33 second address: 9D5EA5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 5C600DF1h 0x00000011 push 00000000h 0x00000013 push edi 0x00000014 call 00007F3070BEB5D8h 0x00000019 pop edi 0x0000001a mov dword ptr [esp+04h], edi 0x0000001e add dword ptr [esp+04h], 00000017h 0x00000026 inc edi 0x00000027 push edi 0x00000028 ret 0x00000029 pop edi 0x0000002a ret 0x0000002b mov esi, edi 0x0000002d mov ch, bl 0x0000002f lea ebx, dword ptr [ebp+12450AC6h] 0x00000035 push 00000000h 0x00000037 push ecx 0x00000038 call 00007F3070BEB5D8h 0x0000003d pop ecx 0x0000003e mov dword ptr [esp+04h], ecx 0x00000042 add dword ptr [esp+04h], 00000018h 0x0000004a inc ecx 0x0000004b push ecx 0x0000004c ret 0x0000004d pop ecx 0x0000004e ret 0x0000004f sub si, 70C1h 0x00000054 add dx, A308h 0x00000059 mov si, di 0x0000005c push eax 0x0000005d push eax 0x0000005e push edx 0x0000005f push ebx 0x00000060 jnc 00007F3070BEB5D6h 0x00000066 pop ebx 0x00000067 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D5EA5 second address: 9D5EAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9D6001 second address: 9D6029 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F3070BEB5E3h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jnl 00007F3070BEB5EFh 0x00000012 push eax 0x00000013 push edx 0x00000014 js 00007F3070BEB5D6h 0x0000001a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9E6F73 second address: 9E6F77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9E6F77 second address: 9E6F7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F6489 second address: 9F64AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ecx 0x00000008 jmp 00007F30707E4B48h 0x0000000d pop ecx 0x0000000e pop ecx 0x0000000f pushad 0x00000010 push ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F64AF second address: 9F64B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F64B8 second address: 9F64BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F64BE second address: 9F64C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F4511 second address: 9F4531 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007F30707E4B49h 0x0000000b popad 0x0000000c rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F4531 second address: 9F4557 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3070BEB5DEh 0x00000008 jmp 00007F3070BEB5E3h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F4557 second address: 9F4562 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F4562 second address: 9F4578 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F3070BEB5D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d push ecx 0x0000000e jl 00007F3070BEB5D6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F46CB second address: 9F46CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F46CF second address: 9F46D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F46D7 second address: 9F46F6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jmp 00007F30707E4B42h 0x0000000a pop edi 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F46F6 second address: 9F472C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F3070BEB5D6h 0x0000000a jmp 00007F3070BEB5E3h 0x0000000f jmp 00007F3070BEB5E8h 0x00000014 popad 0x00000015 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F486E second address: 9F4893 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B49h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 pop esi 0x00000011 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F4893 second address: 9F48A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jmp 00007F3070BEB5DAh 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F4BCB second address: 9F4BD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F4BD4 second address: 9F4BD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F4BD8 second address: 9F4C0E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B45h 0x00000007 jmp 00007F30707E4B45h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 js 00007F30707E4B36h 0x00000016 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F4C0E second address: 9F4C12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F5006 second address: 9F5023 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 jg 00007F30707E4B46h 0x0000000d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F5152 second address: 9F5168 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F3070BEB5DCh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F52D7 second address: 9F52DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F52DB second address: 9F5302 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jg 00007F3070BEB5D8h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push edi 0x00000012 push ebx 0x00000013 jmp 00007F3070BEB5E2h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F558D second address: 9F55A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F30707E4B3Dh 0x0000000a push esi 0x0000000b pushad 0x0000000c popad 0x0000000d pop esi 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F55A9 second address: 9F55B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop ecx 0x00000007 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9E93E4 second address: 9E93FB instructions: 0x00000000 rdtsc 0x00000002 ja 00007F30707E4B42h 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9E93FB second address: 9E9401 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9C6895 second address: 9C68C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F30707E4B45h 0x00000009 pop ebx 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007F30707E4B3Dh 0x00000011 push ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9C68C1 second address: 9C68DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F3070BEB5D6h 0x0000000a pop ebx 0x0000000b pushad 0x0000000c je 00007F3070BEB5D6h 0x00000012 push edi 0x00000013 pop edi 0x00000014 jnl 00007F3070BEB5D6h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F6060 second address: 9F6064 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F6064 second address: 9F6083 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a jmp 00007F3070BEB5DEh 0x0000000f push edx 0x00000010 pop edx 0x00000011 pop ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F6083 second address: 9F6089 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F6089 second address: 9F608D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F608D second address: 9F6093 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9E93EE second address: 9E93F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9E93F4 second address: 9E93FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F632F second address: 9F6338 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F6338 second address: 9F6343 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F30707E4B36h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F7A8C second address: 9F7A90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F7A90 second address: 9F7AA9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pushad 0x0000000f popad 0x00000010 pop ecx 0x00000011 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F8B71 second address: 9F8B7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F3070BEB5D6h 0x0000000a popad 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F8B7C second address: 9F8B86 instructions: 0x00000000 rdtsc 0x00000002 je 00007F30707E4B3Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A03303 second address: A03313 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push edi 0x00000006 pop edi 0x00000007 pop edx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A03313 second address: A03319 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A03319 second address: A0331D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0331D second address: A03325 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A02751 second address: A0275E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jbe 00007F3070BEB5E6h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A028F4 second address: A028FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A028FA second address: A02908 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jp 00007F3070BEB5D6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A02A52 second address: A02A58 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9F72A9 second address: 9F72AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A02FA4 second address: A02FC0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jp 00007F30707E4B36h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A02FC0 second address: A02FC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A02FC6 second address: A02FCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A02FCE second address: A02FD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A03199 second address: A0319D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0319D second address: A031C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pushad 0x00000008 jg 00007F3070BEB5E8h 0x0000000e je 00007F3070BEB5D8h 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A031C9 second address: A031CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A031CF second address: A031D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A031D3 second address: A031D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A03AE8 second address: A03AF1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A03AF1 second address: A03B13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F30707E4B45h 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push eax 0x00000010 pop eax 0x00000011 pop eax 0x00000012 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A03B13 second address: A03B3F instructions: 0x00000000 rdtsc 0x00000002 jno 00007F3070BEB5EFh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A03B3F second address: A03B43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A03B43 second address: A03B47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A03B47 second address: A03B56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A03B56 second address: A03B66 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5DCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A03E8B second address: A03E8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A03E8F second address: A03EA7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0402E second address: A04034 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A04034 second address: A04039 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A04039 second address: A0403F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A046EF second address: A04727 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 push 00000000h 0x0000000b push ebx 0x0000000c call 00007F3070BEB5D8h 0x00000011 pop ebx 0x00000012 mov dword ptr [esp+04h], ebx 0x00000016 add dword ptr [esp+04h], 00000014h 0x0000001e inc ebx 0x0000001f push ebx 0x00000020 ret 0x00000021 pop ebx 0x00000022 ret 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 jo 00007F3070BEB5E0h 0x0000002c jmp 00007F3070BEB5DAh 0x00000031 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A04817 second address: A0481D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0481D second address: A04821 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A04821 second address: A0483A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c ja 00007F30707E4B36h 0x00000012 jo 00007F30707E4B36h 0x00000018 popad 0x00000019 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0483A second address: A0483F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0491E second address: A04924 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A04924 second address: A04928 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A04D05 second address: A04D0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A04D0B second address: A04D0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A04D0F second address: A04D4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b ja 00007F30707E4B3Ch 0x00000011 xchg eax, ebx 0x00000012 jmp 00007F30707E4B45h 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jne 00007F30707E4B3Ch 0x00000020 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A05228 second address: A05232 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F3070BEB5D6h 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A05C7E second address: A05C82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A05B53 second address: A05B6D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F3070BEB5DFh 0x00000010 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A05B6D second address: A05B73 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A06D4A second address: A06D50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A09A1A second address: A09A9D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007F30707E4B38h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 00000014h 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 mov esi, edi 0x00000028 mov edi, dword ptr [ebp+122D36FDh] 0x0000002e push 00000000h 0x00000030 je 00007F30707E4B3Ch 0x00000036 sub dword ptr [ebp+12478AC8h], esi 0x0000003c push 00000000h 0x0000003e push 00000000h 0x00000040 push edx 0x00000041 call 00007F30707E4B38h 0x00000046 pop edx 0x00000047 mov dword ptr [esp+04h], edx 0x0000004b add dword ptr [esp+04h], 00000014h 0x00000053 inc edx 0x00000054 push edx 0x00000055 ret 0x00000056 pop edx 0x00000057 ret 0x00000058 pushad 0x00000059 sub bx, 8DEBh 0x0000005e mov dword ptr [ebp+122D18BFh], ebx 0x00000064 popad 0x00000065 mov dword ptr [ebp+122D2465h], eax 0x0000006b mov edi, 46131807h 0x00000070 xchg eax, ebx 0x00000071 push edx 0x00000072 push eax 0x00000073 push edx 0x00000074 jc 00007F30707E4B36h 0x0000007a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A09A9D second address: A09ADD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d jmp 00007F3070BEB5DAh 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 pushad 0x00000016 jmp 00007F3070BEB5E4h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A080E4 second address: A080E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0A1A5 second address: A0A1D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3070BEB5E1h 0x00000008 jmp 00007F3070BEB5E3h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0A1D6 second address: A0A1DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0A1DA second address: A0A1E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0A1E0 second address: A0A1E5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0BFB9 second address: A0BFBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0BFBF second address: A0BFD3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9C842E second address: 9C844A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F3070BEB5DDh 0x0000000e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9C844A second address: 9C845F instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F30707E4B3Eh 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0AD55 second address: A0AD5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F3070BEB5D6h 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0E6C5 second address: A0E6CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0E6CB second address: A0E74F instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3070BEB5D8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F3070BEB5DAh 0x00000012 nop 0x00000013 jnl 00007F3070BEB5DBh 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push ecx 0x0000001e call 00007F3070BEB5D8h 0x00000023 pop ecx 0x00000024 mov dword ptr [esp+04h], ecx 0x00000028 add dword ptr [esp+04h], 00000015h 0x00000030 inc ecx 0x00000031 push ecx 0x00000032 ret 0x00000033 pop ecx 0x00000034 ret 0x00000035 call 00007F3070BEB5DCh 0x0000003a mov dword ptr [ebp+122D192Eh], edi 0x00000040 pop esi 0x00000041 push 00000000h 0x00000043 push 00000000h 0x00000045 push ebx 0x00000046 call 00007F3070BEB5D8h 0x0000004b pop ebx 0x0000004c mov dword ptr [esp+04h], ebx 0x00000050 add dword ptr [esp+04h], 00000016h 0x00000058 inc ebx 0x00000059 push ebx 0x0000005a ret 0x0000005b pop ebx 0x0000005c ret 0x0000005d mov si, 26CAh 0x00000061 push eax 0x00000062 push eax 0x00000063 push edx 0x00000064 jbe 00007F3070BEB5D8h 0x0000006a push ecx 0x0000006b pop ecx 0x0000006c rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1433E second address: A14344 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1368A second address: A1369B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jc 00007F3070BEB5D6h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1450F second address: A1459C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jl 00007F30707E4B3Ch 0x0000000b je 00007F30707E4B36h 0x00000011 popad 0x00000012 nop 0x00000013 jmp 00007F30707E4B43h 0x00000018 push dword ptr fs:[00000000h] 0x0000001f push 00000000h 0x00000021 push edx 0x00000022 call 00007F30707E4B38h 0x00000027 pop edx 0x00000028 mov dword ptr [esp+04h], edx 0x0000002c add dword ptr [esp+04h], 00000015h 0x00000034 inc edx 0x00000035 push edx 0x00000036 ret 0x00000037 pop edx 0x00000038 ret 0x00000039 movzx ebx, dx 0x0000003c mov dword ptr fs:[00000000h], esp 0x00000043 mov ebx, dword ptr [ebp+122D386Dh] 0x00000049 mov eax, dword ptr [ebp+122D003Dh] 0x0000004f mov ebx, 47AFDCD8h 0x00000054 push FFFFFFFFh 0x00000056 add edi, 7D573FFBh 0x0000005c sub dword ptr [ebp+122D2CF2h], edi 0x00000062 push eax 0x00000063 pushad 0x00000064 je 00007F30707E4B44h 0x0000006a jmp 00007F30707E4B3Eh 0x0000006f push eax 0x00000070 push edx 0x00000071 push eax 0x00000072 push edx 0x00000073 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1459C second address: A145A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A17251 second address: A1725B instructions: 0x00000000 rdtsc 0x00000002 jc 00007F30707E4B3Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A163C5 second address: A163CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A163CB second address: A163D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F30707E4B36h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A173C4 second address: A173C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A173C8 second address: A173CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A173CE second address: A17455 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5DEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov bl, 7Eh 0x0000000c push dword ptr fs:[00000000h] 0x00000013 push 00000000h 0x00000015 push ebx 0x00000016 call 00007F3070BEB5D8h 0x0000001b pop ebx 0x0000001c mov dword ptr [esp+04h], ebx 0x00000020 add dword ptr [esp+04h], 00000017h 0x00000028 inc ebx 0x00000029 push ebx 0x0000002a ret 0x0000002b pop ebx 0x0000002c ret 0x0000002d mov bx, D6A8h 0x00000031 mov di, 3E82h 0x00000035 mov dword ptr fs:[00000000h], esp 0x0000003c sub dword ptr [ebp+122D2294h], esi 0x00000042 mov eax, dword ptr [ebp+122D1085h] 0x00000048 jmp 00007F3070BEB5E0h 0x0000004d push FFFFFFFFh 0x0000004f pushad 0x00000050 mov bl, D8h 0x00000052 jp 00007F3070BEB5DCh 0x00000058 mov dword ptr [ebp+122D18A5h], edx 0x0000005e popad 0x0000005f push eax 0x00000060 push eax 0x00000061 push edx 0x00000062 push eax 0x00000063 push edx 0x00000064 jmp 00007F3070BEB5DAh 0x00000069 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A17455 second address: A1745B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A18440 second address: A18446 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1D42D second address: A1D43C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F30707E4B3Bh 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1E2E2 second address: A1E306 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jbe 00007F3070BEB5D6h 0x00000015 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1E306 second address: A1E310 instructions: 0x00000000 rdtsc 0x00000002 js 00007F30707E4B36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1C5CA second address: A1C5CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1E310 second address: A1E36E instructions: 0x00000000 rdtsc 0x00000002 jc 00007F30707E4B3Ch 0x00000008 ja 00007F30707E4B36h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push edx 0x00000014 call 00007F30707E4B38h 0x00000019 pop edx 0x0000001a mov dword ptr [esp+04h], edx 0x0000001e add dword ptr [esp+04h], 0000001Bh 0x00000026 inc edx 0x00000027 push edx 0x00000028 ret 0x00000029 pop edx 0x0000002a ret 0x0000002b stc 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 pushad 0x00000031 cld 0x00000032 mov bh, dl 0x00000034 popad 0x00000035 xchg eax, esi 0x00000036 jmp 00007F30707E4B45h 0x0000003b push eax 0x0000003c push edi 0x0000003d push eax 0x0000003e push edx 0x0000003f jl 00007F30707E4B36h 0x00000045 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1A517 second address: A1A530 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5DFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1A530 second address: A1A537 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1A537 second address: A1A5B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push esi 0x0000000a mov dword ptr [ebp+122D2B25h], ebx 0x00000010 pop ebx 0x00000011 push dword ptr fs:[00000000h] 0x00000018 call 00007F3070BEB5E4h 0x0000001d push edi 0x0000001e mov dword ptr [ebp+12462F8Eh], eax 0x00000024 pop ebx 0x00000025 pop edi 0x00000026 mov dword ptr fs:[00000000h], esp 0x0000002d sub dword ptr [ebp+1247830Fh], edx 0x00000033 mov eax, dword ptr [ebp+122D056Dh] 0x00000039 jmp 00007F3070BEB5E0h 0x0000003e push FFFFFFFFh 0x00000040 mov bx, 1E80h 0x00000044 mov dword ptr [ebp+122D2492h], edx 0x0000004a nop 0x0000004b push eax 0x0000004c push edx 0x0000004d push eax 0x0000004e push edx 0x0000004f jmp 00007F3070BEB5E3h 0x00000054 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1A5B3 second address: A1A5B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1F4F6 second address: A1F505 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 pushad 0x00000007 jc 00007F3070BEB5DCh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1A5B7 second address: A1A5BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1F505 second address: A1F511 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jnl 00007F3070BEB5D6h 0x0000000c rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A205CA second address: A205CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A205CF second address: A205D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A24E54 second address: A24E74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F30707E4B49h 0x0000000c rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A24E74 second address: A24E78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A28373 second address: A28379 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A28379 second address: A2837F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A2837F second address: A283A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B46h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jbe 00007F30707E4B4Dh 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A2C822 second address: A2C84B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3070BEB5E7h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d je 00007F3070BEB5D6h 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A2C84B second address: A2C850 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A32E7F second address: A32EC2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push ecx 0x0000000e jg 00007F3070BEB5D8h 0x00000014 push edx 0x00000015 pop edx 0x00000016 pop ecx 0x00000017 mov eax, dword ptr [eax] 0x00000019 push eax 0x0000001a push ecx 0x0000001b push edx 0x0000001c pop edx 0x0000001d pop ecx 0x0000001e pop eax 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 jg 00007F3070BEB5D6h 0x0000002c push esi 0x0000002d pop esi 0x0000002e popad 0x0000002f rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A32F7C second address: A32F86 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F30707E4B3Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A33104 second address: 8589E2 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F3070BEB5D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edx 0x0000000c pop edx 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 popad 0x00000011 xor dword ptr [esp], 67837021h 0x00000018 jmp 00007F3070BEB5E7h 0x0000001d push dword ptr [ebp+122D0009h] 0x00000023 jmp 00007F3070BEB5E3h 0x00000028 call dword ptr [ebp+122D182Eh] 0x0000002e pushad 0x0000002f xor dword ptr [ebp+122D2459h], edx 0x00000035 jmp 00007F3070BEB5E1h 0x0000003a xor eax, eax 0x0000003c jmp 00007F3070BEB5E6h 0x00000041 mov edx, dword ptr [esp+28h] 0x00000045 cld 0x00000046 mov dword ptr [ebp+122D3579h], eax 0x0000004c jp 00007F3070BEB5E1h 0x00000052 mov esi, 0000003Ch 0x00000057 jmp 00007F3070BEB5DFh 0x0000005c clc 0x0000005d add esi, dword ptr [esp+24h] 0x00000061 mov dword ptr [ebp+122D2459h], ecx 0x00000067 lodsw 0x00000069 sub dword ptr [ebp+122D2459h], esi 0x0000006f add eax, dword ptr [esp+24h] 0x00000073 pushad 0x00000074 mov esi, dword ptr [ebp+122D37ADh] 0x0000007a and esi, 5E453B8Fh 0x00000080 popad 0x00000081 mov ebx, dword ptr [esp+24h] 0x00000085 jmp 00007F3070BEB5E9h 0x0000008a nop 0x0000008b push eax 0x0000008c push edx 0x0000008d push edi 0x0000008e push edi 0x0000008f pop edi 0x00000090 pop edi 0x00000091 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A38399 second address: A3839D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A3839D second address: A383A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A383A3 second address: A383BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F30707E4B3Bh 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A383BA second address: A383C0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A383C0 second address: A383CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A383CA second address: A383D4 instructions: 0x00000000 rdtsc 0x00000002 js 00007F3070BEB5D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0A1A1 second address: A0A1A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A389EB second address: A389F1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A389F1 second address: A389F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A389F7 second address: A38A08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3070BEB5DDh 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A38A08 second address: A38A15 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c pop edx 0x0000000d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A38C8F second address: A38CA0 instructions: 0x00000000 rdtsc 0x00000002 je 00007F3070BEB5DCh 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A38DD1 second address: A38DEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 jmp 00007F30707E4B3Fh 0x0000000b push esi 0x0000000c pop esi 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A394CD second address: A394D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A394D1 second address: A394FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B49h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b js 00007F30707E4B3Ch 0x00000011 jbe 00007F30707E4B36h 0x00000017 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9CD337 second address: 9CD34A instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3070BEB5DAh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9CD34A second address: 9CD358 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9CD358 second address: 9CD360 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9CD360 second address: 9CD365 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9CD365 second address: 9CD36F instructions: 0x00000000 rdtsc 0x00000002 js 00007F3070BEB5DEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A43B06 second address: A43B0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A43EEC second address: A43EF7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jbe 00007F3070BEB5D6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A441BF second address: A441C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A441C5 second address: A4420A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5E8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f pop edx 0x00000010 jnp 00007F3070BEB5DCh 0x00000016 pushad 0x00000017 jns 00007F3070BEB5D6h 0x0000001d jmp 00007F3070BEB5DDh 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A4434C second address: A44350 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A44350 second address: A44360 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5DAh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A4447C second address: A44483 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A44483 second address: A44489 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A44489 second address: A4449A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F30707E4B36h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A4449A second address: A4449E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A4496E second address: A44989 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F30707E4B45h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A43702 second address: A43708 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A43708 second address: A4370C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A4370C second address: A43725 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5E5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A486A8 second address: A486B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0F821 second address: A0F825 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0F825 second address: A0F82F instructions: 0x00000000 rdtsc 0x00000002 jl 00007F30707E4B36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0F82F second address: A0F878 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F3070BEB5DEh 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e clc 0x0000000f lea eax, dword ptr [ebp+1248A577h] 0x00000015 jmp 00007F3070BEB5E3h 0x0000001a nop 0x0000001b jmp 00007F3070BEB5E0h 0x00000020 push eax 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0F878 second address: A0F887 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0F887 second address: 9E93E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3070BEB5DBh 0x00000008 jmp 00007F3070BEB5E8h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 nop 0x00000011 call 00007F3070BEB5DBh 0x00000016 mov dword ptr [ebp+1247B02Eh], esi 0x0000001c pop ecx 0x0000001d call dword ptr [ebp+122D341Eh] 0x00000023 push eax 0x00000024 push edx 0x00000025 push edi 0x00000026 jnc 00007F3070BEB5D6h 0x0000002c pop edi 0x0000002d push edi 0x0000002e push edx 0x0000002f pop edx 0x00000030 jmp 00007F3070BEB5E3h 0x00000035 pop edi 0x00000036 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0F969 second address: A0F96D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0FDE2 second address: A0FDE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0FE8C second address: A0FE90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0FE90 second address: A0FE94 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A0FE94 second address: A0FE9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1001F second address: A1006F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, esi 0x00000008 push 00000000h 0x0000000a push esi 0x0000000b call 00007F3070BEB5D8h 0x00000010 pop esi 0x00000011 mov dword ptr [esp+04h], esi 0x00000015 add dword ptr [esp+04h], 0000001Bh 0x0000001d inc esi 0x0000001e push esi 0x0000001f ret 0x00000020 pop esi 0x00000021 ret 0x00000022 nop 0x00000023 jmp 00007F3070BEB5E9h 0x00000028 push eax 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d jc 00007F3070BEB5D6h 0x00000033 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1006F second address: A1008B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B48h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A1008B second address: A10091 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A10091 second address: A10095 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A10147 second address: A10155 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edi 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A10155 second address: A10198 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B41h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F30707E4B40h 0x0000000e popad 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 jp 00007F30707E4B3Eh 0x00000019 mov eax, dword ptr [eax] 0x0000001b jc 00007F30707E4B3Eh 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A10AFE second address: A10B04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A10B04 second address: A10B17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c ja 00007F30707E4B36h 0x00000012 popad 0x00000013 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A10B17 second address: 9E9F3C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007F3070BEB5D6h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e nop 0x0000000f xor cx, A4CCh 0x00000014 call dword ptr [ebp+122D18BAh] 0x0000001a jne 00007F3070BEB5FEh 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 push ebx 0x00000024 pop ebx 0x00000025 push ebx 0x00000026 pop ebx 0x00000027 push ecx 0x00000028 pop ecx 0x00000029 popad 0x0000002a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A48980 second address: A489AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 pushad 0x0000000a jmp 00007F30707E4B49h 0x0000000f jg 00007F30707E4B36h 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 popad 0x00000018 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A4ECD5 second address: A4ECDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A4ECDB second address: A4ECE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jg 00007F30707E4B36h 0x0000000c pop esi 0x0000000d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A4E52F second address: A4E573 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3070BEB5DEh 0x00000009 jmp 00007F3070BEB5E6h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F3070BEB5E7h 0x00000018 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A51772 second address: A51776 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A51776 second address: A51785 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jl 00007F3070BEB5D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A51785 second address: A517A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F30707E4B36h 0x0000000a jmp 00007F30707E4B43h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A517A7 second address: A517B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F3070BEB5D6h 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A53ACC second address: A53ADE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jmp 00007F30707E4B3Bh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 9BC879 second address: 9BC889 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jne 00007F3070BEB5D6h 0x00000010 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A536EC second address: A536F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A536F7 second address: A536FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A56A16 second address: A56A35 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007F30707E4B45h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A56A35 second address: A56A39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A5648D second address: A5649F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pushad 0x0000000a popad 0x0000000b jc 00007F30707E4B36h 0x00000011 popad 0x00000012 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A56708 second address: A5670C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A5670C second address: A5672C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F30707E4B3Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F30707E4B3Dh 0x00000012 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A5672C second address: A56730 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A56730 second address: A56738 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A56738 second address: A5673E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A5673E second address: A56742 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A56742 second address: A56764 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5DEh 0x00000007 jnc 00007F3070BEB5D6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jo 00007F3070BEB5D6h 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A5AA13 second address: A5AA32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F30707E4B36h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d jmp 00007F30707E4B42h 0x00000012 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A5AA32 second address: A5AA37 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A5AB75 second address: A5AB79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A5AB79 second address: A5AB88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F3070BEB5D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A5AB88 second address: A5ABA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 ja 00007F30707E4B36h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F30707E4B3Bh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A5ABA4 second address: A5ABA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A5ABA8 second address: A5ABAC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A5AD11 second address: A5AD19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A5F777 second address: A5F77D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A5F77D second address: A5F781 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A5F781 second address: A5F7B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Ah 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F30707E4B45h 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 pushad 0x00000014 popad 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 popad 0x00000018 pushad 0x00000019 jng 00007F30707E4B36h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A10547 second address: A105CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5E0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov ebx, dword ptr [ebp+1248A5B6h] 0x00000012 push 00000000h 0x00000014 push esi 0x00000015 call 00007F3070BEB5D8h 0x0000001a pop esi 0x0000001b mov dword ptr [esp+04h], esi 0x0000001f add dword ptr [esp+04h], 00000019h 0x00000027 inc esi 0x00000028 push esi 0x00000029 ret 0x0000002a pop esi 0x0000002b ret 0x0000002c add eax, ebx 0x0000002e push 00000000h 0x00000030 push ebx 0x00000031 call 00007F3070BEB5D8h 0x00000036 pop ebx 0x00000037 mov dword ptr [esp+04h], ebx 0x0000003b add dword ptr [esp+04h], 00000015h 0x00000043 inc ebx 0x00000044 push ebx 0x00000045 ret 0x00000046 pop ebx 0x00000047 ret 0x00000048 sub dword ptr [ebp+124695F8h], eax 0x0000004e push eax 0x0000004f jl 00007F3070BEB5DAh 0x00000055 mov dword ptr [esp], eax 0x00000058 or dword ptr [ebp+122D2C16h], edx 0x0000005e push 00000004h 0x00000060 push edi 0x00000061 mov ch, D4h 0x00000063 pop edx 0x00000064 push eax 0x00000065 push ebx 0x00000066 push eax 0x00000067 push edx 0x00000068 jne 00007F3070BEB5D6h 0x0000006e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A105CE second address: A105D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A60187 second address: A601B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3070BEB5E0h 0x00000009 jmp 00007F3070BEB5E7h 0x0000000e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A601B2 second address: A601C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jno 00007F30707E4B36h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A601C4 second address: A601C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A60C8E second address: A60C97 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A6475F second address: A64770 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3070BEB5DAh 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A64770 second address: A6477C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F30707E4B36h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A6477C second address: A64782 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A648E3 second address: A648E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A648E7 second address: A64912 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 pushad 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d jo 00007F3070BEB5D6h 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F3070BEB5E5h 0x0000001b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A64B72 second address: A64BAB instructions: 0x00000000 rdtsc 0x00000002 jns 00007F30707E4B3Ah 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jne 00007F30707E4B3Ch 0x00000011 pushad 0x00000012 push esi 0x00000013 pop esi 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 jmp 00007F30707E4B47h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A64BAB second address: A64BB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A64BB4 second address: A64BBA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A6AE88 second address: A6AE93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F3070BEB5D6h 0x0000000a pop ebx 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A6AE93 second address: A6AEC0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B44h 0x00000007 jmp 00007F30707E4B41h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A6B055 second address: A6B084 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3070BEB5E9h 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F3070BEB5E2h 0x0000000f rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A6B344 second address: A6B348 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A6B61A second address: A6B634 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3070BEB5E6h 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A6B634 second address: A6B649 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F30707E4B3Dh 0x0000000d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A6B649 second address: A6B660 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F3070BEB5E2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A6B9DD second address: A6B9E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A6BCE1 second address: A6BCEB instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F3070BEB5DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A6BCEB second address: A6BCF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A6C51E second address: A6C522 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A6C522 second address: A6C526 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A768E8 second address: A768FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jbe 00007F3070BEB5D6h 0x0000000f jnc 00007F3070BEB5D6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A768FF second address: A76919 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jno 00007F30707E4B38h 0x0000000b popad 0x0000000c jl 00007F30707E4B50h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A75A21 second address: A75A27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A75B67 second address: A75B6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A75B6D second address: A75B95 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jnp 00007F3070BEB5D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F3070BEB5E9h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A76019 second address: A7601D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A761CE second address: A761D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A761D2 second address: A761D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A761D6 second address: A761DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A761DC second address: A761E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A765EE second address: A7660A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3070BEB5E8h 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A804FA second address: A8050B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jnc 00007F30707E4B36h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A8050B second address: A8050F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A8050F second address: A80523 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B40h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A80523 second address: A8053B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3070BEB5E4h 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A8053B second address: A80549 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F30707E4B36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A80549 second address: A8054D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A8054D second address: A80591 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B41h 0x00000007 jg 00007F30707E4B36h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F30707E4B43h 0x00000018 jmp 00007F30707E4B42h 0x0000001d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A7EB14 second address: A7EB1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A7EF34 second address: A7EF38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A7EF38 second address: A7EF3E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A7EF3E second address: A7EF72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 jmp 00007F30707E4B47h 0x0000000c pop edx 0x0000000d pushad 0x0000000e jmp 00007F30707E4B3Eh 0x00000013 push eax 0x00000014 push edx 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A7F0CE second address: A7F0D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A7F0D3 second address: A7F0FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F30707E4B49h 0x00000009 jno 00007F30707E4B36h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A7F0FD second address: A7F107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F3070BEB5D6h 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A7F107 second address: A7F10D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A7F3CF second address: A7F3D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A7FC72 second address: A7FC76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A803AF second address: A803B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A86C78 second address: A86C9D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F30707E4B49h 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jnl 00007F30707E4B36h 0x00000011 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A86C9D second address: A86CA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A86DFC second address: A86E02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A9484E second address: A94852 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A98B8F second address: A98B9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F30707E4B3Ah 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A98B9D second address: A98BA8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A9D2DD second address: A9D2E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A9D2E3 second address: A9D345 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F3070BEB5E8h 0x0000000b pop ebx 0x0000000c pushad 0x0000000d jmp 00007F3070BEB5DEh 0x00000012 jmp 00007F3070BEB5E8h 0x00000017 push eax 0x00000018 push edx 0x00000019 jbe 00007F3070BEB5D6h 0x0000001f jmp 00007F3070BEB5E4h 0x00000024 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A9D345 second address: A9D34B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: A9D34B second address: A9D355 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AA03AB second address: AA03C8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B45h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AA03C8 second address: AA03CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AA03CC second address: AA03FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 je 00007F30707E4B36h 0x0000000d js 00007F30707E4B36h 0x00000013 pop ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F30707E4B49h 0x0000001b push esi 0x0000001c pop esi 0x0000001d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AA6796 second address: AA679C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AA679C second address: AA67A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AA67A8 second address: AA67B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AA67B1 second address: AA67B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AAE1F6 second address: AAE212 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5E8h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AAE212 second address: AAE21B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AAEADC second address: AAEAE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jo 00007F3070BEB5D6h 0x0000000c rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AAEAE8 second address: AAEAF0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AB0E2E second address: AB0E34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AB0E34 second address: AB0E3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AB0E3A second address: AB0E43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AB0E43 second address: AB0E4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 ja 00007F30707E4B36h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AB41D0 second address: AB41E4 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3070BEB5D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jng 00007F3070BEB5D6h 0x00000013 popad 0x00000014 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AB41E4 second address: AB41F7 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F30707E4B3Eh 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AB6339 second address: AB634E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3070BEB5DCh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AB634E second address: AB6352 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AD139B second address: AD13A1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: ACC560 second address: ACC564 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: ADF682 second address: ADF68C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: ADF68C second address: ADF690 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: ADF690 second address: ADF6D8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F3070BEB5E9h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jl 00007F3070BEB5F6h 0x00000014 jmp 00007F3070BEB5E6h 0x00000019 jmp 00007F3070BEB5DAh 0x0000001e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: ADF6D8 second address: ADF6DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: ADF6DE second address: ADF6E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: ADF4EC second address: ADF509 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F30707E4B48h 0x00000009 popad 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: ADF509 second address: ADF50E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: ADF50E second address: ADF519 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AE2090 second address: AE20B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F3070BEB5E5h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jo 00007F3070BEB5D6h 0x00000013 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: AE3949 second address: AE3972 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F30707E4B44h 0x0000000d jmp 00007F30707E4B3Dh 0x00000012 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B250D7 second address: B250DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B250DD second address: B250E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B250E1 second address: B250F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 ja 00007F3070BEB5D6h 0x0000000d pop ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B250F3 second address: B250F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B25278 second address: B25280 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B25280 second address: B25285 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B253F0 second address: B253F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B25C33 second address: B25C52 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F30707E4B43h 0x00000011 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B25C52 second address: B25C58 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B2883B second address: B2885F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007F30707E4B47h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B2885F second address: B28863 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B28A73 second address: B28A89 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F30707E4B3Ch 0x0000000f rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B28A89 second address: B28A8F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B28A8F second address: B28B43 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov dl, 2Eh 0x0000000b push 00000004h 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007F30707E4B38h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 00000017h 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 jmp 00007F30707E4B41h 0x0000002c call 00007F30707E4B39h 0x00000031 push ecx 0x00000032 jg 00007F30707E4B3Ch 0x00000038 pop ecx 0x00000039 push eax 0x0000003a pushad 0x0000003b push edi 0x0000003c jmp 00007F30707E4B45h 0x00000041 pop edi 0x00000042 jng 00007F30707E4B3Ch 0x00000048 jne 00007F30707E4B36h 0x0000004e popad 0x0000004f mov eax, dword ptr [esp+04h] 0x00000053 ja 00007F30707E4B53h 0x00000059 mov eax, dword ptr [eax] 0x0000005b push eax 0x0000005c push edx 0x0000005d jmp 00007F30707E4B3Fh 0x00000062 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B28DC0 second address: B28E18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 push 00000000h 0x0000000a push edx 0x0000000b call 00007F3070BEB5D8h 0x00000010 pop edx 0x00000011 mov dword ptr [esp+04h], edx 0x00000015 add dword ptr [esp+04h], 00000019h 0x0000001d inc edx 0x0000001e push edx 0x0000001f ret 0x00000020 pop edx 0x00000021 ret 0x00000022 mov dword ptr [ebp+122D1EB2h], edi 0x00000028 push dword ptr [ebp+122D2A15h] 0x0000002e xor dword ptr [ebp+122D2B9Eh], esi 0x00000034 call 00007F3070BEB5D9h 0x00000039 jne 00007F3070BEB5DEh 0x0000003f push eax 0x00000040 pushad 0x00000041 push eax 0x00000042 push edx 0x00000043 push ebx 0x00000044 pop ebx 0x00000045 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B28E18 second address: B28E35 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F30707E4B36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b pushad 0x0000000c popad 0x0000000d pop ebx 0x0000000e popad 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push eax 0x00000014 push edx 0x00000015 push edx 0x00000016 ja 00007F30707E4B36h 0x0000001c pop edx 0x0000001d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B28E35 second address: B28E3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F3070BEB5D6h 0x0000000a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B28E3F second address: B28E4F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a pushad 0x0000000b pushad 0x0000000c push edx 0x0000000d pop edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: B2BC22 second address: B2BC26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51D010C second address: 51D0112 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51D0112 second address: 51D0116 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51D0116 second address: 51D011A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51D011A second address: 51D0165 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b pushad 0x0000000c mov ax, 8DA5h 0x00000010 pushfd 0x00000011 jmp 00007F3070BEB5E2h 0x00000016 or ax, 54B8h 0x0000001b jmp 00007F3070BEB5DBh 0x00000020 popfd 0x00000021 popad 0x00000022 popad 0x00000023 pop ebp 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F3070BEB5E0h 0x0000002d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51D0165 second address: 51D0169 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51D0169 second address: 51D016F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1CFB second address: 51B1D2D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, F5h 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b jmp 00007F30707E4B46h 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F30707E4B3Eh 0x00000018 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1D2D second address: 51B1D3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3070BEB5DEh 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1D3F second address: 51B1D65 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F30707E4B40h 0x00000015 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1D65 second address: 51B1D74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1D74 second address: 51B1D7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1D7A second address: 51B1D7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1D7E second address: 51B1D82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1E3C second address: 51B1E40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1E40 second address: 51B1E53 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1E53 second address: 51B1E59 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0045 second address: 51B004B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B004B second address: 51B007E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F3070BEB5DFh 0x0000000f mov eax, dword ptr fs:[00000030h] 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F3070BEB5E0h 0x0000001e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B007E second address: 51B008D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B021B second address: 51B022A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B022A second address: 51B02CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F30707E4B3Fh 0x00000009 jmp 00007F30707E4B43h 0x0000000e popfd 0x0000000f mov dx, ax 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 xchg eax, edi 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F30707E4B40h 0x0000001d sbb eax, 6B498C38h 0x00000023 jmp 00007F30707E4B3Bh 0x00000028 popfd 0x00000029 movzx esi, dx 0x0000002c popad 0x0000002d push eax 0x0000002e pushad 0x0000002f pushfd 0x00000030 jmp 00007F30707E4B40h 0x00000035 xor esi, 4D3F8698h 0x0000003b jmp 00007F30707E4B3Bh 0x00000040 popfd 0x00000041 mov eax, 572FB44Fh 0x00000046 popad 0x00000047 xchg eax, edi 0x00000048 jmp 00007F30707E4B42h 0x0000004d call dword ptr [76880B60h] 0x00000053 mov eax, 7709E5E0h 0x00000058 ret 0x00000059 push eax 0x0000005a push edx 0x0000005b push eax 0x0000005c push edx 0x0000005d pushad 0x0000005e popad 0x0000005f rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B02CA second address: 51B02E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B02E7 second address: 51B02ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B02ED second address: 51B02FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 00000044h 0x0000000a pushad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B02FB second address: 51B0346 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F30707E4B41h 0x0000000a adc ecx, 4C2F2EF6h 0x00000010 jmp 00007F30707E4B41h 0x00000015 popfd 0x00000016 popad 0x00000017 popad 0x00000018 pop edi 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F30707E4B48h 0x00000020 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0346 second address: 51B0358 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3070BEB5DEh 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0358 second address: 51B03BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov dx, si 0x0000000d call 00007F30707E4B46h 0x00000012 pushfd 0x00000013 jmp 00007F30707E4B42h 0x00000018 add esi, 12942408h 0x0000001e jmp 00007F30707E4B3Bh 0x00000023 popfd 0x00000024 pop esi 0x00000025 popad 0x00000026 mov dword ptr [esp], edi 0x00000029 pushad 0x0000002a jmp 00007F30707E4B45h 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 popad 0x00000033 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B03BF second address: 51B040A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push dword ptr [eax] 0x00000009 jmp 00007F3070BEB5E6h 0x0000000e mov eax, dword ptr fs:[00000030h] 0x00000014 jmp 00007F3070BEB5E0h 0x00000019 push dword ptr [eax+18h] 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f call 00007F3070BEB5DDh 0x00000024 pop esi 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B040A second address: 51B040F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B040F second address: 51B0426 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3070BEB5E3h 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B045A second address: 51B04B3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B41h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F30707E4B3Ch 0x00000012 and cl, 00000048h 0x00000015 jmp 00007F30707E4B3Bh 0x0000001a popfd 0x0000001b jmp 00007F30707E4B48h 0x00000020 popad 0x00000021 je 00007F30E1E63D37h 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c popad 0x0000002d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B04B3 second address: 51B04B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B04B9 second address: 51B0579 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B44h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub eax, eax 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F30707E4B47h 0x00000012 xor ax, 674Eh 0x00000017 jmp 00007F30707E4B49h 0x0000001c popfd 0x0000001d call 00007F30707E4B40h 0x00000022 pushfd 0x00000023 jmp 00007F30707E4B42h 0x00000028 or ax, 56F8h 0x0000002d jmp 00007F30707E4B3Bh 0x00000032 popfd 0x00000033 pop eax 0x00000034 popad 0x00000035 mov dword ptr [esi], edi 0x00000037 pushad 0x00000038 mov bl, 6Eh 0x0000003a mov al, 16h 0x0000003c popad 0x0000003d mov dword ptr [esi+04h], eax 0x00000040 pushad 0x00000041 push ebx 0x00000042 mov ch, 82h 0x00000044 pop ebx 0x00000045 mov ebx, eax 0x00000047 popad 0x00000048 mov dword ptr [esi+08h], eax 0x0000004b pushad 0x0000004c movzx eax, di 0x0000004f mov esi, ebx 0x00000051 popad 0x00000052 mov dword ptr [esi+0Ch], eax 0x00000055 push eax 0x00000056 push edx 0x00000057 jmp 00007F30707E4B46h 0x0000005c rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0579 second address: 51B057F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B057F second address: 51B0583 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0583 second address: 51B0587 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0587 second address: 51B0619 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [ebx+4Ch] 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F30707E4B3Fh 0x00000012 sub ecx, 1C1D7A2Eh 0x00000018 jmp 00007F30707E4B49h 0x0000001d popfd 0x0000001e pushfd 0x0000001f jmp 00007F30707E4B40h 0x00000024 or ch, FFFFFFA8h 0x00000027 jmp 00007F30707E4B3Bh 0x0000002c popfd 0x0000002d popad 0x0000002e mov dword ptr [esi+10h], eax 0x00000031 jmp 00007F30707E4B46h 0x00000036 mov eax, dword ptr [ebx+50h] 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007F30707E4B47h 0x00000040 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0619 second address: 51B0644 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 call 00007F3070BEB5E0h 0x0000000b pop ecx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esi+14h], eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jmp 00007F3070BEB5DAh 0x0000001a popad 0x0000001b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0644 second address: 51B065E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebx+54h] 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B065E second address: 51B0662 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0757 second address: 51B078D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F30707E4B43h 0x0000000a adc cl, 0000005Eh 0x0000000d jmp 00007F30707E4B49h 0x00000012 popfd 0x00000013 popad 0x00000014 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B078D second address: 51B079D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3070BEB5DCh 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B079D second address: 51B07DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esi+2Ch], eax 0x0000000b jmp 00007F30707E4B47h 0x00000010 mov ax, word ptr [ebx+6Ch] 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F30707E4B45h 0x0000001b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B07DA second address: 51B0809 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F3070BEB5E7h 0x00000008 pop eax 0x00000009 mov di, 255Ch 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov word ptr [esi+30h], ax 0x00000014 pushad 0x00000015 mov bh, C3h 0x00000017 push eax 0x00000018 push edx 0x00000019 mov cx, 52BFh 0x0000001d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0809 second address: 51B082F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B44h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov ax, word ptr [ebx+00000088h] 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B082F second address: 51B0835 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0835 second address: 51B0847 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov word ptr [esi+32h], ax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0847 second address: 51B084B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B084B second address: 51B084F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B084F second address: 51B0855 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0855 second address: 51B087E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, 3B0B2B23h 0x00000008 mov ecx, 595B567Fh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov eax, dword ptr [ebx+0000008Ch] 0x00000016 pushad 0x00000017 mov eax, 3EDF9677h 0x0000001c mov bx, cx 0x0000001f popad 0x00000020 mov dword ptr [esi+34h], eax 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B087E second address: 51B0882 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0882 second address: 51B0886 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0886 second address: 51B088C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B088C second address: 51B08DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebx+18h] 0x0000000c pushad 0x0000000d jmp 00007F30707E4B3Eh 0x00000012 mov ch, 09h 0x00000014 popad 0x00000015 mov dword ptr [esi+38h], eax 0x00000018 pushad 0x00000019 mov dx, D65Eh 0x0000001d movsx ebx, si 0x00000020 popad 0x00000021 mov eax, dword ptr [ebx+1Ch] 0x00000024 pushad 0x00000025 push eax 0x00000026 push edx 0x00000027 pushfd 0x00000028 jmp 00007F30707E4B3Ah 0x0000002d adc eax, 5403E728h 0x00000033 jmp 00007F30707E4B3Bh 0x00000038 popfd 0x00000039 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B08DE second address: 51B08E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B08E2 second address: 51B092B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F30707E4B46h 0x0000000c and ax, 1988h 0x00000011 jmp 00007F30707E4B3Bh 0x00000016 popfd 0x00000017 popad 0x00000018 mov dword ptr [esi+3Ch], eax 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F30707E4B45h 0x00000022 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B092B second address: 51B094C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, ebx 0x00000005 movsx edx, ax 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [ebx+20h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F3070BEB5E1h 0x00000015 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B094C second address: 51B0952 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0952 second address: 51B0956 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0956 second address: 51B095A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B095A second address: 51B0979 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esi+40h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3070BEB5E2h 0x00000012 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0979 second address: 51B09EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebx+00000080h] 0x0000000f pushad 0x00000010 mov di, cx 0x00000013 mov bx, cx 0x00000016 popad 0x00000017 push 00000001h 0x00000019 pushad 0x0000001a mov ch, 3Ah 0x0000001c push ebx 0x0000001d jmp 00007F30707E4B40h 0x00000022 pop esi 0x00000023 popad 0x00000024 push ebp 0x00000025 jmp 00007F30707E4B3Eh 0x0000002a mov dword ptr [esp], eax 0x0000002d jmp 00007F30707E4B40h 0x00000032 lea eax, dword ptr [ebp-10h] 0x00000035 jmp 00007F30707E4B40h 0x0000003a nop 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e mov dl, B7h 0x00000040 popad 0x00000041 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B09EA second address: 51B09F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0A2E second address: 51B0A33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0A33 second address: 51B0A52 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edi, eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0A52 second address: 51B0AC2 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F30707E4B3Ah 0x00000008 xor al, 00000018h 0x0000000b jmp 00007F30707E4B3Bh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushfd 0x00000014 jmp 00007F30707E4B48h 0x00000019 jmp 00007F30707E4B45h 0x0000001e popfd 0x0000001f popad 0x00000020 test edi, edi 0x00000022 jmp 00007F30707E4B3Eh 0x00000027 js 00007F30E1E63749h 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 mov ax, di 0x00000033 mov edx, 0D9DD41Ch 0x00000038 popad 0x00000039 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0AC2 second address: 51B0AC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0AC8 second address: 51B0B13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [ebp-0Ch] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F30707E4B45h 0x00000014 adc al, 00000026h 0x00000017 jmp 00007F30707E4B41h 0x0000001c popfd 0x0000001d call 00007F30707E4B40h 0x00000022 pop esi 0x00000023 popad 0x00000024 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0B13 second address: 51B0B19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0B19 second address: 51B0B37 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esi+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e call 00007F30707E4B3Bh 0x00000013 pop esi 0x00000014 movsx ebx, ax 0x00000017 popad 0x00000018 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0B37 second address: 51B0B8B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebx+78h] 0x0000000c pushad 0x0000000d push eax 0x0000000e mov bh, 3Ah 0x00000010 pop eax 0x00000011 movsx edx, cx 0x00000014 popad 0x00000015 push 00000001h 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a jmp 00007F3070BEB5E1h 0x0000001f pushfd 0x00000020 jmp 00007F3070BEB5E0h 0x00000025 add ax, A1E8h 0x0000002a jmp 00007F3070BEB5DBh 0x0000002f popfd 0x00000030 popad 0x00000031 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0B8B second address: 51B0BC5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B49h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F30707E4B48h 0x00000013 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0BC5 second address: 51B0BD4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0BD4 second address: 51B0BEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F30707E4B44h 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0BEC second address: 51B0C14 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3070BEB5E4h 0x00000013 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0C14 second address: 51B0C2F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov edi, 797412D6h 0x00000012 push edi 0x00000013 pop eax 0x00000014 popad 0x00000015 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0C2F second address: 51B0C8D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, ecx 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-08h] 0x0000000b jmp 00007F3070BEB5E7h 0x00000010 nop 0x00000011 pushad 0x00000012 mov dx, cx 0x00000015 pushfd 0x00000016 jmp 00007F3070BEB5E0h 0x0000001b jmp 00007F3070BEB5E5h 0x00000020 popfd 0x00000021 popad 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F3070BEB5DCh 0x0000002a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0CDD second address: 51B0CE3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0CE3 second address: 51B0CF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3070BEB5DDh 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0CF4 second address: 51B0D97 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B41h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edi, eax 0x0000000d jmp 00007F30707E4B3Eh 0x00000012 test edi, edi 0x00000014 jmp 00007F30707E4B40h 0x00000019 js 00007F30E1E634C2h 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007F30707E4B3Dh 0x00000026 jmp 00007F30707E4B3Bh 0x0000002b popfd 0x0000002c popad 0x0000002d mov eax, dword ptr [ebp-04h] 0x00000030 jmp 00007F30707E4B46h 0x00000035 mov dword ptr [esi+08h], eax 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b pushfd 0x0000003c jmp 00007F30707E4B3Dh 0x00000041 sub ah, 00000036h 0x00000044 jmp 00007F30707E4B41h 0x00000049 popfd 0x0000004a mov eax, 1CACB327h 0x0000004f popad 0x00000050 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0D97 second address: 51B0DB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3070BEB5E8h 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0DB3 second address: 51B0DB7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0DB7 second address: 51B0DF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebx+70h] 0x0000000b jmp 00007F3070BEB5E7h 0x00000010 push 00000001h 0x00000012 jmp 00007F3070BEB5E6h 0x00000017 nop 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0DF8 second address: 51B0E15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B49h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0E15 second address: 51B0E30 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 96h 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F3070BEB5E0h 0x00000010 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0E30 second address: 51B0EC2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 386D4184h 0x00000008 push edx 0x00000009 pop esi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e jmp 00007F30707E4B3Fh 0x00000013 lea eax, dword ptr [ebp-18h] 0x00000016 jmp 00007F30707E4B46h 0x0000001b nop 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F30707E4B3Eh 0x00000023 or ecx, 0F714498h 0x00000029 jmp 00007F30707E4B3Bh 0x0000002e popfd 0x0000002f pushfd 0x00000030 jmp 00007F30707E4B48h 0x00000035 adc ch, FFFFFFF8h 0x00000038 jmp 00007F30707E4B3Bh 0x0000003d popfd 0x0000003e popad 0x0000003f push eax 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 jmp 00007F30707E4B3Bh 0x00000049 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0EC2 second address: 51B0EC8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0F24 second address: 51B0F28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0F28 second address: 51B0F2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0F2C second address: 51B0F32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0F32 second address: 51B0F72 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007F30E2269D3Bh 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushfd 0x00000013 jmp 00007F3070BEB5DCh 0x00000018 or ecx, 026EEFA8h 0x0000001e jmp 00007F3070BEB5DBh 0x00000023 popfd 0x00000024 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0F72 second address: 51B0F76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B0F76 second address: 51B105C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 pushfd 0x00000008 jmp 00007F3070BEB5E5h 0x0000000d add si, 1BC6h 0x00000012 jmp 00007F3070BEB5E1h 0x00000017 popfd 0x00000018 pop esi 0x00000019 popad 0x0000001a mov eax, dword ptr [ebp-14h] 0x0000001d jmp 00007F3070BEB5E7h 0x00000022 mov ecx, esi 0x00000024 jmp 00007F3070BEB5E6h 0x00000029 mov dword ptr [esi+0Ch], eax 0x0000002c pushad 0x0000002d mov edi, esi 0x0000002f mov cx, CD99h 0x00000033 popad 0x00000034 mov edx, 768B06ECh 0x00000039 jmp 00007F3070BEB5E4h 0x0000003e sub eax, eax 0x00000040 pushad 0x00000041 pushfd 0x00000042 jmp 00007F3070BEB5E7h 0x00000047 xor cl, 0000006Eh 0x0000004a jmp 00007F3070BEB5E9h 0x0000004f popfd 0x00000050 mov ebx, ecx 0x00000052 popad 0x00000053 lock cmpxchg dword ptr [edx], ecx 0x00000057 push eax 0x00000058 push edx 0x00000059 jmp 00007F3070BEB5E9h 0x0000005e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B105C second address: 51B1062 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1062 second address: 51B1066 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1066 second address: 51B1086 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B43h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1086 second address: 51B108C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B108C second address: 51B10D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 4F8892AFh 0x00000008 pushfd 0x00000009 jmp 00007F30707E4B44h 0x0000000e and ax, 25D8h 0x00000013 jmp 00007F30707E4B3Bh 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c test eax, eax 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F30707E4B45h 0x00000025 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B10D6 second address: 51B10E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3070BEB5DCh 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B10E6 second address: 51B1103 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jne 00007F30E1E6311Bh 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1103 second address: 51B1109 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1109 second address: 51B1145 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [ebp+08h] 0x0000000c jmp 00007F30707E4B40h 0x00000011 mov eax, dword ptr [esi] 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F30707E4B47h 0x0000001a rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1145 second address: 51B114B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B114B second address: 51B114F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B114F second address: 51B11B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [edx], eax 0x0000000a jmp 00007F3070BEB5E7h 0x0000000f mov eax, dword ptr [esi+04h] 0x00000012 jmp 00007F3070BEB5E6h 0x00000017 mov dword ptr [edx+04h], eax 0x0000001a pushad 0x0000001b call 00007F3070BEB5DEh 0x00000020 pop ecx 0x00000021 pushad 0x00000022 mov cx, bx 0x00000025 mov ax, di 0x00000028 popad 0x00000029 popad 0x0000002a mov eax, dword ptr [esi+08h] 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F3070BEB5DEh 0x00000034 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B11B8 second address: 51B11CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F30707E4B3Eh 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B11CA second address: 51B120F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3070BEB5DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [edx+08h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F3070BEB5DBh 0x00000017 sub eax, 31DCB2EEh 0x0000001d jmp 00007F3070BEB5E9h 0x00000022 popfd 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B120F second address: 51B1214 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1214 second address: 51B1219 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1219 second address: 51B12BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F30707E4B43h 0x0000000a jmp 00007F30707E4B43h 0x0000000f popfd 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 mov eax, dword ptr [esi+0Ch] 0x00000016 jmp 00007F30707E4B46h 0x0000001b mov dword ptr [edx+0Ch], eax 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F30707E4B3Eh 0x00000025 or eax, 69FA7F28h 0x0000002b jmp 00007F30707E4B3Bh 0x00000030 popfd 0x00000031 call 00007F30707E4B48h 0x00000036 mov ah, 37h 0x00000038 pop edi 0x00000039 popad 0x0000003a mov eax, dword ptr [esi+10h] 0x0000003d pushad 0x0000003e mov ebx, esi 0x00000040 mov al, 13h 0x00000042 popad 0x00000043 mov dword ptr [edx+10h], eax 0x00000046 push eax 0x00000047 push edx 0x00000048 jmp 00007F30707E4B3Ah 0x0000004d rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B12BA second address: 51B12CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3070BEB5DEh 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B12CC second address: 51B1301 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esi+14h] 0x0000000b jmp 00007F30707E4B47h 0x00000010 mov dword ptr [edx+14h], eax 0x00000013 pushad 0x00000014 push ebx 0x00000015 mov al, A0h 0x00000017 pop edx 0x00000018 popad 0x00000019 mov eax, dword ptr [esi+18h] 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f mov dh, 13h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1301 second address: 51B1306 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1306 second address: 51B1352 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B43h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [edx+18h], eax 0x0000000c jmp 00007F30707E4B46h 0x00000011 mov eax, dword ptr [esi+1Ch] 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F30707E4B47h 0x0000001b rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1352 second address: 51B1358 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1358 second address: 51B139C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [edx+1Ch], eax 0x0000000e pushad 0x0000000f mov bx, si 0x00000012 mov edx, esi 0x00000014 popad 0x00000015 mov eax, dword ptr [esi+20h] 0x00000018 jmp 00007F30707E4B3Ah 0x0000001d mov dword ptr [edx+20h], eax 0x00000020 jmp 00007F30707E4B40h 0x00000025 mov eax, dword ptr [esi+24h] 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B139C second address: 51B13A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B13A0 second address: 51B13A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B13A6 second address: 51B13B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3070BEB5DBh 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B13B5 second address: 51B13B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B13B9 second address: 51B13DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [edx+24h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F3070BEB5E7h 0x00000014 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B13DF second address: 51B13FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F30707E4B49h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B13FC second address: 51B1402 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1402 second address: 51B1406 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1406 second address: 51B1417 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esi+28h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1417 second address: 51B141B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B141B second address: 51B141F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B141F second address: 51B1425 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B1425 second address: 51B142B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B142B second address: 51B142F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
Source: C:\Users\user\Desktop\random.exe | RDTSC instruction interceptor: First address: 51B142F second address: 51B14C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [edx+28h], eax 0x0000000b pushad 0x0000000c jmp 00007F3070BEB5E7h 0x00000011 pushfd 0x00000012 jmp 00007F3070BEB5E8h 0x00000017 sbb cx, AE08h 0x0000001c jmp 00007F3070BEB5DBh 0x00000021 popfd 0x00000022 popad 0x00000023 mov ecx, dword ptr [esi+2Ch] 0x00000026 jmp 00007F3070BEB5E6h 0x0000002b mov dword ptr [edx+2Ch], ecx 0x0000002e jmp 00007F3070BEB5E0h 0x00000033 mov ax, word ptr [esi+30h] 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007F3070BEB5E7h 0x0000003e rdtsc |