| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEA609 second address: FEA61E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jc 00007F64C133C3C6h 0x0000000b jnp 00007F64C133C3C6h 0x00000011 popad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FD2CE1 second address: FD2CE6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FD2CE6 second address: FD2D16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 jmp 00007F64C133C3D8h 0x0000000b jmp 00007F64C133C3D0h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE96F9 second address: FE96FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE96FE second address: FE9729 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F64C133C3CCh 0x00000008 jmp 00007F64C133C3D7h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE9729 second address: FE9745 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F64C0ADE4F5h 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE9877 second address: FE9891 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F64C133C3D4h 0x0000000c jmp 00007F64C133C3CEh 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE9891 second address: FE9897 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE9B26 second address: FE9B30 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F64C133C3C6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE9B30 second address: FE9B34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE9B34 second address: FE9B3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE9C8B second address: FE9C90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEC712 second address: E6DE4C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C133C3D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d ja 00007F64C133C3DFh 0x00000013 pop eax 0x00000014 mov dword ptr [ebp+122D1E22h], ebx 0x0000001a stc 0x0000001b push dword ptr [ebp+122D084Dh] 0x00000021 jmp 00007F64C133C3CDh 0x00000026 call dword ptr [ebp+122D25F6h] 0x0000002c pushad 0x0000002d mov dword ptr [ebp+122D1DF8h], ebx 0x00000033 xor eax, eax 0x00000035 add dword ptr [ebp+122D1E01h], ebx 0x0000003b mov edx, dword ptr [esp+28h] 0x0000003f pushad 0x00000040 and esi, dword ptr [ebp+122D2D0Eh] 0x00000046 sub eax, dword ptr [ebp+122D2D96h] 0x0000004c popad 0x0000004d mov dword ptr [ebp+122D2CFAh], eax 0x00000053 mov dword ptr [ebp+122D1DF8h], ecx 0x00000059 jmp 00007F64C133C3D4h 0x0000005e mov esi, 0000003Ch 0x00000063 stc 0x00000064 add esi, dword ptr [esp+24h] 0x00000068 jo 00007F64C133C3DDh 0x0000006e jmp 00007F64C133C3D7h 0x00000073 lodsw 0x00000075 jc 00007F64C133C3C7h 0x0000007b clc 0x0000007c add eax, dword ptr [esp+24h] 0x00000080 jns 00007F64C133C3CCh 0x00000086 mov ebx, dword ptr [esp+24h] 0x0000008a jmp 00007F64C133C3CDh 0x0000008f push eax 0x00000090 push eax 0x00000091 push edx 0x00000092 push edx 0x00000093 push eax 0x00000094 pop eax 0x00000095 pop edx 0x00000096 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEC78C second address: FEC81E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ebx 0x0000000c call 00007F64C0ADE4E8h 0x00000011 pop ebx 0x00000012 mov dword ptr [esp+04h], ebx 0x00000016 add dword ptr [esp+04h], 0000001Bh 0x0000001e inc ebx 0x0000001f push ebx 0x00000020 ret 0x00000021 pop ebx 0x00000022 ret 0x00000023 movzx esi, cx 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push ebp 0x0000002b call 00007F64C0ADE4E8h 0x00000030 pop ebp 0x00000031 mov dword ptr [esp+04h], ebp 0x00000035 add dword ptr [esp+04h], 0000001Ch 0x0000003d inc ebp 0x0000003e push ebp 0x0000003f ret 0x00000040 pop ebp 0x00000041 ret 0x00000042 add cl, 00000060h 0x00000045 mov esi, dword ptr [ebp+122D2EB2h] 0x0000004b mov edx, eax 0x0000004d call 00007F64C0ADE4E9h 0x00000052 jnc 00007F64C0ADE4FAh 0x00000058 push eax 0x00000059 jng 00007F64C0ADE4F4h 0x0000005f push eax 0x00000060 push edx 0x00000061 jne 00007F64C0ADE4E6h 0x00000067 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEC81E second address: FEC844 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007F64C133C3D2h 0x0000000f mov eax, dword ptr [eax] 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 push edi 0x00000017 pop edi 0x00000018 popad 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEC844 second address: FEC84A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEC84A second address: FEC84E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEC84E second address: FEC852 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEC852 second address: FEC89A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push edi 0x0000000d push edx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 pop edx 0x00000011 pop edi 0x00000012 pop eax 0x00000013 or dword ptr [ebp+122D1CF9h], edx 0x00000019 push 00000003h 0x0000001b push ebx 0x0000001c je 00007F64C133C3C6h 0x00000022 pop edx 0x00000023 push 00000000h 0x00000025 mov cx, C3A8h 0x00000029 push 00000003h 0x0000002b mov dword ptr [ebp+122D1D98h], esi 0x00000031 call 00007F64C133C3C9h 0x00000036 push eax 0x00000037 push edx 0x00000038 js 00007F64C133C3CCh 0x0000003e jnc 00007F64C133C3C6h 0x00000044 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEC89A second address: FEC8AB instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F64C0ADE4E8h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEC8AB second address: FEC8C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F64C133C3D5h 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEC8C7 second address: FEC8D6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push edi 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEC8D6 second address: FEC8E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edi 0x00000006 mov eax, dword ptr [eax] 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jg 00007F64C133C3C6h 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEC8E7 second address: FEC8F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b pushad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEC8F6 second address: FEC8FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEC97A second address: FEC984 instructions: 0x00000000 rdtsc 0x00000002 js 00007F64C0ADE4E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FEC984 second address: FECA13 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F64C133C3CCh 0x00000008 jg 00007F64C133C3C6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push ecx 0x00000012 jmp 00007F64C133C3D4h 0x00000017 pop ecx 0x00000018 nop 0x00000019 push 00000000h 0x0000001b push ebx 0x0000001c call 00007F64C133C3C8h 0x00000021 pop ebx 0x00000022 mov dword ptr [esp+04h], ebx 0x00000026 add dword ptr [esp+04h], 00000019h 0x0000002e inc ebx 0x0000002f push ebx 0x00000030 ret 0x00000031 pop ebx 0x00000032 ret 0x00000033 mov edx, esi 0x00000035 mov si, dx 0x00000038 push 00000000h 0x0000003a push 00000000h 0x0000003c push edi 0x0000003d call 00007F64C133C3C8h 0x00000042 pop edi 0x00000043 mov dword ptr [esp+04h], edi 0x00000047 add dword ptr [esp+04h], 00000019h 0x0000004f inc edi 0x00000050 push edi 0x00000051 ret 0x00000052 pop edi 0x00000053 ret 0x00000054 push 013DEDB9h 0x00000059 jo 00007F64C133C3E3h 0x0000005f push eax 0x00000060 push edx 0x00000061 jmp 00007F64C133C3D1h 0x00000066 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FECA13 second address: FECA17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FECA17 second address: FECA95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 xor dword ptr [esp], 013DED39h 0x0000000d mov edi, eax 0x0000000f push 00000003h 0x00000011 add esi, dword ptr [ebp+122D2CA2h] 0x00000017 push 00000000h 0x00000019 mov cx, F319h 0x0000001d push 00000003h 0x0000001f sub dword ptr [ebp+122D230Dh], esi 0x00000025 jmp 00007F64C133C3D2h 0x0000002a push 9174C112h 0x0000002f jnp 00007F64C133C3D7h 0x00000035 jmp 00007F64C133C3D1h 0x0000003a add dword ptr [esp], 2E8B3EEEh 0x00000041 mov edx, dword ptr [ebp+122D2C46h] 0x00000047 lea ebx, dword ptr [ebp+124525EFh] 0x0000004d mov cx, 575Fh 0x00000051 xchg eax, ebx 0x00000052 jo 00007F64C133C3CEh 0x00000058 jc 00007F64C133C3C8h 0x0000005e pushad 0x0000005f popad 0x00000060 push eax 0x00000061 push edx 0x00000062 push ecx 0x00000063 push eax 0x00000064 push edx 0x00000065 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FECBD4 second address: FECBD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100C4C7 second address: 100C4CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100C4CD second address: 100C4D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100C4D5 second address: 100C4DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100C4DB second address: 100C4E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100C4E1 second address: 100C4EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100C4EB second address: 100C4F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100C668 second address: 100C67F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F64C133C3CFh 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100C67F second address: 100C689 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F64C0ADE4E6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100C689 second address: 100C69E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jnc 00007F64C133C3C6h 0x00000013 push edi 0x00000014 pop edi 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100C69E second address: 100C6C6 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F64C0ADE4E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jbe 00007F64C0ADE4E6h 0x00000013 jmp 00007F64C0ADE4F0h 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100CC64 second address: 100CC6F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100CF2E second address: 100CF32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100CF32 second address: 100CF4C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jbe 00007F64C133C3C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jno 00007F64C133C3C6h 0x00000014 jns 00007F64C133C3C6h 0x0000001a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100D077 second address: 100D07D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100D07D second address: 100D083 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100D083 second address: 100D096 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F64C0ADE4EEh 0x00000009 popad 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100D096 second address: 100D09D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100D1D4 second address: 100D1D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100D1D8 second address: 100D216 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C133C3D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jo 00007F64C133C3CAh 0x0000000f push edx 0x00000010 pop edx 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F64C133C3D8h 0x0000001a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100D4A0 second address: 100D4A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100100A second address: 100100E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100100E second address: 1001012 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1001012 second address: 100101E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FD6339 second address: FD6345 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FD6345 second address: FD634B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100D606 second address: 100D611 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100D611 second address: 100D615 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100D615 second address: 100D62A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F64C0ADE4EFh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100DBC4 second address: 100DBD0 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F64C133C3CEh 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100DBD0 second address: 100DBEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F64C0ADE4F7h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100DD49 second address: 100DD4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100DEB9 second address: 100DEBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100DEBD second address: 100DEC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100DEC3 second address: 100DECD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100DECD second address: 100DED1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100DED1 second address: 100DEFF instructions: 0x00000000 rdtsc 0x00000002 je 00007F64C0ADE4E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F64C0ADE4F3h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 pushad 0x00000014 popad 0x00000015 pushad 0x00000016 popad 0x00000017 pop eax 0x00000018 jo 00007F64C0ADE4E8h 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100DEFF second address: 100DF0E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 jnc 00007F64C133C3C6h 0x0000000b pop ecx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 100E07A second address: 100E082 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1010A5E second address: 1010A68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1010A68 second address: 1010A70 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1010A70 second address: 1010A77 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1010A77 second address: 1010A7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1012F85 second address: 1012FF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F64C133C3D4h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jmp 00007F64C133C3D8h 0x00000013 mov eax, dword ptr [esp+04h] 0x00000017 pushad 0x00000018 push edi 0x00000019 jo 00007F64C133C3C6h 0x0000001f pop edi 0x00000020 jmp 00007F64C133C3CAh 0x00000025 popad 0x00000026 mov eax, dword ptr [eax] 0x00000028 push ebx 0x00000029 push edx 0x0000002a pushad 0x0000002b popad 0x0000002c pop edx 0x0000002d pop ebx 0x0000002e mov dword ptr [esp+04h], eax 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007F64C133C3D3h 0x00000039 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1013182 second address: 10131C0 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F64C0ADE4E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F64C0ADE4F9h 0x0000000f popad 0x00000010 push eax 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F64C0ADE4F6h 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10131C0 second address: 10131CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10191EE second address: 10191F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1018DB9 second address: 1018DBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10190AE second address: 10190C0 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F64C0ADE4E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jc 00007F64C0ADE4ECh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101B7AF second address: 101B7D9 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F64C133C3CCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jl 00007F64C133C3D7h 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101B7D9 second address: 101B7F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jno 00007F64C0ADE4E6h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jmp 00007F64C0ADE4EAh 0x00000015 mov eax, dword ptr [eax] 0x00000017 push edx 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101B7F9 second address: 101B81C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a jnp 00007F64C133C3CAh 0x00000010 pop eax 0x00000011 movsx edi, si 0x00000014 push D9F68350h 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d push edi 0x0000001e pop edi 0x0000001f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101B81C second address: 101B822 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101B959 second address: 101B95D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101BB59 second address: 101BBA6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C0ADE4F8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F64C0ADE4F2h 0x0000000f pop eax 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F64C0ADE4F9h 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101BC4B second address: 101BC4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101C395 second address: 101C3AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C0ADE4EFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101C442 second address: 101C482 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 xchg eax, ebx 0x00000005 push 00000000h 0x00000007 push edx 0x00000008 call 00007F64C133C3C8h 0x0000000d pop edx 0x0000000e mov dword ptr [esp+04h], edx 0x00000012 add dword ptr [esp+04h], 00000019h 0x0000001a inc edx 0x0000001b push edx 0x0000001c ret 0x0000001d pop edx 0x0000001e ret 0x0000001f add si, 40C1h 0x00000024 push eax 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 jmp 00007F64C133C3CFh 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101C482 second address: 101C487 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101C7CF second address: 101C7D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101C7D3 second address: 101C7E0 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F64C0ADE4E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101C7E0 second address: 101C7FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007F64C133C3CEh 0x0000000d push eax 0x0000000e push edx 0x0000000f push edx 0x00000010 pop edx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101C8E4 second address: 101C8FE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jl 00007F64C0ADE4E6h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e ja 00007F64C0ADE4E8h 0x00000014 push eax 0x00000015 push edx 0x00000016 push esi 0x00000017 pop esi 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101C8FE second address: 101C902 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101C9CF second address: 101C9D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101C9D3 second address: 101C9DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101C9DC second address: 101CA1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F64C0ADE4E6h 0x0000000a popad 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f sub dword ptr [ebp+122D2FD7h], ebx 0x00000015 xchg eax, ebx 0x00000016 pushad 0x00000017 push edx 0x00000018 jmp 00007F64C0ADE4ECh 0x0000001d pop edx 0x0000001e push eax 0x0000001f jmp 00007F64C0ADE4F2h 0x00000024 pop eax 0x00000025 popad 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101CA1C second address: 101CA20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101CEEF second address: 101CF35 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F64C0ADE4E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b mov dword ptr [esp], eax 0x0000000e call 00007F64C0ADE4F4h 0x00000013 mov di, dx 0x00000016 pop edi 0x00000017 push 00000000h 0x00000019 sub dword ptr [ebp+122D3A2Bh], ecx 0x0000001f push 00000000h 0x00000021 xchg eax, ebx 0x00000022 pushad 0x00000023 pushad 0x00000024 jmp 00007F64C0ADE4F1h 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101D9C4 second address: 101DA15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 nop 0x00000006 jmp 00007F64C133C3D2h 0x0000000b push 00000000h 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007F64C133C3C8h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 00000017h 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 mov dword ptr [ebp+122D2B25h], ecx 0x0000002d push 00000000h 0x0000002f or si, EBF5h 0x00000034 xchg eax, ebx 0x00000035 push eax 0x00000036 push edx 0x00000037 jng 00007F64C133C3C8h 0x0000003d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101D7D2 second address: 101D7F1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C0ADE4F4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE3BB5 second address: FE3BB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE3BB9 second address: FE3BD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jmp 00007F64C0ADE4F5h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1020148 second address: 102014E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102014E second address: 1020152 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10217E6 second address: 102183B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 jmp 00007F64C133C3CDh 0x0000000b nop 0x0000000c push ecx 0x0000000d mov dword ptr [ebp+122D25D8h], ecx 0x00000013 pop esi 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push edx 0x00000019 call 00007F64C133C3C8h 0x0000001e pop edx 0x0000001f mov dword ptr [esp+04h], edx 0x00000023 add dword ptr [esp+04h], 00000018h 0x0000002b inc edx 0x0000002c push edx 0x0000002d ret 0x0000002e pop edx 0x0000002f ret 0x00000030 push 00000000h 0x00000032 xchg eax, ebx 0x00000033 pushad 0x00000034 push ecx 0x00000035 pushad 0x00000036 popad 0x00000037 pop ecx 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007F64C133C3CDh 0x0000003f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102183B second address: 1021851 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F64C0ADE4E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e ja 00007F64C0ADE4E8h 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10222D7 second address: 10222DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10222DB second address: 10222E5 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F64C0ADE4E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1022BD5 second address: 1022C44 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007F64C133C3D6h 0x0000000c popad 0x0000000d mov dword ptr [esp], eax 0x00000010 mov dword ptr [ebp+122D2466h], eax 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push edi 0x0000001b call 00007F64C133C3C8h 0x00000020 pop edi 0x00000021 mov dword ptr [esp+04h], edi 0x00000025 add dword ptr [esp+04h], 00000016h 0x0000002d inc edi 0x0000002e push edi 0x0000002f ret 0x00000030 pop edi 0x00000031 ret 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ebx 0x00000037 call 00007F64C133C3C8h 0x0000003c pop ebx 0x0000003d mov dword ptr [esp+04h], ebx 0x00000041 add dword ptr [esp+04h], 00000014h 0x00000049 inc ebx 0x0000004a push ebx 0x0000004b ret 0x0000004c pop ebx 0x0000004d ret 0x0000004e cld 0x0000004f xchg eax, ebx 0x00000050 pushad 0x00000051 push eax 0x00000052 pushad 0x00000053 popad 0x00000054 pop eax 0x00000055 push eax 0x00000056 push edx 0x00000057 pushad 0x00000058 popad 0x00000059 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1022C44 second address: 1022C56 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jo 00007F64C0ADE4F4h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1022C56 second address: 1022C5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10236B4 second address: 10236BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10236BA second address: 10236BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10252ED second address: 1025304 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C0ADE4F3h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1025304 second address: 1025322 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F64C133C3CCh 0x0000000c jnc 00007F64C133C3C6h 0x00000012 popad 0x00000013 push ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 jns 00007F64C133C3C6h 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1025322 second address: 1025326 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10283FF second address: 102841E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F64C133C3C6h 0x0000000a popad 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F64C133C3CDh 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102841E second address: 1028430 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnp 00007F64C0ADE4E6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f pushad 0x00000010 popad 0x00000011 pop edi 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1028430 second address: 1028435 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102997B second address: 1029985 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F64C0ADE4E6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1029985 second address: 1029992 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1029992 second address: 1029998 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102A92F second address: 102A934 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102A934 second address: 102A93F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 ja 00007F64C0ADE4E6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102A93F second address: 102A9D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007F64C133C3D8h 0x0000000d nop 0x0000000e sub edi, dword ptr [ebp+122D2CB6h] 0x00000014 mov edi, esi 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push ebp 0x0000001b call 00007F64C133C3C8h 0x00000020 pop ebp 0x00000021 mov dword ptr [esp+04h], ebp 0x00000025 add dword ptr [esp+04h], 0000001Ch 0x0000002d inc ebp 0x0000002e push ebp 0x0000002f ret 0x00000030 pop ebp 0x00000031 ret 0x00000032 mov edi, dword ptr [ebp+122D2C46h] 0x00000038 push 00000000h 0x0000003a ja 00007F64C133C3DEh 0x00000040 xchg eax, esi 0x00000041 jnl 00007F64C133C3CAh 0x00000047 push eax 0x00000048 push eax 0x00000049 push edx 0x0000004a jmp 00007F64C133C3CEh 0x0000004f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102C9AA second address: 102C9AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102C9AE second address: 102C9B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10229DC second address: 10229E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1024009 second address: 102401F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F64C133C3D2h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1029B0D second address: 1029BBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F64C0ADE4F0h 0x0000000a popad 0x0000000b push eax 0x0000000c je 00007F64C0ADE500h 0x00000012 push edi 0x00000013 jmp 00007F64C0ADE4F8h 0x00000018 pop edi 0x00000019 nop 0x0000001a mov dword ptr [ebp+122D1CCCh], esi 0x00000020 push dword ptr fs:[00000000h] 0x00000027 mov ebx, dword ptr [ebp+122D2E5Ah] 0x0000002d mov dword ptr fs:[00000000h], esp 0x00000034 call 00007F64C0ADE4F6h 0x00000039 sbb edi, 56FAF5FAh 0x0000003f pop edi 0x00000040 mov eax, dword ptr [ebp+122D006Dh] 0x00000046 mov ebx, dword ptr [ebp+122D2F4Eh] 0x0000004c push FFFFFFFFh 0x0000004e push 00000000h 0x00000050 push esi 0x00000051 call 00007F64C0ADE4E8h 0x00000056 pop esi 0x00000057 mov dword ptr [esp+04h], esi 0x0000005b add dword ptr [esp+04h], 0000001Ah 0x00000063 inc esi 0x00000064 push esi 0x00000065 ret 0x00000066 pop esi 0x00000067 ret 0x00000068 jnp 00007F64C0ADE4ECh 0x0000006e add dword ptr [ebp+122D39D8h], edx 0x00000074 nop 0x00000075 push edi 0x00000076 push eax 0x00000077 push edx 0x00000078 push ebx 0x00000079 pop ebx 0x0000007a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102E9D7 second address: 102E9DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102E9DD second address: 102E9E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102DA98 second address: 102DAA5 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F64C133C3C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102DAA5 second address: 102DB31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 jmp 00007F64C0ADE4ECh 0x0000000e nop 0x0000000f xor di, 1A33h 0x00000014 push dword ptr fs:[00000000h] 0x0000001b and bx, 0F7Ch 0x00000020 mov dword ptr fs:[00000000h], esp 0x00000027 push 00000000h 0x00000029 push edi 0x0000002a call 00007F64C0ADE4E8h 0x0000002f pop edi 0x00000030 mov dword ptr [esp+04h], edi 0x00000034 add dword ptr [esp+04h], 00000014h 0x0000003c inc edi 0x0000003d push edi 0x0000003e ret 0x0000003f pop edi 0x00000040 ret 0x00000041 sub bx, 580Ch 0x00000046 mov bl, 51h 0x00000048 mov eax, dword ptr [ebp+122D0CC1h] 0x0000004e mov ebx, edi 0x00000050 push FFFFFFFFh 0x00000052 push 00000000h 0x00000054 push edx 0x00000055 call 00007F64C0ADE4E8h 0x0000005a pop edx 0x0000005b mov dword ptr [esp+04h], edx 0x0000005f add dword ptr [esp+04h], 00000014h 0x00000067 inc edx 0x00000068 push edx 0x00000069 ret 0x0000006a pop edx 0x0000006b ret 0x0000006c push eax 0x0000006d push eax 0x0000006e push edx 0x0000006f push eax 0x00000070 push edx 0x00000071 jmp 00007F64C0ADE4F0h 0x00000076 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102DB31 second address: 102DB35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102DB35 second address: 102DB3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102DB3B second address: 102DB41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102DB41 second address: 102DB45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 102F874 second address: 102F87A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10316E0 second address: 10316E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10316E6 second address: 10316EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10316EC second address: 103178A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007F64C0ADE4E8h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 0000001Bh 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 jl 00007F64C0ADE4ECh 0x0000002b mov ebx, dword ptr [ebp+1247B017h] 0x00000031 mov ebx, 4E481600h 0x00000036 push 00000000h 0x00000038 mov dword ptr [ebp+1247B528h], edx 0x0000003e add edi, 5E207E60h 0x00000044 push 00000000h 0x00000046 push 00000000h 0x00000048 push ecx 0x00000049 call 00007F64C0ADE4E8h 0x0000004e pop ecx 0x0000004f mov dword ptr [esp+04h], ecx 0x00000053 add dword ptr [esp+04h], 00000019h 0x0000005b inc ecx 0x0000005c push ecx 0x0000005d ret 0x0000005e pop ecx 0x0000005f ret 0x00000060 mov ebx, 20A04158h 0x00000065 mov ebx, dword ptr [ebp+122D1D40h] 0x0000006b xchg eax, esi 0x0000006c push eax 0x0000006d jnp 00007F64C0ADE4FBh 0x00000073 jmp 00007F64C0ADE4F5h 0x00000078 pop eax 0x00000079 push eax 0x0000007a push esi 0x0000007b push ecx 0x0000007c push eax 0x0000007d push edx 0x0000007e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10326BD second address: 1032753 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C133C3D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push edx 0x0000000f call 00007F64C133C3C8h 0x00000014 pop edx 0x00000015 mov dword ptr [esp+04h], edx 0x00000019 add dword ptr [esp+04h], 0000001Bh 0x00000021 inc edx 0x00000022 push edx 0x00000023 ret 0x00000024 pop edx 0x00000025 ret 0x00000026 xor dword ptr [ebp+124518A0h], eax 0x0000002c push 00000000h 0x0000002e movzx edi, di 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push edi 0x00000036 call 00007F64C133C3C8h 0x0000003b pop edi 0x0000003c mov dword ptr [esp+04h], edi 0x00000040 add dword ptr [esp+04h], 00000014h 0x00000048 inc edi 0x00000049 push edi 0x0000004a ret 0x0000004b pop edi 0x0000004c ret 0x0000004d xchg eax, esi 0x0000004e pushad 0x0000004f ja 00007F64C133C3CCh 0x00000055 jmp 00007F64C133C3D3h 0x0000005a popad 0x0000005b push eax 0x0000005c push eax 0x0000005d push edx 0x0000005e pushad 0x0000005f push eax 0x00000060 pop eax 0x00000061 pushad 0x00000062 popad 0x00000063 popad 0x00000064 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1032753 second address: 1032759 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1034806 second address: 103480C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10338AB second address: 10338B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 103288E second address: 103289D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10338B1 second address: 10338B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 103289D second address: 10328A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1034A79 second address: 1034A83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F64C0ADE4E6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10328A1 second address: 10328A7 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1033999 second address: 103399F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10308EE second address: 10308F8 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F64C133C3C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10308F8 second address: 10308FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10308FE second address: 1030902 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1030902 second address: 1030906 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1030906 second address: 103097E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push ebx 0x0000000b pushad 0x0000000c popad 0x0000000d pop ebx 0x0000000e pop eax 0x0000000f nop 0x00000010 mov dword ptr [ebp+122D39AFh], esi 0x00000016 push dword ptr fs:[00000000h] 0x0000001d push eax 0x0000001e mov edi, eax 0x00000020 pop edi 0x00000021 sub dword ptr [ebp+122D1CD0h], ebx 0x00000027 mov dword ptr fs:[00000000h], esp 0x0000002e push 00000000h 0x00000030 push ebp 0x00000031 call 00007F64C133C3C8h 0x00000036 pop ebp 0x00000037 mov dword ptr [esp+04h], ebp 0x0000003b add dword ptr [esp+04h], 00000015h 0x00000043 inc ebp 0x00000044 push ebp 0x00000045 ret 0x00000046 pop ebp 0x00000047 ret 0x00000048 call 00007F64C133C3D3h 0x0000004d clc 0x0000004e pop edi 0x0000004f mov eax, dword ptr [ebp+122D0D59h] 0x00000055 push FFFFFFFFh 0x00000057 add bh, FFFFFFE7h 0x0000005a adc ebx, 1DCA56EAh 0x00000060 push eax 0x00000061 push eax 0x00000062 push edx 0x00000063 push eax 0x00000064 push edx 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 103097E second address: 1030982 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1030982 second address: 103098C instructions: 0x00000000 rdtsc 0x00000002 jo 00007F64C133C3C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 103689F second address: 10368A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 103781E second address: 1037823 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1037823 second address: 103782D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F64C0ADE4E6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1049E55 second address: 1049E59 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1049E59 second address: 1049E5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 104A100 second address: 104A116 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F64C133C3D0h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 104A116 second address: 104A120 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F64C0ADE4E6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 104A2D6 second address: 104A2E3 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jng 00007F64C133C3C6h 0x00000009 pop edi 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1051E05 second address: 1051E09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1051E09 second address: 1051E0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1051E0F second address: 1051E24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F64C0ADE4F1h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1051E24 second address: 1051E48 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F64C133C3C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jmp 00007F64C133C3CCh 0x00000015 mov eax, dword ptr [eax] 0x00000017 push eax 0x00000018 push edx 0x00000019 push ecx 0x0000001a pushad 0x0000001b popad 0x0000001c pop ecx 0x0000001d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1051E48 second address: 1051E6E instructions: 0x00000000 rdtsc 0x00000002 jl 00007F64C0ADE4ECh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jnp 00007F64C0ADE4F0h 0x00000016 jmp 00007F64C0ADE4EAh 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1051E6E second address: 1051E74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1056E68 second address: 1056E6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1056E6C second address: 1056E76 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F64C133C3C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1057463 second address: 1057481 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jns 00007F64C0ADE4E6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F64C0ADE4F2h 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1057481 second address: 10574B3 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F64C133C3E1h 0x00000008 push eax 0x00000009 pushad 0x0000000a popad 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f ja 00007F64C133C3E0h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10579F8 second address: 1057A00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1057A00 second address: 1057A20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F64C133C3D8h 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1057A20 second address: 1057A2A instructions: 0x00000000 rdtsc 0x00000002 jg 00007F64C0ADE4ECh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1057A2A second address: 1057A43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F64C133C3D1h 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1057B89 second address: 1057B8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1057B8D second address: 1057B91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1057B91 second address: 1057BC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F64C0ADE4F7h 0x0000000c jmp 00007F64C0ADE4EDh 0x00000011 popad 0x00000012 popad 0x00000013 pushad 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1057BC2 second address: 1057BD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F64C133C3C6h 0x0000000a pop eax 0x0000000b pushad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1057EC9 second address: 1057ED5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F64C0ADE4E6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1057ED5 second address: 1057EDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1057EDE second address: 1057EE6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 105C3AF second address: 105C3C9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jno 00007F64C133C3D2h 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 105C3C9 second address: 105C3DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F64C0ADE4EFh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 105C939 second address: 105C949 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop eax 0x00000006 push esi 0x00000007 pushad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push edx 0x0000000b pop edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 105D2E3 second address: 105D2E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 105D2E9 second address: 105D2ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 105D2ED second address: 105D2F7 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F64C0ADE4E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 105D2F7 second address: 105D31E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C133C3CCh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F64C133C3D7h 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 105C0C1 second address: 105C0C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 105C0C5 second address: 105C0C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10622CE second address: 10622D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10622D3 second address: 10622E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F64C133C3C6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A126 second address: 101A12C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A12C second address: 101A14E instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F64C133C3C8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F64C133C3D2h 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A14E second address: 101A191 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnl 00007F64C0ADE4ECh 0x0000000c popad 0x0000000d nop 0x0000000e mov edi, dword ptr [ebp+122D2D5Ah] 0x00000014 lea eax, dword ptr [ebp+1247FE5Dh] 0x0000001a mov edi, dword ptr [ebp+122D2CBAh] 0x00000020 pushad 0x00000021 jmp 00007F64C0ADE4F1h 0x00000026 popad 0x00000027 nop 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b js 00007F64C0ADE4E6h 0x00000031 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A191 second address: 101A19E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A19E second address: 101A1A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A1A2 second address: 100100A instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F64C133C3C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b jmp 00007F64C133C3CAh 0x00000010 pop edx 0x00000011 popad 0x00000012 nop 0x00000013 sub dword ptr [ebp+122D1CD5h], eax 0x00000019 call dword ptr [ebp+122D2137h] 0x0000001f pushad 0x00000020 jmp 00007F64C133C3D1h 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F64C133C3CAh 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A28D second address: 101A293 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A65E second address: 101A664 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A777 second address: 101A77B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A77B second address: 101A785 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F64C133C3C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A785 second address: 101A78F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F64C0ADE4E6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A78F second address: E6DE4C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov dx, bx 0x0000000c push dword ptr [ebp+122D084Dh] 0x00000012 mov ecx, dword ptr [ebp+122D2C5Ah] 0x00000018 call dword ptr [ebp+122D25F6h] 0x0000001e pushad 0x0000001f mov dword ptr [ebp+122D1DF8h], ebx 0x00000025 xor eax, eax 0x00000027 add dword ptr [ebp+122D1E01h], ebx 0x0000002d mov edx, dword ptr [esp+28h] 0x00000031 pushad 0x00000032 and esi, dword ptr [ebp+122D2D0Eh] 0x00000038 sub eax, dword ptr [ebp+122D2D96h] 0x0000003e popad 0x0000003f mov dword ptr [ebp+122D2CFAh], eax 0x00000045 mov dword ptr [ebp+122D1DF8h], ecx 0x0000004b jmp 00007F64C133C3D4h 0x00000050 mov esi, 0000003Ch 0x00000055 stc 0x00000056 add esi, dword ptr [esp+24h] 0x0000005a jo 00007F64C133C3DDh 0x00000060 jmp 00007F64C133C3D7h 0x00000065 lodsw 0x00000067 jc 00007F64C133C3C7h 0x0000006d clc 0x0000006e add eax, dword ptr [esp+24h] 0x00000072 jns 00007F64C133C3CCh 0x00000078 mov ebx, dword ptr [esp+24h] 0x0000007c jmp 00007F64C133C3CDh 0x00000081 push eax 0x00000082 push eax 0x00000083 push edx 0x00000084 push edx 0x00000085 push eax 0x00000086 pop eax 0x00000087 pop edx 0x00000088 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A7F8 second address: 101A835 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 xor dword ptr [esp], 4576CE63h 0x0000000d push 00000000h 0x0000000f push ebx 0x00000010 call 00007F64C0ADE4E8h 0x00000015 pop ebx 0x00000016 mov dword ptr [esp+04h], ebx 0x0000001a add dword ptr [esp+04h], 00000018h 0x00000022 inc ebx 0x00000023 push ebx 0x00000024 ret 0x00000025 pop ebx 0x00000026 ret 0x00000027 mov ecx, dword ptr [ebp+122D2DCEh] 0x0000002d push 3D19EAF4h 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 push eax 0x00000036 push edx 0x00000037 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A835 second address: 101A83C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A962 second address: 101A968 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A968 second address: 101A96C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101A96C second address: 101A98F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C0ADE4F8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101AACD second address: 101AAD7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101B0C4 second address: 101B0E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007F64C0ADE4E6h 0x00000009 jmp 00007F64C0ADE4EAh 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push esi 0x00000013 push eax 0x00000014 push edx 0x00000015 push esi 0x00000016 pop esi 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101B0E0 second address: 101B0FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 nop 0x00000008 adc edx, 3555D757h 0x0000000e push 0000001Eh 0x00000010 and dl, 00000028h 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jc 00007F64C133C3C6h 0x0000001e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101B0FE second address: 101B116 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C0ADE4F4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101B228 second address: 101B22C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101B22C second address: 101B230 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101B418 second address: 101B4A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d mov dword ptr [ebp+122D1D18h], edx 0x00000013 lea eax, dword ptr [ebp+1247FEA1h] 0x00000019 mov di, bx 0x0000001c push eax 0x0000001d push esi 0x0000001e jmp 00007F64C133C3CEh 0x00000023 pop esi 0x00000024 mov dword ptr [esp], eax 0x00000027 push 00000000h 0x00000029 push esi 0x0000002a call 00007F64C133C3C8h 0x0000002f pop esi 0x00000030 mov dword ptr [esp+04h], esi 0x00000034 add dword ptr [esp+04h], 0000001Dh 0x0000003c inc esi 0x0000003d push esi 0x0000003e ret 0x0000003f pop esi 0x00000040 ret 0x00000041 mov ecx, edi 0x00000043 lea eax, dword ptr [ebp+1247FE5Dh] 0x00000049 push 00000000h 0x0000004b push esi 0x0000004c call 00007F64C133C3C8h 0x00000051 pop esi 0x00000052 mov dword ptr [esp+04h], esi 0x00000056 add dword ptr [esp+04h], 00000014h 0x0000005e inc esi 0x0000005f push esi 0x00000060 ret 0x00000061 pop esi 0x00000062 ret 0x00000063 stc 0x00000064 push eax 0x00000065 pushad 0x00000066 jmp 00007F64C133C3CAh 0x0000006b push eax 0x0000006c push edx 0x0000006d ja 00007F64C133C3C6h 0x00000073 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101B4A6 second address: 1001B0A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C0ADE4EFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d or dword ptr [ebp+122D1F05h], edx 0x00000013 call dword ptr [ebp+122D2FF5h] 0x00000019 jbe 00007F64C0ADE4F0h 0x0000001f pushad 0x00000020 pushad 0x00000021 popad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 106148F second address: 1061495 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1061495 second address: 106149F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F64C0ADE4E6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 106149F second address: 10614B4 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F64C133C3C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push esi 0x00000010 pop esi 0x00000011 push edi 0x00000012 pop edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10614B4 second address: 10614BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10614BA second address: 10614BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10614BF second address: 10614C9 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F64C0ADE4ECh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1061613 second address: 1061617 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1061617 second address: 1061659 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F64C0ADE4E6h 0x00000008 jmp 00007F64C0ADE4F4h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007F64C0ADE4F1h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F64C0ADE4EDh 0x0000001c push esi 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1061659 second address: 106165E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10617B2 second address: 1061808 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F64C0ADE4F5h 0x0000000a push esi 0x0000000b pop esi 0x0000000c jmp 00007F64C0ADE4F2h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 jng 00007F64C0ADE502h 0x0000001a jmp 00007F64C0ADE4EDh 0x0000001f jmp 00007F64C0ADE4EFh 0x00000024 pushad 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1061808 second address: 106180E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 106180E second address: 1061816 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1061816 second address: 106181B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 106181B second address: 1061830 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F64C0ADE4E6h 0x0000000a jmp 00007F64C0ADE4EBh 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1061DAE second address: 1061DBD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jnp 00007F64C133C3C6h 0x00000009 pushad 0x0000000a popad 0x0000000b pop edi 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 106717E second address: 1067191 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007F64C0ADE4EEh 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FD48BC second address: FD48C6 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F64C133C3CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FD48C6 second address: FD48D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F64C0ADE4F0h 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE55DA second address: FE55E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F64C133C3C6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE55E4 second address: FE55EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE55EE second address: FE55F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 106B393 second address: 106B3B3 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F64C0ADE4E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F64C0ADE4F6h 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 106B3B3 second address: 106B3D9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F64C133C3D8h 0x00000008 jnp 00007F64C133C3C6h 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push edx 0x00000012 pop edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 106B3D9 second address: 106B410 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F64C0ADE4E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f jmp 00007F64C0ADE4F1h 0x00000014 pushad 0x00000015 popad 0x00000016 pop ebx 0x00000017 pushad 0x00000018 jl 00007F64C0ADE4E6h 0x0000001e jl 00007F64C0ADE4E6h 0x00000024 jo 00007F64C0ADE4E6h 0x0000002a popad 0x0000002b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 106BA7E second address: 106BA82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 106BD8C second address: 106BD96 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F64C0ADE4E6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 106C00A second address: 106C029 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F64C133C3D3h 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jmp 00007F64C133C3CBh 0x00000013 pop edx 0x00000014 push ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 106C2B5 second address: 106C2CD instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F64C0ADE4E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F64C0ADE4EEh 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE1FA2 second address: FE1FA7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE1FA7 second address: FE1FBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F64C0ADE4EEh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1071A50 second address: 1071A8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 jmp 00007F64C133C3D0h 0x0000000c pushad 0x0000000d jo 00007F64C133C3C6h 0x00000013 pushad 0x00000014 popad 0x00000015 jmp 00007F64C133C3D7h 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d push esi 0x0000001e pop esi 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1071E97 second address: 1071EC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F64C0ADE4EFh 0x00000009 pop ebx 0x0000000a pop edi 0x0000000b pushad 0x0000000c pushad 0x0000000d jmp 00007F64C0ADE4EEh 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1071EC0 second address: 1071ED8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F64C133C3CFh 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 107434F second address: 1074359 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10744D2 second address: 10744D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1079135 second address: 107913B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 107913B second address: 1079155 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F64C133C3CEh 0x0000000b popad 0x0000000c pushad 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1079155 second address: 107915B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 107894D second address: 1078951 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1078BE5 second address: 1078BE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 107C003 second address: 107C032 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C133C3D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F64C133C3CDh 0x0000000f jp 00007F64C133C3CEh 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 107BA24 second address: 107BA40 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C0ADE4F8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 107BA40 second address: 107BA45 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 107BA45 second address: 107BA4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 107BD7B second address: 107BD80 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 107BD80 second address: 107BD86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 107BD86 second address: 107BDB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edi 0x00000008 jmp 00007F64C133C3D8h 0x0000000d push eax 0x0000000e push edx 0x0000000f jo 00007F64C133C3C6h 0x00000015 jne 00007F64C133C3C6h 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 107BDB4 second address: 107BDBA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1080026 second address: 108002A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 108002A second address: 1080030 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10802E7 second address: 10802F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F64C133C3C6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 108044F second address: 1080459 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F64C0ADE4E6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1080459 second address: 108046F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jnp 00007F64C133C3C6h 0x00000010 jbe 00007F64C133C3C6h 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 108046F second address: 1080491 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C0ADE4EDh 0x00000007 ja 00007F64C0ADE4E6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jne 00007F64C0ADE4E6h 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 108061A second address: 1080627 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F64C133C3C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101AEC0 second address: 101AF34 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C0ADE4EAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b jg 00007F64C0ADE504h 0x00000011 nop 0x00000012 call 00007F64C0ADE4F7h 0x00000017 mov edi, dword ptr [ebp+1247C29Ah] 0x0000001d pop edx 0x0000001e mov dh, 88h 0x00000020 mov ebx, dword ptr [ebp+1247FE9Ch] 0x00000026 mov dword ptr [ebp+122D1D39h], eax 0x0000002c add eax, ebx 0x0000002e and ecx, 1A9AD2C8h 0x00000034 push eax 0x00000035 push eax 0x00000036 push edx 0x00000037 push edx 0x00000038 jng 00007F64C0ADE4E6h 0x0000003e pop edx 0x0000003f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 101AF34 second address: 101AF3B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1081376 second address: 108137C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 108137C second address: 1081386 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F64C133C3C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1081386 second address: 108138C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 108138C second address: 1081392 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1081392 second address: 1081396 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1081396 second address: 10813A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 108A473 second address: 108A47F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F64C0ADE4E6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 108A47F second address: 108A4BC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F64C133C3D9h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F64C133C3D6h 0x00000012 jng 00007F64C133C3C6h 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FD7F02 second address: FD7F06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FD7F06 second address: FD7F0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FD7F0A second address: FD7F37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F64C0ADE4F1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F64C0ADE4F4h 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FD7F37 second address: FD7F54 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C133C3D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FD7F54 second address: FD7F5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FD7F5A second address: FD7F74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F64C133C3D6h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FD7F74 second address: FD7F88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C0ADE4F0h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1088493 second address: 10884B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F64C133C3C6h 0x0000000a jns 00007F64C133C3C6h 0x00000010 jmp 00007F64C133C3CDh 0x00000015 popad 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10884B1 second address: 10884DE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F64C0ADE4EBh 0x00000008 pop ebx 0x00000009 pushad 0x0000000a ja 00007F64C0ADE4E6h 0x00000010 pushad 0x00000011 popad 0x00000012 jg 00007F64C0ADE4E6h 0x00000018 jnl 00007F64C0ADE4E6h 0x0000001e popad 0x0000001f pop edx 0x00000020 pop eax 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10884DE second address: 10884E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10884E4 second address: 10884FA instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jnl 00007F64C0ADE4EEh 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1088783 second address: 1088797 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007F64C133C3CFh 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1088A8E second address: 1088A9E instructions: 0x00000000 rdtsc 0x00000002 jc 00007F64C0ADE4EAh 0x00000008 push edx 0x00000009 pop edx 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1088D43 second address: 1088D4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push edx 0x00000007 pop edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 108901D second address: 1089040 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 ja 00007F64C0ADE4E6h 0x00000009 jmp 00007F64C0ADE4F8h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1089040 second address: 108904C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 108904C second address: 1089052 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1089052 second address: 1089056 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1089056 second address: 108905A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10895FE second address: 108960A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 pushad 0x00000007 push ecx 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FD7EF7 second address: FD7F02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1089BC7 second address: 1089BCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1089BCD second address: 1089BD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1089BD6 second address: 1089C11 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F64C133C3C6h 0x00000008 jng 00007F64C133C3C6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F64C133C3D8h 0x00000018 jmp 00007F64C133C3D0h 0x0000001d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1089C11 second address: 1089C35 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F64C0ADE4E6h 0x00000009 jmp 00007F64C0ADE4EEh 0x0000000e push esi 0x0000000f pop esi 0x00000010 popad 0x00000011 jbe 00007F64C0ADE4EEh 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 108A20E second address: 108A212 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 108EBE1 second address: 108EBE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 109288E second address: 1092892 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1092892 second address: 1092898 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1092898 second address: 10928CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C133C3D9h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F64C133C3D5h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10919D9 second address: 10919DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10919DE second address: 10919F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F64C133C3CDh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1091B21 second address: 1091B32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop edx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b ja 00007F64C0ADE4E6h 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1091B32 second address: 1091B43 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F64C133C3C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push edx 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1091B43 second address: 1091B49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10921F8 second address: 1092248 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F64C133C3CDh 0x00000008 jmp 00007F64C133C3CEh 0x0000000d jnp 00007F64C133C3C6h 0x00000013 jmp 00007F64C133C3CFh 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F64C133C3D8h 0x00000020 push ecx 0x00000021 pop ecx 0x00000022 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1092248 second address: 109224C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10923D8 second address: 10923DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1092548 second address: 109256F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C0ADE4F3h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F64C0ADE4F0h 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 109B2C3 second address: 109B2F9 instructions: 0x00000000 rdtsc 0x00000002 je 00007F64C133C3CCh 0x00000008 jbe 00007F64C133C3C6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F64C133C3D6h 0x00000017 jnc 00007F64C133C3CEh 0x0000001d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10998B9 second address: 10998BF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10998BF second address: 10998D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F64C133C3CBh 0x0000000b push eax 0x0000000c push edx 0x0000000d jc 00007F64C133C3C6h 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10998D8 second address: 109994A instructions: 0x00000000 rdtsc 0x00000002 jne 00007F64C0ADE4E6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jng 00007F64C0ADE4E6h 0x00000013 jmp 00007F64C0ADE4F0h 0x00000018 pop eax 0x00000019 popad 0x0000001a pushad 0x0000001b pushad 0x0000001c jmp 00007F64C0ADE4F6h 0x00000021 pushad 0x00000022 popad 0x00000023 jmp 00007F64C0ADE4F2h 0x00000028 popad 0x00000029 jnl 00007F64C0ADE4FCh 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 109994A second address: 109995D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F64C133C3CFh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1099AD8 second address: 1099ADC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1099C3B second address: 1099C3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1099C3F second address: 1099C43 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1099F2D second address: 1099F43 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C133C3D2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1099F43 second address: 1099F5E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F64C0ADE4F6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1099F5E second address: 1099F82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F64C133C3CBh 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F64C133C3CAh 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1099F82 second address: 1099F9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F64C0ADE4E6h 0x0000000a jmp 00007F64C0ADE4EEh 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1099F9A second address: 1099FA7 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F64C133C3C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1099FA7 second address: 1099FAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 109A0EB second address: 109A0EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 109A0EF second address: 109A127 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jmp 00007F64C0ADE4F5h 0x0000000c push edx 0x0000000d pop edx 0x0000000e pop esi 0x0000000f popad 0x00000010 pushad 0x00000011 je 00007F64C0ADE4EEh 0x00000017 pushad 0x00000018 js 00007F64C0ADE4E6h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 109A127 second address: 109A12D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 109A12D second address: 109A140 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F64C0ADE4EBh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 109A2CA second address: 109A2CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 109A82D second address: 109A840 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F64C0ADE4EEh 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 109A840 second address: 109A846 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 109A846 second address: 109A85E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F64C0ADE4F2h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 109B168 second address: 109B170 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 109B170 second address: 109B174 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1098EE1 second address: 1098F09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F64C133C3D2h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b jne 00007F64C133C3E8h 0x00000011 push eax 0x00000012 push edx 0x00000013 jnl 00007F64C133C3C6h 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 109E410 second address: 109E417 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop ecx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 109E417 second address: 109E421 instructions: 0x00000000 rdtsc 0x00000002 je 00007F64C133C3CEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10A1411 second address: 10A1418 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edi 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10A3EA3 second address: 10A3EA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10A3EA8 second address: 10A3EAD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10A3EAD second address: 10A3EBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 pushad 0x00000008 push edx 0x00000009 pop edx 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10A3EBB second address: 10A3EC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10A402D second address: 10A4063 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 jg 00007F64C133C3C6h 0x0000000e push edx 0x0000000f pop edx 0x00000010 jmp 00007F64C133C3D2h 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 pushad 0x00000019 jmp 00007F64C133C3CEh 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10A4063 second address: 10A408C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F64C0ADE4EDh 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F64C0ADE4F3h 0x00000011 push edi 0x00000012 pop edi 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10AE627 second address: 10AE636 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F64C133C3CBh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10AE49D second address: 10AE4AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F64C0ADE4E6h 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10B4E51 second address: 10B4E8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jmp 00007F64C133C3CEh 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e jmp 00007F64C133C3D2h 0x00000013 jng 00007F64C133C3C6h 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c push esi 0x0000001d pop esi 0x0000001e jns 00007F64C133C3C6h 0x00000024 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10B481B second address: 10B4821 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10B6537 second address: 10B653C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE0584 second address: FE058A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FE058A second address: FE058E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10B83C0 second address: 10B83C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10B83C5 second address: 10B83CA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10B83CA second address: 10B83D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10B7FF4 second address: 10B7FFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10B7FFD second address: 10B8003 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10B8003 second address: 10B801B instructions: 0x00000000 rdtsc 0x00000002 jp 00007F64C133C3CAh 0x00000008 push ebx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b pop ebx 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 pushad 0x00000012 popad 0x00000013 pop ecx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10BB642 second address: 10BB65E instructions: 0x00000000 rdtsc 0x00000002 jp 00007F64C0ADE4E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jg 00007F64C0ADE4F2h 0x00000010 jmp 00007F64C0ADE4ECh 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10BB65E second address: 10BB691 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C133C3D2h 0x00000007 jmp 00007F64C133C3D8h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10BB691 second address: 10BB6AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F64C0ADE4EAh 0x00000007 jns 00007F64C0ADE4E6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 pop eax 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10BB6AB second address: 10BB6B5 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F64C133C3C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10BB6B5 second address: 10BB6C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007F64C0ADE4ECh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10BB840 second address: 10BB848 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10BB848 second address: 10BB855 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 js 00007F64C0ADE4F2h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10BB855 second address: 10BB85B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10BB85B second address: 10BB87D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edi 0x00000007 pop edi 0x00000008 jns 00007F64C0ADE4E6h 0x0000000e pop eax 0x0000000f jmp 00007F64C0ADE4F0h 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10C45D0 second address: 10C45EA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F64C133C3D5h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10C8842 second address: 10C884E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10C884E second address: 10C8858 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F64C133C3C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10CD99A second address: 10CD9B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F64C0ADE4F0h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10CDB03 second address: 10CDB09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10CDB09 second address: 10CDB12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10CDB12 second address: 10CDB18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10CDB18 second address: 10CDB22 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F64C0ADE4E6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10CDB22 second address: 10CDB28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10CDB28 second address: 10CDB3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F64C0ADE4F3h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10CDB3F second address: 10CDB51 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 push eax 0x00000011 pop eax 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10CDB51 second address: 10CDB65 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F64C0ADE4E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F64C0ADE4EAh 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10CE3F8 second address: 10CE3FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10CE3FD second address: 10CE405 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10CE405 second address: 10CE40B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10CE40B second address: 10CE420 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F64C0ADE4EAh 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10CE420 second address: 10CE42E instructions: 0x00000000 rdtsc 0x00000002 jng 00007F64C133C3C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b pushad 0x0000000c popad 0x0000000d pop ecx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10CEEC6 second address: 10CEED1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F64C0ADE4E6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10D2BB4 second address: 10D2BDA instructions: 0x00000000 rdtsc 0x00000002 je 00007F64C133C3C6h 0x00000008 jmp 00007F64C133C3D9h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push edi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10D2BDA second address: 10D2BE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10D2808 second address: 10D2812 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10D2812 second address: 10D2818 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10DD712 second address: 10DD732 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F64C133C3D7h 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10DD732 second address: 10DD738 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10DD738 second address: 10DD785 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F64C133C3D7h 0x00000008 pushad 0x00000009 popad 0x0000000a pop esi 0x0000000b jmp 00007F64C133C3CAh 0x00000010 pop edx 0x00000011 pop eax 0x00000012 pushad 0x00000013 jmp 00007F64C133C3D1h 0x00000018 jnc 00007F64C133C3CAh 0x0000001e push eax 0x0000001f push edx 0x00000020 jc 00007F64C133C3C6h 0x00000026 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10DD785 second address: 10DD78B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10DFCDC second address: 10DFD10 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F64C133C3D2h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jno 00007F64C133C3C6h 0x00000013 jmp 00007F64C133C3CAh 0x00000018 push esi 0x00000019 pop esi 0x0000001a popad 0x0000001b jnl 00007F64C133C3C8h 0x00000021 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FDCEE5 second address: FDCEF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 ja 00007F64C1328A56h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10E1224 second address: 10E1228 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10E1228 second address: 10E1231 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10F9639 second address: 10F9662 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F64C0BCCAC7h 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b jng 00007F64C0BCCAB6h 0x00000011 jl 00007F64C0BCCAB6h 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FD2CDD second address: FD2CE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11037D5 second address: 11037F3 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F64C0BCCAB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F64C0BCCAC0h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10F919A second address: 10F91B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F64C1328A67h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10F91B5 second address: 10F91EA instructions: 0x00000000 rdtsc 0x00000002 jns 00007F64C0BCCAB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b pushad 0x0000000c jmp 00007F64C0BCCAC2h 0x00000011 push ecx 0x00000012 jmp 00007F64C0BCCABCh 0x00000017 jnc 00007F64C0BCCAB6h 0x0000001d pop ecx 0x0000001e push ebx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 10FA571 second address: 10FA577 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
Edit tour
file.exe (PID: 5720 cmdline: 
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node