Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDA932 NtWriteVirtualMemory,LoadLibraryA,NtProtectVirtualMemory, | 0_2_03BDA932 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD611B NtWriteVirtualMemory, | 0_2_03BD611B |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD66C6 NtAllocateVirtualMemory, | 0_2_03BD66C6 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD57AF NtWriteVirtualMemory, | 0_2_03BD57AF |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD6795 NtAllocateVirtualMemory, | 0_2_03BD6795 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9D8D NtWriteVirtualMemory, | 0_2_03BD9D8D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD6BFE NtWriteVirtualMemory, | 0_2_03BD6BFE |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD4DF2 NtWriteVirtualMemory, | 0_2_03BD4DF2 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD0BEC NtWriteVirtualMemory, | 0_2_03BD0BEC |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD53E5 NtWriteVirtualMemory, | 0_2_03BD53E5 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD45CD NtWriteVirtualMemory, | 0_2_03BD45CD |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD51C1 NtWriteVirtualMemory, | 0_2_03BD51C1 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD5B03 NtWriteVirtualMemory, | 0_2_03BD5B03 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD4F79 NtWriteVirtualMemory, | 0_2_03BD4F79 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD556D NtWriteVirtualMemory, | 0_2_03BD556D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD5B65 NtWriteVirtualMemory, | 0_2_03BD5B65 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD5681 NtWriteVirtualMemory, | 0_2_03BD5681 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDB4F9 NtWriteVirtualMemory, | 0_2_03BDB4F9 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD26E7 NtWriteVirtualMemory, | 0_2_03BD26E7 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD4CD1 NtWriteVirtualMemory, | 0_2_03BD4CD1 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD58CD NtWriteVirtualMemory, | 0_2_03BD58CD |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD52C9 NtWriteVirtualMemory, | 0_2_03BD52C9 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD5A25 NtWriteVirtualMemory, | 0_2_03BD5A25 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD347D NtWriteVirtualMemory, | 0_2_03BD347D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD547B NtWriteVirtualMemory, | 0_2_03BD547B |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD5072 NtWriteVirtualMemory, | 0_2_03BD5072 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDB3EA | 0_2_03BDB3EA |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDADC1 | 0_2_03BDADC1 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD0F36 | 0_2_03BD0F36 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDA932 | 0_2_03BDA932 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD611B | 0_2_03BD611B |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD0680 | 0_2_03BD0680 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD66C6 | 0_2_03BD66C6 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD97B7 | 0_2_03BD97B7 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD45B3 | 0_2_03BD45B3 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD57AF | 0_2_03BD57AF |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD49AE | 0_2_03BD49AE |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDAFA5 | 0_2_03BDAFA5 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD17A1 | 0_2_03BD17A1 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9D8D | 0_2_03BD9D8D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDA18A | 0_2_03BDA18A |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD6BFE | 0_2_03BD6BFE |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD23F9 | 0_2_03BD23F9 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD35F9 | 0_2_03BD35F9 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD11F5 | 0_2_03BD11F5 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD4DF2 | 0_2_03BD4DF2 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9FF2 | 0_2_03BD9FF2 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD0BEC | 0_2_03BD0BEC |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9FEC | 0_2_03BD9FEC |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD53E5 | 0_2_03BD53E5 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD63E6 | 0_2_03BD63E6 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9FD4 | 0_2_03BD9FD4 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD07D1 | 0_2_03BD07D1 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD45CD | 0_2_03BD45CD |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDADCD | 0_2_03BDADCD |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDB1CF | 0_2_03BDB1CF |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9FCE | 0_2_03BD9FCE |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD51C1 | 0_2_03BD51C1 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9D39 | 0_2_03BD9D39 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9F3A | 0_2_03BD9F3A |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD972D | 0_2_03BD972D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9529 | 0_2_03BD9529 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDAF29 | 0_2_03BDAF29 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD6D27 | 0_2_03BD6D27 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD311C | 0_2_03BD311C |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD2B1E | 0_2_03BD2B1E |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD131A | 0_2_03BD131A |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD1107 | 0_2_03BD1107 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD5B03 | 0_2_03BD5B03 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD317D | 0_2_03BD317D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD8F7D | 0_2_03BD8F7D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD2F7E | 0_2_03BD2F7E |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD4F79 | 0_2_03BD4F79 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD0F77 | 0_2_03BD0F77 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD556D | 0_2_03BD556D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD0361 | 0_2_03BD0361 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD415D | 0_2_03BD415D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD0F51 | 0_2_03BD0F51 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD3951 | 0_2_03BD3951 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD374E | 0_2_03BD374E |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD1546 | 0_2_03BD1546 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDAEBB | 0_2_03BDAEBB |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDB6B4 | 0_2_03BDB6B4 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDB091 | 0_2_03BDB091 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD5681 | 0_2_03BD5681 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDB4F9 | 0_2_03BDB4F9 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD08E5 | 0_2_03BD08E5 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD26E7 | 0_2_03BD26E7 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD94E6 | 0_2_03BD94E6 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD1EE2 | 0_2_03BD1EE2 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD40DC | 0_2_03BD40DC |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD4CD1 | 0_2_03BD4CD1 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD34D3 | 0_2_03BD34D3 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD58CD | 0_2_03BD58CD |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD52C9 | 0_2_03BD52C9 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD8C3C | 0_2_03BD8C3C |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD303F | 0_2_03BD303F |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDB036 | 0_2_03BDB036 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD5A25 | 0_2_03BD5A25 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD3827 | 0_2_03BD3827 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD141F | 0_2_03BD141F |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD6C1E | 0_2_03BD6C1E |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD347D | 0_2_03BD347D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD547B | 0_2_03BD547B |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9E75 | 0_2_03BD9E75 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD5072 | 0_2_03BD5072 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD1665 | 0_2_03BD1665 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDAE57 | 0_2_03BDAE57 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD964D | 0_2_03BD964D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_0056415D | 31_2_0056415D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_00564642 | 31_2_00564642 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_005649AE | 31_2_005649AE |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_00407A2B push esp; retf | 0_2_00407A2C |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD636D push ebp; ret | 0_2_03BD63AB |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD0005 push esi; iretd | 0_2_03BD001D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD0062 push esi; iretd | 0_2_03BD008F |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_00562A54 push ds; ret | 31_2_00562A5E |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_0056374B push edi; ret | 31_2_0056374D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_00561C76 push ds; ret | 31_2_00561C8A |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_00562501 push ds; retf | 31_2_0056252A |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_00563335 push ds; retf | 31_2_00563356 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_00561F30 push ds; retf | 31_2_00561F36 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_0056282F push ds; retf | 31_2_005628CE |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_005608D7 push edx; iretd | 31_2_005608D8 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_005610C8 push ds; retf | 31_2_005610D6 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_005629FA push ds; retf | 31_2_005629FE |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_0056289C push ds; retf | 31_2_005628CE |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_0056379D push ds; retf | 31_2_005637AA |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_00561984 push ds; ret | 31_2_005619A6 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 31_2_005625BA push ds; ret | 31_2_005625C6 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD0F36 TerminateProcess,LoadLibraryA, | 0_2_03BD0F36 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9D8D NtWriteVirtualMemory, | 0_2_03BD9D8D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BDA18A | 0_2_03BDA18A |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD35F9 | 0_2_03BD35F9 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD11F5 TerminateProcess, | 0_2_03BD11F5 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9FF2 | 0_2_03BD9FF2 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD0BEC NtWriteVirtualMemory, | 0_2_03BD0BEC |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9FEC | 0_2_03BD9FEC |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9FD4 | 0_2_03BD9FD4 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9FCE | 0_2_03BD9FCE |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9D39 | 0_2_03BD9D39 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9F3A | 0_2_03BD9F3A |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD2B1E | 0_2_03BD2B1E |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD131A TerminateProcess, | 0_2_03BD131A |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD1107 TerminateProcess, | 0_2_03BD1107 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD8F7D | 0_2_03BD8F7D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD0F77 TerminateProcess, | 0_2_03BD0F77 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD0F51 TerminateProcess, | 0_2_03BD0F51 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD374E | 0_2_03BD374E |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD1546 TerminateProcess, | 0_2_03BD1546 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD34D3 | 0_2_03BD34D3 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD3827 | 0_2_03BD3827 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD141F TerminateProcess, | 0_2_03BD141F |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD347D NtWriteVirtualMemory, | 0_2_03BD347D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9E75 | 0_2_03BD9E75 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | RDTSC instruction interceptor: First address: 0000000003BD9586 second address: 0000000003BD9586 instructions: |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | RDTSC instruction interceptor: First address: 0000000003BDB185 second address: 0000000003BDB185 instructions: |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | RDTSC instruction interceptor: First address: 0000000003BD62DB second address: 0000000003BD62DB instructions: |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | RDTSC instruction interceptor: First address: 0000000003BDA3AE second address: 0000000003BDA247 instructions: 0x00000000 rdtsc 0x00000002 mov eax, 00000001h 0x00000007 cpuid 0x00000009 popad 0x0000000a mov dword ptr [ebp+000001A5h], edx 0x00000010 cmp cx, ax 0x00000013 mov edx, F94DAB62h 0x00000018 xor edx, BD1A4B48h 0x0000001e xor edx, C6B15F47h 0x00000024 jmp 00007F1B0CAFAC52h 0x00000026 cmp si, 0F1Bh 0x0000002b sub edx, 82E5DE6Eh 0x00000031 cmp ah, bh 0x00000033 cmp word ptr [ebx+05h], dx 0x00000037 mov edx, dword ptr [ebp+000001A5h] 0x0000003d jne 00007F1B0CAFAC2Ch 0x0000003f mov dword ptr [ebp+00000189h], ecx 0x00000045 mov ecx, CF26FC6Ch 0x0000004a xor ecx, 90037EF2h 0x00000050 test ax, dx 0x00000053 add ecx, B269DCB6h 0x00000059 cmp cl, al 0x0000005b add ecx, EE70C0ACh 0x00000061 nop 0x00000062 cmp dword ptr [ebp+00000189h], ecx 0x00000068 mov ecx, dword ptr [ebp+00000189h] 0x0000006e jne 00007F1B0CAFA884h 0x00000074 inc ecx 0x00000075 inc ebx 0x00000076 mov dword ptr [ebp+0000017Dh], ecx 0x0000007c mov ecx, 3E44CBEFh 0x00000081 xor ecx, B436F885h 0x00000087 add ecx, 0943E9D7h 0x0000008d xor ecx, 0326DE11h 0x00000093 test bl, FFFFFFE4h 0x00000096 cmp dword ptr [ebx], ecx 0x00000098 mov ecx, dword ptr [ebp+0000017Dh] 0x0000009e jne 00007F1B0CAFAC86h 0x000000a4 mov dword ptr [ebp+00000171h], edi 0x000000aa mov edi, dword ptr [ebx] 0x000000ac cmp edx, edi 0x000000ae mov edi, dword ptr [ebp+00000171h] 0x000000b4 jne 00007F1B0CAFAC08h 0x000000b6 mov dword ptr [ebp+0000022Eh], eax 0x000000bc test ax, cx 0x000000bf mov eax, 90506750h 0x000000c4 test bx, bx 0x000000c7 pushad 0x000000c8 lfence 0x000000cb rdtsc |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | RDTSC instruction interceptor: First address: 0000000003BD5953 second address: 0000000003BD5953 instructions: |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | RDTSC instruction interceptor: First address: 0000000003BD9586 second address: 0000000003BD9586 instructions: |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | RDTSC instruction interceptor: First address: 0000000003BDB185 second address: 0000000003BDB185 instructions: |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | RDTSC instruction interceptor: First address: 0000000003BDA36A second address: 0000000003BDA381 instructions: 0x00000000 rdtsc 0x00000002 lfence 0x00000005 shl edx, 20h 0x00000008 or edx, eax 0x0000000a popad 0x0000000b xor edi, ED27E950h 0x00000011 pushad 0x00000012 mov eax, 000000C6h 0x00000017 rdtsc |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | RDTSC instruction interceptor: First address: 0000000003BD62DB second address: 0000000003BD62DB instructions: |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | RDTSC instruction interceptor: First address: 0000000003BDA3AE second address: 0000000003BDA247 instructions: 0x00000000 rdtsc 0x00000002 mov eax, 00000001h 0x00000007 cpuid 0x00000009 popad 0x0000000a mov dword ptr [ebp+000001A5h], edx 0x00000010 cmp cx, ax 0x00000013 mov edx, F94DAB62h 0x00000018 xor edx, BD1A4B48h 0x0000001e xor edx, C6B15F47h 0x00000024 jmp 00007F1B0CAFAC52h 0x00000026 cmp si, 0F1Bh 0x0000002b sub edx, 82E5DE6Eh 0x00000031 cmp ah, bh 0x00000033 cmp word ptr [ebx+05h], dx 0x00000037 mov edx, dword ptr [ebp+000001A5h] 0x0000003d jne 00007F1B0CAFAC2Ch 0x0000003f mov dword ptr [ebp+00000189h], ecx 0x00000045 mov ecx, CF26FC6Ch 0x0000004a xor ecx, 90037EF2h 0x00000050 test ax, dx 0x00000053 add ecx, B269DCB6h 0x00000059 cmp cl, al 0x0000005b add ecx, EE70C0ACh 0x00000061 nop 0x00000062 cmp dword ptr [ebp+00000189h], ecx 0x00000068 mov ecx, dword ptr [ebp+00000189h] 0x0000006e jne 00007F1B0CAFA884h 0x00000074 inc ecx 0x00000075 inc ebx 0x00000076 mov dword ptr [ebp+0000017Dh], ecx 0x0000007c mov ecx, 3E44CBEFh 0x00000081 xor ecx, B436F885h 0x00000087 add ecx, 0943E9D7h 0x0000008d xor ecx, 0326DE11h 0x00000093 test bl, FFFFFFE4h 0x00000096 cmp dword ptr [ebx], ecx 0x00000098 mov ecx, dword ptr [ebp+0000017Dh] 0x0000009e jne 00007F1B0CAFAC86h 0x000000a4 mov dword ptr [ebp+00000171h], edi 0x000000aa mov edi, dword ptr [ebx] 0x000000ac cmp edx, edi 0x000000ae mov edi, dword ptr [ebp+00000171h] 0x000000b4 jne 00007F1B0CAFAC08h 0x000000b6 mov dword ptr [ebp+0000022Eh], eax 0x000000bc test ax, cx 0x000000bf mov eax, 90506750h 0x000000c4 test bx, bx 0x000000c7 pushad 0x000000c8 lfence 0x000000cb rdtsc |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | RDTSC instruction interceptor: First address: 0000000003BD5953 second address: 0000000003BD5953 instructions: |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9D8D mov eax, dword ptr fs:[00000030h] | 0_2_03BD9D8D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD9D39 mov eax, dword ptr fs:[00000030h] | 0_2_03BD9D39 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD8769 mov eax, dword ptr fs:[00000030h] | 0_2_03BD8769 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD40DC mov eax, dword ptr fs:[00000030h] | 0_2_03BD40DC |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD8E26 mov eax, dword ptr fs:[00000030h] | 0_2_03BD8E26 |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD347D mov eax, dword ptr fs:[00000030h] | 0_2_03BD347D |
Source: C:\Users\user\Desktop\KHAWATMI CO.IMPORT & EXPORT.exe | Code function: 0_2_03BD6245 mov eax, dword ptr fs:[00000030h] | 0_2_03BD6245 |