Sample viewer

vx.netlux.org/Virus.DOS.Swine.3000.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:03:21.113028905Z 44 PC: 130f0 | Get time 0x130f0: mov ah, dh
0x130f2: add ax, word ptr [0xe8]
0x130f6: add word ptr [0x5ea], ax
0x130fa: ret
0x130fb: mov ax, word ptr [0x5ea]
0x130fe: xor dx, dx
0x13100: mov bx, 0x100
0x13103: div bx
0x13105: mov word ptr [0x5e2], ax
0x13108: mov word ptr [0x5e4], dx
0x1310c: mov ax, dx
0x1310e: mov bx, 0x5d
0x13111: mul bx
0x13113: xor dx, dx
0x13115: mov bx, 0x100
0x13118: div bx
0x1311a: add dx, 0xd
0x1311d: mov word ptr [0x5e6], dx
0x13121: mov ax, word ptr [0x5e4]
0x13124: mov bx, 0x1c
2018-12-17T23:03:21.115578675Z 44 PC: 13342 | Get time 0x13342: cmp ch, 0xd
0x13345: jne 0x1334f
0x13347: cmp cl, 5
0x1334a: ja 0x1334f
0x1334c: call 0x136c1
0x1334f: mov ax, 0xdd25
0x13352: int 0x2f
0x13354: cmp ax, 0x4d2
0x13357: je 0x1339b
0x13359: call 0x23216
0x1335c: call 0x2329f
0x1335f: mov si, 0
0x13362: mov di, 0
0x13365: mov cx, 0xbb2
0x13368: cld
0x13369: rep movsb byte ptr es:[di], byte ptr [si]
0x1336b: push ds
0x1336c: push es
0x1336d: pop ds
0x1336e: mov ax, 0x352f
2018-12-17T23:03:21.117855073Z 82 PC: 1321a | Get DOS internal pointers (SYSVARS)
2018-12-17T23:03:21.118931237Z 53 PC: 1322c | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:03:21.120838782Z 37 PC: 1323c | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:03:21.122352829Z 44 PC: 13252 | Get time 0x13252: cli
0x13253: mov ax, 0x2501
0x13256: mov dx, word ptr [0x707]
0x1325a: push ds
0x1325b: mov ds, word ptr cs:[0x709]
0x13260: int 0x21
0x13262: pop ds
0x13263: sti
0x13264: ret
0x13265: mov cl, byte ptr [bp + di]
0x13267: push ax
0x13268: push bx
0x13269: push cx
0x1326a: push dx
0x1326b: push bp
0x1326c: push ds
0x1326d: push es
0x1326e: push cs
0x1326f: pop ds
0x13270: mov bp, sp
2018-12-17T23:03:21.124575213Z 37 PC: 13262 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:03:21.127495003Z 81 PC: 132a9 | Get current PSP
2018-12-17T23:03:21.128453925Z 82 PC: 132c2 | Get DOS internal pointers (SYSVARS)
2018-12-17T23:03:21.131202268Z 53 PC: 13378 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T23:03:21.140711652Z 37 PC: 1338d | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T23:03:21.142182349Z 37 PC: 1339a | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:21.143698335Z 81 PC: 13211 | Get current PSP
2018-12-17T23:03:21.144849294Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-17T23:03:21.149433181Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":14506,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:40:49.05831695Z 44 PC: 130f0 | Get time 0x130f0: mov ah, dh
0x130f2: add ax, word ptr [0xe8]
0x130f6: add word ptr [0x5ea], ax
0x130fa: ret
0x130fb: mov ax, word ptr [0x5ea]
0x130fe: xor dx, dx
0x13100: mov bx, 0x100
0x13103: div bx
0x13105: mov word ptr [0x5e2], ax
0x13108: mov word ptr [0x5e4], dx
0x1310c: mov ax, dx
0x1310e: mov bx, 0x5d
0x13111: mul bx
0x13113: xor dx, dx
0x13115: mov bx, 0x100
0x13118: div bx
0x1311a: add dx, 0xd
0x1311d: mov word ptr [0x5e6], dx
0x13121: mov ax, word ptr [0x5e4]
0x13124: mov bx, 0x1c
2018-12-25T12:40:49.06166444Z 44 PC: 13342 | Get time 0x13342: cmp ch, 0xd
0x13345: jne 0x1334f
0x13347: cmp cl, 5
0x1334a: ja 0x1334f
0x1334c: call 0x136c1
0x1334f: mov ax, 0xdd25
0x13352: int 0x2f
0x13354: cmp ax, 0x4d2
0x13357: je 0x1339b
0x13359: call 0x23216
0x1335c: call 0x2329f
0x1335f: mov si, 0
0x13362: mov di, 0
0x13365: mov cx, 0xbb2
0x13368: cld
0x13369: rep movsb byte ptr es:[di], byte ptr [si]
0x1336b: push ds
0x1336c: push es
0x1336d: pop ds
0x1336e: mov ax, 0x352f
2018-12-25T12:40:49.064436754Z 82 PC: 1321a | Get DOS internal pointers (SYSVARS)
2018-12-25T12:40:49.065781405Z 53 PC: 1322c | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:40:49.067149952Z 37 PC: 1323c | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:40:49.06933463Z 44 PC: 13252 | Get time 0x13252: cli
0x13253: mov ax, 0x2501
0x13256: mov dx, word ptr [0x707]
0x1325a: push ds
0x1325b: mov ds, word ptr cs:[0x709]
0x13260: int 0x21
0x13262: pop ds
0x13263: sti
0x13264: ret
0x13265: mov cl, byte ptr [bp + di]
0x13267: push ax
0x13268: push bx
0x13269: push cx
0x1326a: push dx
0x1326b: push bp
0x1326c: push ds
0x1326d: push es
0x1326e: push cs
0x1326f: pop ds
0x13270: mov bp, sp
2018-12-25T12:40:49.072224283Z 37 PC: 13262 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:40:49.073902424Z 81 PC: 132a9 | Get current PSP
2018-12-25T12:40:49.075181333Z 82 PC: 132c2 | Get DOS internal pointers (SYSVARS)
2018-12-25T12:40:49.078472439Z 53 PC: 13378 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:40:49.08006013Z 37 PC: 1338d | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:40:49.082076515Z 37 PC: 1339a | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:40:49.083602048Z 81 PC: 13211 | Get current PSP
2018-12-25T12:40:49.084574604Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-25T12:40:49.09148518Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":13,"Min":0,"Second":0,"TimeBased":true,"OriginalID":14506,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:40:49.10801785Z 44 PC: 130f0 | Get time 0x130f0: mov ah, dh
0x130f2: add ax, word ptr [0xe8]
0x130f6: add word ptr [0x5ea], ax
0x130fa: ret
0x130fb: mov ax, word ptr [0x5ea]
0x130fe: xor dx, dx
0x13100: mov bx, 0x100
0x13103: div bx
0x13105: mov word ptr [0x5e2], ax
0x13108: mov word ptr [0x5e4], dx
0x1310c: mov ax, dx
0x1310e: mov bx, 0x5d
0x13111: mul bx
0x13113: xor dx, dx
0x13115: mov bx, 0x100
0x13118: div bx
0x1311a: add dx, 0xd
0x1311d: mov word ptr [0x5e6], dx
0x13121: mov ax, word ptr [0x5e4]
0x13124: mov bx, 0x1c
2018-12-25T12:40:49.1105885Z 44 PC: 13342 | Get time 0x13342: cmp ch, 0xd
0x13345: jne 0x1334f
0x13347: cmp cl, 5
0x1334a: ja 0x1334f
0x1334c: call 0x136c1
0x1334f: mov ax, 0xdd25
0x13352: int 0x2f
0x13354: cmp ax, 0x4d2
0x13357: je 0x1339b
0x13359: call 0x23216
0x1335c: call 0x2329f
0x1335f: mov si, 0
0x13362: mov di, 0
0x13365: mov cx, 0xbb2
0x13368: cld
0x13369: rep movsb byte ptr es:[di], byte ptr [si]
0x1336b: push ds
0x1336c: push es
0x1336d: pop ds
0x1336e: mov ax, 0x352f
2018-12-25T12:40:51.163076307Z 9 PC: 136d6 | Display string (Could not find end pointer)
2018-12-25T12:40:51.175777623Z 82 PC: 1321a | Get DOS internal pointers (SYSVARS)
2018-12-25T12:40:51.177950223Z 53 PC: 1322c | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:40:51.17958459Z 37 PC: 1323c | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:40:51.180924267Z 44 PC: 13252 | Get time 0x13252: cli
0x13253: mov ax, 0x2501
0x13256: mov dx, word ptr [0x707]
0x1325a: push ds
0x1325b: mov ds, word ptr cs:[0x709]
0x13260: int 0x21
0x13262: pop ds
0x13263: sti
0x13264: ret
0x13265: mov cl, byte ptr [bp + di]
0x13267: push ax
0x13268: push bx
0x13269: push cx
0x1326a: push dx
0x1326b: push bp
0x1326c: push ds
0x1326d: push es
0x1326e: push cs
0x1326f: pop ds
0x13270: mov bp, sp
2018-12-25T12:40:51.190952959Z 37 PC: 13262 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:40:51.192203101Z 81 PC: 132a9 | Get current PSP
2018-12-25T12:40:51.193024666Z 82 PC: 132c2 | Get DOS internal pointers (SYSVARS)
2018-12-25T12:40:51.196552886Z 53 PC: 13378 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:40:51.197906205Z 37 PC: 1338d | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:40:51.199307433Z 37 PC: 1339a | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:40:51.208875736Z 81 PC: 13211 | Get current PSP
2018-12-25T12:40:51.210860499Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-25T12:40:51.217853661Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":13,"Min":6,"Second":0,"TimeBased":true,"OriginalID":14506,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:40:49.391599097Z 44 PC: 130f0 | Get time 0x130f0: mov ah, dh
0x130f2: add ax, word ptr [0xe8]
0x130f6: add word ptr [0x5ea], ax
0x130fa: ret
0x130fb: mov ax, word ptr [0x5ea]
0x130fe: xor dx, dx
0x13100: mov bx, 0x100
0x13103: div bx
0x13105: mov word ptr [0x5e2], ax
0x13108: mov word ptr [0x5e4], dx
0x1310c: mov ax, dx
0x1310e: mov bx, 0x5d
0x13111: mul bx
0x13113: xor dx, dx
0x13115: mov bx, 0x100
0x13118: div bx
0x1311a: add dx, 0xd
0x1311d: mov word ptr [0x5e6], dx
0x13121: mov ax, word ptr [0x5e4]
0x13124: mov bx, 0x1c
2018-12-25T12:40:49.394022763Z 44 PC: 13342 | Get time 0x13342: cmp ch, 0xd
0x13345: jne 0x1334f
0x13347: cmp cl, 5
0x1334a: ja 0x1334f
0x1334c: call 0x136c1
0x1334f: mov ax, 0xdd25
0x13352: int 0x2f
0x13354: cmp ax, 0x4d2
0x13357: je 0x1339b
0x13359: call 0x23216
0x1335c: call 0x2329f
0x1335f: mov si, 0
0x13362: mov di, 0
0x13365: mov cx, 0xbb2
0x13368: cld
0x13369: rep movsb byte ptr es:[di], byte ptr [si]
0x1336b: push ds
0x1336c: push es
0x1336d: pop ds
0x1336e: mov ax, 0x352f
2018-12-25T12:40:49.397838198Z 82 PC: 1321a | Get DOS internal pointers (SYSVARS)
2018-12-25T12:40:49.399097403Z 53 PC: 1322c | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:40:49.400558201Z 37 PC: 1323c | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:40:49.403418934Z 44 PC: 13252 | Get time 0x13252: cli
0x13253: mov ax, 0x2501
0x13256: mov dx, word ptr [0x707]
0x1325a: push ds
0x1325b: mov ds, word ptr cs:[0x709]
0x13260: int 0x21
0x13262: pop ds
0x13263: sti
0x13264: ret
0x13265: mov cl, byte ptr [bp + di]
0x13267: push ax
0x13268: push bx
0x13269: push cx
0x1326a: push dx
0x1326b: push bp
0x1326c: push ds
0x1326d: push es
0x1326e: push cs
0x1326f: pop ds
0x13270: mov bp, sp
2018-12-25T12:40:49.406818807Z 37 PC: 13262 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:40:49.408118744Z 81 PC: 132a9 | Get current PSP
2018-12-25T12:40:49.409595625Z 82 PC: 132c2 | Get DOS internal pointers (SYSVARS)
2018-12-25T12:40:49.412701521Z 53 PC: 13378 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:40:49.417832542Z 37 PC: 1338d | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:40:49.420005219Z 37 PC: 1339a | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:40:49.422614533Z 81 PC: 13211 | Get current PSP
2018-12-25T12:40:49.424194673Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-25T12:40:49.431035472Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":14506,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:40:49.937714048Z 44 PC: 130f0 | Get time 0x130f0: mov ah, dh
0x130f2: add ax, word ptr [0xe8]
0x130f6: add word ptr [0x5ea], ax
0x130fa: ret
0x130fb: mov ax, word ptr [0x5ea]
0x130fe: xor dx, dx
0x13100: mov bx, 0x100
0x13103: div bx
0x13105: mov word ptr [0x5e2], ax
0x13108: mov word ptr [0x5e4], dx
0x1310c: mov ax, dx
0x1310e: mov bx, 0x5d
0x13111: mul bx
0x13113: xor dx, dx
0x13115: mov bx, 0x100
0x13118: div bx
0x1311a: add dx, 0xd
0x1311d: mov word ptr [0x5e6], dx
0x13121: mov ax, word ptr [0x5e4]
0x13124: mov bx, 0x1c
2018-12-25T12:40:49.940695181Z 44 PC: 13342 | Get time 0x13342: cmp ch, 0xd
0x13345: jne 0x1334f
0x13347: cmp cl, 5
0x1334a: ja 0x1334f
0x1334c: call 0x136c1
0x1334f: mov ax, 0xdd25
0x13352: int 0x2f
0x13354: cmp ax, 0x4d2
0x13357: je 0x1339b
0x13359: call 0x23216
0x1335c: call 0x2329f
0x1335f: mov si, 0
0x13362: mov di, 0
0x13365: mov cx, 0xbb2
0x13368: cld
0x13369: rep movsb byte ptr es:[di], byte ptr [si]
0x1336b: push ds
0x1336c: push es
0x1336d: pop ds
0x1336e: mov ax, 0x352f
2018-12-25T12:40:49.943249611Z 82 PC: 1321a | Get DOS internal pointers (SYSVARS)
2018-12-25T12:40:49.944417914Z 53 PC: 1322c | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:40:49.946621926Z 37 PC: 1323c | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:40:49.94800088Z 44 PC: 13252 | Get time 0x13252: cli
0x13253: mov ax, 0x2501
0x13256: mov dx, word ptr [0x707]
0x1325a: push ds
0x1325b: mov ds, word ptr cs:[0x709]
0x13260: int 0x21
0x13262: pop ds
0x13263: sti
0x13264: ret
0x13265: mov cl, byte ptr [bp + di]
0x13267: push ax
0x13268: push bx
0x13269: push cx
0x1326a: push dx
0x1326b: push bp
0x1326c: push ds
0x1326d: push es
0x1326e: push cs
0x1326f: pop ds
0x13270: mov bp, sp
2018-12-25T12:40:49.949999803Z 37 PC: 13262 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:40:49.951401774Z 81 PC: 132a9 | Get current PSP
2018-12-25T12:40:49.953981655Z 82 PC: 132c2 | Get DOS internal pointers (SYSVARS)
2018-12-25T12:40:49.962435525Z 53 PC: 13378 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:40:49.967204663Z 37 PC: 1338d | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:40:49.96980062Z 37 PC: 1339a | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:40:49.971880678Z 81 PC: 13211 | Get current PSP
2018-12-25T12:40:49.972785614Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-25T12:40:49.979516586Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":13,"Min":0,"Second":0,"TimeBased":true,"OriginalID":14506,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:40:50.014676366Z 2 PC: 1268d | Character output (Char = '45')
2018-12-25T12:40:50.01731041Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.018869639Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.020399079Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.022358016Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.024159539Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.025757646Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.02751498Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.029674118Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.031630466Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.033568189Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.03549365Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.037655026Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.039378347Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.046953378Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.048816258Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.051321668Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:40:50.053019049Z 2 PC: 1268d | Character output (See above)

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":13,"Min":6,"Second":0,"TimeBased":true,"OriginalID":14506,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:40:49.917293327Z 44 PC: 130f0 | Get time 0x130f0: mov ah, dh
0x130f2: add ax, word ptr [0xe8]
0x130f6: add word ptr [0x5ea], ax
0x130fa: ret
0x130fb: mov ax, word ptr [0x5ea]
0x130fe: xor dx, dx
0x13100: mov bx, 0x100
0x13103: div bx
0x13105: mov word ptr [0x5e2], ax
0x13108: mov word ptr [0x5e4], dx
0x1310c: mov ax, dx
0x1310e: mov bx, 0x5d
0x13111: mul bx
0x13113: xor dx, dx
0x13115: mov bx, 0x100
0x13118: div bx
0x1311a: add dx, 0xd
0x1311d: mov word ptr [0x5e6], dx
0x13121: mov ax, word ptr [0x5e4]
0x13124: mov bx, 0x1c
2018-12-25T12:40:49.920438463Z 44 PC: 13342 | Get time 0x13342: cmp ch, 0xd
0x13345: jne 0x1334f
0x13347: cmp cl, 5
0x1334a: ja 0x1334f
0x1334c: call 0x136c1
0x1334f: mov ax, 0xdd25
0x13352: int 0x2f
0x13354: cmp ax, 0x4d2
0x13357: je 0x1339b
0x13359: call 0x23216
0x1335c: call 0x2329f
0x1335f: mov si, 0
0x13362: mov di, 0
0x13365: mov cx, 0xbb2
0x13368: cld
0x13369: rep movsb byte ptr es:[di], byte ptr [si]
0x1336b: push ds
0x1336c: push es
0x1336d: pop ds
0x1336e: mov ax, 0x352f
2018-12-25T12:40:49.92288408Z 82 PC: 1321a | Get DOS internal pointers (SYSVARS)
2018-12-25T12:40:49.923905739Z 53 PC: 1322c | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:40:49.925171314Z 37 PC: 1323c | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:40:49.927110839Z 44 PC: 13252 | Get time 0x13252: cli
0x13253: mov ax, 0x2501
0x13256: mov dx, word ptr [0x707]
0x1325a: push ds
0x1325b: mov ds, word ptr cs:[0x709]
0x13260: int 0x21
0x13262: pop ds
0x13263: sti
0x13264: ret
0x13265: mov cl, byte ptr [bp + di]
0x13267: push ax
0x13268: push bx
0x13269: push cx
0x1326a: push dx
0x1326b: push bp
0x1326c: push ds
0x1326d: push es
0x1326e: push cs
0x1326f: pop ds
0x13270: mov bp, sp
2018-12-25T12:40:49.929474891Z 37 PC: 13262 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:40:49.930821133Z 81 PC: 132a9 | Get current PSP
2018-12-25T12:40:49.932363364Z 82 PC: 132c2 | Get DOS internal pointers (SYSVARS)
2018-12-25T12:40:49.935018513Z 53 PC: 13378 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:40:49.93650283Z 37 PC: 1338d | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:40:49.938991785Z 37 PC: 1339a | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:40:49.940383008Z 81 PC: 13211 | Get current PSP
2018-12-25T12:40:49.941268009Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-25T12:40:49.948410836Z 76 PC: 12a86 | Terminate with return code (Return code = '36')