Sample viewer

vx.netlux.org/Virus.DOS.Riot.Conjurer.300

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:03:43.571474606Z 26 PC: 12a71 | Set disk transfer address
2018-12-17T23:03:43.573072983Z 37 PC: 12a7e | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:03:43.575055713Z 37 PC: 12a82 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:03:43.576230974Z 44 PC: 12a86 | Get time 0x12a86: cmp dl, 0xd
0x12a89: jg 0x12a8f
0x12a8b: mov al, 0x82
0x12a8d: out 0x21, al
0x12a8f: mov ah, 0x2c
0x12a91: int 0x21
0x12a93: cmp dl, 0x32
0x12a96: jl 0x12ab7
0x12a98: mov ah, 9
0x12a9a: lea dx, word ptr [bp + 0x167]
0x12a9e: int 0x21
0x12aa0: mov ah, 0
0x12aa2: int 0x16
0x12aa4: jmp 0x12ab7
0x12aa6: nop
0x12aa7: inc bx
0x12aa8: outsw dx, word ptr [si]
0x12aa9: dec si
0x12aaa: dec dx
0x12aab: jne 0x12aff
2018-12-17T23:03:43.578495123Z 44 PC: 12a93 | Get time 0x12a93: cmp dl, 0x32
0x12a96: jl 0x12ab7
0x12a98: mov ah, 9
0x12a9a: lea dx, word ptr [bp + 0x167]
0x12a9e: int 0x21
0x12aa0: mov ah, 0
0x12aa2: int 0x16
0x12aa4: jmp 0x12ab7
0x12aa6: nop
0x12aa7: inc bx
0x12aa8: outsw dx, word ptr [si]
0x12aa9: dec si
0x12aaa: dec dx
0x12aab: jne 0x12aff
0x12aad: push dx
0x12aaf: xor si, word ptr cs:[bx + si]
0x12ab2: xor byte ptr [bx + di], ah
0x12ab4: or cl, byte ptr [di]
0x12ab6: and al, 0xc6
0x12ab8: xchg byte ptr [bx + di + 1], dh
2018-12-17T23:03:43.581479728Z 9 PC: 12aa0 | Display string (Could not find end pointer)