Sample viewer

vx.netlux.org/Virus.DOS.Wit.Remor.555

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:05:50.304094911Z 26 PC: 12a71 | Set disk transfer address
2018-12-17T23:05:50.305872158Z 42 PC: 12a7d | Get date 0x12a7d: cmp al, 0
0x12a7f: jne 0x12a96
0x12a81: push word ptr [0]
0x12a85: pop word ptr [0x14a]
0x12a89: mov cx, 1
0x12a8c: jcxz 0x12a90
0x12a8e: jmp 0x12a96
0x12a90: mov dx, 0x2c3
0x12a93: call 0x12abe
0x12a96: cmp dh, 4
0x12a99: jne 0x12aaf
0x12a9b: cmp dl, 0xf
0x12a9e: jne 0x12aaf
0x12aa0: mov ax, 0x1010
0x12aa3: out 0x70, ax
0x12aa5: mov dx, 0x2a5
0x12aa8: call 0x12abe
0x12aab: mov al, 0xfe
0x12aad: out 0x64, al
0x12aaf: mov ah, byte ptr [bp + 5]
2018-12-17T23:05:50.309010526Z 78 PC: 12ab9 | Find first file
2018-12-17T23:05:50.319646812Z 67 PC: 12ad2 | Get or set file attributes
2018-12-17T23:05:50.326070435Z 67 PC: 12ae0 | Get or set file attributes
2018-12-17T23:05:50.343406362Z 61 PC: 12ae8 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:05:50.351049942Z 87 PC: 12af5 | Get or set file date and time
2018-12-17T23:05:50.35376715Z 63 PC: 12b0f | Read file or device (Read 555 bytes on handle 5)
2018-12-17T23:05:50.362600084Z 66 PC: 12b2c | Move file pointer
2018-12-17T23:05:50.364303021Z 66 PC: 12b4a | Move file pointer
2018-12-17T23:05:50.3658423Z 64 PC: 12b55 | Write file or device (Write 555 bytes on handle 5)
2018-12-17T23:05:50.375354256Z 66 PC: 12b60 | Move file pointer
2018-12-17T23:05:50.377302815Z 64 PC: 12b7a | Write file or device (Write 407 bytes on handle 5)
2018-12-17T23:05:50.380690354Z 87 PC: 12b89 | Get or set file date and time
2018-12-17T23:05:50.382692336Z 62 PC: 12b8e | Close file
2018-12-17T23:05:50.39108783Z 67 PC: 12b9d | Get or set file attributes
2018-12-17T23:05:50.401900551Z 79 PC: 12ab9 | Find next file
2018-12-17T23:05:50.404887502Z 67 PC: 12ad2 | Get or set file attributes
2018-12-17T23:05:50.41192952Z 67 PC: 12ae0 | Get or set file attributes
2018-12-17T23:05:50.423697153Z 61 PC: 12ae8 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:05:50.432290505Z 87 PC: 12af5 | Get or set file date and time
2018-12-17T23:05:50.435141323Z 63 PC: 12b0f | Read file or device (Read 555 bytes on handle 5)
2018-12-17T23:05:50.442774138Z 66 PC: 12b2c | Move file pointer
2018-12-17T23:05:50.444556323Z 66 PC: 12b4a | Move file pointer
2018-12-17T23:05:50.44697569Z 64 PC: 12b55 | Write file or device (Write 555 bytes on handle 5)
2018-12-17T23:05:50.455959925Z 66 PC: 12b60 | Move file pointer
2018-12-17T23:05:50.457929299Z 64 PC: 12b7a | Write file or device (Write 27 bytes on handle 5)
2018-12-17T23:05:50.464344884Z 87 PC: 12b89 | Get or set file date and time
2018-12-17T23:05:50.466529295Z 62 PC: 12b8e | Close file
2018-12-17T23:05:50.475308239Z 67 PC: 12b9d | Get or set file attributes
2018-12-17T23:05:50.486595715Z 79 PC: 12ab9 | Find next file
2018-12-17T23:05:50.491732063Z 67 PC: 12ad2 | Get or set file attributes
2018-12-17T23:05:50.499213194Z 67 PC: 12ae0 | Get or set file attributes
2018-12-17T23:05:50.51075606Z 61 PC: 12ae8 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:05:50.518808339Z 87 PC: 12af5 | Get or set file date and time
2018-12-17T23:05:50.520923448Z 63 PC: 12b0f | Read file or device (Read 555 bytes on handle 5)
2018-12-17T23:05:50.528714893Z 66 PC: 12b2c | Move file pointer
2018-12-17T23:05:50.531081697Z 66 PC: 12b4a | Move file pointer
2018-12-17T23:05:50.532958591Z 64 PC: 12b55 | Write file or device (Write 555 bytes on handle 5)
2018-12-17T23:05:50.543166777Z 66 PC: 12b60 | Move file pointer
2018-12-17T23:05:50.54603401Z 64 PC: 12b7a | Write file or device (Write 92 bytes on handle 5)
2018-12-17T23:05:50.549020153Z 87 PC: 12b89 | Get or set file date and time
2018-12-17T23:05:50.550672247Z 62 PC: 12b8e | Close file
2018-12-17T23:05:50.560460241Z 67 PC: 12b9d | Get or set file attributes
2018-12-17T23:05:50.572049825Z 79 PC: 12ab9 | Find next file
2018-12-17T23:05:50.575247023Z 67 PC: 12ad2 | Get or set file attributes
2018-12-17T23:05:50.591175891Z 67 PC: 12ae0 | Get or set file attributes
2018-12-17T23:05:50.602172953Z 61 PC: 12ae8 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:05:50.6096653Z 87 PC: 12af5 | Get or set file date and time
2018-12-17T23:05:50.611353363Z 63 PC: 12b0f | Read file or device (Read 555 bytes on handle 5)
2018-12-17T23:05:50.619192953Z 66 PC: 12b2c | Move file pointer
2018-12-17T23:05:50.620857286Z 66 PC: 12b4a | Move file pointer
2018-12-17T23:05:50.622523571Z 64 PC: 12b55 | Write file or device (Write 555 bytes on handle 5)
2018-12-17T23:05:50.632445897Z 66 PC: 12b60 | Move file pointer
2018-12-17T23:05:50.634566773Z 64 PC: 12b7a | Write file or device (Write 29 bytes on handle 5)
2018-12-17T23:05:50.637586849Z 87 PC: 12b89 | Get or set file date and time
2018-12-17T23:05:50.64173217Z 62 PC: 12b8e | Close file
2018-12-17T23:05:50.651513281Z 67 PC: 12b9d | Get or set file attributes
2018-12-17T23:05:50.663098211Z 79 PC: 12ab9 | Find next file
2018-12-17T23:05:50.66737849Z 67 PC: 12ad2 | Get or set file attributes
2018-12-17T23:05:50.674581565Z 67 PC: 12ae0 | Get or set file attributes
2018-12-17T23:05:50.68584131Z 61 PC: 12ae8 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:05:50.693865164Z 87 PC: 12af5 | Get or set file date and time
2018-12-17T23:05:50.695891977Z 63 PC: 12b0f | Read file or device (Read 555 bytes on handle 5)
2018-12-17T23:05:50.703119032Z 66 PC: 12b2c | Move file pointer
2018-12-17T23:05:50.705994081Z 66 PC: 12b4a | Move file pointer
2018-12-17T23:05:50.707672396Z 64 PC: 12b55 | Write file or device (Write 555 bytes on handle 5)
2018-12-17T23:05:50.720980523Z 66 PC: 12b60 | Move file pointer
2018-12-17T23:05:50.722754766Z 64 PC: 12b7a | Write file or device (Write 29 bytes on handle 5)
2018-12-17T23:05:50.727476395Z 87 PC: 12b89 | Get or set file date and time
2018-12-17T23:05:50.729537104Z 62 PC: 12b8e | Close file
2018-12-17T23:05:50.738235864Z 67 PC: 12b9d | Get or set file attributes
2018-12-17T23:05:50.749728715Z 79 PC: 12ab9 | Find next file
2018-12-17T23:05:50.752922517Z 67 PC: 12ad2 | Get or set file attributes
2018-12-17T23:05:50.759471943Z 67 PC: 12ae0 | Get or set file attributes
2018-12-17T23:05:50.771796387Z 61 PC: 12ae8 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:05:50.779917106Z 87 PC: 12af5 | Get or set file date and time
2018-12-17T23:05:50.781385042Z 63 PC: 12b0f | Read file or device (Read 555 bytes on handle 5)
2018-12-17T23:05:50.787968575Z 66 PC: 12b2c | Move file pointer
2018-12-17T23:05:50.789653751Z 66 PC: 12b4a | Move file pointer
2018-12-17T23:05:50.791214517Z 64 PC: 12b55 | Write file or device (Write 555 bytes on handle 5)
2018-12-17T23:05:50.800398705Z 66 PC: 12b60 | Move file pointer
2018-12-17T23:05:50.804905895Z 64 PC: 12b7a | Write file or device (Write 501 bytes on handle 5)
2018-12-17T23:05:50.814450078Z 87 PC: 12b89 | Get or set file date and time
2018-12-17T23:05:50.816504432Z 62 PC: 12b8e | Close file
2018-12-17T23:05:50.826644045Z 67 PC: 12b9d | Get or set file attributes
2018-12-17T23:05:50.837644207Z 79 PC: 12ab9 | Find next file
2018-12-17T23:05:50.841754269Z 67 PC: 12ad2 | Get or set file attributes
2018-12-17T23:05:50.849570485Z 67 PC: 12ae0 | Get or set file attributes
2018-12-17T23:05:50.860629467Z 61 PC: 12ae8 | Open file (Filename = 'PAH.COM')
2018-12-17T23:05:50.867999542Z 87 PC: 12af5 | Get or set file date and time
2018-12-17T23:05:50.870029695Z 63 PC: 12b0f | Read file or device (Read 555 bytes on handle 5)
2018-12-17T23:05:50.87715143Z 66 PC: 12b2c | Move file pointer
2018-12-17T23:05:50.878586461Z 66 PC: 12b4a | Move file pointer
2018-12-17T23:05:50.880535777Z 64 PC: 12b55 | Write file or device (Write 555 bytes on handle 5)
2018-12-17T23:05:50.889678237Z 66 PC: 12b60 | Move file pointer
2018-12-17T23:05:50.891422826Z 64 PC: 12b7a | Write file or device (Write 29 bytes on handle 5)
2018-12-17T23:05:50.895443637Z 87 PC: 12b89 | Get or set file date and time
2018-12-17T23:05:50.897965285Z 62 PC: 12b8e | Close file
2018-12-17T23:05:50.906981799Z 67 PC: 12b9d | Get or set file attributes
2018-12-17T23:05:50.918910515Z 79 PC: 12ab9 | Find next file
2018-12-17T23:05:50.923613699Z 67 PC: 12ad2 | Get or set file attributes
2018-12-17T23:05:50.930361339Z 67 PC: 12ae0 | Get or set file attributes
2018-12-17T23:05:50.941671663Z 61 PC: 12ae8 | Open file (Filename = 'TEST.COM')
2018-12-17T23:05:50.949846139Z 87 PC: 12af5 | Get or set file date and time
2018-12-17T23:05:50.951354389Z 63 PC: 12b0f | Read file or device (Read 555 bytes on handle 5)
2018-12-17T23:05:50.958963552Z 87 PC: 12b89 | Get or set file date and time
2018-12-17T23:05:50.960933744Z 62 PC: 12b8e | Close file
2018-12-17T23:05:50.971818171Z 67 PC: 12b9d | Get or set file attributes
2018-12-17T23:05:50.988700499Z 79 PC: 12ab9 | Find next file
2018-12-17T23:05:50.992459752Z 26 PC: 12bc8 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15330,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:43:12.990639612Z 26 PC: 12a71 | Set disk transfer address
2018-12-25T12:43:12.993477062Z 42 PC: 12a7d | Get date 0x12a7d: cmp al, 0
0x12a7f: jne 0x12a96
0x12a81: push word ptr [0]
0x12a85: pop word ptr [0x14a]
0x12a89: mov cx, 1
0x12a8c: jcxz 0x12a90
0x12a8e: jmp 0x12a96
0x12a90: mov dx, 0x2c3
0x12a93: call 0x12abe
0x12a96: cmp dh, 4
0x12a99: jne 0x12aaf
0x12a9b: cmp dl, 0xf
0x12a9e: jne 0x12aaf
0x12aa0: mov ax, 0x1010
0x12aa3: out 0x70, ax
0x12aa5: mov dx, 0x2a5
0x12aa8: call 0x12abe
0x12aab: mov al, 0xfe
0x12aad: out 0x64, al
0x12aaf: mov ah, byte ptr [bp + 5]
2018-12-25T12:43:12.996228535Z 78 PC: 12ab9 | Find first file
2018-12-25T12:43:13.002540359Z 67 PC: 12ad2 | Get or set file attributes
2018-12-25T12:43:13.009547288Z 67 PC: 12ae0 | Get or set file attributes
2018-12-25T12:43:13.029323062Z 61 PC: 12ae8 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:43:13.035740994Z 87 PC: 12af5 | Get or set file date and time
2018-12-25T12:43:13.03696822Z 63 PC: 12b0f | Read file or device (Read 555 bytes on handle 5)
2018-12-25T12:43:13.045036426Z 66 PC: 12b2c | Move file pointer
2018-12-25T12:43:13.046681372Z 66 PC: 12b4a | Move file pointer
2018-12-25T12:43:13.048276249Z 64 PC: 12b55 | Write file or device (Write 555 bytes on handle 5)
2018-12-25T12:43:13.058620053Z 66 PC: 12b60 | Move file pointer
2018-12-25T12:43:13.060633Z 64 PC: 12b7a | Write file or device (Write 407 bytes on handle 5)
2018-12-25T12:43:13.06361866Z 87 PC: 12b89 | Get or set file date and time
2018-12-25T12:43:13.065942673Z 62 PC: 12b8e | Close file
2018-12-25T12:43:13.07361606Z 67 PC: 12b9d | Get or set file attributes
2018-12-25T12:43:13.08344011Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.086918258Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.091610657Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.101473091Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.10866309Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.110169531Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.116763787Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:13.120405398Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:13.121870988Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:13.130081617Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:13.133004781Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:13.136843157Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.138321905Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:13.145889816Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:13.156129354Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.158661534Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.165672459Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.176021797Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.182556409Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.183944372Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.190913515Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:13.192514053Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:13.19420067Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:13.203613884Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:13.205032809Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:13.207577466Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.209925375Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:13.21746502Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:13.227148798Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.231066876Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.236630261Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.246259342Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.253344396Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.254713668Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.261391578Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:13.262758673Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:13.26469524Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:13.272599719Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:13.273974178Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:13.277686607Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.279111125Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:13.286438213Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:13.299612547Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.302186303Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.310195067Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.324349142Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.330936171Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.332233492Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.338923653Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:13.340200761Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:13.341392439Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:13.350515665Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:13.351931541Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:13.354464694Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.35681559Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:13.364396276Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:13.374089Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.377823422Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.383445223Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.392732076Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.39921665Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.401630083Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.407730216Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:13.40914004Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:13.411155632Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:13.41881833Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:13.420519428Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:13.42970214Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.431450906Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:13.439332158Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:13.450603271Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.453131539Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.458605685Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.468851801Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.475410836Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.47674055Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.483895416Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:13.485270639Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:13.486569318Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:13.496011935Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:13.503136371Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:13.506494316Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.509051665Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:13.516705372Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:13.526516094Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.530272852Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.535922366Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.545876934Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.552671856Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.554336885Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.561367108Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.563595691Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:13.573656335Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:13.583268448Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.585910013Z 26 PC: 12bc8 | Set disk transfer address

{"DateBased":true,"Day":6,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15330,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:43:13.021415212Z 26 PC: 12a71 | Set disk transfer address
2018-12-25T12:43:13.023186171Z 42 PC: 12a7d | Get date 0x12a7d: cmp al, 0
0x12a7f: jne 0x12a96
0x12a81: push word ptr [0]
0x12a85: pop word ptr [0x14a]
0x12a89: mov cx, 1
0x12a8c: jcxz 0x12a90
0x12a8e: jmp 0x12a96
0x12a90: mov dx, 0x2c3
0x12a93: call 0x12abe
0x12a96: cmp dh, 4
0x12a99: jne 0x12aaf
0x12a9b: cmp dl, 0xf
0x12a9e: jne 0x12aaf
0x12aa0: mov ax, 0x1010
0x12aa3: out 0x70, ax
0x12aa5: mov dx, 0x2a5
0x12aa8: call 0x12abe
0x12aab: mov al, 0xfe
0x12aad: out 0x64, al
0x12aaf: mov ah, byte ptr [bp + 5]
2018-12-25T12:43:13.025871998Z 78 PC: 12ab9 | Find first file
2018-12-25T12:43:13.032209416Z 67 PC: 12ad2 | Get or set file attributes
2018-12-25T12:43:13.038432712Z 67 PC: 12ae0 | Get or set file attributes
2018-12-25T12:43:13.056473213Z 61 PC: 12ae8 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:43:13.068171568Z 87 PC: 12af5 | Get or set file date and time
2018-12-25T12:43:13.070618254Z 63 PC: 12b0f | Read file or device (Read 555 bytes on handle 5)
2018-12-25T12:43:13.076805432Z 66 PC: 12b2c | Move file pointer
2018-12-25T12:43:13.078258999Z 66 PC: 12b4a | Move file pointer
2018-12-25T12:43:13.079811086Z 64 PC: 12b55 | Write file or device (Write 555 bytes on handle 5)
2018-12-25T12:43:13.088139211Z 66 PC: 12b60 | Move file pointer
2018-12-25T12:43:13.089972874Z 64 PC: 12b7a | Write file or device (Write 407 bytes on handle 5)
2018-12-25T12:43:13.092577881Z 87 PC: 12b89 | Get or set file date and time
2018-12-25T12:43:13.094617104Z 62 PC: 12b8e | Close file
2018-12-25T12:43:13.10298046Z 67 PC: 12b9d | Get or set file attributes
2018-12-25T12:43:13.113247238Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.117035809Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.122641505Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.13271137Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.140465884Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.141776585Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.147976022Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:13.14994008Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:13.151356851Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:13.159715876Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:13.161744072Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:13.164495539Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.16599673Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:13.174924027Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:13.186489105Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.189039687Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.1961561Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.208397637Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.21474925Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.216473494Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.223065628Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:13.224465503Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:13.225949378Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:13.23457037Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:13.235950353Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:13.239173321Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.241551816Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:13.249021676Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:13.258952689Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.263022063Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.269057665Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.278535562Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.286558044Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.287847394Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.294056688Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:13.296765404Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:13.298315052Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:13.306897279Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:13.31050651Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:13.313316797Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.315438286Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:13.324336182Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:13.334568725Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.337337481Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.345015583Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.354864335Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.361688699Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.364960099Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.371887047Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:13.373362652Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:13.375632564Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:13.384417749Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:13.387028229Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:13.390830669Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.3926396Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:13.40030256Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:13.412680136Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.415641258Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.421589032Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.433682117Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.440202265Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.44154117Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.448392276Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:13.451442216Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:13.452993655Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:13.461205786Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:13.46387696Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:13.472738915Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.474179904Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:13.482277156Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:13.492458935Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.495596994Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.502754902Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.512336219Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.518794307Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.521682978Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.528041567Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:13.529526359Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:13.534199294Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:13.542632533Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:13.544123532Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:13.548291535Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.549763676Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:13.557222986Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:13.569371197Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.571871464Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.577840153Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.589637467Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.601137178Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.602521807Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.61076999Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.612275489Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:13.620160364Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:13.631186077Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.633547301Z 26 PC: 12bc8 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15330,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:43:13.695677327Z 26 PC: 12a71 | Set disk transfer address
2018-12-25T12:43:13.697236425Z 42 PC: 12a7d | Get date 0x12a7d: cmp al, 0
0x12a7f: jne 0x12a96
0x12a81: push word ptr [0]
0x12a85: pop word ptr [0x14a]
0x12a89: mov cx, 1
0x12a8c: jcxz 0x12a90
0x12a8e: jmp 0x12a96
0x12a90: mov dx, 0x2c3
0x12a93: call 0x12abe
0x12a96: cmp dh, 4
0x12a99: jne 0x12aaf
0x12a9b: cmp dl, 0xf
0x12a9e: jne 0x12aaf
0x12aa0: mov ax, 0x1010
0x12aa3: out 0x70, ax
0x12aa5: mov dx, 0x2a5
0x12aa8: call 0x12abe
0x12aab: mov al, 0xfe
0x12aad: out 0x64, al
0x12aaf: mov ah, byte ptr [bp + 5]
2018-12-25T12:43:13.699655742Z 78 PC: 12ab9 | Find first file
2018-12-25T12:43:13.705676234Z 67 PC: 12ad2 | Get or set file attributes
2018-12-25T12:43:13.710695029Z 67 PC: 12ae0 | Get or set file attributes
2018-12-25T12:43:13.723750308Z 61 PC: 12ae8 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:43:13.729871654Z 87 PC: 12af5 | Get or set file date and time
2018-12-25T12:43:13.731714047Z 63 PC: 12b0f | Read file or device (Read 555 bytes on handle 5)
2018-12-25T12:43:13.738276473Z 66 PC: 12b2c | Move file pointer
2018-12-25T12:43:13.739559195Z 66 PC: 12b4a | Move file pointer
2018-12-25T12:43:13.740807883Z 64 PC: 12b55 | Write file or device (Write 555 bytes on handle 5)
2018-12-25T12:43:13.747996537Z 66 PC: 12b60 | Move file pointer
2018-12-25T12:43:13.749609468Z 64 PC: 12b7a | Write file or device (Write 407 bytes on handle 5)
2018-12-25T12:43:13.75248532Z 87 PC: 12b89 | Get or set file date and time
2018-12-25T12:43:13.754666193Z 62 PC: 12b8e | Close file
2018-12-25T12:43:13.767019662Z 67 PC: 12b9d | Get or set file attributes
2018-12-25T12:43:13.777534096Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.780868152Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.787398607Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.797993272Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.81224329Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.813978803Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.821569866Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:13.823468325Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:13.826644136Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:13.840087199Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:13.841264547Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:13.844231324Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.845396729Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:13.851558344Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:13.86275278Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:13.865601943Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:13.871739623Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:13.882835268Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:13.887200568Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:13.888455786Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:13.893201234Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:13.894549621Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:13.895806859Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:13.901682577Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:13.902967863Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:13.904948399Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:13.906567321Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:14.24114319Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:14.38463544Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:14.38773795Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:14.394860651Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:14.581485879Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:14.586247484Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:14.58804958Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:14.594047877Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:14.596318356Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:14.599112436Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:14.605314062Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:14.606861069Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:14.610203748Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:14.612138262Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:14.620938397Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:14.632877608Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:14.63567035Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:14.642725864Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:14.655802387Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:14.663692083Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:14.665460437Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:14.672810753Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:14.674200837Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:14.675363282Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:14.68419153Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:14.687228122Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:14.690565079Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:14.692611891Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:14.702474447Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:14.714230483Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:14.71765742Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:14.725198964Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:14.736038443Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:14.743497382Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:14.746021609Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:14.753160091Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:14.754762142Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:14.756299311Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:14.7667837Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:14.769628392Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:14.779449263Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:14.78269276Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:14.791655088Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:14.812806495Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:14.8165751Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:14.822973248Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:14.834685636Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:14.843123552Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:14.844791819Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:14.858828711Z 66 PC: 12b2c | Move file pointer (See above)
2018-12-25T12:43:14.86073527Z 66 PC: 12b4a | Move file pointer (See above)
2018-12-25T12:43:14.862909989Z 64 PC: 12b55 | Write file or device (See above)
2018-12-25T12:43:14.872153327Z 66 PC: 12b60 | Move file pointer (See above)
2018-12-25T12:43:14.874126692Z 64 PC: 12b7a | Write file or device (See above)
2018-12-25T12:43:14.878609698Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:14.880686817Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:14.889517928Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:14.902193378Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:14.905660844Z 67 PC: 12ad2 | Get or set file attributes (See above)
2018-12-25T12:43:14.912263731Z 67 PC: 12ae0 | Get or set file attributes (See above)
2018-12-25T12:43:14.924150599Z 61 PC: 12ae8 | Open file (See above)
2018-12-25T12:43:14.932722975Z 87 PC: 12af5 | Get or set file date and time (See above)
2018-12-25T12:43:14.934698881Z 63 PC: 12b0f | Read file or device (See above)
2018-12-25T12:43:14.943206656Z 87 PC: 12b89 | Get or set file date and time (See above)
2018-12-25T12:43:14.946312869Z 62 PC: 12b8e | Close file (See above)
2018-12-25T12:43:14.954556845Z 67 PC: 12b9d | Get or set file attributes (See above)
2018-12-25T12:43:14.969475637Z 79 PC: 12ab9 | Find next file (See above)
2018-12-25T12:43:14.97295294Z 26 PC: 12bc8 | Set disk transfer address

{"DateBased":true,"Day":15,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15330,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:43:13.705202719Z 26 PC: 12a71 | Set disk transfer address
2018-12-25T12:43:13.706428286Z 42 PC: 12a7d | Get date 0x12a7d: cmp al, 0
0x12a7f: jne 0x12a96
0x12a81: push word ptr [0]
0x12a85: pop word ptr [0x14a]
0x12a89: mov cx, 1
0x12a8c: jcxz 0x12a90
0x12a8e: jmp 0x12a96
0x12a90: mov dx, 0x2c3
0x12a93: call 0x12abe
0x12a96: cmp dh, 4
0x12a99: jne 0x12aaf
0x12a9b: cmp dl, 0xf
0x12a9e: jne 0x12aaf
0x12aa0: mov ax, 0x1010
0x12aa3: out 0x70, ax
0x12aa5: mov dx, 0x2a5
0x12aa8: call 0x12abe
0x12aab: mov al, 0xfe
0x12aad: out 0x64, al
0x12aaf: mov ah, byte ptr [bp + 5]
2018-12-25T12:43:13.709538143Z 9 PC: 12ac2 | Display string (String= '��ࠡ���� - rulez forever ! ')
2018-12-25T12:43:13.71396624Z 8 PC: 12ac6 | Console input without echo