{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15862,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:44:43.283964983Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T12:44:43.286690327Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T12:44:43.288276309Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T12:44:43.289768065Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:43.291526945Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:43.292781846Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T12:44:43.30552842Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T12:44:43.307111691Z | 76 | PC: 132a4 | Terminate with return code (Return code = '2') |
| 2018-12-25T12:44:43.309819186Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T12:44:43.310783377Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":1,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15862,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:44:43.695463181Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T12:44:43.698072725Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T12:44:43.69962867Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T12:44:43.701448414Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:43.703798324Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:43.705889109Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T12:44:43.723123859Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T12:44:43.72601438Z | 76 | PC: 132a4 | Terminate with return code (Return code = '6') |
| 2018-12-25T12:44:43.729440173Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T12:44:43.730774907Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":25,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15862,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:44:44.123308893Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T12:44:44.126843151Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T12:44:44.127995932Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T12:44:44.129272748Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:44.131225918Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:44.132358443Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T12:44:44.146592806Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T12:44:44.149961503Z | 76 | PC: 132a4 | Terminate with return code (Return code = '7') |
| 2018-12-25T12:44:44.153563377Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T12:44:44.154850893Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":25,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15862,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:44:44.182553965Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T12:44:44.18787323Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T12:44:44.190256513Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T12:44:44.192228796Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:44.19454696Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:44.195862117Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T12:44:44.210802895Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T12:44:44.224642075Z | 76 | PC: 132a4 | Terminate with return code (Return code = '7') |
| 2018-12-25T12:44:44.227922138Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T12:44:44.229512896Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15862,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:44:44.326137566Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T12:44:44.329395425Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T12:44:44.330802469Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T12:44:44.332458272Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:44.334333076Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:44.335805254Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T12:44:44.351662741Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T12:44:44.35480593Z | 76 | PC: 132a4 | Terminate with return code (Return code = '2') |
| 2018-12-25T12:44:44.371614887Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T12:44:44.373092287Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":1,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15862,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:44:44.627937523Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T12:44:44.62996663Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T12:44:44.63095288Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T12:44:44.632034316Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:44.633393304Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:44.634644975Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T12:44:44.643419757Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T12:44:44.645000143Z | 76 | PC: 132a4 | Terminate with return code (Return code = '6') |
| 2018-12-25T12:44:44.647682038Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T12:44:44.648757037Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15862,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:44:44.657669589Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T12:44:44.660528692Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T12:44:44.661732781Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T12:44:44.663140556Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:44.665362768Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:44.666784951Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T12:44:44.680241905Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T12:44:44.682423162Z | 76 | PC: 132a4 | Terminate with return code (Return code = '2') |
| 2018-12-25T12:44:44.686001854Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T12:44:44.687178117Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":1,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15862,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:44:44.861179904Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T12:44:44.863803825Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T12:44:44.86510979Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T12:44:44.86657587Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:44.868116097Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:44.86943792Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T12:44:44.884674951Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T12:44:44.886865265Z | 76 | PC: 132a4 | Terminate with return code (Return code = '6') |
| 2018-12-25T12:44:44.890272739Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T12:44:44.891575859Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":25,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15862,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:44:44.968645422Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T12:44:44.972059902Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T12:44:44.973494031Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T12:44:44.974870121Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:44.976780533Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:44:44.978113657Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T12:44:44.991239374Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T12:44:44.994065129Z | 76 | PC: 132a4 | Terminate with return code (Return code = '7') |
| 2018-12-25T12:44:44.997302938Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T12:44:44.998550466Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |