Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Savage.4987

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:09:09.063199156Z 48 PC: 13c42 | Get DOS version
2018-12-17T23:09:09.068626988Z 53 PC: 132ca | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:09.070487234Z 53 PC: 132ca | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:09.071734558Z 53 PC: 132ca | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:09.072833514Z 53 PC: 132ca | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:09.074331179Z 53 PC: 132ca | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:09.076120902Z 53 PC: 132ca | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:09.077770793Z 53 PC: 132ca | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:09.078997599Z 53 PC: 132ca | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:09.083192433Z 53 PC: 132ca | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:09.084334149Z 53 PC: 132ca | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:09.085595981Z 53 PC: 132ca | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:09.093906539Z 53 PC: 132ca | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:09.096556199Z 53 PC: 132ca | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:09.099125448Z 53 PC: 132ca | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:09.104965675Z 53 PC: 132ca | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:09.107858031Z 53 PC: 132ca | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:09.109445575Z 53 PC: 132ca | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:09.111275845Z 53 PC: 132ca | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:09.11492868Z 53 PC: 132ca | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:09.116247459Z 37 PC: 132df | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:09.117874657Z 37 PC: 132e7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:09.119640576Z 37 PC: 132ef | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:09.120858095Z 37 PC: 132f7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:09.122473481Z 68 PC: 13ed2 | I/O control for devices (Set for = '���3��&����i�r!� ')
2018-12-17T23:09:09.12455338Z 26 PC: 1313d | Set disk transfer address
2018-12-17T23:09:09.12599533Z 78 PC: 13149 | Find first file
2018-12-17T23:09:09.138417326Z 61 PC: 13995 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:09:09.146947078Z 66 PC: 13fd1 | Move file pointer
2018-12-17T23:09:09.148642274Z 66 PC: 13fdf | Move file pointer
2018-12-17T23:09:09.14995466Z 66 PC: 13fed | Move file pointer
2018-12-17T23:09:09.153301962Z 66 PC: 13ac7 | Move file pointer
2018-12-17T23:09:09.157946551Z 63 PC: 13a68 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:09:09.172587357Z 62 PC: 139e5 | Close file
2018-12-17T23:09:09.17938822Z 26 PC: 13161 | Set disk transfer address
2018-12-17T23:09:09.181526589Z 79 PC: 13166 | Find next file
2018-12-17T23:09:09.185068345Z 26 PC: 1313d | Set disk transfer address
2018-12-17T23:09:09.187509123Z 78 PC: 13149 | Find first file
2018-12-17T23:09:09.195167998Z 61 PC: 13995 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:09:09.203621044Z 66 PC: 13fd1 | Move file pointer
2018-12-17T23:09:09.20582165Z 66 PC: 13fdf | Move file pointer
2018-12-17T23:09:09.208212854Z 66 PC: 13fed | Move file pointer
2018-12-17T23:09:09.209661086Z 66 PC: 13ac7 | Move file pointer
2018-12-17T23:09:09.211703886Z 63 PC: 13a68 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:09:09.21486642Z 62 PC: 139e5 | Close file
2018-12-17T23:09:09.217303009Z 26 PC: 13161 | Set disk transfer address
2018-12-17T23:09:09.219475262Z 79 PC: 13166 | Find next file
2018-12-17T23:09:09.223588202Z 61 PC: 13995 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:09:09.229414493Z 66 PC: 13fd1 | Move file pointer
2018-12-17T23:09:09.230761875Z 66 PC: 13fdf | Move file pointer
2018-12-17T23:09:09.232633573Z 66 PC: 13fed | Move file pointer
2018-12-17T23:09:09.234291829Z 66 PC: 13ac7 | Move file pointer
2018-12-17T23:09:09.235786429Z 63 PC: 13a68 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:09:09.238035465Z 62 PC: 139e5 | Close file
2018-12-17T23:09:09.239710423Z 26 PC: 13161 | Set disk transfer address
2018-12-17T23:09:09.241257521Z 79 PC: 13166 | Find next file
2018-12-17T23:09:09.244888114Z 61 PC: 13995 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:09:09.252131037Z 66 PC: 13fd1 | Move file pointer
2018-12-17T23:09:09.253385024Z 66 PC: 13fdf | Move file pointer
2018-12-17T23:09:09.256047909Z 66 PC: 13fed | Move file pointer
2018-12-17T23:09:09.260518371Z 66 PC: 13ac7 | Move file pointer
2018-12-17T23:09:09.262404777Z 63 PC: 13a68 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:09:09.265270943Z 62 PC: 139e5 | Close file
2018-12-17T23:09:09.267134366Z 26 PC: 13161 | Set disk transfer address
2018-12-17T23:09:09.26874351Z 79 PC: 13166 | Find next file
2018-12-17T23:09:09.27364352Z 61 PC: 13995 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:09:09.280110754Z 66 PC: 13fd1 | Move file pointer
2018-12-17T23:09:09.28273696Z 66 PC: 13fdf | Move file pointer
2018-12-17T23:09:09.284234584Z 66 PC: 13fed | Move file pointer
2018-12-17T23:09:09.286433137Z 66 PC: 13ac7 | Move file pointer
2018-12-17T23:09:09.288224133Z 63 PC: 13a68 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:09:09.290714974Z 62 PC: 139e5 | Close file
2018-12-17T23:09:09.294568206Z 26 PC: 13161 | Set disk transfer address
2018-12-17T23:09:09.29563404Z 79 PC: 13166 | Find next file
2018-12-17T23:09:09.298785723Z 61 PC: 13995 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:09:09.30778105Z 66 PC: 13fd1 | Move file pointer
2018-12-17T23:09:09.309364776Z 66 PC: 13fdf | Move file pointer
2018-12-17T23:09:09.310895293Z 66 PC: 13fed | Move file pointer
2018-12-17T23:09:09.313216265Z 66 PC: 13ac7 | Move file pointer
2018-12-17T23:09:09.314678002Z 63 PC: 13a68 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:09:09.317493353Z 62 PC: 139e5 | Close file
2018-12-17T23:09:09.320192636Z 26 PC: 13161 | Set disk transfer address
2018-12-17T23:09:09.3213011Z 79 PC: 13166 | Find next file
2018-12-17T23:09:09.323912488Z 61 PC: 13995 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:09:09.331976023Z 66 PC: 13fd1 | Move file pointer
2018-12-17T23:09:09.333350446Z 66 PC: 13fdf | Move file pointer
2018-12-17T23:09:09.334771768Z 66 PC: 13fed | Move file pointer
2018-12-17T23:09:09.33635844Z 66 PC: 13ac7 | Move file pointer
2018-12-17T23:09:09.338137283Z 63 PC: 13a68 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:09:09.340044077Z 62 PC: 139e5 | Close file
2018-12-17T23:09:09.341942485Z 26 PC: 13161 | Set disk transfer address
2018-12-17T23:09:09.3444619Z 79 PC: 13166 | Find next file
2018-12-17T23:09:09.347864045Z 61 PC: 13995 | Open file (Filename = 'PAH.COM')
2018-12-17T23:09:09.355187008Z 66 PC: 13fd1 | Move file pointer
2018-12-17T23:09:09.358129988Z 66 PC: 13fdf | Move file pointer
2018-12-17T23:09:09.361253779Z 66 PC: 13fed | Move file pointer
2018-12-17T23:09:09.363018476Z 66 PC: 13ac7 | Move file pointer
2018-12-17T23:09:09.366277181Z 63 PC: 13a68 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:09:09.368412073Z 62 PC: 139e5 | Close file
2018-12-17T23:09:09.37065016Z 26 PC: 13161 | Set disk transfer address
2018-12-17T23:09:09.373068004Z 79 PC: 13166 | Find next file
2018-12-17T23:09:09.378194049Z 48 PC: 13ae3 | Get DOS version
2018-12-17T23:09:09.380257076Z 61 PC: 13995 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:09.38777707Z 87 PC: 130e0 | Get or set file date and time
2018-12-17T23:09:09.390947819Z 66 PC: 13fd1 | Move file pointer
2018-12-17T23:09:09.392805079Z 66 PC: 13fdf | Move file pointer
2018-12-17T23:09:09.394669784Z 66 PC: 13fed | Move file pointer
2018-12-17T23:09:09.397911056Z 63 PC: 13a68 | Read file or device (Read 10107 bytes on handle 5)
2018-12-17T23:09:09.407585078Z 62 PC: 139e5 | Close file
2018-12-17T23:09:09.411063626Z 48 PC: 13ae3 | Get DOS version
2018-12-17T23:09:09.413840655Z 60 PC: 13995 | Create or truncate file
2018-12-17T23:09:09.444045594Z 64 PC: 13a68 | Write file or device (Write 10107 bytes on handle 5)
2018-12-17T23:09:09.455619096Z 62 PC: 139e5 | Close file
2018-12-17T23:09:09.467019433Z 53 PC: 1323e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:09.469038116Z 37 PC: 13247 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:09.47099275Z 53 PC: 1323e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:09.47291367Z 37 PC: 13247 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:09.475800296Z 53 PC: 1323e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:09.477745943Z 37 PC: 13247 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:09.480376747Z 53 PC: 1323e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:09.483247603Z 37 PC: 13247 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:09.485110284Z 53 PC: 1323e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:09.487131052Z 37 PC: 13247 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:09.489967693Z 53 PC: 1323e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:09.492161496Z 37 PC: 13247 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:09.493926273Z 53 PC: 1323e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:09.496467029Z 37 PC: 13247 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:09.498432082Z 53 PC: 1323e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:09.499817776Z 37 PC: 13247 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:09.502021779Z 53 PC: 1323e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:09.504138257Z 37 PC: 13247 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:09.505564217Z 53 PC: 1323e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:09.507342629Z 37 PC: 13247 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:09.5097003Z 53 PC: 1323e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:09.511300567Z 37 PC: 13247 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:09.512888622Z 53 PC: 1323e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:09.514990532Z 37 PC: 13247 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:09.516202681Z 53 PC: 1323e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:09.517437922Z 37 PC: 13247 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:09.519629151Z 53 PC: 1323e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:09.521336149Z 37 PC: 13247 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:09.523050321Z 53 PC: 1323e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:09.525805269Z 37 PC: 13247 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:09.527398463Z 53 PC: 1323e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:09.529039638Z 37 PC: 13247 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:09.531581816Z 53 PC: 1323e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:09.533646576Z 37 PC: 13247 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:09.535293943Z 53 PC: 1323e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:09.538265868Z 37 PC: 13247 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:09.539933232Z 53 PC: 1323e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:09.541646963Z 37 PC: 13247 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:09.544384618Z 48 PC: 13ae3 | Get DOS version
2018-12-17T23:09:09.54650371Z 41 PC: 131f5 | Parse filename
2018-12-17T23:09:09.548459616Z 41 PC: 13203 | Parse filename
2018-12-17T23:09:09.551105489Z 75 PC: 1320e | Execute program
2018-12-17T23:09:09.573586462Z 9 PC: 25795 | Display string (String= 'Sophos Ltd, Oxford sacrificial COM goat 1400H bytes long ')
2018-12-17T23:09:09.579479668Z 0 PC: 25799 | Program terminate
2018-12-17T23:09:09.58308274Z 53 PC: 1323e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:09.584994412Z 37 PC: 13247 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:09.586587336Z 53 PC: 1323e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:09.58839335Z 37 PC: 13247 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:09.590163127Z 53 PC: 1323e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:09.591738768Z 37 PC: 13247 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:09.593467177Z 53 PC: 1323e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:09.595257882Z 37 PC: 13247 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:09.596766257Z 53 PC: 1323e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:09.598560239Z 37 PC: 13247 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:09.600771275Z 53 PC: 1323e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:09.602343239Z 37 PC: 13247 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:09.603868796Z 53 PC: 1323e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:09.606236507Z 37 PC: 13247 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:09.607711198Z 53 PC: 1323e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:09.609325633Z 37 PC: 13247 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:09.620170775Z 53 PC: 1323e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:09.621970758Z 37 PC: 13247 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:09.62356275Z 53 PC: 1323e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:09.626400744Z 37 PC: 13247 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:09.627994029Z 53 PC: 1323e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:09.629747695Z 37 PC: 13247 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:09.63242151Z 53 PC: 1323e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:09.634266207Z 37 PC: 13247 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:09.635865854Z 53 PC: 1323e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:09.639523338Z 37 PC: 13247 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:09.641199659Z 53 PC: 1323e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:09.64290831Z 37 PC: 13247 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:09.645058982Z 53 PC: 1323e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:09.646633922Z 37 PC: 13247 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:09.648249879Z 53 PC: 1323e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:09.651125694Z 37 PC: 13247 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:09.652929475Z 53 PC: 1323e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:09.654485539Z 37 PC: 13247 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:09.657243342Z 53 PC: 1323e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:09.658771214Z 37 PC: 13247 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:09.660286972Z 53 PC: 1323e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:09.66290902Z 37 PC: 13247 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:09.665691119Z 48 PC: 13ae3 | Get DOS version
2018-12-17T23:09:09.66759091Z 60 PC: 13995 | Create or truncate file
2018-12-17T23:09:09.686503315Z 64 PC: 13a68 | Write file or device (Write 10107 bytes on handle 5)
2018-12-17T23:09:09.697649564Z 87 PC: 1310d | Get or set file date and time
2018-12-17T23:09:09.699711329Z 62 PC: 139e5 | Close file
2018-12-17T23:09:09.708870624Z 42 PC: 13067 | Get date 0x13067: xor ah, ah
0x13069: les di, ptr [bp + 6]
0x1306c: stosw word ptr es:[di], ax
0x1306d: mov al, dl
0x1306f: les di, ptr [bp + 0xa]
0x13072: stosw word ptr es:[di], ax
0x13073: mov al, dh
0x13075: les di, ptr [bp + 0xe]
0x13078: stosw word ptr es:[di], ax
0x13079: xchg ax, cx
0x1307a: les di, ptr [bp + 0x12]
0x1307d: stosw word ptr es:[di], ax
0x1307e: pop bp
0x1307f: retf 0x10
0x13082: push bp
0x13083: mov bp, sp
0x13085: mov cx, word ptr [bp + 0xa]
0x13088: mov dh, byte ptr [bp + 8]
0x1308b: mov dl, byte ptr [bp + 6]
0x1308e: mov ah, 0x2b
2018-12-17T23:09:09.712303616Z 64 PC: 138f0 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T23:09:09.71455134Z 37 PC: 13421 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:09.71636021Z 37 PC: 13421 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:09.718316577Z 37 PC: 13421 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:09.719832336Z 37 PC: 13421 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:09.721623222Z 37 PC: 13421 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:09.723525527Z 37 PC: 13421 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:09.725494057Z 37 PC: 13421 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:09.727531406Z 37 PC: 13421 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:09.729513492Z 37 PC: 13421 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:09.73115642Z 37 PC: 13421 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:09.732518189Z 37 PC: 13421 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:09.734448256Z 37 PC: 13421 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:09.735777124Z 37 PC: 13421 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:09.737136097Z 37 PC: 13421 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:09.739487076Z 37 PC: 13421 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:09.74175047Z 37 PC: 13421 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:09.742982706Z 37 PC: 13421 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:09.745185256Z 37 PC: 13421 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:09.746428713Z 37 PC: 13421 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:09.747707616Z 76 PC: 13460 | Terminate with return code (Return code = '0')