Sample viewer

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":1728,"SideJobID":0}

.

GIF

Syscalls:

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":1728,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:44:11.357357461Z	42	PC: 12a46 | Get date 0x12a46: cmp al, 5 0x12a48: je 0x12a4d 0x12a4a: jmp 0x12af6 0x12a4d: cld 0x12a4e: push cs 0x12a4f: pop ds 0x12a50: mov si, 0x124 0x12a53: mov cx, 0x92 0x12a56: lodsb al, byte ptr [si] 0x12a57: sub al, 0x85 0x12a59: mov ah, 2 0x12a5b: mov dl, al 0x12a5d: int 0x21 0x12a5f: loop 0x12a56 0x12a61: jmp 0x12af6 0x12a64: int 0xee 0x12a66: movsw word ptr es:[di], word ptr [si] 0x12a67: cmpsb byte ptr [si], byte ptr es:[di] 0x12a68: movsw word ptr es:[di], word ptr [si] 0x12a69: into
2018-12-25T11:44:11.360016864Z	74	PC: 12b00 | Reallocate memory
2018-12-25T11:44:11.3612951Z	75	PC: 12b0a | Execute program
2018-12-25T11:44:11.362643183Z	53	PC: 12b18 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:44:11.364503345Z	37	PC: 12b28 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:44:11.366187047Z	75	PC: 12b52 | Execute program
2018-12-25T11:44:11.387002685Z	73	PC: 12b5c | Release memory
2018-12-25T11:44:11.389236875Z	77	PC: 12b60 | Get program return code
2018-12-25T11:44:11.390722306Z	49	PC: 12b6e | Terminate and stay resident (Return code = '0' | Memory size = '88')