.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T23:12:41.091961732Z | 48 | PC: 12b23 | Get DOS version |
| 2018-12-17T23:12:41.093709208Z | 171 | PC: 12b30 | UNKNOWN! |
| 2018-12-17T23:12:41.095947326Z | 37 | PC: 12b9f | Set interrupt vector (Interrupt = '1' AKA 'Character input') |
| 2018-12-17T23:12:41.097484577Z | 42 | PC: 12be2 | Get date 0x12be2: mov word ptr es:[0x89a], dx 0x12be7: mov word ptr es:[0x201], 0 0x12bee: pop ax 0x12bef: pop es 0x12bf0: pop ds 0x12bf1: add ax, 0x10 0x12bf4: add word ptr cs:[si + 0x1aa], ax 0x12bf9: add ax, 0 0x12bfc: cli 0x12bfd: mov ss, ax 0x12bff: mov sp, 0 0x12c02: sti 0x12c03: ljmp 0:0 0x12c08: push bx 0x12c09: mov bx, sp 0x12c0b: cmp word ptr ss:[bx + 4], 0x300 0x12c11: jb 0x12c1b 0x12c13: cmp word ptr ss:[bx + 4], 0xc800 0x12c19: jb 0x12c37 0x12c1b: push ds |
| 2018-12-17T23:12:41.100165468Z | 9 | PC: 12a47 | Display string (String= 'Virus started! ') |
| 2018-12-17T23:12:41.104332243Z | 76 | PC: 12a4b | Terminate with return code (Return code = '36') |