{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4210,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:51:17.938123911Z | 9 | PC: 12b89 | Display string (Could not find end pointer) |
| 2018-12-25T11:51:17.941763988Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T11:51:17.943975444Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T11:51:17.945104166Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T11:51:17.94746899Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:17.948961945Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:17.950462565Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T11:51:17.964348992Z | 9 | PC: 133e9 | Display string (Could not find end pointer) |
| 2018-12-25T11:51:17.968015121Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T11:51:17.970050498Z | 76 | PC: 132a4 | Terminate with return code (Return code = '2') |
| 2018-12-25T11:51:17.972733563Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T11:51:17.974800669Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":1,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4210,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:51:19.535612123Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T11:51:19.538705621Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T11:51:19.539854896Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T11:51:19.541186082Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:19.542777724Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:19.543902405Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T11:51:19.557127991Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T11:51:19.559719981Z | 76 | PC: 132a4 | Terminate with return code (Return code = '6') |
| 2018-12-25T11:51:19.562692303Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T11:51:19.564172948Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":25,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4210,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:51:19.708156388Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T11:51:19.711153128Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T11:51:19.712572085Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T11:51:19.713952146Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:19.715279156Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:19.717309194Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T11:51:19.732642873Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T11:51:19.735702244Z | 76 | PC: 132a4 | Terminate with return code (Return code = '2') |
| 2018-12-25T11:51:19.739339808Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T11:51:19.740919133Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4210,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:51:19.916149756Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T11:51:19.918911567Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T11:51:19.920316801Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T11:51:19.921883235Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:19.923622192Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:19.924962354Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T11:51:19.938868398Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T11:51:19.944405051Z | 76 | PC: 132a4 | Terminate with return code (Return code = '2') |
| 2018-12-25T11:51:19.947010685Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T11:51:19.948089329Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":1,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4210,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:51:20.278321431Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T11:51:20.280187194Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T11:51:20.281199262Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T11:51:20.282185591Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:20.283312692Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:20.285070431Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T11:51:20.300776096Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T11:51:20.303131885Z | 76 | PC: 132a4 | Terminate with return code (Return code = '6') |
| 2018-12-25T11:51:20.306711838Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T11:51:20.308291306Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":25,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4210,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:51:20.454149537Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T11:51:20.457848019Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T11:51:20.459110431Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T11:51:20.460332022Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:20.461657508Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:20.463361076Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T11:51:20.478869263Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T11:51:20.481883068Z | 76 | PC: 132a4 | Terminate with return code (Return code = '2') |
| 2018-12-25T11:51:20.486158292Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T11:51:20.487487832Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4210,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:51:20.536462Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T11:51:20.539909461Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T11:51:20.542361521Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T11:51:20.544066884Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:20.545317184Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:20.547082932Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T11:51:20.562655841Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T11:51:20.565172469Z | 76 | PC: 132a4 | Terminate with return code (Return code = '2') |
| 2018-12-25T11:51:20.568790182Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T11:51:20.570214011Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":1,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4210,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:51:20.562919845Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T11:51:20.566145493Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T11:51:20.567442726Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T11:51:20.568824507Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:20.569982389Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:20.571353526Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T11:51:20.587283963Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T11:51:20.589841625Z | 76 | PC: 132a4 | Terminate with return code (Return code = '6') |
| 2018-12-25T11:51:20.593947214Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T11:51:20.595560514Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |
{"DateBased":true,"Day":25,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4210,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:51:20.568672427Z | 42 | PC: 12abe | Get date 0x12abe: cmp dh, 0xb 0x12ac1: jne 0x12acb 0x12ac3: cmp dl, 0x19 0x12ac6: jne 0x12acb 0x12ac8: call 0x12ba5 0x12acb: push cs 0x12acc: pop es 0x12acd: mov si, 0x138 0x12ad0: cmp word ptr [bp + si + 1], 0x414c 0x12ad5: jne 0x12ae0 0x12ad7: mov ah, 0xb9 0x12ad9: int 0x21 0x12adb: cmp ah, 0xb9 0x12ade: je 0x12ae4 0x12ae0: push 0x100 0x12ae3: ret 0x12ae4: push cs 0x12ae5: pop es 0x12ae6: mov di, 0x104 0x12ae9: mov si, 0x104 |
| 2018-12-25T11:51:20.571602422Z | 185 | PC: 12adb | UNKNOWN! |
| 2018-12-25T11:51:20.57300681Z | 74 | PC: 12b05 | Reallocate memory |
| 2018-12-25T11:51:20.574584947Z | 53 | PC: 12b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:20.576923095Z | 37 | PC: 12b1c | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T11:51:20.578490559Z | 75 | PC: 12b6b | Execute program |
| 2018-12-25T11:51:20.593740278Z | 42 | PC: 1331e | Get date 0x1331e: cmp dh, 0xb 0x13321: jne 0x1332b 0x13323: cmp dl, 0x19 0x13326: jne 0x1332b 0x13328: call 0x13405 0x1332b: push cs 0x1332c: pop es 0x1332d: mov si, 0x138 0x13330: cmp word ptr [bp + si + 1], 0x414c 0x13335: jne 0x13340 0x13337: mov ah, 0xb9 0x13339: int 0x21 0x1333b: cmp ah, 0xb9 0x1333e: je 0x13344 0x13340: push 0x100 0x13343: ret 0x13344: push cs 0x13345: pop es 0x13346: mov di, 0x104 0x13349: mov si, 0x104 |
| 2018-12-25T11:51:20.596973521Z | 76 | PC: 132a4 | Terminate with return code (Return code = '2') |
| 2018-12-25T11:51:20.600506282Z | 73 | PC: 12b77 | Release memory |
| 2018-12-25T11:51:20.602145298Z | 49 | PC: 12b81 | Terminate and stay resident (Return code = '1' | Memory size = '128') |