Sample viewer

vx.netlux.org/Virus.DOS.Victor.2442

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:59:12.301866149Z 48 PC: 15074 | Get DOS version
2018-12-17T22:59:12.305559402Z 44 PC: 15126 | Get time 0x15126: mov word ptr [0x72], dx
0x1512a: mov ah, 0x2c
0x1512c: int 0x21
0x1512e: mov cl, dl
0x15130: and cl, 0xf
0x15133: rol word ptr [0x72], cl
0x15137: test word ptr [0x72], 1
0x1513d: je 0x15142
0x1513f: jmp 0x15145
0x15141: nop
0x15142: call 0x15215
0x15145: cmp word ptr [0x86], 0xfec1
0x1514b: jne 0x15150
0x1514d: jmp 0x151dc
0x15150: mov dx, word ptr [0x88]
0x15154: sub dx, word ptr [0x65]
0x15158: mov bx, 0x98a
0x1515b: mov cl, 4
0x1515d: shr bx, cl
0x1515f: inc bx
2018-12-17T22:59:12.307649619Z 44 PC: 1512e | Get time 0x1512e: mov cl, dl
0x15130: and cl, 0xf
0x15133: rol word ptr [0x72], cl
0x15137: test word ptr [0x72], 1
0x1513d: je 0x15142
0x1513f: jmp 0x15145
0x15141: nop
0x15142: call 0x15215
0x15145: cmp word ptr [0x86], 0xfec1
0x1514b: jne 0x15150
0x1514d: jmp 0x151dc
0x15150: mov dx, word ptr [0x88]
0x15154: sub dx, word ptr [0x65]
0x15158: mov bx, 0x98a
0x1515b: mov cl, 4
0x1515d: shr bx, cl
0x1515f: inc bx
0x15160: add dx, bx
0x15162: add dx, 0x10
0x15165: mov word ptr [0xa0], dx
2018-12-17T22:59:12.309722628Z 42 PC: 15229 | Get date 0x15229: mov byte ptr [0xb2], al
0x1522c: push es
0x1522d: mov ah, 0x2f
0x1522f: int 0x21
0x15231: mov word ptr [0x7b], bx
0x15235: mov word ptr [0x7d], es
0x15239: pop es
0x1523a: mov dx, 0x14
0x1523d: mov ah, 0x1a
0x1523f: int 0x21
0x15241: push es
0x15242: mov ax, 0x3524
0x15245: int 0x21
0x15247: mov word ptr [0x77], bx
0x1524b: mov word ptr [0x79], es
0x1524f: pop es
0x15250: mov dx, 0xb3
0x15253: mov ax, 0x2524
0x15256: int 0x21
0x15258: mov cx, 0xffe3
2018-12-17T22:59:12.312515377Z 47 PC: 15231 | Get disk transfer address
2018-12-17T22:59:12.321648519Z 26 PC: 15241 | Set disk transfer address
2018-12-17T22:59:12.322520368Z 53 PC: 15247 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:59:12.326531374Z 37 PC: 15258 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:59:12.32751146Z 78 PC: 15262 | Find first file
2018-12-17T22:59:12.33331921Z 44 PC: 1526b | Get time 0x1526b: mov word ptr [0x72], dx
0x1526f: mov ah, 0x2c
0x15271: int 0x21
0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
2018-12-17T22:59:12.33542666Z 44 PC: 15273 | Get time 0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
2018-12-17T22:59:12.337823825Z 44 PC: 15280 | Get time 0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
0x152b1: jmp 0x153ab
0x152b4: cmp byte ptr [0xb1], 1
0x152b9: jne 0x152d5
0x152bb: mov dx, 0x32
0x152be: mov cx, 0x20
2018-12-17T22:59:12.339524766Z 79 PC: 153ba | Find next file
2018-12-17T22:59:12.341365607Z 44 PC: 1526b | Get time 0x1526b: mov word ptr [0x72], dx
0x1526f: mov ah, 0x2c
0x15271: int 0x21
0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
2018-12-17T22:59:12.346709321Z 44 PC: 15273 | Get time 0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
2018-12-17T22:59:12.348197134Z 44 PC: 15280 | Get time 0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
0x152b1: jmp 0x153ab
0x152b4: cmp byte ptr [0xb1], 1
0x152b9: jne 0x152d5
0x152bb: mov dx, 0x32
0x152be: mov cx, 0x20
2018-12-17T22:59:12.349653394Z 79 PC: 153ba | Find next file
2018-12-17T22:59:12.352212141Z 44 PC: 1526b | Get time 0x1526b: mov word ptr [0x72], dx
0x1526f: mov ah, 0x2c
0x15271: int 0x21
0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
2018-12-17T22:59:12.354841197Z 44 PC: 15273 | Get time 0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
2018-12-17T22:59:12.357311714Z 44 PC: 15280 | Get time 0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
0x152b1: jmp 0x153ab
0x152b4: cmp byte ptr [0xb1], 1
0x152b9: jne 0x152d5
0x152bb: mov dx, 0x32
0x152be: mov cx, 0x20
2018-12-17T22:59:12.360057321Z 79 PC: 153ba | Find next file
2018-12-17T22:59:12.362109279Z 44 PC: 1526b | Get time 0x1526b: mov word ptr [0x72], dx
0x1526f: mov ah, 0x2c
0x15271: int 0x21
0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
2018-12-17T22:59:12.363566159Z 44 PC: 15273 | Get time 0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
2018-12-17T22:59:12.366974299Z 44 PC: 15280 | Get time 0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
0x152b1: jmp 0x153ab
0x152b4: cmp byte ptr [0xb1], 1
0x152b9: jne 0x152d5
0x152bb: mov dx, 0x32
0x152be: mov cx, 0x20
2018-12-17T22:59:12.368734895Z 79 PC: 153ba | Find next file
2018-12-17T22:59:12.371669912Z 44 PC: 1526b | Get time 0x1526b: mov word ptr [0x72], dx
0x1526f: mov ah, 0x2c
0x15271: int 0x21
0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
2018-12-17T22:59:12.376506702Z 44 PC: 15273 | Get time 0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
2018-12-17T22:59:12.379152334Z 44 PC: 15280 | Get time 0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
0x152b1: jmp 0x153ab
0x152b4: cmp byte ptr [0xb1], 1
0x152b9: jne 0x152d5
0x152bb: mov dx, 0x32
0x152be: mov cx, 0x20
2018-12-17T22:59:12.382914121Z 79 PC: 153ba | Find next file
2018-12-17T22:59:12.387690067Z 44 PC: 1526b | Get time 0x1526b: mov word ptr [0x72], dx
0x1526f: mov ah, 0x2c
0x15271: int 0x21
0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
2018-12-17T22:59:12.389902026Z 44 PC: 15273 | Get time 0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
2018-12-17T22:59:12.392596325Z 44 PC: 15280 | Get time 0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
0x152b1: jmp 0x153ab
0x152b4: cmp byte ptr [0xb1], 1
0x152b9: jne 0x152d5
0x152bb: mov dx, 0x32
0x152be: mov cx, 0x20
2018-12-17T22:59:12.3957785Z 79 PC: 153ba | Find next file
2018-12-17T22:59:12.398210115Z 44 PC: 1526b | Get time 0x1526b: mov word ptr [0x72], dx
0x1526f: mov ah, 0x2c
0x15271: int 0x21
0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
2018-12-17T22:59:12.400942189Z 44 PC: 15273 | Get time 0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
2018-12-17T22:59:12.403238796Z 44 PC: 15280 | Get time 0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
0x152b1: jmp 0x153ab
0x152b4: cmp byte ptr [0xb1], 1
0x152b9: jne 0x152d5
0x152bb: mov dx, 0x32
0x152be: mov cx, 0x20
2018-12-17T22:59:12.406268869Z 67 PC: 15314 | Get or set file attributes
2018-12-17T22:59:12.411880882Z 67 PC: 15328 | Get or set file attributes
2018-12-17T22:59:12.429526287Z 61 PC: 15335 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:59:12.436009855Z 87 PC: 15341 | Get or set file date and time
2018-12-17T22:59:12.437330432Z 62 PC: 15395 | Close file
2018-12-17T22:59:12.439543628Z 67 PC: 153a6 | Get or set file attributes
2018-12-17T22:59:12.450858525Z 79 PC: 153ba | Find next file
2018-12-17T22:59:12.453728556Z 44 PC: 1526b | Get time 0x1526b: mov word ptr [0x72], dx
0x1526f: mov ah, 0x2c
0x15271: int 0x21
0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
2018-12-17T22:59:12.456129417Z 44 PC: 15273 | Get time 0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
2018-12-17T22:59:12.459218496Z 44 PC: 15280 | Get time 0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
0x152b1: jmp 0x153ab
0x152b4: cmp byte ptr [0xb1], 1
0x152b9: jne 0x152d5
0x152bb: mov dx, 0x32
0x152be: mov cx, 0x20
2018-12-17T22:59:12.461566325Z 67 PC: 15314 | Get or set file attributes
2018-12-17T22:59:12.467780456Z 67 PC: 15328 | Get or set file attributes
2018-12-17T22:59:12.479354428Z 61 PC: 15335 | Open file (Filename = 'PAH.COM')
2018-12-17T22:59:12.486446762Z 87 PC: 15341 | Get or set file date and time
2018-12-17T22:59:12.488530404Z 66 PC: 153cb | Move file pointer
2018-12-17T22:59:12.491397339Z 62 PC: 15395 | Close file
2018-12-17T22:59:12.493953894Z 67 PC: 153a6 | Get or set file attributes
2018-12-17T22:59:12.504599792Z 79 PC: 153ba | Find next file
2018-12-17T22:59:12.50880329Z 44 PC: 1526b | Get time 0x1526b: mov word ptr [0x72], dx
0x1526f: mov ah, 0x2c
0x15271: int 0x21
0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
2018-12-17T22:59:12.511280594Z 44 PC: 15273 | Get time 0x15273: mov cl, dl
0x15275: and cl, 0xf
0x15278: rol word ptr [0x72], cl
0x1527c: mov ah, 0x2c
0x1527e: int 0x21
0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
2018-12-17T22:59:12.513749738Z 44 PC: 15280 | Get time 0x15280: xor word ptr [0x72], dx
0x15284: mov byte ptr [0xb1], 0
0x15289: cmp byte ptr [0xb2], 3
0x1528e: jne 0x152a9
0x15290: cmp ch, 9
0x15293: je 0x152a4
0x15295: cmp ch, 0xb
0x15298: je 0x152a4
0x1529a: cmp ch, 0xd
0x1529d: je 0x152a4
0x1529f: cmp ch, 0xf
0x152a2: jne 0x152a9
0x152a4: mov byte ptr [0xb1], 1
0x152a9: test word ptr [0x72], 0x30
0x152af: jne 0x152b4
0x152b1: jmp 0x153ab
0x152b4: cmp byte ptr [0xb1], 1
0x152b9: jne 0x152d5
0x152bb: mov dx, 0x32
0x152be: mov cx, 0x20
2018-12-17T22:59:12.517176861Z 79 PC: 153ba | Find next file
2018-12-17T22:59:12.519454428Z 26 PC: 1552a | Set disk transfer address
2018-12-17T22:59:12.520475866Z 37 PC: 1553a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:59:12.522620334Z 76 PC: 14f4d | Terminate with return code (Return code = '0')