Sample viewer

vx.netlux.org/Virus.DOS.VCL.CountDown.1300.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:59:37.449563819Z 47 PC: 12a97 | Get disk transfer address
2018-12-17T22:59:37.458068768Z 26 PC: 12aa0 | Set disk transfer address
2018-12-17T22:59:37.459128611Z 71 PC: 12f34 | Get current directory
2018-12-17T22:59:37.461848708Z 59 PC: 12f3d | Change current directory
2018-12-17T22:59:37.466212727Z 47 PC: 12b4f | Get disk transfer address
2018-12-17T22:59:37.467590292Z 26 PC: 12b73 | Set disk transfer address
2018-12-17T22:59:37.468543177Z 78 PC: 12f17 | Find first file
2018-12-17T22:59:37.473508951Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.475736031Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.477895419Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.480315065Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.482952021Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.48557248Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.488070105Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.491663556Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.494061479Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.496241302Z 47 PC: 12f05 | Get disk transfer address
2018-12-17T22:59:37.498085725Z 26 PC: 12bde | Set disk transfer address
2018-12-17T22:59:37.499722481Z 78 PC: 12be7 | Find first file
2018-12-17T22:59:37.506610792Z 47 PC: 12cf9 | Get disk transfer address
2018-12-17T22:59:37.509144091Z 61 PC: 12d4b | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:59:37.522045848Z 63 PC: 12d50 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:37.530533776Z 66 PC: 12d78 | Move file pointer
2018-12-17T22:59:37.534720374Z 62 PC: 12d9e | Close file
2018-12-17T22:59:37.53685125Z 67 PC: 12db7 | Get or set file attributes
2018-12-17T22:59:37.553944013Z 61 PC: 12dc1 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:59:37.562046601Z 64 PC: 12dd2 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:59:37.564909715Z 66 PC: 12e35 | Move file pointer
2018-12-17T22:59:37.56647947Z 64 PC: 12dfb | Write file or device (Write 1300 bytes on handle 5)
2018-12-17T22:59:37.576079516Z 87 PC: 12e4e | Get or set file date and time
2018-12-17T22:59:37.581538841Z 62 PC: 12e04 | Close file
2018-12-17T22:59:37.592574292Z 67 PC: 12e0a | Get or set file attributes
2018-12-17T22:59:37.603886973Z 26 PC: 12c05 | Set disk transfer address
2018-12-17T22:59:37.605335962Z 26 PC: 12f1f | Set disk transfer address
2018-12-17T22:59:37.606526307Z 59 PC: 12f49 | Change current directory
2018-12-17T22:59:37.609099031Z 71 PC: 12f34 | Get current directory
2018-12-17T22:59:37.611888297Z 59 PC: 12f3d | Change current directory
2018-12-17T22:59:37.615759305Z 47 PC: 12b4f | Get disk transfer address
2018-12-17T22:59:37.617443461Z 26 PC: 12b73 | Set disk transfer address
2018-12-17T22:59:37.61837619Z 78 PC: 12f17 | Find first file
2018-12-17T22:59:37.62397763Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.626982628Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.629475714Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.631969847Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.635196978Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.63762315Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.640075496Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.643047962Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.645357766Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.64750515Z 47 PC: 12f05 | Get disk transfer address
2018-12-17T22:59:37.64918245Z 26 PC: 12bde | Set disk transfer address
2018-12-17T22:59:37.65046277Z 78 PC: 12be7 | Find first file
2018-12-17T22:59:37.656374759Z 47 PC: 12cf9 | Get disk transfer address
2018-12-17T22:59:37.658221734Z 61 PC: 12d4b | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:59:37.669759955Z 63 PC: 12d50 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:37.675930511Z 66 PC: 12d78 | Move file pointer
2018-12-17T22:59:37.677509933Z 62 PC: 12d9e | Close file
2018-12-17T22:59:37.67943991Z 79 PC: 12be7 | Find next file
2018-12-17T22:59:37.686146079Z 47 PC: 12cf9 | Get disk transfer address
2018-12-17T22:59:37.688832335Z 61 PC: 12d4b | Open file (Filename = 'PRINT.COM')
2018-12-17T22:59:37.695363728Z 63 PC: 12d50 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:37.702553626Z 66 PC: 12d78 | Move file pointer
2018-12-17T22:59:37.704964474Z 62 PC: 12d9e | Close file
2018-12-17T22:59:37.707123702Z 67 PC: 12db7 | Get or set file attributes
2018-12-17T22:59:37.717213711Z 61 PC: 12dc1 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:59:37.724188317Z 64 PC: 12dd2 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:59:37.728457608Z 66 PC: 12e35 | Move file pointer
2018-12-17T22:59:37.730196758Z 64 PC: 12dfb | Write file or device (Write 1300 bytes on handle 5)
2018-12-17T22:59:37.73937027Z 87 PC: 12e4e | Get or set file date and time
2018-12-17T22:59:37.741380565Z 62 PC: 12e04 | Close file
2018-12-17T22:59:37.749094099Z 67 PC: 12e0a | Get or set file attributes
2018-12-17T22:59:37.760175606Z 26 PC: 12c05 | Set disk transfer address
2018-12-17T22:59:37.761363422Z 26 PC: 12f1f | Set disk transfer address
2018-12-17T22:59:37.762409754Z 59 PC: 12f49 | Change current directory
2018-12-17T22:59:37.764131834Z 71 PC: 12f34 | Get current directory
2018-12-17T22:59:37.767335353Z 59 PC: 12f3d | Change current directory
2018-12-17T22:59:37.771255137Z 47 PC: 12b4f | Get disk transfer address
2018-12-17T22:59:37.772368916Z 26 PC: 12b73 | Set disk transfer address
2018-12-17T22:59:37.773678217Z 78 PC: 12f17 | Find first file
2018-12-17T22:59:37.783997544Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.786614097Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.789748413Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.792450424Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.795279656Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.798228379Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.80087619Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.80412388Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.808824045Z 79 PC: 12bad | Find next file
2018-12-17T22:59:37.811294171Z 47 PC: 12f05 | Get disk transfer address
2018-12-17T22:59:37.812590376Z 26 PC: 12bde | Set disk transfer address
2018-12-17T22:59:37.814768252Z 78 PC: 12be7 | Find first file
2018-12-17T22:59:37.820645884Z 47 PC: 12cf9 | Get disk transfer address
2018-12-17T22:59:37.821983576Z 61 PC: 12d4b | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:59:37.828908612Z 63 PC: 12d50 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:37.835227142Z 66 PC: 12d78 | Move file pointer
2018-12-17T22:59:37.836533605Z 62 PC: 12d9e | Close file
2018-12-17T22:59:37.839772565Z 79 PC: 12be7 | Find next file
2018-12-17T22:59:37.842378152Z 47 PC: 12cf9 | Get disk transfer address
2018-12-17T22:59:37.843510684Z 61 PC: 12d4b | Open file (Filename = 'PRINT.COM')
2018-12-17T22:59:37.851292001Z 63 PC: 12d50 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:37.857480761Z 66 PC: 12d78 | Move file pointer
2018-12-17T22:59:37.859020499Z 62 PC: 12d9e | Close file
2018-12-17T22:59:37.862244463Z 79 PC: 12be7 | Find next file
2018-12-17T22:59:37.864765134Z 47 PC: 12cf9 | Get disk transfer address
2018-12-17T22:59:37.865859178Z 61 PC: 12d4b | Open file (Filename = 'HELLO.COM')
2018-12-17T22:59:37.87703662Z 63 PC: 12d50 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:37.884096296Z 66 PC: 12d78 | Move file pointer
2018-12-17T22:59:37.885401578Z 62 PC: 12d9e | Close file
2018-12-17T22:59:37.888598463Z 67 PC: 12db7 | Get or set file attributes
2018-12-17T22:59:37.898385147Z 61 PC: 12dc1 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:59:37.904810126Z 64 PC: 12dd2 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:59:37.908105716Z 66 PC: 12e35 | Move file pointer
2018-12-17T22:59:37.909744448Z 64 PC: 12dfb | Write file or device (Write 1300 bytes on handle 5)
2018-12-17T22:59:37.918478962Z 87 PC: 12e4e | Get or set file date and time
2018-12-17T22:59:37.920886616Z 62 PC: 12e04 | Close file
2018-12-17T22:59:37.928489953Z 67 PC: 12e0a | Get or set file attributes
2018-12-17T22:59:37.938341041Z 26 PC: 12c05 | Set disk transfer address
2018-12-17T22:59:37.940319035Z 26 PC: 12f1f | Set disk transfer address
2018-12-17T22:59:37.941468053Z 59 PC: 12f49 | Change current directory
2018-12-17T22:59:37.943181635Z 42 PC: 12ace | Get date 0x12ace: mov al, dl
0x12ad0: cwde
0x12ad1: cmp ax, 0x12
0x12ad4: jne 0x12ae0
0x12ad6: call 0x12e29
0x12ad9: cmp ax, 1
0x12adc: jne 0x12ae0
0x12ade: jmp 0x12af6
0x12ae0: call 0x12e29
0x12ae3: cmp ax, 0xc
0x12ae6: jne 0x12b31
0x12ae8: mov ah, 0x2a
0x12aea: int 0x21
0x12aec: mov al, dl
0x12aee: cwde
0x12aef: cmp ax, 0x14
0x12af2: jl 0x12b31
0x12af4: jmp 0x12af6
0x12af6: lea si, word ptr [di + 0x2cd]
0x12afa: mov ah, 0xe
2018-12-17T22:59:37.946186864Z 42 PC: 12e2e | Get date 0x12e2e: mov al, dh
0x12e30: nop
0x12e31: cwde
0x12e32: ret
0x12e33: int 0x21
0x12e35: ret
0x12e36: lea dx, word ptr [bp - 0x80]
0x12e39: jmp 0x12a9e
0x12e3c: sub sp, 0x80
0x12e40: jmp 0x12a93
0x12e43: mov ax, 0x5701
0x12e46: mov cx, word ptr [si + 0x16]
0x12e49: mov dx, word ptr [si + 0x18]
0x12e4c: int 0x21
0x12e4e: jmp 0x12dff
0x12e50: movsw word ptr es:[di], word ptr [si]
0x12e51: jmp 0x12a6e
0x12e54: pop cx
0x12e55: jmp 0x12ac7
0x12e58: mov bp, sp
2018-12-17T22:59:37.948280607Z 42 PC: 12aec | Get date 0x12aec: mov al, dl
0x12aee: cwde
0x12aef: cmp ax, 0x14
0x12af2: jl 0x12b31
0x12af4: jmp 0x12af6
0x12af6: lea si, word ptr [di + 0x2cd]
0x12afa: mov ah, 0xe
0x12afc: lodsb al, byte ptr [si]
0x12afd: or al, al
0x12aff: je 0x12b05
0x12b01: int 0x10
0x12b03: jmp 0x12afc
0x12b05: mov cx, 0x3e8
0x12b08: jcxz 0x12b11
0x12b0a: mov ax, 0xe07
0x12b0d: int 0x10
0x12b0f: loop 0x12b0d
0x12b11: mov ax, 2
0x12b14: mov cx, 0x1770
0x12b17: call 0x12cec
2018-12-17T22:59:37.950331004Z 26 PC: 12b36 | Set disk transfer address
2018-12-17T22:59:37.952683688Z 47 PC: 12a97 | Get disk transfer address
2018-12-17T22:59:37.953732086Z 26 PC: 12aa0 | Set disk transfer address
2018-12-17T22:59:37.954737671Z 71 PC: 12f34 | Get current directory
2018-12-17T22:59:37.958156304Z 59 PC: 12f3d | Change current directory
2018-12-17T22:59:37.962289561Z 47 PC: 12b4f | Get disk transfer address
2018-12-17T22:59:37.963404545Z 26 PC: 12b73 | Set disk transfer address
2018-12-17T22:59:37.965414211Z 78 PC: 12f17 | Find first file
2018-12-17T22:59:37.969298343Z 47 PC: 12f05 | Get disk transfer address
2018-12-17T22:59:37.970700514Z 26 PC: 12bde | Set disk transfer address
2018-12-17T22:59:37.972789542Z 78 PC: 12be7 | Find first file
2018-12-17T22:59:37.976947114Z 26 PC: 12c05 | Set disk transfer address
2018-12-17T22:59:37.978117884Z 26 PC: 12f1f | Set disk transfer address
2018-12-17T22:59:37.980353482Z 59 PC: 12f49 | Change current directory
2018-12-17T22:59:37.982264425Z 71 PC: 12f34 | Get current directory
2018-12-17T22:59:37.985021467Z 59 PC: 12f3d | Change current directory
2018-12-17T22:59:37.989863742Z 47 PC: 12b4f | Get disk transfer address
2018-12-17T22:59:37.990978906Z 26 PC: 12b73 | Set disk transfer address
2018-12-17T22:59:37.992091982Z 78 PC: 12f17 | Find first file
2018-12-17T22:59:37.996997388Z 47 PC: 12f05 | Get disk transfer address
2018-12-17T22:59:37.998378767Z 26 PC: 12bde | Set disk transfer address
2018-12-17T22:59:37.999652971Z 78 PC: 12be7 | Find first file
2018-12-17T22:59:38.005103257Z 26 PC: 12c05 | Set disk transfer address
2018-12-17T22:59:38.006375899Z 26 PC: 12f1f | Set disk transfer address
2018-12-17T22:59:38.007609583Z 59 PC: 12f49 | Change current directory
2018-12-17T22:59:38.010722905Z 71 PC: 12f34 | Get current directory
2018-12-17T22:59:38.013827178Z 59 PC: 12f3d | Change current directory
2018-12-17T22:59:38.018203983Z 47 PC: 12b4f | Get disk transfer address
2018-12-17T22:59:38.021888879Z 26 PC: 12b73 | Set disk transfer address
2018-12-17T22:59:38.023484185Z 78 PC: 12f17 | Find first file
2018-12-17T22:59:38.027573611Z 47 PC: 12f05 | Get disk transfer address
2018-12-17T22:59:38.029508505Z 26 PC: 12bde | Set disk transfer address
2018-12-17T22:59:38.030683537Z 78 PC: 12be7 | Find first file
2018-12-17T22:59:38.035653185Z 26 PC: 12c05 | Set disk transfer address
2018-12-17T22:59:38.037630683Z 26 PC: 12f1f | Set disk transfer address
2018-12-17T22:59:38.038715911Z 59 PC: 12f49 | Change current directory
2018-12-17T22:59:38.040361069Z 42 PC: 12ace | Get date 0x12ace: mov al, dl
0x12ad0: cwde
0x12ad1: cmp ax, 0x12
0x12ad4: jne 0x12ae0
0x12ad6: call 0x12e29
0x12ad9: cmp ax, 1
0x12adc: jne 0x12ae0
0x12ade: jmp 0x12af6
0x12ae0: call 0x12e29
0x12ae3: cmp ax, 0xc
0x12ae6: jne 0x12b31
0x12ae8: mov ah, 0x2a
0x12aea: int 0x21
0x12aec: mov al, dl
0x12aee: cwde
0x12aef: cmp ax, 0x14
0x12af2: jl 0x12b31
0x12af4: jmp 0x12af6
0x12af6: lea si, word ptr [di + 0x2cd]
0x12afa: mov ah, 0xe
2018-12-17T22:59:38.042883949Z 42 PC: 12e2e | Get date 0x12e2e: mov al, dh
0x12e30: nop
0x12e31: cwde
0x12e32: ret
0x12e33: int 0x21
0x12e35: ret
0x12e36: lea dx, word ptr [bp - 0x80]
0x12e39: jmp 0x12a9e
0x12e3c: sub sp, 0x80
0x12e40: jmp 0x12a93
0x12e43: mov ax, 0x5701
0x12e46: mov cx, word ptr [si + 0x16]
0x12e49: mov dx, word ptr [si + 0x18]
0x12e4c: int 0x21
0x12e4e: jmp 0x12dff
0x12e50: movsw word ptr es:[di], word ptr [si]
0x12e51: jmp 0x12a6e
0x12e54: pop cx
0x12e55: jmp 0x12ac7
0x12e58: mov bp, sp
2018-12-17T22:59:38.045333133Z 42 PC: 12aec | Get date 0x12aec: mov al, dl
0x12aee: cwde
0x12aef: cmp ax, 0x14
0x12af2: jl 0x12b31
0x12af4: jmp 0x12af6
0x12af6: lea si, word ptr [di + 0x2cd]
0x12afa: mov ah, 0xe
0x12afc: lodsb al, byte ptr [si]
0x12afd: or al, al
0x12aff: je 0x12b05
0x12b01: int 0x10
0x12b03: jmp 0x12afc
0x12b05: mov cx, 0x3e8
0x12b08: jcxz 0x12b11
0x12b0a: mov ax, 0xe07
0x12b0d: int 0x10
0x12b0f: loop 0x12b0d
0x12b11: mov ax, 2
0x12b14: mov cx, 0x1770
0x12b17: call 0x12cec
2018-12-17T22:59:38.047256762Z 26 PC: 12b36 | Set disk transfer address
2018-12-17T22:59:38.048974466Z 71 PC: 12f34 | Get current directory
2018-12-17T22:59:38.055929367Z 59 PC: 12f3d | Change current directory
2018-12-17T22:59:38.061472464Z 47 PC: 12b4f | Get disk transfer address
2018-12-17T22:59:38.062748368Z 26 PC: 12b73 | Set disk transfer address
2018-12-17T22:59:38.064007264Z 78 PC: 12f17 | Find first file
2018-12-17T22:59:38.065724248Z 47 PC: 12f05 | Get disk transfer address
2018-12-17T22:59:38.067141652Z 26 PC: 12bde | Set disk transfer address
2018-12-17T22:59:38.06848995Z 78 PC: 12be7 | Find first file
2018-12-17T22:59:38.073934536Z 26 PC: 12c05 | Set disk transfer address
2018-12-17T22:59:38.075350462Z 26 PC: 12f1f | Set disk transfer address
2018-12-17T22:59:38.076486968Z 59 PC: 12f49 | Change current directory
2018-12-17T22:59:38.078174477Z 71 PC: 12f34 | Get current directory
2018-12-17T22:59:38.081433085Z 59 PC: 12f3d | Change current directory
2018-12-17T22:59:38.086940203Z 47 PC: 12b4f | Get disk transfer address
2018-12-17T22:59:38.087986756Z 26 PC: 12b73 | Set disk transfer address
2018-12-17T22:59:38.089462762Z 78 PC: 12f17 | Find first file
2018-12-17T22:59:38.091093849Z 47 PC: 12f05 | Get disk transfer address
2018-12-17T22:59:38.092130087Z 26 PC: 12bde | Set disk transfer address
2018-12-17T22:59:38.093621638Z 78 PC: 12be7 | Find first file
2018-12-17T22:59:38.099477516Z 26 PC: 12c05 | Set disk transfer address
2018-12-17T22:59:38.100761531Z 26 PC: 12f1f | Set disk transfer address
2018-12-17T22:59:38.102656926Z 59 PC: 12f49 | Change current directory
2018-12-17T22:59:38.104614072Z 71 PC: 12f34 | Get current directory
2018-12-17T22:59:38.107590478Z 59 PC: 12f3d | Change current directory
2018-12-17T22:59:38.114243452Z 47 PC: 12b4f | Get disk transfer address
2018-12-17T22:59:38.116064113Z 26 PC: 12b73 | Set disk transfer address
2018-12-17T22:59:38.117095503Z 78 PC: 12f17 | Find first file
2018-12-17T22:59:38.120231982Z 47 PC: 12f05 | Get disk transfer address
2018-12-17T22:59:38.12132031Z 26 PC: 12bde | Set disk transfer address
2018-12-17T22:59:38.122340853Z 78 PC: 12be7 | Find first file
2018-12-17T22:59:38.128170137Z 26 PC: 12c05 | Set disk transfer address
2018-12-17T22:59:38.129172871Z 26 PC: 12f1f | Set disk transfer address
2018-12-17T22:59:38.130125911Z 59 PC: 12f49 | Change current directory
2018-12-17T22:59:38.132173116Z 42 PC: 12ace | Get date 0x12ace: mov al, dl
0x12ad0: cwde
0x12ad1: cmp ax, 0x12
0x12ad4: jne 0x12ae0
0x12ad6: call 0x12e29
0x12ad9: cmp ax, 1
0x12adc: jne 0x12ae0
0x12ade: jmp 0x12af6
0x12ae0: call 0x12e29
0x12ae3: cmp ax, 0xc
0x12ae6: jne 0x12b31
0x12ae8: mov ah, 0x2a
0x12aea: int 0x21
0x12aec: mov al, dl
0x12aee: cwde
0x12aef: cmp ax, 0x14
0x12af2: jl 0x12b31
0x12af4: jmp 0x12af6
0x12af6: lea si, word ptr [di + 0x2cd]
0x12afa: mov ah, 0xe
2018-12-17T22:59:38.134224778Z 42 PC: 12e2e | Get date 0x12e2e: mov al, dh
0x12e30: nop
0x12e31: cwde
0x12e32: ret
0x12e33: int 0x21
0x12e35: ret
0x12e36: lea dx, word ptr [bp - 0x80]
0x12e39: jmp 0x12a9e
0x12e3c: sub sp, 0x80
0x12e40: jmp 0x12a93
0x12e43: mov ax, 0x5701
0x12e46: mov cx, word ptr [si + 0x16]
0x12e49: mov dx, word ptr [si + 0x18]
0x12e4c: int 0x21
0x12e4e: jmp 0x12dff
0x12e50: movsw word ptr es:[di], word ptr [si]
0x12e51: jmp 0x12a6e
0x12e54: pop cx
0x12e55: jmp 0x12ac7
0x12e58: mov bp, sp
2018-12-17T22:59:38.136244855Z 42 PC: 12aec | Get date 0x12aec: mov al, dl
0x12aee: cwde
0x12aef: cmp ax, 0x14
0x12af2: jl 0x12b31
0x12af4: jmp 0x12af6
0x12af6: lea si, word ptr [di + 0x2cd]
0x12afa: mov ah, 0xe
0x12afc: lodsb al, byte ptr [si]
0x12afd: or al, al
0x12aff: je 0x12b05
0x12b01: int 0x10
0x12b03: jmp 0x12afc
0x12b05: mov cx, 0x3e8
0x12b08: jcxz 0x12b11
0x12b0a: mov ax, 0xe07
0x12b0d: int 0x10
0x12b0f: loop 0x12b0d
0x12b11: mov ax, 2
0x12b14: mov cx, 0x1770
0x12b17: call 0x12cec
2018-12-17T22:59:38.13844425Z 26 PC: 12b36 | Set disk transfer address
2018-12-17T22:59:38.139447637Z 26 PC: 12bde | Set disk transfer address
2018-12-17T22:59:38.140613903Z 78 PC: 12be7 | Find first file
2018-12-17T22:59:38.145092548Z 26 PC: 12c05 | Set disk transfer address