Sample viewer

vx.netlux.org/Virus.DOS.Horror.1137

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:05:05.153860843Z 240 PC: 13dd9 | UNKNOWN!
2018-12-17T23:05:05.155612798Z 53 PC: 13de6 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:05:05.158611608Z 53 PC: 13df4 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:05:05.160128901Z 53 PC: 13e02 | Get interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-17T23:05:05.161485522Z 82 PC: 13e10 | Get DOS internal pointers (SYSVARS)
2018-12-17T23:05:05.163607923Z 42 PC: 13e52 | Get date 0x13e52: cmp dh, 6
0x13e55: ja 0x13e5f
0x13e57: mov ax, 0x2513
0x13e5a: mov dx, 0x471
0x13e5d: int 0x21
0x13e5f: mov ax, 0x2521
0x13e62: mov dx, 0x4a5
0x13e65: int 0x21
0x13e67: pop ds
0x13e68: push ds
0x13e69: push si
0x13e6a: push cs
0x13e6b: pop es
0x13e6c: mov ax, word ptr [0x2c]
0x13e6f: mov ds, ax
0x13e71: xor cx, cx
0x13e73: mov di, si
0x13e75: add di, 0x17e
0x13e79: mov bx, di
0x13e7b: mov ax, di
2018-12-17T23:05:05.165986787Z 37 PC: 13e67 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:05:05.16788165Z 61 PC: 9fa57 | Open file (Filename = '<')
2018-12-17T23:05:05.178849957Z 66 PC: 9fa66 | Move file pointer
2018-12-17T23:05:05.180487727Z 63 PC: 9fa74 | Read file or device (Read 10 bytes on handle 5)
2018-12-17T23:05:05.18704574Z 62 PC: 9fa7a | Close file
2018-12-17T23:05:05.190296303Z 53 PC: 9fa8f | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:05:05.191859632Z 53 PC: 9fa95 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:05:05.193568716Z 53 PC: 9fa9b | Get interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-17T23:05:05.196336712Z 37 PC: 9faa9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:05:05.197657867Z 37 PC: 9f9d3 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:05:05.19990404Z 37 PC: 9f9e1 | Set interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-17T23:05:05.20190873Z 67 PC: 9fab3 | Get or set file attributes
2018-12-17T23:05:05.208562523Z 67 PC: 9fabd | Get or set file attributes
2018-12-17T23:05:05.62151951Z 61 PC: 9fac9 | Open file (Filename = 'S�')
2018-12-17T23:05:05.629757322Z 63 PC: 9fad9 | Read file or device (Read 24 bytes on handle 5)
2018-12-17T23:05:05.63325575Z 66 PC: 9fae4 | Move file pointer
2018-12-17T23:05:05.634907707Z 87 PC: 9fb1b | Get or set file date and time
2018-12-17T23:05:05.636553011Z 64 PC: 9fb28 | Write file or device (Write 1137 bytes on handle 5)
2018-12-17T23:05:05.647887326Z 66 PC: 9fb37 | Move file pointer
2018-12-17T23:05:05.649969101Z 64 PC: 9fb43 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T23:05:05.65340421Z 87 PC: 9faf6 | Get or set file date and time
2018-12-17T23:05:05.656393682Z 62 PC: 9fafa | Close file
2018-12-17T23:05:05.66468768Z 67 PC: 9fb02 | Get or set file attributes
2018-12-17T23:05:05.674720507Z 37 PC: 9fb09 | Set interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-17T23:05:05.679751428Z 37 PC: 9fb0f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:05:05.681395871Z 37 PC: 9fb15 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:05:05.683572985Z 42 PC: 13eb1 | Get date 0x13eb1: cmp dh, 6
0x13eb4: ja 0x13ef9
0x13eb6: xor ax, ax
0x13eb8: mov ds, ax
0x13eba: test word ptr [0x46c], 0x1ff
0x13ec0: jne 0x13ef9
0x13ec2: mov al, 0x3f
0x13ec4: out 0x21, al
0x13ec6: mov ah, 0xf2
0x13ec8: int 0x21
0x13eca: mov ax, 3
0x13ecd: cmp byte ptr [0x488], 0xfb
0x13ed2: jne 0x13ed6
0x13ed4: mov al, 7
0x13ed6: int 0x10
0x13ed8: push cs
0x13ed9: pop ds
0x13eda: mov ah, 9
0x13edc: mov dx, 0x16a
0x13edf: add dx, si
2018-12-17T23:05:05.687134813Z 9 PC: 13dc6 | Display string (String= 'Hello - Copyright S & S International, 1990 ')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15091,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:42:32.228012303Z 240 PC: 13dd9 | UNKNOWN!
2018-12-25T12:42:32.229369997Z 53 PC: 13de6 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:32.230363914Z 53 PC: 13df4 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:42:32.23200641Z 53 PC: 13e02 | Get interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T12:42:32.233365027Z 82 PC: 13e10 | Get DOS internal pointers (SYSVARS)
2018-12-25T12:42:32.234683604Z 42 PC: 13e52 | Get date 0x13e52: cmp dh, 6
0x13e55: ja 0x13e5f
0x13e57: mov ax, 0x2513
0x13e5a: mov dx, 0x471
0x13e5d: int 0x21
0x13e5f: mov ax, 0x2521
0x13e62: mov dx, 0x4a5
0x13e65: int 0x21
0x13e67: pop ds
0x13e68: push ds
0x13e69: push si
0x13e6a: push cs
0x13e6b: pop es
0x13e6c: mov ax, word ptr [0x2c]
0x13e6f: mov ds, ax
0x13e71: xor cx, cx
0x13e73: mov di, si
0x13e75: add di, 0x17e
0x13e79: mov bx, di
0x13e7b: mov ax, di
2018-12-25T12:42:32.236674593Z 37 PC: 13e5f | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:32.237983788Z 37 PC: 13e67 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:42:32.239435382Z 61 PC: 9fa57 | Open file (Filename = '<')
2018-12-25T12:42:32.243749631Z 66 PC: 9fa66 | Move file pointer
2018-12-25T12:42:32.245405048Z 63 PC: 9fa74 | Read file or device (Read 10 bytes on handle 5)
2018-12-25T12:42:32.252784587Z 62 PC: 9fa7a | Close file
2018-12-25T12:42:32.254046293Z 53 PC: 9fa8f | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:32.255419206Z 53 PC: 9fa95 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:32.256789648Z 53 PC: 9fa9b | Get interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T12:42:32.258257659Z 37 PC: 9faa9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:32.259561822Z 37 PC: 9f9d3 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:32.260782423Z 37 PC: 9f9e1 | Set interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T12:42:32.26177368Z 67 PC: 9fab3 | Get or set file attributes
2018-12-25T12:42:32.265599561Z 67 PC: 9fabd | Get or set file attributes
2018-12-25T12:42:34.175903128Z 61 PC: 9fac9 | Open file (Filename = 'S�')
2018-12-25T12:42:34.181927815Z 63 PC: 9fad9 | Read file or device (Read 24 bytes on handle 5)
2018-12-25T12:42:34.184407566Z 66 PC: 9fae4 | Move file pointer
2018-12-25T12:42:34.187096305Z 87 PC: 9fb1b | Get or set file date and time
2018-12-25T12:42:34.201970048Z 64 PC: 9fb28 | Write file or device (Write 1137 bytes on handle 5)
2018-12-25T12:42:34.257679081Z 66 PC: 9fb37 | Move file pointer
2018-12-25T12:42:34.259596628Z 64 PC: 9fb43 | Write file or device (Write 24 bytes on handle 5)
2018-12-25T12:42:34.262702351Z 87 PC: 9faf6 | Get or set file date and time
2018-12-25T12:42:34.264267533Z 62 PC: 9fafa | Close file
2018-12-25T12:42:34.340824797Z 67 PC: 9fb02 | Get or set file attributes
2018-12-25T12:42:34.402171574Z 37 PC: 9fb09 | Set interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T12:42:34.403658709Z 37 PC: 9fb0f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:34.405750514Z 37 PC: 9fb15 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:34.40810687Z 42 PC: 13eb1 | Get date 0x13eb1: cmp dh, 6
0x13eb4: ja 0x13ef9
0x13eb6: xor ax, ax
0x13eb8: mov ds, ax
0x13eba: test word ptr [0x46c], 0x1ff
0x13ec0: jne 0x13ef9
0x13ec2: mov al, 0x3f
0x13ec4: out 0x21, al
0x13ec6: mov ah, 0xf2
0x13ec8: int 0x21
0x13eca: mov ax, 3
0x13ecd: cmp byte ptr [0x488], 0xfb
0x13ed2: jne 0x13ed6
0x13ed4: mov al, 7
0x13ed6: int 0x10
0x13ed8: push cs
0x13ed9: pop ds
0x13eda: mov ah, 9
0x13edc: mov dx, 0x16a
0x13edf: add dx, si
2018-12-25T12:42:34.410677313Z 9 PC: 13dc6 | Display string (String= 'Hello - Copyright S & S International, 1990 ')

{"DateBased":true,"Day":1,"Month":7,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15091,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T13:07:27.293690212Z 240 PC: 13dd9 | UNKNOWN!
2018-12-25T13:07:27.294591752Z 53 PC: 13de6 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T13:07:27.296117025Z 53 PC: 13df4 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T13:07:27.297573148Z 53 PC: 13e02 | Get interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T13:07:27.299101125Z 82 PC: 13e10 | Get DOS internal pointers (SYSVARS)
2018-12-25T13:07:27.303840418Z 42 PC: 13e52 | Get date 0x13e52: cmp dh, 6
0x13e55: ja 0x13e5f
0x13e57: mov ax, 0x2513
0x13e5a: mov dx, 0x471
0x13e5d: int 0x21
0x13e5f: mov ax, 0x2521
0x13e62: mov dx, 0x4a5
0x13e65: int 0x21
0x13e67: pop ds
0x13e68: push ds
0x13e69: push si
0x13e6a: push cs
0x13e6b: pop es
0x13e6c: mov ax, word ptr [0x2c]
0x13e6f: mov ds, ax
0x13e71: xor cx, cx
0x13e73: mov di, si
0x13e75: add di, 0x17e
0x13e79: mov bx, di
0x13e7b: mov ax, di
2018-12-25T13:07:27.307420427Z 37 PC: 13e67 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T13:07:27.30955809Z 61 PC: 9fa57 | Open file (Filename = '<')
2018-12-25T13:07:27.317307153Z 66 PC: 9fa66 | Move file pointer
2018-12-25T13:07:27.319929449Z 63 PC: 9fa74 | Read file or device (Read 10 bytes on handle 5)
2018-12-25T13:07:27.327262446Z 62 PC: 9fa7a | Close file
2018-12-25T13:07:27.329573253Z 53 PC: 9fa8f | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T13:07:27.33243479Z 53 PC: 9fa95 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T13:07:27.334164992Z 53 PC: 9fa9b | Get interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T13:07:27.335654479Z 37 PC: 9faa9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T13:07:27.338108922Z 37 PC: 9f9d3 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T13:07:27.339731419Z 37 PC: 9f9e1 | Set interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T13:07:27.341234834Z 67 PC: 9fab3 | Get or set file attributes
2018-12-25T13:07:27.348586641Z 67 PC: 9fabd | Get or set file attributes
2018-12-25T13:07:28.03737285Z 61 PC: 9fac9 | Open file (Filename = 'S�')
2018-12-25T13:07:28.045236003Z 63 PC: 9fad9 | Read file or device (Read 24 bytes on handle 5)
2018-12-25T13:07:28.049028255Z 66 PC: 9fae4 | Move file pointer
2018-12-25T13:07:28.051585009Z 87 PC: 9fb1b | Get or set file date and time
2018-12-25T13:07:28.053312445Z 64 PC: 9fb28 | Write file or device (Write 1137 bytes on handle 5)
2018-12-25T13:07:28.065265778Z 66 PC: 9fb37 | Move file pointer
2018-12-25T13:07:28.067887946Z 64 PC: 9fb43 | Write file or device (Write 24 bytes on handle 5)
2018-12-25T13:07:28.071075357Z 87 PC: 9faf6 | Get or set file date and time
2018-12-25T13:07:28.072869508Z 62 PC: 9fafa | Close file
2018-12-25T13:07:28.081438974Z 67 PC: 9fb02 | Get or set file attributes
2018-12-25T13:07:28.092287206Z 37 PC: 9fb09 | Set interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T13:07:28.093973122Z 37 PC: 9fb0f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T13:07:28.09616489Z 37 PC: 9fb15 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T13:07:28.098172254Z 42 PC: 13eb1 | Get date 0x13eb1: cmp dh, 6
0x13eb4: ja 0x13ef9
0x13eb6: xor ax, ax
0x13eb8: mov ds, ax
0x13eba: test word ptr [0x46c], 0x1ff
0x13ec0: jne 0x13ef9
0x13ec2: mov al, 0x3f
0x13ec4: out 0x21, al
0x13ec6: mov ah, 0xf2
0x13ec8: int 0x21
0x13eca: mov ax, 3
0x13ecd: cmp byte ptr [0x488], 0xfb
0x13ed2: jne 0x13ed6
0x13ed4: mov al, 7
0x13ed6: int 0x10
0x13ed8: push cs
0x13ed9: pop ds
0x13eda: mov ah, 9
0x13edc: mov dx, 0x16a
0x13edf: add dx, si
2018-12-25T13:07:28.099875812Z 9 PC: 13dc6 | Display string (String= 'Hello - Copyright S & S International, 1990 ')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15091,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:42:32.575704219Z 240 PC: 13dd9 | UNKNOWN!
2018-12-25T12:42:32.577162541Z 53 PC: 13de6 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:32.578655102Z 53 PC: 13df4 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:42:32.579518147Z 53 PC: 13e02 | Get interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T12:42:32.581075598Z 82 PC: 13e10 | Get DOS internal pointers (SYSVARS)
2018-12-25T12:42:32.582134336Z 42 PC: 13e52 | Get date 0x13e52: cmp dh, 6
0x13e55: ja 0x13e5f
0x13e57: mov ax, 0x2513
0x13e5a: mov dx, 0x471
0x13e5d: int 0x21
0x13e5f: mov ax, 0x2521
0x13e62: mov dx, 0x4a5
0x13e65: int 0x21
0x13e67: pop ds
0x13e68: push ds
0x13e69: push si
0x13e6a: push cs
0x13e6b: pop es
0x13e6c: mov ax, word ptr [0x2c]
0x13e6f: mov ds, ax
0x13e71: xor cx, cx
0x13e73: mov di, si
0x13e75: add di, 0x17e
0x13e79: mov bx, di
0x13e7b: mov ax, di
2018-12-25T12:42:32.584324682Z 37 PC: 13e5f | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:32.586131264Z 37 PC: 13e67 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:42:32.587956849Z 61 PC: 9fa57 | Open file (Filename = '<')
2018-12-25T12:42:32.592522186Z 66 PC: 9fa66 | Move file pointer
2018-12-25T12:42:32.593842552Z 63 PC: 9fa74 | Read file or device (Read 10 bytes on handle 5)
2018-12-25T12:42:32.603400391Z 62 PC: 9fa7a | Close file
2018-12-25T12:42:32.60488429Z 53 PC: 9fa8f | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:32.606161562Z 53 PC: 9fa95 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:32.607486801Z 53 PC: 9fa9b | Get interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T12:42:32.608543637Z 37 PC: 9faa9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:32.609803899Z 37 PC: 9f9d3 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:32.611251018Z 37 PC: 9f9e1 | Set interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T12:42:32.612591042Z 67 PC: 9fab3 | Get or set file attributes
2018-12-25T12:42:32.617157964Z 67 PC: 9fabd | Get or set file attributes
2018-12-25T12:42:34.181278697Z 61 PC: 9fac9 | Open file (Filename = 'S�')
2018-12-25T12:42:34.188006987Z 63 PC: 9fad9 | Read file or device (Read 24 bytes on handle 5)
2018-12-25T12:42:34.191802336Z 66 PC: 9fae4 | Move file pointer
2018-12-25T12:42:34.194343656Z 87 PC: 9fb1b | Get or set file date and time
2018-12-25T12:42:34.196321223Z 64 PC: 9fb28 | Write file or device (Write 1137 bytes on handle 5)
2018-12-25T12:42:34.257362653Z 66 PC: 9fb37 | Move file pointer
2018-12-25T12:42:34.262113093Z 64 PC: 9fb43 | Write file or device (Write 24 bytes on handle 5)
2018-12-25T12:42:34.265462221Z 87 PC: 9faf6 | Get or set file date and time
2018-12-25T12:42:34.267221067Z 62 PC: 9fafa | Close file
2018-12-25T12:42:34.367884612Z 67 PC: 9fb02 | Get or set file attributes
2018-12-25T12:42:34.42327939Z 37 PC: 9fb09 | Set interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T12:42:34.42437563Z 37 PC: 9fb0f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:34.426101329Z 37 PC: 9fb15 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:34.42751499Z 42 PC: 13eb1 | Get date 0x13eb1: cmp dh, 6
0x13eb4: ja 0x13ef9
0x13eb6: xor ax, ax
0x13eb8: mov ds, ax
0x13eba: test word ptr [0x46c], 0x1ff
0x13ec0: jne 0x13ef9
0x13ec2: mov al, 0x3f
0x13ec4: out 0x21, al
0x13ec6: mov ah, 0xf2
0x13ec8: int 0x21
0x13eca: mov ax, 3
0x13ecd: cmp byte ptr [0x488], 0xfb
0x13ed2: jne 0x13ed6
0x13ed4: mov al, 7
0x13ed6: int 0x10
0x13ed8: push cs
0x13ed9: pop ds
0x13eda: mov ah, 9
0x13edc: mov dx, 0x16a
0x13edf: add dx, si
2018-12-25T12:42:34.429201901Z 9 PC: 13dc6 | Display string (String= 'Hello - Copyright S & S International, 1990 ')

{"DateBased":true,"Day":1,"Month":7,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15091,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:42:33.06105675Z 240 PC: 13dd9 | UNKNOWN!
2018-12-25T12:42:33.063655527Z 53 PC: 13de6 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:33.065565126Z 53 PC: 13df4 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:42:33.067237559Z 53 PC: 13e02 | Get interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T12:42:33.068955253Z 82 PC: 13e10 | Get DOS internal pointers (SYSVARS)
2018-12-25T12:42:33.07143131Z 42 PC: 13e52 | Get date 0x13e52: cmp dh, 6
0x13e55: ja 0x13e5f
0x13e57: mov ax, 0x2513
0x13e5a: mov dx, 0x471
0x13e5d: int 0x21
0x13e5f: mov ax, 0x2521
0x13e62: mov dx, 0x4a5
0x13e65: int 0x21
0x13e67: pop ds
0x13e68: push ds
0x13e69: push si
0x13e6a: push cs
0x13e6b: pop es
0x13e6c: mov ax, word ptr [0x2c]
0x13e6f: mov ds, ax
0x13e71: xor cx, cx
0x13e73: mov di, si
0x13e75: add di, 0x17e
0x13e79: mov bx, di
0x13e7b: mov ax, di
2018-12-25T12:42:33.073663918Z 37 PC: 13e67 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:42:33.075536853Z 61 PC: 9fa57 | Open file (Filename = '<')
2018-12-25T12:42:33.083071524Z 66 PC: 9fa66 | Move file pointer
2018-12-25T12:42:33.085095474Z 63 PC: 9fa74 | Read file or device (Read 10 bytes on handle 5)
2018-12-25T12:42:33.09244996Z 62 PC: 9fa7a | Close file
2018-12-25T12:42:33.103688632Z 53 PC: 9fa8f | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:33.105028427Z 53 PC: 9fa95 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:33.106317446Z 53 PC: 9fa9b | Get interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T12:42:33.108127076Z 37 PC: 9faa9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:33.110140233Z 37 PC: 9f9d3 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:33.112029707Z 37 PC: 9f9e1 | Set interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T12:42:33.11404534Z 67 PC: 9fab3 | Get or set file attributes
2018-12-25T12:42:33.120050943Z 67 PC: 9fabd | Get or set file attributes
2018-12-25T12:42:33.446020387Z 61 PC: 9fac9 | Open file (Filename = 'S�')
2018-12-25T12:42:33.455019512Z 63 PC: 9fad9 | Read file or device (Read 24 bytes on handle 5)
2018-12-25T12:42:33.458187881Z 66 PC: 9fae4 | Move file pointer
2018-12-25T12:42:33.45986321Z 87 PC: 9fb1b | Get or set file date and time
2018-12-25T12:42:33.461750428Z 64 PC: 9fb28 | Write file or device (Write 1137 bytes on handle 5)
2018-12-25T12:42:33.472960892Z 66 PC: 9fb37 | Move file pointer
2018-12-25T12:42:33.474541453Z 64 PC: 9fb43 | Write file or device (Write 24 bytes on handle 5)
2018-12-25T12:42:33.47763838Z 87 PC: 9faf6 | Get or set file date and time
2018-12-25T12:42:33.480341208Z 62 PC: 9fafa | Close file
2018-12-25T12:42:33.488188414Z 67 PC: 9fb02 | Get or set file attributes
2018-12-25T12:42:33.497896135Z 37 PC: 9fb09 | Set interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T12:42:33.500599772Z 37 PC: 9fb0f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:33.502218997Z 37 PC: 9fb15 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:33.504485365Z 42 PC: 13eb1 | Get date 0x13eb1: cmp dh, 6
0x13eb4: ja 0x13ef9
0x13eb6: xor ax, ax
0x13eb8: mov ds, ax
0x13eba: test word ptr [0x46c], 0x1ff
0x13ec0: jne 0x13ef9
0x13ec2: mov al, 0x3f
0x13ec4: out 0x21, al
0x13ec6: mov ah, 0xf2
0x13ec8: int 0x21
0x13eca: mov ax, 3
0x13ecd: cmp byte ptr [0x488], 0xfb
0x13ed2: jne 0x13ed6
0x13ed4: mov al, 7
0x13ed6: int 0x10
0x13ed8: push cs
0x13ed9: pop ds
0x13eda: mov ah, 9
0x13edc: mov dx, 0x16a
0x13edf: add dx, si
2018-12-25T12:42:33.508189022Z 9 PC: 13dc6 | Display string (String= 'Hello - Copyright S & S International, 1990 ')