Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Animus.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:29:17.044093471Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:29:17.047896977Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:29:17.050096747Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:29:17.051877635Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:29:17.053611376Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:29:17.056463553Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:29:17.05821259Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:29:17.059918448Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:29:17.062628523Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:29:17.064406928Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:29:17.066125264Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:29:17.06974558Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:29:17.071231108Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:29:17.072495023Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:29:17.074132191Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:29:17.086580111Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:29:17.088077847Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:29:17.089570001Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:29:17.093437505Z 53 PC: 137a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:29:17.096369116Z 37 PC: 137b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:29:17.097566621Z 37 PC: 137bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:29:17.099512534Z 37 PC: 137c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:29:17.101090369Z 37 PC: 137cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:29:17.103299822Z 68 PC: 13b3f | I/O control for devices (Set for = '')
2018-12-17T22:29:17.106183636Z 48 PC: 14268 | Get DOS version
2018-12-17T22:29:17.108824508Z 61 PC: 14028 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:29:17.116571101Z 87 PC: 134f0 | Get or set file date and time
2018-12-17T22:29:17.119175007Z 63 PC: 140fb | Read file or device (Read 7360 bytes on handle 5)
2018-12-17T22:29:17.128032736Z 87 PC: 1351d | Get or set file date and time
2018-12-17T22:29:17.130202615Z 62 PC: 14078 | Close file
2018-12-17T22:29:17.146094278Z 25 PC: 142f5 | Get default drive
2018-12-17T22:29:17.14766972Z 71 PC: 14308 | Get current directory
2018-12-17T22:29:17.152689155Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.154852311Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.161921543Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.163613711Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.167569817Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.17006355Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.174086683Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.1757805Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.180310439Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.181659653Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.189287824Z 61 PC: 14028 | Open file (Filename = 'A:\SLEEP.COM')
2018-12-17T22:29:17.197441888Z 63 PC: 140fb | Read file or device (Read 27 bytes on handle 5)
2018-12-17T22:29:17.205277699Z 62 PC: 14078 | Close file
2018-12-17T22:29:17.208376317Z 60 PC: 14028 | Create or truncate file
2018-12-17T22:29:17.222568708Z 67 PC: 134af | Get or set file attributes
2018-12-17T22:29:17.230126831Z 61 PC: 14028 | Open file (Filename = 'A:\SLEEP.COM')
2018-12-17T22:29:17.238102233Z 64 PC: 140fb | Write file or device (Write 7360 bytes on handle 5)
2018-12-17T22:29:17.248975534Z 63 PC: 140fb | Read file or device (Read 8192 bytes on handle 6)
2018-12-17T22:29:17.253101505Z 64 PC: 140fb | Write file or device (Write 407 bytes on handle 5)
2018-12-17T22:29:17.262757075Z 66 PC: 141c4 | Move file pointer
2018-12-17T22:29:17.265087165Z 66 PC: 141d2 | Move file pointer
2018-12-17T22:29:17.268058306Z 66 PC: 141e0 | Move file pointer
2018-12-17T22:29:17.27024759Z 87 PC: 1351d | Get or set file date and time
2018-12-17T22:29:17.272552605Z 62 PC: 14078 | Close file
2018-12-17T22:29:17.276208566Z 62 PC: 14078 | Close file
2018-12-17T22:29:17.286722289Z 65 PC: 141fd | Delete file (Filename = 'A:\SLEEP.COM')
2018-12-17T22:29:17.301149653Z 86 PC: 14233 | Rename file
2018-12-17T22:29:17.315158805Z 67 PC: 134d6 | Get or set file attributes
2018-12-17T22:29:17.327030752Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.328449315Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.333255051Z 61 PC: 14028 | Open file (Filename = 'A:\PRINT.COM')
2018-12-17T22:29:17.341515481Z 63 PC: 140fb | Read file or device (Read 27 bytes on handle 5)
2018-12-17T22:29:17.349687498Z 62 PC: 14078 | Close file
2018-12-17T22:29:17.354210627Z 60 PC: 14028 | Create or truncate file
2018-12-17T22:29:17.367291431Z 67 PC: 134af | Get or set file attributes
2018-12-17T22:29:17.374499759Z 61 PC: 14028 | Open file (Filename = 'A:\PRINT.COM')
2018-12-17T22:29:17.382831959Z 64 PC: 140fb | Write file or device (Write 7360 bytes on handle 5)
2018-12-17T22:29:17.393059868Z 63 PC: 140fb | Read file or device (Read 8192 bytes on handle 6)
2018-12-17T22:29:17.396838541Z 64 PC: 140fb | Write file or device (Write 27 bytes on handle 5)
2018-12-17T22:29:17.40079101Z 66 PC: 141c4 | Move file pointer
2018-12-17T22:29:17.40357133Z 66 PC: 141d2 | Move file pointer
2018-12-17T22:29:17.405815659Z 66 PC: 141e0 | Move file pointer
2018-12-17T22:29:17.407861739Z 87 PC: 1351d | Get or set file date and time
2018-12-17T22:29:17.410746503Z 62 PC: 14078 | Close file
2018-12-17T22:29:17.413540787Z 62 PC: 14078 | Close file
2018-12-17T22:29:17.423523566Z 65 PC: 141fd | Delete file (Filename = 'A:\PRINT.COM')
2018-12-17T22:29:17.437076259Z 86 PC: 14233 | Rename file
2018-12-17T22:29:17.450432704Z 67 PC: 134d6 | Get or set file attributes
2018-12-17T22:29:17.462639842Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.465071231Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.469339263Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.471245217Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.486053292Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.487594373Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.494746778Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.496350232Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.503991625Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.505593845Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.516480596Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.518450369Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.526881788Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.528492221Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.540164579Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.541786247Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.555583175Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.557874865Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.565582907Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.567233664Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.576833031Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.578498248Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.58161603Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.583375634Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.586183497Z 61 PC: 14028 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:29:17.593977226Z 87 PC: 134f0 | Get or set file date and time
2018-12-17T22:29:17.596952858Z 60 PC: 14028 | Create or truncate file
2018-12-17T22:29:17.610281393Z 66 PC: 1415a | Move file pointer
2018-12-17T22:29:17.612298248Z 63 PC: 140fb | Read file or device (Read 8192 bytes on handle 5)
2018-12-17T22:29:17.621173035Z 64 PC: 140fb | Write file or device (Write 100 bytes on handle 6)
2018-12-17T22:29:17.627424757Z 66 PC: 141c4 | Move file pointer
2018-12-17T22:29:17.629448804Z 66 PC: 141d2 | Move file pointer
2018-12-17T22:29:17.631475008Z 66 PC: 141e0 | Move file pointer
2018-12-17T22:29:17.634599468Z 87 PC: 1351d | Get or set file date and time
2018-12-17T22:29:17.63649573Z 62 PC: 14078 | Close file
2018-12-17T22:29:17.638676325Z 62 PC: 14078 | Close file
2018-12-17T22:29:17.648769971Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:29:17.650282204Z 37 PC: 135bd | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:29:17.651711728Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:29:17.654293269Z 37 PC: 135bd | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:29:17.655715955Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:29:17.657178791Z 37 PC: 135bd | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:29:17.659818562Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:29:17.661282399Z 37 PC: 135bd | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:29:17.662715047Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:29:17.665349631Z 37 PC: 135bd | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:29:17.667106012Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:29:17.668863634Z 37 PC: 135bd | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:29:17.671605435Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:29:17.673117719Z 37 PC: 135bd | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:29:17.674666328Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:29:17.676335466Z 37 PC: 135bd | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:29:17.67821749Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:29:17.679582998Z 37 PC: 135bd | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:29:17.680895604Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:29:17.682288884Z 37 PC: 135bd | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:29:17.683495102Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:29:17.684602098Z 37 PC: 135bd | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:29:17.686173136Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:29:17.687395012Z 37 PC: 135bd | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:29:17.688445497Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:29:17.690318966Z 37 PC: 135bd | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:29:17.691674581Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:29:17.693129356Z 37 PC: 135bd | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:29:17.69493583Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:29:17.696582653Z 37 PC: 135bd | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:29:17.698094727Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:29:17.700621478Z 37 PC: 135bd | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:29:17.702049693Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:29:17.703604504Z 37 PC: 135bd | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:29:17.705951608Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:29:17.707504801Z 37 PC: 135bd | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:29:17.70869764Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:29:17.711001425Z 37 PC: 135bd | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:29:17.713001425Z 41 PC: 1363d | Parse filename
2018-12-17T22:29:17.715561038Z 41 PC: 1364b | Parse filename
2018-12-17T22:29:17.718031341Z 75 PC: 13656 | Execute program
2018-12-17T22:29:17.729822041Z 9 PC: 23cd2 | Display string (String= 'Hello - Copyright S & S International, 1990 ')
2018-12-17T22:29:17.736773294Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:29:17.738902309Z 37 PC: 135bd | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:29:17.740149692Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:29:17.741457538Z 37 PC: 135bd | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:29:17.74324325Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:29:17.744512228Z 37 PC: 135bd | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:29:17.745711227Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:29:17.747632018Z 37 PC: 135bd | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:29:17.748820256Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:29:17.750057169Z 37 PC: 135bd | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:29:17.751845236Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:29:17.753110823Z 37 PC: 135bd | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:29:17.754830289Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:29:17.756778062Z 37 PC: 135bd | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:29:17.758222945Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:29:17.759618959Z 37 PC: 135bd | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:29:17.761739355Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:29:17.763489767Z 37 PC: 135bd | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:29:17.764909575Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:29:17.767291037Z 37 PC: 135bd | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:29:17.7686333Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:29:17.770309589Z 37 PC: 135bd | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:29:17.772969852Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:29:17.774420258Z 37 PC: 135bd | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:29:17.775647389Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:29:17.777230418Z 37 PC: 135bd | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:29:17.778614767Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:29:17.779899443Z 37 PC: 135bd | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:29:17.781631897Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:29:17.783475221Z 37 PC: 135bd | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:29:17.784831419Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:29:17.786690344Z 37 PC: 135bd | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:29:17.787959193Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:29:17.789112394Z 37 PC: 135bd | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:29:17.790867355Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:29:17.79222373Z 37 PC: 135bd | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:29:17.793427008Z 53 PC: 135b4 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:29:17.795391201Z 37 PC: 135bd | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:29:17.796979251Z 65 PC: 141fd | Delete file (Filename = 'A:\Animus.exe')
2018-12-17T22:29:17.810216351Z 44 PC: 13fa9 | Get time 0x13fa9: mov word ptr [0x42], cx
0x13fad: mov word ptr [0x44], dx
0x13fb1: retf
0x13fb2: mov bx, sp
0x13fb4: push ds
0x13fb5: les di, ptr ss:[bx + 8]
0x13fb9: lds si, ptr ss:[bx + 4]
0x13fbd: cld
0x13fbe: xor ax, ax
0x13fc0: stosw word ptr es:[di], ax
0x13fc1: mov ax, 0xd7b0
0x13fc4: stosw word ptr es:[di], ax
0x13fc5: xor ax, ax
0x13fc7: mov cx, 0x16
0x13fca: rep stosd dword ptr es:[di], eax
0x13fcc: lodsb al, byte ptr [si]
0x13fcd: cmp al, 0x4f
0x13fcf: jbe 0x13fd3
0x13fd1: mov al, 0x4f
0x13fd3: mov cl, al
2018-12-17T22:29:17.813739686Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.815027916Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.822075732Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.824029137Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.827717444Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.828970415Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.832739353Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.83407113Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.837138372Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.838901628Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.842042802Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.843410316Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.846907293Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.848298623Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.851218443Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.852886049Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.855780576Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.856921794Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.86047101Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.861626341Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.864779209Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.867639673Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.875483475Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.877550991Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.89609813Z 26 PC: 1354d | Set disk transfer address
2018-12-17T22:29:17.897207369Z 78 PC: 13559 | Find first file
2018-12-17T22:29:17.904388701Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.906690087Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.909734464Z 26 PC: 13571 | Set disk transfer address
2018-12-17T22:29:17.91086953Z 79 PC: 13576 | Find next file
2018-12-17T22:29:17.914594098Z 61 PC: 14028 | Open file (Filename = 'PRINT.S')
2018-12-17T22:29:17.92220928Z 87 PC: 134f0 | Get or set file date and time
2018-12-17T22:29:17.923786368Z 67 PC: 134af | Get or set file attributes
2018-12-17T22:29:17.930834908Z 60 PC: 14028 | Create or truncate file
2018-12-17T22:29:17.943902779Z 63 PC: 140fb | Read file or device (Read 8192 bytes on handle 5)
2018-12-17T22:29:17.951537569Z 64 PC: 140fb | Write file or device (Write 92 bytes on handle 6)
2018-12-17T22:29:17.956537395Z 66 PC: 141c4 | Move file pointer
2018-12-17T22:29:17.958042407Z 66 PC: 141d2 | Move file pointer
2018-12-17T22:29:17.959502296Z 66 PC: 141e0 | Move file pointer
2018-12-17T22:29:17.961773579Z 87 PC: 1351d | Get or set file date and time
2018-12-17T22:29:17.96349339Z 62 PC: 14078 | Close file
2018-12-17T22:29:17.965472071Z 62 PC: 14078 | Close file
2018-12-17T22:29:17.974877163Z 65 PC: 141fd | Delete file (Filename = 'PRINT.S')
2018-12-17T22:29:17.987353975Z 86 PC: 14233 | Rename file
2018-12-17T22:29:18.000351907Z 61 PC: 14028 | Open file (Filename = 'Animus.id')
2018-12-17T22:29:18.009319764Z 60 PC: 14028 | Create or truncate file
2018-12-17T22:29:18.02200716Z 63 PC: 140fb | Read file or device (Read 8192 bytes on handle 5)
2018-12-17T22:29:18.025446325Z 64 PC: 140fb | Write file or device (Write 92 bytes on handle 6)
2018-12-17T22:29:18.031168247Z 66 PC: 141c4 | Move file pointer
2018-12-17T22:29:18.033103491Z 66 PC: 141d2 | Move file pointer
2018-12-17T22:29:18.035087873Z 66 PC: 141e0 | Move file pointer
2018-12-17T22:29:18.037882489Z 87 PC: 1351d | Get or set file date and time
2018-12-17T22:29:18.040347989Z 62 PC: 14078 | Close file
2018-12-17T22:29:18.042836405Z 62 PC: 14078 | Close file
2018-12-17T22:29:18.052823383Z 87 PC: 1351d | Get or set file date and time
2018-12-17T22:29:18.054725074Z 67 PC: 134d6 | Get or set file attributes
2018-12-17T22:29:18.071872423Z 65 PC: 141fd | Delete file (Filename = 'Animus.id')
2018-12-17T22:29:18.101397134Z 64 PC: 13c42 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:29:18.103678442Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:29:18.105055728Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:29:18.107974952Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:29:18.109473212Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:29:18.110836134Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:29:18.1129954Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:29:18.114391069Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:29:18.115840095Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:29:18.118045349Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:29:18.119677406Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:29:18.121944813Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:29:18.1242536Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:29:18.126014198Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:29:18.127925102Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:29:18.130445775Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:29:18.132261253Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:29:18.134061641Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:29:18.136529304Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:29:18.137937047Z 37 PC: 138b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:29:18.139279257Z 76 PC: 138f5 | Terminate with return code (Return code = '0')