Sample viewer

vx.netlux.org/Virus.DOS.PS-MPC.Powermen.717

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:54:54.198448148Z 26 PC: 12a98 | Set disk transfer address
2018-12-17T22:54:54.199603601Z 71 PC: 12aa2 | Get current directory
2018-12-17T22:54:54.203723606Z 53 PC: 12aac | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:54:54.206178336Z 37 PC: 12abc | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:54:54.20775409Z 78 PC: 12b8f | Find first file
2018-12-17T22:54:54.214952918Z 78 PC: 12b8f | Find first file
2018-12-17T22:54:54.221425391Z 67 PC: 12cf2 | Get or set file attributes
2018-12-17T22:54:54.239113766Z 61 PC: 12b9b | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:54:54.246936818Z 63 PC: 12ba7 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:54:54.253916365Z 66 PC: 12baf | Move file pointer
2018-12-17T22:54:54.255494305Z 79 PC: 12b8f | Find next file
2018-12-17T22:54:54.258762612Z 67 PC: 12cf2 | Get or set file attributes
2018-12-17T22:54:54.269864408Z 61 PC: 12b9b | Open file (Filename = 'PRINT.COM')
2018-12-17T22:54:54.277873766Z 63 PC: 12ba7 | Read file or device (Read 26 bytes on handle 6)
2018-12-17T22:54:54.285140149Z 66 PC: 12baf | Move file pointer
2018-12-17T22:54:54.286821579Z 79 PC: 12b8f | Find next file
2018-12-17T22:54:54.289626322Z 67 PC: 12cf2 | Get or set file attributes
2018-12-17T22:54:54.300518925Z 61 PC: 12b9b | Open file (Filename = 'HELLO.COM')
2018-12-17T22:54:54.30839705Z 63 PC: 12ba7 | Read file or device (Read 26 bytes on handle 7)
2018-12-17T22:54:54.315521228Z 66 PC: 12baf | Move file pointer
2018-12-17T22:54:54.317144019Z 79 PC: 12b8f | Find next file
2018-12-17T22:54:54.321232921Z 67 PC: 12cf2 | Get or set file attributes
2018-12-17T22:54:54.332097838Z 61 PC: 12b9b | Open file (Filename = 'PHANG.COM')
2018-12-17T22:54:54.340255824Z 63 PC: 12ba7 | Read file or device (Read 26 bytes on handle 8)
2018-12-17T22:54:54.348511228Z 66 PC: 12baf | Move file pointer
2018-12-17T22:54:54.350459675Z 79 PC: 12b8f | Find next file
2018-12-17T22:54:54.353815505Z 67 PC: 12cf2 | Get or set file attributes
2018-12-17T22:54:54.366018479Z 61 PC: 12b9b | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:54:54.374323833Z 63 PC: 12ba7 | Read file or device (Read 26 bytes on handle 9)
2018-12-17T22:54:54.381677212Z 66 PC: 12baf | Move file pointer
2018-12-17T22:54:54.389803794Z 79 PC: 12b8f | Find next file
2018-12-17T22:54:54.393361236Z 67 PC: 12cf2 | Get or set file attributes
2018-12-17T22:54:54.404542951Z 61 PC: 12b9b | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:54:54.413087696Z 63 PC: 12ba7 | Read file or device (Read 26 bytes on handle 10)
2018-12-17T22:54:54.420965625Z 66 PC: 12baf | Move file pointer
2018-12-17T22:54:54.423350869Z 79 PC: 12b8f | Find next file
2018-12-17T22:54:54.426421016Z 67 PC: 12cf2 | Get or set file attributes
2018-12-17T22:54:54.437322706Z 61 PC: 12b9b | Open file (Filename = 'PAH.COM')
2018-12-17T22:54:54.444881032Z 63 PC: 12ba7 | Read file or device (Read 26 bytes on handle 11)
2018-12-17T22:54:54.4521218Z 66 PC: 12baf | Move file pointer
2018-12-17T22:54:54.454935274Z 79 PC: 12b8f | Find next file
2018-12-17T22:54:54.457757156Z 67 PC: 12cf2 | Get or set file attributes
2018-12-17T22:54:54.471370076Z 61 PC: 12b9b | Open file (Filename = 'TEST.COM')
2018-12-17T22:54:54.480561159Z 63 PC: 12ba7 | Read file or device (Read 26 bytes on handle 12)
2018-12-17T22:54:54.483348736Z 66 PC: 12baf | Move file pointer
2018-12-17T22:54:54.48483382Z 79 PC: 12b8f | Find next file
2018-12-17T22:54:54.487994855Z 59 PC: 12ad4 | Change current directory
2018-12-17T22:54:54.492417824Z 44 PC: 12ada | Get time 0x12ada: mov al, cl
0x12adc: cwde
0x12add: cmp ax, 0x1e
0x12ae0: je 0x12ae4
0x12ae2: jmp 0x12af0
0x12ae4: mov cx, 1
0x12ae7: jcxz 0x12af0
0x12ae9: mov ax, 0xe07
0x12aec: int 0x10
0x12aee: loop 0x12aec
0x12af0: mov ah, 0x2a
0x12af2: int 0x21
0x12af4: cmp dh, 0xc
0x12af7: jne 0x12afe
0x12af9: cmp dl, 0x14
0x12afc: jae 0x12b4c
0x12afe: mov ax, 0x2524
0x12b01: lds dx, ptr [bp + 0x3fe]
0x12b05: int 0x21
0x12b07: push cs
2018-12-17T22:54:54.494663315Z 42 PC: 12af4 | Get date 0x12af4: cmp dh, 0xc
0x12af7: jne 0x12afe
0x12af9: cmp dl, 0x14
0x12afc: jae 0x12b4c
0x12afe: mov ax, 0x2524
0x12b01: lds dx, ptr [bp + 0x3fe]
0x12b05: int 0x21
0x12b07: push cs
0x12b08: pop ds
0x12b09: mov ah, 0x3b
0x12b0b: lea dx, word ptr [bp + 0x402]
0x12b0f: int 0x21
0x12b11: mov ah, 0x1a
0x12b13: mov dx, 0x80
0x12b16: cmp sp, 0x5049
0x12b1a: je 0x12b1f
0x12b1c: int 0x21
0x12b1e: ret
0x12b1f: pop es
0x12b20: pop ds
2018-12-17T22:54:54.497588323Z 37 PC: 12b07 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:54:54.498789585Z 59 PC: 12b11 | Change current directory
2018-12-17T22:54:54.503080113Z 26 PC: 12b1e | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":11717,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:31:10.373629803Z 26 PC: 12a98 | Set disk transfer address
2018-12-25T12:31:10.37557239Z 71 PC: 12aa2 | Get current directory
2018-12-25T12:31:10.378757867Z 53 PC: 12aac | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:31:10.379908199Z 37 PC: 12abc | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:31:10.382108752Z 78 PC: 12b8f | Find first file
2018-12-25T12:31:10.390987168Z 78 PC: 12b8f | Find first file (See above)
2018-12-25T12:31:10.396702501Z 67 PC: 12cf2 | Get or set file attributes
2018-12-25T12:31:11.692905055Z 61 PC: 12b9b | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:31:11.710853168Z 63 PC: 12ba7 | Read file or device (Read 26 bytes on handle 5)
2018-12-25T12:31:11.716992338Z 66 PC: 12baf | Move file pointer
2018-12-25T12:31:11.724544312Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:11.727132394Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:11.84910972Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:11.855982233Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:11.914228048Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:11.915910314Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:11.918851489Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:11.99237155Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:11.999259902Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:12.005768908Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:12.009555636Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:12.012375962Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:12.215478911Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:12.222844021Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:12.22942455Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:12.230705496Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:12.233681749Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:12.359387978Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:12.367060402Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:12.374813839Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:12.376737151Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:12.379743388Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:12.558503603Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:12.564960593Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:12.571115968Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:12.572498528Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:12.575561884Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:12.595479498Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:12.602069273Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:12.609692835Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:12.611365218Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:12.614639676Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:12.642867591Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:12.64951544Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:12.655975898Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:12.65834374Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:12.660549763Z 59 PC: 12ad4 | Change current directory
2018-12-25T12:31:12.664464598Z 44 PC: 12ada | Get time 0x12ada: mov al, cl
0x12adc: cwde
0x12add: cmp ax, 0x1e
0x12ae0: je 0x12ae4
0x12ae2: jmp 0x12af0
0x12ae4: mov cx, 1
0x12ae7: jcxz 0x12af0
0x12ae9: mov ax, 0xe07
0x12aec: int 0x10
0x12aee: loop 0x12aec
0x12af0: mov ah, 0x2a
0x12af2: int 0x21
0x12af4: cmp dh, 0xc
0x12af7: jne 0x12afe
0x12af9: cmp dl, 0x14
0x12afc: jae 0x12b4c
0x12afe: mov ax, 0x2524
0x12b01: lds dx, ptr [bp + 0x3fe]
0x12b05: int 0x21
0x12b07: push cs
2018-12-25T12:31:12.667338774Z 42 PC: 12af4 | Get date 0x12af4: cmp dh, 0xc
0x12af7: jne 0x12afe
0x12af9: cmp dl, 0x14
0x12afc: jae 0x12b4c
0x12afe: mov ax, 0x2524
0x12b01: lds dx, ptr [bp + 0x3fe]
0x12b05: int 0x21
0x12b07: push cs
0x12b08: pop ds
0x12b09: mov ah, 0x3b
0x12b0b: lea dx, word ptr [bp + 0x402]
0x12b0f: int 0x21
0x12b11: mov ah, 0x1a
0x12b13: mov dx, 0x80
0x12b16: cmp sp, 0x5049
0x12b1a: je 0x12b1f
0x12b1c: int 0x21
0x12b1e: ret
0x12b1f: pop es
0x12b20: pop ds
2018-12-25T12:31:12.669601816Z 37 PC: 12b07 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:31:12.670968753Z 59 PC: 12b11 | Change current directory
2018-12-25T12:31:12.675441049Z 26 PC: 12b1e | Set disk transfer address

{"DateBased":true,"Day":1,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":11717,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:31:10.392209379Z 26 PC: 12a98 | Set disk transfer address
2018-12-25T12:31:10.394097949Z 71 PC: 12aa2 | Get current directory
2018-12-25T12:31:10.397865965Z 53 PC: 12aac | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:31:10.399001076Z 37 PC: 12abc | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:31:10.401440858Z 78 PC: 12b8f | Find first file
2018-12-25T12:31:10.407244758Z 78 PC: 12b8f | Find first file (See above)
2018-12-25T12:31:10.412943743Z 67 PC: 12cf2 | Get or set file attributes
2018-12-25T12:31:11.693067345Z 61 PC: 12b9b | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:31:11.70906754Z 63 PC: 12ba7 | Read file or device (Read 26 bytes on handle 5)
2018-12-25T12:31:11.715247256Z 66 PC: 12baf | Move file pointer
2018-12-25T12:31:11.718555364Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:11.721393166Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:11.794702967Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:11.801499085Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:11.91566673Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:11.918035405Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:11.921101822Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:12.109601892Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:12.116245122Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:12.122882481Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:12.125135727Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:12.128661754Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:12.305199733Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:12.312360456Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:12.319143584Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:12.320551069Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:12.323400353Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:12.491755091Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:12.498655501Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:12.505203771Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:12.507051913Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:12.510559987Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:12.562213383Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:12.569184611Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:12.573955807Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:12.575817074Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:12.579018291Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:12.600894543Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:12.607516794Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:12.615671533Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:12.617204027Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:12.619861324Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:12.640399766Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:12.647319532Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:12.653637346Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:12.655817539Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:12.658404234Z 59 PC: 12ad4 | Change current directory
2018-12-25T12:31:12.662586503Z 44 PC: 12ada | Get time 0x12ada: mov al, cl
0x12adc: cwde
0x12add: cmp ax, 0x1e
0x12ae0: je 0x12ae4
0x12ae2: jmp 0x12af0
0x12ae4: mov cx, 1
0x12ae7: jcxz 0x12af0
0x12ae9: mov ax, 0xe07
0x12aec: int 0x10
0x12aee: loop 0x12aec
0x12af0: mov ah, 0x2a
0x12af2: int 0x21
0x12af4: cmp dh, 0xc
0x12af7: jne 0x12afe
0x12af9: cmp dl, 0x14
0x12afc: jae 0x12b4c
0x12afe: mov ax, 0x2524
0x12b01: lds dx, ptr [bp + 0x3fe]
0x12b05: int 0x21
0x12b07: push cs
2018-12-25T12:31:12.665315122Z 42 PC: 12af4 | Get date 0x12af4: cmp dh, 0xc
0x12af7: jne 0x12afe
0x12af9: cmp dl, 0x14
0x12afc: jae 0x12b4c
0x12afe: mov ax, 0x2524
0x12b01: lds dx, ptr [bp + 0x3fe]
0x12b05: int 0x21
0x12b07: push cs
0x12b08: pop ds
0x12b09: mov ah, 0x3b
0x12b0b: lea dx, word ptr [bp + 0x402]
0x12b0f: int 0x21
0x12b11: mov ah, 0x1a
0x12b13: mov dx, 0x80
0x12b16: cmp sp, 0x5049
0x12b1a: je 0x12b1f
0x12b1c: int 0x21
0x12b1e: ret
0x12b1f: pop es
0x12b20: pop ds
2018-12-25T12:31:12.667645798Z 37 PC: 12b07 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:31:12.669078412Z 59 PC: 12b11 | Change current directory
2018-12-25T12:31:12.673589794Z 26 PC: 12b1e | Set disk transfer address

{"DateBased":true,"Day":21,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":11717,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:31:14.219647027Z 26 PC: 12a98 | Set disk transfer address
2018-12-25T12:31:14.221203899Z 71 PC: 12aa2 | Get current directory
2018-12-25T12:31:14.224013692Z 53 PC: 12aac | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:31:14.225149296Z 37 PC: 12abc | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:31:14.227984625Z 78 PC: 12b8f | Find first file
2018-12-25T12:31:14.233917271Z 78 PC: 12b8f | Find first file (See above)
2018-12-25T12:31:14.239789716Z 67 PC: 12cf2 | Get or set file attributes
2018-12-25T12:31:14.256149262Z 61 PC: 12b9b | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:31:14.268712475Z 63 PC: 12ba7 | Read file or device (Read 26 bytes on handle 5)
2018-12-25T12:31:14.275015766Z 66 PC: 12baf | Move file pointer
2018-12-25T12:31:14.276572409Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:14.280416076Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:14.294068433Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:14.298300444Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:14.303302754Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:14.304532338Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:14.307493101Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:14.318092598Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:14.325609655Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:14.332400645Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:14.334280972Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:14.337543608Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:14.348026584Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:14.35961896Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:14.367323129Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:14.369078569Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:14.371937282Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:14.383902809Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:14.390709197Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:14.397244551Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:14.39978496Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:14.402412455Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:14.411857827Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:14.41935633Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:14.425678949Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:14.427293023Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:14.430107202Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:14.440666586Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:14.44746591Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:14.453909533Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:14.456605285Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:14.459451441Z 67 PC: 12cf2 | Get or set file attributes (See above)
2018-12-25T12:31:14.469422247Z 61 PC: 12b9b | Open file (See above)
2018-12-25T12:31:14.477021953Z 63 PC: 12ba7 | Read file or device (See above)
2018-12-25T12:31:14.484369411Z 66 PC: 12baf | Move file pointer (See above)
2018-12-25T12:31:14.486120247Z 79 PC: 12b8f | Find next file (See above)
2018-12-25T12:31:14.489556429Z 59 PC: 12ad4 | Change current directory
2018-12-25T12:31:14.49358103Z 44 PC: 12ada | Get time 0x12ada: mov al, cl
0x12adc: cwde
0x12add: cmp ax, 0x1e
0x12ae0: je 0x12ae4
0x12ae2: jmp 0x12af0
0x12ae4: mov cx, 1
0x12ae7: jcxz 0x12af0
0x12ae9: mov ax, 0xe07
0x12aec: int 0x10
0x12aee: loop 0x12aec
0x12af0: mov ah, 0x2a
0x12af2: int 0x21
0x12af4: cmp dh, 0xc
0x12af7: jne 0x12afe
0x12af9: cmp dl, 0x14
0x12afc: jae 0x12b4c
0x12afe: mov ax, 0x2524
0x12b01: lds dx, ptr [bp + 0x3fe]
0x12b05: int 0x21
0x12b07: push cs
2018-12-25T12:31:14.495649589Z 42 PC: 12af4 | Get date 0x12af4: cmp dh, 0xc
0x12af7: jne 0x12afe
0x12af9: cmp dl, 0x14
0x12afc: jae 0x12b4c
0x12afe: mov ax, 0x2524
0x12b01: lds dx, ptr [bp + 0x3fe]
0x12b05: int 0x21
0x12b07: push cs
0x12b08: pop ds
0x12b09: mov ah, 0x3b
0x12b0b: lea dx, word ptr [bp + 0x402]
0x12b0f: int 0x21
0x12b11: mov ah, 0x1a
0x12b13: mov dx, 0x80
0x12b16: cmp sp, 0x5049
0x12b1a: je 0x12b1f
0x12b1c: int 0x21
0x12b1e: ret
0x12b1f: pop es
0x12b20: pop ds
2018-12-25T12:31:14.49944076Z 37 PC: 12b07 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:31:14.500559576Z 59 PC: 12b11 | Change current directory
2018-12-25T12:31:14.50431503Z 26 PC: 12b1e | Set disk transfer address