Sample viewer

vx.netlux.org/Virus.DOS.Baloo.897

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:55:41.322112254Z 26 PC: 12a63 | Set disk transfer address
2018-12-17T22:55:41.323282138Z 78 PC: 12a6d | Find first file
2018-12-17T22:55:41.330990142Z 61 PC: 12aa9 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:55:41.338767258Z 63 PC: 12aa9 | Read file or device (Read 8 bytes on handle 5)
2018-12-17T22:55:41.346035188Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:41.34859317Z 61 PC: 12aa9 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:55:41.356997807Z 63 PC: 12aa9 | Read file or device (Read 65000 bytes on handle 5)
2018-12-17T22:55:41.360464828Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:41.363201446Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:55:41.380498951Z 60 PC: 12aa9 | Create or truncate file
2018-12-17T22:55:41.532769663Z 64 PC: 12d90 | Write file or device (Write 897 bytes on handle 5)
2018-12-17T22:55:41.685919415Z 44 PC: 12d98 | Get time 0x12d98: add byte ptr cs:[0x435], dh
0x12d9d: pop bx
0x12d9e: ret
0x12d9f: mov cx, 0x1ff
0x12da2: call 0x22d4d
0x12da5: inc byte ptr cs:[0x435]
0x12daa: loop 0x12da2
0x12dac: dec byte ptr cs:[0x435]
0x12db1: ret
0x12db2: mov cx, 0x1ff
0x12db5: call 0x22d4d
0x12db8: dec byte ptr cs:[0x435]
0x12dbd: loop 0x12db5
0x12dbf: ret
0x12dc0: add ch, cl
0x12dc2: and byte ptr [bx + si], al
0x12dc4: add byte ptr [bx + si], al
0x12dc6: add byte ptr [bx + si], al
0x12dc8: add byte ptr [bx + si], al
0x12dca: add byte ptr [bx + si], al
2018-12-17T22:55:41.688698416Z 64 PC: 12aa9 | Write file or device (Write 407 bytes on handle 5)
2018-12-17T22:55:41.698138297Z 87 PC: 12aa9 | Get or set file date and time
2018-12-17T22:55:41.700794755Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:41.709452157Z 79 PC: 12a6d | Find next file
2018-12-17T22:55:41.713017532Z 61 PC: 12aa9 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:55:41.721091913Z 63 PC: 12aa9 | Read file or device (Read 8 bytes on handle 5)
2018-12-17T22:55:41.728118656Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:41.730148853Z 61 PC: 12aa9 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:55:41.737354635Z 63 PC: 12aa9 | Read file or device (Read 65000 bytes on handle 5)
2018-12-17T22:55:41.741277381Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:41.743709308Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:55:41.759251313Z 60 PC: 12aa9 | Create or truncate file
2018-12-17T22:55:41.915465336Z 64 PC: 12d90 | Write file or device (Write 897 bytes on handle 5)
2018-12-17T22:55:42.064987974Z 44 PC: 12d98 | Get time 0x12d98: add byte ptr cs:[0x435], dh
0x12d9d: pop bx
0x12d9e: ret
0x12d9f: mov cx, 0x1ff
0x12da2: call 0x22d4d
0x12da5: inc byte ptr cs:[0x435]
0x12daa: loop 0x12da2
0x12dac: dec byte ptr cs:[0x435]
0x12db1: ret
0x12db2: mov cx, 0x1ff
0x12db5: call 0x22d4d
0x12db8: dec byte ptr cs:[0x435]
0x12dbd: loop 0x12db5
0x12dbf: ret
0x12dc0: add ch, cl
0x12dc2: and byte ptr [bx + si], al
0x12dc4: add byte ptr [bx + si], al
0x12dc6: add byte ptr [bx + si], al
0x12dc8: add byte ptr [bx + si], al
0x12dca: add byte ptr [bx + si], al
2018-12-17T22:55:42.067671712Z 64 PC: 12aa9 | Write file or device (Write 27 bytes on handle 5)
2018-12-17T22:55:42.07205034Z 87 PC: 12aa9 | Get or set file date and time
2018-12-17T22:55:42.074192205Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:42.08341711Z 79 PC: 12a6d | Find next file
2018-12-17T22:55:42.08737632Z 61 PC: 12aa9 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:55:42.09475175Z 63 PC: 12aa9 | Read file or device (Read 8 bytes on handle 5)
2018-12-17T22:55:42.102418511Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:42.104668881Z 61 PC: 12aa9 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:55:42.112654909Z 63 PC: 12aa9 | Read file or device (Read 65000 bytes on handle 5)
2018-12-17T22:55:42.115668882Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:42.117422961Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:55:42.124419566Z 60 PC: 12aa9 | Create or truncate file
2018-12-17T22:55:42.285694728Z 64 PC: 12d90 | Write file or device (Write 897 bytes on handle 5)
2018-12-17T22:55:42.435119837Z 44 PC: 12d98 | Get time 0x12d98: add byte ptr cs:[0x435], dh
0x12d9d: pop bx
0x12d9e: ret
0x12d9f: mov cx, 0x1ff
0x12da2: call 0x22d4d
0x12da5: inc byte ptr cs:[0x435]
0x12daa: loop 0x12da2
0x12dac: dec byte ptr cs:[0x435]
0x12db1: ret
0x12db2: mov cx, 0x1ff
0x12db5: call 0x22d4d
0x12db8: dec byte ptr cs:[0x435]
0x12dbd: loop 0x12db5
0x12dbf: ret
0x12dc0: add ch, cl
0x12dc2: and byte ptr [bx + si], al
0x12dc4: add byte ptr [bx + si], al
0x12dc6: add byte ptr [bx + si], al
0x12dc8: add byte ptr [bx + si], al
0x12dca: add byte ptr [bx + si], al
2018-12-17T22:55:42.439346298Z 64 PC: 12aa9 | Write file or device (Write 92 bytes on handle 5)
2018-12-17T22:55:42.44279432Z 87 PC: 12aa9 | Get or set file date and time
2018-12-17T22:55:42.444401143Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:42.455045758Z 79 PC: 12a6d | Find next file
2018-12-17T22:55:42.457964383Z 61 PC: 12aa9 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:55:42.465359289Z 63 PC: 12aa9 | Read file or device (Read 8 bytes on handle 5)
2018-12-17T22:55:42.473534484Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:42.475581694Z 61 PC: 12aa9 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:55:42.483096625Z 63 PC: 12aa9 | Read file or device (Read 65000 bytes on handle 5)
2018-12-17T22:55:42.486199488Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:42.489222683Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:55:42.501026129Z 60 PC: 12aa9 | Create or truncate file
2018-12-17T22:55:42.641052945Z 64 PC: 12d90 | Write file or device (Write 897 bytes on handle 5)
2018-12-17T22:55:42.792165779Z 44 PC: 12d98 | Get time 0x12d98: add byte ptr cs:[0x435], dh
0x12d9d: pop bx
0x12d9e: ret
0x12d9f: mov cx, 0x1ff
0x12da2: call 0x22d4d
0x12da5: inc byte ptr cs:[0x435]
0x12daa: loop 0x12da2
0x12dac: dec byte ptr cs:[0x435]
0x12db1: ret
0x12db2: mov cx, 0x1ff
0x12db5: call 0x22d4d
0x12db8: dec byte ptr cs:[0x435]
0x12dbd: loop 0x12db5
0x12dbf: ret
0x12dc0: add ch, cl
0x12dc2: and byte ptr [bx + si], al
0x12dc4: add byte ptr [bx + si], al
0x12dc6: add byte ptr [bx + si], al
0x12dc8: add byte ptr [bx + si], al
0x12dca: add byte ptr [bx + si], al
2018-12-17T22:55:42.793988847Z 64 PC: 12aa9 | Write file or device (Write 29 bytes on handle 5)
2018-12-17T22:55:42.797120689Z 87 PC: 12aa9 | Get or set file date and time
2018-12-17T22:55:42.799065303Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:42.808017412Z 79 PC: 12a6d | Find next file
2018-12-17T22:55:42.811191028Z 61 PC: 12aa9 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:55:42.819443308Z 63 PC: 12aa9 | Read file or device (Read 8 bytes on handle 5)
2018-12-17T22:55:42.826686494Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:42.828095176Z 61 PC: 12aa9 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:55:42.836448944Z 63 PC: 12aa9 | Read file or device (Read 65000 bytes on handle 5)
2018-12-17T22:55:42.839457913Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:42.84093069Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:55:42.848411619Z 60 PC: 12aa9 | Create or truncate file
2018-12-17T22:55:43.003883026Z 64 PC: 12d90 | Write file or device (Write 897 bytes on handle 5)
2018-12-17T22:55:43.159233299Z 44 PC: 12d98 | Get time 0x12d98: add byte ptr cs:[0x435], dh
0x12d9d: pop bx
0x12d9e: ret
0x12d9f: mov cx, 0x1ff
0x12da2: call 0x22d4d
0x12da5: inc byte ptr cs:[0x435]
0x12daa: loop 0x12da2
0x12dac: dec byte ptr cs:[0x435]
0x12db1: ret
0x12db2: mov cx, 0x1ff
0x12db5: call 0x22d4d
0x12db8: dec byte ptr cs:[0x435]
0x12dbd: loop 0x12db5
0x12dbf: ret
0x12dc0: add ch, cl
0x12dc2: and byte ptr [bx + si], al
0x12dc4: add byte ptr [bx + si], al
0x12dc6: add byte ptr [bx + si], al
0x12dc8: add byte ptr [bx + si], al
0x12dca: add byte ptr [bx + si], al
2018-12-17T22:55:43.162167098Z 64 PC: 12aa9 | Write file or device (Write 29 bytes on handle 5)
2018-12-17T22:55:43.166335282Z 87 PC: 12aa9 | Get or set file date and time
2018-12-17T22:55:43.168136023Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:43.176584569Z 79 PC: 12a6d | Find next file
2018-12-17T22:55:43.18065031Z 61 PC: 12aa9 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:55:43.188945418Z 63 PC: 12aa9 | Read file or device (Read 8 bytes on handle 5)
2018-12-17T22:55:43.196203711Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:43.199308413Z 61 PC: 12aa9 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:55:43.207313796Z 63 PC: 12aa9 | Read file or device (Read 65000 bytes on handle 5)
2018-12-17T22:55:43.210277407Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:43.213533334Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:55:43.225060581Z 60 PC: 12aa9 | Create or truncate file
2018-12-17T22:55:43.382431439Z 64 PC: 12d90 | Write file or device (Write 897 bytes on handle 5)
2018-12-17T22:55:43.53806987Z 44 PC: 12d98 | Get time 0x12d98: add byte ptr cs:[0x435], dh
0x12d9d: pop bx
0x12d9e: ret
0x12d9f: mov cx, 0x1ff
0x12da2: call 0x22d4d
0x12da5: inc byte ptr cs:[0x435]
0x12daa: loop 0x12da2
0x12dac: dec byte ptr cs:[0x435]
0x12db1: ret
0x12db2: mov cx, 0x1ff
0x12db5: call 0x22d4d
0x12db8: dec byte ptr cs:[0x435]
0x12dbd: loop 0x12db5
0x12dbf: ret
0x12dc0: add ch, cl
0x12dc2: and byte ptr [bx + si], al
0x12dc4: add byte ptr [bx + si], al
0x12dc6: add byte ptr [bx + si], al
0x12dc8: add byte ptr [bx + si], al
0x12dca: add byte ptr [bx + si], al
2018-12-17T22:55:43.540714524Z 64 PC: 12aa9 | Write file or device (Write 501 bytes on handle 5)
2018-12-17T22:55:43.559117361Z 87 PC: 12aa9 | Get or set file date and time
2018-12-17T22:55:43.5613633Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:43.570507288Z 79 PC: 12a6d | Find next file
2018-12-17T22:55:43.573664206Z 61 PC: 12aa9 | Open file (Filename = 'PAH.COM')
2018-12-17T22:55:43.581320667Z 63 PC: 12aa9 | Read file or device (Read 8 bytes on handle 5)
2018-12-17T22:55:43.589701077Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:43.591961655Z 61 PC: 12aa9 | Open file (Filename = 'PAH.COM')
2018-12-17T22:55:43.599626592Z 63 PC: 12aa9 | Read file or device (Read 65000 bytes on handle 5)
2018-12-17T22:55:43.604020418Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:43.607078824Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:55:43.618024473Z 60 PC: 12aa9 | Create or truncate file
2018-12-17T22:55:43.757986118Z 64 PC: 12d90 | Write file or device (Write 897 bytes on handle 5)
2018-12-17T22:55:43.829634765Z 44 PC: 12d98 | Get time 0x12d98: add byte ptr cs:[0x435], dh
0x12d9d: pop bx
0x12d9e: ret
0x12d9f: mov cx, 0x1ff
0x12da2: call 0x22d4d
0x12da5: inc byte ptr cs:[0x435]
0x12daa: loop 0x12da2
0x12dac: dec byte ptr cs:[0x435]
0x12db1: ret
0x12db2: mov cx, 0x1ff
0x12db5: call 0x22d4d
0x12db8: dec byte ptr cs:[0x435]
0x12dbd: loop 0x12db5
0x12dbf: ret
0x12dc0: add ch, cl
0x12dc2: and byte ptr [bx + si], al
0x12dc4: add byte ptr [bx + si], al
0x12dc6: add byte ptr [bx + si], al
0x12dc8: add byte ptr [bx + si], al
0x12dca: add byte ptr [bx + si], al
2018-12-17T22:55:43.831371941Z 64 PC: 12aa9 | Write file or device (Write 29 bytes on handle 5)
2018-12-17T22:55:43.834280447Z 87 PC: 12aa9 | Get or set file date and time
2018-12-17T22:55:43.835981756Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:43.841513262Z 79 PC: 12a6d | Find next file
2018-12-17T22:55:43.844975494Z 61 PC: 12aa9 | Open file (Filename = 'TEST.COM')
2018-12-17T22:55:43.853333763Z 63 PC: 12aa9 | Read file or device (Read 8 bytes on handle 5)
2018-12-17T22:55:43.85632478Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:43.858316743Z 79 PC: 12a6d | Find next file
2018-12-17T22:55:43.861833982Z 78 PC: 12af7 | Find first file
2018-12-17T22:55:43.871857095Z 61 PC: 12aa9 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-17T22:55:43.880362302Z 63 PC: 12aa9 | Read file or device (Read 8 bytes on handle 5)
2018-12-17T22:55:43.887219455Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:43.88942996Z 61 PC: 12aa9 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-17T22:55:43.897029671Z 63 PC: 12aa9 | Read file or device (Read 65000 bytes on handle 5)
2018-12-17T22:55:43.900703093Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:43.902935558Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:55:44.251247545Z 60 PC: 12aa9 | Create or truncate file
2018-12-17T22:55:44.408038763Z 64 PC: 12d90 | Write file or device (Write 897 bytes on handle 5)
2018-12-17T22:55:44.558337002Z 44 PC: 12d98 | Get time 0x12d98: add byte ptr cs:[0x435], dh
0x12d9d: pop bx
0x12d9e: ret
0x12d9f: mov cx, 0x1ff
0x12da2: call 0x22d4d
0x12da5: inc byte ptr cs:[0x435]
0x12daa: loop 0x12da2
0x12dac: dec byte ptr cs:[0x435]
0x12db1: ret
0x12db2: mov cx, 0x1ff
0x12db5: call 0x22d4d
0x12db8: dec byte ptr cs:[0x435]
0x12dbd: loop 0x12db5
0x12dbf: ret
0x12dc0: add ch, cl
0x12dc2: and byte ptr [bx + si], al
0x12dc4: add byte ptr [bx + si], al
0x12dc6: add byte ptr [bx + si], al
0x12dc8: add byte ptr [bx + si], al
0x12dca: add byte ptr [bx + si], al
2018-12-17T22:55:44.561294451Z 64 PC: 12aa9 | Write file or device (Write 413 bytes on handle 5)
2018-12-17T22:55:44.569886845Z 87 PC: 12aa9 | Get or set file date and time
2018-12-17T22:55:44.571948723Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:44.578672951Z 79 PC: 12a98 | Find next file
2018-12-17T22:55:44.58212848Z 61 PC: 12aa9 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:55:44.589550405Z 63 PC: 12aa9 | Read file or device (Read 8 bytes on handle 5)
2018-12-17T22:55:44.595050274Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:44.597144773Z 61 PC: 12aa9 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:55:44.605469208Z 63 PC: 12aa9 | Read file or device (Read 65000 bytes on handle 5)
2018-12-17T22:55:44.615042084Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:44.617075971Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:55:44.627666446Z 60 PC: 12aa9 | Create or truncate file
2018-12-17T22:55:44.732446216Z 64 PC: 12d90 | Write file or device (Write 897 bytes on handle 5)
2018-12-17T22:55:44.879626544Z 44 PC: 12d98 | Get time 0x12d98: add byte ptr cs:[0x435], dh
0x12d9d: pop bx
0x12d9e: ret
0x12d9f: mov cx, 0x1ff
0x12da2: call 0x22d4d
0x12da5: inc byte ptr cs:[0x435]
0x12daa: loop 0x12da2
0x12dac: dec byte ptr cs:[0x435]
0x12db1: ret
0x12db2: mov cx, 0x1ff
0x12db5: call 0x22d4d
0x12db8: dec byte ptr cs:[0x435]
0x12dbd: loop 0x12db5
0x12dbf: ret
0x12dc0: add ch, cl
0x12dc2: and byte ptr [bx + si], al
0x12dc4: add byte ptr [bx + si], al
0x12dc6: add byte ptr [bx + si], al
0x12dc8: add byte ptr [bx + si], al
0x12dca: add byte ptr [bx + si], al
2018-12-17T22:55:44.883420186Z 64 PC: 12aa9 | Write file or device (Write 22974 bytes on handle 5)
2018-12-17T22:55:44.895916436Z 87 PC: 12aa9 | Get or set file date and time
2018-12-17T22:55:44.897871931Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:44.905915926Z 79 PC: 12a98 | Find next file
2018-12-17T22:55:44.91062538Z 61 PC: 12aa9 | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:55:44.918554931Z 63 PC: 12aa9 | Read file or device (Read 8 bytes on handle 5)
2018-12-17T22:55:44.924794949Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:44.927539685Z 61 PC: 12aa9 | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:55:44.932416924Z 63 PC: 12aa9 | Read file or device (Read 65000 bytes on handle 5)
2018-12-17T22:55:44.941866956Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:44.943895904Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:55:44.954501448Z 60 PC: 12aa9 | Create or truncate file
2018-12-17T22:55:45.088868817Z 64 PC: 12d90 | Write file or device (Write 897 bytes on handle 5)
2018-12-17T22:55:45.199353517Z 44 PC: 12d98 | Get time 0x12d98: add byte ptr cs:[0x435], dh
0x12d9d: pop bx
0x12d9e: ret
0x12d9f: mov cx, 0x1ff
0x12da2: call 0x22d4d
0x12da5: inc byte ptr cs:[0x435]
0x12daa: loop 0x12da2
0x12dac: dec byte ptr cs:[0x435]
0x12db1: ret
0x12db2: mov cx, 0x1ff
0x12db5: call 0x22d4d
0x12db8: dec byte ptr cs:[0x435]
0x12dbd: loop 0x12db5
0x12dbf: ret
0x12dc0: add ch, cl
0x12dc2: and byte ptr [bx + si], al
0x12dc4: add byte ptr [bx + si], al
0x12dc6: add byte ptr [bx + si], al
0x12dc8: add byte ptr [bx + si], al
0x12dca: add byte ptr [bx + si], al
2018-12-17T22:55:45.202513872Z 64 PC: 12aa9 | Write file or device (Write 15750 bytes on handle 5)
2018-12-17T22:55:45.535804191Z 87 PC: 12aa9 | Get or set file date and time
2018-12-17T22:55:45.539479059Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:45.548045187Z 79 PC: 12a98 | Find next file
2018-12-17T22:55:45.559474261Z 61 PC: 12aa9 | Open file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T22:55:45.588733578Z 63 PC: 12aa9 | Read file or device (Read 8 bytes on handle 5)
2018-12-17T22:55:45.595139972Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:45.597266101Z 61 PC: 12aa9 | Open file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T22:55:45.605637669Z 63 PC: 12aa9 | Read file or device (Read 65000 bytes on handle 5)
2018-12-17T22:55:45.614520617Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:45.617174173Z 67 PC: 12aa9 | Get or set file attributes
2018-12-17T22:55:45.629502741Z 60 PC: 12aa9 | Create or truncate file
2018-12-17T22:55:45.784627993Z 64 PC: 12d90 | Write file or device (Write 897 bytes on handle 5)
2018-12-17T22:55:45.938096477Z 44 PC: 12d98 | Get time 0x12d98: add byte ptr cs:[0x435], dh
0x12d9d: pop bx
0x12d9e: ret
0x12d9f: mov cx, 0x1ff
0x12da2: call 0x22d4d
0x12da5: inc byte ptr cs:[0x435]
0x12daa: loop 0x12da2
0x12dac: dec byte ptr cs:[0x435]
0x12db1: ret
0x12db2: mov cx, 0x1ff
0x12db5: call 0x22d4d
0x12db8: dec byte ptr cs:[0x435]
0x12dbd: loop 0x12db5
0x12dbf: ret
0x12dc0: add ch, cl
0x12dc2: and byte ptr [bx + si], al
0x12dc4: add byte ptr [bx + si], al
0x12dc6: add byte ptr [bx + si], al
0x12dc8: add byte ptr [bx + si], al
0x12dca: add byte ptr [bx + si], al
2018-12-17T22:55:45.942296683Z 64 PC: 12aa9 | Write file or device (Write 9432 bytes on handle 5)
2018-12-17T22:55:45.957675891Z 87 PC: 12aa9 | Get or set file date and time
2018-12-17T22:55:45.960056374Z 62 PC: 12aa9 | Close file
2018-12-17T22:55:45.969581779Z 79 PC: 12a98 | Find next file
2018-12-17T22:55:45.977501826Z 42 PC: 12cba | Get date 0x12cba: cmp al, 5
0x12cbc: je 0x12cbf
0x12cbe: ret
0x12cbf: cmp dl, 0xd
0x12cc2: je 0x12cc5
0x12cc4: ret
0x12cc5: mov di, 0x1e
0x12cc8: mov al, 0xb6
0x12cca: out 0x43, al
0x12ccc: mov dx, 0x12
0x12ccf: mov ax, 0x34dc
0x12cd2: div di
0x12cd4: out 0x42, al
0x12cd6: mov al, ah
0x12cd8: out 0x42, al
0x12cda: in al, 0x61
0x12cdc: mov ah, al
0x12cde: or al, 3
0x12ce0: out 0x61, al
0x12ce2: ret
2018-12-17T22:55:45.982853406Z 26 PC: 22853 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":11970,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:31:41.449816407Z 26 PC: 12a63 | Set disk transfer address
2018-12-25T12:31:41.452071441Z 78 PC: 12a6d | Find first file
2018-12-25T12:31:41.45788401Z 61 PC: 12aa9 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:31:41.464349998Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:41.470858498Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:41.472828694Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:41.479974221Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:41.487155818Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:41.490663693Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:41.518672626Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:41.658734913Z 64 PC: 12d90 | Write file or device (Write 897 bytes on handle 5)
2018-12-25T12:31:41.789474572Z 44 PC: 12d98 | Get time 0x12d98: add byte ptr cs:[0x435], dh
0x12d9d: pop bx
0x12d9e: ret
0x12d9f: mov cx, 0x1ff
0x12da2: call 0x22d4d
0x12da5: inc byte ptr cs:[0x435]
0x12daa: loop 0x12da2
0x12dac: dec byte ptr cs:[0x435]
0x12db1: ret
0x12db2: mov cx, 0x1ff
0x12db5: call 0x22d4d
0x12db8: dec byte ptr cs:[0x435]
0x12dbd: loop 0x12db5
0x12dbf: ret
0x12dc0: add ch, cl
0x12dc2: and byte ptr [bx + si], al
0x12dc4: add byte ptr [bx + si], al
0x12dc6: add byte ptr [bx + si], al
0x12dc8: add byte ptr [bx + si], al
0x12dca: add byte ptr [bx + si], al
2018-12-25T12:31:41.791739691Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:41.800690866Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:41.803566529Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:41.811154827Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:41.813735403Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:41.82084026Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:41.827549197Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:41.829676123Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:41.837754305Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:41.841274132Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:41.843048175Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:41.853683314Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:41.980038913Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:42.058345558Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:42.06236201Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:42.065294814Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:42.067133497Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.076165906Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:42.079155746Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.085900846Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.093905205Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.096333725Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.10285698Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.105624093Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.10796323Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:42.11803207Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:42.19534226Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:42.259610349Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:42.261153393Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:42.263804012Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:42.265883507Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.273592723Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:42.2760218Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.282704051Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.288745781Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.290540043Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.29721818Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.299756629Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.301132402Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:42.310714357Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:42.437110526Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:42.5331931Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:42.535536647Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:42.538045818Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:42.539544676Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.546603092Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:42.549096971Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.555189271Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.562657392Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.564370325Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.570920147Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.57385796Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.575472244Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:42.584820854Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:42.708922592Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:42.831998129Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:42.834196153Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:42.838295075Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:42.840006979Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.847755518Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:42.850914767Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.857172176Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.863296694Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.866024657Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.872511995Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.875139993Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.878771264Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:42.888338582Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:43.01453515Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:43.142960384Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:43.146181786Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:43.157874898Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:43.167139786Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:43.175490369Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:43.178044764Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:43.184715761Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:43.19128507Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:43.192957267Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:43.199481543Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:43.20159582Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:43.203036859Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:43.20951567Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:43.359630359Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:43.583893717Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:43.586990617Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:43.591177658Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:43.593167686Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:43.766754273Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:43.769272018Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:43.775954482Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:43.777836976Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:43.779521029Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:43.781281874Z 78 PC: 12af7 | Find first file
2018-12-25T12:31:43.787307091Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:43.792349767Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:43.796041612Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:43.797328839Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:43.805923732Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:43.809554518Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:43.811663389Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:45.420768062Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:45.743066672Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:45.90078096Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:45.904141621Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:45.929176839Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:45.930683976Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:45.960346212Z 79 PC: 12a98 | Find next file
2018-12-25T12:31:45.962683943Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:45.968754397Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:45.974026008Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:45.975410128Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:45.979817518Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:45.986267357Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:45.987600125Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:46.004412523Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:46.120456697Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:46.214766266Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:46.216458911Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:46.224043574Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:46.225309776Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.230384123Z 79 PC: 12a98 | Find next file (See above)
2018-12-25T12:31:46.234035621Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:46.238726623Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:46.242569593Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.244829662Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:46.250251125Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:46.256206738Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.25852119Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:46.265044787Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:46.657523275Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:46.74847254Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:46.750739713Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:46.76213956Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:46.764663929Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.77228056Z 79 PC: 12a98 | Find next file (See above)
2018-12-25T12:31:46.778649134Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:46.78560316Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:46.790924491Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.792746453Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:46.802201194Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:46.810158037Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.812021356Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:46.822280457Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:46.886808491Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:47.01024909Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:47.013330633Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:47.026591186Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:47.028914733Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:47.036850651Z 79 PC: 12a98 | Find next file (See above)
2018-12-25T12:31:47.04305597Z 42 PC: 12cba | Get date 0x12cba: cmp al, 5
0x12cbc: je 0x12cbf
0x12cbe: ret
0x12cbf: cmp dl, 0xd
0x12cc2: je 0x12cc5
0x12cc4: ret
0x12cc5: mov di, 0x1e
0x12cc8: mov al, 0xb6
0x12cca: out 0x43, al
0x12ccc: mov dx, 0x12
0x12ccf: mov ax, 0x34dc
0x12cd2: div di
0x12cd4: out 0x42, al
0x12cd6: mov al, ah
0x12cd8: out 0x42, al
0x12cda: in al, 0x61
0x12cdc: mov ah, al
0x12cde: or al, 3
0x12ce0: out 0x61, al
0x12ce2: ret
2018-12-25T12:31:47.046784388Z 26 PC: 22853 | Set disk transfer address

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":11970,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:31:41.657322456Z 26 PC: 12a63 | Set disk transfer address
2018-12-25T12:31:41.659698521Z 78 PC: 12a6d | Find first file
2018-12-25T12:31:41.665954733Z 61 PC: 12aa9 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:31:41.672718837Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:41.680647244Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:41.682985162Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:41.689777117Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:41.692617435Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:41.699520748Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:41.715251438Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:41.843264153Z 64 PC: 12d90 | Write file or device (Write 897 bytes on handle 5)
2018-12-25T12:31:41.966812025Z 44 PC: 12d98 | Get time 0x12d98: add byte ptr cs:[0x435], dh
0x12d9d: pop bx
0x12d9e: ret
0x12d9f: mov cx, 0x1ff
0x12da2: call 0x22d4d
0x12da5: inc byte ptr cs:[0x435]
0x12daa: loop 0x12da2
0x12dac: dec byte ptr cs:[0x435]
0x12db1: ret
0x12db2: mov cx, 0x1ff
0x12db5: call 0x22d4d
0x12db8: dec byte ptr cs:[0x435]
0x12dbd: loop 0x12db5
0x12dbf: ret
0x12dc0: add ch, cl
0x12dc2: and byte ptr [bx + si], al
0x12dc4: add byte ptr [bx + si], al
0x12dc6: add byte ptr [bx + si], al
0x12dc8: add byte ptr [bx + si], al
0x12dca: add byte ptr [bx + si], al
2018-12-25T12:31:41.969949664Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:41.97822671Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:41.980993828Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:41.988789525Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:41.991396074Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:41.998228696Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.004543603Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.006312963Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.016259701Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.019672939Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.023726517Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:42.034659237Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:42.162021145Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:42.285510582Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:42.288618145Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:42.29131192Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:42.29273786Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.301133982Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:42.304318195Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.311137512Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.317507237Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.320083686Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.326663388Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.329205893Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.331785489Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:42.341710776Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:42.433134859Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:42.534624421Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:42.537134111Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:42.539723836Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:42.541491928Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.54921528Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:42.551635861Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.558217231Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.564411215Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.566029446Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.572542641Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.574925798Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.576525421Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:42.587018466Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:42.713082987Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:42.835247473Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:42.838729329Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:42.841763372Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:42.843030975Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.848517708Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:42.857862952Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.861943668Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.867276797Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.868549449Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.872810903Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.875121077Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.876437221Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:42.882655084Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:43.012573211Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:43.137412759Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:43.139937386Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:43.143119352Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:43.145261494Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:43.153743652Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:43.156880945Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:43.163718033Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:43.169983179Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:43.171873663Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:43.179680617Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:43.182274755Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:43.18416052Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:43.190993431Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:43.396736529Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:43.675386545Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:43.679011451Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:43.853502245Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:43.854950044Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:44.219754698Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:44.222677634Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:44.22930916Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:44.236833876Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:44.238552886Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:44.245177788Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:44.248927658Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:44.250916839Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:44.533208103Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:44.68113028Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:44.812044958Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:44.814293479Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:44.81768217Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:44.819141806Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:44.841947964Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:44.844359778Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:44.8498686Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:44.852679582Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:44.855663767Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:44.85810869Z 78 PC: 12af7 | Find first file
2018-12-25T12:31:44.867568112Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:44.874935966Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:44.880498447Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:44.88225492Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:44.891381889Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:44.893941463Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:44.895590972Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:46.14046768Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:46.269355148Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:46.656344087Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:46.658611507Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:46.665853789Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:46.667656322Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.67428963Z 79 PC: 12a98 | Find next file
2018-12-25T12:31:46.678164823Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:46.685087694Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:46.690892998Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.693864561Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:46.701237417Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:46.711026682Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.714252315Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:46.723904798Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:46.835406954Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:46.965270791Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:46.96819601Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:46.978390753Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:46.98087268Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.987603717Z 79 PC: 12a98 | Find next file (See above)
2018-12-25T12:31:46.990877749Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:46.99950169Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:47.005147334Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:47.006888146Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:47.011802674Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:47.017107535Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:47.018390722Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:47.025019Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:47.130670771Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:47.208685348Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:47.212330759Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:47.223360873Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:47.225137031Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:47.233852861Z 79 PC: 12a98 | Find next file (See above)
2018-12-25T12:31:47.240553215Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:47.247605493Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:47.254369334Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:47.256379934Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:47.263276133Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:47.273201222Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:47.274950188Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:47.284583532Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:47.411336513Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:47.534079834Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:47.53657001Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:47.549742488Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:47.552529387Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:47.559657293Z 79 PC: 12a98 | Find next file (See above)
2018-12-25T12:31:47.565813637Z 42 PC: 12cba | Get date 0x12cba: cmp al, 5
0x12cbc: je 0x12cbf
0x12cbe: ret
0x12cbf: cmp dl, 0xd
0x12cc2: je 0x12cc5
0x12cc4: ret
0x12cc5: mov di, 0x1e
0x12cc8: mov al, 0xb6
0x12cca: out 0x43, al
0x12ccc: mov dx, 0x12
0x12ccf: mov ax, 0x34dc
0x12cd2: div di
0x12cd4: out 0x42, al
0x12cd6: mov al, ah
0x12cd8: out 0x42, al
0x12cda: in al, 0x61
0x12cdc: mov ah, al
0x12cde: or al, 3
0x12ce0: out 0x61, al
0x12ce2: ret
2018-12-25T12:31:47.570903306Z 26 PC: 22853 | Set disk transfer address

{"DateBased":true,"Day":13,"Month":6,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":11970,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:31:42.341840839Z 26 PC: 12a63 | Set disk transfer address
2018-12-25T12:31:42.343569249Z 78 PC: 12a6d | Find first file
2018-12-25T12:31:42.349413258Z 61 PC: 12aa9 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:31:42.355903719Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.363354715Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.365685798Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.372363426Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.375391674Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.377726256Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:42.394457122Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:42.521202883Z 64 PC: 12d90 | Write file or device (Write 897 bytes on handle 5)
2018-12-25T12:31:42.611907702Z 44 PC: 12d98 | Get time 0x12d98: add byte ptr cs:[0x435], dh
0x12d9d: pop bx
0x12d9e: ret
0x12d9f: mov cx, 0x1ff
0x12da2: call 0x22d4d
0x12da5: inc byte ptr cs:[0x435]
0x12daa: loop 0x12da2
0x12dac: dec byte ptr cs:[0x435]
0x12db1: ret
0x12db2: mov cx, 0x1ff
0x12db5: call 0x22d4d
0x12db8: dec byte ptr cs:[0x435]
0x12dbd: loop 0x12db5
0x12dbf: ret
0x12dc0: add ch, cl
0x12dc2: and byte ptr [bx + si], al
0x12dc4: add byte ptr [bx + si], al
0x12dc6: add byte ptr [bx + si], al
0x12dc8: add byte ptr [bx + si], al
0x12dca: add byte ptr [bx + si], al
2018-12-25T12:31:42.613961367Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:42.621623338Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:42.624039077Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.631511485Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:42.633959298Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.640718011Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.646875979Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.648524664Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.655523189Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.657960461Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.659650848Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:42.669883519Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:42.796626723Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:42.919585084Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:42.922350455Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:42.924938077Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:42.926581529Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.934990019Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:42.937645817Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.944357461Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.951224645Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.95294748Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:42.959420478Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:42.962309378Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:42.963970301Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:42.974134046Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:43.101242881Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:43.228057847Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:43.230344237Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:43.233079616Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:43.234395934Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:43.239450077Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:43.242652695Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:43.249041035Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:43.2560064Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:43.258027648Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:43.265535011Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:43.268308878Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:43.270148988Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:43.379749972Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:43.68098953Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:43.938743539Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:43.94175663Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:43.944314353Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:43.945776255Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:44.050912249Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:44.053135035Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:44.057987321Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:44.063774891Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:44.065776259Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:44.072282196Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:44.07582256Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:44.077491865Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:44.530721035Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:44.661514733Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:44.72692773Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:44.728624825Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:44.731770048Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:44.733430285Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:44.751823272Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:44.755273288Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:44.761558726Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:44.767828797Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:44.770031717Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:44.776388135Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:44.778776732Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:44.781394478Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:44.799649334Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:45.262856732Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:45.890517728Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:45.893522527Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:45.910080791Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:45.911810768Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:45.934299576Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:45.936930231Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:45.944026782Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:45.950511985Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:45.95223878Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:45.958896601Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:45.961836462Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:45.963534316Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:45.978728173Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:46.12903282Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:46.252313881Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:46.254493423Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:46.258092249Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:46.259642728Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.267895767Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:46.2714382Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:46.280111406Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:46.283554669Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.286518332Z 79 PC: 12a6d | Find next file (See above)
2018-12-25T12:31:46.288878576Z 78 PC: 12af7 | Find first file
2018-12-25T12:31:46.297983669Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:46.305748594Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:46.311398226Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.313424604Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:46.322350693Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:46.325259874Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.327323423Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:46.662583351Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:46.789356955Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:46.911878551Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:46.914968129Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:46.921473774Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:46.923282165Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.931806365Z 79 PC: 12a98 | Find next file
2018-12-25T12:31:46.935112005Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:46.94214105Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:46.948954575Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.951458858Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:46.958498897Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:46.96860628Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:46.971057494Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:46.980857055Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:47.108591381Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:47.233980635Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:47.23647494Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:47.247475449Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:47.248995741Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:47.255915794Z 79 PC: 12a98 | Find next file (See above)
2018-12-25T12:31:47.259444283Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:47.267541024Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:47.273234403Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:47.276187335Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:47.283835429Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:47.292110763Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:47.293834905Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:47.303667981Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:47.429499181Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:47.551913469Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:47.55567021Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:47.56842688Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:47.570445942Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:47.578830612Z 79 PC: 12a98 | Find next file (See above)
2018-12-25T12:31:47.585185566Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:47.592258834Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:47.598926452Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:47.601491591Z 61 PC: 12aa9 | Open file (See above)
2018-12-25T12:31:47.608592527Z 63 PC: 12aa9 | Read file or device (See above)
2018-12-25T12:31:47.616995035Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:47.619968186Z 67 PC: 12aa9 | Get or set file attributes (See above)
2018-12-25T12:31:47.630496406Z 60 PC: 12aa9 | Create or truncate file (See above)
2018-12-25T12:31:47.757995557Z 64 PC: 12d90 | Write file or device (See above)
2018-12-25T12:31:47.881665779Z 44 PC: 12d98 | Get time (See above)
2018-12-25T12:31:47.884089048Z 64 PC: 12aa9 | Write file or device (See above)
2018-12-25T12:31:47.898030279Z 87 PC: 12aa9 | Get or set file date and time (See above)
2018-12-25T12:31:47.900280625Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T12:31:47.908237436Z 79 PC: 12a98 | Find next file (See above)
2018-12-25T12:31:47.9144222Z 42 PC: 12cba | Get date 0x12cba: cmp al, 5
0x12cbc: je 0x12cbf
0x12cbe: ret
0x12cbf: cmp dl, 0xd
0x12cc2: je 0x12cc5
0x12cc4: ret
0x12cc5: mov di, 0x1e
0x12cc8: mov al, 0xb6
0x12cca: out 0x43, al
0x12ccc: mov dx, 0x12
0x12ccf: mov ax, 0x34dc
0x12cd2: div di
0x12cd4: out 0x42, al
0x12cd6: mov al, ah
0x12cd8: out 0x42, al
0x12cda: in al, 0x61
0x12cdc: mov ah, al
0x12cde: or al, 3
0x12ce0: out 0x61, al
0x12ce2: ret
2018-12-25T12:31:47.91866933Z 26 PC: 22853 | Set disk transfer address