Sample viewer

vx.netlux.org/Virus.DOS.Christmas.1539.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:26:23.727782065Z 47 PC: 12a7b | Get disk transfer address
2018-12-17T22:26:23.730254092Z 37 PC: 12a98 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:26:23.732827973Z 26 PC: 12ad0 | Set disk transfer address
2018-12-17T22:26:23.734442699Z 78 PC: 12af8 | Find first file
2018-12-17T22:26:23.741588314Z 61 PC: 12c35 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:26:23.750641976Z 63 PC: 12c64 | Read file or device (Read 7 bytes on handle 5)
2018-12-17T22:26:23.758213835Z 87 PC: 12c78 | Get or set file date and time
2018-12-17T22:26:23.760227142Z 66 PC: 12c99 | Move file pointer
2018-12-17T22:26:23.762747083Z 64 PC: 12ca9 | Write file or device (Write 1132 bytes on handle 5)
2018-12-17T22:26:23.778933233Z 66 PC: 12cd1 | Move file pointer
2018-12-17T22:26:23.781362777Z 63 PC: 12ced | Read file or device (Read 407 bytes on handle 5)
2018-12-17T22:26:23.789315321Z 66 PC: 12cff | Move file pointer
2018-12-17T22:26:23.79110496Z 64 PC: 12d0a | Write file or device (Write 407 bytes on handle 5)
2018-12-17T22:26:23.797585508Z 66 PC: 12d28 | Move file pointer
2018-12-17T22:26:23.80009586Z 64 PC: 12d85 | Write file or device (Write 53 bytes on handle 5)
2018-12-17T22:26:23.803699699Z 64 PC: 12dbb | Write file or device (Write 512 bytes on handle 5)
2018-12-17T22:26:23.813351949Z 64 PC: 12dbb | Write file or device (Write 512 bytes on handle 5)
2018-12-17T22:26:23.822902559Z 64 PC: 12dbb | Write file or device (Write 462 bytes on handle 5)
2018-12-17T22:26:23.827683149Z 87 PC: 12dd1 | Get or set file date and time
2018-12-17T22:26:23.839858258Z 62 PC: 12dda | Close file
2018-12-17T22:26:23.84889747Z 79 PC: 12af8 | Find next file
2018-12-17T22:26:23.85275492Z 61 PC: 12c35 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:26:23.860440696Z 63 PC: 12c64 | Read file or device (Read 7 bytes on handle 5)
2018-12-17T22:26:23.881017613Z 87 PC: 12c78 | Get or set file date and time
2018-12-17T22:26:23.88418839Z 66 PC: 12c99 | Move file pointer
2018-12-17T22:26:23.886202777Z 64 PC: 12ca9 | Write file or device (Write 1512 bytes on handle 5)
2018-12-17T22:26:23.896158369Z 66 PC: 12cd1 | Move file pointer
2018-12-17T22:26:23.898830813Z 63 PC: 12ced | Read file or device (Read 27 bytes on handle 5)
2018-12-17T22:26:23.906418307Z 66 PC: 12cff | Move file pointer
2018-12-17T22:26:23.90841917Z 64 PC: 12d0a | Write file or device (Write 27 bytes on handle 5)
2018-12-17T22:26:23.912938357Z 66 PC: 12d28 | Move file pointer
2018-12-17T22:26:23.915652016Z 64 PC: 12d85 | Write file or device (Write 53 bytes on handle 5)
2018-12-17T22:26:23.919290049Z 64 PC: 12dbb | Write file or device (Write 512 bytes on handle 5)
2018-12-17T22:26:23.929880966Z 64 PC: 12dbb | Write file or device (Write 512 bytes on handle 5)
2018-12-17T22:26:23.939448048Z 64 PC: 12dbb | Write file or device (Write 462 bytes on handle 5)
2018-12-17T22:26:23.946353135Z 87 PC: 12dd1 | Get or set file date and time
2018-12-17T22:26:23.948525131Z 62 PC: 12dda | Close file
2018-12-17T22:26:23.957831289Z 79 PC: 12af8 | Find next file
2018-12-17T22:26:23.960913447Z 61 PC: 12c35 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:26:23.968231513Z 63 PC: 12c64 | Read file or device (Read 7 bytes on handle 5)
2018-12-17T22:26:23.976445064Z 87 PC: 12c78 | Get or set file date and time
2018-12-17T22:26:23.977968886Z 66 PC: 12c99 | Move file pointer
2018-12-17T22:26:23.979572944Z 64 PC: 12ca9 | Write file or device (Write 1447 bytes on handle 5)
2018-12-17T22:26:23.989798085Z 66 PC: 12cd1 | Move file pointer
2018-12-17T22:26:23.991515181Z 63 PC: 12ced | Read file or device (Read 92 bytes on handle 5)
2018-12-17T22:26:23.998606567Z 66 PC: 12cff | Move file pointer
2018-12-17T22:26:24.001127955Z 64 PC: 12d0a | Write file or device (Write 92 bytes on handle 5)
2018-12-17T22:26:24.005792683Z 66 PC: 12d28 | Move file pointer
2018-12-17T22:26:24.00769244Z 64 PC: 12d85 | Write file or device (Write 53 bytes on handle 5)
2018-12-17T22:26:24.011569856Z 64 PC: 12dbb | Write file or device (Write 512 bytes on handle 5)
2018-12-17T22:26:24.02079961Z 64 PC: 12dbb | Write file or device (Write 512 bytes on handle 5)
2018-12-17T22:26:24.030025057Z 64 PC: 12dbb | Write file or device (Write 462 bytes on handle 5)
2018-12-17T22:26:24.034181983Z 87 PC: 12dd1 | Get or set file date and time
2018-12-17T22:26:24.037082086Z 62 PC: 12dda | Close file
2018-12-17T22:26:24.046761096Z 42 PC: 12b58 | Get date 0x12b58: cmp dx, 0x401
0x12b5c: jne 0x12b91
0x12b5e: mov dx, 0x80
0x12b61: mov cx, 1
0x12b64: mov bx, 0x703
0x12b67: mov ax, 0x201
0x12b6a: push dx
0x12b6b: push cx
0x12b6c: push bx
0x12b6d: int 0x13
0x12b6f: pop bx
0x12b70: pop cx
0x12b71: pop dx
0x12b72: mov cl, 0x11
0x12b74: mov ax, 0x301
0x12b77: int 0x13
0x12b79: mov word ptr [0x835], 0xaa55
0x12b7f: mov dl, 0x80
0x12b81: call 0x12ff8
0x12b84: xor dl, dl
2018-12-17T22:26:24.049568873Z 37 PC: 12bbe | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:26:24.052358033Z 26 PC: 12bc4 | Set disk transfer address
2018-12-17T22:26:24.054201161Z 48 PC: 12a44 | Get DOS version
2018-12-17T22:26:24.055988788Z 9 PC: 12a50 | Display string (String= 'MORE: Incorrect DOS version ')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4678,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:52:39.626079085Z 47 PC: 12a7b | Get disk transfer address
2018-12-25T11:52:39.628509466Z 37 PC: 12a98 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:52:39.62978497Z 26 PC: 12ad0 | Set disk transfer address
2018-12-25T11:52:39.631153927Z 78 PC: 12af8 | Find first file
2018-12-25T11:52:39.639020841Z 61 PC: 12c35 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:52:39.646983014Z 63 PC: 12c64 | Read file or device (Read 7 bytes on handle 5)
2018-12-25T11:52:39.654210156Z 87 PC: 12c78 | Get or set file date and time
2018-12-25T11:52:39.655656067Z 66 PC: 12c99 | Move file pointer
2018-12-25T11:52:39.657770854Z 64 PC: 12ca9 | Write file or device (Write 1132 bytes on handle 5)
2018-12-25T11:52:40.081211952Z 66 PC: 12cd1 | Move file pointer
2018-12-25T11:52:40.083275582Z 63 PC: 12ced | Read file or device (Read 407 bytes on handle 5)
2018-12-25T11:52:40.091100678Z 66 PC: 12cff | Move file pointer
2018-12-25T11:52:40.093039156Z 64 PC: 12d0a | Write file or device (Write 407 bytes on handle 5)
2018-12-25T11:52:40.097805327Z 66 PC: 12d28 | Move file pointer
2018-12-25T11:52:40.101055893Z 64 PC: 12d85 | Write file or device (Write 53 bytes on handle 5)
2018-12-25T11:52:40.104592516Z 64 PC: 12dbb | Write file or device (Write 512 bytes on handle 5)
2018-12-25T11:52:40.114882582Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.141489124Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.144902821Z 87 PC: 12dd1 | Get or set file date and time
2018-12-25T11:52:40.146333617Z 62 PC: 12dda | Close file
2018-12-25T11:52:40.159058869Z 79 PC: 12af8 | Find next file (See above)
2018-12-25T11:52:40.163422699Z 61 PC: 12c35 | Open file (See above)
2018-12-25T11:52:40.171665776Z 63 PC: 12c64 | Read file or device (See above)
2018-12-25T11:52:40.179453163Z 87 PC: 12c78 | Get or set file date and time (See above)
2018-12-25T11:52:40.182961406Z 66 PC: 12c99 | Move file pointer (See above)
2018-12-25T11:52:40.186633728Z 64 PC: 12ca9 | Write file or device (See above)
2018-12-25T11:52:40.197378687Z 66 PC: 12cd1 | Move file pointer (See above)
2018-12-25T11:52:40.200694316Z 63 PC: 12ced | Read file or device (See above)
2018-12-25T11:52:40.207557375Z 66 PC: 12cff | Move file pointer (See above)
2018-12-25T11:52:40.209721644Z 64 PC: 12d0a | Write file or device (See above)
2018-12-25T11:52:40.217452906Z 66 PC: 12d28 | Move file pointer (See above)
2018-12-25T11:52:40.221588781Z 64 PC: 12d85 | Write file or device (See above)
2018-12-25T11:52:40.22599177Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.238475395Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.248068459Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.251703004Z 87 PC: 12dd1 | Get or set file date and time (See above)
2018-12-25T11:52:40.254241257Z 62 PC: 12dda | Close file (See above)
2018-12-25T11:52:40.264788298Z 79 PC: 12af8 | Find next file (See above)
2018-12-25T11:52:40.268142509Z 61 PC: 12c35 | Open file (See above)
2018-12-25T11:52:40.276096976Z 63 PC: 12c64 | Read file or device (See above)
2018-12-25T11:52:40.283284158Z 87 PC: 12c78 | Get or set file date and time (See above)
2018-12-25T11:52:40.284956883Z 66 PC: 12c99 | Move file pointer (See above)
2018-12-25T11:52:40.287159283Z 64 PC: 12ca9 | Write file or device (See above)
2018-12-25T11:52:40.297200964Z 66 PC: 12cd1 | Move file pointer (See above)
2018-12-25T11:52:40.298937121Z 63 PC: 12ced | Read file or device (See above)
2018-12-25T11:52:40.306073081Z 66 PC: 12cff | Move file pointer (See above)
2018-12-25T11:52:40.307498091Z 64 PC: 12d0a | Write file or device (See above)
2018-12-25T11:52:40.310836571Z 66 PC: 12d28 | Move file pointer (See above)
2018-12-25T11:52:40.312370526Z 64 PC: 12d85 | Write file or device (See above)
2018-12-25T11:52:40.316076254Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.326347769Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.335631019Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.340876904Z 87 PC: 12dd1 | Get or set file date and time (See above)
2018-12-25T11:52:40.342598588Z 62 PC: 12dda | Close file (See above)
2018-12-25T11:52:40.351597141Z 42 PC: 12b58 | Get date 0x12b58: cmp dx, 0x401
0x12b5c: jne 0x12b91
0x12b5e: mov dx, 0x80
0x12b61: mov cx, 1
0x12b64: mov bx, 0x703
0x12b67: mov ax, 0x201
0x12b6a: push dx
0x12b6b: push cx
0x12b6c: push bx
0x12b6d: int 0x13
0x12b6f: pop bx
0x12b70: pop cx
0x12b71: pop dx
0x12b72: mov cl, 0x11
0x12b74: mov ax, 0x301
0x12b77: int 0x13
0x12b79: mov word ptr [0x835], 0xaa55
0x12b7f: mov dl, 0x80
0x12b81: call 0x12ff8
0x12b84: xor dl, dl
2018-12-25T11:52:40.354958625Z 37 PC: 12bbe | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:52:40.356596025Z 26 PC: 12bc4 | Set disk transfer address
2018-12-25T11:52:40.358308615Z 48 PC: 12a44 | Get DOS version
2018-12-25T11:52:40.361803189Z 9 PC: 12a50 | Display string (String= 'MORE: Incorrect DOS version ')

{"DateBased":true,"Day":1,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4678,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:52:39.790795359Z 47 PC: 12a7b | Get disk transfer address
2018-12-25T11:52:39.792739713Z 37 PC: 12a98 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:52:39.793900479Z 26 PC: 12ad0 | Set disk transfer address
2018-12-25T11:52:39.794994525Z 78 PC: 12af8 | Find first file
2018-12-25T11:52:39.801266066Z 61 PC: 12c35 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:52:39.807715544Z 63 PC: 12c64 | Read file or device (Read 7 bytes on handle 5)
2018-12-25T11:52:39.813605536Z 87 PC: 12c78 | Get or set file date and time
2018-12-25T11:52:39.815165405Z 66 PC: 12c99 | Move file pointer
2018-12-25T11:52:39.816357155Z 64 PC: 12ca9 | Write file or device (Write 1132 bytes on handle 5)
2018-12-25T11:52:39.829568361Z 66 PC: 12cd1 | Move file pointer
2018-12-25T11:52:39.831682709Z 63 PC: 12ced | Read file or device (Read 407 bytes on handle 5)
2018-12-25T11:52:39.838161854Z 66 PC: 12cff | Move file pointer
2018-12-25T11:52:39.839525346Z 64 PC: 12d0a | Write file or device (Write 407 bytes on handle 5)
2018-12-25T11:52:39.842735244Z 66 PC: 12d28 | Move file pointer
2018-12-25T11:52:39.84436124Z 64 PC: 12d85 | Write file or device (Write 53 bytes on handle 5)
2018-12-25T11:52:39.847041857Z 64 PC: 12dbb | Write file or device (Write 512 bytes on handle 5)
2018-12-25T11:52:39.854762208Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:39.86587535Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:39.868867407Z 87 PC: 12dd1 | Get or set file date and time
2018-12-25T11:52:39.870167764Z 62 PC: 12dda | Close file
2018-12-25T11:52:39.878538399Z 79 PC: 12af8 | Find next file (See above)
2018-12-25T11:52:39.881034636Z 61 PC: 12c35 | Open file (See above)
2018-12-25T11:52:39.887221999Z 63 PC: 12c64 | Read file or device (See above)
2018-12-25T11:52:39.893850909Z 87 PC: 12c78 | Get or set file date and time (See above)
2018-12-25T11:52:39.895083819Z 66 PC: 12c99 | Move file pointer (See above)
2018-12-25T11:52:39.896299631Z 64 PC: 12ca9 | Write file or device (See above)
2018-12-25T11:52:39.905250493Z 66 PC: 12cd1 | Move file pointer (See above)
2018-12-25T11:52:39.912959535Z 63 PC: 12ced | Read file or device (See above)
2018-12-25T11:52:39.918968378Z 66 PC: 12cff | Move file pointer (See above)
2018-12-25T11:52:39.920714879Z 64 PC: 12d0a | Write file or device (See above)
2018-12-25T11:52:39.923669976Z 66 PC: 12d28 | Move file pointer (See above)
2018-12-25T11:52:39.924947712Z 64 PC: 12d85 | Write file or device (See above)
2018-12-25T11:52:39.92801271Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:39.936027201Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:39.943850162Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:39.947986859Z 87 PC: 12dd1 | Get or set file date and time (See above)
2018-12-25T11:52:39.949713735Z 62 PC: 12dda | Close file (See above)
2018-12-25T11:52:39.957397441Z 79 PC: 12af8 | Find next file (See above)
2018-12-25T11:52:39.960136268Z 61 PC: 12c35 | Open file (See above)
2018-12-25T11:52:39.967421061Z 63 PC: 12c64 | Read file or device (See above)
2018-12-25T11:52:39.973567285Z 87 PC: 12c78 | Get or set file date and time (See above)
2018-12-25T11:52:39.974780002Z 66 PC: 12c99 | Move file pointer (See above)
2018-12-25T11:52:39.976538196Z 64 PC: 12ca9 | Write file or device (See above)
2018-12-25T11:52:39.984774118Z 66 PC: 12cd1 | Move file pointer (See above)
2018-12-25T11:52:39.985832691Z 63 PC: 12ced | Read file or device (See above)
2018-12-25T11:52:39.99237953Z 66 PC: 12cff | Move file pointer (See above)
2018-12-25T11:52:39.993516816Z 64 PC: 12d0a | Write file or device (See above)
2018-12-25T11:52:39.995811962Z 66 PC: 12d28 | Move file pointer (See above)
2018-12-25T11:52:39.997395087Z 64 PC: 12d85 | Write file or device (See above)
2018-12-25T11:52:39.999421977Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.007162812Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.01538359Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.019051712Z 87 PC: 12dd1 | Get or set file date and time (See above)
2018-12-25T11:52:40.02087196Z 62 PC: 12dda | Close file (See above)
2018-12-25T11:52:40.028480967Z 42 PC: 12b58 | Get date 0x12b58: cmp dx, 0x401
0x12b5c: jne 0x12b91
0x12b5e: mov dx, 0x80
0x12b61: mov cx, 1
0x12b64: mov bx, 0x703
0x12b67: mov ax, 0x201
0x12b6a: push dx
0x12b6b: push cx
0x12b6c: push bx
0x12b6d: int 0x13
0x12b6f: pop bx
0x12b70: pop cx
0x12b71: pop dx
0x12b72: mov cl, 0x11
0x12b74: mov ax, 0x301
0x12b77: int 0x13
0x12b79: mov word ptr [0x835], 0xaa55
0x12b7f: mov dl, 0x80
0x12b81: call 0x12ff8
0x12b84: xor dl, dl
2018-12-25T11:52:40.361967098Z 37 PC: 12bbe | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:52:40.363647553Z 26 PC: 12bc4 | Set disk transfer address

{"DateBased":true,"Day":24,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4678,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:52:40.037227161Z 47 PC: 12a7b | Get disk transfer address
2018-12-25T11:52:40.043632832Z 37 PC: 12a98 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:52:40.045474241Z 26 PC: 12ad0 | Set disk transfer address
2018-12-25T11:52:40.047212467Z 78 PC: 12af8 | Find first file
2018-12-25T11:52:40.054478915Z 61 PC: 12c35 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:52:40.061692648Z 63 PC: 12c64 | Read file or device (Read 7 bytes on handle 5)
2018-12-25T11:52:40.06884603Z 87 PC: 12c78 | Get or set file date and time
2018-12-25T11:52:40.070455697Z 66 PC: 12c99 | Move file pointer
2018-12-25T11:52:40.073469694Z 64 PC: 12ca9 | Write file or device (Write 1132 bytes on handle 5)
2018-12-25T11:52:40.089997535Z 66 PC: 12cd1 | Move file pointer
2018-12-25T11:52:40.092026115Z 63 PC: 12ced | Read file or device (Read 407 bytes on handle 5)
2018-12-25T11:52:40.100528084Z 66 PC: 12cff | Move file pointer
2018-12-25T11:52:40.102617088Z 64 PC: 12d0a | Write file or device (Write 407 bytes on handle 5)
2018-12-25T11:52:40.10642184Z 66 PC: 12d28 | Move file pointer
2018-12-25T11:52:40.109943579Z 64 PC: 12d85 | Write file or device (Write 53 bytes on handle 5)
2018-12-25T11:52:40.113861239Z 64 PC: 12dbb | Write file or device (Write 512 bytes on handle 5)
2018-12-25T11:52:40.126897093Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.137821733Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.142333313Z 87 PC: 12dd1 | Get or set file date and time
2018-12-25T11:52:40.144481887Z 62 PC: 12dda | Close file
2018-12-25T11:52:40.153767946Z 79 PC: 12af8 | Find next file (See above)
2018-12-25T11:52:40.157298498Z 61 PC: 12c35 | Open file (See above)
2018-12-25T11:52:40.165209008Z 63 PC: 12c64 | Read file or device (See above)
2018-12-25T11:52:40.173222531Z 87 PC: 12c78 | Get or set file date and time (See above)
2018-12-25T11:52:40.186231192Z 66 PC: 12c99 | Move file pointer (See above)
2018-12-25T11:52:40.189098175Z 64 PC: 12ca9 | Write file or device (See above)
2018-12-25T11:52:40.200406375Z 66 PC: 12cd1 | Move file pointer (See above)
2018-12-25T11:52:40.203431101Z 63 PC: 12ced | Read file or device (See above)
2018-12-25T11:52:40.211328947Z 66 PC: 12cff | Move file pointer (See above)
2018-12-25T11:52:40.213358713Z 64 PC: 12d0a | Write file or device (See above)
2018-12-25T11:52:40.217803364Z 66 PC: 12d28 | Move file pointer (See above)
2018-12-25T11:52:40.219535574Z 64 PC: 12d85 | Write file or device (See above)
2018-12-25T11:52:40.223202695Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.234432473Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.244454056Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.249620467Z 87 PC: 12dd1 | Get or set file date and time (See above)
2018-12-25T11:52:40.253397633Z 62 PC: 12dda | Close file (See above)
2018-12-25T11:52:40.263005837Z 79 PC: 12af8 | Find next file (See above)
2018-12-25T11:52:40.266237672Z 61 PC: 12c35 | Open file (See above)
2018-12-25T11:52:40.274885141Z 63 PC: 12c64 | Read file or device (See above)
2018-12-25T11:52:40.283715348Z 87 PC: 12c78 | Get or set file date and time (See above)
2018-12-25T11:52:40.285742464Z 66 PC: 12c99 | Move file pointer (See above)
2018-12-25T11:52:40.287797231Z 64 PC: 12ca9 | Write file or device (See above)
2018-12-25T11:52:40.298756352Z 66 PC: 12cd1 | Move file pointer (See above)
2018-12-25T11:52:40.300768763Z 63 PC: 12ced | Read file or device (See above)
2018-12-25T11:52:40.308382374Z 66 PC: 12cff | Move file pointer (See above)
2018-12-25T11:52:40.311210004Z 64 PC: 12d0a | Write file or device (See above)
2018-12-25T11:52:40.3149227Z 66 PC: 12d28 | Move file pointer (See above)
2018-12-25T11:52:40.317038907Z 64 PC: 12d85 | Write file or device (See above)
2018-12-25T11:52:40.321992269Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.346395179Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.355584019Z 64 PC: 12dbb | Write file or device (See above)
2018-12-25T11:52:40.360144187Z 87 PC: 12dd1 | Get or set file date and time (See above)
2018-12-25T11:52:40.362343866Z 62 PC: 12dda | Close file (See above)
2018-12-25T11:52:40.374903004Z 42 PC: 12b58 | Get date 0x12b58: cmp dx, 0x401
0x12b5c: jne 0x12b91
0x12b5e: mov dx, 0x80
0x12b61: mov cx, 1
0x12b64: mov bx, 0x703
0x12b67: mov ax, 0x201
0x12b6a: push dx
0x12b6b: push cx
0x12b6c: push bx
0x12b6d: int 0x13
0x12b6f: pop bx
0x12b70: pop cx
0x12b71: pop dx
0x12b72: mov cl, 0x11
0x12b74: mov ax, 0x301
0x12b77: int 0x13
0x12b79: mov word ptr [0x835], 0xaa55
0x12b7f: mov dl, 0x80
0x12b81: call 0x12ff8
0x12b84: xor dl, dl
2018-12-25T11:52:40.413378088Z 37 PC: 12bbe | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:52:40.415030646Z 26 PC: 12bc4 | Set disk transfer address
2018-12-25T11:52:40.416883858Z 48 PC: 12a44 | Get DOS version
2018-12-25T11:52:40.419275471Z 9 PC: 12a50 | Display string (String= 'MORE: Incorrect DOS version ')