Sample viewer

vx.netlux.org/Virus.DOS.PS-MPC.Powermen.718

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:33:56.403174421Z 26 PC: 12e7d | Set disk transfer address
2018-12-17T22:33:56.405072929Z 71 PC: 12e87 | Get current directory
2018-12-17T22:33:56.40786877Z 53 PC: 12e91 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:33:56.408950622Z 37 PC: 12ea1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:33:56.410894362Z 78 PC: 12f75 | Find first file
2018-12-17T22:33:56.416592703Z 78 PC: 12f75 | Find first file
2018-12-17T22:33:56.422853576Z 67 PC: 130d8 | Get or set file attributes
2018-12-17T22:33:56.446503967Z 61 PC: 12f81 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:33:56.457612853Z 63 PC: 12f8d | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:33:56.464389989Z 66 PC: 12f95 | Move file pointer
2018-12-17T22:33:56.466016074Z 79 PC: 12f75 | Find next file
2018-12-17T22:33:56.468720216Z 67 PC: 130d8 | Get or set file attributes
2018-12-17T22:33:56.481240604Z 61 PC: 12f81 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:33:56.488138283Z 63 PC: 12f8d | Read file or device (Read 26 bytes on handle 6)
2018-12-17T22:33:56.494899767Z 66 PC: 12f95 | Move file pointer
2018-12-17T22:33:56.495884477Z 79 PC: 12f75 | Find next file
2018-12-17T22:33:56.497671721Z 67 PC: 130d8 | Get or set file attributes
2018-12-17T22:33:56.504185669Z 61 PC: 12f81 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:33:56.508229495Z 63 PC: 12f8d | Read file or device (Read 26 bytes on handle 7)
2018-12-17T22:33:56.512672652Z 66 PC: 12f95 | Move file pointer
2018-12-17T22:33:56.514413802Z 79 PC: 12f75 | Find next file
2018-12-17T22:33:56.516256465Z 67 PC: 130d8 | Get or set file attributes
2018-12-17T22:33:56.522816419Z 61 PC: 12f81 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:33:56.530597566Z 63 PC: 12f8d | Read file or device (Read 26 bytes on handle 8)
2018-12-17T22:33:56.534578502Z 66 PC: 12f95 | Move file pointer
2018-12-17T22:33:56.535691216Z 79 PC: 12f75 | Find next file
2018-12-17T22:33:56.54202442Z 67 PC: 130d8 | Get or set file attributes
2018-12-17T22:33:56.54946653Z 61 PC: 12f81 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:33:56.554690652Z 63 PC: 12f8d | Read file or device (Read 26 bytes on handle 9)
2018-12-17T22:33:56.561764293Z 66 PC: 12f95 | Move file pointer
2018-12-17T22:33:56.563363749Z 79 PC: 12f75 | Find next file
2018-12-17T22:33:56.566066709Z 67 PC: 130d8 | Get or set file attributes
2018-12-17T22:33:56.576823926Z 61 PC: 12f81 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:33:56.583514694Z 63 PC: 12f8d | Read file or device (Read 26 bytes on handle 10)
2018-12-17T22:33:56.590531916Z 66 PC: 12f95 | Move file pointer
2018-12-17T22:33:56.592086436Z 79 PC: 12f75 | Find next file
2018-12-17T22:33:56.594795512Z 67 PC: 130d8 | Get or set file attributes
2018-12-17T22:33:56.60447119Z 61 PC: 12f81 | Open file (Filename = 'PAH.COM')
2018-12-17T22:33:56.611742837Z 63 PC: 12f8d | Read file or device (Read 26 bytes on handle 11)
2018-12-17T22:33:56.618294908Z 66 PC: 12f95 | Move file pointer
2018-12-17T22:33:56.619899199Z 79 PC: 12f75 | Find next file
2018-12-17T22:33:56.622654577Z 67 PC: 130d8 | Get or set file attributes
2018-12-17T22:33:56.633030781Z 61 PC: 12f81 | Open file (Filename = 'TEST.COM')
2018-12-17T22:33:56.639573871Z 63 PC: 12f8d | Read file or device (Read 26 bytes on handle 12)
2018-12-17T22:33:56.646243217Z 66 PC: 12f95 | Move file pointer
2018-12-17T22:33:56.648889938Z 79 PC: 12f75 | Find next file
2018-12-17T22:33:56.651532716Z 59 PC: 12eb9 | Change current directory
2018-12-17T22:33:56.655576821Z 44 PC: 12ebf | Get time 0x12ebf: mov al, cl
0x12ec1: cwde
0x12ec2: cmp ax, 0x1e
0x12ec5: je 0x12eca
0x12ec7: jmp 0x12ed6
0x12ec9: nop
0x12eca: mov cx, 1
0x12ecd: jcxz 0x12ed6
0x12ecf: mov ax, 0xe07
0x12ed2: int 0x10
0x12ed4: loop 0x12ed2
0x12ed6: mov ah, 0x2a
0x12ed8: int 0x21
0x12eda: cmp dh, 0xc
0x12edd: jne 0x12ee4
0x12edf: cmp dl, 0x14
0x12ee2: jae 0x12f32
0x12ee4: mov ax, 0x2524
0x12ee7: lds dx, ptr [bp + 0x3ff]
0x12eeb: int 0x21
2018-12-17T22:33:56.661208623Z 42 PC: 12eda | Get date 0x12eda: cmp dh, 0xc
0x12edd: jne 0x12ee4
0x12edf: cmp dl, 0x14
0x12ee2: jae 0x12f32
0x12ee4: mov ax, 0x2524
0x12ee7: lds dx, ptr [bp + 0x3ff]
0x12eeb: int 0x21
0x12eed: push cs
0x12eee: pop ds
0x12eef: mov ah, 0x3b
0x12ef1: lea dx, word ptr [bp + 0x403]
0x12ef5: int 0x21
0x12ef7: mov ah, 0x1a
0x12ef9: mov dx, 0x80
0x12efc: cmp sp, 0x5049
0x12f00: je 0x12f05
0x12f02: int 0x21
0x12f04: ret
0x12f05: pop es
0x12f06: pop ds
2018-12-17T22:33:56.663742934Z 37 PC: 12eed | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:33:56.665182093Z 59 PC: 12ef7 | Change current directory
2018-12-17T22:33:56.670471009Z 26 PC: 12f04 | Set disk transfer address

{"DateBased":true,"Day":21,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6073,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:58:25.799513576Z 26 PC: 12e7d | Set disk transfer address
2018-12-25T11:58:25.800965628Z 71 PC: 12e87 | Get current directory
2018-12-25T11:58:25.80389327Z 53 PC: 12e91 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:25.80495243Z 37 PC: 12ea1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:25.806498415Z 78 PC: 12f75 | Find first file
2018-12-25T11:58:25.812289554Z 78 PC: 12f75 | Find first file (See above)
2018-12-25T11:58:25.823482714Z 67 PC: 130d8 | Get or set file attributes
2018-12-25T11:58:25.842701481Z 61 PC: 12f81 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:58:25.854217636Z 63 PC: 12f8d | Read file or device (Read 26 bytes on handle 5)
2018-12-25T11:58:25.860329869Z 66 PC: 12f95 | Move file pointer
2018-12-25T11:58:25.862432118Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:25.865253795Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:25.874976695Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:25.881941977Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:25.88963634Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:25.891350542Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:25.894681768Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:25.904872445Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:25.911734766Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:25.918848893Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:25.921199251Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:25.923777627Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:25.934010633Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:25.9411452Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:25.947279852Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:25.948658282Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:25.952110875Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:25.961930654Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:25.968394313Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:25.975167157Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:25.976462095Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:25.978904923Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:25.989585562Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:25.996042611Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:26.002558201Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:26.016941917Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:26.019579382Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:26.029032944Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:26.036142929Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:26.043242029Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:26.044672753Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:26.047692707Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:26.057751472Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:26.064101429Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:26.070959321Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:26.072359037Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:26.074649207Z 59 PC: 12eb9 | Change current directory
2018-12-25T11:58:26.078967865Z 44 PC: 12ebf | Get time 0x12ebf: mov al, cl
0x12ec1: cwde
0x12ec2: cmp ax, 0x1e
0x12ec5: je 0x12eca
0x12ec7: jmp 0x12ed6
0x12ec9: nop
0x12eca: mov cx, 1
0x12ecd: jcxz 0x12ed6
0x12ecf: mov ax, 0xe07
0x12ed2: int 0x10
0x12ed4: loop 0x12ed2
0x12ed6: mov ah, 0x2a
0x12ed8: int 0x21
0x12eda: cmp dh, 0xc
0x12edd: jne 0x12ee4
0x12edf: cmp dl, 0x14
0x12ee2: jae 0x12f32
0x12ee4: mov ax, 0x2524
0x12ee7: lds dx, ptr [bp + 0x3ff]
0x12eeb: int 0x21
2018-12-25T11:58:26.080937Z 42 PC: 12eda | Get date 0x12eda: cmp dh, 0xc
0x12edd: jne 0x12ee4
0x12edf: cmp dl, 0x14
0x12ee2: jae 0x12f32
0x12ee4: mov ax, 0x2524
0x12ee7: lds dx, ptr [bp + 0x3ff]
0x12eeb: int 0x21
0x12eed: push cs
0x12eee: pop ds
0x12eef: mov ah, 0x3b
0x12ef1: lea dx, word ptr [bp + 0x403]
0x12ef5: int 0x21
0x12ef7: mov ah, 0x1a
0x12ef9: mov dx, 0x80
0x12efc: cmp sp, 0x5049
0x12f00: je 0x12f05
0x12f02: int 0x21
0x12f04: ret
0x12f05: pop es
0x12f06: pop ds
2018-12-25T11:58:26.084154655Z 37 PC: 12eed | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:26.085822224Z 59 PC: 12ef7 | Change current directory
2018-12-25T11:58:26.089550962Z 26 PC: 12f04 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6073,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:58:25.827584819Z 26 PC: 12e7d | Set disk transfer address
2018-12-25T11:58:25.829796923Z 71 PC: 12e87 | Get current directory
2018-12-25T11:58:25.833131832Z 53 PC: 12e91 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:25.834599001Z 37 PC: 12ea1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:25.836152995Z 78 PC: 12f75 | Find first file
2018-12-25T11:58:25.842757687Z 78 PC: 12f75 | Find first file (See above)
2018-12-25T11:58:25.849386023Z 67 PC: 130d8 | Get or set file attributes
2018-12-25T11:58:25.866200988Z 61 PC: 12f81 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:58:25.879528706Z 63 PC: 12f8d | Read file or device (Read 26 bytes on handle 5)
2018-12-25T11:58:25.886580131Z 66 PC: 12f95 | Move file pointer
2018-12-25T11:58:25.888864025Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:25.892098142Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:25.902869168Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:25.910144645Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:25.917654503Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:25.919261029Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:25.922308148Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:25.933720417Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:25.94118843Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:25.94860764Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:25.951899399Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:25.954904797Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:25.966154246Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:25.973661461Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:25.980911796Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:25.982586681Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:25.985727204Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:25.993248555Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:25.997752753Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:26.001966Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:26.003716158Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:26.005561936Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:26.016631601Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:26.02184784Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:26.026291195Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:26.027441723Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:26.035466188Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:26.042172718Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:26.049679191Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:26.055721948Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:26.057447516Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:26.060324292Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:26.071579196Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:26.07935078Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:26.086884089Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:26.088552309Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:26.092704208Z 59 PC: 12eb9 | Change current directory
2018-12-25T11:58:26.097604532Z 44 PC: 12ebf | Get time 0x12ebf: mov al, cl
0x12ec1: cwde
0x12ec2: cmp ax, 0x1e
0x12ec5: je 0x12eca
0x12ec7: jmp 0x12ed6
0x12ec9: nop
0x12eca: mov cx, 1
0x12ecd: jcxz 0x12ed6
0x12ecf: mov ax, 0xe07
0x12ed2: int 0x10
0x12ed4: loop 0x12ed2
0x12ed6: mov ah, 0x2a
0x12ed8: int 0x21
0x12eda: cmp dh, 0xc
0x12edd: jne 0x12ee4
0x12edf: cmp dl, 0x14
0x12ee2: jae 0x12f32
0x12ee4: mov ax, 0x2524
0x12ee7: lds dx, ptr [bp + 0x3ff]
0x12eeb: int 0x21
2018-12-25T11:58:26.100047622Z 42 PC: 12eda | Get date 0x12eda: cmp dh, 0xc
0x12edd: jne 0x12ee4
0x12edf: cmp dl, 0x14
0x12ee2: jae 0x12f32
0x12ee4: mov ax, 0x2524
0x12ee7: lds dx, ptr [bp + 0x3ff]
0x12eeb: int 0x21
0x12eed: push cs
0x12eee: pop ds
0x12eef: mov ah, 0x3b
0x12ef1: lea dx, word ptr [bp + 0x403]
0x12ef5: int 0x21
0x12ef7: mov ah, 0x1a
0x12ef9: mov dx, 0x80
0x12efc: cmp sp, 0x5049
0x12f00: je 0x12f05
0x12f02: int 0x21
0x12f04: ret
0x12f05: pop es
0x12f06: pop ds
2018-12-25T11:58:26.103447321Z 37 PC: 12eed | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:26.104863048Z 59 PC: 12ef7 | Change current directory
2018-12-25T11:58:26.109327123Z 26 PC: 12f04 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6073,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:58:26.008878319Z 26 PC: 12e7d | Set disk transfer address
2018-12-25T11:58:26.010544444Z 71 PC: 12e87 | Get current directory
2018-12-25T11:58:26.014176577Z 53 PC: 12e91 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:26.015437809Z 37 PC: 12ea1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:26.016993365Z 78 PC: 12f75 | Find first file
2018-12-25T11:58:26.023179986Z 78 PC: 12f75 | Find first file (See above)
2018-12-25T11:58:26.033568649Z 67 PC: 130d8 | Get or set file attributes
2018-12-25T11:58:26.052372138Z 61 PC: 12f81 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:58:26.063889907Z 63 PC: 12f8d | Read file or device (Read 26 bytes on handle 5)
2018-12-25T11:58:26.069987584Z 66 PC: 12f95 | Move file pointer
2018-12-25T11:58:26.071774Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:26.074304775Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:26.083710856Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:26.090734731Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:26.096864615Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:26.098105083Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:26.100585975Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:26.110182496Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:26.116470324Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:26.122984066Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:26.124658867Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:26.127041168Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:26.136488953Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:26.143524732Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:26.149751904Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:26.151137812Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:26.153947229Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:26.16341933Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:26.169825724Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:26.176781338Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:26.178055401Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:26.180513581Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:26.190854064Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:26.197097587Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:26.202984493Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:26.204654056Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:26.207267482Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:26.216426739Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:26.222816666Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:26.229108215Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:26.230290955Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:26.233924273Z 67 PC: 130d8 | Get or set file attributes (See above)
2018-12-25T11:58:26.243389983Z 61 PC: 12f81 | Open file (See above)
2018-12-25T11:58:26.250687531Z 63 PC: 12f8d | Read file or device (See above)
2018-12-25T11:58:26.257631359Z 66 PC: 12f95 | Move file pointer (See above)
2018-12-25T11:58:26.25889484Z 79 PC: 12f75 | Find next file (See above)
2018-12-25T11:58:26.261058299Z 59 PC: 12eb9 | Change current directory
2018-12-25T11:58:26.265278819Z 44 PC: 12ebf | Get time 0x12ebf: mov al, cl
0x12ec1: cwde
0x12ec2: cmp ax, 0x1e
0x12ec5: je 0x12eca
0x12ec7: jmp 0x12ed6
0x12ec9: nop
0x12eca: mov cx, 1
0x12ecd: jcxz 0x12ed6
0x12ecf: mov ax, 0xe07
0x12ed2: int 0x10
0x12ed4: loop 0x12ed2
0x12ed6: mov ah, 0x2a
0x12ed8: int 0x21
0x12eda: cmp dh, 0xc
0x12edd: jne 0x12ee4
0x12edf: cmp dl, 0x14
0x12ee2: jae 0x12f32
0x12ee4: mov ax, 0x2524
0x12ee7: lds dx, ptr [bp + 0x3ff]
0x12eeb: int 0x21
2018-12-25T11:58:26.267330894Z 42 PC: 12eda | Get date 0x12eda: cmp dh, 0xc
0x12edd: jne 0x12ee4
0x12edf: cmp dl, 0x14
0x12ee2: jae 0x12f32
0x12ee4: mov ax, 0x2524
0x12ee7: lds dx, ptr [bp + 0x3ff]
0x12eeb: int 0x21
0x12eed: push cs
0x12eee: pop ds
0x12eef: mov ah, 0x3b
0x12ef1: lea dx, word ptr [bp + 0x403]
0x12ef5: int 0x21
0x12ef7: mov ah, 0x1a
0x12ef9: mov dx, 0x80
0x12efc: cmp sp, 0x5049
0x12f00: je 0x12f05
0x12f02: int 0x21
0x12f04: ret
0x12f05: pop es
0x12f06: pop ds
2018-12-25T11:58:26.269241074Z 37 PC: 12eed | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:26.270457261Z 59 PC: 12ef7 | Change current directory
2018-12-25T11:58:26.274464373Z 26 PC: 12f04 | Set disk transfer address