Sample viewer

vx.netlux.org/Virus.DOS.VCL.375

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:47:30.655610762Z 26 PC: 12b40 | Set disk transfer address
2018-12-17T22:47:30.672586343Z 78 PC: 12a9e | Find first file
2018-12-17T22:47:30.680081782Z 61 PC: 12b49 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:47:30.686736413Z 63 PC: 12ab9 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:47:30.69386479Z 62 PC: 12abd | Close file
2018-12-17T22:47:30.695567745Z 67 PC: 12b54 | Get or set file attributes
2018-12-17T22:47:30.712288593Z 61 PC: 12b49 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:47:30.720476792Z 64 PC: 12b03 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:47:30.723836341Z 66 PC: 12b3b | Move file pointer
2018-12-17T22:47:30.725507524Z 64 PC: 12b15 | Write file or device (Write 375 bytes on handle 5)
2018-12-17T22:47:30.73494547Z 87 PC: 12b24 | Get or set file date and time
2018-12-17T22:47:30.73699598Z 62 PC: 12b28 | Close file
2018-12-17T22:47:30.744202792Z 67 PC: 12b54 | Get or set file attributes
2018-12-17T22:47:30.753854007Z 79 PC: 12a9e | Find next file
2018-12-17T22:47:30.756778535Z 61 PC: 12b49 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:47:30.763166424Z 63 PC: 12ab9 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:47:30.769401279Z 62 PC: 12abd | Close file
2018-12-17T22:47:30.771847142Z 67 PC: 12b54 | Get or set file attributes
2018-12-17T22:47:30.781915643Z 61 PC: 12b49 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:47:30.793021144Z 64 PC: 12b03 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:47:30.802164642Z 66 PC: 12b3b | Move file pointer
2018-12-17T22:47:30.803738285Z 64 PC: 12b15 | Write file or device (Write 375 bytes on handle 5)
2018-12-17T22:47:30.806347047Z 87 PC: 12b24 | Get or set file date and time
2018-12-17T22:47:30.808430682Z 62 PC: 12b28 | Close file
2018-12-17T22:47:30.81556627Z 67 PC: 12b54 | Get or set file attributes
2018-12-17T22:47:30.825067962Z 79 PC: 12a9e | Find next file
2018-12-17T22:47:30.828631978Z 61 PC: 12b49 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:47:30.835019775Z 63 PC: 12ab9 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:47:30.841239591Z 62 PC: 12abd | Close file
2018-12-17T22:47:30.844164235Z 67 PC: 12b54 | Get or set file attributes
2018-12-17T22:47:30.854098572Z 61 PC: 12b49 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:47:30.865833487Z 64 PC: 12b03 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:47:30.873345701Z 66 PC: 12b3b | Move file pointer
2018-12-17T22:47:30.875120683Z 64 PC: 12b15 | Write file or device (Write 375 bytes on handle 5)
2018-12-17T22:47:30.878070545Z 87 PC: 12b24 | Get or set file date and time
2018-12-17T22:47:30.881336876Z 62 PC: 12b28 | Close file
2018-12-17T22:47:30.888654421Z 67 PC: 12b54 | Get or set file attributes
2018-12-17T22:47:30.898305893Z 79 PC: 12a9e | Find next file
2018-12-17T22:47:30.901194002Z 61 PC: 12b49 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:47:30.908388365Z 63 PC: 12ab9 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:47:30.914567565Z 62 PC: 12abd | Close file
2018-12-17T22:47:30.917590533Z 67 PC: 12b54 | Get or set file attributes
2018-12-17T22:47:30.927745033Z 61 PC: 12b49 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:47:30.934219748Z 64 PC: 12b03 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:47:30.938057927Z 66 PC: 12b3b | Move file pointer
2018-12-17T22:47:30.939865805Z 64 PC: 12b15 | Write file or device (Write 375 bytes on handle 5)
2018-12-17T22:47:30.94282385Z 87 PC: 12b24 | Get or set file date and time
2018-12-17T22:47:30.944965537Z 62 PC: 12b28 | Close file
2018-12-17T22:47:30.953175362Z 67 PC: 12b54 | Get or set file attributes
2018-12-17T22:47:30.963171337Z 79 PC: 12a9e | Find next file
2018-12-17T22:47:30.965853518Z 61 PC: 12b49 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:47:30.972892078Z 63 PC: 12ab9 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:47:30.978990191Z 62 PC: 12abd | Close file
2018-12-17T22:47:30.981175428Z 67 PC: 12b54 | Get or set file attributes
2018-12-17T22:47:30.992637852Z 61 PC: 12b49 | Open file (Filename = 'PRINTA~1.COM�')
2018-12-17T22:47:31.00229183Z 64 PC: 12b03 | Write file or device (Write 3 bytes on handle 2)
2018-12-17T22:47:31.004896635Z 66 PC: 12b3b | Move file pointer
2018-12-17T22:47:31.006911874Z 64 PC: 12b15 | Write file or device (Write 375 bytes on handle 2)
2018-12-17T22:47:31.012888445Z 87 PC: 12b24 | Get or set file date and time
2018-12-17T22:47:31.014333746Z 62 PC: 12b28 | Close file
2018-12-17T22:47:31.017005437Z 67 PC: 12b54 | Get or set file attributes
2018-12-17T22:47:31.021205464Z 79 PC: 12a9e | Find next file
2018-12-17T22:47:31.027390766Z 61 PC: 12b49 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:47:31.034699823Z 63 PC: 12ab9 | Read file or device (Read 26 bytes on handle 2)
2018-12-17T22:47:31.040803308Z 62 PC: 12abd | Close file
2018-12-17T22:47:31.042519909Z 67 PC: 12b54 | Get or set file attributes
2018-12-17T22:47:31.052451276Z 61 PC: 12b49 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:47:31.058913051Z 64 PC: 12b03 | Write file or device (Write 3 bytes on handle 2)
2018-12-17T22:47:31.062351738Z 66 PC: 12b3b | Move file pointer
2018-12-17T22:47:31.064197219Z 64 PC: 12b15 | Write file or device (Write 375 bytes on handle 2)
2018-12-17T22:47:31.072185554Z 87 PC: 12b24 | Get or set file date and time
2018-12-17T22:47:31.073610821Z 62 PC: 12b28 | Close file
2018-12-17T22:47:31.082034853Z 67 PC: 12b54 | Get or set file attributes
2018-12-17T22:47:31.092692316Z 79 PC: 12a9e | Find next file
2018-12-17T22:47:31.095109812Z 61 PC: 12b49 | Open file (Filename = 'PAH.COM')
2018-12-17T22:47:31.101595793Z 63 PC: 12ab9 | Read file or device (Read 26 bytes on handle 2)
2018-12-17T22:47:31.108489437Z 62 PC: 12abd | Close file
2018-12-17T22:47:31.110145394Z 67 PC: 12b54 | Get or set file attributes
2018-12-17T22:47:31.120245386Z 61 PC: 12b49 | Open file (Filename = 'PAH.COM')
2018-12-17T22:47:31.132499911Z 64 PC: 12b03 | Write file or device (Write 3 bytes on handle 2)
2018-12-17T22:47:31.138896315Z 66 PC: 12b3b | Move file pointer
2018-12-17T22:47:31.140237234Z 64 PC: 12b15 | Write file or device (Write 375 bytes on handle 2)
2018-12-17T22:47:31.143560923Z 87 PC: 12b24 | Get or set file date and time
2018-12-17T22:47:31.145077857Z 62 PC: 12b28 | Close file
2018-12-17T22:47:31.152250244Z 67 PC: 12b54 | Get or set file attributes
2018-12-17T22:47:31.162794867Z 79 PC: 12a9e | Find next file
2018-12-17T22:47:31.165325595Z 61 PC: 12b49 | Open file (Filename = 'TEST.COM')
2018-12-17T22:47:31.171594147Z 63 PC: 12ab9 | Read file or device (Read 26 bytes on handle 2)
2018-12-17T22:47:31.17849144Z 62 PC: 12abd | Close file
2018-12-17T22:47:31.180254226Z 79 PC: 12a9e | Find next file
2018-12-17T22:47:31.183505935Z 60 PC: 12a6e | Create or truncate file
2018-12-17T22:47:31.524463108Z 64 PC: 12a7b | Write file or device (Write 21 bytes on handle 2)
2018-12-17T22:47:31.532600905Z 42 PC: 12a7f | Get date 0x12a7f: cmp dh, 0xb
0x12a82: jne 0x12a90
0x12a84: mov ah, 9
0x12a86: lea dx, word ptr [bp + 0x215]
0x12a8a: int 0x21
0x12a8c: mov ah, 7
0x12a8e: int 0x21
0x12a90: mov dx, 0x80
0x12a93: call 0x12b3c
0x12a96: ret
0x12a97: mov ah, 0x4e
0x12a99: mov cx, 7
0x12a9c: int 0x21
0x12a9e: jb 0x12aa7
0x12aa0: call 0x12aa8
0x12aa3: mov ah, 0x4f
0x12aa5: jmp 0x12a9c
0x12aa7: ret
0x12aa8: mov ax, 0x3d00
0x12aab: call 0x12b41
2018-12-17T22:47:31.535571373Z 26 PC: 12b40 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":9247,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:22:44.192557552Z 26 PC: 12b40 | Set disk transfer address
2018-12-25T12:22:44.194214362Z 78 PC: 12a9e | Find first file
2018-12-25T12:22:44.201612485Z 61 PC: 12b49 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:44.208982003Z 63 PC: 12ab9 | Read file or device (Read 26 bytes on handle 5)
2018-12-25T12:22:44.216977788Z 62 PC: 12abd | Close file
2018-12-25T12:22:44.219421832Z 67 PC: 12b54 | Get or set file attributes
2018-12-25T12:22:44.237488474Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:44.244768589Z 64 PC: 12b03 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:22:44.248426482Z 66 PC: 12b3b | Move file pointer
2018-12-25T12:22:44.250075466Z 64 PC: 12b15 | Write file or device (Write 375 bytes on handle 5)
2018-12-25T12:22:44.259242144Z 87 PC: 12b24 | Get or set file date and time
2018-12-25T12:22:44.262157992Z 62 PC: 12b28 | Close file
2018-12-25T12:22:44.271113974Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:44.28222654Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:44.286141505Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:44.293903303Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:44.300956228Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:44.304092183Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:44.315230268Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:44.322614839Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:44.325994178Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:44.32816928Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:44.331400007Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:44.333724222Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:44.343013644Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:44.354043123Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:44.357771184Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:44.366278129Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:44.373907691Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:44.376002774Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:44.387800088Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:44.395881852Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:44.399005801Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:44.401766106Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:44.404911235Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:44.406637424Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:44.415192621Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:44.426491578Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:44.429455193Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:44.436512766Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:44.443482936Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:44.445426932Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:44.45623353Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:44.464787273Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:44.467689863Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:44.469198679Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:44.472883556Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:44.474502545Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:44.48316697Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:44.495053084Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:44.498562133Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:44.505986745Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:44.513725262Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:44.515698133Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:44.520553741Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:44.526392906Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:44.530155508Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:44.531548201Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:44.538606913Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:44.540906159Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:44.543230308Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:44.548288002Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:44.556140428Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:44.563738104Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:44.571091413Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:44.57454658Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:44.585533131Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:44.593299298Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:44.596566107Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:44.597615344Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:44.602665285Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:44.604606471Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:44.6116736Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:44.622510263Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:44.625523249Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:44.632843257Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:44.639605179Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:44.641715175Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:44.652910221Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:44.661263556Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:44.664210608Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:44.665676222Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:44.669294879Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:44.671075232Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:44.782086549Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:44.893020255Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:44.895754482Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:44.903079646Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:44.904902028Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:44.90633981Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:44.908574399Z 60 PC: 12a6e | Create or truncate file
2018-12-25T12:22:45.355323804Z 64 PC: 12a7b | Write file or device (Write 21 bytes on handle 2)
2018-12-25T12:22:45.364468325Z 42 PC: 12a7f | Get date 0x12a7f: cmp dh, 0xb
0x12a82: jne 0x12a90
0x12a84: mov ah, 9
0x12a86: lea dx, word ptr [bp + 0x215]
0x12a8a: int 0x21
0x12a8c: mov ah, 7
0x12a8e: int 0x21
0x12a90: mov dx, 0x80
0x12a93: call 0x12b3c
0x12a96: ret
0x12a97: mov ah, 0x4e
0x12a99: mov cx, 7
0x12a9c: int 0x21
0x12a9e: jb 0x12aa7
0x12aa0: call 0x12aa8
0x12aa3: mov ah, 0x4f
0x12aa5: jmp 0x12a9c
0x12aa7: ret
0x12aa8: mov ax, 0x3d00
0x12aab: call 0x12b41
2018-12-25T12:22:45.367813599Z 26 PC: 12b40 | Set disk transfer address (See above)

{"DateBased":true,"Day":1,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":9247,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:22:44.803970433Z 26 PC: 12b40 | Set disk transfer address
2018-12-25T12:22:44.805114381Z 78 PC: 12a9e | Find first file
2018-12-25T12:22:44.809796866Z 61 PC: 12b49 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:44.813956932Z 63 PC: 12ab9 | Read file or device (Read 26 bytes on handle 5)
2018-12-25T12:22:44.82070058Z 62 PC: 12abd | Close file
2018-12-25T12:22:44.822861858Z 67 PC: 12b54 | Get or set file attributes
2018-12-25T12:22:45.33221023Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.339566194Z 64 PC: 12b03 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:22:45.343503654Z 66 PC: 12b3b | Move file pointer
2018-12-25T12:22:45.345110836Z 64 PC: 12b15 | Write file or device (Write 375 bytes on handle 5)
2018-12-25T12:22:45.355462355Z 87 PC: 12b24 | Get or set file date and time
2018-12-25T12:22:45.360566453Z 62 PC: 12b28 | Close file
2018-12-25T12:22:45.369254837Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.381152911Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.385249517Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.393648594Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.401264038Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.404042723Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.415571468Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.423574793Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.429230263Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.4313467Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.434725327Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.436709143Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.446105039Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.457387139Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.46066259Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.4693939Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.476987375Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.479559141Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.492196109Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.499659359Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.502702506Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.504694167Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.508666533Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.510352267Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.520621399Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.531929866Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.537768367Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.545492478Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.553999061Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.556375164Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.568828363Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.582706946Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.586044383Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.587626598Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.591190295Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.593092336Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.60587906Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.618676609Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.625069934Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.633806885Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.643148814Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.645690432Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.651240361Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.657142944Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.661091204Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.663075791Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.670638742Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.673326819Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.675823575Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.686857511Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.691154149Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.698423922Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.705954663Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.708398382Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.720947115Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.728634221Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.73334033Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.735132278Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.744261888Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.747109207Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.756005169Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.768043907Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.771651886Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.780464227Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.788001536Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.789956559Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.801773317Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.809404448Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.81243874Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.814532204Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.818525302Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.820199533Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.829269677Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.84067157Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.843817285Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.852162815Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.855089286Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.857429712Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.862731356Z 60 PC: 12a6e | Create or truncate file
2018-12-25T12:22:46.538811097Z 64 PC: 12a7b | Write file or device (Write 21 bytes on handle 2)
2018-12-25T12:22:46.548264431Z 42 PC: 12a7f | Get date 0x12a7f: cmp dh, 0xb
0x12a82: jne 0x12a90
0x12a84: mov ah, 9
0x12a86: lea dx, word ptr [bp + 0x215]
0x12a8a: int 0x21
0x12a8c: mov ah, 7
0x12a8e: int 0x21
0x12a90: mov dx, 0x80
0x12a93: call 0x12b3c
0x12a96: ret
0x12a97: mov ah, 0x4e
0x12a99: mov cx, 7
0x12a9c: int 0x21
0x12a9e: jb 0x12aa7
0x12aa0: call 0x12aa8
0x12aa3: mov ah, 0x4f
0x12aa5: jmp 0x12a9c
0x12aa7: ret
0x12aa8: mov ax, 0x3d00
0x12aab: call 0x12b41
2018-12-25T12:22:46.551191527Z 9 PC: 12a8c | Display string (String= 'Eddie has returned on tour (1993) ')
2018-12-25T12:22:46.556570406Z 7 PC: 12a90 | Direct console input without echo

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":9247,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:22:45.196060388Z 26 PC: 12b40 | Set disk transfer address
2018-12-25T12:22:45.197155072Z 78 PC: 12a9e | Find first file
2018-12-25T12:22:45.20384747Z 61 PC: 12b49 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:45.210818167Z 63 PC: 12ab9 | Read file or device (Read 26 bytes on handle 5)
2018-12-25T12:22:45.217730563Z 62 PC: 12abd | Close file
2018-12-25T12:22:45.220205757Z 67 PC: 12b54 | Get or set file attributes
2018-12-25T12:22:45.355262667Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.362989105Z 64 PC: 12b03 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:22:45.367463153Z 66 PC: 12b3b | Move file pointer
2018-12-25T12:22:45.369297887Z 64 PC: 12b15 | Write file or device (Write 375 bytes on handle 5)
2018-12-25T12:22:45.378519966Z 87 PC: 12b24 | Get or set file date and time
2018-12-25T12:22:45.381534424Z 62 PC: 12b28 | Close file
2018-12-25T12:22:45.390688872Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.401626197Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.405289948Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.417575605Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.42486149Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.427392422Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.438675259Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.447158778Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.450609099Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.452925322Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.456241223Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.458225141Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.467350162Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.478793725Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.481818886Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.489903864Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.497682265Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.500582474Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.512706421Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.521123608Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.524753194Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.527152014Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.530078653Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.53159923Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.546018299Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.560262069Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.568265894Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.57619696Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.585625771Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.588999741Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.606866015Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.616099571Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.619212181Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.620856593Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.624626165Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.626787925Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.635875349Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.648310556Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.651498224Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.659197992Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.668165369Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.670987299Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.67640716Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.683306606Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.686794892Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.688447606Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.696168371Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.697999393Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.700925188Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.706300606Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.710496188Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.719350671Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.72694837Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.730520951Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.743325291Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.750819508Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.754674525Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.756512853Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.766055844Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.768530605Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.780695777Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.796185117Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.800174012Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.808264047Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.815539999Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.817918927Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.832702606Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.842232266Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.846013349Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.848229704Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.851111745Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.852786999Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.862466887Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.874009827Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.877408501Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.885816432Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.888586375Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.890441311Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.893603577Z 60 PC: 12a6e | Create or truncate file
2018-12-25T12:22:46.539072215Z 64 PC: 12a7b | Write file or device (Write 21 bytes on handle 2)
2018-12-25T12:22:46.548919656Z 42 PC: 12a7f | Get date 0x12a7f: cmp dh, 0xb
0x12a82: jne 0x12a90
0x12a84: mov ah, 9
0x12a86: lea dx, word ptr [bp + 0x215]
0x12a8a: int 0x21
0x12a8c: mov ah, 7
0x12a8e: int 0x21
0x12a90: mov dx, 0x80
0x12a93: call 0x12b3c
0x12a96: ret
0x12a97: mov ah, 0x4e
0x12a99: mov cx, 7
0x12a9c: int 0x21
0x12a9e: jb 0x12aa7
0x12aa0: call 0x12aa8
0x12aa3: mov ah, 0x4f
0x12aa5: jmp 0x12a9c
0x12aa7: ret
0x12aa8: mov ax, 0x3d00
0x12aab: call 0x12b41
2018-12-25T12:22:46.55248233Z 26 PC: 12b40 | Set disk transfer address (See above)

{"DateBased":true,"Day":1,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":9247,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:22:45.443695564Z 26 PC: 12b40 | Set disk transfer address
2018-12-25T12:22:45.445046838Z 78 PC: 12a9e | Find first file
2018-12-25T12:22:45.454068306Z 61 PC: 12b49 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:45.461420131Z 63 PC: 12ab9 | Read file or device (Read 26 bytes on handle 5)
2018-12-25T12:22:45.468840534Z 62 PC: 12abd | Close file
2018-12-25T12:22:45.471996901Z 67 PC: 12b54 | Get or set file attributes
2018-12-25T12:22:45.490235184Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.497940652Z 64 PC: 12b03 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:22:45.502658205Z 66 PC: 12b3b | Move file pointer
2018-12-25T12:22:45.504817704Z 64 PC: 12b15 | Write file or device (Write 375 bytes on handle 5)
2018-12-25T12:22:45.514824778Z 87 PC: 12b24 | Get or set file date and time
2018-12-25T12:22:45.517874003Z 62 PC: 12b28 | Close file
2018-12-25T12:22:45.526885603Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.543844862Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.551100575Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.559463812Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.567222263Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.569131936Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.581089373Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.58883943Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.592002007Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.594556517Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.597462364Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.598998699Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.607795559Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.620498163Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.629077755Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.636480849Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.644557572Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.646991372Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.658943524Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.667737973Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.670952767Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.672568132Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.67737622Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.679440466Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.687999052Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.700057979Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.702972336Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.716388831Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.724222502Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.726690767Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.738556681Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.746570702Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.751167405Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.753174445Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.756758994Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.760036698Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.768764212Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.785894939Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.789954034Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.797767881Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.805217999Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.808541609Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.814243658Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.819894805Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:45.823542904Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:45.826350203Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:45.835183385Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:45.837093512Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:45.839867818Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:45.845501741Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:45.854395073Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:45.86312315Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:45.870830922Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:45.880416821Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:46.035439106Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:46.043389214Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:46.046905744Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:46.049224044Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:46.33272304Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:46.334562409Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:46.476404535Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:46.537973781Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:46.541175264Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:46.549543477Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:46.558473423Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:46.560991658Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:46.572903768Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:46.578406776Z 64 PC: 12b03 | Write file or device (See above)
2018-12-25T12:22:46.581393332Z 66 PC: 12b3b | Move file pointer (See above)
2018-12-25T12:22:46.582866747Z 64 PC: 12b15 | Write file or device (See above)
2018-12-25T12:22:46.586465102Z 87 PC: 12b24 | Get or set file date and time (See above)
2018-12-25T12:22:46.588114598Z 62 PC: 12b28 | Close file (See above)
2018-12-25T12:22:46.596559659Z 67 PC: 12b54 | Get or set file attributes (See above)
2018-12-25T12:22:46.603730979Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:46.606183867Z 61 PC: 12b49 | Open file (See above)
2018-12-25T12:22:46.611088798Z 63 PC: 12ab9 | Read file or device (See above)
2018-12-25T12:22:46.616862256Z 62 PC: 12abd | Close file (See above)
2018-12-25T12:22:46.618346827Z 79 PC: 12a9e | Find next file (See above)
2018-12-25T12:22:46.620162593Z 60 PC: 12a6e | Create or truncate file
2018-12-25T12:22:46.969568793Z 64 PC: 12a7b | Write file or device (Write 21 bytes on handle 2)
2018-12-25T12:22:46.979167238Z 42 PC: 12a7f | Get date 0x12a7f: cmp dh, 0xb
0x12a82: jne 0x12a90
0x12a84: mov ah, 9
0x12a86: lea dx, word ptr [bp + 0x215]
0x12a8a: int 0x21
0x12a8c: mov ah, 7
0x12a8e: int 0x21
0x12a90: mov dx, 0x80
0x12a93: call 0x12b3c
0x12a96: ret
0x12a97: mov ah, 0x4e
0x12a99: mov cx, 7
0x12a9c: int 0x21
0x12a9e: jb 0x12aa7
0x12aa0: call 0x12aa8
0x12aa3: mov ah, 0x4f
0x12aa5: jmp 0x12a9c
0x12aa7: ret
0x12aa8: mov ax, 0x3d00
0x12aab: call 0x12b41
2018-12-25T12:22:46.982053543Z 9 PC: 12a8c | Display string (String= 'Eddie has returned on tour (1993) ')
2018-12-25T12:22:46.985662636Z 7 PC: 12a90 | Direct console input without echo