Sample viewer

vx.netlux.org/Virus.DOS.ShyDemon.1608

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:48:51.231428314Z 53 PC: 12a7d | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:48:51.234239559Z 53 PC: 12a8c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:48:51.235992691Z 37 PC: 12a95 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:48:51.237673545Z 53 PC: 12a9b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:48:51.239409269Z 37 PC: 12ab1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:48:51.242224856Z 26 PC: 12ac2 | Set disk transfer address
2018-12-17T22:48:51.243783879Z 71 PC: 12acb | Get current directory
2018-12-17T22:48:51.247324802Z 59 PC: 12ad2 | Change current directory
2018-12-17T22:48:51.253003505Z 78 PC: 12b94 | Find first file
2018-12-17T22:48:51.260236305Z 59 PC: 12ae5 | Change current directory
2018-12-17T22:48:51.266238998Z 78 PC: 12b94 | Find first file
2018-12-17T22:48:51.272792532Z 67 PC: 12bac | Get or set file attributes
2018-12-17T22:48:51.277017218Z 67 PC: 12bbb | Get or set file attributes
2018-12-17T22:48:51.28964759Z 61 PC: 12bc3 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:48:51.294660949Z 87 PC: 12bc8 | Get or set file date and time
2018-12-17T22:48:51.29655254Z 63 PC: 12bdc | Read file or device (Read 6 bytes on handle 5)
2018-12-17T22:48:51.301336765Z 66 PC: 12e90 | Move file pointer
2018-12-17T22:48:51.302720179Z 64 PC: 12bfc | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:48:51.305661716Z 42 PC: 12c11 | Get date 0x12c11: mov word ptr ds:[bp + 0x749], dx
0x12c16: rol dx, 1
0x12c18: rol dx, 1
0x12c1a: rol dx, 1
0x12c1c: rol dx, 1
0x12c1e: rol dx, 1
0x12c20: rol dx, 1
0x12c22: rol dx, 1
0x12c24: rol dx, 1
0x12c26: mov word ptr ds:[bp + 0x74b], dx
0x12c2b: call 0x12c4b
0x12c2e: mov al, 2
0x12c30: call 0x12e8a
0x12c33: call 0x13049
0x12c36: pop cx
0x12c37: mov byte ptr ds:[bp + 0x6fd], ch
0x12c3c: push bx
0x12c3d: pop bx
0x12c3e: call 0x12e6b
0x12c41: mov ah, 0x4f
2018-12-17T22:48:51.307504168Z 66 PC: 12e90 | Move file pointer
2018-12-17T22:48:51.308766846Z 64 PC: 1305d | Write file or device (Write 1608 bytes on handle 5)
2018-12-17T22:48:51.330515413Z 87 PC: 12e79 | Get or set file date and time
2018-12-17T22:48:51.33263555Z 62 PC: 12e7c | Close file
2018-12-17T22:48:51.342589893Z 67 PC: 12e89 | Get or set file attributes
2018-12-17T22:48:51.35850364Z 79 PC: 12b94 | Find next file
2018-12-17T22:48:51.361745441Z 67 PC: 12bac | Get or set file attributes
2018-12-17T22:48:51.367272652Z 67 PC: 12bbb | Get or set file attributes
2018-12-17T22:48:51.377907155Z 61 PC: 12bc3 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:48:51.385735115Z 87 PC: 12bc8 | Get or set file date and time
2018-12-17T22:48:51.387872029Z 63 PC: 12bdc | Read file or device (Read 6 bytes on handle 5)
2018-12-17T22:48:51.396402144Z 87 PC: 12e79 | Get or set file date and time
2018-12-17T22:48:51.399087596Z 62 PC: 12e7c | Close file
2018-12-17T22:48:51.40086203Z 67 PC: 12e89 | Get or set file attributes
2018-12-17T22:48:51.413279354Z 79 PC: 12b94 | Find next file
2018-12-17T22:48:51.417387931Z 67 PC: 12bac | Get or set file attributes
2018-12-17T22:48:51.429932857Z 67 PC: 12bbb | Get or set file attributes
2018-12-17T22:48:51.44082819Z 61 PC: 12bc3 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:48:51.449074214Z 87 PC: 12bc8 | Get or set file date and time
2018-12-17T22:48:51.450806764Z 63 PC: 12bdc | Read file or device (Read 6 bytes on handle 6)
2018-12-17T22:48:51.458195334Z 87 PC: 12e79 | Get or set file date and time
2018-12-17T22:48:51.461000082Z 62 PC: 12e7c | Close file
2018-12-17T22:48:51.462920267Z 67 PC: 12e89 | Get or set file attributes
2018-12-17T22:48:51.474260511Z 79 PC: 12b94 | Find next file
2018-12-17T22:48:51.477740656Z 67 PC: 12bac | Get or set file attributes
2018-12-17T22:48:51.4841523Z 67 PC: 12bbb | Get or set file attributes
2018-12-17T22:48:51.495289525Z 61 PC: 12bc3 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:48:51.503095238Z 87 PC: 12bc8 | Get or set file date and time
2018-12-17T22:48:51.504922259Z 63 PC: 12bdc | Read file or device (Read 6 bytes on handle 7)
2018-12-17T22:48:51.512068382Z 87 PC: 12e79 | Get or set file date and time
2018-12-17T22:48:51.514576584Z 62 PC: 12e7c | Close file
2018-12-17T22:48:51.517016084Z 67 PC: 12e89 | Get or set file attributes
2018-12-17T22:48:51.528330763Z 79 PC: 12b94 | Find next file
2018-12-17T22:48:51.531332752Z 67 PC: 12bac | Get or set file attributes
2018-12-17T22:48:51.53942892Z 67 PC: 12bbb | Get or set file attributes
2018-12-17T22:48:51.550332391Z 61 PC: 12bc3 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:48:51.558530122Z 87 PC: 12bc8 | Get or set file date and time
2018-12-17T22:48:51.561100319Z 63 PC: 12bdc | Read file or device (Read 6 bytes on handle 8)
2018-12-17T22:48:51.568422615Z 87 PC: 12e79 | Get or set file date and time
2018-12-17T22:48:51.570462559Z 62 PC: 12e7c | Close file
2018-12-17T22:48:51.573038641Z 67 PC: 12e89 | Get or set file attributes
2018-12-17T22:48:51.584381931Z 79 PC: 12b94 | Find next file
2018-12-17T22:48:51.587652555Z 67 PC: 12bac | Get or set file attributes
2018-12-17T22:48:51.595153678Z 67 PC: 12bbb | Get or set file attributes
2018-12-17T22:48:51.60479046Z 61 PC: 12bc3 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:48:51.609137848Z 87 PC: 12bc8 | Get or set file date and time
2018-12-17T22:48:51.61054855Z 63 PC: 12bdc | Read file or device (Read 6 bytes on handle 9)
2018-12-17T22:48:51.615144363Z 66 PC: 12e90 | Move file pointer
2018-12-17T22:48:51.616319761Z 64 PC: 12bfc | Write file or device (Write 6 bytes on handle 9)
2018-12-17T22:48:51.618146307Z 42 PC: 12c11 | Get date 0x12c11: mov word ptr ds:[bp + 0x749], dx
0x12c16: rol dx, 1
0x12c18: rol dx, 1
0x12c1a: rol dx, 1
0x12c1c: rol dx, 1
0x12c1e: rol dx, 1
0x12c20: rol dx, 1
0x12c22: rol dx, 1
0x12c24: rol dx, 1
0x12c26: mov word ptr ds:[bp + 0x74b], dx
0x12c2b: call 0x12c4b
0x12c2e: mov al, 2
0x12c30: call 0x12e8a
0x12c33: call 0x13049
0x12c36: pop cx
0x12c37: mov byte ptr ds:[bp + 0x6fd], ch
0x12c3c: push bx
0x12c3d: pop bx
0x12c3e: call 0x12e6b
0x12c41: mov ah, 0x4f
2018-12-17T22:48:51.621509425Z 66 PC: 12e90 | Move file pointer
2018-12-17T22:48:51.623828952Z 64 PC: 1305d | Write file or device (Write 1608 bytes on handle 9)
2018-12-17T22:48:51.632447729Z 87 PC: 12e79 | Get or set file date and time
2018-12-17T22:48:51.634498032Z 62 PC: 12e7c | Close file
2018-12-17T22:48:51.643466303Z 67 PC: 12e89 | Get or set file attributes
2018-12-17T22:48:51.655071379Z 79 PC: 12b94 | Find next file
2018-12-17T22:48:51.658914719Z 67 PC: 12bac | Get or set file attributes
2018-12-17T22:48:51.665352252Z 67 PC: 12bbb | Get or set file attributes
2018-12-17T22:48:51.675969634Z 61 PC: 12bc3 | Open file (Filename = 'PAH.COM')
2018-12-17T22:48:51.69051623Z 87 PC: 12bc8 | Get or set file date and time
2018-12-17T22:48:51.692138243Z 63 PC: 12bdc | Read file or device (Read 6 bytes on handle 9)
2018-12-17T22:48:51.699222064Z 87 PC: 12e79 | Get or set file date and time
2018-12-17T22:48:51.702206684Z 62 PC: 12e7c | Close file
2018-12-17T22:48:51.704749937Z 67 PC: 12e89 | Get or set file attributes
2018-12-17T22:48:51.716936196Z 79 PC: 12b94 | Find next file
2018-12-17T22:48:51.719980145Z 67 PC: 12bac | Get or set file attributes
2018-12-17T22:48:51.727259767Z 67 PC: 12bbb | Get or set file attributes
2018-12-17T22:48:51.738045293Z 61 PC: 12bc3 | Open file (Filename = 'TEST.COM')
2018-12-17T22:48:51.745757994Z 87 PC: 12bc8 | Get or set file date and time
2018-12-17T22:48:51.748386551Z 63 PC: 12bdc | Read file or device (Read 6 bytes on handle 10)
2018-12-17T22:48:51.755978127Z 87 PC: 12e79 | Get or set file date and time
2018-12-17T22:48:51.757801465Z 62 PC: 12e7c | Close file
2018-12-17T22:48:51.766164642Z 67 PC: 12e89 | Get or set file attributes
2018-12-17T22:48:51.777031379Z 79 PC: 12b94 | Find next file
2018-12-17T22:48:51.779889859Z 59 PC: 12af7 | Change current directory
2018-12-17T22:48:51.784074522Z 59 PC: 12b02 | Change current directory
2018-12-17T22:48:51.788432618Z 37 PC: 12b10 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:48:51.789573499Z 37 PC: 12b1e | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:48:51.791287294Z 42 PC: 12b26 | Get date 0x12b26: cmp dx, 0x31e
0x12b2a: jne 0x12b4e
0x12b2c: mov ah, 0xf
0x12b2e: int 0x10
0x12b30: mov ah, 0
0x12b32: int 0x10
0x12b34: mov ah, 1
0x12b36: mov cx, 0xca0
0x12b39: int 0x10
0x12b3b: mov ah, 9
0x12b3d: lea dx, word ptr [bp + 0x580]
0x12b41: int 0x21
0x12b43: mov ah, 0
0x12b45: int 0x16
0x12b47: mov ah, 1
0x12b49: mov cx, 0x130
0x12b4c: int 0x10
0x12b4e: push es
0x12b4f: cli
0x12b50: mov ax, ss

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":9698,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:23:39.448695175Z 53 PC: 12a7d | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:23:39.451241124Z 53 PC: 12a8c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:23:39.452630768Z 37 PC: 12a95 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:23:39.453647514Z 53 PC: 12a9b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:23:39.455170496Z 37 PC: 12ab1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:23:39.456421891Z 26 PC: 12ac2 | Set disk transfer address
2018-12-25T12:23:39.45746811Z 71 PC: 12acb | Get current directory
2018-12-25T12:23:39.460651356Z 59 PC: 12ad2 | Change current directory
2018-12-25T12:23:39.467147504Z 78 PC: 12b94 | Find first file
2018-12-25T12:23:39.47325036Z 59 PC: 12ae5 | Change current directory
2018-12-25T12:23:39.47596527Z 78 PC: 12b94 | Find first file (See above)
2018-12-25T12:23:39.480232585Z 67 PC: 12bac | Get or set file attributes
2018-12-25T12:23:39.484566361Z 67 PC: 12bbb | Get or set file attributes
2018-12-25T12:23:39.988333257Z 61 PC: 12bc3 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:23:40.009799348Z 87 PC: 12bc8 | Get or set file date and time
2018-12-25T12:23:40.011428957Z 63 PC: 12bdc | Read file or device (Read 6 bytes on handle 5)
2018-12-25T12:23:40.023311374Z 66 PC: 12e90 | Move file pointer
2018-12-25T12:23:40.031135755Z 64 PC: 12bfc | Write file or device (Write 6 bytes on handle 5)
2018-12-25T12:23:40.035235434Z 42 PC: 12c11 | Get date 0x12c11: mov word ptr ds:[bp + 0x749], dx
0x12c16: rol dx, 1
0x12c18: rol dx, 1
0x12c1a: rol dx, 1
0x12c1c: rol dx, 1
0x12c1e: rol dx, 1
0x12c20: rol dx, 1
0x12c22: rol dx, 1
0x12c24: rol dx, 1
0x12c26: mov word ptr ds:[bp + 0x74b], dx
0x12c2b: call 0x12c4b
0x12c2e: mov al, 2
0x12c30: call 0x12e8a
0x12c33: call 0x13049
0x12c36: pop cx
0x12c37: mov byte ptr ds:[bp + 0x6fd], ch
0x12c3c: push bx
0x12c3d: pop bx
0x12c3e: call 0x12e6b
0x12c41: mov ah, 0x4f
2018-12-25T12:23:40.043762016Z 66 PC: 12e90 | Move file pointer (See above)
2018-12-25T12:23:40.047996181Z 64 PC: 1305d | Write file or device (Write 1608 bytes on handle 5)
2018-12-25T12:23:40.061821599Z 87 PC: 12e79 | Get or set file date and time
2018-12-25T12:23:40.063902448Z 62 PC: 12e7c | Close file
2018-12-25T12:23:40.084211749Z 67 PC: 12e89 | Get or set file attributes
2018-12-25T12:23:40.108274639Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.111567977Z 67 PC: 12bac | Get or set file attributes (See above)
2018-12-25T12:23:40.130784604Z 67 PC: 12bbb | Get or set file attributes (See above)
2018-12-25T12:23:40.145147611Z 61 PC: 12bc3 | Open file (See above)
2018-12-25T12:23:40.155318428Z 87 PC: 12bc8 | Get or set file date and time (See above)
2018-12-25T12:23:40.159097452Z 63 PC: 12bdc | Read file or device (See above)
2018-12-25T12:23:40.167084981Z 87 PC: 12e79 | Get or set file date and time (See above)
2018-12-25T12:23:40.169046971Z 62 PC: 12e7c | Close file (See above)
2018-12-25T12:23:40.170806274Z 67 PC: 12e89 | Get or set file attributes (See above)
2018-12-25T12:23:40.184036385Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.187099373Z 67 PC: 12bac | Get or set file attributes (See above)
2018-12-25T12:23:40.193873843Z 67 PC: 12bbb | Get or set file attributes (See above)
2018-12-25T12:23:40.205288442Z 61 PC: 12bc3 | Open file (See above)
2018-12-25T12:23:40.212768504Z 87 PC: 12bc8 | Get or set file date and time (See above)
2018-12-25T12:23:40.214693389Z 63 PC: 12bdc | Read file or device (See above)
2018-12-25T12:23:40.223630781Z 87 PC: 12e79 | Get or set file date and time (See above)
2018-12-25T12:23:40.225757813Z 62 PC: 12e7c | Close file (See above)
2018-12-25T12:23:40.227882721Z 67 PC: 12e89 | Get or set file attributes (See above)
2018-12-25T12:23:40.24036608Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.243703867Z 67 PC: 12bac | Get or set file attributes (See above)
2018-12-25T12:23:40.250267369Z 67 PC: 12bbb | Get or set file attributes (See above)
2018-12-25T12:23:40.262270925Z 61 PC: 12bc3 | Open file (See above)
2018-12-25T12:23:40.270273849Z 87 PC: 12bc8 | Get or set file date and time (See above)
2018-12-25T12:23:40.272228339Z 63 PC: 12bdc | Read file or device (See above)
2018-12-25T12:23:40.279533494Z 87 PC: 12e79 | Get or set file date and time (See above)
2018-12-25T12:23:40.282259758Z 62 PC: 12e7c | Close file (See above)
2018-12-25T12:23:40.284053013Z 67 PC: 12e89 | Get or set file attributes (See above)
2018-12-25T12:23:40.298327408Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.302334324Z 67 PC: 12bac | Get or set file attributes (See above)
2018-12-25T12:23:40.308765798Z 67 PC: 12bbb | Get or set file attributes (See above)
2018-12-25T12:23:40.319566491Z 61 PC: 12bc3 | Open file (See above)
2018-12-25T12:23:40.327722251Z 87 PC: 12bc8 | Get or set file date and time (See above)
2018-12-25T12:23:40.32951254Z 63 PC: 12bdc | Read file or device (See above)
2018-12-25T12:23:40.336822447Z 87 PC: 12e79 | Get or set file date and time (See above)
2018-12-25T12:23:40.341501578Z 62 PC: 12e7c | Close file (See above)
2018-12-25T12:23:40.343560723Z 67 PC: 12e89 | Get or set file attributes (See above)
2018-12-25T12:23:40.355256339Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.358536693Z 67 PC: 12bac | Get or set file attributes (See above)
2018-12-25T12:23:40.365499395Z 67 PC: 12bbb | Get or set file attributes (See above)
2018-12-25T12:23:40.376263376Z 61 PC: 12bc3 | Open file (See above)
2018-12-25T12:23:40.383898402Z 87 PC: 12bc8 | Get or set file date and time (See above)
2018-12-25T12:23:40.386301993Z 63 PC: 12bdc | Read file or device (See above)
2018-12-25T12:23:40.393699805Z 66 PC: 12e90 | Move file pointer (See above)
2018-12-25T12:23:40.395635191Z 64 PC: 12bfc | Write file or device (See above)
2018-12-25T12:23:40.399275362Z 42 PC: 12c11 | Get date (See above)
2018-12-25T12:23:40.402389251Z 66 PC: 12e90 | Move file pointer (See above)
2018-12-25T12:23:40.404712585Z 64 PC: 1305d | Write file or device (See above)
2018-12-25T12:23:40.415506149Z 87 PC: 12e79 | Get or set file date and time (See above)
2018-12-25T12:23:40.41753213Z 62 PC: 12e7c | Close file (See above)
2018-12-25T12:23:40.426732768Z 67 PC: 12e89 | Get or set file attributes (See above)
2018-12-25T12:23:40.438659861Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.441863959Z 67 PC: 12bac | Get or set file attributes (See above)
2018-12-25T12:23:40.44848621Z 67 PC: 12bbb | Get or set file attributes (See above)
2018-12-25T12:23:40.457306011Z 61 PC: 12bc3 | Open file (See above)
2018-12-25T12:23:40.465238819Z 87 PC: 12bc8 | Get or set file date and time (See above)
2018-12-25T12:23:40.467000593Z 63 PC: 12bdc | Read file or device (See above)
2018-12-25T12:23:40.474732843Z 87 PC: 12e79 | Get or set file date and time (See above)
2018-12-25T12:23:40.477126672Z 62 PC: 12e7c | Close file (See above)
2018-12-25T12:23:40.479431567Z 67 PC: 12e89 | Get or set file attributes (See above)
2018-12-25T12:23:40.493797896Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.497378774Z 67 PC: 12bac | Get or set file attributes (See above)
2018-12-25T12:23:40.503452911Z 67 PC: 12bbb | Get or set file attributes (See above)
2018-12-25T12:23:40.514370511Z 61 PC: 12bc3 | Open file (See above)
2018-12-25T12:23:40.522540308Z 87 PC: 12bc8 | Get or set file date and time (See above)
2018-12-25T12:23:40.524498412Z 63 PC: 12bdc | Read file or device (See above)
2018-12-25T12:23:40.53205353Z 87 PC: 12e79 | Get or set file date and time (See above)
2018-12-25T12:23:40.53508038Z 62 PC: 12e7c | Close file (See above)
2018-12-25T12:23:40.543695701Z 67 PC: 12e89 | Get or set file attributes (See above)
2018-12-25T12:23:40.557951813Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.561363208Z 59 PC: 12af7 | Change current directory
2018-12-25T12:23:40.565995Z 59 PC: 12b02 | Change current directory
2018-12-25T12:23:40.570570132Z 37 PC: 12b10 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:23:40.571972838Z 37 PC: 12b1e | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:23:40.573547126Z 42 PC: 12b26 | Get date 0x12b26: cmp dx, 0x31e
0x12b2a: jne 0x12b4e
0x12b2c: mov ah, 0xf
0x12b2e: int 0x10
0x12b30: mov ah, 0
0x12b32: int 0x10
0x12b34: mov ah, 1
0x12b36: mov cx, 0xca0
0x12b39: int 0x10
0x12b3b: mov ah, 9
0x12b3d: lea dx, word ptr [bp + 0x580]
0x12b41: int 0x21
0x12b43: mov ah, 0
0x12b45: int 0x16
0x12b47: mov ah, 1
0x12b49: mov cx, 0x130
0x12b4c: int 0x10
0x12b4e: push es
0x12b4f: cli
0x12b50: mov ax, ss

{"DateBased":true,"Day":30,"Month":3,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":9698,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:23:39.416404088Z 53 PC: 12a7d | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:23:39.417849582Z 53 PC: 12a8c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:23:39.418998201Z 37 PC: 12a95 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:23:39.420077641Z 53 PC: 12a9b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:23:39.421432483Z 37 PC: 12ab1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:23:39.422933082Z 26 PC: 12ac2 | Set disk transfer address
2018-12-25T12:23:39.423884382Z 71 PC: 12acb | Get current directory
2018-12-25T12:23:39.426315621Z 59 PC: 12ad2 | Change current directory
2018-12-25T12:23:39.430545455Z 78 PC: 12b94 | Find first file
2018-12-25T12:23:39.434378386Z 59 PC: 12ae5 | Change current directory
2018-12-25T12:23:39.437126644Z 78 PC: 12b94 | Find first file (See above)
2018-12-25T12:23:39.441637434Z 67 PC: 12bac | Get or set file attributes
2018-12-25T12:23:39.44536252Z 67 PC: 12bbb | Get or set file attributes
2018-12-25T12:23:39.988441933Z 61 PC: 12bc3 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:23:40.009934622Z 87 PC: 12bc8 | Get or set file date and time
2018-12-25T12:23:40.012670228Z 63 PC: 12bdc | Read file or device (Read 6 bytes on handle 5)
2018-12-25T12:23:40.020455282Z 66 PC: 12e90 | Move file pointer
2018-12-25T12:23:40.0233151Z 64 PC: 12bfc | Write file or device (Write 6 bytes on handle 5)
2018-12-25T12:23:40.027079203Z 42 PC: 12c11 | Get date 0x12c11: mov word ptr ds:[bp + 0x749], dx
0x12c16: rol dx, 1
0x12c18: rol dx, 1
0x12c1a: rol dx, 1
0x12c1c: rol dx, 1
0x12c1e: rol dx, 1
0x12c20: rol dx, 1
0x12c22: rol dx, 1
0x12c24: rol dx, 1
0x12c26: mov word ptr ds:[bp + 0x74b], dx
0x12c2b: call 0x12c4b
0x12c2e: mov al, 2
0x12c30: call 0x12e8a
0x12c33: call 0x13049
0x12c36: pop cx
0x12c37: mov byte ptr ds:[bp + 0x6fd], ch
0x12c3c: push bx
0x12c3d: pop bx
0x12c3e: call 0x12e6b
0x12c41: mov ah, 0x4f
2018-12-25T12:23:40.030275466Z 66 PC: 12e90 | Move file pointer (See above)
2018-12-25T12:23:40.033820328Z 64 PC: 1305d | Write file or device (Write 1608 bytes on handle 5)
2018-12-25T12:23:40.046503704Z 87 PC: 12e79 | Get or set file date and time
2018-12-25T12:23:40.048936963Z 62 PC: 12e7c | Close file
2018-12-25T12:23:40.058244405Z 67 PC: 12e89 | Get or set file attributes
2018-12-25T12:23:40.072268356Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.075759282Z 67 PC: 12bac | Get or set file attributes (See above)
2018-12-25T12:23:40.082705042Z 67 PC: 12bbb | Get or set file attributes (See above)
2018-12-25T12:23:40.09467721Z 61 PC: 12bc3 | Open file (See above)
2018-12-25T12:23:40.108262669Z 87 PC: 12bc8 | Get or set file date and time (See above)
2018-12-25T12:23:40.110227553Z 63 PC: 12bdc | Read file or device (See above)
2018-12-25T12:23:40.118792945Z 87 PC: 12e79 | Get or set file date and time (See above)
2018-12-25T12:23:40.120585752Z 62 PC: 12e7c | Close file (See above)
2018-12-25T12:23:40.122321715Z 67 PC: 12e89 | Get or set file attributes (See above)
2018-12-25T12:23:40.134692288Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.13837033Z 67 PC: 12bac | Get or set file attributes (See above)
2018-12-25T12:23:40.145123095Z 67 PC: 12bbb | Get or set file attributes (See above)
2018-12-25T12:23:40.157118319Z 61 PC: 12bc3 | Open file (See above)
2018-12-25T12:23:40.165820058Z 87 PC: 12bc8 | Get or set file date and time (See above)
2018-12-25T12:23:40.167758711Z 63 PC: 12bdc | Read file or device (See above)
2018-12-25T12:23:40.179301977Z 87 PC: 12e79 | Get or set file date and time (See above)
2018-12-25T12:23:40.18173078Z 62 PC: 12e7c | Close file (See above)
2018-12-25T12:23:40.183830829Z 67 PC: 12e89 | Get or set file attributes (See above)
2018-12-25T12:23:40.195762477Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.199763444Z 67 PC: 12bac | Get or set file attributes (See above)
2018-12-25T12:23:40.206216706Z 67 PC: 12bbb | Get or set file attributes (See above)
2018-12-25T12:23:40.217092897Z 61 PC: 12bc3 | Open file (See above)
2018-12-25T12:23:40.225401606Z 87 PC: 12bc8 | Get or set file date and time (See above)
2018-12-25T12:23:40.227278752Z 63 PC: 12bdc | Read file or device (See above)
2018-12-25T12:23:40.235262921Z 87 PC: 12e79 | Get or set file date and time (See above)
2018-12-25T12:23:40.237907534Z 62 PC: 12e7c | Close file (See above)
2018-12-25T12:23:40.239744575Z 67 PC: 12e89 | Get or set file attributes (See above)
2018-12-25T12:23:40.250995828Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.254482009Z 67 PC: 12bac | Get or set file attributes (See above)
2018-12-25T12:23:40.261050476Z 67 PC: 12bbb | Get or set file attributes (See above)
2018-12-25T12:23:40.27268641Z 61 PC: 12bc3 | Open file (See above)
2018-12-25T12:23:40.282485666Z 87 PC: 12bc8 | Get or set file date and time (See above)
2018-12-25T12:23:40.284995086Z 63 PC: 12bdc | Read file or device (See above)
2018-12-25T12:23:40.292242061Z 87 PC: 12e79 | Get or set file date and time (See above)
2018-12-25T12:23:40.294242161Z 62 PC: 12e7c | Close file (See above)
2018-12-25T12:23:40.296616249Z 67 PC: 12e89 | Get or set file attributes (See above)
2018-12-25T12:23:40.308280832Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.311461725Z 67 PC: 12bac | Get or set file attributes (See above)
2018-12-25T12:23:40.318730537Z 67 PC: 12bbb | Get or set file attributes (See above)
2018-12-25T12:23:40.329755897Z 61 PC: 12bc3 | Open file (See above)
2018-12-25T12:23:40.337434333Z 87 PC: 12bc8 | Get or set file date and time (See above)
2018-12-25T12:23:40.339774826Z 63 PC: 12bdc | Read file or device (See above)
2018-12-25T12:23:40.347222788Z 66 PC: 12e90 | Move file pointer (See above)
2018-12-25T12:23:40.349105596Z 64 PC: 12bfc | Write file or device (See above)
2018-12-25T12:23:40.352847283Z 42 PC: 12c11 | Get date (See above)
2018-12-25T12:23:40.355812048Z 66 PC: 12e90 | Move file pointer (See above)
2018-12-25T12:23:40.358199041Z 64 PC: 1305d | Write file or device (See above)
2018-12-25T12:23:40.36933303Z 87 PC: 12e79 | Get or set file date and time (See above)
2018-12-25T12:23:40.371074477Z 62 PC: 12e7c | Close file (See above)
2018-12-25T12:23:40.37979328Z 67 PC: 12e89 | Get or set file attributes (See above)
2018-12-25T12:23:40.391746465Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.394799074Z 67 PC: 12bac | Get or set file attributes (See above)
2018-12-25T12:23:40.401147695Z 67 PC: 12bbb | Get or set file attributes (See above)
2018-12-25T12:23:40.412787233Z 61 PC: 12bc3 | Open file (See above)
2018-12-25T12:23:40.426339169Z 87 PC: 12bc8 | Get or set file date and time (See above)
2018-12-25T12:23:40.428353456Z 63 PC: 12bdc | Read file or device (See above)
2018-12-25T12:23:40.435612681Z 87 PC: 12e79 | Get or set file date and time (See above)
2018-12-25T12:23:40.439685998Z 62 PC: 12e7c | Close file (See above)
2018-12-25T12:23:40.441435003Z 67 PC: 12e89 | Get or set file attributes (See above)
2018-12-25T12:23:40.452885367Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.457194464Z 67 PC: 12bac | Get or set file attributes (See above)
2018-12-25T12:23:40.463754961Z 67 PC: 12bbb | Get or set file attributes (See above)
2018-12-25T12:23:40.474043953Z 61 PC: 12bc3 | Open file (See above)
2018-12-25T12:23:40.480933907Z 87 PC: 12bc8 | Get or set file date and time (See above)
2018-12-25T12:23:40.482884204Z 63 PC: 12bdc | Read file or device (See above)
2018-12-25T12:23:40.490380162Z 87 PC: 12e79 | Get or set file date and time (See above)
2018-12-25T12:23:40.493547874Z 62 PC: 12e7c | Close file (See above)
2018-12-25T12:23:40.502209981Z 67 PC: 12e89 | Get or set file attributes (See above)
2018-12-25T12:23:40.513188686Z 79 PC: 12b94 | Find next file (See above)
2018-12-25T12:23:40.516401378Z 59 PC: 12af7 | Change current directory
2018-12-25T12:23:40.521932884Z 59 PC: 12b02 | Change current directory
2018-12-25T12:23:40.527161507Z 37 PC: 12b10 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:23:40.529141948Z 37 PC: 12b1e | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:23:40.531795951Z 42 PC: 12b26 | Get date 0x12b26: cmp dx, 0x31e
0x12b2a: jne 0x12b4e
0x12b2c: mov ah, 0xf
0x12b2e: int 0x10
0x12b30: mov ah, 0
0x12b32: int 0x10
0x12b34: mov ah, 1
0x12b36: mov cx, 0xca0
0x12b39: int 0x10
0x12b3b: mov ah, 9
0x12b3d: lea dx, word ptr [bp + 0x580]
0x12b41: int 0x21
0x12b43: mov ah, 0
0x12b45: int 0x16
0x12b47: mov ah, 1
0x12b49: mov cx, 0x130
0x12b4c: int 0x10
0x12b4e: push es
0x12b4f: cli
0x12b50: mov ax, ss
2018-12-25T12:23:40.543630274Z 9 PC: 12b43 | Display string (Could not find end pointer)