Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Kye.7056

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:52:27.260506995Z 53 PC: 134ba | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:27.262635364Z 53 PC: 134ba | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:52:27.264653585Z 53 PC: 134ba | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:52:27.26647143Z 53 PC: 134ba | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:52:27.268251022Z 53 PC: 134ba | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:27.274955797Z 53 PC: 134ba | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:27.276620735Z 53 PC: 134ba | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:52:27.278228274Z 53 PC: 134ba | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:52:27.282092484Z 53 PC: 134ba | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:52:27.284067914Z 53 PC: 134ba | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:52:27.285950631Z 53 PC: 134ba | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:52:27.288221698Z 53 PC: 134ba | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:52:27.290089156Z 53 PC: 134ba | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:52:27.291907671Z 53 PC: 134ba | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:52:27.294455737Z 53 PC: 134ba | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:52:27.296004126Z 53 PC: 134ba | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:52:27.297474749Z 53 PC: 134ba | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:52:27.299283677Z 53 PC: 134ba | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:27.301294384Z 53 PC: 134ba | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:52:27.303148547Z 37 PC: 134cf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:27.304929032Z 37 PC: 134d7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:27.307707952Z 37 PC: 134df | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:27.309548941Z 37 PC: 134e7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:27.311825186Z 68 PC: 14217 | I/O control for devices (Set for = '')
2018-12-17T22:52:27.315635474Z 26 PC: 13329 | Set disk transfer address
2018-12-17T22:52:27.317442809Z 78 PC: 13335 | Find first file
2018-12-17T22:52:27.325000216Z 67 PC: 132d1 | Get or set file attributes
2018-12-17T22:52:27.333181294Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.350793569Z 61 PC: 13b80 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:52:27.358484335Z 66 PC: 14316 | Move file pointer
2018-12-17T22:52:27.361901234Z 66 PC: 14324 | Move file pointer
2018-12-17T22:52:27.36400183Z 66 PC: 14332 | Move file pointer
2018-12-17T22:52:27.366006446Z 66 PC: 13cb2 | Move file pointer
2018-12-17T22:52:27.368603564Z 64 PC: 13c53 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:27.381268134Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:27.390665017Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.402934334Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:27.405172248Z 79 PC: 13352 | Find next file
2018-12-17T22:52:27.408787219Z 67 PC: 132d1 | Get or set file attributes
2018-12-17T22:52:27.41517555Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.426574833Z 61 PC: 13b80 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:52:27.434020911Z 66 PC: 14316 | Move file pointer
2018-12-17T22:52:27.435926591Z 66 PC: 14324 | Move file pointer
2018-12-17T22:52:27.438941123Z 66 PC: 14332 | Move file pointer
2018-12-17T22:52:27.440646406Z 66 PC: 13cb2 | Move file pointer
2018-12-17T22:52:27.44238951Z 64 PC: 13c53 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:27.454471116Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:27.463329998Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.477228055Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:27.479911666Z 79 PC: 13352 | Find next file
2018-12-17T22:52:27.483774292Z 67 PC: 132d1 | Get or set file attributes
2018-12-17T22:52:27.490306112Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.502379542Z 61 PC: 13b80 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:52:27.510007421Z 66 PC: 14316 | Move file pointer
2018-12-17T22:52:27.511956993Z 66 PC: 14324 | Move file pointer
2018-12-17T22:52:27.514082135Z 66 PC: 14332 | Move file pointer
2018-12-17T22:52:27.51716146Z 66 PC: 13cb2 | Move file pointer
2018-12-17T22:52:27.51934972Z 64 PC: 13c53 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:27.530990587Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:27.541599126Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.554745701Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:27.556030946Z 79 PC: 13352 | Find next file
2018-12-17T22:52:27.560868563Z 67 PC: 132d1 | Get or set file attributes
2018-12-17T22:52:27.567688014Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.578268519Z 61 PC: 13b80 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:52:27.585863116Z 66 PC: 14316 | Move file pointer
2018-12-17T22:52:27.588310904Z 66 PC: 14324 | Move file pointer
2018-12-17T22:52:27.590147754Z 66 PC: 14332 | Move file pointer
2018-12-17T22:52:27.592024299Z 66 PC: 13cb2 | Move file pointer
2018-12-17T22:52:27.595146254Z 64 PC: 13c53 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:27.606002067Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:27.616249716Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.629050683Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:27.631133867Z 79 PC: 13352 | Find next file
2018-12-17T22:52:27.634714864Z 67 PC: 132d1 | Get or set file attributes
2018-12-17T22:52:27.642004016Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.653483961Z 61 PC: 13b80 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:52:27.661409409Z 66 PC: 14316 | Move file pointer
2018-12-17T22:52:27.663465451Z 66 PC: 14324 | Move file pointer
2018-12-17T22:52:27.666661816Z 66 PC: 14332 | Move file pointer
2018-12-17T22:52:27.668635223Z 66 PC: 13cb2 | Move file pointer
2018-12-17T22:52:27.670586268Z 64 PC: 13c53 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:27.682913715Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:27.691940171Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.703259714Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:27.705731107Z 79 PC: 13352 | Find next file
2018-12-17T22:52:27.709543659Z 67 PC: 132d1 | Get or set file attributes
2018-12-17T22:52:27.716003564Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.727721255Z 61 PC: 13b80 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:52:27.741357211Z 66 PC: 14316 | Move file pointer
2018-12-17T22:52:27.743731401Z 66 PC: 14324 | Move file pointer
2018-12-17T22:52:27.74673369Z 66 PC: 14332 | Move file pointer
2018-12-17T22:52:27.748807346Z 66 PC: 13cb2 | Move file pointer
2018-12-17T22:52:27.750787565Z 64 PC: 13c53 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:27.761687381Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:27.771196363Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.782686868Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:27.784353789Z 79 PC: 13352 | Find next file
2018-12-17T22:52:27.789047106Z 67 PC: 132d1 | Get or set file attributes
2018-12-17T22:52:27.795717747Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.807009849Z 61 PC: 13b80 | Open file (Filename = 'PAH.COM')
2018-12-17T22:52:27.815356949Z 66 PC: 14316 | Move file pointer
2018-12-17T22:52:27.817223846Z 66 PC: 14324 | Move file pointer
2018-12-17T22:52:27.819072639Z 66 PC: 14332 | Move file pointer
2018-12-17T22:52:27.821714321Z 66 PC: 13cb2 | Move file pointer
2018-12-17T22:52:27.823651851Z 64 PC: 13c53 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:27.834486433Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:27.843752871Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.854715874Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:27.856010917Z 79 PC: 13352 | Find next file
2018-12-17T22:52:27.859531Z 26 PC: 13329 | Set disk transfer address
2018-12-17T22:52:27.861618802Z 78 PC: 13335 | Find first file
2018-12-17T22:52:27.868742965Z 26 PC: 13329 | Set disk transfer address
2018-12-17T22:52:27.870555239Z 78 PC: 13335 | Find first file
2018-12-17T22:52:27.884256046Z 67 PC: 132d1 | Get or set file attributes
2018-12-17T22:52:27.890599191Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.901696337Z 61 PC: 13b80 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:52:27.910047225Z 63 PC: 13c12 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:27.917455591Z 63 PC: 13c12 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:27.920857371Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:27.924847577Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:27.936829324Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:27.938639054Z 79 PC: 13352 | Find next file
2018-12-17T22:52:27.943586057Z 48 PC: 13d42 | Get DOS version
2018-12-17T22:52:27.946355159Z 67 PC: 132d1 | Get or set file attributes
2018-12-17T22:52:27.953026641Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:28.187338635Z 61 PC: 13b80 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:52:28.195000858Z 61 PC: 13b80 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:52:28.202483164Z 60 PC: 13b80 | Create or truncate file
2018-12-17T22:52:28.28910881Z 63 PC: 13c53 | Read file or device (Read 7056 bytes on handle 6)
2018-12-17T22:52:28.299412134Z 64 PC: 13c53 | Write file or device (Write 7056 bytes on handle 7)
2018-12-17T22:52:28.309606054Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:28.317567008Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:28.32883216Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:28.337700449Z 64 PC: 13c53 | Write file or device (Write 2960 bytes on handle 7)
2018-12-17T22:52:28.34737869Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:28.35084451Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:28.353073708Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:28.355338622Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:28.365072407Z 65 PC: 13cc9 | Delete file (Filename = 'TEST.EXE')
2018-12-17T22:52:28.378969833Z 86 PC: 13d0d | Rename file
2018-12-17T22:52:28.391485684Z 61 PC: 13b80 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:52:28.400163625Z 64 PC: 13c12 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:28.408072713Z 64 PC: 13c12 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:28.411267374Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:28.421412792Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:28.435590295Z 25 PC: 13dcf | Get default drive
2018-12-17T22:52:28.437052241Z 71 PC: 13de2 | Get current directory
2018-12-17T22:52:28.441423913Z 14 PC: 13e28 | Set default drive (Drive = 'A')
2018-12-17T22:52:28.443569463Z 25 PC: 13e2c | Get default drive
2018-12-17T22:52:28.445096722Z 59 PC: 13e96 | Change current directory
2018-12-17T22:52:28.450140327Z 26 PC: 13329 | Set disk transfer address
2018-12-17T22:52:28.45249503Z 78 PC: 13335 | Find first file
2018-12-17T22:52:28.45963388Z 67 PC: 132d1 | Get or set file attributes
2018-12-17T22:52:28.466115556Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:28.480693601Z 61 PC: 13b80 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:52:28.493224009Z 63 PC: 13c12 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:28.50139088Z 63 PC: 13c12 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:28.508916197Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:28.511176513Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:28.522439921Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.525006622Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.532421612Z 26 PC: 13329 | Set disk transfer address
2018-12-17T22:52:28.533956445Z 78 PC: 13335 | Find first file
2018-12-17T22:52:28.541759824Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.543379676Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.546774934Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.549209598Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.552392437Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.554026937Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.558118153Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.559674677Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.562936494Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.565216917Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.569229064Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.570793012Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.574674043Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.576216751Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.579833886Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.582342047Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.585597362Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.5869272Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.590562218Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.591843135Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.594785983Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.597034387Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.600081871Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.60149163Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.60553242Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.606978487Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.610071005Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.612827143Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.615814104Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.617074412Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.621989365Z 14 PC: 13e28 | Set default drive (Drive = 'C')
2018-12-17T22:52:28.623659913Z 25 PC: 13e2c | Get default drive
2018-12-17T22:52:28.625039585Z 59 PC: 13e96 | Change current directory
2018-12-17T22:52:28.630232429Z 26 PC: 13329 | Set disk transfer address
2018-12-17T22:52:28.63248516Z 78 PC: 13335 | Find first file
2018-12-17T22:52:28.639101189Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.640539521Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.644352403Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.64595289Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.649941261Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:28.651985772Z 79 PC: 13352 | Find next file
2018-12-17T22:52:28.655425333Z 25 PC: 13dcf | Get default drive
2018-12-17T22:52:28.657168318Z 71 PC: 13de2 | Get current directory
2018-12-17T22:52:28.662827509Z 14 PC: 13e28 | Set default drive (Drive = 'C')
2018-12-17T22:52:28.664695849Z 25 PC: 13e2c | Get default drive
2018-12-17T22:52:28.666313928Z 59 PC: 13e96 | Change current directory
2018-12-17T22:52:28.674887753Z 26 PC: 13329 | Set disk transfer address
2018-12-17T22:52:28.676580954Z 78 PC: 13335 | Find first file
2018-12-17T22:52:28.686525646Z 67 PC: 132d1 | Get or set file attributes
2018-12-17T22:52:28.694341868Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:29.036366069Z 61 PC: 13b80 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:52:29.044170149Z 63 PC: 13c12 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:29.052719348Z 63 PC: 13c12 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:29.056245312Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:29.059357258Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:29.070472888Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:29.071802646Z 79 PC: 13352 | Find next file
2018-12-17T22:52:29.075514118Z 48 PC: 13d42 | Get DOS version
2018-12-17T22:52:29.077752894Z 67 PC: 132d1 | Get or set file attributes
2018-12-17T22:52:29.08486831Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:29.09538749Z 61 PC: 13b80 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:52:29.103676812Z 61 PC: 13b80 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:52:29.112827521Z 60 PC: 13b80 | Create or truncate file
2018-12-17T22:52:29.126227183Z 63 PC: 13c53 | Read file or device (Read 7056 bytes on handle 6)
2018-12-17T22:52:29.135426413Z 64 PC: 13c53 | Write file or device (Write 7056 bytes on handle 7)
2018-12-17T22:52:29.147349661Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.154566608Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.168379986Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.176165581Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.185533119Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.194153902Z 64 PC: 13c53 | Write file or device (Write 3016 bytes on handle 7)
2018-12-17T22:52:29.204371967Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.206574765Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:29.208939337Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:29.211544711Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:29.220388875Z 65 PC: 13cc9 | Delete file (Filename = 'ATTRIB.EXE')
2018-12-17T22:52:29.231890069Z 86 PC: 13d0d | Rename file
2018-12-17T22:52:29.245336739Z 61 PC: 13b80 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:52:29.254834721Z 64 PC: 13c12 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:29.261607854Z 64 PC: 13c12 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:29.265937798Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:29.273703165Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:29.284363731Z 14 PC: 13e28 | Set default drive (Drive = 'C')
2018-12-17T22:52:29.286821759Z 25 PC: 13e2c | Get default drive
2018-12-17T22:52:29.288502936Z 59 PC: 13e96 | Change current directory
2018-12-17T22:52:29.292732511Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:29.295421803Z 79 PC: 13352 | Find next file
2018-12-17T22:52:29.298892273Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:29.30055173Z 79 PC: 13352 | Find next file
2018-12-17T22:52:29.304399248Z 25 PC: 13dcf | Get default drive
2018-12-17T22:52:29.30568333Z 71 PC: 13de2 | Get current directory
2018-12-17T22:52:29.308809211Z 14 PC: 13e28 | Set default drive (Drive = 'C')
2018-12-17T22:52:29.31155527Z 25 PC: 13e2c | Get default drive
2018-12-17T22:52:29.313218875Z 59 PC: 13e96 | Change current directory
2018-12-17T22:52:29.319996026Z 26 PC: 13329 | Set disk transfer address
2018-12-17T22:52:29.322900322Z 78 PC: 13335 | Find first file
2018-12-17T22:52:29.334019489Z 67 PC: 132d1 | Get or set file attributes
2018-12-17T22:52:29.340640497Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:29.352058966Z 61 PC: 13b80 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:52:29.360194228Z 63 PC: 13c12 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:29.366680673Z 63 PC: 13c12 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:29.371712375Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:29.374424159Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:29.384818936Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:29.387225767Z 79 PC: 13352 | Find next file
2018-12-17T22:52:29.391474308Z 48 PC: 13d42 | Get DOS version
2018-12-17T22:52:29.393480386Z 67 PC: 132d1 | Get or set file attributes
2018-12-17T22:52:29.401831183Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:29.413108257Z 61 PC: 13b80 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:52:29.420574562Z 61 PC: 13b80 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:52:29.432345544Z 60 PC: 13b80 | Create or truncate file
2018-12-17T22:52:29.445974897Z 63 PC: 13c53 | Read file or device (Read 7056 bytes on handle 6)
2018-12-17T22:52:29.454493428Z 64 PC: 13c53 | Write file or device (Write 7056 bytes on handle 7)
2018-12-17T22:52:29.465038367Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.47296136Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.48179805Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.489864083Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.49918413Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.506148974Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.51596908Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.52433734Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.533961258Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.542269495Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.55168373Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.56064291Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.570958548Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.578534639Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.588986574Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.597058917Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.606430552Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.613725305Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.624674022Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.633955568Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.64391731Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.653668909Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.663849352Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.672094341Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.682934574Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.690896771Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.700174088Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.709004206Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.717567161Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.722867297Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.730708036Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.737502609Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.745396659Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.753908999Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.765515331Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.774259558Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.787632258Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.7954478Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.805697002Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.81340381Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.822907973Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.83145539Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.842062414Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.849643766Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.859881808Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.867773823Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.877064657Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.885721969Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.895283701Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.903580265Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.91409095Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.921753794Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.931160305Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.93974998Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.949662902Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.957150527Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.967976293Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.975992001Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:29.98605856Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:29.994219Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.003723033Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.01770049Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.042693519Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.054425187Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.064046741Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.075111947Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.086433805Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.094754976Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.105199245Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.11315495Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.122538567Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.13106816Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.140802225Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.148424544Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.159534454Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.168274522Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.177770771Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.186087053Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.199309691Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.207490589Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.218489441Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.226277791Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.236021234Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.244676993Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.254611896Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.262895106Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.273287488Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.281523058Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.290786901Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.298896144Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.308639887Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.316354099Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.326079938Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.333544641Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.344210757Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.352452549Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.362602956Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.371038383Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.38059243Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.388461331Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.399342041Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.411447611Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.420708277Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.42895587Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.438488768Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.446112378Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.456469074Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.465226073Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.474703948Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.482984863Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.492688271Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.500590535Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.51093646Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.518696097Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.52872726Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.5376491Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.547169514Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.55487055Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.564908877Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.572810861Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.582042242Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.590262814Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.606767568Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.614224726Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.624418896Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.632238616Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.641758949Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.650138911Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.661431914Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.668662888Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.678770996Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.686059898Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.69554173Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.703784664Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.712868899Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.720947674Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.731367168Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.739027577Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.748540498Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.757296756Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.767814303Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.775516552Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.798600234Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.806635569Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.816063669Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.827122303Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.837515787Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.845975478Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.856407445Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.864549991Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.874277664Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.883669316Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.893171616Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.901153149Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.912785561Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.920534076Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.929744588Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.937991429Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.947661725Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.953303654Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.960558722Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.965929942Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.973045739Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.981257545Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:30.990425387Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:30.997607728Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.007569662Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.014750421Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.025069926Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.032889095Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.043167362Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.051139568Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.060800956Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.068100379Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.078184Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.085289669Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.094269587Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.103027629Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.11235998Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.120447322Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.130662411Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.138107947Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.148196839Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.155695495Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.16583358Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.172013448Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.178655986Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.186668227Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.196165357Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.203865883Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.214345879Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.225522295Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.235152294Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.243044991Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.252300426Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.259781119Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.269779511Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.277629487Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.295899287Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.304387622Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.313752955Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.321059981Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.331265462Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.338921123Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.348583523Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.357403182Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.366738698Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.374355156Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.384631319Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.392548822Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.403132554Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.410537233Z 64 PC: 13c53 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:31.420408426Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.428203319Z 64 PC: 13c53 | Write file or device (Write 2384 bytes on handle 7)
2018-12-17T22:52:31.440843222Z 63 PC: 13c53 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:31.444090082Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:31.447221534Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:31.451451671Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:31.459784484Z 65 PC: 13cc9 | Delete file (Filename = 'SETUP.EXE')
2018-12-17T22:52:31.473426961Z 86 PC: 13d0d | Rename file
2018-12-17T22:52:31.487040925Z 61 PC: 13b80 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:52:31.494640651Z 64 PC: 13c12 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:31.502193168Z 64 PC: 13c12 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:31.505279636Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:31.513210645Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:31.52498898Z 14 PC: 13e28 | Set default drive (Drive = 'C')
2018-12-17T22:52:31.526696998Z 25 PC: 13e2c | Get default drive
2018-12-17T22:52:31.528483835Z 59 PC: 13e96 | Change current directory
2018-12-17T22:52:31.533630593Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:31.53486905Z 79 PC: 13352 | Find next file
2018-12-17T22:52:31.538661484Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:31.540042418Z 79 PC: 13352 | Find next file
2018-12-17T22:52:31.542962623Z 26 PC: 1334d | Set disk transfer address
2018-12-17T22:52:31.545357782Z 79 PC: 13352 | Find next file
2018-12-17T22:52:31.548856305Z 14 PC: 13e28 | Set default drive (Drive = 'A')
2018-12-17T22:52:31.550299025Z 25 PC: 13e2c | Get default drive
2018-12-17T22:52:31.552666202Z 59 PC: 13e96 | Change current directory
2018-12-17T22:52:31.557667466Z 42 PC: 13257 | Get date 0x13257: xor ah, ah
0x13259: les di, ptr [bp + 6]
0x1325c: stosw word ptr es:[di], ax
0x1325d: mov al, dl
0x1325f: les di, ptr [bp + 0xa]
0x13262: stosw word ptr es:[di], ax
0x13263: mov al, dh
0x13265: les di, ptr [bp + 0xe]
0x13268: stosw word ptr es:[di], ax
0x13269: xchg ax, cx
0x1326a: les di, ptr [bp + 0x12]
0x1326d: stosw word ptr es:[di], ax
0x1326e: pop bp
0x1326f: retf 0x10
0x13272: push bp
0x13273: mov bp, sp
0x13275: mov cx, word ptr [bp + 0xa]
0x13278: mov dh, byte ptr [bp + 8]
0x1327b: mov dl, byte ptr [bp + 6]
0x1327e: mov ah, 0x2b
2018-12-17T22:52:31.560462276Z 48 PC: 13d42 | Get DOS version
2018-12-17T22:52:31.563388172Z 61 PC: 13b80 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:52:31.570836234Z 60 PC: 13b80 | Create or truncate file
2018-12-17T22:52:31.583327789Z 66 PC: 13cb2 | Move file pointer
2018-12-17T22:52:31.586135844Z 63 PC: 13c53 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:52:31.595932316Z 64 PC: 13c53 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:52:31.60518098Z 63 PC: 13c53 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:52:31.61698316Z 64 PC: 13c53 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:52:31.629939749Z 63 PC: 13c53 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:52:31.638437632Z 64 PC: 13c53 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:52:31.647467595Z 63 PC: 13c53 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:52:31.655315948Z 64 PC: 13c53 | Write file or device (Write 912 bytes on handle 6)
2018-12-17T22:52:31.66501076Z 63 PC: 13c53 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:52:31.667775634Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:31.669999411Z 62 PC: 13bd0 | Close file
2018-12-17T22:52:31.680115604Z 67 PC: 132f8 | Get or set file attributes
2018-12-17T22:52:31.692390582Z 53 PC: 1342a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:31.6943218Z 37 PC: 13433 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:31.696361592Z 53 PC: 1342a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:52:31.701437246Z 37 PC: 13433 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:52:31.702697043Z 53 PC: 1342a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:52:31.704838606Z 37 PC: 13433 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:52:31.706648726Z 53 PC: 1342a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:52:31.708530381Z 37 PC: 13433 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:52:31.71118121Z 53 PC: 1342a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:31.712940715Z 37 PC: 13433 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:31.714639096Z 53 PC: 1342a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:31.721283467Z 37 PC: 13433 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:31.722838278Z 53 PC: 1342a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:52:31.724597934Z 37 PC: 13433 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:52:31.728818122Z 53 PC: 1342a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:52:31.732038831Z 37 PC: 13433 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:52:31.734137483Z 53 PC: 1342a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:52:31.735657158Z 37 PC: 13433 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:52:31.737085181Z 53 PC: 1342a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:52:31.739588924Z 37 PC: 13433 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:52:31.741214939Z 53 PC: 1342a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:52:31.74254127Z 37 PC: 13433 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:52:31.744904189Z 53 PC: 1342a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:52:31.746649698Z 37 PC: 13433 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:52:31.74972759Z 53 PC: 1342a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:52:31.751215174Z 37 PC: 13433 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:52:31.752450905Z 53 PC: 1342a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:52:31.755319353Z 37 PC: 13433 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:52:31.75696256Z 53 PC: 1342a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:52:31.758643077Z 37 PC: 13433 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:52:31.761096606Z 53 PC: 1342a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:52:31.762503589Z 37 PC: 13433 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:52:31.764859785Z 53 PC: 1342a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:52:31.766550782Z 37 PC: 13433 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:52:31.767906088Z 53 PC: 1342a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:31.770072808Z 37 PC: 13433 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:31.771396575Z 53 PC: 1342a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:52:31.772532328Z 37 PC: 13433 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:52:31.774204759Z 41 PC: 133e1 | Parse filename
2018-12-17T22:52:31.775624376Z 41 PC: 133ef | Parse filename
2018-12-17T22:52:31.778202078Z 75 PC: 133fa | Execute program
2018-12-17T22:52:31.795405655Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:31.796525148Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:52:31.798473518Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:52:31.799596167Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:52:31.800851596Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:31.802554645Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:31.803770639Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:52:31.806212105Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:52:31.807432848Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:52:31.808553944Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:52:31.810258937Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:52:31.811417874Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:52:31.813268621Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:52:31.815369597Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:52:31.817238799Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:52:31.820048667Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:52:31.824254919Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:52:31.825864061Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:31.827658612Z 53 PC: 1b1aa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:52:31.828937965Z 37 PC: 1b1bf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:31.830647146Z 37 PC: 1b1c7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:31.832053798Z 37 PC: 1b1cf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:31.833673832Z 37 PC: 1b1d7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:31.83679763Z 68 PC: 1bf07 | I/O control for devices (Set for = '')
2018-12-17T22:52:31.839253734Z 26 PC: 1b019 | Set disk transfer address
2018-12-17T22:52:31.84080062Z 78 PC: 1b025 | Find first file
2018-12-17T22:52:31.848537493Z 67 PC: 1afc1 | Get or set file attributes
2018-12-17T22:52:31.854570215Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:31.863049965Z 61 PC: 1b870 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:52:31.868330985Z 66 PC: 1c006 | Move file pointer
2018-12-17T22:52:31.869486796Z 66 PC: 1c014 | Move file pointer
2018-12-17T22:52:31.872562734Z 66 PC: 1c022 | Move file pointer
2018-12-17T22:52:31.874259071Z 66 PC: 1b9a2 | Move file pointer
2018-12-17T22:52:31.875885165Z 64 PC: 1b943 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:31.885339065Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:31.894142201Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:31.904578226Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:31.906568204Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:31.9100855Z 67 PC: 1afc1 | Get or set file attributes
2018-12-17T22:52:31.917677332Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:31.928255713Z 61 PC: 1b870 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:52:31.941112946Z 66 PC: 1c006 | Move file pointer
2018-12-17T22:52:31.944190747Z 66 PC: 1c014 | Move file pointer
2018-12-17T22:52:31.946012348Z 66 PC: 1c022 | Move file pointer
2018-12-17T22:52:31.94787643Z 66 PC: 1b9a2 | Move file pointer
2018-12-17T22:52:31.950947409Z 64 PC: 1b943 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:31.9615042Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:31.971739006Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:31.984873319Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:31.98592287Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:31.990063068Z 67 PC: 1afc1 | Get or set file attributes
2018-12-17T22:52:31.996036028Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.006345895Z 61 PC: 1b870 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:52:32.015028806Z 66 PC: 1c006 | Move file pointer
2018-12-17T22:52:32.016668526Z 66 PC: 1c014 | Move file pointer
2018-12-17T22:52:32.018398556Z 66 PC: 1c022 | Move file pointer
2018-12-17T22:52:32.021330063Z 66 PC: 1b9a2 | Move file pointer
2018-12-17T22:52:32.022939696Z 64 PC: 1b943 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:32.033260554Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:32.042259818Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.052244946Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.054213263Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.05765034Z 67 PC: 1afc1 | Get or set file attributes
2018-12-17T22:52:32.063483347Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.074191883Z 61 PC: 1b870 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:52:32.081741855Z 66 PC: 1c006 | Move file pointer
2018-12-17T22:52:32.083063007Z 66 PC: 1c014 | Move file pointer
2018-12-17T22:52:32.08471999Z 66 PC: 1c022 | Move file pointer
2018-12-17T22:52:32.086122564Z 66 PC: 1b9a2 | Move file pointer
2018-12-17T22:52:32.088301748Z 64 PC: 1b943 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:32.098775864Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:32.106996847Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.11762459Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.118831958Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.121923817Z 67 PC: 1afc1 | Get or set file attributes
2018-12-17T22:52:32.128408178Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.13838011Z 61 PC: 1b870 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:52:32.151289991Z 66 PC: 1c006 | Move file pointer
2018-12-17T22:52:32.153080785Z 66 PC: 1c014 | Move file pointer
2018-12-17T22:52:32.154751283Z 66 PC: 1c022 | Move file pointer
2018-12-17T22:52:32.157024603Z 66 PC: 1b9a2 | Move file pointer
2018-12-17T22:52:32.158760594Z 64 PC: 1b943 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:32.168983929Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:32.177202116Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.184982793Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.186910013Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.189185668Z 67 PC: 1afc1 | Get or set file attributes
2018-12-17T22:52:32.193896917Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.201742085Z 61 PC: 1b870 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:52:32.210692117Z 66 PC: 1c006 | Move file pointer
2018-12-17T22:52:32.21223765Z 66 PC: 1c014 | Move file pointer
2018-12-17T22:52:32.213914049Z 66 PC: 1c022 | Move file pointer
2018-12-17T22:52:32.2152292Z 66 PC: 1b9a2 | Move file pointer
2018-12-17T22:52:32.217341247Z 64 PC: 1b943 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:32.227815764Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:32.236524573Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.248785245Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.250378748Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.254544864Z 67 PC: 1afc1 | Get or set file attributes
2018-12-17T22:52:32.26086132Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.271451603Z 61 PC: 1b870 | Open file (Filename = 'PAH.COM')
2018-12-17T22:52:32.28086128Z 66 PC: 1c006 | Move file pointer
2018-12-17T22:52:32.282695716Z 66 PC: 1c014 | Move file pointer
2018-12-17T22:52:32.284360824Z 66 PC: 1c022 | Move file pointer
2018-12-17T22:52:32.286085904Z 66 PC: 1b9a2 | Move file pointer
2018-12-17T22:52:32.288026309Z 64 PC: 1b943 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:32.302402956Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:32.310692888Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.320409761Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.321940046Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.327584829Z 26 PC: 1b019 | Set disk transfer address
2018-12-17T22:52:32.329992983Z 78 PC: 1b025 | Find first file
2018-12-17T22:52:32.337516336Z 26 PC: 1b019 | Set disk transfer address
2018-12-17T22:52:32.339831875Z 78 PC: 1b025 | Find first file
2018-12-17T22:52:32.347579028Z 67 PC: 1afc1 | Get or set file attributes
2018-12-17T22:52:32.353338327Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.364007439Z 61 PC: 1b870 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:52:32.370905356Z 63 PC: 1b902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:32.377699569Z 63 PC: 1b902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:32.381443082Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:32.383246008Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.394228168Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.39548025Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.398559084Z 48 PC: 1ba32 | Get DOS version
2018-12-17T22:52:32.400945616Z 67 PC: 1afc1 | Get or set file attributes
2018-12-17T22:52:32.406876417Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.417606955Z 61 PC: 1b870 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:52:32.425010061Z 61 PC: 1b870 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:52:32.432337346Z 60 PC: 1b870 | Create or truncate file
2018-12-17T22:52:32.44551497Z 63 PC: 1b943 | Read file or device (Read 7056 bytes on handle 6)
2018-12-17T22:52:32.454331702Z 64 PC: 1b943 | Write file or device (Write 7056 bytes on handle 7)
2018-12-17T22:52:32.466201068Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:32.475168113Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 7)
2018-12-17T22:52:32.484870018Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:32.493685919Z 64 PC: 1b943 | Write file or device (Write 2960 bytes on handle 7)
2018-12-17T22:52:32.503416507Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:32.505906966Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:32.508888747Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:32.511197965Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:32.520449023Z 65 PC: 1b9b9 | Delete file (Filename = '$$$KYE.EXE')
2018-12-17T22:52:32.529106646Z 86 PC: 1b9fd | Rename file
2018-12-17T22:52:32.539579459Z 61 PC: 1b870 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:52:32.546800965Z 64 PC: 1b902 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:32.553355487Z 64 PC: 1b902 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:32.556739684Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:32.563472211Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.572360678Z 25 PC: 1babf | Get default drive
2018-12-17T22:52:32.574212547Z 71 PC: 1bad2 | Get current directory
2018-12-17T22:52:32.576747909Z 14 PC: 1bb18 | Set default drive (Drive = 'A')
2018-12-17T22:52:32.578575583Z 25 PC: 1bb1c | Get default drive
2018-12-17T22:52:32.579665691Z 59 PC: 1bb86 | Change current directory
2018-12-17T22:52:32.586803379Z 26 PC: 1b019 | Set disk transfer address
2018-12-17T22:52:32.58847006Z 78 PC: 1b025 | Find first file
2018-12-17T22:52:32.597264039Z 67 PC: 1afc1 | Get or set file attributes
2018-12-17T22:52:32.606457499Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.614241461Z 61 PC: 1b870 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:52:32.620445335Z 63 PC: 1b902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:32.629002269Z 63 PC: 1b902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:32.632237155Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:32.635548676Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.64689992Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.648643555Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.657464465Z 67 PC: 1afc1 | Get or set file attributes
2018-12-17T22:52:32.664135697Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.678848675Z 61 PC: 1b870 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:52:32.686975992Z 63 PC: 1b902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:32.694071731Z 63 PC: 1b902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:32.697771001Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:32.699840188Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.71080792Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.712799261Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.715768609Z 26 PC: 1b019 | Set disk transfer address
2018-12-17T22:52:32.718384082Z 78 PC: 1b025 | Find first file
2018-12-17T22:52:32.724935829Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.726502752Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.731088958Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.732215063Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.735632743Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.736742067Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.738962939Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.741906017Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.744544824Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.747701254Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.750443084Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.75188315Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.755775221Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.757511843Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.760263392Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.76244516Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.764941058Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.767267318Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.769520341Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.770603906Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.77364552Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.774695613Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.777969212Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.779813967Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.783252797Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.785262773Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.7891262Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.792374953Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.795688939Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.797291369Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.801106194Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.802618074Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.805706566Z 14 PC: 1bb18 | Set default drive (Drive = 'C')
2018-12-17T22:52:32.808499322Z 25 PC: 1bb1c | Get default drive
2018-12-17T22:52:32.809901587Z 59 PC: 1bb86 | Change current directory
2018-12-17T22:52:32.814986148Z 26 PC: 1b019 | Set disk transfer address
2018-12-17T22:52:32.81641401Z 78 PC: 1b025 | Find first file
2018-12-17T22:52:32.82282856Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.825067586Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.829291731Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.83179344Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.835078211Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.836564112Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.840799648Z 25 PC: 1babf | Get default drive
2018-12-17T22:52:32.842427877Z 71 PC: 1bad2 | Get current directory
2018-12-17T22:52:32.847720369Z 14 PC: 1bb18 | Set default drive (Drive = 'C')
2018-12-17T22:52:32.849592556Z 25 PC: 1bb1c | Get default drive
2018-12-17T22:52:32.85122922Z 59 PC: 1bb86 | Change current directory
2018-12-17T22:52:32.861508419Z 26 PC: 1b019 | Set disk transfer address
2018-12-17T22:52:32.863088067Z 78 PC: 1b025 | Find first file
2018-12-17T22:52:32.873741009Z 67 PC: 1afc1 | Get or set file attributes
2018-12-17T22:52:32.880496057Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.890971736Z 61 PC: 1b870 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:52:32.899489386Z 63 PC: 1b902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:32.905981813Z 63 PC: 1b902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:32.909971577Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:32.912408555Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.923515499Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:32.92566112Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:32.929973952Z 48 PC: 1ba32 | Get DOS version
2018-12-17T22:52:32.932016769Z 67 PC: 1afc1 | Get or set file attributes
2018-12-17T22:52:32.938347321Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:32.950786177Z 61 PC: 1b870 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:52:32.958426509Z 61 PC: 1b870 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:52:32.96786539Z 60 PC: 1b870 | Create or truncate file
2018-12-17T22:52:32.97992806Z 64 PC: 1b943 | Write file or device (Write 7056 bytes on handle 6)
2018-12-17T22:52:32.989816174Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:32.997419517Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.007520893Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.014889264Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.023897516Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.033058204Z 64 PC: 1b943 | Write file or device (Write 4049 bytes on handle 6)
2018-12-17T22:52:33.042290978Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.045342931Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:33.047947774Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:33.055587746Z 65 PC: 1b9b9 | Delete file (Filename = 'CHKDSK.EXE')
2018-12-17T22:52:33.067815475Z 86 PC: 1b9fd | Rename file
2018-12-17T22:52:33.079974686Z 61 PC: 1b870 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:52:33.087112705Z 64 PC: 1b902 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:33.094315285Z 64 PC: 1b902 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:33.097110516Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:33.105665376Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:33.116529895Z 14 PC: 1bb18 | Set default drive (Drive = 'C')
2018-12-17T22:52:33.118429653Z 25 PC: 1bb1c | Get default drive
2018-12-17T22:52:33.121178206Z 59 PC: 1bb86 | Change current directory
2018-12-17T22:52:33.125439962Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:33.126916556Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:33.130509025Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:33.131713147Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:33.135590971Z 25 PC: 1babf | Get default drive
2018-12-17T22:52:33.136863992Z 71 PC: 1bad2 | Get current directory
2018-12-17T22:52:33.139723493Z 14 PC: 1bb18 | Set default drive (Drive = 'C')
2018-12-17T22:52:33.141807418Z 25 PC: 1bb1c | Get default drive
2018-12-17T22:52:33.143024685Z 59 PC: 1bb86 | Change current directory
2018-12-17T22:52:33.150446126Z 26 PC: 1b019 | Set disk transfer address
2018-12-17T22:52:33.15197557Z 78 PC: 1b025 | Find first file
2018-12-17T22:52:33.158694781Z 67 PC: 1afc1 | Get or set file attributes
2018-12-17T22:52:33.166540159Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:33.177074347Z 61 PC: 1b870 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:52:33.186536341Z 63 PC: 1b902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:33.192826737Z 63 PC: 1b902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:33.196060542Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:33.198510094Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:33.208732126Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:33.210530324Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:33.213978541Z 48 PC: 1ba32 | Get DOS version
2018-12-17T22:52:33.215459583Z 67 PC: 1afc1 | Get or set file attributes
2018-12-17T22:52:33.221802659Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:33.231866403Z 61 PC: 1b870 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:52:33.240210608Z 61 PC: 1b870 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:52:33.247292281Z 60 PC: 1b870 | Create or truncate file
2018-12-17T22:52:33.259802912Z 64 PC: 1b943 | Write file or device (Write 7056 bytes on handle 6)
2018-12-17T22:52:33.270721462Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.278845193Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.289441006Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.297169014Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.306539816Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.315880443Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.325726779Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.334609235Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.344296372Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.351404665Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.361132538Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.368284894Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.378373645Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.386230535Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.395037438Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.403184512Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.41202563Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.421031758Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.430266386Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.437686414Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.447742575Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.455196065Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.465394203Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.47301624Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.482123429Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.490346956Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.499186742Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.507686258Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.517901888Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.525575963Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.535319467Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.542297014Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.552325212Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.559825521Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.570557551Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.579077686Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.588877896Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.597422647Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.606807847Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.616147862Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.625588436Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.63312825Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.643652238Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.655341386Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.666187331Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.673284803Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.682058364Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.689712783Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.699341079Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.707308105Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.716281011Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.723565525Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.733872717Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.741222503Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.752311333Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.759914887Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.771481033Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.779350456Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.788456251Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.796818139Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.805923002Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.815060337Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.824649339Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.832780885Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.842086956Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.857503606Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.867196975Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.874648713Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.883596561Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.892308657Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.902512244Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.910872479Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.919937958Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.927034569Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.936901945Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.944164418Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.954689509Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.96283472Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.972350214Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.98092951Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:33.990451357Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:33.998811962Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.008107764Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.017010749Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.026822489Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.034266403Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.044452968Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.05232182Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.062854635Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.071166159Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.080719595Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.089794492Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.098873466Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.107126941Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.127671694Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.134999609Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.145838069Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.153869676Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.163781967Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.170964398Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.180862422Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.188091502Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.196847249Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.205792953Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.215417473Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.223558606Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.233242447Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.240402126Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.253864876Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.261528191Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.271847847Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.279197553Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.288953089Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.297852095Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.307433094Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.316171779Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.325265502Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.332595511Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.341721153Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.350287685Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.360136827Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.367224Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.376960901Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.384704146Z 64 PC: 1b943 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:34.393737225Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.402546523Z 64 PC: 1b943 | Write file or device (Write 2240 bytes on handle 6)
2018-12-17T22:52:34.412508747Z 63 PC: 1b943 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:34.415593341Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:34.417707252Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:34.426005069Z 65 PC: 1b9b9 | Delete file (Filename = 'WINHELP.EXE')
2018-12-17T22:52:34.438385085Z 86 PC: 1b9fd | Rename file
2018-12-17T22:52:34.450707212Z 61 PC: 1b870 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:52:34.459396134Z 64 PC: 1b902 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:34.466155862Z 64 PC: 1b902 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:34.469385349Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:34.478135115Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:34.488713356Z 14 PC: 1bb18 | Set default drive (Drive = 'C')
2018-12-17T22:52:34.49141414Z 25 PC: 1bb1c | Get default drive
2018-12-17T22:52:34.492936299Z 59 PC: 1bb86 | Change current directory
2018-12-17T22:52:34.497034698Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:34.499469592Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:34.502691234Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:34.505139372Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:34.508345155Z 26 PC: 1b03d | Set disk transfer address
2018-12-17T22:52:34.510111262Z 79 PC: 1b042 | Find next file
2018-12-17T22:52:34.514041845Z 14 PC: 1bb18 | Set default drive (Drive = 'A')
2018-12-17T22:52:34.515652541Z 25 PC: 1bb1c | Get default drive
2018-12-17T22:52:34.518124996Z 59 PC: 1bb86 | Change current directory
2018-12-17T22:52:34.523180943Z 42 PC: 1af47 | Get date 0x1af47: xor ah, ah
0x1af49: les di, ptr [bp + 6]
0x1af4c: stosw word ptr es:[di], ax
0x1af4d: mov al, dl
0x1af4f: les di, ptr [bp + 0xa]
0x1af52: stosw word ptr es:[di], ax
0x1af53: mov al, dh
0x1af55: les di, ptr [bp + 0xe]
0x1af58: stosw word ptr es:[di], ax
0x1af59: xchg ax, cx
0x1af5a: les di, ptr [bp + 0x12]
0x1af5d: stosw word ptr es:[di], ax
0x1af5e: pop bp
0x1af5f: retf 0x10
0x1af62: push bp
0x1af63: mov bp, sp
0x1af65: mov cx, word ptr [bp + 0xa]
0x1af68: mov dh, byte ptr [bp + 8]
0x1af6b: mov dl, byte ptr [bp + 6]
0x1af6e: mov ah, 0x2b
2018-12-17T22:52:34.526159889Z 48 PC: 1ba32 | Get DOS version
2018-12-17T22:52:34.531818428Z 61 PC: 1b870 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:52:34.539621847Z 60 PC: 1b870 | Create or truncate file
2018-12-17T22:52:34.548419834Z 66 PC: 1b9a2 | Move file pointer
2018-12-17T22:52:34.550646927Z 63 PC: 1b943 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:52:34.560661099Z 62 PC: 1b8c0 | Close file
2018-12-17T22:52:34.563839409Z 67 PC: 1afe8 | Get or set file attributes
2018-12-17T22:52:34.574861354Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:34.577268847Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:34.578839026Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:52:34.581353761Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:52:34.583262285Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:52:34.584850679Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:52:34.587669053Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:52:34.590917646Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:52:34.593781836Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:34.595400317Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:34.597841953Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:34.600159697Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:34.602266945Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:52:34.604887718Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:52:34.60643801Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:52:34.609153211Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:52:34.61077637Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:52:34.612110015Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:52:34.614467905Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:52:34.615622223Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:52:34.618223219Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:52:34.619391153Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:52:34.62188662Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:52:34.623460918Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:52:34.624818448Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:52:34.642150596Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:52:34.644588125Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:52:34.647429863Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:52:34.648651148Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:52:34.6501481Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:52:34.654158784Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:52:34.655714426Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:52:34.658385944Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:52:34.660040221Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:52:34.662456531Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:34.664411483Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:34.670039616Z 53 PC: 1b11a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:52:34.672423043Z 37 PC: 1b123 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:52:34.674008211Z 41 PC: 1b0d1 | Parse filename
2018-12-17T22:52:34.676849247Z 41 PC: 1b0df | Parse filename
2018-12-17T22:52:34.678488436Z 75 PC: 1b0ea | Execute program
2018-12-17T22:52:34.695260923Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:34.698074258Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:52:34.699466794Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:52:34.702029278Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:52:34.703845229Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:34.705440806Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:34.708203927Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:52:34.710239641Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:52:34.712394849Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:52:34.714432206Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:52:34.716981205Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:52:34.718474079Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:52:34.719961153Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:52:34.72230216Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:52:34.723847363Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:52:34.726500727Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:52:34.727804135Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:52:34.730481785Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:34.7319696Z 53 PC: 22e9a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:52:34.733451864Z 37 PC: 22eaf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:34.735277374Z 37 PC: 22eb7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:34.736685539Z 37 PC: 22ebf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:34.740095234Z 37 PC: 22ec7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:34.742419901Z 68 PC: 23bf7 | I/O control for devices (Set for = '')
2018-12-17T22:52:34.745078606Z 26 PC: 22d09 | Set disk transfer address
2018-12-17T22:52:34.746909134Z 78 PC: 22d15 | Find first file
2018-12-17T22:52:34.754261525Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:34.761643212Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:34.77306625Z 61 PC: 23560 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:52:34.781012086Z 66 PC: 23cf6 | Move file pointer
2018-12-17T22:52:34.782591924Z 66 PC: 23d04 | Move file pointer
2018-12-17T22:52:34.78540648Z 66 PC: 23d12 | Move file pointer
2018-12-17T22:52:34.787311018Z 66 PC: 23692 | Move file pointer
2018-12-17T22:52:34.790078527Z 64 PC: 23633 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:34.801780599Z 62 PC: 235b0 | Close file
2018-12-17T22:52:34.811463378Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:34.823305233Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:34.825193119Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:34.829122721Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:34.836003787Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:34.847178178Z 61 PC: 23560 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:52:34.855926862Z 66 PC: 23cf6 | Move file pointer
2018-12-17T22:52:34.857849754Z 66 PC: 23d04 | Move file pointer
2018-12-17T22:52:34.860603087Z 66 PC: 23d12 | Move file pointer
2018-12-17T22:52:34.862461718Z 66 PC: 23692 | Move file pointer
2018-12-17T22:52:34.865399597Z 64 PC: 23633 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:34.875675129Z 62 PC: 235b0 | Close file
2018-12-17T22:52:34.887498009Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:34.89802872Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:34.899228694Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:34.903538831Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:34.909669377Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:34.921070715Z 61 PC: 23560 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:52:34.928114736Z 66 PC: 23cf6 | Move file pointer
2018-12-17T22:52:34.930270646Z 66 PC: 23d04 | Move file pointer
2018-12-17T22:52:34.932005405Z 66 PC: 23d12 | Move file pointer
2018-12-17T22:52:34.93378101Z 66 PC: 23692 | Move file pointer
2018-12-17T22:52:34.935914689Z 64 PC: 23633 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:34.946673689Z 62 PC: 235b0 | Close file
2018-12-17T22:52:34.956898056Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:34.967379665Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:34.969486934Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:34.972785891Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:34.97900876Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:34.989957087Z 61 PC: 23560 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:52:34.996891483Z 66 PC: 23cf6 | Move file pointer
2018-12-17T22:52:34.99919513Z 66 PC: 23d04 | Move file pointer
2018-12-17T22:52:35.000746494Z 66 PC: 23d12 | Move file pointer
2018-12-17T22:52:35.003150971Z 66 PC: 23692 | Move file pointer
2018-12-17T22:52:35.004917339Z 64 PC: 23633 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:35.016813386Z 62 PC: 235b0 | Close file
2018-12-17T22:52:35.026138613Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:35.038076528Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:35.040274287Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:35.044064096Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:35.051509803Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:35.061719031Z 61 PC: 23560 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:52:35.075566202Z 66 PC: 23cf6 | Move file pointer
2018-12-17T22:52:35.076975399Z 66 PC: 23d04 | Move file pointer
2018-12-17T22:52:35.078847887Z 66 PC: 23d12 | Move file pointer
2018-12-17T22:52:35.080495913Z 66 PC: 23692 | Move file pointer
2018-12-17T22:52:35.082026889Z 64 PC: 23633 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:35.093456469Z 62 PC: 235b0 | Close file
2018-12-17T22:52:35.102248415Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:35.113305846Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:35.114768854Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:35.119448595Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:35.125798933Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:35.137340254Z 61 PC: 23560 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:52:35.150084855Z 66 PC: 23cf6 | Move file pointer
2018-12-17T22:52:35.151920012Z 66 PC: 23d04 | Move file pointer
2018-12-17T22:52:35.154409659Z 66 PC: 23d12 | Move file pointer
2018-12-17T22:52:35.156186226Z 66 PC: 23692 | Move file pointer
2018-12-17T22:52:35.158435411Z 64 PC: 23633 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:35.169731681Z 62 PC: 235b0 | Close file
2018-12-17T22:52:35.179397949Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:35.190447656Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:35.19224395Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:35.195532297Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:35.202293618Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:35.214785263Z 61 PC: 23560 | Open file (Filename = 'PAH.COM')
2018-12-17T22:52:35.222035363Z 66 PC: 23cf6 | Move file pointer
2018-12-17T22:52:35.224941903Z 66 PC: 23d04 | Move file pointer
2018-12-17T22:52:35.226553039Z 66 PC: 23d12 | Move file pointer
2018-12-17T22:52:35.229505405Z 66 PC: 23692 | Move file pointer
2018-12-17T22:52:35.231077498Z 64 PC: 23633 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:35.241721543Z 62 PC: 235b0 | Close file
2018-12-17T22:52:35.250637551Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:35.302806009Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:35.304787902Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:35.312188685Z 26 PC: 22d09 | Set disk transfer address
2018-12-17T22:52:35.314700684Z 78 PC: 22d15 | Find first file
2018-12-17T22:52:35.321653213Z 26 PC: 22d09 | Set disk transfer address
2018-12-17T22:52:35.324290397Z 78 PC: 22d15 | Find first file
2018-12-17T22:52:35.332363894Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:35.339252543Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:35.564697409Z 61 PC: 23560 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:52:35.572256258Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:35.580018159Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:35.58301583Z 62 PC: 235b0 | Close file
2018-12-17T22:52:35.586660005Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:35.736306645Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:35.739619067Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:35.743465843Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:35.752170104Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:35.778266676Z 61 PC: 23560 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:52:35.787969172Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:35.800252085Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:35.803423212Z 62 PC: 235b0 | Close file
2018-12-17T22:52:35.806787091Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:35.830930154Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:35.833073079Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:35.835907283Z 25 PC: 237af | Get default drive
2018-12-17T22:52:35.837386381Z 71 PC: 237c2 | Get current directory
2018-12-17T22:52:35.841018414Z 14 PC: 23808 | Set default drive (Drive = 'A')
2018-12-17T22:52:35.842802326Z 25 PC: 2380c | Get default drive
2018-12-17T22:52:35.845678589Z 59 PC: 23876 | Change current directory
2018-12-17T22:52:35.850536504Z 26 PC: 22d09 | Set disk transfer address
2018-12-17T22:52:35.853269948Z 78 PC: 22d15 | Find first file
2018-12-17T22:52:35.860288543Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:35.868047348Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:35.89203045Z 61 PC: 23560 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:52:35.901353292Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:35.904793374Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:35.908841369Z 62 PC: 235b0 | Close file
2018-12-17T22:52:35.910860341Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:35.921923173Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:35.924105723Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:35.928243205Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:35.935940264Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:35.94685638Z 61 PC: 23560 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:52:35.955801042Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:35.959445207Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:35.962689732Z 62 PC: 235b0 | Close file
2018-12-17T22:52:35.966013085Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:35.976965699Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:35.979786488Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:35.982815478Z 26 PC: 22d09 | Set disk transfer address
2018-12-17T22:52:35.985290979Z 78 PC: 22d15 | Find first file
2018-12-17T22:52:35.992810153Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:35.995684783Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:35.999604356Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.001057085Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.005082256Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.006464262Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.009972242Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.011406846Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.014355355Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.016241609Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.01902086Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.021811332Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.025138481Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.028085547Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.034352841Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.038122973Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.041906831Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.044506855Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.048255596Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.049778287Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.055277297Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.05658286Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.06067185Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.062214798Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.066406162Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.068282858Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.071444066Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.074140722Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.077330834Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.080057866Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.084258367Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.087092982Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.089925423Z 14 PC: 23808 | Set default drive (Drive = 'C')
2018-12-17T22:52:36.092569761Z 25 PC: 2380c | Get default drive
2018-12-17T22:52:36.094446816Z 59 PC: 23876 | Change current directory
2018-12-17T22:52:36.098817586Z 26 PC: 22d09 | Set disk transfer address
2018-12-17T22:52:36.101383236Z 78 PC: 22d15 | Find first file
2018-12-17T22:52:36.107558747Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.110799855Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.114056713Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.116627572Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.119488176Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.121741719Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.124701199Z 25 PC: 237af | Get default drive
2018-12-17T22:52:36.126123641Z 71 PC: 237c2 | Get current directory
2018-12-17T22:52:36.129363606Z 14 PC: 23808 | Set default drive (Drive = 'C')
2018-12-17T22:52:36.130743669Z 25 PC: 2380c | Get default drive
2018-12-17T22:52:36.132568908Z 59 PC: 23876 | Change current directory
2018-12-17T22:52:36.139141755Z 26 PC: 22d09 | Set disk transfer address
2018-12-17T22:52:36.141343972Z 78 PC: 22d15 | Find first file
2018-12-17T22:52:36.148381151Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:36.155742179Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:36.166454712Z 61 PC: 23560 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:52:36.177496895Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:36.180700292Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:36.184629332Z 62 PC: 235b0 | Close file
2018-12-17T22:52:36.1866562Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:36.197268666Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.199864261Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.203468692Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:36.211289995Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:36.221532555Z 61 PC: 23560 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:52:36.230334239Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:36.237617831Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:36.242130227Z 62 PC: 235b0 | Close file
2018-12-17T22:52:36.244967858Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:36.255810956Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.258389981Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.262260783Z 48 PC: 23722 | Get DOS version
2018-12-17T22:52:36.265311153Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:36.271832452Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:36.283343636Z 61 PC: 23560 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:52:36.291382637Z 61 PC: 23560 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:52:36.302535859Z 60 PC: 23560 | Create or truncate file
2018-12-17T22:52:36.315560034Z 64 PC: 23633 | Write file or device (Write 7056 bytes on handle 6)
2018-12-17T22:52:36.324499847Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.333168101Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.34231346Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.351218899Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.360596805Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.368864626Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.379073473Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.386767507Z 64 PC: 23633 | Write file or device (Write 3430 bytes on handle 6)
2018-12-17T22:52:36.397098283Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.399644666Z 62 PC: 235b0 | Close file
2018-12-17T22:52:36.403011781Z 62 PC: 235b0 | Close file
2018-12-17T22:52:36.412024371Z 65 PC: 236a9 | Delete file (Filename = 'DEBUG.EXE')
2018-12-17T22:52:36.424628187Z 86 PC: 236ed | Rename file
2018-12-17T22:52:36.437779752Z 61 PC: 23560 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:52:36.4462748Z 64 PC: 235f2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:36.452830956Z 64 PC: 235f2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:36.456060974Z 62 PC: 235b0 | Close file
2018-12-17T22:52:36.464796102Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:36.475498967Z 14 PC: 23808 | Set default drive (Drive = 'C')
2018-12-17T22:52:36.477954259Z 25 PC: 2380c | Get default drive
2018-12-17T22:52:36.479263158Z 59 PC: 23876 | Change current directory
2018-12-17T22:52:36.484128728Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.485383405Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.488917073Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.490785583Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.496964029Z 25 PC: 237af | Get default drive
2018-12-17T22:52:36.500545537Z 71 PC: 237c2 | Get current directory
2018-12-17T22:52:36.504355374Z 14 PC: 23808 | Set default drive (Drive = 'C')
2018-12-17T22:52:36.50721206Z 25 PC: 2380c | Get default drive
2018-12-17T22:52:36.508701468Z 59 PC: 23876 | Change current directory
2018-12-17T22:52:36.516551464Z 26 PC: 22d09 | Set disk transfer address
2018-12-17T22:52:36.518202215Z 78 PC: 22d15 | Find first file
2018-12-17T22:52:36.526081927Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:36.532760001Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:36.54563695Z 61 PC: 23560 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:52:36.554590009Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:36.557697867Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:36.561684055Z 62 PC: 235b0 | Close file
2018-12-17T22:52:36.563862557Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:36.575825189Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.577712955Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.581604955Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:36.589055732Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:36.599736035Z 61 PC: 23560 | Open file (Filename = 'MSD.EXE')
2018-12-17T22:52:36.608595517Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:36.615016679Z 63 PC: 235f2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:36.619671603Z 62 PC: 235b0 | Close file
2018-12-17T22:52:36.622028321Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:36.634006992Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:36.635595496Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:36.641553909Z 48 PC: 23722 | Get DOS version
2018-12-17T22:52:36.643209379Z 67 PC: 22cb1 | Get or set file attributes
2018-12-17T22:52:36.64961982Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:36.660908597Z 61 PC: 23560 | Open file (Filename = 'MSD.EXE')
2018-12-17T22:52:36.668654827Z 61 PC: 23560 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:52:36.681466926Z 60 PC: 23560 | Create or truncate file
2018-12-17T22:52:36.693477106Z 64 PC: 23633 | Write file or device (Write 7056 bytes on handle 6)
2018-12-17T22:52:36.702409395Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.709825827Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.71909032Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.724416585Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.731622302Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.737319373Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.744167247Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.750235095Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.756961561Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.762788567Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.77000357Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.778654571Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.786477386Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.795423882Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.805065653Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.813592651Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.823198495Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.831665792Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.841997139Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.849478282Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.86016681Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.867666609Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.877355769Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.884695317Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.895719766Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.90320663Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.913669785Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.921128005Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.931365616Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.940196916Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.949120839Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.957735332Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.966692557Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.974587428Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:36.98412293Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:36.992156461Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.002215276Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.01023445Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.019840786Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.027910013Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.037237205Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.046874848Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.056471907Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.065648314Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.075024878Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.083454142Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.09400362Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.102293922Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.11129989Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.119314505Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.128299744Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.137113981Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.146144105Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.155145293Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.164535202Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.17176325Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.186217782Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.193453835Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.203531806Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.211035753Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.222401202Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.229930626Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.240179649Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.248038181Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.257174413Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.265979854Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.275125965Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.284564705Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.293773895Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.302395209Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.311835163Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.320098675Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.329124751Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.336495787Z 64 PC: 23633 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:37.347713209Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.355861275Z 64 PC: 23633 | Write file or device (Write 3986 bytes on handle 6)
2018-12-17T22:52:37.365505071Z 63 PC: 23633 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:37.36784697Z 62 PC: 235b0 | Close file
2018-12-17T22:52:37.371216439Z 62 PC: 235b0 | Close file
2018-12-17T22:52:37.37989897Z 65 PC: 236a9 | Delete file (Filename = 'MSD.EXE')
2018-12-17T22:52:37.392387559Z 86 PC: 236ed | Rename file
2018-12-17T22:52:37.404772804Z 61 PC: 23560 | Open file (Filename = 'MSD.EXE')
2018-12-17T22:52:37.414504906Z 64 PC: 235f2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:37.420901422Z 64 PC: 235f2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:37.425025268Z 62 PC: 235b0 | Close file
2018-12-17T22:52:37.432832094Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:37.443720177Z 14 PC: 23808 | Set default drive (Drive = 'C')
2018-12-17T22:52:37.445637428Z 25 PC: 2380c | Get default drive
2018-12-17T22:52:37.448578042Z 59 PC: 23876 | Change current directory
2018-12-17T22:52:37.453453851Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:37.456394274Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:37.45976689Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:37.462432828Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:37.465647898Z 26 PC: 22d2d | Set disk transfer address
2018-12-17T22:52:37.468044249Z 79 PC: 22d32 | Find next file
2018-12-17T22:52:37.470917606Z 14 PC: 23808 | Set default drive (Drive = 'A')
2018-12-17T22:52:37.472504497Z 25 PC: 2380c | Get default drive
2018-12-17T22:52:37.474761126Z 59 PC: 23876 | Change current directory
2018-12-17T22:52:37.486236964Z 42 PC: 22c37 | Get date 0x22c37: xor ah, ah
0x22c39: les di, ptr [bp + 6]
0x22c3c: stosw word ptr es:[di], ax
0x22c3d: mov al, dl
0x22c3f: les di, ptr [bp + 0xa]
0x22c42: stosw word ptr es:[di], ax
0x22c43: mov al, dh
0x22c45: les di, ptr [bp + 0xe]
0x22c48: stosw word ptr es:[di], ax
0x22c49: xchg ax, cx
0x22c4a: les di, ptr [bp + 0x12]
0x22c4d: stosw word ptr es:[di], ax
0x22c4e: pop bp
0x22c4f: retf 0x10
0x22c52: push bp
0x22c53: mov bp, sp
0x22c55: mov cx, word ptr [bp + 0xa]
0x22c58: mov dh, byte ptr [bp + 8]
0x22c5b: mov dl, byte ptr [bp + 6]
0x22c5e: mov ah, 0x2b
2018-12-17T22:52:37.488863898Z 48 PC: 23722 | Get DOS version
2018-12-17T22:52:37.490457822Z 61 PC: 23560 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:52:37.499307106Z 60 PC: 23560 | Create or truncate file
2018-12-17T22:52:37.507390811Z 66 PC: 23692 | Move file pointer
2018-12-17T22:52:37.509405415Z 63 PC: 23633 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:52:37.518739369Z 62 PC: 235b0 | Close file
2018-12-17T22:52:37.521388805Z 67 PC: 22cd8 | Get or set file attributes
2018-12-17T22:52:37.532332985Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:37.53449199Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:37.535919051Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:52:37.538413626Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:52:37.540014333Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:52:37.542500794Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:52:37.5440051Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:52:37.546452608Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:52:37.548608598Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:37.550134875Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:37.552095568Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:37.553670657Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:37.555828781Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:52:37.557622169Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:52:37.559586369Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:52:37.561014322Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:52:37.563372542Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:52:37.564683013Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:52:37.566563706Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:52:37.567846136Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:52:37.569975606Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:52:37.571257664Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:52:37.573383657Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:52:37.574663752Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:52:37.577405031Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:52:37.578677572Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:52:37.581990836Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:52:37.58356846Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:52:37.586079627Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:52:37.5873803Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:52:37.590253757Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:52:37.591530245Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:52:37.59380063Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:52:37.595112304Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:52:37.597481184Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:37.598801104Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:37.601057002Z 53 PC: 22e0a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:52:37.602587296Z 37 PC: 22e13 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:52:37.605183272Z 41 PC: 22dc1 | Parse filename
2018-12-17T22:52:37.606950903Z 41 PC: 22dcf | Parse filename
2018-12-17T22:52:37.609928336Z 75 PC: 22dda | Execute program
2018-12-17T22:52:37.626955481Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:37.629204716Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:52:37.630970874Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:52:37.63376355Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:52:37.635358857Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:37.637953742Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:37.639472304Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:52:37.641752327Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:52:37.643330311Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:52:37.645656511Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:52:37.64711447Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:52:37.649609877Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:52:37.651122178Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:52:37.653570998Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:52:37.65516384Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:52:37.657525636Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:52:37.659556502Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:52:37.661513999Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:37.662937803Z 53 PC: 2ab8a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:52:37.665274303Z 37 PC: 2ab9f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:37.666637143Z 37 PC: 2aba7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:37.669235243Z 37 PC: 2abaf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:37.670824519Z 37 PC: 2abb7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:37.673408432Z 68 PC: 2b8e7 | I/O control for devices (Set for = '')
2018-12-17T22:52:37.676100459Z 26 PC: 2a9f9 | Set disk transfer address
2018-12-17T22:52:37.67851766Z 78 PC: 2aa05 | Find first file
2018-12-17T22:52:37.68531567Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:37.693054557Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:37.704154809Z 61 PC: 2b250 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:52:37.712925204Z 66 PC: 2b9e6 | Move file pointer
2018-12-17T22:52:37.714527774Z 66 PC: 2b9f4 | Move file pointer
2018-12-17T22:52:37.716941098Z 66 PC: 2ba02 | Move file pointer
2018-12-17T22:52:37.718647243Z 66 PC: 2b382 | Move file pointer
2018-12-17T22:52:37.720730977Z 64 PC: 2b323 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:37.731616806Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:37.740294326Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:37.751982112Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:37.75345532Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:37.759212013Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:37.765846366Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:37.777275835Z 61 PC: 2b250 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:52:37.784632315Z 66 PC: 2b9e6 | Move file pointer
2018-12-17T22:52:37.788093958Z 66 PC: 2b9f4 | Move file pointer
2018-12-17T22:52:37.789961536Z 66 PC: 2ba02 | Move file pointer
2018-12-17T22:52:37.793006255Z 66 PC: 2b382 | Move file pointer
2018-12-17T22:52:37.794701519Z 64 PC: 2b323 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:37.805778949Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:37.81434021Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:37.827109477Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:37.828698021Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:37.832260043Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:37.839693407Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:37.850114752Z 61 PC: 2b250 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:52:37.858112657Z 66 PC: 2b9e6 | Move file pointer
2018-12-17T22:52:37.859658901Z 66 PC: 2b9f4 | Move file pointer
2018-12-17T22:52:37.862235341Z 66 PC: 2ba02 | Move file pointer
2018-12-17T22:52:37.863851186Z 66 PC: 2b382 | Move file pointer
2018-12-17T22:52:37.866575424Z 64 PC: 2b323 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:37.87785917Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:37.887963271Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:37.90245328Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:37.904553725Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:37.907871498Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:37.915267721Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:37.92611075Z 61 PC: 2b250 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:52:37.934198322Z 66 PC: 2b9e6 | Move file pointer
2018-12-17T22:52:37.935867818Z 66 PC: 2b9f4 | Move file pointer
2018-12-17T22:52:37.938367644Z 66 PC: 2ba02 | Move file pointer
2018-12-17T22:52:37.940143931Z 66 PC: 2b382 | Move file pointer
2018-12-17T22:52:37.943122937Z 64 PC: 2b323 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:37.954279394Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:37.963998531Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:37.975195916Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:37.976282207Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:37.979710085Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:37.986088577Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:37.996956883Z 61 PC: 2b250 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:52:38.003860712Z 66 PC: 2b9e6 | Move file pointer
2018-12-17T22:52:38.005338107Z 66 PC: 2b9f4 | Move file pointer
2018-12-17T22:52:38.006817887Z 66 PC: 2ba02 | Move file pointer
2018-12-17T22:52:38.008370013Z 66 PC: 2b382 | Move file pointer
2018-12-17T22:52:38.009923221Z 64 PC: 2b323 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:38.020715363Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:38.030825414Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.04229466Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.043446393Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.046816263Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:38.052884502Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.064224444Z 61 PC: 2b250 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:52:38.071253148Z 66 PC: 2b9e6 | Move file pointer
2018-12-17T22:52:38.072928805Z 66 PC: 2b9f4 | Move file pointer
2018-12-17T22:52:38.074726913Z 66 PC: 2ba02 | Move file pointer
2018-12-17T22:52:38.077192114Z 66 PC: 2b382 | Move file pointer
2018-12-17T22:52:38.078757084Z 64 PC: 2b323 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:38.089175575Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:38.098790155Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.109805899Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.110932445Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.114075348Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:38.119977385Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.131049874Z 61 PC: 2b250 | Open file (Filename = 'PAH.COM')
2018-12-17T22:52:38.137895494Z 66 PC: 2b9e6 | Move file pointer
2018-12-17T22:52:38.13982044Z 66 PC: 2b9f4 | Move file pointer
2018-12-17T22:52:38.141399066Z 66 PC: 2ba02 | Move file pointer
2018-12-17T22:52:38.143288875Z 66 PC: 2b382 | Move file pointer
2018-12-17T22:52:38.144780587Z 64 PC: 2b323 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:38.155706312Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:38.164645754Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.175927667Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.177010582Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.183847534Z 26 PC: 2a9f9 | Set disk transfer address
2018-12-17T22:52:38.185027441Z 78 PC: 2aa05 | Find first file
2018-12-17T22:52:38.191475433Z 26 PC: 2a9f9 | Set disk transfer address
2018-12-17T22:52:38.192574949Z 78 PC: 2aa05 | Find first file
2018-12-17T22:52:38.199241241Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:38.211209944Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.225627467Z 61 PC: 2b250 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:52:38.232922511Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:38.240900017Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:38.243496434Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:38.246535162Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.258326111Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.260768549Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.268076998Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:38.275348938Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.287054597Z 61 PC: 2b250 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:52:38.295947091Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:38.302917535Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:38.306572932Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:38.309256994Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.32071104Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.323459503Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.326900998Z 25 PC: 2b49f | Get default drive
2018-12-17T22:52:38.328181323Z 71 PC: 2b4b2 | Get current directory
2018-12-17T22:52:38.333597156Z 14 PC: 2b4f8 | Set default drive (Drive = 'A')
2018-12-17T22:52:38.335434478Z 25 PC: 2b4fc | Get default drive
2018-12-17T22:52:38.339714969Z 59 PC: 2b566 | Change current directory
2018-12-17T22:52:38.344782448Z 26 PC: 2a9f9 | Set disk transfer address
2018-12-17T22:52:38.347743219Z 78 PC: 2aa05 | Find first file
2018-12-17T22:52:38.360444949Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:38.368661043Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.380467301Z 61 PC: 2b250 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:52:38.387166055Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:38.393180383Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:38.395586172Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:38.397933922Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.40611509Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.408107563Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.413552701Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:38.418667339Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.426402791Z 61 PC: 2b250 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:52:38.437066342Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:38.442140373Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:38.445308294Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:38.447523475Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.460372722Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.46202728Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.466644544Z 26 PC: 2a9f9 | Set disk transfer address
2018-12-17T22:52:38.468225854Z 78 PC: 2aa05 | Find first file
2018-12-17T22:52:38.475515347Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.476851357Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.480410412Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.481688393Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.486228692Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.487697361Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.491807031Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.493230596Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.496193631Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.498747078Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.501674006Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.504451123Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.507539044Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.509512791Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.513256173Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.515946166Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.519161316Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.521870645Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.524817972Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.526512655Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.529843762Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.531398713Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.535092402Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.537100695Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.54125023Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.542786846Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.547009347Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.54829375Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.552288184Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.554098094Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.557475428Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.558939569Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.561678243Z 14 PC: 2b4f8 | Set default drive (Drive = 'C')
2018-12-17T22:52:38.563909995Z 25 PC: 2b4fc | Get default drive
2018-12-17T22:52:38.565085473Z 59 PC: 2b566 | Change current directory
2018-12-17T22:52:38.570038498Z 26 PC: 2a9f9 | Set disk transfer address
2018-12-17T22:52:38.571193838Z 78 PC: 2aa05 | Find first file
2018-12-17T22:52:38.578513377Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.579966136Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.584117675Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.585425362Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.589634489Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.590888945Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.593910751Z 25 PC: 2b49f | Get default drive
2018-12-17T22:52:38.595644818Z 71 PC: 2b4b2 | Get current directory
2018-12-17T22:52:38.598471538Z 14 PC: 2b4f8 | Set default drive (Drive = 'C')
2018-12-17T22:52:38.602319347Z 25 PC: 2b4fc | Get default drive
2018-12-17T22:52:38.604193848Z 59 PC: 2b566 | Change current directory
2018-12-17T22:52:38.612284977Z 26 PC: 2a9f9 | Set disk transfer address
2018-12-17T22:52:38.613666281Z 78 PC: 2aa05 | Find first file
2018-12-17T22:52:38.621402895Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:38.628439112Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.639895744Z 61 PC: 2b250 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:52:38.647530415Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:38.654260507Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:38.65743466Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:38.659395213Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.671396467Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.672624754Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.677819191Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:38.684312499Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.695449981Z 61 PC: 2b250 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:52:38.702687086Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:38.709408632Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:38.712248076Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:38.715009974Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.725252856Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.727316482Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.73103143Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:38.739191319Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.749606603Z 61 PC: 2b250 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:52:38.757080523Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:38.764380846Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:38.767463637Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:38.770569632Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.781251327Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:38.784430199Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:38.788454278Z 48 PC: 2b412 | Get DOS version
2018-12-17T22:52:38.791446509Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:38.798571643Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.810672875Z 61 PC: 2b250 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:52:38.818036267Z 61 PC: 2b250 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:52:38.828500815Z 60 PC: 2b250 | Create or truncate file
2018-12-17T22:52:38.840398294Z 64 PC: 2b323 | Write file or device (Write 7056 bytes on handle 6)
2018-12-17T22:52:38.850290957Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:38.858896914Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:38.868422387Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:38.877341571Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:38.886888525Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:38.895931231Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:38.904834637Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:38.91314089Z 64 PC: 2b323 | Write file or device (Write 3841 bytes on handle 6)
2018-12-17T22:52:38.922424599Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:38.925709599Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:38.929679727Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:38.937604695Z 65 PC: 2b399 | Delete file (Filename = 'EXPAND.EXE')
2018-12-17T22:52:38.949873091Z 86 PC: 2b3dd | Rename file
2018-12-17T22:52:38.962508205Z 61 PC: 2b250 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:52:38.969844136Z 64 PC: 2b2e2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:38.976227146Z 64 PC: 2b2e2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:38.979227242Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:38.987273848Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:38.997313647Z 14 PC: 2b4f8 | Set default drive (Drive = 'C')
2018-12-17T22:52:38.999386411Z 25 PC: 2b4fc | Get default drive
2018-12-17T22:52:39.000781251Z 59 PC: 2b566 | Change current directory
2018-12-17T22:52:39.006607175Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:39.007726878Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:39.012340494Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:39.013629856Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:39.017595135Z 25 PC: 2b49f | Get default drive
2018-12-17T22:52:39.018878146Z 71 PC: 2b4b2 | Get current directory
2018-12-17T22:52:39.022632137Z 14 PC: 2b4f8 | Set default drive (Drive = 'C')
2018-12-17T22:52:39.024003413Z 25 PC: 2b4fc | Get default drive
2018-12-17T22:52:39.025156609Z 59 PC: 2b566 | Change current directory
2018-12-17T22:52:39.031975959Z 26 PC: 2a9f9 | Set disk transfer address
2018-12-17T22:52:39.034212321Z 78 PC: 2aa05 | Find first file
2018-12-17T22:52:39.042604745Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:39.04901116Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:39.331476947Z 61 PC: 2b250 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:52:39.339377027Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:39.346021188Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:39.351078498Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:39.353353722Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:39.364926381Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:39.370009269Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:39.374354301Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:39.380515535Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:39.390813339Z 61 PC: 2b250 | Open file (Filename = 'MSD.EXE')
2018-12-17T22:52:39.399502431Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:39.402760481Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:39.406946796Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:39.409292372Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:39.420531654Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:39.422671274Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:39.426510396Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:39.43339084Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:39.443624304Z 61 PC: 2b250 | Open file (Filename = 'PACKAGER.EXE')
2018-12-17T22:52:39.451070581Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:39.458413184Z 63 PC: 2b2e2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:39.461674821Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:39.464919656Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:39.474776623Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:39.475906295Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:39.480631701Z 48 PC: 2b412 | Get DOS version
2018-12-17T22:52:39.482466868Z 67 PC: 2a9a1 | Get or set file attributes
2018-12-17T22:52:39.490277Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:39.500226399Z 61 PC: 2b250 | Open file (Filename = 'PACKAGER.EXE')
2018-12-17T22:52:39.508234132Z 61 PC: 2b250 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:52:39.515193555Z 60 PC: 2b250 | Create or truncate file
2018-12-17T22:52:39.526798645Z 64 PC: 2b323 | Write file or device (Write 7056 bytes on handle 6)
2018-12-17T22:52:39.536480602Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.544393968Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.555481746Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.563004698Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.573921054Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.581479312Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.590888066Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.602455205Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.612133425Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.621972598Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.631703797Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.641221226Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.650835656Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.658042885Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.668550193Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.676025154Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.687604486Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.695041556Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.705699417Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.713009148Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.727180799Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.734632778Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.743795009Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.752108326Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.761822583Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.770170555Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.779117091Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.787324749Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.796656178Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.805171895Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.81406512Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.821830508Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.831046179Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.838661083Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.848874229Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.856491668Z 64 PC: 2b323 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:39.867669355Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.875479576Z 64 PC: 2b323 | Write file or device (Write 2752 bytes on handle 6)
2018-12-17T22:52:39.887370653Z 63 PC: 2b323 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:39.889803774Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:39.893486311Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:39.901649296Z 65 PC: 2b399 | Delete file (Filename = 'PACKAGER.EXE')
2018-12-17T22:52:39.914729867Z 86 PC: 2b3dd | Rename file
2018-12-17T22:52:39.927189232Z 61 PC: 2b250 | Open file (Filename = 'PACKAGER.EXE')
2018-12-17T22:52:39.935026284Z 64 PC: 2b2e2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:39.942267496Z 64 PC: 2b2e2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:39.945233468Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:39.958803258Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:39.969591603Z 14 PC: 2b4f8 | Set default drive (Drive = 'C')
2018-12-17T22:52:39.973085236Z 25 PC: 2b4fc | Get default drive
2018-12-17T22:52:39.974817641Z 59 PC: 2b566 | Change current directory
2018-12-17T22:52:39.979015176Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:39.981198898Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:39.984672774Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:39.986839244Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:39.989826925Z 26 PC: 2aa1d | Set disk transfer address
2018-12-17T22:52:39.991013955Z 79 PC: 2aa22 | Find next file
2018-12-17T22:52:39.994268509Z 14 PC: 2b4f8 | Set default drive (Drive = 'A')
2018-12-17T22:52:39.995897389Z 25 PC: 2b4fc | Get default drive
2018-12-17T22:52:39.9983841Z 59 PC: 2b566 | Change current directory
2018-12-17T22:52:40.002814212Z 42 PC: 2a927 | Get date 0x2a927: xor ah, ah
0x2a929: les di, ptr [bp + 6]
0x2a92c: stosw word ptr es:[di], ax
0x2a92d: mov al, dl
0x2a92f: les di, ptr [bp + 0xa]
0x2a932: stosw word ptr es:[di], ax
0x2a933: mov al, dh
0x2a935: les di, ptr [bp + 0xe]
0x2a938: stosw word ptr es:[di], ax
0x2a939: xchg ax, cx
0x2a93a: les di, ptr [bp + 0x12]
0x2a93d: stosw word ptr es:[di], ax
0x2a93e: pop bp
0x2a93f: retf 0x10
0x2a942: push bp
0x2a943: mov bp, sp
0x2a945: mov cx, word ptr [bp + 0xa]
0x2a948: mov dh, byte ptr [bp + 8]
0x2a94b: mov dl, byte ptr [bp + 6]
0x2a94e: mov ah, 0x2b
2018-12-17T22:52:40.00538972Z 48 PC: 2b412 | Get DOS version
2018-12-17T22:52:40.007154365Z 61 PC: 2b250 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:52:40.017787019Z 60 PC: 2b250 | Create or truncate file
2018-12-17T22:52:40.025946065Z 66 PC: 2b382 | Move file pointer
2018-12-17T22:52:40.027803875Z 63 PC: 2b323 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:52:40.037949142Z 62 PC: 2b2a0 | Close file
2018-12-17T22:52:40.040081418Z 67 PC: 2a9c8 | Get or set file attributes
2018-12-17T22:52:40.050890002Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:40.052998372Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:40.054380719Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:52:40.055800325Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:52:40.057151894Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:52:40.058398757Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:52:40.060038116Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:52:40.061419581Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:52:40.063198423Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:40.064637366Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:40.066054348Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:40.068788353Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:40.07021887Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:52:40.071955863Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:52:40.07349239Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:52:40.075029758Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:52:40.07765551Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:52:40.079629879Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:52:40.081459115Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:52:40.085112728Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:52:40.086639726Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:52:40.089515298Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:52:40.09096939Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:52:40.093825395Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:52:40.094994992Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:52:40.097289272Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:52:40.099230909Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:52:40.101097836Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:52:40.103246372Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:52:40.104930686Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:52:40.106938047Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:52:40.108423477Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:52:40.110028122Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:52:40.11223662Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:52:40.113731679Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:40.11626101Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:40.117716744Z 53 PC: 2aafa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:52:40.119250125Z 37 PC: 2ab03 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:52:40.122677784Z 41 PC: 2aab1 | Parse filename
2018-12-17T22:52:40.12448058Z 41 PC: 2aabf | Parse filename
2018-12-17T22:52:40.127518687Z 75 PC: 2aaca | Execute program
2018-12-17T22:52:40.145506878Z 53 PC: 3287a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:40.146985535Z 53 PC: 3287a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:52:40.149003896Z 53 PC: 3287a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:52:40.150286496Z 53 PC: 3287a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:52:40.152803554Z 53 PC: 3287a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:40.154294565Z 53 PC: 3287a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:40.155593685Z 53 PC: 3287a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:52:40.158081118Z 53 PC: 3287a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:52:40.159527475Z 53 PC: 3287a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:52:40.161955476Z 53 PC: 3287a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:52:40.163334617Z 53 PC: 3287a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:52:40.166496436Z 53 PC: 3287a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:52:40.169350247Z 53 PC: 3287a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:52:40.1707895Z 53 PC: 3287a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:52:40.172737119Z 53 PC: 3287a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:52:40.174147278Z 53 PC: 3287a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:52:40.17711339Z 53 PC: 3287a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:52:40.178608629Z 53 PC: 3287a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:40.180878562Z 53 PC: 3287a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:52:40.182456036Z 37 PC: 3288f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:52:40.183879109Z 37 PC: 32897 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:52:40.186362624Z 37 PC: 3289f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:52:40.187671623Z 37 PC: 328a7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:52:40.191737231Z 68 PC: 335d7 | I/O control for devices (Set for = '')
2018-12-17T22:52:40.200548883Z 26 PC: 326e9 | Set disk transfer address
2018-12-17T22:52:40.20584423Z 78 PC: 326f5 | Find first file
2018-12-17T22:52:40.211271054Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:40.21628354Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.224925074Z 61 PC: 32f40 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:52:40.231175394Z 66 PC: 336d6 | Move file pointer
2018-12-17T22:52:40.232467712Z 66 PC: 336e4 | Move file pointer
2018-12-17T22:52:40.235504006Z 66 PC: 336f2 | Move file pointer
2018-12-17T22:52:40.237048457Z 66 PC: 33072 | Move file pointer
2018-12-17T22:52:40.238729655Z 64 PC: 33013 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:40.248518443Z 62 PC: 32f90 | Close file
2018-12-17T22:52:40.255116307Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.264198537Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:40.265656076Z 79 PC: 32712 | Find next file
2018-12-17T22:52:40.268300102Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:40.274904598Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.283088272Z 61 PC: 32f40 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:52:40.297960829Z 66 PC: 336d6 | Move file pointer
2018-12-17T22:52:40.300039855Z 66 PC: 336e4 | Move file pointer
2018-12-17T22:52:40.303796802Z 66 PC: 336f2 | Move file pointer
2018-12-17T22:52:40.306302368Z 66 PC: 33072 | Move file pointer
2018-12-17T22:52:40.309221091Z 64 PC: 33013 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:40.322549348Z 62 PC: 32f90 | Close file
2018-12-17T22:52:40.334957497Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.346895793Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:40.349972573Z 79 PC: 32712 | Find next file
2018-12-17T22:52:40.356365181Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:40.362964137Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.376916727Z 61 PC: 32f40 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:52:40.384030159Z 66 PC: 336d6 | Move file pointer
2018-12-17T22:52:40.387257982Z 66 PC: 336e4 | Move file pointer
2018-12-17T22:52:40.389046442Z 66 PC: 336f2 | Move file pointer
2018-12-17T22:52:40.392285707Z 66 PC: 33072 | Move file pointer
2018-12-17T22:52:40.394708719Z 64 PC: 33013 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:40.406256511Z 62 PC: 32f90 | Close file
2018-12-17T22:52:40.416815525Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.427849232Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:40.4308505Z 79 PC: 32712 | Find next file
2018-12-17T22:52:40.434358469Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:40.441632253Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.455739914Z 61 PC: 32f40 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:52:40.46312634Z 66 PC: 336d6 | Move file pointer
2018-12-17T22:52:40.466491911Z 66 PC: 336e4 | Move file pointer
2018-12-17T22:52:40.46833836Z 66 PC: 336f2 | Move file pointer
2018-12-17T22:52:40.471477297Z 66 PC: 33072 | Move file pointer
2018-12-17T22:52:40.473495067Z 64 PC: 33013 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:40.485182451Z 62 PC: 32f90 | Close file
2018-12-17T22:52:40.495541811Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.507546122Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:40.510532281Z 79 PC: 32712 | Find next file
2018-12-17T22:52:40.514542413Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:40.521544106Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.535289537Z 61 PC: 32f40 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:52:40.542579972Z 66 PC: 336d6 | Move file pointer
2018-12-17T22:52:40.544374663Z 66 PC: 336e4 | Move file pointer
2018-12-17T22:52:40.547565206Z 66 PC: 336f2 | Move file pointer
2018-12-17T22:52:40.549347013Z 66 PC: 33072 | Move file pointer
2018-12-17T22:52:40.552467195Z 64 PC: 33013 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:40.563281579Z 62 PC: 32f90 | Close file
2018-12-17T22:52:40.575022134Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.58647104Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:40.588991485Z 79 PC: 32712 | Find next file
2018-12-17T22:52:40.593980296Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:40.601141378Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.612138636Z 61 PC: 32f40 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:52:40.62092929Z 66 PC: 336d6 | Move file pointer
2018-12-17T22:52:40.622561285Z 66 PC: 336e4 | Move file pointer
2018-12-17T22:52:40.624130082Z 66 PC: 336f2 | Move file pointer
2018-12-17T22:52:40.627053193Z 66 PC: 33072 | Move file pointer
2018-12-17T22:52:40.62874437Z 64 PC: 33013 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:40.640284738Z 62 PC: 32f90 | Close file
2018-12-17T22:52:40.649191069Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.661709614Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:40.663026138Z 79 PC: 32712 | Find next file
2018-12-17T22:52:40.666230888Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:40.674218081Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.685063304Z 61 PC: 32f40 | Open file (Filename = 'PAH.COM')
2018-12-17T22:52:40.692418881Z 66 PC: 336d6 | Move file pointer
2018-12-17T22:52:40.695014337Z 66 PC: 336e4 | Move file pointer
2018-12-17T22:52:40.696720963Z 66 PC: 336f2 | Move file pointer
2018-12-17T22:52:40.698812382Z 66 PC: 33072 | Move file pointer
2018-12-17T22:52:40.701632409Z 64 PC: 33013 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:52:40.712182707Z 62 PC: 32f90 | Close file
2018-12-17T22:52:40.721402837Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.734500952Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:40.736345607Z 79 PC: 32712 | Find next file
2018-12-17T22:52:40.743865683Z 26 PC: 326e9 | Set disk transfer address
2018-12-17T22:52:40.745043766Z 78 PC: 326f5 | Find first file
2018-12-17T22:52:40.752428368Z 26 PC: 326e9 | Set disk transfer address
2018-12-17T22:52:40.754317637Z 78 PC: 326f5 | Find first file
2018-12-17T22:52:40.762413355Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:40.768368762Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.778780791Z 61 PC: 32f40 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:52:40.791520812Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:40.798249032Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:40.801230031Z 62 PC: 32f90 | Close file
2018-12-17T22:52:40.803202296Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.813625586Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:40.816120242Z 79 PC: 32712 | Find next file
2018-12-17T22:52:40.823219217Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:40.830189251Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.841120184Z 61 PC: 32f40 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:52:40.848261218Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:40.857399304Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:40.86026106Z 62 PC: 32f90 | Close file
2018-12-17T22:52:40.863645828Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.874242253Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:40.875434233Z 79 PC: 32712 | Find next file
2018-12-17T22:52:40.878151497Z 25 PC: 3318f | Get default drive
2018-12-17T22:52:40.879337815Z 71 PC: 331a2 | Get current directory
2018-12-17T22:52:40.884057711Z 14 PC: 331e8 | Set default drive (Drive = 'A')
2018-12-17T22:52:40.885423106Z 25 PC: 331ec | Get default drive
2018-12-17T22:52:40.887694683Z 59 PC: 33256 | Change current directory
2018-12-17T22:52:40.892156956Z 26 PC: 326e9 | Set disk transfer address
2018-12-17T22:52:40.893347593Z 78 PC: 326f5 | Find first file
2018-12-17T22:52:40.901477454Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:40.912475794Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.926557466Z 61 PC: 32f40 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:52:40.934141463Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:40.943885757Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:40.946864583Z 62 PC: 32f90 | Close file
2018-12-17T22:52:40.948701734Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.959164358Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:40.960668443Z 79 PC: 32712 | Find next file
2018-12-17T22:52:40.968351616Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:40.974897061Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:40.987115654Z 61 PC: 32f40 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:52:40.994966221Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.002188568Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.006179806Z 62 PC: 32f90 | Close file
2018-12-17T22:52:41.008063414Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.019459962Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.02068316Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.023370378Z 26 PC: 326e9 | Set disk transfer address
2018-12-17T22:52:41.025987964Z 78 PC: 326f5 | Find first file
2018-12-17T22:52:41.032500088Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.03470518Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.037387278Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.039476843Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.042185782Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.043241304Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.050076154Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.051376547Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.055705859Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.056998146Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.05984296Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.061912528Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.06478261Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.067436635Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.070992645Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.072255848Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.076734341Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.078011279Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.082188066Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.083623693Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.086420196Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.089035308Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.091984508Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.098065701Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.100926195Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.102053012Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.105122046Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.106756997Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.110432452Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.111552656Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.115492578Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.116677564Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.118594164Z 14 PC: 331e8 | Set default drive (Drive = 'C')
2018-12-17T22:52:41.120358408Z 25 PC: 331ec | Get default drive
2018-12-17T22:52:41.121352916Z 59 PC: 33256 | Change current directory
2018-12-17T22:52:41.125093983Z 26 PC: 326e9 | Set disk transfer address
2018-12-17T22:52:41.132989125Z 78 PC: 326f5 | Find first file
2018-12-17T22:52:41.137305282Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.139313875Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.142150734Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.144498855Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.14659915Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.148507836Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.15127857Z 25 PC: 3318f | Get default drive
2018-12-17T22:52:41.153214277Z 71 PC: 331a2 | Get current directory
2018-12-17T22:52:41.155576043Z 14 PC: 331e8 | Set default drive (Drive = 'C')
2018-12-17T22:52:41.15758148Z 25 PC: 331ec | Get default drive
2018-12-17T22:52:41.159584293Z 59 PC: 33256 | Change current directory
2018-12-17T22:52:41.164192679Z 26 PC: 326e9 | Set disk transfer address
2018-12-17T22:52:41.165938959Z 78 PC: 326f5 | Find first file
2018-12-17T22:52:41.17077266Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:41.175847233Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.18598219Z 61 PC: 32f40 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:52:41.193009822Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.201492957Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.204150299Z 62 PC: 32f90 | Close file
2018-12-17T22:52:41.206966249Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.217021948Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.21825803Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.222019676Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:41.229149319Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.240200138Z 61 PC: 32f40 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:52:41.247860708Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.253934828Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.257366425Z 62 PC: 32f90 | Close file
2018-12-17T22:52:41.259858115Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.269944813Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.272353307Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.276369892Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:41.28284202Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.293962219Z 61 PC: 32f40 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:52:41.300950106Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.304091637Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.306692172Z 62 PC: 32f90 | Close file
2018-12-17T22:52:41.30849573Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.319947823Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.3228051Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.326365678Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:41.334341441Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.344834762Z 61 PC: 32f40 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:52:41.355027979Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.362318405Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.372342034Z 62 PC: 32f90 | Close file
2018-12-17T22:52:41.376334654Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.387351709Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.389239696Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.393915189Z 48 PC: 33102 | Get DOS version
2018-12-17T22:52:41.395881002Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:41.402805889Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.413684615Z 61 PC: 32f40 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:52:41.421942858Z 61 PC: 32f40 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:52:41.435430444Z 60 PC: 32f40 | Create or truncate file
2018-12-17T22:52:41.44756542Z 64 PC: 33013 | Write file or device (Write 7056 bytes on handle 6)
2018-12-17T22:52:41.455492921Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:41.463899212Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:41.47526896Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:41.483310386Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:41.492925518Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:41.49984221Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:41.508507007Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:41.513851657Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:41.520432669Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:41.526234227Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:41.53338522Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:41.542211249Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:41.55250668Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:41.560003742Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:41.569843737Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:41.577831181Z 64 PC: 33013 | Write file or device (Write 664 bytes on handle 6)
2018-12-17T22:52:41.585616306Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:41.588348227Z 62 PC: 32f90 | Close file
2018-12-17T22:52:41.590137268Z 62 PC: 32f90 | Close file
2018-12-17T22:52:41.601212162Z 65 PC: 33089 | Delete file (Filename = 'FDISK.EXE')
2018-12-17T22:52:41.617503425Z 86 PC: 330cd | Rename file
2018-12-17T22:52:41.62995219Z 61 PC: 32f40 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:52:41.639562031Z 64 PC: 32fd2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:41.647214226Z 64 PC: 32fd2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:52:41.650896433Z 62 PC: 32f90 | Close file
2018-12-17T22:52:41.66012045Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.672350544Z 14 PC: 331e8 | Set default drive (Drive = 'C')
2018-12-17T22:52:41.674455809Z 25 PC: 331ec | Get default drive
2018-12-17T22:52:41.676169307Z 59 PC: 33256 | Change current directory
2018-12-17T22:52:41.681303372Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.683938341Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.687239713Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.688706498Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.692757308Z 25 PC: 3318f | Get default drive
2018-12-17T22:52:41.694250904Z 71 PC: 331a2 | Get current directory
2018-12-17T22:52:41.69864091Z 14 PC: 331e8 | Set default drive (Drive = 'C')
2018-12-17T22:52:41.700123575Z 25 PC: 331ec | Get default drive
2018-12-17T22:52:41.701449365Z 59 PC: 33256 | Change current directory
2018-12-17T22:52:41.709051236Z 26 PC: 326e9 | Set disk transfer address
2018-12-17T22:52:41.710409697Z 78 PC: 326f5 | Find first file
2018-12-17T22:52:41.717575879Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:41.724953718Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.735760278Z 61 PC: 32f40 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:52:41.744715089Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.752221881Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.755226274Z 62 PC: 32f90 | Close file
2018-12-17T22:52:41.758864549Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.768865215Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.770036645Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.77445744Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:41.780886086Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.791979374Z 61 PC: 32f40 | Open file (Filename = 'MSD.EXE')
2018-12-17T22:52:41.799266693Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.805487529Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.811134446Z 62 PC: 32f90 | Close file
2018-12-17T22:52:41.813185139Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.823681546Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.825960858Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.829721873Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:41.836169214Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.847869864Z 61 PC: 32f40 | Open file (Filename = 'PACKAGER.EXE')
2018-12-17T22:52:41.855069007Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.8584194Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.862201716Z 62 PC: 32f90 | Close file
2018-12-17T22:52:41.864124287Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.874695705Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.87597594Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.879432313Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:41.887782579Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.897720517Z 61 PC: 32f40 | Open file (Filename = 'PBRUSH.EXE')
2018-12-17T22:52:41.904734061Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.911063712Z 63 PC: 32fd2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:52:41.914470722Z 62 PC: 32f90 | Close file
2018-12-17T22:52:41.916368316Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.926762191Z 26 PC: 3270d | Set disk transfer address
2018-12-17T22:52:41.928003543Z 79 PC: 32712 | Find next file
2018-12-17T22:52:41.934674524Z 48 PC: 33102 | Get DOS version
2018-12-17T22:52:41.937103767Z 67 PC: 32691 | Get or set file attributes
2018-12-17T22:52:41.943271353Z 67 PC: 326b8 | Get or set file attributes
2018-12-17T22:52:41.95385259Z 61 PC: 32f40 | Open file (Filename = 'PBRUSH.EXE')
2018-12-17T22:52:41.962078332Z 61 PC: 32f40 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:52:41.972826662Z 60 PC: 32f40 | Create or truncate file
2018-12-17T22:52:41.98442535Z 64 PC: 33013 | Write file or device (Write 7056 bytes on handle 6)
2018-12-17T22:52:41.993399719Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:42.000830216Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:42.010681773Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:42.018022812Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:42.027001278Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:42.034886751Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:42.044031539Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:42.051103143Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:42.062014169Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:42.069463924Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:42.079271376Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:42.086947636Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:42.095810345Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:42.102929508Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:42.111823836Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:42.118776366Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:42.12877614Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:42.136730843Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:42.145831278Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:42.154300858Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:42.163538891Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:42.170775545Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:42.180649583Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:42.187901416Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:42.196596088Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:42.206136089Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:52:42.215158247Z 63 PC: 33013 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:52:42.22264465Z 64 PC: 33013 | Write file or device (Write 4096 bytes on handle 6)