Sample viewer

vx.netlux.org/Virus.DOS.Khizhnjak.632

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:59:12.526506945Z 37 PC: 1518a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:59:12.530424208Z 78 PC: 151a3 | Find first file
2018-12-17T22:59:12.53783211Z 61 PC: 151e6 | Open file (Filename = 'a:\SLEEP.COM')
2018-12-17T22:59:12.545140887Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:12.552725952Z 66 PC: 1527b | Move file pointer
2018-12-17T22:59:12.554433501Z 66 PC: 152a8 | Move file pointer
2018-12-17T22:59:12.556186376Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:59:12.55908292Z 66 PC: 152d4 | Move file pointer
2018-12-17T22:59:12.560612304Z 64 PC: 152e1 | Write file or device (Write 632 bytes on handle 5)
2018-12-17T22:59:12.5761576Z 66 PC: 152ee | Move file pointer
2018-12-17T22:59:12.577887742Z 64 PC: 152fa | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:59:12.58561243Z 62 PC: 152fe | Close file
2018-12-17T22:59:12.594396408Z 79 PC: 151f6 | Find next file
2018-12-17T22:59:12.59702038Z 61 PC: 151e6 | Open file (Filename = 'a:\PRINT.COM')
2018-12-17T22:59:12.603924456Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:12.610546822Z 66 PC: 1527b | Move file pointer
2018-12-17T22:59:12.611916646Z 66 PC: 152a8 | Move file pointer
2018-12-17T22:59:12.614137731Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:59:12.616913468Z 66 PC: 152d4 | Move file pointer
2018-12-17T22:59:12.618234671Z 64 PC: 152e1 | Write file or device (Write 632 bytes on handle 5)
2018-12-17T22:59:12.627716501Z 66 PC: 152ee | Move file pointer
2018-12-17T22:59:12.630623936Z 64 PC: 152fa | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:59:12.638257622Z 62 PC: 152fe | Close file
2018-12-17T22:59:12.648210719Z 79 PC: 151f6 | Find next file
2018-12-17T22:59:12.65114333Z 61 PC: 151e6 | Open file (Filename = 'a:\HELLO.COM')
2018-12-17T22:59:12.658068576Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:12.666519759Z 66 PC: 1527b | Move file pointer
2018-12-17T22:59:12.66861672Z 66 PC: 152a8 | Move file pointer
2018-12-17T22:59:12.670596491Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:59:12.674465913Z 66 PC: 152d4 | Move file pointer
2018-12-17T22:59:12.676150179Z 64 PC: 152e1 | Write file or device (Write 632 bytes on handle 5)
2018-12-17T22:59:12.68460026Z 66 PC: 152ee | Move file pointer
2018-12-17T22:59:12.693846818Z 64 PC: 152fa | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:59:12.701327588Z 62 PC: 152fe | Close file
2018-12-17T22:59:12.710425486Z 79 PC: 151f6 | Find next file
2018-12-17T22:59:12.71343882Z 61 PC: 151e6 | Open file (Filename = 'a:\PHANG.COM')
2018-12-17T22:59:12.721135956Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:12.728100956Z 66 PC: 1527b | Move file pointer
2018-12-17T22:59:12.729911559Z 66 PC: 152a8 | Move file pointer
2018-12-17T22:59:12.732553274Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:59:12.735240715Z 66 PC: 152d4 | Move file pointer
2018-12-17T22:59:12.736748259Z 64 PC: 152e1 | Write file or device (Write 632 bytes on handle 5)
2018-12-17T22:59:12.747105885Z 66 PC: 152ee | Move file pointer
2018-12-17T22:59:12.749895969Z 64 PC: 152fa | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:59:12.758324269Z 62 PC: 152fe | Close file
2018-12-17T22:59:12.771534416Z 79 PC: 151f6 | Find next file
2018-12-17T22:59:12.774725784Z 61 PC: 151e6 | Open file (Filename = 'a:\PRINTA~1.COM')
2018-12-17T22:59:12.782145218Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:12.78990927Z 66 PC: 1527b | Move file pointer
2018-12-17T22:59:12.791605699Z 66 PC: 152a8 | Move file pointer
2018-12-17T22:59:12.793225854Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:59:12.796685465Z 66 PC: 152d4 | Move file pointer
2018-12-17T22:59:12.798316771Z 64 PC: 152e1 | Write file or device (Write 632 bytes on handle 5)
2018-12-17T22:59:12.806677535Z 66 PC: 152ee | Move file pointer
2018-12-17T22:59:12.808604747Z 64 PC: 152fa | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:59:12.816587089Z 62 PC: 152fe | Close file
2018-12-17T22:59:12.825367501Z 79 PC: 151f6 | Find next file
2018-12-17T22:59:12.828331442Z 61 PC: 151e6 | Open file (Filename = 'a:\MANDEL.COM')
2018-12-17T22:59:12.836101576Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:12.842939356Z 66 PC: 1527b | Move file pointer
2018-12-17T22:59:12.844653027Z 66 PC: 152a8 | Move file pointer
2018-12-17T22:59:12.847366146Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:59:12.850173492Z 66 PC: 152d4 | Move file pointer
2018-12-17T22:59:12.851794409Z 64 PC: 152e1 | Write file or device (Write 632 bytes on handle 5)
2018-12-17T22:59:12.861203492Z 66 PC: 152ee | Move file pointer
2018-12-17T22:59:12.863086211Z 64 PC: 152fa | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:59:12.866348653Z 62 PC: 152fe | Close file
2018-12-17T22:59:12.876124906Z 79 PC: 151f6 | Find next file
2018-12-17T22:59:12.880145323Z 61 PC: 151e6 | Open file (Filename = 'a:\PAH.COM')
2018-12-17T22:59:12.887204078Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:12.894075683Z 66 PC: 1527b | Move file pointer
2018-12-17T22:59:12.896198403Z 66 PC: 152a8 | Move file pointer
2018-12-17T22:59:12.897702379Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:59:12.900305582Z 66 PC: 152d4 | Move file pointer
2018-12-17T22:59:12.902676207Z 64 PC: 152e1 | Write file or device (Write 632 bytes on handle 5)
2018-12-17T22:59:12.911041489Z 66 PC: 152ee | Move file pointer
2018-12-17T22:59:12.912399421Z 64 PC: 152fa | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:59:12.919741881Z 62 PC: 152fe | Close file
2018-12-17T22:59:12.928583969Z 79 PC: 151f6 | Find next file
2018-12-17T22:59:12.931428525Z 78 PC: 151a3 | Find first file
2018-12-17T22:59:12.938434823Z 61 PC: 151e6 | Open file (Filename = 'c:\COMMAND.COM')
2018-12-17T22:59:12.945590551Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:12.948857752Z 66 PC: 1527b | Move file pointer
2018-12-17T22:59:12.95164975Z 66 PC: 152a8 | Move file pointer
2018-12-17T22:59:12.953192159Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:59:12.956276475Z 66 PC: 152d4 | Move file pointer
2018-12-17T22:59:12.95890745Z 64 PC: 152e1 | Write file or device (Write 632 bytes on handle 5)
2018-12-17T22:59:13.30793517Z 66 PC: 152ee | Move file pointer
2018-12-17T22:59:13.309805545Z 64 PC: 152fa | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:59:13.316593412Z 62 PC: 152fe | Close file
2018-12-17T22:59:13.324574762Z 79 PC: 151f6 | Find next file
2018-12-17T22:59:13.32760123Z 78 PC: 151a3 | Find first file
2018-12-17T22:59:13.334600165Z 61 PC: 151e6 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:59:13.342659652Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:13.345699836Z 66 PC: 1527b | Move file pointer
2018-12-17T22:59:13.347479841Z 66 PC: 152a8 | Move file pointer
2018-12-17T22:59:13.350116727Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:59:13.353413973Z 62 PC: 152fe | Close file
2018-12-17T22:59:13.355552042Z 79 PC: 151f6 | Find next file
2018-12-17T22:59:13.359272064Z 61 PC: 151e6 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:59:13.367250849Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:13.370327832Z 66 PC: 1527b | Move file pointer
2018-12-17T22:59:13.372713225Z 66 PC: 152a8 | Move file pointer
2018-12-17T22:59:13.374275001Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:59:13.379004098Z 62 PC: 152fe | Close file
2018-12-17T22:59:13.380920891Z 79 PC: 151f6 | Find next file
2018-12-17T22:59:13.38431544Z 61 PC: 151e6 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:59:13.391266775Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:13.3940152Z 66 PC: 1527b | Move file pointer
2018-12-17T22:59:13.396596472Z 66 PC: 152a8 | Move file pointer
2018-12-17T22:59:13.3981014Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:59:13.401138548Z 62 PC: 152fe | Close file
2018-12-17T22:59:13.404222835Z 79 PC: 151f6 | Find next file
2018-12-17T22:59:13.407161398Z 61 PC: 151e6 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:59:13.414075572Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:13.417909208Z 66 PC: 1527b | Move file pointer
2018-12-17T22:59:13.419502141Z 66 PC: 152a8 | Move file pointer
2018-12-17T22:59:13.421147633Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:59:13.425478032Z 62 PC: 152fe | Close file
2018-12-17T22:59:13.427443977Z 79 PC: 151f6 | Find next file
2018-12-17T22:59:13.430513917Z 61 PC: 151e6 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:59:13.439106676Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:13.442198918Z 66 PC: 1527b | Move file pointer
2018-12-17T22:59:13.444821908Z 66 PC: 152a8 | Move file pointer
2018-12-17T22:59:13.447118153Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:59:13.450619033Z 62 PC: 152fe | Close file
2018-12-17T22:59:13.452642055Z 79 PC: 151f6 | Find next file
2018-12-17T22:59:13.455705553Z 61 PC: 151e6 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:59:13.462886498Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:13.465576985Z 66 PC: 1527b | Move file pointer
2018-12-17T22:59:13.467131326Z 66 PC: 152a8 | Move file pointer
2018-12-17T22:59:13.469641554Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:59:13.472596648Z 62 PC: 152fe | Close file
2018-12-17T22:59:13.474411359Z 79 PC: 151f6 | Find next file
2018-12-17T22:59:13.477670213Z 61 PC: 151e6 | Open file (Filename = 'PAH.COM')
2018-12-17T22:59:13.484592894Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:59:13.48737868Z 66 PC: 1527b | Move file pointer
2018-12-17T22:59:13.492506898Z 66 PC: 152a8 | Move file pointer
2018-12-17T22:59:13.493997149Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:59:13.497010693Z 62 PC: 152fe | Close file
2018-12-17T22:59:13.499468041Z 79 PC: 151f6 | Find next file
2018-12-17T22:59:13.502057027Z 42 PC: 1520b | Get date 0x1520b: cmp dl, 1
0x1520e: jne 0x15234
0x15210: cmp al, 1
0x15212: jne 0x15234
0x15214: mov dx, 2
0x15217: mov cx, 1
0x1521a: mov ax, 0x201
0x1521d: mov bx, 0x388
0x15220: int 0x13
0x15222: jb 0x15234
0x15224: cmp byte ptr es:[bx + 1], 0xfe
0x15229: je 0x15234
0x1522b: mov byte ptr es:[bx + 1], 0xfe
0x15230: inc ah
0x15232: int 0x13
0x15234: mov cx, 0x80
0x15237: mov bx, 0
0x1523a: mov al, byte ptr [bx + 0x2d4]
0x1523e: mov byte ptr cs:[bx + 0x80], al
0x15243: inc bx
2018-12-17T22:59:13.504300874Z 37 PC: 1525b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:59:13.505848172Z 76 PC: 1514a | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":13130,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:37:35.885173449Z 37 PC: 1518a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:37:35.887035883Z 78 PC: 151a3 | Find first file
2018-12-25T12:37:35.893732044Z 61 PC: 151e6 | Open file (Filename = 'a:\SLEEP.COM')
2018-12-25T12:37:35.901091826Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:37:35.913417229Z 66 PC: 1527b | Move file pointer
2018-12-25T12:37:35.915029387Z 66 PC: 152a8 | Move file pointer
2018-12-25T12:37:35.916421368Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-25T12:37:35.919243104Z 66 PC: 152d4 | Move file pointer
2018-12-25T12:37:35.92093274Z 64 PC: 152e1 | Write file or device (Write 632 bytes on handle 5)
2018-12-25T12:37:35.936926325Z 66 PC: 152ee | Move file pointer
2018-12-25T12:37:35.938547231Z 64 PC: 152fa | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:37:35.947079807Z 62 PC: 152fe | Close file
2018-12-25T12:37:35.956177856Z 79 PC: 151f6 | Find next file
2018-12-25T12:37:35.959343625Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:35.968433953Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:35.975649052Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:35.977827798Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:35.983518221Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:35.993134185Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:35.995032152Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.00418009Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.006606276Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.01478261Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.024216791Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.028055885Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.035899246Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.043580244Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.046763019Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.048681986Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.051804638Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.054211763Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.12455775Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.126314392Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.134475369Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.205883557Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.209360408Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.217985337Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.225412479Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.226844807Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.228512512Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.230988369Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.232183507Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.373446896Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.376782041Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.384898125Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.403125561Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.407146812Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.415392844Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.42242244Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.424633127Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.426420571Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.429424072Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.431607665Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.46315088Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.464647789Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.470083129Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.505754317Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.508656285Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.516419753Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.52344825Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.524991788Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.526498818Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.528997883Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.53021439Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.549158885Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.556624969Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.559630962Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.765896784Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.77383706Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.78346799Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.791778694Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.795136726Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.796983221Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.799785537Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.802082158Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.8112319Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.812964345Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.822310394Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.831778737Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.834756703Z 78 PC: 151a3 | Find first file (See above)
2018-12-25T12:37:36.84194443Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.849881019Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.853199025Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.854976865Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.857813068Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.861423141Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.862946244Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:37.201719524Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:37.203852572Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:37.207525261Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.217453529Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.221280372Z 78 PC: 151a3 | Find first file (See above)
2018-12-25T12:37:37.228632116Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.237185307Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.240933671Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.243074562Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.244978643Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.248838019Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.250799764Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.254245119Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.261710141Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.264320259Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.265683995Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.26746169Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.27039411Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.272383919Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.275575538Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.280023443Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.281845734Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.283327792Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.284354008Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.286577981Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.288202445Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.290063866Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.294207219Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.296437034Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.297519207Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.298795265Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.302795116Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.30485799Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.307707329Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.315174817Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.3179164Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.319330542Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.321098305Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.324180939Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.326167863Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.329588139Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.336798287Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.339936049Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.342637288Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.343988916Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.346911439Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.349117445Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.352039601Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.359764345Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.36303933Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.364533681Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.365744546Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.369300545Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.371099966Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.373605087Z 42 PC: 1520b | Get date 0x1520b: cmp dl, 1
0x1520e: jne 0x15234
0x15210: cmp al, 1
0x15212: jne 0x15234
0x15214: mov dx, 2
0x15217: mov cx, 1
0x1521a: mov ax, 0x201
0x1521d: mov bx, 0x388
0x15220: int 0x13
0x15222: jb 0x15234
0x15224: cmp byte ptr es:[bx + 1], 0xfe
0x15229: je 0x15234
0x1522b: mov byte ptr es:[bx + 1], 0xfe
0x15230: inc ah
0x15232: int 0x13
0x15234: mov cx, 0x80
0x15237: mov bx, 0
0x1523a: mov al, byte ptr [bx + 0x2d4]
0x1523e: mov byte ptr cs:[bx + 0x80], al
0x15243: inc bx
2018-12-25T12:37:37.376332729Z 37 PC: 1525b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:37:37.377451435Z 76 PC: 1514a | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":13130,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:37:35.950836937Z 37 PC: 1518a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:37:35.952979168Z 78 PC: 151a3 | Find first file
2018-12-25T12:37:35.95987522Z 61 PC: 151e6 | Open file (Filename = 'a:\SLEEP.COM')
2018-12-25T12:37:35.968157021Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:37:35.975574217Z 66 PC: 1527b | Move file pointer
2018-12-25T12:37:35.977296941Z 66 PC: 152a8 | Move file pointer
2018-12-25T12:37:35.978791624Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-25T12:37:35.98272993Z 66 PC: 152d4 | Move file pointer
2018-12-25T12:37:35.984850655Z 64 PC: 152e1 | Write file or device (Write 632 bytes on handle 5)
2018-12-25T12:37:36.000256017Z 66 PC: 152ee | Move file pointer
2018-12-25T12:37:36.001876547Z 64 PC: 152fa | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:37:36.010010182Z 62 PC: 152fe | Close file
2018-12-25T12:37:36.031725391Z 79 PC: 151f6 | Find next file
2018-12-25T12:37:36.037241486Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.047759609Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.055343954Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.057226072Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.061527426Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.064863837Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.066285963Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.191368065Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.193823289Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.208402297Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.373832965Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.378184452Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.384784749Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.389442722Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.392313126Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.393780448Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.396605054Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.400699599Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.415396933Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.416883594Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.425088951Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.463068834Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.466032555Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.474786134Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.482092155Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.48374909Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.48540529Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.488554429Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.49002784Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.658658171Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.661624461Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.669904343Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.697853759Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.701672245Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.709011831Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.716266086Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.717937343Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.719299237Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.721712036Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.723153484Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.765474921Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.767734381Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.775390709Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.785422106Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.788969568Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.79695983Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.805307949Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.80697784Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.808319422Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.812190156Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.813647895Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.82335521Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.825618393Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.828882308Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.838292272Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.842441221Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.850275086Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.85766203Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.859684475Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.861402731Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.864056129Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.86578675Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:37.051091571Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:37.053805204Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:37.061815094Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.182952881Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.187848928Z 78 PC: 151a3 | Find first file (See above)
2018-12-25T12:37:37.194292342Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.203396174Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.206866585Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.208973868Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.21223409Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.216028309Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:37.218089471Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:37.564247903Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:37.565720876Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:37.567900099Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.57476215Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.577667076Z 78 PC: 151a3 | Find first file (See above)
2018-12-25T12:37:37.585541962Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.594211209Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.598006275Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.600102177Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.602081464Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.606973748Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.609061334Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.612302245Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.622736161Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.625692617Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.627811015Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.630882451Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.634071987Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.637121896Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.641028769Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.648604696Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.651879752Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.655434225Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.657319122Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.660833558Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.663968515Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.668080866Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.675794698Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.679084554Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.682228751Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.684173494Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.68742928Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.691011798Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.694365939Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.701947318Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.706377825Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.708405046Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.710372229Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.715226431Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.717911936Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.720841214Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.72916618Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.73202937Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.733588618Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.735390909Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.738455466Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.740099111Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.743274993Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.750339035Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.753045919Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.755407171Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.756763694Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.759752366Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.761902703Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.764572616Z 42 PC: 1520b | Get date 0x1520b: cmp dl, 1
0x1520e: jne 0x15234
0x15210: cmp al, 1
0x15212: jne 0x15234
0x15214: mov dx, 2
0x15217: mov cx, 1
0x1521a: mov ax, 0x201
0x1521d: mov bx, 0x388
0x15220: int 0x13
0x15222: jb 0x15234
0x15224: cmp byte ptr es:[bx + 1], 0xfe
0x15229: je 0x15234
0x1522b: mov byte ptr es:[bx + 1], 0xfe
0x15230: inc ah
0x15232: int 0x13
0x15234: mov cx, 0x80
0x15237: mov bx, 0
0x1523a: mov al, byte ptr [bx + 0x2d4]
0x1523e: mov byte ptr cs:[bx + 0x80], al
0x15243: inc bx
2018-12-25T12:37:37.766719336Z 37 PC: 1525b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:37:37.768049846Z 76 PC: 1514a | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":9,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":13130,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:37:36.093190236Z 37 PC: 1518a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:37:36.09531162Z 78 PC: 151a3 | Find first file
2018-12-25T12:37:36.102037497Z 61 PC: 151e6 | Open file (Filename = 'a:\SLEEP.COM')
2018-12-25T12:37:36.109093158Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:37:36.116881509Z 66 PC: 1527b | Move file pointer
2018-12-25T12:37:36.118377939Z 66 PC: 152a8 | Move file pointer
2018-12-25T12:37:36.120560099Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-25T12:37:36.123485053Z 66 PC: 152d4 | Move file pointer
2018-12-25T12:37:36.125766539Z 64 PC: 152e1 | Write file or device (Write 632 bytes on handle 5)
2018-12-25T12:37:36.765875732Z 66 PC: 152ee | Move file pointer
2018-12-25T12:37:36.768021647Z 64 PC: 152fa | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:37:36.777397367Z 62 PC: 152fe | Close file
2018-12-25T12:37:36.786386773Z 79 PC: 151f6 | Find next file
2018-12-25T12:37:36.789426128Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.797030911Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.804496844Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.805941737Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.807972062Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.810576397Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.811987803Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.821621297Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.823015029Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.8309279Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.839737652Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.842330012Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.847238428Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.85476974Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.856979512Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.859320797Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.863019284Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.865215476Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.95075471Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.952245543Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.960392399Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.050812383Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.053910494Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.062418147Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.069697506Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.071355577Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.073557242Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.076273001Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:37.077643064Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:37.183361271Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:37.184934606Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:37.192271766Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.201717471Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.204986635Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.212210337Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.221293049Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.223716905Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.22556545Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.228617075Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:37.231123206Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:37.420918206Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:37.422700855Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:37.431614853Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.562675963Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.570215063Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.581516443Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.620336119Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.62256591Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.625723766Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.6297043Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:37.632420474Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:37.643639991Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:37.646585061Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:37.651205529Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.661217072Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.664922103Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.672757969Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.680406777Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.683387756Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.685554458Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.688807038Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:37.691692414Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:37.904346244Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:37.906282652Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:37.915317582Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.048598036Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.052558398Z 78 PC: 151a3 | Find first file (See above)
2018-12-25T12:37:38.059640432Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.066532089Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.069448749Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.071138487Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.073265111Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.076514807Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:38.077974937Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:38.70939603Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:38.71133778Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:38.714709808Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.728199549Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.73409753Z 78 PC: 151a3 | Find first file (See above)
2018-12-25T12:37:38.741043379Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.749837527Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.756135084Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.758309198Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.761459449Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.772204254Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.774583576Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.778029297Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.786253164Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.789283462Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.791710835Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.794651096Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.798248984Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.800632594Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.805418067Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.81335221Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.816720138Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.819839172Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.822325248Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.826030291Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.829407117Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.833334741Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.84124696Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.845737893Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.848854447Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.850847902Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.854514238Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.857581317Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.859699107Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.864267954Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.867137839Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.869115773Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.870458187Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.873151103Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.874582644Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.877020318Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.882948256Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.885309425Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.886601667Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.888431391Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.89050478Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.891994226Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.894777988Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.899417219Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.901656159Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.903623297Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.904990454Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.907266983Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.909465086Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.911428543Z 42 PC: 1520b | Get date 0x1520b: cmp dl, 1
0x1520e: jne 0x15234
0x15210: cmp al, 1
0x15212: jne 0x15234
0x15214: mov dx, 2
0x15217: mov cx, 1
0x1521a: mov ax, 0x201
0x1521d: mov bx, 0x388
0x15220: int 0x13
0x15222: jb 0x15234
0x15224: cmp byte ptr es:[bx + 1], 0xfe
0x15229: je 0x15234
0x1522b: mov byte ptr es:[bx + 1], 0xfe
0x15230: inc ah
0x15232: int 0x13
0x15234: mov cx, 0x80
0x15237: mov bx, 0
0x1523a: mov al, byte ptr [bx + 0x2d4]
0x1523e: mov byte ptr cs:[bx + 0x80], al
0x15243: inc bx
2018-12-25T12:37:38.91347267Z 37 PC: 1525b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:37:38.915405073Z 76 PC: 1514a | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":13130,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:37:36.430903728Z 37 PC: 1518a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:37:36.432752589Z 78 PC: 151a3 | Find first file
2018-12-25T12:37:36.4390974Z 61 PC: 151e6 | Open file (Filename = 'a:\SLEEP.COM')
2018-12-25T12:37:36.446552468Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:37:36.45375707Z 66 PC: 1527b | Move file pointer
2018-12-25T12:37:36.455248534Z 66 PC: 152a8 | Move file pointer
2018-12-25T12:37:36.456534282Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-25T12:37:36.459432518Z 66 PC: 152d4 | Move file pointer
2018-12-25T12:37:36.460862193Z 64 PC: 152e1 | Write file or device (Write 632 bytes on handle 5)
2018-12-25T12:37:36.475164216Z 66 PC: 152ee | Move file pointer
2018-12-25T12:37:36.476494205Z 64 PC: 152fa | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:37:36.482949693Z 62 PC: 152fe | Close file
2018-12-25T12:37:36.491261408Z 79 PC: 151f6 | Find next file
2018-12-25T12:37:36.494279697Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.501342809Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.507538033Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.508867171Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.510414055Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.512792608Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.513981344Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.52269817Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.524043347Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.53050254Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.540212812Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.542697999Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.548973665Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.556731556Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.558319836Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.559905275Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.56956234Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.570690116Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.57714623Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.579030975Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.585482501Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.593604122Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.596711313Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.603035291Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.60921601Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.611014862Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.612257786Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.614650089Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.61667847Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.624516518Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.625726249Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.63260829Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.64112342Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.643723931Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.650457219Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.657055337Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.658370503Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.659908655Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.662157491Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.663391287Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.671443914Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.672610389Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.678788436Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.687186563Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.689605519Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.695729944Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.702601411Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.703897356Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.705048808Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.707905812Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.709109977Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.716923636Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.71875214Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.722080663Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.731168912Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.749234205Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.756079628Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.762376434Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.764095149Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.766167898Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.768718423Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.771332538Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.781285029Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.783980662Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.791940624Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.801379673Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.803818841Z 78 PC: 151a3 | Find first file (See above)
2018-12-25T12:37:36.810013443Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.816789419Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.819500464Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.821651301Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.823536766Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.826401218Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.827821548Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:38.383170512Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:38.384480145Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:38.387115552Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.796825831Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.799309355Z 78 PC: 151a3 | Find first file (See above)
2018-12-25T12:37:38.805809115Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.812757452Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.815258823Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.816556271Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.818228996Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.821029413Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.822704184Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.825623925Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.832047685Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.834498234Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.836397264Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.837685794Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.840303955Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.842552834Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.845143595Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.8514179Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.854448028Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.856042101Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.857561903Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.861224404Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.863028181Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.865526475Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.872696994Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.874987115Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.876227218Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.87780957Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.88040568Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.881928282Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.884709863Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.891181923Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.893982112Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.89549216Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.896637059Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.899213953Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.90146252Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.903897898Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.91004038Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.912673312Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.913899507Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.91521158Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.918529942Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.920552846Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.923378509Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.930054077Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.932414691Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.933564225Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.935161761Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.938451953Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.939978663Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.942813332Z 42 PC: 1520b | Get date 0x1520b: cmp dl, 1
0x1520e: jne 0x15234
0x15210: cmp al, 1
0x15212: jne 0x15234
0x15214: mov dx, 2
0x15217: mov cx, 1
0x1521a: mov ax, 0x201
0x1521d: mov bx, 0x388
0x15220: int 0x13
0x15222: jb 0x15234
0x15224: cmp byte ptr es:[bx + 1], 0xfe
0x15229: je 0x15234
0x1522b: mov byte ptr es:[bx + 1], 0xfe
0x15230: inc ah
0x15232: int 0x13
0x15234: mov cx, 0x80
0x15237: mov bx, 0
0x1523a: mov al, byte ptr [bx + 0x2d4]
0x1523e: mov byte ptr cs:[bx + 0x80], al
0x15243: inc bx
2018-12-25T12:37:38.944880483Z 37 PC: 1525b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:37:38.945921794Z 76 PC: 1514a | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":13130,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:37:36.667140133Z 37 PC: 1518a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:37:36.669187645Z 78 PC: 151a3 | Find first file
2018-12-25T12:37:36.675843506Z 61 PC: 151e6 | Open file (Filename = 'a:\SLEEP.COM')
2018-12-25T12:37:36.683072923Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:37:36.690424709Z 66 PC: 1527b | Move file pointer
2018-12-25T12:37:36.691924327Z 66 PC: 152a8 | Move file pointer
2018-12-25T12:37:36.694128725Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-25T12:37:36.696918721Z 66 PC: 152d4 | Move file pointer
2018-12-25T12:37:36.698463272Z 64 PC: 152e1 | Write file or device (Write 632 bytes on handle 5)
2018-12-25T12:37:36.769874978Z 66 PC: 152ee | Move file pointer
2018-12-25T12:37:36.771847717Z 64 PC: 152fa | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:37:36.779998188Z 62 PC: 152fe | Close file
2018-12-25T12:37:36.789417156Z 79 PC: 151f6 | Find next file
2018-12-25T12:37:36.792509191Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.800610161Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.807930573Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.809951754Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.817692541Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.819776166Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.821836379Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:36.828309618Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:36.830127412Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:36.837192481Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:36.847422268Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:36.850600474Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:36.855132619Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:36.860161334Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:36.862002403Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:36.863726799Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:36.867162279Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:36.8692635Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:37.050606183Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:37.052298756Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:37.060359188Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.183244162Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.186752072Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.195988377Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.203726169Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.205837297Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.208904514Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.212631154Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:37.214696529Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:37.225138225Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:37.227613608Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:37.235429757Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.420673468Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.425861181Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.434788871Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.442246662Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.444485168Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.446013913Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.449101064Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:37.451890382Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:37.563099396Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:37.5650459Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:37.57436605Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.585414968Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.588875897Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.60096486Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.608324881Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.60997782Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.612309744Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.615884778Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:37.618051712Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:37.628558723Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:37.632239584Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:37.635741255Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.645428325Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.650472677Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.658312696Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.666700811Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.670234281Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.672319269Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.675588724Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:37.678410643Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:37.69322049Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:37.69519416Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:37.703916207Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:37.904687464Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:37.90810662Z 78 PC: 151a3 | Find first file (See above)
2018-12-25T12:37:37.914963719Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:37.92387421Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:37.926896265Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:37.928599949Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:37.931081005Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:37.935321433Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:37.936836735Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:38.708669413Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:38.710557697Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:38.713626152Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.723053771Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.726705765Z 78 PC: 151a3 | Find first file (See above)
2018-12-25T12:37:38.735856244Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.744402271Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.747934031Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.749954796Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.753210508Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.757742376Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.760382888Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.764331749Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.774193876Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.777266153Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.779165183Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.782180854Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.785856524Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.788194478Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.792900356Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.800435386Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.802434589Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.804591357Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.805985224Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.808188994Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.810261736Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.812610059Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.816944223Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.820144181Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.822122609Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.823360676Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.825643738Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.827733461Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.829811129Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.834445794Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.83719078Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.838551892Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.839867856Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.842886519Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.844547948Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.847272436Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.852190501Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.854167004Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.855478652Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.857936221Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.861626564Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.864359074Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.869291996Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.876820478Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.880311617Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.883068285Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.885063447Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.888532272Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.892069359Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.895281725Z 42 PC: 1520b | Get date 0x1520b: cmp dl, 1
0x1520e: jne 0x15234
0x15210: cmp al, 1
0x15212: jne 0x15234
0x15214: mov dx, 2
0x15217: mov cx, 1
0x1521a: mov ax, 0x201
0x1521d: mov bx, 0x388
0x15220: int 0x13
0x15222: jb 0x15234
0x15224: cmp byte ptr es:[bx + 1], 0xfe
0x15229: je 0x15234
0x1522b: mov byte ptr es:[bx + 1], 0xfe
0x15230: inc ah
0x15232: int 0x13
0x15234: mov cx, 0x80
0x15237: mov bx, 0
0x1523a: mov al, byte ptr [bx + 0x2d4]
0x1523e: mov byte ptr cs:[bx + 0x80], al
0x15243: inc bx
2018-12-25T12:37:38.898117098Z 37 PC: 1525b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:37:38.900664426Z 76 PC: 1514a | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":9,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":13130,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:37:36.81400086Z 37 PC: 1518a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:37:36.815406161Z 78 PC: 151a3 | Find first file
2018-12-25T12:37:36.821175238Z 61 PC: 151e6 | Open file (Filename = 'a:\SLEEP.COM')
2018-12-25T12:37:36.827372287Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:37:36.834347571Z 66 PC: 1527b | Move file pointer
2018-12-25T12:37:36.835619578Z 66 PC: 152a8 | Move file pointer
2018-12-25T12:37:36.836765661Z 63 PC: 152b4 | Read file or device (Read 2 bytes on handle 5)
2018-12-25T12:37:36.839917488Z 66 PC: 152d4 | Move file pointer
2018-12-25T12:37:36.841349381Z 64 PC: 152e1 | Write file or device (Write 632 bytes on handle 5)
2018-12-25T12:37:38.383168576Z 66 PC: 152ee | Move file pointer
2018-12-25T12:37:38.385629629Z 64 PC: 152fa | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:37:38.392063125Z 62 PC: 152fe | Close file
2018-12-25T12:37:38.727995159Z 79 PC: 151f6 | Find next file
2018-12-25T12:37:38.731110679Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.735718255Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.742503989Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.744355341Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.745681465Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.74846056Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:38.750839617Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:38.768595596Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:38.770817804Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:38.777767692Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:38.817987047Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:38.836095198Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:38.845065892Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:38.85143862Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:38.8527304Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:38.854979468Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:38.856722871Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:38.857722833Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:39.143016148Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:39.144779807Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:39.153908296Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:39.162882858Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:39.165751226Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:39.172892158Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:39.179292772Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:39.180836452Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:39.182106929Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:39.185288445Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:39.188075893Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:39.196458209Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:39.197883997Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:39.20492464Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:39.210789672Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:39.212705372Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:39.219490946Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:39.225908452Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:39.22771783Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:39.230489581Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:39.233179192Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:39.23479979Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:39.244431238Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:39.246087093Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:39.252751239Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:39.259772313Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:39.262280035Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:39.266526084Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:39.271427893Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:39.272958604Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:39.274025788Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:39.276441415Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:39.277910311Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:39.284267137Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:39.285724614Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:39.287817667Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:39.293954329Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:39.297841232Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:39.301922176Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:39.306311535Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:39.308053861Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:39.309135486Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:39.311274633Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:39.313312271Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:39.319356796Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:39.32073172Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:39.325344829Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:39.330826882Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:39.332499395Z 78 PC: 151a3 | Find first file (See above)
2018-12-25T12:37:39.336460322Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:39.340255296Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:39.34198961Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:39.343567443Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:39.344585305Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:39.346638991Z 66 PC: 152d4 | Move file pointer (See above)
2018-12-25T12:37:39.348914604Z 64 PC: 152e1 | Write file or device (See above)
2018-12-25T12:37:39.68228703Z 66 PC: 152ee | Move file pointer (See above)
2018-12-25T12:37:39.684013999Z 64 PC: 152fa | Write file or device (See above)
2018-12-25T12:37:39.687432033Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:39.695859319Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:39.698720892Z 78 PC: 151a3 | Find first file (See above)
2018-12-25T12:37:39.704944261Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:39.721365621Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:39.724176268Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:39.725873412Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:39.729015997Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:39.73256147Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:39.734560667Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:39.738587634Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:39.745269406Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:39.748088624Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:39.750714209Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:39.752768853Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:39.755660803Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:39.758080224Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:39.760701322Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:39.766964666Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:39.770263414Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:39.77167058Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:39.772956106Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:39.776459916Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:39.778931754Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:39.781533209Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:39.788562705Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:39.79141062Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:39.79275535Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:39.794604205Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:39.798126559Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:39.799819763Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:39.803149455Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:39.809680685Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:39.812429016Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:39.813953546Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:39.816093111Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:39.819033854Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:39.821449973Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:39.824636299Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:39.8312799Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:39.834139654Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:39.836680863Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:39.838262653Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:39.84152455Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:39.843791628Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:39.846678679Z 61 PC: 151e6 | Open file (See above)
2018-12-25T12:37:39.854673154Z 63 PC: 1526e | Read file or device (See above)
2018-12-25T12:37:39.857317783Z 66 PC: 1527b | Move file pointer (See above)
2018-12-25T12:37:39.858974909Z 66 PC: 152a8 | Move file pointer (See above)
2018-12-25T12:37:39.861245472Z 63 PC: 152b4 | Read file or device (See above)
2018-12-25T12:37:39.86434667Z 62 PC: 152fe | Close file (See above)
2018-12-25T12:37:39.866331863Z 79 PC: 151f6 | Find next file (See above)
2018-12-25T12:37:39.869522Z 42 PC: 1520b | Get date 0x1520b: cmp dl, 1
0x1520e: jne 0x15234
0x15210: cmp al, 1
0x15212: jne 0x15234
0x15214: mov dx, 2
0x15217: mov cx, 1
0x1521a: mov ax, 0x201
0x1521d: mov bx, 0x388
0x15220: int 0x13
0x15222: jb 0x15234
0x15224: cmp byte ptr es:[bx + 1], 0xfe
0x15229: je 0x15234
0x1522b: mov byte ptr es:[bx + 1], 0xfe
0x15230: inc ah
0x15232: int 0x13
0x15234: mov cx, 0x80
0x15237: mov bx, 0
0x1523a: mov al, byte ptr [bx + 0x2d4]
0x1523e: mov byte ptr cs:[bx + 0x80], al
0x15243: inc bx
2018-12-25T12:37:39.872759977Z 37 PC: 1525b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:37:39.873974536Z 76 PC: 1514a | Terminate with return code (Return code = '36')