Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Kye.6288

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:02:43.079291124Z 53 PC: 1331a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:43.080729964Z 53 PC: 1331a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:02:43.081820639Z 53 PC: 1331a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:02:43.082708143Z 53 PC: 1331a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:02:43.084116865Z 53 PC: 1331a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:43.085220226Z 53 PC: 1331a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:43.086283821Z 53 PC: 1331a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:02:43.087733255Z 53 PC: 1331a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:02:43.088976123Z 53 PC: 1331a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:02:43.090060015Z 53 PC: 1331a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:02:43.091152757Z 53 PC: 1331a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:02:43.092867874Z 53 PC: 1331a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:02:43.094393909Z 53 PC: 1331a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:02:43.09582522Z 53 PC: 1331a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:02:43.097567334Z 53 PC: 1331a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:02:43.098592743Z 53 PC: 1331a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:02:43.099667395Z 53 PC: 1331a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:02:43.1012739Z 53 PC: 1331a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:43.102443098Z 53 PC: 1331a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:02:43.103385077Z 37 PC: 1332f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:43.104652852Z 37 PC: 13337 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:43.105536909Z 37 PC: 1333f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:43.106421704Z 37 PC: 13347 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:43.108339026Z 68 PC: 13f91 | I/O control for devices (Set for = '')
2018-12-17T22:02:43.109730322Z 26 PC: 13189 | Set disk transfer address
2018-12-17T22:02:43.110538297Z 78 PC: 13195 | Find first file
2018-12-17T22:02:43.117156813Z 61 PC: 139e0 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:02:43.121216524Z 66 PC: 14090 | Move file pointer
2018-12-17T22:02:43.122167389Z 66 PC: 1409e | Move file pointer
2018-12-17T22:02:43.123645198Z 66 PC: 140ac | Move file pointer
2018-12-17T22:02:43.125042486Z 62 PC: 13a30 | Close file
2018-12-17T22:02:43.126713705Z 26 PC: 131ad | Set disk transfer address
2018-12-17T22:02:43.128067503Z 79 PC: 131b2 | Find next file
2018-12-17T22:02:43.130872062Z 61 PC: 139e0 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:02:43.13716082Z 66 PC: 14090 | Move file pointer
2018-12-17T22:02:43.139201698Z 66 PC: 1409e | Move file pointer
2018-12-17T22:02:43.14051523Z 66 PC: 140ac | Move file pointer
2018-12-17T22:02:43.141938236Z 62 PC: 13a30 | Close file
2018-12-17T22:02:43.144518725Z 26 PC: 131ad | Set disk transfer address
2018-12-17T22:02:43.145503155Z 79 PC: 131b2 | Find next file
2018-12-17T22:02:43.148445422Z 61 PC: 139e0 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:02:43.156319699Z 66 PC: 14090 | Move file pointer
2018-12-17T22:02:43.157887985Z 66 PC: 1409e | Move file pointer
2018-12-17T22:02:43.159502054Z 66 PC: 140ac | Move file pointer
2018-12-17T22:02:43.161602038Z 62 PC: 13a30 | Close file
2018-12-17T22:02:43.163515423Z 26 PC: 131ad | Set disk transfer address
2018-12-17T22:02:43.164485712Z 79 PC: 131b2 | Find next file
2018-12-17T22:02:43.168172284Z 61 PC: 139e0 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:02:43.174502859Z 66 PC: 14090 | Move file pointer
2018-12-17T22:02:43.175717592Z 66 PC: 1409e | Move file pointer
2018-12-17T22:02:43.177220542Z 66 PC: 140ac | Move file pointer
2018-12-17T22:02:43.178992955Z 62 PC: 13a30 | Close file
2018-12-17T22:02:43.18088036Z 26 PC: 131ad | Set disk transfer address
2018-12-17T22:02:43.182525088Z 79 PC: 131b2 | Find next file
2018-12-17T22:02:43.185498965Z 61 PC: 139e0 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:02:43.191880001Z 66 PC: 14090 | Move file pointer
2018-12-17T22:02:43.193854446Z 66 PC: 1409e | Move file pointer
2018-12-17T22:02:43.195145Z 66 PC: 140ac | Move file pointer
2018-12-17T22:02:43.196757053Z 62 PC: 13a30 | Close file
2018-12-17T22:02:43.19918532Z 26 PC: 131ad | Set disk transfer address
2018-12-17T22:02:43.20086568Z 79 PC: 131b2 | Find next file
2018-12-17T22:02:43.203675922Z 61 PC: 139e0 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:02:43.211269453Z 66 PC: 14090 | Move file pointer
2018-12-17T22:02:43.212551819Z 66 PC: 1409e | Move file pointer
2018-12-17T22:02:43.214257456Z 66 PC: 140ac | Move file pointer
2018-12-17T22:02:43.216206628Z 62 PC: 13a30 | Close file
2018-12-17T22:02:43.218386858Z 26 PC: 131ad | Set disk transfer address
2018-12-17T22:02:43.219472191Z 79 PC: 131b2 | Find next file
2018-12-17T22:02:43.222466042Z 61 PC: 139e0 | Open file (Filename = 'PAH.COM')
2018-12-17T22:02:43.230519891Z 66 PC: 14090 | Move file pointer
2018-12-17T22:02:43.231941358Z 66 PC: 1409e | Move file pointer
2018-12-17T22:02:43.233354529Z 66 PC: 140ac | Move file pointer
2018-12-17T22:02:43.235580542Z 62 PC: 13a30 | Close file
2018-12-17T22:02:43.237936691Z 26 PC: 131ad | Set disk transfer address
2018-12-17T22:02:43.239106893Z 79 PC: 131b2 | Find next file
2018-12-17T22:02:43.242359391Z 26 PC: 13189 | Set disk transfer address
2018-12-17T22:02:43.243504438Z 78 PC: 13195 | Find first file
2018-12-17T22:02:43.249607967Z 67 PC: 13131 | Get or set file attributes
2018-12-17T22:02:43.25571899Z 67 PC: 13158 | Get or set file attributes
2018-12-17T22:02:43.271592023Z 61 PC: 139e0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:02:43.278258045Z 63 PC: 13a72 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:02:43.292219515Z 63 PC: 13a72 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:02:43.294945442Z 62 PC: 13a30 | Close file
2018-12-17T22:02:43.296773646Z 67 PC: 13158 | Get or set file attributes
2018-12-17T22:02:43.307301236Z 26 PC: 131ad | Set disk transfer address
2018-12-17T22:02:43.308662311Z 79 PC: 131b2 | Find next file
2018-12-17T22:02:43.311452245Z 48 PC: 13ba2 | Get DOS version
2018-12-17T22:02:43.314557162Z 67 PC: 13131 | Get or set file attributes
2018-12-17T22:02:43.320344774Z 67 PC: 13158 | Get or set file attributes
2018-12-17T22:02:43.330254089Z 61 PC: 139e0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:02:43.337602995Z 61 PC: 139e0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:02:43.344340869Z 60 PC: 139e0 | Create or truncate file
2018-12-17T22:02:43.358191685Z 63 PC: 13ab3 | Read file or device (Read 6288 bytes on handle 6)
2018-12-17T22:02:43.367772223Z 64 PC: 13ab3 | Write file or device (Write 6288 bytes on handle 7)
2018-12-17T22:02:43.3764019Z 63 PC: 13ab3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:43.383324173Z 64 PC: 13ab3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:02:43.393084049Z 63 PC: 13ab3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:43.400687993Z 64 PC: 13ab3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:02:43.409479065Z 63 PC: 13ab3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:43.417196418Z 64 PC: 13ab3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:02:43.425970405Z 63 PC: 13ab3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:43.430036208Z 64 PC: 13ab3 | Write file or device (Write 144 bytes on handle 7)
2018-12-17T22:02:43.434258151Z 63 PC: 13ab3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:43.436338927Z 62 PC: 13a30 | Close file
2018-12-17T22:02:43.438254599Z 62 PC: 13a30 | Close file
2018-12-17T22:02:43.440977016Z 62 PC: 13a30 | Close file
2018-12-17T22:02:43.449018381Z 65 PC: 13b29 | Delete file (Filename = 'TEST.EXE')
2018-12-17T22:02:43.460958005Z 86 PC: 13b6d | Rename file
2018-12-17T22:02:43.47571637Z 61 PC: 139e0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:02:43.482595923Z 64 PC: 13a72 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:02:43.489522494Z 64 PC: 13a72 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:02:43.493358695Z 62 PC: 13a30 | Close file
2018-12-17T22:02:43.501818618Z 67 PC: 13158 | Get or set file attributes
2018-12-17T22:02:43.511151464Z 42 PC: 130b7 | Get date 0x130b7: xor ah, ah
0x130b9: les di, ptr [bp + 6]
0x130bc: stosw word ptr es:[di], ax
0x130bd: mov al, dl
0x130bf: les di, ptr [bp + 0xa]
0x130c2: stosw word ptr es:[di], ax
0x130c3: mov al, dh
0x130c5: les di, ptr [bp + 0xe]
0x130c8: stosw word ptr es:[di], ax
0x130c9: xchg ax, cx
0x130ca: les di, ptr [bp + 0x12]
0x130cd: stosw word ptr es:[di], ax
0x130ce: pop bp
0x130cf: retf 0x10
0x130d2: push bp
0x130d3: mov bp, sp
0x130d5: mov cx, word ptr [bp + 0xa]
0x130d8: mov dh, byte ptr [bp + 8]
0x130db: mov dl, byte ptr [bp + 6]
0x130de: mov ah, 0x2b
2018-12-17T22:02:43.513981203Z 48 PC: 13ba2 | Get DOS version
2018-12-17T22:02:43.515301524Z 61 PC: 139e0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:02:43.521612719Z 60 PC: 139e0 | Create or truncate file
2018-12-17T22:02:43.532331924Z 66 PC: 13b12 | Move file pointer
2018-12-17T22:02:43.535002755Z 63 PC: 13ab3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:43.540608219Z 64 PC: 13ab3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:02:43.54622988Z 63 PC: 13ab3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:43.551052724Z 64 PC: 13ab3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:02:43.555989255Z 63 PC: 13ab3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:43.561936868Z 64 PC: 13ab3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:02:43.567043161Z 63 PC: 13ab3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:43.568843295Z 64 PC: 13ab3 | Write file or device (Write 144 bytes on handle 6)
2018-12-17T22:02:43.572642336Z 63 PC: 13ab3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:43.574608905Z 62 PC: 13a30 | Close file
2018-12-17T22:02:43.576244678Z 62 PC: 13a30 | Close file
2018-12-17T22:02:43.584134071Z 53 PC: 1328a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:43.585406734Z 37 PC: 13293 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:43.586182533Z 53 PC: 1328a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:02:43.590626742Z 37 PC: 13293 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:02:43.591502439Z 53 PC: 1328a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:02:43.592330665Z 37 PC: 13293 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:02:43.593311149Z 53 PC: 1328a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:02:43.594619561Z 37 PC: 13293 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:02:43.595730481Z 53 PC: 1328a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:43.597269496Z 37 PC: 13293 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:43.598721979Z 53 PC: 1328a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:43.600195685Z 37 PC: 13293 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:43.602155681Z 53 PC: 1328a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:02:43.603270537Z 37 PC: 13293 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:02:43.604294487Z 53 PC: 1328a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:02:43.605732848Z 37 PC: 13293 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:02:43.606925002Z 53 PC: 1328a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:02:43.608370605Z 37 PC: 13293 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:02:43.610608542Z 53 PC: 1328a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:02:43.612041539Z 37 PC: 13293 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:02:43.613393356Z 53 PC: 1328a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:02:43.615351873Z 37 PC: 13293 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:02:43.616440788Z 53 PC: 1328a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:02:43.61750864Z 37 PC: 13293 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:02:43.619091753Z 53 PC: 1328a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:02:43.620580939Z 37 PC: 13293 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:02:43.621959227Z 53 PC: 1328a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:02:43.624379023Z 37 PC: 13293 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:02:43.625734428Z 53 PC: 1328a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:02:43.62712257Z 37 PC: 13293 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:02:43.62903584Z 53 PC: 1328a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:02:43.6302828Z 37 PC: 13293 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:02:43.631474785Z 53 PC: 1328a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:02:43.633315674Z 37 PC: 13293 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:02:43.63438151Z 53 PC: 1328a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:43.635462213Z 37 PC: 13293 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:43.636953096Z 53 PC: 1328a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:02:43.63838836Z 37 PC: 13293 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:02:43.639890396Z 41 PC: 13241 | Parse filename
2018-12-17T22:02:43.642531487Z 41 PC: 1324f | Parse filename
2018-12-17T22:02:43.644524167Z 75 PC: 1325a | Execute program
2018-12-17T22:02:43.65998067Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:43.661725363Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:02:43.663128405Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:02:43.664471792Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:02:43.666329955Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:43.667428777Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:43.668512728Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:02:43.670068682Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:02:43.671248794Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:02:43.67240466Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:02:43.674299597Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:02:43.675729613Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:02:43.677126677Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:02:43.678939059Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:02:43.680037988Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:02:43.681135471Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:02:43.682581964Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:02:43.683656328Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:43.685088091Z 53 PC: 1ab6a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:02:43.69034865Z 37 PC: 1ab7f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:43.691358278Z 37 PC: 1ab87 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:43.692940018Z 37 PC: 1ab8f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:43.694295341Z 37 PC: 1ab97 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:43.696067206Z 68 PC: 1b7e1 | I/O control for devices (Set for = '')
2018-12-17T22:02:43.698114347Z 26 PC: 1a9d9 | Set disk transfer address
2018-12-17T22:02:43.699454435Z 78 PC: 1a9e5 | Find first file
2018-12-17T22:02:43.705711027Z 61 PC: 1b230 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:02:43.712865729Z 66 PC: 1b8e0 | Move file pointer
2018-12-17T22:02:43.714137465Z 66 PC: 1b8ee | Move file pointer
2018-12-17T22:02:43.715479284Z 66 PC: 1b8fc | Move file pointer
2018-12-17T22:02:43.717946911Z 62 PC: 1b280 | Close file
2018-12-17T22:02:43.719693865Z 26 PC: 1a9fd | Set disk transfer address
2018-12-17T22:02:43.720739022Z 79 PC: 1aa02 | Find next file
2018-12-17T22:02:43.727157289Z 61 PC: 1b230 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:02:43.733584837Z 66 PC: 1b8e0 | Move file pointer
2018-12-17T22:02:43.734964436Z 66 PC: 1b8ee | Move file pointer
2018-12-17T22:02:43.748426724Z 66 PC: 1b8fc | Move file pointer
2018-12-17T22:02:43.749843202Z 62 PC: 1b280 | Close file
2018-12-17T22:02:43.751594122Z 26 PC: 1a9fd | Set disk transfer address
2018-12-17T22:02:43.753782445Z 79 PC: 1aa02 | Find next file
2018-12-17T22:02:43.75649744Z 61 PC: 1b230 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:02:43.76343421Z 66 PC: 1b8e0 | Move file pointer
2018-12-17T22:02:43.765633132Z 66 PC: 1b8ee | Move file pointer
2018-12-17T22:02:43.766956589Z 66 PC: 1b8fc | Move file pointer
2018-12-17T22:02:43.768313545Z 62 PC: 1b280 | Close file
2018-12-17T22:02:43.773025915Z 26 PC: 1a9fd | Set disk transfer address
2018-12-17T22:02:43.774099784Z 79 PC: 1aa02 | Find next file
2018-12-17T22:02:43.776891203Z 61 PC: 1b230 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:02:43.783851145Z 66 PC: 1b8e0 | Move file pointer
2018-12-17T22:02:43.785261181Z 66 PC: 1b8ee | Move file pointer
2018-12-17T22:02:43.786688588Z 66 PC: 1b8fc | Move file pointer
2018-12-17T22:02:43.788413782Z 62 PC: 1b280 | Close file
2018-12-17T22:02:43.790341096Z 26 PC: 1a9fd | Set disk transfer address
2018-12-17T22:02:43.791973237Z 79 PC: 1aa02 | Find next file
2018-12-17T22:02:43.795057024Z 61 PC: 1b230 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:02:43.815047839Z 66 PC: 1b8e0 | Move file pointer
2018-12-17T22:02:43.816630145Z 66 PC: 1b8ee | Move file pointer
2018-12-17T22:02:43.81827417Z 66 PC: 1b8fc | Move file pointer
2018-12-17T22:02:43.819705872Z 62 PC: 1b280 | Close file
2018-12-17T22:02:43.822773356Z 26 PC: 1a9fd | Set disk transfer address
2018-12-17T22:02:43.823853439Z 79 PC: 1aa02 | Find next file
2018-12-17T22:02:43.826611639Z 61 PC: 1b230 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:02:43.835138494Z 66 PC: 1b8e0 | Move file pointer
2018-12-17T22:02:43.836538582Z 66 PC: 1b8ee | Move file pointer
2018-12-17T22:02:43.83789623Z 66 PC: 1b8fc | Move file pointer
2018-12-17T22:02:43.839901315Z 62 PC: 1b280 | Close file
2018-12-17T22:02:43.841731538Z 26 PC: 1a9fd | Set disk transfer address
2018-12-17T22:02:43.842819482Z 79 PC: 1aa02 | Find next file
2018-12-17T22:02:43.846424833Z 61 PC: 1b230 | Open file (Filename = 'PAH.COM')
2018-12-17T22:02:43.853741559Z 66 PC: 1b8e0 | Move file pointer
2018-12-17T22:02:43.855391246Z 66 PC: 1b8ee | Move file pointer
2018-12-17T22:02:43.85761277Z 66 PC: 1b8fc | Move file pointer
2018-12-17T22:02:43.85912992Z 62 PC: 1b280 | Close file
2018-12-17T22:02:43.861201103Z 26 PC: 1a9fd | Set disk transfer address
2018-12-17T22:02:43.862879326Z 79 PC: 1aa02 | Find next file
2018-12-17T22:02:43.865519715Z 26 PC: 1a9d9 | Set disk transfer address
2018-12-17T22:02:43.866441375Z 78 PC: 1a9e5 | Find first file
2018-12-17T22:02:43.872871476Z 67 PC: 1a981 | Get or set file attributes
2018-12-17T22:02:43.882567475Z 67 PC: 1a9a8 | Get or set file attributes
2018-12-17T22:02:43.892279342Z 61 PC: 1b230 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:02:43.899378637Z 63 PC: 1b2c2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:02:43.90256659Z 63 PC: 1b2c2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:02:43.905356497Z 62 PC: 1b280 | Close file
2018-12-17T22:02:43.907607983Z 67 PC: 1a9a8 | Get or set file attributes
2018-12-17T22:02:43.917467856Z 26 PC: 1a9fd | Set disk transfer address
2018-12-17T22:02:43.919434836Z 79 PC: 1aa02 | Find next file
2018-12-17T22:02:43.922752953Z 48 PC: 1b3f2 | Get DOS version
2018-12-17T22:02:43.924397489Z 67 PC: 1a981 | Get or set file attributes
2018-12-17T22:02:43.930750939Z 67 PC: 1a9a8 | Get or set file attributes
2018-12-17T22:02:43.940327034Z 61 PC: 1b230 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:02:43.948647264Z 61 PC: 1b230 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:02:43.956078605Z 60 PC: 1b230 | Create or truncate file
2018-12-17T22:02:43.969898743Z 63 PC: 1b303 | Read file or device (Read 6288 bytes on handle 6)
2018-12-17T22:02:43.977378898Z 64 PC: 1b303 | Write file or device (Write 6288 bytes on handle 7)
2018-12-17T22:02:43.986767358Z 63 PC: 1b303 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:43.993406674Z 64 PC: 1b303 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:02:44.002271728Z 63 PC: 1b303 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:44.009846631Z 64 PC: 1b303 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:02:44.018322586Z 63 PC: 1b303 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:44.025096778Z 64 PC: 1b303 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:02:44.035223499Z 63 PC: 1b303 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:44.038667699Z 64 PC: 1b303 | Write file or device (Write 144 bytes on handle 7)
2018-12-17T22:02:44.041602513Z 63 PC: 1b303 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:44.044298317Z 62 PC: 1b280 | Close file
2018-12-17T22:02:44.045956957Z 62 PC: 1b280 | Close file
2018-12-17T22:02:44.047540117Z 62 PC: 1b280 | Close file
2018-12-17T22:02:44.055976662Z 65 PC: 1b379 | Delete file (Filename = '$$$KYE.EXE')
2018-12-17T22:02:44.066974464Z 86 PC: 1b3bd | Rename file
2018-12-17T22:02:44.078390121Z 61 PC: 1b230 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:02:44.090590302Z 64 PC: 1b2c2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:02:44.108041941Z 64 PC: 1b2c2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:02:44.11096174Z 62 PC: 1b280 | Close file
2018-12-17T22:02:44.120141654Z 67 PC: 1a9a8 | Get or set file attributes
2018-12-17T22:02:44.130353505Z 42 PC: 1a907 | Get date 0x1a907: xor ah, ah
0x1a909: les di, ptr [bp + 6]
0x1a90c: stosw word ptr es:[di], ax
0x1a90d: mov al, dl
0x1a90f: les di, ptr [bp + 0xa]
0x1a912: stosw word ptr es:[di], ax
0x1a913: mov al, dh
0x1a915: les di, ptr [bp + 0xe]
0x1a918: stosw word ptr es:[di], ax
0x1a919: xchg ax, cx
0x1a91a: les di, ptr [bp + 0x12]
0x1a91d: stosw word ptr es:[di], ax
0x1a91e: pop bp
0x1a91f: retf 0x10
0x1a922: push bp
0x1a923: mov bp, sp
0x1a925: mov cx, word ptr [bp + 0xa]
0x1a928: mov dh, byte ptr [bp + 8]
0x1a92b: mov dl, byte ptr [bp + 6]
0x1a92e: mov ah, 0x2b
2018-12-17T22:02:44.14154852Z 48 PC: 1b3f2 | Get DOS version
2018-12-17T22:02:44.144431332Z 61 PC: 1b230 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:02:44.151200872Z 60 PC: 1b230 | Create or truncate file
2018-12-17T22:02:44.159666291Z 66 PC: 1b362 | Move file pointer
2018-12-17T22:02:44.160948175Z 63 PC: 1b303 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:02:44.162854703Z 62 PC: 1b280 | Close file
2018-12-17T22:02:44.16466672Z 62 PC: 1b280 | Close file
2018-12-17T22:02:44.165974405Z 53 PC: 1aada | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:44.166796371Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:44.168330466Z 53 PC: 1aada | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:02:44.16949412Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:02:44.170414013Z 53 PC: 1aada | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:02:44.172364113Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:02:44.173456496Z 53 PC: 1aada | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:02:44.174453494Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:02:44.176172606Z 53 PC: 1aada | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:44.177003946Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:44.178119638Z 53 PC: 1aada | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:44.179181203Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:44.180047168Z 53 PC: 1aada | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:02:44.181594859Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:02:44.182364812Z 53 PC: 1aada | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:02:44.183234051Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:02:44.184640881Z 53 PC: 1aada | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:02:44.185533048Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:02:44.186409381Z 53 PC: 1aada | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:02:44.187824079Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:02:44.188959106Z 53 PC: 1aada | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:02:44.190220149Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:02:44.191346677Z 53 PC: 1aada | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:02:44.192239912Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:02:44.193712866Z 53 PC: 1aada | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:02:44.194680466Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:02:44.195428275Z 53 PC: 1aada | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:02:44.196502503Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:02:44.197601635Z 53 PC: 1aada | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:02:44.198450138Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:02:44.199731292Z 53 PC: 1aada | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:02:44.200704822Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:02:44.201688326Z 53 PC: 1aada | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:02:44.202868346Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:02:44.203775205Z 53 PC: 1aada | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:44.205040308Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:44.205992717Z 53 PC: 1aada | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:02:44.206937028Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:02:44.208356736Z 41 PC: 1aa91 | Parse filename
2018-12-17T22:02:44.209568641Z 41 PC: 1aa9f | Parse filename
2018-12-17T22:02:44.210734983Z 75 PC: 1aaaa | Execute program
2018-12-17T22:02:44.219627231Z 53 PC: 1aada | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:44.22043541Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:44.221296269Z 53 PC: 1aada | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:02:44.222338286Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:02:44.223078772Z 53 PC: 1aada | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:02:44.224192306Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:02:44.224986727Z 53 PC: 1aada | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:02:44.225743634Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:02:44.226883316Z 53 PC: 1aada | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:44.227629867Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:44.228331866Z 53 PC: 1aada | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:44.229413804Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:44.230164983Z 53 PC: 1aada | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:02:44.231253548Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:02:44.232025465Z 53 PC: 1aada | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:02:44.23275195Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:02:44.234381937Z 53 PC: 1aada | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:02:44.235370135Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:02:44.236264432Z 53 PC: 1aada | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:02:44.237601913Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:02:44.238399999Z 53 PC: 1aada | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:02:44.239129213Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:02:44.240111937Z 53 PC: 1aada | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:02:44.240939738Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:02:44.241976155Z 53 PC: 1aada | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:02:44.242809816Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:02:44.243525594Z 53 PC: 1aada | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:02:44.24473588Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:02:44.245513762Z 53 PC: 1aada | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:02:44.246263534Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:02:44.247513633Z 53 PC: 1aada | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:02:44.248382563Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:02:44.249193694Z 53 PC: 1aada | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:02:44.250359448Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:02:44.251411611Z 53 PC: 1aada | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:44.252582979Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:44.254193852Z 53 PC: 1aada | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:02:44.254922607Z 37 PC: 1aae3 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:02:44.256034562Z 65 PC: 1b379 | Delete file (Filename = '�@j@�@')
2018-12-17T22:02:44.262567065Z 64 PC: 1af88 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:02:44.263689248Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:44.265485933Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:02:44.266391932Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:02:44.267641213Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:02:44.26921524Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:44.270405302Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:44.271644883Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:02:44.273511548Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:02:44.274642272Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:02:44.276334782Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:02:44.27814337Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:02:44.279536509Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:02:44.281424999Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:02:44.282551664Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:02:44.283600864Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:02:44.285348635Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:02:44.286532935Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:02:44.287684066Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:44.289444127Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:02:44.29059002Z 76 PC: 1ad00 | Terminate with return code (Return code = '0')
2018-12-17T22:02:44.293622281Z 53 PC: 1328a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:44.295100352Z 37 PC: 13293 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:44.296552859Z 53 PC: 1328a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:02:44.298212807Z 37 PC: 13293 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:02:44.299615059Z 53 PC: 1328a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:02:44.300982027Z 37 PC: 13293 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:02:44.303331642Z 53 PC: 1328a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:02:44.304489173Z 37 PC: 13293 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:02:44.305585072Z 53 PC: 1328a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:44.307104327Z 37 PC: 13293 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:44.308095775Z 53 PC: 1328a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:44.309325664Z 37 PC: 13293 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:44.310547918Z 53 PC: 1328a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:02:44.311698486Z 37 PC: 13293 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:02:44.313244554Z 53 PC: 1328a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:02:44.314337552Z 37 PC: 13293 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:02:44.315341251Z 53 PC: 1328a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:02:44.316753755Z 37 PC: 13293 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:02:44.318246215Z 53 PC: 1328a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:02:44.319347109Z 37 PC: 13293 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:02:44.32075555Z 53 PC: 1328a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:02:44.321878147Z 37 PC: 13293 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:02:44.32431492Z 53 PC: 1328a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:02:44.325657485Z 37 PC: 13293 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:02:44.327135711Z 53 PC: 1328a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:02:44.329438995Z 37 PC: 13293 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:02:44.330681606Z 53 PC: 1328a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:02:44.33259492Z 37 PC: 13293 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:02:44.335942739Z 53 PC: 1328a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:02:44.337145804Z 37 PC: 13293 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:02:44.338753219Z 53 PC: 1328a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:02:44.339889053Z 37 PC: 13293 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:02:44.341462139Z 53 PC: 1328a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:02:44.343911874Z 37 PC: 13293 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:02:44.345066321Z 53 PC: 1328a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:44.346090634Z 37 PC: 13293 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:44.347787609Z 53 PC: 1328a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:02:44.348915789Z 37 PC: 13293 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:02:44.350110648Z 65 PC: 13b29 | Delete file (Filename = '�@j@�@')
2018-12-17T22:02:44.356585684Z 64 PC: 13738 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:02:44.358189095Z 37 PC: 13471 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:44.359948107Z 37 PC: 13471 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:02:44.360975942Z 37 PC: 13471 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:02:44.361969017Z 37 PC: 13471 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:02:44.364440937Z 37 PC: 13471 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:44.365470547Z 37 PC: 13471 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:44.36647349Z 37 PC: 13471 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:02:44.368097797Z 37 PC: 13471 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:02:44.369099188Z 37 PC: 13471 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:02:44.370732941Z 37 PC: 13471 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:02:44.371596006Z 37 PC: 13471 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:02:44.372381662Z 37 PC: 13471 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:02:44.373772178Z 37 PC: 13471 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:02:44.374670984Z 37 PC: 13471 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:02:44.375446918Z 37 PC: 13471 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:02:44.376901745Z 37 PC: 13471 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:02:44.377900551Z 37 PC: 13471 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:02:44.379454437Z 37 PC: 13471 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:44.380389289Z 37 PC: 13471 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:02:44.381353299Z 76 PC: 134b0 | Terminate with return code (Return code = '0')