Sample viewer

vx.netlux.org/Virus.DOS.HLLP.UX.7088

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:02:48.083014447Z 53 PC: 13582 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:48.085054736Z 53 PC: 13582 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:02:48.08663342Z 53 PC: 13582 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:02:48.087585469Z 53 PC: 13582 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:02:48.089031613Z 53 PC: 13582 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:48.090306209Z 53 PC: 13582 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:48.091316911Z 53 PC: 13582 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:02:48.092982848Z 53 PC: 13582 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:02:48.094064998Z 53 PC: 13582 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:02:48.094946554Z 53 PC: 13582 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:02:48.096608836Z 53 PC: 13582 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:02:48.097568707Z 53 PC: 13582 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:02:48.098779456Z 53 PC: 13582 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:02:48.099832824Z 53 PC: 13582 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:02:48.101419139Z 53 PC: 13582 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:02:48.102920613Z 53 PC: 13582 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:02:48.104560602Z 53 PC: 13582 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:02:48.105899011Z 53 PC: 13582 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:48.107588087Z 53 PC: 13582 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:02:48.109610067Z 37 PC: 13597 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:48.111447671Z 37 PC: 1359f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:48.113390446Z 37 PC: 135a7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:48.117257249Z 37 PC: 135af | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:48.118651672Z 68 PC: 13b82 | I/O control for devices (Set for = '')
2018-12-17T22:02:48.120119687Z 48 PC: 14217 | Get DOS version
2018-12-17T22:02:48.122732496Z 61 PC: 13fd7 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:02:48.12923675Z 87 PC: 132c0 | Get or set file date and time
2018-12-17T22:02:48.13091441Z 60 PC: 13fd7 | Create or truncate file
2018-12-17T22:02:48.157960834Z 66 PC: 14109 | Move file pointer
2018-12-17T22:02:48.169729118Z 63 PC: 140aa | Read file or device (Read 8192 bytes on handle 5)
2018-12-17T22:02:48.177749574Z 64 PC: 140aa | Write file or device (Write 8192 bytes on handle 6)
2018-12-17T22:02:48.193948656Z 66 PC: 14173 | Move file pointer
2018-12-17T22:02:48.195594668Z 66 PC: 14181 | Move file pointer
2018-12-17T22:02:48.196994879Z 66 PC: 1418f | Move file pointer
2018-12-17T22:02:48.199353263Z 63 PC: 140aa | Read file or device (Read 8192 bytes on handle 5)
2018-12-17T22:02:48.207298169Z 64 PC: 140aa | Write file or device (Write 2731 bytes on handle 6)
2018-12-17T22:02:48.215485471Z 66 PC: 14173 | Move file pointer
2018-12-17T22:02:48.217065786Z 66 PC: 14181 | Move file pointer
2018-12-17T22:02:48.219718499Z 66 PC: 1418f | Move file pointer
2018-12-17T22:02:48.221859698Z 62 PC: 14027 | Close file
2018-12-17T22:02:48.2238898Z 87 PC: 132ed | Get or set file date and time
2018-12-17T22:02:48.22592941Z 62 PC: 14027 | Close file
2018-12-17T22:02:48.235051548Z 67 PC: 1327f | Get or set file attributes
2018-12-17T22:02:48.242414822Z 61 PC: 13fd7 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:02:48.250033685Z 87 PC: 132c0 | Get or set file date and time
2018-12-17T22:02:48.252066261Z 63 PC: 140aa | Read file or device (Read 7088 bytes on handle 5)
2018-12-17T22:02:48.260815475Z 66 PC: 14109 | Move file pointer
2018-12-17T22:02:48.263473541Z 64 PC: 140aa | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:02:48.266825215Z 87 PC: 132ed | Get or set file date and time
2018-12-17T22:02:48.269021512Z 62 PC: 14027 | Close file
2018-12-17T22:02:48.278092488Z 67 PC: 132a6 | Get or set file attributes
2018-12-17T22:02:48.289947955Z 26 PC: 1331d | Set disk transfer address
2018-12-17T22:02:48.29164513Z 78 PC: 13329 | Find first file
2018-12-17T22:02:48.304348299Z 61 PC: 13fd7 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-17T22:02:48.311699451Z 63 PC: 140aa | Read file or device (Read 27 bytes on handle 5)
2018-12-17T22:02:48.318285577Z 62 PC: 14027 | Close file
2018-12-17T22:02:48.322270749Z 60 PC: 13fd7 | Create or truncate file
2018-12-17T22:02:48.671683699Z 67 PC: 1327f | Get or set file attributes
2018-12-17T22:02:48.678751492Z 61 PC: 13fd7 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-17T22:02:48.68427385Z 87 PC: 132c0 | Get or set file date and time
2018-12-17T22:02:48.685563463Z 64 PC: 140aa | Write file or device (Write 7088 bytes on handle 5)
2018-12-17T22:02:48.692783314Z 63 PC: 140aa | Read file or device (Read 8192 bytes on handle 6)
2018-12-17T22:02:48.695413583Z 64 PC: 140aa | Write file or device (Write 413 bytes on handle 5)
2018-12-17T22:02:48.699864582Z 66 PC: 14173 | Move file pointer
2018-12-17T22:02:48.701038529Z 66 PC: 14181 | Move file pointer
2018-12-17T22:02:48.702636312Z 66 PC: 1418f | Move file pointer
2018-12-17T22:02:48.703798752Z 62 PC: 14027 | Close file
2018-12-17T22:02:48.70510325Z 87 PC: 132ed | Get or set file date and time
2018-12-17T22:02:48.706752348Z 62 PC: 14027 | Close file
2018-12-17T22:02:48.711219506Z 65 PC: 141ac | Delete file (Filename = 'C:\DOS\EDIT.COM')
2018-12-17T22:02:48.721797408Z 86 PC: 141e2 | Rename file
2018-12-17T22:02:48.72798756Z 67 PC: 132a6 | Get or set file attributes
2018-12-17T22:02:48.73769476Z 26 PC: 13341 | Set disk transfer address
2018-12-17T22:02:48.738839914Z 79 PC: 13346 | Find next file
2018-12-17T22:02:48.743332858Z 61 PC: 13fd7 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:02:48.750176444Z 26 PC: 13341 | Set disk transfer address
2018-12-17T22:02:48.751164972Z 79 PC: 13346 | Find next file
2018-12-17T22:02:48.755747493Z 61 PC: 13fd7 | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:02:48.763386659Z 63 PC: 140aa | Read file or device (Read 27 bytes on handle 6)
2018-12-17T22:02:48.768897416Z 62 PC: 14027 | Close file
2018-12-17T22:02:48.771777704Z 60 PC: 13fd7 | Create or truncate file
2018-12-17T22:02:48.786247428Z 67 PC: 1327f | Get or set file attributes
2018-12-17T22:02:48.794484387Z 61 PC: 13fd7 | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:02:48.803139553Z 87 PC: 132c0 | Get or set file date and time
2018-12-17T22:02:48.805270427Z 64 PC: 140aa | Write file or device (Write 7088 bytes on handle 6)
2018-12-17T22:02:48.818058912Z 63 PC: 140aa | Read file or device (Read 8192 bytes on handle 7)
2018-12-17T22:02:48.82763529Z 64 PC: 140aa | Write file or device (Write 8192 bytes on handle 6)
2018-12-17T22:02:48.837428181Z 66 PC: 14173 | Move file pointer
2018-12-17T22:02:48.839203294Z 66 PC: 14181 | Move file pointer
2018-12-17T22:02:48.841730218Z 66 PC: 1418f | Move file pointer
2018-12-17T22:02:48.843932222Z 63 PC: 140aa | Read file or device (Read 8192 bytes on handle 7)
2018-12-17T22:02:48.85212459Z 64 PC: 140aa | Write file or device (Write 7558 bytes on handle 6)
2018-12-17T22:02:48.861181269Z 66 PC: 14173 | Move file pointer
2018-12-17T22:02:48.863746307Z 66 PC: 14181 | Move file pointer
2018-12-17T22:02:48.86552673Z 66 PC: 1418f | Move file pointer
2018-12-17T22:02:48.867412905Z 62 PC: 14027 | Close file
2018-12-17T22:02:48.870957623Z 87 PC: 132ed | Get or set file date and time
2018-12-17T22:02:48.872907198Z 62 PC: 14027 | Close file
2018-12-17T22:02:48.881027034Z 65 PC: 141ac | Delete file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:02:48.892720931Z 86 PC: 141e2 | Rename file
2018-12-17T22:02:48.898961446Z 67 PC: 132a6 | Get or set file attributes
2018-12-17T22:02:48.909407408Z 26 PC: 13341 | Set disk transfer address
2018-12-17T22:02:48.911953558Z 79 PC: 13346 | Find next file
2018-12-17T22:02:48.91606482Z 61 PC: 13fd7 | Open file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T22:02:48.923363343Z 26 PC: 13341 | Set disk transfer address
2018-12-17T22:02:48.92487183Z 79 PC: 13346 | Find next file
2018-12-17T22:02:48.928148857Z 26 PC: 1331d | Set disk transfer address
2018-12-17T22:02:48.929225109Z 78 PC: 13329 | Find first file
2018-12-17T22:02:48.937280452Z 61 PC: 13fd7 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:02:48.944427573Z 63 PC: 140aa | Read file or device (Read 27 bytes on handle 7)
2018-12-17T22:02:48.95082701Z 62 PC: 14027 | Close file
2018-12-17T22:02:48.954050247Z 60 PC: 13fd7 | Create or truncate file
2018-12-17T22:02:48.967597891Z 67 PC: 1327f | Get or set file attributes
2018-12-17T22:02:48.973545799Z 61 PC: 13fd7 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:02:48.98066426Z 87 PC: 132c0 | Get or set file date and time
2018-12-17T22:02:48.982655586Z 64 PC: 140aa | Write file or device (Write 7088 bytes on handle 7)
2018-12-17T22:02:48.990856756Z 63 PC: 140aa | Read file or device (Read 8192 bytes on handle 8)
2018-12-17T22:02:48.998409503Z 64 PC: 140aa | Write file or device (Write 8192 bytes on handle 7)
2018-12-17T22:02:49.006766821Z 66 PC: 14173 | Move file pointer
2018-12-17T22:02:49.008053715Z 66 PC: 14181 | Move file pointer
2018-12-17T22:02:49.009958937Z 66 PC: 1418f | Move file pointer
2018-12-17T22:02:49.01151902Z 63 PC: 140aa | Read file or device (Read 8192 bytes on handle 8)
2018-12-17T22:02:49.018384219Z 64 PC: 140aa | Write file or device (Write 3016 bytes on handle 7)
2018-12-17T22:02:49.028090581Z 66 PC: 14173 | Move file pointer
2018-12-17T22:02:49.029707797Z 66 PC: 14181 | Move file pointer
2018-12-17T22:02:49.031321531Z 66 PC: 1418f | Move file pointer
2018-12-17T22:02:49.033829756Z 62 PC: 14027 | Close file
2018-12-17T22:02:49.036194687Z 87 PC: 132ed | Get or set file date and time
2018-12-17T22:02:49.038014035Z 62 PC: 14027 | Close file
2018-12-17T22:02:49.045372002Z 65 PC: 141ac | Delete file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:02:49.056214582Z 86 PC: 141e2 | Rename file
2018-12-17T22:02:49.061766911Z 67 PC: 132a6 | Get or set file attributes
2018-12-17T22:02:49.073551524Z 26 PC: 13341 | Set disk transfer address
2018-12-17T22:02:49.075252278Z 79 PC: 13346 | Find next file
2018-12-17T22:02:49.079159325Z 61 PC: 13fd7 | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:02:49.086972558Z 26 PC: 13341 | Set disk transfer address
2018-12-17T22:02:49.089312448Z 79 PC: 13346 | Find next file
2018-12-17T22:02:49.093231897Z 61 PC: 13fd7 | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:02:49.100529231Z 63 PC: 140aa | Read file or device (Read 27 bytes on handle 8)
2018-12-17T22:02:49.107161044Z 62 PC: 14027 | Close file
2018-12-17T22:02:49.109638017Z 60 PC: 13fd7 | Create or truncate file
2018-12-17T22:02:49.121913331Z 67 PC: 1327f | Get or set file attributes
2018-12-17T22:02:49.128886326Z 61 PC: 13fd7 | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:02:49.135861804Z 87 PC: 132c0 | Get or set file date and time
2018-12-17T22:02:49.137580095Z 64 PC: 140aa | Write file or device (Write 7088 bytes on handle 8)
2018-12-17T22:02:49.14643748Z 63 PC: 140aa | Read file or device (Read 8192 bytes on handle 9)
2018-12-17T22:02:49.154280832Z 64 PC: 140aa | Write file or device (Write 8192 bytes on handle 8)
2018-12-17T22:02:49.163409364Z 66 PC: 14173 | Move file pointer
2018-12-17T22:02:49.16603961Z 66 PC: 14181 | Move file pointer
2018-12-17T22:02:49.167686104Z 66 PC: 1418f | Move file pointer
2018-12-17T22:02:49.169432198Z 63 PC: 140aa | Read file or device (Read 8192 bytes on handle 9)
2018-12-17T22:02:49.177826161Z 64 PC: 140aa | Write file or device (Write 7526 bytes on handle 8)
2018-12-17T22:02:49.186654403Z 66 PC: 14173 | Move file pointer
2018-12-17T22:02:49.187976428Z 66 PC: 14181 | Move file pointer
2018-12-17T22:02:49.190107687Z 66 PC: 1418f | Move file pointer
2018-12-17T22:02:49.191715578Z 62 PC: 14027 | Close file
2018-12-17T22:02:49.193448793Z 87 PC: 132ed | Get or set file date and time
2018-12-17T22:02:49.195905733Z 62 PC: 14027 | Close file
2018-12-17T22:02:49.202610414Z 65 PC: 141ac | Delete file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:02:49.213594199Z 86 PC: 141e2 | Rename file
2018-12-17T22:02:49.220999747Z 67 PC: 132a6 | Get or set file attributes
2018-12-17T22:02:49.231042707Z 26 PC: 13341 | Set disk transfer address
2018-12-17T22:02:49.232544181Z 79 PC: 13346 | Find next file
2018-12-17T22:02:49.237517488Z 41 PC: 13419 | Parse filename
2018-12-17T22:02:49.239613662Z 41 PC: 13427 | Parse filename
2018-12-17T22:02:49.241361814Z 75 PC: 13432 | Execute program
2018-12-17T22:02:49.261677967Z 26 PC: 1db5c | Set disk transfer address
2018-12-17T22:02:49.262971625Z 71 PC: 1db66 | Get current directory
2018-12-17T22:02:49.265937484Z 78 PC: 1dbe5 | Find first file
2018-12-17T22:02:49.272974559Z 67 PC: 1dd4e | Get or set file attributes
2018-12-17T22:02:49.294885262Z 61 PC: 1dbf1 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:02:49.302380572Z 63 PC: 1dbfd | Read file or device (Read 26 bytes on handle 8)
2018-12-17T22:02:49.309965341Z 66 PC: 1dc05 | Move file pointer
2018-12-17T22:02:49.311847245Z 44 PC: 1dcef | Get time 0x1dcef: mov word ptr [bp + 0x10c], dx
0x1dcf3: lea di, word ptr [bp + 0x35a]
0x1dcf7: mov al, 0x55
0x1dcf9: stosb byte ptr es:[di], al
0x1dcfa: lea si, word ptr [bp + 0x103]
0x1dcfe: mov cx, 0x10
0x1dd01: push si
0x1dd02: push cx
0x1dd03: rep movsb byte ptr es:[di], byte ptr [si]
0x1dd05: xor byte ptr [bp + 0x10b], 0x28
0x1dd0a: lea si, word ptr [bp + 0x33e]
0x1dd0e: mov cx, 0xd
0x1dd11: rep movsb byte ptr es:[di], byte ptr [si]
0x1dd13: pop cx
0x1dd14: pop si
0x1dd15: pop ax
0x1dd16: push di
0x1dd17: push si
0x1dd18: push cx
0x1dd19: rep movsb byte ptr es:[di], byte ptr [si]
2018-12-17T22:02:49.314839197Z 64 PC: 1dd88 | Write file or device (Write 599 bytes on handle 8)
2018-12-17T22:02:49.38648854Z 66 PC: 1dd35 | Move file pointer
2018-12-17T22:02:49.388336805Z 64 PC: 1dd3e | Write file or device (Write 26 bytes on handle 8)
2018-12-17T22:02:49.391491212Z 87 PC: 1dc3f | Get or set file date and time
2018-12-17T22:02:49.394309708Z 62 PC: 1dc43 | Close file
2018-12-17T22:02:49.79037774Z 67 PC: 1dd4e | Get or set file attributes
2018-12-17T22:02:49.805873751Z 79 PC: 1dbe5 | Find next file
2018-12-17T22:02:49.814253243Z 78 PC: 1dbe5 | Find first file
2018-12-17T22:02:49.820976548Z 67 PC: 1dd4e | Get or set file attributes
2018-12-17T22:02:49.837311336Z 61 PC: 1dbf1 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:02:49.84439279Z 63 PC: 1dbfd | Read file or device (Read 26 bytes on handle 8)
2018-12-17T22:02:49.85095656Z 66 PC: 1dc05 | Move file pointer
2018-12-17T22:02:49.852613447Z 79 PC: 1dbe5 | Find next file
2018-12-17T22:02:49.855796818Z 67 PC: 1dd4e | Get or set file attributes
2018-12-17T22:02:49.866740121Z 61 PC: 1dbf1 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:02:49.879328967Z 63 PC: 1dbfd | Read file or device (Read 26 bytes on handle 9)
2018-12-17T22:02:49.887088932Z 66 PC: 1dc05 | Move file pointer
2018-12-17T22:02:49.888543707Z 79 PC: 1dbe5 | Find next file
2018-12-17T22:02:49.891694212Z 67 PC: 1dd4e | Get or set file attributes
2018-12-17T22:02:49.903827635Z 61 PC: 1dbf1 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:02:49.9105184Z 63 PC: 1dbfd | Read file or device (Read 26 bytes on handle 10)
2018-12-17T22:02:49.916964634Z 66 PC: 1dc05 | Move file pointer
2018-12-17T22:02:49.919394882Z 79 PC: 1dbe5 | Find next file
2018-12-17T22:02:49.922726115Z 67 PC: 1dd4e | Get or set file attributes
2018-12-17T22:02:49.935503326Z 61 PC: 1dbf1 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:02:49.942628101Z 63 PC: 1dbfd | Read file or device (Read 26 bytes on handle 11)
2018-12-17T22:02:49.949181632Z 66 PC: 1dc05 | Move file pointer
2018-12-17T22:02:49.950571444Z 79 PC: 1dbe5 | Find next file
2018-12-17T22:02:49.953283553Z 67 PC: 1dd4e | Get or set file attributes
2018-12-17T22:02:49.967071563Z 61 PC: 1dbf1 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:02:49.97367376Z 63 PC: 1dbfd | Read file or device (Read 26 bytes on handle 12)
2018-12-17T22:02:49.981789333Z 66 PC: 1dc05 | Move file pointer
2018-12-17T22:02:49.983183315Z 79 PC: 1dbe5 | Find next file
2018-12-17T22:02:49.985960808Z 67 PC: 1dd4e | Get or set file attributes
2018-12-17T22:02:49.996471524Z 61 PC: 1dbf1 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:02:50.003462794Z 63 PC: 1dbfd | Read file or device (Read 26 bytes on handle 13)
2018-12-17T22:02:50.010377268Z 66 PC: 1dc05 | Move file pointer
2018-12-17T22:02:50.011839385Z 79 PC: 1dbe5 | Find next file
2018-12-17T22:02:50.015044814Z 67 PC: 1dd4e | Get or set file attributes
2018-12-17T22:02:50.0257105Z 61 PC: 1dbf1 | Open file (Filename = 'PAH.COM')
2018-12-17T22:02:50.032445134Z 63 PC: 1dbfd | Read file or device (Read 26 bytes on handle 14)
2018-12-17T22:02:50.039083174Z 66 PC: 1dc05 | Move file pointer
2018-12-17T22:02:50.04132538Z 79 PC: 1dbe5 | Find next file
2018-12-17T22:02:50.04838115Z 59 PC: 1db81 | Change current directory
2018-12-17T22:02:50.052446639Z 59 PC: 1db8b | Change current directory
2018-12-17T22:02:50.057150153Z 26 PC: 1db98 | Set disk transfer address
2018-12-17T22:02:50.058927975Z 71 PC: 1d5a0 | Get current directory
2018-12-17T22:02:50.062393108Z 26 PC: 1d5b1 | Set disk transfer address
2018-12-17T22:02:50.064477548Z 78 PC: 1d5bd | Find first file
2018-12-17T22:02:50.077733773Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.088475188Z 61 PC: 1d81f | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:02:50.096369731Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.103219791Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.105289975Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.116400296Z 79 PC: 1d5cd | Find next file
2018-12-17T22:02:50.119317534Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.129627149Z 61 PC: 1d81f | Open file (Filename = 'PRINT.COM')
2018-12-17T22:02:50.137919199Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.145212393Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.147420134Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.158093409Z 79 PC: 1d5cd | Find next file
2018-12-17T22:02:50.161055301Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.171458121Z 61 PC: 1d81f | Open file (Filename = 'HELLO.COM')
2018-12-17T22:02:50.178513456Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.185017014Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.187139264Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.198197882Z 79 PC: 1d5cd | Find next file
2018-12-17T22:02:50.201075146Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.214233756Z 61 PC: 1d81f | Open file (Filename = 'PHANG.COM')
2018-12-17T22:02:50.221673533Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.22819822Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.230249358Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.240665709Z 79 PC: 1d5cd | Find next file
2018-12-17T22:02:50.243568207Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.253924794Z 61 PC: 1d81f | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:02:50.26100838Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.267326382Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.271064813Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.281258101Z 79 PC: 1d5cd | Find next file
2018-12-17T22:02:50.284111883Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.294063418Z 61 PC: 1d81f | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:02:50.301622034Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.308144696Z 44 PC: 1d811 | Get time 0x1d811: mov byte ptr [bp + 0x126], cl
0x1d815: ret
0x1d816: mov ax, 0x3d02
0x1d819: lea dx, word ptr [bp + 0x6f4]
0x1d81d: int 0x21
0x1d81f: jae 0x1d823
0x1d821: jmp 0x1d859
0x1d823: mov word ptr [bp + 0x6d4], ax
0x1d827: xchg ax, bx
0x1d828: mov cx, 0x1c
0x1d82b: mov ax, 0x3f00
0x1d82e: lea dx, word ptr [bp + 0x746]
0x1d832: int 0x21
0x1d834: jae 0x1d838
0x1d836: jmp 0x1d859
0x1d838: cmp byte ptr [bp + 0x75e], 0x40
0x1d83d: je 0x1d84f
0x1d83f: cmp word ptr [bp + 0x749], 0x7e7e
0x1d845: je 0x1d84f
0x1d847: cmp word ptr [bp + 0x758], 0x7e7e
2018-12-17T22:02:50.310694829Z 66 PC: 1d601 | Move file pointer
2018-12-17T22:02:50.313170013Z 64 PC: 1d8d0 | Write file or device (Write 48 bytes on handle 15)
2018-12-17T22:02:50.321822404Z 64 PC: 1d8d0 | Write file or device (Write 1426 bytes on handle 15)
2018-12-17T22:02:50.33073076Z 66 PC: 1d8dc | Move file pointer
2018-12-17T22:02:50.333225001Z 64 PC: 1d8d0 | Write file or device (Write 5 bytes on handle 15)
2018-12-17T22:02:50.340338931Z 87 PC: 1d8c2 | Get or set file date and time
2018-12-17T22:02:50.342308243Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.350935748Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.361191119Z 79 PC: 1d5cd | Find next file
2018-12-17T22:02:50.364353844Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.374920223Z 61 PC: 1d81f | Open file (Filename = 'PAH.COM')
2018-12-17T22:02:50.381668022Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.388402378Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.391358084Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.404062721Z 79 PC: 1d5cd | Find next file
2018-12-17T22:02:50.411348994Z 78 PC: 1d647 | Find first file
2018-12-17T22:02:50.417836519Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.427515036Z 61 PC: 1d81f | Open file (Filename = 'TEST.EXE')
2018-12-17T22:02:50.435021465Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.442309203Z 44 PC: 1d811 | Get time 0x1d811: mov byte ptr [bp + 0x126], cl
0x1d815: ret
0x1d816: mov ax, 0x3d02
0x1d819: lea dx, word ptr [bp + 0x6f4]
0x1d81d: int 0x21
0x1d81f: jae 0x1d823
0x1d821: jmp 0x1d859
0x1d823: mov word ptr [bp + 0x6d4], ax
0x1d827: xchg ax, bx
0x1d828: mov cx, 0x1c
0x1d82b: mov ax, 0x3f00
0x1d82e: lea dx, word ptr [bp + 0x746]
0x1d832: int 0x21
0x1d834: jae 0x1d838
0x1d836: jmp 0x1d859
0x1d838: cmp byte ptr [bp + 0x75e], 0x40
0x1d83d: je 0x1d84f
0x1d83f: cmp word ptr [bp + 0x749], 0x7e7e
0x1d845: je 0x1d84f
0x1d847: cmp word ptr [bp + 0x758], 0x7e7e
2018-12-17T22:02:50.44469133Z 66 PC: 1d6a2 | Move file pointer
2018-12-17T22:02:50.447275869Z 64 PC: 1d8d0 | Write file or device (Write 48 bytes on handle 15)
2018-12-17T22:02:50.455198419Z 64 PC: 1d8d0 | Write file or device (Write 1426 bytes on handle 15)
2018-12-17T22:02:50.464165907Z 66 PC: 1d70e | Move file pointer
2018-12-17T22:02:50.466591264Z 64 PC: 1d8d0 | Write file or device (Write 28 bytes on handle 15)
2018-12-17T22:02:50.469898453Z 87 PC: 1d8c2 | Get or set file date and time
2018-12-17T22:02:50.471606182Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.480216412Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.490386078Z 79 PC: 1d658 | Find next file
2018-12-17T22:02:50.493207312Z 59 PC: 1d7b4 | Change current directory
2018-12-17T22:02:50.498269839Z 78 PC: 1d7c4 | Find first file
2018-12-17T22:02:50.504706985Z 59 PC: 1d7fc | Change current directory
2018-12-17T22:02:50.519676476Z 78 PC: 1d5bd | Find first file
2018-12-17T22:02:50.532389082Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.54204237Z 61 PC: 1d81f | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:02:50.548799953Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.556310635Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.558734341Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.568738373Z 79 PC: 1d5cd | Find next file
2018-12-17T22:02:50.57258603Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.582843567Z 61 PC: 1d81f | Open file (Filename = 'PRINT.COM')
2018-12-17T22:02:50.594754577Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.60231194Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.604829457Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.61494979Z 79 PC: 1d5cd | Find next file
2018-12-17T22:02:50.618835008Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.629039265Z 61 PC: 1d81f | Open file (Filename = 'HELLO.COM')
2018-12-17T22:02:50.635869337Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.643370179Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.645876917Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.656384188Z 79 PC: 1d5cd | Find next file
2018-12-17T22:02:50.660268961Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.67057152Z 61 PC: 1d81f | Open file (Filename = 'PHANG.COM')
2018-12-17T22:02:50.677419002Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.685014793Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.68753655Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.697665011Z 79 PC: 1d5cd | Find next file
2018-12-17T22:02:50.701524042Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.711410243Z 61 PC: 1d81f | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:02:50.723234102Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.73102168Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.733145333Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.743057926Z 79 PC: 1d5cd | Find next file
2018-12-17T22:02:50.747163945Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.756886491Z 61 PC: 1d81f | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:02:50.767525986Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.774184272Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.776003513Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.788692534Z 79 PC: 1d5cd | Find next file
2018-12-17T22:02:50.792031815Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.803064409Z 61 PC: 1d81f | Open file (Filename = 'PAH.COM')
2018-12-17T22:02:50.810629779Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.817724562Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.82002177Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.831317062Z 79 PC: 1d5cd | Find next file
2018-12-17T22:02:50.838225715Z 78 PC: 1d647 | Find first file
2018-12-17T22:02:50.844494984Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.855771533Z 61 PC: 1d81f | Open file (Filename = 'TEST.EXE')
2018-12-17T22:02:50.863794395Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-17T22:02:50.870290387Z 62 PC: 1d85d | Close file
2018-12-17T22:02:50.873201509Z 67 PC: 1d8ac | Get or set file attributes
2018-12-17T22:02:50.88336107Z 79 PC: 1d658 | Find next file
2018-12-17T22:02:50.885730359Z 59 PC: 1d7b4 | Change current directory
2018-12-17T22:02:50.889599025Z 78 PC: 1d7c4 | Find first file
2018-12-17T22:02:50.89445032Z 79 PC: 1d7dd | Find next file
2018-12-17T22:02:50.896470818Z 79 PC: 1d7dd | Find next file
2018-12-17T22:02:50.898550226Z 79 PC: 1d7dd | Find next file
2018-12-17T22:02:50.900247387Z 79 PC: 1d7dd | Find next file
2018-12-17T22:02:50.902107169Z 79 PC: 1d7dd | Find next file
2018-12-17T22:02:50.904669486Z 79 PC: 1d7dd | Find next file
2018-12-17T22:02:50.907324102Z 79 PC: 1d7dd | Find next file
2018-12-17T22:02:50.910319269Z 79 PC: 1d7dd | Find next file
2018-12-17T22:02:50.914018998Z 79 PC: 1d7dd | Find next file
2018-12-17T22:02:50.917100475Z 79 PC: 1d7dd | Find next file
2018-12-17T22:02:50.920609811Z 44 PC: 1d734 | Get time 0x1d734: cmp cl, 0x1e
0x1d737: jne 0x1d741
0x1d739: cmp dh, 0x1e
0x1d73c: ja 0x1d741
0x1d73e: jmp 0x1d8dd
0x1d741: push ax
0x1d742: push bp
0x1d743: mov bp, sp
0x1d745: mov word ptr [bp + 2], 0x1a00
0x1d74a: pop bp
0x1d74b: pop ax
0x1d74c: mov dx, 0x80
0x1d74f: int 0x21
0x1d751: lea dx, word ptr [bp + 0x706]
0x1d755: mov ax, 0x3b00
0x1d758: int 0x21
0x1d75a: cmp byte ptr cs:[0], 0xcd
0x1d760: je 0x1d790
0x1d762: pop ds
0x1d763: push ds
2018-12-17T22:02:50.922980719Z 26 PC: 1d751 | Set disk transfer address
2018-12-17T22:02:50.924358957Z 59 PC: 1d75a | Change current directory
2018-12-17T22:02:50.926988679Z 59 PC: 1b2c7 | Change current directory
2018-12-17T22:02:50.930861655Z 26 PC: 1b2ce | Set disk transfer address
2018-12-17T22:02:50.931748879Z 78 PC: 1b2d9 | Find first file
2018-12-17T22:02:50.937747027Z 61 PC: 1b2e2 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:02:50.943958903Z 87 PC: 1b2ea | Get or set file date and time
2018-12-17T22:02:50.946202713Z 64 PC: 1b2f7 | Write file or device (Write 151 bytes on handle 15)
2018-12-17T22:02:50.95318256Z 87 PC: 1b2ff | Get or set file date and time
2018-12-17T22:02:50.954736612Z 62 PC: 1b303 | Close file
2018-12-17T22:02:50.963416935Z 79 PC: 1b307 | Find next file
2018-12-17T22:02:50.96621136Z 61 PC: 1b2e2 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:02:50.97274809Z 87 PC: 1b2ea | Get or set file date and time
2018-12-17T22:02:50.975515478Z 64 PC: 1b2f7 | Write file or device (Write 151 bytes on handle 15)
2018-12-17T22:02:50.982326084Z 87 PC: 1b2ff | Get or set file date and time
2018-12-17T22:02:50.984821455Z 62 PC: 1b303 | Close file
2018-12-17T22:02:50.993088259Z 79 PC: 1b307 | Find next file
2018-12-17T22:02:50.995948178Z 61 PC: 1b2e2 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:02:51.002618319Z 87 PC: 1b2ea | Get or set file date and time
2018-12-17T22:02:51.005368199Z 64 PC: 1b2f7 | Write file or device (Write 151 bytes on handle 15)
2018-12-17T22:02:51.01273444Z 87 PC: 1b2ff | Get or set file date and time
2018-12-17T22:02:51.014417743Z 62 PC: 1b303 | Close file
2018-12-17T22:02:51.022248995Z 79 PC: 1b307 | Find next file
2018-12-17T22:02:51.024767346Z 61 PC: 1b2e2 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:02:51.031738993Z 87 PC: 1b2ea | Get or set file date and time
2018-12-17T22:02:51.033132718Z 64 PC: 1b2f7 | Write file or device (Write 151 bytes on handle 15)
2018-12-17T22:02:51.039815945Z 87 PC: 1b2ff | Get or set file date and time
2018-12-17T22:02:51.042387399Z 62 PC: 1b303 | Close file
2018-12-17T22:02:51.050129707Z 79 PC: 1b307 | Find next file
2018-12-17T22:02:51.053748233Z 61 PC: 1b2e2 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:02:51.061320006Z 87 PC: 1b2ea | Get or set file date and time
2018-12-17T22:02:51.062986613Z 64 PC: 1b2f7 | Write file or device (Write 151 bytes on handle 15)
2018-12-17T22:02:51.066045197Z 87 PC: 1b2ff | Get or set file date and time
2018-12-17T22:02:51.068511174Z 62 PC: 1b303 | Close file
2018-12-17T22:02:51.075769352Z 79 PC: 1b307 | Find next file
2018-12-17T22:02:51.07849304Z 61 PC: 1b2e2 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:02:51.084964361Z 87 PC: 1b2ea | Get or set file date and time
2018-12-17T22:02:51.086329029Z 64 PC: 1b2f7 | Write file or device (Write 151 bytes on handle 15)
2018-12-17T22:02:51.089817603Z 87 PC: 1b2ff | Get or set file date and time
2018-12-17T22:02:51.091382844Z 62 PC: 1b303 | Close file
2018-12-17T22:02:51.098420217Z 79 PC: 1b307 | Find next file
2018-12-17T22:02:51.102019359Z 61 PC: 1b2e2 | Open file (Filename = 'PAH.COM')
2018-12-17T22:02:51.108411686Z 87 PC: 1b2ea | Get or set file date and time
2018-12-17T22:02:51.109702411Z 64 PC: 1b2f7 | Write file or device (Write 151 bytes on handle 15)
2018-12-17T22:02:51.113728819Z 87 PC: 1b2ff | Get or set file date and time
2018-12-17T22:02:51.115222694Z 62 PC: 1b303 | Close file
2018-12-17T22:02:51.123029337Z 79 PC: 1b307 | Find next file
2018-12-17T22:02:51.125913576Z 9 PC: 1b310 | Display string (String= 'Divide Overflow')
2018-12-17T22:02:51.127931222Z 0 PC: 1b314 | Program terminate
2018-12-17T22:02:51.131702532Z 65 PC: 141ac | Delete file (Filename = 'A:\ux142.rqz')
2018-12-17T22:02:51.143264218Z 64 PC: 13c85 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:02:51.145369801Z 37 PC: 13696 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:02:51.147355427Z 37 PC: 13696 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:02:51.152701931Z 37 PC: 13696 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:02:51.153868915Z 37 PC: 13696 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:02:51.156121638Z 37 PC: 13696 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:51.1574252Z 37 PC: 13696 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:51.158674738Z 37 PC: 13696 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:02:51.160244516Z 37 PC: 13696 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:02:51.161304191Z 37 PC: 13696 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:02:51.162524636Z 37 PC: 13696 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:02:51.164045318Z 37 PC: 13696 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:02:51.165128517Z 37 PC: 13696 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:02:51.166857218Z 37 PC: 13696 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:02:51.167922385Z 37 PC: 13696 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:02:51.168980838Z 37 PC: 13696 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:02:51.170688297Z 37 PC: 13696 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:02:51.171742825Z 37 PC: 13696 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:02:51.17276795Z 37 PC: 13696 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:02:51.17473857Z 37 PC: 13696 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:02:51.175766632Z 76 PC: 136d5 | Terminate with return code (Return code = '0')

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":1425,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:31.620026417Z 53 PC: 13582 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T11:43:31.621421887Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.622447591Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.623423615Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.62494861Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.625936276Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.626911101Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.629208384Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.630216226Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.63132417Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.633310825Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.634340862Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.635354994Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.636759107Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.637759156Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.638775158Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.640145648Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.641292336Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.642447473Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.64414307Z 37 PC: 13597 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T11:43:31.645161168Z 37 PC: 1359f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:43:31.646095143Z 37 PC: 135a7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:43:31.647481609Z 37 PC: 135af | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-25T11:43:31.648773944Z 68 PC: 13b82 | I/O control for devices (Set for = '')
2018-12-25T11:43:31.65020134Z 48 PC: 14217 | Get DOS version
2018-12-25T11:43:31.652384602Z 61 PC: 13fd7 | Open file (Filename = 'A:\TEST.EXE')
2018-12-25T11:43:31.658814664Z 87 PC: 132c0 | Get or set file date and time
2018-12-25T11:43:31.660304947Z 60 PC: 13fd7 | Create or truncate file (See above)
2018-12-25T11:43:32.775151885Z 66 PC: 14109 | Move file pointer
2018-12-25T11:43:32.776747929Z 63 PC: 140aa | Read file or device (Read 8192 bytes on handle 5)
2018-12-25T11:43:32.950931236Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:33.169334232Z 66 PC: 14173 | Move file pointer
2018-12-25T11:43:33.170831281Z 66 PC: 14181 | Move file pointer
2018-12-25T11:43:33.172245684Z 66 PC: 1418f | Move file pointer
2018-12-25T11:43:33.174774808Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:33.182917633Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:33.381883791Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:33.384245346Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:33.385726081Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:33.386994479Z 62 PC: 14027 | Close file
2018-12-25T11:43:33.388598966Z 87 PC: 132ed | Get or set file date and time
2018-12-25T11:43:33.390133075Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:33.571943052Z 67 PC: 1327f | Get or set file attributes
2018-12-25T11:43:33.577819513Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:33.584520819Z 87 PC: 132c0 | Get or set file date and time (See above)
2018-12-25T11:43:33.586276958Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:33.594400926Z 66 PC: 14109 | Move file pointer (See above)
2018-12-25T11:43:33.596828868Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:33.599665068Z 87 PC: 132ed | Get or set file date and time (See above)
2018-12-25T11:43:33.601719398Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:33.609644676Z 67 PC: 132a6 | Get or set file attributes
2018-12-25T11:43:33.620343686Z 26 PC: 1331d | Set disk transfer address
2018-12-25T11:43:33.621715129Z 78 PC: 13329 | Find first file
2018-12-25T11:43:33.632357042Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:33.639432841Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:33.645182584Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:33.648104941Z 60 PC: 13fd7 | Create or truncate file (See above)
2018-12-25T11:43:33.978636471Z 67 PC: 1327f | Get or set file attributes (See above)
2018-12-25T11:43:33.984837752Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:33.997556892Z 87 PC: 132c0 | Get or set file date and time (See above)
2018-12-25T11:43:34.00202989Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.014747598Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.019844587Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.026737583Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:34.028223688Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:34.030455756Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:34.031890209Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.034385963Z 87 PC: 132ed | Get or set file date and time (See above)
2018-12-25T11:43:34.036647655Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.355818601Z 65 PC: 141ac | Delete file (Filename = 'C:\DOS\EDIT.COM')
2018-12-25T11:43:34.376190735Z 86 PC: 141e2 | Rename file
2018-12-25T11:43:34.382552096Z 67 PC: 132a6 | Get or set file attributes (See above)
2018-12-25T11:43:34.39245341Z 26 PC: 13341 | Set disk transfer address
2018-12-25T11:43:34.394102711Z 79 PC: 13346 | Find next file
2018-12-25T11:43:34.398971503Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.406290486Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:34.407786725Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:34.412599386Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.420708127Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.426727511Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.429698931Z 60 PC: 13fd7 | Create or truncate file (See above)
2018-12-25T11:43:34.442794981Z 67 PC: 1327f | Get or set file attributes (See above)
2018-12-25T11:43:34.448881996Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.456901685Z 87 PC: 132c0 | Get or set file date and time (See above)
2018-12-25T11:43:34.458787321Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.470746512Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.47923423Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.48824988Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:34.489946579Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:34.492321704Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:34.494004624Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.502825684Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.512712783Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:34.514171869Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:34.515611623Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:34.517505159Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.519586319Z 87 PC: 132ed | Get or set file date and time (See above)
2018-12-25T11:43:34.521293261Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.528145023Z 65 PC: 141ac | Delete file (See above)
2018-12-25T11:43:34.538705852Z 86 PC: 141e2 | Rename file (See above)
2018-12-25T11:43:34.544378322Z 67 PC: 132a6 | Get or set file attributes (See above)
2018-12-25T11:43:34.558340991Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:34.560030774Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:34.564333937Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.57208088Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:34.573387365Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:34.576563394Z 26 PC: 1331d | Set disk transfer address (See above)
2018-12-25T11:43:34.578413165Z 78 PC: 13329 | Find first file (See above)
2018-12-25T11:43:34.585597977Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.59209598Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.598325851Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.601031432Z 60 PC: 13fd7 | Create or truncate file (See above)
2018-12-25T11:43:34.613698162Z 67 PC: 1327f | Get or set file attributes (See above)
2018-12-25T11:43:34.620126431Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.628430236Z 87 PC: 132c0 | Get or set file date and time (See above)
2018-12-25T11:43:34.630377807Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.645553646Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.653677687Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.662649987Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:34.664357602Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:34.667164776Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:34.668869243Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.67806873Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.687649044Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:34.689126106Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:34.690812519Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:34.693080577Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.694984873Z 87 PC: 132ed | Get or set file date and time (See above)
2018-12-25T11:43:34.696674144Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.704612274Z 65 PC: 141ac | Delete file (See above)
2018-12-25T11:43:34.715620287Z 86 PC: 141e2 | Rename file (See above)
2018-12-25T11:43:34.721017022Z 67 PC: 132a6 | Get or set file attributes (See above)
2018-12-25T11:43:34.732384284Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:34.733640841Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:34.73769688Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.746148175Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:34.748474263Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:34.75221209Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.761422387Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.767669132Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.770039807Z 60 PC: 13fd7 | Create or truncate file (See above)
2018-12-25T11:43:34.784076038Z 67 PC: 1327f | Get or set file attributes (See above)
2018-12-25T11:43:34.790416496Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.797496411Z 87 PC: 132c0 | Get or set file date and time (See above)
2018-12-25T11:43:34.801035888Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.811326742Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.820058382Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.831336529Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:34.832765467Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:34.83450527Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:34.839423884Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.847190623Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.857946833Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:34.860582974Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:34.862443077Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:34.864216373Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.867346885Z 87 PC: 132ed | Get or set file date and time (See above)
2018-12-25T11:43:34.869280816Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.876331195Z 65 PC: 141ac | Delete file (See above)
2018-12-25T11:43:34.888584301Z 86 PC: 141e2 | Rename file (See above)
2018-12-25T11:43:34.894792129Z 67 PC: 132a6 | Get or set file attributes (See above)
2018-12-25T11:43:34.905440573Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:34.907752996Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:34.91232189Z 41 PC: 13419 | Parse filename
2018-12-25T11:43:34.914016284Z 41 PC: 13427 | Parse filename
2018-12-25T11:43:34.916216366Z 75 PC: 13432 | Execute program
2018-12-25T11:43:34.931577671Z 26 PC: 1db5c | Set disk transfer address
2018-12-25T11:43:34.932891196Z 71 PC: 1db66 | Get current directory
2018-12-25T11:43:34.936728662Z 78 PC: 1dbe5 | Find first file
2018-12-25T11:43:34.942886856Z 67 PC: 1dd4e | Get or set file attributes
2018-12-25T11:43:34.952644359Z 61 PC: 1dbf1 | Open file (Filename = 'TEST.EXE')
2018-12-25T11:43:34.960775837Z 63 PC: 1dbfd | Read file or device (Read 26 bytes on handle 8)
2018-12-25T11:43:34.967199699Z 66 PC: 1dc05 | Move file pointer
2018-12-25T11:43:34.969077465Z 44 PC: 1dcef | Get time 0x1dcef: mov word ptr [bp + 0x10c], dx
0x1dcf3: lea di, word ptr [bp + 0x35a]
0x1dcf7: mov al, 0x55
0x1dcf9: stosb byte ptr es:[di], al
0x1dcfa: lea si, word ptr [bp + 0x103]
0x1dcfe: mov cx, 0x10
0x1dd01: push si
0x1dd02: push cx
0x1dd03: rep movsb byte ptr es:[di], byte ptr [si]
0x1dd05: xor byte ptr [bp + 0x10b], 0x28
0x1dd0a: lea si, word ptr [bp + 0x33e]
0x1dd0e: mov cx, 0xd
0x1dd11: rep movsb byte ptr es:[di], byte ptr [si]
0x1dd13: pop cx
0x1dd14: pop si
0x1dd15: pop ax
0x1dd16: push di
0x1dd17: push si
0x1dd18: push cx
0x1dd19: rep movsb byte ptr es:[di], byte ptr [si]
2018-12-25T11:43:34.972849073Z 64 PC: 1dd88 | Write file or device (Write 599 bytes on handle 8)
2018-12-25T11:43:34.981399686Z 66 PC: 1dd35 | Move file pointer
2018-12-25T11:43:34.982416983Z 64 PC: 1dd3e | Write file or device (Write 26 bytes on handle 8)
2018-12-25T11:43:34.985071304Z 87 PC: 1dc3f | Get or set file date and time
2018-12-25T11:43:34.986501244Z 62 PC: 1dc43 | Close file
2018-12-25T11:43:34.993928583Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.004299438Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.011134736Z 78 PC: 1dbe5 | Find first file (See above)
2018-12-25T11:43:35.017097796Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.028121941Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:35.034710578Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:35.040942338Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:35.043367618Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.045977158Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.055685013Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:35.063017145Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:35.069503078Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:35.071081705Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.074664536Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.084839029Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:35.09216327Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:35.099624487Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:35.101767511Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.104304015Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.114828271Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:35.121638018Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:35.12857232Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:35.130914956Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.133596491Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.143560502Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:35.151065897Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:35.15798993Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:35.159608877Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.162998387Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.17252966Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:35.179049688Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:35.186484475Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:35.188059989Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.190631178Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.200899855Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:35.207763526Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:35.214300548Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:35.21722492Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.220827199Z 59 PC: 1db81 | Change current directory
2018-12-25T11:43:35.225133202Z 59 PC: 1db8b | Change current directory
2018-12-25T11:43:35.23030386Z 26 PC: 1db98 | Set disk transfer address
2018-12-25T11:43:35.232355499Z 71 PC: 1d5a0 | Get current directory
2018-12-25T11:43:35.23543548Z 26 PC: 1d5b1 | Set disk transfer address
2018-12-25T11:43:35.237371401Z 78 PC: 1d5bd | Find first file
2018-12-25T11:43:35.243203358Z 67 PC: 1d8ac | Get or set file attributes
2018-12-25T11:43:35.253209382Z 61 PC: 1d81f | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:43:35.260103021Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-25T11:43:35.262539283Z 62 PC: 1d85d | Close file
2018-12-25T11:43:35.264124105Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.273913324Z 79 PC: 1d5cd | Find next file
2018-12-25T11:43:35.276414891Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.28620214Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.292648434Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.295048589Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.296827787Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.306684784Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.309198281Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.318636534Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.325162122Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.327602253Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.330305641Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.342216695Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.344791717Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.355193249Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.361499618Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.367625202Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.36994575Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.37947963Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.381918593Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.391835589Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.398200366Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.404230559Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.406602218Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.416904699Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.419396792Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.429128561Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.435451311Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.4420312Z 44 PC: 1d811 | Get time 0x1d811: mov byte ptr [bp + 0x126], cl
0x1d815: ret
0x1d816: mov ax, 0x3d02
0x1d819: lea dx, word ptr [bp + 0x6f4]
0x1d81d: int 0x21
0x1d81f: jae 0x1d823
0x1d821: jmp 0x1d859
0x1d823: mov word ptr [bp + 0x6d4], ax
0x1d827: xchg ax, bx
0x1d828: mov cx, 0x1c
0x1d82b: mov ax, 0x3f00
0x1d82e: lea dx, word ptr [bp + 0x746]
0x1d832: int 0x21
0x1d834: jae 0x1d838
0x1d836: jmp 0x1d859
0x1d838: cmp byte ptr [bp + 0x75e], 0x40
0x1d83d: je 0x1d84f
0x1d83f: cmp word ptr [bp + 0x749], 0x7e7e
0x1d845: je 0x1d84f
0x1d847: cmp word ptr [bp + 0x758], 0x7e7e
2018-12-25T11:43:35.444394323Z 66 PC: 1d601 | Move file pointer
2018-12-25T11:43:35.445700986Z 64 PC: 1d8d0 | Write file or device (Write 48 bytes on handle 15)
2018-12-25T11:43:35.454308132Z 64 PC: 1d8d0 | Write file or device (See above)
2018-12-25T11:43:35.460577425Z 66 PC: 1d8dc | Move file pointer
2018-12-25T11:43:35.461740772Z 64 PC: 1d8d0 | Write file or device (See above)
2018-12-25T11:43:35.46581333Z 87 PC: 1d8c2 | Get or set file date and time
2018-12-25T11:43:35.467402826Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.473457991Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.479869391Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.482565584Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.491851145Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.498904787Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.505287873Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.507090049Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.517342378Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.523699496Z 78 PC: 1d647 | Find first file
2018-12-25T11:43:35.534642772Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.545182686Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.552151708Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.558370724Z 44 PC: 1d811 | Get time (See above)
2018-12-25T11:43:35.561224496Z 66 PC: 1d6a2 | Move file pointer
2018-12-25T11:43:35.562600494Z 64 PC: 1d8d0 | Write file or device (See above)
2018-12-25T11:43:35.570197893Z 64 PC: 1d8d0 | Write file or device (See above)
2018-12-25T11:43:35.578474889Z 66 PC: 1d70e | Move file pointer
2018-12-25T11:43:35.579791893Z 64 PC: 1d8d0 | Write file or device (See above)
2018-12-25T11:43:35.583101673Z 87 PC: 1d8c2 | Get or set file date and time (See above)
2018-12-25T11:43:35.584952716Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.592578696Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.602920679Z 79 PC: 1d658 | Find next file
2018-12-25T11:43:35.610393Z 59 PC: 1d7b4 | Change current directory
2018-12-25T11:43:35.614379962Z 78 PC: 1d7c4 | Find first file
2018-12-25T11:43:35.622547034Z 59 PC: 1d7fc | Change current directory
2018-12-25T11:43:35.628496326Z 78 PC: 1d5bd | Find first file (See above)
2018-12-25T11:43:35.635050452Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.649116608Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.661625744Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.668071761Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.671492302Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.681582796Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.683446742Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.689609875Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.693799887Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.698755358Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.700459529Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.70944838Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.712778194Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.724762528Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.731725511Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.738414321Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.739733046Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.745933898Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.748515184Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.755198518Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.759369239Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.764019456Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.765334961Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.771764921Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.773723565Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.781826415Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.789796217Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.796303298Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.797871202Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.808003091Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.81046886Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.819844207Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.826741844Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.832845593Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.834561759Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.84415247Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.846479987Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.858877705Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.865257177Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.871473078Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.873933026Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.883712342Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.890579721Z 78 PC: 1d647 | Find first file (See above)
2018-12-25T11:43:35.897551388Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.907202386Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.919384653Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.926473042Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.928305107Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.938972206Z 79 PC: 1d658 | Find next file (See above)
2018-12-25T11:43:35.945370005Z 59 PC: 1d7b4 | Change current directory (See above)
2018-12-25T11:43:35.949184186Z 78 PC: 1d7c4 | Find first file (See above)
2018-12-25T11:43:35.955616693Z 79 PC: 1d7dd | Find next file
2018-12-25T11:43:35.958007408Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:35.960311385Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:35.963374113Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:35.965757136Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:35.968488735Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:35.971405859Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:35.973782567Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:35.976184207Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:35.979101031Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:35.982025636Z 44 PC: 1d734 | Get time 0x1d734: cmp cl, 0x1e
0x1d737: jne 0x1d741
0x1d739: cmp dh, 0x1e
0x1d73c: ja 0x1d741
0x1d73e: jmp 0x1d8dd
0x1d741: push ax
0x1d742: push bp
0x1d743: mov bp, sp
0x1d745: mov word ptr [bp + 2], 0x1a00
0x1d74a: pop bp
0x1d74b: pop ax
0x1d74c: mov dx, 0x80
0x1d74f: int 0x21
0x1d751: lea dx, word ptr [bp + 0x706]
0x1d755: mov ax, 0x3b00
0x1d758: int 0x21
0x1d75a: cmp byte ptr cs:[0], 0xcd
0x1d760: je 0x1d790
0x1d762: pop ds
0x1d763: push ds
2018-12-25T11:43:35.984069755Z 26 PC: 1d751 | Set disk transfer address
2018-12-25T11:43:35.985045773Z 59 PC: 1d75a | Change current directory
2018-12-25T11:43:35.98663315Z 59 PC: 1b2c7 | Change current directory
2018-12-25T11:43:35.990854609Z 26 PC: 1b2ce | Set disk transfer address
2018-12-25T11:43:35.991712429Z 78 PC: 1b2d9 | Find first file
2018-12-25T11:43:35.997472725Z 61 PC: 1b2e2 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:43:36.010834235Z 87 PC: 1b2ea | Get or set file date and time
2018-12-25T11:43:36.012043524Z 64 PC: 1b2f7 | Write file or device (Write 151 bytes on handle 15)
2018-12-25T11:43:36.018354682Z 87 PC: 1b2ff | Get or set file date and time
2018-12-25T11:43:36.021435324Z 62 PC: 1b303 | Close file
2018-12-25T11:43:36.029730947Z 79 PC: 1b307 | Find next file
2018-12-25T11:43:36.032292711Z 61 PC: 1b2e2 | Open file (See above)
2018-12-25T11:43:36.039101804Z 87 PC: 1b2ea | Get or set file date and time (See above)
2018-12-25T11:43:36.040343767Z 64 PC: 1b2f7 | Write file or device (See above)
2018-12-25T11:43:36.048234923Z 87 PC: 1b2ff | Get or set file date and time (See above)
2018-12-25T11:43:36.049946664Z 62 PC: 1b303 | Close file (See above)
2018-12-25T11:43:36.05825126Z 79 PC: 1b307 | Find next file (See above)
2018-12-25T11:43:36.06151361Z 61 PC: 1b2e2 | Open file (See above)
2018-12-25T11:43:36.067660623Z 87 PC: 1b2ea | Get or set file date and time (See above)
2018-12-25T11:43:36.068918092Z 64 PC: 1b2f7 | Write file or device (See above)
2018-12-25T11:43:36.076450088Z 87 PC: 1b2ff | Get or set file date and time (See above)
2018-12-25T11:43:36.077829777Z 62 PC: 1b303 | Close file (See above)
2018-12-25T11:43:36.085603688Z 79 PC: 1b307 | Find next file (See above)
2018-12-25T11:43:36.089119366Z 61 PC: 1b2e2 | Open file (See above)
2018-12-25T11:43:36.095696821Z 87 PC: 1b2ea | Get or set file date and time (See above)
2018-12-25T11:43:36.097748508Z 64 PC: 1b2f7 | Write file or device (See above)
2018-12-25T11:43:36.105701426Z 87 PC: 1b2ff | Get or set file date and time (See above)
2018-12-25T11:43:36.107621357Z 62 PC: 1b303 | Close file (See above)
2018-12-25T11:43:36.116735218Z 79 PC: 1b307 | Find next file (See above)
2018-12-25T11:43:36.119958635Z 61 PC: 1b2e2 | Open file (See above)
2018-12-25T11:43:36.132439011Z 87 PC: 1b2ea | Get or set file date and time (See above)
2018-12-25T11:43:36.134578199Z 64 PC: 1b2f7 | Write file or device (See above)
2018-12-25T11:43:36.141343456Z 87 PC: 1b2ff | Get or set file date and time (See above)
2018-12-25T11:43:36.14298164Z 62 PC: 1b303 | Close file (See above)
2018-12-25T11:43:36.151111818Z 79 PC: 1b307 | Find next file (See above)
2018-12-25T11:43:36.158123929Z 61 PC: 1b2e2 | Open file (See above)
2018-12-25T11:43:36.164521342Z 87 PC: 1b2ea | Get or set file date and time (See above)
2018-12-25T11:43:36.166421489Z 64 PC: 1b2f7 | Write file or device (See above)
2018-12-25T11:43:36.172991198Z 87 PC: 1b2ff | Get or set file date and time (See above)
2018-12-25T11:43:36.1745347Z 62 PC: 1b303 | Close file (See above)
2018-12-25T11:43:36.182200625Z 79 PC: 1b307 | Find next file (See above)
2018-12-25T11:43:36.185026547Z 61 PC: 1b2e2 | Open file (See above)
2018-12-25T11:43:36.192504293Z 87 PC: 1b2ea | Get or set file date and time (See above)
2018-12-25T11:43:36.195324515Z 64 PC: 1b2f7 | Write file or device (See above)
2018-12-25T11:43:36.202284856Z 87 PC: 1b2ff | Get or set file date and time (See above)
2018-12-25T11:43:36.204690166Z 62 PC: 1b303 | Close file (See above)
2018-12-25T11:43:36.212043236Z 79 PC: 1b307 | Find next file (See above)
2018-12-25T11:43:36.218164147Z 9 PC: 1b310 | Display string (String= 'Divide Overflow')
2018-12-25T11:43:36.221341055Z 0 PC: 1b314 | Program terminate
2018-12-25T11:43:36.224335861Z 65 PC: 141ac | Delete file (See above)
2018-12-25T11:43:36.236230449Z 64 PC: 13c85 | Write file or device (Write 0 bytes on handle 1)
2018-12-25T11:43:36.239179187Z 37 PC: 13696 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T11:43:36.240267122Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.241701034Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.2435429Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.244475925Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.245542212Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.246770444Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.247734323Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.249094401Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.250190683Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.251188235Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.252548502Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.25347212Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.254416061Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.255792137Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.256700901Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.258179513Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.259572682Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.260664825Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:36.262781147Z 76 PC: 136d5 | Terminate with return code (Return code = '0')

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":30,"Second":0,"TimeBased":true,"OriginalID":1425,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:31.76379698Z 53 PC: 13582 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T11:43:31.765493392Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.766544178Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.767573208Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.769819041Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.771006133Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.772104613Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.773620931Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.774747836Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.775830616Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.777371441Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.778453206Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.779473124Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.780915338Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.781906959Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.782894802Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.784426654Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.798632746Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.799567551Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:31.800878435Z 37 PC: 13597 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T11:43:31.80187833Z 37 PC: 1359f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:43:31.803220872Z 37 PC: 135a7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:43:31.804660669Z 37 PC: 135af | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-25T11:43:31.806018146Z 68 PC: 13b82 | I/O control for devices (Set for = '')
2018-12-25T11:43:31.807567169Z 48 PC: 14217 | Get DOS version
2018-12-25T11:43:31.809810578Z 61 PC: 13fd7 | Open file (Filename = 'A:\TEST.EXE')
2018-12-25T11:43:31.816403124Z 87 PC: 132c0 | Get or set file date and time
2018-12-25T11:43:31.818292538Z 60 PC: 13fd7 | Create or truncate file (See above)
2018-12-25T11:43:33.579777967Z 66 PC: 14109 | Move file pointer
2018-12-25T11:43:33.582394155Z 63 PC: 140aa | Read file or device (Read 8192 bytes on handle 5)
2018-12-25T11:43:33.590261012Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:33.599327539Z 66 PC: 14173 | Move file pointer
2018-12-25T11:43:33.601008901Z 66 PC: 14181 | Move file pointer
2018-12-25T11:43:33.602686426Z 66 PC: 1418f | Move file pointer
2018-12-25T11:43:33.605017086Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:33.613049119Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:33.621139503Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:33.629363332Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:33.630969829Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:33.632359199Z 62 PC: 14027 | Close file
2018-12-25T11:43:33.634603575Z 87 PC: 132ed | Get or set file date and time
2018-12-25T11:43:33.636330245Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:33.644406263Z 67 PC: 1327f | Get or set file attributes
2018-12-25T11:43:33.650939287Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:33.657922024Z 87 PC: 132c0 | Get or set file date and time (See above)
2018-12-25T11:43:33.659802242Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:33.667747192Z 66 PC: 14109 | Move file pointer (See above)
2018-12-25T11:43:33.670263284Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:33.67309698Z 87 PC: 132ed | Get or set file date and time (See above)
2018-12-25T11:43:33.67487649Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:33.97813077Z 67 PC: 132a6 | Get or set file attributes
2018-12-25T11:43:33.988882206Z 26 PC: 1331d | Set disk transfer address
2018-12-25T11:43:33.990307499Z 78 PC: 13329 | Find first file
2018-12-25T11:43:34.000924327Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.00862153Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.01430692Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.01785626Z 60 PC: 13fd7 | Create or truncate file (See above)
2018-12-25T11:43:34.357253618Z 67 PC: 1327f | Get or set file attributes (See above)
2018-12-25T11:43:34.370797003Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.377272413Z 87 PC: 132c0 | Get or set file date and time (See above)
2018-12-25T11:43:34.37967479Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.39013532Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.394319736Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.402562391Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:34.404276725Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:34.406765799Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:34.40882381Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.410950033Z 87 PC: 132ed | Get or set file date and time (See above)
2018-12-25T11:43:34.413482465Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.420892944Z 65 PC: 141ac | Delete file (Filename = 'C:\DOS\EDIT.COM')
2018-12-25T11:43:34.432060401Z 86 PC: 141e2 | Rename file
2018-12-25T11:43:34.43790022Z 67 PC: 132a6 | Get or set file attributes (See above)
2018-12-25T11:43:34.448007699Z 26 PC: 13341 | Set disk transfer address
2018-12-25T11:43:34.449346771Z 79 PC: 13346 | Find next file
2018-12-25T11:43:34.453726115Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.461425842Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:34.463628772Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:34.467530883Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.475370387Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.48109495Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.483591509Z 60 PC: 13fd7 | Create or truncate file (See above)
2018-12-25T11:43:34.49611498Z 67 PC: 1327f | Get or set file attributes (See above)
2018-12-25T11:43:34.502320855Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.50955337Z 87 PC: 132c0 | Get or set file date and time (See above)
2018-12-25T11:43:34.5119003Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.524704851Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.530987539Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.54008856Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:34.54174053Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:34.543402733Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:34.545491243Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.553284361Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.559455707Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:34.561338228Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:34.563021248Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:34.564700784Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.5676108Z 87 PC: 132ed | Get or set file date and time (See above)
2018-12-25T11:43:34.569451215Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.576195252Z 65 PC: 141ac | Delete file (See above)
2018-12-25T11:43:34.587769394Z 86 PC: 141e2 | Rename file (See above)
2018-12-25T11:43:34.594017521Z 67 PC: 132a6 | Get or set file attributes (See above)
2018-12-25T11:43:34.60391996Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:34.606115909Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:34.610351313Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.617469829Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:34.619187232Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:34.622073114Z 26 PC: 1331d | Set disk transfer address (See above)
2018-12-25T11:43:34.623189981Z 78 PC: 13329 | Find first file (See above)
2018-12-25T11:43:34.63090058Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.638052991Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.643905538Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.647019789Z 60 PC: 13fd7 | Create or truncate file (See above)
2018-12-25T11:43:34.659873328Z 67 PC: 1327f | Get or set file attributes (See above)
2018-12-25T11:43:34.666073251Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.673660608Z 87 PC: 132c0 | Get or set file date and time (See above)
2018-12-25T11:43:34.67541111Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.683555786Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.691207682Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.699807605Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:34.701367519Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:34.703660526Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:34.705523359Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.712382065Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.72114382Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:34.723376249Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:34.724943538Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:34.726594614Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.729340247Z 87 PC: 132ed | Get or set file date and time (See above)
2018-12-25T11:43:34.731074893Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.73760079Z 65 PC: 141ac | Delete file (See above)
2018-12-25T11:43:34.748480691Z 86 PC: 141e2 | Rename file (See above)
2018-12-25T11:43:34.753746679Z 67 PC: 132a6 | Get or set file attributes (See above)
2018-12-25T11:43:34.763218795Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:34.764532491Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:34.768378921Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.77539015Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:34.7776211Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:34.781506971Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.789413908Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.796334448Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.798565823Z 60 PC: 13fd7 | Create or truncate file (See above)
2018-12-25T11:43:34.810724869Z 67 PC: 1327f | Get or set file attributes (See above)
2018-12-25T11:43:34.820689524Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:34.827572105Z 87 PC: 132c0 | Get or set file date and time (See above)
2018-12-25T11:43:34.829086317Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.839011825Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.846215133Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.855441242Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:34.857371883Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:34.858862048Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:34.860613181Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:34.868853807Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:34.877644438Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:34.879087604Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:34.881301308Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:34.882819356Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.884844126Z 87 PC: 132ed | Get or set file date and time (See above)
2018-12-25T11:43:34.887090982Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:34.893878763Z 65 PC: 141ac | Delete file (See above)
2018-12-25T11:43:34.904216437Z 86 PC: 141e2 | Rename file (See above)
2018-12-25T11:43:34.910576926Z 67 PC: 132a6 | Get or set file attributes (See above)
2018-12-25T11:43:34.921265148Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:34.922500356Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:34.927202612Z 41 PC: 13419 | Parse filename
2018-12-25T11:43:34.928691405Z 41 PC: 13427 | Parse filename
2018-12-25T11:43:34.930281543Z 75 PC: 13432 | Execute program
2018-12-25T11:43:34.945790155Z 26 PC: 1db5c | Set disk transfer address
2018-12-25T11:43:34.946913678Z 71 PC: 1db66 | Get current directory
2018-12-25T11:43:34.949862895Z 78 PC: 1dbe5 | Find first file
2018-12-25T11:43:34.956388415Z 67 PC: 1dd4e | Get or set file attributes
2018-12-25T11:43:34.966033913Z 61 PC: 1dbf1 | Open file (Filename = 'TEST.EXE')
2018-12-25T11:43:34.972709044Z 63 PC: 1dbfd | Read file or device (Read 26 bytes on handle 8)
2018-12-25T11:43:34.979888631Z 66 PC: 1dc05 | Move file pointer
2018-12-25T11:43:34.981518049Z 44 PC: 1dcef | Get time 0x1dcef: mov word ptr [bp + 0x10c], dx
0x1dcf3: lea di, word ptr [bp + 0x35a]
0x1dcf7: mov al, 0x55
0x1dcf9: stosb byte ptr es:[di], al
0x1dcfa: lea si, word ptr [bp + 0x103]
0x1dcfe: mov cx, 0x10
0x1dd01: push si
0x1dd02: push cx
0x1dd03: rep movsb byte ptr es:[di], byte ptr [si]
0x1dd05: xor byte ptr [bp + 0x10b], 0x28
0x1dd0a: lea si, word ptr [bp + 0x33e]
0x1dd0e: mov cx, 0xd
0x1dd11: rep movsb byte ptr es:[di], byte ptr [si]
0x1dd13: pop cx
0x1dd14: pop si
0x1dd15: pop ax
0x1dd16: push di
0x1dd17: push si
0x1dd18: push cx
0x1dd19: rep movsb byte ptr es:[di], byte ptr [si]
2018-12-25T11:43:34.987727934Z 64 PC: 1dd88 | Write file or device (Write 599 bytes on handle 8)
2018-12-25T11:43:34.997642937Z 66 PC: 1dd35 | Move file pointer
2018-12-25T11:43:34.999023963Z 64 PC: 1dd3e | Write file or device (Write 26 bytes on handle 8)
2018-12-25T11:43:35.001735359Z 87 PC: 1dc3f | Get or set file date and time
2018-12-25T11:43:35.004320019Z 62 PC: 1dc43 | Close file
2018-12-25T11:43:35.012066729Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.021812805Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.029327625Z 78 PC: 1dbe5 | Find first file (See above)
2018-12-25T11:43:35.035151588Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.045005188Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:35.0522337Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:35.058523555Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:35.05983237Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.062983389Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.072555951Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:35.07893933Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:35.086177158Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:35.08764265Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.091178263Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.101752226Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:35.113306089Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:35.119358785Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:35.121006628Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.123373221Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.132779767Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:35.13956865Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:35.146165362Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:35.14747981Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.151546561Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.1612847Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:35.167606936Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:35.174755747Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:35.175951687Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.178313558Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.188096701Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:35.194390457Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:35.201070575Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:35.202756952Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.205051245Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:35.214854857Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:35.221406622Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:35.227598524Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:35.229028874Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:35.235905482Z 59 PC: 1db81 | Change current directory
2018-12-25T11:43:35.239810488Z 59 PC: 1db8b | Change current directory
2018-12-25T11:43:35.244316566Z 26 PC: 1db98 | Set disk transfer address
2018-12-25T11:43:35.246066468Z 71 PC: 1d5a0 | Get current directory
2018-12-25T11:43:35.24880185Z 26 PC: 1d5b1 | Set disk transfer address
2018-12-25T11:43:35.25028336Z 78 PC: 1d5bd | Find first file
2018-12-25T11:43:35.256163228Z 67 PC: 1d8ac | Get or set file attributes
2018-12-25T11:43:35.267968642Z 61 PC: 1d81f | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:43:35.279804014Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-25T11:43:35.286047367Z 62 PC: 1d85d | Close file
2018-12-25T11:43:35.288008953Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.301430068Z 79 PC: 1d5cd | Find next file
2018-12-25T11:43:35.304625706Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.314194213Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.321249281Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.327492613Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.329147003Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.339383159Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.341978829Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.351512634Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.364130819Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.37052256Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.372329658Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.382943367Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.385543633Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.394997911Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.402147128Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.408354833Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.410060486Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.420902204Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.42354259Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.433042272Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.439686165Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.445831886Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.447577124Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.457426223Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.460397613Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.470058242Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.481631609Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.487906428Z 44 PC: 1d811 | Get time 0x1d811: mov byte ptr [bp + 0x126], cl
0x1d815: ret
0x1d816: mov ax, 0x3d02
0x1d819: lea dx, word ptr [bp + 0x6f4]
0x1d81d: int 0x21
0x1d81f: jae 0x1d823
0x1d821: jmp 0x1d859
0x1d823: mov word ptr [bp + 0x6d4], ax
0x1d827: xchg ax, bx
0x1d828: mov cx, 0x1c
0x1d82b: mov ax, 0x3f00
0x1d82e: lea dx, word ptr [bp + 0x746]
0x1d832: int 0x21
0x1d834: jae 0x1d838
0x1d836: jmp 0x1d859
0x1d838: cmp byte ptr [bp + 0x75e], 0x40
0x1d83d: je 0x1d84f
0x1d83f: cmp word ptr [bp + 0x749], 0x7e7e
0x1d845: je 0x1d84f
0x1d847: cmp word ptr [bp + 0x758], 0x7e7e
2018-12-25T11:43:35.490980797Z 66 PC: 1d601 | Move file pointer
2018-12-25T11:43:35.492948774Z 64 PC: 1d8d0 | Write file or device (Write 48 bytes on handle 15)
2018-12-25T11:43:35.501442226Z 64 PC: 1d8d0 | Write file or device (See above)
2018-12-25T11:43:35.510484351Z 66 PC: 1d8dc | Move file pointer
2018-12-25T11:43:35.51181949Z 64 PC: 1d8d0 | Write file or device (See above)
2018-12-25T11:43:35.518240394Z 87 PC: 1d8c2 | Get or set file date and time
2018-12-25T11:43:35.520036798Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.527639392Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.537074354Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.540581694Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.550421596Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.556745861Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.564076698Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.565746351Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.575260998Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.582316444Z 78 PC: 1d647 | Find first file
2018-12-25T11:43:35.588135578Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.597453264Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.610384519Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.616789451Z 44 PC: 1d811 | Get time (See above)
2018-12-25T11:43:35.619240043Z 66 PC: 1d6a2 | Move file pointer
2018-12-25T11:43:35.621997897Z 64 PC: 1d8d0 | Write file or device (See above)
2018-12-25T11:43:35.629372767Z 64 PC: 1d8d0 | Write file or device (See above)
2018-12-25T11:43:35.638283592Z 66 PC: 1d70e | Move file pointer
2018-12-25T11:43:35.64007593Z 64 PC: 1d8d0 | Write file or device (See above)
2018-12-25T11:43:35.642747541Z 87 PC: 1d8c2 | Get or set file date and time (See above)
2018-12-25T11:43:35.645269186Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.653456798Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.663722684Z 79 PC: 1d658 | Find next file
2018-12-25T11:43:35.671567756Z 59 PC: 1d7b4 | Change current directory
2018-12-25T11:43:35.675920882Z 78 PC: 1d7c4 | Find first file
2018-12-25T11:43:35.68185939Z 59 PC: 1d7fc | Change current directory
2018-12-25T11:43:35.687980215Z 78 PC: 1d5bd | Find first file (See above)
2018-12-25T11:43:35.693411457Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.704593812Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.711536547Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.718015472Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.720603266Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.730891283Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.73431438Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.745602882Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.752093226Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.758345Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.761123248Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.771503364Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.774774152Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.785977663Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.792359055Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.799248316Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.801468489Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.811735556Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.815142758Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.825119011Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.831569024Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.838763099Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.840521836Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.850884296Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.854572354Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.867509702Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.873853571Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.880343492Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.881996946Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.891486646Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.894279148Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.903907385Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.91051441Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.917970029Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.919641048Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.930550048Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.933514001Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.943153122Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:35.950667307Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:35.957362848Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:35.959423043Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.970194856Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:35.976833934Z 78 PC: 1d647 | Find first file (See above)
2018-12-25T11:43:35.982984301Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:35.993624682Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:36.000176373Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:36.006465382Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:36.009051338Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:36.018882019Z 79 PC: 1d658 | Find next file (See above)
2018-12-25T11:43:36.021571567Z 59 PC: 1d7b4 | Change current directory (See above)
2018-12-25T11:43:36.026873173Z 78 PC: 1d7c4 | Find first file (See above)
2018-12-25T11:43:36.032935609Z 79 PC: 1d7dd | Find next file
2018-12-25T11:43:36.035628278Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:36.039352075Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:36.042056Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:36.044944281Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:36.048476685Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:36.051149289Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:36.055286709Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:36.05826725Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:36.060924452Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:36.064481578Z 44 PC: 1d734 | Get time 0x1d734: cmp cl, 0x1e
0x1d737: jne 0x1d741
0x1d739: cmp dh, 0x1e
0x1d73c: ja 0x1d741
0x1d73e: jmp 0x1d8dd
0x1d741: push ax
0x1d742: push bp
0x1d743: mov bp, sp
0x1d745: mov word ptr [bp + 2], 0x1a00
0x1d74a: pop bp
0x1d74b: pop ax
0x1d74c: mov dx, 0x80
0x1d74f: int 0x21
0x1d751: lea dx, word ptr [bp + 0x706]
0x1d755: mov ax, 0x3b00
0x1d758: int 0x21
0x1d75a: cmp byte ptr cs:[0], 0xcd
0x1d760: je 0x1d790
0x1d762: pop ds
0x1d763: push ds

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":30,"Second":31,"TimeBased":true,"OriginalID":1425,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:32.060960938Z 53 PC: 13582 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T11:43:32.06351189Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.064887025Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.066213087Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.068075496Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.069659305Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.071241453Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.073629281Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.07568581Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.077493888Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.079508259Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.081153011Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.084530745Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.085852424Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.107153471Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.108273473Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.109606105Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.111561539Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.113303146Z 53 PC: 13582 | Get interrupt vector (See above)
2018-12-25T11:43:32.115032478Z 37 PC: 13597 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T11:43:32.132418332Z 37 PC: 1359f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:43:32.133899048Z 37 PC: 135a7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:43:32.135309035Z 37 PC: 135af | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-25T11:43:32.138000431Z 68 PC: 13b82 | I/O control for devices (Set for = '')
2018-12-25T11:43:32.139792689Z 48 PC: 14217 | Get DOS version
2018-12-25T11:43:32.142130062Z 61 PC: 13fd7 | Open file (Filename = 'A:\TEST.EXE')
2018-12-25T11:43:32.152394865Z 87 PC: 132c0 | Get or set file date and time
2018-12-25T11:43:32.15453024Z 60 PC: 13fd7 | Create or truncate file (See above)
2018-12-25T11:43:32.175605816Z 66 PC: 14109 | Move file pointer
2018-12-25T11:43:32.177408034Z 63 PC: 140aa | Read file or device (Read 8192 bytes on handle 5)
2018-12-25T11:43:32.187839149Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:32.197700232Z 66 PC: 14173 | Move file pointer
2018-12-25T11:43:32.199779146Z 66 PC: 14181 | Move file pointer
2018-12-25T11:43:32.202489443Z 66 PC: 1418f | Move file pointer
2018-12-25T11:43:32.203627395Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:32.20930763Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:32.216005801Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:32.217664276Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:32.219765114Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:32.222496419Z 62 PC: 14027 | Close file
2018-12-25T11:43:32.224993665Z 87 PC: 132ed | Get or set file date and time
2018-12-25T11:43:32.227367861Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:32.238779961Z 67 PC: 1327f | Get or set file attributes
2018-12-25T11:43:32.243547198Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:32.24829257Z 87 PC: 132c0 | Get or set file date and time (See above)
2018-12-25T11:43:32.249783421Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:32.255558799Z 66 PC: 14109 | Move file pointer (See above)
2018-12-25T11:43:32.256918235Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:32.258962622Z 87 PC: 132ed | Get or set file date and time (See above)
2018-12-25T11:43:32.260730791Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:32.266095192Z 67 PC: 132a6 | Get or set file attributes
2018-12-25T11:43:32.273945987Z 26 PC: 1331d | Set disk transfer address
2018-12-25T11:43:32.276383944Z 78 PC: 13329 | Find first file
2018-12-25T11:43:32.283479865Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:32.288330495Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:32.293185089Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:32.297228052Z 60 PC: 13fd7 | Create or truncate file (See above)
2018-12-25T11:43:32.64420235Z 67 PC: 1327f | Get or set file attributes (See above)
2018-12-25T11:43:32.65234213Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:32.660372371Z 87 PC: 132c0 | Get or set file date and time (See above)
2018-12-25T11:43:32.662058538Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:32.674962275Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:32.678901199Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:32.687033586Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:32.689247714Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:32.691491066Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:32.692991513Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:32.695059039Z 87 PC: 132ed | Get or set file date and time (See above)
2018-12-25T11:43:32.697936308Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:32.706605349Z 65 PC: 141ac | Delete file (Filename = 'C:\DOS\EDIT.COM')
2018-12-25T11:43:32.720298581Z 86 PC: 141e2 | Rename file
2018-12-25T11:43:32.727262585Z 67 PC: 132a6 | Get or set file attributes (See above)
2018-12-25T11:43:32.738433395Z 26 PC: 13341 | Set disk transfer address
2018-12-25T11:43:32.739625679Z 79 PC: 13346 | Find next file
2018-12-25T11:43:32.744169033Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:32.751913775Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:32.753319479Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:32.757909521Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:32.765657388Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:32.772686589Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:32.776294001Z 60 PC: 13fd7 | Create or truncate file (See above)
2018-12-25T11:43:32.790848397Z 67 PC: 1327f | Get or set file attributes (See above)
2018-12-25T11:43:32.798120787Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:32.808042719Z 87 PC: 132c0 | Get or set file date and time (See above)
2018-12-25T11:43:32.810258631Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:32.82552675Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:32.836283776Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:32.846645094Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:32.848315713Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:32.850317571Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:32.853228762Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:32.86193901Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:32.872830421Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:32.87567255Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:32.877949779Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:32.880033363Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:32.883627479Z 87 PC: 132ed | Get or set file date and time (See above)
2018-12-25T11:43:32.885821812Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:32.893561864Z 65 PC: 141ac | Delete file (See above)
2018-12-25T11:43:32.907347834Z 86 PC: 141e2 | Rename file (See above)
2018-12-25T11:43:32.914086303Z 67 PC: 132a6 | Get or set file attributes (See above)
2018-12-25T11:43:32.925189595Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:32.926727383Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:32.932408712Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:32.938675973Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:32.939728845Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:32.943279488Z 26 PC: 1331d | Set disk transfer address (See above)
2018-12-25T11:43:32.944357685Z 78 PC: 13329 | Find first file (See above)
2018-12-25T11:43:32.94915525Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:32.954531293Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:32.958680717Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:32.960613704Z 60 PC: 13fd7 | Create or truncate file (See above)
2018-12-25T11:43:32.973896692Z 67 PC: 1327f | Get or set file attributes (See above)
2018-12-25T11:43:32.980706921Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:32.988448406Z 87 PC: 132c0 | Get or set file date and time (See above)
2018-12-25T11:43:32.991345527Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:33.001316602Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:33.009486501Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:33.020330547Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:33.022113103Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:33.023843553Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:33.025910165Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:33.03618107Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:33.045756939Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:33.048123534Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:33.051361888Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:33.05382336Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:33.056559387Z 87 PC: 132ed | Get or set file date and time (See above)
2018-12-25T11:43:33.061956847Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:33.069780775Z 65 PC: 141ac | Delete file (See above)
2018-12-25T11:43:33.082842172Z 86 PC: 141e2 | Rename file (See above)
2018-12-25T11:43:33.08969888Z 67 PC: 132a6 | Get or set file attributes (See above)
2018-12-25T11:43:33.10089762Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:33.102704362Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:33.107955153Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:33.117180629Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:33.118925988Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:33.124165641Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:33.133162671Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:33.140214079Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:33.144242837Z 60 PC: 13fd7 | Create or truncate file (See above)
2018-12-25T11:43:33.158467254Z 67 PC: 1327f | Get or set file attributes (See above)
2018-12-25T11:43:33.16568885Z 61 PC: 13fd7 | Open file (See above)
2018-12-25T11:43:33.17527383Z 87 PC: 132c0 | Get or set file date and time (See above)
2018-12-25T11:43:33.177069519Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:33.186348278Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:33.195649725Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:33.20599386Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:33.207767438Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:33.210562481Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:33.212439886Z 63 PC: 140aa | Read file or device (See above)
2018-12-25T11:43:33.221296291Z 64 PC: 140aa | Write file or device (See above)
2018-12-25T11:43:33.2322666Z 66 PC: 14173 | Move file pointer (See above)
2018-12-25T11:43:33.23430189Z 66 PC: 14181 | Move file pointer (See above)
2018-12-25T11:43:33.236399217Z 66 PC: 1418f | Move file pointer (See above)
2018-12-25T11:43:33.23947689Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:33.242749384Z 87 PC: 132ed | Get or set file date and time (See above)
2018-12-25T11:43:33.244927619Z 62 PC: 14027 | Close file (See above)
2018-12-25T11:43:33.252839519Z 65 PC: 141ac | Delete file (See above)
2018-12-25T11:43:33.265822043Z 86 PC: 141e2 | Rename file (See above)
2018-12-25T11:43:33.272040884Z 67 PC: 132a6 | Get or set file attributes (See above)
2018-12-25T11:43:33.283286474Z 26 PC: 13341 | Set disk transfer address (See above)
2018-12-25T11:43:33.285909489Z 79 PC: 13346 | Find next file (See above)
2018-12-25T11:43:33.290355885Z 41 PC: 13419 | Parse filename
2018-12-25T11:43:33.292134077Z 41 PC: 13427 | Parse filename
2018-12-25T11:43:33.294988997Z 75 PC: 13432 | Execute program
2018-12-25T11:43:33.312584972Z 26 PC: 1db5c | Set disk transfer address
2018-12-25T11:43:33.313842301Z 71 PC: 1db66 | Get current directory
2018-12-25T11:43:33.317673924Z 78 PC: 1dbe5 | Find first file
2018-12-25T11:43:33.32456142Z 67 PC: 1dd4e | Get or set file attributes
2018-12-25T11:43:33.33568855Z 61 PC: 1dbf1 | Open file (Filename = 'TEST.EXE')
2018-12-25T11:43:33.344041047Z 63 PC: 1dbfd | Read file or device (Read 26 bytes on handle 8)
2018-12-25T11:43:33.352660079Z 66 PC: 1dc05 | Move file pointer
2018-12-25T11:43:33.354931506Z 44 PC: 1dcef | Get time 0x1dcef: mov word ptr [bp + 0x10c], dx
0x1dcf3: lea di, word ptr [bp + 0x35a]
0x1dcf7: mov al, 0x55
0x1dcf9: stosb byte ptr es:[di], al
0x1dcfa: lea si, word ptr [bp + 0x103]
0x1dcfe: mov cx, 0x10
0x1dd01: push si
0x1dd02: push cx
0x1dd03: rep movsb byte ptr es:[di], byte ptr [si]
0x1dd05: xor byte ptr [bp + 0x10b], 0x28
0x1dd0a: lea si, word ptr [bp + 0x33e]
0x1dd0e: mov cx, 0xd
0x1dd11: rep movsb byte ptr es:[di], byte ptr [si]
0x1dd13: pop cx
0x1dd14: pop si
0x1dd15: pop ax
0x1dd16: push di
0x1dd17: push si
0x1dd18: push cx
0x1dd19: rep movsb byte ptr es:[di], byte ptr [si]
2018-12-25T11:43:33.359304593Z 64 PC: 1dd88 | Write file or device (Write 599 bytes on handle 8)
2018-12-25T11:43:33.370445402Z 66 PC: 1dd35 | Move file pointer
2018-12-25T11:43:33.373085637Z 64 PC: 1dd3e | Write file or device (Write 26 bytes on handle 8)
2018-12-25T11:43:33.387450865Z 87 PC: 1dc3f | Get or set file date and time
2018-12-25T11:43:33.389291249Z 62 PC: 1dc43 | Close file
2018-12-25T11:43:33.398687104Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:33.411032911Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:33.420254446Z 78 PC: 1dbe5 | Find first file (See above)
2018-12-25T11:43:33.427327535Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:33.439862174Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:33.44784332Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:33.455572257Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:33.458043578Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:33.461144281Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:33.472378639Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:33.482124081Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:33.489904093Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:33.491792344Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:33.494717313Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:33.506107462Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:33.513313725Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:33.521907764Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:33.524414704Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:33.527383701Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:33.5388176Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:33.546387309Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:33.551500738Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:33.552802497Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:33.555108901Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:33.562036596Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:33.569715304Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:33.574584855Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:33.575815206Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:33.578274385Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:33.584789399Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:33.588963867Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:33.593377908Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:33.595153635Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:33.597401473Z 67 PC: 1dd4e | Get or set file attributes (See above)
2018-12-25T11:43:33.60416682Z 61 PC: 1dbf1 | Open file (See above)
2018-12-25T11:43:33.611561116Z 63 PC: 1dbfd | Read file or device (See above)
2018-12-25T11:43:33.618654526Z 66 PC: 1dc05 | Move file pointer (See above)
2018-12-25T11:43:33.620147793Z 79 PC: 1dbe5 | Find next file (See above)
2018-12-25T11:43:33.628340089Z 59 PC: 1db81 | Change current directory
2018-12-25T11:43:33.63368174Z 59 PC: 1db8b | Change current directory
2018-12-25T11:43:33.638009385Z 26 PC: 1db98 | Set disk transfer address
2018-12-25T11:43:33.641166601Z 71 PC: 1d5a0 | Get current directory
2018-12-25T11:43:33.644353915Z 26 PC: 1d5b1 | Set disk transfer address
2018-12-25T11:43:33.645918006Z 78 PC: 1d5bd | Find first file
2018-12-25T11:43:33.653209276Z 67 PC: 1d8ac | Get or set file attributes
2018-12-25T11:43:33.664253694Z 61 PC: 1d81f | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:43:33.672485356Z 63 PC: 1d834 | Read file or device (Read 28 bytes on handle 15)
2018-12-25T11:43:33.681458326Z 62 PC: 1d85d | Close file
2018-12-25T11:43:33.684002929Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:33.696389397Z 79 PC: 1d5cd | Find next file
2018-12-25T11:43:33.700838546Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:33.712824759Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:33.722308999Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:33.730962808Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:33.732808687Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:33.743660785Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:33.747016655Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:33.75829353Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:33.76557108Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:33.77305566Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:33.775431459Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:33.787212015Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:33.790892011Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:33.801539859Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:33.808890385Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:33.816713936Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:33.818720668Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:33.830971681Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:33.836132707Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:33.849103979Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:33.857423854Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:33.862480062Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:33.86537003Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:33.876474412Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:33.880172115Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:33.891643353Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:33.90107026Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:33.904724469Z 44 PC: 1d811 | Get time 0x1d811: mov byte ptr [bp + 0x126], cl
0x1d815: ret
0x1d816: mov ax, 0x3d02
0x1d819: lea dx, word ptr [bp + 0x6f4]
0x1d81d: int 0x21
0x1d81f: jae 0x1d823
0x1d821: jmp 0x1d859
0x1d823: mov word ptr [bp + 0x6d4], ax
0x1d827: xchg ax, bx
0x1d828: mov cx, 0x1c
0x1d82b: mov ax, 0x3f00
0x1d82e: lea dx, word ptr [bp + 0x746]
0x1d832: int 0x21
0x1d834: jae 0x1d838
0x1d836: jmp 0x1d859
0x1d838: cmp byte ptr [bp + 0x75e], 0x40
0x1d83d: je 0x1d84f
0x1d83f: cmp word ptr [bp + 0x749], 0x7e7e
0x1d845: je 0x1d84f
0x1d847: cmp word ptr [bp + 0x758], 0x7e7e
2018-12-25T11:43:33.907030314Z 66 PC: 1d601 | Move file pointer
2018-12-25T11:43:33.908337387Z 64 PC: 1d8d0 | Write file or device (Write 48 bytes on handle 15)
2018-12-25T11:43:33.919478692Z 64 PC: 1d8d0 | Write file or device (See above)
2018-12-25T11:43:33.928920907Z 66 PC: 1d8dc | Move file pointer
2018-12-25T11:43:33.93054444Z 64 PC: 1d8d0 | Write file or device (See above)
2018-12-25T11:43:33.93831212Z 87 PC: 1d8c2 | Get or set file date and time
2018-12-25T11:43:33.940218887Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:33.949822354Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:33.962686932Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:33.966338555Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:33.977738362Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:33.985713234Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:33.989723499Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:33.992460878Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.003575673Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:34.007586698Z 78 PC: 1d647 | Find first file
2018-12-25T11:43:34.014211496Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.025792423Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:34.034224995Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:34.041629807Z 44 PC: 1d811 | Get time (See above)
2018-12-25T11:43:34.045323432Z 66 PC: 1d6a2 | Move file pointer
2018-12-25T11:43:34.0472994Z 64 PC: 1d8d0 | Write file or device (See above)
2018-12-25T11:43:34.055949051Z 64 PC: 1d8d0 | Write file or device (See above)
2018-12-25T11:43:34.066608734Z 66 PC: 1d70e | Move file pointer
2018-12-25T11:43:34.068191171Z 64 PC: 1d8d0 | Write file or device (See above)
2018-12-25T11:43:34.071175108Z 87 PC: 1d8c2 | Get or set file date and time (See above)
2018-12-25T11:43:34.07374589Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:34.082848353Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.094383481Z 79 PC: 1d658 | Find next file
2018-12-25T11:43:34.098002257Z 59 PC: 1d7b4 | Change current directory
2018-12-25T11:43:34.103084632Z 78 PC: 1d7c4 | Find first file
2018-12-25T11:43:34.110397903Z 59 PC: 1d7fc | Change current directory
2018-12-25T11:43:34.118309787Z 78 PC: 1d5bd | Find first file (See above)
2018-12-25T11:43:34.125832902Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.142227518Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:34.15142164Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:34.159092862Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:34.16108701Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.183696558Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:34.186815148Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.198196043Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:34.206805202Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:34.214272903Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:34.216210092Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.229340639Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:34.23248622Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.243868116Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:34.251825083Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:34.256279815Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:34.257784571Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.269269531Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:34.272945361Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.28474535Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:34.293411574Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:34.3005558Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:34.302452597Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.316665244Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:34.321801014Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.333191118Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:34.341141855Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:34.348520893Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:34.350831049Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.362675718Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:34.36571874Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.377168026Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:34.384872878Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:34.392062856Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:34.394960916Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.406564731Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:34.411076214Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.42419039Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:34.431849389Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:34.439311928Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:34.442498886Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.454279241Z 79 PC: 1d5cd | Find next file (See above)
2018-12-25T11:43:34.461658433Z 78 PC: 1d647 | Find first file (See above)
2018-12-25T11:43:34.47003047Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.482182675Z 61 PC: 1d81f | Open file (See above)
2018-12-25T11:43:34.489602524Z 63 PC: 1d834 | Read file or device (See above)
2018-12-25T11:43:34.497694301Z 62 PC: 1d85d | Close file (See above)
2018-12-25T11:43:34.512159784Z 67 PC: 1d8ac | Get or set file attributes (See above)
2018-12-25T11:43:34.5240729Z 79 PC: 1d658 | Find next file (See above)
2018-12-25T11:43:34.527355372Z 59 PC: 1d7b4 | Change current directory (See above)
2018-12-25T11:43:34.531879852Z 78 PC: 1d7c4 | Find first file (See above)
2018-12-25T11:43:34.539152062Z 79 PC: 1d7dd | Find next file
2018-12-25T11:43:34.542875126Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:34.545559908Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:34.548780436Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:34.551640018Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:34.554434009Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:34.557710609Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:34.560822638Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:34.563693788Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:34.567017266Z 79 PC: 1d7dd | Find next file (See above)
2018-12-25T11:43:34.56979695Z 44 PC: 1d734 | Get time 0x1d734: cmp cl, 0x1e
0x1d737: jne 0x1d741
0x1d739: cmp dh, 0x1e
0x1d73c: ja 0x1d741
0x1d73e: jmp 0x1d8dd
0x1d741: push ax
0x1d742: push bp
0x1d743: mov bp, sp
0x1d745: mov word ptr [bp + 2], 0x1a00
0x1d74a: pop bp
0x1d74b: pop ax
0x1d74c: mov dx, 0x80
0x1d74f: int 0x21
0x1d751: lea dx, word ptr [bp + 0x706]
0x1d755: mov ax, 0x3b00
0x1d758: int 0x21
0x1d75a: cmp byte ptr cs:[0], 0xcd
0x1d760: je 0x1d790
0x1d762: pop ds
0x1d763: push ds
2018-12-25T11:43:34.572083917Z 26 PC: 1d751 | Set disk transfer address
2018-12-25T11:43:34.573716805Z 59 PC: 1d75a | Change current directory
2018-12-25T11:43:34.575811127Z 59 PC: 1b2c7 | Change current directory
2018-12-25T11:43:34.580356524Z 26 PC: 1b2ce | Set disk transfer address
2018-12-25T11:43:34.582184403Z 78 PC: 1b2d9 | Find first file
2018-12-25T11:43:34.588704255Z 61 PC: 1b2e2 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:43:34.595967571Z 87 PC: 1b2ea | Get or set file date and time
2018-12-25T11:43:34.597884607Z 64 PC: 1b2f7 | Write file or device (Write 151 bytes on handle 15)
2018-12-25T11:43:34.601421799Z 87 PC: 1b2ff | Get or set file date and time
2018-12-25T11:43:34.604547915Z 62 PC: 1b303 | Close file
2018-12-25T11:43:34.61326192Z 79 PC: 1b307 | Find next file
2018-12-25T11:43:34.615920529Z 61 PC: 1b2e2 | Open file (See above)
2018-12-25T11:43:34.624098623Z 87 PC: 1b2ea | Get or set file date and time (See above)
2018-12-25T11:43:34.626064494Z 64 PC: 1b2f7 | Write file or device (See above)
2018-12-25T11:43:34.629624071Z 87 PC: 1b2ff | Get or set file date and time (See above)
2018-12-25T11:43:34.632651424Z 62 PC: 1b303 | Close file (See above)
2018-12-25T11:43:34.641643267Z 79 PC: 1b307 | Find next file (See above)
2018-12-25T11:43:34.644591292Z 61 PC: 1b2e2 | Open file (See above)
2018-12-25T11:43:34.653551087Z 87 PC: 1b2ea | Get or set file date and time (See above)
2018-12-25T11:43:34.655582451Z 64 PC: 1b2f7 | Write file or device (See above)
2018-12-25T11:43:34.659433187Z 87 PC: 1b2ff | Get or set file date and time (See above)
2018-12-25T11:43:34.663639797Z 62 PC: 1b303 | Close file (See above)
2018-12-25T11:43:34.673906298Z 79 PC: 1b307 | Find next file (See above)
2018-12-25T11:43:34.677813724Z 61 PC: 1b2e2 | Open file (See above)
2018-12-25T11:43:34.687058577Z 87 PC: 1b2ea | Get or set file date and time (See above)
2018-12-25T11:43:34.6889617Z 64 PC: 1b2f7 | Write file or device (See above)
2018-12-25T11:43:34.692167836Z 87 PC: 1b2ff | Get or set file date and time (See above)
2018-12-25T11:43:34.694675767Z 62 PC: 1b303 | Close file (See above)
2018-12-25T11:43:34.703425643Z 79 PC: 1b307 | Find next file (See above)
2018-12-25T11:43:34.706248624Z 61 PC: 1b2e2 | Open file (See above)
2018-12-25T11:43:34.715328047Z 87 PC: 1b2ea | Get or set file date and time (See above)
2018-12-25T11:43:34.716999105Z 64 PC: 1b2f7 | Write file or device (See above)
2018-12-25T11:43:34.720313728Z 87 PC: 1b2ff | Get or set file date and time (See above)
2018-12-25T11:43:34.724661773Z 62 PC: 1b303 | Close file (See above)
2018-12-25T11:43:34.733714548Z 79 PC: 1b307 | Find next file (See above)
2018-12-25T11:43:34.736638942Z 61 PC: 1b2e2 | Open file (See above)
2018-12-25T11:43:34.745858254Z 87 PC: 1b2ea | Get or set file date and time (See above)
2018-12-25T11:43:34.747014934Z 64 PC: 1b2f7 | Write file or device (See above)
2018-12-25T11:43:34.74911456Z 87 PC: 1b2ff | Get or set file date and time (See above)
2018-12-25T11:43:34.750468449Z 62 PC: 1b303 | Close file (See above)
2018-12-25T11:43:34.755661054Z 79 PC: 1b307 | Find next file (See above)
2018-12-25T11:43:34.758432493Z 61 PC: 1b2e2 | Open file (See above)
2018-12-25T11:43:34.763157186Z 87 PC: 1b2ea | Get or set file date and time (See above)
2018-12-25T11:43:34.76428702Z 64 PC: 1b2f7 | Write file or device (See above)
2018-12-25T11:43:34.767188493Z 87 PC: 1b2ff | Get or set file date and time (See above)
2018-12-25T11:43:34.768443964Z 62 PC: 1b303 | Close file (See above)
2018-12-25T11:43:34.773729156Z 79 PC: 1b307 | Find next file (See above)
2018-12-25T11:43:34.776713599Z 9 PC: 1b310 | Display string (String= 'Divide Overflow')
2018-12-25T11:43:34.778966489Z 0 PC: 1b314 | Program terminate
2018-12-25T11:43:34.78250804Z 65 PC: 141ac | Delete file (See above)
2018-12-25T11:43:34.79605678Z 64 PC: 13c85 | Write file or device (Write 0 bytes on handle 1)
2018-12-25T11:43:34.798445627Z 37 PC: 13696 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T11:43:34.800667746Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.802293093Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.803732457Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.806404926Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.808015009Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.809615811Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.812263588Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.813602053Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.814920852Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.817573002Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.819967752Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.821529091Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.824243818Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.825799572Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.827663928Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.839834676Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.841534833Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.843818628Z 37 PC: 13696 | Set interrupt vector (See above)
2018-12-25T11:43:34.845341259Z 76 PC: 136d5 | Terminate with return code (Return code = '0')