Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Edil.6576

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:03:02.702894221Z 53 PC: 13262 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:02.704716065Z 53 PC: 13262 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:02.705824165Z 53 PC: 13262 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:02.707730428Z 53 PC: 13262 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:02.710424672Z 53 PC: 13262 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:02.711684475Z 53 PC: 13262 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:02.713054211Z 53 PC: 13262 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:02.715183019Z 53 PC: 13262 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:02.71641442Z 53 PC: 13262 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:02.717795164Z 53 PC: 13262 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:02.719834573Z 53 PC: 13262 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:02.72092834Z 53 PC: 13262 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:02.721998669Z 53 PC: 13262 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:02.723581765Z 53 PC: 13262 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:02.724974485Z 53 PC: 13262 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:02.726364004Z 53 PC: 13262 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:02.728417057Z 53 PC: 13262 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:02.729817578Z 53 PC: 13262 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:02.731210949Z 53 PC: 13262 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:02.744537624Z 37 PC: 13277 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:02.745695978Z 37 PC: 1327f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:02.74676172Z 37 PC: 13287 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:02.748576349Z 37 PC: 1328f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:02.75008653Z 61 PC: 137f6 | Open file (Filename = 'm 6-Jun-1993,Zaporozhye.Eddie lives...U��F��')
2018-12-17T23:03:02.754855385Z 60 PC: 137f6 | Create or truncate file
2018-12-17T23:03:02.774245091Z 51 PC: 130af | Get or set Ctrl-Break
2018-12-17T23:03:02.775170248Z 48 PC: 13fd4 | Get DOS version
2018-12-17T23:03:02.776660905Z 61 PC: 13dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:02.783724951Z 63 PC: 13ecd | Read file or device (Read 55296 bytes on handle 5)
2018-12-17T23:03:02.792215924Z 62 PC: 13e4a | Close file
2018-12-17T23:03:02.794530141Z 26 PC: 1311a | Set disk transfer address
2018-12-17T23:03:02.796413978Z 78 PC: 13126 | Find first file
2018-12-17T23:03:02.809978915Z 61 PC: 13dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:02.817010247Z 66 PC: 13f96 | Move file pointer
2018-12-17T23:03:02.818848748Z 66 PC: 13fa4 | Move file pointer
2018-12-17T23:03:02.820330813Z 66 PC: 13fb2 | Move file pointer
2018-12-17T23:03:02.821889976Z 62 PC: 13e4a | Close file
2018-12-17T23:03:02.82436051Z 61 PC: 13dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:02.830909343Z 63 PC: 13ecd | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:03:02.833829085Z 62 PC: 13e4a | Close file
2018-12-17T23:03:02.836810645Z 61 PC: 13dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:02.843345051Z 66 PC: 13f96 | Move file pointer
2018-12-17T23:03:02.844740242Z 66 PC: 13fa4 | Move file pointer
2018-12-17T23:03:02.84617896Z 66 PC: 13fb2 | Move file pointer
2018-12-17T23:03:02.848959764Z 62 PC: 13e4a | Close file
2018-12-17T23:03:02.850936463Z 61 PC: 13dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:02.862847102Z 63 PC: 13ecd | Read file or device (Read 11696 bytes on handle 5)
2018-12-17T23:03:02.871207253Z 62 PC: 13e4a | Close file
2018-12-17T23:03:02.873097945Z 60 PC: 13dfa | Create or truncate file
2018-12-17T23:03:02.891206207Z 64 PC: 13ecd | Write file or device (Write 6576 bytes on handle 5)
2018-12-17T23:03:02.900124858Z 64 PC: 13ecd | Write file or device (Write 11696 bytes on handle 5)
2018-12-17T23:03:02.9087878Z 62 PC: 13e4a | Close file
2018-12-17T23:03:02.917347393Z 26 PC: 1313e | Set disk transfer address
2018-12-17T23:03:02.918982285Z 79 PC: 13143 | Find next file
2018-12-17T23:03:02.92170756Z 44 PC: 1305d | Get time 0x1305d: xor ah, ah
0x1305f: mov al, dl
0x13061: les di, ptr [bp + 6]
0x13064: stosw word ptr es:[di], ax
0x13065: mov al, dh
0x13067: les di, ptr [bp + 0xa]
0x1306a: stosw word ptr es:[di], ax
0x1306b: mov al, cl
0x1306d: les di, ptr [bp + 0xe]
0x13070: stosw word ptr es:[di], ax
0x13071: mov al, ch
0x13073: les di, ptr [bp + 0x12]
0x13076: stosw word ptr es:[di], ax
0x13077: pop bp
0x13078: retf 0x10
0x1307b: push bp
0x1307c: mov bp, sp
0x1307e: mov ch, byte ptr [bp + 0xc]
0x13081: mov cl, byte ptr [bp + 0xa]
0x13084: mov dh, byte ptr [bp + 8]
2018-12-17T23:03:02.923831841Z 48 PC: 13fd4 | Get DOS version
2018-12-17T23:03:02.927267928Z 61 PC: 13dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:02.933747652Z 66 PC: 13f96 | Move file pointer
2018-12-17T23:03:02.935266455Z 66 PC: 13fa4 | Move file pointer
2018-12-17T23:03:02.937839687Z 66 PC: 13fb2 | Move file pointer
2018-12-17T23:03:02.939613443Z 62 PC: 13e4a | Close file
2018-12-17T23:03:02.941480264Z 61 PC: 13dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:02.950202515Z 63 PC: 13ecd | Read file or device (Read 6576 bytes on handle 5)
2018-12-17T23:03:02.957861444Z 63 PC: 13ecd | Read file or device (Read 11696 bytes on handle 5)
2018-12-17T23:03:02.965390897Z 62 PC: 13e4a | Close file
2018-12-17T23:03:02.967898739Z 60 PC: 13dfa | Create or truncate file
2018-12-17T23:03:02.980362315Z 64 PC: 13ecd | Write file or device (Write 11696 bytes on handle 5)
2018-12-17T23:03:02.9896581Z 62 PC: 13e4a | Close file
2018-12-17T23:03:02.998926248Z 48 PC: 13fd4 | Get DOS version
2018-12-17T23:03:03.00059953Z 41 PC: 131d1 | Parse filename
2018-12-17T23:03:03.002243578Z 41 PC: 131df | Parse filename
2018-12-17T23:03:03.004781388Z 75 PC: 131ea | Execute program
2018-12-17T23:03:03.021150238Z 53 PC: 26262 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:03.022398506Z 53 PC: 26262 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:03.024496072Z 53 PC: 26262 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:03.025684674Z 53 PC: 26262 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:03.027174773Z 53 PC: 26262 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:03.030298725Z 53 PC: 26262 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:03.031456795Z 53 PC: 26262 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:03.032565442Z 53 PC: 26262 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:03.034995873Z 53 PC: 26262 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:03.036177622Z 53 PC: 26262 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:03.037321798Z 53 PC: 26262 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:03.03933922Z 53 PC: 26262 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:03.040470757Z 53 PC: 26262 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:03.041835201Z 53 PC: 26262 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:03.043385884Z 53 PC: 26262 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:03.045396787Z 53 PC: 26262 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:03.046591398Z 53 PC: 26262 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:03.047877657Z 53 PC: 26262 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:03.049769201Z 53 PC: 26262 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:03.051075305Z 37 PC: 26277 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:03.052593283Z 37 PC: 2627f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:03.054380289Z 37 PC: 26287 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:03.055502951Z 37 PC: 2628f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:03.057135916Z 61 PC: 267f6 | Open file (Filename = 'm 6-Jun-1993,Zaporozhye.Eddie lives...U��F��')
2018-12-17T23:03:03.06363564Z 60 PC: 267f6 | Create or truncate file
2018-12-17T23:03:03.068539642Z 51 PC: 260af | Get or set Ctrl-Break
2018-12-17T23:03:03.069787604Z 48 PC: 26fd4 | Get DOS version
2018-12-17T23:03:03.072751442Z 61 PC: 26dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:03.080232257Z 63 PC: 26ecd | Read file or device (Read 55296 bytes on handle 5)
2018-12-17T23:03:03.087741079Z 62 PC: 26e4a | Close file
2018-12-17T23:03:03.091238383Z 26 PC: 2611a | Set disk transfer address
2018-12-17T23:03:03.09256251Z 78 PC: 26126 | Find first file
2018-12-17T23:03:03.099000551Z 61 PC: 26dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.106792637Z 66 PC: 26f96 | Move file pointer
2018-12-17T23:03:03.108170639Z 66 PC: 26fa4 | Move file pointer
2018-12-17T23:03:03.109443004Z 66 PC: 26fb2 | Move file pointer
2018-12-17T23:03:03.111160973Z 62 PC: 26e4a | Close file
2018-12-17T23:03:03.112784483Z 61 PC: 26dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.11915319Z 63 PC: 26ecd | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:03:03.122244854Z 62 PC: 26e4a | Close file
2018-12-17T23:03:03.124196929Z 61 PC: 26dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.13067326Z 66 PC: 26f96 | Move file pointer
2018-12-17T23:03:03.132815174Z 66 PC: 26fa4 | Move file pointer
2018-12-17T23:03:03.134033989Z 66 PC: 26fb2 | Move file pointer
2018-12-17T23:03:03.135587504Z 62 PC: 26e4a | Close file
2018-12-17T23:03:03.138111146Z 61 PC: 26dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.149811419Z 63 PC: 26ecd | Read file or device (Read 11696 bytes on handle 5)
2018-12-17T23:03:03.157129522Z 62 PC: 26e4a | Close file
2018-12-17T23:03:03.159205528Z 60 PC: 26dfa | Create or truncate file
2018-12-17T23:03:03.171271044Z 64 PC: 26ecd | Write file or device (Write 6576 bytes on handle 5)
2018-12-17T23:03:03.179807501Z 64 PC: 26ecd | Write file or device (Write 11696 bytes on handle 5)
2018-12-17T23:03:03.190012288Z 62 PC: 26e4a | Close file
2018-12-17T23:03:03.198186813Z 26 PC: 2613e | Set disk transfer address
2018-12-17T23:03:03.199747802Z 79 PC: 26143 | Find next file
2018-12-17T23:03:03.202947323Z 44 PC: 2605d | Get time 0x2605d: xor ah, ah
0x2605f: mov al, dl
0x26061: les di, ptr [bp + 6]
0x26064: stosw word ptr es:[di], ax
0x26065: mov al, dh
0x26067: les di, ptr [bp + 0xa]
0x2606a: stosw word ptr es:[di], ax
0x2606b: mov al, cl
0x2606d: les di, ptr [bp + 0xe]
0x26070: stosw word ptr es:[di], ax
0x26071: mov al, ch
0x26073: les di, ptr [bp + 0x12]
0x26076: stosw word ptr es:[di], ax
0x26077: pop bp
0x26078: retf 0x10
0x2607b: push bp
0x2607c: mov bp, sp
0x2607e: mov ch, byte ptr [bp + 0xc]
0x26081: mov cl, byte ptr [bp + 0xa]
0x26084: mov dh, byte ptr [bp + 8]
2018-12-17T23:03:03.205164254Z 48 PC: 26fd4 | Get DOS version
2018-12-17T23:03:03.207365912Z 61 PC: 26dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:03.214544316Z 66 PC: 26f96 | Move file pointer
2018-12-17T23:03:03.215798155Z 66 PC: 26fa4 | Move file pointer
2018-12-17T23:03:03.217088575Z 66 PC: 26fb2 | Move file pointer
2018-12-17T23:03:03.224545311Z 62 PC: 26e4a | Close file
2018-12-17T23:03:03.226644243Z 61 PC: 26dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:03.233401036Z 63 PC: 26ecd | Read file or device (Read 6576 bytes on handle 5)
2018-12-17T23:03:03.24239783Z 63 PC: 26ecd | Read file or device (Read 11696 bytes on handle 5)
2018-12-17T23:03:03.24970992Z 62 PC: 26e4a | Close file
2018-12-17T23:03:03.251923804Z 60 PC: 26dfa | Create or truncate file
2018-12-17T23:03:03.265991073Z 64 PC: 26ecd | Write file or device (Write 11696 bytes on handle 5)
2018-12-17T23:03:03.275617832Z 62 PC: 26e4a | Close file
2018-12-17T23:03:03.285212235Z 48 PC: 26fd4 | Get DOS version
2018-12-17T23:03:03.28782375Z 41 PC: 261d1 | Parse filename
2018-12-17T23:03:03.289234128Z 41 PC: 261df | Parse filename
2018-12-17T23:03:03.290931875Z 75 PC: 261ea | Execute program
2018-12-17T23:03:03.308428085Z 53 PC: 39262 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:03.309869209Z 53 PC: 39262 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:03.311301101Z 53 PC: 39262 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:03.313297623Z 53 PC: 39262 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:03.314795025Z 53 PC: 39262 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:03.316067125Z 53 PC: 39262 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:03.317905152Z 53 PC: 39262 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:03.33347422Z 53 PC: 39262 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:03.334688707Z 53 PC: 39262 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:03.336873194Z 53 PC: 39262 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:03.338262718Z 53 PC: 39262 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:03.339635135Z 53 PC: 39262 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:03.341915146Z 53 PC: 39262 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:03.343224676Z 53 PC: 39262 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:03.344384012Z 53 PC: 39262 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:03.345950107Z 53 PC: 39262 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:03.347114619Z 53 PC: 39262 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:03.348503287Z 53 PC: 39262 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:03.350715892Z 53 PC: 39262 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:03.352338061Z 37 PC: 39277 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:03.355522541Z 37 PC: 3927f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:03.357037123Z 37 PC: 39287 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:03.358398623Z 37 PC: 3928f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:03.361362332Z 61 PC: 397f6 | Open file (Filename = 'm 6-Jun-1993,Zaporozhye.Eddie lives...U��F��')
2018-12-17T23:03:03.366066178Z 60 PC: 397f6 | Create or truncate file
2018-12-17T23:03:03.371211867Z 51 PC: 390af | Get or set Ctrl-Break
2018-12-17T23:03:03.373695295Z 48 PC: 39fd4 | Get DOS version
2018-12-17T23:03:03.375263087Z 61 PC: 39dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:03.382411762Z 63 PC: 39ecd | Read file or device (Read 55296 bytes on handle 5)
2018-12-17T23:03:03.390952509Z 62 PC: 39e4a | Close file
2018-12-17T23:03:03.393778424Z 26 PC: 3911a | Set disk transfer address
2018-12-17T23:03:03.395095722Z 78 PC: 39126 | Find first file
2018-12-17T23:03:03.402033081Z 61 PC: 39dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.408316078Z 66 PC: 39f96 | Move file pointer
2018-12-17T23:03:03.409506265Z 66 PC: 39fa4 | Move file pointer
2018-12-17T23:03:03.41160809Z 66 PC: 39fb2 | Move file pointer
2018-12-17T23:03:03.412986013Z 62 PC: 39e4a | Close file
2018-12-17T23:03:03.414839954Z 61 PC: 39dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.421674198Z 63 PC: 39ecd | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:03:03.424287257Z 62 PC: 39e4a | Close file
2018-12-17T23:03:03.427148086Z 61 PC: 39dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.43522739Z 66 PC: 39f96 | Move file pointer
2018-12-17T23:03:03.436625112Z 66 PC: 39fa4 | Move file pointer
2018-12-17T23:03:03.438038336Z 66 PC: 39fb2 | Move file pointer
2018-12-17T23:03:03.44075946Z 62 PC: 39e4a | Close file
2018-12-17T23:03:03.442617944Z 61 PC: 39dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.448938857Z 63 PC: 39ecd | Read file or device (Read 11696 bytes on handle 5)
2018-12-17T23:03:03.457436681Z 62 PC: 39e4a | Close file
2018-12-17T23:03:03.459681763Z 60 PC: 39dfa | Create or truncate file
2018-12-17T23:03:03.473206853Z 64 PC: 39ecd | Write file or device (Write 6576 bytes on handle 5)
2018-12-17T23:03:03.482431326Z 64 PC: 39ecd | Write file or device (Write 11696 bytes on handle 5)
2018-12-17T23:03:03.492861829Z 62 PC: 39e4a | Close file
2018-12-17T23:03:03.501397809Z 26 PC: 3913e | Set disk transfer address
2018-12-17T23:03:03.503703297Z 79 PC: 39143 | Find next file
2018-12-17T23:03:03.506400804Z 44 PC: 3905d | Get time 0x3905d: xor ah, ah
0x3905f: mov al, dl
0x39061: les di, ptr [bp + 6]
0x39064: stosw word ptr es:[di], ax
0x39065: mov al, dh
0x39067: les di, ptr [bp + 0xa]
0x3906a: stosw word ptr es:[di], ax
0x3906b: mov al, cl
0x3906d: les di, ptr [bp + 0xe]
0x39070: stosw word ptr es:[di], ax
0x39071: mov al, ch
0x39073: les di, ptr [bp + 0x12]
0x39076: stosw word ptr es:[di], ax
0x39077: pop bp
0x39078: retf 0x10
0x3907b: push bp
0x3907c: mov bp, sp
0x3907e: mov ch, byte ptr [bp + 0xc]
0x39081: mov cl, byte ptr [bp + 0xa]
0x39084: mov dh, byte ptr [bp + 8]
2018-12-17T23:03:03.508539623Z 48 PC: 39fd4 | Get DOS version
2018-12-17T23:03:03.510462229Z 61 PC: 39dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:03.516775644Z 66 PC: 39f96 | Move file pointer
2018-12-17T23:03:03.518030149Z 66 PC: 39fa4 | Move file pointer
2018-12-17T23:03:03.519768112Z 66 PC: 39fb2 | Move file pointer
2018-12-17T23:03:03.521228591Z 62 PC: 39e4a | Close file
2018-12-17T23:03:03.522770515Z 61 PC: 39dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:03.52931454Z 63 PC: 39ecd | Read file or device (Read 6576 bytes on handle 5)
2018-12-17T23:03:03.536478925Z 63 PC: 39ecd | Read file or device (Read 11696 bytes on handle 5)
2018-12-17T23:03:03.543382356Z 62 PC: 39e4a | Close file
2018-12-17T23:03:03.545087154Z 60 PC: 39dfa | Create or truncate file
2018-12-17T23:03:03.557418711Z 64 PC: 39ecd | Write file or device (Write 11696 bytes on handle 5)
2018-12-17T23:03:03.565896258Z 62 PC: 39e4a | Close file
2018-12-17T23:03:03.574254753Z 48 PC: 39fd4 | Get DOS version
2018-12-17T23:03:03.575696981Z 41 PC: 391d1 | Parse filename
2018-12-17T23:03:03.577448651Z 41 PC: 391df | Parse filename
2018-12-17T23:03:03.578908471Z 75 PC: 391ea | Execute program
2018-12-17T23:03:03.593341306Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:03.595598971Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:03.597011786Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:03.598349103Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:03.600754552Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:03.602286452Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:03.603687638Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:03.605748555Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:03.60710867Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:03.608430871Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:03.610388733Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:03.611551172Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:03.612612482Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:03.614419783Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:03.615498139Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:03.616541992Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:03.61855455Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:03.619609867Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:03.620662436Z 53 PC: 4c262 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:03.622457663Z 37 PC: 4c277 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:03.624639805Z 37 PC: 4c27f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:03.625640655Z 37 PC: 4c287 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:03.627524181Z 37 PC: 4c28f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:03.628783284Z 61 PC: 4c7f6 | Open file (Filename = 'm 6-Jun-1993,Zaporozhye.Eddie lives...U��F��')
2018-12-17T23:03:03.633462967Z 60 PC: 4c7f6 | Create or truncate file
2018-12-17T23:03:03.64134588Z 51 PC: 4c0af | Get or set Ctrl-Break
2018-12-17T23:03:03.642327182Z 48 PC: 4cfd4 | Get DOS version
2018-12-17T23:03:03.643933312Z 61 PC: 4cdfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:03.651880338Z 63 PC: 4cecd | Read file or device (Read 55296 bytes on handle 5)
2018-12-17T23:03:03.659818813Z 62 PC: 4ce4a | Close file
2018-12-17T23:03:03.662110316Z 26 PC: 4c11a | Set disk transfer address
2018-12-17T23:03:03.663944008Z 78 PC: 4c126 | Find first file
2018-12-17T23:03:03.670178404Z 61 PC: 4cdfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.676492463Z 66 PC: 4cf96 | Move file pointer
2018-12-17T23:03:03.678438173Z 66 PC: 4cfa4 | Move file pointer
2018-12-17T23:03:03.679984875Z 66 PC: 4cfb2 | Move file pointer
2018-12-17T23:03:03.681863288Z 62 PC: 4ce4a | Close file
2018-12-17T23:03:03.68423191Z 61 PC: 4cdfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.690587693Z 63 PC: 4cecd | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:03:03.693329766Z 62 PC: 4ce4a | Close file
2018-12-17T23:03:03.696314823Z 61 PC: 4cdfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.702842206Z 66 PC: 4cf96 | Move file pointer
2018-12-17T23:03:03.704521082Z 66 PC: 4cfa4 | Move file pointer
2018-12-17T23:03:03.706893611Z 66 PC: 4cfb2 | Move file pointer
2018-12-17T23:03:03.708673148Z 62 PC: 4ce4a | Close file
2018-12-17T23:03:03.710791165Z 61 PC: 4cdfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.718703005Z 63 PC: 4cecd | Read file or device (Read 11696 bytes on handle 5)
2018-12-17T23:03:03.725926757Z 62 PC: 4ce4a | Close file
2018-12-17T23:03:03.728140642Z 60 PC: 4cdfa | Create or truncate file
2018-12-17T23:03:03.740604627Z 64 PC: 4cecd | Write file or device (Write 6576 bytes on handle 5)
2018-12-17T23:03:03.749892485Z 64 PC: 4cecd | Write file or device (Write 11696 bytes on handle 5)
2018-12-17T23:03:03.759726917Z 62 PC: 4ce4a | Close file
2018-12-17T23:03:03.768334988Z 26 PC: 4c13e | Set disk transfer address
2018-12-17T23:03:03.769403831Z 79 PC: 4c143 | Find next file
2018-12-17T23:03:03.773008902Z 44 PC: 4c05d | Get time 0x4c05d: xor ah, ah
0x4c05f: mov al, dl
0x4c061: les di, ptr [bp + 6]
0x4c064: stosw word ptr es:[di], ax
0x4c065: mov al, dh
0x4c067: les di, ptr [bp + 0xa]
0x4c06a: stosw word ptr es:[di], ax
0x4c06b: mov al, cl
0x4c06d: les di, ptr [bp + 0xe]
0x4c070: stosw word ptr es:[di], ax
0x4c071: mov al, ch
0x4c073: les di, ptr [bp + 0x12]
0x4c076: stosw word ptr es:[di], ax
0x4c077: pop bp
0x4c078: retf 0x10
0x4c07b: push bp
0x4c07c: mov bp, sp
0x4c07e: mov ch, byte ptr [bp + 0xc]
0x4c081: mov cl, byte ptr [bp + 0xa]
0x4c084: mov dh, byte ptr [bp + 8]
2018-12-17T23:03:03.775109211Z 48 PC: 4cfd4 | Get DOS version
2018-12-17T23:03:03.776882318Z 61 PC: 4cdfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:03.784403472Z 66 PC: 4cf96 | Move file pointer
2018-12-17T23:03:03.785835355Z 66 PC: 4cfa4 | Move file pointer
2018-12-17T23:03:03.787127219Z 66 PC: 4cfb2 | Move file pointer
2018-12-17T23:03:03.789039346Z 62 PC: 4ce4a | Close file
2018-12-17T23:03:03.790802786Z 61 PC: 4cdfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:03.79751855Z 63 PC: 4cecd | Read file or device (Read 6576 bytes on handle 5)
2018-12-17T23:03:03.805494799Z 63 PC: 4cecd | Read file or device (Read 11696 bytes on handle 5)
2018-12-17T23:03:03.813405039Z 62 PC: 4ce4a | Close file
2018-12-17T23:03:03.816380405Z 60 PC: 4cdfa | Create or truncate file
2018-12-17T23:03:03.828864998Z 64 PC: 4cecd | Write file or device (Write 11696 bytes on handle 5)
2018-12-17T23:03:03.838253526Z 62 PC: 4ce4a | Close file
2018-12-17T23:03:03.853080121Z 48 PC: 4cfd4 | Get DOS version
2018-12-17T23:03:03.854928948Z 41 PC: 4c1d1 | Parse filename
2018-12-17T23:03:03.856706918Z 41 PC: 4c1df | Parse filename
2018-12-17T23:03:03.859407327Z 75 PC: 4c1ea | Execute program
2018-12-17T23:03:03.874784653Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:03.87640418Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:03.877709591Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:03.878932691Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:03.880832248Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:03.881934299Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:03.883039077Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:03.885345863Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:03.886402014Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:03.88745833Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:03.889806172Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:03.891794022Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:03.893632857Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:03.896249329Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:03.897798964Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:03.899317703Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:03.900745729Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:03.901901537Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:03.903690388Z 53 PC: 5f262 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:03.904930983Z 37 PC: 5f277 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:03.906031462Z 37 PC: 5f27f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:03.908234685Z 37 PC: 5f287 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:03.909448739Z 37 PC: 5f28f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:03.911020004Z 61 PC: 5f7f6 | Open file (Filename = 'm 6-Jun-1993,Zaporozhye.Eddie lives...U��F��')
2018-12-17T23:03:03.916806103Z 60 PC: 5f7f6 | Create or truncate file
2018-12-17T23:03:03.921556365Z 51 PC: 5f0af | Get or set Ctrl-Break
2018-12-17T23:03:03.922586335Z 48 PC: 5ffd4 | Get DOS version
2018-12-17T23:03:03.924954168Z 61 PC: 5fdfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:03.931595697Z 63 PC: 5fecd | Read file or device (Read 55296 bytes on handle 5)
2018-12-17T23:03:03.939111807Z 62 PC: 5fe4a | Close file
2018-12-17T23:03:03.941113114Z 26 PC: 5f11a | Set disk transfer address
2018-12-17T23:03:03.941933301Z 78 PC: 5f126 | Find first file
2018-12-17T23:03:03.946409704Z 61 PC: 5fdfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.95046504Z 66 PC: 5ff96 | Move file pointer
2018-12-17T23:03:03.951635454Z 66 PC: 5ffa4 | Move file pointer
2018-12-17T23:03:03.95338413Z 66 PC: 5ffb2 | Move file pointer
2018-12-17T23:03:03.95469558Z 62 PC: 5fe4a | Close file
2018-12-17T23:03:03.95625944Z 61 PC: 5fdfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.962936706Z 63 PC: 5fecd | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:03:03.965374839Z 62 PC: 5fe4a | Close file
2018-12-17T23:03:03.967278071Z 61 PC: 5fdfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.973822105Z 66 PC: 5ff96 | Move file pointer
2018-12-17T23:03:03.975093999Z 66 PC: 5ffa4 | Move file pointer
2018-12-17T23:03:03.97685826Z 66 PC: 5ffb2 | Move file pointer
2018-12-17T23:03:03.978458147Z 62 PC: 5fe4a | Close file
2018-12-17T23:03:03.980245681Z 61 PC: 5fdfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:03.99170699Z 63 PC: 5fecd | Read file or device (Read 11696 bytes on handle 5)
2018-12-17T23:03:03.998987795Z 62 PC: 5fe4a | Close file
2018-12-17T23:03:04.001336641Z 60 PC: 5fdfa | Create or truncate file
2018-12-17T23:03:04.01409491Z 64 PC: 5fecd | Write file or device (Write 6576 bytes on handle 5)
2018-12-17T23:03:04.022728267Z 64 PC: 5fecd | Write file or device (Write 11696 bytes on handle 5)
2018-12-17T23:03:04.031473035Z 62 PC: 5fe4a | Close file
2018-12-17T23:03:04.040610078Z 26 PC: 5f13e | Set disk transfer address
2018-12-17T23:03:04.041675259Z 79 PC: 5f143 | Find next file
2018-12-17T23:03:04.044228823Z 44 PC: 5f05d | Get time 0x5f05d: xor ah, ah
0x5f05f: mov al, dl
0x5f061: les di, ptr [bp + 6]
0x5f064: stosw word ptr es:[di], ax
0x5f065: mov al, dh
0x5f067: les di, ptr [bp + 0xa]
0x5f06a: stosw word ptr es:[di], ax
0x5f06b: mov al, cl
0x5f06d: les di, ptr [bp + 0xe]
0x5f070: stosw word ptr es:[di], ax
0x5f071: mov al, ch
0x5f073: les di, ptr [bp + 0x12]
0x5f076: stosw word ptr es:[di], ax
0x5f077: pop bp
0x5f078: retf 0x10
0x5f07b: push bp
0x5f07c: mov bp, sp
0x5f07e: mov ch, byte ptr [bp + 0xc]
0x5f081: mov cl, byte ptr [bp + 0xa]
0x5f084: mov dh, byte ptr [bp + 8]
2018-12-17T23:03:04.047311553Z 48 PC: 5ffd4 | Get DOS version
2018-12-17T23:03:04.048860755Z 61 PC: 5fdfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:04.055252377Z 66 PC: 5ff96 | Move file pointer
2018-12-17T23:03:04.057144672Z 66 PC: 5ffa4 | Move file pointer
2018-12-17T23:03:04.058499736Z 66 PC: 5ffb2 | Move file pointer
2018-12-17T23:03:04.060820611Z 62 PC: 5fe4a | Close file
2018-12-17T23:03:04.062526306Z 61 PC: 5fdfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:04.069618094Z 63 PC: 5fecd | Read file or device (Read 6576 bytes on handle 5)
2018-12-17T23:03:04.078081036Z 63 PC: 5fecd | Read file or device (Read 11696 bytes on handle 5)
2018-12-17T23:03:04.085564268Z 62 PC: 5fe4a | Close file
2018-12-17T23:03:04.087566248Z 60 PC: 5fdfa | Create or truncate file
2018-12-17T23:03:04.100050432Z 64 PC: 5fecd | Write file or device (Write 11696 bytes on handle 5)
2018-12-17T23:03:04.107808684Z 62 PC: 5fe4a | Close file
2018-12-17T23:03:04.112963767Z 48 PC: 5ffd4 | Get DOS version
2018-12-17T23:03:04.114640562Z 41 PC: 5f1d1 | Parse filename
2018-12-17T23:03:04.115748217Z 41 PC: 5f1df | Parse filename
2018-12-17T23:03:04.117352421Z 75 PC: 5f1ea | Execute program
2018-12-17T23:03:04.126369167Z 53 PC: 72262 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:04.12731963Z 53 PC: 72262 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:04.128923024Z 53 PC: 72262 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:04.129847391Z 53 PC: 72262 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:04.130786857Z 53 PC: 72262 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:04.132290588Z 53 PC: 72262 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:04.13321201Z 53 PC: 72262 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:04.134156006Z 53 PC: 72262 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:04.135984486Z 53 PC: 72262 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:04.137421283Z 53 PC: 72262 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:04.139652816Z 53 PC: 72262 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:04.14234311Z 53 PC: 72262 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:04.143901869Z 53 PC: 72262 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:04.146219579Z 53 PC: 72262 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:04.147568183Z 53 PC: 72262 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:04.149127803Z 53 PC: 72262 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:04.151320053Z 53 PC: 72262 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:04.152596222Z 53 PC: 72262 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:04.153713437Z 53 PC: 72262 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:04.155588809Z 37 PC: 72277 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:04.156674415Z 37 PC: 7227f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:04.157905955Z 37 PC: 72287 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:04.159643389Z 37 PC: 7228f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:04.161033328Z 61 PC: 727f6 | Open file (Filename = 'm 6-Jun-1993,Zaporozhye.Eddie lives...U��F��')
2018-12-17T23:03:04.166382901Z 60 PC: 727f6 | Create or truncate file
2018-12-17T23:03:04.170809694Z 51 PC: 720af | Get or set Ctrl-Break
2018-12-17T23:03:04.171561513Z 48 PC: 72fd4 | Get DOS version
2018-12-17T23:03:04.173775942Z 61 PC: 72dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:04.182307994Z 63 PC: 72ecd | Read file or device (Read 55296 bytes on handle 5)
2018-12-17T23:03:04.190080643Z 62 PC: 72e4a | Close file
2018-12-17T23:03:04.19347423Z 26 PC: 7211a | Set disk transfer address
2018-12-17T23:03:04.194902148Z 78 PC: 72126 | Find first file
2018-12-17T23:03:04.201710225Z 61 PC: 72dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:04.208804009Z 66 PC: 72f96 | Move file pointer
2018-12-17T23:03:04.210484084Z 66 PC: 72fa4 | Move file pointer
2018-12-17T23:03:04.213063247Z 66 PC: 72fb2 | Move file pointer
2018-12-17T23:03:04.214920639Z 62 PC: 72e4a | Close file
2018-12-17T23:03:04.217678299Z 61 PC: 72dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:04.22527867Z 63 PC: 72ecd | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:03:04.227828241Z 62 PC: 72e4a | Close file
2018-12-17T23:03:04.230055783Z 61 PC: 72dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:04.237663311Z 66 PC: 72f96 | Move file pointer
2018-12-17T23:03:04.238981893Z 66 PC: 72fa4 | Move file pointer
2018-12-17T23:03:04.24048269Z 66 PC: 72fb2 | Move file pointer
2018-12-17T23:03:04.242893544Z 62 PC: 72e4a | Close file
2018-12-17T23:03:04.24492801Z 61 PC: 72dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:04.252124952Z 63 PC: 72ecd | Read file or device (Read 11696 bytes on handle 5)
2018-12-17T23:03:04.259164952Z 62 PC: 72e4a | Close file
2018-12-17T23:03:04.260787727Z 60 PC: 72dfa | Create or truncate file
2018-12-17T23:03:04.274241518Z 64 PC: 72ecd | Write file or device (Write 6576 bytes on handle 5)
2018-12-17T23:03:04.283336945Z 64 PC: 72ecd | Write file or device (Write 11696 bytes on handle 5)
2018-12-17T23:03:04.291912522Z 62 PC: 72e4a | Close file
2018-12-17T23:03:04.300330037Z 26 PC: 7213e | Set disk transfer address
2018-12-17T23:03:04.301413596Z 79 PC: 72143 | Find next file
2018-12-17T23:03:04.304183389Z 44 PC: 7205d | Get time 0x7205d: xor ah, ah
0x7205f: mov al, dl
0x72061: les di, ptr [bp + 6]
0x72064: stosw word ptr es:[di], ax
0x72065: mov al, dh
0x72067: les di, ptr [bp + 0xa]
0x7206a: stosw word ptr es:[di], ax
0x7206b: mov al, cl
0x7206d: les di, ptr [bp + 0xe]
0x72070: stosw word ptr es:[di], ax
0x72071: mov al, ch
0x72073: les di, ptr [bp + 0x12]
0x72076: stosw word ptr es:[di], ax
0x72077: pop bp
0x72078: retf 0x10
0x7207b: push bp
0x7207c: mov bp, sp
0x7207e: mov ch, byte ptr [bp + 0xc]
0x72081: mov cl, byte ptr [bp + 0xa]
0x72084: mov dh, byte ptr [bp + 8]
2018-12-17T23:03:04.307283274Z 48 PC: 72fd4 | Get DOS version
2018-12-17T23:03:04.308824036Z 61 PC: 72dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:04.315151667Z 66 PC: 72f96 | Move file pointer
2018-12-17T23:03:04.317171371Z 66 PC: 72fa4 | Move file pointer
2018-12-17T23:03:04.318505954Z 66 PC: 72fb2 | Move file pointer
2018-12-17T23:03:04.320854821Z 62 PC: 72e4a | Close file
2018-12-17T23:03:04.322863625Z 61 PC: 72dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:04.329267735Z 63 PC: 72ecd | Read file or device (Read 6576 bytes on handle 5)
2018-12-17T23:03:04.337677429Z 63 PC: 72ecd | Read file or device (Read 11696 bytes on handle 5)
2018-12-17T23:03:04.344904317Z 62 PC: 72e4a | Close file
2018-12-17T23:03:04.346969262Z 60 PC: 72dfa | Create or truncate file
2018-12-17T23:03:04.360871173Z 64 PC: 72ecd | Write file or device (Write 11696 bytes on handle 5)
2018-12-17T23:03:04.369294868Z 62 PC: 72e4a | Close file
2018-12-17T23:03:04.377349227Z 48 PC: 72fd4 | Get DOS version
2018-12-17T23:03:04.379943117Z 41 PC: 721d1 | Parse filename
2018-12-17T23:03:04.381284129Z 41 PC: 721df | Parse filename
2018-12-17T23:03:04.382731274Z 75 PC: 721ea | Execute program
2018-12-17T23:03:04.397819369Z 53 PC: 85262 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:04.398951125Z 53 PC: 85262 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:04.40102742Z 53 PC: 85262 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:04.402204452Z 53 PC: 85262 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:04.403272762Z 53 PC: 85262 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:04.405389912Z 53 PC: 85262 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:04.406465742Z 53 PC: 85262 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:04.407712367Z 53 PC: 85262 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:04.409958835Z 53 PC: 85262 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:04.411081486Z 53 PC: 85262 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:04.41225556Z 53 PC: 85262 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:04.415788829Z 53 PC: 85262 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:04.416940621Z 53 PC: 85262 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:04.419071165Z 53 PC: 85262 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:04.420340923Z 53 PC: 85262 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:04.421488377Z 53 PC: 85262 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:04.423711516Z 53 PC: 85262 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:04.424817023Z 53 PC: 85262 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:04.425923324Z 53 PC: 85262 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:04.428121253Z 37 PC: 85277 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:04.429469809Z 37 PC: 8527f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:04.431448951Z 37 PC: 85287 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:04.433032001Z 37 PC: 8528f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:04.434805996Z 61 PC: 857f6 | Open file (Filename = 'm 6-Jun-1993,Zaporozhye.Eddie lives...U��F��')
2018-12-17T23:03:04.441550806Z 60 PC: 857f6 | Create or truncate file
2018-12-17T23:03:04.44636708Z 51 PC: 850af | Get or set Ctrl-Break
2018-12-17T23:03:04.447233754Z 48 PC: 85fd4 | Get DOS version
2018-12-17T23:03:04.448999438Z 61 PC: 85dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:04.455638263Z 63 PC: 85ecd | Read file or device (Read 55296 bytes on handle 5)
2018-12-17T23:03:04.463700994Z 62 PC: 85e4a | Close file
2018-12-17T23:03:04.465973428Z 26 PC: 8511a | Set disk transfer address
2018-12-17T23:03:04.466933766Z 78 PC: 85126 | Find first file
2018-12-17T23:03:04.473652953Z 61 PC: 85dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:04.480130465Z 66 PC: 85f96 | Move file pointer
2018-12-17T23:03:04.481603863Z 66 PC: 85fa4 | Move file pointer
2018-12-17T23:03:04.483271326Z 66 PC: 85fb2 | Move file pointer
2018-12-17T23:03:04.484694767Z 62 PC: 85e4a | Close file
2018-12-17T23:03:04.487518551Z 61 PC: 85dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:04.494123502Z 63 PC: 85ecd | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:03:04.496826053Z 62 PC: 85e4a | Close file
2018-12-17T23:03:04.499332575Z 61 PC: 85dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:04.506538074Z 66 PC: 85f96 | Move file pointer
2018-12-17T23:03:04.508054252Z 66 PC: 85fa4 | Move file pointer
2018-12-17T23:03:04.509379517Z 66 PC: 85fb2 | Move file pointer
2018-12-17T23:03:04.510850268Z 62 PC: 85e4a | Close file
2018-12-17T23:03:04.512956378Z 61 PC: 85dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:04.519329657Z 63 PC: 85ecd | Read file or device (Read 11696 bytes on handle 5)
2018-12-17T23:03:04.527060571Z 62 PC: 85e4a | Close file
2018-12-17T23:03:04.529973688Z 60 PC: 85dfa | Create or truncate file
2018-12-17T23:03:04.542118956Z 64 PC: 85ecd | Write file or device (Write 6576 bytes on handle 5)
2018-12-17T23:03:04.551041879Z 64 PC: 85ecd | Write file or device (Write 11696 bytes on handle 5)
2018-12-17T23:03:04.561029596Z 62 PC: 85e4a | Close file
2018-12-17T23:03:04.570023208Z 26 PC: 8513e | Set disk transfer address
2018-12-17T23:03:04.572318896Z 79 PC: 85143 | Find next file
2018-12-17T23:03:04.57576939Z 44 PC: 8505d | Get time 0x8505d: xor ah, ah
0x8505f: mov al, dl
0x85061: les di, ptr [bp + 6]
0x85064: stosw word ptr es:[di], ax
0x85065: mov al, dh
0x85067: les di, ptr [bp + 0xa]
0x8506a: stosw word ptr es:[di], ax
0x8506b: mov al, cl
0x8506d: les di, ptr [bp + 0xe]
0x85070: stosw word ptr es:[di], ax
0x85071: mov al, ch
0x85073: les di, ptr [bp + 0x12]
0x85076: stosw word ptr es:[di], ax
0x85077: pop bp
0x85078: retf 0x10
0x8507b: push bp
0x8507c: mov bp, sp
0x8507e: mov ch, byte ptr [bp + 0xc]
0x85081: mov cl, byte ptr [bp + 0xa]
0x85084: mov dh, byte ptr [bp + 8]
2018-12-17T23:03:04.578405371Z 48 PC: 85fd4 | Get DOS version
2018-12-17T23:03:04.581308544Z 61 PC: 85dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:04.590344896Z 66 PC: 85f96 | Move file pointer
2018-12-17T23:03:04.591602577Z 66 PC: 85fa4 | Move file pointer
2018-12-17T23:03:04.593830579Z 66 PC: 85fb2 | Move file pointer
2018-12-17T23:03:04.595455172Z 62 PC: 85e4a | Close file
2018-12-17T23:03:04.597346073Z 61 PC: 85dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:04.604324477Z 63 PC: 85ecd | Read file or device (Read 6576 bytes on handle 5)
2018-12-17T23:03:04.611691205Z 63 PC: 85ecd | Read file or device (Read 11696 bytes on handle 5)
2018-12-17T23:03:04.619510841Z 62 PC: 85e4a | Close file
2018-12-17T23:03:04.621166948Z 60 PC: 85dfa | Create or truncate file
2018-12-17T23:03:04.737455081Z 64 PC: 85ecd | Write file or device (Write 11696 bytes on handle 5)
2018-12-17T23:03:04.903551973Z 62 PC: 85e4a | Close file
2018-12-17T23:03:04.924362909Z 48 PC: 85fd4 | Get DOS version
2018-12-17T23:03:04.926013671Z 41 PC: 851d1 | Parse filename
2018-12-17T23:03:04.92822642Z 41 PC: 851df | Parse filename
2018-12-17T23:03:04.929669353Z 75 PC: 851ea | Execute program
2018-12-17T23:03:04.94495094Z 53 PC: 98262 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:04.946175546Z 53 PC: 98262 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:04.947344463Z 53 PC: 98262 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:04.949190367Z 53 PC: 98262 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:04.950348178Z 53 PC: 98262 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:04.951846767Z 53 PC: 98262 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:04.953317054Z 53 PC: 98262 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:04.954546379Z 53 PC: 98262 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:04.956421409Z 53 PC: 98262 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:04.969376434Z 53 PC: 98262 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:04.970905041Z 53 PC: 98262 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:04.972872577Z 53 PC: 98262 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:04.97440466Z 53 PC: 98262 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:04.976638827Z 53 PC: 98262 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:04.978149422Z 53 PC: 98262 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:04.979621977Z 53 PC: 98262 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:04.982166194Z 53 PC: 98262 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:04.984377047Z 53 PC: 98262 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:04.985886579Z 53 PC: 98262 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:04.987798391Z 37 PC: 98277 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:04.988854103Z 37 PC: 9827f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:04.990232067Z 37 PC: 98287 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:04.991705102Z 37 PC: 9828f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:04.993187659Z 61 PC: 987f6 | Open file (Filename = 'm 6-Jun-1993,Zaporozhye.Eddie lives...U��F��')
2018-12-17T23:03:04.999015184Z 60 PC: 987f6 | Create or truncate file
2018-12-17T23:03:05.003832536Z 51 PC: 980af | Get or set Ctrl-Break
2018-12-17T23:03:05.004923462Z 48 PC: 98fd4 | Get DOS version
2018-12-17T23:03:05.00803899Z 61 PC: 98dfa | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:05.014614056Z 63 PC: 98ecd | Read file or device (Read 55296 bytes on handle 5)
2018-12-17T23:03:05.022727589Z 62 PC: 98e4a | Close file
2018-12-17T23:03:05.025095059Z 26 PC: 9811a | Set disk transfer address
2018-12-17T23:03:05.0264214Z 78 PC: 98126 | Find first file
2018-12-17T23:03:05.034902486Z 61 PC: 98dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:05.041542193Z 66 PC: 98f96 | Move file pointer
2018-12-17T23:03:05.042954498Z 66 PC: 98fa4 | Move file pointer
2018-12-17T23:03:05.044928115Z 66 PC: 98fb2 | Move file pointer
2018-12-17T23:03:05.046345049Z 62 PC: 98e4a | Close file
2018-12-17T23:03:05.048240718Z 61 PC: 98dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:05.0545993Z 63 PC: 98ecd | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:03:05.05715709Z 62 PC: 98e4a | Close file
2018-12-17T23:03:05.060631628Z 61 PC: 98dfa | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:05.067096561Z 66 PC: 98f96 | Move file pointer
2018-12-17T23:03:05.068099763Z 66 PC: 98fa4 | Move file pointer
2018-12-17T23:03:05.081941649Z 66 PC: 98fb2 | Move file pointer
2018-12-17T23:03:05.083576796Z 37 PC: 98376 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:05.086008427Z 37 PC: 98376 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:05.087145437Z 37 PC: 98376 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:05.088277907Z 37 PC: 98376 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:05.090735582Z 37 PC: 98376 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:05.09166783Z 37 PC: 98376 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:05.093548788Z 37 PC: 98376 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:05.094719298Z 37 PC: 98376 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:05.095911972Z 37 PC: 98376 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:05.098136371Z 37 PC: 98376 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:05.099020381Z 37 PC: 98376 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:05.100470749Z 37 PC: 98376 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:05.101689132Z 37 PC: 98376 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:05.10272297Z 37 PC: 98376 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:05.104248332Z 37 PC: 98376 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:05.10539232Z 37 PC: 98376 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:05.107650474Z 37 PC: 98376 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:05.109131671Z 37 PC: 98376 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:05.110602861Z 37 PC: 98376 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:05.113640197Z 76 PC: 983b5 | Terminate with return code (Return code = '0')
2018-12-17T23:03:05.117887071Z 37 PC: 85376 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:05.119522916Z 37 PC: 85376 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:05.122772083Z 37 PC: 85376 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:05.124144408Z 37 PC: 85376 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:05.126810567Z 37 PC: 85376 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:05.128274783Z 37 PC: 85376 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:05.129743596Z 37 PC: 85376 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:05.131780583Z 37 PC: 85376 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:05.13303537Z 37 PC: 85376 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:05.134516601Z 37 PC: 85376 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:05.136014245Z 37 PC: 85376 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:05.137123314Z 37 PC: 85376 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:05.139235414Z 37 PC: 85376 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:05.140822712Z 37 PC: 85376 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:05.145232125Z 37 PC: 85376 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:05.146381872Z 37 PC: 85376 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:05.147607233Z 37 PC: 85376 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:05.150269026Z 37 PC: 85376 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:05.151670209Z 37 PC: 85376 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:05.153135628Z 76 PC: 853b5 | Terminate with return code (Return code = '0')
2018-12-17T23:03:05.156399664Z 37 PC: 72376 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:05.157863778Z 37 PC: 72376 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:05.159690322Z 37 PC: 72376 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:05.160799028Z 37 PC: 72376 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:05.16223313Z 37 PC: 72376 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:05.163910313Z 37 PC: 72376 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:05.16609445Z 37 PC: 72376 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:05.169436807Z 37 PC: 72376 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:05.171740507Z 37 PC: 72376 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:05.17351932Z 37 PC: 72376 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:05.175638033Z 37 PC: 72376 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:05.177396357Z 37 PC: 72376 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:05.17971688Z 37 PC: 72376 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:05.180860184Z 37 PC: 72376 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:05.182193488Z 37 PC: 72376 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:05.183268893Z 37 PC: 72376 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:05.184313172Z 37 PC: 72376 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:05.186210576Z 37 PC: 72376 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:05.187318988Z 37 PC: 72376 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:05.189122903Z 76 PC: 723b5 | Terminate with return code (Return code = '0')
2018-12-17T23:03:05.192940485Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:05.19458359Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:05.196987071Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:05.19806548Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:05.199231359Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:05.200917764Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:05.201942136Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:05.203570162Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:05.20458571Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:05.20558398Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:05.206999952Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:05.20788425Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:05.209592921Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:05.210647266Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:05.211657365Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:05.214242135Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:05.215704274Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:05.218210054Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:05.219287245Z 37 PC: 5f376 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:05.220386202Z 76 PC: 5f3b5 | Terminate with return code (Return code = '0')
2018-12-17T23:03:05.224331107Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:05.225923768Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:05.227948529Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:05.229357914Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:05.230744671Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:05.232483994Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:05.233882559Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:05.236444985Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:05.237484186Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:05.238495667Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:05.239825221Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:05.240920096Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:05.242307644Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:05.243263438Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:05.244223311Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:05.245455912Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:05.246761152Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:05.248313921Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:05.249848837Z 37 PC: 4c376 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:05.251582505Z 76 PC: 4c3b5 | Terminate with return code (Return code = '0')
2018-12-17T23:03:05.255072287Z 37 PC: 39376 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:05.256648794Z 37 PC: 39376 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:05.258360922Z 37 PC: 39376 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:05.259392519Z 37 PC: 39376 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:05.260710761Z 37 PC: 39376 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:05.261869227Z 37 PC: 39376 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:05.262828237Z 37 PC: 39376 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:05.264580841Z 37 PC: 39376 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:05.265615912Z 37 PC: 39376 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:05.266957399Z 37 PC: 39376 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:05.268006167Z 37 PC: 39376 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:05.268938453Z 37 PC: 39376 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:05.270481445Z 37 PC: 39376 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:05.271435272Z 37 PC: 39376 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:05.273004865Z 37 PC: 39376 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:05.273983625Z 37 PC: 39376 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:05.274939558Z 37 PC: 39376 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:05.276089789Z 37 PC: 39376 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:05.277746045Z 37 PC: 39376 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:05.279660984Z 76 PC: 393b5 | Terminate with return code (Return code = '0')
2018-12-17T23:03:05.282564884Z 37 PC: 26376 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:05.283700424Z 37 PC: 26376 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:05.28474434Z 37 PC: 26376 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:05.285940765Z 37 PC: 26376 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:05.289487787Z 37 PC: 26376 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:05.290963548Z 37 PC: 26376 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:05.293558701Z 37 PC: 26376 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:05.29463661Z 37 PC: 26376 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:05.296168088Z 37 PC: 26376 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:05.298230588Z 37 PC: 26376 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:05.299401497Z 37 PC: 26376 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:05.301691659Z 37 PC: 26376 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:05.303119365Z 37 PC: 26376 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:05.30452146Z 37 PC: 26376 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:05.306459921Z 37 PC: 26376 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:05.307580307Z 37 PC: 26376 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:05.31049257Z 37 PC: 26376 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:05.311890633Z 37 PC: 26376 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:05.313210384Z 37 PC: 26376 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:05.314977277Z 76 PC: 263b5 | Terminate with return code (Return code = '0')
2018-12-17T23:03:05.317980755Z 37 PC: 13376 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:05.319603173Z 37 PC: 13376 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:05.320714243Z 37 PC: 13376 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:05.321943503Z 37 PC: 13376 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:05.323422031Z 37 PC: 13376 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:05.324381576Z 37 PC: 13376 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:05.326459852Z 37 PC: 13376 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:05.327366717Z 37 PC: 13376 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:05.329314921Z 37 PC: 13376 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:05.330218428Z 37 PC: 13376 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:05.331299235Z 37 PC: 13376 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:05.338720501Z 37 PC: 13376 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:05.340187781Z 37 PC: 13376 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:05.343123234Z 37 PC: 13376 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:05.344818337Z 37 PC: 13376 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:05.347043953Z 37 PC: 13376 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:05.349283641Z 37 PC: 13376 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:05.350274629Z 37 PC: 13376 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:05.35204735Z 37 PC: 13376 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:05.353702256Z 76 PC: 133b5 | Terminate with return code (Return code = '0')