Sample viewer

vx.netlux.org/Virus.DOS.Korolev.1959

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:04:31.916233391Z 42 PC: 12b88 | Get date 0x12b88: cmp dh, 4
0x12b8b: jne 0x12b95
0x12b8d: cmp dl, 0xd
0x12b90: jne 0x12b95
0x12b92: jmp 0x12e20
0x12b95: mov ah, 0x47
0x12b97: mov si, word ptr [bp + 0x747]
0x12b9b: mov dl, 0
0x12b9d: int 0x21
0x12b9f: mov ah, 0x3b
0x12ba1: mov dx, 0x707
0x12ba4: add dx, bp
0x12ba6: int 0x21
0x12ba8: mov ah, 0x4e
0x12baa: mov cx, 0xc
0x12bad: mov si, 0x787
0x12bb0: add si, bp
0x12bb2: call 0x1324d
0x12bb5: mov cx, 0x20
0x12bb8: int 0x21
2018-12-17T23:04:31.919630455Z 71 PC: 12b9f | Get current directory
2018-12-17T23:04:31.922586997Z 59 PC: 12ba8 | Change current directory
2018-12-17T23:04:31.926639142Z 78 PC: 12bba | Find first file
2018-12-17T23:04:31.937379329Z 61 PC: 12bd2 | Open file (Filename = '')
2018-12-17T23:04:31.939639381Z 59 PC: 12c6a | Change current directory
2018-12-17T23:04:31.948477188Z 59 PC: 12c72 | Change current directory
2018-12-17T23:04:31.950660488Z 26 PC: 12c7b | Set disk transfer address
2018-12-17T23:04:31.953529296Z 59 PC: 12c84 | Change current directory
2018-12-17T23:04:31.9628891Z 78 PC: 12c96 | Find first file
2018-12-17T23:04:31.972392077Z 79 PC: 12cad | Find next file
2018-12-17T23:04:31.976364385Z 59 PC: 12cbe | Change current directory
2018-12-17T23:04:31.982303988Z 47 PC: 12cc2 | Get disk transfer address
2018-12-17T23:04:31.983606532Z 26 PC: 12cd3 | Set disk transfer address
2018-12-17T23:04:31.985760871Z 78 PC: 12ce5 | Find first file
2018-12-17T23:04:31.991860703Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:31.992888251Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:31.995879146Z 61 PC: 12d31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:04:32.002429983Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.008535935Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.01019877Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.012553609Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.014205816Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.017579467Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.01876761Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.019752213Z 61 PC: 12d31 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:04:32.031698227Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.0385097Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.039749798Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.042096804Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.044243932Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.046148187Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.047073463Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.04900678Z 61 PC: 12d31 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:04:32.053445738Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.061736209Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.064422819Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.067727278Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.069849229Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.073558832Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.075390454Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.076462226Z 61 PC: 12d31 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:04:32.084239031Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.090627125Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.091971989Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.095112782Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.097000282Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.099889647Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.101286411Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.104404114Z 61 PC: 12d31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:04:32.111327113Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.117658713Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.121623206Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.124368271Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.133784124Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.137590113Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.138703468Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.14082023Z 61 PC: 12d31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:04:32.148957535Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.155591794Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.157728157Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.161030313Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.163120855Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.165588642Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.167206114Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.16873407Z 61 PC: 12d31 | Open file (Filename = 'PAH.COM')
2018-12-17T23:04:32.176263452Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.183120084Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.184642602Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.187794143Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.190360293Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.193005999Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.194141117Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.196911943Z 61 PC: 12d31 | Open file (Filename = 'TEST.COM')
2018-12-17T23:04:32.203326277Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.209799284Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.211973023Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.214597254Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.216436218Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.219810474Z 59 PC: 12d0b | Change current directory
2018-12-17T23:04:32.223655533Z 26 PC: 12d17 | Set disk transfer address
2018-12-17T23:04:32.224784818Z 79 PC: 12cad | Find next file
2018-12-17T23:04:32.228113274Z 59 PC: 12cbe | Change current directory
2018-12-17T23:04:32.234871146Z 47 PC: 12cc2 | Get disk transfer address
2018-12-17T23:04:32.235968816Z 26 PC: 12cd3 | Set disk transfer address
2018-12-17T23:04:32.238107428Z 78 PC: 12ce5 | Find first file
2018-12-17T23:04:32.244233986Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.24559461Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.248323378Z 61 PC: 12d31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:04:32.255689837Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.262242742Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.265005834Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.267676235Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.269734193Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.273512731Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.274870967Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.276174922Z 61 PC: 12d31 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:04:32.283183806Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.286827987Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.28847605Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.291204658Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.294330689Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.297605294Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.298684085Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.30174948Z 61 PC: 12d31 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:04:32.308281954Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.310807789Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.313376842Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.31624166Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.318297526Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.322398708Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.323800424Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.325292412Z 61 PC: 12d31 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:04:32.337905177Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.342696146Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.344657365Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.349195126Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.351316767Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.354218424Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.356525517Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.358131536Z 61 PC: 12d31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:04:32.365484495Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.369547271Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.371127464Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.373871819Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.376771021Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.380412123Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.38182921Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.383953782Z 61 PC: 12d31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:04:32.390703413Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.393332381Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.395498748Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.398189643Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.399842931Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.4030966Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.404971201Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.406026956Z 61 PC: 12d31 | Open file (Filename = 'PAH.COM')
2018-12-17T23:04:32.412813464Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.415752439Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.417886535Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.420680118Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.42263312Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.425114032Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.426347184Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.428393897Z 61 PC: 12d31 | Open file (Filename = 'TEST.COM')
2018-12-17T23:04:32.435006897Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.43786929Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.439658214Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.44229456Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.444450344Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.447855014Z 59 PC: 12d0b | Change current directory
2018-12-17T23:04:32.452219846Z 26 PC: 12d17 | Set disk transfer address
2018-12-17T23:04:32.453494317Z 79 PC: 12cad | Find next file
2018-12-17T23:04:32.456685857Z 59 PC: 12cbe | Change current directory
2018-12-17T23:04:32.462935162Z 47 PC: 12cc2 | Get disk transfer address
2018-12-17T23:04:32.464052376Z 26 PC: 12cd3 | Set disk transfer address
2018-12-17T23:04:32.466401032Z 78 PC: 12ce5 | Find first file
2018-12-17T23:04:32.472818184Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.473946342Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.476010285Z 61 PC: 12d31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:04:32.483278768Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.486096515Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.488865647Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.49156476Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.493548288Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.497301112Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.498942852Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.500081321Z 61 PC: 12d31 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:04:32.507480941Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.51023711Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.511557941Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.515003139Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.51667431Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.519593209Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.522287555Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.523409042Z 61 PC: 12d31 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:04:32.531320913Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.535070665Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.536506578Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.539255934Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.54191796Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.546106638Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.547200456Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.54948904Z 61 PC: 12d31 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:04:32.556045217Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.559200449Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.561494169Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.563902646Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.565741606Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.569325615Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.570647364Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.57196967Z 61 PC: 12d31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:04:32.579404885Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.582474958Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.584060546Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.587513555Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.589798954Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.59257608Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.594690981Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.596350866Z 61 PC: 12d31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:04:32.60296178Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.606284077Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.607848731Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.610470724Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.613371408Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.617653272Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.619021248Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.621157027Z 61 PC: 12d31 | Open file (Filename = 'PAH.COM')
2018-12-17T23:04:32.627695105Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.630344796Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.632937123Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.63647873Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.638508618Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.642072094Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.643146296Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.644169267Z 61 PC: 12d31 | Open file (Filename = 'TEST.COM')
2018-12-17T23:04:32.651853793Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.654507776Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.655950221Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.659208962Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.661036495Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.663478704Z 59 PC: 12d0b | Change current directory
2018-12-17T23:04:32.66802816Z 26 PC: 12d17 | Set disk transfer address
2018-12-17T23:04:32.66912491Z 79 PC: 12cad | Find next file
2018-12-17T23:04:32.671588553Z 59 PC: 12cbe | Change current directory
2018-12-17T23:04:32.678566279Z 47 PC: 12cc2 | Get disk transfer address
2018-12-17T23:04:32.679978342Z 26 PC: 12cd3 | Set disk transfer address
2018-12-17T23:04:32.681710065Z 78 PC: 12ce5 | Find first file
2018-12-17T23:04:32.690740405Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.691960056Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.693390365Z 61 PC: 12d31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:04:32.700320995Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.703216446Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.705194538Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.708006923Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.70987965Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.713306859Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.714480109Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.716389094Z 61 PC: 12d31 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:04:32.723664062Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.726452177Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.728169518Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.731759331Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.733806214Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.736682842Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.739103416Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.740507485Z 61 PC: 12d31 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:04:32.747239311Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.750434554Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.752003679Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.754673066Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.757193125Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.760066193Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.761692325Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.763581236Z 61 PC: 12d31 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:04:32.770243391Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.773826916Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.775878699Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.778578263Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.781545719Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.784498839Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.785869937Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.787918723Z 61 PC: 12d31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:04:32.79512256Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.797846221Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.800651775Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.803294736Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.805333459Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.815693894Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.816754018Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.817832772Z 61 PC: 12d31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:04:32.825530036Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.828087495Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.829333498Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.832381559Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.834140821Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.836886854Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.838364265Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.839736046Z 61 PC: 12d31 | Open file (Filename = 'PAH.COM')
2018-12-17T23:04:32.846732585Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.849703397Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.851501657Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.854707269Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.856672338Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.859569574Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.861853114Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.863333127Z 61 PC: 12d31 | Open file (Filename = 'TEST.COM')
2018-12-17T23:04:32.870451279Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.873860381Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.875501759Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.880016521Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.881886815Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.884519768Z 59 PC: 12d0b | Change current directory
2018-12-17T23:04:32.889351024Z 26 PC: 12d17 | Set disk transfer address
2018-12-17T23:04:32.890718885Z 79 PC: 12cad | Find next file
2018-12-17T23:04:32.893460396Z 59 PC: 12cbe | Change current directory
2018-12-17T23:04:32.899661648Z 47 PC: 12cc2 | Get disk transfer address
2018-12-17T23:04:32.90059885Z 26 PC: 12cd3 | Set disk transfer address
2018-12-17T23:04:32.901540835Z 78 PC: 12ce5 | Find first file
2018-12-17T23:04:32.907845695Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.908805149Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.909985671Z 61 PC: 12d31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:04:32.916337803Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.918700347Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.920423765Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.922679541Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.924554437Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.927852948Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.928826401Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.929817485Z 61 PC: 12d31 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:04:32.937251638Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.940059039Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.941698249Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.945314761Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.947356201Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.951004342Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.953296605Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.954658617Z 61 PC: 12d31 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:04:32.96157454Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.964545037Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.965870293Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.969155693Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.971459441Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.974571483Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:32.97697696Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:32.978389407Z 61 PC: 12d31 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:04:32.985176596Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:32.988825832Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:32.990316616Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:32.993054118Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:32.995858306Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:32.99849992Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.00014961Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.002023278Z 61 PC: 12d31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:04:33.008913045Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.012522984Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.014390927Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.017410587Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.020222603Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.023284157Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.024748758Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.026818996Z 61 PC: 12d31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:04:33.035072346Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.038306446Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.041284461Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.044206428Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.046670481Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.050469128Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.052524422Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.054842418Z 61 PC: 12d31 | Open file (Filename = 'PAH.COM')
2018-12-17T23:04:33.062005242Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.064830171Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.067366587Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.070458069Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.072560467Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.076322441Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.078125786Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.079517368Z 61 PC: 12d31 | Open file (Filename = 'TEST.COM')
2018-12-17T23:04:33.087065085Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.09032522Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.091973929Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.095837216Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.097887463Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.10055521Z 59 PC: 12d0b | Change current directory
2018-12-17T23:04:33.106592876Z 26 PC: 12d17 | Set disk transfer address
2018-12-17T23:04:33.108010783Z 79 PC: 12cad | Find next file
2018-12-17T23:04:33.110761686Z 59 PC: 12cbe | Change current directory
2018-12-17T23:04:33.117474829Z 47 PC: 12cc2 | Get disk transfer address
2018-12-17T23:04:33.118857541Z 26 PC: 12cd3 | Set disk transfer address
2018-12-17T23:04:33.121086824Z 78 PC: 12ce5 | Find first file
2018-12-17T23:04:33.127628367Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.129014783Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.131255737Z 61 PC: 12d31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:04:33.138817432Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.14162918Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.144185229Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.147287081Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.149326953Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.153136504Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.15422387Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.155620396Z 61 PC: 12d31 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:04:33.163554664Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.166377754Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.168021014Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.17188804Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.173940426Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.176895201Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.179166374Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.180350693Z 61 PC: 12d31 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:04:33.188797727Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.192254966Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.193685434Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.196821457Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.1991355Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.202369745Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.204985599Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.206596801Z 61 PC: 12d31 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:04:33.213848042Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.218307797Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.220024709Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.222988466Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.226553585Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.229672159Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.231231184Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.233899522Z 61 PC: 12d31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:04:33.240809154Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.243920438Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.246612438Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.249373764Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.25224028Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.255577274Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.25743317Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.259724357Z 61 PC: 12d31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:04:33.267411655Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.270214462Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.272767805Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.275868587Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.278026754Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.281815902Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.283676066Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.285153123Z 61 PC: 12d31 | Open file (Filename = 'PAH.COM')
2018-12-17T23:04:33.293068456Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.295925345Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.297676214Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.30154563Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.303605603Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.306553321Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.308348429Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.309454629Z 61 PC: 12d31 | Open file (Filename = 'TEST.COM')
2018-12-17T23:04:33.316216357Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.319468123Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.321220825Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.325158041Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.327696363Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.330338653Z 59 PC: 12d0b | Change current directory
2018-12-17T23:04:33.33540264Z 26 PC: 12d17 | Set disk transfer address
2018-12-17T23:04:33.336925487Z 79 PC: 12cad | Find next file
2018-12-17T23:04:33.340350244Z 59 PC: 12cbe | Change current directory
2018-12-17T23:04:33.34763658Z 47 PC: 12cc2 | Get disk transfer address
2018-12-17T23:04:33.34883946Z 26 PC: 12cd3 | Set disk transfer address
2018-12-17T23:04:33.350246165Z 78 PC: 12ce5 | Find first file
2018-12-17T23:04:33.357630807Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.359013835Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.360092191Z 61 PC: 12d31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:04:33.367820068Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.370633679Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.372307282Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.375305279Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.377112372Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.380676702Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.382328117Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.383691491Z 61 PC: 12d31 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:04:33.39100794Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.394021172Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.395925598Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.399138563Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.401201012Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.404130059Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.406641746Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.408027086Z 61 PC: 12d31 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:04:33.415592172Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.418616431Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.419958693Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.423122138Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.425235741Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.428251229Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.430253365Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.431399329Z 61 PC: 12d31 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:04:33.437789178Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.441122695Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.44246005Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.445346883Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.448318652Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.451324244Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.453069003Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.454703863Z 61 PC: 12d31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:04:33.461449301Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.465720757Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.467414864Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.470149933Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.472941568Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.475801785Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.477288146Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.479923402Z 61 PC: 12d31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:04:33.48665425Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.489709524Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.492344825Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.49579105Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.498616132Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.501866574Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.503246268Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.505469721Z 61 PC: 12d31 | Open file (Filename = 'PAH.COM')
2018-12-17T23:04:33.512504172Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.515317705Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.517830908Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.520880736Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.522904138Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.526644693Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.52840548Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.529785283Z 61 PC: 12d31 | Open file (Filename = 'TEST.COM')
2018-12-17T23:04:33.537655199Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.540541545Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.542201191Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.545996567Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.548014064Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.555548922Z 59 PC: 12d0b | Change current directory
2018-12-17T23:04:33.560125032Z 26 PC: 12d17 | Set disk transfer address
2018-12-17T23:04:33.561389962Z 79 PC: 12cad | Find next file
2018-12-17T23:04:33.564976327Z 59 PC: 12cbe | Change current directory
2018-12-17T23:04:33.571991428Z 47 PC: 12cc2 | Get disk transfer address
2018-12-17T23:04:33.573407005Z 26 PC: 12cd3 | Set disk transfer address
2018-12-17T23:04:33.575965193Z 78 PC: 12ce5 | Find first file
2018-12-17T23:04:33.582061729Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.583477767Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.58601632Z 61 PC: 12d31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:04:33.592744392Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.596410847Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.598420147Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.601122521Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.604008808Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.607255784Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.608633927Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.611098116Z 61 PC: 12d31 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:04:33.617801374Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.620612644Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.623392255Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.626107391Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.628963226Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.632233898Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.633622114Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.635844884Z 61 PC: 12d31 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:04:33.642892315Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.646450566Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.649255778Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.652076173Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.654114347Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.658120517Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.659500776Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.661538766Z 61 PC: 12d31 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:04:33.668009795Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.67043962Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.672444791Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.675688596Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.677382592Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.680485878Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.681959329Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.684044543Z 61 PC: 12d31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:04:33.688397593Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.69021726Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.692197391Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.693844256Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.695957306Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.697881119Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.698940023Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.701870069Z 61 PC: 12d31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:04:33.708149491Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.71178384Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.713731875Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.716736003Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.719146432Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.721551207Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.723110606Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.725620787Z 61 PC: 12d31 | Open file (Filename = 'PAH.COM')
2018-12-17T23:04:33.732790158Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.736541513Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.737996571Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.740575203Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.742520651Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.744887456Z 47 PC: 12d1d | Get disk transfer address
2018-12-17T23:04:33.747254772Z 47 PC: 12d2c | Get disk transfer address
2018-12-17T23:04:33.748429434Z 61 PC: 12d31 | Open file (Filename = 'TEST.COM')
2018-12-17T23:04:33.755045758Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:04:33.758025803Z 66 PC: 12d4a | Move file pointer
2018-12-17T23:04:33.760809102Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:04:33.763798161Z 62 PC: 12cf9 | Close file
2018-12-17T23:04:33.765430833Z 79 PC: 12cfd | Find next file
2018-12-17T23:04:33.767800329Z 59 PC: 12d0b | Change current directory
2018-12-17T23:04:33.772022848Z 26 PC: 12d17 | Set disk transfer address
2018-12-17T23:04:33.773804239Z 79 PC: 12cad | Find next file
2018-12-17T23:04:33.777527415Z 59 PC: 12dd7 | Change current directory
2018-12-17T23:04:33.781445582Z 59 PC: 12ddf | Change current directory
2018-12-17T23:04:33.78372485Z 76 PC: 12b47 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14908,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:42:09.154741044Z 42 PC: 12b88 | Get date 0x12b88: cmp dh, 4
0x12b8b: jne 0x12b95
0x12b8d: cmp dl, 0xd
0x12b90: jne 0x12b95
0x12b92: jmp 0x12e20
0x12b95: mov ah, 0x47
0x12b97: mov si, word ptr [bp + 0x747]
0x12b9b: mov dl, 0
0x12b9d: int 0x21
0x12b9f: mov ah, 0x3b
0x12ba1: mov dx, 0x707
0x12ba4: add dx, bp
0x12ba6: int 0x21
0x12ba8: mov ah, 0x4e
0x12baa: mov cx, 0xc
0x12bad: mov si, 0x787
0x12bb0: add si, bp
0x12bb2: call 0x1324d
0x12bb5: mov cx, 0x20
0x12bb8: int 0x21
2018-12-25T12:42:09.15762987Z 71 PC: 12b9f | Get current directory
2018-12-25T12:42:09.160479098Z 59 PC: 12ba8 | Change current directory
2018-12-25T12:42:09.163067255Z 78 PC: 12bba | Find first file
2018-12-25T12:42:09.167229068Z 61 PC: 12bd2 | Open file (Filename = '')
2018-12-25T12:42:09.168763184Z 59 PC: 12c6a | Change current directory
2018-12-25T12:42:09.171225123Z 59 PC: 12c72 | Change current directory
2018-12-25T12:42:09.172950216Z 26 PC: 12c7b | Set disk transfer address
2018-12-25T12:42:09.173988011Z 59 PC: 12c84 | Change current directory
2018-12-25T12:42:09.181607784Z 78 PC: 12c96 | Find first file
2018-12-25T12:42:09.19217429Z 79 PC: 12cad | Find next file
2018-12-25T12:42:09.19496397Z 59 PC: 12cbe | Change current directory
2018-12-25T12:42:09.20591798Z 47 PC: 12cc2 | Get disk transfer address
2018-12-25T12:42:09.207064137Z 26 PC: 12cd3 | Set disk transfer address
2018-12-25T12:42:09.208555662Z 78 PC: 12ce5 | Find first file
2018-12-25T12:42:09.214274934Z 47 PC: 12d1d | Get disk transfer address
2018-12-25T12:42:09.215272351Z 47 PC: 12d2c | Get disk transfer address
2018-12-25T12:42:09.216909906Z 61 PC: 12d31 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:42:09.223335657Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:42:09.229540089Z 66 PC: 12d4a | Move file pointer
2018-12-25T12:42:09.231772816Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-25T12:42:09.234109691Z 62 PC: 12cf9 | Close file
2018-12-25T12:42:09.235867433Z 79 PC: 12cfd | Find next file
2018-12-25T12:42:09.238880975Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.240154442Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.241230386Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.248008746Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.255116891Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.25653862Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.258989697Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.261342284Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.26414309Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.265477663Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.267782649Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.27405245Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.280390489Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.28253949Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.285017394Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.287957185Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.293278993Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.294437241Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.295535629Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.302607117Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.308782351Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.310066616Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.312428118Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.314413442Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.317006029Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.318040644Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.319636798Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.325889671Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.332700091Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.335741972Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.338217691Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.340145365Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.343213422Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.344127799Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.344901657Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.35241038Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.358828253Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.360085205Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.362895243Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.364423337Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.36676851Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.368262715Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.369246197Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.376287157Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.386144076Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.387521224Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.389892235Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.392937499Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.395740273Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.397178088Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.399258317Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.406341395Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.413732481Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.415886303Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.418257771Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.419909463Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.423259753Z 59 PC: 12d0b | Change current directory
2018-12-25T12:42:09.427099265Z 26 PC: 12d17 | Set disk transfer address
2018-12-25T12:42:09.428069244Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:09.43155653Z 59 PC: 12cbe | Change current directory (See above)
2018-12-25T12:42:09.437544933Z 47 PC: 12cc2 | Get disk transfer address (See above)
2018-12-25T12:42:09.438570105Z 26 PC: 12cd3 | Set disk transfer address (See above)
2018-12-25T12:42:09.440356574Z 78 PC: 12ce5 | Find first file (See above)
2018-12-25T12:42:09.446110416Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.447194193Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.449325085Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.455541667Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.457905824Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.459740658Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.463511044Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.465239433Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.468562035Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.469606131Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.470930086Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.477876371Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.480434988Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.481682157Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.484736637Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.48640075Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.489619355Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.491354393Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.492838113Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.499068373Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.502255365Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.503553481Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.50598442Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.507844876Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.510923121Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.511905411Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.512861475Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.519806675Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.522339295Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.523593716Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.526582857Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.528168764Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.530657942Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.532697177Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.533750115Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.540172224Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.543370833Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.54511239Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.54757201Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.54997641Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.552802316Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.554145591Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.556557321Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.563871978Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.566632342Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.568841753Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.571412755Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.573312997Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.577668152Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.579093317Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.58026335Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.587682986Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.590102577Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.591586132Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.594650602Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.596510861Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.598947738Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.600209275Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.601029041Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.604982615Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.607340307Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.608322714Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.609941833Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.61177743Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.613346146Z 59 PC: 12d0b | Change current directory (See above)
2018-12-25T12:42:09.615792873Z 26 PC: 12d17 | Set disk transfer address (See above)
2018-12-25T12:42:09.616947153Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:09.618553817Z 59 PC: 12cbe | Change current directory (See above)
2018-12-25T12:42:09.621921737Z 47 PC: 12cc2 | Get disk transfer address (See above)
2018-12-25T12:42:09.623148385Z 26 PC: 12cd3 | Set disk transfer address (See above)
2018-12-25T12:42:09.624036979Z 78 PC: 12ce5 | Find first file (See above)
2018-12-25T12:42:09.630001919Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.631170362Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.63213967Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.639175843Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.642810499Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.644099757Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.646443466Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.648146187Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.650659822Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.651664908Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.654738934Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.661019865Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.663603642Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.666142743Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.668785375Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.670498031Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.674709511Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.676041913Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.677338339Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.684543637Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.687310978Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.688827064Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.691803545Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.69371636Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.696244613Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.698124511Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.69940179Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.705917797Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.709922735Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.711471295Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.714559485Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.717049141Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.719830648Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.72113294Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.723124315Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.729604872Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.732380336Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.734672136Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.737269172Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.739166521Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.742380473Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.743575022Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.744791262Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.755006983Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.757649349Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.759147976Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.762526299Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.764379118Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.76706194Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.771846102Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.773105353Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.780117766Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.78311664Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.785191802Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.787763174Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.790606666Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.79358787Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.794872569Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.796481655Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.802644268Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.805206728Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.807165856Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.809429045Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.811210069Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.814003865Z 59 PC: 12d0b | Change current directory (See above)
2018-12-25T12:42:09.817908552Z 26 PC: 12d17 | Set disk transfer address (See above)
2018-12-25T12:42:09.819049217Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:09.822279648Z 59 PC: 12cbe | Change current directory (See above)
2018-12-25T12:42:09.82804046Z 47 PC: 12cc2 | Get disk transfer address (See above)
2018-12-25T12:42:09.829461243Z 26 PC: 12cd3 | Set disk transfer address (See above)
2018-12-25T12:42:09.832230322Z 78 PC: 12ce5 | Find first file (See above)
2018-12-25T12:42:09.837982784Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.840242118Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.841364643Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.847501754Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.851237545Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.852746192Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.855723663Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.858859949Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.861610004Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.863685822Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.865934398Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.872169585Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.875067468Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.877739734Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.880217245Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.881837582Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.88572381Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.886988781Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.888192378Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.895514296Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.898183616Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.917313154Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.921058044Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.923152973Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.926126947Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.928619182Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.93005305Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.93739974Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.941110201Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.943132298Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.945540623Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.948126775Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.951273186Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.952366899Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.95426101Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.961610967Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.964186122Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.966312809Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.968712213Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.970384324Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.97387487Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.975331454Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.976740019Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:09.984207035Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:09.986959478Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:09.988725829Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:09.992172735Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:09.993804805Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:09.996704893Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:09.998376699Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:09.999727723Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.006275304Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.009270517Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.010604703Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.014046961Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.016616293Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.019164444Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.021468751Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.022923311Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.037637393Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.041613818Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.043274801Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.045958979Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.04949995Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.052417267Z 59 PC: 12d0b | Change current directory (See above)
2018-12-25T12:42:10.056573661Z 26 PC: 12d17 | Set disk transfer address (See above)
2018-12-25T12:42:10.05862872Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:10.061623605Z 59 PC: 12cbe | Change current directory (See above)
2018-12-25T12:42:10.067525547Z 47 PC: 12cc2 | Get disk transfer address (See above)
2018-12-25T12:42:10.069562104Z 26 PC: 12cd3 | Set disk transfer address (See above)
2018-12-25T12:42:10.071321225Z 78 PC: 12ce5 | Find first file (See above)
2018-12-25T12:42:10.077405952Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.079612208Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.081283826Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.088570287Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.092144744Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.093648927Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.0962998Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.098818568Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.101608363Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.102951136Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.105121755Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.112091642Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.114878351Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.11734319Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.120319079Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.122317846Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.126018332Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.127555575Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.128835179Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.136280307Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.139309051Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.140861654Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.144318254Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.1465742Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.149382559Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.151512744Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.153105194Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.159677207Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.163987011Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.165867597Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.168481496Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.17126591Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.174425362Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.175723674Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.177831529Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.184747251Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.18818011Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.190280541Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.193174449Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.195627033Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.198786868Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.199718811Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.200845493Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.207349983Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.213371247Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.215609235Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.21783539Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.219371173Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.225773229Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.226958692Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.228126998Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.235031373Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.237396439Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.238739761Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.241996306Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.244325617Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.247384039Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.248347659Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.249336264Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.256956714Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.259388287Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.26066619Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.263592732Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.265475695Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.268237115Z 59 PC: 12d0b | Change current directory (See above)
2018-12-25T12:42:10.272639068Z 26 PC: 12d17 | Set disk transfer address (See above)
2018-12-25T12:42:10.274452232Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:10.277911354Z 59 PC: 12cbe | Change current directory (See above)
2018-12-25T12:42:10.283507206Z 47 PC: 12cc2 | Get disk transfer address (See above)
2018-12-25T12:42:10.284546892Z 26 PC: 12cd3 | Set disk transfer address (See above)
2018-12-25T12:42:10.286735303Z 78 PC: 12ce5 | Find first file (See above)
2018-12-25T12:42:10.292795257Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.293942669Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.299021061Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.305584163Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.3083559Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.311015509Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.314336538Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.316307194Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.320923868Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.3222575Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.323758195Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.331213735Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.333956104Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.336293839Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.338910589Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.340858971Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.344316402Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.345595377Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.346914115Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.354280652Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.356983493Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.358526532Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.362142156Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.364083133Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.366815712Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.369247067Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.370571719Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.377368084Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.381048422Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.382653926Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.386074338Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.388211379Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.391088407Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.393089879Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.394394563Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.401633011Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.405703088Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.407283716Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.40971319Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.414004545Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.418173561Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.419250234Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.420917528Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.42743171Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.430863088Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.432446402Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.435092079Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.438144638Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.441000105Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.44233798Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.444524595Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.451145911Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.453881956Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.456111224Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.459053063Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.460999648Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.464448823Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.465697138Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.467745245Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.474289959Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.477827909Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.480666351Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.483227339Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.485059521Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.488747497Z 59 PC: 12d0b | Change current directory (See above)
2018-12-25T12:42:10.492925311Z 26 PC: 12d17 | Set disk transfer address (See above)
2018-12-25T12:42:10.494703489Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:10.497504558Z 59 PC: 12cbe | Change current directory (See above)
2018-12-25T12:42:10.503400547Z 47 PC: 12cc2 | Get disk transfer address (See above)
2018-12-25T12:42:10.505157004Z 26 PC: 12cd3 | Set disk transfer address (See above)
2018-12-25T12:42:10.506806277Z 78 PC: 12ce5 | Find first file (See above)
2018-12-25T12:42:10.512851687Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.51539703Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.516801165Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.523455663Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.527481769Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.528950173Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.531655643Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.534909071Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.537821971Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.539405829Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.541720476Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.54837354Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.551941537Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.554644034Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.557303976Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.560071712Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.563303613Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.564631377Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.566830346Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.573482523Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.576449592Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.578640503Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.581019942Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.582698466Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.586163779Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.58718932Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.588210283Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.595261732Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.59768029Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.599301869Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.602095041Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.604030421Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.607404714Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.608633113Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.60993386Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.617571394Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.620295468Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.621869454Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.625212905Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.627142427Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.6308835Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.632371098Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.633371369Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.640676783Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.643710939Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.645248012Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.648699371Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.650953649Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.653745725Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.656069925Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.657359864Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.663946277Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.667678805Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.669222189Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.672621088Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.674906833Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.677690282Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.679780959Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.681375574Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.687967463Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.691491006Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.693347473Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.695942735Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.698914692Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.701313578Z 59 PC: 12d0b | Change current directory (See above)
2018-12-25T12:42:10.706453136Z 26 PC: 12d17 | Set disk transfer address (See above)
2018-12-25T12:42:10.708473709Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:10.710870111Z 59 PC: 12cbe | Change current directory (See above)
2018-12-25T12:42:10.716674248Z 47 PC: 12cc2 | Get disk transfer address (See above)
2018-12-25T12:42:10.718495318Z 26 PC: 12cd3 | Set disk transfer address (See above)
2018-12-25T12:42:10.719867092Z 78 PC: 12ce5 | Find first file (See above)
2018-12-25T12:42:10.726694184Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.728286313Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.729569695Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.7369688Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.739983574Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.741523001Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.745166455Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.747101196Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.74992289Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.752233807Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.753511605Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.7608899Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.763921727Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.765471487Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.768888841Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.771157942Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.773964012Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.776291691Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.777581604Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.784815855Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.788576506Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.790121938Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.793505506Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.795758322Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.798594374Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.800697195Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.802305843Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.808876046Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.812608054Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.814157909Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.816785718Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.819746917Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.822540093Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.824615093Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.826305598Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.832902216Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.836417611Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.838489078Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.841092795Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.844129699Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.84679907Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.848044771Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.849215029Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.853619024Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.855992099Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.85701008Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.858972168Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.860845789Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.86261496Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.864217057Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.865151602Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.869204221Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.871604487Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.872658693Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.874995954Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.876355158Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.878187935Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.879843229Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.880823632Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.885539067Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.887428044Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.888546266Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.891533316Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.893514105Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.896110554Z 59 PC: 12d0b | Change current directory (See above)
2018-12-25T12:42:10.900843066Z 26 PC: 12d17 | Set disk transfer address (See above)
2018-12-25T12:42:10.902260558Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:10.905929686Z 59 PC: 12dd7 | Change current directory
2018-12-25T12:42:10.910388648Z 59 PC: 12ddf | Change current directory
2018-12-25T12:42:10.91305783Z 76 PC: 12b47 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":1,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14908,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:42:10.193679507Z 42 PC: 12b88 | Get date 0x12b88: cmp dh, 4
0x12b8b: jne 0x12b95
0x12b8d: cmp dl, 0xd
0x12b90: jne 0x12b95
0x12b92: jmp 0x12e20
0x12b95: mov ah, 0x47
0x12b97: mov si, word ptr [bp + 0x747]
0x12b9b: mov dl, 0
0x12b9d: int 0x21
0x12b9f: mov ah, 0x3b
0x12ba1: mov dx, 0x707
0x12ba4: add dx, bp
0x12ba6: int 0x21
0x12ba8: mov ah, 0x4e
0x12baa: mov cx, 0xc
0x12bad: mov si, 0x787
0x12bb0: add si, bp
0x12bb2: call 0x1324d
0x12bb5: mov cx, 0x20
0x12bb8: int 0x21
2018-12-25T12:42:10.196985567Z 71 PC: 12b9f | Get current directory
2018-12-25T12:42:10.199742587Z 59 PC: 12ba8 | Change current directory
2018-12-25T12:42:10.203735661Z 78 PC: 12bba | Find first file
2018-12-25T12:42:10.210069489Z 61 PC: 12bd2 | Open file (Filename = '')
2018-12-25T12:42:10.21371242Z 59 PC: 12c6a | Change current directory
2018-12-25T12:42:10.217811906Z 59 PC: 12c72 | Change current directory
2018-12-25T12:42:10.220285489Z 26 PC: 12c7b | Set disk transfer address
2018-12-25T12:42:10.222506848Z 59 PC: 12c84 | Change current directory
2018-12-25T12:42:10.232050907Z 78 PC: 12c96 | Find first file
2018-12-25T12:42:10.242530252Z 79 PC: 12cad | Find next file
2018-12-25T12:42:10.248625966Z 59 PC: 12cbe | Change current directory
2018-12-25T12:42:10.255355736Z 47 PC: 12cc2 | Get disk transfer address
2018-12-25T12:42:10.256576507Z 26 PC: 12cd3 | Set disk transfer address
2018-12-25T12:42:10.260006489Z 78 PC: 12ce5 | Find first file
2018-12-25T12:42:10.266354168Z 47 PC: 12d1d | Get disk transfer address
2018-12-25T12:42:10.267507855Z 47 PC: 12d2c | Get disk transfer address
2018-12-25T12:42:10.269473085Z 61 PC: 12d31 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:42:10.276760185Z 63 PC: 12d41 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:42:10.283427819Z 66 PC: 12d4a | Move file pointer
2018-12-25T12:42:10.286267099Z 63 PC: 12d56 | Read file or device (Read 1 bytes on handle 5)
2018-12-25T12:42:10.289004798Z 62 PC: 12cf9 | Close file
2018-12-25T12:42:10.291146426Z 79 PC: 12cfd | Find next file
2018-12-25T12:42:10.294531928Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.299558657Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.301215408Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.309307811Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.316160914Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.31787256Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.321018344Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.322988764Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.325605866Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.32744471Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.32868297Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.336422209Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.343374545Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.345587031Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.348363788Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.35039833Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.354213253Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.355540802Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.356919435Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.364086368Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.370410486Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.371990185Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.375758025Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.377586998Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.380291309Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.382164314Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.383619455Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.390274733Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.401886009Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.403588895Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.406485015Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.409548393Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.412599158Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.414090357Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.415504624Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.422844046Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.429101224Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.430491069Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.433547011Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.435542411Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.438456999Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.440462337Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.441884887Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.449033134Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.456873488Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.458652733Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.461433861Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.464473677Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.467440192Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.46889628Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.470810871Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.477566276Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.484625452Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.486865253Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.489672402Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.491797261Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.495682958Z 59 PC: 12d0b | Change current directory
2018-12-25T12:42:10.50011611Z 26 PC: 12d17 | Set disk transfer address
2018-12-25T12:42:10.501546369Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:10.505321332Z 59 PC: 12cbe | Change current directory (See above)
2018-12-25T12:42:10.517201865Z 47 PC: 12cc2 | Get disk transfer address (See above)
2018-12-25T12:42:10.518327781Z 26 PC: 12cd3 | Set disk transfer address (See above)
2018-12-25T12:42:10.520260898Z 78 PC: 12ce5 | Find first file (See above)
2018-12-25T12:42:10.526116582Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.527541582Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.529707413Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.536110172Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.538674092Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.540866963Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.543592701Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.545601603Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.549338577Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.550737147Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.552058648Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.564765304Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.571616864Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.572985451Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.576069111Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.578925688Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.581812632Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.583939186Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.585667174Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.592715437Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.600221511Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.602768763Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.605466403Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.607477534Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.611341695Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.612684068Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.614037824Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.621525779Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.628321736Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.629909404Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.633272122Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.635169725Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.638522347Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.640927059Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.642321221Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.649036318Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.656442463Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.658533476Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.661225174Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.664195209Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.670873567Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.672132981Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.67428967Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.681248334Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.687671762Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.689629823Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.692137292Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.693791418Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.697014859Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.698076252Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.699856509Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.706743405Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.71306429Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.714367651Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.717308682Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.719273911Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.722223152Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.724281557Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.726099332Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.732810916Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.739824136Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.741322707Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.743755931Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.746144862Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.748555648Z 59 PC: 12d0b | Change current directory (See above)
2018-12-25T12:42:10.752839576Z 26 PC: 12d17 | Set disk transfer address (See above)
2018-12-25T12:42:10.754373856Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:10.75695821Z 59 PC: 12cbe | Change current directory (See above)
2018-12-25T12:42:10.762894339Z 47 PC: 12cc2 | Get disk transfer address (See above)
2018-12-25T12:42:10.765087588Z 26 PC: 12cd3 | Set disk transfer address (See above)
2018-12-25T12:42:10.766877143Z 78 PC: 12ce5 | Find first file (See above)
2018-12-25T12:42:10.773692244Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.775816092Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.777506252Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.784175056Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.790949475Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.79291989Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.795766024Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.797760069Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.801619265Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.802975723Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.804349539Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.811936753Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.814675802Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.816320055Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.819910918Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.821843488Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.824726239Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.826853186Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.828480889Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.835505497Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.838979894Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.840851602Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.844184194Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.846862163Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.850003597Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.851322865Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.853322656Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.860183937Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.862906484Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.864631233Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.868054546Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.869975265Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.872782287Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.874461936Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.875470609Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.881808006Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.885409527Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.886679852Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.889159773Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.891793903Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.89419306Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.895254425Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.897123539Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.903564827Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.906039388Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.908190696Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.91060264Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.912230289Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.915999079Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.917140437Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.918146681Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.926679785Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.929568506Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.931403194Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.934809824Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.936941584Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.94020486Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.942337299Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.943874164Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:10.951101098Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:10.954903437Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:10.956724593Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:10.959816095Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:10.962934343Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:10.965764749Z 59 PC: 12d0b | Change current directory (See above)
2018-12-25T12:42:10.970445847Z 26 PC: 12d17 | Set disk transfer address (See above)
2018-12-25T12:42:10.972789486Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:10.975629524Z 59 PC: 12cbe | Change current directory (See above)
2018-12-25T12:42:10.981821057Z 47 PC: 12cc2 | Get disk transfer address (See above)
2018-12-25T12:42:10.984153905Z 26 PC: 12cd3 | Set disk transfer address (See above)
2018-12-25T12:42:10.985559172Z 78 PC: 12ce5 | Find first file (See above)
2018-12-25T12:42:10.991857076Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:10.994148175Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:10.995521386Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.002979908Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.006598416Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.00818093Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.011052053Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.013856095Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.016700725Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.018043801Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.019893954Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.026516501Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.030018978Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.031943341Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.034622099Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.037309107Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.04049488Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.041841306Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.043887463Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.050809462Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.053563179Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.055855526Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.058811039Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.060763273Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.064315861Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.065956431Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.067300474Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.075284389Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.078366074Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.079962102Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.083354093Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.085666079Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.088520146Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.090579629Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.092226227Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.098829624Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.102328947Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.103754525Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.105381875Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.107180106Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.10906985Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.109964831Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.111393484Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.115524444Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.117278355Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.119227082Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.122068979Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.123980697Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.127312854Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.128611637Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.129887043Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.13712779Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.139786969Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.141314407Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.14429154Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.146196528Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.149650661Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.151779286Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.153044376Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.159507822Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.162494489Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.164021801Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.166746652Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.169313694Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.171826085Z 59 PC: 12d0b | Change current directory (See above)
2018-12-25T12:42:11.176006869Z 26 PC: 12d17 | Set disk transfer address (See above)
2018-12-25T12:42:11.177932302Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:11.180546629Z 59 PC: 12cbe | Change current directory (See above)
2018-12-25T12:42:11.186500158Z 47 PC: 12cc2 | Get disk transfer address (See above)
2018-12-25T12:42:11.188437314Z 26 PC: 12cd3 | Set disk transfer address (See above)
2018-12-25T12:42:11.18972595Z 78 PC: 12ce5 | Find first file (See above)
2018-12-25T12:42:11.195689485Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.197237865Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.198519441Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.205457946Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.208037349Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.209548004Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.212338941Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.21421997Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.216961337Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.219018613Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.220419532Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.227476461Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.230778469Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.232433341Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.235133947Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.237831236Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.240632968Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.242043815Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.243806563Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.25034261Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.253238215Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.255506329Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.258062285Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.260464087Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.263175672Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.264445767Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.266260328Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.272539277Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.275186408Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.277112481Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.279680894Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.281565108Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.285080396Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.286366901Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.287771005Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.294292421Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.297344611Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.299191247Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.301740324Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.303662034Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.307088801Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.308416449Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.309706729Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.317112052Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.319789996Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.321327713Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.324870418Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.326769283Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.329647462Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.331766889Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.333054667Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.340149344Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.343144216Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.344675387Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.348004554Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.350205721Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.352944467Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.3550763Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.356664764Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.36307623Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.366525026Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.368371572Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.371658164Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.374231256Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.376783755Z 59 PC: 12d0b | Change current directory (See above)
2018-12-25T12:42:11.380769533Z 26 PC: 12d17 | Set disk transfer address (See above)
2018-12-25T12:42:11.383149235Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:11.385727954Z 59 PC: 12cbe | Change current directory (See above)
2018-12-25T12:42:11.391496447Z 47 PC: 12cc2 | Get disk transfer address (See above)
2018-12-25T12:42:11.393855277Z 26 PC: 12cd3 | Set disk transfer address (See above)
2018-12-25T12:42:11.395054093Z 78 PC: 12ce5 | Find first file (See above)
2018-12-25T12:42:11.400951567Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.402855911Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.404069972Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.411214435Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.413999086Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.41562328Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.419073111Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.42138533Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.424185434Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.426496195Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.42777618Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.434182031Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.43783392Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.439390534Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.441953809Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.444214531Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.447628662Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.449064736Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.450550019Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.456916221Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.45987751Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.461406467Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.463934081Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.466564454Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.469267616Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.470409251Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.471932175Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.478051064Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.480565697Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.48197548Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.484217474Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.486404688Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.489014984Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.489985845Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.491734924Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.498435464Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.500842478Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.502744283Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.50498419Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.506603548Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.510345409Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.511325917Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.51245255Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.519967652Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.522322279Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.52450836Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.52697847Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.52875364Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.532354181Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.533267805Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.534227545Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.541388644Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.544067407Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.545474259Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.549102109Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.55092526Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.560216372Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.569770364Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.571163655Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.577884884Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.581531216Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.583150766Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.586553487Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.588846188Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.59146459Z 59 PC: 12d0b | Change current directory (See above)
2018-12-25T12:42:11.59697505Z 26 PC: 12d17 | Set disk transfer address (See above)
2018-12-25T12:42:11.598562556Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:11.601146496Z 59 PC: 12cbe | Change current directory (See above)
2018-12-25T12:42:11.607683456Z 47 PC: 12cc2 | Get disk transfer address (See above)
2018-12-25T12:42:11.609293199Z 26 PC: 12cd3 | Set disk transfer address (See above)
2018-12-25T12:42:11.610618837Z 78 PC: 12ce5 | Find first file (See above)
2018-12-25T12:42:11.616811872Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.617800453Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.618732251Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.625203474Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.627460884Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.629019419Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.631200614Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.632594039Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.6358475Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.636821941Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.638173671Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.645095606Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.647484484Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.648647136Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.650939538Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.652560717Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.655098668Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.65642781Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.657310323Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.664149242Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.667942603Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.669090625Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.67117477Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.672456187Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.67453669Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.675780694Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.676535552Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.680667283Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.68291785Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.68496925Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.687140378Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.68946912Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.691919811Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.693998927Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.695419881Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.700001745Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.702478704Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.703616526Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.706050141Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.707764622Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.709573206Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.711080737Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.712011943Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.716158857Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.718776436Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.719891468Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.721743683Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.723620096Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.725498472Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.727124118Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.728142454Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.732388587Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.735183027Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.736568645Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.738450401Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.740695491Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.742709764Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.743706351Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.745242393Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.750080838Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.752580787Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.753796043Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.755888509Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.757979772Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.759850751Z 59 PC: 12d0b | Change current directory (See above)
2018-12-25T12:42:11.762459289Z 26 PC: 12d17 | Set disk transfer address (See above)
2018-12-25T12:42:11.764114546Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:11.765990745Z 59 PC: 12cbe | Change current directory (See above)
2018-12-25T12:42:11.770330245Z 47 PC: 12cc2 | Get disk transfer address (See above)
2018-12-25T12:42:11.771804039Z 26 PC: 12cd3 | Set disk transfer address (See above)
2018-12-25T12:42:11.772710336Z 78 PC: 12ce5 | Find first file (See above)
2018-12-25T12:42:11.777416214Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.778536376Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.779862707Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.784803414Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.786671774Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.787932955Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.790290339Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.791647982Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.794092931Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.795156609Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.796047252Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.801047825Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.802984391Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.804239944Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.806499415Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.807814484Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.810143078Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.811128951Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.812378026Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.817119687Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.819100798Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.820386827Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.822420002Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.823863061Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.826774936Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.828257803Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.829659724Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.838540689Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.840962648Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.842320817Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.845371159Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.84736567Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.851415564Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.853015396Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.85430977Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.862214438Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.865244034Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.866825026Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.870015528Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.87176159Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.87511562Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.88128217Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.882832601Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.889972228Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.892651039Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.894166283Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.897950281Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.899720125Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.903368676Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.905106866Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.906099752Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.913218147Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.915637079Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.918525182Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.920946359Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.922728611Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.927698384Z 47 PC: 12d1d | Get disk transfer address (See above)
2018-12-25T12:42:11.929083132Z 47 PC: 12d2c | Get disk transfer address (See above)
2018-12-25T12:42:11.930688738Z 61 PC: 12d31 | Open file (See above)
2018-12-25T12:42:11.938338905Z 63 PC: 12d41 | Read file or device (See above)
2018-12-25T12:42:11.941317707Z 66 PC: 12d4a | Move file pointer (See above)
2018-12-25T12:42:11.943987409Z 63 PC: 12d56 | Read file or device (See above)
2018-12-25T12:42:11.946673227Z 62 PC: 12cf9 | Close file (See above)
2018-12-25T12:42:11.948865274Z 79 PC: 12cfd | Find next file (See above)
2018-12-25T12:42:11.952212843Z 59 PC: 12d0b | Change current directory (See above)
2018-12-25T12:42:11.956236976Z 26 PC: 12d17 | Set disk transfer address (See above)
2018-12-25T12:42:11.958630484Z 79 PC: 12cad | Find next file (See above)
2018-12-25T12:42:11.961101625Z 59 PC: 12dd7 | Change current directory
2018-12-25T12:42:11.965371355Z 59 PC: 12ddf | Change current directory
2018-12-25T12:42:11.968762771Z 76 PC: 12b47 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":13,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14908,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:42:11.801772703Z 42 PC: 12b88 | Get date 0x12b88: cmp dh, 4
0x12b8b: jne 0x12b95
0x12b8d: cmp dl, 0xd
0x12b90: jne 0x12b95
0x12b92: jmp 0x12e20
0x12b95: mov ah, 0x47
0x12b97: mov si, word ptr [bp + 0x747]
0x12b9b: mov dl, 0
0x12b9d: int 0x21
0x12b9f: mov ah, 0x3b
0x12ba1: mov dx, 0x707
0x12ba4: add dx, bp
0x12ba6: int 0x21
0x12ba8: mov ah, 0x4e
0x12baa: mov cx, 0xc
0x12bad: mov si, 0x787
0x12bb0: add si, bp
0x12bb2: call 0x1324d
0x12bb5: mov cx, 0x20
0x12bb8: int 0x21
2018-12-25T12:42:11.804792754Z 44 PC: 12e38 | Get time 0x12e38: cmp cl, 0xd
0x12e3b: jae 0x12e40
0x12e3d: jmp 0x12fa3
0x12e40: cmp cl, 0x14
0x12e43: jbe 0x12e48
0x12e45: jmp 0x12fa3
0x12e48: mov ah, 0x1a
0x12e4a: mov dx, 0x3a6
0x12e4d: add dx, bp
0x12e4f: int 0x21
0x12e51: mov ah, 0x47
0x12e53: mov si, word ptr [bp + 0x366]
0x12e57: mov dl, 0
0x12e59: int 0x21
0x12e5b: mov ah, 0x3b
0x12e5d: mov dx, 0x326
0x12e60: add dx, bp
0x12e62: int 0x21
0x12e64: mov ah, 0x4e
0x12e66: mov cx, 4
2018-12-25T12:42:11.807195086Z 44 PC: 12fa7 | Get time 0x12fa7: cmp dh, 0x38
0x12faa: jae 0x12fae
0x12fac: jmp 0x12fbb
0x12fae: mov al, 0x36
0x12fb0: out 0x43, al
0x12fb2: mov ax, 0x900
0x12fb5: out 0x40, al
0x12fb7: mov al, ah
0x12fb9: out 0x40, al
0x12fbb: pop es
0x12fbc: pop ds
0x12fbd: popaw
0x12fbe: popf
0x12fbf: push 0x100
0x12fc2: ret
0x12fc3: push si
0x12fc4: xor byte ptr [si], 0xdb
0x12fc7: inc si
0x12fc8: loop 0x12fc4
0x12fca: pop dx
2018-12-25T12:42:11.810617607Z 76 PC: 12b47 | Terminate with return code (Return code = '0')