Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Kye.6496

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:05:39.482252814Z 53 PC: 1330a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:05:39.484069891Z 53 PC: 1330a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:05:39.486567172Z 53 PC: 1330a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:05:39.490969772Z 53 PC: 1330a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:05:39.492821335Z 53 PC: 1330a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:05:39.495195443Z 53 PC: 1330a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:39.496752353Z 53 PC: 1330a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:05:39.49841672Z 53 PC: 1330a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:05:39.501092896Z 53 PC: 1330a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:05:39.502324559Z 53 PC: 1330a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:05:39.503516328Z 53 PC: 1330a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:05:39.506120692Z 53 PC: 1330a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:05:39.507348488Z 53 PC: 1330a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:05:39.508723664Z 53 PC: 1330a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:05:39.520214296Z 53 PC: 1330a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:05:39.522758593Z 53 PC: 1330a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:05:39.524133705Z 53 PC: 1330a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:05:39.526018746Z 53 PC: 1330a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:05:39.528119991Z 53 PC: 1330a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:05:39.529302984Z 37 PC: 1331f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:05:39.53464693Z 37 PC: 13327 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:05:39.538500529Z 37 PC: 1332f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:39.540122725Z 37 PC: 13337 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:05:39.542127737Z 68 PC: 14062 | I/O control for devices (Set for = '')
2018-12-17T22:05:39.544937802Z 26 PC: 13179 | Set disk transfer address
2018-12-17T22:05:39.546678387Z 78 PC: 13185 | Find first file
2018-12-17T22:05:39.553955011Z 67 PC: 13121 | Get or set file attributes
2018-12-17T22:05:39.560477621Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:39.583783756Z 61 PC: 139d0 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:05:39.590032255Z 66 PC: 14161 | Move file pointer
2018-12-17T22:05:39.592536189Z 66 PC: 1416f | Move file pointer
2018-12-17T22:05:39.594249376Z 66 PC: 1417d | Move file pointer
2018-12-17T22:05:39.595548439Z 66 PC: 13b02 | Move file pointer
2018-12-17T22:05:39.597661374Z 64 PC: 13aa3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:05:39.60748851Z 62 PC: 13a20 | Close file
2018-12-17T22:05:39.615373088Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:39.626093071Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:39.62728998Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:39.630385901Z 67 PC: 13121 | Get or set file attributes
2018-12-17T22:05:39.636915009Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:39.64688688Z 61 PC: 139d0 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:05:39.653500068Z 66 PC: 14161 | Move file pointer
2018-12-17T22:05:39.655475188Z 66 PC: 1416f | Move file pointer
2018-12-17T22:05:39.657052851Z 66 PC: 1417d | Move file pointer
2018-12-17T22:05:39.65916293Z 66 PC: 13b02 | Move file pointer
2018-12-17T22:05:39.661325861Z 64 PC: 13aa3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:05:39.678193155Z 62 PC: 13a20 | Close file
2018-12-17T22:05:39.68687903Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:39.700263995Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:39.701634053Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:39.704438371Z 67 PC: 13121 | Get or set file attributes
2018-12-17T22:05:39.710557666Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:39.720317897Z 61 PC: 139d0 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:05:39.726905869Z 66 PC: 14161 | Move file pointer
2018-12-17T22:05:39.728984694Z 66 PC: 1416f | Move file pointer
2018-12-17T22:05:39.730384406Z 66 PC: 1417d | Move file pointer
2018-12-17T22:05:39.731793907Z 66 PC: 13b02 | Move file pointer
2018-12-17T22:05:39.733836686Z 64 PC: 13aa3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:05:39.743841695Z 62 PC: 13a20 | Close file
2018-12-17T22:05:39.752290939Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:39.763064375Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:39.7644094Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:39.767690341Z 67 PC: 13121 | Get or set file attributes
2018-12-17T22:05:39.774561773Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:39.784638579Z 61 PC: 139d0 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:05:39.791426372Z 66 PC: 14161 | Move file pointer
2018-12-17T22:05:39.793241063Z 66 PC: 1416f | Move file pointer
2018-12-17T22:05:39.795062609Z 66 PC: 1417d | Move file pointer
2018-12-17T22:05:39.796780452Z 66 PC: 13b02 | Move file pointer
2018-12-17T22:05:39.798828516Z 64 PC: 13aa3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:05:39.80921373Z 62 PC: 13a20 | Close file
2018-12-17T22:05:39.817792316Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:39.83040936Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:39.832262128Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:39.836306057Z 67 PC: 13121 | Get or set file attributes
2018-12-17T22:05:39.842891813Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:39.853841142Z 61 PC: 139d0 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:05:39.86081939Z 66 PC: 14161 | Move file pointer
2018-12-17T22:05:39.862617712Z 66 PC: 1416f | Move file pointer
2018-12-17T22:05:39.86572528Z 66 PC: 1417d | Move file pointer
2018-12-17T22:05:39.867562057Z 66 PC: 13b02 | Move file pointer
2018-12-17T22:05:39.869329818Z 64 PC: 13aa3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:05:39.879926902Z 62 PC: 13a20 | Close file
2018-12-17T22:05:39.888114898Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:39.898434841Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:39.913870924Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:39.917039803Z 67 PC: 13121 | Get or set file attributes
2018-12-17T22:05:39.922964385Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:39.93405681Z 61 PC: 139d0 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:05:39.940952302Z 66 PC: 14161 | Move file pointer
2018-12-17T22:05:39.942199468Z 66 PC: 1416f | Move file pointer
2018-12-17T22:05:39.944231988Z 66 PC: 1417d | Move file pointer
2018-12-17T22:05:39.945759054Z 66 PC: 13b02 | Move file pointer
2018-12-17T22:05:39.947376663Z 64 PC: 13aa3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:05:39.960210634Z 62 PC: 13a20 | Close file
2018-12-17T22:05:39.968584451Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:39.979770094Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:39.981925452Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:39.98547935Z 67 PC: 13121 | Get or set file attributes
2018-12-17T22:05:39.991504077Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:40.002354428Z 61 PC: 139d0 | Open file (Filename = 'PAH.COM')
2018-12-17T22:05:40.008937107Z 66 PC: 14161 | Move file pointer
2018-12-17T22:05:40.010492391Z 66 PC: 1416f | Move file pointer
2018-12-17T22:05:40.012751301Z 66 PC: 1417d | Move file pointer
2018-12-17T22:05:40.014432383Z 66 PC: 13b02 | Move file pointer
2018-12-17T22:05:40.016110764Z 64 PC: 13aa3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:05:40.027695155Z 62 PC: 13a20 | Close file
2018-12-17T22:05:40.036277187Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:40.047350088Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:40.048616496Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:40.05275063Z 26 PC: 13179 | Set disk transfer address
2018-12-17T22:05:40.05445377Z 78 PC: 13185 | Find first file
2018-12-17T22:05:40.061529553Z 67 PC: 13121 | Get or set file attributes
2018-12-17T22:05:40.067498528Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:40.077267899Z 61 PC: 139d0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:05:40.084093693Z 63 PC: 13a62 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:05:40.093557291Z 63 PC: 13a62 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:05:40.096373013Z 62 PC: 13a20 | Close file
2018-12-17T22:05:40.098087109Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:40.18309443Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:40.184204744Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:40.187959541Z 48 PC: 13b92 | Get DOS version
2018-12-17T22:05:40.193152066Z 67 PC: 13121 | Get or set file attributes
2018-12-17T22:05:40.198879655Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:40.447533663Z 61 PC: 139d0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:05:40.455987163Z 61 PC: 139d0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:05:40.462306519Z 60 PC: 139d0 | Create or truncate file
2018-12-17T22:05:40.474850216Z 63 PC: 13aa3 | Read file or device (Read 6496 bytes on handle 6)
2018-12-17T22:05:40.48324083Z 64 PC: 13aa3 | Write file or device (Write 6496 bytes on handle 7)
2018-12-17T22:05:40.491768316Z 63 PC: 13aa3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:40.498112929Z 64 PC: 13aa3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:05:40.507140688Z 63 PC: 13aa3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:40.512367292Z 64 PC: 13aa3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:05:40.518839932Z 63 PC: 13aa3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:40.523750895Z 64 PC: 13aa3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:05:40.529437475Z 63 PC: 13aa3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:40.531656751Z 64 PC: 13aa3 | Write file or device (Write 352 bytes on handle 7)
2018-12-17T22:05:40.538132568Z 63 PC: 13aa3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:40.539583905Z 62 PC: 13a20 | Close file
2018-12-17T22:05:40.540942754Z 62 PC: 13a20 | Close file
2018-12-17T22:05:40.542830716Z 62 PC: 13a20 | Close file
2018-12-17T22:05:40.548938073Z 65 PC: 13b19 | Delete file (Filename = 'TEST.EXE')
2018-12-17T22:05:40.556672738Z 86 PC: 13b5d | Rename file
2018-12-17T22:05:40.568643932Z 61 PC: 139d0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:05:40.573093777Z 64 PC: 13a62 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:05:40.577714174Z 64 PC: 13a62 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:05:40.580153562Z 62 PC: 13a20 | Close file
2018-12-17T22:05:40.58657171Z 67 PC: 13148 | Get or set file attributes
2018-12-17T22:05:40.59936213Z 25 PC: 13c1f | Get default drive
2018-12-17T22:05:40.601083895Z 71 PC: 13c32 | Get current directory
2018-12-17T22:05:40.605961987Z 14 PC: 13c78 | Set default drive (Drive = 'C')
2018-12-17T22:05:40.607024675Z 25 PC: 13c7c | Get default drive
2018-12-17T22:05:40.608617212Z 59 PC: 13ce6 | Change current directory
2018-12-17T22:05:40.611305733Z 26 PC: 13179 | Set disk transfer address
2018-12-17T22:05:40.612239827Z 78 PC: 13185 | Find first file
2018-12-17T22:05:40.616349475Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:40.617292557Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:40.619349073Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:40.620457586Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:40.622507196Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:40.62380572Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:40.625585853Z 25 PC: 13c1f | Get default drive
2018-12-17T22:05:40.626535095Z 71 PC: 13c32 | Get current directory
2018-12-17T22:05:40.628845732Z 14 PC: 13c78 | Set default drive (Drive = 'C')
2018-12-17T22:05:40.630063688Z 25 PC: 13c7c | Get default drive
2018-12-17T22:05:40.630979731Z 59 PC: 13ce6 | Change current directory
2018-12-17T22:05:40.632862991Z 26 PC: 13179 | Set disk transfer address
2018-12-17T22:05:40.633844099Z 78 PC: 13185 | Find first file
2018-12-17T22:05:40.637138709Z 14 PC: 13c78 | Set default drive (Drive = 'C')
2018-12-17T22:05:40.63863574Z 25 PC: 13c7c | Get default drive
2018-12-17T22:05:40.639512933Z 59 PC: 13ce6 | Change current directory
2018-12-17T22:05:40.641723942Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:40.643473655Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:40.645342506Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:40.646635242Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:40.649996676Z 25 PC: 13c1f | Get default drive
2018-12-17T22:05:40.651047238Z 71 PC: 13c32 | Get current directory
2018-12-17T22:05:40.653392634Z 14 PC: 13c78 | Set default drive (Drive = 'C')
2018-12-17T22:05:40.655518948Z 25 PC: 13c7c | Get default drive
2018-12-17T22:05:40.65696209Z 59 PC: 13ce6 | Change current directory
2018-12-17T22:05:40.658653663Z 26 PC: 13179 | Set disk transfer address
2018-12-17T22:05:40.66004814Z 78 PC: 13185 | Find first file
2018-12-17T22:05:40.663401701Z 14 PC: 13c78 | Set default drive (Drive = 'C')
2018-12-17T22:05:40.664355995Z 25 PC: 13c7c | Get default drive
2018-12-17T22:05:40.66621744Z 59 PC: 13ce6 | Change current directory
2018-12-17T22:05:40.669019856Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:40.670090931Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:40.672550854Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:40.673617285Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:40.675474518Z 26 PC: 1319d | Set disk transfer address
2018-12-17T22:05:40.676816473Z 79 PC: 131a2 | Find next file
2018-12-17T22:05:40.678521865Z 14 PC: 13c78 | Set default drive (Drive = 'A')
2018-12-17T22:05:40.67948432Z 25 PC: 13c7c | Get default drive
2018-12-17T22:05:40.687475394Z 59 PC: 13ce6 | Change current directory
2018-12-17T22:05:40.690247479Z 42 PC: 130a7 | Get date 0x130a7: xor ah, ah
0x130a9: les di, ptr [bp + 6]
0x130ac: stosw word ptr es:[di], ax
0x130ad: mov al, dl
0x130af: les di, ptr [bp + 0xa]
0x130b2: stosw word ptr es:[di], ax
0x130b3: mov al, dh
0x130b5: les di, ptr [bp + 0xe]
0x130b8: stosw word ptr es:[di], ax
0x130b9: xchg ax, cx
0x130ba: les di, ptr [bp + 0x12]
0x130bd: stosw word ptr es:[di], ax
0x130be: pop bp
0x130bf: retf 0x10
0x130c2: push bp
0x130c3: mov bp, sp
0x130c5: mov cx, word ptr [bp + 0xa]
0x130c8: mov dh, byte ptr [bp + 8]
0x130cb: mov dl, byte ptr [bp + 6]
0x130ce: mov ah, 0x2b
2018-12-17T22:05:40.692231342Z 48 PC: 13b92 | Get DOS version
2018-12-17T22:05:40.693693275Z 61 PC: 139d0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:05:40.700134487Z 60 PC: 139d0 | Create or truncate file
2018-12-17T22:05:40.708892182Z 66 PC: 13b02 | Move file pointer
2018-12-17T22:05:40.710517415Z 63 PC: 13aa3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:40.715271266Z 64 PC: 13aa3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:05:40.72088876Z 63 PC: 13aa3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:40.725453152Z 64 PC: 13aa3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:05:40.731986459Z 63 PC: 13aa3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:40.741996371Z 64 PC: 13aa3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:05:40.752354803Z 63 PC: 13aa3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:40.759252869Z 64 PC: 13aa3 | Write file or device (Write 352 bytes on handle 6)
2018-12-17T22:05:40.763208644Z 63 PC: 13aa3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:40.765586077Z 62 PC: 13a20 | Close file
2018-12-17T22:05:40.7676408Z 62 PC: 13a20 | Close file
2018-12-17T22:05:40.775324896Z 53 PC: 1327a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:05:40.77667941Z 37 PC: 13283 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:05:40.777754903Z 53 PC: 1327a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:05:40.77937313Z 37 PC: 13283 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:05:40.78088343Z 53 PC: 1327a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:05:40.782388537Z 37 PC: 13283 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:05:40.784121116Z 53 PC: 1327a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:05:40.785403446Z 37 PC: 13283 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:05:40.787236753Z 53 PC: 1327a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:05:40.788640991Z 37 PC: 13283 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:05:40.789957645Z 53 PC: 1327a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:40.791787059Z 37 PC: 13283 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:40.792972341Z 53 PC: 1327a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:05:40.794122864Z 37 PC: 13283 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:05:40.795846429Z 53 PC: 1327a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:05:40.796941798Z 37 PC: 13283 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:05:40.797976933Z 53 PC: 1327a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:05:40.799607159Z 37 PC: 13283 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:05:40.800598363Z 53 PC: 1327a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:05:40.801626314Z 37 PC: 13283 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:05:40.803238878Z 53 PC: 1327a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:05:40.804433964Z 37 PC: 13283 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:05:40.805601601Z 53 PC: 1327a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:05:40.807335407Z 37 PC: 13283 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:05:40.8084911Z 53 PC: 1327a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:05:40.809618359Z 37 PC: 13283 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:05:40.81170807Z 53 PC: 1327a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:05:40.813011121Z 37 PC: 13283 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:05:40.813814694Z 53 PC: 1327a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:05:40.816090083Z 37 PC: 13283 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:05:40.817472636Z 53 PC: 1327a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:05:40.818449069Z 37 PC: 13283 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:05:40.820010062Z 53 PC: 1327a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:05:40.820995788Z 37 PC: 13283 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:05:40.822152819Z 53 PC: 1327a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:05:40.823957771Z 37 PC: 13283 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:05:40.824933111Z 53 PC: 1327a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:05:40.82613441Z 37 PC: 13283 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:05:40.828627522Z 41 PC: 13231 | Parse filename
2018-12-17T22:05:40.829909465Z 41 PC: 1323f | Parse filename
2018-12-17T22:05:40.831757841Z 75 PC: 1324a | Execute program
2018-12-17T22:05:40.84651472Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:05:40.847547769Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:05:40.849174097Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:05:40.850286991Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:05:40.851577165Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:05:40.856039252Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:40.857142227Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:05:40.858199157Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:05:40.859717888Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:05:40.860735461Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:05:40.861757086Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:05:40.863911584Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:05:40.864948101Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:05:40.865931708Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:05:40.867148651Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:05:40.869028277Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:05:40.870240502Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:05:40.872420388Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:05:40.873381129Z 53 PC: 1ab3a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:05:40.875358588Z 37 PC: 1ab4f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:05:40.877097524Z 37 PC: 1ab57 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:05:40.877976727Z 37 PC: 1ab5f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:40.879524507Z 37 PC: 1ab67 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:05:40.88126289Z 68 PC: 1b892 | I/O control for devices (Set for = '')
2018-12-17T22:05:40.88301404Z 26 PC: 1a9a9 | Set disk transfer address
2018-12-17T22:05:40.885754525Z 78 PC: 1a9b5 | Find first file
2018-12-17T22:05:40.89200105Z 67 PC: 1a951 | Get or set file attributes
2018-12-17T22:05:40.897860609Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:40.907815932Z 61 PC: 1b200 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:05:40.914303707Z 66 PC: 1b991 | Move file pointer
2018-12-17T22:05:40.915634165Z 66 PC: 1b99f | Move file pointer
2018-12-17T22:05:40.917075346Z 66 PC: 1b9ad | Move file pointer
2018-12-17T22:05:40.918501919Z 66 PC: 1b332 | Move file pointer
2018-12-17T22:05:40.920723591Z 64 PC: 1b2d3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:05:40.930301238Z 62 PC: 1b250 | Close file
2018-12-17T22:05:40.938155825Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:40.949222427Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:40.951076745Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:40.954258708Z 67 PC: 1a951 | Get or set file attributes
2018-12-17T22:05:40.961387649Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:40.970812561Z 61 PC: 1b200 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:05:40.974984705Z 66 PC: 1b991 | Move file pointer
2018-12-17T22:05:40.976797303Z 66 PC: 1b99f | Move file pointer
2018-12-17T22:05:40.978182335Z 66 PC: 1b9ad | Move file pointer
2018-12-17T22:05:40.979920359Z 66 PC: 1b332 | Move file pointer
2018-12-17T22:05:40.982322925Z 64 PC: 1b2d3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:05:40.991956002Z 62 PC: 1b250 | Close file
2018-12-17T22:05:41.000786559Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:41.01407203Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:41.01511786Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:41.017875111Z 67 PC: 1a951 | Get or set file attributes
2018-12-17T22:05:41.02387509Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:41.033538203Z 61 PC: 1b200 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:05:41.040560072Z 66 PC: 1b991 | Move file pointer
2018-12-17T22:05:41.042195428Z 66 PC: 1b99f | Move file pointer
2018-12-17T22:05:41.043584131Z 66 PC: 1b9ad | Move file pointer
2018-12-17T22:05:41.045294962Z 66 PC: 1b332 | Move file pointer
2018-12-17T22:05:41.047456949Z 64 PC: 1b2d3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:05:41.056678075Z 62 PC: 1b250 | Close file
2018-12-17T22:05:41.064918493Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:41.076997502Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:41.077912998Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:41.081364335Z 67 PC: 1a951 | Get or set file attributes
2018-12-17T22:05:41.086874326Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:41.096210378Z 61 PC: 1b200 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:05:41.103681504Z 66 PC: 1b991 | Move file pointer
2018-12-17T22:05:41.104960158Z 66 PC: 1b99f | Move file pointer
2018-12-17T22:05:41.106147955Z 66 PC: 1b9ad | Move file pointer
2018-12-17T22:05:41.107921347Z 66 PC: 1b332 | Move file pointer
2018-12-17T22:05:41.109485724Z 64 PC: 1b2d3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:05:41.119619364Z 62 PC: 1b250 | Close file
2018-12-17T22:05:41.127899159Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:41.140217504Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:41.142378248Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:41.145202732Z 67 PC: 1a951 | Get or set file attributes
2018-12-17T22:05:41.150822323Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:41.161822224Z 61 PC: 1b200 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:05:41.168654695Z 66 PC: 1b991 | Move file pointer
2018-12-17T22:05:41.170041317Z 66 PC: 1b99f | Move file pointer
2018-12-17T22:05:41.172193256Z 66 PC: 1b9ad | Move file pointer
2018-12-17T22:05:41.1741132Z 66 PC: 1b332 | Move file pointer
2018-12-17T22:05:41.175167488Z 64 PC: 1b2d3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:05:41.182673922Z 62 PC: 1b250 | Close file
2018-12-17T22:05:41.188806132Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:41.202699705Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:41.204970355Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:41.207991265Z 67 PC: 1a951 | Get or set file attributes
2018-12-17T22:05:41.214212574Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:41.22393858Z 61 PC: 1b200 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:05:41.231214887Z 66 PC: 1b991 | Move file pointer
2018-12-17T22:05:41.23344869Z 66 PC: 1b99f | Move file pointer
2018-12-17T22:05:41.234831981Z 66 PC: 1b9ad | Move file pointer
2018-12-17T22:05:41.236192917Z 66 PC: 1b332 | Move file pointer
2018-12-17T22:05:41.238183205Z 64 PC: 1b2d3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:05:41.250234952Z 62 PC: 1b250 | Close file
2018-12-17T22:05:41.258285265Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:41.271341954Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:41.272829135Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:41.276048643Z 67 PC: 1a951 | Get or set file attributes
2018-12-17T22:05:41.281901997Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:41.291770279Z 61 PC: 1b200 | Open file (Filename = 'PAH.COM')
2018-12-17T22:05:41.299253254Z 66 PC: 1b991 | Move file pointer
2018-12-17T22:05:41.300505983Z 66 PC: 1b99f | Move file pointer
2018-12-17T22:05:41.301780763Z 66 PC: 1b9ad | Move file pointer
2018-12-17T22:05:41.303886106Z 66 PC: 1b332 | Move file pointer
2018-12-17T22:05:41.305525217Z 64 PC: 1b2d3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:05:41.315970744Z 62 PC: 1b250 | Close file
2018-12-17T22:05:41.324987007Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:41.337449462Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:41.338739479Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:41.345704282Z 26 PC: 1a9a9 | Set disk transfer address
2018-12-17T22:05:41.346706555Z 78 PC: 1a9b5 | Find first file
2018-12-17T22:05:41.353841947Z 67 PC: 1a951 | Get or set file attributes
2018-12-17T22:05:41.359424174Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:41.369034318Z 61 PC: 1b200 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:05:41.37708611Z 63 PC: 1b292 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:05:41.383487566Z 63 PC: 1b292 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:05:41.386273569Z 62 PC: 1b250 | Close file
2018-12-17T22:05:41.388281826Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:41.398291835Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:41.399762345Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:41.403038875Z 48 PC: 1b3c2 | Get DOS version
2018-12-17T22:05:41.404558299Z 67 PC: 1a951 | Get or set file attributes
2018-12-17T22:05:41.409860505Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:41.419466383Z 61 PC: 1b200 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:05:41.425911061Z 61 PC: 1b200 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:05:41.430534318Z 60 PC: 1b200 | Create or truncate file
2018-12-17T22:05:41.439875626Z 63 PC: 1b2d3 | Read file or device (Read 6496 bytes on handle 6)
2018-12-17T22:05:41.444828062Z 64 PC: 1b2d3 | Write file or device (Write 6496 bytes on handle 7)
2018-12-17T22:05:41.452146747Z 63 PC: 1b2d3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:41.456868904Z 64 PC: 1b2d3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:05:41.463031827Z 63 PC: 1b2d3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:41.469209515Z 64 PC: 1b2d3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:05:41.478142034Z 63 PC: 1b2d3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:41.485294302Z 64 PC: 1b2d3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:05:41.494155608Z 63 PC: 1b2d3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:41.497033057Z 64 PC: 1b2d3 | Write file or device (Write 352 bytes on handle 7)
2018-12-17T22:05:41.505297645Z 63 PC: 1b2d3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:41.507324194Z 62 PC: 1b250 | Close file
2018-12-17T22:05:41.508999772Z 62 PC: 1b250 | Close file
2018-12-17T22:05:41.51099467Z 62 PC: 1b250 | Close file
2018-12-17T22:05:41.519818685Z 65 PC: 1b349 | Delete file (Filename = '$$$KYE.EXE')
2018-12-17T22:05:41.531070505Z 86 PC: 1b38d | Rename file
2018-12-17T22:05:41.542886657Z 61 PC: 1b200 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:05:41.55071611Z 64 PC: 1b292 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:05:41.557256846Z 64 PC: 1b292 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:05:41.56017544Z 62 PC: 1b250 | Close file
2018-12-17T22:05:41.567757336Z 67 PC: 1a978 | Get or set file attributes
2018-12-17T22:05:41.580301966Z 25 PC: 1b44f | Get default drive
2018-12-17T22:05:41.582102945Z 71 PC: 1b462 | Get current directory
2018-12-17T22:05:41.589694857Z 14 PC: 1b4a8 | Set default drive (Drive = 'C')
2018-12-17T22:05:41.591989067Z 25 PC: 1b4ac | Get default drive
2018-12-17T22:05:41.593354176Z 59 PC: 1b516 | Change current directory
2018-12-17T22:05:41.597018814Z 26 PC: 1a9a9 | Set disk transfer address
2018-12-17T22:05:41.598705699Z 78 PC: 1a9b5 | Find first file
2018-12-17T22:05:41.603970591Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:41.605271108Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:41.608369866Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:41.609598262Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:41.612273175Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:41.613629183Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:41.616296968Z 25 PC: 1b44f | Get default drive
2018-12-17T22:05:41.617808325Z 71 PC: 1b462 | Get current directory
2018-12-17T22:05:41.620600829Z 14 PC: 1b4a8 | Set default drive (Drive = 'C')
2018-12-17T22:05:41.621803459Z 25 PC: 1b4ac | Get default drive
2018-12-17T22:05:41.623572169Z 59 PC: 1b516 | Change current directory
2018-12-17T22:05:41.62562879Z 26 PC: 1a9a9 | Set disk transfer address
2018-12-17T22:05:41.626992704Z 78 PC: 1a9b5 | Find first file
2018-12-17T22:05:41.633040236Z 14 PC: 1b4a8 | Set default drive (Drive = 'C')
2018-12-17T22:05:41.634119898Z 25 PC: 1b4ac | Get default drive
2018-12-17T22:05:41.635079519Z 59 PC: 1b516 | Change current directory
2018-12-17T22:05:41.638690584Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:41.639575462Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:41.642600266Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:41.643971312Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:41.646548394Z 25 PC: 1b44f | Get default drive
2018-12-17T22:05:41.648083476Z 71 PC: 1b462 | Get current directory
2018-12-17T22:05:41.650582463Z 14 PC: 1b4a8 | Set default drive (Drive = 'C')
2018-12-17T22:05:41.652311571Z 25 PC: 1b4ac | Get default drive
2018-12-17T22:05:41.654288594Z 59 PC: 1b516 | Change current directory
2018-12-17T22:05:41.656621158Z 26 PC: 1a9a9 | Set disk transfer address
2018-12-17T22:05:41.658025882Z 78 PC: 1a9b5 | Find first file
2018-12-17T22:05:41.664151355Z 14 PC: 1b4a8 | Set default drive (Drive = 'C')
2018-12-17T22:05:41.665201002Z 25 PC: 1b4ac | Get default drive
2018-12-17T22:05:41.666368157Z 59 PC: 1b516 | Change current directory
2018-12-17T22:05:41.670750434Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:41.671703814Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:41.67486053Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:41.67591375Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:41.678368962Z 26 PC: 1a9cd | Set disk transfer address
2018-12-17T22:05:41.680248125Z 79 PC: 1a9d2 | Find next file
2018-12-17T22:05:41.682520287Z 14 PC: 1b4a8 | Set default drive (Drive = 'A')
2018-12-17T22:05:41.683699103Z 25 PC: 1b4ac | Get default drive
2018-12-17T22:05:41.685347563Z 59 PC: 1b516 | Change current directory
2018-12-17T22:05:41.689216283Z 42 PC: 1a8d7 | Get date 0x1a8d7: xor ah, ah
0x1a8d9: les di, ptr [bp + 6]
0x1a8dc: stosw word ptr es:[di], ax
0x1a8dd: mov al, dl
0x1a8df: les di, ptr [bp + 0xa]
0x1a8e2: stosw word ptr es:[di], ax
0x1a8e3: mov al, dh
0x1a8e5: les di, ptr [bp + 0xe]
0x1a8e8: stosw word ptr es:[di], ax
0x1a8e9: xchg ax, cx
0x1a8ea: les di, ptr [bp + 0x12]
0x1a8ed: stosw word ptr es:[di], ax
0x1a8ee: pop bp
0x1a8ef: retf 0x10
0x1a8f2: push bp
0x1a8f3: mov bp, sp
0x1a8f5: mov cx, word ptr [bp + 0xa]
0x1a8f8: mov dh, byte ptr [bp + 8]
0x1a8fb: mov dl, byte ptr [bp + 6]
0x1a8fe: mov ah, 0x2b
2018-12-17T22:05:41.692109948Z 48 PC: 1b3c2 | Get DOS version
2018-12-17T22:05:41.693629587Z 61 PC: 1b200 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:05:41.703315422Z 60 PC: 1b200 | Create or truncate file
2018-12-17T22:05:41.717192156Z 66 PC: 1b332 | Move file pointer
2018-12-17T22:05:41.718614212Z 63 PC: 1b2d3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:05:41.721203271Z 62 PC: 1b250 | Close file
2018-12-17T22:05:41.723539228Z 62 PC: 1b250 | Close file
2018-12-17T22:05:41.725398503Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:05:41.726679336Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:05:41.728643097Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:05:41.729782217Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:05:41.73199514Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:05:41.733205062Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:05:41.734202378Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:05:41.736210481Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:05:41.737304153Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:05:41.73838629Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:05:41.739987037Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:41.74124739Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:41.742834712Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:05:41.744250425Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:05:41.745316157Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:05:41.747686405Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:05:41.748747311Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:05:41.749665663Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:05:41.751554665Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:05:41.757652768Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:05:41.758474625Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:05:41.760211409Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:05:41.761081198Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:05:41.762176062Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:05:41.763659006Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:05:41.765384693Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:05:41.766860041Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:05:41.767730633Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:05:41.768800159Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:05:41.771338127Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:05:41.772482277Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:05:41.774052941Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:05:41.775491509Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:05:41.776848225Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:05:41.778565006Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:05:41.779702365Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:05:41.780619134Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:05:41.782238627Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:05:41.783460018Z 41 PC: 1aa61 | Parse filename
2018-12-17T22:05:41.784941961Z 41 PC: 1aa6f | Parse filename
2018-12-17T22:05:41.786486365Z 75 PC: 1aa7a | Execute program
2018-12-17T22:05:41.795690686Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:05:41.797692995Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:05:41.798953961Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:05:41.800149796Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:05:41.802267308Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:05:41.803597071Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:05:41.80621729Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:05:41.807515072Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:05:41.808703657Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:05:41.811513354Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:05:41.812518924Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:41.813662075Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:41.81555799Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:05:41.816843474Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:05:41.817853453Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:05:41.819342287Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:05:41.820520949Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:05:41.822381407Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:05:41.823597319Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:05:41.824908823Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:05:41.826561798Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:05:41.827485609Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:05:41.828590497Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:05:41.830019651Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:05:41.830889468Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:05:41.832389107Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:05:41.833286278Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:05:41.834176023Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:05:41.835926898Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:05:41.836805367Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:05:41.838410277Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:05:41.839381954Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:05:41.840291501Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:05:41.841825221Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:05:41.843139576Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:05:41.844022235Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:05:41.845752816Z 53 PC: 1aaaa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:05:41.847038095Z 37 PC: 1aab3 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:05:41.848521205Z 65 PC: 1b349 | Delete file (Filename = '@[email protected]@')
2018-12-17T22:05:41.855445975Z 64 PC: 1af58 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:05:41.85669834Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:05:41.858295906Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:05:41.85921143Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:05:41.860135446Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:05:41.861617076Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:05:41.862516256Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:41.86415136Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:05:41.865066773Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:05:41.86594555Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:05:41.867672372Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:05:41.868576125Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:05:41.870034321Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:05:41.871634547Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:05:41.872537032Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:05:41.874102714Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:05:41.87502211Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:05:41.876024972Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:05:41.877982337Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:05:41.878980813Z 37 PC: 1ac91 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:05:41.880564502Z 76 PC: 1acd0 | Terminate with return code (Return code = '0')
2018-12-17T22:05:41.882619747Z 53 PC: 1327a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:05:41.884339612Z 37 PC: 13283 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:05:41.886174244Z 53 PC: 1327a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:05:41.887407824Z 37 PC: 13283 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:05:41.889055554Z 53 PC: 1327a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:05:41.890059189Z 37 PC: 13283 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:05:41.890987712Z 53 PC: 1327a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:05:41.892613945Z 37 PC: 13283 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:05:41.893633095Z 53 PC: 1327a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:05:41.895238165Z 37 PC: 13283 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:05:41.896129973Z 53 PC: 1327a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:41.897153944Z 37 PC: 13283 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:41.898923949Z 53 PC: 1327a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:05:41.899848544Z 37 PC: 13283 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:05:41.901499396Z 53 PC: 1327a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:05:41.902485671Z 37 PC: 13283 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:05:41.903415206Z 53 PC: 1327a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:05:41.904957421Z 37 PC: 13283 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:05:41.90590281Z 53 PC: 1327a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:05:41.907666379Z 37 PC: 13283 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:05:41.908561691Z 53 PC: 1327a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:05:41.909617063Z 37 PC: 13283 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:05:41.911180985Z 53 PC: 1327a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:05:41.91249396Z 37 PC: 13283 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:05:41.914421438Z 53 PC: 1327a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:05:41.915482604Z 37 PC: 13283 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:05:41.916500067Z 53 PC: 1327a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:05:41.918191103Z 37 PC: 13283 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:05:41.919017742Z 53 PC: 1327a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:05:41.920486095Z 37 PC: 13283 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:05:41.921439935Z 53 PC: 1327a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:05:41.92237776Z 37 PC: 13283 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:05:41.924047943Z 53 PC: 1327a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:05:41.925033038Z 37 PC: 13283 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:05:41.926595348Z 53 PC: 1327a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:05:41.927885812Z 37 PC: 13283 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:05:41.928779034Z 53 PC: 1327a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:05:41.930662615Z 37 PC: 13283 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:05:41.931550238Z 65 PC: 13b19 | Delete file (Filename = '@[email protected]@')
2018-12-17T22:05:41.936470273Z 64 PC: 13728 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:05:41.937926434Z 37 PC: 13461 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:05:41.938771189Z 37 PC: 13461 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:05:41.939918134Z 37 PC: 13461 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:05:41.941318849Z 37 PC: 13461 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:05:41.942864382Z 37 PC: 13461 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:05:41.944035811Z 37 PC: 13461 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:41.944979825Z 37 PC: 13461 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:05:41.946794239Z 37 PC: 13461 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:05:41.947612233Z 37 PC: 13461 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:05:41.948962267Z 37 PC: 13461 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:05:41.950586203Z 37 PC: 13461 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:05:41.951746403Z 37 PC: 13461 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:05:41.957760085Z 37 PC: 13461 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:05:41.95898185Z 37 PC: 13461 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:05:41.960359385Z 37 PC: 13461 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:05:41.961767932Z 37 PC: 13461 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:05:41.963123225Z 37 PC: 13461 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:05:41.964737602Z 37 PC: 13461 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:05:41.965732591Z 37 PC: 13461 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:05:41.966864602Z 76 PC: 134a0 | Terminate with return code (Return code = '0')