Sample viewer

vx.netlux.org/Virus.DOS.Tpworm.12969

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:17:01.846897755Z 48 PC: 12d74 | Get DOS version
2018-12-17T22:17:01.851384994Z 74 PC: 12dcf | Reallocate memory
2018-12-17T22:17:01.852742257Z 48 PC: 12e28 | Get DOS version
2018-12-17T22:17:01.853812705Z 53 PC: 12e30 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:01.857394757Z 37 PC: 12e42 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:01.858734095Z 68 PC: 12ec6 | I/O control for devices (Set for = '^��l�P+�P�F�P�?)��� ��l�P�()���� �uh��f�P�F�P��f�P��f�P�F�P�_"�� ��f�P��f�P���P��^�P�F�P�A"�� �4P�F�P���P��^�P�F�P�s#�� +�P�F�P�(�� �t���d��:P�^�7�s���F��>P�F�P�b���� ��')
2018-12-17T22:17:01.860305141Z 68 PC: 12ec6 | I/O control for devices
2018-12-17T22:17:01.862521393Z 68 PC: 12ec6 | I/O control for devices
2018-12-17T22:17:01.866294962Z 68 PC: 12ec6 | I/O control for devices
2018-12-17T22:17:01.868255836Z 68 PC: 12ec6 | I/O control for devices
2018-12-17T22:17:01.870659626Z 42 PC: 149c6 | Get date 0x149c6: mov bx, dx
0x149c8: mov word ptr [bp - 2], cx
0x149cb: mov ah, 0x2c
0x149cd: int 0x21
0x149cf: xor ah, ah
0x149d1: mov al, dh
0x149d3: push ax
0x149d4: mov al, cl
0x149d6: push ax
0x149d7: mov al, ch
0x149d9: push ax
0x149da: push ax
0x149db: mov ah, 0x2a
0x149dd: int 0x21
0x149df: cmp bx, dx
0x149e1: pop ax
0x149e2: je 0x149ed
0x149e4: cmp al, 0x17
0x149e6: jne 0x149ed
0x149e8: mov dx, bx
2018-12-17T22:17:01.87305617Z 44 PC: 149cf | Get time 0x149cf: xor ah, ah
0x149d1: mov al, dh
0x149d3: push ax
0x149d4: mov al, cl
0x149d6: push ax
0x149d7: mov al, ch
0x149d9: push ax
0x149da: push ax
0x149db: mov ah, 0x2a
0x149dd: int 0x21
0x149df: cmp bx, dx
0x149e1: pop ax
0x149e2: je 0x149ed
0x149e4: cmp al, 0x17
0x149e6: jne 0x149ed
0x149e8: mov dx, bx
0x149ea: mov cx, word ptr [bp - 2]
0x149ed: xor ah, ah
0x149ef: mov al, dl
0x149f1: push ax
2018-12-17T22:17:01.875071752Z 42 PC: 149df | Get date 0x149df: cmp bx, dx
0x149e1: pop ax
0x149e2: je 0x149ed
0x149e4: cmp al, 0x17
0x149e6: jne 0x149ed
0x149e8: mov dx, bx
0x149ea: mov cx, word ptr [bp - 2]
0x149ed: xor ah, ah
0x149ef: mov al, dl
0x149f1: push ax
0x149f2: mov al, dh
0x149f4: push ax
0x149f5: mov ax, cx
0x149f7: sub ax, 0x7bc
0x149fa: push ax
0x149fb: call 0x14b98
0x149fe: add sp, 0xc
0x14a01: cmp word ptr [bp + 4], 0
0x14a05: je 0x14a0f
0x14a07: mov bx, word ptr [bp + 4]
2018-12-17T22:17:01.880244599Z 26 PC: 15500 | Set disk transfer address
2018-12-17T22:17:01.881352555Z 78 PC: 1550f | Find first file
2018-12-17T22:17:01.892379915Z 67 PC: 154c7 | Get or set file attributes
2018-12-17T22:17:01.902760857Z 61 PC: 13d32 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:17:01.910068197Z 68 PC: 13d63 | I/O control for devices (Set for = 'A:\TEST.EXE')
2018-12-17T22:17:01.912260469Z 67 PC: 13e58 | Get or set file attributes
2018-12-17T22:17:01.918250422Z 61 PC: 13d32 | Open file (Filename = 'C:\DOS\ATTRIB.com')
2018-12-17T22:17:01.925236228Z 60 PC: 13e07 | Create or truncate file
2018-12-17T22:17:02.830289183Z 62 PC: 13e1e | Close file
2018-12-17T22:17:02.831937066Z 61 PC: 13e2d | Open file (Filename = 'C:\DOS\ATTRIB.com')
2018-12-17T22:17:02.839093049Z 67 PC: 13e58 | Get or set file attributes
2018-12-17T22:17:02.846133714Z 66 PC: 13cf4 | Move file pointer
2018-12-17T22:17:02.84746294Z 66 PC: 13cf4 | Move file pointer
2018-12-17T22:17:02.849379944Z 66 PC: 13cf4 | Move file pointer
2018-12-17T22:17:02.850893993Z 66 PC: 13cf4 | Move file pointer
2018-12-17T22:17:02.852131523Z 63 PC: 13ecd | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:02.855516925Z 66 PC: 13cf4 | Move file pointer
2018-12-17T22:17:02.857065223Z 66 PC: 13cf4 | Move file pointer
2018-12-17T22:17:02.858660925Z 66 PC: 13cf4 | Move file pointer
2018-12-17T22:17:02.860724981Z 63 PC: 13ecd | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:02.867871585Z 63 PC: 13ecd | Read file or device (Read 12288 bytes on handle 5)
2018-12-17T22:17:02.874997708Z 63 PC: 13ecd | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:02.879089995Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.888001102Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.894988645Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.902214297Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.909437854Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.916246632Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.923038525Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.929321886Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.936392084Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.944550448Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.951007764Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.957293847Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.964214014Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.971648042Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.977968731Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.984762991Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:02.99117539Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.001647287Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.008770716Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.015624136Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.022171362Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.02930794Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.037145898Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.043683045Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.050507874Z 64 PC: 14085 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.058150583Z 62 PC: 13c7a | Close file
2018-12-17T22:17:03.060027981Z 64 PC: 14085 | Write file or device (Write 169 bytes on handle 6)
2018-12-17T22:17:03.063203716Z 62 PC: 13c7a | Close file
2018-12-17T22:17:03.073256361Z 41 PC: 152a1 | Parse filename
2018-12-17T22:17:03.074536128Z 41 PC: 152a9 | Parse filename
2018-12-17T22:17:03.076025741Z 11 PC: 152eb | Get input status
2018-12-17T22:17:03.078965417Z 75 PC: 152f9 | Execute program
2018-12-17T22:17:03.095940589Z 48 PC: 25b44 | Get DOS version
2018-12-17T22:17:03.097624241Z 74 PC: 25b9f | Reallocate memory
2018-12-17T22:17:03.100020887Z 48 PC: 25bf8 | Get DOS version
2018-12-17T22:17:03.101356575Z 53 PC: 25c00 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:03.102706146Z 37 PC: 25c12 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:03.105122317Z 68 PC: 25c96 | I/O control for devices (Set for = '')
2018-12-17T22:17:03.106608306Z 68 PC: 25c96 | I/O control for devices (Set for = '')
2018-12-17T22:17:03.107937957Z 68 PC: 25c96 | I/O control for devices (Set for = '')
2018-12-17T22:17:03.11014035Z 68 PC: 25c96 | I/O control for devices (Set for = '')
2018-12-17T22:17:03.112074834Z 68 PC: 25c96 | I/O control for devices (Set for = '')
2018-12-17T22:17:03.114045503Z 42 PC: 27796 | Get date 0x27796: mov bx, dx
0x27798: mov word ptr [bp - 2], cx
0x2779b: mov ah, 0x2c
0x2779d: int 0x21
0x2779f: xor ah, ah
0x277a1: mov al, dh
0x277a3: push ax
0x277a4: mov al, cl
0x277a6: push ax
0x277a7: mov al, ch
0x277a9: push ax
0x277aa: push ax
0x277ab: mov ah, 0x2a
0x277ad: int 0x21
0x277af: cmp bx, dx
0x277b1: pop ax
0x277b2: je 0x277bd
0x277b4: cmp al, 0x17
0x277b6: jne 0x277bd
0x277b8: mov dx, bx
2018-12-17T22:17:03.116688697Z 44 PC: 2779f | Get time 0x2779f: xor ah, ah
0x277a1: mov al, dh
0x277a3: push ax
0x277a4: mov al, cl
0x277a6: push ax
0x277a7: mov al, ch
0x277a9: push ax
0x277aa: push ax
0x277ab: mov ah, 0x2a
0x277ad: int 0x21
0x277af: cmp bx, dx
0x277b1: pop ax
0x277b2: je 0x277bd
0x277b4: cmp al, 0x17
0x277b6: jne 0x277bd
0x277b8: mov dx, bx
0x277ba: mov cx, word ptr [bp - 2]
0x277bd: xor ah, ah
0x277bf: mov al, dl
0x277c1: push ax
2018-12-17T22:17:03.11901272Z 42 PC: 277af | Get date 0x277af: cmp bx, dx
0x277b1: pop ax
0x277b2: je 0x277bd
0x277b4: cmp al, 0x17
0x277b6: jne 0x277bd
0x277b8: mov dx, bx
0x277ba: mov cx, word ptr [bp - 2]
0x277bd: xor ah, ah
0x277bf: mov al, dl
0x277c1: push ax
0x277c2: mov al, dh
0x277c4: push ax
0x277c5: mov ax, cx
0x277c7: sub ax, 0x7bc
0x277ca: push ax
0x277cb: call 0x27968
0x277ce: add sp, 0xc
0x277d1: cmp word ptr [bp + 4], 0
0x277d5: je 0x277df
0x277d7: mov bx, word ptr [bp + 4]
2018-12-17T22:17:03.123738547Z 26 PC: 282d0 | Set disk transfer address
2018-12-17T22:17:03.125489233Z 78 PC: 282df | Find first file
2018-12-17T22:17:03.132235651Z 67 PC: 28297 | Get or set file attributes
2018-12-17T22:17:03.138127004Z 26 PC: 282d0 | Set disk transfer address
2018-12-17T22:17:03.139652604Z 79 PC: 282df | Find next file
2018-12-17T22:17:03.143315162Z 67 PC: 28297 | Get or set file attributes
2018-12-17T22:17:03.149700503Z 61 PC: 26b02 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:17:03.156589851Z 68 PC: 26b33 | I/O control for devices (Set for = 'A:\TEST.EXE')
2018-12-17T22:17:03.157864023Z 67 PC: 26c28 | Get or set file attributes
2018-12-17T22:17:03.163627247Z 61 PC: 26b02 | Open file (Filename = 'C:\DOS\CHKDSK.com')
2018-12-17T22:17:03.171773241Z 60 PC: 26bd7 | Create or truncate file
2018-12-17T22:17:03.182893513Z 62 PC: 26bee | Close file
2018-12-17T22:17:03.18479113Z 61 PC: 26bfd | Open file (Filename = 'C:\DOS\CHKDSK.com')
2018-12-17T22:17:03.192492221Z 67 PC: 26c28 | Get or set file attributes
2018-12-17T22:17:03.198967362Z 66 PC: 26ac4 | Move file pointer
2018-12-17T22:17:03.200389753Z 66 PC: 26ac4 | Move file pointer
2018-12-17T22:17:03.203014299Z 66 PC: 26ac4 | Move file pointer
2018-12-17T22:17:03.204974808Z 66 PC: 26ac4 | Move file pointer
2018-12-17T22:17:03.206700631Z 63 PC: 26c9d | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:03.210412795Z 66 PC: 26ac4 | Move file pointer
2018-12-17T22:17:03.212356626Z 66 PC: 26ac4 | Move file pointer
2018-12-17T22:17:03.214332089Z 66 PC: 26ac4 | Move file pointer
2018-12-17T22:17:03.226428345Z 63 PC: 26c9d | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:03.233841664Z 63 PC: 26c9d | Read file or device (Read 12288 bytes on handle 5)
2018-12-17T22:17:03.240976628Z 63 PC: 26c9d | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:03.246011768Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.252918739Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.259466889Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.267293918Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.274108571Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.281404952Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.289254426Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.306458023Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.313614364Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.321918271Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.328819266Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.335788103Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.344118081Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.351540739Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.358441612Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.365994112Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.373220507Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.380909705Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.388476678Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.394995667Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.401570498Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.408709543Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.41594802Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.422605646Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.428916141Z 64 PC: 26e55 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.437572701Z 62 PC: 26a4a | Close file
2018-12-17T22:17:03.440054576Z 64 PC: 26e55 | Write file or device (Write 169 bytes on handle 6)
2018-12-17T22:17:03.443830625Z 62 PC: 26a4a | Close file
2018-12-17T22:17:03.454759657Z 41 PC: 28071 | Parse filename
2018-12-17T22:17:03.456076166Z 41 PC: 28079 | Parse filename
2018-12-17T22:17:03.457738428Z 11 PC: 280bb | Get input status
2018-12-17T22:17:03.460721712Z 75 PC: 280c9 | Execute program
2018-12-17T22:17:03.476348405Z 48 PC: 38914 | Get DOS version
2018-12-17T22:17:03.477735397Z 74 PC: 3896f | Reallocate memory
2018-12-17T22:17:03.479620987Z 48 PC: 389c8 | Get DOS version
2018-12-17T22:17:03.480900404Z 53 PC: 389d0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:03.482221577Z 37 PC: 389e2 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:03.484382381Z 68 PC: 38a66 | I/O control for devices (Set for = '')
2018-12-17T22:17:03.48589144Z 68 PC: 38a66 | I/O control for devices (Set for = '')
2018-12-17T22:17:03.487380287Z 68 PC: 38a66 | I/O control for devices (Set for = '')
2018-12-17T22:17:03.489499902Z 68 PC: 38a66 | I/O control for devices (Set for = '')
2018-12-17T22:17:03.491055408Z 68 PC: 38a66 | I/O control for devices (Set for = '')
2018-12-17T22:17:03.493076879Z 42 PC: 3a566 | Get date 0x3a566: mov bx, dx
0x3a568: mov word ptr [bp - 2], cx
0x3a56b: mov ah, 0x2c
0x3a56d: int 0x21
0x3a56f: xor ah, ah
0x3a571: mov al, dh
0x3a573: push ax
0x3a574: mov al, cl
0x3a576: push ax
0x3a577: mov al, ch
0x3a579: push ax
0x3a57a: push ax
0x3a57b: mov ah, 0x2a
0x3a57d: int 0x21
0x3a57f: cmp bx, dx
0x3a581: pop ax
0x3a582: je 0x3a58d
0x3a584: cmp al, 0x17
0x3a586: jne 0x3a58d
0x3a588: mov dx, bx
2018-12-17T22:17:03.495366771Z 44 PC: 3a56f | Get time 0x3a56f: xor ah, ah
0x3a571: mov al, dh
0x3a573: push ax
0x3a574: mov al, cl
0x3a576: push ax
0x3a577: mov al, ch
0x3a579: push ax
0x3a57a: push ax
0x3a57b: mov ah, 0x2a
0x3a57d: int 0x21
0x3a57f: cmp bx, dx
0x3a581: pop ax
0x3a582: je 0x3a58d
0x3a584: cmp al, 0x17
0x3a586: jne 0x3a58d
0x3a588: mov dx, bx
0x3a58a: mov cx, word ptr [bp - 2]
0x3a58d: xor ah, ah
0x3a58f: mov al, dl
0x3a591: push ax
2018-12-17T22:17:03.497314243Z 42 PC: 3a57f | Get date 0x3a57f: cmp bx, dx
0x3a581: pop ax
0x3a582: je 0x3a58d
0x3a584: cmp al, 0x17
0x3a586: jne 0x3a58d
0x3a588: mov dx, bx
0x3a58a: mov cx, word ptr [bp - 2]
0x3a58d: xor ah, ah
0x3a58f: mov al, dl
0x3a591: push ax
0x3a592: mov al, dh
0x3a594: push ax
0x3a595: mov ax, cx
0x3a597: sub ax, 0x7bc
0x3a59a: push ax
0x3a59b: call 0x3a738
0x3a59e: add sp, 0xc
0x3a5a1: cmp word ptr [bp + 4], 0
0x3a5a5: je 0x3a5af
0x3a5a7: mov bx, word ptr [bp + 4]
2018-12-17T22:17:03.501421425Z 26 PC: 3b0a0 | Set disk transfer address
2018-12-17T22:17:03.502939178Z 78 PC: 3b0af | Find first file
2018-12-17T22:17:03.509741171Z 67 PC: 3b067 | Get or set file attributes
2018-12-17T22:17:03.516100974Z 61 PC: 398d2 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:17:03.522710312Z 68 PC: 39903 | I/O control for devices (Set for = 'A:\TEST.EXE')
2018-12-17T22:17:03.523854196Z 67 PC: 399f8 | Get or set file attributes
2018-12-17T22:17:03.529420414Z 61 PC: 398d2 | Open file (Filename = 'TEST.com')
2018-12-17T22:17:03.535285856Z 60 PC: 399a7 | Create or truncate file
2018-12-17T22:17:03.551282652Z 62 PC: 399be | Close file
2018-12-17T22:17:03.552793717Z 61 PC: 399cd | Open file (Filename = 'TEST.com')
2018-12-17T22:17:03.561692816Z 67 PC: 399f8 | Get or set file attributes
2018-12-17T22:17:03.56754027Z 66 PC: 39894 | Move file pointer
2018-12-17T22:17:03.568916187Z 66 PC: 39894 | Move file pointer
2018-12-17T22:17:03.570372921Z 66 PC: 39894 | Move file pointer
2018-12-17T22:17:03.571923584Z 66 PC: 39894 | Move file pointer
2018-12-17T22:17:03.573441319Z 63 PC: 39a6d | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:03.581867669Z 66 PC: 39894 | Move file pointer
2018-12-17T22:17:03.583613783Z 66 PC: 39894 | Move file pointer
2018-12-17T22:17:03.585361464Z 66 PC: 39894 | Move file pointer
2018-12-17T22:17:03.587450413Z 63 PC: 39a6d | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:03.595397696Z 63 PC: 39a6d | Read file or device (Read 12288 bytes on handle 5)
2018-12-17T22:17:03.603628057Z 63 PC: 39a6d | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:03.607751273Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.615308293Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.623533069Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.631785255Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.639737501Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.648005659Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.656122433Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.664129512Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.672203613Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.679842371Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.687561933Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.695752565Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.703402094Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.710977225Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.719963347Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.728051455Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.735768751Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.744501082Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.752281071Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.760050302Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.772984713Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.781036261Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.788540815Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.797391254Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.805595187Z 64 PC: 39c25 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.814119889Z 62 PC: 3981a | Close file
2018-12-17T22:17:03.817218152Z 64 PC: 39c25 | Write file or device (Write 169 bytes on handle 6)
2018-12-17T22:17:03.821227849Z 62 PC: 3981a | Close file
2018-12-17T22:17:03.831044427Z 41 PC: 3ae41 | Parse filename
2018-12-17T22:17:03.833613141Z 41 PC: 3ae49 | Parse filename
2018-12-17T22:17:03.835028278Z 11 PC: 3ae8b | Get input status
2018-12-17T22:17:03.837560944Z 75 PC: 3ae99 | Execute program
2018-12-17T22:17:03.854784556Z 48 PC: 4b6e4 | Get DOS version
2018-12-17T22:17:03.856016758Z 74 PC: 4b73f | Reallocate memory
2018-12-17T22:17:03.857430911Z 48 PC: 4b798 | Get DOS version
2018-12-17T22:17:03.859698262Z 53 PC: 4b7a0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:03.860903013Z 37 PC: 4b7b2 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:03.862840219Z 68 PC: 4b836 | I/O control for devices (Set for = '')
2018-12-17T22:17:03.865312825Z 68 PC: 4b836 | I/O control for devices (Set for = '')
2018-12-17T22:17:03.866595934Z 68 PC: 4b836 | I/O control for devices (Set for = '')
2018-12-17T22:17:03.867838814Z 68 PC: 4b836 | I/O control for devices (Set for = '')
2018-12-17T22:17:03.869457835Z 68 PC: 4b836 | I/O control for devices (Set for = '')
2018-12-17T22:17:03.872025992Z 42 PC: 4d336 | Get date 0x4d336: mov bx, dx
0x4d338: mov word ptr [bp - 2], cx
0x4d33b: mov ah, 0x2c
0x4d33d: int 0x21
0x4d33f: xor ah, ah
0x4d341: mov al, dh
0x4d343: push ax
0x4d344: mov al, cl
0x4d346: push ax
0x4d347: mov al, ch
0x4d349: push ax
0x4d34a: push ax
0x4d34b: mov ah, 0x2a
0x4d34d: int 0x21
0x4d34f: cmp bx, dx
0x4d351: pop ax
0x4d352: je 0x4d35d
0x4d354: cmp al, 0x17
0x4d356: jne 0x4d35d
0x4d358: mov dx, bx
2018-12-17T22:17:03.874614615Z 44 PC: 4d33f | Get time 0x4d33f: xor ah, ah
0x4d341: mov al, dh
0x4d343: push ax
0x4d344: mov al, cl
0x4d346: push ax
0x4d347: mov al, ch
0x4d349: push ax
0x4d34a: push ax
0x4d34b: mov ah, 0x2a
0x4d34d: int 0x21
0x4d34f: cmp bx, dx
0x4d351: pop ax
0x4d352: je 0x4d35d
0x4d354: cmp al, 0x17
0x4d356: jne 0x4d35d
0x4d358: mov dx, bx
0x4d35a: mov cx, word ptr [bp - 2]
0x4d35d: xor ah, ah
0x4d35f: mov al, dl
0x4d361: push ax
2018-12-17T22:17:03.878584582Z 42 PC: 4d34f | Get date 0x4d34f: cmp bx, dx
0x4d351: pop ax
0x4d352: je 0x4d35d
0x4d354: cmp al, 0x17
0x4d356: jne 0x4d35d
0x4d358: mov dx, bx
0x4d35a: mov cx, word ptr [bp - 2]
0x4d35d: xor ah, ah
0x4d35f: mov al, dl
0x4d361: push ax
0x4d362: mov al, dh
0x4d364: push ax
0x4d365: mov ax, cx
0x4d367: sub ax, 0x7bc
0x4d36a: push ax
0x4d36b: call 0x4d508
0x4d36e: add sp, 0xc
0x4d371: cmp word ptr [bp + 4], 0
0x4d375: je 0x4d37f
0x4d377: mov bx, word ptr [bp + 4]
2018-12-17T22:17:03.883172794Z 26 PC: 4de70 | Set disk transfer address
2018-12-17T22:17:03.884324199Z 78 PC: 4de7f | Find first file
2018-12-17T22:17:03.892195057Z 67 PC: 4de37 | Get or set file attributes
2018-12-17T22:17:03.895792232Z 26 PC: 4de70 | Set disk transfer address
2018-12-17T22:17:03.896703936Z 79 PC: 4de7f | Find next file
2018-12-17T22:17:03.903569946Z 61 PC: 4c6a2 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:17:03.910212223Z 68 PC: 4c6d3 | I/O control for devices (Set for = 'A:\TEST.EXE')
2018-12-17T22:17:03.911568011Z 67 PC: 4c7c8 | Get or set file attributes
2018-12-17T22:17:03.919778764Z 61 PC: 4c6a2 | Open file (Filename = 'TEST.com')
2018-12-17T22:17:03.927458461Z 68 PC: 4c6d3 | I/O control for devices (Set for = 'TEST.com')
2018-12-17T22:17:03.929221669Z 64 PC: 4c6f8 | Write file or device (Write 0 bytes on handle 6)
2018-12-17T22:17:03.938053319Z 67 PC: 4c7c8 | Get or set file attributes
2018-12-17T22:17:03.9444443Z 66 PC: 4c664 | Move file pointer
2018-12-17T22:17:03.946056442Z 66 PC: 4c664 | Move file pointer
2018-12-17T22:17:03.948391464Z 66 PC: 4c664 | Move file pointer
2018-12-17T22:17:03.950534189Z 66 PC: 4c664 | Move file pointer
2018-12-17T22:17:03.952473192Z 63 PC: 4c83d | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:03.957287636Z 66 PC: 4c664 | Move file pointer
2018-12-17T22:17:03.959432112Z 66 PC: 4c664 | Move file pointer
2018-12-17T22:17:03.962304216Z 66 PC: 4c664 | Move file pointer
2018-12-17T22:17:03.964660607Z 63 PC: 4c83d | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:03.972892414Z 63 PC: 4c83d | Read file or device (Read 12288 bytes on handle 5)
2018-12-17T22:17:03.981370601Z 63 PC: 4c83d | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:03.986495469Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:03.995008312Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.003155082Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.011857529Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.019809957Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.02873771Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.03793379Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.046168254Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.054980515Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.073650701Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.088094925Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.096378049Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.104093943Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.11242831Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.121454956Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.129467288Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.137483759Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.145871958Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.153570172Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.161130486Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.170260329Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.178463798Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.18661666Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.195690698Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.204128751Z 64 PC: 4c9f5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.212460217Z 62 PC: 4c5ea | Close file
2018-12-17T22:17:04.215414147Z 64 PC: 4c9f5 | Write file or device (Write 169 bytes on handle 6)
2018-12-17T22:17:04.219122599Z 62 PC: 4c5ea | Close file
2018-12-17T22:17:04.228784196Z 41 PC: 4dc11 | Parse filename
2018-12-17T22:17:04.230654179Z 41 PC: 4dc19 | Parse filename
2018-12-17T22:17:04.231891711Z 11 PC: 4dc5b | Get input status
2018-12-17T22:17:04.233820767Z 75 PC: 4dc69 | Execute program
2018-12-17T22:17:04.244917573Z 48 PC: 5e4b4 | Get DOS version
2018-12-17T22:17:04.246334405Z 74 PC: 5e50f | Reallocate memory
2018-12-17T22:17:04.24967648Z 48 PC: 5e568 | Get DOS version
2018-12-17T22:17:04.25098574Z 53 PC: 5e570 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:04.252323573Z 37 PC: 5e582 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:04.254758023Z 68 PC: 5e606 | I/O control for devices (Set for = '')
2018-12-17T22:17:04.256266848Z 68 PC: 5e606 | I/O control for devices (Set for = '')
2018-12-17T22:17:04.257730333Z 68 PC: 5e606 | I/O control for devices (Set for = '')
2018-12-17T22:17:04.259954162Z 68 PC: 5e606 | I/O control for devices (Set for = '')
2018-12-17T22:17:04.261428038Z 68 PC: 5e606 | I/O control for devices (Set for = '')
2018-12-17T22:17:04.263564079Z 42 PC: 60106 | Get date 0x60106: mov bx, dx
0x60108: mov word ptr [bp - 2], cx
0x6010b: mov ah, 0x2c
0x6010d: int 0x21
0x6010f: xor ah, ah
0x60111: mov al, dh
0x60113: push ax
0x60114: mov al, cl
0x60116: push ax
0x60117: mov al, ch
0x60119: push ax
0x6011a: push ax
0x6011b: mov ah, 0x2a
0x6011d: int 0x21
0x6011f: cmp bx, dx
0x60121: pop ax
0x60122: je 0x6012d
0x60124: cmp al, 0x17
0x60126: jne 0x6012d
0x60128: mov dx, bx
2018-12-17T22:17:04.266891316Z 44 PC: 6010f | Get time 0x6010f: xor ah, ah
0x60111: mov al, dh
0x60113: push ax
0x60114: mov al, cl
0x60116: push ax
0x60117: mov al, ch
0x60119: push ax
0x6011a: push ax
0x6011b: mov ah, 0x2a
0x6011d: int 0x21
0x6011f: cmp bx, dx
0x60121: pop ax
0x60122: je 0x6012d
0x60124: cmp al, 0x17
0x60126: jne 0x6012d
0x60128: mov dx, bx
0x6012a: mov cx, word ptr [bp - 2]
0x6012d: xor ah, ah
0x6012f: mov al, dl
0x60131: push ax
2018-12-17T22:17:04.269755056Z 42 PC: 6011f | Get date 0x6011f: cmp bx, dx
0x60121: pop ax
0x60122: je 0x6012d
0x60124: cmp al, 0x17
0x60126: jne 0x6012d
0x60128: mov dx, bx
0x6012a: mov cx, word ptr [bp - 2]
0x6012d: xor ah, ah
0x6012f: mov al, dl
0x60131: push ax
0x60132: mov al, dh
0x60134: push ax
0x60135: mov ax, cx
0x60137: sub ax, 0x7bc
0x6013a: push ax
0x6013b: call 0x602d8
0x6013e: add sp, 0xc
0x60141: cmp word ptr [bp + 4], 0
0x60145: je 0x6014f
0x60147: mov bx, word ptr [bp + 4]
2018-12-17T22:17:04.274495239Z 26 PC: 60c40 | Set disk transfer address
2018-12-17T22:17:04.277269808Z 78 PC: 60c4f | Find first file
2018-12-17T22:17:04.28446336Z 67 PC: 60c07 | Get or set file attributes
2018-12-17T22:17:04.290439438Z 26 PC: 60c40 | Set disk transfer address
2018-12-17T22:17:04.292878373Z 79 PC: 60c4f | Find next file
2018-12-17T22:17:04.297115024Z 61 PC: 5f472 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:17:04.304217319Z 68 PC: 5f4a3 | I/O control for devices (Set for = 'A:\TEST.EXE')
2018-12-17T22:17:04.306973835Z 67 PC: 5f598 | Get or set file attributes
2018-12-17T22:17:04.31342696Z 61 PC: 5f472 | Open file (Filename = 'TEST.com')
2018-12-17T22:17:04.320435874Z 68 PC: 5f4a3 | I/O control for devices (Set for = 'TEST.com')
2018-12-17T22:17:04.322848496Z 64 PC: 5f4c8 | Write file or device (Write 0 bytes on handle 6)
2018-12-17T22:17:04.332058383Z 67 PC: 5f598 | Get or set file attributes
2018-12-17T22:17:04.338850953Z 66 PC: 5f434 | Move file pointer
2018-12-17T22:17:04.341417622Z 66 PC: 5f434 | Move file pointer
2018-12-17T22:17:04.343300017Z 66 PC: 5f434 | Move file pointer
2018-12-17T22:17:04.345437628Z 66 PC: 5f434 | Move file pointer
2018-12-17T22:17:04.347952689Z 63 PC: 5f60d | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:04.351400158Z 66 PC: 5f434 | Move file pointer
2018-12-17T22:17:04.354377827Z 66 PC: 5f434 | Move file pointer
2018-12-17T22:17:04.356780739Z 66 PC: 5f434 | Move file pointer
2018-12-17T22:17:04.358451604Z 63 PC: 5f60d | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:04.366951243Z 63 PC: 5f60d | Read file or device (Read 12288 bytes on handle 5)
2018-12-17T22:17:04.374758225Z 63 PC: 5f60d | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:04.379844709Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.389605215Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.39795898Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.406619012Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.415904494Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.424470213Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.432758966Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.442321613Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.450482099Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.458532944Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.468967195Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.477021327Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.4852304Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.493946145Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.502136257Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.511108879Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.519383394Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.527726052Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.533354528Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.538423224Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.543468238Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.549009822Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.554097137Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.559394378Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.568436219Z 64 PC: 5f7c5 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.577125045Z 62 PC: 5f3ba | Close file
2018-12-17T22:17:04.580080698Z 64 PC: 5f7c5 | Write file or device (Write 169 bytes on handle 6)
2018-12-17T22:17:04.584873118Z 62 PC: 5f3ba | Close file
2018-12-17T22:17:04.59564651Z 41 PC: 609e1 | Parse filename
2018-12-17T22:17:04.598199902Z 41 PC: 609e9 | Parse filename
2018-12-17T22:17:04.599729281Z 11 PC: 60a2b | Get input status
2018-12-17T22:17:04.602258452Z 75 PC: 60a39 | Execute program
2018-12-17T22:17:04.618213568Z 48 PC: 71284 | Get DOS version
2018-12-17T22:17:04.619588607Z 74 PC: 712df | Reallocate memory
2018-12-17T22:17:04.621117837Z 48 PC: 71338 | Get DOS version
2018-12-17T22:17:04.623324488Z 53 PC: 71340 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:04.624580916Z 37 PC: 71352 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:04.625976169Z 68 PC: 713d6 | I/O control for devices (Set for = '')
2018-12-17T22:17:04.628209788Z 68 PC: 713d6 | I/O control for devices (Set for = '')
2018-12-17T22:17:04.629587411Z 68 PC: 713d6 | I/O control for devices (Set for = '')
2018-12-17T22:17:04.63120127Z 68 PC: 713d6 | I/O control for devices (Set for = '')
2018-12-17T22:17:04.633374543Z 68 PC: 713d6 | I/O control for devices (Set for = '')
2018-12-17T22:17:04.635429229Z 42 PC: 72ed6 | Get date 0x72ed6: mov bx, dx
0x72ed8: mov word ptr [bp - 2], cx
0x72edb: mov ah, 0x2c
0x72edd: int 0x21
0x72edf: xor ah, ah
0x72ee1: mov al, dh
0x72ee3: push ax
0x72ee4: mov al, cl
0x72ee6: push ax
0x72ee7: mov al, ch
0x72ee9: push ax
0x72eea: push ax
0x72eeb: mov ah, 0x2a
0x72eed: int 0x21
0x72eef: cmp bx, dx
0x72ef1: pop ax
0x72ef2: je 0x72efd
0x72ef4: cmp al, 0x17
0x72ef6: jne 0x72efd
0x72ef8: mov dx, bx
2018-12-17T22:17:04.638644152Z 44 PC: 72edf | Get time 0x72edf: xor ah, ah
0x72ee1: mov al, dh
0x72ee3: push ax
0x72ee4: mov al, cl
0x72ee6: push ax
0x72ee7: mov al, ch
0x72ee9: push ax
0x72eea: push ax
0x72eeb: mov ah, 0x2a
0x72eed: int 0x21
0x72eef: cmp bx, dx
0x72ef1: pop ax
0x72ef2: je 0x72efd
0x72ef4: cmp al, 0x17
0x72ef6: jne 0x72efd
0x72ef8: mov dx, bx
0x72efa: mov cx, word ptr [bp - 2]
0x72efd: xor ah, ah
0x72eff: mov al, dl
0x72f01: push ax
2018-12-17T22:17:04.64086029Z 42 PC: 72eef | Get date 0x72eef: cmp bx, dx
0x72ef1: pop ax
0x72ef2: je 0x72efd
0x72ef4: cmp al, 0x17
0x72ef6: jne 0x72efd
0x72ef8: mov dx, bx
0x72efa: mov cx, word ptr [bp - 2]
0x72efd: xor ah, ah
0x72eff: mov al, dl
0x72f01: push ax
0x72f02: mov al, dh
0x72f04: push ax
0x72f05: mov ax, cx
0x72f07: sub ax, 0x7bc
0x72f0a: push ax
0x72f0b: call 0x730a8
0x72f0e: add sp, 0xc
0x72f11: cmp word ptr [bp + 4], 0
0x72f15: je 0x72f1f
0x72f17: mov bx, word ptr [bp + 4]
2018-12-17T22:17:04.645397824Z 26 PC: 73a10 | Set disk transfer address
2018-12-17T22:17:04.64690064Z 78 PC: 73a1f | Find first file
2018-12-17T22:17:04.653152266Z 67 PC: 739d7 | Get or set file attributes
2018-12-17T22:17:04.659165627Z 26 PC: 73a10 | Set disk transfer address
2018-12-17T22:17:04.661436478Z 79 PC: 73a1f | Find next file
2018-12-17T22:17:04.664997233Z 61 PC: 72242 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:17:04.67253307Z 68 PC: 72273 | I/O control for devices (Set for = 'A:\TEST.EXE')
2018-12-17T22:17:04.675248751Z 67 PC: 72368 | Get or set file attributes
2018-12-17T22:17:04.681486079Z 61 PC: 72242 | Open file (Filename = 'TEST.com')
2018-12-17T22:17:04.688202073Z 68 PC: 72273 | I/O control for devices (Set for = 'TEST.com')
2018-12-17T22:17:04.690327497Z 64 PC: 72298 | Write file or device (Write 0 bytes on handle 6)
2018-12-17T22:17:04.697767454Z 67 PC: 72368 | Get or set file attributes
2018-12-17T22:17:04.704035579Z 66 PC: 72204 | Move file pointer
2018-12-17T22:17:04.70647182Z 66 PC: 72204 | Move file pointer
2018-12-17T22:17:04.708069782Z 66 PC: 72204 | Move file pointer
2018-12-17T22:17:04.710859371Z 66 PC: 72204 | Move file pointer
2018-12-17T22:17:04.712247557Z 63 PC: 723dd | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:04.715215681Z 66 PC: 72204 | Move file pointer
2018-12-17T22:17:04.717940455Z 66 PC: 72204 | Move file pointer
2018-12-17T22:17:04.719600996Z 66 PC: 72204 | Move file pointer
2018-12-17T22:17:04.720984239Z 63 PC: 723dd | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:04.729158957Z 63 PC: 723dd | Read file or device (Read 12288 bytes on handle 5)
2018-12-17T22:17:04.73612717Z 63 PC: 723dd | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:04.740375821Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.748853677Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.756644377Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.7646118Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.77330754Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.781621658Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.7907533Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.799106472Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.807701251Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.816550518Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.825162136Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.833070335Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.841864865Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.850272426Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.858235249Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.86741237Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.875828737Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.883852095Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.892633675Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.900461061Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.908833584Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.917476852Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.925192562Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.93405518Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.94248363Z 64 PC: 72595 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:04.950662079Z 62 PC: 7218a | Close file
2018-12-17T22:17:04.953798186Z 64 PC: 72595 | Write file or device (Write 169 bytes on handle 6)
2018-12-17T22:17:04.958186134Z 62 PC: 7218a | Close file
2018-12-17T22:17:04.968203662Z 41 PC: 737b1 | Parse filename
2018-12-17T22:17:04.970623221Z 41 PC: 737b9 | Parse filename
2018-12-17T22:17:04.972628466Z 11 PC: 737fb | Get input status
2018-12-17T22:17:04.975359416Z 75 PC: 73809 | Execute program
2018-12-17T22:17:04.992748776Z 48 PC: 84054 | Get DOS version
2018-12-17T22:17:04.994363955Z 74 PC: 840af | Reallocate memory
2018-12-17T22:17:04.995874609Z 48 PC: 84108 | Get DOS version
2018-12-17T22:17:04.997872957Z 53 PC: 84110 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:04.99911434Z 37 PC: 84122 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:05.000474029Z 68 PC: 841a6 | I/O control for devices (Set for = '')
2018-12-17T22:17:05.002927554Z 68 PC: 841a6 | I/O control for devices (Set for = '/F')
2018-12-17T22:17:05.004347774Z 68 PC: 841a6 | I/O control for devices (Set for = '�Xt��p')
2018-12-17T22:17:05.005780952Z 68 PC: 841a6 | I/O control for devices (Set for = '������  Internal stack overflow System halted $�')
2018-12-17T22:17:05.008956233Z 68 PC: 841a6 | I/O control for devices (Set for = '������  Internal stack overflow System halted $�')
2018-12-17T22:17:05.01100012Z 42 PC: 85ca6 | Get date 0x85ca6: mov bx, dx
0x85ca8: mov word ptr [bp - 2], cx
0x85cab: mov ah, 0x2c
0x85cad: int 0x21
0x85caf: xor ah, ah
0x85cb1: mov al, dh
0x85cb3: push ax
0x85cb4: mov al, cl
0x85cb6: push ax
0x85cb7: mov al, ch
0x85cb9: push ax
0x85cba: push ax
0x85cbb: mov ah, 0x2a
0x85cbd: int 0x21
0x85cbf: cmp bx, dx
0x85cc1: pop ax
0x85cc2: je 0x85ccd
0x85cc4: cmp al, 0x17
0x85cc6: jne 0x85ccd
0x85cc8: mov dx, bx
2018-12-17T22:17:05.013215581Z 44 PC: 85caf | Get time 0x85caf: xor ah, ah
0x85cb1: mov al, dh
0x85cb3: push ax
0x85cb4: mov al, cl
0x85cb6: push ax
0x85cb7: mov al, ch
0x85cb9: push ax
0x85cba: push ax
0x85cbb: mov ah, 0x2a
0x85cbd: int 0x21
0x85cbf: cmp bx, dx
0x85cc1: pop ax
0x85cc2: je 0x85ccd
0x85cc4: cmp al, 0x17
0x85cc6: jne 0x85ccd
0x85cc8: mov dx, bx
0x85cca: mov cx, word ptr [bp - 2]
0x85ccd: xor ah, ah
0x85ccf: mov al, dl
0x85cd1: push ax
2018-12-17T22:17:05.016236552Z 42 PC: 85cbf | Get date 0x85cbf: cmp bx, dx
0x85cc1: pop ax
0x85cc2: je 0x85ccd
0x85cc4: cmp al, 0x17
0x85cc6: jne 0x85ccd
0x85cc8: mov dx, bx
0x85cca: mov cx, word ptr [bp - 2]
0x85ccd: xor ah, ah
0x85ccf: mov al, dl
0x85cd1: push ax
0x85cd2: mov al, dh
0x85cd4: push ax
0x85cd5: mov ax, cx
0x85cd7: sub ax, 0x7bc
0x85cda: push ax
0x85cdb: call 0x85e78
0x85cde: add sp, 0xc
0x85ce1: cmp word ptr [bp + 4], 0
0x85ce5: je 0x85cef
0x85ce7: mov bx, word ptr [bp + 4]
2018-12-17T22:17:05.020948029Z 26 PC: 867e0 | Set disk transfer address
2018-12-17T22:17:05.022558057Z 78 PC: 867ef | Find first file
2018-12-17T22:17:05.03010051Z 67 PC: 867a7 | Get or set file attributes
2018-12-17T22:17:05.036427422Z 26 PC: 867e0 | Set disk transfer address
2018-12-17T22:17:05.038164309Z 79 PC: 867ef | Find next file
2018-12-17T22:17:05.041080542Z 61 PC: 85012 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:17:05.047846172Z 68 PC: 85043 | I/O control for devices (Set for = 'A:\TEST.EXE')
2018-12-17T22:17:05.050096508Z 67 PC: 85138 | Get or set file attributes
2018-12-17T22:17:05.056719007Z 61 PC: 85012 | Open file (Filename = 'TEST.com')
2018-12-17T22:17:05.064084733Z 68 PC: 85043 | I/O control for devices (Set for = 'TEST.com')
2018-12-17T22:17:05.066054958Z 64 PC: 85068 | Write file or device (Write 0 bytes on handle 6)
2018-12-17T22:17:05.074039468Z 67 PC: 85138 | Get or set file attributes
2018-12-17T22:17:05.080982661Z 66 PC: 84fd4 | Move file pointer
2018-12-17T22:17:05.083131606Z 66 PC: 84fd4 | Move file pointer
2018-12-17T22:17:05.08464907Z 66 PC: 84fd4 | Move file pointer
2018-12-17T22:17:05.087172902Z 66 PC: 84fd4 | Move file pointer
2018-12-17T22:17:05.088651846Z 63 PC: 851ad | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:05.091752183Z 66 PC: 84fd4 | Move file pointer
2018-12-17T22:17:05.094502104Z 66 PC: 84fd4 | Move file pointer
2018-12-17T22:17:05.096270322Z 66 PC: 84fd4 | Move file pointer
2018-12-17T22:17:05.09777598Z 63 PC: 851ad | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:05.106094339Z 63 PC: 851ad | Read file or device (Read 12288 bytes on handle 5)
2018-12-17T22:17:05.113220295Z 63 PC: 851ad | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:05.117879208Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.126896626Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.13475326Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.143177112Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.153183961Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.16114054Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.16897169Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.17834215Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.186194494Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.195033203Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.203417822Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.211561803Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.220775367Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.229607262Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.237919868Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.246730238Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.255303214Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.263934054Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.27302164Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.282655864Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.296390695Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.308558798Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.316831088Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.342632863Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.350722601Z 64 PC: 85365 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.359201947Z 62 PC: 84f5a | Close file
2018-12-17T22:17:05.362271451Z 64 PC: 85365 | Write file or device (Write 169 bytes on handle 6)
2018-12-17T22:17:05.366267621Z 62 PC: 84f5a | Close file
2018-12-17T22:17:05.376266881Z 41 PC: 86581 | Parse filename
2018-12-17T22:17:05.37847357Z 41 PC: 86589 | Parse filename
2018-12-17T22:17:05.37994964Z 11 PC: 865cb | Get input status
2018-12-17T22:17:05.382432604Z 75 PC: 865d9 | Execute program
2018-12-17T22:17:05.400640392Z 48 PC: 96e24 | Get DOS version
2018-12-17T22:17:05.40181236Z 74 PC: 96e7f | Reallocate memory
2018-12-17T22:17:05.403215569Z 48 PC: 96ed8 | Get DOS version
2018-12-17T22:17:05.405154724Z 53 PC: 96ee0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:05.406299402Z 37 PC: 96ef2 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:05.407726789Z 68 PC: 96f76 | I/O control for devices (Set for = '')
2018-12-17T22:17:05.409448753Z 68 PC: 96f76 | I/O control for devices
2018-12-17T22:17:05.410693121Z 68 PC: 96f76 | I/O control for devices
2018-12-17T22:17:05.4126658Z 68 PC: 96f76 | I/O control for devices
2018-12-17T22:17:05.4140214Z 68 PC: 96f76 | I/O control for devices
2018-12-17T22:17:05.415914556Z 42 PC: 98a76 | Get date 0x98a76: mov bx, dx
0x98a78: mov word ptr [bp - 2], cx
0x98a7b: mov ah, 0x2c
0x98a7d: int 0x21
0x98a7f: xor ah, ah
0x98a81: mov al, dh
0x98a83: push ax
0x98a84: mov al, cl
0x98a86: push ax
0x98a87: mov al, ch
0x98a89: push ax
0x98a8a: push ax
0x98a8b: mov ah, 0x2a
0x98a8d: int 0x21
0x98a8f: cmp bx, dx
0x98a91: pop ax
0x98a92: je 0x98a9d
0x98a94: cmp al, 0x17
0x98a96: jne 0x98a9d
0x98a98: mov dx, bx
2018-12-17T22:17:05.420013057Z 44 PC: 98a7f | Get time 0x98a7f: xor ah, ah
0x98a81: mov al, dh
0x98a83: push ax
0x98a84: mov al, cl
0x98a86: push ax
0x98a87: mov al, ch
0x98a89: push ax
0x98a8a: push ax
0x98a8b: mov ah, 0x2a
0x98a8d: int 0x21
0x98a8f: cmp bx, dx
0x98a91: pop ax
0x98a92: je 0x98a9d
0x98a94: cmp al, 0x17
0x98a96: jne 0x98a9d
0x98a98: mov dx, bx
0x98a9a: mov cx, word ptr [bp - 2]
0x98a9d: xor ah, ah
0x98a9f: mov al, dl
0x98aa1: push ax
2018-12-17T22:17:05.421955438Z 42 PC: 98a8f | Get date 0x98a8f: cmp bx, dx
0x98a91: pop ax
0x98a92: je 0x98a9d
0x98a94: cmp al, 0x17
0x98a96: jne 0x98a9d
0x98a98: mov dx, bx
0x98a9a: mov cx, word ptr [bp - 2]
0x98a9d: xor ah, ah
0x98a9f: mov al, dl
0x98aa1: push ax
0x98aa2: mov al, dh
0x98aa4: push ax
0x98aa5: mov ax, cx
0x98aa7: sub ax, 0x7bc
0x98aaa: push ax
0x98aab: call 0x98c48
0x98aae: add sp, 0xc
0x98ab1: cmp word ptr [bp + 4], 0
0x98ab5: je 0x98abf
0x98ab7: mov bx, word ptr [bp + 4]
2018-12-17T22:17:05.426424257Z 26 PC: 995b0 | Set disk transfer address
2018-12-17T22:17:05.427875359Z 78 PC: 995bf | Find first file
2018-12-17T22:17:05.433999295Z 67 PC: 99577 | Get or set file attributes
2018-12-17T22:17:05.443314331Z 26 PC: 995b0 | Set disk transfer address
2018-12-17T22:17:05.444573918Z 79 PC: 995bf | Find next file
2018-12-17T22:17:05.447730365Z 61 PC: 97de2 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:17:05.456159372Z 68 PC: 97e13 | I/O control for devices (Set for = 'A:\TEST.EXE')
2018-12-17T22:17:05.458166363Z 67 PC: 97f08 | Get or set file attributes
2018-12-17T22:17:05.464767434Z 61 PC: 97de2 | Open file (Filename = 'TEST.com')
2018-12-17T22:17:05.471475874Z 68 PC: 97e13 | I/O control for devices (Set for = 'TEST.com')
2018-12-17T22:17:05.472736551Z 64 PC: 97e38 | Write file or device (Write 0 bytes on handle 6)
2018-12-17T22:17:05.481252917Z 67 PC: 97f08 | Get or set file attributes
2018-12-17T22:17:05.487389968Z 66 PC: 97da4 | Move file pointer
2018-12-17T22:17:05.488774899Z 66 PC: 97da4 | Move file pointer
2018-12-17T22:17:05.490697023Z 66 PC: 97da4 | Move file pointer
2018-12-17T22:17:05.492240346Z 66 PC: 97da4 | Move file pointer
2018-12-17T22:17:05.49470071Z 63 PC: 97f7d | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:05.497611744Z 66 PC: 97da4 | Move file pointer
2018-12-17T22:17:05.499096215Z 66 PC: 97da4 | Move file pointer
2018-12-17T22:17:05.501498775Z 66 PC: 97da4 | Move file pointer
2018-12-17T22:17:05.502784396Z 63 PC: 97f7d | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:05.510329288Z 63 PC: 97f7d | Read file or device (Read 12288 bytes on handle 5)
2018-12-17T22:17:05.517819585Z 63 PC: 97f7d | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:17:05.521672531Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.529871976Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.538681404Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.546796087Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.555455509Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.563149939Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.570781661Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.578874911Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.586574123Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.594256281Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.602190049Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.607477107Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.612774757Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.617720455Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.62323162Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.62865755Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.634180286Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.640568179Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.648937065Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.656636404Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.664732859Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.672736827Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.680490836Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.688789306Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.696444652Z 64 PC: 98135 | Write file or device (Write 512 bytes on handle 6)
2018-12-17T22:17:05.704506538Z 62 PC: 97d2a | Close file
2018-12-17T22:17:05.706600034Z 64 PC: 98135 | Write file or device (Write 169 bytes on handle 6)
2018-12-17T22:17:05.710370566Z 62 PC: 97d2a | Close file
2018-12-17T22:17:05.720445071Z 41 PC: 99351 | Parse filename
2018-12-17T22:17:05.721823153Z 41 PC: 99359 | Parse filename
2018-12-17T22:17:05.723180534Z 11 PC: 9939b | Get input status
2018-12-17T22:17:05.726088459Z 75 PC: 993a9 | Execute program
2018-12-17T22:17:05.733600741Z 48 PC: 993b0 | Get DOS version
2018-12-17T22:17:05.736805403Z 64 PC: 980e4 | Write file or device (Write 12 bytes on handle 2)
2018-12-17T22:17:05.742444613Z 65 PC: 99596 | Delete file (Filename = 'A:\TEST.EXE')
2018-12-17T22:17:05.753640691Z 37 PC: 9700b | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:05.756357267Z 76 PC: 96ff4 | Terminate with return code (Return code = '255')
2018-12-17T22:17:05.759537118Z 48 PC: 865e0 | Get DOS version
2018-12-17T22:17:05.761188928Z 77 PC: 8661a | Get program return code
2018-12-17T22:17:05.763256605Z 37 PC: 8423b | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:05.764186482Z 76 PC: 84224 | Terminate with return code (Return code = '255')
2018-12-17T22:17:05.767277998Z 48 PC: 73810 | Get DOS version
2018-12-17T22:17:05.768507931Z 77 PC: 7384a | Get program return code
2018-12-17T22:17:05.770579216Z 37 PC: 7146b | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:05.772212966Z 76 PC: 71454 | Terminate with return code (Return code = '255')
2018-12-17T22:17:05.775163099Z 48 PC: 60a40 | Get DOS version
2018-12-17T22:17:05.77760797Z 77 PC: 60a7a | Get program return code
2018-12-17T22:17:05.779512218Z 37 PC: 5e69b | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:05.780837138Z 76 PC: 5e684 | Terminate with return code (Return code = '255')
2018-12-17T22:17:05.784627905Z 48 PC: 4dc70 | Get DOS version
2018-12-17T22:17:05.785992553Z 77 PC: 4dcaa | Get program return code
2018-12-17T22:17:05.791084909Z 37 PC: 4b8cb | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:05.792399647Z 76 PC: 4b8b4 | Terminate with return code (Return code = '255')
2018-12-17T22:17:05.796018736Z 48 PC: 3aea0 | Get DOS version
2018-12-17T22:17:05.805430563Z 77 PC: 3aeda | Get program return code
2018-12-17T22:17:05.807293942Z 37 PC: 38afb | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:05.809102757Z 76 PC: 38ae4 | Terminate with return code (Return code = '255')
2018-12-17T22:17:05.81207605Z 48 PC: 280d0 | Get DOS version
2018-12-17T22:17:05.813377267Z 77 PC: 2810a | Get program return code
2018-12-17T22:17:05.817991009Z 37 PC: 25d2b | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:05.819224233Z 76 PC: 25d14 | Terminate with return code (Return code = '255')
2018-12-17T22:17:05.823196234Z 48 PC: 15300 | Get DOS version
2018-12-17T22:17:05.824381463Z 77 PC: 1533a | Get program return code
2018-12-17T22:17:05.825939254Z 37 PC: 12f5b | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:17:05.827938008Z 76 PC: 12f44 | Terminate with return code (Return code = '255')