Sample viewer

vx.netlux.org/Virus.DOS.Cowboy.2483

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:58:23.147528153Z 48 PC: 12f6b | Get DOS version
2018-12-17T21:58:23.149188109Z 53 PC: 12fc2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:58:23.15717479Z 37 PC: 12fd3 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:58:23.158248379Z 53 PC: 12fdf | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:58:23.159755453Z 37 PC: 12ff0 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:58:23.161691985Z 71 PC: 13002 | Get current directory
2018-12-17T21:58:23.163838658Z 26 PC: 13011 | Set disk transfer address
2018-12-17T21:58:23.164805238Z 78 PC: 13024 | Find first file
2018-12-17T21:58:23.174075741Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:23.179085251Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:23.192573025Z 61 PC: 1323d | Open file (Filename = 'SLEEP.COM')
2018-12-17T21:58:23.201275115Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:23.203831298Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:23.212135596Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:23.214827334Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:23.218324016Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:23.220472674Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:23.223578978Z 66 PC: 132f2 | Move file pointer
2018-12-17T21:58:23.226277735Z 64 PC: 13308 | Write file or device (Write 2483 bytes on handle 5)
2018-12-17T21:58:23.23557183Z 66 PC: 13319 | Move file pointer
2018-12-17T21:58:23.237206386Z 63 PC: 13329 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:23.256856979Z 66 PC: 13337 | Move file pointer
2018-12-17T21:58:23.258669976Z 64 PC: 13347 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:58:23.267041809Z 66 PC: 13355 | Move file pointer
2018-12-17T21:58:23.273681529Z 64 PC: 13365 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:58:23.277030462Z 87 PC: 13377 | Get or set file date and time
2018-12-17T21:58:23.278780592Z 62 PC: 13380 | Close file
2018-12-17T21:58:23.301566948Z 67 PC: 13392 | Get or set file attributes
2018-12-17T21:58:23.312688303Z 79 PC: 13066 | Find next file
2018-12-17T21:58:23.328564543Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:23.339539361Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:23.349934589Z 61 PC: 1323d | Open file (Filename = 'PRINT.COM')
2018-12-17T21:58:23.359178673Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:23.361984882Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:23.369639414Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:23.371378645Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:23.374986155Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:23.376660507Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:23.378807015Z 62 PC: 132a5 | Close file
2018-12-17T21:58:23.382354437Z 67 PC: 132b7 | Get or set file attributes
2018-12-17T21:58:23.394225149Z 79 PC: 13066 | Find next file
2018-12-17T21:58:23.398595934Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:23.40592696Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:23.417616645Z 61 PC: 1323d | Open file (Filename = 'HELLO.COM')
2018-12-17T21:58:23.425119115Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:23.427525254Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:23.434209496Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:23.436305937Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:23.439845603Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:23.441605997Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:23.443384676Z 62 PC: 132a5 | Close file
2018-12-17T21:58:23.445907952Z 67 PC: 132b7 | Get or set file attributes
2018-12-17T21:58:23.457002051Z 79 PC: 13066 | Find next file
2018-12-17T21:58:23.460252857Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:23.46890539Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:23.480173575Z 61 PC: 1323d | Open file (Filename = 'PHANG.COM')
2018-12-17T21:58:23.48779268Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:23.489838538Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:23.498926166Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:23.500871707Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:23.503869955Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:23.506744654Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:23.508413805Z 62 PC: 132a5 | Close file
2018-12-17T21:58:23.510666278Z 67 PC: 132b7 | Get or set file attributes
2018-12-17T21:58:23.522163727Z 79 PC: 13066 | Find next file
2018-12-17T21:58:23.525281495Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:23.531688132Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:23.54296761Z 61 PC: 1323d | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T21:58:23.553663711Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:23.555108175Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:23.563045107Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:23.564556907Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:23.567175694Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:23.569032778Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:23.570336435Z 62 PC: 132a5 | Close file
2018-12-17T21:58:23.572169821Z 67 PC: 132b7 | Get or set file attributes
2018-12-17T21:58:23.582547901Z 79 PC: 13066 | Find next file
2018-12-17T21:58:23.585574631Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:23.591399854Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:23.602827933Z 61 PC: 1323d | Open file (Filename = 'MANDEL.COM')
2018-12-17T21:58:23.609970546Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:23.611658832Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:23.619348559Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:23.621339287Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:23.624074467Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:23.626204934Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:23.62874691Z 66 PC: 132f2 | Move file pointer
2018-12-17T21:58:23.63062545Z 64 PC: 13308 | Write file or device (Write 2483 bytes on handle 5)
2018-12-17T21:58:23.639732404Z 66 PC: 13319 | Move file pointer
2018-12-17T21:58:23.642312752Z 63 PC: 13329 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:23.648822775Z 66 PC: 13337 | Move file pointer
2018-12-17T21:58:23.650527591Z 64 PC: 13347 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:58:23.654425815Z 66 PC: 13355 | Move file pointer
2018-12-17T21:58:23.656054175Z 64 PC: 13365 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:58:23.659095082Z 87 PC: 13377 | Get or set file date and time
2018-12-17T21:58:23.661074751Z 62 PC: 13380 | Close file
2018-12-17T21:58:23.66889223Z 67 PC: 13392 | Get or set file attributes
2018-12-17T21:58:23.679724565Z 79 PC: 13066 | Find next file
2018-12-17T21:58:23.683045876Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:23.688558704Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:23.698150777Z 61 PC: 1323d | Open file (Filename = 'PAH.COM')
2018-12-17T21:58:23.705429193Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:23.707081857Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:23.713917629Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:23.715811607Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:23.718382099Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:23.719974097Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:23.722528855Z 62 PC: 132a5 | Close file
2018-12-17T21:58:23.724572721Z 67 PC: 132b7 | Get or set file attributes
2018-12-17T21:58:23.734587141Z 79 PC: 13066 | Find next file
2018-12-17T21:58:23.738735097Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:23.744516862Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:23.754322291Z 61 PC: 1323d | Open file (Filename = 'TEST.COM')
2018-12-17T21:58:23.761819495Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:23.763476349Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:23.766314165Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:23.768564162Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:23.771263793Z 62 PC: 132a5 | Close file
2018-12-17T21:58:23.773312648Z 67 PC: 132b7 | Get or set file attributes
2018-12-17T21:58:23.784096835Z 79 PC: 13066 | Find next file
2018-12-17T21:58:23.786746745Z 59 PC: 13076 | Change current directory
2018-12-17T21:58:23.790987287Z 59 PC: 13094 | Change current directory
2018-12-17T21:58:23.795986577Z 78 PC: 13024 | Find first file
2018-12-17T21:58:23.819143705Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:23.824317249Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:23.834441695Z 61 PC: 1323d | Open file (Filename = 'SLEEP.COM')
2018-12-17T21:58:23.841596937Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:23.843358612Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:23.850822171Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:23.852465872Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:23.855203324Z 62 PC: 132a5 | Close file
2018-12-17T21:58:23.858274783Z 67 PC: 132b7 | Get or set file attributes
2018-12-17T21:58:23.869149834Z 79 PC: 13066 | Find next file
2018-12-17T21:58:23.872314752Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:23.879020463Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:23.889508392Z 61 PC: 1323d | Open file (Filename = 'PRINT.COM')
2018-12-17T21:58:23.896832395Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:23.899451892Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:23.906529606Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:23.908202477Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:23.91199608Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:23.913533093Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:23.915283516Z 62 PC: 132a5 | Close file
2018-12-17T21:58:23.918338291Z 67 PC: 132b7 | Get or set file attributes
2018-12-17T21:58:23.928557411Z 79 PC: 13066 | Find next file
2018-12-17T21:58:23.931583015Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:23.93827567Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:23.947291312Z 61 PC: 1323d | Open file (Filename = 'HELLO.COM')
2018-12-17T21:58:23.951889012Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:23.953630258Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:23.958045236Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:23.959738599Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:23.963787292Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:23.9653389Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:23.966836323Z 62 PC: 132a5 | Close file
2018-12-17T21:58:23.969484833Z 67 PC: 132b7 | Get or set file attributes
2018-12-17T21:58:23.980102333Z 79 PC: 13066 | Find next file
2018-12-17T21:58:23.983393347Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:23.99036101Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:24.000692604Z 61 PC: 1323d | Open file (Filename = 'PHANG.COM')
2018-12-17T21:58:24.008561782Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:24.011664556Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:24.018445973Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:24.020271524Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:24.024454462Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:24.026325672Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:24.0280558Z 62 PC: 132a5 | Close file
2018-12-17T21:58:24.030298848Z 67 PC: 132b7 | Get or set file attributes
2018-12-17T21:58:24.042814268Z 79 PC: 13066 | Find next file
2018-12-17T21:58:24.046140426Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:24.05194175Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:24.062567344Z 61 PC: 1323d | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T21:58:24.069080678Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:24.071159625Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:24.078500833Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:24.079836808Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:24.082269931Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:24.084785448Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:24.086487022Z 62 PC: 132a5 | Close file
2018-12-17T21:58:24.088514686Z 67 PC: 132b7 | Get or set file attributes
2018-12-17T21:58:24.099588952Z 79 PC: 13066 | Find next file
2018-12-17T21:58:24.102640763Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:24.109160732Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:24.121514765Z 61 PC: 1323d | Open file (Filename = 'MANDEL.COM')
2018-12-17T21:58:24.130792017Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:24.132210876Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:24.142077462Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:24.143715445Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:24.15079373Z 62 PC: 132a5 | Close file
2018-12-17T21:58:24.153427791Z 67 PC: 132b7 | Get or set file attributes
2018-12-17T21:58:24.163372815Z 79 PC: 13066 | Find next file
2018-12-17T21:58:24.166215411Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:24.172112798Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:24.182565752Z 61 PC: 1323d | Open file (Filename = 'PAH.COM')
2018-12-17T21:58:24.1896678Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:24.192179274Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:24.198946715Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:24.20022327Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:24.20332387Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:24.205064251Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:24.206717631Z 62 PC: 132a5 | Close file
2018-12-17T21:58:24.209566868Z 67 PC: 132b7 | Get or set file attributes
2018-12-17T21:58:24.220345874Z 79 PC: 13066 | Find next file
2018-12-17T21:58:24.223401002Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:24.230045716Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:24.240320393Z 61 PC: 1323d | Open file (Filename = 'TEST.COM')
2018-12-17T21:58:24.247108115Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:24.24961289Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:24.256490205Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:24.258149253Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:24.261644632Z 62 PC: 132a5 | Close file
2018-12-17T21:58:24.264039882Z 67 PC: 132b7 | Get or set file attributes
2018-12-17T21:58:24.274558566Z 79 PC: 13066 | Find next file
2018-12-17T21:58:24.278758356Z 59 PC: 13076 | Change current directory
2018-12-17T21:58:24.283357657Z 78 PC: 130b4 | Find first file
2018-12-17T21:58:24.289398456Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.292966005Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.296134789Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.298940637Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.302550265Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.305683943Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.308455637Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.312039028Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.315218442Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.317785891Z 59 PC: 13040 | Change current directory
2018-12-17T21:58:24.320580721Z 78 PC: 1304e | Find first file
2018-12-17T21:58:24.326886658Z 59 PC: 13076 | Change current directory
2018-12-17T21:58:24.331096026Z 59 PC: 13094 | Change current directory
2018-12-17T21:58:24.336075249Z 78 PC: 1304e | Find first file
2018-12-17T21:58:24.34711691Z 59 PC: 13076 | Change current directory
2018-12-17T21:58:24.352088469Z 78 PC: 130b4 | Find first file
2018-12-17T21:58:24.358609103Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.361340226Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.363931101Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.367174222Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.369156326Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.371696447Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.375463597Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.378090284Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.380506421Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.38364381Z 25 PC: 1314b | Get default drive
2018-12-17T21:58:24.385398503Z 14 PC: 1315b | Set default drive (Drive = 'C')
2018-12-17T21:58:24.38693995Z 59 PC: 12f96 | Change current directory
2018-12-17T21:58:24.391471874Z 78 PC: 13024 | Find first file
2018-12-17T21:58:24.397745902Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:24.403096026Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:24.741050015Z 61 PC: 1323d | Open file (Filename = 'COMMAND.COM')
2018-12-17T21:58:24.745462862Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:24.74642781Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:24.748777762Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:24.74997736Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:24.751761675Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:24.753990086Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:24.755696333Z 66 PC: 132f2 | Move file pointer
2018-12-17T21:58:24.757601496Z 64 PC: 13308 | Write file or device (Write 2483 bytes on handle 5)
2018-12-17T21:58:24.76854154Z 66 PC: 13319 | Move file pointer
2018-12-17T21:58:24.770203981Z 63 PC: 13329 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:24.773077669Z 66 PC: 13337 | Move file pointer
2018-12-17T21:58:24.775805649Z 64 PC: 13347 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:58:24.779194136Z 66 PC: 13355 | Move file pointer
2018-12-17T21:58:24.780856501Z 64 PC: 13365 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:58:24.784948119Z 87 PC: 13377 | Get or set file date and time
2018-12-17T21:58:24.78674286Z 62 PC: 13380 | Close file
2018-12-17T21:58:24.79366935Z 67 PC: 13392 | Get or set file attributes
2018-12-17T21:58:24.803956741Z 79 PC: 13066 | Find next file
2018-12-17T21:58:24.806526091Z 59 PC: 13076 | Change current directory
2018-12-17T21:58:24.809989117Z 59 PC: 13094 | Change current directory
2018-12-17T21:58:24.814972394Z 78 PC: 13024 | Find first file
2018-12-17T21:58:24.821331403Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:24.826678667Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:24.838169171Z 61 PC: 1323d | Open file (Filename = 'COMMAND.COM')
2018-12-17T21:58:24.844652802Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:24.845971658Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:24.849117253Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:24.850336428Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:24.852787212Z 62 PC: 132a5 | Close file
2018-12-17T21:58:24.855029263Z 67 PC: 132b7 | Get or set file attributes
2018-12-17T21:58:24.864259195Z 79 PC: 13066 | Find next file
2018-12-17T21:58:24.86761388Z 59 PC: 13076 | Change current directory
2018-12-17T21:58:24.871764814Z 78 PC: 130b4 | Find first file
2018-12-17T21:58:24.877310371Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.880880813Z 79 PC: 130e8 | Find next file
2018-12-17T21:58:24.884015085Z 59 PC: 1311b | Change current directory
2018-12-17T21:58:24.891983704Z 78 PC: 13024 | Find first file
2018-12-17T21:58:24.903276504Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:24.9104174Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:24.919593872Z 61 PC: 1323d | Open file (Filename = 'EDIT.COM')
2018-12-17T21:58:24.927143426Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:24.928737355Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:24.935602039Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:24.937865873Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:24.940220967Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:24.941851847Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:24.943741459Z 66 PC: 132f2 | Move file pointer
2018-12-17T21:58:24.945232628Z 64 PC: 13308 | Write file or device (Write 2483 bytes on handle 5)
2018-12-17T21:58:24.953433255Z 66 PC: 13319 | Move file pointer
2018-12-17T21:58:24.955432765Z 63 PC: 13329 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:24.959448005Z 66 PC: 13337 | Move file pointer
2018-12-17T21:58:24.961259781Z 64 PC: 13347 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:58:24.964449208Z 66 PC: 13355 | Move file pointer
2018-12-17T21:58:24.965548333Z 64 PC: 13365 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:58:24.967849624Z 87 PC: 13377 | Get or set file date and time
2018-12-17T21:58:24.970022534Z 62 PC: 13380 | Close file
2018-12-17T21:58:24.97572508Z 67 PC: 13392 | Get or set file attributes
2018-12-17T21:58:24.982912429Z 79 PC: 13066 | Find next file
2018-12-17T21:58:24.98582781Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:24.990073519Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:24.997773946Z 61 PC: 1323d | Open file (Filename = 'FORMAT.COM')
2018-12-17T21:58:25.003296639Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:25.004438918Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:25.008816868Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:25.010043228Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:25.012852018Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:25.015318589Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:25.017592074Z 66 PC: 132f2 | Move file pointer
2018-12-17T21:58:25.019721875Z 64 PC: 13308 | Write file or device (Write 2483 bytes on handle 5)
2018-12-17T21:58:25.309607092Z 66 PC: 13319 | Move file pointer
2018-12-17T21:58:25.310787647Z 63 PC: 13329 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:25.312964822Z 66 PC: 13337 | Move file pointer
2018-12-17T21:58:25.314958895Z 64 PC: 13347 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:58:25.317332738Z 66 PC: 13355 | Move file pointer
2018-12-17T21:58:25.318741342Z 64 PC: 13365 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:58:25.321436845Z 87 PC: 13377 | Get or set file date and time
2018-12-17T21:58:25.322730189Z 62 PC: 13380 | Close file
2018-12-17T21:58:25.344309573Z 67 PC: 13392 | Get or set file attributes
2018-12-17T21:58:25.35529772Z 79 PC: 13066 | Find next file
2018-12-17T21:58:25.359172634Z 67 PC: 13221 | Get or set file attributes
2018-12-17T21:58:25.369630641Z 67 PC: 13232 | Get or set file attributes
2018-12-17T21:58:25.379174123Z 61 PC: 1323d | Open file (Filename = 'KEYB.COM')
2018-12-17T21:58:25.385986651Z 87 PC: 1324d | Get or set file date and time
2018-12-17T21:58:25.388053152Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:25.394212067Z 66 PC: 1327f | Move file pointer
2018-12-17T21:58:25.395829876Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:58:25.398626104Z 66 PC: 132c8 | Move file pointer
2018-12-17T21:58:25.399930741Z 66 PC: 132d6 | Move file pointer
2018-12-17T21:58:25.402019053Z 66 PC: 132f2 | Move file pointer
2018-12-17T21:58:25.40365567Z 64 PC: 13308 | Write file or device (Write 2483 bytes on handle 5)
2018-12-17T21:58:25.412218473Z 66 PC: 13319 | Move file pointer
2018-12-17T21:58:25.414512863Z 63 PC: 13329 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:58:25.417096145Z 66 PC: 13337 | Move file pointer
2018-12-17T21:58:25.418411725Z 64 PC: 13347 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:58:25.42238325Z 66 PC: 13355 | Move file pointer
2018-12-17T21:58:25.423801134Z 64 PC: 13365 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:58:25.426882834Z 87 PC: 13377 | Get or set file date and time
2018-12-17T21:58:25.4290326Z 62 PC: 13380 | Close file
2018-12-17T21:58:25.435973866Z 67 PC: 13392 | Get or set file attributes
2018-12-17T21:58:25.445645502Z 14 PC: 13169 | Set default drive (Drive = 'A')
2018-12-17T21:58:25.447292185Z 59 PC: 13171 | Change current directory
2018-12-17T21:58:25.449287385Z 37 PC: 13181 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:58:25.451677947Z 42 PC: 12ee0 | Get date 0x12ee0: cmp dh, 2
0x12ee3: je 0x12eeb
0x12ee5: nop
0x12ee6: nop
0x12ee7: nop
0x12ee8: jmp 0x12f14
0x12eea: nop
0x12eeb: cmp al, 3
0x12eed: je 0x12ef5
0x12eef: nop
0x12ef0: nop
0x12ef1: nop
0x12ef2: jmp 0x12f14
0x12ef4: nop
0x12ef5: mov ah, 0x2c
0x12ef7: int 0x21
0x12ef9: cmp ch, 9
0x12efc: je 0x12f11
0x12efe: nop
0x12eff: nop
2018-12-17T21:58:25.453797856Z 37 PC: 12f24 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:58:25.454878091Z 76 PC: 12a48 | Terminate with return code (Return code = '76')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":926,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:42:06.070289968Z 48 PC: 12f6b | Get DOS version
2018-12-25T11:42:06.072416607Z 53 PC: 12fc2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:42:06.073464264Z 37 PC: 12fd3 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:42:06.07435629Z 53 PC: 12fdf | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:42:06.075568991Z 37 PC: 12ff0 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:42:06.076799409Z 71 PC: 13002 | Get current directory
2018-12-25T11:42:06.078742114Z 26 PC: 13011 | Set disk transfer address
2018-12-25T11:42:06.079578102Z 78 PC: 13024 | Find first file
2018-12-25T11:42:06.083658506Z 67 PC: 13221 | Get or set file attributes
2018-12-25T11:42:06.090398986Z 67 PC: 13232 | Get or set file attributes
2018-12-25T11:42:06.10352807Z 61 PC: 1323d | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:42:06.112162022Z 87 PC: 1324d | Get or set file date and time
2018-12-25T11:42:06.113145681Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-25T11:42:06.11936293Z 66 PC: 1327f | Move file pointer
2018-12-25T11:42:06.121177362Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-25T11:42:06.124272383Z 66 PC: 132c8 | Move file pointer
2018-12-25T11:42:06.12550143Z 66 PC: 132d6 | Move file pointer
2018-12-25T11:42:06.134666381Z 66 PC: 132f2 | Move file pointer
2018-12-25T11:42:06.136144746Z 64 PC: 13308 | Write file or device (Write 2483 bytes on handle 5)
2018-12-25T11:42:06.144657499Z 66 PC: 13319 | Move file pointer
2018-12-25T11:42:06.1465401Z 63 PC: 13329 | Read file or device (Read 4 bytes on handle 5)
2018-12-25T11:42:06.152638095Z 66 PC: 13337 | Move file pointer
2018-12-25T11:42:06.153740844Z 64 PC: 13347 | Write file or device (Write 4 bytes on handle 5)
2018-12-25T11:42:06.157887849Z 66 PC: 13355 | Move file pointer
2018-12-25T11:42:06.159717647Z 64 PC: 13365 | Write file or device (Write 4 bytes on handle 5)
2018-12-25T11:42:06.162295616Z 87 PC: 13377 | Get or set file date and time
2018-12-25T11:42:06.163909761Z 62 PC: 13380 | Close file
2018-12-25T11:42:06.17186063Z 67 PC: 13392 | Get or set file attributes
2018-12-25T11:42:06.181615744Z 79 PC: 13066 | Find next file
2018-12-25T11:42:06.184674487Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:06.191183356Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:06.201484177Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:06.208647516Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:06.210251209Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:06.21657929Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:06.218035055Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:06.220930018Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:06.222204693Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:06.223807502Z 62 PC: 132a5 | Close file
2018-12-25T11:42:06.226130883Z 67 PC: 132b7 | Get or set file attributes
2018-12-25T11:42:06.235926952Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:06.238880129Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:06.244593542Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:06.399059345Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:06.411378901Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:06.414225304Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:06.421576421Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:06.423238932Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:06.427146042Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:06.428787551Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:06.430419553Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:06.433406304Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:06.448310451Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:06.450882624Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:06.456796477Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:06.475993222Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:06.482496631Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:06.484857478Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:06.491413254Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:06.492756363Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:06.495546437Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:06.497256677Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:06.498586616Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:06.500396298Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:06.51629825Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:06.518955514Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:06.528482864Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:06.579078309Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:06.584661762Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:06.58611613Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:06.591772092Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:06.592945069Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:06.59505328Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:06.596712076Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:06.597986775Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:06.599659838Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:06.619312682Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:06.621983371Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:06.627587544Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:06.665302966Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:06.672131459Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:06.673591465Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:06.682653721Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:06.684187813Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:06.68718081Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:06.690276956Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:06.692012814Z 66 PC: 132f2 | Move file pointer (See above)
2018-12-25T11:42:06.694181537Z 64 PC: 13308 | Write file or device (See above)
2018-12-25T11:42:06.721928335Z 66 PC: 13319 | Move file pointer (See above)
2018-12-25T11:42:06.723567824Z 63 PC: 13329 | Read file or device (See above)
2018-12-25T11:42:06.730924481Z 66 PC: 13337 | Move file pointer (See above)
2018-12-25T11:42:06.733308778Z 64 PC: 13347 | Write file or device (See above)
2018-12-25T11:42:06.736548638Z 66 PC: 13355 | Move file pointer (See above)
2018-12-25T11:42:06.738165257Z 64 PC: 13365 | Write file or device (See above)
2018-12-25T11:42:06.740994976Z 87 PC: 13377 | Get or set file date and time (See above)
2018-12-25T11:42:06.742578797Z 62 PC: 13380 | Close file (See above)
2018-12-25T11:42:06.76261007Z 67 PC: 13392 | Get or set file attributes (See above)
2018-12-25T11:42:06.787134961Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:06.789944893Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:06.795918259Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:06.81651186Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:06.82794238Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:06.829272605Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:06.835240652Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:06.836943229Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:06.839198056Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:06.841305481Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:06.842741853Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:06.844328815Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:06.87951903Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:06.88232325Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:06.887806257Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:06.898159424Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:06.904822857Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:06.90614845Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:06.913269367Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:06.915283166Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:06.917956841Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:06.920164782Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:06.931480121Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:06.934102739Z 59 PC: 13076 | Change current directory
2018-12-25T11:42:06.93822986Z 59 PC: 13094 | Change current directory
2018-12-25T11:42:06.943581599Z 78 PC: 13024 | Find first file (See above)
2018-12-25T11:42:06.949734298Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:06.955538881Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:06.968639198Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:06.980114151Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:06.981790341Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:06.989804585Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:06.991194603Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:06.993512844Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:06.995746155Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.005736887Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.008813104Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.01539159Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.025894025Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.032742814Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.035088703Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.04098687Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.04254735Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.045727629Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.047548198Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.049121252Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.051763758Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.062579067Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.065567094Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.071589466Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.082423603Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.089196554Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.090875012Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.098179084Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.099514014Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.101841565Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.105477495Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.107132393Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.109297557Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.119956386Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.123421407Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.129039086Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.139285496Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.145659161Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.1469958Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.15424547Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.155785931Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.158441597Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.160658033Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.162532525Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.164359551Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.174493203Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.177177069Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.182872081Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.194004299Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.200736503Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.202431836Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.209603729Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.211887263Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.214585287Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.217001963Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.219077186Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.221078214Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.23171301Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.233912106Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.239601401Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.249627778Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.262460016Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.264157967Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.271418213Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.272831371Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.275388857Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.278011295Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.287704524Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.290708501Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.296994159Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.306643369Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.31330673Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.315866778Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.322759904Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.324392875Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.328604719Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.330154444Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.331479713Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.333872894Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.343695304Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.346304932Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.352943464Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.362924628Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.36960858Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.37188458Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.378324911Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.37959505Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.382733027Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.384615354Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.394811471Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.397549062Z 59 PC: 13076 | Change current directory (See above)
2018-12-25T11:42:07.401595673Z 78 PC: 130b4 | Find first file
2018-12-25T11:42:07.408711272Z 79 PC: 130e8 | Find next file
2018-12-25T11:42:07.412535927Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.415007337Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.417539476Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.421176295Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.423914712Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.426612387Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.429457263Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.432128155Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.436609187Z 59 PC: 13040 | Change current directory
2018-12-25T11:42:07.438850563Z 78 PC: 1304e | Find first file
2018-12-25T11:42:07.445657533Z 59 PC: 13076 | Change current directory (See above)
2018-12-25T11:42:07.45038627Z 59 PC: 13094 | Change current directory (See above)
2018-12-25T11:42:07.46000769Z 78 PC: 1304e | Find first file (See above)
2018-12-25T11:42:07.469350941Z 59 PC: 13076 | Change current directory (See above)
2018-12-25T11:42:07.47456202Z 78 PC: 130b4 | Find first file (See above)
2018-12-25T11:42:07.480754779Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.484693654Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.487861632Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.490281651Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.492776987Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.496888428Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.500075333Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.502882295Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.50647613Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.509440676Z 25 PC: 1314b | Get default drive
2018-12-25T11:42:07.510829037Z 14 PC: 1315b | Set default drive (Drive = 'C')
2018-12-25T11:42:07.513189015Z 59 PC: 12f96 | Change current directory
2018-12-25T11:42:07.517188308Z 78 PC: 13024 | Find first file (See above)
2018-12-25T11:42:07.523014274Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.528782062Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.870501408Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.884920158Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.888179142Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.891399045Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.893011678Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.89814319Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.899798447Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.901422064Z 66 PC: 132f2 | Move file pointer (See above)
2018-12-25T11:42:07.903567644Z 64 PC: 13308 | Write file or device (See above)
2018-12-25T11:42:07.909808528Z 66 PC: 13319 | Move file pointer (See above)
2018-12-25T11:42:07.910872459Z 63 PC: 13329 | Read file or device (See above)
2018-12-25T11:42:07.9132097Z 66 PC: 13337 | Move file pointer (See above)
2018-12-25T11:42:07.914383518Z 64 PC: 13347 | Write file or device (See above)
2018-12-25T11:42:07.916852856Z 66 PC: 13355 | Move file pointer (See above)
2018-12-25T11:42:07.918618081Z 64 PC: 13365 | Write file or device (See above)
2018-12-25T11:42:07.921523949Z 87 PC: 13377 | Get or set file date and time (See above)
2018-12-25T11:42:07.922723769Z 62 PC: 13380 | Close file (See above)
2018-12-25T11:42:07.928400713Z 67 PC: 13392 | Get or set file attributes (See above)
2018-12-25T11:42:07.938730703Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.940578196Z 59 PC: 13076 | Change current directory (See above)
2018-12-25T11:42:07.943777441Z 59 PC: 13094 | Change current directory (See above)
2018-12-25T11:42:07.947572612Z 78 PC: 13024 | Find first file (See above)
2018-12-25T11:42:07.951561598Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.955243694Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.961350964Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.965733864Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.968425365Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.971049377Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.97228013Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.975481378Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.977749501Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.987480838Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.990545299Z 59 PC: 13076 | Change current directory (See above)
2018-12-25T11:42:07.994904656Z 78 PC: 130b4 | Find first file (See above)
2018-12-25T11:42:08.000868971Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.003963609Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.007556079Z 59 PC: 1311b | Change current directory
2018-12-25T11:42:08.014046883Z 78 PC: 13024 | Find first file (See above)
2018-12-25T11:42:08.022979054Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:08.028926554Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:08.039133994Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:08.045914108Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:08.047583992Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:08.054563673Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:08.056631407Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:08.059378605Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:08.061886756Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:08.063890113Z 66 PC: 132f2 | Move file pointer (See above)
2018-12-25T11:42:08.065819247Z 64 PC: 13308 | Write file or device (See above)
2018-12-25T11:42:08.075684752Z 66 PC: 13319 | Move file pointer (See above)
2018-12-25T11:42:08.077678378Z 63 PC: 13329 | Read file or device (See above)
2018-12-25T11:42:08.083349096Z 66 PC: 13337 | Move file pointer (See above)
2018-12-25T11:42:08.085924023Z 64 PC: 13347 | Write file or device (See above)
2018-12-25T11:42:08.08962585Z 66 PC: 13355 | Move file pointer (See above)
2018-12-25T11:42:08.091217048Z 64 PC: 13365 | Write file or device (See above)
2018-12-25T11:42:08.094743761Z 87 PC: 13377 | Get or set file date and time (See above)
2018-12-25T11:42:08.096398739Z 62 PC: 13380 | Close file (See above)
2018-12-25T11:42:08.103840872Z 67 PC: 13392 | Get or set file attributes (See above)
2018-12-25T11:42:08.113823571Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:08.116921234Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:08.12244229Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:08.132295107Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:08.139571314Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:08.141210572Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:08.146784468Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:08.14794597Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:08.150886308Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:08.15221587Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:08.153545271Z 66 PC: 132f2 | Move file pointer (See above)
2018-12-25T11:42:08.155590183Z 64 PC: 13308 | Write file or device (See above)
2018-12-25T11:42:08.16474458Z 66 PC: 13319 | Move file pointer (See above)
2018-12-25T11:42:08.166338463Z 63 PC: 13329 | Read file or device (See above)
2018-12-25T11:42:08.17005357Z 66 PC: 13337 | Move file pointer (See above)
2018-12-25T11:42:08.171407936Z 64 PC: 13347 | Write file or device (See above)
2018-12-25T11:42:08.174523533Z 66 PC: 13355 | Move file pointer (See above)
2018-12-25T11:42:08.17635286Z 64 PC: 13365 | Write file or device (See above)
2018-12-25T11:42:08.178949919Z 87 PC: 13377 | Get or set file date and time (See above)
2018-12-25T11:42:08.180544837Z 62 PC: 13380 | Close file (See above)
2018-12-25T11:42:08.187918186Z 67 PC: 13392 | Get or set file attributes (See above)
2018-12-25T11:42:08.197268218Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:08.201493649Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:08.207553871Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:08.217250892Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:08.224776206Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:08.226788849Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:08.232453522Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:08.234953567Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:08.237983274Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:08.239637488Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:08.242134076Z 66 PC: 132f2 | Move file pointer (See above)
2018-12-25T11:42:08.244871094Z 64 PC: 13308 | Write file or device (See above)
2018-12-25T11:42:08.254305444Z 66 PC: 13319 | Move file pointer (See above)
2018-12-25T11:42:08.256277081Z 63 PC: 13329 | Read file or device (See above)
2018-12-25T11:42:08.258905321Z 66 PC: 13337 | Move file pointer (See above)
2018-12-25T11:42:08.26025554Z 64 PC: 13347 | Write file or device (See above)
2018-12-25T11:42:08.264414552Z 66 PC: 13355 | Move file pointer (See above)
2018-12-25T11:42:08.266064656Z 64 PC: 13365 | Write file or device (See above)
2018-12-25T11:42:08.269214462Z 87 PC: 13377 | Get or set file date and time (See above)
2018-12-25T11:42:08.271744632Z 62 PC: 13380 | Close file (See above)
2018-12-25T11:42:08.280792768Z 67 PC: 13392 | Get or set file attributes (See above)
2018-12-25T11:42:08.436024637Z 14 PC: 13169 | Set default drive (Drive = 'A')
2018-12-25T11:42:08.43792569Z 59 PC: 13171 | Change current directory
2018-12-25T11:42:08.43961985Z 37 PC: 13181 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:42:08.441470393Z 42 PC: 12ee0 | Get date 0x12ee0: cmp dh, 2
0x12ee3: je 0x12eeb
0x12ee5: nop
0x12ee6: nop
0x12ee7: nop
0x12ee8: jmp 0x12f14
0x12eea: nop
0x12eeb: cmp al, 3
0x12eed: je 0x12ef5
0x12eef: nop
0x12ef0: nop
0x12ef1: nop
0x12ef2: jmp 0x12f14
0x12ef4: nop
0x12ef5: mov ah, 0x2c
0x12ef7: int 0x21
0x12ef9: cmp ch, 9
0x12efc: je 0x12f11
0x12efe: nop
0x12eff: nop
2018-12-25T11:42:08.443613098Z 37 PC: 12f24 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:42:08.444784306Z 76 PC: 12a48 | Terminate with return code (Return code = '76')

{"DateBased":true,"Day":1,"Month":2,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":926,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:42:06.42077428Z 48 PC: 12f6b | Get DOS version
2018-12-25T11:42:06.422283843Z 53 PC: 12fc2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:42:06.423267569Z 37 PC: 12fd3 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:42:06.424183831Z 53 PC: 12fdf | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:42:06.425618379Z 37 PC: 12ff0 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:42:06.426571376Z 71 PC: 13002 | Get current directory
2018-12-25T11:42:06.429196067Z 26 PC: 13011 | Set disk transfer address
2018-12-25T11:42:06.430453549Z 78 PC: 13024 | Find first file
2018-12-25T11:42:06.436296837Z 67 PC: 13221 | Get or set file attributes
2018-12-25T11:42:06.441544883Z 67 PC: 13232 | Get or set file attributes
2018-12-25T11:42:06.896775708Z 61 PC: 1323d | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:42:06.908455516Z 87 PC: 1324d | Get or set file date and time
2018-12-25T11:42:06.909738448Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-25T11:42:06.917323673Z 66 PC: 1327f | Move file pointer
2018-12-25T11:42:06.918754305Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-25T11:42:06.921571518Z 66 PC: 132c8 | Move file pointer
2018-12-25T11:42:06.924476419Z 66 PC: 132d6 | Move file pointer
2018-12-25T11:42:06.92662496Z 66 PC: 132f2 | Move file pointer
2018-12-25T11:42:06.928366061Z 64 PC: 13308 | Write file or device (Write 2483 bytes on handle 5)
2018-12-25T11:42:06.93757212Z 66 PC: 13319 | Move file pointer
2018-12-25T11:42:06.945189776Z 63 PC: 13329 | Read file or device (Read 4 bytes on handle 5)
2018-12-25T11:42:06.951966196Z 66 PC: 13337 | Move file pointer
2018-12-25T11:42:06.954907965Z 64 PC: 13347 | Write file or device (Write 4 bytes on handle 5)
2018-12-25T11:42:06.958388034Z 66 PC: 13355 | Move file pointer
2018-12-25T11:42:06.961558204Z 64 PC: 13365 | Write file or device (Write 4 bytes on handle 5)
2018-12-25T11:42:06.965150959Z 87 PC: 13377 | Get or set file date and time
2018-12-25T11:42:06.967599339Z 62 PC: 13380 | Close file
2018-12-25T11:42:06.975601714Z 67 PC: 13392 | Get or set file attributes
2018-12-25T11:42:06.985915408Z 79 PC: 13066 | Find next file
2018-12-25T11:42:06.99034135Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:06.996226266Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.006282065Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.014073827Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.015959055Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.022649949Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.025986998Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.028789476Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.030586375Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.033277063Z 62 PC: 132a5 | Close file
2018-12-25T11:42:07.035497883Z 67 PC: 132b7 | Get or set file attributes
2018-12-25T11:42:07.04565522Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.049842895Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.056321792Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.066120514Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.074259215Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.076433216Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.082935Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.085376747Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.088456966Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.090115632Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.092007311Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.095395907Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.105431605Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.108558231Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.114982192Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.124790765Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.131158353Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.133368133Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.140037192Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.141366445Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.14432673Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.146276439Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.147714754Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.150287114Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.160924354Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.16362746Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.170331352Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.181065673Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.194054549Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.196284946Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.202840156Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.20444534Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.207538952Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.209015777Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.21041448Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.212648462Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.222307743Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.225135989Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.231667576Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.24195253Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.248561354Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.250415699Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.25643865Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.258402597Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.26159983Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.262955131Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.264240392Z 66 PC: 132f2 | Move file pointer (See above)
2018-12-25T11:42:07.266044823Z 64 PC: 13308 | Write file or device (See above)
2018-12-25T11:42:07.274953878Z 66 PC: 13319 | Move file pointer (See above)
2018-12-25T11:42:07.276185486Z 63 PC: 13329 | Read file or device (See above)
2018-12-25T11:42:07.283013886Z 66 PC: 13337 | Move file pointer (See above)
2018-12-25T11:42:07.284635327Z 64 PC: 13347 | Write file or device (See above)
2018-12-25T11:42:07.287610938Z 66 PC: 13355 | Move file pointer (See above)
2018-12-25T11:42:07.289523894Z 64 PC: 13365 | Write file or device (See above)
2018-12-25T11:42:07.292178971Z 87 PC: 13377 | Get or set file date and time (See above)
2018-12-25T11:42:07.294424324Z 62 PC: 13380 | Close file (See above)
2018-12-25T11:42:07.302449666Z 67 PC: 13392 | Get or set file attributes (See above)
2018-12-25T11:42:07.312076025Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.314819024Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.320811375Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.331056575Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.337818991Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.340366038Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.346882019Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.347939524Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.350336261Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.351422596Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.352460916Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.354327338Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.361504414Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.364310299Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.370226802Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.379479193Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.390785196Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.393085942Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.399285182Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.400551793Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.403272991Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.40807772Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.418126546Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.420026774Z 59 PC: 13076 | Change current directory
2018-12-25T11:42:07.422765271Z 59 PC: 13094 | Change current directory
2018-12-25T11:42:07.425365456Z 78 PC: 13024 | Find first file (See above)
2018-12-25T11:42:07.430562856Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.441652895Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.449519902Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.457227771Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.458686674Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.462638235Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.463760246Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.465970268Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.467735448Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.475883096Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.477905471Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.481480919Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.489107676Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.494803133Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.496321328Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.500664061Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.501991112Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.503881695Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.505218876Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.507109689Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.508315926Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.517334582Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.519788489Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.526476773Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.534854526Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.539736818Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.540746917Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.545010809Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.546227681Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.547891204Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.549226917Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.550478802Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.55205369Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.869897407Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.879295273Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.886895883Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.895532167Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.907056136Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.908755498Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.916251559Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.919092038Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.922186651Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.924126753Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.926952797Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.928629258Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.938946537Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.943363812Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.949155213Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.95894296Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.96694147Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.968496296Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.974660833Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.976548729Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.980177613Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.98150901Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.983463493Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.985058037Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.994549144Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.998251359Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:08.003315618Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:08.012996258Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:08.020505255Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:08.022200677Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:08.028614948Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:08.031168344Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:08.033668269Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:08.035991892Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:08.046527526Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:08.049436748Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:08.055361408Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:08.065293528Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:08.071735158Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:08.074097763Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:08.080590379Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:08.082196184Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:08.085344007Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:08.087386547Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:08.089014044Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:08.092081009Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:08.102101016Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:08.105061811Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:08.116233367Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:08.125929972Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:08.132370559Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:08.134353556Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:08.140528693Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:08.142018658Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:08.144936769Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:08.146623093Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:08.156337774Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:08.159608684Z 59 PC: 13076 | Change current directory (See above)
2018-12-25T11:42:08.16428175Z 78 PC: 130b4 | Find first file
2018-12-25T11:42:08.174620957Z 79 PC: 130e8 | Find next file
2018-12-25T11:42:08.177890901Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.180200428Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.182905497Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.185350094Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.187728625Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.190336715Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.192824715Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.19506726Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.198245915Z 59 PC: 13040 | Change current directory
2018-12-25T11:42:08.199910776Z 78 PC: 1304e | Find first file
2018-12-25T11:42:08.20547685Z 59 PC: 13076 | Change current directory (See above)
2018-12-25T11:42:08.210065324Z 59 PC: 13094 | Change current directory (See above)
2018-12-25T11:42:08.213751384Z 78 PC: 1304e | Find first file (See above)
2018-12-25T11:42:08.219236851Z 59 PC: 13076 | Change current directory (See above)
2018-12-25T11:42:08.223948519Z 78 PC: 130b4 | Find first file (See above)
2018-12-25T11:42:08.229854938Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.232313744Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.235349746Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.238261338Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.24208809Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.245898084Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.248680494Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.252134829Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.256007725Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.258534235Z 25 PC: 1314b | Get default drive
2018-12-25T11:42:08.259890995Z 14 PC: 1315b | Set default drive (Drive = 'C')
2018-12-25T11:42:08.26252023Z 59 PC: 12f96 | Change current directory
2018-12-25T11:42:08.266006981Z 78 PC: 13024 | Find first file (See above)
2018-12-25T11:42:08.271509367Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:08.277663573Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:08.600018405Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:08.60652424Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:08.609500306Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:08.612420545Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:08.614094343Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:08.618148732Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:08.61991061Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:08.621670038Z 66 PC: 132f2 | Move file pointer (See above)
2018-12-25T11:42:08.624782687Z 64 PC: 13308 | Write file or device (See above)
2018-12-25T11:42:08.636404106Z 66 PC: 13319 | Move file pointer (See above)
2018-12-25T11:42:08.638064372Z 63 PC: 13329 | Read file or device (See above)
2018-12-25T11:42:08.642024185Z 66 PC: 13337 | Move file pointer (See above)
2018-12-25T11:42:08.643741364Z 64 PC: 13347 | Write file or device (See above)
2018-12-25T11:42:08.647249436Z 66 PC: 13355 | Move file pointer (See above)
2018-12-25T11:42:08.650020711Z 64 PC: 13365 | Write file or device (See above)
2018-12-25T11:42:08.653028755Z 87 PC: 13377 | Get or set file date and time (See above)
2018-12-25T11:42:08.654823231Z 62 PC: 13380 | Close file (See above)
2018-12-25T11:42:08.662959626Z 67 PC: 13392 | Get or set file attributes (See above)
2018-12-25T11:42:08.671872395Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:08.674885932Z 59 PC: 13076 | Change current directory (See above)
2018-12-25T11:42:08.679185222Z 59 PC: 13094 | Change current directory (See above)
2018-12-25T11:42:08.682952253Z 78 PC: 13024 | Find first file (See above)
2018-12-25T11:42:08.686472753Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:08.690210387Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:08.696127982Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:08.701086412Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:08.702724551Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:08.705269135Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:08.706758493Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:08.708911773Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:08.710180125Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:08.726927691Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:08.729370288Z 59 PC: 13076 | Change current directory (See above)
2018-12-25T11:42:08.73309369Z 78 PC: 130b4 | Find first file (See above)
2018-12-25T11:42:08.739049705Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.742202249Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:08.744939038Z 59 PC: 1311b | Change current directory
2018-12-25T11:42:08.751393159Z 78 PC: 13024 | Find first file (See above)
2018-12-25T11:42:08.760107962Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:08.766021848Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:08.777256852Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:08.785236667Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:08.786830837Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:08.793306793Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:08.794846633Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:08.797515202Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:08.799925501Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:08.801779075Z 66 PC: 132f2 | Move file pointer (See above)
2018-12-25T11:42:08.803457422Z 64 PC: 13308 | Write file or device (See above)
2018-12-25T11:42:08.812355064Z 66 PC: 13319 | Move file pointer (See above)
2018-12-25T11:42:08.813908548Z 63 PC: 13329 | Read file or device (See above)
2018-12-25T11:42:08.819657263Z 66 PC: 13337 | Move file pointer (See above)
2018-12-25T11:42:08.821977491Z 64 PC: 13347 | Write file or device (See above)
2018-12-25T11:42:08.825286008Z 66 PC: 13355 | Move file pointer (See above)
2018-12-25T11:42:08.826852526Z 64 PC: 13365 | Write file or device (See above)
2018-12-25T11:42:08.830463487Z 87 PC: 13377 | Get or set file date and time (See above)
2018-12-25T11:42:08.832106707Z 62 PC: 13380 | Close file (See above)
2018-12-25T11:42:08.838917054Z 67 PC: 13392 | Get or set file attributes (See above)
2018-12-25T11:42:08.849187075Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:08.852573238Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:08.859080976Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:08.868335588Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:08.875087656Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:08.877576785Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:08.883520888Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:08.885094444Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:08.888620702Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:08.890504814Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:08.892109784Z 66 PC: 132f2 | Move file pointer (See above)
2018-12-25T11:42:08.89473606Z 64 PC: 13308 | Write file or device (See above)
2018-12-25T11:42:08.904214734Z 66 PC: 13319 | Move file pointer (See above)
2018-12-25T11:42:08.905604391Z 63 PC: 13329 | Read file or device (See above)
2018-12-25T11:42:08.912444909Z 66 PC: 13337 | Move file pointer (See above)
2018-12-25T11:42:08.914940054Z 64 PC: 13347 | Write file or device (See above)
2018-12-25T11:42:08.918371268Z 66 PC: 13355 | Move file pointer (See above)
2018-12-25T11:42:08.920973746Z 64 PC: 13365 | Write file or device (See above)
2018-12-25T11:42:08.924016609Z 87 PC: 13377 | Get or set file date and time (See above)
2018-12-25T11:42:08.925731641Z 62 PC: 13380 | Close file (See above)
2018-12-25T11:42:08.933522912Z 67 PC: 13392 | Get or set file attributes (See above)
2018-12-25T11:42:08.942841061Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:08.946678919Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:08.953600913Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:08.962918324Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:08.969871196Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:08.972418678Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:08.978758117Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:08.98125276Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:08.984296076Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:08.985972183Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:08.988478506Z 66 PC: 132f2 | Move file pointer (See above)
2018-12-25T11:42:08.990261329Z 64 PC: 13308 | Write file or device (See above)
2018-12-25T11:42:08.999175808Z 66 PC: 13319 | Move file pointer (See above)
2018-12-25T11:42:09.001755025Z 63 PC: 13329 | Read file or device (See above)
2018-12-25T11:42:09.004693804Z 66 PC: 13337 | Move file pointer (See above)
2018-12-25T11:42:09.00616122Z 64 PC: 13347 | Write file or device (See above)
2018-12-25T11:42:09.01084671Z 66 PC: 13355 | Move file pointer (See above)
2018-12-25T11:42:09.012265685Z 64 PC: 13365 | Write file or device (See above)
2018-12-25T11:42:09.014996909Z 87 PC: 13377 | Get or set file date and time (See above)
2018-12-25T11:42:09.017606015Z 62 PC: 13380 | Close file (See above)
2018-12-25T11:42:09.024880923Z 67 PC: 13392 | Get or set file attributes (See above)
2018-12-25T11:42:09.035214015Z 14 PC: 13169 | Set default drive (Drive = 'A')
2018-12-25T11:42:09.037910725Z 59 PC: 13171 | Change current directory
2018-12-25T11:42:09.040710828Z 37 PC: 13181 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:42:09.042980343Z 42 PC: 12ee0 | Get date 0x12ee0: cmp dh, 2
0x12ee3: je 0x12eeb
0x12ee5: nop
0x12ee6: nop
0x12ee7: nop
0x12ee8: jmp 0x12f14
0x12eea: nop
0x12eeb: cmp al, 3
0x12eed: je 0x12ef5
0x12eef: nop
0x12ef0: nop
0x12ef1: nop
0x12ef2: jmp 0x12f14
0x12ef4: nop
0x12ef5: mov ah, 0x2c
0x12ef7: int 0x21
0x12ef9: cmp ch, 9
0x12efc: je 0x12f11
0x12efe: nop
0x12eff: nop
2018-12-25T11:42:09.045698759Z 37 PC: 12f24 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:42:09.047436387Z 76 PC: 12a48 | Terminate with return code (Return code = '76')

{"DateBased":true,"Day":6,"Month":2,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":926,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:42:06.53456082Z 48 PC: 12f6b | Get DOS version
2018-12-25T11:42:06.536935978Z 53 PC: 12fc2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:42:06.547047639Z 37 PC: 12fd3 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:42:06.548843671Z 53 PC: 12fdf | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:42:06.550952867Z 37 PC: 12ff0 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:42:06.553131739Z 71 PC: 13002 | Get current directory
2018-12-25T11:42:06.556510693Z 26 PC: 13011 | Set disk transfer address
2018-12-25T11:42:06.558280843Z 78 PC: 13024 | Find first file
2018-12-25T11:42:06.566216961Z 67 PC: 13221 | Get or set file attributes
2018-12-25T11:42:06.58073234Z 67 PC: 13232 | Get or set file attributes
2018-12-25T11:42:06.599421453Z 61 PC: 1323d | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:42:06.616613556Z 87 PC: 1324d | Get or set file date and time
2018-12-25T11:42:06.618325647Z 63 PC: 13265 | Read file or device (Read 4 bytes on handle 5)
2018-12-25T11:42:06.638463814Z 66 PC: 1327f | Move file pointer
2018-12-25T11:42:06.640935362Z 63 PC: 1328f | Read file or device (Read 1 bytes on handle 5)
2018-12-25T11:42:06.644032368Z 66 PC: 132c8 | Move file pointer
2018-12-25T11:42:06.64582809Z 66 PC: 132d6 | Move file pointer
2018-12-25T11:42:06.649004778Z 66 PC: 132f2 | Move file pointer
2018-12-25T11:42:06.651309301Z 64 PC: 13308 | Write file or device (Write 2483 bytes on handle 5)
2018-12-25T11:42:06.662222578Z 66 PC: 13319 | Move file pointer
2018-12-25T11:42:06.663818127Z 63 PC: 13329 | Read file or device (Read 4 bytes on handle 5)
2018-12-25T11:42:06.671975648Z 66 PC: 13337 | Move file pointer
2018-12-25T11:42:06.673992382Z 64 PC: 13347 | Write file or device (Write 4 bytes on handle 5)
2018-12-25T11:42:06.677925906Z 66 PC: 13355 | Move file pointer
2018-12-25T11:42:06.683782282Z 64 PC: 13365 | Write file or device (Write 4 bytes on handle 5)
2018-12-25T11:42:06.687292496Z 87 PC: 13377 | Get or set file date and time
2018-12-25T11:42:06.689358445Z 62 PC: 13380 | Close file
2018-12-25T11:42:06.699405228Z 67 PC: 13392 | Get or set file attributes
2018-12-25T11:42:06.710599505Z 79 PC: 13066 | Find next file
2018-12-25T11:42:06.714159695Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:06.721208066Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:06.733956496Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:06.74193545Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:06.744859726Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:06.752773537Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:06.754976173Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:06.758769985Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:06.761083086Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:06.763151136Z 62 PC: 132a5 | Close file
2018-12-25T11:42:06.765817707Z 67 PC: 132b7 | Get or set file attributes
2018-12-25T11:42:06.778282453Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:06.782270882Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:06.788714075Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:06.813515304Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:06.821134188Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:06.823138502Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:06.830993533Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:06.832622317Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:06.835608451Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:06.838050405Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:06.8399968Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:06.842356552Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:06.854777692Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:06.859128986Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:06.866598511Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:06.878574761Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:06.88650084Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:06.888021504Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:06.89602801Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:06.897772207Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:06.900926237Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:06.904412022Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:06.907146827Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:06.909296061Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:06.920982288Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:06.925119265Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:06.934470027Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:06.945864882Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:06.954967885Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:06.956931327Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:06.964414771Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:06.96738575Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:06.970225329Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:06.971875963Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:06.974086918Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:06.976437685Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:06.987824951Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:06.9924112Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:06.999763317Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.010821682Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.018734777Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.021397997Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.028848623Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.030758189Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.034754426Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.036691405Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.038607925Z 66 PC: 132f2 | Move file pointer (See above)
2018-12-25T11:42:07.041360585Z 64 PC: 13308 | Write file or device (See above)
2018-12-25T11:42:07.052015761Z 66 PC: 13319 | Move file pointer (See above)
2018-12-25T11:42:07.053888144Z 63 PC: 13329 | Read file or device (See above)
2018-12-25T11:42:07.062181796Z 66 PC: 13337 | Move file pointer (See above)
2018-12-25T11:42:07.065093912Z 64 PC: 13347 | Write file or device (See above)
2018-12-25T11:42:07.068905608Z 66 PC: 13355 | Move file pointer (See above)
2018-12-25T11:42:07.071208985Z 64 PC: 13365 | Write file or device (See above)
2018-12-25T11:42:07.07450551Z 87 PC: 13377 | Get or set file date and time (See above)
2018-12-25T11:42:07.076498097Z 62 PC: 13380 | Close file (See above)
2018-12-25T11:42:07.085987292Z 67 PC: 13392 | Get or set file attributes (See above)
2018-12-25T11:42:07.097186136Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.100629431Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.10746721Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.119896106Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.128850178Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.131383816Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.140994291Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.142735454Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.145991864Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.149068181Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.150844737Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.152889726Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.166918417Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.170168761Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.177441881Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.188866215Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.197474717Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.1989445Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.206118302Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.207955029Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.210678832Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.212747307Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.224138903Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.226694231Z 59 PC: 13076 | Change current directory
2018-12-25T11:42:07.231192873Z 59 PC: 13094 | Change current directory
2018-12-25T11:42:07.236281335Z 78 PC: 13024 | Find first file (See above)
2018-12-25T11:42:07.242930001Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.25452003Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.266500612Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.273957485Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.275809331Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.283112782Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.285738746Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.288465805Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.290410682Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.302347965Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.30561007Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.31199444Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.323667021Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.33104803Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.332609723Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.341949273Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.34368697Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.346491484Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.349441162Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.350933639Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.352875059Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.366024683Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.369111367Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.37559972Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.387461095Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.397146518Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.39910335Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.408206464Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.410515576Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.413302844Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.415466464Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.416999421Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.419121893Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.431014816Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.433877076Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.439052407Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.451030414Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.459101178Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.460317118Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.467113649Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.469174547Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.471989596Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.474077021Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.475524261Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.47756487Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.503346582Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.506043914Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.511562861Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.522062035Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.527684315Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.529240063Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.536704309Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.538217174Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.541216889Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.546965579Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.548975123Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.551278649Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.562597293Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.566219083Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.572754147Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.584737498Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.59323244Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.594854467Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.602122496Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.604209419Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.607112684Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.609174954Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.621427016Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.624995148Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.631783485Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.644455147Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.653063602Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.655066211Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.664261631Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.666231734Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.669272928Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:07.6717704Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:07.67369307Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.675992231Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.687455363Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.690612957Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.696732586Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:07.7079708Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:07.71685318Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:07.719606484Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:07.727587065Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:07.72980454Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:07.732817014Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:07.735623267Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:07.746273464Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:07.748698163Z 59 PC: 13076 | Change current directory (See above)
2018-12-25T11:42:07.753468153Z 78 PC: 130b4 | Find first file
2018-12-25T11:42:07.759944523Z 79 PC: 130e8 | Find next file
2018-12-25T11:42:07.762987853Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.766507496Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.769060001Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.771676261Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.774706109Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.777296243Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.779888384Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.782780387Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.785252381Z 59 PC: 13040 | Change current directory
2018-12-25T11:42:07.787993816Z 78 PC: 1304e | Find first file
2018-12-25T11:42:07.794523877Z 59 PC: 13076 | Change current directory (See above)
2018-12-25T11:42:07.798746121Z 59 PC: 13094 | Change current directory (See above)
2018-12-25T11:42:07.802726193Z 78 PC: 1304e | Find first file (See above)
2018-12-25T11:42:07.809120574Z 59 PC: 13076 | Change current directory (See above)
2018-12-25T11:42:07.813432972Z 78 PC: 130b4 | Find first file (See above)
2018-12-25T11:42:07.819683946Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.823506468Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.82638312Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.829035756Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.83185518Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.835329779Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.838199176Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.841241998Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.844102081Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:07.846785244Z 25 PC: 1314b | Get default drive
2018-12-25T11:42:07.848762107Z 14 PC: 1315b | Set default drive (Drive = 'C')
2018-12-25T11:42:07.85035966Z 59 PC: 12f96 | Change current directory
2018-12-25T11:42:07.854223025Z 78 PC: 13024 | Find first file (See above)
2018-12-25T11:42:07.861760866Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:07.867437541Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:09.116476799Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:09.123873816Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:09.126002332Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:09.129373497Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:09.131854959Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:09.134570463Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:09.135975821Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:09.13821387Z 66 PC: 132f2 | Move file pointer (See above)
2018-12-25T11:42:09.139960513Z 64 PC: 13308 | Write file or device (See above)
2018-12-25T11:42:09.152699927Z 66 PC: 13319 | Move file pointer (See above)
2018-12-25T11:42:09.154786793Z 63 PC: 13329 | Read file or device (See above)
2018-12-25T11:42:09.158002299Z 66 PC: 13337 | Move file pointer (See above)
2018-12-25T11:42:09.15942045Z 64 PC: 13347 | Write file or device (See above)
2018-12-25T11:42:09.163978829Z 66 PC: 13355 | Move file pointer (See above)
2018-12-25T11:42:09.165361104Z 64 PC: 13365 | Write file or device (See above)
2018-12-25T11:42:09.168333474Z 87 PC: 13377 | Get or set file date and time (See above)
2018-12-25T11:42:09.170403806Z 62 PC: 13380 | Close file (See above)
2018-12-25T11:42:09.178330813Z 67 PC: 13392 | Get or set file attributes (See above)
2018-12-25T11:42:09.188801124Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:09.193028963Z 59 PC: 13076 | Change current directory (See above)
2018-12-25T11:42:09.197828679Z 59 PC: 13094 | Change current directory (See above)
2018-12-25T11:42:09.201856078Z 78 PC: 13024 | Find first file (See above)
2018-12-25T11:42:09.208743856Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:09.214799662Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:09.225049325Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:09.233758911Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:09.235294893Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:09.238509616Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:09.240752261Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:09.243596669Z 62 PC: 132a5 | Close file (See above)
2018-12-25T11:42:09.245502764Z 67 PC: 132b7 | Get or set file attributes (See above)
2018-12-25T11:42:09.258313702Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:09.261089176Z 59 PC: 13076 | Change current directory (See above)
2018-12-25T11:42:09.264982826Z 78 PC: 130b4 | Find first file (See above)
2018-12-25T11:42:09.272443142Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:09.275655633Z 79 PC: 130e8 | Find next file (See above)
2018-12-25T11:42:09.278936459Z 59 PC: 1311b | Change current directory
2018-12-25T11:42:09.287270219Z 78 PC: 13024 | Find first file (See above)
2018-12-25T11:42:09.298673586Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:09.306475214Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:09.317646745Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:09.325078219Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:09.326573819Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:09.333203295Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:09.334555855Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:09.337323452Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:09.339504193Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:09.348643385Z 66 PC: 132f2 | Move file pointer (See above)
2018-12-25T11:42:09.350210834Z 64 PC: 13308 | Write file or device (See above)
2018-12-25T11:42:09.363375788Z 66 PC: 13319 | Move file pointer (See above)
2018-12-25T11:42:09.3649459Z 63 PC: 13329 | Read file or device (See above)
2018-12-25T11:42:09.37134791Z 66 PC: 13337 | Move file pointer (See above)
2018-12-25T11:42:09.373436547Z 64 PC: 13347 | Write file or device (See above)
2018-12-25T11:42:09.377059333Z 66 PC: 13355 | Move file pointer (See above)
2018-12-25T11:42:09.379052936Z 64 PC: 13365 | Write file or device (See above)
2018-12-25T11:42:09.382445708Z 87 PC: 13377 | Get or set file date and time (See above)
2018-12-25T11:42:09.384063105Z 62 PC: 13380 | Close file (See above)
2018-12-25T11:42:09.392583553Z 67 PC: 13392 | Get or set file attributes (See above)
2018-12-25T11:42:09.403156911Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:09.406808612Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:09.41411557Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:09.424410776Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:09.432713079Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:09.435510599Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:09.441555136Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:09.443119433Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:09.446736236Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:09.449483898Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:09.451389693Z 66 PC: 132f2 | Move file pointer (See above)
2018-12-25T11:42:09.453946719Z 64 PC: 13308 | Write file or device (See above)
2018-12-25T11:42:09.466096215Z 66 PC: 13319 | Move file pointer (See above)
2018-12-25T11:42:09.468059804Z 63 PC: 13329 | Read file or device (See above)
2018-12-25T11:42:09.472097809Z 66 PC: 13337 | Move file pointer (See above)
2018-12-25T11:42:09.474176053Z 64 PC: 13347 | Write file or device (See above)
2018-12-25T11:42:09.478177639Z 66 PC: 13355 | Move file pointer (See above)
2018-12-25T11:42:09.481176071Z 64 PC: 13365 | Write file or device (See above)
2018-12-25T11:42:09.484838073Z 87 PC: 13377 | Get or set file date and time (See above)
2018-12-25T11:42:09.487004473Z 62 PC: 13380 | Close file (See above)
2018-12-25T11:42:09.495668994Z 67 PC: 13392 | Get or set file attributes (See above)
2018-12-25T11:42:09.507113521Z 79 PC: 13066 | Find next file (See above)
2018-12-25T11:42:09.510848772Z 67 PC: 13221 | Get or set file attributes (See above)
2018-12-25T11:42:09.518128548Z 67 PC: 13232 | Get or set file attributes (See above)
2018-12-25T11:42:09.528582161Z 61 PC: 1323d | Open file (See above)
2018-12-25T11:42:09.53714216Z 87 PC: 1324d | Get or set file date and time (See above)
2018-12-25T11:42:09.539544282Z 63 PC: 13265 | Read file or device (See above)
2018-12-25T11:42:09.54642558Z 66 PC: 1327f | Move file pointer (See above)
2018-12-25T11:42:09.548313236Z 63 PC: 1328f | Read file or device (See above)
2018-12-25T11:42:09.552353175Z 66 PC: 132c8 | Move file pointer (See above)
2018-12-25T11:42:09.554160763Z 66 PC: 132d6 | Move file pointer (See above)
2018-12-25T11:42:09.555924679Z 66 PC: 132f2 | Move file pointer (See above)
2018-12-25T11:42:09.559148823Z 64 PC: 13308 | Write file or device (See above)
2018-12-25T11:42:09.568858315Z 66 PC: 13319 | Move file pointer (See above)
2018-12-25T11:42:09.570987343Z 63 PC: 13329 | Read file or device (See above)
2018-12-25T11:42:09.575173783Z 66 PC: 13337 | Move file pointer (See above)
2018-12-25T11:42:09.577105972Z 64 PC: 13347 | Write file or device (See above)
2018-12-25T11:42:09.581813442Z 66 PC: 13355 | Move file pointer (See above)
2018-12-25T11:42:09.583726445Z 64 PC: 13365 | Write file or device (See above)
2018-12-25T11:42:09.586901076Z 87 PC: 13377 | Get or set file date and time (See above)
2018-12-25T11:42:09.589405535Z 62 PC: 13380 | Close file (See above)
2018-12-25T11:42:09.59736198Z 67 PC: 13392 | Get or set file attributes (See above)
2018-12-25T11:42:09.607741576Z 14 PC: 13169 | Set default drive (Drive = 'A')
2018-12-25T11:42:09.610186299Z 59 PC: 13171 | Change current directory
2018-12-25T11:42:09.612349989Z 37 PC: 13181 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:42:09.613690207Z 42 PC: 12ee0 | Get date 0x12ee0: cmp dh, 2
0x12ee3: je 0x12eeb
0x12ee5: nop
0x12ee6: nop
0x12ee7: nop
0x12ee8: jmp 0x12f14
0x12eea: nop
0x12eeb: cmp al, 3
0x12eed: je 0x12ef5
0x12eef: nop
0x12ef0: nop
0x12ef1: nop
0x12ef2: jmp 0x12f14
0x12ef4: nop
0x12ef5: mov ah, 0x2c
0x12ef7: int 0x21
0x12ef9: cmp ch, 9
0x12efc: je 0x12f11
0x12efe: nop
0x12eff: nop
2018-12-25T11:42:09.616747124Z 44 PC: 12ef9 | Get time 0x12ef9: cmp ch, 9
0x12efc: je 0x12f11
0x12efe: nop
0x12eff: nop
0x12f00: nop
0x12f01: cmp ch, 0xa
0x12f04: je 0x12f11
0x12f06: nop
0x12f07: nop
0x12f08: nop
0x12f09: cmp ch, 0xf
0x12f0c: jne 0x12f14
0x12f0e: nop
0x12f0f: nop
0x12f10: nop
0x12f11: call 0x12f57
0x12f14: ret
0x12f15: mov dx, word ptr [si + 0xa54]
0x12f19: mov ax, word ptr [si + 0xa56]
0x12f1d: mov ds, ax
2018-12-25T11:42:09.619386397Z 37 PC: 12f24 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:42:09.621277594Z 76 PC: 12a48 | Terminate with return code (Return code = '76')