Sample viewer

vx.netlux.org/Virus.DOS.HLLP.7776

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:47:44.00967053Z 53 PC: 138da | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:44.013058444Z 53 PC: 138da | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:47:44.014722826Z 53 PC: 138da | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:44.016340794Z 53 PC: 138da | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:44.019056849Z 53 PC: 138da | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:44.020704307Z 53 PC: 138da | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:44.02249262Z 53 PC: 138da | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:47:44.024369806Z 53 PC: 138da | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:47:44.0278853Z 53 PC: 138da | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:47:44.030184709Z 53 PC: 138da | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:47:44.031790205Z 53 PC: 138da | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:47:44.034155226Z 53 PC: 138da | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:47:44.035579808Z 53 PC: 138da | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:47:44.036954596Z 53 PC: 138da | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:47:44.039646456Z 53 PC: 138da | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:47:44.041236927Z 53 PC: 138da | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:47:44.043760141Z 53 PC: 138da | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:47:44.052754139Z 53 PC: 138da | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:44.054177786Z 53 PC: 138da | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:47:44.055529289Z 37 PC: 138ef | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:44.057515738Z 37 PC: 138f7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:44.059134449Z 37 PC: 138ff | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:44.060408792Z 37 PC: 13907 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:44.062344992Z 68 PC: 1442f | I/O control for devices (Set for = '')
2018-12-17T22:47:44.063720748Z 44 PC: 14566 | Get time 0x14566: mov word ptr [0x3e], cx
0x1456a: mov word ptr [0x40], dx
0x1456e: retf
0x1456f: call 0x145b6
0x14572: jb 0x14583
0x14574: mov cx, word ptr es:[di + 4]
0x14578: cmp cx, 1
0x1457b: je 0x14583
0x1457d: xor bx, bx
0x1457f: push cs
0x14580: call 0x240f7
0x14583: retf 4
0x14586: call 0x145b6
0x14589: jb 0x1459e
0x1458b: mov ax, cx
0x1458d: mov dx, bx
0x1458f: mov cx, word ptr es:[di + 4]
0x14593: cmp cx, 1
0x14596: je 0x1459e
0x14598: xor bx, bx
2018-12-17T22:47:44.065353388Z 25 PC: 13fec | Get default drive
2018-12-17T22:47:44.066493094Z 71 PC: 13fff | Get current directory
2018-12-17T22:47:44.069077362Z 98 PC: 12ac5 | Get current PSP
2018-12-17T22:47:44.070822621Z 67 PC: 1357f | Get or set file attributes
2018-12-17T22:47:44.075018356Z 67 PC: 135a6 | Get or set file attributes
2018-12-17T22:47:44.088592228Z 61 PC: 13d9d | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:47:44.093395441Z 63 PC: 13e70 | Read file or device (Read 7776 bytes on handle 5)
2018-12-17T22:47:44.099084952Z 62 PC: 13ded | Close file
2018-12-17T22:47:44.116406303Z 59 PC: 140b3 | Change current directory
2018-12-17T22:47:44.120794549Z 26 PC: 1361d | Set disk transfer address
2018-12-17T22:47:44.122137826Z 78 PC: 13629 | Find first file
2018-12-17T22:47:44.134794965Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.136005693Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.140767654Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.146208828Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.148898808Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.150179691Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.153716298Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.155197691Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.15924103Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.161678633Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.166609921Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.167988969Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.172356538Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.174306753Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.177849777Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.179289247Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.190345422Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.191344087Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.194723393Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.196856188Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.200713453Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.202343989Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.207254076Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.208785041Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.213203629Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.215319647Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.220077295Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.221619605Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.22793535Z 67 PC: 1357f | Get or set file attributes
2018-12-17T22:47:44.234744538Z 67 PC: 135a6 | Get or set file attributes
2018-12-17T22:47:44.246095667Z 61 PC: 13d9d | Open file (Filename = 'TEST.EXE')
2018-12-17T22:47:44.254771123Z 63 PC: 13e70 | Read file or device (Read 7776 bytes on handle 5)
2018-12-17T22:47:44.263886952Z 62 PC: 13ded | Close file
2018-12-17T22:47:44.266634523Z 67 PC: 135a6 | Get or set file attributes
2018-12-17T22:47:44.27847841Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.280664453Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.28354964Z 59 PC: 140b3 | Change current directory
2018-12-17T22:47:44.29205736Z 59 PC: 140b3 | Change current directory
2018-12-17T22:47:44.298022975Z 26 PC: 1361d | Set disk transfer address
2018-12-17T22:47:44.299273667Z 78 PC: 13629 | Find first file
2018-12-17T22:47:44.306220967Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.307927408Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.31192094Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.313530139Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.318109535Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.319675676Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.323474801Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.325905113Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.33114574Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.332423247Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.337026804Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.338330192Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.342778211Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.345007754Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.348545707Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.34978383Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.354991207Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.356299603Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.359792594Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.362000434Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.366710732Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.368260185Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.374058436Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.375618762Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.380332135Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.382095337Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.388120346Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.389368773Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.393898649Z 67 PC: 1357f | Get or set file attributes
2018-12-17T22:47:44.401414116Z 67 PC: 135a6 | Get or set file attributes
2018-12-17T22:47:44.412457418Z 61 PC: 13d9d | Open file (Filename = 'TEST.EXE')
2018-12-17T22:47:44.420001657Z 63 PC: 13e70 | Read file or device (Read 7776 bytes on handle 5)
2018-12-17T22:47:44.429227206Z 62 PC: 13ded | Close file
2018-12-17T22:47:44.43160868Z 67 PC: 135a6 | Get or set file attributes
2018-12-17T22:47:44.443559034Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.44528672Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.44812271Z 59 PC: 140b3 | Change current directory
2018-12-17T22:47:44.452887329Z 61 PC: 13d9d | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:47:44.464913173Z 87 PC: 135c0 | Get or set file date and time
2018-12-17T22:47:44.466473917Z 66 PC: 145d0 | Move file pointer
2018-12-17T22:47:44.467931394Z 66 PC: 145de | Move file pointer
2018-12-17T22:47:44.469756665Z 66 PC: 145ec | Move file pointer
2018-12-17T22:47:44.471381968Z 66 PC: 13ecf | Move file pointer
2018-12-17T22:47:44.472951781Z 63 PC: 13e70 | Read file or device (Read 7776 bytes on handle 5)
2018-12-17T22:47:44.481902676Z 66 PC: 145d0 | Move file pointer
2018-12-17T22:47:44.483321595Z 66 PC: 145de | Move file pointer
2018-12-17T22:47:44.484970692Z 66 PC: 145ec | Move file pointer
2018-12-17T22:47:44.487708554Z 66 PC: 13ecf | Move file pointer
2018-12-17T22:47:44.489706011Z 64 PC: 13dce | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:47:44.507589623Z 66 PC: 13ecf | Move file pointer
2018-12-17T22:47:44.513395083Z 64 PC: 13e70 | Write file or device (Write 7776 bytes on handle 5)
2018-12-17T22:47:44.523026944Z 87 PC: 135ed | Get or set file date and time
2018-12-17T22:47:44.525176419Z 62 PC: 13ded | Close file
2018-12-17T22:47:44.533967061Z 67 PC: 135a6 | Get or set file attributes
2018-12-17T22:47:44.545746901Z 14 PC: 14045 | Set default drive (Drive = 'A')
2018-12-17T22:47:44.54687302Z 25 PC: 14049 | Get default drive
2018-12-17T22:47:44.548757172Z 59 PC: 140b3 | Change current directory
2018-12-17T22:47:44.553380759Z 53 PC: 1384b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:44.554697084Z 37 PC: 13854 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:44.556514436Z 53 PC: 1384b | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:47:44.558157382Z 37 PC: 13854 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:47:44.559718938Z 53 PC: 1384b | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:44.561515939Z 37 PC: 13854 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:44.562746656Z 53 PC: 1384b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:44.564397434Z 37 PC: 13854 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:44.567247686Z 53 PC: 1384b | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:44.56932263Z 37 PC: 13854 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:44.571314121Z 53 PC: 1384b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:44.574373405Z 37 PC: 13854 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:44.576317868Z 53 PC: 1384b | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:47:44.578307062Z 37 PC: 13854 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:47:44.58128396Z 53 PC: 1384b | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:47:44.583254485Z 37 PC: 13854 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:47:44.585156129Z 53 PC: 1384b | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:47:44.589073684Z 37 PC: 13854 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:47:44.590697766Z 53 PC: 1384b | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:47:44.592176685Z 37 PC: 13854 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:47:44.594329506Z 53 PC: 1384b | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:47:44.596388224Z 37 PC: 13854 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:47:44.598182231Z 53 PC: 1384b | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:47:44.601054265Z 37 PC: 13854 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:47:44.60240377Z 53 PC: 1384b | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:47:44.603795888Z 37 PC: 13854 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:47:44.606195045Z 53 PC: 1384b | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:47:44.607586657Z 37 PC: 13854 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:47:44.608922726Z 53 PC: 1384b | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:47:44.611375685Z 37 PC: 13854 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:47:44.613047148Z 53 PC: 1384b | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:47:44.614768192Z 37 PC: 13854 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:47:44.616380145Z 53 PC: 1384b | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:47:44.61904853Z 37 PC: 13854 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:47:44.620888583Z 53 PC: 1384b | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:44.622728313Z 37 PC: 13854 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:44.625411813Z 53 PC: 1384b | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:47:44.627392276Z 37 PC: 13854 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:47:44.628883271Z 41 PC: 13802 | Parse filename
2018-12-17T22:47:44.631331314Z 41 PC: 13810 | Parse filename
2018-12-17T22:47:44.63321684Z 75 PC: 1381b | Execute program
2018-12-17T22:47:44.652044943Z 9 PC: 1b3f5 | Display string (String= 'Sophos Ltd, Oxford sacrificial COM goat 7400H bytes long ')
2018-12-17T22:47:44.659342732Z 0 PC: 1b3f9 | Program terminate
2018-12-17T22:47:44.663041744Z 53 PC: 1384b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:44.664652147Z 37 PC: 13854 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:44.667416383Z 53 PC: 1384b | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:47:44.66908018Z 37 PC: 13854 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:47:44.670675471Z 53 PC: 1384b | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:44.673243157Z 37 PC: 13854 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:44.674715839Z 53 PC: 1384b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:44.676174762Z 37 PC: 13854 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:44.679616089Z 53 PC: 1384b | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:44.681596659Z 37 PC: 13854 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:44.683480002Z 53 PC: 1384b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:44.68583924Z 37 PC: 13854 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:44.687572232Z 53 PC: 1384b | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:47:44.689283394Z 37 PC: 13854 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:47:44.691611387Z 53 PC: 1384b | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:47:44.693012969Z 37 PC: 13854 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:47:44.694305288Z 53 PC: 1384b | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:47:44.697986597Z 37 PC: 13854 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:47:44.699660911Z 53 PC: 1384b | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:47:44.701306409Z 37 PC: 13854 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:47:44.703635999Z 53 PC: 1384b | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:47:44.704914037Z 37 PC: 13854 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:47:44.706078149Z 53 PC: 1384b | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:47:44.707867457Z 37 PC: 13854 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:47:44.709434413Z 53 PC: 1384b | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:47:44.711017421Z 37 PC: 13854 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:47:44.71286259Z 53 PC: 1384b | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:47:44.71442833Z 37 PC: 13854 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:47:44.715904415Z 53 PC: 1384b | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:47:44.717762803Z 37 PC: 13854 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:47:44.719128546Z 53 PC: 1384b | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:47:44.720518166Z 37 PC: 13854 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:47:44.722318089Z 53 PC: 1384b | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:47:44.723747897Z 37 PC: 13854 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:47:44.725141964Z 53 PC: 1384b | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:44.727402846Z 37 PC: 13854 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:44.728824249Z 53 PC: 1384b | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:47:44.73050645Z 37 PC: 13854 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:47:44.732370054Z 14 PC: 14045 | Set default drive (Drive = 'A')
2018-12-17T22:47:44.733765634Z 25 PC: 14049 | Get default drive
2018-12-17T22:47:44.735935696Z 59 PC: 140b3 | Change current directory
2018-12-17T22:47:44.740863097Z 59 PC: 140b3 | Change current directory
2018-12-17T22:47:44.746059646Z 26 PC: 1361d | Set disk transfer address
2018-12-17T22:47:44.747927699Z 78 PC: 13629 | Find first file
2018-12-17T22:47:44.754963563Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.75591029Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.760269577Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.761425036Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.765397629Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.767266491Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.771671153Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.77307086Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.77767319Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.778848024Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.782250091Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.783962308Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.7881207Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.789268162Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.793774672Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.79488428Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.798703796Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.800105529Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.803279412Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.804784203Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.808882793Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.811053185Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.815990859Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.817095076Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.823380556Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.825177633Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.829437163Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.830535401Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.835306977Z 67 PC: 1357f | Get or set file attributes
2018-12-17T22:47:44.842308846Z 67 PC: 135a6 | Get or set file attributes
2018-12-17T22:47:44.8534695Z 61 PC: 13d9d | Open file (Filename = 'TEST.EXE')
2018-12-17T22:47:44.861301497Z 63 PC: 13e70 | Read file or device (Read 7776 bytes on handle 5)
2018-12-17T22:47:44.86987641Z 66 PC: 13ecf | Move file pointer
2018-12-17T22:47:44.871386496Z 87 PC: 135c0 | Get or set file date and time
2018-12-17T22:47:44.873519628Z 64 PC: 13e70 | Write file or device (Write 7776 bytes on handle 5)
2018-12-17T22:47:44.883280252Z 66 PC: 145d0 | Move file pointer
2018-12-17T22:47:44.884853836Z 66 PC: 145de | Move file pointer
2018-12-17T22:47:44.88745802Z 66 PC: 145ec | Move file pointer
2018-12-17T22:47:44.889491376Z 66 PC: 13ecf | Move file pointer
2018-12-17T22:47:44.89250035Z 64 PC: 13e70 | Write file or device (Write 7776 bytes on handle 5)
2018-12-17T22:47:44.90151948Z 87 PC: 135ed | Get or set file date and time
2018-12-17T22:47:44.903085518Z 62 PC: 13ded | Close file
2018-12-17T22:47:44.90935221Z 67 PC: 135a6 | Get or set file attributes
2018-12-17T22:47:44.916650322Z 26 PC: 13641 | Set disk transfer address
2018-12-17T22:47:44.91766533Z 79 PC: 13646 | Find next file
2018-12-17T22:47:44.919704784Z 59 PC: 140b3 | Change current directory
2018-12-17T22:47:44.923170457Z 42 PC: 12f65 | Get date 0x12f65: cmp dh, 6
0x12f68: jne 0x12f85
0x12f6a: cmp dl, 0x1d
0x12f6d: jne 0x12f85
0x12f6f: mov ch, 0
0x12f71: mov ah, 5
0x12f73: mov dh, 0
0x12f75: mov dl, 0x80
0x12f77: int 0x13
0x12f79: inc ch
0x12f7b: cmp ch, 0x20
0x12f7e: loopne 0x12f71
0x12f80: ljmp 0xffff:0xfff0
0x12f85: ret
0x12f86: ret
0x12f87: add bp, word ptr [bp + si]
0x12f89: sub al, byte ptr cs:[bp + di]
0x12f8c: inc bp
0x12f8d: pop ax
0x12f8e: inc bp
2018-12-17T22:47:44.924900238Z 14 PC: 14045 | Set default drive (Drive = 'A')
2018-12-17T22:47:44.926332544Z 25 PC: 14049 | Get default drive
2018-12-17T22:47:44.927781502Z 59 PC: 140b3 | Change current directory
2018-12-17T22:47:44.931154466Z 64 PC: 13cf8 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:47:44.940304231Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:44.942973223Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:47:44.944224472Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:44.945386783Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:44.94716018Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:44.948332375Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:44.949476643Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:47:44.951276104Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:47:44.952477579Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:47:44.953606456Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:47:44.955759829Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:47:44.95683664Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:47:44.958417902Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:47:44.960353995Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:47:44.961556724Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:47:44.963125602Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:47:44.964418566Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:47:44.965579485Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:44.967165089Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:47:44.968286658Z 76 PC: 13a70 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":9309,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:22:50.895847962Z 53 PC: 138da | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T12:22:50.898330461Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.89974194Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.901151299Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.903541711Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.904727111Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.905973431Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.907980413Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.909831674Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.911177067Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.913254336Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.914907968Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.916273097Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.917879306Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.919683277Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.920845405Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.921992114Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.923899223Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.92525986Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:50.926544119Z 37 PC: 138ef | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T12:22:50.928672526Z 37 PC: 138f7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:22:50.930053532Z 37 PC: 138ff | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:22:50.931357221Z 37 PC: 13907 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-25T12:22:50.933906692Z 68 PC: 1442f | I/O control for devices (Set for = '')
2018-12-25T12:22:50.935757824Z 44 PC: 14566 | Get time 0x14566: mov word ptr [0x3e], cx
0x1456a: mov word ptr [0x40], dx
0x1456e: retf
0x1456f: call 0x145b6
0x14572: jb 0x14583
0x14574: mov cx, word ptr es:[di + 4]
0x14578: cmp cx, 1
0x1457b: je 0x14583
0x1457d: xor bx, bx
0x1457f: push cs
0x14580: call 0x240f7
0x14583: retf 4
0x14586: call 0x145b6
0x14589: jb 0x1459e
0x1458b: mov ax, cx
0x1458d: mov dx, bx
0x1458f: mov cx, word ptr es:[di + 4]
0x14593: cmp cx, 1
0x14596: je 0x1459e
0x14598: xor bx, bx
2018-12-25T12:22:50.938199976Z 25 PC: 13fec | Get default drive
2018-12-25T12:22:50.940335426Z 71 PC: 13fff | Get current directory
2018-12-25T12:22:50.959150805Z 98 PC: 12ac5 | Get current PSP
2018-12-25T12:22:50.961297721Z 67 PC: 1357f | Get or set file attributes
2018-12-25T12:22:50.969039745Z 67 PC: 135a6 | Get or set file attributes
2018-12-25T12:22:50.987746566Z 61 PC: 13d9d | Open file (Filename = 'A:\TEST.EXE')
2018-12-25T12:22:50.995130233Z 63 PC: 13e70 | Read file or device (Read 7776 bytes on handle 5)
2018-12-25T12:22:51.004522097Z 62 PC: 13ded | Close file
2018-12-25T12:22:51.006833769Z 59 PC: 140b3 | Change current directory
2018-12-25T12:22:51.012044122Z 26 PC: 1361d | Set disk transfer address
2018-12-25T12:22:51.013668806Z 78 PC: 13629 | Find first file
2018-12-25T12:22:51.021003012Z 26 PC: 13641 | Set disk transfer address
2018-12-25T12:22:51.022302047Z 79 PC: 13646 | Find next file
2018-12-25T12:22:51.026807084Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.028112903Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.032043364Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.033509239Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.03807991Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.039602878Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.043982588Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.045824382Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.04922144Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.050179022Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.054443751Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.055881878Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.05903822Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.061200898Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.065212977Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.066175669Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.07078975Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.071930158Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.075106762Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.076667664Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.080604591Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.081460463Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.085743896Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.086791285Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.090465586Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.092183845Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.096533482Z 67 PC: 1357f | Get or set file attributes (See above)
2018-12-25T12:22:51.102701454Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.11621512Z 61 PC: 13d9d | Open file (See above)
2018-12-25T12:22:51.123646619Z 63 PC: 13e70 | Read file or device (See above)
2018-12-25T12:22:51.132636497Z 62 PC: 13ded | Close file (See above)
2018-12-25T12:22:51.134843492Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.146625708Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.148048836Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.151850229Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.157540644Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.162522353Z 26 PC: 1361d | Set disk transfer address (See above)
2018-12-25T12:22:51.16452889Z 78 PC: 13629 | Find first file (See above)
2018-12-25T12:22:51.17851014Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.180251822Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.185150983Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.18693831Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.19130215Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.193857569Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.197419589Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.198782025Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.20352256Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.20475435Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.208125683Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.209413612Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.214073653Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.215557949Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.218902725Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.220217378Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.224160536Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.225372261Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.229173593Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.230237734Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.233561848Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.234624639Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.238457639Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.239673399Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.243757953Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.245634095Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.249275484Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.250390324Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.254411817Z 67 PC: 1357f | Get or set file attributes (See above)
2018-12-25T12:22:51.260506149Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.271442901Z 61 PC: 13d9d | Open file (See above)
2018-12-25T12:22:51.278666237Z 63 PC: 13e70 | Read file or device (See above)
2018-12-25T12:22:51.287556627Z 62 PC: 13ded | Close file (See above)
2018-12-25T12:22:51.290436349Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.302002281Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.303454085Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.306739531Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.31269205Z 61 PC: 13d9d | Open file (See above)
2018-12-25T12:22:51.320379446Z 87 PC: 135c0 | Get or set file date and time
2018-12-25T12:22:51.322422258Z 66 PC: 145d0 | Move file pointer
2018-12-25T12:22:51.32409471Z 66 PC: 145de | Move file pointer
2018-12-25T12:22:51.325621032Z 66 PC: 145ec | Move file pointer
2018-12-25T12:22:51.327693513Z 66 PC: 13ecf | Move file pointer
2018-12-25T12:22:51.328904255Z 63 PC: 13e70 | Read file or device (See above)
2018-12-25T12:22:51.334310159Z 66 PC: 145d0 | Move file pointer (See above)
2018-12-25T12:22:51.335862876Z 66 PC: 145de | Move file pointer (See above)
2018-12-25T12:22:51.338286201Z 66 PC: 145ec | Move file pointer (See above)
2018-12-25T12:22:51.340393802Z 66 PC: 13ecf | Move file pointer (See above)
2018-12-25T12:22:51.342759107Z 64 PC: 13dce | Write file or device (Write 0 bytes on handle 5)
2018-12-25T12:22:51.351758473Z 66 PC: 13ecf | Move file pointer (See above)
2018-12-25T12:22:51.354714245Z 64 PC: 13e70 | Write file or device (See above)
2018-12-25T12:22:51.364581227Z 87 PC: 135ed | Get or set file date and time
2018-12-25T12:22:51.366735223Z 62 PC: 13ded | Close file (See above)
2018-12-25T12:22:51.375700207Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.387291944Z 14 PC: 14045 | Set default drive (Drive = 'A')
2018-12-25T12:22:51.389699663Z 25 PC: 14049 | Get default drive
2018-12-25T12:22:51.391002406Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.396536523Z 53 PC: 1384b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T12:22:51.397986866Z 37 PC: 13854 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T12:22:51.399486457Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.401771831Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.403363257Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.404996892Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.407041233Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.408578552Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.409896254Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.412017915Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.413288083Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.414590282Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.416869405Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.41817187Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.419419624Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.421770819Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.42310855Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.42441139Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.42695683Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.428602444Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.430153285Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.432751944Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.434295625Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.435962574Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.438231805Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.43965799Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.441700364Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.443720273Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.445640356Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.448097979Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.450492753Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.452220307Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.453866483Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.456092444Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.457515206Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.459138004Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.461755521Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.463514392Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.465409266Z 41 PC: 13802 | Parse filename
2018-12-25T12:22:51.469007446Z 41 PC: 13810 | Parse filename
2018-12-25T12:22:51.470630169Z 75 PC: 1381b | Execute program
2018-12-25T12:22:51.498149575Z 9 PC: 1b3f5 | Display string (String= 'Sophos Ltd, Oxford sacrificial COM goat 7400H bytes long ')
2018-12-25T12:22:51.506642331Z 0 PC: 1b3f9 | Program terminate
2018-12-25T12:22:51.510376807Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.512187862Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.514897032Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.516788848Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.518140049Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.522395055Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.524721384Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.526141626Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.528446815Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.530309006Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.532156872Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.534882903Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.536757883Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.538433967Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.540484761Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.541904272Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.543354235Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.546167492Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.547781662Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.549518471Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.551891135Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.553640432Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.555303372Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.557892355Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.560506636Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.562244198Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.564851176Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.566534972Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.568183969Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.570390873Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.572053629Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.573950125Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.576352386Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.578047539Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.579646163Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.581265281Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.582913367Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.585405771Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.587409413Z 14 PC: 14045 | Set default drive (See above)
2018-12-25T12:22:51.589188068Z 25 PC: 14049 | Get default drive (See above)
2018-12-25T12:22:51.591582731Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.597005921Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.602617987Z 26 PC: 1361d | Set disk transfer address (See above)
2018-12-25T12:22:51.604770389Z 78 PC: 13629 | Find first file (See above)
2018-12-25T12:22:51.612931446Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.614156644Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.618826454Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.620112814Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.624371922Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.626468846Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.630001812Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.631096194Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.637719596Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.639099741Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.643455838Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.64556546Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.649569812Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.650783034Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.655474529Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.656861545Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.661028163Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.663475816Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.666949793Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.66826508Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.672433425Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.673762323Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.677723515Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.679542155Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.683583176Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.68484488Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.689897769Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.691072729Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.696406112Z 67 PC: 1357f | Get or set file attributes (See above)
2018-12-25T12:22:51.703335262Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:52.456338137Z 61 PC: 13d9d | Open file (See above)
2018-12-25T12:22:52.463971228Z 63 PC: 13e70 | Read file or device (See above)
2018-12-25T12:22:52.549361488Z 66 PC: 13ecf | Move file pointer (See above)
2018-12-25T12:22:52.551298411Z 87 PC: 135c0 | Get or set file date and time (See above)
2018-12-25T12:22:52.55345187Z 64 PC: 13e70 | Write file or device (See above)
2018-12-25T12:22:52.767708119Z 66 PC: 145d0 | Move file pointer (See above)
2018-12-25T12:22:52.769524932Z 66 PC: 145de | Move file pointer (See above)
2018-12-25T12:22:52.772309641Z 66 PC: 145ec | Move file pointer (See above)
2018-12-25T12:22:52.774885553Z 66 PC: 13ecf | Move file pointer (See above)
2018-12-25T12:22:52.778808322Z 64 PC: 13e70 | Write file or device (See above)
2018-12-25T12:22:52.97227126Z 87 PC: 135ed | Get or set file date and time (See above)
2018-12-25T12:22:52.973952097Z 62 PC: 13ded | Close file (See above)
2018-12-25T12:22:53.19696983Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:53.214926103Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:53.217113743Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:53.221019045Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:53.229133893Z 42 PC: 12f65 | Get date 0x12f65: cmp dh, 6
0x12f68: jne 0x12f85
0x12f6a: cmp dl, 0x1d
0x12f6d: jne 0x12f85
0x12f6f: mov ch, 0
0x12f71: mov ah, 5
0x12f73: mov dh, 0
0x12f75: mov dl, 0x80
0x12f77: int 0x13
0x12f79: inc ch
0x12f7b: cmp ch, 0x20
0x12f7e: loopne 0x12f71
0x12f80: ljmp 0xffff:0xfff0
0x12f85: ret
0x12f86: ret
0x12f87: add bp, word ptr [bp + si]
0x12f89: sub al, byte ptr cs:[bp + di]
0x12f8c: inc bp
0x12f8d: pop ax
0x12f8e: inc bp
2018-12-25T12:22:53.233386149Z 14 PC: 14045 | Set default drive (See above)
2018-12-25T12:22:53.235205616Z 25 PC: 14049 | Get default drive (See above)
2018-12-25T12:22:53.237809143Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:53.245561936Z 64 PC: 13cf8 | Write file or device (Write 0 bytes on handle 1)
2018-12-25T12:22:53.248006809Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T12:22:53.250994436Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.25300604Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.254776375Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.257318717Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.259314628Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.26103232Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.263549204Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.265542373Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.26725571Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.269628995Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.271050273Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.272321989Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.275429958Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.277101125Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.278776225Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.281640407Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.283531452Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.284839461Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:53.286868432Z 76 PC: 13a70 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":1,"Month":6,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":9309,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:22:51.163046124Z 53 PC: 138da | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T12:22:51.168023854Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.169101208Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.170070714Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.171638854Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.172689594Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.173674035Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.17508608Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.176166741Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.177247603Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.180640876Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.181662866Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.182709207Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.184263864Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.185447929Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.186607023Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.188474098Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.189684082Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.191237688Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.193127632Z 37 PC: 138ef | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T12:22:51.194496779Z 37 PC: 138f7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:22:51.195852291Z 37 PC: 138ff | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:22:51.19768041Z 37 PC: 13907 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-25T12:22:51.199125256Z 68 PC: 1442f | I/O control for devices (Set for = '')
2018-12-25T12:22:51.200494227Z 44 PC: 14566 | Get time 0x14566: mov word ptr [0x3e], cx
0x1456a: mov word ptr [0x40], dx
0x1456e: retf
0x1456f: call 0x145b6
0x14572: jb 0x14583
0x14574: mov cx, word ptr es:[di + 4]
0x14578: cmp cx, 1
0x1457b: je 0x14583
0x1457d: xor bx, bx
0x1457f: push cs
0x14580: call 0x240f7
0x14583: retf 4
0x14586: call 0x145b6
0x14589: jb 0x1459e
0x1458b: mov ax, cx
0x1458d: mov dx, bx
0x1458f: mov cx, word ptr es:[di + 4]
0x14593: cmp cx, 1
0x14596: je 0x1459e
0x14598: xor bx, bx
2018-12-25T12:22:51.203419005Z 25 PC: 13fec | Get default drive
2018-12-25T12:22:51.204684892Z 71 PC: 13fff | Get current directory
2018-12-25T12:22:51.207756028Z 98 PC: 12ac5 | Get current PSP
2018-12-25T12:22:51.211134032Z 67 PC: 1357f | Get or set file attributes
2018-12-25T12:22:51.21705444Z 67 PC: 135a6 | Get or set file attributes
2018-12-25T12:22:51.235555541Z 61 PC: 13d9d | Open file (Filename = 'A:\TEST.EXE')
2018-12-25T12:22:51.243556858Z 63 PC: 13e70 | Read file or device (Read 7776 bytes on handle 5)
2018-12-25T12:22:51.251815159Z 62 PC: 13ded | Close file
2018-12-25T12:22:51.254438654Z 59 PC: 140b3 | Change current directory
2018-12-25T12:22:51.260282798Z 26 PC: 1361d | Set disk transfer address
2018-12-25T12:22:51.261473192Z 78 PC: 13629 | Find first file
2018-12-25T12:22:51.268949604Z 26 PC: 13641 | Set disk transfer address
2018-12-25T12:22:51.277681188Z 79 PC: 13646 | Find next file
2018-12-25T12:22:51.281421249Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.28259606Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.28763892Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.289275141Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.29338701Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.295501616Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.29904462Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.300332474Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.304074978Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.305339526Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.309273036Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.310864934Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.313820683Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.314902738Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.318977993Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.319989858Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.323116348Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.325260088Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.328305911Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.32908173Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.331487689Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.3328764Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.336474058Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.337695221Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.341603659Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.342596552Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.346171059Z 67 PC: 1357f | Get or set file attributes (See above)
2018-12-25T12:22:51.351765328Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.361135641Z 61 PC: 13d9d | Open file (See above)
2018-12-25T12:22:51.367454291Z 63 PC: 13e70 | Read file or device (See above)
2018-12-25T12:22:51.374680197Z 62 PC: 13ded | Close file (See above)
2018-12-25T12:22:51.376664099Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.386956691Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.389310714Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.392100118Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.396760358Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.40183216Z 26 PC: 1361d | Set disk transfer address (See above)
2018-12-25T12:22:51.40319697Z 78 PC: 13629 | Find first file (See above)
2018-12-25T12:22:51.409594355Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.41152318Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.414958377Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.415928757Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.419881738Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.420917993Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.423874479Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.425309236Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.428613862Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.429518698Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.433784049Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.434792588Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.438127279Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.440474869Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.443484074Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.444581295Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.448653439Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.449963855Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.453230641Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.45499003Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.457853942Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.469314068Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.473768858Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.474879263Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.478558363Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.480738575Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.484220683Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.485233708Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.489462965Z 67 PC: 1357f | Get or set file attributes (See above)
2018-12-25T12:22:51.495342542Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.505208562Z 61 PC: 13d9d | Open file (See above)
2018-12-25T12:22:51.512141484Z 63 PC: 13e70 | Read file or device (See above)
2018-12-25T12:22:51.520820584Z 62 PC: 13ded | Close file (See above)
2018-12-25T12:22:51.522726668Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.533256245Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.534549846Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.537425837Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.543099093Z 61 PC: 13d9d | Open file (See above)
2018-12-25T12:22:51.550085862Z 87 PC: 135c0 | Get or set file date and time
2018-12-25T12:22:51.551822394Z 66 PC: 145d0 | Move file pointer
2018-12-25T12:22:51.554181159Z 66 PC: 145de | Move file pointer
2018-12-25T12:22:51.555852456Z 66 PC: 145ec | Move file pointer
2018-12-25T12:22:51.557577949Z 66 PC: 13ecf | Move file pointer
2018-12-25T12:22:51.55961106Z 63 PC: 13e70 | Read file or device (See above)
2018-12-25T12:22:51.567555182Z 66 PC: 145d0 | Move file pointer (See above)
2018-12-25T12:22:51.569310146Z 66 PC: 145de | Move file pointer (See above)
2018-12-25T12:22:51.571277082Z 66 PC: 145ec | Move file pointer (See above)
2018-12-25T12:22:51.572624742Z 66 PC: 13ecf | Move file pointer (See above)
2018-12-25T12:22:51.574142012Z 64 PC: 13dce | Write file or device (Write 0 bytes on handle 5)
2018-12-25T12:22:51.590001835Z 66 PC: 13ecf | Move file pointer (See above)
2018-12-25T12:22:51.593343677Z 64 PC: 13e70 | Write file or device (See above)
2018-12-25T12:22:51.602847017Z 87 PC: 135ed | Get or set file date and time
2018-12-25T12:22:51.604799829Z 62 PC: 13ded | Close file (See above)
2018-12-25T12:22:51.612940992Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.62761801Z 14 PC: 14045 | Set default drive (Drive = 'A')
2018-12-25T12:22:51.628957257Z 25 PC: 14049 | Get default drive
2018-12-25T12:22:51.630261671Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.635489827Z 53 PC: 1384b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T12:22:51.636842604Z 37 PC: 13854 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T12:22:51.638162915Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.640086283Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.641208563Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.642320197Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.644312526Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.645821326Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.647358687Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.649251764Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.650523353Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.651821046Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.653460944Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.654840324Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.65612674Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.657740135Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.658794847Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.660134407Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.661727804Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.662832846Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.664447286Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.665768583Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.667099754Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.669503606Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.67067289Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.671751049Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.673758057Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.675010179Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.676201192Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.678146612Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.679324575Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.680600496Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.683269894Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.684535189Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.686535853Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.688855852Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.690149575Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.691493841Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.693889576Z 41 PC: 13802 | Parse filename
2018-12-25T12:22:51.695452369Z 41 PC: 13810 | Parse filename
2018-12-25T12:22:51.696986579Z 75 PC: 1381b | Execute program
2018-12-25T12:22:51.712849317Z 9 PC: 1b3f5 | Display string (String= 'Sophos Ltd, Oxford sacrificial COM goat 7400H bytes long ')
2018-12-25T12:22:51.718395915Z 0 PC: 1b3f9 | Program terminate
2018-12-25T12:22:51.721462556Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.72374136Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.726064415Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.727645312Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.729733297Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.731152254Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.732511265Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.734738607Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.736052067Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.737393491Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.73934728Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.740769581Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.74216457Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.744178527Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.745507507Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.746869695Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.748696929Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.750055221Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.751563141Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.753391022Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.754713967Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.756552626Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.75787655Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.759224114Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.761317954Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.764439259Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.765663232Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.767648277Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.769280973Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.770771043Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.772934449Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.77709604Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.778510514Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.780693974Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.782433114Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.784216357Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.786341429Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.788047577Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.789496006Z 14 PC: 14045 | Set default drive (See above)
2018-12-25T12:22:51.791652894Z 25 PC: 14049 | Get default drive (See above)
2018-12-25T12:22:51.793234344Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.797583909Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.802997948Z 26 PC: 1361d | Set disk transfer address (See above)
2018-12-25T12:22:51.804496509Z 78 PC: 13629 | Find first file (See above)
2018-12-25T12:22:51.810981813Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.813129327Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.816926583Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.818192088Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.822755154Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.823792688Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.826784116Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.82849827Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.831952901Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.832918546Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.837684755Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.838852443Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.842506845Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.844653278Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.848295719Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.849503509Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.854653303Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.856150284Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.859344839Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.861278806Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.864848894Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.866055571Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.870451914Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.871934718Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.875585335Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.877511496Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.881435539Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.882658248Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.887328789Z 67 PC: 1357f | Get or set file attributes (See above)
2018-12-25T12:22:51.893289865Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.903462997Z 61 PC: 13d9d | Open file (See above)
2018-12-25T12:22:51.910893165Z 63 PC: 13e70 | Read file or device (See above)
2018-12-25T12:22:51.918901873Z 66 PC: 13ecf | Move file pointer (See above)
2018-12-25T12:22:51.921319279Z 87 PC: 135c0 | Get or set file date and time (See above)
2018-12-25T12:22:51.923633097Z 64 PC: 13e70 | Write file or device (See above)
2018-12-25T12:22:51.93212638Z 66 PC: 145d0 | Move file pointer (See above)
2018-12-25T12:22:51.933758061Z 66 PC: 145de | Move file pointer (See above)
2018-12-25T12:22:51.936132459Z 66 PC: 145ec | Move file pointer (See above)
2018-12-25T12:22:51.937930511Z 66 PC: 13ecf | Move file pointer (See above)
2018-12-25T12:22:51.9403916Z 64 PC: 13e70 | Write file or device (See above)
2018-12-25T12:22:51.949745097Z 87 PC: 135ed | Get or set file date and time (See above)
2018-12-25T12:22:51.951632693Z 62 PC: 13ded | Close file (See above)
2018-12-25T12:22:51.959687999Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.970534214Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.971997042Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.974722939Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.979778097Z 42 PC: 12f65 | Get date 0x12f65: cmp dh, 6
0x12f68: jne 0x12f85
0x12f6a: cmp dl, 0x1d
0x12f6d: jne 0x12f85
0x12f6f: mov ch, 0
0x12f71: mov ah, 5
0x12f73: mov dh, 0
0x12f75: mov dl, 0x80
0x12f77: int 0x13
0x12f79: inc ch
0x12f7b: cmp ch, 0x20
0x12f7e: loopne 0x12f71
0x12f80: ljmp 0xffff:0xfff0
0x12f85: ret
0x12f86: ret
0x12f87: add bp, word ptr [bp + si]
0x12f89: sub al, byte ptr cs:[bp + di]
0x12f8c: inc bp
0x12f8d: pop ax
0x12f8e: inc bp
2018-12-25T12:22:51.982264204Z 14 PC: 14045 | Set default drive (See above)
2018-12-25T12:22:51.983778632Z 25 PC: 14049 | Get default drive (See above)
2018-12-25T12:22:51.985702092Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.989167382Z 64 PC: 13cf8 | Write file or device (Write 0 bytes on handle 1)
2018-12-25T12:22:51.991916252Z 37 PC: 13a31 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T12:22:51.994069789Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:51.995421327Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:51.996463763Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:51.998834091Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:52.000265739Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:52.001639803Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:52.00401474Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:52.00538329Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:52.006726886Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:52.009408248Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:52.010730577Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:52.012211467Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:52.014097478Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:52.015149611Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:52.017285782Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:52.018412436Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:52.019461087Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:52.021472543Z 37 PC: 13a31 | Set interrupt vector (See above)
2018-12-25T12:22:52.022575894Z 76 PC: 13a70 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":29,"Month":6,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":9309,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:22:51.128575248Z 53 PC: 138da | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T12:22:51.130211232Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.131227817Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.132220673Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.134175029Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.136504839Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.138345818Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.145113924Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.146332161Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.147700518Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.150786752Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.151818338Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.152852282Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.154589661Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.155866715Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.157312422Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.160298427Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.161864894Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.163019239Z 53 PC: 138da | Get interrupt vector (See above)
2018-12-25T12:22:51.165081144Z 37 PC: 138ef | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T12:22:51.166432884Z 37 PC: 138f7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:22:51.167590127Z 37 PC: 138ff | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:22:51.169237066Z 37 PC: 13907 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-25T12:22:51.171222755Z 68 PC: 1442f | I/O control for devices (Set for = '')
2018-12-25T12:22:51.173205572Z 44 PC: 14566 | Get time 0x14566: mov word ptr [0x3e], cx
0x1456a: mov word ptr [0x40], dx
0x1456e: retf
0x1456f: call 0x145b6
0x14572: jb 0x14583
0x14574: mov cx, word ptr es:[di + 4]
0x14578: cmp cx, 1
0x1457b: je 0x14583
0x1457d: xor bx, bx
0x1457f: push cs
0x14580: call 0x240f7
0x14583: retf 4
0x14586: call 0x145b6
0x14589: jb 0x1459e
0x1458b: mov ax, cx
0x1458d: mov dx, bx
0x1458f: mov cx, word ptr es:[di + 4]
0x14593: cmp cx, 1
0x14596: je 0x1459e
0x14598: xor bx, bx
2018-12-25T12:22:51.177035161Z 25 PC: 13fec | Get default drive
2018-12-25T12:22:51.178498746Z 71 PC: 13fff | Get current directory
2018-12-25T12:22:51.181830319Z 98 PC: 12ac5 | Get current PSP
2018-12-25T12:22:51.194603669Z 67 PC: 1357f | Get or set file attributes
2018-12-25T12:22:51.201958566Z 67 PC: 135a6 | Get or set file attributes
2018-12-25T12:22:51.218517403Z 61 PC: 13d9d | Open file (Filename = 'A:\TEST.EXE')
2018-12-25T12:22:51.22716099Z 63 PC: 13e70 | Read file or device (Read 7776 bytes on handle 5)
2018-12-25T12:22:51.244639617Z 62 PC: 13ded | Close file
2018-12-25T12:22:51.247980485Z 59 PC: 140b3 | Change current directory
2018-12-25T12:22:51.254129796Z 26 PC: 1361d | Set disk transfer address
2018-12-25T12:22:51.255698773Z 78 PC: 13629 | Find first file
2018-12-25T12:22:51.262213607Z 26 PC: 13641 | Set disk transfer address
2018-12-25T12:22:51.264048594Z 79 PC: 13646 | Find next file
2018-12-25T12:22:51.267657758Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.268733848Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.272317138Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.274002992Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.277389814Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.278938679Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.282892842Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.283970889Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.287293465Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.2887429Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.292186003Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.293469182Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.29693174Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.297662255Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.299977238Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.301214934Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.303456867Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.304997743Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.308535709Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.309642447Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.313159648Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.315554187Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.319843617Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.320923844Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.325010544Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.326282352Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.330676581Z 67 PC: 1357f | Get or set file attributes (See above)
2018-12-25T12:22:51.33699048Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.34714028Z 61 PC: 13d9d | Open file (See above)
2018-12-25T12:22:51.35411868Z 63 PC: 13e70 | Read file or device (See above)
2018-12-25T12:22:51.362783976Z 62 PC: 13ded | Close file (See above)
2018-12-25T12:22:51.364854376Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.375022031Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.376619265Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.379056499Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.384041518Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.388479233Z 26 PC: 1361d | Set disk transfer address (See above)
2018-12-25T12:22:51.38952882Z 78 PC: 13629 | Find first file (See above)
2018-12-25T12:22:51.395912711Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.397738639Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.401439109Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.402592757Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.407306815Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.408430116Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.413422816Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.415960755Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.419748214Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.421092667Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.425215459Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.426816628Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.430612431Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.432720327Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.436030543Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.437301587Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.441667112Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.443329589Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.446631066Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.44862922Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.452083817Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.453359409Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.458024494Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.459651919Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.46317128Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.464397553Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.468195705Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.469263805Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.473303636Z 67 PC: 1357f | Get or set file attributes (See above)
2018-12-25T12:22:51.47957835Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.48941265Z 61 PC: 13d9d | Open file (See above)
2018-12-25T12:22:51.495948428Z 63 PC: 13e70 | Read file or device (See above)
2018-12-25T12:22:51.504324137Z 62 PC: 13ded | Close file (See above)
2018-12-25T12:22:51.506297109Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.516249677Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.518269056Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.52067849Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.525519095Z 61 PC: 13d9d | Open file (See above)
2018-12-25T12:22:51.532674244Z 87 PC: 135c0 | Get or set file date and time
2018-12-25T12:22:51.534146859Z 66 PC: 145d0 | Move file pointer
2018-12-25T12:22:51.535503027Z 66 PC: 145de | Move file pointer
2018-12-25T12:22:51.538321542Z 66 PC: 145ec | Move file pointer
2018-12-25T12:22:51.539879685Z 66 PC: 13ecf | Move file pointer
2018-12-25T12:22:51.541482297Z 63 PC: 13e70 | Read file or device (See above)
2018-12-25T12:22:51.549694431Z 66 PC: 145d0 | Move file pointer (See above)
2018-12-25T12:22:51.551076297Z 66 PC: 145de | Move file pointer (See above)
2018-12-25T12:22:51.552338801Z 66 PC: 145ec | Move file pointer (See above)
2018-12-25T12:22:51.553987386Z 66 PC: 13ecf | Move file pointer (See above)
2018-12-25T12:22:51.55537258Z 64 PC: 13dce | Write file or device (Write 0 bytes on handle 5)
2018-12-25T12:22:51.562966949Z 66 PC: 13ecf | Move file pointer (See above)
2018-12-25T12:22:51.566389597Z 64 PC: 13e70 | Write file or device (See above)
2018-12-25T12:22:51.574839727Z 87 PC: 135ed | Get or set file date and time
2018-12-25T12:22:51.576720391Z 62 PC: 13ded | Close file (See above)
2018-12-25T12:22:51.584879096Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.597997509Z 14 PC: 14045 | Set default drive (Drive = 'A')
2018-12-25T12:22:51.599328591Z 25 PC: 14049 | Get default drive
2018-12-25T12:22:51.601168529Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.605060026Z 53 PC: 1384b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T12:22:51.606183743Z 37 PC: 13854 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-25T12:22:51.607991757Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.609134243Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.610462772Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.612479516Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.613520784Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.614632764Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.616055869Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.6171191Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.618366562Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.61972002Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.621217264Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.629036523Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.630436773Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.632080974Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.634129063Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.636054207Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.637670535Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.639839378Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.641790011Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.64330103Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.645459185Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.646893825Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.648285484Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.650757204Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.651872795Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.652997034Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.654707901Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.655988411Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.657132963Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.663047366Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.664628496Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.667189229Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.669696431Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.671166822Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.672592303Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.674978551Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.676541361Z 41 PC: 13802 | Parse filename
2018-12-25T12:22:51.67817073Z 41 PC: 13810 | Parse filename
2018-12-25T12:22:51.680768921Z 75 PC: 1381b | Execute program
2018-12-25T12:22:51.698194674Z 9 PC: 1b3f5 | Display string (String= 'Sophos Ltd, Oxford sacrificial COM goat 7400H bytes long ')
2018-12-25T12:22:51.703997173Z 0 PC: 1b3f9 | Program terminate
2018-12-25T12:22:51.708286582Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.709503423Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.710713631Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.715726847Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.717390169Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.718806696Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.721019585Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.722134965Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.723074152Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.725114759Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.72687562Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.728544482Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.731206055Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.732822142Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.734344703Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.737028612Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.738576383Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.740402307Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.742852773Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.744444484Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.746147236Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.74868839Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.750217268Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.751843176Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.753590556Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.754829751Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.756210604Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.757933662Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.759110654Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.760503319Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.762985829Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.764988665Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.767061998Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.768961077Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.770045823Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.77131309Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.773220789Z 53 PC: 1384b | Get interrupt vector (See above)
2018-12-25T12:22:51.774548141Z 37 PC: 13854 | Set interrupt vector (See above)
2018-12-25T12:22:51.776178403Z 14 PC: 14045 | Set default drive (See above)
2018-12-25T12:22:51.778218653Z 25 PC: 14049 | Get default drive (See above)
2018-12-25T12:22:51.779354111Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.783802784Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.789043359Z 26 PC: 1361d | Set disk transfer address (See above)
2018-12-25T12:22:51.790009102Z 78 PC: 13629 | Find first file (See above)
2018-12-25T12:22:51.796886261Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.79788556Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.801312235Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.803407323Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.806836562Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.807846865Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.811611044Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.812952402Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.816661313Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.818983601Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.822041048Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.823573281Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.828373943Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.83000506Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.83358851Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.835596785Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.83947846Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.840951197Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.84547815Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.846910626Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.85025991Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.852419689Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.85603776Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.857311677Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.862175941Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.863498243Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.868033402Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.869569298Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.873257927Z 67 PC: 1357f | Get or set file attributes (See above)
2018-12-25T12:22:51.878590825Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.888863568Z 61 PC: 13d9d | Open file (See above)
2018-12-25T12:22:51.895818982Z 63 PC: 13e70 | Read file or device (See above)
2018-12-25T12:22:51.903824737Z 66 PC: 13ecf | Move file pointer (See above)
2018-12-25T12:22:51.906057868Z 87 PC: 135c0 | Get or set file date and time (See above)
2018-12-25T12:22:51.907338067Z 64 PC: 13e70 | Write file or device (See above)
2018-12-25T12:22:51.914110044Z 66 PC: 145d0 | Move file pointer (See above)
2018-12-25T12:22:51.915165136Z 66 PC: 145de | Move file pointer (See above)
2018-12-25T12:22:51.916126412Z 66 PC: 145ec | Move file pointer (See above)
2018-12-25T12:22:51.917654982Z 66 PC: 13ecf | Move file pointer (See above)
2018-12-25T12:22:51.919160146Z 64 PC: 13e70 | Write file or device (See above)
2018-12-25T12:22:51.924898859Z 87 PC: 135ed | Get or set file date and time (See above)
2018-12-25T12:22:51.926541685Z 62 PC: 13ded | Close file (See above)
2018-12-25T12:22:51.931565018Z 67 PC: 135a6 | Get or set file attributes (See above)
2018-12-25T12:22:51.938301932Z 26 PC: 13641 | Set disk transfer address (See above)
2018-12-25T12:22:51.939629768Z 79 PC: 13646 | Find next file (See above)
2018-12-25T12:22:51.941315348Z 59 PC: 140b3 | Change current directory (See above)
2018-12-25T12:22:51.944083871Z 42 PC: 12f65 | Get date 0x12f65: cmp dh, 6
0x12f68: jne 0x12f85
0x12f6a: cmp dl, 0x1d
0x12f6d: jne 0x12f85
0x12f6f: mov ch, 0
0x12f71: mov ah, 5
0x12f73: mov dh, 0
0x12f75: mov dl, 0x80
0x12f77: int 0x13
0x12f79: inc ch
0x12f7b: cmp ch, 0x20
0x12f7e: loopne 0x12f71
0x12f80: ljmp 0xffff:0xfff0
0x12f85: ret
0x12f86: ret
0x12f87: add bp, word ptr [bp + si]
0x12f89: sub al, byte ptr cs:[bp + di]
0x12f8c: inc bp
0x12f8d: pop ax
0x12f8e: inc bp