Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Bayx

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:00:37.351096356Z 53 PC: 1370a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:00:37.353278497Z 53 PC: 1370a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:00:37.354618515Z 53 PC: 1370a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:00:37.356144462Z 53 PC: 1370a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:00:37.35849589Z 53 PC: 1370a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:00:37.360430025Z 53 PC: 1370a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:00:37.362062523Z 53 PC: 1370a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:00:37.364224736Z 53 PC: 1370a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:00:37.365593307Z 53 PC: 1370a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:00:37.36713245Z 53 PC: 1370a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:00:37.371252241Z 53 PC: 1370a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:00:37.37283207Z 53 PC: 1370a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:00:37.37459891Z 53 PC: 1370a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:00:37.376230005Z 53 PC: 1370a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:00:37.378614917Z 53 PC: 1370a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:00:37.379927845Z 53 PC: 1370a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:00:37.381237636Z 53 PC: 1370a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:00:37.3841987Z 53 PC: 1370a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:00:37.385499504Z 53 PC: 1370a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:00:37.386808775Z 37 PC: 1371f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:00:37.389717721Z 37 PC: 13727 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:00:37.392851991Z 37 PC: 1372f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:00:37.394606788Z 37 PC: 13737 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:00:37.397097539Z 68 PC: 1430d | I/O control for devices (Set for = '')
2018-12-17T23:00:37.399566318Z 48 PC: 13f1e | Get DOS version
2018-12-17T23:00:37.402282583Z 67 PC: 134df | Get or set file attributes
2018-12-17T23:00:37.414097785Z 67 PC: 13506 | Get or set file attributes
2018-12-17T23:00:37.496917096Z 61 PC: 13dd0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:00:37.505113017Z 87 PC: 13520 | Get or set file date and time
2018-12-17T23:00:37.507145847Z 63 PC: 13ea3 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:00:37.511235872Z 87 PC: 1354d | Get or set file date and time
2018-12-17T23:00:37.513329206Z 67 PC: 13506 | Get or set file attributes
2018-12-17T23:00:37.524352551Z 62 PC: 13e20 | Close file
2018-12-17T23:00:37.536821592Z 48 PC: 13f1e | Get DOS version
2018-12-17T23:00:37.539333011Z 67 PC: 134df | Get or set file attributes
2018-12-17T23:00:37.546018405Z 67 PC: 13506 | Get or set file attributes
2018-12-17T23:00:37.5586124Z 61 PC: 13dd0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:00:37.566663039Z 87 PC: 13520 | Get or set file date and time
2018-12-17T23:00:37.569576564Z 66 PC: 13f02 | Move file pointer
2018-12-17T23:00:37.572679314Z 63 PC: 13ea3 | Read file or device (Read 7728 bytes on handle 5)
2018-12-17T23:00:37.582260499Z 87 PC: 1354d | Get or set file date and time
2018-12-17T23:00:37.584396182Z 67 PC: 13506 | Get or set file attributes
2018-12-17T23:00:37.603126289Z 62 PC: 13e20 | Close file
2018-12-17T23:00:37.61167862Z 48 PC: 13f1e | Get DOS version
2018-12-17T23:00:37.613279759Z 26 PC: 1357d | Set disk transfer address
2018-12-17T23:00:37.614864086Z 78 PC: 13589 | Find first file
2018-12-17T23:00:37.622545541Z 48 PC: 13f1e | Get DOS version
2018-12-17T23:00:37.624345523Z 67 PC: 134df | Get or set file attributes
2018-12-17T23:00:37.631425597Z 67 PC: 13506 | Get or set file attributes
2018-12-17T23:00:37.64618367Z 61 PC: 13dd0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:00:37.653776458Z 87 PC: 13520 | Get or set file date and time
2018-12-17T23:00:37.655791575Z 66 PC: 13f02 | Move file pointer
2018-12-17T23:00:37.658741258Z 63 PC: 13ea3 | Read file or device (Read 7728 bytes on handle 5)
2018-12-17T23:00:37.668446255Z 66 PC: 13f02 | Move file pointer
2018-12-17T23:00:37.670244374Z 64 PC: 13e01 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T23:00:37.680260766Z 66 PC: 13f02 | Move file pointer
2018-12-17T23:00:37.682149896Z 64 PC: 13ea3 | Write file or device (Write 7728 bytes on handle 5)
2018-12-17T23:00:37.692078253Z 62 PC: 13e20 | Close file
2018-12-17T23:00:37.701476764Z 53 PC: 1367e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:00:37.7036511Z 37 PC: 13687 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:00:37.70526847Z 53 PC: 1367e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:00:37.707110361Z 37 PC: 13687 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:00:37.709559444Z 53 PC: 1367e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:00:37.711191871Z 37 PC: 13687 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:00:37.712778492Z 53 PC: 1367e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:00:37.716275223Z 37 PC: 13687 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:00:37.717863067Z 53 PC: 1367e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:00:37.719458916Z 37 PC: 13687 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:00:37.721949536Z 53 PC: 1367e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:00:37.723986474Z 37 PC: 13687 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:00:37.725578816Z 53 PC: 1367e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:00:37.727913944Z 37 PC: 13687 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:00:37.729830285Z 53 PC: 1367e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:00:37.734854356Z 37 PC: 13687 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:00:37.736682221Z 53 PC: 1367e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:00:37.738749145Z 37 PC: 13687 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:00:37.740335696Z 53 PC: 1367e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:00:37.741945982Z 37 PC: 13687 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:00:37.744519098Z 53 PC: 1367e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:00:37.746112151Z 37 PC: 13687 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:00:37.747661613Z 53 PC: 1367e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:00:37.750314368Z 37 PC: 13687 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:00:37.751878577Z 53 PC: 1367e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:00:37.753460089Z 37 PC: 13687 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:00:37.756024919Z 53 PC: 1367e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:00:37.757611942Z 37 PC: 13687 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:00:37.759154821Z 53 PC: 1367e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:00:37.762257511Z 37 PC: 13687 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:00:37.764248553Z 53 PC: 1367e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:00:37.76567862Z 37 PC: 13687 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:00:37.767746936Z 53 PC: 1367e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:00:37.771950105Z 37 PC: 13687 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:00:37.774135431Z 53 PC: 1367e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:00:37.776757438Z 37 PC: 13687 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:00:37.778321978Z 53 PC: 1367e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:00:37.779746555Z 37 PC: 13687 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:00:37.78180863Z 48 PC: 13f1e | Get DOS version
2018-12-17T23:00:37.783770618Z 41 PC: 13635 | Parse filename
2018-12-17T23:00:37.785690075Z 41 PC: 13643 | Parse filename
2018-12-17T23:00:37.788467774Z 75 PC: 1364e | Execute program
2018-12-17T23:00:37.807497925Z 9 PC: 1cc3c | Display string (Could not find end pointer)
2018-12-17T23:00:37.813532635Z 76 PC: 1cc41 | Terminate with return code (Return code = '0')
2018-12-17T23:00:37.818077776Z 53 PC: 1367e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:00:37.819695395Z 37 PC: 13687 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:00:37.821274413Z 53 PC: 1367e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:00:37.823456643Z 37 PC: 13687 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:00:37.824987189Z 53 PC: 1367e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:00:37.826587867Z 37 PC: 13687 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:00:37.828709294Z 53 PC: 1367e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:00:37.830277311Z 37 PC: 13687 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:00:37.831838024Z 53 PC: 1367e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:00:37.83399143Z 37 PC: 13687 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:00:37.83565187Z 53 PC: 1367e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:00:37.837247128Z 37 PC: 13687 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:00:37.83950999Z 53 PC: 1367e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:00:37.841255891Z 37 PC: 13687 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:00:37.842804661Z 53 PC: 1367e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:00:37.844567033Z 37 PC: 13687 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:00:37.846337871Z 53 PC: 1367e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:00:37.847900397Z 37 PC: 13687 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:00:37.849659513Z 53 PC: 1367e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:00:37.851455448Z 37 PC: 13687 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:00:37.85299964Z 53 PC: 1367e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:00:37.854802277Z 37 PC: 13687 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:00:37.85654412Z 53 PC: 1367e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:00:37.85812461Z 37 PC: 13687 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:00:37.859894165Z 53 PC: 1367e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:00:37.862089471Z 37 PC: 13687 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:00:37.863633843Z 53 PC: 1367e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:00:37.865221185Z 37 PC: 13687 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:00:37.867201797Z 53 PC: 1367e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:00:37.868803908Z 37 PC: 13687 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:00:37.870351787Z 53 PC: 1367e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:00:37.87291835Z 37 PC: 13687 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:00:37.874474404Z 53 PC: 1367e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:00:37.876063911Z 37 PC: 13687 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:00:37.878148488Z 53 PC: 1367e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:00:37.879789011Z 37 PC: 13687 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:00:37.88124115Z 53 PC: 1367e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:00:37.897513708Z 37 PC: 13687 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:00:37.898819733Z 48 PC: 13f1e | Get DOS version
2018-12-17T23:00:37.90018583Z 61 PC: 13dd0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:00:37.909207353Z 67 PC: 13506 | Get or set file attributes
2018-12-17T23:00:37.92112608Z 63 PC: 13ea3 | Read file or device (Read 7728 bytes on handle 5)
2018-12-17T23:00:37.933358045Z 66 PC: 144ae | Move file pointer
2018-12-17T23:00:37.936861619Z 66 PC: 144bc | Move file pointer
2018-12-17T23:00:37.938762351Z 66 PC: 144ca | Move file pointer
2018-12-17T23:00:37.94082149Z 66 PC: 13f02 | Move file pointer
2018-12-17T23:00:37.944391178Z 64 PC: 13ea3 | Write file or device (Write 7728 bytes on handle 5)
2018-12-17T23:00:37.954345764Z 66 PC: 13f02 | Move file pointer
2018-12-17T23:00:37.956273237Z 64 PC: 13ea3 | Write file or device (Write 7728 bytes on handle 5)
2018-12-17T23:00:37.966621212Z 67 PC: 13506 | Get or set file attributes
2018-12-17T23:00:37.979201673Z 87 PC: 1354d | Get or set file date and time
2018-12-17T23:00:37.98122261Z 62 PC: 13e20 | Close file
2018-12-17T23:00:37.990215809Z 26 PC: 1357d | Set disk transfer address
2018-12-17T23:00:37.991556709Z 78 PC: 13589 | Find first file
2018-12-17T23:00:37.997755078Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:37.999641773Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.002758389Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.003962021Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.007954994Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.009647635Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.013115011Z 26 PC: 1357d | Set disk transfer address
2018-12-17T23:00:38.015032374Z 78 PC: 13589 | Find first file
2018-12-17T23:00:38.025252539Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.027938316Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.030088757Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.034204191Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.038474735Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.042492366Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.047621304Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.051047642Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.052810625Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.057488505Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.060331578Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.061823562Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.077755991Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.08065557Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.082274552Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.087199377Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.090144391Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.091610656Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.099928076Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.102139822Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.106469618Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.110310226Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.111933746Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.116194012Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.120687025Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.122246976Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.126869934Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.130664324Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.13218934Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.136913427Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.140954831Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.142597298Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.147191791Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.151849794Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.153365683Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.157415834Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.160730443Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.16196366Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.165791213Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.169588859Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.171197281Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.178462173Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.182321977Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.183828808Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.18786332Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.190708817Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.192135868Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.195587575Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.198381414Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.202069495Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.203524078Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.217223291Z 26 PC: 1357d | Set disk transfer address
2018-12-17T23:00:38.218972108Z 78 PC: 13589 | Find first file
2018-12-17T23:00:38.23255402Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.236677789Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.239069263Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.242850699Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.248564216Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.249938438Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.253767303Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.257475832Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.258770074Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.262660605Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.266444796Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.267780536Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.27151829Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.275478492Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.276752416Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.284024441Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.288048162Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.290047028Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.294003363Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.297681134Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.29899366Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.303329017Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.306994846Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.309130068Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.313240192Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.317814308Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.326860096Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.33097089Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.335293553Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.337693373Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.342524682Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.345919872Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.347454135Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.351679255Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.354852638Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.356290269Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.361465735Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.364931888Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.366186065Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.371546498Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.374389821Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.376002392Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.380763649Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.383748287Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.385606198Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.393867362Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.396946759Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.398574989Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.403460299Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.406763366Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.408387208Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.413273449Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.416669291Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.418330202Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.423421078Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.426788176Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.428413871Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.433263293Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.436570749Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.438163552Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.443838566Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.446981752Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.44843363Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.45316431Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.456376868Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.457852801Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.462624758Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.465816847Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.467274275Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.475279518Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.478452841Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.479890894Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.484641181Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.487788965Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.489250472Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.493982654Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.497140899Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.498610901Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.503393989Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.506618609Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.508092729Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.512854107Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.516070581Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.518361866Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.523156096Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.52637792Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.527854174Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.536140746Z 44 PC: 14444 | Get time 0x14444: mov word ptr [0x3e], cx
0x14448: mov word ptr [0x40], dx
0x1444c: retf
0x1444d: call 0x14494
0x14450: jb 0x14461
0x14452: mov cx, word ptr es:[di + 4]
0x14456: cmp cx, 1
0x14459: je 0x14461
0x1445b: xor bx, bx
0x1445d: push cs
0x1445e: call 0x23fd0
0x14461: retf 4
0x14464: call 0x14494
0x14467: jb 0x1447c
0x14469: mov ax, cx
0x1446b: mov dx, bx
0x1446d: mov cx, word ptr es:[di + 4]
0x14471: cmp cx, 1
0x14474: je 0x1447c
0x14476: xor bx, bx
2018-12-17T23:00:38.539273803Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.540713268Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.548822467Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.550693974Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.558785589Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.561169688Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.568144436Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.569683248Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.574239559Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.575727365Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:38.579068373Z 26 PC: 135a1 | Set disk transfer address
2018-12-17T23:00:38.581772094Z 79 PC: 135a6 | Find next file
2018-12-17T23:00:40.778098839Z 72 PC: 8f1b9 | Allocate memory
2018-12-17T23:00:40.780231045Z 72 PC: 8f1bd | Allocate memory
2018-12-17T23:00:40.78408637Z 99 PC: 90858 | Get DBCS lead byte table pointer
2018-12-17T23:00:40.78744976Z 61 PC: 91f88 | Open file (Filename = 'C:\WINDOWS\HIMEM.SYS')
2018-12-17T23:00:40.799292375Z 66 PC: 91f95 | Move file pointer
2018-12-17T23:00:40.802285459Z 62 PC: 91fc1 | Close file
2018-12-17T23:00:40.804707681Z 75 PC: 91fe0 | Execute program
2018-12-17T23:00:40.822468115Z 98 PC: 916f1 | Get current PSP
2018-12-17T23:00:40.824766644Z 9 PC: c605 | Display string (String= '6��r�&;] u')
2018-12-17T23:00:40.829270337Z 48 PC: c609 | Get DOS version
2018-12-17T23:00:40.832692128Z 9 PC: c382 | Display string (String= ' Installed A20 handler number ')
2018-12-17T23:00:40.836433418Z 2 PC: c38c | Character output (Char = '32')
2018-12-17T23:00:40.839018195Z 2 PC: c3a7 | Character output (Char = '2e')
2018-12-17T23:00:40.843712326Z 9 PC: c6d9 | Display string (String= '�����VH�VD���V@��������������_���Ku��t1��������D�����t �� ��������a1��Z�����W���� ������5���|�����(���������Nj�(��������p�^')
2018-12-17T23:00:40.849001135Z 9 PC: c6e0 | Display string (String= '�5���|�����(���������Nj�(��������p�^')
2018-12-17T23:00:40.854239007Z 61 PC: 91f88 | Open file (Filename = 'C:\WINDOWS\SMARTDRV.EXE')
2018-12-17T23:00:40.866352821Z 66 PC: 91f95 | Move file pointer
2018-12-17T23:00:40.869051241Z 62 PC: 91fc1 | Close file
2018-12-17T23:00:40.871590263Z 75 PC: 91fe0 | Execute program
2018-12-17T23:00:40.89945273Z 98 PC: 916f1 | Get current PSP
2018-12-17T23:00:40.904767387Z 82 PC: 13d46 | Get DOS internal pointers (SYSVARS)
2018-12-17T23:00:40.906155946Z 53 PC: 13ac3 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:00:40.909442643Z 37 PC: 13ad6 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:00:40.911975363Z 53 PC: 13ae0 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T23:00:40.913382497Z 37 PC: 13af3 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T23:00:40.915195854Z 9 PC: 13a0d | Display string (Could not find end pointer)
2018-12-17T23:00:40.923529053Z 62 PC: 8f8eb | Close file
2018-12-17T23:00:40.926029612Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.928815698Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.930402199Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.931984913Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.935692951Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.937457657Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.939059317Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.941611503Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.943226287Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.945495732Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.947939955Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.949614942Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.951192537Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.952858788Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.954417648Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.956048402Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.958704734Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.960600195Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.963171507Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.965517807Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.96720106Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.969918506Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.971883939Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.974696715Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.977761574Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.98061703Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.982949944Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.986745777Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.988862134Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.992182544Z 62 PC: 8f8f2 | Close file
2018-12-17T23:00:40.995247713Z 61 PC: 8f8ff | Open file (Filename = '')
2018-12-17T23:00:41.00123273Z 62 PC: 8f90e | Close file
2018-12-17T23:00:41.003900072Z 69 PC: 8f915 | Duplicate handle
2018-12-17T23:00:41.006427672Z 69 PC: 8f919 | Duplicate handle
2018-12-17T23:00:41.008738575Z 61 PC: 9387b | Open file (Filename = '')
2018-12-17T23:00:41.014607112Z 68 PC: 9386b | I/O control for devices (Set for = '')
2018-12-17T23:00:41.017621948Z 61 PC: 9387b | Open file (Filename = '')
2018-12-17T23:00:41.022877293Z 68 PC: 9386b | I/O control for devices (Set for = '')
2018-12-17T23:00:41.025957832Z 74 PC: 8f9c4 | Reallocate memory
2018-12-17T23:00:41.027682653Z 72 PC: 8f9e0 | Allocate memory
2018-12-17T23:00:41.02988968Z 72 PC: 8f9e4 | Allocate memory
2018-12-17T23:00:41.032281425Z 74 PC: 8f9fb | Reallocate memory
2018-12-17T23:00:41.034050349Z 72 PC: 8fa02 | Allocate memory
2018-12-17T23:00:41.037196041Z 72 PC: 8fa06 | Allocate memory
2018-12-17T23:00:41.039027111Z 73 PC: 8fa11 | Release memory
2018-12-17T23:00:41.040724391Z 73 PC: 8efea | Release memory
2018-12-17T23:00:41.043410047Z 74 PC: 8f003 | Reallocate memory
2018-12-17T23:00:41.045593671Z 72 PC: 8f054 | Allocate memory
2018-12-17T23:00:41.04788141Z 72 PC: 8f058 | Allocate memory
2018-12-17T23:00:41.050564201Z 73 PC: 8f060 | Release memory
2018-12-17T23:00:41.052521018Z 61 PC: 8f080 | Open file (Filename = '')
2018-12-17T23:00:41.062964894Z 63 PC: 8f095 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:00:41.069751837Z 66 PC: 8f0ad | Move file pointer
2018-12-17T23:00:41.071185391Z 62 PC: 8f0d1 | Close file
2018-12-17T23:00:41.073101892Z 75 PC: 8f0f2 | Execute program
2018-12-17T23:00:41.096236085Z 80 PC: 12be9 | Set current PSP
2018-12-17T23:00:41.097677634Z 48 PC: 12bee | Get DOS version
2018-12-17T23:00:41.100344746Z 99 PC: 193d0 | Get DBCS lead byte table pointer
2018-12-17T23:00:41.103143034Z 101 PC: 12c74 | Get extended country info
2018-12-17T23:00:41.104736228Z 99 PC: 12c7a | Get DBCS lead byte table pointer
2018-12-17T23:00:41.107433517Z 74 PC: 12cdc | Reallocate memory
2018-12-17T23:00:41.1092127Z 72 PC: 1355d | Allocate memory
2018-12-17T23:00:41.111247544Z 25 PC: 13596 | Get default drive
2018-12-17T23:00:41.113183101Z 71 PC: 135ad | Get current directory
2018-12-17T23:00:41.116016796Z 59 PC: 135ba | Change current directory
2018-12-17T23:00:41.122001211Z 59 PC: 135c8 | Change current directory
2018-12-17T23:00:41.129243581Z 59 PC: 135d3 | Change current directory
2018-12-17T23:00:41.133956667Z 25 PC: 12d13 | Get default drive
2018-12-17T23:00:41.135314479Z 37 PC: 127d3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:00:41.137063335Z 37 PC: 127da | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:00:41.138685674Z 37 PC: 127e1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:00:41.141213554Z 80 PC: 1301d | Set current PSP
2018-12-17T23:00:41.143158309Z 37 PC: 13041 | Set interrupt vector (Interrupt = '46' AKA 'Set verify flag')
2018-12-17T23:00:41.144599517Z 53 PC: 13362 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T23:00:41.146718078Z 37 PC: 13383 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T23:00:41.148112408Z 51 PC: 13417 | Get or set Ctrl-Break
2018-12-17T23:00:41.150112737Z 72 PC: 130ec | Allocate memory
2018-12-17T23:00:41.152793034Z 61 PC: 131b2 | Open file (Filename = '')
2018-12-17T23:00:41.159483115Z 62 PC: 131ba | Close file
2018-12-17T23:00:41.162795179Z 51 PC: 1344c | Get or set Ctrl-Break
2018-12-17T23:00:41.165281982Z 74 PC: 1197c | Reallocate memory
2018-12-17T23:00:41.167092434Z 72 PC: 11991 | Allocate memory
2018-12-17T23:00:41.169116558Z 73 PC: 119b2 | Release memory
2018-12-17T23:00:41.171878057Z 72 PC: 119bd | Allocate memory
2018-12-17T23:00:41.17391214Z 73 PC: 119df | Release memory
2018-12-17T23:00:41.175560306Z 72 PC: 119f5 | Allocate memory
2018-12-17T23:00:41.17862214Z 72 PC: 119fd | Allocate memory