Sample viewer

vx.netlux.org/Virus.DOS.HLLC.Globe.8001.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:02:30.677356152Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:30.679959242Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:30.681507031Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:30.682988841Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:30.684819709Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:30.686615167Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:30.688221824Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:30.689841415Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:30.693336218Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:30.709738117Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:30.711737526Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:30.714097283Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:30.715280964Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:30.716462571Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:30.718766186Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:30.72047984Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:30.722139263Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:30.724699052Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:30.725922598Z 53 PC: 136f2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:30.727183027Z 37 PC: 13707 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:30.739251414Z 37 PC: 1370f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:30.740496423Z 37 PC: 13717 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:30.741593969Z 37 PC: 1371f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:30.74395906Z 68 PC: 13a8f | I/O control for devices (Set for = '')
2018-12-17T23:02:30.838549883Z 37 PC: 12f15 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:30.840449715Z 44 PC: 1489f | Get time 0x1489f: mov word ptr [0x3e], cx
0x148a3: mov word ptr [0x40], dx
0x148a7: retf
0x148a8: mov bx, sp
0x148aa: push ds
0x148ab: les di, ptr ss:[bx + 8]
0x148af: lds si, ptr ss:[bx + 4]
0x148b3: cld
0x148b4: xor ax, ax
0x148b6: stosw word ptr es:[di], ax
0x148b7: mov ax, 0xd7b0
0x148ba: stosw word ptr es:[di], ax
0x148bb: xor ax, ax
0x148bd: mov cx, 0x16
0x148c0: rep stosd dword ptr es:[di], eax
0x148c2: lodsb al, byte ptr [si]
0x148c3: cmp al, 0x4f
0x148c5: jbe 0x148c9
0x148c7: mov al, 0x4f
0x148c9: mov cl, al
2018-12-17T23:02:30.843456274Z 48 PC: 14a6c | Get DOS version
2018-12-17T23:02:30.845245145Z 61 PC: 1491e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:30.852256265Z 63 PC: 149f1 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:30.86048869Z 62 PC: 1496e | Close file
2018-12-17T23:02:30.86309433Z 26 PC: 13507 | Set disk transfer address
2018-12-17T23:02:30.864533539Z 78 PC: 13513 | Find first file
2018-12-17T23:02:30.871445204Z 26 PC: 13507 | Set disk transfer address
2018-12-17T23:02:30.872894465Z 78 PC: 13513 | Find first file
2018-12-17T23:02:30.882518579Z 60 PC: 1491e | Create or truncate file
2018-12-17T23:02:30.909169425Z 64 PC: 149f1 | Write file or device (Write 8001 bytes on handle 5)
2018-12-17T23:02:30.929948232Z 62 PC: 1496e | Close file
2018-12-17T23:02:30.938725351Z 67 PC: 134d6 | Get or set file attributes
2018-12-17T23:02:30.95090716Z 26 PC: 1352b | Set disk transfer address
2018-12-17T23:02:30.953081376Z 79 PC: 13530 | Find next file
2018-12-17T23:02:30.960452775Z 48 PC: 14a6c | Get DOS version
2018-12-17T23:02:30.963061914Z 53 PC: 1356e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:30.964566559Z 37 PC: 13577 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:30.966195956Z 53 PC: 1356e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:30.967794519Z 37 PC: 13577 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:30.971090312Z 53 PC: 1356e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:30.972811761Z 37 PC: 13577 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:30.974434055Z 53 PC: 1356e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:30.976494351Z 37 PC: 13577 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:30.977935367Z 53 PC: 1356e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:30.979444372Z 37 PC: 13577 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:30.981284024Z 53 PC: 1356e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:30.9825391Z 37 PC: 13577 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:30.983989306Z 53 PC: 1356e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:30.985270796Z 37 PC: 13577 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:30.98648933Z 53 PC: 1356e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:30.9882843Z 37 PC: 13577 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:30.990015769Z 53 PC: 1356e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:30.991369361Z 37 PC: 13577 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:30.992999646Z 53 PC: 1356e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:30.995225857Z 37 PC: 13577 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:30.996593238Z 53 PC: 1356e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:30.997956855Z 37 PC: 13577 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:31.003261469Z 53 PC: 1356e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:31.00450269Z 37 PC: 13577 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:31.005926321Z 53 PC: 1356e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:31.007747409Z 37 PC: 13577 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:31.009138724Z 53 PC: 1356e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:31.010517615Z 37 PC: 13577 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:31.01774817Z 53 PC: 1356e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:31.019152659Z 37 PC: 13577 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:31.020487756Z 53 PC: 1356e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:31.022784556Z 37 PC: 13577 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:31.024167394Z 53 PC: 1356e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:31.025588556Z 37 PC: 13577 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:31.027888678Z 53 PC: 1356e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.029667649Z 37 PC: 13577 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.031022982Z 53 PC: 1356e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:31.033120541Z 37 PC: 13577 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:31.034692095Z 41 PC: 135f7 | Parse filename
2018-12-17T23:02:31.035940198Z 41 PC: 13605 | Parse filename
2018-12-17T23:02:31.038390166Z 75 PC: 13610 | Execute program
2018-12-17T23:02:31.05302672Z 53 PC: 19832 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.053965006Z 53 PC: 19832 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:31.055253875Z 53 PC: 19832 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.056404999Z 53 PC: 19832 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:31.057325902Z 53 PC: 19832 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.058718481Z 53 PC: 19832 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.059940947Z 53 PC: 19832 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:31.060991762Z 53 PC: 19832 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:31.062292549Z 53 PC: 19832 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:31.0636875Z 53 PC: 19832 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:31.064794647Z 53 PC: 19832 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:31.066109328Z 53 PC: 19832 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:31.067362206Z 53 PC: 19832 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:31.069147885Z 53 PC: 19832 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:31.070368472Z 53 PC: 19832 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:31.071777324Z 53 PC: 19832 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:31.072977142Z 53 PC: 19832 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:31.074200604Z 53 PC: 19832 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.075709132Z 53 PC: 19832 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:31.076764065Z 37 PC: 19847 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.077947413Z 37 PC: 1984f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.079327343Z 37 PC: 19857 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.080628417Z 37 PC: 1985f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.082203161Z 68 PC: 19bcf | I/O control for devices (Set for = '')
2018-12-17T23:02:31.188933129Z 37 PC: 19055 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.190812244Z 44 PC: 1a9df | Get time 0x1a9df: mov word ptr [0x3e], cx
0x1a9e3: mov word ptr [0x40], dx
0x1a9e7: retf
0x1a9e8: mov bx, sp
0x1a9ea: push ds
0x1a9eb: les di, ptr ss:[bx + 8]
0x1a9ef: lds si, ptr ss:[bx + 4]
0x1a9f3: cld
0x1a9f4: xor ax, ax
0x1a9f6: stosw word ptr es:[di], ax
0x1a9f7: mov ax, 0xd7b0
0x1a9fa: stosw word ptr es:[di], ax
0x1a9fb: xor ax, ax
0x1a9fd: mov cx, 0x16
0x1aa00: rep stosd dword ptr es:[di], eax
0x1aa02: lodsb al, byte ptr [si]
0x1aa03: cmp al, 0x4f
0x1aa05: jbe 0x1aa09
0x1aa07: mov al, 0x4f
0x1aa09: mov cl, al
2018-12-17T23:02:31.193563733Z 48 PC: 1abac | Get DOS version
2018-12-17T23:02:31.195593338Z 61 PC: 1aa5e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:31.202618811Z 63 PC: 1ab31 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:31.21052142Z 62 PC: 1aaae | Close file
2018-12-17T23:02:31.213407343Z 26 PC: 19647 | Set disk transfer address
2018-12-17T23:02:31.214744025Z 78 PC: 19653 | Find first file
2018-12-17T23:02:31.221691602Z 26 PC: 19647 | Set disk transfer address
2018-12-17T23:02:31.223526793Z 78 PC: 19653 | Find first file
2018-12-17T23:02:31.229511477Z 26 PC: 1966b | Set disk transfer address
2018-12-17T23:02:31.230808968Z 79 PC: 19670 | Find next file
2018-12-17T23:02:31.234794133Z 48 PC: 1abac | Get DOS version
2018-12-17T23:02:31.237316071Z 53 PC: 196ae | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.238879844Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.240978493Z 53 PC: 196ae | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:31.24247889Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:31.24392619Z 53 PC: 196ae | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.246264341Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.248083444Z 53 PC: 196ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:31.249646906Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:31.251821175Z 53 PC: 196ae | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.253134293Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.254374257Z 53 PC: 196ae | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.256601269Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.257891817Z 53 PC: 196ae | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:31.259255393Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:31.261979488Z 53 PC: 196ae | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:31.263615813Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:31.265094488Z 53 PC: 196ae | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:31.267639218Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:31.269260098Z 53 PC: 196ae | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:31.270821114Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:31.273003957Z 53 PC: 196ae | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:31.275260327Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:31.276648529Z 53 PC: 196ae | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:31.27960622Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:31.28094998Z 53 PC: 196ae | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:31.282404037Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:31.284584559Z 53 PC: 196ae | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:31.286058446Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:31.287443933Z 53 PC: 196ae | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:31.289638719Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:31.291452538Z 53 PC: 196ae | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:31.292875599Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:31.294509766Z 53 PC: 196ae | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:31.296786832Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:31.298167966Z 53 PC: 196ae | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.299560924Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.310756122Z 53 PC: 196ae | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:31.312071256Z 37 PC: 196b7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:31.313216087Z 41 PC: 19737 | Parse filename
2018-12-17T23:02:31.315211683Z 41 PC: 19745 | Parse filename
2018-12-17T23:02:31.316516584Z 75 PC: 19750 | Execute program
2018-12-17T23:02:31.329788687Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.332280745Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:31.334201003Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.33561675Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:31.337374881Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.338651263Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.339692517Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:31.341265309Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:31.34235642Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:31.343204241Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:31.344694665Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:31.34584117Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:31.347018583Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:31.348229206Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:31.349226168Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:31.350816825Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:31.352149125Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:31.353047077Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.355145753Z 53 PC: 1f972 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:31.356478734Z 37 PC: 1f987 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.357709336Z 37 PC: 1f98f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.359313548Z 37 PC: 1f997 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.360671161Z 37 PC: 1f99f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.362373018Z 68 PC: 1fd0f | I/O control for devices (Set for = '')
2018-12-17T23:02:31.431322094Z 37 PC: 1f195 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.433044694Z 44 PC: 20b1f | Get time 0x20b1f: mov word ptr [0x3e], cx
0x20b23: mov word ptr [0x40], dx
0x20b27: retf
0x20b28: mov bx, sp
0x20b2a: push ds
0x20b2b: les di, ptr ss:[bx + 8]
0x20b2f: lds si, ptr ss:[bx + 4]
0x20b33: cld
0x20b34: xor ax, ax
0x20b36: stosw word ptr es:[di], ax
0x20b37: mov ax, 0xd7b0
0x20b3a: stosw word ptr es:[di], ax
0x20b3b: xor ax, ax
0x20b3d: mov cx, 0x16
0x20b40: rep stosd dword ptr es:[di], eax
0x20b42: lodsb al, byte ptr [si]
0x20b43: cmp al, 0x4f
0x20b45: jbe 0x20b49
0x20b47: mov al, 0x4f
0x20b49: mov cl, al
2018-12-17T23:02:31.435552797Z 48 PC: 20cec | Get DOS version
2018-12-17T23:02:31.437848789Z 61 PC: 20b9e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:31.444674036Z 63 PC: 20c71 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:31.452254036Z 62 PC: 20bee | Close file
2018-12-17T23:02:31.455146366Z 26 PC: 1f787 | Set disk transfer address
2018-12-17T23:02:31.456604081Z 78 PC: 1f793 | Find first file
2018-12-17T23:02:31.463645632Z 26 PC: 1f787 | Set disk transfer address
2018-12-17T23:02:31.465449117Z 78 PC: 1f793 | Find first file
2018-12-17T23:02:31.471582586Z 26 PC: 1f7ab | Set disk transfer address
2018-12-17T23:02:31.472618288Z 79 PC: 1f7b0 | Find next file
2018-12-17T23:02:31.47599173Z 48 PC: 20cec | Get DOS version
2018-12-17T23:02:31.477818974Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.479018004Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.481227275Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:31.482363178Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:31.48345342Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.485354401Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.486558943Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:31.487680295Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:31.489706625Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.490813919Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.491967486Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.493919184Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.49499138Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:31.496077328Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:31.497864283Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:31.499211822Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:31.500594373Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:31.503179469Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:31.504350404Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:31.505416209Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:31.507468313Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:31.508573313Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:31.509650575Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:31.511450185Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:31.513702833Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:31.515574719Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:31.518087632Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:31.519170573Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:31.5202118Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:31.523236535Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:31.524526292Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:31.526445658Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:31.528936728Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:31.534335584Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:31.53574832Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.537846024Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.539200913Z 53 PC: 1f7ee | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:31.540554656Z 37 PC: 1f7f7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:31.542634056Z 41 PC: 1f877 | Parse filename
2018-12-17T23:02:31.543971206Z 41 PC: 1f885 | Parse filename
2018-12-17T23:02:31.545580523Z 75 PC: 1f890 | Execute program
2018-12-17T23:02:31.56136895Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.562688599Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:31.564177794Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.566116052Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:31.567570763Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.56900303Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.571204252Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:31.572429339Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:31.573704454Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:31.57530802Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:31.576548128Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:31.578240617Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:31.580093239Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:31.581518064Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:31.583790511Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:31.585213379Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:31.586612163Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:31.589159258Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.590391846Z 53 PC: 25ab2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:31.591835111Z 37 PC: 25ac7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.593782882Z 37 PC: 25acf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.594876385Z 37 PC: 25ad7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.595949677Z 37 PC: 25adf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.598369374Z 68 PC: 25e4f | I/O control for devices (Set for = '')
2018-12-17T23:02:31.619000479Z 37 PC: 252d5 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.620221188Z 44 PC: 26c5f | Get time 0x26c5f: mov word ptr [0x3e], cx
0x26c63: mov word ptr [0x40], dx
0x26c67: retf
0x26c68: mov bx, sp
0x26c6a: push ds
0x26c6b: les di, ptr ss:[bx + 8]
0x26c6f: lds si, ptr ss:[bx + 4]
0x26c73: cld
0x26c74: xor ax, ax
0x26c76: stosw word ptr es:[di], ax
0x26c77: mov ax, 0xd7b0
0x26c7a: stosw word ptr es:[di], ax
0x26c7b: xor ax, ax
0x26c7d: mov cx, 0x16
0x26c80: rep stosd dword ptr es:[di], eax
0x26c82: lodsb al, byte ptr [si]
0x26c83: cmp al, 0x4f
0x26c85: jbe 0x26c89
0x26c87: mov al, 0x4f
0x26c89: mov cl, al
2018-12-17T23:02:31.622792755Z 48 PC: 26e2c | Get DOS version
2018-12-17T23:02:31.624553655Z 61 PC: 26cde | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:31.631364999Z 63 PC: 26db1 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:31.639589054Z 62 PC: 26d2e | Close file
2018-12-17T23:02:31.641402408Z 26 PC: 258c7 | Set disk transfer address
2018-12-17T23:02:31.642433758Z 78 PC: 258d3 | Find first file
2018-12-17T23:02:31.649279982Z 26 PC: 258c7 | Set disk transfer address
2018-12-17T23:02:31.651185867Z 78 PC: 258d3 | Find first file
2018-12-17T23:02:31.657336796Z 26 PC: 258eb | Set disk transfer address
2018-12-17T23:02:31.659595589Z 79 PC: 258f0 | Find next file
2018-12-17T23:02:31.662577469Z 48 PC: 26e2c | Get DOS version
2018-12-17T23:02:31.664233282Z 53 PC: 2592e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.666433835Z 37 PC: 25937 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.667628901Z 53 PC: 2592e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:31.669385937Z 37 PC: 25937 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:31.670829303Z 53 PC: 2592e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.671759761Z 37 PC: 25937 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.673486749Z 53 PC: 2592e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:31.674698946Z 37 PC: 25937 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:31.675704123Z 53 PC: 2592e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.681208591Z 37 PC: 25937 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.682343722Z 53 PC: 2592e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.683728348Z 37 PC: 25937 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.684944419Z 53 PC: 2592e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:31.685919706Z 37 PC: 25937 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:31.687247513Z 53 PC: 2592e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:31.688811252Z 37 PC: 25937 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:31.689831323Z 53 PC: 2592e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:31.691184661Z 37 PC: 25937 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:31.692756687Z 53 PC: 2592e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:31.694022738Z 37 PC: 25937 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:31.69530706Z 53 PC: 2592e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:31.696810344Z 37 PC: 25937 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:31.697807589Z 53 PC: 2592e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:31.699239683Z 37 PC: 25937 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:31.700662101Z 53 PC: 2592e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:31.701766536Z 37 PC: 25937 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:31.703195027Z 53 PC: 2592e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:31.704181286Z 37 PC: 25937 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:31.705730652Z 53 PC: 2592e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:31.706821856Z 37 PC: 25937 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:31.707779132Z 53 PC: 2592e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:31.709362883Z 37 PC: 25937 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:31.710474719Z 53 PC: 2592e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:31.711348875Z 37 PC: 25937 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:31.71297953Z 53 PC: 2592e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.71395854Z 37 PC: 25937 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.714939915Z 53 PC: 2592e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:31.716841382Z 37 PC: 25937 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:31.717814746Z 41 PC: 259b7 | Parse filename
2018-12-17T23:02:31.719309794Z 41 PC: 259c5 | Parse filename
2018-12-17T23:02:31.72065Z 75 PC: 259d0 | Execute program
2018-12-17T23:02:31.735708577Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.73774541Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:31.738739235Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.739693707Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:31.741331851Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.742368351Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.743527846Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:31.745041152Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:31.746027602Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:31.747193497Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:31.748573734Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:31.749552406Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:31.751138719Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:31.752297869Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:31.753276292Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:31.77160843Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:31.772606467Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:31.773692789Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.775374119Z 53 PC: 2bbf2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:31.7768555Z 37 PC: 2bc07 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.778245539Z 37 PC: 2bc0f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.77920518Z 37 PC: 2bc17 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.780662163Z 37 PC: 2bc1f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.782326559Z 68 PC: 2bf8f | I/O control for devices (Set for = '')
2018-12-17T23:02:31.853638738Z 37 PC: 2b415 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.855840684Z 44 PC: 2cd9f | Get time 0x2cd9f: mov word ptr [0x3e], cx
0x2cda3: mov word ptr [0x40], dx
0x2cda7: retf
0x2cda8: mov bx, sp
0x2cdaa: push ds
0x2cdab: les di, ptr ss:[bx + 8]
0x2cdaf: lds si, ptr ss:[bx + 4]
0x2cdb3: cld
0x2cdb4: xor ax, ax
0x2cdb6: stosw word ptr es:[di], ax
0x2cdb7: mov ax, 0xd7b0
0x2cdba: stosw word ptr es:[di], ax
0x2cdbb: xor ax, ax
0x2cdbd: mov cx, 0x16
0x2cdc0: rep stosd dword ptr es:[di], eax
0x2cdc2: lodsb al, byte ptr [si]
0x2cdc3: cmp al, 0x4f
0x2cdc5: jbe 0x2cdc9
0x2cdc7: mov al, 0x4f
0x2cdc9: mov cl, al
2018-12-17T23:02:31.858098237Z 48 PC: 2cf6c | Get DOS version
2018-12-17T23:02:31.860643583Z 61 PC: 2ce1e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:31.868315518Z 63 PC: 2cef1 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:31.876204111Z 62 PC: 2ce6e | Close file
2018-12-17T23:02:31.878643325Z 26 PC: 2ba07 | Set disk transfer address
2018-12-17T23:02:31.879690124Z 78 PC: 2ba13 | Find first file
2018-12-17T23:02:31.88674735Z 26 PC: 2ba07 | Set disk transfer address
2018-12-17T23:02:31.888578343Z 78 PC: 2ba13 | Find first file
2018-12-17T23:02:31.894593743Z 26 PC: 2ba2b | Set disk transfer address
2018-12-17T23:02:31.895758569Z 79 PC: 2ba30 | Find next file
2018-12-17T23:02:31.898884641Z 48 PC: 2cf6c | Get DOS version
2018-12-17T23:02:31.900877565Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.90323934Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.904280896Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:31.905600132Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:31.907650789Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.909063487Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.910275844Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:31.912046167Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:31.913112323Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.914386195Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.915870142Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.9171518Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.919768458Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:31.920822363Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:31.922034308Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:31.923656499Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:31.925081303Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:31.926423583Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:31.928797472Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:31.929877327Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:31.930838615Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:31.932406381Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:31.933588788Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:31.934726661Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:31.936177192Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:31.937149306Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:31.938100503Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:31.939552585Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:31.940533984Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:31.941824227Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:31.943179646Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:31.944194588Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:31.945813686Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:31.946932265Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:31.947973118Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.961489339Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:31.962547479Z 53 PC: 2ba6e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:31.963566995Z 37 PC: 2ba77 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:31.965258782Z 41 PC: 2baf7 | Parse filename
2018-12-17T23:02:31.966668304Z 41 PC: 2bb05 | Parse filename
2018-12-17T23:02:31.968490812Z 75 PC: 2bb10 | Execute program
2018-12-17T23:02:31.98375881Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:31.984771493Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:31.986552869Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:31.987623322Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:31.988679662Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:31.990339151Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:31.991377855Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:31.992359299Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:31.993952144Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:31.99488801Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:31.995777418Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:31.996961305Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:31.997844245Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:31.999530569Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:32.000538075Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:32.001527684Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:32.003135142Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:32.004124622Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.00509316Z 53 PC: 31d32 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:32.006390882Z 37 PC: 31d47 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.00800414Z 37 PC: 31d4f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.008849432Z 37 PC: 31d57 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.01068967Z 37 PC: 31d5f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.012507915Z 68 PC: 320cf | I/O control for devices (Set for = '')
2018-12-17T23:02:32.110479227Z 37 PC: 31555 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.113029853Z 44 PC: 32edf | Get time 0x32edf: mov word ptr [0x3e], cx
0x32ee3: mov word ptr [0x40], dx
0x32ee7: retf
0x32ee8: mov bx, sp
0x32eea: push ds
0x32eeb: les di, ptr ss:[bx + 8]
0x32eef: lds si, ptr ss:[bx + 4]
0x32ef3: cld
0x32ef4: xor ax, ax
0x32ef6: stosw word ptr es:[di], ax
0x32ef7: mov ax, 0xd7b0
0x32efa: stosw word ptr es:[di], ax
0x32efb: xor ax, ax
0x32efd: mov cx, 0x16
0x32f00: rep stosd dword ptr es:[di], eax
0x32f02: lodsb al, byte ptr [si]
0x32f03: cmp al, 0x4f
0x32f05: jbe 0x32f09
0x32f07: mov al, 0x4f
0x32f09: mov cl, al
2018-12-17T23:02:32.115392408Z 48 PC: 330ac | Get DOS version
2018-12-17T23:02:32.117741826Z 61 PC: 32f5e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:32.124232673Z 63 PC: 33031 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:32.130722554Z 62 PC: 32fae | Close file
2018-12-17T23:02:32.133139645Z 26 PC: 31b47 | Set disk transfer address
2018-12-17T23:02:32.134432455Z 78 PC: 31b53 | Find first file
2018-12-17T23:02:32.139857011Z 26 PC: 31b47 | Set disk transfer address
2018-12-17T23:02:32.141813523Z 78 PC: 31b53 | Find first file
2018-12-17T23:02:32.146171656Z 26 PC: 31b6b | Set disk transfer address
2018-12-17T23:02:32.147312404Z 79 PC: 31b70 | Find next file
2018-12-17T23:02:32.150633281Z 48 PC: 330ac | Get DOS version
2018-12-17T23:02:32.153720217Z 53 PC: 31bae | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.155479962Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.157564036Z 53 PC: 31bae | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:32.15858066Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:32.160370371Z 53 PC: 31bae | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.161589485Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.162575676Z 53 PC: 31bae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:32.164221476Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:32.165186325Z 53 PC: 31bae | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.166206426Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.167690515Z 53 PC: 31bae | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.168641306Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.170246191Z 53 PC: 31bae | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:32.171133726Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:32.172116946Z 53 PC: 31bae | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:32.173336828Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:32.174482095Z 53 PC: 31bae | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:32.175403592Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:32.176921971Z 53 PC: 31bae | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:32.177851969Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:32.179428162Z 53 PC: 31bae | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:32.180584826Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:32.181460382Z 53 PC: 31bae | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:32.182974398Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:32.183854367Z 53 PC: 31bae | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:32.184735803Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:32.186256231Z 53 PC: 31bae | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:32.187153483Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:32.188010764Z 53 PC: 31bae | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:32.189401185Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:32.190268473Z 53 PC: 31bae | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:32.191553101Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:32.192512656Z 53 PC: 31bae | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:32.1934047Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:32.195317616Z 53 PC: 31bae | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.196218916Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.197153205Z 53 PC: 31bae | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:32.198746663Z 37 PC: 31bb7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:32.199716892Z 41 PC: 31c37 | Parse filename
2018-12-17T23:02:32.200916138Z 41 PC: 31c45 | Parse filename
2018-12-17T23:02:32.202264861Z 75 PC: 31c50 | Execute program
2018-12-17T23:02:32.211819167Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.213343861Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:32.214239976Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.215100355Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:32.217327993Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.218413525Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.220092018Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:32.221761637Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:32.222916478Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:32.224399609Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:32.225387381Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:32.226419911Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:32.228215407Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:32.22915616Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:32.230079888Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:32.231629882Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:32.232469815Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:32.233827632Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.234939036Z 53 PC: 37e72 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:32.235853557Z 37 PC: 37e87 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.237345094Z 37 PC: 37e8f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.23821599Z 37 PC: 37e97 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.239067825Z 37 PC: 37e9f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.240636864Z 68 PC: 3820f | I/O control for devices (Set for = '')
2018-12-17T23:02:32.326354775Z 37 PC: 37695 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.328297094Z 44 PC: 3901f | Get time 0x3901f: mov word ptr [0x3e], cx
0x39023: mov word ptr [0x40], dx
0x39027: retf
0x39028: mov bx, sp
0x3902a: push ds
0x3902b: les di, ptr ss:[bx + 8]
0x3902f: lds si, ptr ss:[bx + 4]
0x39033: cld
0x39034: xor ax, ax
0x39036: stosw word ptr es:[di], ax
0x39037: mov ax, 0xd7b0
0x3903a: stosw word ptr es:[di], ax
0x3903b: xor ax, ax
0x3903d: mov cx, 0x16
0x39040: rep stosd dword ptr es:[di], eax
0x39042: lodsb al, byte ptr [si]
0x39043: cmp al, 0x4f
0x39045: jbe 0x39049
0x39047: mov al, 0x4f
0x39049: mov cl, al
2018-12-17T23:02:32.331034037Z 48 PC: 391ec | Get DOS version
2018-12-17T23:02:32.332387646Z 61 PC: 3909e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:32.337675669Z 63 PC: 39171 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:32.342726282Z 62 PC: 390ee | Close file
2018-12-17T23:02:32.344167799Z 26 PC: 37c87 | Set disk transfer address
2018-12-17T23:02:32.346272623Z 78 PC: 37c93 | Find first file
2018-12-17T23:02:32.350511338Z 26 PC: 37c87 | Set disk transfer address
2018-12-17T23:02:32.351500836Z 78 PC: 37c93 | Find first file
2018-12-17T23:02:32.355683223Z 26 PC: 37cab | Set disk transfer address
2018-12-17T23:02:32.356950684Z 79 PC: 37cb0 | Find next file
2018-12-17T23:02:32.360021558Z 48 PC: 391ec | Get DOS version
2018-12-17T23:02:32.361521187Z 53 PC: 37cee | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.362842942Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.364647139Z 53 PC: 37cee | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:32.365682958Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:32.366767318Z 53 PC: 37cee | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.368162543Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.369049272Z 53 PC: 37cee | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:32.371113534Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:32.371911515Z 53 PC: 37cee | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.372780497Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.374130961Z 53 PC: 37cee | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.375151714Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.376146624Z 53 PC: 37cee | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:32.37758703Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:32.378643193Z 53 PC: 37cee | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:32.380133856Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:32.381058662Z 53 PC: 37cee | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:32.382085468Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:32.383814642Z 53 PC: 37cee | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:32.384979408Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:32.386135875Z 53 PC: 37cee | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:32.38927092Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:32.390611704Z 53 PC: 37cee | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:32.392722475Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:32.394120974Z 53 PC: 37cee | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:32.395516207Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:32.397454849Z 53 PC: 37cee | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:32.398765446Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:32.400681179Z 53 PC: 37cee | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:32.402287665Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:32.403653458Z 53 PC: 37cee | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:32.406104113Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:32.407521801Z 53 PC: 37cee | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:32.40973935Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:32.41166821Z 53 PC: 37cee | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.412880475Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.416262214Z 53 PC: 37cee | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:32.417849021Z 37 PC: 37cf7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:32.419409748Z 41 PC: 37d77 | Parse filename
2018-12-17T23:02:32.423064947Z 41 PC: 37d85 | Parse filename
2018-12-17T23:02:32.424812515Z 75 PC: 37d90 | Execute program
2018-12-17T23:02:32.441384683Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.442932598Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:32.444410912Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.446652766Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:32.447733128Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.449735321Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.451136282Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:32.452612314Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:32.454550523Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:32.455713427Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:32.456721423Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:32.458065589Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:32.45896877Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:32.460407858Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:32.461390418Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:32.462277802Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:32.466178336Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:32.467490222Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.469408382Z 53 PC: 3dfb2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:32.470656877Z 37 PC: 3dfc7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.471828885Z 37 PC: 3dfcf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.473736242Z 37 PC: 3dfd7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.474877198Z 37 PC: 3dfdf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.477402873Z 68 PC: 3e34f | I/O control for devices (Set for = '')
2018-12-17T23:02:32.555438118Z 37 PC: 3d7d5 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.557017861Z 44 PC: 3f15f | Get time 0x3f15f: mov word ptr [0x3e], cx
0x3f163: mov word ptr [0x40], dx
0x3f167: retf
0x3f168: mov bx, sp
0x3f16a: push ds
0x3f16b: les di, ptr ss:[bx + 8]
0x3f16f: lds si, ptr ss:[bx + 4]
0x3f173: cld
0x3f174: xor ax, ax
0x3f176: stosw word ptr es:[di], ax
0x3f177: mov ax, 0xd7b0
0x3f17a: stosw word ptr es:[di], ax
0x3f17b: xor ax, ax
0x3f17d: mov cx, 0x16
0x3f180: rep stosd dword ptr es:[di], eax
0x3f182: lodsb al, byte ptr [si]
0x3f183: cmp al, 0x4f
0x3f185: jbe 0x3f189
0x3f187: mov al, 0x4f
0x3f189: mov cl, al
2018-12-17T23:02:32.560565959Z 48 PC: 3f32c | Get DOS version
2018-12-17T23:02:32.562364104Z 61 PC: 3f1de | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:32.570331828Z 63 PC: 3f2b1 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:32.578472886Z 62 PC: 3f22e | Close file
2018-12-17T23:02:32.58048837Z 26 PC: 3ddc7 | Set disk transfer address
2018-12-17T23:02:32.583031154Z 78 PC: 3ddd3 | Find first file
2018-12-17T23:02:32.590282824Z 26 PC: 3ddc7 | Set disk transfer address
2018-12-17T23:02:32.592601916Z 78 PC: 3ddd3 | Find first file
2018-12-17T23:02:32.59916629Z 26 PC: 3ddeb | Set disk transfer address
2018-12-17T23:02:32.60053931Z 79 PC: 3ddf0 | Find next file
2018-12-17T23:02:32.60472243Z 48 PC: 3f32c | Get DOS version
2018-12-17T23:02:32.606855634Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.608528857Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.610955093Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:32.612418713Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:32.614719575Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.616493472Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.617895665Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:32.620435146Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:32.621535877Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.623411867Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.624900289Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.6263295Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.628642425Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:32.630322727Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:32.632148791Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:32.633855064Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:32.634918007Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:32.636894448Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:32.637968235Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:32.639054278Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:32.64135224Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:32.642456921Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:32.643714228Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:32.645527757Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:32.646755231Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:32.649211402Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:32.650262329Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:32.651325114Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:32.653808122Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:32.654975604Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:32.656880193Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:32.658024611Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:32.659961817Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:32.662288672Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:32.663388101Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.66466783Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.667332102Z 53 PC: 3de2e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:32.668613676Z 37 PC: 3de37 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:32.670769863Z 41 PC: 3deb7 | Parse filename
2018-12-17T23:02:32.672198517Z 41 PC: 3dec5 | Parse filename
2018-12-17T23:02:32.673519427Z 75 PC: 3ded0 | Execute program
2018-12-17T23:02:32.688831362Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.689995059Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:32.692311502Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.693524552Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:32.694938075Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.697332916Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.698812588Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:32.700612069Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:32.702587881Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:32.703695669Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:32.705441184Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:32.707595662Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:32.710244872Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:32.711703283Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:32.71312854Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:32.715775665Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:32.717259373Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:32.719382287Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.72128183Z 53 PC: 440f2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:32.722649357Z 37 PC: 44107 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.729054704Z 37 PC: 4410f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.730478157Z 37 PC: 44117 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.731982678Z 37 PC: 4411f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.734831924Z 68 PC: 4448f | I/O control for devices (Set for = '')
2018-12-17T23:02:32.824179437Z 37 PC: 43915 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.827054728Z 44 PC: 4529f | Get time 0x4529f: mov word ptr [0x3e], cx
0x452a3: mov word ptr [0x40], dx
0x452a7: retf
0x452a8: mov bx, sp
0x452aa: push ds
0x452ab: les di, ptr ss:[bx + 8]
0x452af: lds si, ptr ss:[bx + 4]
0x452b3: cld
0x452b4: xor ax, ax
0x452b6: stosw word ptr es:[di], ax
0x452b7: mov ax, 0xd7b0
0x452ba: stosw word ptr es:[di], ax
0x452bb: xor ax, ax
0x452bd: mov cx, 0x16
0x452c0: rep stosd dword ptr es:[di], eax
0x452c2: lodsb al, byte ptr [si]
0x452c3: cmp al, 0x4f
0x452c5: jbe 0x452c9
0x452c7: mov al, 0x4f
0x452c9: mov cl, al
2018-12-17T23:02:32.829911437Z 48 PC: 4546c | Get DOS version
2018-12-17T23:02:32.831676894Z 61 PC: 4531e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:32.839267327Z 63 PC: 453f1 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:32.847026752Z 62 PC: 4536e | Close file
2018-12-17T23:02:32.850216618Z 26 PC: 43f07 | Set disk transfer address
2018-12-17T23:02:32.851785234Z 78 PC: 43f13 | Find first file
2018-12-17T23:02:32.859257846Z 26 PC: 43f07 | Set disk transfer address
2018-12-17T23:02:32.862289492Z 78 PC: 43f13 | Find first file
2018-12-17T23:02:32.868496418Z 26 PC: 43f2b | Set disk transfer address
2018-12-17T23:02:32.871032277Z 79 PC: 43f30 | Find next file
2018-12-17T23:02:32.873995297Z 48 PC: 4546c | Get DOS version
2018-12-17T23:02:32.876100076Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.878442648Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.880168703Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:32.88155076Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:32.884058329Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.885429999Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.887669249Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:32.889380951Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:32.890724896Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.894055792Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.895270374Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.896683127Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.898397627Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:32.899570232Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:32.901711926Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:32.903068383Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:32.904214811Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:32.906072511Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:32.90759544Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:32.909889476Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:32.91123114Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:32.912899116Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:32.914639662Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:32.916179912Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:32.918605961Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:32.920299336Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:32.921561294Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:32.923551105Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:32.925155415Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:32.927789772Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:32.929233816Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:32.93039928Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:32.933572261Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:32.93599192Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:32.938401818Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.939766146Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:32.940876167Z 53 PC: 43f6e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:32.943048524Z 37 PC: 43f77 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:32.945479618Z 41 PC: 43ff7 | Parse filename
2018-12-17T23:02:32.947944133Z 41 PC: 44005 | Parse filename
2018-12-17T23:02:32.950445769Z 75 PC: 44010 | Execute program
2018-12-17T23:02:32.966203902Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:32.968442888Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:32.970088938Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:32.971550983Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:32.973900838Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:32.982690668Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:32.984846026Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:32.986242886Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:32.987349071Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:32.989904093Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:32.990995791Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:32.993320513Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:32.994474891Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:32.995612766Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:32.998385842Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:32.999471388Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:33.001983409Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:33.003062317Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.00400444Z 53 PC: 4a232 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:33.005934986Z 37 PC: 4a247 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.009126873Z 37 PC: 4a24f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.010910573Z 37 PC: 4a257 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.012118649Z 37 PC: 4a25f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.013509561Z 68 PC: 4a5cf | I/O control for devices (Set for = '')
2018-12-17T23:02:33.083202766Z 37 PC: 49a55 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.085528497Z 44 PC: 4b3df | Get time 0x4b3df: mov word ptr [0x3e], cx
0x4b3e3: mov word ptr [0x40], dx
0x4b3e7: retf
0x4b3e8: mov bx, sp
0x4b3ea: push ds
0x4b3eb: les di, ptr ss:[bx + 8]
0x4b3ef: lds si, ptr ss:[bx + 4]
0x4b3f3: cld
0x4b3f4: xor ax, ax
0x4b3f6: stosw word ptr es:[di], ax
0x4b3f7: mov ax, 0xd7b0
0x4b3fa: stosw word ptr es:[di], ax
0x4b3fb: xor ax, ax
0x4b3fd: mov cx, 0x16
0x4b400: rep stosd dword ptr es:[di], eax
0x4b402: lodsb al, byte ptr [si]
0x4b403: cmp al, 0x4f
0x4b405: jbe 0x4b409
0x4b407: mov al, 0x4f
0x4b409: mov cl, al
2018-12-17T23:02:33.089164566Z 48 PC: 4b5ac | Get DOS version
2018-12-17T23:02:33.09088481Z 61 PC: 4b45e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:33.098919294Z 63 PC: 4b531 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:33.107465812Z 62 PC: 4b4ae | Close file
2018-12-17T23:02:33.110075788Z 26 PC: 4a047 | Set disk transfer address
2018-12-17T23:02:33.111916118Z 78 PC: 4a053 | Find first file
2018-12-17T23:02:33.118087394Z 26 PC: 4a047 | Set disk transfer address
2018-12-17T23:02:33.119121545Z 78 PC: 4a053 | Find first file
2018-12-17T23:02:33.125633169Z 26 PC: 4a06b | Set disk transfer address
2018-12-17T23:02:33.126853956Z 79 PC: 4a070 | Find next file
2018-12-17T23:02:33.129976933Z 48 PC: 4b5ac | Get DOS version
2018-12-17T23:02:33.131783029Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.133059042Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.134182816Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:33.135100754Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:33.136599994Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.137826277Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.140237646Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:33.141278692Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:33.142118826Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.143385847Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.144222787Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.145651882Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.146614746Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:33.148254622Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:33.149317385Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:33.150093936Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:33.151648218Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:33.152454387Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:33.153895671Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:33.154700968Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:33.155966064Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:33.157101152Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:33.157974193Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:33.159217326Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:33.160028722Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:33.161515247Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:33.162910537Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:33.163673692Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:33.164543106Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:33.165277746Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:33.166583615Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:33.167352625Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:33.168285368Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:33.169162172Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:33.16993822Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.171187457Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.17201534Z 53 PC: 4a0ae | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:33.173299896Z 37 PC: 4a0b7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:33.17416681Z 41 PC: 4a137 | Parse filename
2018-12-17T23:02:33.175170515Z 41 PC: 4a145 | Parse filename
2018-12-17T23:02:33.176750359Z 75 PC: 4a150 | Execute program
2018-12-17T23:02:33.186569764Z 53 PC: 50372 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.188447612Z 53 PC: 50372 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:33.189671308Z 53 PC: 50372 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.191420372Z 53 PC: 50372 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:33.193050654Z 53 PC: 50372 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.194365901Z 53 PC: 50372 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.19608359Z 53 PC: 50372 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:33.197848851Z 53 PC: 50372 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:33.199915249Z 53 PC: 50372 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:33.201000289Z 53 PC: 50372 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:33.202028044Z 53 PC: 50372 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:33.203627063Z 53 PC: 50372 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:33.204827014Z 53 PC: 50372 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:33.207401879Z 53 PC: 50372 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:33.209757543Z 53 PC: 50372 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:33.21095382Z 53 PC: 50372 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:33.212968332Z 53 PC: 50372 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:33.213734982Z 53 PC: 50372 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.214940563Z 53 PC: 50372 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:33.215772282Z 37 PC: 50387 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.216950856Z 37 PC: 5038f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.217717598Z 37 PC: 50397 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.218459313Z 37 PC: 5039f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.219647893Z 68 PC: 5070f | I/O control for devices (Set for = '')
2018-12-17T23:02:33.285264833Z 37 PC: 4fb95 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.287492249Z 44 PC: 5151f | Get time 0x5151f: mov word ptr [0x3e], cx
0x51523: mov word ptr [0x40], dx
0x51527: retf
0x51528: mov bx, sp
0x5152a: push ds
0x5152b: les di, ptr ss:[bx + 8]
0x5152f: lds si, ptr ss:[bx + 4]
0x51533: cld
0x51534: xor ax, ax
0x51536: stosw word ptr es:[di], ax
0x51537: mov ax, 0xd7b0
0x5153a: stosw word ptr es:[di], ax
0x5153b: xor ax, ax
0x5153d: mov cx, 0x16
0x51540: rep stosd dword ptr es:[di], eax
0x51542: lodsb al, byte ptr [si]
0x51543: cmp al, 0x4f
0x51545: jbe 0x51549
0x51547: mov al, 0x4f
0x51549: mov cl, al
2018-12-17T23:02:33.288957876Z 48 PC: 516ec | Get DOS version
2018-12-17T23:02:33.290104331Z 61 PC: 5159e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:33.294754835Z 63 PC: 51671 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:33.299645297Z 62 PC: 515ee | Close file
2018-12-17T23:02:33.302009985Z 26 PC: 50187 | Set disk transfer address
2018-12-17T23:02:33.302906566Z 78 PC: 50193 | Find first file
2018-12-17T23:02:33.307794091Z 26 PC: 50187 | Set disk transfer address
2018-12-17T23:02:33.308823243Z 78 PC: 50193 | Find first file
2018-12-17T23:02:33.312467287Z 26 PC: 501ab | Set disk transfer address
2018-12-17T23:02:33.3146107Z 79 PC: 501b0 | Find next file
2018-12-17T23:02:33.317152846Z 48 PC: 516ec | Get DOS version
2018-12-17T23:02:33.320999619Z 53 PC: 501ee | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.322037885Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.323554129Z 53 PC: 501ee | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:33.324669956Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:33.325680806Z 53 PC: 501ee | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.327430499Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.328386558Z 53 PC: 501ee | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:33.329985902Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:33.330938163Z 53 PC: 501ee | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.331913788Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.333330636Z 53 PC: 501ee | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.334309119Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.335814224Z 53 PC: 501ee | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:33.336783325Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:33.338167664Z 53 PC: 501ee | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:33.339239501Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:33.340059246Z 53 PC: 501ee | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:33.34245187Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:33.343550836Z 53 PC: 501ee | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:33.345354474Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:33.346375577Z 53 PC: 501ee | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:33.347372468Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:33.348732218Z 53 PC: 501ee | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:33.349751502Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:33.351332221Z 53 PC: 501ee | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:33.35236057Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:33.353914206Z 53 PC: 501ee | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:33.355023364Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:33.355994819Z 53 PC: 501ee | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:33.357581352Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:33.358732108Z 53 PC: 501ee | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:33.360489682Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:33.361745756Z 53 PC: 501ee | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:33.363500778Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:33.36449029Z 53 PC: 501ee | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.365394741Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.36764331Z 53 PC: 501ee | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:33.369005247Z 37 PC: 501f7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:33.371292253Z 41 PC: 50277 | Parse filename
2018-12-17T23:02:33.3726395Z 41 PC: 50285 | Parse filename
2018-12-17T23:02:33.374152116Z 75 PC: 50290 | Execute program
2018-12-17T23:02:33.389315357Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.390642218Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:33.392650451Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.393926298Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:33.396285233Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.397820167Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.399043192Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:33.400825605Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:33.402724275Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:33.405270494Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:33.406562448Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:33.407916207Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:33.410225905Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:33.41153609Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:33.413492304Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:33.41485193Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:33.416542403Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:33.41792548Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.41925548Z 53 PC: 564b2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:33.420892695Z 37 PC: 564c7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.422118161Z 37 PC: 564cf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.424351643Z 37 PC: 564d7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.425587058Z 37 PC: 564df | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.428328828Z 68 PC: 5684f | I/O control for devices (Set for = '')
2018-12-17T23:02:33.529727495Z 37 PC: 55cd5 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.531581162Z 44 PC: 5765f | Get time 0x5765f: mov word ptr [0x3e], cx
0x57663: mov word ptr [0x40], dx
0x57667: retf
0x57668: mov bx, sp
0x5766a: push ds
0x5766b: les di, ptr ss:[bx + 8]
0x5766f: lds si, ptr ss:[bx + 4]
0x57673: cld
0x57674: xor ax, ax
0x57676: stosw word ptr es:[di], ax
0x57677: mov ax, 0xd7b0
0x5767a: stosw word ptr es:[di], ax
0x5767b: xor ax, ax
0x5767d: mov cx, 0x16
0x57680: rep stosd dword ptr es:[di], eax
0x57682: lodsb al, byte ptr [si]
0x57683: cmp al, 0x4f
0x57685: jbe 0x57689
0x57687: mov al, 0x4f
0x57689: mov cl, al
2018-12-17T23:02:33.535473354Z 48 PC: 5782c | Get DOS version
2018-12-17T23:02:33.537318806Z 61 PC: 576de | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:33.545313122Z 63 PC: 577b1 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:33.557607529Z 62 PC: 5772e | Close file
2018-12-17T23:02:33.559531255Z 26 PC: 562c7 | Set disk transfer address
2018-12-17T23:02:33.561499753Z 78 PC: 562d3 | Find first file
2018-12-17T23:02:33.568090808Z 26 PC: 562c7 | Set disk transfer address
2018-12-17T23:02:33.570171152Z 78 PC: 562d3 | Find first file
2018-12-17T23:02:33.576502772Z 26 PC: 562eb | Set disk transfer address
2018-12-17T23:02:33.577660839Z 79 PC: 562f0 | Find next file
2018-12-17T23:02:33.581051533Z 48 PC: 5782c | Get DOS version
2018-12-17T23:02:33.582728848Z 53 PC: 5632e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.584994617Z 37 PC: 56337 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.586060647Z 53 PC: 5632e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:33.587902463Z 37 PC: 56337 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:33.589036917Z 53 PC: 5632e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.590230595Z 37 PC: 56337 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.59176401Z 53 PC: 5632e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:33.59336448Z 37 PC: 56337 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:33.595225833Z 53 PC: 5632e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.59674269Z 37 PC: 56337 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.599298311Z 53 PC: 5632e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.600781793Z 37 PC: 56337 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.60344866Z 53 PC: 5632e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:33.604996011Z 37 PC: 56337 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:33.607084586Z 53 PC: 5632e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:33.608943972Z 37 PC: 56337 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:33.610135724Z 53 PC: 5632e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:33.611895985Z 37 PC: 56337 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:33.613179497Z 53 PC: 5632e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:33.614889442Z 37 PC: 56337 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:33.616468229Z 53 PC: 5632e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:33.617871517Z 37 PC: 56337 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:33.619345109Z 53 PC: 5632e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:33.620783346Z 37 PC: 56337 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:33.62264033Z 53 PC: 5632e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:33.623693785Z 37 PC: 56337 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:33.625903374Z 53 PC: 5632e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:33.626963676Z 37 PC: 56337 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:33.629069138Z 53 PC: 5632e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:33.630493228Z 37 PC: 56337 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:33.631516881Z 53 PC: 5632e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:33.633727549Z 37 PC: 56337 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:33.634756892Z 53 PC: 5632e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:33.636793551Z 37 PC: 56337 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:33.638257314Z 53 PC: 5632e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.640087437Z 37 PC: 56337 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.641791273Z 53 PC: 5632e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:33.643304626Z 37 PC: 56337 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:33.645895946Z 41 PC: 563b7 | Parse filename
2018-12-17T23:02:33.647446199Z 41 PC: 563c5 | Parse filename
2018-12-17T23:02:33.649788507Z 75 PC: 563d0 | Execute program
2018-12-17T23:02:33.664487586Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.665452141Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:33.667603984Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.669045565Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:33.671509294Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.672787127Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.674686215Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:33.676196034Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:33.678050554Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:33.679559305Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:33.680945976Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:33.683293246Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:33.684722456Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:33.687020618Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:33.688369308Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:33.690357044Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:33.691757221Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:33.693959239Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.695801857Z 53 PC: 5c5f2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:33.697304093Z 37 PC: 5c607 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.699081906Z 37 PC: 5c60f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.700376059Z 37 PC: 5c617 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.702307336Z 37 PC: 5c61f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.704016409Z 68 PC: 5c98f | I/O control for devices (Set for = '')
2018-12-17T23:02:33.743774585Z 37 PC: 5be15 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.745112476Z 44 PC: 5d79f | Get time 0x5d79f: mov word ptr [0x3e], cx
0x5d7a3: mov word ptr [0x40], dx
0x5d7a7: retf
0x5d7a8: mov bx, sp
0x5d7aa: push ds
0x5d7ab: les di, ptr ss:[bx + 8]
0x5d7af: lds si, ptr ss:[bx + 4]
0x5d7b3: cld
0x5d7b4: xor ax, ax
0x5d7b6: stosw word ptr es:[di], ax
0x5d7b7: mov ax, 0xd7b0
0x5d7ba: stosw word ptr es:[di], ax
0x5d7bb: xor ax, ax
0x5d7bd: mov cx, 0x16
0x5d7c0: rep stosd dword ptr es:[di], eax
0x5d7c2: lodsb al, byte ptr [si]
0x5d7c3: cmp al, 0x4f
0x5d7c5: jbe 0x5d7c9
0x5d7c7: mov al, 0x4f
0x5d7c9: mov cl, al
2018-12-17T23:02:33.747318153Z 48 PC: 5d96c | Get DOS version
2018-12-17T23:02:33.749024879Z 61 PC: 5d81e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:33.755624053Z 63 PC: 5d8f1 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:33.764241754Z 62 PC: 5d86e | Close file
2018-12-17T23:02:33.766470288Z 26 PC: 5c407 | Set disk transfer address
2018-12-17T23:02:33.769062801Z 78 PC: 5c413 | Find first file
2018-12-17T23:02:33.775519402Z 26 PC: 5c407 | Set disk transfer address
2018-12-17T23:02:33.777181868Z 78 PC: 5c413 | Find first file
2018-12-17T23:02:33.783045333Z 26 PC: 5c42b | Set disk transfer address
2018-12-17T23:02:33.784382005Z 79 PC: 5c430 | Find next file
2018-12-17T23:02:33.787527538Z 48 PC: 5d96c | Get DOS version
2018-12-17T23:02:33.789195678Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.790925636Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.793206049Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:33.795069044Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:33.796276645Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.797404951Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.799540944Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:33.800641048Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:33.803002033Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.804110509Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.806099978Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.807601907Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.808708829Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:33.81043772Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:33.811513427Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:33.813851286Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:33.81545254Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:33.823867213Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:33.825402864Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:33.827608927Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:33.828856346Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:33.830043838Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:33.832360381Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:33.833522048Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:33.835681919Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:33.836884092Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:33.84006741Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:33.842122661Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:33.843421565Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:33.845601995Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:33.846650036Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:33.848409429Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:33.849404151Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:33.851332326Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:33.852611375Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.854172613Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.856361533Z 53 PC: 5c46e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:33.857480125Z 37 PC: 5c477 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:33.859681058Z 41 PC: 5c4f7 | Parse filename
2018-12-17T23:02:33.861230537Z 41 PC: 5c505 | Parse filename
2018-12-17T23:02:33.864588179Z 75 PC: 5c510 | Execute program
2018-12-17T23:02:33.879832979Z 53 PC: 62732 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.881826789Z 53 PC: 62732 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:33.885180387Z 53 PC: 62732 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.886627788Z 53 PC: 62732 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:33.88855902Z 53 PC: 62732 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.88994234Z 53 PC: 62732 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.892446063Z 53 PC: 62732 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:33.893873799Z 53 PC: 62732 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:33.896380972Z 53 PC: 62732 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:33.897594266Z 53 PC: 62732 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:33.898866365Z 53 PC: 62732 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:33.900511133Z 53 PC: 62732 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:33.901679438Z 53 PC: 62732 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:33.904536452Z 53 PC: 62732 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:33.905580782Z 53 PC: 62732 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:33.907156689Z 53 PC: 62732 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:33.908625474Z 53 PC: 62732 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:33.909957347Z 53 PC: 62732 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.912091781Z 53 PC: 62732 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:33.913158841Z 37 PC: 62747 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:33.915259828Z 37 PC: 6274f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:33.916320987Z 37 PC: 62757 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:33.918135524Z 37 PC: 6275f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:33.91955271Z 68 PC: 62acf | I/O control for devices (Set for = '')
2018-12-17T23:02:33.994394465Z 37 PC: 61f55 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:33.9969637Z 44 PC: 638df | Get time 0x638df: mov word ptr [0x3e], cx
0x638e3: mov word ptr [0x40], dx
0x638e7: retf
0x638e8: mov bx, sp
0x638ea: push ds
0x638eb: les di, ptr ss:[bx + 8]
0x638ef: lds si, ptr ss:[bx + 4]
0x638f3: cld
0x638f4: xor ax, ax
0x638f6: stosw word ptr es:[di], ax
0x638f7: mov ax, 0xd7b0
0x638fa: stosw word ptr es:[di], ax
0x638fb: xor ax, ax
0x638fd: mov cx, 0x16
0x63900: rep stosd dword ptr es:[di], eax
0x63902: lodsb al, byte ptr [si]
0x63903: cmp al, 0x4f
0x63905: jbe 0x63909
0x63907: mov al, 0x4f
0x63909: mov cl, al
2018-12-17T23:02:33.999350787Z 48 PC: 63aac | Get DOS version
2018-12-17T23:02:34.002102127Z 61 PC: 6395e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:34.009475564Z 63 PC: 63a31 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:34.018210542Z 62 PC: 639ae | Close file
2018-12-17T23:02:34.020094561Z 26 PC: 62547 | Set disk transfer address
2018-12-17T23:02:34.021145651Z 78 PC: 62553 | Find first file
2018-12-17T23:02:34.028458742Z 26 PC: 62547 | Set disk transfer address
2018-12-17T23:02:34.029558337Z 78 PC: 62553 | Find first file
2018-12-17T23:02:34.03644533Z 26 PC: 6256b | Set disk transfer address
2018-12-17T23:02:34.037486432Z 79 PC: 62570 | Find next file
2018-12-17T23:02:34.040512823Z 48 PC: 63aac | Get DOS version
2018-12-17T23:02:34.043353662Z 53 PC: 625ae | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.045281632Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.046709587Z 53 PC: 625ae | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:34.047775879Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:34.049250564Z 53 PC: 625ae | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:34.050312828Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:34.052416155Z 53 PC: 625ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:34.053488597Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:34.0554804Z 53 PC: 625ae | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:34.056591833Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:34.058916069Z 53 PC: 625ae | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:34.060211649Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:34.061570217Z 53 PC: 625ae | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:34.063283696Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:34.064577735Z 53 PC: 625ae | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:34.066677537Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:34.067725917Z 53 PC: 625ae | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:34.069734241Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:34.070794884Z 53 PC: 625ae | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:34.073236795Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:34.076388757Z 53 PC: 625ae | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:34.078248902Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:34.079835134Z 53 PC: 625ae | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:34.081374902Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:34.083099119Z 53 PC: 625ae | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:34.084435678Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:34.086451314Z 53 PC: 625ae | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:34.087781158Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:34.089904367Z 53 PC: 625ae | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:34.09119178Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:34.093602712Z 53 PC: 625ae | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:34.094869724Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:34.097300078Z 53 PC: 625ae | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:34.098570288Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:34.101229278Z 53 PC: 625ae | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:34.122662759Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:34.124126445Z 53 PC: 625ae | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:34.129813994Z 37 PC: 625b7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:34.131411156Z 41 PC: 62637 | Parse filename
2018-12-17T23:02:34.136636223Z 41 PC: 62645 | Parse filename
2018-12-17T23:02:34.138538842Z 75 PC: 62650 | Execute program
2018-12-17T23:02:34.155270128Z 53 PC: 68872 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.15692654Z 53 PC: 68872 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:34.167448486Z 53 PC: 68872 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:34.169392487Z 53 PC: 68872 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:34.17111428Z 53 PC: 68872 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:34.173560953Z 53 PC: 68872 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:34.175020003Z 53 PC: 68872 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:34.17728297Z 53 PC: 68872 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:34.178761165Z 53 PC: 68872 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:34.181312032Z 53 PC: 68872 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:34.18244365Z 53 PC: 68872 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:34.18474622Z 53 PC: 68872 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:34.186158392Z 53 PC: 68872 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:34.188559557Z 53 PC: 68872 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:34.189963474Z 53 PC: 68872 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:34.192521735Z 53 PC: 68872 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:34.194005316Z 53 PC: 68872 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:34.196705373Z 53 PC: 68872 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:34.198709721Z 53 PC: 68872 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:34.200151016Z 37 PC: 68887 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.202257134Z 37 PC: 6888f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:34.203457533Z 37 PC: 68897 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:34.205659312Z 37 PC: 6889f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:34.207418304Z 68 PC: 68c0f | I/O control for devices (Set for = '')
2018-12-17T23:02:34.296311872Z 37 PC: 68095 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:34.297811277Z 44 PC: 69a1f | Get time 0x69a1f: mov word ptr [0x3e], cx
0x69a23: mov word ptr [0x40], dx
0x69a27: retf
0x69a28: mov bx, sp
0x69a2a: push ds
0x69a2b: les di, ptr ss:[bx + 8]
0x69a2f: lds si, ptr ss:[bx + 4]
0x69a33: cld
0x69a34: xor ax, ax
0x69a36: stosw word ptr es:[di], ax
0x69a37: mov ax, 0xd7b0
0x69a3a: stosw word ptr es:[di], ax
0x69a3b: xor ax, ax
0x69a3d: mov cx, 0x16
0x69a40: rep stosd dword ptr es:[di], eax
0x69a42: lodsb al, byte ptr [si]
0x69a43: cmp al, 0x4f
0x69a45: jbe 0x69a49
0x69a47: mov al, 0x4f
0x69a49: mov cl, al
2018-12-17T23:02:34.300268101Z 48 PC: 69bec | Get DOS version
2018-12-17T23:02:34.302001831Z 61 PC: 69a9e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:34.309060897Z 63 PC: 69b71 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:34.317266723Z 62 PC: 69aee | Close file
2018-12-17T23:02:34.319327729Z 26 PC: 68687 | Set disk transfer address
2018-12-17T23:02:34.320819649Z 78 PC: 68693 | Find first file
2018-12-17T23:02:34.327576406Z 26 PC: 68687 | Set disk transfer address
2018-12-17T23:02:34.329200461Z 78 PC: 68693 | Find first file
2018-12-17T23:02:34.3349799Z 26 PC: 686ab | Set disk transfer address
2018-12-17T23:02:34.336796075Z 79 PC: 686b0 | Find next file
2018-12-17T23:02:34.339401656Z 48 PC: 69bec | Get DOS version
2018-12-17T23:02:34.341580024Z 53 PC: 686ee | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.342651754Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.343589629Z 53 PC: 686ee | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:34.345467914Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:34.346396993Z 53 PC: 686ee | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:34.348274971Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:34.349257758Z 53 PC: 686ee | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:34.350834182Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:34.351779339Z 53 PC: 686ee | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:34.353760612Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:34.354719318Z 53 PC: 686ee | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:34.355997945Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:34.357298781Z 53 PC: 686ee | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:34.358279671Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:34.359546522Z 53 PC: 686ee | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:34.360518392Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:34.36198593Z 53 PC: 686ee | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:34.362949711Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:34.364339883Z 53 PC: 686ee | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:34.365189045Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:34.366981782Z 53 PC: 686ee | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:34.367992786Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:34.369612102Z 53 PC: 686ee | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:34.370748498Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:34.373224422Z 53 PC: 686ee | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:34.374547442Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:34.37741286Z 53 PC: 686ee | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:34.37842669Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:34.379378092Z 53 PC: 686ee | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:34.380716821Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:34.38183598Z 53 PC: 686ee | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:34.383648411Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:34.384614305Z 53 PC: 686ee | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:34.386394054Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:34.387477097Z 53 PC: 686ee | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:34.389639201Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:34.390591948Z 53 PC: 686ee | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:34.392230778Z 37 PC: 686f7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:34.393328083Z 41 PC: 68777 | Parse filename
2018-12-17T23:02:34.395216631Z 41 PC: 68785 | Parse filename
2018-12-17T23:02:34.396415298Z 75 PC: 68790 | Execute program
2018-12-17T23:02:34.412012375Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.413043716Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:34.414670804Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:34.415732691Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:34.417334705Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:34.434241529Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:34.435882903Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:34.43725965Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:34.438774887Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:34.440275077Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:34.441212205Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:34.443105262Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:34.444112561Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:34.445306807Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:34.446731511Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:34.447827287Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:34.449492132Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:34.4504398Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:34.451974472Z 53 PC: 6e9b2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:34.452774887Z 37 PC: 6e9c7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.454704742Z 37 PC: 6e9cf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:34.455643716Z 37 PC: 6e9d7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:34.457278585Z 37 PC: 6e9df | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:34.458360029Z 68 PC: 6ed4f | I/O control for devices (Set for = '')
2018-12-17T23:02:34.53605306Z 37 PC: 6e1d5 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:34.537978192Z 44 PC: 6fb5f | Get time 0x6fb5f: mov word ptr [0x3e], cx
0x6fb63: mov word ptr [0x40], dx
0x6fb67: retf
0x6fb68: mov bx, sp
0x6fb6a: push ds
0x6fb6b: les di, ptr ss:[bx + 8]
0x6fb6f: lds si, ptr ss:[bx + 4]
0x6fb73: cld
0x6fb74: xor ax, ax
0x6fb76: stosw word ptr es:[di], ax
0x6fb77: mov ax, 0xd7b0
0x6fb7a: stosw word ptr es:[di], ax
0x6fb7b: xor ax, ax
0x6fb7d: mov cx, 0x16
0x6fb80: rep stosd dword ptr es:[di], eax
0x6fb82: lodsb al, byte ptr [si]
0x6fb83: cmp al, 0x4f
0x6fb85: jbe 0x6fb89
0x6fb87: mov al, 0x4f
0x6fb89: mov cl, al
2018-12-17T23:02:34.539703369Z 48 PC: 6fd2c | Get DOS version
2018-12-17T23:02:34.541373737Z 61 PC: 6fbde | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:34.546638483Z 63 PC: 6fcb1 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:34.555282551Z 62 PC: 6fc2e | Close file
2018-12-17T23:02:34.55751694Z 26 PC: 6e7c7 | Set disk transfer address
2018-12-17T23:02:34.559471924Z 78 PC: 6e7d3 | Find first file
2018-12-17T23:02:34.565913428Z 26 PC: 6e7c7 | Set disk transfer address
2018-12-17T23:02:34.56826644Z 78 PC: 6e7d3 | Find first file
2018-12-17T23:02:34.574106355Z 26 PC: 6e7eb | Set disk transfer address
2018-12-17T23:02:34.5764005Z 79 PC: 6e7f0 | Find next file
2018-12-17T23:02:34.579090031Z 48 PC: 6fd2c | Get DOS version
2018-12-17T23:02:34.581936865Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.583501152Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.584686587Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:34.587299994Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:34.58838193Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:34.590501944Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:34.591575224Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:34.594257966Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:34.595348608Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:34.597324509Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:34.598442328Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:34.60028155Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:34.601369858Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:34.603845469Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:34.605183231Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:34.607800417Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:34.60928588Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:34.61169614Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:34.613059883Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:34.61512282Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:34.616219428Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:34.617631135Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:34.618865183Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:34.620316757Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:34.622401843Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:34.62366444Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:34.626578173Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:34.631761515Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:34.633960088Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:34.635206971Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:34.637382681Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:34.638825266Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:34.640421011Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:34.642454531Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:34.644115935Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:34.646138432Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:34.647709433Z 53 PC: 6e82e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:34.649742975Z 37 PC: 6e837 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:34.651038493Z 41 PC: 6e8b7 | Parse filename
2018-12-17T23:02:34.653318774Z 41 PC: 6e8c5 | Parse filename
2018-12-17T23:02:34.654788449Z 75 PC: 6e8d0 | Execute program
2018-12-17T23:02:34.671597586Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.673182143Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:34.67598281Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:34.677478989Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:34.680021546Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:34.681816317Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:34.683271091Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:34.685955291Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:34.687387854Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:34.690009626Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:34.691429185Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:34.694063797Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:34.695471807Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:34.697847372Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:34.699192242Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:34.701533533Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:34.703240958Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:34.704593713Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:34.707165881Z 53 PC: 74af2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:34.708531738Z 37 PC: 74b07 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.710759765Z 37 PC: 74b0f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:34.722293626Z 37 PC: 74b17 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:34.724462826Z 37 PC: 74b1f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:34.725955558Z 68 PC: 74e8f | I/O control for devices (Set for = '')
2018-12-17T23:02:34.835928281Z 37 PC: 74315 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:34.83777603Z 44 PC: 75c9f | Get time 0x75c9f: mov word ptr [0x3e], cx
0x75ca3: mov word ptr [0x40], dx
0x75ca7: retf
0x75ca8: mov bx, sp
0x75caa: push ds
0x75cab: les di, ptr ss:[bx + 8]
0x75caf: lds si, ptr ss:[bx + 4]
0x75cb3: cld
0x75cb4: xor ax, ax
0x75cb6: stosw word ptr es:[di], ax
0x75cb7: mov ax, 0xd7b0
0x75cba: stosw word ptr es:[di], ax
0x75cbb: xor ax, ax
0x75cbd: mov cx, 0x16
0x75cc0: rep stosd dword ptr es:[di], eax
0x75cc2: lodsb al, byte ptr [si]
0x75cc3: cmp al, 0x4f
0x75cc5: jbe 0x75cc9
0x75cc7: mov al, 0x4f
0x75cc9: mov cl, al
2018-12-17T23:02:34.84030083Z 48 PC: 75e6c | Get DOS version
2018-12-17T23:02:34.843498877Z 61 PC: 75d1e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:34.850370788Z 63 PC: 75df1 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:34.859310349Z 62 PC: 75d6e | Close file
2018-12-17T23:02:34.86151036Z 26 PC: 74907 | Set disk transfer address
2018-12-17T23:02:34.863881797Z 78 PC: 74913 | Find first file
2018-12-17T23:02:34.870751476Z 26 PC: 74907 | Set disk transfer address
2018-12-17T23:02:34.871797442Z 78 PC: 74913 | Find first file
2018-12-17T23:02:34.878751131Z 26 PC: 7492b | Set disk transfer address
2018-12-17T23:02:34.880071603Z 79 PC: 74930 | Find next file
2018-12-17T23:02:34.883794452Z 48 PC: 75e6c | Get DOS version
2018-12-17T23:02:34.885766837Z 53 PC: 7496e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.888172553Z 37 PC: 74977 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.889495946Z 53 PC: 7496e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:34.891509516Z 37 PC: 74977 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:34.892683526Z 53 PC: 7496e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:34.894536974Z 37 PC: 74977 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:34.895594973Z 53 PC: 7496e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:34.897951597Z 37 PC: 74977 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:34.898985198Z 53 PC: 7496e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:34.901189028Z 37 PC: 74977 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:34.902228863Z 53 PC: 7496e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:34.904432719Z 37 PC: 74977 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:34.905481675Z 53 PC: 7496e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:34.907792498Z 37 PC: 74977 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:34.908911692Z 53 PC: 7496e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:34.911348414Z 37 PC: 74977 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:34.913722295Z 53 PC: 7496e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:34.916447195Z 37 PC: 74977 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:34.917718419Z 53 PC: 7496e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:34.919857498Z 37 PC: 74977 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:34.921740445Z 53 PC: 7496e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:34.922903629Z 37 PC: 74977 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:34.924993166Z 53 PC: 7496e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:34.92617985Z 37 PC: 74977 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:34.928532211Z 53 PC: 7496e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:34.929697693Z 37 PC: 74977 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:34.932263415Z 53 PC: 7496e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:34.9333234Z 37 PC: 74977 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:34.934997568Z 53 PC: 7496e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:34.936132527Z 37 PC: 74977 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:34.937727419Z 53 PC: 7496e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:34.9387383Z 37 PC: 74977 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:34.941007145Z 53 PC: 7496e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:34.942286002Z 37 PC: 74977 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:34.944426316Z 53 PC: 7496e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:34.945584723Z 37 PC: 74977 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:34.947844769Z 53 PC: 7496e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:34.949194472Z 37 PC: 74977 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:34.951338084Z 41 PC: 749f7 | Parse filename
2018-12-17T23:02:34.952720149Z 41 PC: 74a05 | Parse filename
2018-12-17T23:02:34.954690399Z 75 PC: 74a10 | Execute program
2018-12-17T23:02:34.969953531Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.971270517Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:34.97257152Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:34.973574783Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:34.975142611Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:34.976172365Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:34.977453571Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:34.978762994Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:34.980578121Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:34.981566964Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:34.983292156Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:34.984388451Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:34.98601996Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:34.987349036Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:34.989095709Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:34.990213959Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:34.991852908Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:34.993187423Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:34.994969668Z 53 PC: 7ac32 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:34.996354672Z 37 PC: 7ac47 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:34.998602823Z 37 PC: 7ac4f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:35.000200884Z 37 PC: 7ac57 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:35.003042102Z 37 PC: 7ac5f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:35.004828216Z 68 PC: 7afcf | I/O control for devices (Set for = '')
2018-12-17T23:02:35.073044632Z 37 PC: 7a455 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:35.07441663Z 44 PC: 7bddf | Get time 0x7bddf: mov word ptr [0x3e], cx
0x7bde3: mov word ptr [0x40], dx
0x7bde7: retf
0x7bde8: mov bx, sp
0x7bdea: push ds
0x7bdeb: les di, ptr ss:[bx + 8]
0x7bdef: lds si, ptr ss:[bx + 4]
0x7bdf3: cld
0x7bdf4: xor ax, ax
0x7bdf6: stosw word ptr es:[di], ax
0x7bdf7: mov ax, 0xd7b0
0x7bdfa: stosw word ptr es:[di], ax
0x7bdfb: xor ax, ax
0x7bdfd: mov cx, 0x16
0x7be00: rep stosd dword ptr es:[di], eax
0x7be02: lodsb al, byte ptr [si]
0x7be03: cmp al, 0x4f
0x7be05: jbe 0x7be09
0x7be07: mov al, 0x4f
0x7be09: mov cl, al
2018-12-17T23:02:35.076874101Z 48 PC: 7bfac | Get DOS version
2018-12-17T23:02:35.07802985Z 61 PC: 7be5e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:35.083377251Z 63 PC: 7bf31 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:35.088493272Z 62 PC: 7beae | Close file
2018-12-17T23:02:35.090496783Z 26 PC: 7aa47 | Set disk transfer address
2018-12-17T23:02:35.091588041Z 78 PC: 7aa53 | Find first file
2018-12-17T23:02:35.096492432Z 26 PC: 7aa47 | Set disk transfer address
2018-12-17T23:02:35.097470827Z 78 PC: 7aa53 | Find first file
2018-12-17T23:02:35.102124146Z 26 PC: 7aa6b | Set disk transfer address
2018-12-17T23:02:35.103020465Z 79 PC: 7aa70 | Find next file
2018-12-17T23:02:35.105087983Z 48 PC: 7bfac | Get DOS version
2018-12-17T23:02:35.107119729Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:35.108605008Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:35.109761397Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:35.110782466Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:35.112266639Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:35.113284452Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:35.114850913Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:35.115737039Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:35.117613697Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:35.118539101Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:35.12191564Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:35.123066861Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:35.124458624Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:35.125388217Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:35.127196959Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:35.128320756Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:35.129747234Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:35.130609061Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:35.132161771Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:35.133361763Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:35.135240642Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:35.136171916Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:35.137818976Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:35.138759543Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:35.140469183Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:35.141634459Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:35.143219177Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:35.144147554Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:35.145748188Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:35.146672438Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:35.148059431Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:35.149032407Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:35.150442781Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:35.151378713Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:35.152952097Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:35.153870314Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:35.15535485Z 53 PC: 7aaae | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:35.15627635Z 37 PC: 7aab7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:35.157735449Z 41 PC: 7ab37 | Parse filename
2018-12-17T23:02:35.158984167Z 41 PC: 7ab45 | Parse filename
2018-12-17T23:02:35.160559792Z 75 PC: 7ab50 | Execute program
2018-12-17T23:02:35.172991417Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:35.17544882Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:35.17703407Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:35.179278154Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:35.180365759Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:35.182405328Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:35.183491977Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:35.185463619Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:35.186668312Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:35.188821542Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:35.190105428Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:35.191844839Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:35.19313527Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:35.194892273Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:35.196201043Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:35.198356748Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:35.199508509Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:35.2013036Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:35.202788877Z 53 PC: 80d72 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:35.204761906Z 37 PC: 80d87 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:35.205981591Z 37 PC: 80d8f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:35.208451706Z 37 PC: 80d97 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:35.209839144Z 37 PC: 80d9f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:35.212189609Z 68 PC: 8110f | I/O control for devices (Set for = '�P��.?PSR�����B�B�B�B�B�')
2018-12-17T23:02:35.305687972Z 37 PC: 80595 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:35.309944043Z 44 PC: 81f1f | Get time 0x81f1f: mov word ptr [0x3e], cx
0x81f23: mov word ptr [0x40], dx
0x81f27: retf
0x81f28: mov bx, sp
0x81f2a: push ds
0x81f2b: les di, ptr ss:[bx + 8]
0x81f2f: lds si, ptr ss:[bx + 4]
0x81f33: cld
0x81f34: xor ax, ax
0x81f36: stosw word ptr es:[di], ax
0x81f37: mov ax, 0xd7b0
0x81f3a: stosw word ptr es:[di], ax
0x81f3b: xor ax, ax
0x81f3d: mov cx, 0x16
0x81f40: rep stosd dword ptr es:[di], eax
0x81f42: lodsb al, byte ptr [si]
0x81f43: cmp al, 0x4f
0x81f45: jbe 0x81f49
0x81f47: mov al, 0x4f
0x81f49: mov cl, al
2018-12-17T23:02:35.313237151Z 48 PC: 820ec | Get DOS version
2018-12-17T23:02:35.317612171Z 61 PC: 81f9e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:35.328200409Z 63 PC: 82071 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:35.33816313Z 62 PC: 81fee | Close file
2018-12-17T23:02:35.340686475Z 26 PC: 80b87 | Set disk transfer address
2018-12-17T23:02:35.344005635Z 78 PC: 80b93 | Find first file
2018-12-17T23:02:35.351704881Z 26 PC: 80b87 | Set disk transfer address
2018-12-17T23:02:35.354798479Z 78 PC: 80b93 | Find first file
2018-12-17T23:02:35.361797505Z 26 PC: 80bab | Set disk transfer address
2018-12-17T23:02:35.364825247Z 79 PC: 80bb0 | Find next file
2018-12-17T23:02:35.368044782Z 48 PC: 820ec | Get DOS version
2018-12-17T23:02:35.371413287Z 53 PC: 80bee | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:35.373454794Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:35.375802782Z 53 PC: 80bee | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:35.377283077Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:35.380271228Z 53 PC: 80bee | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:35.38156572Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:35.384360372Z 53 PC: 80bee | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:35.385635131Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:35.387662487Z 53 PC: 80bee | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:35.388762852Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:35.390786949Z 53 PC: 80bee | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:35.391872803Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:35.393884653Z 53 PC: 80bee | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:35.394965116Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:35.397183305Z 53 PC: 80bee | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:35.399947635Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:35.401052057Z 53 PC: 80bee | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:35.402368204Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:35.404654197Z 53 PC: 80bee | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:35.407241271Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:35.408366456Z 53 PC: 80bee | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:35.411011078Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:35.41216914Z 53 PC: 80bee | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:35.413626954Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:35.416153281Z 53 PC: 80bee | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:35.41881349Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:35.420250666Z 53 PC: 80bee | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:35.421760583Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:35.424123783Z 53 PC: 80bee | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:35.427240022Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:35.428344043Z 53 PC: 80bee | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:35.431148142Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:35.432251197Z 53 PC: 80bee | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:35.435227812Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:35.436391934Z 53 PC: 80bee | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:35.43840825Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:35.445132601Z 53 PC: 80bee | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:35.446403085Z 37 PC: 80bf7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:35.449424746Z 41 PC: 80c77 | Parse filename
2018-12-17T23:02:35.451402532Z 41 PC: 80c85 | Parse filename
2018-12-17T23:02:35.454344939Z 75 PC: 80c90 | Execute program
2018-12-17T23:02:35.470000718Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:35.471945418Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:35.47313587Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:35.475149361Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:35.476383499Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:35.478614263Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:35.479745359Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:35.483824712Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:35.485432819Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:35.488388005Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:35.490435644Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:35.493415704Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:35.495142404Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:35.498134469Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:35.499770367Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:35.503412437Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:35.505085863Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:35.507917103Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:35.509364298Z 53 PC: 86eb2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:35.511841525Z 37 PC: 86ec7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:35.512886954Z 37 PC: 86ecf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:35.515197633Z 37 PC: 86ed7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:35.517687223Z 37 PC: 86edf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:35.520060339Z 68 PC: 8724f | I/O control for devices (Set for = '')
2018-12-17T23:02:35.625459058Z 37 PC: 866d5 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:35.628274996Z 44 PC: 8805f | Get time 0x8805f: mov word ptr [0x3e], cx
0x88063: mov word ptr [0x40], dx
0x88067: retf
0x88068: mov bx, sp
0x8806a: push ds
0x8806b: les di, ptr ss:[bx + 8]
0x8806f: lds si, ptr ss:[bx + 4]
0x88073: cld
0x88074: xor ax, ax
0x88076: stosw word ptr es:[di], ax
0x88077: mov ax, 0xd7b0
0x8807a: stosw word ptr es:[di], ax
0x8807b: xor ax, ax
0x8807d: mov cx, 0x16
0x88080: rep stosd dword ptr es:[di], eax
0x88082: lodsb al, byte ptr [si]
0x88083: cmp al, 0x4f
0x88085: jbe 0x88089
0x88087: mov al, 0x4f
0x88089: mov cl, al
2018-12-17T23:02:35.630779839Z 48 PC: 8822c | Get DOS version
2018-12-17T23:02:35.633040748Z 61 PC: 880de | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:35.640122985Z 63 PC: 881b1 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:35.648356876Z 62 PC: 8812e | Close file
2018-12-17T23:02:35.651775657Z 26 PC: 86cc7 | Set disk transfer address
2018-12-17T23:02:35.653147321Z 78 PC: 86cd3 | Find first file
2018-12-17T23:02:35.660751115Z 26 PC: 86cc7 | Set disk transfer address
2018-12-17T23:02:35.66213443Z 78 PC: 86cd3 | Find first file
2018-12-17T23:02:35.66966603Z 26 PC: 86ceb | Set disk transfer address
2018-12-17T23:02:35.670733115Z 79 PC: 86cf0 | Find next file
2018-12-17T23:02:35.675019897Z 48 PC: 8822c | Get DOS version
2018-12-17T23:02:35.676994649Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:35.67830753Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:35.680176415Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:35.68127906Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:35.68363344Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:35.684842354Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:35.686693235Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:35.687790428Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:35.690313248Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:35.691584586Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:35.694238961Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:35.69551591Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:35.697598515Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:35.698788523Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:35.701421253Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:35.70253991Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:35.705699828Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:35.706892095Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:35.709837538Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:35.711171768Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:35.714641289Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:35.716118992Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:35.718279591Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:35.719422466Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:35.722118429Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:35.738976539Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:35.744946364Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:35.746506147Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:35.749430012Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:35.750943604Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:35.753823496Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:35.755000563Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:35.758476387Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:35.760292067Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:35.763387531Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:35.764556106Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:35.767715625Z 53 PC: 86d2e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:35.769093992Z 37 PC: 86d37 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:35.772327646Z 41 PC: 86db7 | Parse filename
2018-12-17T23:02:35.773789911Z 41 PC: 86dc5 | Parse filename
2018-12-17T23:02:35.778290984Z 75 PC: 86dd0 | Execute program
2018-12-17T23:02:35.79308087Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:35.79584879Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:35.797293665Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:35.800119709Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:35.80159467Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:35.804712426Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:35.806055036Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:35.809041402Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:35.810397999Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:35.813270196Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:35.815297027Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:35.817536012Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:35.818899243Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:35.820233042Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:35.822866769Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:35.824181472Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:35.826642902Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:35.827972618Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:35.830484395Z 53 PC: 8cff2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:35.831859552Z 37 PC: 8d007 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:35.83473111Z 37 PC: 8d00f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:35.835992599Z 37 PC: 8d017 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:35.837979352Z 37 PC: 8d01f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:35.839727309Z 68 PC: 8d38f | I/O control for devices
2018-12-17T23:02:35.943157502Z 37 PC: 8c815 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:35.945073572Z 44 PC: 8e19f | Get time 0x8e19f: mov word ptr [0x3e], cx
0x8e1a3: mov word ptr [0x40], dx
0x8e1a7: retf
0x8e1a8: mov bx, sp
0x8e1aa: push ds
0x8e1ab: les di, ptr ss:[bx + 8]
0x8e1af: lds si, ptr ss:[bx + 4]
0x8e1b3: cld
0x8e1b4: xor ax, ax
0x8e1b6: stosw word ptr es:[di], ax
0x8e1b7: mov ax, 0xd7b0
0x8e1ba: stosw word ptr es:[di], ax
0x8e1bb: xor ax, ax
0x8e1bd: mov cx, 0x16
0x8e1c0: rep stosd dword ptr es:[di], eax
0x8e1c2: lodsb al, byte ptr [si]
0x8e1c3: cmp al, 0x4f
0x8e1c5: jbe 0x8e1c9
0x8e1c7: mov al, 0x4f
0x8e1c9: mov cl, al
2018-12-17T23:02:35.947347374Z 48 PC: 8e36c | Get DOS version
2018-12-17T23:02:35.95009879Z 61 PC: 8e21e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:35.957550573Z 63 PC: 8e2f1 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:35.967127855Z 62 PC: 8e26e | Close file
2018-12-17T23:02:35.969380209Z 26 PC: 8ce07 | Set disk transfer address
2018-12-17T23:02:35.984957699Z 78 PC: 8ce13 | Find first file
2018-12-17T23:02:35.991827549Z 26 PC: 8ce07 | Set disk transfer address
2018-12-17T23:02:35.994527657Z 78 PC: 8ce13 | Find first file
2018-12-17T23:02:36.00071318Z 26 PC: 8ce2b | Set disk transfer address
2018-12-17T23:02:36.003702886Z 79 PC: 8ce30 | Find next file
2018-12-17T23:02:36.006468147Z 48 PC: 8e36c | Get DOS version
2018-12-17T23:02:36.010217476Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.011506668Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.014140404Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.015816482Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.019641773Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.02098404Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.024007109Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.025507721Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.02827283Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.029772413Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.032416975Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.034232602Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.039091421Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.040513977Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.043185512Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.0445904Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.047227872Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.048670332Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.051875104Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.053217626Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.055841274Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.057200331Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.059799628Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.061156029Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.063687493Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.065016563Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.06766705Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.069005795Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.071401908Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.072561011Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.075101611Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.076851167Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.078697519Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.081181315Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.082854885Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.092278259Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.093627807Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.096569621Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.098068305Z 41 PC: 8cef7 | Parse filename
2018-12-17T23:02:36.10093859Z 41 PC: 8cf05 | Parse filename
2018-12-17T23:02:36.102505585Z 75 PC: 8cf10 | Execute program
2018-12-17T23:02:36.119505707Z 53 PC: 93132 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.120981459Z 53 PC: 93132 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.123270884Z 53 PC: 93132 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.124485453Z 53 PC: 93132 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.127088459Z 53 PC: 93132 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.128389771Z 53 PC: 93132 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.131186288Z 53 PC: 93132 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.132500497Z 53 PC: 93132 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.135070066Z 53 PC: 93132 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.136368781Z 53 PC: 93132 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.138966074Z 53 PC: 93132 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.14027291Z 53 PC: 93132 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.143238574Z 53 PC: 93132 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.145398335Z 53 PC: 93132 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.148692818Z 53 PC: 93132 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.150113185Z 53 PC: 93132 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.152465214Z 53 PC: 93132 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.153940876Z 53 PC: 93132 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.156365291Z 53 PC: 93132 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.157742902Z 37 PC: 93147 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.160186681Z 37 PC: 9314f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.161382294Z 37 PC: 93157 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.163347859Z 37 PC: 9315f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.164889485Z 68 PC: 934cf | I/O control for devices
2018-12-17T23:02:36.24601287Z 37 PC: 92955 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.24860457Z 44 PC: 942df | Get time 0x942df: mov word ptr [0x3e], cx
0x942e3: mov word ptr [0x40], dx
0x942e7: retf
0x942e8: mov bx, sp
0x942ea: push ds
0x942eb: les di, ptr ss:[bx + 8]
0x942ef: lds si, ptr ss:[bx + 4]
0x942f3: cld
0x942f4: xor ax, ax
0x942f6: stosw word ptr es:[di], ax
0x942f7: mov ax, 0xd7b0
0x942fa: stosw word ptr es:[di], ax
0x942fb: xor ax, ax
0x942fd: mov cx, 0x16
0x94300: rep stosd dword ptr es:[di], eax
0x94302: lodsb al, byte ptr [si]
0x94303: cmp al, 0x4f
0x94305: jbe 0x94309
0x94307: mov al, 0x4f
0x94309: mov cl, al
2018-12-17T23:02:36.250887403Z 48 PC: 944ac | Get DOS version
2018-12-17T23:02:36.253193651Z 61 PC: 9435e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:36.260198788Z 63 PC: 94431 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:36.268755695Z 62 PC: 943ae | Close file
2018-12-17T23:02:36.271091855Z 26 PC: 92f47 | Set disk transfer address
2018-12-17T23:02:36.272480956Z 78 PC: 92f53 | Find first file
2018-12-17T23:02:36.280834064Z 26 PC: 92f47 | Set disk transfer address
2018-12-17T23:02:36.282046703Z 78 PC: 92f53 | Find first file
2018-12-17T23:02:36.287984632Z 26 PC: 92f6b | Set disk transfer address
2018-12-17T23:02:36.290398721Z 79 PC: 92f70 | Find next file
2018-12-17T23:02:36.293488434Z 48 PC: 944ac | Get DOS version
2018-12-17T23:02:36.296467829Z 53 PC: 92fae | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.29771042Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.300000176Z 53 PC: 92fae | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.301488917Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.302645008Z 53 PC: 92fae | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.305634162Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.306798105Z 53 PC: 92fae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.309485594Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.310597114Z 53 PC: 92fae | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.312727401Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.313861143Z 53 PC: 92fae | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.316155802Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.317287314Z 53 PC: 92fae | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.318416588Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.320513405Z 53 PC: 92fae | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.321631862Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.323722024Z 53 PC: 92fae | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.324829999Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.327686409Z 53 PC: 92fae | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.328812325Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.331559154Z 53 PC: 92fae | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.332714661Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.335933297Z 53 PC: 92fae | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.337560507Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.33940467Z 53 PC: 92fae | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.341081096Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.342133938Z 53 PC: 92fae | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.3438628Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.345302127Z 53 PC: 92fae | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.347499452Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.348626678Z 53 PC: 92fae | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.35006779Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.352475231Z 53 PC: 92fae | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.353835023Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.356387724Z 53 PC: 92fae | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.357691119Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.359464006Z 53 PC: 92fae | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.360539951Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.363037702Z 41 PC: 93037 | Parse filename
2018-12-17T23:02:36.364416352Z 41 PC: 93045 | Parse filename
2018-12-17T23:02:36.367179478Z 75 PC: 93050 | Execute program
2018-12-17T23:02:36.382224399Z 53 PC: 99272 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.384394472Z 53 PC: 99272 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.385623363Z 53 PC: 99272 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.386960717Z 53 PC: 99272 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.388371558Z 53 PC: 99272 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.389627274Z 53 PC: 99272 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.391528472Z 53 PC: 99272 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.392595129Z 53 PC: 99272 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.399428966Z 53 PC: 99272 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.407514474Z 53 PC: 99272 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.410180669Z 53 PC: 99272 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.411530599Z 53 PC: 99272 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.414773627Z 53 PC: 99272 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.416331257Z 53 PC: 99272 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.417999944Z 53 PC: 99272 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.420833458Z 53 PC: 99272 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.422173002Z 53 PC: 99272 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.424562031Z 53 PC: 99272 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.425825732Z 53 PC: 99272 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.427679575Z 37 PC: 99287 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.428862547Z 37 PC: 9928f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.430221416Z 37 PC: 99297 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.432862872Z 37 PC: 9929f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.434372516Z 68 PC: 9960f | I/O control for devices
2018-12-17T23:02:36.522432585Z 37 PC: 98a95 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.524095562Z 44 PC: 9a41f | Get time 0x9a41f: mov word ptr [0x3e], cx
0x9a423: mov word ptr [0x40], dx
0x9a427: retf
0x9a428: mov bx, sp
0x9a42a: push ds
0x9a42b: les di, ptr ss:[bx + 8]
0x9a42f: lds si, ptr ss:[bx + 4]
0x9a433: cld
0x9a434: xor ax, ax
0x9a436: stosw word ptr es:[di], ax
0x9a437: mov ax, 0xd7b0
0x9a43a: stosw word ptr es:[di], ax
0x9a43b: xor ax, ax
0x9a43d: mov cx, 0x16
0x9a440: rep stosd dword ptr es:[di], eax
0x9a442: lodsb al, byte ptr [si]
0x9a443: cmp al, 0x4f
0x9a445: jbe 0x9a449
0x9a447: mov al, 0x4f
0x9a449: mov cl, al
2018-12-17T23:02:36.52720176Z 48 PC: 9a5ec | Get DOS version
2018-12-17T23:02:36.528741852Z 61 PC: 9a49e | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:02:36.536817309Z 63 PC: 9a571 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T23:02:36.544519554Z 62 PC: 9a4ee | Close file
2018-12-17T23:02:36.548232558Z 26 PC: 99087 | Set disk transfer address
2018-12-17T23:02:36.549346084Z 78 PC: 99093 | Find first file
2018-12-17T23:02:36.557935636Z 26 PC: 99087 | Set disk transfer address
2018-12-17T23:02:36.55911195Z 78 PC: 99093 | Find first file
2018-12-17T23:02:36.565631013Z 26 PC: 990ab | Set disk transfer address
2018-12-17T23:02:36.567315731Z 79 PC: 990b0 | Find next file
2018-12-17T23:02:36.57015314Z 48 PC: 9a5ec | Get DOS version
2018-12-17T23:02:36.573357546Z 53 PC: 990ee | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.574477633Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.576041578Z 53 PC: 990ee | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.577319727Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.578622482Z 53 PC: 990ee | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.581377247Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.582614737Z 53 PC: 990ee | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.584264809Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.585769833Z 53 PC: 990ee | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.586816227Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.588686349Z 53 PC: 990ee | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.590004598Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.591258642Z 53 PC: 990ee | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.592899299Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.593879211Z 53 PC: 990ee | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.595771025Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.596957174Z 53 PC: 990ee | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.598604026Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.599676239Z 53 PC: 990ee | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.601119086Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.60253047Z 53 PC: 990ee | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.603673667Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.605292795Z 53 PC: 990ee | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.607184785Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.608228541Z 53 PC: 990ee | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.610447148Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.611637434Z 53 PC: 990ee | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.612916464Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.614293498Z 53 PC: 990ee | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.615469749Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.617397679Z 53 PC: 990ee | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.618900806Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.621485512Z 53 PC: 990ee | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.622892946Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.62586546Z 53 PC: 990ee | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.627455611Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.629041485Z 53 PC: 990ee | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.630756969Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.632333081Z 41 PC: 99177 | Parse filename
2018-12-17T23:02:36.634627243Z 41 PC: 99185 | Parse filename
2018-12-17T23:02:36.636240906Z 75 PC: 99190 | Execute program
2018-12-17T23:02:36.645708851Z 53 PC: 990ee | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.648070436Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.649154017Z 53 PC: 990ee | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.651146508Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.652246241Z 53 PC: 990ee | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.654385284Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.655422936Z 53 PC: 990ee | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.656502807Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.658748881Z 53 PC: 990ee | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.659861487Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.66244445Z 53 PC: 990ee | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.663613888Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.664737136Z 53 PC: 990ee | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.666404546Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.667534792Z 53 PC: 990ee | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.669000012Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.670109702Z 53 PC: 990ee | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.671042741Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.672637599Z 53 PC: 990ee | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.674130076Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.675090554Z 53 PC: 990ee | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.676591416Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.677617038Z 53 PC: 990ee | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.679385882Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.680284798Z 53 PC: 990ee | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.682020075Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.683102261Z 53 PC: 990ee | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.684089143Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.685603267Z 53 PC: 990ee | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.686533756Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.688042114Z 53 PC: 990ee | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.688996788Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.69006322Z 53 PC: 990ee | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.69170366Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.692844514Z 53 PC: 990ee | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.695203059Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.696201696Z 53 PC: 990ee | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.698588637Z 37 PC: 990f7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.699945612Z 77 PC: 991ae | Get program return code
2018-12-17T23:02:36.701440895Z 37 PC: 99386 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.703452672Z 37 PC: 99386 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.704449775Z 37 PC: 99386 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.706284791Z 37 PC: 99386 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.707322515Z 37 PC: 99386 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.708941388Z 37 PC: 99386 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.710552438Z 37 PC: 99386 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.712304858Z 37 PC: 99386 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.715051353Z 37 PC: 99386 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.716308792Z 37 PC: 99386 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.718386906Z 37 PC: 99386 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.71990168Z 37 PC: 99386 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.721375186Z 37 PC: 99386 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.724403612Z 37 PC: 99386 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.72578091Z 37 PC: 99386 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.727890017Z 37 PC: 99386 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.729035568Z 37 PC: 99386 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.730970177Z 37 PC: 99386 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.733009822Z 37 PC: 99386 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.73460863Z 76 PC: 993c5 | Terminate with return code (Return code = '0')
2018-12-17T23:02:36.738137103Z 53 PC: 92fae | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.739517831Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.741366532Z 53 PC: 92fae | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.742503243Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.743369211Z 53 PC: 92fae | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.745126601Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.746032371Z 53 PC: 92fae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.748051649Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.748934805Z 53 PC: 92fae | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.750249571Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.751551321Z 53 PC: 92fae | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.752463536Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.753905944Z 53 PC: 92fae | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.754908635Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.755793739Z 53 PC: 92fae | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.765860949Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.774406382Z 53 PC: 92fae | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.77721219Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.778575956Z 53 PC: 92fae | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.782676467Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.785967899Z 53 PC: 92fae | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.787380125Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.791112978Z 53 PC: 92fae | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.792692342Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.796599433Z 53 PC: 92fae | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.79825426Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.800913102Z 53 PC: 92fae | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.802824639Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.804479037Z 53 PC: 92fae | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.807302359Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.808763108Z 53 PC: 92fae | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.811266306Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.812694852Z 53 PC: 92fae | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.814435482Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.816212677Z 53 PC: 92fae | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.81779791Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.819740507Z 53 PC: 92fae | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.821350691Z 37 PC: 92fb7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.822830142Z 77 PC: 9306e | Get program return code
2018-12-17T23:02:36.826215068Z 37 PC: 93246 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.827490265Z 37 PC: 93246 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.829803637Z 37 PC: 93246 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.832306994Z 37 PC: 93246 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.833600065Z 37 PC: 93246 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.836127632Z 37 PC: 93246 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.837517428Z 37 PC: 93246 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.840085584Z 37 PC: 93246 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.842123762Z 37 PC: 93246 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.843513778Z 37 PC: 93246 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.846549639Z 37 PC: 93246 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.847964793Z 37 PC: 93246 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.849349968Z 37 PC: 93246 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.851484534Z 37 PC: 93246 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.85264425Z 37 PC: 93246 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.854818337Z 37 PC: 93246 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.855975686Z 37 PC: 93246 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.85764422Z 37 PC: 93246 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.859306844Z 37 PC: 93246 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.860672035Z 76 PC: 93285 | Terminate with return code (Return code = '0')
2018-12-17T23:02:36.864393614Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.865672959Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:02:36.866985852Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.868831167Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:02:36.869931833Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.872397656Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:02:36.873796156Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.876277459Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:02:36.87797218Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.879329308Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:02:36.881857769Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.883583118Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:02:36.884889421Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.887395145Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:02:36.889621359Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.890990418Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:02:36.893864109Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.896423393Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:02:36.897715404Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.899920358Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:02:36.901317236Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.903348973Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:02:36.904703929Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.905844792Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:02:36.915831115Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.917408902Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:02:36.919034884Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.920516354Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:02:36.921689792Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.923257852Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:02:36.924916328Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.926110967Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:02:36.928472139Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.930010103Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:02:36.931870133Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.93416721Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:02:36.936059803Z 53 PC: 8ce6e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.937414526Z 37 PC: 8ce77 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:02:36.940777972Z 44 PC: 8e19f | Get time 0x8e19f: mov word ptr [0x3e], cx
0x8e1a3: mov word ptr [0x40], dx
0x8e1a7: retf
0x8e1a8: mov bx, sp
0x8e1aa: push ds
0x8e1ab: les di, ptr ss:[bx + 8]
0x8e1af: lds si, ptr ss:[bx + 4]
0x8e1b3: cld
0x8e1b4: xor ax, ax
0x8e1b6: stosw word ptr es:[di], ax
0x8e1b7: mov ax, 0xd7b0
0x8e1ba: stosw word ptr es:[di], ax
0x8e1bb: xor ax, ax
0x8e1bd: mov cx, 0x16
0x8e1c0: rep stosd dword ptr es:[di], eax
0x8e1c2: lodsb al, byte ptr [si]
0x8e1c3: cmp al, 0x4f
0x8e1c5: jbe 0x8e1c9
0x8e1c7: mov al, 0x4f
0x8e1c9: mov cl, al
2018-12-17T23:02:37.038451028Z 8 PC: 8c6c7 | Console input without echo