Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Lamer.8181

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:03:09.789177461Z 53 PC: 1413a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:09.791770548Z 53 PC: 1413a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:09.793927628Z 53 PC: 1413a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:09.795826335Z 53 PC: 1413a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:09.797813071Z 53 PC: 1413a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:09.800530054Z 53 PC: 1413a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:09.80237338Z 53 PC: 1413a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:09.803881475Z 53 PC: 1413a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:09.806406248Z 53 PC: 1413a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:09.807778606Z 53 PC: 1413a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:09.809151939Z 53 PC: 1413a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:09.811549504Z 53 PC: 1413a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:09.813737304Z 53 PC: 1413a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:09.815838944Z 53 PC: 1413a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:09.822994625Z 53 PC: 1413a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:09.824541984Z 53 PC: 1413a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:09.826123587Z 53 PC: 1413a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:09.828122821Z 53 PC: 1413a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:09.829487058Z 53 PC: 1413a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:09.830857946Z 37 PC: 1414f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:09.832632837Z 37 PC: 14157 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:09.833979667Z 37 PC: 1415f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:09.835147049Z 37 PC: 14167 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:09.836631683Z 68 PC: 14d27 | I/O control for devices (Set for = '')
2018-12-17T23:03:09.866826593Z 37 PC: 13b61 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:09.868908544Z 37 PC: 13916 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:03:09.870615925Z 37 PC: 13916 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:03:09.873359071Z 37 PC: 13916 | Set interrupt vector (Interrupt = '25' AKA 'Get default drive')
2018-12-17T23:03:09.874709073Z 48 PC: 14967 | Get DOS version
2018-12-17T23:03:09.877998145Z 48 PC: 14967 | Get DOS version
2018-12-17T23:03:09.880651421Z 25 PC: 149f4 | Get default drive
2018-12-17T23:03:09.882054885Z 71 PC: 14a07 | Get current directory
2018-12-17T23:03:09.885644102Z 59 PC: 14abb | Change current directory
2018-12-17T23:03:09.891388594Z 44 PC: 14e5e | Get time 0x14e5e: mov word ptr [0xb8], cx
0x14e62: mov word ptr [0xba], dx
0x14e66: retf
0x14e67: mov di, 0xcc
0x14e6a: push ds
0x14e6b: pop es
0x14e6c: mov cx, 0xdd7c
0x14e6f: sub cx, di
0x14e71: shr cx, 1
0x14e73: xor ax, ax
0x14e75: cld
0x14e76: rep stosd dword ptr es:[di], eax
0x14e78: ret
0x14e79: add byte ptr [bx + si], al
0x14e7b: add byte ptr [bx + si], al
0x14e7d: add byte ptr [bx + si], al
0x14e7f: add byte ptr [bx + si], al
0x14e81: add byte ptr [si], cl
0x14e83: and al, 0x24
0x14e85: and al, 0x24
2018-12-17T23:03:09.894113684Z 25 PC: 149f4 | Get default drive
2018-12-17T23:03:09.895549722Z 71 PC: 14a07 | Get current directory
2018-12-17T23:03:09.899769233Z 26 PC: 1381d | Set disk transfer address
2018-12-17T23:03:09.901040487Z 78 PC: 13829 | Find first file
2018-12-17T23:03:09.908111713Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.909501049Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.91297918Z 26 PC: 1381d | Set disk transfer address
2018-12-17T23:03:09.914558932Z 78 PC: 13829 | Find first file
2018-12-17T23:03:09.921845934Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.92354474Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.926523383Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.927704137Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.931917584Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.933447187Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.937603234Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.940575013Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.944126428Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.945717998Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.950029936Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.951251498Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.954181751Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.956006088Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.959206216Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.960535204Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.964033454Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.965267554Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.968634799Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.970231097Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.974377599Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.975996354Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.979518361Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.981085138Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.984079806Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.985318594Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.98843443Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.989810566Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.993131721Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:09.995220137Z 79 PC: 13846 | Find next file
2018-12-17T23:03:09.998501153Z 26 PC: 1381d | Set disk transfer address
2018-12-17T23:03:10.000090867Z 78 PC: 13829 | Find first file
2018-12-17T23:03:10.015577656Z 26 PC: 13841 | Set disk transfer address
2018-12-17T23:03:10.01709361Z 79 PC: 13846 | Find next file
2018-12-17T23:03:10.020256932Z 61 PC: 147a5 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:10.029965217Z 87 PC: 137c0 | Get or set file date and time
2018-12-17T23:03:10.031765319Z 62 PC: 147f5 | Close file
2018-12-17T23:03:10.034778206Z 61 PC: 147a5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:10.043140344Z 63 PC: 14878 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:10.052442326Z 60 PC: 147a5 | Create or truncate file
2018-12-17T23:03:10.07145366Z 64 PC: 14878 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:10.082321381Z 62 PC: 147f5 | Close file
2018-12-17T23:03:10.085327184Z 61 PC: 147a5 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:10.09328228Z 63 PC: 14878 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:10.103174163Z 64 PC: 14878 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:10.115150991Z 63 PC: 14878 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:10.11788503Z 62 PC: 147f5 | Close file
2018-12-17T23:03:10.120433478Z 62 PC: 147f5 | Close file
2018-12-17T23:03:10.131135667Z 65 PC: 148ee | Delete file (Filename = 'TEST.EXE')
2018-12-17T23:03:10.144781152Z 86 PC: 14932 | Rename file
2018-12-17T23:03:10.158001219Z 61 PC: 147a5 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:10.167855489Z 87 PC: 137ed | Get or set file date and time
2018-12-17T23:03:10.170970099Z 62 PC: 147f5 | Close file
2018-12-17T23:03:10.179246762Z 14 PC: 14a4d | Set default drive (Drive = 'A')
2018-12-17T23:03:10.182484295Z 25 PC: 14a51 | Get default drive
2018-12-17T23:03:10.18492697Z 59 PC: 14abb | Change current directory
2018-12-17T23:03:10.191456705Z 42 PC: 13747 | Get date 0x13747: xor ah, ah
0x13749: les di, ptr [bp + 6]
0x1374c: stosw word ptr es:[di], ax
0x1374d: mov al, dl
0x1374f: les di, ptr [bp + 0xa]
0x13752: stosw word ptr es:[di], ax
0x13753: mov al, dh
0x13755: les di, ptr [bp + 0xe]
0x13758: stosw word ptr es:[di], ax
0x13759: xchg ax, cx
0x1375a: les di, ptr [bp + 0x12]
0x1375d: stosw word ptr es:[di], ax
0x1375e: pop bp
0x1375f: retf 0x10
0x13762: push bp
0x13763: mov bp, sp
0x13765: mov cx, word ptr [bp + 0xa]
0x13768: mov dh, byte ptr [bp + 8]
0x1376b: mov dl, byte ptr [bp + 6]
0x1376e: mov ah, 0x2b
2018-12-17T23:03:10.195793895Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:10.197873268Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:10.199704986Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:10.201390801Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:10.203994589Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:10.205624041Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:10.207221637Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:10.209538645Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:10.211213525Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:10.212845581Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:10.21512074Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:10.216784143Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:10.218379645Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:10.220736074Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:10.222174284Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:10.223471648Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:10.22576212Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:10.227436281Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:10.229036248Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:10.234202258Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:10.238568185Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:10.239981409Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:10.241599417Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:10.243267668Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:10.244671579Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:10.246136228Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:10.248154201Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:10.249540983Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:10.250879576Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:10.254071897Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:10.255817216Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:10.258441473Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:10.260909017Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:10.262391752Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:10.263823517Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:10.266236101Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:10.267630549Z 53 PC: 13a8e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:10.269383034Z 37 PC: 13a97 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:10.271886165Z 86 PC: 14932 | Rename file
2018-12-17T23:03:10.284484476Z 61 PC: 147a5 | Open file (Filename = '$$$$$$$$.TMP')
2018-12-17T23:03:10.28903943Z 66 PC: 148d7 | Move file pointer
2018-12-17T23:03:10.290791945Z 60 PC: 147a5 | Create or truncate file
2018-12-17T23:03:10.298020671Z 63 PC: 14878 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:10.315885079Z 64 PC: 14878 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:10.326941629Z 63 PC: 14878 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:10.329236444Z 62 PC: 147f5 | Close file
2018-12-17T23:03:10.338174175Z 62 PC: 147f5 | Close file
2018-12-17T23:03:10.341193789Z 41 PC: 13a45 | Parse filename
2018-12-17T23:03:10.342841112Z 41 PC: 13a53 | Parse filename
2018-12-17T23:03:10.344422472Z 75 PC: 13a5e | Execute program
2018-12-17T23:03:10.372521982Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:10.374267376Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:10.375765355Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:10.377729804Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:10.379205641Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:10.380591228Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:10.382504835Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:10.38419166Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:10.385908653Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:10.387896386Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:10.389617564Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:10.391289768Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:10.393907788Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:10.395264922Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:10.39744419Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:10.399861305Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:10.401616692Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:10.40327892Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:10.405963787Z 53 PC: 24d8a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:10.407643119Z 37 PC: 24d9f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:10.40922699Z 37 PC: 24da7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:10.411976795Z 37 PC: 24daf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:10.413370644Z 37 PC: 24db7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:10.415376863Z 68 PC: 25977 | I/O control for devices (Set for = '')
2018-12-17T23:03:10.527951052Z 37 PC: 247b1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:10.530230492Z 37 PC: 24566 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:03:10.53206143Z 37 PC: 24566 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:03:10.534041313Z 37 PC: 24566 | Set interrupt vector (Interrupt = '25' AKA 'Get default drive')
2018-12-17T23:03:10.535765457Z 48 PC: 255b7 | Get DOS version
2018-12-17T23:03:10.53928813Z 48 PC: 255b7 | Get DOS version
2018-12-17T23:03:10.541282492Z 25 PC: 25644 | Get default drive
2018-12-17T23:03:10.543122003Z 71 PC: 25657 | Get current directory
2018-12-17T23:03:10.546945281Z 59 PC: 2570b | Change current directory
2018-12-17T23:03:10.552492627Z 44 PC: 25aae | Get time 0x25aae: mov word ptr [0xb8], cx
0x25ab2: mov word ptr [0xba], dx
0x25ab6: retf
0x25ab7: mov di, 0xcc
0x25aba: push ds
0x25abb: pop es
0x25abc: mov cx, 0xdd7c
0x25abf: sub cx, di
0x25ac1: shr cx, 1
0x25ac3: xor ax, ax
0x25ac5: cld
0x25ac6: rep stosd dword ptr es:[di], eax
0x25ac8: ret
0x25ac9: add byte ptr [bx + si], al
0x25acb: add byte ptr [bx + si], al
0x25acd: add byte ptr [bx + si], al
0x25acf: add byte ptr [bx + si], al
0x25ad1: add byte ptr [si], cl
0x25ad3: and al, 0x24
0x25ad5: and al, 0x24
2018-12-17T23:03:10.555201184Z 25 PC: 25644 | Get default drive
2018-12-17T23:03:10.556854201Z 71 PC: 25657 | Get current directory
2018-12-17T23:03:10.560840062Z 26 PC: 2446d | Set disk transfer address
2018-12-17T23:03:10.562769805Z 78 PC: 24479 | Find first file
2018-12-17T23:03:10.570132285Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.571962364Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.575646489Z 26 PC: 2446d | Set disk transfer address
2018-12-17T23:03:10.577191093Z 78 PC: 24479 | Find first file
2018-12-17T23:03:10.581645563Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.582940026Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.584913478Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.586118664Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.588799916Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.589925773Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.591940499Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.593546148Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.596020297Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.597043151Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.599788357Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.600716869Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.602678332Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.604139405Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.606197899Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.607425178Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.610154848Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.611285672Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.613851261Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.615835878Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.618076755Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.619008704Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.622631763Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.623742266Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.626737474Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.628482373Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.630911761Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.631942327Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.635658701Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.63706466Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.640266443Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.642070901Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.645600221Z 44 PC: 25aae | Get time 0x25aae: mov word ptr [0xb8], cx
0x25ab2: mov word ptr [0xba], dx
0x25ab6: retf
0x25ab7: mov di, 0xcc
0x25aba: push ds
0x25abb: pop es
0x25abc: mov cx, 0xdd7c
0x25abf: sub cx, di
0x25ac1: shr cx, 1
0x25ac3: xor ax, ax
0x25ac5: cld
0x25ac6: rep stosd dword ptr es:[di], eax
0x25ac8: ret
0x25ac9: add byte ptr [bx + si], al
0x25acb: add byte ptr [bx + si], al
0x25acd: add byte ptr [bx + si], al
0x25acf: add byte ptr [bx + si], al
0x25ad1: add byte ptr [si], cl
0x25ad3: and al, 0x24
0x25ad5: and al, 0x24
2018-12-17T23:03:10.648022753Z 25 PC: 25644 | Get default drive
2018-12-17T23:03:10.649868417Z 71 PC: 25657 | Get current directory
2018-12-17T23:03:10.653243269Z 26 PC: 2446d | Set disk transfer address
2018-12-17T23:03:10.654369179Z 78 PC: 24479 | Find first file
2018-12-17T23:03:10.661886055Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.663841665Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.666682703Z 26 PC: 2446d | Set disk transfer address
2018-12-17T23:03:10.668612142Z 78 PC: 24479 | Find first file
2018-12-17T23:03:10.675432609Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.677814319Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.681577606Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.683883729Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.68749167Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.68966981Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.69298597Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.694551345Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.698795735Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.700430807Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.703887297Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.706610413Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.710043534Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.712094564Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.716521352Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.718143335Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.721421512Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.723160088Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.726195915Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.727514245Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.731388101Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.732682034Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.736337786Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.738052085Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.740936019Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.742183437Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.745376408Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.746473851Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.749319456Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.750893239Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.753885173Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.755122132Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.758941952Z 44 PC: 25aae | Get time 0x25aae: mov word ptr [0xb8], cx
0x25ab2: mov word ptr [0xba], dx
0x25ab6: retf
0x25ab7: mov di, 0xcc
0x25aba: push ds
0x25abb: pop es
0x25abc: mov cx, 0xdd7c
0x25abf: sub cx, di
0x25ac1: shr cx, 1
0x25ac3: xor ax, ax
0x25ac5: cld
0x25ac6: rep stosd dword ptr es:[di], eax
0x25ac8: ret
0x25ac9: add byte ptr [bx + si], al
0x25acb: add byte ptr [bx + si], al
0x25acd: add byte ptr [bx + si], al
0x25acf: add byte ptr [bx + si], al
0x25ad1: add byte ptr [si], cl
0x25ad3: and al, 0x24
0x25ad5: and al, 0x24
2018-12-17T23:03:10.762064233Z 25 PC: 25644 | Get default drive
2018-12-17T23:03:10.763136117Z 71 PC: 25657 | Get current directory
2018-12-17T23:03:10.767148334Z 26 PC: 2446d | Set disk transfer address
2018-12-17T23:03:10.768428512Z 78 PC: 24479 | Find first file
2018-12-17T23:03:10.775433197Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.777790686Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.781183548Z 26 PC: 2446d | Set disk transfer address
2018-12-17T23:03:10.782989509Z 78 PC: 24479 | Find first file
2018-12-17T23:03:10.790841824Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.792413481Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.795732686Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.797885576Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.800921666Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.802157061Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.80615988Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.807453263Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.8104592Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.812612247Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.815812416Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.817342141Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.821065127Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.822604679Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.825840303Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.828021351Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.83112077Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.832583451Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.836240628Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.837501364Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.842007335Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.843612138Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.84701575Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.84952565Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.853265013Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.854461069Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.857118729Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.858163871Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.860192678Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.861816412Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.863848829Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.864845176Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.867671252Z 44 PC: 25aae | Get time 0x25aae: mov word ptr [0xb8], cx
0x25ab2: mov word ptr [0xba], dx
0x25ab6: retf
0x25ab7: mov di, 0xcc
0x25aba: push ds
0x25abb: pop es
0x25abc: mov cx, 0xdd7c
0x25abf: sub cx, di
0x25ac1: shr cx, 1
0x25ac3: xor ax, ax
0x25ac5: cld
0x25ac6: rep stosd dword ptr es:[di], eax
0x25ac8: ret
0x25ac9: add byte ptr [bx + si], al
0x25acb: add byte ptr [bx + si], al
0x25acd: add byte ptr [bx + si], al
0x25acf: add byte ptr [bx + si], al
0x25ad1: add byte ptr [si], cl
0x25ad3: and al, 0x24
0x25ad5: and al, 0x24
2018-12-17T23:03:10.869407957Z 25 PC: 25644 | Get default drive
2018-12-17T23:03:10.870433825Z 71 PC: 25657 | Get current directory
2018-12-17T23:03:10.873272116Z 26 PC: 2446d | Set disk transfer address
2018-12-17T23:03:10.874373577Z 78 PC: 24479 | Find first file
2018-12-17T23:03:10.878555816Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.880230809Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.884056568Z 26 PC: 2446d | Set disk transfer address
2018-12-17T23:03:10.885081437Z 78 PC: 24479 | Find first file
2018-12-17T23:03:10.890869896Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.892039117Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.895427918Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.897179003Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.901043632Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.902738389Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.906990127Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.908517819Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.911246064Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.913000923Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.915979521Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.917072377Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.920243003Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.921953285Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.924647826Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.926518226Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.92946791Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.930912317Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.935383348Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.936934483Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.940417511Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.942415721Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.945714642Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.946993567Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.949611377Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.950676678Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.952615136Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.953999503Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.956228767Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.957458784Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.960413468Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.961466451Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.963797561Z 26 PC: 2446d | Set disk transfer address
2018-12-17T23:03:10.965263588Z 78 PC: 24479 | Find first file
2018-12-17T23:03:10.969456921Z 26 PC: 24491 | Set disk transfer address
2018-12-17T23:03:10.971507354Z 79 PC: 24496 | Find next file
2018-12-17T23:03:10.975024646Z 61 PC: 253f5 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:10.983391379Z 87 PC: 24410 | Get or set file date and time
2018-12-17T23:03:10.985887675Z 62 PC: 25445 | Close file
2018-12-17T23:03:10.988668068Z 61 PC: 253f5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:10.997239735Z 63 PC: 254c8 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:11.006163574Z 60 PC: 253f5 | Create or truncate file
2018-12-17T23:03:11.021155406Z 64 PC: 254c8 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:11.032876343Z 62 PC: 25445 | Close file
2018-12-17T23:03:11.036669541Z 61 PC: 253f5 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:11.044324949Z 63 PC: 254c8 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:11.05293866Z 64 PC: 254c8 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:11.066209294Z 63 PC: 254c8 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:11.068511543Z 62 PC: 25445 | Close file
2018-12-17T23:03:11.070630342Z 62 PC: 25445 | Close file
2018-12-17T23:03:11.079971855Z 65 PC: 2553e | Delete file (Filename = 'TEST.EXE')
2018-12-17T23:03:11.093537235Z 86 PC: 25582 | Rename file
2018-12-17T23:03:11.106944831Z 61 PC: 253f5 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:11.123321049Z 87 PC: 2443d | Get or set file date and time
2018-12-17T23:03:11.124965745Z 62 PC: 25445 | Close file
2018-12-17T23:03:11.134051153Z 14 PC: 2569d | Set default drive (Drive = 'A')
2018-12-17T23:03:11.135509684Z 25 PC: 256a1 | Get default drive
2018-12-17T23:03:11.136688012Z 59 PC: 2570b | Change current directory
2018-12-17T23:03:11.141562911Z 42 PC: 24397 | Get date 0x24397: xor ah, ah
0x24399: les di, ptr [bp + 6]
0x2439c: stosw word ptr es:[di], ax
0x2439d: mov al, dl
0x2439f: les di, ptr [bp + 0xa]
0x243a2: stosw word ptr es:[di], ax
0x243a3: mov al, dh
0x243a5: les di, ptr [bp + 0xe]
0x243a8: stosw word ptr es:[di], ax
0x243a9: xchg ax, cx
0x243aa: les di, ptr [bp + 0x12]
0x243ad: stosw word ptr es:[di], ax
0x243ae: pop bp
0x243af: retf 0x10
0x243b2: push bp
0x243b3: mov bp, sp
0x243b5: mov cx, word ptr [bp + 0xa]
0x243b8: mov dh, byte ptr [bp + 8]
0x243bb: mov dl, byte ptr [bp + 6]
0x243be: mov ah, 0x2b
2018-12-17T23:03:11.144599714Z 53 PC: 246de | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:11.145954088Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:11.147684486Z 53 PC: 246de | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:11.148961133Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:11.150267877Z 53 PC: 246de | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:11.152159959Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:11.153474685Z 53 PC: 246de | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:11.154679229Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:11.156450068Z 53 PC: 246de | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:11.15772658Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:11.158887606Z 53 PC: 246de | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:11.160690248Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:11.161948485Z 53 PC: 246de | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:11.16371804Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:11.164994406Z 53 PC: 246de | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:11.166210525Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:11.16786164Z 53 PC: 246de | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:11.169140915Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:11.17067566Z 53 PC: 246de | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:11.17244665Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:11.173613117Z 53 PC: 246de | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:11.187255582Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:11.189373783Z 53 PC: 246de | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:11.191134483Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:11.193031373Z 53 PC: 246de | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:11.19483249Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:11.19588986Z 53 PC: 246de | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:11.198233885Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:11.199831032Z 53 PC: 246de | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:11.200907635Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:11.202706628Z 53 PC: 246de | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:11.20366267Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:11.204701617Z 53 PC: 246de | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:11.206537644Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:11.207865008Z 53 PC: 246de | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:11.208988269Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:11.211106436Z 53 PC: 246de | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:11.212663458Z 37 PC: 246e7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:11.21407522Z 86 PC: 25582 | Rename file
2018-12-17T23:03:11.223743092Z 61 PC: 253f5 | Open file (Filename = '$$$$$$$$.TMP')
2018-12-17T23:03:11.228619564Z 66 PC: 25527 | Move file pointer
2018-12-17T23:03:11.23048796Z 60 PC: 253f5 | Create or truncate file
2018-12-17T23:03:11.238831823Z 63 PC: 254c8 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:11.244655157Z 64 PC: 254c8 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:11.25148131Z 63 PC: 254c8 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:11.253652449Z 62 PC: 25445 | Close file
2018-12-17T23:03:11.259702945Z 62 PC: 25445 | Close file
2018-12-17T23:03:11.261851861Z 41 PC: 24695 | Parse filename
2018-12-17T23:03:11.263728607Z 41 PC: 246a3 | Parse filename
2018-12-17T23:03:11.265762194Z 75 PC: 246ae | Execute program
2018-12-17T23:03:11.283706539Z 53 PC: 359da | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:11.284941147Z 53 PC: 359da | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:11.286740933Z 53 PC: 359da | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:11.288116276Z 53 PC: 359da | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:11.289534545Z 53 PC: 359da | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:11.291497206Z 53 PC: 359da | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:11.292953355Z 53 PC: 359da | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:11.294338434Z 53 PC: 359da | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:11.296203146Z 53 PC: 359da | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:11.29744172Z 53 PC: 359da | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:11.298971942Z 53 PC: 359da | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:11.30066494Z 53 PC: 359da | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:11.301847419Z 53 PC: 359da | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:11.303684683Z 53 PC: 359da | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:11.305145343Z 53 PC: 359da | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:11.306369616Z 53 PC: 359da | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:11.308268655Z 53 PC: 359da | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:11.309296751Z 53 PC: 359da | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:11.310302131Z 53 PC: 359da | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:11.312360935Z 37 PC: 359ef | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:11.313432936Z 37 PC: 359f7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:11.314567619Z 37 PC: 359ff | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:11.316126592Z 37 PC: 35a07 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:11.31757399Z 68 PC: 365c7 | I/O control for devices (Set for = '')
2018-12-17T23:03:11.407326199Z 37 PC: 35401 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:11.409750678Z 37 PC: 351b6 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:03:11.412182629Z 37 PC: 351b6 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:03:11.415025077Z 37 PC: 351b6 | Set interrupt vector (Interrupt = '25' AKA 'Get default drive')
2018-12-17T23:03:11.417302319Z 48 PC: 36207 | Get DOS version
2018-12-17T23:03:11.42112457Z 48 PC: 36207 | Get DOS version
2018-12-17T23:03:11.42435292Z 25 PC: 36294 | Get default drive
2018-12-17T23:03:11.426551275Z 71 PC: 362a7 | Get current directory
2018-12-17T23:03:11.430545229Z 59 PC: 3635b | Change current directory
2018-12-17T23:03:11.436895933Z 44 PC: 366fe | Get time 0x366fe: mov word ptr [0xb8], cx
0x36702: mov word ptr [0xba], dx
0x36706: retf
0x36707: mov di, 0xcc
0x3670a: push ds
0x3670b: pop es
0x3670c: mov cx, 0xdd7c
0x3670f: sub cx, di
0x36711: shr cx, 1
0x36713: xor ax, ax
0x36715: cld
0x36716: rep stosd dword ptr es:[di], eax
0x36718: ret
0x36719: add byte ptr [bx + si], al
0x3671b: add byte ptr [bx + si], al
0x3671d: add byte ptr [bx + si], al
0x3671f: add byte ptr [bx + si], al
0x36721: add byte ptr [si], cl
0x36723: and al, 0x24
0x36725: and al, 0x24
2018-12-17T23:03:11.43959791Z 25 PC: 36294 | Get default drive
2018-12-17T23:03:11.440976431Z 71 PC: 362a7 | Get current directory
2018-12-17T23:03:11.445860816Z 26 PC: 350bd | Set disk transfer address
2018-12-17T23:03:11.447719703Z 78 PC: 350c9 | Find first file
2018-12-17T23:03:11.455239973Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.457236897Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.461321767Z 26 PC: 350bd | Set disk transfer address
2018-12-17T23:03:11.46394812Z 78 PC: 350c9 | Find first file
2018-12-17T23:03:11.470528044Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.47213476Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.475850161Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.477381848Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.480450872Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.482413571Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.486653163Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.487910374Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.49192249Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.494340518Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.497331266Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.499039004Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.501169683Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.502432958Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.505271023Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.506316035Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.508806612Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.510057704Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.5120156Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.513766043Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.515752729Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.516796653Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.519506131Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.520560228Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.522853718Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.524524588Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.526516738Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.528225693Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.530588534Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.531654421Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.534381724Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.535385609Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.53730478Z 44 PC: 366fe | Get time 0x366fe: mov word ptr [0xb8], cx
0x36702: mov word ptr [0xba], dx
0x36706: retf
0x36707: mov di, 0xcc
0x3670a: push ds
0x3670b: pop es
0x3670c: mov cx, 0xdd7c
0x3670f: sub cx, di
0x36711: shr cx, 1
0x36713: xor ax, ax
0x36715: cld
0x36716: rep stosd dword ptr es:[di], eax
0x36718: ret
0x36719: add byte ptr [bx + si], al
0x3671b: add byte ptr [bx + si], al
0x3671d: add byte ptr [bx + si], al
0x3671f: add byte ptr [bx + si], al
0x36721: add byte ptr [si], cl
0x36723: and al, 0x24
0x36725: and al, 0x24
2018-12-17T23:03:11.539594176Z 25 PC: 36294 | Get default drive
2018-12-17T23:03:11.541013658Z 71 PC: 362a7 | Get current directory
2018-12-17T23:03:11.543507414Z 26 PC: 350bd | Set disk transfer address
2018-12-17T23:03:11.54499969Z 78 PC: 350c9 | Find first file
2018-12-17T23:03:11.549613337Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.550863615Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.553680577Z 26 PC: 350bd | Set disk transfer address
2018-12-17T23:03:11.554719084Z 78 PC: 350c9 | Find first file
2018-12-17T23:03:11.55970917Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.560725041Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.562733683Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.564519258Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.566528198Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.567617888Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.570404154Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.571898452Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.573861228Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.575874505Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.578170895Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.579229773Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.582111218Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.583148378Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.585697873Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.587385196Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.590957854Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.593793813Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.597154799Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.598767881Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.603170878Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.605160536Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.608576379Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.611394917Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.61476508Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.616394901Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.620958481Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.622582221Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.625916861Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.628139632Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.63121794Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.6328185Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.636646017Z 26 PC: 350bd | Set disk transfer address
2018-12-17T23:03:11.637941528Z 78 PC: 350c9 | Find first file
2018-12-17T23:03:11.646161197Z 26 PC: 350e1 | Set disk transfer address
2018-12-17T23:03:11.647761959Z 79 PC: 350e6 | Find next file
2018-12-17T23:03:11.651751807Z 61 PC: 36045 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:11.661874982Z 87 PC: 35060 | Get or set file date and time
2018-12-17T23:03:11.663707248Z 62 PC: 36095 | Close file
2018-12-17T23:03:11.666476565Z 61 PC: 36045 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:11.675022764Z 63 PC: 36118 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:11.684635322Z 60 PC: 36045 | Create or truncate file
2018-12-17T23:03:11.865660615Z 64 PC: 36118 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:11.87667051Z 62 PC: 36095 | Close file
2018-12-17T23:03:11.879115022Z 61 PC: 36045 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:11.884342738Z 63 PC: 36118 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:11.894101861Z 64 PC: 36118 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:11.904639553Z 63 PC: 36118 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:11.907448838Z 62 PC: 36095 | Close file
2018-12-17T23:03:11.909435567Z 62 PC: 36095 | Close file
2018-12-17T23:03:11.919085231Z 65 PC: 3618e | Delete file (Filename = 'TEST.EXE')
2018-12-17T23:03:11.932275109Z 86 PC: 361d2 | Rename file
2018-12-17T23:03:11.94559568Z 61 PC: 36045 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:11.954629912Z 87 PC: 3508d | Get or set file date and time
2018-12-17T23:03:11.956958518Z 62 PC: 36095 | Close file
2018-12-17T23:03:11.965413235Z 14 PC: 362ed | Set default drive (Drive = 'A')
2018-12-17T23:03:11.968785497Z 25 PC: 362f1 | Get default drive
2018-12-17T23:03:11.970567508Z 59 PC: 3635b | Change current directory
2018-12-17T23:03:11.976898081Z 42 PC: 34fe7 | Get date 0x34fe7: xor ah, ah
0x34fe9: les di, ptr [bp + 6]
0x34fec: stosw word ptr es:[di], ax
0x34fed: mov al, dl
0x34fef: les di, ptr [bp + 0xa]
0x34ff2: stosw word ptr es:[di], ax
0x34ff3: mov al, dh
0x34ff5: les di, ptr [bp + 0xe]
0x34ff8: stosw word ptr es:[di], ax
0x34ff9: xchg ax, cx
0x34ffa: les di, ptr [bp + 0x12]
0x34ffd: stosw word ptr es:[di], ax
0x34ffe: pop bp
0x34fff: retf 0x10
0x35002: push bp
0x35003: mov bp, sp
0x35005: mov cx, word ptr [bp + 0xa]
0x35008: mov dh, byte ptr [bp + 8]
0x3500b: mov dl, byte ptr [bp + 6]
0x3500e: mov ah, 0x2b
2018-12-17T23:03:11.98037Z 53 PC: 3532e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:11.982218333Z 37 PC: 35337 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:11.985205754Z 53 PC: 3532e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:11.98699549Z 37 PC: 35337 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:11.988791142Z 53 PC: 3532e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:11.991851015Z 37 PC: 35337 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:11.993699881Z 53 PC: 3532e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:11.995481623Z 37 PC: 35337 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:11.998593684Z 53 PC: 3532e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:12.000328034Z 37 PC: 35337 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:12.003109959Z 53 PC: 3532e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:12.005226174Z 37 PC: 35337 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:12.007085468Z 53 PC: 3532e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:12.009812365Z 37 PC: 35337 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:12.012032146Z 53 PC: 3532e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:12.013792085Z 37 PC: 35337 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:12.016880297Z 53 PC: 3532e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:12.018592033Z 37 PC: 35337 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:12.019927977Z 53 PC: 3532e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:12.022229105Z 37 PC: 35337 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:12.023606605Z 53 PC: 3532e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:12.025907111Z 37 PC: 35337 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:12.027252471Z 53 PC: 3532e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:12.028595911Z 37 PC: 35337 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:12.031099577Z 53 PC: 3532e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:12.032459178Z 37 PC: 35337 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:12.033783672Z 53 PC: 3532e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:12.03606939Z 37 PC: 35337 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:12.037432193Z 53 PC: 3532e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:12.038825569Z 37 PC: 35337 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:12.040829929Z 53 PC: 3532e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:12.043055621Z 37 PC: 35337 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:12.045504721Z 53 PC: 3532e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:12.046846398Z 37 PC: 35337 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:12.048013795Z 53 PC: 3532e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:12.050114429Z 37 PC: 35337 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:12.051328954Z 53 PC: 3532e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:12.052547681Z 37 PC: 35337 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:12.054323783Z 86 PC: 361d2 | Rename file
2018-12-17T23:03:12.06737858Z 61 PC: 36045 | Open file (Filename = '$$$$$$$$.TMP')
2018-12-17T23:03:12.075558179Z 66 PC: 36177 | Move file pointer
2018-12-17T23:03:12.077381773Z 60 PC: 36045 | Create or truncate file
2018-12-17T23:03:12.090083003Z 63 PC: 36118 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:12.099639315Z 64 PC: 36118 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:12.11015724Z 63 PC: 36118 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:12.113890419Z 62 PC: 36095 | Close file
2018-12-17T23:03:12.1238245Z 62 PC: 36095 | Close file
2018-12-17T23:03:12.126515593Z 41 PC: 352e5 | Parse filename
2018-12-17T23:03:12.129685935Z 41 PC: 352f3 | Parse filename
2018-12-17T23:03:12.132026987Z 75 PC: 352fe | Execute program
2018-12-17T23:03:12.16014811Z 53 PC: 4662a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:12.163433273Z 53 PC: 4662a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:12.165191742Z 53 PC: 4662a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:12.167160299Z 53 PC: 4662a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:12.16993188Z 53 PC: 4662a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:12.171631598Z 53 PC: 4662a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:12.174334814Z 53 PC: 4662a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:12.176303767Z 53 PC: 4662a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:12.178049421Z 53 PC: 4662a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:12.181068233Z 53 PC: 4662a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:12.183607684Z 53 PC: 4662a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:12.185541703Z 53 PC: 4662a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:12.203493077Z 53 PC: 4662a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:12.205041786Z 53 PC: 4662a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:12.208608654Z 53 PC: 4662a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:12.210214525Z 53 PC: 4662a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:12.211774149Z 53 PC: 4662a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:12.214650733Z 53 PC: 4662a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:12.216293767Z 53 PC: 4662a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:12.218862578Z 37 PC: 4663f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:12.2208179Z 37 PC: 46647 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:12.222324451Z 37 PC: 4664f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:12.225285393Z 37 PC: 46657 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:12.227266079Z 68 PC: 47217 | I/O control for devices (Set for = '')
2018-12-17T23:03:12.316764894Z 37 PC: 46051 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:12.319483392Z 37 PC: 45e06 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:03:12.321247807Z 37 PC: 45e06 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:03:12.323910822Z 37 PC: 45e06 | Set interrupt vector (Interrupt = '25' AKA 'Get default drive')
2018-12-17T23:03:12.325758736Z 48 PC: 46e57 | Get DOS version
2018-12-17T23:03:12.329326137Z 48 PC: 46e57 | Get DOS version
2018-12-17T23:03:12.332395818Z 25 PC: 46ee4 | Get default drive
2018-12-17T23:03:12.334161957Z 71 PC: 46ef7 | Get current directory
2018-12-17T23:03:12.337943343Z 59 PC: 46fab | Change current directory
2018-12-17T23:03:12.343799085Z 44 PC: 4734e | Get time 0x4734e: mov word ptr [0xb8], cx
0x47352: mov word ptr [0xba], dx
0x47356: retf
0x47357: mov di, 0xcc
0x4735a: push ds
0x4735b: pop es
0x4735c: mov cx, 0xdd7c
0x4735f: sub cx, di
0x47361: shr cx, 1
0x47363: xor ax, ax
0x47365: cld
0x47366: rep stosd dword ptr es:[di], eax
0x47368: ret
0x47369: add byte ptr [bx + si], al
0x4736b: add byte ptr [bx + si], al
0x4736d: add byte ptr [bx + si], al
0x4736f: add byte ptr [bx + si], al
0x47371: add byte ptr [si], cl
0x47373: and al, 0x24
0x47375: and al, 0x24
2018-12-17T23:03:12.346581251Z 25 PC: 46ee4 | Get default drive
2018-12-17T23:03:12.34860322Z 71 PC: 46ef7 | Get current directory
2018-12-17T23:03:12.353277439Z 26 PC: 45d0d | Set disk transfer address
2018-12-17T23:03:12.354886139Z 78 PC: 45d19 | Find first file
2018-12-17T23:03:12.362592493Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.364198972Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.367852676Z 26 PC: 45d0d | Set disk transfer address
2018-12-17T23:03:12.369623404Z 78 PC: 45d19 | Find first file
2018-12-17T23:03:12.377052159Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.379063286Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.382489223Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.384971643Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.389217884Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.390738975Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.394991565Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.396313072Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.399278376Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.402026514Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.405644229Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.408151223Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.411956423Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.413576037Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.417549609Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.418839711Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.422099996Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.424552654Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.428584756Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.43182173Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.435369213Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.437196812Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.440882546Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.442184373Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.446429787Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.447973377Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.451389893Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.454210223Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.457083873Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.459167876Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.462336976Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.463909511Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.468515078Z 44 PC: 4734e | Get time 0x4734e: mov word ptr [0xb8], cx
0x47352: mov word ptr [0xba], dx
0x47356: retf
0x47357: mov di, 0xcc
0x4735a: push ds
0x4735b: pop es
0x4735c: mov cx, 0xdd7c
0x4735f: sub cx, di
0x47361: shr cx, 1
0x47363: xor ax, ax
0x47365: cld
0x47366: rep stosd dword ptr es:[di], eax
0x47368: ret
0x47369: add byte ptr [bx + si], al
0x4736b: add byte ptr [bx + si], al
0x4736d: add byte ptr [bx + si], al
0x4736f: add byte ptr [bx + si], al
0x47371: add byte ptr [si], cl
0x47373: and al, 0x24
0x47375: and al, 0x24
2018-12-17T23:03:12.471612932Z 25 PC: 46ee4 | Get default drive
2018-12-17T23:03:12.474135655Z 71 PC: 46ef7 | Get current directory
2018-12-17T23:03:12.47856953Z 26 PC: 45d0d | Set disk transfer address
2018-12-17T23:03:12.480231736Z 78 PC: 45d19 | Find first file
2018-12-17T23:03:12.48876548Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.490589092Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.49413635Z 26 PC: 45d0d | Set disk transfer address
2018-12-17T23:03:12.496940261Z 78 PC: 45d19 | Find first file
2018-12-17T23:03:12.504062153Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.506996175Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.510722592Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.512665526Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.517012417Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.518792478Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.522314705Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.524338966Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.527672338Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.530361601Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.534342904Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.536380744Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.540258435Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.542133253Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.5463345Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.547998336Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.551606631Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.553692087Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.557889967Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.560380114Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.563457747Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.565387264Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.569797633Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.57166747Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.575964649Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.577750976Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.580933989Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.583369034Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.586668836Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.589279086Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.593015079Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.594675157Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.598987942Z 44 PC: 4734e | Get time 0x4734e: mov word ptr [0xb8], cx
0x47352: mov word ptr [0xba], dx
0x47356: retf
0x47357: mov di, 0xcc
0x4735a: push ds
0x4735b: pop es
0x4735c: mov cx, 0xdd7c
0x4735f: sub cx, di
0x47361: shr cx, 1
0x47363: xor ax, ax
0x47365: cld
0x47366: rep stosd dword ptr es:[di], eax
0x47368: ret
0x47369: add byte ptr [bx + si], al
0x4736b: add byte ptr [bx + si], al
0x4736d: add byte ptr [bx + si], al
0x4736f: add byte ptr [bx + si], al
0x47371: add byte ptr [si], cl
0x47373: and al, 0x24
0x47375: and al, 0x24
2018-12-17T23:03:12.602116245Z 25 PC: 46ee4 | Get default drive
2018-12-17T23:03:12.603637123Z 71 PC: 46ef7 | Get current directory
2018-12-17T23:03:12.608558189Z 26 PC: 45d0d | Set disk transfer address
2018-12-17T23:03:12.610067119Z 78 PC: 45d19 | Find first file
2018-12-17T23:03:12.618332505Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.620147201Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.623519951Z 26 PC: 45d0d | Set disk transfer address
2018-12-17T23:03:12.626230462Z 78 PC: 45d19 | Find first file
2018-12-17T23:03:12.633175353Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.634923453Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.640094964Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.641588367Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.645851952Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.64719455Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.650201323Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.652695833Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.655698898Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.657894391Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.66087465Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.662131746Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.666149424Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.667412722Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.670357161Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.672780378Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.675787387Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.678255554Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.68122725Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.682628459Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.688023651Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.689252943Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.692664335Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.695752764Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.699288047Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.702764441Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.706322868Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.708083363Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.712305177Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.714006907Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.718590794Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.720694649Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.724294739Z 26 PC: 45d0d | Set disk transfer address
2018-12-17T23:03:12.727293424Z 78 PC: 45d19 | Find first file
2018-12-17T23:03:12.735513349Z 26 PC: 45d31 | Set disk transfer address
2018-12-17T23:03:12.738019814Z 79 PC: 45d36 | Find next file
2018-12-17T23:03:12.742790113Z 61 PC: 46c95 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:12.7520619Z 87 PC: 45cb0 | Get or set file date and time
2018-12-17T23:03:12.755108872Z 62 PC: 46ce5 | Close file
2018-12-17T23:03:12.757983974Z 61 PC: 46c95 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:12.766729806Z 63 PC: 46d68 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:12.777466399Z 60 PC: 46c95 | Create or truncate file
2018-12-17T23:03:12.79235137Z 64 PC: 46d68 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:12.804977798Z 62 PC: 46ce5 | Close file
2018-12-17T23:03:12.807964457Z 61 PC: 46c95 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:12.816812096Z 63 PC: 46d68 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:12.826960678Z 64 PC: 46d68 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:12.837317359Z 63 PC: 46d68 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:12.841961497Z 62 PC: 46ce5 | Close file
2018-12-17T23:03:12.845127511Z 62 PC: 46ce5 | Close file
2018-12-17T23:03:12.855212735Z 65 PC: 46dde | Delete file (Filename = 'TEST.EXE')
2018-12-17T23:03:12.869646667Z 86 PC: 46e22 | Rename file
2018-12-17T23:03:12.882667028Z 61 PC: 46c95 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:12.890843852Z 87 PC: 45cdd | Get or set file date and time
2018-12-17T23:03:12.894196976Z 62 PC: 46ce5 | Close file
2018-12-17T23:03:12.902036898Z 14 PC: 46f3d | Set default drive (Drive = 'A')
2018-12-17T23:03:12.904844822Z 25 PC: 46f41 | Get default drive
2018-12-17T23:03:12.90689276Z 59 PC: 46fab | Change current directory
2018-12-17T23:03:12.91697543Z 42 PC: 45c37 | Get date 0x45c37: xor ah, ah
0x45c39: les di, ptr [bp + 6]
0x45c3c: stosw word ptr es:[di], ax
0x45c3d: mov al, dl
0x45c3f: les di, ptr [bp + 0xa]
0x45c42: stosw word ptr es:[di], ax
0x45c43: mov al, dh
0x45c45: les di, ptr [bp + 0xe]
0x45c48: stosw word ptr es:[di], ax
0x45c49: xchg ax, cx
0x45c4a: les di, ptr [bp + 0x12]
0x45c4d: stosw word ptr es:[di], ax
0x45c4e: pop bp
0x45c4f: retf 0x10
0x45c52: push bp
0x45c53: mov bp, sp
0x45c55: mov cx, word ptr [bp + 0xa]
0x45c58: mov dh, byte ptr [bp + 8]
0x45c5b: mov dl, byte ptr [bp + 6]
0x45c5e: mov ah, 0x2b
2018-12-17T23:03:12.920832753Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:12.922877775Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:12.924438923Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:12.927136138Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:12.928662303Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:12.93123052Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:12.933592118Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:12.935198771Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:12.938717636Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:12.941018293Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:12.94344449Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:12.94537907Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:12.946921071Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:12.949452567Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:12.951328462Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:12.952917492Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:12.955516499Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:12.957065032Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:12.959317165Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:12.960668191Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:12.962100612Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:12.964647234Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:12.96601543Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:12.968259562Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:12.969584296Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:12.971251449Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:12.973368161Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:12.975184605Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:12.977431753Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:12.979333103Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:12.980965605Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:12.983864273Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:12.985535602Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:12.987886879Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:12.989275835Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:12.990547561Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:12.991915439Z 53 PC: 45f7e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:12.99309724Z 37 PC: 45f87 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:12.995368097Z 86 PC: 46e22 | Rename file
2018-12-17T23:03:13.009142992Z 61 PC: 46c95 | Open file (Filename = '$$$$$$$$.TMP')
2018-12-17T23:03:13.016807001Z 66 PC: 46dc7 | Move file pointer
2018-12-17T23:03:13.019334069Z 60 PC: 46c95 | Create or truncate file
2018-12-17T23:03:13.032453846Z 63 PC: 46d68 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:13.042553823Z 64 PC: 46d68 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:13.052700449Z 63 PC: 46d68 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:13.055461246Z 62 PC: 46ce5 | Close file
2018-12-17T23:03:13.065054956Z 62 PC: 46ce5 | Close file
2018-12-17T23:03:13.067299318Z 41 PC: 45f35 | Parse filename
2018-12-17T23:03:13.069570373Z 41 PC: 45f43 | Parse filename
2018-12-17T23:03:13.071214012Z 75 PC: 45f4e | Execute program
2018-12-17T23:03:13.100141469Z 53 PC: 5727a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:13.10232188Z 53 PC: 5727a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:13.104007749Z 53 PC: 5727a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:13.106786482Z 53 PC: 5727a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:13.10844596Z 53 PC: 5727a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:13.110930893Z 53 PC: 5727a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:13.112360018Z 53 PC: 5727a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:13.113773328Z 53 PC: 5727a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:13.116652914Z 53 PC: 5727a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:13.118370761Z 53 PC: 5727a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:13.120578735Z 53 PC: 5727a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:13.122101338Z 53 PC: 5727a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:13.123233236Z 53 PC: 5727a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:13.124890519Z 53 PC: 5727a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:13.126374601Z 53 PC: 5727a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:13.132298863Z 53 PC: 5727a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:13.133706294Z 53 PC: 5727a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:13.135146766Z 53 PC: 5727a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:13.137567797Z 53 PC: 5727a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:13.139026072Z 37 PC: 5728f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:13.141468461Z 37 PC: 57297 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:13.142924019Z 37 PC: 5729f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:13.145110065Z 37 PC: 572a7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:13.147540905Z 68 PC: 57e67 | I/O control for devices (Set for = '')
2018-12-17T23:03:13.210664417Z 37 PC: 56ca1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:13.213081628Z 37 PC: 56a56 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:03:13.214523652Z 37 PC: 56a56 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:03:13.216297758Z 37 PC: 56a56 | Set interrupt vector (Interrupt = '25' AKA 'Get default drive')
2018-12-17T23:03:13.217660829Z 48 PC: 57aa7 | Get DOS version
2018-12-17T23:03:13.220864045Z 48 PC: 57aa7 | Get DOS version
2018-12-17T23:03:13.222900038Z 25 PC: 57b34 | Get default drive
2018-12-17T23:03:13.223975709Z 71 PC: 57b47 | Get current directory
2018-12-17T23:03:13.227968739Z 59 PC: 57bfb | Change current directory
2018-12-17T23:03:13.233270207Z 44 PC: 57f9e | Get time 0x57f9e: mov word ptr [0xb8], cx
0x57fa2: mov word ptr [0xba], dx
0x57fa6: retf
0x57fa7: mov di, 0xcc
0x57faa: push ds
0x57fab: pop es
0x57fac: mov cx, 0xdd7c
0x57faf: sub cx, di
0x57fb1: shr cx, 1
0x57fb3: xor ax, ax
0x57fb5: cld
0x57fb6: rep stosd dword ptr es:[di], eax
0x57fb8: ret
0x57fb9: add byte ptr [bx + si], al
0x57fbb: add byte ptr [bx + si], al
0x57fbd: add byte ptr [bx + si], al
0x57fbf: add byte ptr [bx + si], al
0x57fc1: add byte ptr [si], cl
0x57fc3: and al, 0x24
0x57fc5: and al, 0x24
2018-12-17T23:03:13.236187723Z 25 PC: 57b34 | Get default drive
2018-12-17T23:03:13.237369931Z 71 PC: 57b47 | Get current directory
2018-12-17T23:03:13.240763879Z 26 PC: 5695d | Set disk transfer address
2018-12-17T23:03:13.2423991Z 78 PC: 56969 | Find first file
2018-12-17T23:03:13.246663657Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.248429925Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.250657885Z 26 PC: 5695d | Set disk transfer address
2018-12-17T23:03:13.252144242Z 78 PC: 56969 | Find first file
2018-12-17T23:03:13.256027054Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.257349594Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.261073836Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.262199418Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.265590756Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.266791956Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.270372486Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.272133242Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.275577563Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.277438873Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.28045649Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.28215071Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.285676089Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.286653093Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.290028289Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.291104815Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.294506052Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.295669626Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.299229669Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.300778656Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.303915734Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.307482854Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.310731553Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.312781065Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.315828137Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.316779464Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.320302864Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.321498433Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.325594362Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.327493089Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.330944583Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.332193246Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.33516365Z 44 PC: 57f9e | Get time 0x57f9e: mov word ptr [0xb8], cx
0x57fa2: mov word ptr [0xba], dx
0x57fa6: retf
0x57fa7: mov di, 0xcc
0x57faa: push ds
0x57fab: pop es
0x57fac: mov cx, 0xdd7c
0x57faf: sub cx, di
0x57fb1: shr cx, 1
0x57fb3: xor ax, ax
0x57fb5: cld
0x57fb6: rep stosd dword ptr es:[di], eax
0x57fb8: ret
0x57fb9: add byte ptr [bx + si], al
0x57fbb: add byte ptr [bx + si], al
0x57fbd: add byte ptr [bx + si], al
0x57fbf: add byte ptr [bx + si], al
0x57fc1: add byte ptr [si], cl
0x57fc3: and al, 0x24
0x57fc5: and al, 0x24
2018-12-17T23:03:13.338433017Z 25 PC: 57b34 | Get default drive
2018-12-17T23:03:13.33967013Z 71 PC: 57b47 | Get current directory
2018-12-17T23:03:13.34386379Z 26 PC: 5695d | Set disk transfer address
2018-12-17T23:03:13.345365131Z 78 PC: 56969 | Find first file
2018-12-17T23:03:13.352335309Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.354182702Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.357193844Z 26 PC: 5695d | Set disk transfer address
2018-12-17T23:03:13.358993774Z 78 PC: 56969 | Find first file
2018-12-17T23:03:13.365920898Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.367673349Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.370635333Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.371778486Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.37608857Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.377455876Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.381286324Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.382574702Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.386527483Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.388128281Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.391336642Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.39294832Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.395872304Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.397890093Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.400803763Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.402838561Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.406626747Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.407957653Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.411623369Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.412869369Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.416792204Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.418308395Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.421445185Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.423299562Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.426310223Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.428128777Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.431103993Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.433033357Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.436507764Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.437915422Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.441575277Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.442837501Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.446193399Z 26 PC: 5695d | Set disk transfer address
2018-12-17T23:03:13.447618033Z 78 PC: 56969 | Find first file
2018-12-17T23:03:13.454672315Z 26 PC: 56981 | Set disk transfer address
2018-12-17T23:03:13.456557516Z 79 PC: 56986 | Find next file
2018-12-17T23:03:13.460646145Z 61 PC: 578e5 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:13.469340624Z 87 PC: 56900 | Get or set file date and time
2018-12-17T23:03:13.471175153Z 62 PC: 57935 | Close file
2018-12-17T23:03:13.474106691Z 61 PC: 578e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:13.481681694Z 63 PC: 579b8 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:13.490252277Z 60 PC: 578e5 | Create or truncate file
2018-12-17T23:03:13.505042997Z 64 PC: 579b8 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:13.514964148Z 62 PC: 57935 | Close file
2018-12-17T23:03:13.518579397Z 61 PC: 578e5 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:13.527421174Z 63 PC: 579b8 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:13.536366579Z 64 PC: 579b8 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:13.54692527Z 63 PC: 579b8 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:13.549156993Z 62 PC: 57935 | Close file
2018-12-17T23:03:13.551794595Z 62 PC: 57935 | Close file
2018-12-17T23:03:13.561219235Z 65 PC: 57a2e | Delete file (Filename = 'TEST.EXE')
2018-12-17T23:03:13.574440685Z 86 PC: 57a72 | Rename file
2018-12-17T23:03:13.587724898Z 61 PC: 578e5 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:13.595456018Z 87 PC: 5692d | Get or set file date and time
2018-12-17T23:03:13.59788481Z 62 PC: 57935 | Close file
2018-12-17T23:03:13.605623708Z 14 PC: 57b8d | Set default drive (Drive = 'A')
2018-12-17T23:03:13.60772266Z 25 PC: 57b91 | Get default drive
2018-12-17T23:03:13.60919016Z 59 PC: 57bfb | Change current directory
2018-12-17T23:03:13.613745826Z 42 PC: 56887 | Get date 0x56887: xor ah, ah
0x56889: les di, ptr [bp + 6]
0x5688c: stosw word ptr es:[di], ax
0x5688d: mov al, dl
0x5688f: les di, ptr [bp + 0xa]
0x56892: stosw word ptr es:[di], ax
0x56893: mov al, dh
0x56895: les di, ptr [bp + 0xe]
0x56898: stosw word ptr es:[di], ax
0x56899: xchg ax, cx
0x5689a: les di, ptr [bp + 0x12]
0x5689d: stosw word ptr es:[di], ax
0x5689e: pop bp
0x5689f: retf 0x10
0x568a2: push bp
0x568a3: mov bp, sp
0x568a5: mov cx, word ptr [bp + 0xa]
0x568a8: mov dh, byte ptr [bp + 8]
0x568ab: mov dl, byte ptr [bp + 6]
0x568ae: mov ah, 0x2b
2018-12-17T23:03:13.617038733Z 53 PC: 56bce | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:13.618479731Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:13.62054748Z 53 PC: 56bce | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:13.622276802Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:13.624145358Z 53 PC: 56bce | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:13.625927821Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:13.627592832Z 53 PC: 56bce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:13.630048651Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:13.631603423Z 53 PC: 56bce | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:13.634235928Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:13.636116101Z 53 PC: 56bce | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:13.638156667Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:13.639986549Z 53 PC: 56bce | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:13.641702842Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:13.643975845Z 53 PC: 56bce | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:13.645706735Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:13.647886748Z 53 PC: 56bce | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:13.650080941Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:13.652020468Z 53 PC: 56bce | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:13.653797237Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:13.655655467Z 53 PC: 56bce | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:13.657361815Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:13.65869051Z 53 PC: 56bce | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:13.661284971Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:13.662590202Z 53 PC: 56bce | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:13.664955797Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:13.666285356Z 53 PC: 56bce | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:13.667646129Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:13.669832432Z 53 PC: 56bce | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:13.671237416Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:13.6733893Z 53 PC: 56bce | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:13.67519041Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:13.678318188Z 53 PC: 56bce | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:13.679849842Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:13.68122728Z 53 PC: 56bce | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:13.683560576Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:13.685574371Z 53 PC: 56bce | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:13.688121041Z 37 PC: 56bd7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:13.690173581Z 86 PC: 57a72 | Rename file
2018-12-17T23:03:13.703706332Z 61 PC: 578e5 | Open file (Filename = '$$$$$$$$.TMP')
2018-12-17T23:03:13.71157144Z 66 PC: 57a17 | Move file pointer
2018-12-17T23:03:13.713420527Z 60 PC: 578e5 | Create or truncate file
2018-12-17T23:03:13.728802193Z 63 PC: 579b8 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:13.737790846Z 64 PC: 579b8 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:13.748535355Z 63 PC: 579b8 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:13.751279247Z 62 PC: 57935 | Close file
2018-12-17T23:03:13.76234573Z 62 PC: 57935 | Close file
2018-12-17T23:03:13.76464658Z 41 PC: 56b85 | Parse filename
2018-12-17T23:03:13.766553751Z 41 PC: 56b93 | Parse filename
2018-12-17T23:03:13.768397338Z 75 PC: 56b9e | Execute program
2018-12-17T23:03:13.796128748Z 53 PC: 67eca | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:13.79830258Z 53 PC: 67eca | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:13.799690828Z 53 PC: 67eca | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:13.801928562Z 53 PC: 67eca | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:13.803263358Z 53 PC: 67eca | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:13.805790365Z 53 PC: 67eca | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:13.807244945Z 53 PC: 67eca | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:13.808565912Z 53 PC: 67eca | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:13.810230671Z 53 PC: 67eca | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:13.811552083Z 53 PC: 67eca | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:13.813987202Z 53 PC: 67eca | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:13.815493468Z 53 PC: 67eca | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:13.818077399Z 53 PC: 67eca | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:13.819995979Z 53 PC: 67eca | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:13.823163159Z 53 PC: 67eca | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:13.824765794Z 53 PC: 67eca | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:13.826406336Z 53 PC: 67eca | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:13.829366333Z 53 PC: 67eca | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:13.831037421Z 53 PC: 67eca | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:13.833311153Z 37 PC: 67edf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:13.835093246Z 37 PC: 67ee7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:13.838075662Z 37 PC: 67eef | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:13.840744342Z 37 PC: 67ef7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:13.842440383Z 68 PC: 68ab7 | I/O control for devices (Set for = '')
2018-12-17T23:03:13.951322799Z 37 PC: 678f1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:13.953300115Z 37 PC: 676a6 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:03:13.955784632Z 37 PC: 676a6 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:03:13.957398555Z 37 PC: 676a6 | Set interrupt vector (Interrupt = '25' AKA 'Get default drive')
2018-12-17T23:03:13.960126425Z 48 PC: 686f7 | Get DOS version
2018-12-17T23:03:13.963806822Z 48 PC: 686f7 | Get DOS version
2018-12-17T23:03:13.96594977Z 25 PC: 68784 | Get default drive
2018-12-17T23:03:13.968369379Z 71 PC: 68797 | Get current directory
2018-12-17T23:03:13.972065245Z 59 PC: 6884b | Change current directory
2018-12-17T23:03:13.977953007Z 44 PC: 68bee | Get time 0x68bee: mov word ptr [0xb8], cx
0x68bf2: mov word ptr [0xba], dx
0x68bf6: retf
0x68bf7: mov di, 0xcc
0x68bfa: push ds
0x68bfb: pop es
0x68bfc: mov cx, 0xdd7c
0x68bff: sub cx, di
0x68c01: shr cx, 1
0x68c03: xor ax, ax
0x68c05: cld
0x68c06: rep stosd dword ptr es:[di], eax
0x68c08: ret
0x68c09: add byte ptr [bx + si], al
0x68c0b: add byte ptr [bx + si], al
0x68c0d: add byte ptr [bx + si], al
0x68c0f: add byte ptr [bx + si], al
0x68c11: add byte ptr [si], cl
0x68c13: and al, 0x24
0x68c15: and al, 0x24
2018-12-17T23:03:13.9807108Z 25 PC: 68784 | Get default drive
2018-12-17T23:03:13.983238724Z 71 PC: 68797 | Get current directory
2018-12-17T23:03:13.987074228Z 26 PC: 675ad | Set disk transfer address
2018-12-17T23:03:13.98859463Z 78 PC: 675b9 | Find first file
2018-12-17T23:03:13.996998055Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:13.998526622Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.002556503Z 26 PC: 675ad | Set disk transfer address
2018-12-17T23:03:14.003978707Z 78 PC: 675b9 | Find first file
2018-12-17T23:03:14.012626158Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.014080059Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.017204969Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.019085431Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.022199582Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.024664555Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.02769025Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.030075795Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.03310742Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.035531258Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.03947926Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.040879462Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.044358096Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.045430363Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.048972423Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.050078763Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.053413683Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.054732182Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.057571719Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.059058607Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.062143832Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.064312835Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.067245705Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.068856236Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.07182263Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.073161556Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.076406846Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.077768557Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.080939895Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.082187931Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.086935301Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.088480963Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.093154725Z 26 PC: 675ad | Set disk transfer address
2018-12-17T23:03:14.094496647Z 78 PC: 675b9 | Find first file
2018-12-17T23:03:14.101727197Z 26 PC: 675d1 | Set disk transfer address
2018-12-17T23:03:14.104485087Z 79 PC: 675d6 | Find next file
2018-12-17T23:03:14.108567093Z 61 PC: 68535 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:14.118706641Z 87 PC: 67550 | Get or set file date and time
2018-12-17T23:03:14.120918284Z 62 PC: 68585 | Close file
2018-12-17T23:03:14.124602605Z 61 PC: 68535 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:14.132194415Z 63 PC: 68608 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:14.142260395Z 60 PC: 68535 | Create or truncate file
2018-12-17T23:03:14.156059183Z 64 PC: 68608 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:14.166050826Z 62 PC: 68585 | Close file
2018-12-17T23:03:14.168827382Z 61 PC: 68535 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:14.176622033Z 63 PC: 68608 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:14.186136094Z 64 PC: 68608 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:14.195859141Z 63 PC: 68608 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:14.198771687Z 62 PC: 68585 | Close file
2018-12-17T23:03:14.201185019Z 62 PC: 68585 | Close file
2018-12-17T23:03:14.21167365Z 65 PC: 6867e | Delete file (Filename = 'TEST.EXE')
2018-12-17T23:03:14.221936507Z 86 PC: 686c2 | Rename file
2018-12-17T23:03:14.229990852Z 61 PC: 68535 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:14.237538239Z 87 PC: 6757d | Get or set file date and time
2018-12-17T23:03:14.239637471Z 62 PC: 68585 | Close file
2018-12-17T23:03:14.246513969Z 14 PC: 687dd | Set default drive (Drive = 'A')
2018-12-17T23:03:14.248098655Z 25 PC: 687e1 | Get default drive
2018-12-17T23:03:14.249807548Z 59 PC: 6884b | Change current directory
2018-12-17T23:03:14.252943938Z 42 PC: 674d7 | Get date 0x674d7: xor ah, ah
0x674d9: les di, ptr [bp + 6]
0x674dc: stosw word ptr es:[di], ax
0x674dd: mov al, dl
0x674df: les di, ptr [bp + 0xa]
0x674e2: stosw word ptr es:[di], ax
0x674e3: mov al, dh
0x674e5: les di, ptr [bp + 0xe]
0x674e8: stosw word ptr es:[di], ax
0x674e9: xchg ax, cx
0x674ea: les di, ptr [bp + 0x12]
0x674ed: stosw word ptr es:[di], ax
0x674ee: pop bp
0x674ef: retf 0x10
0x674f2: push bp
0x674f3: mov bp, sp
0x674f5: mov cx, word ptr [bp + 0xa]
0x674f8: mov dh, byte ptr [bp + 8]
0x674fb: mov dl, byte ptr [bp + 6]
0x674fe: mov ah, 0x2b
2018-12-17T23:03:14.255682408Z 53 PC: 6781e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:14.256921366Z 37 PC: 67827 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:14.259212191Z 53 PC: 6781e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:14.260480643Z 37 PC: 67827 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:14.262409711Z 53 PC: 6781e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:14.263528959Z 37 PC: 67827 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:14.265462271Z 53 PC: 6781e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:14.266663349Z 37 PC: 67827 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:14.268349595Z 53 PC: 6781e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:14.269621362Z 37 PC: 67827 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:14.270943948Z 53 PC: 6781e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:14.272703502Z 37 PC: 67827 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:14.273719047Z 53 PC: 6781e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:14.275654704Z 37 PC: 67827 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:14.276769633Z 53 PC: 6781e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:14.278645426Z 37 PC: 67827 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:14.279809525Z 53 PC: 6781e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:14.281695007Z 37 PC: 67827 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:14.283202012Z 53 PC: 6781e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:14.284385754Z 37 PC: 67827 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:14.286443405Z 53 PC: 6781e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:14.287707392Z 37 PC: 67827 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:14.289587101Z 53 PC: 6781e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:14.290837785Z 37 PC: 67827 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:14.292677183Z 53 PC: 6781e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:14.293954374Z 37 PC: 67827 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:14.295910167Z 53 PC: 6781e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:14.297093428Z 37 PC: 67827 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:14.298735603Z 53 PC: 6781e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:14.300313128Z 37 PC: 67827 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:14.301587621Z 53 PC: 6781e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:14.303419736Z 37 PC: 67827 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:14.304620075Z 53 PC: 6781e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:14.306566161Z 37 PC: 67827 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:14.307733045Z 53 PC: 6781e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:14.309654328Z 37 PC: 67827 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:14.310737407Z 53 PC: 6781e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:14.312513321Z 37 PC: 67827 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:14.313838138Z 86 PC: 686c2 | Rename file
2018-12-17T23:03:14.322509004Z 61 PC: 68535 | Open file (Filename = '$$$$$$$$.TMP')
2018-12-17T23:03:14.327276758Z 66 PC: 68667 | Move file pointer
2018-12-17T23:03:14.329402413Z 60 PC: 68535 | Create or truncate file
2018-12-17T23:03:14.338194593Z 63 PC: 68608 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:14.3449022Z 64 PC: 68608 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:14.351279162Z 63 PC: 68608 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:14.353231538Z 62 PC: 68585 | Close file
2018-12-17T23:03:14.359356862Z 62 PC: 68585 | Close file
2018-12-17T23:03:14.360976415Z 41 PC: 677d5 | Parse filename
2018-12-17T23:03:14.362917971Z 41 PC: 677e3 | Parse filename
2018-12-17T23:03:14.364346867Z 75 PC: 677ee | Execute program
2018-12-17T23:03:14.389749092Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:14.39138787Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:14.394159019Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:14.396193116Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:14.398023796Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:14.400716554Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:14.402340463Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:14.405220172Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:14.406883486Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:14.409833652Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:14.411608082Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:14.414271688Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:14.415883759Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:14.418006814Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:14.419672624Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:14.421037376Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:14.423309276Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:14.425549234Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:14.428251188Z 53 PC: 78b1a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:14.429637103Z 37 PC: 78b2f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:14.432446351Z 37 PC: 78b37 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:14.43386409Z 37 PC: 78b3f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:14.436808932Z 37 PC: 78b47 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:14.438880018Z 68 PC: 79707 | I/O control for devices (Set for = '')
2018-12-17T23:03:14.551610553Z 37 PC: 78541 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:14.554199136Z 37 PC: 782f6 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:03:14.556143947Z 37 PC: 782f6 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:03:14.558645325Z 37 PC: 782f6 | Set interrupt vector (Interrupt = '25' AKA 'Get default drive')
2018-12-17T23:03:14.559983909Z 48 PC: 79347 | Get DOS version
2018-12-17T23:03:14.562990978Z 48 PC: 79347 | Get DOS version
2018-12-17T23:03:14.564451182Z 25 PC: 793d4 | Get default drive
2018-12-17T23:03:14.567255824Z 71 PC: 793e7 | Get current directory
2018-12-17T23:03:14.57210187Z 59 PC: 7949b | Change current directory
2018-12-17T23:03:14.577169691Z 44 PC: 7983e | Get time 0x7983e: mov word ptr [0xb8], cx
0x79842: mov word ptr [0xba], dx
0x79846: retf
0x79847: mov di, 0xcc
0x7984a: push ds
0x7984b: pop es
0x7984c: mov cx, 0xdd7c
0x7984f: sub cx, di
0x79851: shr cx, 1
0x79853: xor ax, ax
0x79855: cld
0x79856: rep stosd dword ptr es:[di], eax
0x79858: ret
0x79859: add byte ptr [bx + si], al
0x7985b: add byte ptr [bx + si], al
0x7985d: add byte ptr [bx + si], al
0x7985f: add byte ptr [bx + si], al
0x79861: add byte ptr [si], cl
0x79863: and al, 0x24
0x79865: and al, 0x24
2018-12-17T23:03:14.581341754Z 25 PC: 793d4 | Get default drive
2018-12-17T23:03:14.58269696Z 71 PC: 793e7 | Get current directory
2018-12-17T23:03:14.589171215Z 26 PC: 781fd | Set disk transfer address
2018-12-17T23:03:14.590923128Z 78 PC: 78209 | Find first file
2018-12-17T23:03:14.599235509Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.601236603Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.60469597Z 26 PC: 781fd | Set disk transfer address
2018-12-17T23:03:14.607180468Z 78 PC: 78209 | Find first file
2018-12-17T23:03:14.614916498Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.618058208Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.623386954Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.625539706Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.630593329Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.632204381Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.636382537Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.637508708Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.641295204Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.642736612Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.647041303Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.648381168Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.651368159Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.65361071Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.656550604Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.658858398Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.66187164Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.664425233Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.679261578Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.68167556Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.684809732Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.687173098Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.690488504Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.692060624Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.695980208Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.697639519Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.701644683Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.702952505Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.707120581Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.708667677Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.713679941Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.714959839Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.720014203Z 26 PC: 781fd | Set disk transfer address
2018-12-17T23:03:14.721572494Z 78 PC: 78209 | Find first file
2018-12-17T23:03:14.730079111Z 26 PC: 78221 | Set disk transfer address
2018-12-17T23:03:14.73187585Z 79 PC: 78226 | Find next file
2018-12-17T23:03:14.735864905Z 61 PC: 79185 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:14.745031697Z 87 PC: 781a0 | Get or set file date and time
2018-12-17T23:03:14.747087858Z 62 PC: 791d5 | Close file
2018-12-17T23:03:14.751406019Z 61 PC: 79185 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:14.759219918Z 63 PC: 79258 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:14.769168761Z 60 PC: 79185 | Create or truncate file
2018-12-17T23:03:14.787819686Z 64 PC: 79258 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:14.798359955Z 62 PC: 791d5 | Close file
2018-12-17T23:03:14.801304903Z 61 PC: 79185 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:14.80999338Z 63 PC: 79258 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:14.821257559Z 64 PC: 79258 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:14.831843902Z 63 PC: 79258 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:14.835954016Z 62 PC: 791d5 | Close file
2018-12-17T23:03:14.838593157Z 62 PC: 791d5 | Close file
2018-12-17T23:03:14.851186059Z 65 PC: 792ce | Delete file (Filename = 'TEST.EXE')
2018-12-17T23:03:14.867395297Z 86 PC: 79312 | Rename file
2018-12-17T23:03:14.882389958Z 61 PC: 79185 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:14.890081784Z 87 PC: 781cd | Get or set file date and time
2018-12-17T23:03:14.89326227Z 62 PC: 791d5 | Close file
2018-12-17T23:03:14.904290295Z 14 PC: 7942d | Set default drive (Drive = 'A')
2018-12-17T23:03:14.906008287Z 25 PC: 79431 | Get default drive
2018-12-17T23:03:14.908007413Z 59 PC: 7949b | Change current directory
2018-12-17T23:03:14.913956082Z 42 PC: 78127 | Get date 0x78127: xor ah, ah
0x78129: les di, ptr [bp + 6]
0x7812c: stosw word ptr es:[di], ax
0x7812d: mov al, dl
0x7812f: les di, ptr [bp + 0xa]
0x78132: stosw word ptr es:[di], ax
0x78133: mov al, dh
0x78135: les di, ptr [bp + 0xe]
0x78138: stosw word ptr es:[di], ax
0x78139: xchg ax, cx
0x7813a: les di, ptr [bp + 0x12]
0x7813d: stosw word ptr es:[di], ax
0x7813e: pop bp
0x7813f: retf 0x10
0x78142: push bp
0x78143: mov bp, sp
0x78145: mov cx, word ptr [bp + 0xa]
0x78148: mov dh, byte ptr [bp + 8]
0x7814b: mov dl, byte ptr [bp + 6]
0x7814e: mov ah, 0x2b
2018-12-17T23:03:14.917317415Z 53 PC: 7846e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:14.919037325Z 37 PC: 78477 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:14.921330171Z 53 PC: 7846e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:14.923042407Z 37 PC: 78477 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:14.925544151Z 53 PC: 7846e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:14.927278032Z 37 PC: 78477 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:14.93031852Z 53 PC: 7846e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:14.932045281Z 37 PC: 78477 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:14.934893559Z 53 PC: 7846e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:14.936247461Z 37 PC: 78477 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:14.938016706Z 53 PC: 7846e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:14.939619891Z 37 PC: 78477 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:14.941152843Z 53 PC: 7846e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:14.943662974Z 37 PC: 78477 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:14.94498908Z 53 PC: 7846e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:14.947778498Z 37 PC: 78477 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:14.949472486Z 53 PC: 7846e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:14.95279715Z 37 PC: 78477 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:14.954011382Z 53 PC: 7846e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:14.955721643Z 37 PC: 78477 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:14.957075178Z 53 PC: 7846e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:14.960206774Z 37 PC: 78477 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:14.961523677Z 53 PC: 7846e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:14.962862223Z 37 PC: 78477 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:14.964450006Z 53 PC: 7846e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:14.965758317Z 37 PC: 78477 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:14.967640324Z 53 PC: 7846e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:14.969006523Z 37 PC: 78477 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:14.971539071Z 53 PC: 7846e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:14.972857273Z 37 PC: 78477 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:14.97583037Z 53 PC: 7846e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:14.977428414Z 37 PC: 78477 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:14.980399877Z 53 PC: 7846e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:14.981727443Z 37 PC: 78477 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:14.984456901Z 53 PC: 7846e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:14.986126897Z 37 PC: 78477 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:14.989110882Z 53 PC: 7846e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:14.9907973Z 37 PC: 78477 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:14.99471081Z 86 PC: 79312 | Rename file
2018-12-17T23:03:15.01534059Z 61 PC: 79185 | Open file (Filename = '$$$$$$$$.TMP')
2018-12-17T23:03:15.02417297Z 66 PC: 792b7 | Move file pointer
2018-12-17T23:03:15.026580831Z 60 PC: 79185 | Create or truncate file
2018-12-17T23:03:15.039274784Z 63 PC: 79258 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:15.050169316Z 64 PC: 79258 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:15.066300351Z 63 PC: 79258 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:15.069531646Z 62 PC: 791d5 | Close file
2018-12-17T23:03:15.078192921Z 62 PC: 791d5 | Close file
2018-12-17T23:03:15.080585785Z 41 PC: 78425 | Parse filename
2018-12-17T23:03:15.082356358Z 41 PC: 78433 | Parse filename
2018-12-17T23:03:15.084549573Z 75 PC: 7843e | Execute program
2018-12-17T23:03:15.108798307Z 53 PC: 8976a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:15.111624197Z 53 PC: 8976a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:15.113092013Z 53 PC: 8976a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:15.116096525Z 53 PC: 8976a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:15.117649487Z 53 PC: 8976a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:15.120725042Z 53 PC: 8976a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:15.122430827Z 53 PC: 8976a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:15.126085556Z 53 PC: 8976a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:15.128505776Z 53 PC: 8976a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:15.130222489Z 53 PC: 8976a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:15.132751822Z 53 PC: 8976a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:15.13419029Z 53 PC: 8976a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:15.13641607Z 53 PC: 8976a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:15.138253053Z 53 PC: 8976a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:15.141339035Z 53 PC: 8976a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:15.143066834Z 53 PC: 8976a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:15.146121675Z 53 PC: 8976a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:15.147835782Z 53 PC: 8976a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:15.151048378Z 53 PC: 8976a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:15.153163741Z 37 PC: 8977f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:15.158946747Z 37 PC: 89787 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:15.161716131Z 37 PC: 8978f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:15.163525529Z 37 PC: 89797 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:15.170483477Z 68 PC: 8a357 | I/O control for devices (Set for = '')
2018-12-17T23:03:15.276861914Z 37 PC: 89191 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:15.279754167Z 37 PC: 88f46 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:03:15.281105064Z 37 PC: 88f46 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T23:03:15.284722252Z 37 PC: 88f46 | Set interrupt vector (Interrupt = '25' AKA 'Get default drive')
2018-12-17T23:03:15.28678031Z 48 PC: 89f97 | Get DOS version
2018-12-17T23:03:15.291809647Z 48 PC: 89f97 | Get DOS version
2018-12-17T23:03:15.293725456Z 25 PC: 8a024 | Get default drive
2018-12-17T23:03:15.296658248Z 71 PC: 8a037 | Get current directory
2018-12-17T23:03:15.300440403Z 59 PC: 8a0eb | Change current directory
2018-12-17T23:03:15.3065643Z 44 PC: 8a48e | Get time 0x8a48e: mov word ptr [0xb8], cx
0x8a492: mov word ptr [0xba], dx
0x8a496: retf
0x8a497: mov di, 0xcc
0x8a49a: push ds
0x8a49b: pop es
0x8a49c: mov cx, 0xdd7c
0x8a49f: sub cx, di
0x8a4a1: shr cx, 1
0x8a4a3: xor ax, ax
0x8a4a5: cld
0x8a4a6: rep stosd dword ptr es:[di], eax
0x8a4a8: ret
0x8a4a9: add byte ptr [bx + si], al
0x8a4ab: add byte ptr [bx + si], al
0x8a4ad: add byte ptr [bx + si], al
0x8a4af: add byte ptr [bx + si], al
0x8a4b1: add byte ptr [si], cl
0x8a4b3: and al, 0x24
0x8a4b5: and al, 0x24
2018-12-17T23:03:15.310130275Z 25 PC: 8a024 | Get default drive
2018-12-17T23:03:15.312023738Z 71 PC: 8a037 | Get current directory
2018-12-17T23:03:15.317272787Z 26 PC: 88e4d | Set disk transfer address
2018-12-17T23:03:15.319081444Z 78 PC: 88e59 | Find first file
2018-12-17T23:03:15.328693229Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.330641326Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.335033723Z 26 PC: 88e4d | Set disk transfer address
2018-12-17T23:03:15.336622192Z 78 PC: 88e59 | Find first file
2018-12-17T23:03:15.343790923Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.345355766Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.349339352Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.350743931Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.354699793Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.356745635Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.360528636Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.36191101Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.365918577Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.367164245Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.372068231Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.373268052Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.376606459Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.379617436Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.38269181Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.384950712Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.387899362Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.38983844Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.39268801Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.394533196Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.397357992Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.399592672Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.402739241Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.405254857Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.408950245Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.414927298Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.418019652Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.420587966Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.42362284Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.426068341Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.429294007Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.435137658Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.438020631Z 44 PC: 8a48e | Get time 0x8a48e: mov word ptr [0xb8], cx
0x8a492: mov word ptr [0xba], dx
0x8a496: retf
0x8a497: mov di, 0xcc
0x8a49a: push ds
0x8a49b: pop es
0x8a49c: mov cx, 0xdd7c
0x8a49f: sub cx, di
0x8a4a1: shr cx, 1
0x8a4a3: xor ax, ax
0x8a4a5: cld
0x8a4a6: rep stosd dword ptr es:[di], eax
0x8a4a8: ret
0x8a4a9: add byte ptr [bx + si], al
0x8a4ab: add byte ptr [bx + si], al
0x8a4ad: add byte ptr [bx + si], al
0x8a4af: add byte ptr [bx + si], al
0x8a4b1: add byte ptr [si], cl
0x8a4b3: and al, 0x24
0x8a4b5: and al, 0x24
2018-12-17T23:03:15.44077491Z 25 PC: 8a024 | Get default drive
2018-12-17T23:03:15.44232728Z 71 PC: 8a037 | Get current directory
2018-12-17T23:03:15.44643974Z 26 PC: 88e4d | Set disk transfer address
2018-12-17T23:03:15.448192455Z 78 PC: 88e59 | Find first file
2018-12-17T23:03:15.457879089Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.459197912Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.462393558Z 26 PC: 88e4d | Set disk transfer address
2018-12-17T23:03:15.463798951Z 78 PC: 88e59 | Find first file
2018-12-17T23:03:15.470303918Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.471441366Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.475166728Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.476351311Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.480484624Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.481971803Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.485473895Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.487449166Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.490886452Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.493185753Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.495941443Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.497277603Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.500235913Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.501816392Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.505515896Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.507267461Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.510223197Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.511342998Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.514444071Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.51559952Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.518453218Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.519717562Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.523412295Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.524893732Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.528520809Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.529654278Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.533349745Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.535741578Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.539513347Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.541367542Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.54460629Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.546187832Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.549906758Z 44 PC: 8a48e | Get time 0x8a48e: mov word ptr [0xb8], cx
0x8a492: mov word ptr [0xba], dx
0x8a496: retf
0x8a497: mov di, 0xcc
0x8a49a: push ds
0x8a49b: pop es
0x8a49c: mov cx, 0xdd7c
0x8a49f: sub cx, di
0x8a4a1: shr cx, 1
0x8a4a3: xor ax, ax
0x8a4a5: cld
0x8a4a6: rep stosd dword ptr es:[di], eax
0x8a4a8: ret
0x8a4a9: add byte ptr [bx + si], al
0x8a4ab: add byte ptr [bx + si], al
0x8a4ad: add byte ptr [bx + si], al
0x8a4af: add byte ptr [bx + si], al
0x8a4b1: add byte ptr [si], cl
0x8a4b3: and al, 0x24
0x8a4b5: and al, 0x24
2018-12-17T23:03:15.552717644Z 25 PC: 8a024 | Get default drive
2018-12-17T23:03:15.554897416Z 71 PC: 8a037 | Get current directory
2018-12-17T23:03:15.558424756Z 26 PC: 88e4d | Set disk transfer address
2018-12-17T23:03:15.560961083Z 78 PC: 88e59 | Find first file
2018-12-17T23:03:15.568356636Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.570427126Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.573598301Z 26 PC: 88e4d | Set disk transfer address
2018-12-17T23:03:15.57605412Z 78 PC: 88e59 | Find first file
2018-12-17T23:03:15.582839947Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.584656028Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.587552744Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.589613968Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.592860541Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.594841889Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.597971241Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.599824669Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.602980633Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.60482995Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.608061996Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.610688892Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.613950268Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.617375306Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.620577787Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.623234569Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.627252093Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.629159986Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.631177244Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.633031484Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.635228323Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.637142512Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.639379381Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.641210701Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.643622435Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.645448044Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.648888942Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.650279954Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.653130212Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.65472334Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.657580167Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.659473592Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.661569297Z 26 PC: 88e4d | Set disk transfer address
2018-12-17T23:03:15.66364466Z 78 PC: 88e59 | Find first file
2018-12-17T23:03:15.669387014Z 26 PC: 88e71 | Set disk transfer address
2018-12-17T23:03:15.671542698Z 79 PC: 88e76 | Find next file
2018-12-17T23:03:15.675482802Z 61 PC: 89dd5 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:15.684607945Z 87 PC: 88df0 | Get or set file date and time
2018-12-17T23:03:15.686679664Z 62 PC: 89e25 | Close file
2018-12-17T23:03:15.690886782Z 61 PC: 89dd5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:03:15.697382647Z 63 PC: 89ea8 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:15.704868656Z 60 PC: 89dd5 | Create or truncate file
2018-12-17T23:03:15.714078909Z 64 PC: 89ea8 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:15.727437609Z 62 PC: 89e25 | Close file
2018-12-17T23:03:15.732713614Z 61 PC: 89dd5 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:15.743713656Z 63 PC: 89ea8 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:15.758216502Z 64 PC: 89ea8 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:15.768169022Z 63 PC: 89ea8 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:15.7719114Z 62 PC: 89e25 | Close file
2018-12-17T23:03:15.774003364Z 62 PC: 89e25 | Close file
2018-12-17T23:03:15.785091441Z 65 PC: 89f1e | Delete file (Filename = 'TEST.EXE')
2018-12-17T23:03:15.799102924Z 86 PC: 89f62 | Rename file
2018-12-17T23:03:15.81049508Z 61 PC: 89dd5 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:03:15.818716034Z 87 PC: 88e1d | Get or set file date and time
2018-12-17T23:03:15.820734987Z 62 PC: 89e25 | Close file
2018-12-17T23:03:15.828483509Z 14 PC: 8a07d | Set default drive (Drive = 'A')
2018-12-17T23:03:15.830206889Z 25 PC: 8a081 | Get default drive
2018-12-17T23:03:15.831191776Z 59 PC: 8a0eb | Change current directory
2018-12-17T23:03:15.834569294Z 42 PC: 88d77 | Get date 0x88d77: xor ah, ah
0x88d79: les di, ptr [bp + 6]
0x88d7c: stosw word ptr es:[di], ax
0x88d7d: mov al, dl
0x88d7f: les di, ptr [bp + 0xa]
0x88d82: stosw word ptr es:[di], ax
0x88d83: mov al, dh
0x88d85: les di, ptr [bp + 0xe]
0x88d88: stosw word ptr es:[di], ax
0x88d89: xchg ax, cx
0x88d8a: les di, ptr [bp + 0x12]
0x88d8d: stosw word ptr es:[di], ax
0x88d8e: pop bp
0x88d8f: retf 0x10
0x88d92: push bp
0x88d93: mov bp, sp
0x88d95: mov cx, word ptr [bp + 0xa]
0x88d98: mov dh, byte ptr [bp + 8]
0x88d9b: mov dl, byte ptr [bp + 6]
0x88d9e: mov ah, 0x2b
2018-12-17T23:03:15.836250769Z 53 PC: 890be | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:15.83793071Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:15.839023331Z 53 PC: 890be | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:15.840722577Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:15.84178241Z 53 PC: 890be | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:15.843512805Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:15.844588661Z 53 PC: 890be | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:15.846395118Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:15.847515326Z 53 PC: 890be | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:15.849330734Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:15.85042987Z 53 PC: 890be | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:15.852162864Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:15.853185421Z 53 PC: 890be | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:15.854893824Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:15.856053103Z 53 PC: 890be | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:15.857742131Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:15.859227397Z 53 PC: 890be | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:15.862171773Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:15.863344515Z 53 PC: 890be | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:15.865578446Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:15.867067328Z 53 PC: 890be | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:15.869201531Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:15.87101571Z 53 PC: 890be | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:15.872900513Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:15.874344902Z 53 PC: 890be | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:15.876317672Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:15.877416441Z 53 PC: 890be | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:15.879283743Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:15.880335013Z 53 PC: 890be | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:15.882127469Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:15.883366347Z 53 PC: 890be | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:15.885603748Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:15.88690212Z 53 PC: 890be | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:15.889029861Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:15.890231454Z 53 PC: 890be | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:15.892773299Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:15.894031708Z 53 PC: 890be | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:15.896183156Z 37 PC: 890c7 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:15.897563141Z 86 PC: 89f62 | Rename file
2018-12-17T23:03:15.908064149Z 61 PC: 89dd5 | Open file (Filename = '$$$$$$$$.TMP')
2018-12-17T23:03:15.912885155Z 66 PC: 89f07 | Move file pointer
2018-12-17T23:03:15.915331984Z 60 PC: 89dd5 | Create or truncate file
2018-12-17T23:03:15.925489133Z 63 PC: 89ea8 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:15.93129127Z 64 PC: 89ea8 | Write file or device (Write 8181 bytes on handle 6)
2018-12-17T23:03:15.938286367Z 63 PC: 89ea8 | Read file or device (Read 40960 bytes on handle 5)
2018-12-17T23:03:15.93996147Z 62 PC: 89e25 | Close file
2018-12-17T23:03:15.946402294Z 62 PC: 89e25 | Close file
2018-12-17T23:03:15.948072092Z 41 PC: 89075 | Parse filename
2018-12-17T23:03:15.950095537Z 41 PC: 89083 | Parse filename
2018-12-17T23:03:15.951342109Z 75 PC: 8908e | Execute program
2018-12-17T23:03:15.960862322Z 65 PC: 89f1e | Delete file (Filename = '#�#��')
2018-12-17T23:03:16.128538125Z 86 PC: 89f62 | Rename file
2018-12-17T23:03:16.23114852Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:16.232957406Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:16.236225425Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:16.238424349Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:16.240093838Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:16.243528839Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:16.245258044Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:16.247853068Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:16.249232418Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:16.250884253Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:16.252193329Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:16.253426025Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:16.255701919Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:16.257345193Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:16.259788691Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:16.261117779Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:16.264078475Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:16.265345845Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:16.267575507Z 37 PC: 898c1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:16.26924855Z 76 PC: 89900 | Terminate with return code (Return code = '0')
2018-12-17T23:03:16.274027774Z 65 PC: 792ce | Delete file (Filename = '^�^��')
2018-12-17T23:03:16.291098112Z 86 PC: 79312 | Rename file
2018-12-17T23:03:16.308007917Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:16.310737856Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:16.312201989Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:16.315221141Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:16.316591435Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:16.318975465Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:16.320187528Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:16.32294014Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:16.324490282Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:16.327267412Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:16.328774741Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:16.33097215Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:16.332188058Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:16.333882401Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:16.335076017Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:16.337157481Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:16.338323233Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:16.340372746Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:16.341637481Z 37 PC: 78c71 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:16.344188293Z 76 PC: 78cb0 | Terminate with return code (Return code = '0')
2018-12-17T23:03:16.347463337Z 65 PC: 6867e | Delete file (Filename = '�v�v�')
2018-12-17T23:03:16.354610177Z 86 PC: 686c2 | Rename file
2018-12-17T23:03:16.361956655Z 37 PC: 68021 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:16.364616054Z 37 PC: 68021 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:16.365916257Z 37 PC: 68021 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:16.368499745Z 37 PC: 68021 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:16.369880519Z 37 PC: 68021 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:16.372540053Z 37 PC: 68021 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:16.373879879Z 37 PC: 68021 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:16.375872499Z 37 PC: 68021 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:16.377593534Z 37 PC: 68021 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:16.379532934Z 37 PC: 68021 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:16.381024Z 37 PC: 68021 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:16.38257273Z 37 PC: 68021 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:16.383563704Z 37 PC: 68021 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:16.385152218Z 37 PC: 68021 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:16.38615222Z 37 PC: 68021 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:16.387854426Z 37 PC: 68021 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:16.388855914Z 37 PC: 68021 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:16.390670405Z 37 PC: 68021 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:16.391732943Z 37 PC: 68021 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:16.393530505Z 76 PC: 68060 | Terminate with return code (Return code = '0')
2018-12-17T23:03:16.395722935Z 65 PC: 57a2e | Delete file (Filename = '�e�e�')
2018-12-17T23:03:16.400900054Z 86 PC: 57a72 | Rename file
2018-12-17T23:03:16.40532056Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:16.406926591Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:16.407960969Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:16.40981695Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:16.41084075Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:16.412709158Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:16.413729416Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:16.415618351Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:16.416613597Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:16.418475013Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:16.419518444Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:16.421407873Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:16.422418317Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:16.424250121Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:16.425281767Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:16.427046487Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:16.428053363Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:16.429935149Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:16.430971666Z 37 PC: 573d1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:16.432812482Z 76 PC: 57410 | Terminate with return code (Return code = '0')
2018-12-17T23:03:16.434983394Z 65 PC: 46dde | Delete file (Filename = 'UU�')
2018-12-17T23:03:16.441326522Z 86 PC: 46e22 | Rename file
2018-12-17T23:03:16.449346376Z 37 PC: 46781 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:16.452161519Z 37 PC: 46781 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:16.4535536Z 37 PC: 46781 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:16.455108062Z 37 PC: 46781 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:16.4576434Z 37 PC: 46781 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:16.458958456Z 37 PC: 46781 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:16.461649312Z 37 PC: 46781 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:16.463255132Z 37 PC: 46781 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:16.46610346Z 37 PC: 46781 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:16.467989625Z 37 PC: 46781 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:16.469943389Z 37 PC: 46781 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:16.471116859Z 37 PC: 46781 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:16.473007043Z 37 PC: 46781 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:16.474372777Z 37 PC: 46781 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:16.477036217Z 37 PC: 46781 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:16.478255543Z 37 PC: 46781 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:16.480435833Z 37 PC: 46781 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:16.481567288Z 37 PC: 46781 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:16.483047035Z 37 PC: 46781 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:16.484460574Z 76 PC: 467c0 | Terminate with return code (Return code = '0')
2018-12-17T23:03:16.487749383Z 65 PC: 3618e | Delete file (Filename = 'JDJD�')
2018-12-17T23:03:16.495716003Z 86 PC: 361d2 | Rename file
2018-12-17T23:03:16.503093931Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:16.504343751Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:16.505535676Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:16.506942297Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:16.508810504Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:16.510005609Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:16.513961611Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:16.515586707Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:16.518058107Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:16.519794342Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:16.52272085Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:16.524036781Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:16.526556312Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:16.528247535Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:16.530684691Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:16.532095075Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:16.534037234Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:16.535741848Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:16.53731829Z 37 PC: 35b31 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:16.539637933Z 76 PC: 35b70 | Terminate with return code (Return code = '0')
2018-12-17T23:03:16.543236088Z 65 PC: 2553e | Delete file (Filename = '�3�3�')
2018-12-17T23:03:16.550848825Z 86 PC: 25582 | Rename file
2018-12-17T23:03:16.558625456Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:16.560580732Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:16.562069919Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:16.563656328Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:16.565831758Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:16.567109964Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:16.569440556Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:16.571061173Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:16.573312651Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:16.575000693Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:16.576537952Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:16.582554905Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:16.583974331Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:16.586469358Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:16.587748803Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:16.589964282Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:16.592364106Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:16.594718247Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:16.596303321Z 37 PC: 24ee1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:16.59875133Z 76 PC: 24f20 | Terminate with return code (Return code = '0')
2018-12-17T23:03:16.602044926Z 65 PC: 148ee | Delete file (Filename = '�"�"�')
2018-12-17T23:03:16.608807522Z 86 PC: 14932 | Rename file
2018-12-17T23:03:16.616121632Z 37 PC: 14291 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:03:16.617283369Z 37 PC: 14291 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:03:16.619254345Z 37 PC: 14291 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:03:16.620477042Z 37 PC: 14291 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:03:16.622549982Z 37 PC: 14291 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:03:16.623866218Z 37 PC: 14291 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:03:16.625407938Z 37 PC: 14291 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:03:16.626658805Z 37 PC: 14291 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:03:16.628177459Z 37 PC: 14291 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:03:16.630261193Z 37 PC: 14291 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:03:16.631434443Z 37 PC: 14291 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:03:16.632563997Z 37 PC: 14291 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:03:16.634048425Z 37 PC: 14291 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:03:16.635583961Z 37 PC: 14291 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:03:16.638069828Z 37 PC: 14291 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:03:16.639608428Z 37 PC: 14291 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:03:16.642424316Z 37 PC: 14291 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:03:16.643692297Z 37 PC: 14291 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:03:16.646348821Z 37 PC: 14291 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:03:16.647906268Z 76 PC: 142d0 | Terminate with return code (Return code = '0')