Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Jumper.6702

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:09:28.487459302Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:28.489670067Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:28.491530714Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:28.492904646Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:28.494705551Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:28.496265122Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:28.49806796Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:28.499906085Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:28.515363596Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:28.516705078Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:28.518017154Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:28.520535937Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:28.522258043Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:28.523941397Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:28.526676698Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:28.528309457Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:28.529711282Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:28.531893753Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:28.53373324Z 53 PC: 13e7a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:28.535545897Z 37 PC: 13e8f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:28.538073237Z 37 PC: 13e97 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:28.540143598Z 37 PC: 13e9f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:28.541989477Z 37 PC: 13ea7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:28.544817682Z 68 PC: 149f4 | I/O control for devices (Set for = '')
2018-12-17T23:09:28.573937701Z 37 PC: 138a1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:28.575700845Z 51 PC: 1352f | Get or set Ctrl-Break
2018-12-17T23:09:28.579107478Z 26 PC: 135e0 | Set disk transfer address
2018-12-17T23:09:28.5810403Z 78 PC: 135ec | Find first file
2018-12-17T23:09:28.591477205Z 48 PC: 14702 | Get DOS version
2018-12-17T23:09:28.593344615Z 67 PC: 13542 | Get or set file attributes
2018-12-17T23:09:28.600778867Z 67 PC: 13569 | Get or set file attributes
2018-12-17T23:09:28.619658791Z 61 PC: 14540 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:28.627803337Z 60 PC: 14540 | Create or truncate file
2018-12-17T23:09:28.978885968Z 67 PC: 13569 | Get or set file attributes
2018-12-17T23:09:28.990008572Z 61 PC: 14540 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T23:09:28.997822738Z 63 PC: 14613 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:29.007604993Z 64 PC: 14613 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:29.020179886Z 63 PC: 14613 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:29.029384937Z 64 PC: 14613 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:29.050097083Z 63 PC: 14613 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:29.058378448Z 64 PC: 14613 | Write file or device (Write 4506 bytes on handle 6)
2018-12-17T23:09:29.067633622Z 63 PC: 14613 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:29.07039397Z 62 PC: 14590 | Close file
2018-12-17T23:09:29.073073064Z 65 PC: 14689 | Delete file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T23:09:29.08614905Z 87 PC: 135b0 | Get or set file date and time
2018-12-17T23:09:29.088105487Z 62 PC: 14590 | Close file
2018-12-17T23:09:29.096973273Z 86 PC: 146cd | Rename file
2018-12-17T23:09:29.10951308Z 67 PC: 13569 | Get or set file attributes
2018-12-17T23:09:29.120093525Z 62 PC: 14590 | Close file
2018-12-17T23:09:29.123353031Z 67 PC: 13569 | Get or set file attributes
2018-12-17T23:09:29.136527903Z 26 PC: 135e0 | Set disk transfer address
2018-12-17T23:09:29.13805355Z 78 PC: 135ec | Find first file
2018-12-17T23:09:29.146514712Z 48 PC: 14702 | Get DOS version
2018-12-17T23:09:29.148170845Z 67 PC: 13542 | Get or set file attributes
2018-12-17T23:09:29.154965375Z 67 PC: 13569 | Get or set file attributes
2018-12-17T23:09:29.483193181Z 61 PC: 14540 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:29.491233151Z 60 PC: 14540 | Create or truncate file
2018-12-17T23:09:29.701288231Z 67 PC: 13569 | Get or set file attributes
2018-12-17T23:09:29.81879216Z 61 PC: 14540 | Open file (Filename = '\TEST.EXE')
2018-12-17T23:09:29.826841989Z 63 PC: 14613 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:29.836218411Z 64 PC: 14613 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:29.849699177Z 63 PC: 14613 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:29.858540454Z 64 PC: 14613 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:29.868737368Z 63 PC: 14613 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:29.871195738Z 62 PC: 14590 | Close file
2018-12-17T23:09:29.876592812Z 65 PC: 14689 | Delete file (Filename = '\TEST.EXE')
2018-12-17T23:09:29.891169487Z 87 PC: 135b0 | Get or set file date and time
2018-12-17T23:09:29.893350016Z 62 PC: 14590 | Close file
2018-12-17T23:09:29.903365619Z 86 PC: 146cd | Rename file
2018-12-17T23:09:29.919029828Z 67 PC: 13569 | Get or set file attributes
2018-12-17T23:09:29.932192266Z 62 PC: 14590 | Close file
2018-12-17T23:09:29.9354564Z 67 PC: 13569 | Get or set file attributes
2018-12-17T23:09:29.947044158Z 26 PC: 135e0 | Set disk transfer address
2018-12-17T23:09:29.948266977Z 78 PC: 135ec | Find first file
2018-12-17T23:09:29.962045593Z 26 PC: 13604 | Set disk transfer address
2018-12-17T23:09:29.96486919Z 79 PC: 13609 | Find next file
2018-12-17T23:09:29.974590079Z 26 PC: 135e0 | Set disk transfer address
2018-12-17T23:09:29.97854901Z 78 PC: 135ec | Find first file
2018-12-17T23:09:29.990025358Z 26 PC: 13604 | Set disk transfer address
2018-12-17T23:09:29.991652757Z 79 PC: 13609 | Find next file
2018-12-17T23:09:29.995143397Z 48 PC: 14702 | Get DOS version
2018-12-17T23:09:29.997992522Z 67 PC: 13542 | Get or set file attributes
2018-12-17T23:09:30.004901818Z 67 PC: 13569 | Get or set file attributes
2018-12-17T23:09:30.015755065Z 61 PC: 14540 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:30.023979051Z 87 PC: 13583 | Get or set file date and time
2018-12-17T23:09:30.02635151Z 60 PC: 14540 | Create or truncate file
2018-12-17T23:09:30.041425701Z 63 PC: 14613 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:30.048802966Z 63 PC: 14613 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:30.055120549Z 64 PC: 14613 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:30.062808608Z 63 PC: 14613 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:30.065026346Z 62 PC: 14590 | Close file
2018-12-17T23:09:30.067533208Z 65 PC: 14689 | Delete file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:30.080799961Z 87 PC: 135b0 | Get or set file date and time
2018-12-17T23:09:30.083362457Z 62 PC: 14590 | Close file
2018-12-17T23:09:30.101083032Z 48 PC: 14702 | Get DOS version
2018-12-17T23:09:30.103680333Z 86 PC: 146cd | Rename file
2018-12-17T23:09:30.115650069Z 67 PC: 13569 | Get or set file attributes
2018-12-17T23:09:30.126738238Z 42 PC: 134a7 | Get date 0x134a7: xor ah, ah
0x134a9: les di, ptr [bp + 6]
0x134ac: stosw word ptr es:[di], ax
0x134ad: mov al, dl
0x134af: les di, ptr [bp + 0xa]
0x134b2: stosw word ptr es:[di], ax
0x134b3: mov al, dh
0x134b5: les di, ptr [bp + 0xe]
0x134b8: stosw word ptr es:[di], ax
0x134b9: xchg ax, cx
0x134ba: les di, ptr [bp + 0x12]
0x134bd: stosw word ptr es:[di], ax
0x134be: pop bp
0x134bf: retf 0x10
0x134c2: push bp
0x134c3: mov bp, sp
0x134c5: mov cx, word ptr [bp + 0xa]
0x134c8: mov dh, byte ptr [bp + 8]
0x134cb: mov dl, byte ptr [bp + 6]
0x134ce: mov ah, 0x2b
2018-12-17T23:09:30.129496532Z 53 PC: 137cb | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:30.131287768Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:30.133265686Z 53 PC: 137cb | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:30.135150468Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:30.136629919Z 53 PC: 137cb | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:30.138766124Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:30.14078642Z 53 PC: 137cb | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:30.142459044Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:30.143812217Z 53 PC: 137cb | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:30.145766771Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:30.147411342Z 53 PC: 137cb | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:30.148742854Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:30.151361676Z 53 PC: 137cb | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:30.153195191Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:30.155116001Z 53 PC: 137cb | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:30.157595011Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:30.159420001Z 53 PC: 137cb | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:30.161036559Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:30.163423315Z 53 PC: 137cb | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:30.165404598Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:30.166956124Z 53 PC: 137cb | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:30.16876863Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:30.171196754Z 53 PC: 137cb | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:30.172762387Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:30.174335373Z 53 PC: 137cb | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:30.176926142Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:30.178479842Z 53 PC: 137cb | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:30.180060613Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:30.182483226Z 53 PC: 137cb | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:30.188679291Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:30.19024874Z 53 PC: 137cb | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:30.193292401Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:30.195373142Z 53 PC: 137cb | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:30.196986524Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:30.199381244Z 53 PC: 137cb | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:30.201334765Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:30.202895108Z 53 PC: 137cb | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:30.20521076Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:30.207501826Z 48 PC: 14702 | Get DOS version
2018-12-17T23:09:30.209368124Z 41 PC: 13782 | Parse filename
2018-12-17T23:09:30.211459975Z 41 PC: 13790 | Parse filename
2018-12-17T23:09:30.214169698Z 75 PC: 1379b | Execute program
2018-12-17T23:09:30.234817784Z 53 PC: 2815a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:30.236430785Z 53 PC: 2815a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:30.239092768Z 53 PC: 2815a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:30.240682957Z 53 PC: 2815a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:30.242277985Z 53 PC: 2815a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:30.244842104Z 53 PC: 2815a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:30.250267791Z 53 PC: 2815a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:30.252821961Z 53 PC: 2815a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:30.258155375Z 53 PC: 2815a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:30.259483221Z 53 PC: 2815a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:30.260768646Z 53 PC: 2815a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:30.263928245Z 53 PC: 2815a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:30.26557546Z 53 PC: 2815a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:30.267182311Z 53 PC: 2815a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:30.269828664Z 53 PC: 2815a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:30.271409996Z 53 PC: 2815a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:30.272957405Z 53 PC: 2815a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:30.275327389Z 53 PC: 2815a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:30.277203074Z 53 PC: 2815a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:30.278796348Z 37 PC: 2816f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:30.281092233Z 37 PC: 28177 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:30.282965284Z 37 PC: 2817f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:30.284496371Z 37 PC: 28187 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:30.287238114Z 68 PC: 28cd4 | I/O control for devices (Set for = '')
2018-12-17T23:09:30.390707395Z 37 PC: 27b81 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:30.392907731Z 51 PC: 2780f | Get or set Ctrl-Break
2018-12-17T23:09:30.397112893Z 26 PC: 278c0 | Set disk transfer address
2018-12-17T23:09:30.398830391Z 78 PC: 278cc | Find first file
2018-12-17T23:09:30.406977223Z 48 PC: 289e2 | Get DOS version
2018-12-17T23:09:30.410578681Z 67 PC: 27822 | Get or set file attributes
2018-12-17T23:09:30.417833276Z 67 PC: 27849 | Get or set file attributes
2018-12-17T23:09:30.429245585Z 61 PC: 28820 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:30.437301344Z 60 PC: 28820 | Create or truncate file
2018-12-17T23:09:30.452123231Z 67 PC: 27849 | Get or set file attributes
2018-12-17T23:09:30.463476619Z 61 PC: 28820 | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T23:09:30.471767611Z 63 PC: 288f3 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:30.481203264Z 64 PC: 288f3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:30.491178772Z 63 PC: 288f3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:30.499989772Z 64 PC: 288f3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:30.511901399Z 63 PC: 288f3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:30.525719689Z 64 PC: 288f3 | Write file or device (Write 5539 bytes on handle 6)
2018-12-17T23:09:30.536148108Z 63 PC: 288f3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:30.539904788Z 62 PC: 28870 | Close file
2018-12-17T23:09:30.542803807Z 65 PC: 28969 | Delete file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T23:09:30.555713359Z 87 PC: 27890 | Get or set file date and time
2018-12-17T23:09:30.55864547Z 62 PC: 28870 | Close file
2018-12-17T23:09:30.56613754Z 86 PC: 289ad | Rename file
2018-12-17T23:09:30.59099638Z 67 PC: 27849 | Get or set file attributes
2018-12-17T23:09:30.611997891Z 62 PC: 28870 | Close file
2018-12-17T23:09:30.614948887Z 67 PC: 27849 | Get or set file attributes
2018-12-17T23:09:30.627382064Z 26 PC: 278c0 | Set disk transfer address
2018-12-17T23:09:30.629805479Z 78 PC: 278cc | Find first file
2018-12-17T23:09:30.637792279Z 48 PC: 289e2 | Get DOS version
2018-12-17T23:09:30.647335816Z 67 PC: 27822 | Get or set file attributes
2018-12-17T23:09:30.655021771Z 67 PC: 27849 | Get or set file attributes
2018-12-17T23:09:30.665832769Z 61 PC: 28820 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:30.67366057Z 60 PC: 28820 | Create or truncate file
2018-12-17T23:09:30.687705256Z 67 PC: 27849 | Get or set file attributes
2018-12-17T23:09:30.699490105Z 61 PC: 28820 | Open file (Filename = '\TEST.EXE')
2018-12-17T23:09:30.708205204Z 63 PC: 288f3 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:30.717158121Z 64 PC: 288f3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:30.729803637Z 63 PC: 288f3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:30.738521752Z 64 PC: 288f3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:30.748588631Z 63 PC: 288f3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:30.752634485Z 62 PC: 28870 | Close file
2018-12-17T23:09:30.755001694Z 65 PC: 28969 | Delete file (Filename = '\TEST.EXE')
2018-12-17T23:09:30.768534688Z 87 PC: 27890 | Get or set file date and time
2018-12-17T23:09:30.771676563Z 62 PC: 28870 | Close file
2018-12-17T23:09:30.779785213Z 86 PC: 289ad | Rename file
2018-12-17T23:09:30.792091001Z 67 PC: 27849 | Get or set file attributes
2018-12-17T23:09:30.803765943Z 62 PC: 28870 | Close file
2018-12-17T23:09:30.806469494Z 67 PC: 27849 | Get or set file attributes
2018-12-17T23:09:30.820401457Z 26 PC: 278c0 | Set disk transfer address
2018-12-17T23:09:30.822751905Z 78 PC: 278cc | Find first file
2018-12-17T23:09:30.836286853Z 26 PC: 278e4 | Set disk transfer address
2018-12-17T23:09:30.837921996Z 79 PC: 278e9 | Find next file
2018-12-17T23:09:30.846357059Z 26 PC: 278c0 | Set disk transfer address
2018-12-17T23:09:30.848203479Z 78 PC: 278cc | Find first file
2018-12-17T23:09:30.85570632Z 26 PC: 278e4 | Set disk transfer address
2018-12-17T23:09:30.858463582Z 79 PC: 278e9 | Find next file
2018-12-17T23:09:30.861794953Z 48 PC: 289e2 | Get DOS version
2018-12-17T23:09:30.863696126Z 67 PC: 27822 | Get or set file attributes
2018-12-17T23:09:30.870589802Z 67 PC: 27849 | Get or set file attributes
2018-12-17T23:09:30.881905589Z 61 PC: 28820 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:30.889091825Z 87 PC: 27863 | Get or set file date and time
2018-12-17T23:09:30.89190916Z 60 PC: 28820 | Create or truncate file
2018-12-17T23:09:30.907566366Z 63 PC: 288f3 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:30.916247271Z 63 PC: 288f3 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:30.925499981Z 64 PC: 288f3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:30.935732452Z 63 PC: 288f3 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:30.938064445Z 62 PC: 28870 | Close file
2018-12-17T23:09:30.939972771Z 65 PC: 28969 | Delete file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:30.953173991Z 87 PC: 27890 | Get or set file date and time
2018-12-17T23:09:30.955234855Z 62 PC: 28870 | Close file
2018-12-17T23:09:30.964081732Z 48 PC: 289e2 | Get DOS version
2018-12-17T23:09:30.966827262Z 86 PC: 289ad | Rename file
2018-12-17T23:09:30.97964393Z 67 PC: 27849 | Get or set file attributes
2018-12-17T23:09:30.990800307Z 42 PC: 27787 | Get date 0x27787: xor ah, ah
0x27789: les di, ptr [bp + 6]
0x2778c: stosw word ptr es:[di], ax
0x2778d: mov al, dl
0x2778f: les di, ptr [bp + 0xa]
0x27792: stosw word ptr es:[di], ax
0x27793: mov al, dh
0x27795: les di, ptr [bp + 0xe]
0x27798: stosw word ptr es:[di], ax
0x27799: xchg ax, cx
0x2779a: les di, ptr [bp + 0x12]
0x2779d: stosw word ptr es:[di], ax
0x2779e: pop bp
0x2779f: retf 0x10
0x277a2: push bp
0x277a3: mov bp, sp
0x277a5: mov cx, word ptr [bp + 0xa]
0x277a8: mov dh, byte ptr [bp + 8]
0x277ab: mov dl, byte ptr [bp + 6]
0x277ae: mov ah, 0x2b
2018-12-17T23:09:30.99465398Z 53 PC: 27aab | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:30.996321344Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:30.997920329Z 53 PC: 27aab | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:31.000332071Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:31.001609993Z 53 PC: 27aab | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:31.002860032Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:31.004749573Z 53 PC: 27aab | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:31.006039678Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:31.007242359Z 53 PC: 27aab | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:31.009473051Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:31.011048051Z 53 PC: 27aab | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:31.012647326Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:31.014876135Z 53 PC: 27aab | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:31.016248134Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:31.017508072Z 53 PC: 27aab | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:31.019838933Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:31.021122145Z 53 PC: 27aab | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:31.022453737Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:31.024817619Z 53 PC: 27aab | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:31.02614804Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:31.027423096Z 53 PC: 27aab | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:31.029868402Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:31.031412975Z 53 PC: 27aab | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:31.03289463Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:31.035138587Z 53 PC: 27aab | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:31.036441435Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:31.037800149Z 53 PC: 27aab | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:31.040013439Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:31.041494442Z 53 PC: 27aab | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:31.043006614Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:31.045021872Z 53 PC: 27aab | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:31.046554993Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:31.048885202Z 53 PC: 27aab | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:31.051449341Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:31.052955021Z 53 PC: 27aab | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:31.054501398Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:31.056990195Z 53 PC: 27aab | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:31.058370179Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:31.060032242Z 48 PC: 289e2 | Get DOS version
2018-12-17T23:09:31.062598836Z 41 PC: 27a62 | Parse filename
2018-12-17T23:09:31.064201809Z 41 PC: 27a70 | Parse filename
2018-12-17T23:09:31.065853373Z 75 PC: 27a7b | Execute program
2018-12-17T23:09:31.086506027Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:31.088056481Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:31.089632904Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:31.092214085Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:31.093774507Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:31.095326524Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:31.09791001Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:31.099465443Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:31.101018242Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:31.103668793Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:31.10522642Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:31.106785821Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:31.109403882Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:31.110977429Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:31.112531219Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:31.114889181Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:31.116292178Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:31.117602881Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:31.119957216Z 53 PC: 3c43a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:31.121267809Z 37 PC: 3c44f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:31.122506437Z 37 PC: 3c457 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:31.12500891Z 37 PC: 3c45f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:31.126381159Z 37 PC: 3c467 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:31.12811639Z 68 PC: 3cfb4 | I/O control for devices (Set for = '')
2018-12-17T23:09:31.194728302Z 37 PC: 3be61 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:31.196939217Z 51 PC: 3baef | Get or set Ctrl-Break
2018-12-17T23:09:31.199527441Z 26 PC: 3bba0 | Set disk transfer address
2018-12-17T23:09:31.201636895Z 78 PC: 3bbac | Find first file
2018-12-17T23:09:31.209666206Z 26 PC: 3bbc4 | Set disk transfer address
2018-12-17T23:09:31.211576967Z 79 PC: 3bbc9 | Find next file
2018-12-17T23:09:31.216437061Z 48 PC: 3ccc2 | Get DOS version
2018-12-17T23:09:31.21814991Z 67 PC: 3bb02 | Get or set file attributes
2018-12-17T23:09:31.225317701Z 67 PC: 3bb29 | Get or set file attributes
2018-12-17T23:09:31.236843443Z 61 PC: 3cb00 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:31.24479604Z 60 PC: 3cb00 | Create or truncate file
2018-12-17T23:09:31.259243632Z 67 PC: 3bb29 | Get or set file attributes
2018-12-17T23:09:31.270459281Z 61 PC: 3cb00 | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T23:09:31.278634796Z 63 PC: 3cbd3 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:31.288766939Z 64 PC: 3cbd3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:31.298446921Z 63 PC: 3cbd3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:31.307213136Z 64 PC: 3cbd3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:31.318604575Z 63 PC: 3cbd3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:31.325500787Z 64 PC: 3cbd3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:31.332390976Z 63 PC: 3cbd3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:31.338267991Z 64 PC: 3cbd3 | Write file or device (Write 2314 bytes on handle 6)
2018-12-17T23:09:31.34491331Z 63 PC: 3cbd3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:31.346810256Z 62 PC: 3cb50 | Close file
2018-12-17T23:09:31.349165833Z 65 PC: 3cc49 | Delete file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T23:09:31.358563485Z 87 PC: 3bb70 | Get or set file date and time
2018-12-17T23:09:31.360063875Z 62 PC: 3cb50 | Close file
2018-12-17T23:09:31.366002946Z 86 PC: 3cc8d | Rename file
2018-12-17T23:09:31.374614922Z 67 PC: 3bb29 | Get or set file attributes
2018-12-17T23:09:31.382677776Z 62 PC: 3cb50 | Close file
2018-12-17T23:09:31.385516932Z 67 PC: 3bb29 | Get or set file attributes
2018-12-17T23:09:31.395548104Z 26 PC: 3bba0 | Set disk transfer address
2018-12-17T23:09:31.397082719Z 78 PC: 3bbac | Find first file
2018-12-17T23:09:31.405525826Z 48 PC: 3ccc2 | Get DOS version
2018-12-17T23:09:31.407301123Z 67 PC: 3bb02 | Get or set file attributes
2018-12-17T23:09:31.413877663Z 67 PC: 3bb29 | Get or set file attributes
2018-12-17T23:09:31.426148124Z 61 PC: 3cb00 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:31.434218091Z 60 PC: 3cb00 | Create or truncate file
2018-12-17T23:09:31.450286109Z 67 PC: 3bb29 | Get or set file attributes
2018-12-17T23:09:31.462465299Z 61 PC: 3cb00 | Open file (Filename = '\TEST.EXE')
2018-12-17T23:09:31.470222648Z 63 PC: 3cbd3 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:31.478951203Z 64 PC: 3cbd3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:31.489098193Z 63 PC: 3cbd3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:31.497524159Z 64 PC: 3cbd3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:31.507673163Z 63 PC: 3cbd3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:31.512086257Z 62 PC: 3cb50 | Close file
2018-12-17T23:09:31.514356554Z 65 PC: 3cc49 | Delete file (Filename = '\TEST.EXE')
2018-12-17T23:09:31.527421859Z 87 PC: 3bb70 | Get or set file date and time
2018-12-17T23:09:31.530009612Z 62 PC: 3cb50 | Close file
2018-12-17T23:09:31.538314621Z 86 PC: 3cc8d | Rename file
2018-12-17T23:09:31.551290358Z 67 PC: 3bb29 | Get or set file attributes
2018-12-17T23:09:31.563798846Z 62 PC: 3cb50 | Close file
2018-12-17T23:09:31.566436844Z 67 PC: 3bb29 | Get or set file attributes
2018-12-17T23:09:31.581378285Z 26 PC: 3bba0 | Set disk transfer address
2018-12-17T23:09:31.583236979Z 78 PC: 3bbac | Find first file
2018-12-17T23:09:31.590820441Z 26 PC: 3bbc4 | Set disk transfer address
2018-12-17T23:09:31.592088965Z 79 PC: 3bbc9 | Find next file
2018-12-17T23:09:31.600252127Z 26 PC: 3bba0 | Set disk transfer address
2018-12-17T23:09:31.601553553Z 78 PC: 3bbac | Find first file
2018-12-17T23:09:31.608766759Z 26 PC: 3bbc4 | Set disk transfer address
2018-12-17T23:09:31.610546063Z 79 PC: 3bbc9 | Find next file
2018-12-17T23:09:31.613756236Z 48 PC: 3ccc2 | Get DOS version
2018-12-17T23:09:31.616022215Z 67 PC: 3bb02 | Get or set file attributes
2018-12-17T23:09:31.622823277Z 67 PC: 3bb29 | Get or set file attributes
2018-12-17T23:09:31.634119818Z 61 PC: 3cb00 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:31.648516355Z 87 PC: 3bb43 | Get or set file date and time
2018-12-17T23:09:31.650763779Z 60 PC: 3cb00 | Create or truncate file
2018-12-17T23:09:31.664113308Z 63 PC: 3cbd3 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:31.673910641Z 63 PC: 3cbd3 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:31.682238202Z 64 PC: 3cbd3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:31.691832534Z 63 PC: 3cbd3 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:31.695146181Z 62 PC: 3cb50 | Close file
2018-12-17T23:09:31.69722018Z 65 PC: 3cc49 | Delete file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:31.711034863Z 87 PC: 3bb70 | Get or set file date and time
2018-12-17T23:09:31.713705623Z 62 PC: 3cb50 | Close file
2018-12-17T23:09:31.72206876Z 48 PC: 3ccc2 | Get DOS version
2018-12-17T23:09:31.723990532Z 86 PC: 3cc8d | Rename file
2018-12-17T23:09:31.73774887Z 67 PC: 3bb29 | Get or set file attributes
2018-12-17T23:09:31.759131757Z 42 PC: 3ba67 | Get date 0x3ba67: xor ah, ah
0x3ba69: les di, ptr [bp + 6]
0x3ba6c: stosw word ptr es:[di], ax
0x3ba6d: mov al, dl
0x3ba6f: les di, ptr [bp + 0xa]
0x3ba72: stosw word ptr es:[di], ax
0x3ba73: mov al, dh
0x3ba75: les di, ptr [bp + 0xe]
0x3ba78: stosw word ptr es:[di], ax
0x3ba79: xchg ax, cx
0x3ba7a: les di, ptr [bp + 0x12]
0x3ba7d: stosw word ptr es:[di], ax
0x3ba7e: pop bp
0x3ba7f: retf 0x10
0x3ba82: push bp
0x3ba83: mov bp, sp
0x3ba85: mov cx, word ptr [bp + 0xa]
0x3ba88: mov dh, byte ptr [bp + 8]
0x3ba8b: mov dl, byte ptr [bp + 6]
0x3ba8e: mov ah, 0x2b
2018-12-17T23:09:31.762308177Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:31.765385811Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:31.767196063Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:31.768642572Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:31.770664101Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:31.772111091Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:31.773798692Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:31.775703582Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:31.777013303Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:31.78532281Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:31.786889374Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:31.788540678Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:31.790487757Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:31.792281709Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:31.794618862Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:31.796900119Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:31.798397693Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:31.799845905Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:31.802393052Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:31.80416353Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:31.805499721Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:31.808276239Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:31.80972412Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:31.81240026Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:31.813784061Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:31.815146041Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:31.816695683Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:31.81892379Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:31.820406747Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:31.823302229Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:31.826132268Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:31.828002072Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:31.830488485Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:31.831891762Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:31.833206143Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:31.836598027Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:31.837918249Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:31.839303573Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:31.841880676Z 48 PC: 3ccc2 | Get DOS version
2018-12-17T23:09:31.843769225Z 41 PC: 3bd42 | Parse filename
2018-12-17T23:09:31.845829878Z 41 PC: 3bd50 | Parse filename
2018-12-17T23:09:31.850595094Z 75 PC: 3bd5b | Execute program
2018-12-17T23:09:31.871586786Z 53 PC: 5071a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:31.877378341Z 53 PC: 5071a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:31.880649228Z 53 PC: 5071a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:31.882266126Z 53 PC: 5071a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:31.884206243Z 53 PC: 5071a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:31.886720258Z 53 PC: 5071a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:31.890207151Z 53 PC: 5071a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:31.893068459Z 53 PC: 5071a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:31.895670499Z 53 PC: 5071a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:31.897271328Z 53 PC: 5071a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:31.899986942Z 53 PC: 5071a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:31.902249213Z 53 PC: 5071a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:31.903851965Z 53 PC: 5071a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:31.906528736Z 53 PC: 5071a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:31.908108275Z 53 PC: 5071a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:31.909782121Z 53 PC: 5071a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:31.912371437Z 53 PC: 5071a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:31.913801795Z 53 PC: 5071a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:31.915079727Z 53 PC: 5071a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:31.917362868Z 37 PC: 5072f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:31.918926667Z 37 PC: 50737 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:31.921000545Z 37 PC: 5073f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:31.923207683Z 37 PC: 50747 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:31.925358726Z 68 PC: 51294 | I/O control for devices (Set for = '��^�^?N')
2018-12-17T23:09:32.025287282Z 37 PC: 50141 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:32.027849418Z 51 PC: 4fdcf | Get or set Ctrl-Break
2018-12-17T23:09:32.030543711Z 26 PC: 4fe80 | Set disk transfer address
2018-12-17T23:09:32.03291095Z 78 PC: 4fe8c | Find first file
2018-12-17T23:09:32.0408121Z 26 PC: 4fea4 | Set disk transfer address
2018-12-17T23:09:32.042161656Z 79 PC: 4fea9 | Find next file
2018-12-17T23:09:32.046802468Z 26 PC: 4fea4 | Set disk transfer address
2018-12-17T23:09:32.048651723Z 79 PC: 4fea9 | Find next file
2018-12-17T23:09:32.052674644Z 48 PC: 50fa2 | Get DOS version
2018-12-17T23:09:32.055192316Z 67 PC: 4fde2 | Get or set file attributes
2018-12-17T23:09:32.061429829Z 67 PC: 4fe09 | Get or set file attributes
2018-12-17T23:09:32.071890118Z 61 PC: 50de0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:32.080318708Z 60 PC: 50de0 | Create or truncate file
2018-12-17T23:09:32.094116129Z 67 PC: 4fe09 | Get or set file attributes
2018-12-17T23:09:32.10581138Z 61 PC: 50de0 | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T23:09:32.114122059Z 63 PC: 50eb3 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:32.123280491Z 64 PC: 50eb3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:32.134347321Z 63 PC: 50eb3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:32.143323149Z 64 PC: 50eb3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:32.153869751Z 63 PC: 50eb3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:32.163523524Z 64 PC: 50eb3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:32.171816791Z 63 PC: 50eb3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:32.179880646Z 64 PC: 50eb3 | Write file or device (Write 2725 bytes on handle 6)
2018-12-17T23:09:32.189663222Z 63 PC: 50eb3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:32.192444058Z 62 PC: 50e30 | Close file
2018-12-17T23:09:32.194873103Z 65 PC: 50f29 | Delete file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T23:09:32.207840153Z 87 PC: 4fe50 | Get or set file date and time
2018-12-17T23:09:32.209691914Z 62 PC: 50e30 | Close file
2018-12-17T23:09:32.217489037Z 86 PC: 50f6d | Rename file
2018-12-17T23:09:32.229844488Z 67 PC: 4fe09 | Get or set file attributes
2018-12-17T23:09:32.240276855Z 62 PC: 50e30 | Close file
2018-12-17T23:09:32.243201692Z 67 PC: 4fe09 | Get or set file attributes
2018-12-17T23:09:32.255579776Z 26 PC: 4fe80 | Set disk transfer address
2018-12-17T23:09:32.25702417Z 78 PC: 4fe8c | Find first file
2018-12-17T23:09:32.265765769Z 48 PC: 50fa2 | Get DOS version
2018-12-17T23:09:32.271353371Z 67 PC: 4fde2 | Get or set file attributes
2018-12-17T23:09:32.28627834Z 67 PC: 4fe09 | Get or set file attributes
2018-12-17T23:09:32.298373612Z 61 PC: 50de0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:32.306802524Z 60 PC: 50de0 | Create or truncate file
2018-12-17T23:09:32.319326471Z 67 PC: 4fe09 | Get or set file attributes
2018-12-17T23:09:32.337298869Z 61 PC: 50de0 | Open file (Filename = '\TEST.EXE')
2018-12-17T23:09:32.363228701Z 63 PC: 50eb3 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:32.37675874Z 64 PC: 50eb3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:32.386878669Z 63 PC: 50eb3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:32.395352395Z 64 PC: 50eb3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:32.417875115Z 63 PC: 50eb3 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:32.421342381Z 62 PC: 50e30 | Close file
2018-12-17T23:09:32.423403675Z 65 PC: 50f29 | Delete file (Filename = '\TEST.EXE')
2018-12-17T23:09:32.459165877Z 87 PC: 4fe50 | Get or set file date and time
2018-12-17T23:09:32.461114108Z 62 PC: 50e30 | Close file
2018-12-17T23:09:32.482239251Z 86 PC: 50f6d | Rename file
2018-12-17T23:09:32.517256092Z 67 PC: 4fe09 | Get or set file attributes
2018-12-17T23:09:32.532332086Z 62 PC: 50e30 | Close file
2018-12-17T23:09:32.545007698Z 67 PC: 4fe09 | Get or set file attributes
2018-12-17T23:09:32.575045863Z 26 PC: 4fe80 | Set disk transfer address
2018-12-17T23:09:32.577120572Z 78 PC: 4fe8c | Find first file
2018-12-17T23:09:32.58585653Z 26 PC: 4fea4 | Set disk transfer address
2018-12-17T23:09:32.58844273Z 79 PC: 4fea9 | Find next file
2018-12-17T23:09:32.592698238Z 26 PC: 4fe80 | Set disk transfer address
2018-12-17T23:09:32.594482031Z 78 PC: 4fe8c | Find first file
2018-12-17T23:09:32.603475192Z 26 PC: 4fea4 | Set disk transfer address
2018-12-17T23:09:32.605388969Z 79 PC: 4fea9 | Find next file
2018-12-17T23:09:32.608774512Z 48 PC: 50fa2 | Get DOS version
2018-12-17T23:09:32.611496298Z 67 PC: 4fde2 | Get or set file attributes
2018-12-17T23:09:32.618512354Z 67 PC: 4fe09 | Get or set file attributes
2018-12-17T23:09:32.629578191Z 61 PC: 50de0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:32.638175599Z 87 PC: 4fe23 | Get or set file date and time
2018-12-17T23:09:32.643741971Z 60 PC: 50de0 | Create or truncate file
2018-12-17T23:09:32.656936688Z 63 PC: 50eb3 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:32.666394464Z 63 PC: 50eb3 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:32.674702899Z 64 PC: 50eb3 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:32.684156465Z 63 PC: 50eb3 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:32.687830932Z 62 PC: 50e30 | Close file
2018-12-17T23:09:32.690157234Z 65 PC: 50f29 | Delete file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:32.703473841Z 87 PC: 4fe50 | Get or set file date and time
2018-12-17T23:09:32.706472817Z 62 PC: 50e30 | Close file
2018-12-17T23:09:32.714902019Z 48 PC: 50fa2 | Get DOS version
2018-12-17T23:09:32.717516092Z 86 PC: 50f6d | Rename file
2018-12-17T23:09:32.730554997Z 67 PC: 4fe09 | Get or set file attributes
2018-12-17T23:09:32.742306343Z 42 PC: 4fd47 | Get date 0x4fd47: xor ah, ah
0x4fd49: les di, ptr [bp + 6]
0x4fd4c: stosw word ptr es:[di], ax
0x4fd4d: mov al, dl
0x4fd4f: les di, ptr [bp + 0xa]
0x4fd52: stosw word ptr es:[di], ax
0x4fd53: mov al, dh
0x4fd55: les di, ptr [bp + 0xe]
0x4fd58: stosw word ptr es:[di], ax
0x4fd59: xchg ax, cx
0x4fd5a: les di, ptr [bp + 0x12]
0x4fd5d: stosw word ptr es:[di], ax
0x4fd5e: pop bp
0x4fd5f: retf 0x10
0x4fd62: push bp
0x4fd63: mov bp, sp
0x4fd65: mov cx, word ptr [bp + 0xa]
0x4fd68: mov dh, byte ptr [bp + 8]
0x4fd6b: mov dl, byte ptr [bp + 6]
0x4fd6e: mov ah, 0x2b
2018-12-17T23:09:32.746045541Z 53 PC: 5006b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:32.748072971Z 37 PC: 50074 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:32.749632201Z 53 PC: 5006b | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:32.752027873Z 37 PC: 50074 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:32.753979752Z 53 PC: 5006b | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:32.755557016Z 37 PC: 50074 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:32.75796914Z 53 PC: 5006b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:32.759939873Z 37 PC: 50074 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:32.761462926Z 53 PC: 5006b | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:32.764149996Z 37 PC: 50074 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:32.765684771Z 53 PC: 5006b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:32.770974081Z 37 PC: 50074 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:32.773632427Z 53 PC: 5006b | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:32.7752088Z 37 PC: 50074 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:32.776731552Z 53 PC: 5006b | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:32.779285432Z 37 PC: 50074 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:32.780852778Z 53 PC: 5006b | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:32.782956451Z 37 PC: 50074 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:32.784892289Z 53 PC: 5006b | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:32.786530528Z 37 PC: 50074 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:32.788942962Z 53 PC: 5006b | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:32.791186319Z 37 PC: 50074 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:32.792758554Z 53 PC: 5006b | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:32.796320097Z 37 PC: 50074 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:32.79785433Z 53 PC: 5006b | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:32.799764009Z 37 PC: 50074 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:32.802273876Z 53 PC: 5006b | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:32.803828257Z 37 PC: 50074 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:32.806384321Z 53 PC: 5006b | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:32.807768533Z 37 PC: 50074 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:32.80903847Z 53 PC: 5006b | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:32.811327842Z 37 PC: 50074 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:32.81263546Z 53 PC: 5006b | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:32.813956082Z 37 PC: 50074 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:32.816465348Z 53 PC: 5006b | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:32.817768817Z 37 PC: 50074 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:32.819209074Z 53 PC: 5006b | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:32.821080982Z 37 PC: 50074 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:32.822382849Z 48 PC: 50fa2 | Get DOS version
2018-12-17T23:09:32.824808418Z 41 PC: 50022 | Parse filename
2018-12-17T23:09:32.826407714Z 41 PC: 50030 | Parse filename
2018-12-17T23:09:32.827951996Z 75 PC: 5003b | Execute program
2018-12-17T23:09:32.848421497Z 53 PC: 649fa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:32.850408241Z 53 PC: 649fa | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:32.85203625Z 53 PC: 649fa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:32.855087665Z 53 PC: 649fa | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:32.856822636Z 53 PC: 649fa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:32.859492444Z 53 PC: 649fa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:32.861567964Z 53 PC: 649fa | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:32.863254133Z 53 PC: 649fa | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:32.865837969Z 53 PC: 649fa | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:32.867984043Z 53 PC: 649fa | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:32.869720727Z 53 PC: 649fa | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:32.872398349Z 53 PC: 649fa | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:32.874496773Z 53 PC: 649fa | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:32.87622988Z 53 PC: 649fa | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:32.87933186Z 53 PC: 649fa | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:32.881072591Z 53 PC: 649fa | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:32.88380148Z 53 PC: 649fa | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:32.885898751Z 53 PC: 649fa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:32.88763275Z 53 PC: 649fa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:32.891281839Z 37 PC: 64a0f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:32.893356869Z 37 PC: 64a17 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:32.895036655Z 37 PC: 64a1f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:32.89795517Z 37 PC: 64a27 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:32.900080495Z 68 PC: 65574 | I/O control for devices (Set for = '')
2018-12-17T23:09:33.011382086Z 37 PC: 64421 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:33.018621882Z 51 PC: 640af | Get or set Ctrl-Break
2018-12-17T23:09:33.021256634Z 26 PC: 64160 | Set disk transfer address
2018-12-17T23:09:33.023674558Z 78 PC: 6416c | Find first file
2018-12-17T23:09:33.03177401Z 26 PC: 64184 | Set disk transfer address
2018-12-17T23:09:33.033277646Z 79 PC: 64189 | Find next file
2018-12-17T23:09:33.038464304Z 26 PC: 64184 | Set disk transfer address
2018-12-17T23:09:33.040369094Z 79 PC: 64189 | Find next file
2018-12-17T23:09:33.044601909Z 26 PC: 64184 | Set disk transfer address
2018-12-17T23:09:33.046850485Z 79 PC: 64189 | Find next file
2018-12-17T23:09:33.051133615Z 48 PC: 65282 | Get DOS version
2018-12-17T23:09:33.054473112Z 67 PC: 640c2 | Get or set file attributes
2018-12-17T23:09:33.062260798Z 67 PC: 640e9 | Get or set file attributes
2018-12-17T23:09:33.073377641Z 61 PC: 650c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:33.082940583Z 60 PC: 650c0 | Create or truncate file
2018-12-17T23:09:33.095938131Z 67 PC: 640e9 | Get or set file attributes
2018-12-17T23:09:33.106715336Z 61 PC: 650c0 | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T23:09:33.115756868Z 63 PC: 65193 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:33.124515329Z 64 PC: 65193 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:33.133743332Z 63 PC: 65193 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:33.144304571Z 64 PC: 65193 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:33.153733843Z 63 PC: 65193 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:33.163138778Z 64 PC: 65193 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:33.17241371Z 63 PC: 65193 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:33.180514564Z 64 PC: 65193 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:33.191070663Z 63 PC: 65193 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:33.199680505Z 64 PC: 65193 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:33.210041838Z 63 PC: 65193 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:33.218656268Z 64 PC: 65193 | Write file or device (Write 2528 bytes on handle 6)
2018-12-17T23:09:33.227690377Z 63 PC: 65193 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:33.230236262Z 62 PC: 65110 | Close file
2018-12-17T23:09:33.233771565Z 65 PC: 65209 | Delete file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T23:09:33.246332743Z 87 PC: 64130 | Get or set file date and time
2018-12-17T23:09:33.248312324Z 62 PC: 65110 | Close file
2018-12-17T23:09:33.255947493Z 86 PC: 6524d | Rename file
2018-12-17T23:09:33.268981419Z 67 PC: 640e9 | Get or set file attributes
2018-12-17T23:09:33.28049596Z 62 PC: 65110 | Close file
2018-12-17T23:09:33.283126844Z 67 PC: 640e9 | Get or set file attributes
2018-12-17T23:09:33.294461567Z 26 PC: 64160 | Set disk transfer address
2018-12-17T23:09:33.296966725Z 78 PC: 6416c | Find first file
2018-12-17T23:09:33.304224175Z 48 PC: 65282 | Get DOS version
2018-12-17T23:09:33.307127902Z 67 PC: 640c2 | Get or set file attributes
2018-12-17T23:09:33.313341249Z 67 PC: 640e9 | Get or set file attributes
2018-12-17T23:09:33.323998378Z 61 PC: 650c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:33.333361425Z 60 PC: 650c0 | Create or truncate file
2018-12-17T23:09:33.345343003Z 67 PC: 640e9 | Get or set file attributes
2018-12-17T23:09:33.355852445Z 61 PC: 650c0 | Open file (Filename = '\TEST.EXE')
2018-12-17T23:09:33.364992613Z 63 PC: 65193 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:33.373102856Z 64 PC: 65193 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:33.382565009Z 63 PC: 65193 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:33.391708092Z 64 PC: 65193 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:33.402173321Z 63 PC: 65193 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:33.406014851Z 62 PC: 65110 | Close file
2018-12-17T23:09:33.40843023Z 65 PC: 65209 | Delete file (Filename = '\TEST.EXE')
2018-12-17T23:09:33.421010042Z 87 PC: 64130 | Get or set file date and time
2018-12-17T23:09:33.42361587Z 62 PC: 65110 | Close file
2018-12-17T23:09:33.431306314Z 86 PC: 6524d | Rename file
2018-12-17T23:09:33.444125957Z 67 PC: 640e9 | Get or set file attributes
2018-12-17T23:09:33.457634745Z 62 PC: 65110 | Close file
2018-12-17T23:09:33.459594118Z 67 PC: 640e9 | Get or set file attributes
2018-12-17T23:09:33.472037705Z 26 PC: 64160 | Set disk transfer address
2018-12-17T23:09:33.473332378Z 78 PC: 6416c | Find first file
2018-12-17T23:09:33.481616146Z 26 PC: 64184 | Set disk transfer address
2018-12-17T23:09:33.483083644Z 79 PC: 64189 | Find next file
2018-12-17T23:09:33.490349389Z 26 PC: 64160 | Set disk transfer address
2018-12-17T23:09:33.492431833Z 78 PC: 6416c | Find first file
2018-12-17T23:09:33.499686377Z 26 PC: 64184 | Set disk transfer address
2018-12-17T23:09:33.500828283Z 79 PC: 64189 | Find next file
2018-12-17T23:09:33.505235807Z 48 PC: 65282 | Get DOS version
2018-12-17T23:09:33.507130287Z 67 PC: 640c2 | Get or set file attributes
2018-12-17T23:09:33.514342763Z 67 PC: 640e9 | Get or set file attributes
2018-12-17T23:09:33.525894283Z 61 PC: 650c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:33.535142434Z 87 PC: 64103 | Get or set file date and time
2018-12-17T23:09:33.538638965Z 60 PC: 650c0 | Create or truncate file
2018-12-17T23:09:33.551995287Z 63 PC: 65193 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:33.562017092Z 63 PC: 65193 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:33.573238332Z 64 PC: 65193 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:33.584193531Z 63 PC: 65193 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:33.588281854Z 62 PC: 65110 | Close file
2018-12-17T23:09:33.590343098Z 65 PC: 65209 | Delete file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:33.603614631Z 87 PC: 64130 | Get or set file date and time
2018-12-17T23:09:33.60631185Z 62 PC: 65110 | Close file
2018-12-17T23:09:33.614330069Z 48 PC: 65282 | Get DOS version
2018-12-17T23:09:33.616965082Z 86 PC: 6524d | Rename file
2018-12-17T23:09:33.629601671Z 67 PC: 640e9 | Get or set file attributes
2018-12-17T23:09:33.641450519Z 42 PC: 64027 | Get date 0x64027: xor ah, ah
0x64029: les di, ptr [bp + 6]
0x6402c: stosw word ptr es:[di], ax
0x6402d: mov al, dl
0x6402f: les di, ptr [bp + 0xa]
0x64032: stosw word ptr es:[di], ax
0x64033: mov al, dh
0x64035: les di, ptr [bp + 0xe]
0x64038: stosw word ptr es:[di], ax
0x64039: xchg ax, cx
0x6403a: les di, ptr [bp + 0x12]
0x6403d: stosw word ptr es:[di], ax
0x6403e: pop bp
0x6403f: retf 0x10
0x64042: push bp
0x64043: mov bp, sp
0x64045: mov cx, word ptr [bp + 0xa]
0x64048: mov dh, byte ptr [bp + 8]
0x6404b: mov dl, byte ptr [bp + 6]
0x6404e: mov ah, 0x2b
2018-12-17T23:09:33.64524456Z 53 PC: 6434b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:33.647582123Z 37 PC: 64354 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:33.650468678Z 53 PC: 6434b | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:33.652164415Z 37 PC: 64354 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:33.653755305Z 53 PC: 6434b | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:33.656647771Z 37 PC: 64354 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:33.658240475Z 53 PC: 6434b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:33.660054093Z 37 PC: 64354 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:33.662719813Z 53 PC: 6434b | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:33.664392958Z 37 PC: 64354 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:33.666949993Z 53 PC: 6434b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:33.669309548Z 37 PC: 64354 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:33.671658122Z 53 PC: 6434b | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:33.674535971Z 37 PC: 64354 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:33.676061778Z 53 PC: 6434b | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:33.67857947Z 37 PC: 64354 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:33.682021178Z 53 PC: 6434b | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:33.683536195Z 37 PC: 64354 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:33.686005416Z 53 PC: 6434b | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:33.687498702Z 37 PC: 64354 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:33.68884337Z 53 PC: 6434b | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:33.691318862Z 37 PC: 64354 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:33.692724574Z 53 PC: 6434b | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:33.695842975Z 37 PC: 64354 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:33.69720801Z 53 PC: 6434b | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:33.698650812Z 37 PC: 64354 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:33.702272429Z 53 PC: 6434b | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:33.70406618Z 37 PC: 64354 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:33.705769842Z 53 PC: 6434b | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:33.714327345Z 37 PC: 64354 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:33.715666241Z 53 PC: 6434b | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:33.718468117Z 37 PC: 64354 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:33.719779181Z 53 PC: 6434b | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:33.72108787Z 37 PC: 64354 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:33.72381172Z 53 PC: 6434b | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:33.725405816Z 37 PC: 64354 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:33.728104478Z 53 PC: 6434b | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:33.729769167Z 37 PC: 64354 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:33.731371448Z 48 PC: 65282 | Get DOS version
2018-12-17T23:09:33.73474099Z 41 PC: 64302 | Parse filename
2018-12-17T23:09:33.737323163Z 41 PC: 64310 | Parse filename
2018-12-17T23:09:33.739215249Z 75 PC: 6431b | Execute program
2018-12-17T23:09:33.7593233Z 53 PC: 78cda | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:33.760699096Z 53 PC: 78cda | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:33.763341933Z 53 PC: 78cda | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:33.764897186Z 53 PC: 78cda | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:33.766559019Z 53 PC: 78cda | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:33.769732353Z 53 PC: 78cda | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:33.771803596Z 53 PC: 78cda | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:33.775555107Z 53 PC: 78cda | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:33.777152468Z 53 PC: 78cda | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:33.778710937Z 53 PC: 78cda | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:33.781926932Z 53 PC: 78cda | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:33.783912744Z 53 PC: 78cda | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:33.786815218Z 53 PC: 78cda | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:33.789232031Z 53 PC: 78cda | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:33.791419512Z 53 PC: 78cda | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:33.795567828Z 53 PC: 78cda | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:33.797449865Z 53 PC: 78cda | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:33.799621326Z 53 PC: 78cda | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:33.802466314Z 53 PC: 78cda | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:33.804442648Z 37 PC: 78cef | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:33.8075191Z 37 PC: 78cf7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:33.809199618Z 37 PC: 78cff | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:33.810984492Z 37 PC: 78d07 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:33.814414439Z 68 PC: 79854 | I/O control for devices (Set for = '')
2018-12-17T23:09:33.917678544Z 37 PC: 78701 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:33.920929283Z 51 PC: 7838f | Get or set Ctrl-Break
2018-12-17T23:09:33.923583642Z 26 PC: 78440 | Set disk transfer address
2018-12-17T23:09:33.925097177Z 78 PC: 7844c | Find first file
2018-12-17T23:09:33.933909038Z 26 PC: 78464 | Set disk transfer address
2018-12-17T23:09:33.935245539Z 79 PC: 78469 | Find next file
2018-12-17T23:09:33.939470129Z 26 PC: 78464 | Set disk transfer address
2018-12-17T23:09:33.941171326Z 79 PC: 78469 | Find next file
2018-12-17T23:09:33.944982559Z 26 PC: 78464 | Set disk transfer address
2018-12-17T23:09:33.947066696Z 79 PC: 78469 | Find next file
2018-12-17T23:09:33.950977747Z 26 PC: 78464 | Set disk transfer address
2018-12-17T23:09:33.952162142Z 79 PC: 78469 | Find next file
2018-12-17T23:09:33.956985578Z 48 PC: 79562 | Get DOS version
2018-12-17T23:09:33.95920016Z 67 PC: 783a2 | Get or set file attributes
2018-12-17T23:09:33.966131987Z 67 PC: 783c9 | Get or set file attributes
2018-12-17T23:09:33.978473953Z 61 PC: 793a0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:33.987495919Z 60 PC: 793a0 | Create or truncate file
2018-12-17T23:09:34.001827213Z 67 PC: 783c9 | Get or set file attributes
2018-12-17T23:09:34.014133993Z 61 PC: 793a0 | Open file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T23:09:34.022386883Z 63 PC: 79473 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:34.032097523Z 64 PC: 79473 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:34.041450812Z 63 PC: 79473 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:34.051749778Z 64 PC: 79473 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:34.061831034Z 63 PC: 79473 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:34.070670177Z 64 PC: 79473 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:34.082046107Z 63 PC: 79473 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:34.09138062Z 64 PC: 79473 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:34.103071943Z 63 PC: 79473 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:34.113747527Z 64 PC: 79473 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:34.124133035Z 63 PC: 79473 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:34.133348976Z 64 PC: 79473 | Write file or device (Write 5694 bytes on handle 6)
2018-12-17T23:09:34.292599532Z 63 PC: 79473 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:34.295611071Z 62 PC: 793f0 | Close file
2018-12-17T23:09:34.299491424Z 65 PC: 794e9 | Delete file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T23:09:34.361638213Z 87 PC: 78410 | Get or set file date and time
2018-12-17T23:09:34.36772914Z 62 PC: 793f0 | Close file
2018-12-17T23:09:34.392955491Z 86 PC: 7952d | Rename file
2018-12-17T23:09:34.418096911Z 67 PC: 783c9 | Get or set file attributes
2018-12-17T23:09:34.44620063Z 62 PC: 793f0 | Close file
2018-12-17T23:09:34.448827126Z 67 PC: 783c9 | Get or set file attributes
2018-12-17T23:09:34.471409016Z 26 PC: 78440 | Set disk transfer address
2018-12-17T23:09:34.473167461Z 78 PC: 7844c | Find first file
2018-12-17T23:09:34.481075604Z 48 PC: 79562 | Get DOS version
2018-12-17T23:09:34.484799292Z 67 PC: 783a2 | Get or set file attributes
2018-12-17T23:09:34.492544869Z 67 PC: 783c9 | Get or set file attributes
2018-12-17T23:09:34.503209492Z 61 PC: 793a0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:34.512033206Z 60 PC: 793a0 | Create or truncate file
2018-12-17T23:09:34.52445417Z 67 PC: 783c9 | Get or set file attributes
2018-12-17T23:09:34.536472297Z 61 PC: 793a0 | Open file (Filename = '\TEST.EXE')
2018-12-17T23:09:34.544345634Z 63 PC: 79473 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:34.553714973Z 64 PC: 79473 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:34.563863406Z 63 PC: 79473 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:34.572482695Z 64 PC: 79473 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:34.582549394Z 63 PC: 79473 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:34.586287089Z 62 PC: 793f0 | Close file
2018-12-17T23:09:34.588696827Z 65 PC: 794e9 | Delete file (Filename = '\TEST.EXE')
2018-12-17T23:09:34.602541547Z 87 PC: 78410 | Get or set file date and time
2018-12-17T23:09:34.604719881Z 62 PC: 793f0 | Close file
2018-12-17T23:09:34.612829222Z 86 PC: 7952d | Rename file
2018-12-17T23:09:34.626938349Z 67 PC: 783c9 | Get or set file attributes
2018-12-17T23:09:34.638429345Z 62 PC: 793f0 | Close file
2018-12-17T23:09:34.64237483Z 67 PC: 783c9 | Get or set file attributes
2018-12-17T23:09:34.654282659Z 26 PC: 78440 | Set disk transfer address
2018-12-17T23:09:34.656159417Z 78 PC: 7844c | Find first file
2018-12-17T23:09:34.66488218Z 26 PC: 78464 | Set disk transfer address
2018-12-17T23:09:34.66696255Z 79 PC: 78469 | Find next file
2018-12-17T23:09:34.671784463Z 26 PC: 78440 | Set disk transfer address
2018-12-17T23:09:34.67328309Z 78 PC: 7844c | Find first file
2018-12-17T23:09:34.680635177Z 26 PC: 78464 | Set disk transfer address
2018-12-17T23:09:34.683303692Z 79 PC: 78469 | Find next file
2018-12-17T23:09:34.686871517Z 48 PC: 79562 | Get DOS version
2018-12-17T23:09:34.688557937Z 67 PC: 783a2 | Get or set file attributes
2018-12-17T23:09:34.701463942Z 67 PC: 783c9 | Get or set file attributes
2018-12-17T23:09:34.712357556Z 61 PC: 793a0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:34.721322224Z 87 PC: 783e3 | Get or set file date and time
2018-12-17T23:09:34.723282278Z 60 PC: 793a0 | Create or truncate file
2018-12-17T23:09:34.736208161Z 63 PC: 79473 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:34.746263018Z 63 PC: 79473 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:34.754900481Z 64 PC: 79473 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:34.766292602Z 63 PC: 79473 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:34.769152186Z 62 PC: 793f0 | Close file
2018-12-17T23:09:34.771408036Z 65 PC: 794e9 | Delete file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:34.785427934Z 87 PC: 78410 | Get or set file date and time
2018-12-17T23:09:34.787685007Z 62 PC: 793f0 | Close file
2018-12-17T23:09:34.796879036Z 48 PC: 79562 | Get DOS version
2018-12-17T23:09:34.79901502Z 86 PC: 7952d | Rename file
2018-12-17T23:09:34.811907591Z 67 PC: 783c9 | Get or set file attributes
2018-12-17T23:09:34.827099732Z 42 PC: 78307 | Get date 0x78307: xor ah, ah
0x78309: les di, ptr [bp + 6]
0x7830c: stosw word ptr es:[di], ax
0x7830d: mov al, dl
0x7830f: les di, ptr [bp + 0xa]
0x78312: stosw word ptr es:[di], ax
0x78313: mov al, dh
0x78315: les di, ptr [bp + 0xe]
0x78318: stosw word ptr es:[di], ax
0x78319: xchg ax, cx
0x7831a: les di, ptr [bp + 0x12]
0x7831d: stosw word ptr es:[di], ax
0x7831e: pop bp
0x7831f: retf 0x10
0x78322: push bp
0x78323: mov bp, sp
0x78325: mov cx, word ptr [bp + 0xa]
0x78328: mov dh, byte ptr [bp + 8]
0x7832b: mov dl, byte ptr [bp + 6]
0x7832e: mov ah, 0x2b
2018-12-17T23:09:34.830277054Z 53 PC: 7862b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:34.832705779Z 37 PC: 78634 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:34.834524006Z 53 PC: 7862b | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:34.836268023Z 37 PC: 78634 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:34.838730652Z 53 PC: 7862b | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:34.840483716Z 37 PC: 78634 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:34.842995287Z 53 PC: 7862b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:34.844655718Z 37 PC: 78634 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:34.846679782Z 53 PC: 7862b | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:34.849053913Z 37 PC: 78634 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:34.850817247Z 53 PC: 7862b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:34.85348982Z 37 PC: 78634 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:34.855139761Z 53 PC: 7862b | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:34.858164676Z 37 PC: 78634 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:34.859820628Z 53 PC: 7862b | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:34.861534349Z 37 PC: 78634 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:34.864269299Z 53 PC: 7862b | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:34.865974144Z 37 PC: 78634 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:34.868964082Z 53 PC: 7862b | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:34.870700496Z 37 PC: 78634 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:34.872413315Z 53 PC: 7862b | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:34.875529863Z 37 PC: 78634 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:34.877177159Z 53 PC: 7862b | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:34.880081897Z 37 PC: 78634 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:34.882073981Z 53 PC: 7862b | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:34.884026761Z 37 PC: 78634 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:34.886934957Z 53 PC: 7862b | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:34.888717256Z 37 PC: 78634 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:34.891122908Z 53 PC: 7862b | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:34.893107227Z 37 PC: 78634 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:34.894891661Z 53 PC: 7862b | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:34.8973384Z 37 PC: 78634 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:34.898584702Z 53 PC: 7862b | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:34.901149912Z 37 PC: 78634 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:34.902908738Z 53 PC: 7862b | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:34.904802327Z 37 PC: 78634 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:34.906948611Z 53 PC: 7862b | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:34.908349714Z 37 PC: 78634 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:34.910535222Z 48 PC: 79562 | Get DOS version
2018-12-17T23:09:34.912254102Z 41 PC: 785e2 | Parse filename
2018-12-17T23:09:34.915061889Z 41 PC: 785f0 | Parse filename
2018-12-17T23:09:34.916818841Z 75 PC: 785fb | Execute program
2018-12-17T23:09:34.936844187Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:34.95237739Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:34.954256251Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:34.956193251Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:34.958917822Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:34.960588632Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:34.970127439Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:34.973817465Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:34.97564029Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:34.977810549Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:34.979559325Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:34.982165444Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:34.983735665Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:34.98531319Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:34.98711727Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:34.988396654Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:34.990665559Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:34.993876634Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:34.995728384Z 53 PC: 8cfba | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:34.998192304Z 37 PC: 8cfcf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:34.999622853Z 37 PC: 8cfd7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:35.002207771Z 37 PC: 8cfdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:35.003660852Z 37 PC: 8cfe7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:35.005481203Z 68 PC: 8db34 | I/O control for devices (Set for = 'o�@�`�@�a��}�@�~� ø���Q�����\')
2018-12-17T23:09:35.077392193Z 37 PC: 8c9e1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:35.079438609Z 51 PC: 8c66f | Get or set Ctrl-Break
2018-12-17T23:09:35.083212982Z 26 PC: 8c720 | Set disk transfer address
2018-12-17T23:09:35.085219533Z 78 PC: 8c72c | Find first file
2018-12-17T23:09:35.093021136Z 26 PC: 8c744 | Set disk transfer address
2018-12-17T23:09:35.095920825Z 79 PC: 8c749 | Find next file
2018-12-17T23:09:35.10013172Z 26 PC: 8c744 | Set disk transfer address
2018-12-17T23:09:35.102702932Z 79 PC: 8c749 | Find next file
2018-12-17T23:09:35.10737378Z 26 PC: 8c744 | Set disk transfer address
2018-12-17T23:09:35.108915307Z 79 PC: 8c749 | Find next file
2018-12-17T23:09:35.115423048Z 26 PC: 8c744 | Set disk transfer address
2018-12-17T23:09:35.11722286Z 79 PC: 8c749 | Find next file
2018-12-17T23:09:35.122838425Z 26 PC: 8c744 | Set disk transfer address
2018-12-17T23:09:35.124545663Z 79 PC: 8c749 | Find next file
2018-12-17T23:09:35.129170084Z 48 PC: 8d842 | Get DOS version
2018-12-17T23:09:35.132603657Z 67 PC: 8c682 | Get or set file attributes
2018-12-17T23:09:35.139473168Z 67 PC: 8c6a9 | Get or set file attributes
2018-12-17T23:09:35.152146136Z 61 PC: 8d680 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:35.161072732Z 60 PC: 8d680 | Create or truncate file
2018-12-17T23:09:35.174712066Z 67 PC: 8c6a9 | Get or set file attributes
2018-12-17T23:09:35.186102874Z 61 PC: 8d680 | Open file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T23:09:35.19415675Z 63 PC: 8d753 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:35.204710665Z 64 PC: 8d753 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:35.214491828Z 63 PC: 8d753 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:35.224950935Z 64 PC: 8d753 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:35.240107851Z 63 PC: 8d753 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:35.24341698Z 64 PC: 8d753 | Write file or device (Write 334 bytes on handle 6)
2018-12-17T23:09:35.247621612Z 63 PC: 8d753 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:35.249933847Z 62 PC: 8d6d0 | Close file
2018-12-17T23:09:35.253203052Z 65 PC: 8d7c9 | Delete file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T23:09:35.265991186Z 87 PC: 8c6f0 | Get or set file date and time
2018-12-17T23:09:35.268133492Z 62 PC: 8d6d0 | Close file
2018-12-17T23:09:35.276413884Z 86 PC: 8d80d | Rename file
2018-12-17T23:09:35.289488277Z 67 PC: 8c6a9 | Get or set file attributes
2018-12-17T23:09:35.301101682Z 62 PC: 8d6d0 | Close file
2018-12-17T23:09:35.303491253Z 67 PC: 8c6a9 | Get or set file attributes
2018-12-17T23:09:35.314816728Z 26 PC: 8c720 | Set disk transfer address
2018-12-17T23:09:35.317530399Z 78 PC: 8c72c | Find first file
2018-12-17T23:09:35.324940425Z 48 PC: 8d842 | Get DOS version
2018-12-17T23:09:35.327334805Z 67 PC: 8c682 | Get or set file attributes
2018-12-17T23:09:35.33402054Z 67 PC: 8c6a9 | Get or set file attributes
2018-12-17T23:09:35.344733744Z 61 PC: 8d680 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:35.35450617Z 60 PC: 8d680 | Create or truncate file
2018-12-17T23:09:35.367661365Z 67 PC: 8c6a9 | Get or set file attributes
2018-12-17T23:09:35.37892842Z 61 PC: 8d680 | Open file (Filename = '\TEST.EXE')
2018-12-17T23:09:35.386588095Z 63 PC: 8d753 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:35.396464858Z 64 PC: 8d753 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:35.405953341Z 63 PC: 8d753 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:35.414393704Z 64 PC: 8d753 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:35.42250077Z 63 PC: 8d753 | Read file or device (Read 6702 bytes on handle 7)
2018-12-17T23:09:35.424305322Z 62 PC: 8d6d0 | Close file
2018-12-17T23:09:35.426694221Z 65 PC: 8d7c9 | Delete file (Filename = '\TEST.EXE')
2018-12-17T23:09:35.435971086Z 87 PC: 8c6f0 | Get or set file date and time
2018-12-17T23:09:35.437476124Z 62 PC: 8d6d0 | Close file
2018-12-17T23:09:35.443771426Z 86 PC: 8d80d | Rename file
2018-12-17T23:09:35.452768184Z 67 PC: 8c6a9 | Get or set file attributes
2018-12-17T23:09:35.462828392Z 62 PC: 8d6d0 | Close file
2018-12-17T23:09:35.464775822Z 67 PC: 8c6a9 | Get or set file attributes
2018-12-17T23:09:35.475617087Z 26 PC: 8c720 | Set disk transfer address
2018-12-17T23:09:35.477039941Z 78 PC: 8c72c | Find first file
2018-12-17T23:09:35.482362424Z 26 PC: 8c744 | Set disk transfer address
2018-12-17T23:09:35.484257255Z 79 PC: 8c749 | Find next file
2018-12-17T23:09:35.489715222Z 26 PC: 8c720 | Set disk transfer address
2018-12-17T23:09:35.491525434Z 78 PC: 8c72c | Find first file
2018-12-17T23:09:35.49692856Z 26 PC: 8c744 | Set disk transfer address
2018-12-17T23:09:35.49805675Z 79 PC: 8c749 | Find next file
2018-12-17T23:09:35.501283804Z 48 PC: 8d842 | Get DOS version
2018-12-17T23:09:35.503118262Z 67 PC: 8c682 | Get or set file attributes
2018-12-17T23:09:35.510914675Z 67 PC: 8c6a9 | Get or set file attributes
2018-12-17T23:09:35.522283371Z 61 PC: 8d680 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:35.530133836Z 87 PC: 8c6c3 | Get or set file date and time
2018-12-17T23:09:35.533642079Z 60 PC: 8d680 | Create or truncate file
2018-12-17T23:09:35.549324663Z 63 PC: 8d753 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:35.558862979Z 63 PC: 8d753 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:35.567856531Z 64 PC: 8d753 | Write file or device (Write 6702 bytes on handle 6)
2018-12-17T23:09:35.57801334Z 63 PC: 8d753 | Read file or device (Read 6702 bytes on handle 5)
2018-12-17T23:09:35.58196111Z 62 PC: 8d6d0 | Close file
2018-12-17T23:09:35.584463783Z 65 PC: 8d7c9 | Delete file (Filename = 'A:\TEST.EXE')
2018-12-17T23:09:35.598544326Z 87 PC: 8c6f0 | Get or set file date and time
2018-12-17T23:09:35.600997026Z 62 PC: 8d6d0 | Close file
2018-12-17T23:09:35.60869858Z 48 PC: 8d842 | Get DOS version
2018-12-17T23:09:35.610858039Z 86 PC: 8d80d | Rename file
2018-12-17T23:09:35.624409457Z 67 PC: 8c6a9 | Get or set file attributes
2018-12-17T23:09:35.636726966Z 42 PC: 8c5e7 | Get date 0x8c5e7: xor ah, ah
0x8c5e9: les di, ptr [bp + 6]
0x8c5ec: stosw word ptr es:[di], ax
0x8c5ed: mov al, dl
0x8c5ef: les di, ptr [bp + 0xa]
0x8c5f2: stosw word ptr es:[di], ax
0x8c5f3: mov al, dh
0x8c5f5: les di, ptr [bp + 0xe]
0x8c5f8: stosw word ptr es:[di], ax
0x8c5f9: xchg ax, cx
0x8c5fa: les di, ptr [bp + 0x12]
0x8c5fd: stosw word ptr es:[di], ax
0x8c5fe: pop bp
0x8c5ff: retf 0x10
0x8c602: push bp
0x8c603: mov bp, sp
0x8c605: mov cx, word ptr [bp + 0xa]
0x8c608: mov dh, byte ptr [bp + 8]
0x8c60b: mov dl, byte ptr [bp + 6]
0x8c60e: mov ah, 0x2b
2018-12-17T23:09:35.6400703Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:35.64207115Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:35.644617857Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:35.646358739Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:35.648874597Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:35.650604358Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:35.653303851Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:35.655438954Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:35.657137055Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:35.65989047Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:35.662138745Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:35.66502468Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:35.667263417Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:35.669150784Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:35.671980201Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:35.674242824Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:35.676990428Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:35.679296181Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:35.681146318Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:35.68486129Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:35.686811946Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:35.689657965Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:35.691826961Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:35.693642604Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:35.699942564Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:35.701733359Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:35.704271029Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:35.706133369Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:35.708282518Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:35.71080027Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:35.712653272Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:35.715745474Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:35.71762702Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:35.719444546Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:35.722384361Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:35.724651111Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:35.727463938Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:35.729685223Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:35.731523828Z 48 PC: 8d842 | Get DOS version
2018-12-17T23:09:35.734579861Z 41 PC: 8c8c2 | Parse filename
2018-12-17T23:09:35.736695407Z 41 PC: 8c8d0 | Parse filename
2018-12-17T23:09:35.739297568Z 75 PC: 8c8db | Execute program
2018-12-17T23:09:35.748640086Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:35.750516924Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:35.752917535Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:35.754364795Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:35.756699062Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:35.758213338Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:35.761231801Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:35.762876713Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:35.764269059Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:35.766701541Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:35.768200298Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:35.771192571Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:35.772618751Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:35.774824747Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:35.776351948Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:35.777612998Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:35.779902992Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:35.781265182Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:35.783942584Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:35.785834589Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:35.787785075Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:35.790631144Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:35.792277037Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:35.794965129Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:35.796602156Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:35.799362414Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:35.800809373Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:35.802594538Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:35.804688834Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:35.806067805Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:35.808114242Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:35.809791885Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:35.81243362Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:35.814089352Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:35.816358857Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:35.817995693Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:35.819906164Z 53 PC: 8c90b | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:35.821953171Z 37 PC: 8c914 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:35.827186857Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:35.829202355Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:35.830609429Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:35.832971038Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:35.834327217Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:35.836981094Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:35.838483568Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:35.839948902Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:35.842373108Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:35.84429484Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:35.849944628Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:35.851457151Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:35.853251573Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:35.855079318Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:35.856512982Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:35.858995568Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:35.860573774Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:35.863287765Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:35.864767266Z 37 PC: 8d111 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:35.867436592Z 76 PC: 8d150 | Terminate with return code (Return code = '0')
2018-12-17T23:09:35.870997214Z 53 PC: 7862b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:35.872525046Z 37 PC: 78634 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:35.875047867Z 53 PC: 7862b | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:35.8769121Z 37 PC: 78634 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:35.880023358Z 53 PC: 7862b | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:35.881821096Z 37 PC: 78634 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:35.884725355Z 53 PC: 7862b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:35.886113444Z 37 PC: 78634 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:35.887488147Z 53 PC: 7862b | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:35.889837983Z 37 PC: 78634 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:35.891579967Z 53 PC: 7862b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:35.89472062Z 37 PC: 78634 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:35.89629019Z 53 PC: 7862b | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:35.897983052Z 37 PC: 78634 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:35.900602905Z 53 PC: 7862b | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:35.90227095Z 37 PC: 78634 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:35.90504314Z 53 PC: 7862b | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:35.90671926Z 37 PC: 78634 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:35.909190033Z 53 PC: 7862b | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:35.910884207Z 37 PC: 78634 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:35.912403102Z 53 PC: 7862b | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:35.914842517Z 37 PC: 78634 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:35.916328009Z 53 PC: 7862b | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:35.918819682Z 37 PC: 78634 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:35.921270337Z 53 PC: 7862b | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:35.924164477Z 37 PC: 78634 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:35.925588834Z 53 PC: 7862b | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:35.927278469Z 37 PC: 78634 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:35.930084813Z 53 PC: 7862b | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:35.932054595Z 37 PC: 78634 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:35.934735133Z 53 PC: 7862b | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:35.936463221Z 37 PC: 78634 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:35.938387888Z 53 PC: 7862b | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:35.941817063Z 37 PC: 78634 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:35.943582841Z 53 PC: 7862b | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:35.946773508Z 37 PC: 78634 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:35.948460248Z 53 PC: 7862b | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:35.951082196Z 37 PC: 78634 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:35.953200647Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:35.956517251Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:35.958164456Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:35.959626303Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:35.961769541Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:35.962965569Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:35.965084862Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:35.966167718Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:35.969558921Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:35.971257403Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:35.973512551Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:35.97521963Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:35.978270393Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:35.980259342Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:35.982259701Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:35.985438705Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:35.987362852Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:35.990411892Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:35.992615433Z 37 PC: 78e31 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:35.994431075Z 76 PC: 78e70 | Terminate with return code (Return code = '0')
2018-12-17T23:09:35.999020932Z 53 PC: 6434b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:36.000841774Z 37 PC: 64354 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:36.003874985Z 53 PC: 6434b | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:36.005708851Z 37 PC: 64354 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:36.00849651Z 53 PC: 6434b | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:36.010567222Z 37 PC: 64354 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:36.01310418Z 53 PC: 6434b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:36.015374937Z 37 PC: 64354 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:36.017114968Z 53 PC: 6434b | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:36.020104196Z 37 PC: 64354 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:36.021853043Z 53 PC: 6434b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:36.025317153Z 37 PC: 64354 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:36.027798015Z 53 PC: 6434b | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:36.032713324Z 37 PC: 64354 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:36.034983029Z 53 PC: 6434b | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:36.036843486Z 37 PC: 64354 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:36.039716706Z 53 PC: 6434b | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:36.041228106Z 37 PC: 64354 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:36.04428454Z 53 PC: 6434b | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:36.046023188Z 37 PC: 64354 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:36.048920844Z 53 PC: 6434b | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:36.050657307Z 37 PC: 64354 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:36.053588206Z 53 PC: 6434b | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:36.055255219Z 37 PC: 64354 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:36.056875864Z 53 PC: 6434b | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:36.059734266Z 37 PC: 64354 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:36.061360794Z 53 PC: 6434b | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:36.064163791Z 37 PC: 64354 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:36.06614777Z 53 PC: 6434b | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:36.068866049Z 37 PC: 64354 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:36.070911112Z 53 PC: 6434b | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:36.072666311Z 37 PC: 64354 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:36.075713117Z 53 PC: 6434b | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:36.07825305Z 37 PC: 64354 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:36.080826698Z 53 PC: 6434b | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:36.082900956Z 37 PC: 64354 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:36.085598335Z 53 PC: 6434b | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:36.087556986Z 37 PC: 64354 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:36.08948488Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:36.092323294Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:36.093925255Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:36.096494403Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:36.098421525Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:36.100219695Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:36.10280336Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:36.104393919Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:36.107691657Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:36.10931078Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:36.111912721Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:36.113904023Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:36.119357733Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:36.121424898Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:36.123154959Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:36.125413944Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:36.127131552Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:36.1295777Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:36.131270231Z 37 PC: 64b51 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:36.13501037Z 76 PC: 64b90 | Terminate with return code (Return code = '0')
2018-12-17T23:09:36.138318367Z 53 PC: 5006b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:36.140606117Z 37 PC: 50074 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:36.141980079Z 53 PC: 5006b | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:36.144641561Z 37 PC: 50074 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:36.146032075Z 53 PC: 5006b | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:36.147759291Z 37 PC: 50074 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:36.149612704Z 53 PC: 5006b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:36.15138768Z 37 PC: 50074 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:36.154313098Z 53 PC: 5006b | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:36.155936479Z 37 PC: 50074 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:36.15870935Z 53 PC: 5006b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:36.160324265Z 37 PC: 50074 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:36.162936475Z 53 PC: 5006b | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:36.164916937Z 37 PC: 50074 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:36.166722731Z 53 PC: 5006b | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:36.169371218Z 37 PC: 50074 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:36.170922964Z 53 PC: 5006b | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:36.174282308Z 37 PC: 50074 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:36.175816922Z 53 PC: 5006b | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:36.17835934Z 37 PC: 50074 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:36.180291601Z 53 PC: 5006b | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:36.182951561Z 37 PC: 50074 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:36.185484682Z 53 PC: 5006b | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:36.18706933Z 37 PC: 50074 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:36.189828535Z 53 PC: 5006b | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:36.191414326Z 37 PC: 50074 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:36.193919203Z 53 PC: 5006b | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:36.195382483Z 37 PC: 50074 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:36.196873365Z 53 PC: 5006b | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:36.198853577Z 37 PC: 50074 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:36.200133512Z 53 PC: 5006b | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:36.202771691Z 37 PC: 50074 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:36.204050975Z 53 PC: 5006b | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:36.206304681Z 37 PC: 50074 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:36.207598312Z 53 PC: 5006b | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:36.209079515Z 37 PC: 50074 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:36.211020453Z 53 PC: 5006b | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:36.2123115Z 37 PC: 50074 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:36.215172436Z 37 PC: 50871 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:36.217385535Z 37 PC: 50871 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:36.220849426Z 37 PC: 50871 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:36.223452318Z 37 PC: 50871 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:36.227922048Z 37 PC: 50871 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:36.229585825Z 37 PC: 50871 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:36.232675913Z 37 PC: 50871 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:36.234336153Z 37 PC: 50871 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:36.236134954Z 37 PC: 50871 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:36.241066812Z 37 PC: 50871 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:36.242652783Z 37 PC: 50871 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:36.244914624Z 37 PC: 50871 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:36.246853909Z 37 PC: 50871 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:36.248357865Z 37 PC: 50871 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:36.251108895Z 37 PC: 50871 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:36.252616078Z 37 PC: 50871 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:36.25532508Z 37 PC: 50871 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:36.25658637Z 37 PC: 50871 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:36.258777288Z 37 PC: 50871 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:36.260031465Z 76 PC: 508b0 | Terminate with return code (Return code = '0')
2018-12-17T23:09:36.263446232Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:36.26529114Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:36.266847274Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:36.268987777Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:36.270226655Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:36.272670017Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:36.274206044Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:36.276877716Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:36.278397031Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:36.280869387Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:36.282778766Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:36.284589339Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:36.28713875Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:36.288750919Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:36.291564938Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:36.293153073Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:36.295690091Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:36.297616763Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:36.299372051Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:36.302001232Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:36.303563689Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:36.306382727Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:36.308733054Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:36.311360802Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:36.313201111Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:36.315660744Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:36.317242968Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:36.318811706Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:36.321419968Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:36.32283095Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:36.326078634Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:36.327501368Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:36.330031563Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:36.331675132Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:36.334301267Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:36.336254738Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:36.337855507Z 53 PC: 3bd8b | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:36.340718768Z 37 PC: 3bd94 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:36.342442067Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:36.344548185Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:36.34640234Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:36.348116962Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:36.350225916Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:36.351625116Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:36.35418171Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:36.355597401Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:36.358054048Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:36.359376133Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:36.361850102Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:36.363150646Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:36.365520851Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:36.367462761Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:36.368901184Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:36.371800533Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:36.373467355Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:36.376359682Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:36.378050329Z 37 PC: 3c591 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:36.38063158Z 76 PC: 3c5d0 | Terminate with return code (Return code = '0')
2018-12-17T23:09:36.384440999Z 53 PC: 27aab | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:36.386267853Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:36.388126456Z 53 PC: 27aab | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:36.389505137Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:36.391206054Z 53 PC: 27aab | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:36.392473245Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:36.394882052Z 53 PC: 27aab | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:36.396379517Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:36.399054223Z 53 PC: 27aab | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:36.400945608Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:36.403516329Z 53 PC: 27aab | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:36.405623901Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:36.407195124Z 53 PC: 27aab | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:36.410036624Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:36.411531634Z 53 PC: 27aab | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:36.414149213Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:36.415618885Z 53 PC: 27aab | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:36.418209684Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:36.419966265Z 53 PC: 27aab | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:36.421513974Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:36.42497026Z 53 PC: 27aab | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:36.426523018Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:36.429107897Z 53 PC: 27aab | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:36.430665243Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:36.43321239Z 53 PC: 27aab | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:36.434959945Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:36.436687762Z 53 PC: 27aab | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:36.443014553Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:36.444539178Z 53 PC: 27aab | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:36.447338269Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:36.448846724Z 53 PC: 27aab | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:36.451564501Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:36.453136936Z 53 PC: 27aab | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:36.455673754Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:36.457560149Z 53 PC: 27aab | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:36.459316741Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:36.461873066Z 53 PC: 27aab | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:36.463385929Z 37 PC: 27ab4 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:36.466433055Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:36.467940027Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:36.470662133Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:36.472179184Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:36.474692498Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:36.476572762Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:36.478107236Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:36.480818692Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:36.482313421Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:36.48503219Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:36.48656471Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:36.489280755Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:36.490798808Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:36.493275933Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:36.495188608Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:36.496698165Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:36.499376008Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:36.500873523Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:36.503550484Z 37 PC: 282b1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:36.505074818Z 76 PC: 282f0 | Terminate with return code (Return code = '0')
2018-12-17T23:09:36.509728545Z 53 PC: 137cb | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:36.511283817Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:36.513795688Z 53 PC: 137cb | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:36.515640465Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:36.517129354Z 53 PC: 137cb | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:36.51990999Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:36.52142636Z 53 PC: 137cb | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:36.524166259Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:36.525685564Z 53 PC: 137cb | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:36.529224796Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:36.530760673Z 53 PC: 137cb | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:36.533271822Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:36.535099357Z 53 PC: 137cb | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:36.537776818Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:36.53959224Z 53 PC: 137cb | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:36.541353531Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:36.543965329Z 53 PC: 137cb | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:36.545483382Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:36.547622402Z 53 PC: 137cb | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:36.548936933Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:36.551443484Z 53 PC: 137cb | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:36.553156223Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:36.55609177Z 53 PC: 137cb | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:36.557494786Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:36.559673671Z 53 PC: 137cb | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:36.561176977Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:36.563486748Z 53 PC: 137cb | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:36.564762455Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:36.575787446Z 53 PC: 137cb | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:36.577129848Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:36.579863276Z 53 PC: 137cb | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:36.581410674Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:36.58345211Z 53 PC: 137cb | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:36.585195727Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:36.586720192Z 53 PC: 137cb | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:36.589250257Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:36.590706224Z 53 PC: 137cb | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:36.593179502Z 37 PC: 137d4 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:36.594935883Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:09:36.597337557Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:09:36.598707231Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:09:36.600995942Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:36.602358834Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:36.604705093Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:36.606279452Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:09:36.608636131Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:09:36.609995767Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:09:36.612344401Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:09:36.613662819Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:09:36.615764578Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:09:36.61732976Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:09:36.619572695Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:09:36.621063046Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:09:36.623257501Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:09:36.62469902Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:09:36.62730082Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:09:36.62857282Z 37 PC: 13fd1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:09:36.630950649Z 76 PC: 14010 | Terminate with return code (Return code = '0')