Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Hello.10000.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:18:24.541933325Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:24.543849225Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:24.545340889Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:24.546771744Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:24.55345005Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:24.55464368Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:24.55578535Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:24.55830932Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:24.559499678Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:24.56057712Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:24.562675836Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:24.563774516Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:24.564868015Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:24.566332803Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:24.56740604Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:24.569020383Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:24.571071517Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:24.572212071Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:24.573256179Z 53 PC: 13c8a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:24.57446154Z 37 PC: 13c9f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:24.576108793Z 37 PC: 13ca7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:24.577191608Z 37 PC: 13caf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:24.57847889Z 37 PC: 13cb7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:24.579940444Z 68 PC: 14973 | I/O control for devices (Set for = '')
2018-12-17T22:18:24.619399922Z 37 PC: 136b1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:24.621560212Z 25 PC: 1452b | Get default drive
2018-12-17T22:18:24.622854784Z 71 PC: 1453e | Get current directory
2018-12-17T22:18:24.625777701Z 44 PC: 14aaa | Get time 0x14aaa: mov word ptr [0x44], cx
0x14aae: mov word ptr [0x46], dx
0x14ab2: retf
0x14ab3: call 0x14afa
0x14ab6: jb 0x14ac7
0x14ab8: mov cx, word ptr es:[di + 4]
0x14abc: cmp cx, 1
0x14abf: je 0x14ac7
0x14ac1: xor bx, bx
0x14ac3: push cs
0x14ac4: call 0x24636
0x14ac7: retf 4
0x14aca: call 0x14afa
0x14acd: jb 0x14ae2
0x14acf: mov ax, cx
0x14ad1: mov dx, bx
0x14ad3: mov cx, word ptr es:[di + 4]
0x14ad7: cmp cx, 1
0x14ada: je 0x14ae2
0x14adc: xor bx, bx
2018-12-17T22:18:24.629742427Z 26 PC: 133ad | Set disk transfer address
2018-12-17T22:18:24.63131388Z 78 PC: 133b9 | Find first file
2018-12-17T22:18:24.637975299Z 67 PC: 1330f | Get or set file attributes
2018-12-17T22:18:24.644761336Z 61 PC: 14350 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:24.651334113Z 66 PC: 14b14 | Move file pointer
2018-12-17T22:18:24.653295909Z 66 PC: 14b22 | Move file pointer
2018-12-17T22:18:24.655232349Z 66 PC: 14b30 | Move file pointer
2018-12-17T22:18:24.656865056Z 62 PC: 143a0 | Close file
2018-12-17T22:18:24.65889155Z 61 PC: 14350 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:24.665800308Z 87 PC: 13350 | Get or set file date and time
2018-12-17T22:18:24.667870721Z 62 PC: 143a0 | Close file
2018-12-17T22:18:24.669864699Z 48 PC: 1449e | Get DOS version
2018-12-17T22:18:24.671702228Z 61 PC: 14350 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:24.678439071Z 61 PC: 14350 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:24.685708028Z 61 PC: 14350 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:24.692717311Z 63 PC: 14423 | Read file or device (Read 10000 bytes on handle 7)
2018-12-17T22:18:24.700882148Z 66 PC: 14b14 | Move file pointer
2018-12-17T22:18:24.702317574Z 66 PC: 14b22 | Move file pointer
2018-12-17T22:18:24.706422573Z 66 PC: 14b30 | Move file pointer
2018-12-17T22:18:24.707850172Z 66 PC: 14482 | Move file pointer
2018-12-17T22:18:24.709242661Z 64 PC: 14423 | Write file or device (Write 10000 bytes on handle 7)
2018-12-17T22:18:24.725272215Z 66 PC: 14482 | Move file pointer
2018-12-17T22:18:24.726959112Z 63 PC: 14423 | Read file or device (Read 10000 bytes on handle 5)
2018-12-17T22:18:24.734634142Z 66 PC: 14482 | Move file pointer
2018-12-17T22:18:24.736688226Z 64 PC: 14423 | Write file or device (Write 10000 bytes on handle 7)
2018-12-17T22:18:24.745060536Z 62 PC: 143a0 | Close file
2018-12-17T22:18:24.766628232Z 61 PC: 14350 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:24.774269638Z 87 PC: 1337d | Get or set file date and time
2018-12-17T22:18:24.781878615Z 62 PC: 143a0 | Close file
2018-12-17T22:18:24.788640168Z 44 PC: 14aaa | Get time 0x14aaa: mov word ptr [0x44], cx
0x14aae: mov word ptr [0x46], dx
0x14ab2: retf
0x14ab3: call 0x14afa
0x14ab6: jb 0x14ac7
0x14ab8: mov cx, word ptr es:[di + 4]
0x14abc: cmp cx, 1
0x14abf: je 0x14ac7
0x14ac1: xor bx, bx
0x14ac3: push cs
0x14ac4: call 0x24636
0x14ac7: retf 4
0x14aca: call 0x14afa
0x14acd: jb 0x14ae2
0x14acf: mov ax, cx
0x14ad1: mov dx, bx
0x14ad3: mov cx, word ptr es:[di + 4]
0x14ad7: cmp cx, 1
0x14ada: je 0x14ae2
0x14adc: xor bx, bx
2018-12-17T22:18:24.791160099Z 14 PC: 14584 | Set default drive (Drive = 'A')
2018-12-17T22:18:24.792888049Z 25 PC: 14588 | Get default drive
2018-12-17T22:18:24.793947779Z 59 PC: 145f2 | Change current directory
2018-12-17T22:18:24.798947155Z 48 PC: 1449e | Get DOS version
2018-12-17T22:18:24.806911153Z 61 PC: 14350 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:24.813634516Z 66 PC: 14482 | Move file pointer
2018-12-17T22:18:24.815268618Z 63 PC: 14423 | Read file or device (Read 10000 bytes on handle 7)
2018-12-17T22:18:24.822828434Z 66 PC: 14b14 | Move file pointer
2018-12-17T22:18:24.8237867Z 66 PC: 14b22 | Move file pointer
2018-12-17T22:18:24.824966802Z 66 PC: 14b30 | Move file pointer
2018-12-17T22:18:24.827387485Z 66 PC: 14482 | Move file pointer
2018-12-17T22:18:24.829134541Z 63 PC: 14423 | Read file or device (Read 10000 bytes on handle 7)
2018-12-17T22:18:24.836771043Z 66 PC: 14482 | Move file pointer
2018-12-17T22:18:24.839674709Z 64 PC: 14423 | Write file or device (Write 10000 bytes on handle 7)
2018-12-17T22:18:24.848105401Z 66 PC: 14b14 | Move file pointer
2018-12-17T22:18:24.849960985Z 66 PC: 14b22 | Move file pointer
2018-12-17T22:18:24.853302168Z 66 PC: 14b30 | Move file pointer
2018-12-17T22:18:24.855260517Z 66 PC: 14482 | Move file pointer
2018-12-17T22:18:24.857142556Z 64 PC: 14381 | Write file or device (Write 0 bytes on handle 7)
2018-12-17T22:18:24.86671476Z 62 PC: 143a0 | Close file
2018-12-17T22:18:24.874273495Z 53 PC: 135dd | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:24.875870628Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:24.87951561Z 53 PC: 135dd | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:24.882033592Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:24.883787542Z 53 PC: 135dd | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:24.886514006Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:24.888097983Z 53 PC: 135dd | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:24.889698985Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:24.891891187Z 53 PC: 135dd | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:24.893415954Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:24.894882072Z 53 PC: 135dd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:24.897493782Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:24.898989187Z 53 PC: 135dd | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:24.90048946Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:24.902946014Z 53 PC: 135dd | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:24.904477267Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:24.905921279Z 53 PC: 135dd | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:24.908397112Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:24.910292988Z 53 PC: 135dd | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:24.91154763Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:24.913757922Z 53 PC: 135dd | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:24.915437034Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:24.916651401Z 53 PC: 135dd | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:24.921861966Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:24.923344394Z 53 PC: 135dd | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:24.924979584Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:24.927132351Z 53 PC: 135dd | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:24.9287718Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:24.930477673Z 53 PC: 135dd | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:24.93251005Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:24.934012774Z 53 PC: 135dd | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:24.935670307Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:24.937935714Z 53 PC: 135dd | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:24.940055259Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:24.942765772Z 53 PC: 135dd | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:24.944884919Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:24.946582895Z 53 PC: 135dd | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:24.948093312Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:24.950632373Z 48 PC: 1449e | Get DOS version
2018-12-17T22:18:24.952728176Z 41 PC: 13594 | Parse filename
2018-12-17T22:18:24.954492287Z 41 PC: 135a2 | Parse filename
2018-12-17T22:18:24.957141504Z 75 PC: 135ad | Execute program
2018-12-17T22:18:24.979197405Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:24.980471259Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:24.982545231Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:24.984013862Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:24.985552943Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:24.98739914Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:24.988495993Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:24.989558286Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:24.991508482Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:24.992818044Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:24.994086778Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:24.995927437Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:24.997062466Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:24.998440001Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:25.001151454Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:25.002302425Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:25.003297387Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:25.004946554Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:25.006095258Z 53 PC: 1c8da | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:25.007197181Z 37 PC: 1c8ef | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:25.009256966Z 37 PC: 1c8f7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:25.010269591Z 37 PC: 1c8ff | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:25.011274551Z 37 PC: 1c907 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:25.01337153Z 68 PC: 1d5c3 | I/O control for devices (Set for = '')
2018-12-17T22:18:25.091401011Z 37 PC: 1c301 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:25.092915253Z 25 PC: 1d17b | Get default drive
2018-12-17T22:18:25.094878422Z 71 PC: 1d18e | Get current directory
2018-12-17T22:18:25.09762206Z 44 PC: 1d6fa | Get time 0x1d6fa: mov word ptr [0x44], cx
0x1d6fe: mov word ptr [0x46], dx
0x1d702: retf
0x1d703: call 0x1d74a
0x1d706: jb 0x1d717
0x1d708: mov cx, word ptr es:[di + 4]
0x1d70c: cmp cx, 1
0x1d70f: je 0x1d717
0x1d711: xor bx, bx
0x1d713: push cs
0x1d714: call 0x2d286
0x1d717: retf 4
0x1d71a: call 0x1d74a
0x1d71d: jb 0x1d732
0x1d71f: mov ax, cx
0x1d721: mov dx, bx
0x1d723: mov cx, word ptr es:[di + 4]
0x1d727: cmp cx, 1
0x1d72a: je 0x1d732
0x1d72c: xor bx, bx
2018-12-17T22:18:25.100858747Z 26 PC: 1bffd | Set disk transfer address
2018-12-17T22:18:25.102189167Z 78 PC: 1c009 | Find first file
2018-12-17T22:18:25.108271964Z 67 PC: 1bf5f | Get or set file attributes
2018-12-17T22:18:25.114507033Z 61 PC: 1cfa0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:25.120950667Z 66 PC: 1d764 | Move file pointer
2018-12-17T22:18:25.122221431Z 66 PC: 1d772 | Move file pointer
2018-12-17T22:18:25.124293253Z 66 PC: 1d780 | Move file pointer
2018-12-17T22:18:25.125629442Z 62 PC: 1cff0 | Close file
2018-12-17T22:18:25.127451265Z 61 PC: 1cfa0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:25.134346199Z 87 PC: 1bfa0 | Get or set file date and time
2018-12-17T22:18:25.136285173Z 62 PC: 1cff0 | Close file
2018-12-17T22:18:25.138349321Z 48 PC: 1d0ee | Get DOS version
2018-12-17T22:18:25.140598683Z 61 PC: 1cfa0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:25.14728022Z 61 PC: 1cfa0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:25.15460823Z 61 PC: 1cfa0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:25.162130451Z 63 PC: 1d073 | Read file or device (Read 10000 bytes on handle 9)
2018-12-17T22:18:25.169430768Z 66 PC: 1d764 | Move file pointer
2018-12-17T22:18:25.170700393Z 66 PC: 1d772 | Move file pointer
2018-12-17T22:18:25.172402487Z 66 PC: 1d780 | Move file pointer
2018-12-17T22:18:25.173805393Z 66 PC: 1d0d2 | Move file pointer
2018-12-17T22:18:25.175191665Z 64 PC: 1d073 | Write file or device (Write 10000 bytes on handle 9)
2018-12-17T22:18:25.686234966Z 66 PC: 1d0d2 | Move file pointer
2018-12-17T22:18:25.687707185Z 63 PC: 1d073 | Read file or device (Read 10000 bytes on handle 7)
2018-12-17T22:18:25.741364849Z 66 PC: 1d0d2 | Move file pointer
2018-12-17T22:18:25.743361947Z 64 PC: 1d073 | Write file or device (Write 10000 bytes on handle 9)
2018-12-17T22:18:25.934854416Z 62 PC: 1cff0 | Close file
2018-12-17T22:18:25.959731343Z 61 PC: 1cfa0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:25.967673692Z 87 PC: 1bfcd | Get or set file date and time
2018-12-17T22:18:25.969612675Z 62 PC: 1cff0 | Close file
2018-12-17T22:18:25.984842786Z 44 PC: 1d6fa | Get time 0x1d6fa: mov word ptr [0x44], cx
0x1d6fe: mov word ptr [0x46], dx
0x1d702: retf
0x1d703: call 0x1d74a
0x1d706: jb 0x1d717
0x1d708: mov cx, word ptr es:[di + 4]
0x1d70c: cmp cx, 1
0x1d70f: je 0x1d717
0x1d711: xor bx, bx
0x1d713: push cs
0x1d714: call 0x2d286
0x1d717: retf 4
0x1d71a: call 0x1d74a
0x1d71d: jb 0x1d732
0x1d71f: mov ax, cx
0x1d721: mov dx, bx
0x1d723: mov cx, word ptr es:[di + 4]
0x1d727: cmp cx, 1
0x1d72a: je 0x1d732
0x1d72c: xor bx, bx
2018-12-17T22:18:25.988439065Z 14 PC: 1d1d4 | Set default drive (Drive = 'A')
2018-12-17T22:18:25.990090962Z 25 PC: 1d1d8 | Get default drive
2018-12-17T22:18:25.991786826Z 59 PC: 1d242 | Change current directory
2018-12-17T22:18:25.996803114Z 48 PC: 1d0ee | Get DOS version
2018-12-17T22:18:25.998241293Z 61 PC: 1cfa0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:26.005095466Z 66 PC: 1d0d2 | Move file pointer
2018-12-17T22:18:26.00694295Z 63 PC: 1d073 | Read file or device (Read 10000 bytes on handle 9)
2018-12-17T22:18:26.015568981Z 66 PC: 1d764 | Move file pointer
2018-12-17T22:18:26.01800609Z 66 PC: 1d772 | Move file pointer
2018-12-17T22:18:26.019964046Z 66 PC: 1d780 | Move file pointer
2018-12-17T22:18:26.021793507Z 66 PC: 1d0d2 | Move file pointer
2018-12-17T22:18:26.024241696Z 63 PC: 1d073 | Read file or device (Read 10000 bytes on handle 9)
2018-12-17T22:18:26.032527078Z 66 PC: 1d0d2 | Move file pointer
2018-12-17T22:18:26.034091718Z 64 PC: 1d073 | Write file or device (Write 10000 bytes on handle 9)
2018-12-17T22:18:26.27056972Z 66 PC: 1d764 | Move file pointer
2018-12-17T22:18:26.271633336Z 66 PC: 1d772 | Move file pointer
2018-12-17T22:18:26.272709769Z 66 PC: 1d780 | Move file pointer
2018-12-17T22:18:26.274794428Z 66 PC: 1d0d2 | Move file pointer
2018-12-17T22:18:26.276024537Z 64 PC: 1cfd1 | Write file or device (Write 0 bytes on handle 9)
2018-12-17T22:18:26.395696503Z 62 PC: 1cff0 | Close file
2018-12-17T22:18:26.404152383Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:26.405340628Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:26.40644353Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:26.408133577Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:26.409298472Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:26.410403835Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:26.412258912Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:26.413354842Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:26.4144597Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:26.416501399Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:26.417556038Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:26.418827645Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:26.420608403Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:26.421703031Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:26.422952737Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:26.424763503Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:26.425809073Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:26.427095058Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:26.429198694Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:26.430871049Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:26.434106148Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:26.435652321Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:26.437096748Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:26.43963003Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:26.441036233Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:26.442422071Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:26.44425861Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:26.44626059Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:26.447691171Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:26.450110644Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:26.451379982Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:26.452424042Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:26.454333373Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:26.455353714Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:26.4564656Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:26.458296694Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:26.459150961Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:26.460581946Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:26.462106484Z 48 PC: 1d0ee | Get DOS version
2018-12-17T22:18:26.464596454Z 41 PC: 1c1e4 | Parse filename
2018-12-17T22:18:26.467513636Z 41 PC: 1c1f2 | Parse filename
2018-12-17T22:18:26.470839029Z 75 PC: 1c1fd | Execute program
2018-12-17T22:18:26.481820719Z 53 PC: 2552a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:26.482686166Z 53 PC: 2552a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:26.484195711Z 53 PC: 2552a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:26.485074268Z 53 PC: 2552a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:26.485980185Z 53 PC: 2552a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:26.487141948Z 53 PC: 2552a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:26.487931143Z 53 PC: 2552a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:26.48928917Z 53 PC: 2552a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:26.490463842Z 53 PC: 2552a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:26.49135041Z 53 PC: 2552a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:26.492824155Z 53 PC: 2552a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:26.493871932Z 53 PC: 2552a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:26.494843618Z 53 PC: 2552a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:26.496301057Z 53 PC: 2552a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:26.49721919Z 53 PC: 2552a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:26.498078264Z 53 PC: 2552a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:26.499643436Z 53 PC: 2552a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:26.501224326Z 53 PC: 2552a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:26.502331628Z 53 PC: 2552a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:26.50418358Z 37 PC: 2553f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:26.505516265Z 37 PC: 25547 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:26.506801854Z 37 PC: 2554f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:26.509030573Z 37 PC: 25557 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:26.510476482Z 68 PC: 26213 | I/O control for devices (Set for = '')
2018-12-17T22:18:26.61507166Z 37 PC: 24f51 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:26.617468353Z 25 PC: 25dcb | Get default drive
2018-12-17T22:18:26.618573937Z 71 PC: 25dde | Get current directory
2018-12-17T22:18:26.622419291Z 44 PC: 2634a | Get time 0x2634a: mov word ptr [0x44], cx
0x2634e: mov word ptr [0x46], dx
0x26352: retf
0x26353: call 0x2639a
0x26356: jb 0x26367
0x26358: mov cx, word ptr es:[di + 4]
0x2635c: cmp cx, 1
0x2635f: je 0x26367
0x26361: xor bx, bx
0x26363: push cs
0x26364: call 0x35ed6
0x26367: retf 4
0x2636a: call 0x2639a
0x2636d: jb 0x26382
0x2636f: mov ax, cx
0x26371: mov dx, bx
0x26373: mov cx, word ptr es:[di + 4]
0x26377: cmp cx, 1
0x2637a: je 0x26382
0x2637c: xor bx, bx
2018-12-17T22:18:26.625416061Z 26 PC: 24c4d | Set disk transfer address
2018-12-17T22:18:26.626514478Z 78 PC: 24c59 | Find first file
2018-12-17T22:18:26.6334706Z 67 PC: 24baf | Get or set file attributes
2018-12-17T22:18:26.639392061Z 61 PC: 25bf0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:26.646604502Z 66 PC: 263b4 | Move file pointer
2018-12-17T22:18:26.649215353Z 66 PC: 263c2 | Move file pointer
2018-12-17T22:18:26.651071115Z 66 PC: 263d0 | Move file pointer
2018-12-17T22:18:26.652793791Z 62 PC: 25c40 | Close file
2018-12-17T22:18:26.655514017Z 61 PC: 25bf0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:26.663478454Z 87 PC: 24bf0 | Get or set file date and time
2018-12-17T22:18:26.665268716Z 62 PC: 25c40 | Close file
2018-12-17T22:18:26.66786519Z 48 PC: 25d3e | Get DOS version
2018-12-17T22:18:26.669463101Z 61 PC: 25bf0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:26.676331432Z 61 PC: 25bf0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:26.684617633Z 61 PC: 25bf0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:26.691873796Z 63 PC: 25cc3 | Read file or device (Read 10000 bytes on handle 11)
2018-12-17T22:18:26.699981531Z 66 PC: 263b4 | Move file pointer
2018-12-17T22:18:26.702017603Z 66 PC: 263c2 | Move file pointer
2018-12-17T22:18:26.703872152Z 66 PC: 263d0 | Move file pointer
2018-12-17T22:18:26.706733759Z 66 PC: 25d22 | Move file pointer
2018-12-17T22:18:26.708206147Z 64 PC: 25cc3 | Write file or device (Write 10000 bytes on handle 11)
2018-12-17T22:18:26.717743796Z 66 PC: 25d22 | Move file pointer
2018-12-17T22:18:26.720944476Z 63 PC: 25cc3 | Read file or device (Read 10000 bytes on handle 9)
2018-12-17T22:18:26.729490179Z 66 PC: 25d22 | Move file pointer
2018-12-17T22:18:26.731130401Z 64 PC: 25cc3 | Write file or device (Write 10000 bytes on handle 11)
2018-12-17T22:18:26.740610342Z 62 PC: 25c40 | Close file
2018-12-17T22:18:26.748913302Z 61 PC: 25bf0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:26.756499055Z 87 PC: 24c1d | Get or set file date and time
2018-12-17T22:18:26.759202911Z 62 PC: 25c40 | Close file
2018-12-17T22:18:26.766689683Z 44 PC: 2634a | Get time 0x2634a: mov word ptr [0x44], cx
0x2634e: mov word ptr [0x46], dx
0x26352: retf
0x26353: call 0x2639a
0x26356: jb 0x26367
0x26358: mov cx, word ptr es:[di + 4]
0x2635c: cmp cx, 1
0x2635f: je 0x26367
0x26361: xor bx, bx
0x26363: push cs
0x26364: call 0x35ed6
0x26367: retf 4
0x2636a: call 0x2639a
0x2636d: jb 0x26382
0x2636f: mov ax, cx
0x26371: mov dx, bx
0x26373: mov cx, word ptr es:[di + 4]
0x26377: cmp cx, 1
0x2637a: je 0x26382
0x2637c: xor bx, bx
2018-12-17T22:18:26.769358529Z 14 PC: 25e24 | Set default drive (Drive = 'A')
2018-12-17T22:18:26.771307838Z 25 PC: 25e28 | Get default drive
2018-12-17T22:18:26.77251019Z 59 PC: 25e92 | Change current directory
2018-12-17T22:18:26.777030651Z 48 PC: 25d3e | Get DOS version
2018-12-17T22:18:26.778801838Z 61 PC: 25bf0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:26.785669309Z 66 PC: 25d22 | Move file pointer
2018-12-17T22:18:26.788087112Z 63 PC: 25cc3 | Read file or device (Read 10000 bytes on handle 11)
2018-12-17T22:18:26.795696057Z 66 PC: 263b4 | Move file pointer
2018-12-17T22:18:26.797309563Z 66 PC: 263c2 | Move file pointer
2018-12-17T22:18:26.799351032Z 66 PC: 263d0 | Move file pointer
2018-12-17T22:18:26.801039567Z 66 PC: 25d22 | Move file pointer
2018-12-17T22:18:26.802774168Z 63 PC: 25cc3 | Read file or device (Read 10000 bytes on handle 11)
2018-12-17T22:18:26.811681059Z 66 PC: 25d22 | Move file pointer
2018-12-17T22:18:26.813374938Z 64 PC: 25cc3 | Write file or device (Write 10000 bytes on handle 11)
2018-12-17T22:18:26.82315966Z 66 PC: 263b4 | Move file pointer
2018-12-17T22:18:26.824804512Z 66 PC: 263c2 | Move file pointer
2018-12-17T22:18:26.826958249Z 66 PC: 263d0 | Move file pointer
2018-12-17T22:18:26.82901654Z 66 PC: 25d22 | Move file pointer
2018-12-17T22:18:26.830984177Z 64 PC: 25c21 | Write file or device (Write 0 bytes on handle 11)
2018-12-17T22:18:26.839131467Z 62 PC: 25c40 | Close file
2018-12-17T22:18:26.847875563Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:26.849715254Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:26.851157754Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:26.853056118Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:26.854398377Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:26.855676459Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:26.857579694Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:26.858897279Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:26.860877557Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:26.862380051Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:26.863613768Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:26.865714605Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:26.866825984Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:26.867899444Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:26.870133372Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:26.871263431Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:26.872577339Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:26.875150199Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:26.876543006Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:26.877934695Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:26.879826599Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:26.881220402Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:26.882573525Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:26.884624705Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:26.885944788Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:26.887503383Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:26.888931377Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:26.890159962Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:26.892309318Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:26.894137665Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:26.895450496Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:26.897878385Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:26.899166876Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:26.900366164Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:26.902145553Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:26.904171505Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:26.906630372Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:26.908116129Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:26.912659615Z 48 PC: 25d3e | Get DOS version
2018-12-17T22:18:26.914343031Z 41 PC: 24e34 | Parse filename
2018-12-17T22:18:26.915725117Z 41 PC: 24e42 | Parse filename
2018-12-17T22:18:26.917915825Z 75 PC: 24e4d | Execute program
2018-12-17T22:18:26.934879112Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:26.936318859Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:26.938851998Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:26.940455946Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:26.942844613Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:26.944342826Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:26.945532913Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:26.9474864Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:26.948452556Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:26.949392568Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:26.950849764Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:26.951791409Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:26.952695889Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:26.954423107Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:26.955315727Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:26.956691072Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:26.957694191Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:26.958574901Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:26.959989176Z 53 PC: 2e17a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:26.96087498Z 37 PC: 2e18f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:26.961718796Z 37 PC: 2e197 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:26.963240222Z 37 PC: 2e19f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:26.964430167Z 37 PC: 2e1a7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:26.965548482Z 68 PC: 2ee63 | I/O control for devices (Set for = '')
2018-12-17T22:18:27.033516638Z 37 PC: 2dba1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:27.034996111Z 25 PC: 2ea1b | Get default drive
2018-12-17T22:18:27.037511542Z 71 PC: 2ea2e | Get current directory
2018-12-17T22:18:27.040336104Z 44 PC: 2ef9a | Get time 0x2ef9a: mov word ptr [0x44], cx
0x2ef9e: mov word ptr [0x46], dx
0x2efa2: retf
0x2efa3: call 0x2efea
0x2efa6: jb 0x2efb7
0x2efa8: mov cx, word ptr es:[di + 4]
0x2efac: cmp cx, 1
0x2efaf: je 0x2efb7
0x2efb1: xor bx, bx
0x2efb3: push cs
0x2efb4: call 0x3eb26
0x2efb7: retf 4
0x2efba: call 0x2efea
0x2efbd: jb 0x2efd2
0x2efbf: mov ax, cx
0x2efc1: mov dx, bx
0x2efc3: mov cx, word ptr es:[di + 4]
0x2efc7: cmp cx, 1
0x2efca: je 0x2efd2
0x2efcc: xor bx, bx
2018-12-17T22:18:27.042999909Z 26 PC: 2d89d | Set disk transfer address
2018-12-17T22:18:27.044633742Z 78 PC: 2d8a9 | Find first file
2018-12-17T22:18:27.051483913Z 67 PC: 2d7ff | Get or set file attributes
2018-12-17T22:18:27.058023621Z 61 PC: 2e840 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:27.065042407Z 66 PC: 2f004 | Move file pointer
2018-12-17T22:18:27.066536091Z 66 PC: 2f012 | Move file pointer
2018-12-17T22:18:27.067979378Z 66 PC: 2f020 | Move file pointer
2018-12-17T22:18:27.070373764Z 62 PC: 2e890 | Close file
2018-12-17T22:18:27.072208604Z 61 PC: 2e840 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:27.078721914Z 87 PC: 2d840 | Get or set file date and time
2018-12-17T22:18:27.080845492Z 62 PC: 2e890 | Close file
2018-12-17T22:18:27.0826757Z 48 PC: 2e98e | Get DOS version
2018-12-17T22:18:27.084839226Z 61 PC: 2e840 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:27.089382719Z 61 PC: 2e840 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:27.093786447Z 61 PC: 2e840 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:27.098573789Z 63 PC: 2e913 | Read file or device (Read 10000 bytes on handle 13)
2018-12-17T22:18:27.103942204Z 66 PC: 2f004 | Move file pointer
2018-12-17T22:18:27.105169338Z 66 PC: 2f012 | Move file pointer
2018-12-17T22:18:27.106490437Z 66 PC: 2f020 | Move file pointer
2018-12-17T22:18:27.107433138Z 66 PC: 2e972 | Move file pointer
2018-12-17T22:18:27.108830964Z 64 PC: 2e913 | Write file or device (Write 10000 bytes on handle 13)
2018-12-17T22:18:27.11561105Z 66 PC: 2e972 | Move file pointer
2018-12-17T22:18:27.116846252Z 63 PC: 2e913 | Read file or device (Read 10000 bytes on handle 11)
2018-12-17T22:18:27.123637305Z 66 PC: 2e972 | Move file pointer
2018-12-17T22:18:27.124870078Z 64 PC: 2e913 | Write file or device (Write 10000 bytes on handle 13)
2018-12-17T22:18:27.132764399Z 62 PC: 2e890 | Close file
2018-12-17T22:18:27.140718172Z 61 PC: 2e840 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:27.147431281Z 87 PC: 2d86d | Get or set file date and time
2018-12-17T22:18:27.149691461Z 62 PC: 2e890 | Close file
2018-12-17T22:18:27.1562067Z 44 PC: 2ef9a | Get time 0x2ef9a: mov word ptr [0x44], cx
0x2ef9e: mov word ptr [0x46], dx
0x2efa2: retf
0x2efa3: call 0x2efea
0x2efa6: jb 0x2efb7
0x2efa8: mov cx, word ptr es:[di + 4]
0x2efac: cmp cx, 1
0x2efaf: je 0x2efb7
0x2efb1: xor bx, bx
0x2efb3: push cs
0x2efb4: call 0x3eb26
0x2efb7: retf 4
0x2efba: call 0x2efea
0x2efbd: jb 0x2efd2
0x2efbf: mov ax, cx
0x2efc1: mov dx, bx
0x2efc3: mov cx, word ptr es:[di + 4]
0x2efc7: cmp cx, 1
0x2efca: je 0x2efd2
0x2efcc: xor bx, bx
2018-12-17T22:18:27.158024308Z 14 PC: 2ea74 | Set default drive (Drive = 'A')
2018-12-17T22:18:27.159500734Z 25 PC: 2ea78 | Get default drive
2018-12-17T22:18:27.160665312Z 59 PC: 2eae2 | Change current directory
2018-12-17T22:18:27.165379832Z 48 PC: 2e98e | Get DOS version
2018-12-17T22:18:27.166809573Z 61 PC: 2e840 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:27.177835338Z 66 PC: 2e972 | Move file pointer
2018-12-17T22:18:27.180742412Z 63 PC: 2e913 | Read file or device (Read 10000 bytes on handle 13)
2018-12-17T22:18:27.188885679Z 66 PC: 2f004 | Move file pointer
2018-12-17T22:18:27.190289878Z 66 PC: 2f012 | Move file pointer
2018-12-17T22:18:27.192121335Z 66 PC: 2f020 | Move file pointer
2018-12-17T22:18:27.193437237Z 66 PC: 2e972 | Move file pointer
2018-12-17T22:18:27.196252889Z 63 PC: 2e913 | Read file or device (Read 10000 bytes on handle 13)
2018-12-17T22:18:27.205523987Z 66 PC: 2e972 | Move file pointer
2018-12-17T22:18:27.207016411Z 64 PC: 2e913 | Write file or device (Write 10000 bytes on handle 13)
2018-12-17T22:18:27.216320761Z 66 PC: 2f004 | Move file pointer
2018-12-17T22:18:27.217678844Z 66 PC: 2f012 | Move file pointer
2018-12-17T22:18:27.219019622Z 66 PC: 2f020 | Move file pointer
2018-12-17T22:18:27.221692421Z 66 PC: 2e972 | Move file pointer
2018-12-17T22:18:27.22299799Z 64 PC: 2e871 | Write file or device (Write 0 bytes on handle 13)
2018-12-17T22:18:27.231415666Z 62 PC: 2e890 | Close file
2018-12-17T22:18:27.239033015Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:27.240240343Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:27.24202781Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:27.24319157Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:27.244322771Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:27.246005945Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:27.247311149Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:27.249021305Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:27.251132051Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:27.253650749Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:27.255666865Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:27.256756831Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:27.258292586Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:27.260039236Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:27.261291681Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:27.262921344Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:27.264247402Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:27.265243527Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:27.266729039Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:27.268066015Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:27.269338883Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:27.271650464Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:27.273157082Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:27.275224323Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:27.27633497Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:27.277475072Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:27.279689976Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:27.281976684Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:27.283021431Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:27.286251094Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:27.287258099Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:27.288436479Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:27.290557974Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:27.291538536Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:27.293308644Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:27.294612962Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:27.296277504Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:27.298432105Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:27.299547288Z 48 PC: 2e98e | Get DOS version
2018-12-17T22:18:27.30116918Z 41 PC: 2da84 | Parse filename
2018-12-17T22:18:27.303161145Z 41 PC: 2da92 | Parse filename
2018-12-17T22:18:27.304398428Z 75 PC: 2da9d | Execute program
2018-12-17T22:18:27.327853999Z 53 PC: 36dca | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:27.334314613Z 53 PC: 36dca | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:27.337181294Z 53 PC: 36dca | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:27.34037641Z 53 PC: 36dca | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:27.342128108Z 53 PC: 36dca | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:27.343974748Z 53 PC: 36dca | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:27.346552765Z 53 PC: 36dca | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:27.348290161Z 53 PC: 36dca | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:27.350396585Z 53 PC: 36dca | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:27.352223307Z 53 PC: 36dca | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:27.353764206Z 53 PC: 36dca | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:27.356141314Z 53 PC: 36dca | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:27.357872255Z 53 PC: 36dca | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:27.359312289Z 53 PC: 36dca | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:27.361525154Z 53 PC: 36dca | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:27.362866978Z 53 PC: 36dca | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:27.364431761Z 53 PC: 36dca | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:27.366399712Z 53 PC: 36dca | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:27.367617011Z 53 PC: 36dca | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:27.369911793Z 37 PC: 36ddf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:27.371081521Z 37 PC: 36de7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:27.372175161Z 37 PC: 36def | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:27.374731483Z 37 PC: 36df7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:27.376439844Z 68 PC: 37ab3 | I/O control for devices (Set for = '')
2018-12-17T22:18:27.493031407Z 37 PC: 367f1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:27.495839907Z 25 PC: 3766b | Get default drive
2018-12-17T22:18:27.496885085Z 71 PC: 3767e | Get current directory
2018-12-17T22:18:27.500903884Z 44 PC: 37bea | Get time 0x37bea: mov word ptr [0x44], cx
0x37bee: mov word ptr [0x46], dx
0x37bf2: retf
0x37bf3: call 0x37c3a
0x37bf6: jb 0x37c07
0x37bf8: mov cx, word ptr es:[di + 4]
0x37bfc: cmp cx, 1
0x37bff: je 0x37c07
0x37c01: xor bx, bx
0x37c03: push cs
0x37c04: call 0x47776
0x37c07: retf 4
0x37c0a: call 0x37c3a
0x37c0d: jb 0x37c22
0x37c0f: mov ax, cx
0x37c11: mov dx, bx
0x37c13: mov cx, word ptr es:[di + 4]
0x37c17: cmp cx, 1
0x37c1a: je 0x37c22
0x37c1c: xor bx, bx
2018-12-17T22:18:27.504159796Z 26 PC: 364ed | Set disk transfer address
2018-12-17T22:18:27.505606059Z 78 PC: 364f9 | Find first file
2018-12-17T22:18:27.51306584Z 67 PC: 3644f | Get or set file attributes
2018-12-17T22:18:27.520011225Z 61 PC: 37490 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:27.52872882Z 66 PC: 37c54 | Move file pointer
2018-12-17T22:18:27.530732166Z 66 PC: 37c62 | Move file pointer
2018-12-17T22:18:27.532723699Z 66 PC: 37c70 | Move file pointer
2018-12-17T22:18:27.535436471Z 62 PC: 374e0 | Close file
2018-12-17T22:18:27.537544319Z 61 PC: 37490 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:27.544719497Z 87 PC: 36490 | Get or set file date and time
2018-12-17T22:18:27.54714778Z 62 PC: 374e0 | Close file
2018-12-17T22:18:27.549612113Z 48 PC: 375de | Get DOS version
2018-12-17T22:18:27.552512623Z 61 PC: 37490 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:27.560041802Z 61 PC: 37490 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:27.567842809Z 61 PC: 37490 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:27.57583338Z 63 PC: 37563 | Read file or device (Read 10000 bytes on handle 15)
2018-12-17T22:18:27.584059219Z 66 PC: 37c54 | Move file pointer
2018-12-17T22:18:27.585769395Z 66 PC: 37c62 | Move file pointer
2018-12-17T22:18:27.588647449Z 66 PC: 37c70 | Move file pointer
2018-12-17T22:18:27.590434388Z 66 PC: 375c2 | Move file pointer
2018-12-17T22:18:27.593086107Z 64 PC: 37563 | Write file or device (Write 10000 bytes on handle 15)
2018-12-17T22:18:27.603345919Z 66 PC: 375c2 | Move file pointer
2018-12-17T22:18:27.605150853Z 63 PC: 37563 | Read file or device (Read 10000 bytes on handle 13)
2018-12-17T22:18:27.614014731Z 66 PC: 375c2 | Move file pointer
2018-12-17T22:18:27.616229107Z 64 PC: 37563 | Write file or device (Write 10000 bytes on handle 15)
2018-12-17T22:18:27.624706629Z 62 PC: 374e0 | Close file
2018-12-17T22:18:27.63415078Z 61 PC: 37490 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:27.645152275Z 87 PC: 364bd | Get or set file date and time
2018-12-17T22:18:27.647078076Z 62 PC: 374e0 | Close file
2018-12-17T22:18:27.654331536Z 44 PC: 37bea | Get time 0x37bea: mov word ptr [0x44], cx
0x37bee: mov word ptr [0x46], dx
0x37bf2: retf
0x37bf3: call 0x37c3a
0x37bf6: jb 0x37c07
0x37bf8: mov cx, word ptr es:[di + 4]
0x37bfc: cmp cx, 1
0x37bff: je 0x37c07
0x37c01: xor bx, bx
0x37c03: push cs
0x37c04: call 0x47776
0x37c07: retf 4
0x37c0a: call 0x37c3a
0x37c0d: jb 0x37c22
0x37c0f: mov ax, cx
0x37c11: mov dx, bx
0x37c13: mov cx, word ptr es:[di + 4]
0x37c17: cmp cx, 1
0x37c1a: je 0x37c22
0x37c1c: xor bx, bx
2018-12-17T22:18:27.656936116Z 14 PC: 376c4 | Set default drive (Drive = 'A')
2018-12-17T22:18:27.659310244Z 25 PC: 376c8 | Get default drive
2018-12-17T22:18:27.660833533Z 59 PC: 37732 | Change current directory
2018-12-17T22:18:27.665121269Z 48 PC: 375de | Get DOS version
2018-12-17T22:18:27.667081708Z 61 PC: 37490 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:27.674000201Z 66 PC: 375c2 | Move file pointer
2018-12-17T22:18:27.675735176Z 63 PC: 37563 | Read file or device (Read 10000 bytes on handle 15)
2018-12-17T22:18:27.683629053Z 66 PC: 37c54 | Move file pointer
2018-12-17T22:18:27.685193341Z 66 PC: 37c62 | Move file pointer
2018-12-17T22:18:27.687485637Z 66 PC: 37c70 | Move file pointer
2018-12-17T22:18:27.689512899Z 66 PC: 375c2 | Move file pointer
2018-12-17T22:18:27.692603707Z 63 PC: 37563 | Read file or device (Read 10000 bytes on handle 15)
2018-12-17T22:18:27.701033879Z 66 PC: 375c2 | Move file pointer
2018-12-17T22:18:27.702698847Z 64 PC: 37563 | Write file or device (Write 10000 bytes on handle 15)
2018-12-17T22:18:27.711550541Z 66 PC: 37c54 | Move file pointer
2018-12-17T22:18:27.713155273Z 66 PC: 37c62 | Move file pointer
2018-12-17T22:18:27.714589206Z 66 PC: 37c70 | Move file pointer
2018-12-17T22:18:27.716763474Z 66 PC: 375c2 | Move file pointer
2018-12-17T22:18:27.718363712Z 64 PC: 374c1 | Write file or device (Write 0 bytes on handle 15)
2018-12-17T22:18:27.727407519Z 62 PC: 374e0 | Close file
2018-12-17T22:18:27.734664962Z 53 PC: 3671d | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:27.73598813Z 37 PC: 36726 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:27.737606765Z 53 PC: 3671d | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:27.738954007Z 37 PC: 36726 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:27.740909884Z 53 PC: 3671d | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:27.742482236Z 37 PC: 36726 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:27.743918205Z 53 PC: 3671d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:27.746541323Z 37 PC: 36726 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:27.748001409Z 53 PC: 3671d | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:27.750196137Z 37 PC: 36726 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:27.754345005Z 53 PC: 3671d | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:27.766065639Z 37 PC: 36726 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:27.767877014Z 53 PC: 3671d | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:27.769019079Z 37 PC: 36726 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:27.770786809Z 53 PC: 3671d | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:27.772737585Z 37 PC: 36726 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:27.774221966Z 53 PC: 3671d | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:27.775959973Z 37 PC: 36726 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:27.777290223Z 53 PC: 3671d | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:27.778726537Z 37 PC: 36726 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:27.780448745Z 53 PC: 3671d | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:27.781829963Z 37 PC: 36726 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:27.784333601Z 53 PC: 3671d | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:27.785774125Z 37 PC: 36726 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:27.787162163Z 53 PC: 3671d | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:27.789764979Z 37 PC: 36726 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:27.791148421Z 53 PC: 3671d | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:27.793702165Z 37 PC: 36726 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:27.79512731Z 53 PC: 3671d | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:27.796551409Z 37 PC: 36726 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:27.799034453Z 53 PC: 3671d | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:27.800472367Z 37 PC: 36726 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:27.801861482Z 53 PC: 3671d | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:27.804401272Z 37 PC: 36726 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:27.805791605Z 53 PC: 3671d | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:27.808306133Z 37 PC: 36726 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:27.809724816Z 53 PC: 3671d | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:27.811131118Z 37 PC: 36726 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:27.81366941Z 48 PC: 375de | Get DOS version
2018-12-17T22:18:27.815630832Z 41 PC: 366d4 | Parse filename
2018-12-17T22:18:27.817474098Z 41 PC: 366e2 | Parse filename
2018-12-17T22:18:27.820075866Z 75 PC: 366ed | Execute program
2018-12-17T22:18:27.836836294Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:27.839271704Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:27.84110162Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:27.842543623Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:27.845176192Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:27.8466707Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:27.849036067Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:27.850829503Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:27.852562097Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:27.862502417Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:27.864324637Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:27.865778689Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:27.868366074Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:27.869799953Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:27.87214448Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:27.873912043Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:27.875353211Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:27.878010098Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:27.879442224Z 53 PC: 3fa1a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:27.8811147Z 37 PC: 3fa2f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:27.88344982Z 37 PC: 3fa37 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:27.884806895Z 37 PC: 3fa3f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:27.887090073Z 37 PC: 3fa47 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:27.889183455Z 68 PC: 40703 | I/O control for devices (Set for = '')
2018-12-17T22:18:27.989631986Z 37 PC: 3f441 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:27.99199828Z 25 PC: 402bb | Get default drive
2018-12-17T22:18:27.993399609Z 71 PC: 402ce | Get current directory
2018-12-17T22:18:27.997508998Z 44 PC: 4083a | Get time 0x4083a: mov word ptr [0x44], cx
0x4083e: mov word ptr [0x46], dx
0x40842: retf
0x40843: call 0x4088a
0x40846: jb 0x40857
0x40848: mov cx, word ptr es:[di + 4]
0x4084c: cmp cx, 1
0x4084f: je 0x40857
0x40851: xor bx, bx
0x40853: push cs
0x40854: call 0x503c6
0x40857: retf 4
0x4085a: call 0x4088a
0x4085d: jb 0x40872
0x4085f: mov ax, cx
0x40861: mov dx, bx
0x40863: mov cx, word ptr es:[di + 4]
0x40867: cmp cx, 1
0x4086a: je 0x40872
0x4086c: xor bx, bx
2018-12-17T22:18:28.000713019Z 26 PC: 3f13d | Set disk transfer address
2018-12-17T22:18:28.002091198Z 78 PC: 3f149 | Find first file
2018-12-17T22:18:28.009496365Z 67 PC: 3f09f | Get or set file attributes
2018-12-17T22:18:28.015492072Z 61 PC: 400e0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:28.023206709Z 66 PC: 408a4 | Move file pointer
2018-12-17T22:18:28.02498234Z 66 PC: 408b2 | Move file pointer
2018-12-17T22:18:28.026672036Z 66 PC: 408c0 | Move file pointer
2018-12-17T22:18:28.029011667Z 62 PC: 40130 | Close file
2018-12-17T22:18:28.03100093Z 61 PC: 400e0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:28.038553473Z 87 PC: 3f0e0 | Get or set file date and time
2018-12-17T22:18:28.040513632Z 62 PC: 40130 | Close file
2018-12-17T22:18:28.042672442Z 48 PC: 4022e | Get DOS version
2018-12-17T22:18:28.044980677Z 61 PC: 400e0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:28.051778615Z 61 PC: 400e0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:28.059890428Z 61 PC: 400e0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:28.066565064Z 63 PC: 401b3 | Read file or device (Read 10000 bytes on handle 17)
2018-12-17T22:18:28.074385353Z 66 PC: 408a4 | Move file pointer
2018-12-17T22:18:28.076557829Z 66 PC: 408b2 | Move file pointer
2018-12-17T22:18:28.078129654Z 66 PC: 408c0 | Move file pointer
2018-12-17T22:18:28.080695325Z 66 PC: 40212 | Move file pointer
2018-12-17T22:18:28.082619627Z 64 PC: 401b3 | Write file or device (Write 10000 bytes on handle 17)
2018-12-17T22:18:28.09249576Z 66 PC: 40212 | Move file pointer
2018-12-17T22:18:28.095307281Z 63 PC: 401b3 | Read file or device (Read 10000 bytes on handle 15)
2018-12-17T22:18:28.10336042Z 66 PC: 40212 | Move file pointer
2018-12-17T22:18:28.105977461Z 64 PC: 401b3 | Write file or device (Write 10000 bytes on handle 17)
2018-12-17T22:18:28.114678817Z 62 PC: 40130 | Close file
2018-12-17T22:18:28.123508571Z 61 PC: 400e0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:28.131264776Z 87 PC: 3f10d | Get or set file date and time
2018-12-17T22:18:28.132901106Z 62 PC: 40130 | Close file
2018-12-17T22:18:28.141116319Z 44 PC: 4083a | Get time 0x4083a: mov word ptr [0x44], cx
0x4083e: mov word ptr [0x46], dx
0x40842: retf
0x40843: call 0x4088a
0x40846: jb 0x40857
0x40848: mov cx, word ptr es:[di + 4]
0x4084c: cmp cx, 1
0x4084f: je 0x40857
0x40851: xor bx, bx
0x40853: push cs
0x40854: call 0x503c6
0x40857: retf 4
0x4085a: call 0x4088a
0x4085d: jb 0x40872
0x4085f: mov ax, cx
0x40861: mov dx, bx
0x40863: mov cx, word ptr es:[di + 4]
0x40867: cmp cx, 1
0x4086a: je 0x40872
0x4086c: xor bx, bx
2018-12-17T22:18:28.143924062Z 14 PC: 40314 | Set default drive (Drive = 'A')
2018-12-17T22:18:28.145502934Z 25 PC: 40318 | Get default drive
2018-12-17T22:18:28.147428414Z 59 PC: 40382 | Change current directory
2018-12-17T22:18:28.151646689Z 48 PC: 4022e | Get DOS version
2018-12-17T22:18:28.154483844Z 61 PC: 400e0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:28.161312028Z 66 PC: 40212 | Move file pointer
2018-12-17T22:18:28.163436748Z 63 PC: 401b3 | Read file or device (Read 10000 bytes on handle 17)
2018-12-17T22:18:28.173099544Z 66 PC: 408a4 | Move file pointer
2018-12-17T22:18:28.174672039Z 66 PC: 408b2 | Move file pointer
2018-12-17T22:18:28.177613466Z 66 PC: 408c0 | Move file pointer
2018-12-17T22:18:28.179299336Z 66 PC: 40212 | Move file pointer
2018-12-17T22:18:28.18088223Z 63 PC: 401b3 | Read file or device (Read 10000 bytes on handle 17)
2018-12-17T22:18:28.189943722Z 66 PC: 40212 | Move file pointer
2018-12-17T22:18:28.191607198Z 64 PC: 401b3 | Write file or device (Write 10000 bytes on handle 17)
2018-12-17T22:18:28.203066404Z 66 PC: 408a4 | Move file pointer
2018-12-17T22:18:28.204657932Z 66 PC: 408b2 | Move file pointer
2018-12-17T22:18:28.206455761Z 66 PC: 408c0 | Move file pointer
2018-12-17T22:18:28.208474811Z 66 PC: 40212 | Move file pointer
2018-12-17T22:18:28.210272227Z 64 PC: 40111 | Write file or device (Write 0 bytes on handle 17)
2018-12-17T22:18:28.218825184Z 62 PC: 40130 | Close file
2018-12-17T22:18:28.226124399Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:28.228142283Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:28.229393294Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:28.230715851Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:28.23243041Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:28.233668296Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:28.235969606Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:28.237310038Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:28.238890323Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:28.241221411Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:28.242564731Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:28.24493702Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:28.246385242Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:28.248346146Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:28.249990489Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:28.2514229Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:28.253680454Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:28.255138738Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:28.257406449Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:28.258835737Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:28.260239097Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:28.262269934Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:28.263680269Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:28.266895985Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:28.268026352Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:28.2694403Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:28.271529364Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:28.273008387Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:28.275443304Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:28.277177722Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:28.278504975Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:28.280818834Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:28.28213427Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:28.284038695Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:28.285245064Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:28.286802803Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:28.28834256Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:28.289673436Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:28.292052451Z 48 PC: 4022e | Get DOS version
2018-12-17T22:18:28.294560708Z 41 PC: 3f324 | Parse filename
2018-12-17T22:18:28.296774384Z 41 PC: 3f332 | Parse filename
2018-12-17T22:18:28.298414976Z 75 PC: 3f33d | Execute program
2018-12-17T22:18:28.314476019Z 53 PC: 4866a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:28.316534569Z 53 PC: 4866a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:28.317819237Z 53 PC: 4866a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:28.31978475Z 53 PC: 4866a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:28.320982437Z 53 PC: 4866a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:28.322070856Z 53 PC: 4866a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:28.324125134Z 53 PC: 4866a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:28.325702432Z 53 PC: 4866a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:28.327641559Z 53 PC: 4866a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:28.329028996Z 53 PC: 4866a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:28.33088567Z 53 PC: 4866a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:28.332669318Z 53 PC: 4866a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:28.334129216Z 53 PC: 4866a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:28.336556531Z 53 PC: 4866a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:28.337939682Z 53 PC: 4866a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:28.340239933Z 53 PC: 4866a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:28.341921924Z 53 PC: 4866a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:28.343382097Z 53 PC: 4866a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:28.3456178Z 53 PC: 4866a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:28.34710289Z 37 PC: 4867f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:28.348778003Z 37 PC: 48687 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:28.350576302Z 37 PC: 4868f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:28.352713695Z 37 PC: 48697 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:28.354724436Z 68 PC: 49353 | I/O control for devices (Set for = '')
2018-12-17T22:18:28.433148026Z 37 PC: 48091 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:28.435680241Z 25 PC: 48f0b | Get default drive
2018-12-17T22:18:28.436997957Z 71 PC: 48f1e | Get current directory
2018-12-17T22:18:28.441473609Z 44 PC: 4948a | Get time 0x4948a: mov word ptr [0x44], cx
0x4948e: mov word ptr [0x46], dx
0x49492: retf
0x49493: call 0x494da
0x49496: jb 0x494a7
0x49498: mov cx, word ptr es:[di + 4]
0x4949c: cmp cx, 1
0x4949f: je 0x494a7
0x494a1: xor bx, bx
0x494a3: push cs
0x494a4: call 0x59016
0x494a7: retf 4
0x494aa: call 0x494da
0x494ad: jb 0x494c2
0x494af: mov ax, cx
0x494b1: mov dx, bx
0x494b3: mov cx, word ptr es:[di + 4]
0x494b7: cmp cx, 1
0x494ba: je 0x494c2
0x494bc: xor bx, bx
2018-12-17T22:18:28.444567643Z 26 PC: 47d8d | Set disk transfer address
2018-12-17T22:18:28.445791702Z 78 PC: 47d99 | Find first file
2018-12-17T22:18:28.452833458Z 67 PC: 47cef | Get or set file attributes
2018-12-17T22:18:28.458527304Z 61 PC: 48d30 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:28.465818747Z 66 PC: 494f4 | Move file pointer
2018-12-17T22:18:28.467177048Z 66 PC: 49502 | Move file pointer
2018-12-17T22:18:28.468521359Z 66 PC: 49510 | Move file pointer
2018-12-17T22:18:28.471106348Z 62 PC: 48d80 | Close file
2018-12-17T22:18:28.472885889Z 61 PC: 48d30 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:28.480298242Z 87 PC: 47d30 | Get or set file date and time
2018-12-17T22:18:28.481936447Z 62 PC: 48d80 | Close file
2018-12-17T22:18:28.483693906Z 48 PC: 48e7e | Get DOS version
2018-12-17T22:18:28.486196439Z 61 PC: 48d30 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:28.493271466Z 61 PC: 48d30 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:28.50099252Z 61 PC: 48d30 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:28.50825743Z 63 PC: 48e03 | Read file or device (Read 10000 bytes on handle 19)
2018-12-17T22:18:28.515755455Z 66 PC: 494f4 | Move file pointer
2018-12-17T22:18:28.518026335Z 66 PC: 49502 | Move file pointer
2018-12-17T22:18:28.519400258Z 66 PC: 49510 | Move file pointer
2018-12-17T22:18:28.522329499Z 66 PC: 48e62 | Move file pointer
2018-12-17T22:18:28.523769602Z 64 PC: 48e03 | Write file or device (Write 10000 bytes on handle 19)
2018-12-17T22:18:28.535750599Z 66 PC: 48e62 | Move file pointer
2018-12-17T22:18:28.537482065Z 63 PC: 48e03 | Read file or device (Read 10000 bytes on handle 17)
2018-12-17T22:18:28.545206521Z 66 PC: 48e62 | Move file pointer
2018-12-17T22:18:28.5478529Z 64 PC: 48e03 | Write file or device (Write 10000 bytes on handle 19)
2018-12-17T22:18:28.556108253Z 62 PC: 48d80 | Close file
2018-12-17T22:18:28.565602752Z 61 PC: 48d30 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:28.573503196Z 87 PC: 47d5d | Get or set file date and time
2018-12-17T22:18:28.575510519Z 62 PC: 48d80 | Close file
2018-12-17T22:18:28.583130134Z 44 PC: 4948a | Get time 0x4948a: mov word ptr [0x44], cx
0x4948e: mov word ptr [0x46], dx
0x49492: retf
0x49493: call 0x494da
0x49496: jb 0x494a7
0x49498: mov cx, word ptr es:[di + 4]
0x4949c: cmp cx, 1
0x4949f: je 0x494a7
0x494a1: xor bx, bx
0x494a3: push cs
0x494a4: call 0x59016
0x494a7: retf 4
0x494aa: call 0x494da
0x494ad: jb 0x494c2
0x494af: mov ax, cx
0x494b1: mov dx, bx
0x494b3: mov cx, word ptr es:[di + 4]
0x494b7: cmp cx, 1
0x494ba: je 0x494c2
0x494bc: xor bx, bx
2018-12-17T22:18:28.585970554Z 14 PC: 48f64 | Set default drive (Drive = 'A')
2018-12-17T22:18:28.588584871Z 25 PC: 48f68 | Get default drive
2018-12-17T22:18:28.59032401Z 59 PC: 48fd2 | Change current directory
2018-12-17T22:18:28.594738932Z 48 PC: 48e7e | Get DOS version
2018-12-17T22:18:28.596890798Z 61 PC: 48d30 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:28.603756587Z 66 PC: 48e62 | Move file pointer
2018-12-17T22:18:28.606381027Z 63 PC: 48e03 | Read file or device (Read 10000 bytes on handle 19)
2018-12-17T22:18:28.614218501Z 66 PC: 494f4 | Move file pointer
2018-12-17T22:18:28.616901125Z 66 PC: 49502 | Move file pointer
2018-12-17T22:18:28.618356673Z 66 PC: 49510 | Move file pointer
2018-12-17T22:18:28.619877368Z 66 PC: 48e62 | Move file pointer
2018-12-17T22:18:28.622550463Z 63 PC: 48e03 | Read file or device (Read 10000 bytes on handle 19)
2018-12-17T22:18:28.630243533Z 66 PC: 48e62 | Move file pointer
2018-12-17T22:18:28.632520079Z 64 PC: 48e03 | Write file or device (Write 10000 bytes on handle 19)
2018-12-17T22:18:28.640886313Z 66 PC: 494f4 | Move file pointer
2018-12-17T22:18:28.649452256Z 66 PC: 49502 | Move file pointer
2018-12-17T22:18:28.659881977Z 66 PC: 49510 | Move file pointer
2018-12-17T22:18:28.661345001Z 66 PC: 48e62 | Move file pointer
2018-12-17T22:18:28.663100444Z 64 PC: 48d61 | Write file or device (Write 0 bytes on handle 19)
2018-12-17T22:18:28.672203169Z 62 PC: 48d80 | Close file
2018-12-17T22:18:28.680326317Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:28.682327528Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:28.683774237Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:28.686091713Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:28.687492584Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:28.689883163Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:28.691243464Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:28.692636784Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:28.694659542Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:28.696016663Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:28.698125396Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:28.699593134Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:28.701385703Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:28.702733579Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:28.704147087Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:28.706873006Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:28.708316167Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:28.71072719Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:28.712520298Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:28.713967008Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:28.716554434Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:28.718003801Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:28.720244077Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:28.722229804Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:28.723490892Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:28.726133071Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:28.728183442Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:28.730444021Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:28.733547631Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:28.734863817Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:28.736574371Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:28.737669648Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:28.740229087Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:28.742249668Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:28.7449124Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:28.747076689Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:28.748410241Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:28.750348959Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:28.752836495Z 48 PC: 48e7e | Get DOS version
2018-12-17T22:18:28.755791939Z 41 PC: 47f74 | Parse filename
2018-12-17T22:18:28.75787712Z 41 PC: 47f82 | Parse filename
2018-12-17T22:18:28.760651502Z 75 PC: 47f8d | Execute program
2018-12-17T22:18:28.776615468Z 53 PC: 512ba | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:28.778005704Z 53 PC: 512ba | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:28.780584146Z 53 PC: 512ba | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:28.781940437Z 53 PC: 512ba | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:28.784197248Z 53 PC: 512ba | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:28.785928357Z 53 PC: 512ba | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:28.787487843Z 53 PC: 512ba | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:28.789352929Z 53 PC: 512ba | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:28.790772842Z 53 PC: 512ba | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:28.793045197Z 53 PC: 512ba | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:28.794431027Z 53 PC: 512ba | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:28.79647955Z 53 PC: 512ba | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:28.797667964Z 53 PC: 512ba | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:28.799221664Z 53 PC: 512ba | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:28.801782744Z 53 PC: 512ba | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:28.803211973Z 53 PC: 512ba | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:28.80574072Z 53 PC: 512ba | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:28.807210299Z 53 PC: 512ba | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:28.80880437Z 53 PC: 512ba | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:28.810891505Z 37 PC: 512cf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:28.8122096Z 37 PC: 512d7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:28.814194352Z 37 PC: 512df | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:28.815551258Z 37 PC: 512e7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:28.817979869Z 68 PC: 51fa3 | I/O control for devices (Set for = '')
2018-12-17T22:18:28.895230497Z 37 PC: 50ce1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:28.897862174Z 25 PC: 51b5b | Get default drive
2018-12-17T22:18:28.89924698Z 71 PC: 51b6e | Get current directory
2018-12-17T22:18:28.902423062Z 44 PC: 520da | Get time 0x520da: mov word ptr [0x44], cx
0x520de: mov word ptr [0x46], dx
0x520e2: retf
0x520e3: call 0x5212a
0x520e6: jb 0x520f7
0x520e8: mov cx, word ptr es:[di + 4]
0x520ec: cmp cx, 1
0x520ef: je 0x520f7
0x520f1: xor bx, bx
0x520f3: push cs
0x520f4: call 0x61c66
0x520f7: retf 4
0x520fa: call 0x5212a
0x520fd: jb 0x52112
0x520ff: mov ax, cx
0x52101: mov dx, bx
0x52103: mov cx, word ptr es:[di + 4]
0x52107: cmp cx, 1
0x5210a: je 0x52112
0x5210c: xor bx, bx
2018-12-17T22:18:28.906461364Z 26 PC: 509dd | Set disk transfer address
2018-12-17T22:18:28.907742038Z 78 PC: 509e9 | Find first file
2018-12-17T22:18:28.914744467Z 67 PC: 5093f | Get or set file attributes
2018-12-17T22:18:28.921167844Z 61 PC: 51980 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:28.928515753Z 66 PC: 52144 | Move file pointer
2018-12-17T22:18:28.931283456Z 66 PC: 52152 | Move file pointer
2018-12-17T22:18:28.932997348Z 66 PC: 52160 | Move file pointer
2018-12-17T22:18:28.935628917Z 62 PC: 519d0 | Close file
2018-12-17T22:18:28.937532911Z 61 PC: 51980 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:28.945102142Z 87 PC: 50980 | Get or set file date and time
2018-12-17T22:18:28.946991602Z 62 PC: 519d0 | Close file
2018-12-17T22:18:28.949230465Z 48 PC: 51ace | Get DOS version
2018-12-17T22:18:28.951470741Z 61 PC: 51980 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:28.958471433Z 61 PC: 51980 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:18:28.962974855Z 37 PC: 51411 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:28.964404273Z 37 PC: 51411 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:28.966674312Z 37 PC: 51411 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:28.968083579Z 37 PC: 51411 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:28.96942214Z 37 PC: 51411 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:28.971456735Z 37 PC: 51411 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:28.972685631Z 37 PC: 51411 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:28.97516657Z 37 PC: 51411 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:28.976452103Z 37 PC: 51411 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:28.978655663Z 37 PC: 51411 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:28.979851221Z 37 PC: 51411 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:28.981014859Z 37 PC: 51411 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:28.983493409Z 37 PC: 51411 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:28.984708121Z 37 PC: 51411 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:28.987114791Z 37 PC: 51411 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:28.988344384Z 37 PC: 51411 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:28.991140542Z 37 PC: 51411 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:28.992396643Z 37 PC: 51411 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:28.993638188Z 37 PC: 51411 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:28.9959873Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:28.998249214Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.00215844Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.004485375Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.006880257Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.01026794Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.012511076Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.015904473Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.018734618Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.022758264Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.025347153Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.027406069Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.030305153Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.032434329Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.035867108Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.038104571Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.041808763Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.044303969Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.046909632Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.049782323Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.051852065Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.055281727Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.05791538Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.061387821Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.063621028Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.065883794Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.06946003Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.07149265Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.075177823Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.077274502Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.081136082Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.08349817Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.085713938Z 6 PC: 51498 | Direct console I/O
2018-12-17T22:18:29.090440857Z 76 PC: 51450 | Terminate with return code (Return code = '4')
2018-12-17T22:18:29.093568219Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.096135735Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.097302955Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.099390168Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.100510214Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.101627392Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.103475106Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.104575076Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.106887512Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.107993598Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.110639142Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.111742072Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.112797703Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.115214142Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.116353647Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.11867981Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.119766691Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.121042101Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.124320384Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.127904512Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.13023913Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.131652785Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.134315587Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.136047224Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.137618414Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.139689563Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.140844423Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.143172604Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.144583275Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.146443548Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.147742844Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.14986418Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.151127178Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.152410296Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.154474544Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.15577995Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.158848274Z 53 PC: 47fbd | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.160164468Z 37 PC: 47fc6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.162787454Z 61 PC: 48d30 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:29.169895225Z 66 PC: 494f4 | Move file pointer
2018-12-17T22:18:29.171805843Z 66 PC: 49502 | Move file pointer
2018-12-17T22:18:29.184812814Z 66 PC: 49510 | Move file pointer
2018-12-17T22:18:29.187605295Z 66 PC: 48e62 | Move file pointer
2018-12-17T22:18:29.190298759Z 64 PC: 48e03 | Write file or device (Write 10000 bytes on handle 19)
2018-12-17T22:18:29.199979549Z 66 PC: 48e62 | Move file pointer
2018-12-17T22:18:29.20278848Z 64 PC: 48e03 | Write file or device (Write 10000 bytes on handle 19)
2018-12-17T22:18:29.211570479Z 62 PC: 48d80 | Close file
2018-12-17T22:18:29.220437322Z 61 PC: 48d30 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:29.228279958Z 87 PC: 47d5d | Get or set file date and time
2018-12-17T22:18:29.230295784Z 62 PC: 48d80 | Close file
2018-12-17T22:18:29.238438675Z 53 PC: 47e6a | Get interrupt vector (Interrupt = '214' AKA 'UNKNOWN!')
2018-12-17T22:18:29.240185524Z 53 PC: 47e6a | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:18:29.24253207Z 37 PC: 47e86 | Set interrupt vector (Interrupt = '214' AKA 'UNKNOWN!')
2018-12-17T22:18:29.244035129Z 37 PC: 47e86 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:18:29.246615553Z 49 PC: 47f0f | Terminate and stay resident (Return code = '0' | Memory size = '2239')
2018-12-17T22:18:29.248912231Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.250412494Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.25261343Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.253870907Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.256002997Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.257516948Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.260429441Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.261776135Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.263313454Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.265327067Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.266616332Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.269910697Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.271199468Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.277580923Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.278831027Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.280260004Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.282079557Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.283530084Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.285273934Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.286588855Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.288793722Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.290309846Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.293407138Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.294805271Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.297087604Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.298491186Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.300396625Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.310562023Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.312890679Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.315192186Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.316449745Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.318451117Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.319678036Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.321986506Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.323322344Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.325447535Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.326636748Z 53 PC: 3f36d | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.328719582Z 37 PC: 3f376 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.329996836Z 61 PC: 400e0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:29.336928023Z 66 PC: 408a4 | Move file pointer
2018-12-17T22:18:29.338425414Z 66 PC: 408b2 | Move file pointer
2018-12-17T22:18:29.33980093Z 66 PC: 408c0 | Move file pointer
2018-12-17T22:18:29.341904749Z 66 PC: 40212 | Move file pointer
2018-12-17T22:18:29.343838978Z 64 PC: 401b3 | Write file or device (Write 10000 bytes on handle 17)
2018-12-17T22:18:29.353971698Z 66 PC: 40212 | Move file pointer
2018-12-17T22:18:29.355531327Z 64 PC: 401b3 | Write file or device (Write 10000 bytes on handle 17)
2018-12-17T22:18:29.365159972Z 62 PC: 40130 | Close file
2018-12-17T22:18:29.373899714Z 61 PC: 400e0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:29.382427Z 87 PC: 3f10d | Get or set file date and time
2018-12-17T22:18:29.384405439Z 62 PC: 40130 | Close file
2018-12-17T22:18:29.391570405Z 53 PC: 3f21a | Get interrupt vector (Interrupt = '214' AKA 'UNKNOWN!')
2018-12-17T22:18:29.393645311Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.395010693Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.39713046Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.398418545Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.400904537Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.402216255Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.404555794Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.405917029Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.408158773Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.409985241Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.411575015Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.41398193Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.415321848Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.417835214Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.419183761Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.421472689Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.423141626Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.424667999Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.427422497Z 37 PC: 3fb71 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.428767654Z 76 PC: 3fbb0 | Terminate with return code (Return code = '0')
2018-12-17T22:18:29.433119532Z 53 PC: 3671d | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.434523929Z 37 PC: 36726 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.436841709Z 53 PC: 3671d | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.43858262Z 37 PC: 36726 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.440129935Z 53 PC: 3671d | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.442493745Z 37 PC: 36726 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.443788757Z 53 PC: 3671d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.446340364Z 37 PC: 36726 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.447697854Z 53 PC: 3671d | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.450023972Z 37 PC: 36726 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.45124021Z 53 PC: 3671d | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.452529575Z 37 PC: 36726 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.454627007Z 53 PC: 3671d | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.455700817Z 37 PC: 36726 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.457881809Z 53 PC: 3671d | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.458977539Z 37 PC: 36726 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.460969428Z 53 PC: 3671d | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.462070804Z 37 PC: 36726 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.463840348Z 53 PC: 3671d | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.465508283Z 37 PC: 36726 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.466640293Z 53 PC: 3671d | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.468907634Z 37 PC: 36726 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.470004006Z 53 PC: 3671d | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.471906189Z 37 PC: 36726 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.473030746Z 53 PC: 3671d | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.478055143Z 37 PC: 36726 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.479123358Z 53 PC: 3671d | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.481350907Z 37 PC: 36726 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.482408093Z 53 PC: 3671d | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.4841307Z 37 PC: 36726 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.485427954Z 53 PC: 3671d | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.487317601Z 37 PC: 36726 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.488599531Z 53 PC: 3671d | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.490951411Z 37 PC: 36726 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.491907382Z 53 PC: 3671d | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.492878306Z 37 PC: 36726 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.494730079Z 53 PC: 3671d | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.495682886Z 37 PC: 36726 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.497477247Z 61 PC: 37490 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:29.504166575Z 66 PC: 37c54 | Move file pointer
2018-12-17T22:18:29.506156516Z 66 PC: 37c62 | Move file pointer
2018-12-17T22:18:29.507766436Z 66 PC: 37c70 | Move file pointer
2018-12-17T22:18:29.510558182Z 66 PC: 375c2 | Move file pointer
2018-12-17T22:18:29.51200809Z 64 PC: 37563 | Write file or device (Write 10000 bytes on handle 15)
2018-12-17T22:18:29.522005772Z 66 PC: 375c2 | Move file pointer
2018-12-17T22:18:29.523522433Z 64 PC: 37563 | Write file or device (Write 10000 bytes on handle 15)
2018-12-17T22:18:29.533302703Z 62 PC: 374e0 | Close file
2018-12-17T22:18:29.541317207Z 61 PC: 37490 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:29.548278211Z 87 PC: 364bd | Get or set file date and time
2018-12-17T22:18:29.549461878Z 62 PC: 374e0 | Close file
2018-12-17T22:18:29.557121445Z 53 PC: 365ca | Get interrupt vector (Interrupt = '214' AKA 'UNKNOWN!')
2018-12-17T22:18:29.558434864Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.559854344Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.56084464Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.562707677Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.56380415Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.565414916Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.566433723Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.56805983Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.569114699Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.57036025Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.571910501Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.57291365Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.574460203Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.575463895Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.577269102Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.578271547Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.579931678Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.580951893Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.5823246Z 37 PC: 36f21 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.583500928Z 76 PC: 36f60 | Terminate with return code (Return code = '0')
2018-12-17T22:18:29.587300854Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.588658493Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.596420591Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.59745035Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.59884867Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.599726078Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.601206895Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.602167832Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.603793806Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.604802511Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.606405079Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.607378387Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.609272049Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.610266533Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.611653665Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.612673083Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.614355072Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.615427491Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.616873381Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.61789443Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.619410762Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.620364468Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.622050116Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.623032291Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.624744927Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.62597315Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.627861772Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.628865481Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.63859931Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.639649716Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.641172337Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.64227517Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.643924301Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.64507837Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.646750068Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.647770934Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.649417029Z 53 PC: 2dacd | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.650352737Z 37 PC: 2dad6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.65184285Z 61 PC: 2e840 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:29.658227719Z 66 PC: 2f004 | Move file pointer
2018-12-17T22:18:29.659983889Z 66 PC: 2f012 | Move file pointer
2018-12-17T22:18:29.662184863Z 66 PC: 2f020 | Move file pointer
2018-12-17T22:18:29.664053058Z 66 PC: 2e972 | Move file pointer
2018-12-17T22:18:29.665505267Z 64 PC: 2e913 | Write file or device (Write 10000 bytes on handle 13)
2018-12-17T22:18:29.676037169Z 66 PC: 2e972 | Move file pointer
2018-12-17T22:18:29.677486956Z 64 PC: 2e913 | Write file or device (Write 10000 bytes on handle 13)
2018-12-17T22:18:29.686229701Z 62 PC: 2e890 | Close file
2018-12-17T22:18:29.694332678Z 61 PC: 2e840 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:29.701162367Z 87 PC: 2d86d | Get or set file date and time
2018-12-17T22:18:29.703166916Z 62 PC: 2e890 | Close file
2018-12-17T22:18:29.71084091Z 53 PC: 2d97a | Get interrupt vector (Interrupt = '214' AKA 'UNKNOWN!')
2018-12-17T22:18:29.712435183Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.714652846Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.715725976Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.717704142Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.719380268Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.72093007Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.722296371Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.723558827Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.725089281Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.72638009Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.729097725Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.7302303Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.732142648Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.733280143Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.735016222Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.736253651Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.738338611Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.739459514Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.741161725Z 37 PC: 2e2d1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.743103644Z 76 PC: 2e310 | Terminate with return code (Return code = '0')
2018-12-17T22:18:29.746663244Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.747947474Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.750370235Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.751640823Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.75405613Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.755333455Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.757809373Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.759239746Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.761776545Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.763179022Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.7653766Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.766602647Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.768292378Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.769789081Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.771078772Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.773553361Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.77482267Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.777290541Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.778565075Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.780406158Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.781560444Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.783346802Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.784559173Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.786526665Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.787485774Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.789224238Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.790075497Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.791872218Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.793074761Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.794128016Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.795544553Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.79695543Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.799008801Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.800400653Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.802237015Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.803507082Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.805533442Z 53 PC: 24e7d | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.806637966Z 37 PC: 24e86 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.809086431Z 61 PC: 25bf0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:29.816075443Z 66 PC: 263b4 | Move file pointer
2018-12-17T22:18:29.818332915Z 66 PC: 263c2 | Move file pointer
2018-12-17T22:18:29.819886424Z 66 PC: 263d0 | Move file pointer
2018-12-17T22:18:29.822629245Z 66 PC: 25d22 | Move file pointer
2018-12-17T22:18:29.824120482Z 64 PC: 25cc3 | Write file or device (Write 10000 bytes on handle 11)
2018-12-17T22:18:29.834002849Z 66 PC: 25d22 | Move file pointer
2018-12-17T22:18:29.835887046Z 64 PC: 25cc3 | Write file or device (Write 10000 bytes on handle 11)
2018-12-17T22:18:29.854677486Z 62 PC: 25c40 | Close file
2018-12-17T22:18:29.863291389Z 61 PC: 25bf0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:29.871970587Z 87 PC: 24c1d | Get or set file date and time
2018-12-17T22:18:29.873882512Z 62 PC: 25c40 | Close file
2018-12-17T22:18:29.882827259Z 53 PC: 24d2a | Get interrupt vector (Interrupt = '214' AKA 'UNKNOWN!')
2018-12-17T22:18:29.884418265Z 37 PC: 25681 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.886034335Z 37 PC: 25681 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.887511407Z 37 PC: 25681 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.890079242Z 37 PC: 25681 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.894041356Z 37 PC: 25681 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.895265998Z 37 PC: 25681 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.897139546Z 37 PC: 25681 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.898183483Z 37 PC: 25681 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.900162073Z 37 PC: 25681 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.901405419Z 37 PC: 25681 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.903484001Z 37 PC: 25681 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.904826629Z 37 PC: 25681 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.907371112Z 37 PC: 25681 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.909110974Z 37 PC: 25681 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.911472292Z 37 PC: 25681 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.912972331Z 37 PC: 25681 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.914313206Z 37 PC: 25681 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.916535486Z 37 PC: 25681 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.917784335Z 37 PC: 25681 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.919920847Z 76 PC: 256c0 | Terminate with return code (Return code = '0')
2018-12-17T22:18:29.923696141Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.92603587Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:29.927257697Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.929680737Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:29.930913414Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.933205578Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:29.934480997Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.937045856Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:29.938505948Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.941077069Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:29.942529557Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.945261173Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:29.946727782Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.951105317Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:29.952343358Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.955187017Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:29.95628014Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.960904224Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:29.961983381Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.964470926Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:29.96553247Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.967996321Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:29.969295368Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.971706047Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:29.972980528Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.975318269Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:29.976755454Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.978541756Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:29.980473627Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.98258914Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:29.983938599Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.986156556Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:29.987649806Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.989419849Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:29.991826654Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.993252908Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:29.995834989Z 53 PC: 1c22d | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.996953909Z 37 PC: 1c236 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:29.999600357Z 61 PC: 1cfa0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:30.006100835Z 66 PC: 1d764 | Move file pointer
2018-12-17T22:18:30.007611419Z 66 PC: 1d772 | Move file pointer
2018-12-17T22:18:30.00906924Z 66 PC: 1d780 | Move file pointer
2018-12-17T22:18:30.011362157Z 66 PC: 1d0d2 | Move file pointer
2018-12-17T22:18:30.012940118Z 64 PC: 1d073 | Write file or device (Write 10000 bytes on handle 9)
2018-12-17T22:18:30.023725059Z 66 PC: 1d0d2 | Move file pointer
2018-12-17T22:18:30.026405815Z 64 PC: 1d073 | Write file or device (Write 10000 bytes on handle 9)
2018-12-17T22:18:30.035908821Z 62 PC: 1cff0 | Close file
2018-12-17T22:18:30.044749615Z 61 PC: 1cfa0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:30.052823057Z 87 PC: 1bfcd | Get or set file date and time
2018-12-17T22:18:30.055001593Z 62 PC: 1cff0 | Close file
2018-12-17T22:18:30.063100501Z 53 PC: 1c0da | Get interrupt vector (Interrupt = '214' AKA 'UNKNOWN!')
2018-12-17T22:18:30.065087307Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:30.067425832Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:30.069635012Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:30.070970472Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:30.073278921Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:30.074960397Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:30.076465956Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:30.083398819Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:30.084803996Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:30.086860487Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:30.089393087Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:30.090875697Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:30.093226636Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:30.094968818Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:30.096343274Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:30.09845142Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:30.099641504Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:30.1015082Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:30.102557278Z 37 PC: 1ca31 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:30.104437475Z 76 PC: 1ca70 | Terminate with return code (Return code = '0')
2018-12-17T22:18:30.108179776Z 53 PC: 135dd | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:30.109903582Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:30.111404281Z 53 PC: 135dd | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:30.115088891Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:30.116421656Z 53 PC: 135dd | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:30.118156655Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:30.119447213Z 53 PC: 135dd | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:30.121303964Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:30.123117803Z 53 PC: 135dd | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:30.125207332Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:30.127346081Z 53 PC: 135dd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:30.129603567Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:30.13209878Z 53 PC: 135dd | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:30.133268092Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:30.135983679Z 53 PC: 135dd | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:30.137851628Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:30.140340982Z 53 PC: 135dd | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:30.141575225Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:30.14325807Z 53 PC: 135dd | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:30.144714201Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:30.146033572Z 53 PC: 135dd | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:30.148137865Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:30.149436432Z 53 PC: 135dd | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:30.152103015Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:30.153443543Z 53 PC: 135dd | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:30.156120811Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:30.158603831Z 53 PC: 135dd | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:30.160374583Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:30.162083422Z 53 PC: 135dd | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:30.164362019Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:30.166316268Z 53 PC: 135dd | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:30.169182257Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:30.171601252Z 53 PC: 135dd | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:30.172898907Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:30.17449544Z 53 PC: 135dd | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:30.177023134Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:30.179752465Z 53 PC: 135dd | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:30.181199849Z 37 PC: 135e6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:30.182764858Z 61 PC: 14350 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:30.190335492Z 66 PC: 14b14 | Move file pointer
2018-12-17T22:18:30.192294436Z 66 PC: 14b22 | Move file pointer
2018-12-17T22:18:30.194389213Z 66 PC: 14b30 | Move file pointer
2018-12-17T22:18:30.19680455Z 66 PC: 14482 | Move file pointer
2018-12-17T22:18:30.198780847Z 64 PC: 14423 | Write file or device (Write 10000 bytes on handle 7)
2018-12-17T22:18:30.208043935Z 66 PC: 14482 | Move file pointer
2018-12-17T22:18:30.210771741Z 64 PC: 14423 | Write file or device (Write 10000 bytes on handle 7)
2018-12-17T22:18:30.218920021Z 62 PC: 143a0 | Close file
2018-12-17T22:18:30.228180199Z 61 PC: 14350 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:30.235753412Z 87 PC: 1337d | Get or set file date and time
2018-12-17T22:18:30.238046905Z 62 PC: 143a0 | Close file
2018-12-17T22:18:30.245100072Z 53 PC: 1348a | Get interrupt vector (Interrupt = '214' AKA 'UNKNOWN!')
2018-12-17T22:18:30.248085524Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:30.249584714Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:30.260949433Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:30.262632647Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:30.265422712Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:30.266507012Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:30.268785137Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:30.270227953Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:30.272860368Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:30.274554908Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:30.277240913Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:30.278509894Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:30.281284796Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:30.282514488Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:30.284823002Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:30.286018704Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:30.288649825Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:30.290042299Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:30.293218417Z 37 PC: 13de1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:30.295807252Z 76 PC: 13e20 | Terminate with return code (Return code = '0')