Sample viewer

vx.netlux.org/Virus.DOS.HLLC.Globe.8001.d

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:21:49.640038696Z 53 PC: 136fa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:49.641668137Z 53 PC: 136fa | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:49.644474909Z 53 PC: 136fa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:49.645738662Z 53 PC: 136fa | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:49.647259675Z 53 PC: 136fa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:49.648312952Z 53 PC: 136fa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:49.649467677Z 53 PC: 136fa | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:49.651016517Z 53 PC: 136fa | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:49.651985942Z 53 PC: 136fa | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:49.652965275Z 53 PC: 136fa | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:49.654445727Z 53 PC: 136fa | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:49.655386164Z 53 PC: 136fa | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:49.656309875Z 53 PC: 136fa | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:49.65786682Z 53 PC: 136fa | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:49.658843615Z 53 PC: 136fa | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:49.659800468Z 53 PC: 136fa | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:49.661336682Z 53 PC: 136fa | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:49.66281966Z 53 PC: 136fa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:49.663733298Z 53 PC: 136fa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:49.664640324Z 37 PC: 1370f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:49.666019489Z 37 PC: 13717 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:49.666890644Z 37 PC: 1371f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:49.667753634Z 37 PC: 13727 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:49.66998328Z 68 PC: 14279 | I/O control for devices (Set for = '')
2018-12-17T22:21:49.743051459Z 37 PC: 12f21 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:49.744491512Z 44 PC: 14b84 | Get time 0x14b84: mov word ptr [0x3e], cx
0x14b88: mov word ptr [0x40], dx
0x14b8c: retf
0x14b8d: mov di, 0x52
0x14b90: push ds
0x14b91: pop es
0x14b92: mov cx, 0x25aa
0x14b95: sub cx, di
0x14b97: shr cx, 1
0x14b99: xor ax, ax
0x14b9b: cld
0x14b9c: rep stosd dword ptr es:[di], eax
0x14b9e: ret
0x14b9f: add byte ptr [bx + si], al
0x14ba1: add byte ptr [bx + si], al
0x14ba3: add byte ptr [bx + si], al
0x14ba5: add byte ptr [bx + si], al
0x14ba7: add byte ptr [bx + si], al
0x14ba9: add byte ptr [di - 0x6ae9], dl
0x14bad: pop ss
2018-12-17T22:21:49.747147592Z 48 PC: 13f9f | Get DOS version
2018-12-17T22:21:49.748480416Z 61 PC: 13e51 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:49.752910327Z 63 PC: 13f24 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:49.75843559Z 62 PC: 13ea1 | Close file
2018-12-17T22:21:49.759881962Z 26 PC: 13507 | Set disk transfer address
2018-12-17T22:21:49.760823085Z 78 PC: 13513 | Find first file
2018-12-17T22:21:49.765884342Z 26 PC: 13507 | Set disk transfer address
2018-12-17T22:21:49.766821448Z 78 PC: 13513 | Find first file
2018-12-17T22:21:49.770594144Z 60 PC: 13e51 | Create or truncate file
2018-12-17T22:21:49.783738963Z 64 PC: 13f24 | Write file or device (Write 8001 bytes on handle 5)
2018-12-17T22:21:49.792447028Z 62 PC: 13ea1 | Close file
2018-12-17T22:21:49.800183664Z 67 PC: 134d6 | Get or set file attributes
2018-12-17T22:21:49.813324897Z 26 PC: 1352b | Set disk transfer address
2018-12-17T22:21:49.8143438Z 79 PC: 13530 | Find next file
2018-12-17T22:21:49.8206861Z 48 PC: 13f9f | Get DOS version
2018-12-17T22:21:49.823495839Z 53 PC: 1366c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:49.824767341Z 37 PC: 13675 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:49.825792069Z 53 PC: 1366c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:49.827861797Z 37 PC: 13675 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:49.828872351Z 53 PC: 1366c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:49.829944539Z 37 PC: 13675 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:49.831555553Z 53 PC: 1366c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:49.832761518Z 37 PC: 13675 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:49.833937503Z 53 PC: 1366c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:49.835731021Z 37 PC: 13675 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:49.83679328Z 53 PC: 1366c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:49.83801783Z 37 PC: 13675 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:49.839379265Z 53 PC: 1366c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:49.840708803Z 37 PC: 13675 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:49.841886879Z 53 PC: 1366c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:49.843580349Z 37 PC: 13675 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:49.844668529Z 53 PC: 1366c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:49.846558658Z 37 PC: 13675 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:49.848263666Z 53 PC: 1366c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:49.849391977Z 37 PC: 13675 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:49.85041998Z 53 PC: 1366c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:49.851906892Z 37 PC: 13675 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:49.852981168Z 53 PC: 1366c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:49.854015886Z 37 PC: 13675 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:49.855640532Z 53 PC: 1366c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:49.857127554Z 37 PC: 13675 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:49.858551646Z 53 PC: 1366c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:49.860200675Z 37 PC: 13675 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:49.861689245Z 53 PC: 1366c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:49.862716328Z 37 PC: 13675 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:49.864151441Z 53 PC: 1366c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:49.865416372Z 37 PC: 13675 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:49.866629518Z 53 PC: 1366c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:49.86813758Z 37 PC: 13675 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:49.869180527Z 53 PC: 1366c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:49.870228463Z 37 PC: 13675 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:49.871428845Z 53 PC: 1366c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:49.872470419Z 37 PC: 13675 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:49.873549162Z 41 PC: 13623 | Parse filename
2018-12-17T22:21:49.874961791Z 41 PC: 13631 | Parse filename
2018-12-17T22:21:49.876309744Z 75 PC: 1363c | Execute program
2018-12-17T22:21:49.887099925Z 53 PC: 1982a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:49.88851922Z 53 PC: 1982a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:49.889559397Z 53 PC: 1982a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:49.890407842Z 53 PC: 1982a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:49.891375621Z 53 PC: 1982a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:49.892431588Z 53 PC: 1982a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:49.893415379Z 53 PC: 1982a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:49.894593063Z 53 PC: 1982a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:49.895969079Z 53 PC: 1982a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:49.896887739Z 53 PC: 1982a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:49.897964915Z 53 PC: 1982a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:49.900089073Z 53 PC: 1982a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:49.900987314Z 53 PC: 1982a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:49.902482539Z 53 PC: 1982a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:49.903759972Z 53 PC: 1982a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:49.904499124Z 53 PC: 1982a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:49.905386555Z 53 PC: 1982a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:49.906609795Z 53 PC: 1982a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:49.907585157Z 53 PC: 1982a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:49.908785952Z 37 PC: 1983f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:49.910271301Z 37 PC: 19847 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:49.911342988Z 37 PC: 1984f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:49.912406273Z 37 PC: 19857 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:49.913970786Z 68 PC: 1a3a9 | I/O control for devices (Set for = '')
2018-12-17T22:21:50.02037634Z 37 PC: 19051 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.022150212Z 44 PC: 1acb4 | Get time 0x1acb4: mov word ptr [0x3e], cx
0x1acb8: mov word ptr [0x40], dx
0x1acbc: retf
0x1acbd: mov di, 0x52
0x1acc0: push ds
0x1acc1: pop es
0x1acc2: mov cx, 0x25aa
0x1acc5: sub cx, di
0x1acc7: shr cx, 1
0x1acc9: xor ax, ax
0x1accb: cld
0x1accc: rep stosd dword ptr es:[di], eax
0x1acce: ret
0x1accf: add byte ptr [bx + si], al
0x1acd1: add byte ptr [bx + si], al
0x1acd3: add byte ptr [bx + si], al
0x1acd5: add byte ptr [bx + si], al
0x1acd7: add byte ptr [bx + si], al
0x1acd9: add byte ptr [bx + si - 0x57e3], ch
0x1acdd: sbb ax, 0x1da8
2018-12-17T22:21:50.024968449Z 48 PC: 1a0cf | Get DOS version
2018-12-17T22:21:50.026385034Z 61 PC: 19f81 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:50.034381146Z 63 PC: 1a054 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:50.04282896Z 62 PC: 19fd1 | Close file
2018-12-17T22:21:50.044666276Z 26 PC: 19637 | Set disk transfer address
2018-12-17T22:21:50.04602287Z 78 PC: 19643 | Find first file
2018-12-17T22:21:50.061765055Z 26 PC: 19637 | Set disk transfer address
2018-12-17T22:21:50.062877035Z 78 PC: 19643 | Find first file
2018-12-17T22:21:50.068864776Z 26 PC: 1965b | Set disk transfer address
2018-12-17T22:21:50.070087769Z 79 PC: 19660 | Find next file
2018-12-17T22:21:50.072740518Z 48 PC: 1a0cf | Get DOS version
2018-12-17T22:21:50.074646357Z 53 PC: 1979c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.075923636Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.07707783Z 53 PC: 1979c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:50.079477639Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:50.080785552Z 53 PC: 1979c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.081800375Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.083026957Z 53 PC: 1979c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:50.084481725Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:50.085450791Z 53 PC: 1979c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.087564443Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.089033208Z 53 PC: 1979c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.090129167Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.091556054Z 53 PC: 1979c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:50.093018269Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:50.094059233Z 53 PC: 1979c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:50.095242498Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:50.096765404Z 53 PC: 1979c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:50.097761074Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:50.099437033Z 53 PC: 1979c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:50.100994975Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:50.102714718Z 53 PC: 1979c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:50.103839002Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:50.105391787Z 53 PC: 1979c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:50.106328464Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:50.107246353Z 53 PC: 1979c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:50.109172121Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:50.110283867Z 53 PC: 1979c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:50.111308106Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:50.112715286Z 53 PC: 1979c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:50.114062346Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:50.11514243Z 53 PC: 1979c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:50.116395025Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:50.117504858Z 53 PC: 1979c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:50.118551354Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:50.119695517Z 53 PC: 1979c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.120720722Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.121696585Z 53 PC: 1979c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:50.122952225Z 37 PC: 197a5 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:50.124044971Z 41 PC: 19753 | Parse filename
2018-12-17T22:21:50.125395246Z 41 PC: 19761 | Parse filename
2018-12-17T22:21:50.127011342Z 75 PC: 1976c | Execute program
2018-12-17T22:21:50.143188141Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.144149064Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:50.145995722Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.147856902Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:50.149776952Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.151435907Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.152841156Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:50.154276049Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:50.15594864Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:50.157326394Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:50.15884321Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:50.160286829Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:50.161767972Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:50.163688685Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:50.164852267Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:50.166167911Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:50.168300211Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:50.169643993Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.170952686Z 53 PC: 1f95a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:50.172918824Z 37 PC: 1f96f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.174322556Z 37 PC: 1f977 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.175616174Z 37 PC: 1f97f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.177720819Z 37 PC: 1f987 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.179909143Z 68 PC: 204d9 | I/O control for devices (Set for = '')
2018-12-17T22:21:50.24815606Z 37 PC: 1f181 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.250012705Z 44 PC: 20de4 | Get time 0x20de4: mov word ptr [0x3e], cx
0x20de8: mov word ptr [0x40], dx
0x20dec: retf
0x20ded: mov di, 0x52
0x20df0: push ds
0x20df1: pop es
0x20df2: mov cx, 0x25aa
0x20df5: sub cx, di
0x20df7: shr cx, 1
0x20df9: xor ax, ax
0x20dfb: cld
0x20dfc: rep stosd dword ptr es:[di], eax
0x20dfe: ret
0x20dff: add byte ptr [bx + si], al
0x20e01: add byte ptr [bx + si], al
0x20e03: add byte ptr [bx + si], al
0x20e05: add byte ptr [bx + si], al
0x20e07: add byte ptr [bx + si], al
0x20e09: add byte ptr [bp + di - 0x44dd], bh
0x20e0d: and di, word ptr [bp + di + 0x23]
2018-12-17T22:21:50.252230733Z 48 PC: 201ff | Get DOS version
2018-12-17T22:21:50.253655569Z 61 PC: 200b1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:50.261761937Z 63 PC: 20184 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:50.269411891Z 62 PC: 20101 | Close file
2018-12-17T22:21:50.271236554Z 26 PC: 1f767 | Set disk transfer address
2018-12-17T22:21:50.272750376Z 78 PC: 1f773 | Find first file
2018-12-17T22:21:50.279437832Z 26 PC: 1f767 | Set disk transfer address
2018-12-17T22:21:50.280612209Z 78 PC: 1f773 | Find first file
2018-12-17T22:21:50.287126195Z 26 PC: 1f78b | Set disk transfer address
2018-12-17T22:21:50.288323367Z 79 PC: 1f790 | Find next file
2018-12-17T22:21:50.291000343Z 48 PC: 201ff | Get DOS version
2018-12-17T22:21:50.293294931Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.29463441Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.295981849Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:50.297396498Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:50.298395078Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.300160639Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.301191817Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:50.302302644Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:50.303761263Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.304923817Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.306053201Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.307769728Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.308879961Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:50.310182798Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:50.312301425Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:50.313320331Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:50.31437047Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:50.317196252Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:50.318811748Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:50.320680958Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:50.322770265Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:50.324077042Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:50.326202204Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:50.328586632Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:50.330041901Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:50.331491872Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:50.333199889Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:50.334295851Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:50.335587105Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:50.337333778Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:50.338569159Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:50.339972855Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:50.341364848Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:50.342493177Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:50.344230915Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.345300482Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.346418458Z 53 PC: 1f8cc | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:50.348592572Z 37 PC: 1f8d5 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:50.34976718Z 41 PC: 1f883 | Parse filename
2018-12-17T22:21:50.351173856Z 41 PC: 1f891 | Parse filename
2018-12-17T22:21:50.361222876Z 75 PC: 1f89c | Execute program
2018-12-17T22:21:50.376061756Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.377510481Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:50.379051094Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.380212429Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:50.381266278Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.382858416Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.384083754Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:50.385368489Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:50.386787041Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:50.388152965Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:50.389415588Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:50.391163797Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:50.392307673Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:50.393391266Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:50.394851039Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:50.396142695Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:50.397562067Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:50.398992348Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.400202718Z 53 PC: 25a8a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:50.402108263Z 37 PC: 25a9f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.403438572Z 37 PC: 25aa7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.404441228Z 37 PC: 25aaf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.406451638Z 37 PC: 25ab7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.407912952Z 68 PC: 26609 | I/O control for devices (Set for = '@')
2018-12-17T22:21:50.47847247Z 37 PC: 252b1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.480914582Z 44 PC: 26f14 | Get time 0x26f14: mov word ptr [0x3e], cx
0x26f18: mov word ptr [0x40], dx
0x26f1c: retf
0x26f1d: mov di, 0x52
0x26f20: push ds
0x26f21: pop es
0x26f22: mov cx, 0x25aa
0x26f25: sub cx, di
0x26f27: shr cx, 1
0x26f29: xor ax, ax
0x26f2b: cld
0x26f2c: rep stosd dword ptr es:[di], eax
0x26f2e: ret
0x26f2f: add byte ptr [bx + si], al
0x26f31: add byte ptr [bx + si], al
0x26f33: add byte ptr [bx + si], al
0x26f35: add byte ptr [bx + si], al
0x26f37: add byte ptr [bx + si], al
0x26f39: add dh, cl
0x26f3b: sub si, cx
2018-12-17T22:21:50.483674884Z 48 PC: 2632f | Get DOS version
2018-12-17T22:21:50.485407439Z 61 PC: 261e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:50.493189285Z 63 PC: 262b4 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:50.501214005Z 62 PC: 26231 | Close file
2018-12-17T22:21:50.50344671Z 26 PC: 25897 | Set disk transfer address
2018-12-17T22:21:50.505571917Z 78 PC: 258a3 | Find first file
2018-12-17T22:21:50.512925365Z 26 PC: 25897 | Set disk transfer address
2018-12-17T22:21:50.514354721Z 78 PC: 258a3 | Find first file
2018-12-17T22:21:50.521516499Z 26 PC: 258bb | Set disk transfer address
2018-12-17T22:21:50.523320634Z 79 PC: 258c0 | Find next file
2018-12-17T22:21:50.526866494Z 48 PC: 2632f | Get DOS version
2018-12-17T22:21:50.529899993Z 53 PC: 259fc | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.531856627Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.533337785Z 53 PC: 259fc | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:50.53541229Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:50.536647329Z 53 PC: 259fc | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.537729767Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.539676913Z 53 PC: 259fc | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:50.54078234Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:50.541907119Z 53 PC: 259fc | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.544448214Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.545754837Z 53 PC: 259fc | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.546879192Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.548403582Z 53 PC: 259fc | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:50.549566975Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:50.550746157Z 53 PC: 259fc | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:50.552441125Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:50.553480629Z 53 PC: 259fc | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:50.556290551Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:50.557475584Z 53 PC: 259fc | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:50.558642748Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:50.560318205Z 53 PC: 259fc | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:50.561995038Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:50.56353956Z 53 PC: 259fc | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:50.565840435Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:50.567358581Z 53 PC: 259fc | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:50.568864969Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:50.571551442Z 53 PC: 259fc | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:50.573085141Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:50.574607966Z 53 PC: 259fc | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:50.577191152Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:50.57866068Z 53 PC: 259fc | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:50.580353035Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:50.582097524Z 53 PC: 259fc | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:50.583562476Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:50.586632157Z 53 PC: 259fc | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.587863343Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.588977769Z 53 PC: 259fc | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:50.590974017Z 37 PC: 25a05 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:50.592616303Z 41 PC: 259b3 | Parse filename
2018-12-17T22:21:50.594231069Z 41 PC: 259c1 | Parse filename
2018-12-17T22:21:50.596907311Z 75 PC: 259cc | Execute program
2018-12-17T22:21:50.613914262Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.615447504Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:50.618198804Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.619696334Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:50.621190827Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.623837142Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.625315484Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:50.626967094Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:50.629388037Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:50.630837744Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:50.633038694Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:50.634645167Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:50.636151126Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:50.638124136Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:50.639269067Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:50.641420608Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:50.643295489Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:50.644417252Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.645530771Z 53 PC: 2bbba | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:50.647627247Z 37 PC: 2bbcf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.648874727Z 37 PC: 2bbd7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.649925204Z 37 PC: 2bbdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.651999878Z 37 PC: 2bbe7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.6542911Z 68 PC: 2c739 | I/O control for devices (Set for = '')
2018-12-17T22:21:50.730073392Z 37 PC: 2b3e1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.733147637Z 44 PC: 2d044 | Get time 0x2d044: mov word ptr [0x3e], cx
0x2d048: mov word ptr [0x40], dx
0x2d04c: retf
0x2d04d: mov di, 0x52
0x2d050: push ds
0x2d051: pop es
0x2d052: mov cx, 0x25aa
0x2d055: sub cx, di
0x2d057: shr cx, 1
0x2d059: xor ax, ax
0x2d05b: cld
0x2d05c: rep stosd dword ptr es:[di], eax
0x2d05e: ret
0x2d05f: add byte ptr [bx + si], al
0x2d061: add byte ptr [bx + si], al
0x2d063: add byte ptr [bx + si], al
0x2d065: add byte ptr [bx + si], al
0x2d067: add byte ptr [bx + si], al
0x2d069: add cl, ah
0x2d06b: das
2018-12-17T22:21:50.735911163Z 48 PC: 2c45f | Get DOS version
2018-12-17T22:21:50.738254872Z 61 PC: 2c311 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:50.746869728Z 63 PC: 2c3e4 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:50.756140059Z 62 PC: 2c361 | Close file
2018-12-17T22:21:50.758821754Z 26 PC: 2b9c7 | Set disk transfer address
2018-12-17T22:21:50.760203868Z 78 PC: 2b9d3 | Find first file
2018-12-17T22:21:50.766973663Z 26 PC: 2b9c7 | Set disk transfer address
2018-12-17T22:21:50.769315547Z 78 PC: 2b9d3 | Find first file
2018-12-17T22:21:50.776613831Z 26 PC: 2b9eb | Set disk transfer address
2018-12-17T22:21:50.778058133Z 79 PC: 2b9f0 | Find next file
2018-12-17T22:21:50.781926714Z 48 PC: 2c45f | Get DOS version
2018-12-17T22:21:50.784543446Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.786040222Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.788102308Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:50.789302479Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:50.790599586Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.79221384Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.793174203Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:50.795554474Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:50.797151322Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.798388687Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.799966404Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.800959751Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.801975315Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:50.803803833Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:50.804787924Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:50.805625605Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:50.807275294Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:50.808252972Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:50.809090925Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:50.810463054Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:50.811242271Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:50.812961718Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:50.814440304Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:50.815604755Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:50.81777965Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:50.818889093Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:50.820398029Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:50.822512497Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:50.824025443Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:50.825299869Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:50.827114609Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:50.828840803Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:50.830138957Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:50.832620212Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:50.83381693Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.835686773Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.837163165Z 53 PC: 2bb2c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:50.838739298Z 37 PC: 2bb35 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:50.840996015Z 41 PC: 2bae3 | Parse filename
2018-12-17T22:21:50.842394032Z 41 PC: 2baf1 | Parse filename
2018-12-17T22:21:50.843996884Z 75 PC: 2bafc | Execute program
2018-12-17T22:21:50.860115465Z 53 PC: 31cea | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.861622765Z 53 PC: 31cea | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:50.863040418Z 53 PC: 31cea | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.864815565Z 53 PC: 31cea | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:50.866180553Z 53 PC: 31cea | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.882410537Z 53 PC: 31cea | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.883939459Z 53 PC: 31cea | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:50.885378581Z 53 PC: 31cea | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:50.88774564Z 53 PC: 31cea | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:50.888850725Z 53 PC: 31cea | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:50.889874731Z 53 PC: 31cea | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:50.892860384Z 53 PC: 31cea | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:50.894976339Z 53 PC: 31cea | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:50.896165831Z 53 PC: 31cea | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:50.897761288Z 53 PC: 31cea | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:50.899001868Z 53 PC: 31cea | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:50.901222805Z 53 PC: 31cea | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:50.905058226Z 53 PC: 31cea | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.906130653Z 53 PC: 31cea | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:50.908085588Z 37 PC: 31cff | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.909363998Z 37 PC: 31d07 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.910505671Z 37 PC: 31d0f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.912441612Z 37 PC: 31d17 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.913644384Z 68 PC: 32869 | I/O control for devices (Set for = '')
2018-12-17T22:21:50.996581168Z 37 PC: 31511 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.99876468Z 44 PC: 33174 | Get time 0x33174: mov word ptr [0x3e], cx
0x33178: mov word ptr [0x40], dx
0x3317c: retf
0x3317d: mov di, 0x52
0x33180: push ds
0x33181: pop es
0x33182: mov cx, 0x25aa
0x33185: sub cx, di
0x33187: shr cx, 1
0x33189: xor ax, ax
0x3318b: cld
0x3318c: rep stosd dword ptr es:[di], eax
0x3318e: ret
0x3318f: add byte ptr [bx + si], al
0x33191: add byte ptr [bx + si], al
0x33193: add byte ptr [bx + si], al
0x33195: add byte ptr [bx + si], al
0x33197: add byte ptr [bx + si], al
0x33199: add ah, dh
0x3319b: xor ax, 0x35f4
2018-12-17T22:21:51.000485137Z 48 PC: 3258f | Get DOS version
2018-12-17T22:21:51.002157828Z 61 PC: 32441 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:51.009020867Z 63 PC: 32514 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:51.014848258Z 62 PC: 32491 | Close file
2018-12-17T22:21:51.016824553Z 26 PC: 31af7 | Set disk transfer address
2018-12-17T22:21:51.01825817Z 78 PC: 31b03 | Find first file
2018-12-17T22:21:51.026301855Z 26 PC: 31af7 | Set disk transfer address
2018-12-17T22:21:51.029224269Z 78 PC: 31b03 | Find first file
2018-12-17T22:21:51.036269597Z 26 PC: 31b1b | Set disk transfer address
2018-12-17T22:21:51.038024716Z 79 PC: 31b20 | Find next file
2018-12-17T22:21:51.043455188Z 48 PC: 3258f | Get DOS version
2018-12-17T22:21:51.045557096Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.046921376Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.048824101Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:51.050271933Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:51.052116932Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:51.053787733Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:51.055580674Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:51.058081401Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:51.059449Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.061322085Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.064256304Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.06561989Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.066819993Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:51.068547948Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:51.070577762Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:51.072883679Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:51.074734896Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:51.076413726Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:51.07967904Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:51.081420978Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:51.08282092Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:51.085274084Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:51.086686007Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:51.087961925Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:51.089770212Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:51.090978555Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:51.092945434Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:51.094283016Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:51.095452126Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:51.097369011Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:51.098508363Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:51.099717596Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:51.101310893Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:51.10262315Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:51.105585265Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.106609106Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.107628711Z 53 PC: 31c5c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:51.109960268Z 37 PC: 31c65 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:51.111109904Z 41 PC: 31c13 | Parse filename
2018-12-17T22:21:51.112346289Z 41 PC: 31c21 | Parse filename
2018-12-17T22:21:51.11470391Z 75 PC: 31c2c | Execute program
2018-12-17T22:21:51.130596941Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.132166395Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:51.133365115Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:51.134506425Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:51.136537937Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.137770525Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.139197613Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:51.141082662Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:51.142330142Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:51.143965675Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:51.144992106Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:51.146088816Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:51.148274948Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:51.149491262Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:51.1506749Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:51.152293932Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:51.153542143Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:51.154908887Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.15642694Z 53 PC: 37e1a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:51.157473306Z 37 PC: 37e2f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.158988469Z 37 PC: 37e37 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.159969914Z 37 PC: 37e3f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.161585314Z 37 PC: 37e47 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.163215299Z 68 PC: 38999 | I/O control for devices (Set for = '')
2018-12-17T22:21:51.230818749Z 37 PC: 37641 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:51.232750723Z 44 PC: 392a4 | Get time 0x392a4: mov word ptr [0x3e], cx
0x392a8: mov word ptr [0x40], dx
0x392ac: retf
0x392ad: mov di, 0x52
0x392b0: push ds
0x392b1: pop es
0x392b2: mov cx, 0x25aa
0x392b5: sub cx, di
0x392b7: shr cx, 1
0x392b9: xor ax, ax
0x392bb: cld
0x392bc: rep stosd dword ptr es:[di], eax
0x392be: ret
0x392bf: add byte ptr [bx + si], al
0x392c1: add byte ptr [bx + si], al
0x392c3: add byte ptr [bx + si], al
0x392c5: add byte ptr [bx + si], al
0x392c7: add byte ptr [bx + si], al
0x392c9: add byte ptr [bx], al
0x392cb: cmp al, 7
2018-12-17T22:21:51.235558809Z 48 PC: 386bf | Get DOS version
2018-12-17T22:21:51.236894343Z 61 PC: 38571 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:51.244693707Z 63 PC: 38644 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:51.252277411Z 62 PC: 385c1 | Close file
2018-12-17T22:21:51.254394888Z 26 PC: 37c27 | Set disk transfer address
2018-12-17T22:21:51.25578726Z 78 PC: 37c33 | Find first file
2018-12-17T22:21:51.262295395Z 26 PC: 37c27 | Set disk transfer address
2018-12-17T22:21:51.263931312Z 78 PC: 37c33 | Find first file
2018-12-17T22:21:51.269906598Z 26 PC: 37c4b | Set disk transfer address
2018-12-17T22:21:51.270890658Z 79 PC: 37c50 | Find next file
2018-12-17T22:21:51.274020264Z 48 PC: 386bf | Get DOS version
2018-12-17T22:21:51.276108025Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.277386989Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.278777797Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:51.279842848Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:51.281354278Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:51.282540537Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:51.283625992Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:51.286715203Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:51.287693746Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.289312614Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.290406405Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.291728118Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.293263712Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:51.294269821Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:51.295261353Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:51.296577184Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:51.297705282Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:51.299268394Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:51.300343287Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:51.301557678Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:51.303187954Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:51.305006347Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:51.306278155Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:51.307639382Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:51.308720813Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:51.310145102Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:51.311297064Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:51.312685281Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:51.314854636Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:51.316289967Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:51.317921789Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:51.320108197Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:51.321468964Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:51.324045717Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:51.325445544Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.326877297Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.329513148Z 53 PC: 37d8c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:51.330868945Z 37 PC: 37d95 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:51.332463018Z 41 PC: 37d43 | Parse filename
2018-12-17T22:21:51.335532153Z 41 PC: 37d51 | Parse filename
2018-12-17T22:21:51.337673254Z 75 PC: 37d5c | Execute program
2018-12-17T22:21:51.354146396Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.355650561Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:51.356694652Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:51.359259616Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:51.360758219Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.362485986Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.364759264Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:51.366196452Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:51.368561917Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:51.370821728Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:51.372255048Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:51.374119217Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:51.375521718Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:51.377859569Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:51.37944823Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:51.380856195Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:51.382786873Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:51.384204146Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.386315164Z 53 PC: 3df4a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:51.387666388Z 37 PC: 3df5f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.389005424Z 37 PC: 3df67 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.390768778Z 37 PC: 3df6f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.392048782Z 37 PC: 3df77 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.39462462Z 68 PC: 3eac9 | I/O control for devices (Set for = '')
2018-12-17T22:21:51.459722124Z 37 PC: 3d771 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:51.46153593Z 44 PC: 3f3d4 | Get time 0x3f3d4: mov word ptr [0x3e], cx
0x3f3d8: mov word ptr [0x40], dx
0x3f3dc: retf
0x3f3dd: mov di, 0x52
0x3f3e0: push ds
0x3f3e1: pop es
0x3f3e2: mov cx, 0x25aa
0x3f3e5: sub cx, di
0x3f3e7: shr cx, 1
0x3f3e9: xor ax, ax
0x3f3eb: cld
0x3f3ec: rep stosd dword ptr es:[di], eax
0x3f3ee: ret
0x3f3ef: add byte ptr [bx + si], al
0x3f3f1: add byte ptr [bx + si], al
0x3f3f3: add byte ptr [bx + si], al
0x3f3f5: add byte ptr [bx + si], al
0x3f3f7: add byte ptr [bx + si], al
0x3f3f9: add byte ptr [bp + si], bl
0x3f3fb: inc dx
2018-12-17T22:21:51.464742211Z 48 PC: 3e7ef | Get DOS version
2018-12-17T22:21:51.466485461Z 61 PC: 3e6a1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:51.473629212Z 63 PC: 3e774 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:51.482571226Z 62 PC: 3e6f1 | Close file
2018-12-17T22:21:51.4848116Z 26 PC: 3dd57 | Set disk transfer address
2018-12-17T22:21:51.487162464Z 78 PC: 3dd63 | Find first file
2018-12-17T22:21:51.494136073Z 26 PC: 3dd57 | Set disk transfer address
2018-12-17T22:21:51.495532273Z 78 PC: 3dd63 | Find first file
2018-12-17T22:21:51.502976097Z 26 PC: 3dd7b | Set disk transfer address
2018-12-17T22:21:51.504366651Z 79 PC: 3dd80 | Find next file
2018-12-17T22:21:51.508309937Z 48 PC: 3e7ef | Get DOS version
2018-12-17T22:21:51.510585104Z 53 PC: 3debc | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.511983778Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.513963151Z 53 PC: 3debc | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:51.51536719Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:51.516941732Z 53 PC: 3debc | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:51.519318233Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:51.520691251Z 53 PC: 3debc | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:51.522995457Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:51.524615212Z 53 PC: 3debc | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.526049884Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.528567434Z 53 PC: 3debc | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.529966188Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.532199117Z 53 PC: 3debc | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:51.534618866Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:51.535958157Z 53 PC: 3debc | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:51.538861529Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:51.540229276Z 53 PC: 3debc | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:51.54218031Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:51.543439955Z 53 PC: 3debc | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:51.544617025Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:51.546781686Z 53 PC: 3debc | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:51.548205432Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:51.550017676Z 53 PC: 3debc | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:51.551605038Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:51.553034707Z 53 PC: 3debc | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:51.555240038Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:51.556627672Z 53 PC: 3debc | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:51.558300748Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:51.560463746Z 53 PC: 3debc | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:51.561932007Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:51.564246637Z 53 PC: 3debc | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:51.565806829Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:51.567210612Z 53 PC: 3debc | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:51.569618053Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:51.570976364Z 53 PC: 3debc | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.573045826Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.574331447Z 53 PC: 3debc | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:51.575726781Z 37 PC: 3dec5 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:51.577773998Z 41 PC: 3de73 | Parse filename
2018-12-17T22:21:51.579188218Z 41 PC: 3de81 | Parse filename
2018-12-17T22:21:51.581148393Z 75 PC: 3de8c | Execute program
2018-12-17T22:21:51.596646096Z 53 PC: 4407a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.59817105Z 53 PC: 4407a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:51.600186633Z 53 PC: 4407a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:51.601687452Z 53 PC: 4407a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:51.603818127Z 53 PC: 4407a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.605316127Z 53 PC: 4407a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.606738575Z 53 PC: 4407a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:51.60927764Z 53 PC: 4407a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:51.610697129Z 53 PC: 4407a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:51.612322219Z 53 PC: 4407a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:51.614681419Z 53 PC: 4407a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:51.616133771Z 53 PC: 4407a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:51.618507153Z 53 PC: 4407a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:51.620235173Z 53 PC: 4407a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:51.621669762Z 53 PC: 4407a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:51.624003033Z 53 PC: 4407a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:51.625176206Z 53 PC: 4407a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:51.627211732Z 53 PC: 4407a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.628482949Z 53 PC: 4407a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:51.629935636Z 37 PC: 4408f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.632924834Z 37 PC: 44097 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.634027911Z 37 PC: 4409f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.635289526Z 37 PC: 440a7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.637625207Z 68 PC: 44bf9 | I/O control for devices (Set for = '')
2018-12-17T22:21:51.750713877Z 37 PC: 438a1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:51.753501106Z 44 PC: 45504 | Get time 0x45504: mov word ptr [0x3e], cx
0x45508: mov word ptr [0x40], dx
0x4550c: retf
0x4550d: mov di, 0x52
0x45510: push ds
0x45511: pop es
0x45512: mov cx, 0x25aa
0x45515: sub cx, di
0x45517: shr cx, 1
0x45519: xor ax, ax
0x4551b: cld
0x4551c: rep stosd dword ptr es:[di], eax
0x4551e: ret
0x4551f: add byte ptr [bx + si], al
0x45521: add byte ptr [bx + si], al
0x45523: add byte ptr [bx + si], al
0x45525: add byte ptr [bx + si], al
0x45527: add byte ptr [bx + si], al
0x45529: add byte ptr [di], ch
0x4552b: dec ax
2018-12-17T22:21:51.755925602Z 48 PC: 4491f | Get DOS version
2018-12-17T22:21:51.757693855Z 61 PC: 447d1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:51.765678811Z 63 PC: 448a4 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:51.773382348Z 62 PC: 44821 | Close file
2018-12-17T22:21:51.776343863Z 26 PC: 43e87 | Set disk transfer address
2018-12-17T22:21:51.77770098Z 78 PC: 43e93 | Find first file
2018-12-17T22:21:51.784405317Z 26 PC: 43e87 | Set disk transfer address
2018-12-17T22:21:51.786760964Z 78 PC: 43e93 | Find first file
2018-12-17T22:21:51.792894627Z 26 PC: 43eab | Set disk transfer address
2018-12-17T22:21:51.794489706Z 79 PC: 43eb0 | Find next file
2018-12-17T22:21:51.798337179Z 48 PC: 4491f | Get DOS version
2018-12-17T22:21:51.800400559Z 53 PC: 43fec | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.803440056Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.804869723Z 53 PC: 43fec | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:51.806300928Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:51.808871148Z 53 PC: 43fec | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:51.810280143Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:51.812687318Z 53 PC: 43fec | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:51.814452357Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:51.815826468Z 53 PC: 43fec | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.818100399Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.819490451Z 53 PC: 43fec | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.82109883Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.823549889Z 53 PC: 43fec | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:51.824989151Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:51.828024437Z 53 PC: 43fec | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:51.829796828Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:51.831162735Z 53 PC: 43fec | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:51.833208991Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:51.834669907Z 53 PC: 43fec | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:51.836941246Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:51.838715989Z 53 PC: 43fec | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:51.840203656Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:51.842891853Z 53 PC: 43fec | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:51.844356934Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:51.846003953Z 53 PC: 43fec | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:51.848457568Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:51.849889248Z 53 PC: 43fec | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:51.852439927Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:51.854216373Z 53 PC: 43fec | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:51.855669577Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:51.858251942Z 53 PC: 43fec | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:51.859799166Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:51.861865967Z 53 PC: 43fec | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:51.863262059Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:51.864618247Z 53 PC: 43fec | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.866987111Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.868336502Z 53 PC: 43fec | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:51.870766205Z 37 PC: 43ff5 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:51.872201559Z 41 PC: 43fa3 | Parse filename
2018-12-17T22:21:51.873662054Z 41 PC: 43fb1 | Parse filename
2018-12-17T22:21:51.876339918Z 75 PC: 43fbc | Execute program
2018-12-17T22:21:51.89173352Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.894232973Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:51.895890532Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:51.897093576Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:51.89897403Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.900429483Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.902410385Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:51.903624163Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:51.904701728Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:51.906711221Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:51.908114934Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:51.909984307Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:51.911284057Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:51.912520644Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:51.914340869Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:51.915796267Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:51.917807787Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:51.918943698Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.920688078Z 53 PC: 4a1aa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:51.921982365Z 37 PC: 4a1bf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:51.924030091Z 37 PC: 4a1c7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:51.929731671Z 37 PC: 4a1cf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:51.931069119Z 37 PC: 4a1d7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:51.933250578Z 68 PC: 4ad29 | I/O control for devices (Set for = '')
2018-12-17T22:21:52.045424491Z 37 PC: 499d1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:52.048729054Z 44 PC: 4b634 | Get time 0x4b634: mov word ptr [0x3e], cx
0x4b638: mov word ptr [0x40], dx
0x4b63c: retf
0x4b63d: mov di, 0x52
0x4b640: push ds
0x4b641: pop es
0x4b642: mov cx, 0x25aa
0x4b645: sub cx, di
0x4b647: shr cx, 1
0x4b649: xor ax, ax
0x4b64b: cld
0x4b64c: rep stosd dword ptr es:[di], eax
0x4b64e: ret
0x4b64f: add byte ptr [bx + si], al
0x4b651: add byte ptr [bx + si], al
0x4b653: add byte ptr [bx + si], al
0x4b655: add byte ptr [bx + si], al
0x4b657: add byte ptr [bx + si], al
0x4b659: add byte ptr [bx + si + 0x4e], al
0x4b65c: inc ax
2018-12-17T22:21:52.054679493Z 48 PC: 4aa4f | Get DOS version
2018-12-17T22:21:52.069941489Z 61 PC: 4a901 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:52.0779573Z 63 PC: 4a9d4 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:52.086024127Z 62 PC: 4a951 | Close file
2018-12-17T22:21:52.088253525Z 26 PC: 49fb7 | Set disk transfer address
2018-12-17T22:21:52.090977824Z 78 PC: 49fc3 | Find first file
2018-12-17T22:21:52.097763359Z 26 PC: 49fb7 | Set disk transfer address
2018-12-17T22:21:52.100168194Z 78 PC: 49fc3 | Find first file
2018-12-17T22:21:52.107421083Z 26 PC: 49fdb | Set disk transfer address
2018-12-17T22:21:52.10880619Z 79 PC: 49fe0 | Find next file
2018-12-17T22:21:52.112459052Z 48 PC: 4aa4f | Get DOS version
2018-12-17T22:21:52.11424301Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:52.116299234Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:52.117449062Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:52.118573034Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:52.120092744Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:52.121216557Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:52.123208315Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:52.12439546Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:52.125485252Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:52.127604106Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:52.129028046Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:52.130916788Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:52.132958331Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:52.134552363Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:52.136793052Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:52.138214689Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:52.140562315Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:52.142127097Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:52.143715095Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:52.145197915Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:52.146542903Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:52.148556838Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:52.149714355Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:52.151022847Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:52.152166135Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:52.153560446Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:52.155748583Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:52.157127501Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:52.159369886Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:52.161321947Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:52.162650722Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:52.164606682Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:52.165968946Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:52.167954459Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:52.169312804Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:52.171600552Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:52.17315883Z 53 PC: 4a11c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:52.174567837Z 37 PC: 4a125 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:52.176453389Z 41 PC: 4a0d3 | Parse filename
2018-12-17T22:21:52.177729631Z 41 PC: 4a0e1 | Parse filename
2018-12-17T22:21:52.179398874Z 75 PC: 4a0ec | Execute program
2018-12-17T22:21:52.195457761Z 53 PC: 502da | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:52.196955549Z 53 PC: 502da | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:52.198958632Z 53 PC: 502da | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:52.201161539Z 53 PC: 502da | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:52.203042871Z 53 PC: 502da | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:52.204393903Z 53 PC: 502da | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:52.206728667Z 53 PC: 502da | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:52.208173446Z 53 PC: 502da | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:52.209715276Z 53 PC: 502da | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:52.211942367Z 53 PC: 502da | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:52.213419027Z 53 PC: 502da | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:52.21600701Z 53 PC: 502da | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:52.217282766Z 53 PC: 502da | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:52.219221974Z 53 PC: 502da | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:52.220615225Z 53 PC: 502da | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:52.221998248Z 53 PC: 502da | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:52.224062601Z 53 PC: 502da | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:52.225226755Z 53 PC: 502da | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:52.227916584Z 53 PC: 502da | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:52.229317162Z 37 PC: 502ef | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:52.230572378Z 37 PC: 502f7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:52.231906108Z 37 PC: 502ff | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:52.233200735Z 37 PC: 50307 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:52.235667074Z 68 PC: 50e59 | I/O control for devices (Set for = '')
2018-12-17T22:21:52.335534789Z 37 PC: 4fb01 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:52.338622282Z 44 PC: 51764 | Get time 0x51764: mov word ptr [0x3e], cx
0x51768: mov word ptr [0x40], dx
0x5176c: retf
0x5176d: mov di, 0x52
0x51770: push ds
0x51771: pop es
0x51772: mov cx, 0x25aa
0x51775: sub cx, di
0x51777: shr cx, 1
0x51779: xor ax, ax
0x5177b: cld
0x5177c: rep stosd dword ptr es:[di], eax
0x5177e: ret
0x5177f: add byte ptr [bx + si], al
0x51781: add byte ptr [bx + si], al
0x51783: add byte ptr [bx + si], al
0x51785: add byte ptr [bx + si], al
0x51787: add byte ptr [bx + si], al
0x51789: add byte ptr [bp + di + 0x54], dl
0x5178c: push bx
2018-12-17T22:21:52.340874213Z 48 PC: 50b7f | Get DOS version
2018-12-17T22:21:52.34304379Z 61 PC: 50a31 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:52.350696875Z 63 PC: 50b04 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:52.358348315Z 62 PC: 50a81 | Close file
2018-12-17T22:21:52.361443071Z 26 PC: 500e7 | Set disk transfer address
2018-12-17T22:21:52.362480832Z 78 PC: 500f3 | Find first file
2018-12-17T22:21:52.369167889Z 26 PC: 500e7 | Set disk transfer address
2018-12-17T22:21:52.371602711Z 78 PC: 500f3 | Find first file
2018-12-17T22:21:52.37779367Z 26 PC: 5010b | Set disk transfer address
2018-12-17T22:21:52.380184088Z 79 PC: 50110 | Find next file
2018-12-17T22:21:52.383509238Z 48 PC: 50b7f | Get DOS version
2018-12-17T22:21:52.385861635Z 53 PC: 5024c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:52.388373609Z 37 PC: 50255 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:52.389667894Z 53 PC: 5024c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:52.392039619Z 37 PC: 50255 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:52.393765976Z 53 PC: 5024c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:52.395391426Z 37 PC: 50255 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:52.397775887Z 53 PC: 5024c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:52.399173539Z 37 PC: 50255 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:52.401495554Z 53 PC: 5024c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:52.403226329Z 37 PC: 50255 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:52.404785208Z 53 PC: 5024c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:52.406596085Z 37 PC: 50255 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:52.407675446Z 53 PC: 5024c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:52.409627514Z 37 PC: 50255 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:52.411463279Z 53 PC: 5024c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:52.412770112Z 37 PC: 50255 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:52.41451377Z 53 PC: 5024c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:52.415606876Z 37 PC: 50255 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:52.417854626Z 53 PC: 5024c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:52.428612419Z 37 PC: 50255 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:52.430091401Z 53 PC: 5024c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:52.432186964Z 37 PC: 50255 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:52.433448156Z 53 PC: 5024c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:52.43557672Z 37 PC: 50255 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:52.436740025Z 53 PC: 5024c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:52.438279702Z 37 PC: 50255 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:52.440416377Z 53 PC: 5024c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:52.441834954Z 37 PC: 50255 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:52.444202489Z 53 PC: 5024c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:52.445980972Z 37 PC: 50255 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:52.447561991Z 53 PC: 5024c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:52.449973464Z 37 PC: 50255 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:52.451338011Z 53 PC: 5024c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:52.45437462Z 37 PC: 50255 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:52.455822117Z 53 PC: 5024c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:52.45849576Z 37 PC: 50255 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:52.460007139Z 53 PC: 5024c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:52.46149806Z 37 PC: 50255 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:52.465592956Z 41 PC: 50203 | Parse filename
2018-12-17T22:21:52.467289309Z 41 PC: 50211 | Parse filename
2018-12-17T22:21:52.471179969Z 75 PC: 5021c | Execute program
2018-12-17T22:21:52.486413774Z 53 PC: 5640a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:52.488231313Z 53 PC: 5640a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:52.489989685Z 53 PC: 5640a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:52.491394835Z 53 PC: 5640a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:52.493603368Z 53 PC: 5640a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:52.494995369Z 53 PC: 5640a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:52.497340154Z 53 PC: 5640a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:52.49893815Z 53 PC: 5640a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:52.500312527Z 53 PC: 5640a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:52.502495935Z 53 PC: 5640a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:52.503582394Z 53 PC: 5640a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:52.506674364Z 53 PC: 5640a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:52.508061034Z 53 PC: 5640a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:52.509436966Z 53 PC: 5640a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:52.511371155Z 53 PC: 5640a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:52.512468219Z 53 PC: 5640a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:52.514216038Z 53 PC: 5640a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:52.515762931Z 53 PC: 5640a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:52.525419753Z 53 PC: 5640a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:52.526894489Z 37 PC: 5641f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:52.528718936Z 37 PC: 56427 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:52.530768989Z 37 PC: 5642f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:52.531817568Z 37 PC: 56437 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:52.534142746Z 68 PC: 56f89 | I/O control for devices (Set for = '')
2018-12-17T22:21:52.640130774Z 37 PC: 55c31 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:52.642443047Z 44 PC: 57894 | Get time 0x57894: mov word ptr [0x3e], cx
0x57898: mov word ptr [0x40], dx
0x5789c: retf
0x5789d: mov di, 0x52
0x578a0: push ds
0x578a1: pop es
0x578a2: mov cx, 0x25aa
0x578a5: sub cx, di
0x578a7: shr cx, 1
0x578a9: xor ax, ax
0x578ab: cld
0x578ac: rep stosd dword ptr es:[di], eax
0x578ae: ret
0x578af: add byte ptr [bx + si], al
0x578b1: add byte ptr [bx + si], al
0x578b3: add byte ptr [bx + si], al
0x578b5: add byte ptr [bx + si], al
0x578b7: add byte ptr [bx + si], al
0x578b9: add byte ptr [bp + 0x5a], ah
0x578bc: pop edx
2018-12-17T22:21:52.645341797Z 48 PC: 56caf | Get DOS version
2018-12-17T22:21:52.648153802Z 61 PC: 56b61 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:52.654886633Z 63 PC: 56c34 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:52.662492008Z 62 PC: 56bb1 | Close file
2018-12-17T22:21:52.665975088Z 26 PC: 56217 | Set disk transfer address
2018-12-17T22:21:52.667339709Z 78 PC: 56223 | Find first file
2018-12-17T22:21:52.674982304Z 26 PC: 56217 | Set disk transfer address
2018-12-17T22:21:52.676769539Z 78 PC: 56223 | Find first file
2018-12-17T22:21:52.682874543Z 26 PC: 5623b | Set disk transfer address
2018-12-17T22:21:52.685310744Z 79 PC: 56240 | Find next file
2018-12-17T22:21:52.688273059Z 48 PC: 56caf | Get DOS version
2018-12-17T22:21:52.691355746Z 53 PC: 5637c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:52.693185145Z 37 PC: 56385 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:52.694800813Z 53 PC: 5637c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:52.697257755Z 37 PC: 56385 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:52.698370408Z 53 PC: 5637c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:52.700869546Z 37 PC: 56385 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:52.702007585Z 53 PC: 5637c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:52.703785312Z 37 PC: 56385 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:52.70490162Z 53 PC: 5637c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:52.706403742Z 37 PC: 56385 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:52.708482213Z 53 PC: 5637c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:52.709519864Z 37 PC: 56385 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:52.711241977Z 53 PC: 5637c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:52.712539399Z 37 PC: 56385 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:52.714457022Z 53 PC: 5637c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:52.716419874Z 37 PC: 56385 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:52.718608593Z 53 PC: 5637c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:52.719885347Z 37 PC: 56385 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:52.721251495Z 53 PC: 5637c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:52.725371486Z 37 PC: 56385 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:52.726656846Z 53 PC: 5637c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:52.728724863Z 37 PC: 56385 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:52.729965013Z 53 PC: 5637c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:52.731673915Z 37 PC: 56385 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:52.732930801Z 53 PC: 5637c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:52.734163004Z 37 PC: 56385 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:52.736229869Z 53 PC: 5637c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:52.737909079Z 37 PC: 56385 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:52.740084755Z 53 PC: 5637c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:52.741466705Z 37 PC: 56385 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:52.743464025Z 53 PC: 5637c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:52.744973695Z 37 PC: 56385 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:52.746519678Z 53 PC: 5637c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:52.748137781Z 37 PC: 56385 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:52.74964124Z 53 PC: 5637c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:52.752136311Z 37 PC: 56385 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:52.75334726Z 53 PC: 5637c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:52.755436808Z 37 PC: 56385 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:52.757010832Z 41 PC: 56333 | Parse filename
2018-12-17T22:21:52.758828239Z 41 PC: 56341 | Parse filename
2018-12-17T22:21:52.761071767Z 75 PC: 5634c | Execute program
2018-12-17T22:21:52.776067559Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:52.778691205Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:52.779920863Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:52.781871151Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:52.782916924Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:52.784516328Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:52.785795961Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:52.787171395Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:52.788976238Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:52.790303802Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:52.791984842Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:52.793154581Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:52.795193453Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:52.796486925Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:52.79819686Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:52.799409746Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:52.800882183Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:52.802611702Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:52.804166844Z 53 PC: 5c53a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:52.806265045Z 37 PC: 5c54f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:52.807503677Z 37 PC: 5c557 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:52.809595523Z 37 PC: 5c55f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:52.810785545Z 37 PC: 5c567 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:52.812961998Z 68 PC: 5d0b9 | I/O control for devices (Set for = '')
2018-12-17T22:21:52.877503001Z 37 PC: 5bd61 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:52.880505964Z 44 PC: 5d9c4 | Get time 0x5d9c4: mov word ptr [0x3e], cx
0x5d9c8: mov word ptr [0x40], dx
0x5d9cc: retf
0x5d9cd: mov di, 0x52
0x5d9d0: push ds
0x5d9d1: pop es
0x5d9d2: mov cx, 0x25aa
0x5d9d5: sub cx, di
0x5d9d7: shr cx, 1
0x5d9d9: xor ax, ax
0x5d9db: cld
0x5d9dc: rep stosd dword ptr es:[di], eax
0x5d9de: ret
0x5d9df: add byte ptr [bx + si], al
0x5d9e1: add byte ptr [bx + si], al
0x5d9e3: add byte ptr [bx + si], al
0x5d9e5: add byte ptr [bx + si], al
0x5d9e7: add byte ptr [bx + si], al
0x5d9e9: add byte ptr [bx + di + 0x60], bh
0x5d9ec: jns 0x5da4e
2018-12-17T22:21:52.882811031Z 48 PC: 5cddf | Get DOS version
2018-12-17T22:21:52.884187301Z 61 PC: 5cc91 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:52.891192707Z 63 PC: 5cd64 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:52.898829606Z 62 PC: 5cce1 | Close file
2018-12-17T22:21:52.90129481Z 26 PC: 5c347 | Set disk transfer address
2018-12-17T22:21:52.902916381Z 78 PC: 5c353 | Find first file
2018-12-17T22:21:52.909662032Z 26 PC: 5c347 | Set disk transfer address
2018-12-17T22:21:52.911964285Z 78 PC: 5c353 | Find first file
2018-12-17T22:21:52.918155504Z 26 PC: 5c36b | Set disk transfer address
2018-12-17T22:21:52.920043389Z 79 PC: 5c370 | Find next file
2018-12-17T22:21:52.92279374Z 48 PC: 5cddf | Get DOS version
2018-12-17T22:21:52.926203754Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:52.928088666Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:52.929311546Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:52.931618812Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:52.932854879Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:52.93580294Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:52.937094977Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:52.938699481Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:52.94009559Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:52.941306247Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:52.944012547Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:52.945401306Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:52.947589853Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:52.948965862Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:52.950751424Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:52.952218435Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:52.953484133Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:52.955938821Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:52.957286254Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:52.959567228Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:52.961961082Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:52.964137459Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:52.965785777Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:52.967124796Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:52.969415344Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:52.970654985Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:52.972706891Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:52.973818498Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:52.975035343Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:52.976764503Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:52.978062715Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:52.981898691Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:52.983078133Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:52.985025548Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:52.986195282Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:52.987205553Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:52.989144035Z 53 PC: 5c4ac | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:52.990221865Z 37 PC: 5c4b5 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:52.992332711Z 41 PC: 5c463 | Parse filename
2018-12-17T22:21:52.994167501Z 41 PC: 5c471 | Parse filename
2018-12-17T22:21:52.996144287Z 75 PC: 5c47c | Execute program
2018-12-17T22:21:53.011754272Z 53 PC: 6266a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.013280019Z 53 PC: 6266a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:53.015084999Z 53 PC: 6266a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.01638699Z 53 PC: 6266a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:53.018323517Z 53 PC: 6266a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.019451351Z 53 PC: 6266a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.021619901Z 53 PC: 6266a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:53.022950454Z 53 PC: 6266a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:53.024863542Z 53 PC: 6266a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:53.026137893Z 53 PC: 6266a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:53.027560884Z 53 PC: 6266a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:53.029177872Z 53 PC: 6266a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:53.030311155Z 53 PC: 6266a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:53.031903925Z 53 PC: 6266a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:53.032938628Z 53 PC: 6266a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:53.034940925Z 53 PC: 6266a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:53.036235102Z 53 PC: 6266a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:53.037998756Z 53 PC: 6266a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.039088667Z 53 PC: 6266a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:53.040117508Z 37 PC: 6267f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.041565044Z 37 PC: 62687 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.042534973Z 37 PC: 6268f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.044019576Z 37 PC: 62697 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.045504469Z 68 PC: 631e9 | I/O control for devices (Set for = '')
2018-12-17T22:21:53.112049455Z 37 PC: 61e91 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.113430401Z 44 PC: 63af4 | Get time 0x63af4: mov word ptr [0x3e], cx
0x63af8: mov word ptr [0x40], dx
0x63afc: retf
0x63afd: mov di, 0x52
0x63b00: push ds
0x63b01: pop es
0x63b02: mov cx, 0x25aa
0x63b05: sub cx, di
0x63b07: shr cx, 1
0x63b09: xor ax, ax
0x63b0b: cld
0x63b0c: rep stosd dword ptr es:[di], eax
0x63b0e: ret
0x63b0f: add byte ptr [bx + si], al
0x63b11: add byte ptr [bx + si], al
0x63b13: add byte ptr [bx + si], al
0x63b15: add byte ptr [bx + si], al
0x63b17: add byte ptr [bx + si], al
0x63b19: add byte ptr [si - 0x739a], cl
0x63b1d: mov word ptr [bp], fs
2018-12-17T22:21:53.116047147Z 48 PC: 62f0f | Get DOS version
2018-12-17T22:21:53.11772459Z 61 PC: 62dc1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:53.124353819Z 63 PC: 62e94 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:53.132808224Z 62 PC: 62e11 | Close file
2018-12-17T22:21:53.135001078Z 26 PC: 62477 | Set disk transfer address
2018-12-17T22:21:53.137671675Z 78 PC: 62483 | Find first file
2018-12-17T22:21:53.144446367Z 26 PC: 62477 | Set disk transfer address
2018-12-17T22:21:53.146190533Z 78 PC: 62483 | Find first file
2018-12-17T22:21:53.152352239Z 26 PC: 6249b | Set disk transfer address
2018-12-17T22:21:53.153902488Z 79 PC: 624a0 | Find next file
2018-12-17T22:21:53.158059907Z 48 PC: 62f0f | Get DOS version
2018-12-17T22:21:53.16028399Z 53 PC: 625dc | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.163077581Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.1650915Z 53 PC: 625dc | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:53.167513443Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:53.168971632Z 53 PC: 625dc | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.170655349Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.173251769Z 53 PC: 625dc | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:53.174729767Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:53.177402501Z 53 PC: 625dc | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.178870035Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.181299566Z 53 PC: 625dc | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.182509513Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.183621774Z 53 PC: 625dc | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:53.186155751Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:53.188332387Z 53 PC: 625dc | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:53.190291379Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:53.191349249Z 53 PC: 625dc | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:53.193409614Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:53.194477516Z 53 PC: 625dc | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:53.195742009Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:53.197258579Z 53 PC: 625dc | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:53.198575249Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:53.200074416Z 53 PC: 625dc | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:53.201058213Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:53.202584622Z 53 PC: 625dc | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:53.204447841Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:53.207113507Z 53 PC: 625dc | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:53.208369863Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:53.210937702Z 53 PC: 625dc | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:53.211975214Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:53.213732133Z 53 PC: 625dc | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:53.215108039Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:53.216644585Z 53 PC: 625dc | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:53.218769705Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:53.220083006Z 53 PC: 625dc | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.222069553Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.223121062Z 53 PC: 625dc | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:53.224855948Z 37 PC: 625e5 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:53.226120811Z 41 PC: 62593 | Parse filename
2018-12-17T22:21:53.228231043Z 41 PC: 625a1 | Parse filename
2018-12-17T22:21:53.229542808Z 75 PC: 625ac | Execute program
2018-12-17T22:21:53.244881996Z 53 PC: 6879a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.24618674Z 53 PC: 6879a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:53.248569418Z 53 PC: 6879a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.250367111Z 53 PC: 6879a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:53.251776333Z 53 PC: 6879a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.254428Z 53 PC: 6879a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.255927741Z 53 PC: 6879a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:53.258618238Z 53 PC: 6879a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:53.260080664Z 53 PC: 6879a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:53.262427778Z 53 PC: 6879a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:53.263659651Z 53 PC: 6879a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:53.265011116Z 53 PC: 6879a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:53.269059505Z 53 PC: 6879a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:53.270860981Z 53 PC: 6879a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:53.272102911Z 53 PC: 6879a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:53.273584486Z 53 PC: 6879a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:53.275601584Z 53 PC: 6879a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:53.277285644Z 53 PC: 6879a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.279915147Z 53 PC: 6879a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:53.281046969Z 37 PC: 687af | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.283320161Z 37 PC: 687b7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.28468497Z 37 PC: 687bf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.287092553Z 37 PC: 687c7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.289624243Z 68 PC: 69319 | I/O control for devices (Set for = '')
2018-12-17T22:21:53.398202438Z 37 PC: 67fc1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.4022162Z 44 PC: 69c24 | Get time 0x69c24: mov word ptr [0x3e], cx
0x69c28: mov word ptr [0x40], dx
0x69c2c: retf
0x69c2d: mov di, 0x52
0x69c30: push ds
0x69c31: pop es
0x69c32: mov cx, 0x25aa
0x69c35: sub cx, di
0x69c37: shr cx, 1
0x69c39: xor ax, ax
0x69c3b: cld
0x69c3c: rep stosd dword ptr es:[di], eax
0x69c3e: ret
0x69c3f: add byte ptr [bx + si], al
0x69c41: add byte ptr [bx + si], al
0x69c43: add byte ptr [bx + si], al
0x69c45: add byte ptr [bx + si], al
0x69c47: add byte ptr [bx + si], al
0x69c49: add byte ptr [bx - 0x6094], bl
0x69c4d: insb byte ptr es:[di], dx
2018-12-17T22:21:53.404678999Z 48 PC: 6903f | Get DOS version
2018-12-17T22:21:53.407364233Z 61 PC: 68ef1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:53.414322226Z 63 PC: 68fc4 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:53.422382569Z 62 PC: 68f41 | Close file
2018-12-17T22:21:53.424480662Z 26 PC: 685a7 | Set disk transfer address
2018-12-17T22:21:53.425450511Z 78 PC: 685b3 | Find first file
2018-12-17T22:21:53.430925768Z 26 PC: 685a7 | Set disk transfer address
2018-12-17T22:21:53.431990413Z 78 PC: 685b3 | Find first file
2018-12-17T22:21:53.438651968Z 26 PC: 685cb | Set disk transfer address
2018-12-17T22:21:53.439697279Z 79 PC: 685d0 | Find next file
2018-12-17T22:21:53.443010185Z 48 PC: 6903f | Get DOS version
2018-12-17T22:21:53.444679556Z 53 PC: 6870c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.446670769Z 37 PC: 68715 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.448168446Z 53 PC: 6870c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:53.450066464Z 37 PC: 68715 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:53.45146508Z 53 PC: 6870c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.453055846Z 37 PC: 68715 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.454889117Z 53 PC: 6870c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:53.456293487Z 37 PC: 68715 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:53.458129885Z 53 PC: 6870c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.459515692Z 37 PC: 68715 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.461628256Z 53 PC: 6870c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.462966166Z 37 PC: 68715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.464905779Z 53 PC: 6870c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:53.466325035Z 37 PC: 68715 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:53.468372581Z 53 PC: 6870c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:53.469654295Z 37 PC: 68715 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:53.472123657Z 53 PC: 6870c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:53.473392636Z 37 PC: 68715 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:53.475608514Z 53 PC: 6870c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:53.476770225Z 37 PC: 68715 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:53.479062511Z 53 PC: 6870c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:53.480148941Z 37 PC: 68715 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:53.481646899Z 53 PC: 6870c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:53.483190898Z 37 PC: 68715 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:53.484399093Z 53 PC: 6870c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:53.485979169Z 37 PC: 68715 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:53.487719628Z 53 PC: 6870c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:53.490177284Z 37 PC: 68715 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:53.491213428Z 53 PC: 6870c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:53.493713206Z 37 PC: 68715 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:53.495004783Z 53 PC: 6870c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:53.497028171Z 37 PC: 68715 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:53.498126098Z 53 PC: 6870c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:53.500350066Z 37 PC: 68715 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:53.501553787Z 53 PC: 6870c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.50359336Z 37 PC: 68715 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.504922902Z 53 PC: 6870c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:53.506041775Z 37 PC: 68715 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:53.508194829Z 41 PC: 686c3 | Parse filename
2018-12-17T22:21:53.509555297Z 41 PC: 686d1 | Parse filename
2018-12-17T22:21:53.512132928Z 75 PC: 686dc | Execute program
2018-12-17T22:21:53.526955771Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.529387785Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:53.530849431Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.533040606Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:53.534336281Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.535602583Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.53755774Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:53.538802994Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:53.541585031Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:53.542711897Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:53.544680547Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:53.546040465Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:53.549003617Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:53.550447759Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:53.55318402Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:53.554697736Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:53.557330855Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:53.558837876Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.560739357Z 53 PC: 6e8ca | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:53.562118538Z 37 PC: 6e8df | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.564529557Z 37 PC: 6e8e7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.565938248Z 37 PC: 6e8ef | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.567292009Z 37 PC: 6e8f7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.571442013Z 68 PC: 6f449 | I/O control for devices (Set for = '')
2018-12-17T22:21:53.597185117Z 37 PC: 6e0f1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.599480924Z 44 PC: 6fd54 | Get time 0x6fd54: mov word ptr [0x3e], cx
0x6fd58: mov word ptr [0x40], dx
0x6fd5c: retf
0x6fd5d: mov di, 0x52
0x6fd60: push ds
0x6fd61: pop es
0x6fd62: mov cx, 0x25aa
0x6fd65: sub cx, di
0x6fd67: shr cx, 1
0x6fd69: xor ax, ax
0x6fd6b: cld
0x6fd6c: rep stosd dword ptr es:[di], eax
0x6fd6e: ret
0x6fd6f: add byte ptr [bx + si], al
0x6fd71: add byte ptr [bx + si], al
0x6fd73: add byte ptr [bx + si], al
0x6fd75: add byte ptr [bx + si], al
0x6fd77: add byte ptr [bx + si], al
0x6fd79: add byte ptr [bp + si - 0x4d8e], dh
0x6fd7d: jb 0x6fd31
2018-12-17T22:21:53.602902619Z 48 PC: 6f16f | Get DOS version
2018-12-17T22:21:53.605461297Z 61 PC: 6f021 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:53.614029042Z 63 PC: 6f0f4 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:53.623386382Z 62 PC: 6f071 | Close file
2018-12-17T22:21:53.627306142Z 26 PC: 6e6d7 | Set disk transfer address
2018-12-17T22:21:53.630832544Z 78 PC: 6e6e3 | Find first file
2018-12-17T22:21:53.638767101Z 26 PC: 6e6d7 | Set disk transfer address
2018-12-17T22:21:53.641597026Z 78 PC: 6e6e3 | Find first file
2018-12-17T22:21:53.648372779Z 26 PC: 6e6fb | Set disk transfer address
2018-12-17T22:21:53.64967115Z 79 PC: 6e700 | Find next file
2018-12-17T22:21:53.654045632Z 48 PC: 6f16f | Get DOS version
2018-12-17T22:21:53.657300078Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.659820907Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.661401375Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:53.663350496Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:53.665410078Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.66752777Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.668575115Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:53.672270842Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:53.673480056Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.675684527Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.67676316Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.678881166Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.680371801Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:53.681721879Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:53.684199674Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:53.686901065Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:53.689902709Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:53.69126652Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:53.693669886Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:53.694803879Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:53.697381339Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:53.699084626Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:53.702211253Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:53.703339063Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:53.706760005Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:53.707856393Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:53.710402622Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:53.711528951Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:53.716599047Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:53.718075868Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:53.720420177Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:53.721716311Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:53.724598497Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:53.725687538Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:53.730058431Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.732653069Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.734312793Z 53 PC: 6e83c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:53.736805594Z 37 PC: 6e845 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:53.738384873Z 41 PC: 6e7f3 | Parse filename
2018-12-17T22:21:53.741273794Z 41 PC: 6e801 | Parse filename
2018-12-17T22:21:53.742914012Z 75 PC: 6e80c | Execute program
2018-12-17T22:21:53.759579978Z 53 PC: 749fa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.761829453Z 53 PC: 749fa | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:53.764669257Z 53 PC: 749fa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.76616675Z 53 PC: 749fa | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:53.768699334Z 53 PC: 749fa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.770573856Z 53 PC: 749fa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.772060734Z 53 PC: 749fa | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:53.778359155Z 53 PC: 749fa | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:53.779610631Z 53 PC: 749fa | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:53.781675673Z 53 PC: 749fa | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:53.783074947Z 53 PC: 749fa | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:53.785582707Z 53 PC: 749fa | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:53.786982392Z 53 PC: 749fa | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:53.789600041Z 53 PC: 749fa | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:53.790999222Z 53 PC: 749fa | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:53.793397583Z 53 PC: 749fa | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:53.795106525Z 53 PC: 749fa | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:53.796490627Z 53 PC: 749fa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.799083031Z 53 PC: 749fa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:53.800457549Z 37 PC: 74a0f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.802973636Z 37 PC: 74a17 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.804288447Z 37 PC: 74a1f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.806829657Z 37 PC: 74a27 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.808587032Z 68 PC: 75579 | I/O control for devices (Set for = '')
2018-12-17T22:21:53.844845178Z 37 PC: 74221 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.846701537Z 44 PC: 75e84 | Get time 0x75e84: mov word ptr [0x3e], cx
0x75e88: mov word ptr [0x40], dx
0x75e8c: retf
0x75e8d: mov di, 0x52
0x75e90: push ds
0x75e91: pop es
0x75e92: mov cx, 0x25aa
0x75e95: sub cx, di
0x75e97: shr cx, 1
0x75e99: xor ax, ax
0x75e9b: cld
0x75e9c: rep stosd dword ptr es:[di], eax
0x75e9e: ret
0x75e9f: add byte ptr [bx + si], al
0x75ea1: add byte ptr [bx + si], al
0x75ea3: add byte ptr [bx + si], al
0x75ea5: add byte ptr [bx + si], al
0x75ea7: add byte ptr [bx + si], al
0x75ea9: add ch, al
0x75eab: js 0x75e72
2018-12-17T22:21:53.848921927Z 48 PC: 7529f | Get DOS version
2018-12-17T22:21:53.851796786Z 61 PC: 75151 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:53.858791808Z 63 PC: 75224 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:53.867675726Z 62 PC: 751a1 | Close file
2018-12-17T22:21:53.869882727Z 26 PC: 74807 | Set disk transfer address
2018-12-17T22:21:53.871935697Z 78 PC: 74813 | Find first file
2018-12-17T22:21:53.878491366Z 26 PC: 74807 | Set disk transfer address
2018-12-17T22:21:53.880242728Z 78 PC: 74813 | Find first file
2018-12-17T22:21:53.886281631Z 26 PC: 7482b | Set disk transfer address
2018-12-17T22:21:53.888575637Z 79 PC: 74830 | Find next file
2018-12-17T22:21:53.89140494Z 48 PC: 7529f | Get DOS version
2018-12-17T22:21:53.893836699Z 53 PC: 7496c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.89501609Z 37 PC: 74975 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.896541567Z 53 PC: 7496c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:53.897654123Z 37 PC: 74975 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:53.899237719Z 53 PC: 7496c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.900451468Z 37 PC: 74975 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.901981851Z 53 PC: 7496c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:53.903044541Z 37 PC: 74975 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:53.904413264Z 53 PC: 7496c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.905619435Z 37 PC: 74975 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.906781404Z 53 PC: 7496c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.9081595Z 37 PC: 74975 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.909347825Z 53 PC: 7496c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:53.910871453Z 37 PC: 74975 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:53.912122315Z 53 PC: 7496c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:53.913620492Z 37 PC: 74975 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:53.915548062Z 53 PC: 7496c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:53.916871914Z 37 PC: 74975 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:53.918066875Z 53 PC: 7496c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:53.919262614Z 37 PC: 74975 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:53.920390149Z 53 PC: 7496c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:53.921683698Z 37 PC: 74975 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:53.922754165Z 53 PC: 7496c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:53.924562725Z 37 PC: 74975 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:53.925585207Z 53 PC: 7496c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:53.927258406Z 37 PC: 74975 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:53.928393582Z 53 PC: 7496c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:53.930666526Z 37 PC: 74975 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:53.932054207Z 53 PC: 7496c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:53.937078627Z 37 PC: 74975 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:53.938249664Z 53 PC: 7496c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:53.940020258Z 37 PC: 74975 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:53.941070511Z 53 PC: 7496c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:53.943333124Z 37 PC: 74975 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:53.94461118Z 53 PC: 7496c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.946203412Z 37 PC: 74975 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.947551614Z 53 PC: 7496c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:53.948972323Z 37 PC: 74975 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:53.950531879Z 41 PC: 74923 | Parse filename
2018-12-17T22:21:53.952331987Z 41 PC: 74931 | Parse filename
2018-12-17T22:21:53.954356326Z 75 PC: 7493c | Execute program
2018-12-17T22:21:53.969257342Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.970632409Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:53.971655008Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:53.973379027Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:53.974387622Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.975723611Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.976788179Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:53.978021132Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:53.979058483Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:53.980693869Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:53.981820813Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:53.98402269Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:53.985145871Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:53.986900483Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:53.987942852Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:53.989777559Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:53.990872452Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:53.992054427Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:53.993632264Z 53 PC: 7ab2a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:53.994967599Z 37 PC: 7ab3f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:53.996539594Z 37 PC: 7ab47 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:53.997985509Z 37 PC: 7ab4f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:53.999570525Z 37 PC: 7ab57 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.0012966Z 68 PC: 7b6a9 | I/O control for devices (Set for = '')
2018-12-17T22:21:54.043487424Z 37 PC: 7a351 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.045097073Z 44 PC: 7bfb4 | Get time 0x7bfb4: mov word ptr [0x3e], cx
0x7bfb8: mov word ptr [0x40], dx
0x7bfbc: retf
0x7bfbd: mov di, 0x52
0x7bfc0: push ds
0x7bfc1: pop es
0x7bfc2: mov cx, 0x25aa
0x7bfc5: sub cx, di
0x7bfc7: shr cx, 1
0x7bfc9: xor ax, ax
0x7bfcb: cld
0x7bfcc: rep stosd dword ptr es:[di], eax
0x7bfce: ret
0x7bfcf: add byte ptr [bx + si], al
0x7bfd1: add byte ptr [bx + si], al
0x7bfd3: add byte ptr [bx + si], al
0x7bfd5: add byte ptr [bx + si], al
0x7bfd7: add byte ptr [bx + si], al
0x7bfd9: add al, bl
0x7bfdb: jle 0x7bfb5
2018-12-17T22:21:54.047503323Z 48 PC: 7b3cf | Get DOS version
2018-12-17T22:21:54.048864011Z 61 PC: 7b281 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:54.056213039Z 63 PC: 7b354 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:54.063478092Z 62 PC: 7b2d1 | Close file
2018-12-17T22:21:54.066773085Z 26 PC: 7a937 | Set disk transfer address
2018-12-17T22:21:54.067861546Z 78 PC: 7a943 | Find first file
2018-12-17T22:21:54.075561604Z 26 PC: 7a937 | Set disk transfer address
2018-12-17T22:21:54.076763445Z 78 PC: 7a943 | Find first file
2018-12-17T22:21:54.083378011Z 26 PC: 7a95b | Set disk transfer address
2018-12-17T22:21:54.084429227Z 79 PC: 7a960 | Find next file
2018-12-17T22:21:54.087680514Z 48 PC: 7b3cf | Get DOS version
2018-12-17T22:21:54.089434827Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.09102619Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.092264483Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:54.094106983Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:54.095235103Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.097018111Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.098411793Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:54.100920955Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:54.102345703Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.103837938Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.105248973Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.106358463Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.109024506Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:54.110528544Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:54.112110371Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:54.113172977Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:54.115639349Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:54.116939925Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:54.119010314Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:54.120642892Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:54.122744821Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:54.124132093Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:54.125527148Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:54.126668671Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:54.128109862Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:54.129214388Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:54.13092178Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:54.132138737Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:54.134681966Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:54.135759089Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:54.137373016Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:54.138696914Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:54.140025165Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:54.14146721Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:54.143069113Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.144109778Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.145419139Z 53 PC: 7aa9c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:54.146591267Z 37 PC: 7aaa5 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:54.149057143Z 41 PC: 7aa53 | Parse filename
2018-12-17T22:21:54.150445687Z 41 PC: 7aa61 | Parse filename
2018-12-17T22:21:54.152264771Z 75 PC: 7aa6c | Execute program
2018-12-17T22:21:54.168230278Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.170209024Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:54.17163657Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.174156435Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:54.17558825Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.177934611Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.179348016Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:54.181820008Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:54.183165481Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:54.186360033Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:54.187774797Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:54.190464099Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:54.191868066Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:54.194538766Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:54.195957057Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:54.198622554Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:54.200017204Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:54.20268488Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.20406136Z 53 PC: 80c5a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:54.206474802Z 37 PC: 80c6f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.207598741Z 37 PC: 80c77 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.209536808Z 37 PC: 80c7f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.210567712Z 37 PC: 80c87 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.212912113Z 68 PC: 817d9 | I/O control for devices (Set for = '')
2018-12-17T22:21:54.290731791Z 37 PC: 80481 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.293575223Z 44 PC: 820e4 | Get time 0x820e4: mov word ptr [0x3e], cx
0x820e8: mov word ptr [0x40], dx
0x820ec: retf
0x820ed: mov di, 0x52
0x820f0: push ds
0x820f1: pop es
0x820f2: mov cx, 0x25aa
0x820f5: sub cx, di
0x820f7: shr cx, 1
0x820f9: xor ax, ax
0x820fb: cld
0x820fc: rep stosd dword ptr es:[di], eax
0x820fe: ret
0x820ff: add byte ptr [bx + si], al
0x82101: add byte ptr [bx + si], al
0x82103: add byte ptr [bx + si], al
0x82105: add byte ptr [bx + si], al
0x82107: add byte ptr [bx + si], al
0x82109: add bl, ch
0x8210b: test ch, bl
2018-12-17T22:21:54.296224326Z 48 PC: 814ff | Get DOS version
2018-12-17T22:21:54.298532702Z 61 PC: 813b1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:54.305508537Z 63 PC: 81484 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:54.313582887Z 62 PC: 81401 | Close file
2018-12-17T22:21:54.315639276Z 26 PC: 80a67 | Set disk transfer address
2018-12-17T22:21:54.317916885Z 78 PC: 80a73 | Find first file
2018-12-17T22:21:54.325942968Z 26 PC: 80a67 | Set disk transfer address
2018-12-17T22:21:54.328229754Z 78 PC: 80a73 | Find first file
2018-12-17T22:21:54.335536767Z 26 PC: 80a8b | Set disk transfer address
2018-12-17T22:21:54.337780516Z 79 PC: 80a90 | Find next file
2018-12-17T22:21:54.341951316Z 48 PC: 814ff | Get DOS version
2018-12-17T22:21:54.344891491Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.346342003Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.348400224Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:54.349831852Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:54.351961497Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.353402968Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.355531572Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:54.356957951Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:54.359408496Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.360855111Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.363327109Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.364687916Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.36682907Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:54.36824193Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:54.370334928Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:54.371746176Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:54.373580769Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:54.374859596Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:54.376214585Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:54.378967837Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:54.380236476Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:54.38280859Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:54.38432954Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:54.385704939Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:54.388120253Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:54.389377968Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:54.391696888Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:54.392853604Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:54.395183551Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:54.39629435Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:54.398843499Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:54.400055911Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:54.402637155Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:54.404042099Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:54.406490566Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.407842851Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.40992862Z 53 PC: 80bcc | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:54.411010922Z 37 PC: 80bd5 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:54.413835391Z 41 PC: 80b83 | Parse filename
2018-12-17T22:21:54.415721852Z 41 PC: 80b91 | Parse filename
2018-12-17T22:21:54.418081145Z 75 PC: 80b9c | Execute program
2018-12-17T22:21:54.433623677Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.435909514Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:54.437395795Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.440043516Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:54.441470377Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.44409468Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.445596162Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:54.447349886Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:54.449067494Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:54.450525923Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:54.452895562Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:54.454361475Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:54.460659122Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:54.461851352Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:54.463969229Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:54.465377015Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:54.467283306Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:54.468737075Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.470638547Z 53 PC: 86d8a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:54.471747647Z 37 PC: 86d9f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.473475944Z 37 PC: 86da7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.474486188Z 37 PC: 86daf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.476901279Z 37 PC: 86db7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.478639667Z 68 PC: 87909 | I/O control for devices (Set for = 'N')
2018-12-17T22:21:54.491477236Z 37 PC: 865b1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.493063784Z 44 PC: 88214 | Get time 0x88214: mov word ptr [0x3e], cx
0x88218: mov word ptr [0x40], dx
0x8821c: retf
0x8821d: mov di, 0x52
0x88220: push ds
0x88221: pop es
0x88222: mov cx, 0x25aa
0x88225: sub cx, di
0x88227: shr cx, 1
0x88229: xor ax, ax
0x8822b: cld
0x8822c: rep stosd dword ptr es:[di], eax
0x8822e: ret
0x8822f: add byte ptr [bx + si], al
0x88231: add byte ptr [bx + si], al
0x88233: add byte ptr [bx + si], al
0x88235: add byte ptr [bx + si], al
0x88237: add byte ptr [bx + si], al
0x88239: add dh, bh
0x8823b: mov bh, dh
2018-12-17T22:21:54.496320053Z 48 PC: 8762f | Get DOS version
2018-12-17T22:21:54.5019049Z 61 PC: 874e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:54.509159549Z 63 PC: 875b4 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:54.517938028Z 62 PC: 87531 | Close file
2018-12-17T22:21:54.520106154Z 26 PC: 86b97 | Set disk transfer address
2018-12-17T22:21:54.522643767Z 78 PC: 86ba3 | Find first file
2018-12-17T22:21:54.530201234Z 26 PC: 86b97 | Set disk transfer address
2018-12-17T22:21:54.531931288Z 78 PC: 86ba3 | Find first file
2018-12-17T22:21:54.538107284Z 26 PC: 86bbb | Set disk transfer address
2018-12-17T22:21:54.54063056Z 79 PC: 86bc0 | Find next file
2018-12-17T22:21:54.544068287Z 48 PC: 8762f | Get DOS version
2018-12-17T22:21:54.546784557Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.548167997Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.550248457Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:54.551655041Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:54.553555826Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.555249944Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.556482221Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:54.558619475Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:54.559944387Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.564333013Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.565661004Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.567854916Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.56921997Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:54.571779534Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:54.573340118Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:54.574739116Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:54.577559156Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:54.578777235Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:54.581664486Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:54.583039639Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:54.585194349Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:54.586564998Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:54.598736084Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:54.600101269Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:54.603079198Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:54.604549895Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:54.607289291Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:54.609222561Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:54.611969681Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:54.61344017Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:54.616155597Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:54.617605075Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:54.620298024Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:54.621724528Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:54.624412422Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.625839729Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.628516744Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:54.629940124Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:54.632784646Z 41 PC: 86cb3 | Parse filename
2018-12-17T22:21:54.634471306Z 41 PC: 86cc1 | Parse filename
2018-12-17T22:21:54.637487547Z 75 PC: 86ccc | Execute program
2018-12-17T22:21:54.655110444Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.657438021Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:54.658655405Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.660637802Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:54.661926651Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.663037061Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.664576176Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:54.666033382Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:54.667140364Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:54.669406936Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:54.670547174Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:54.671908167Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:54.682209084Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:54.684252956Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:54.687180983Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:54.690588932Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:54.692293717Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:54.694799599Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.696340906Z 53 PC: 8ceba | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:54.698190178Z 37 PC: 8cecf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.699843679Z 37 PC: 8ced7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.701053392Z 37 PC: 8cedf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.704064068Z 37 PC: 8cee7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.706072588Z 68 PC: 8da39 | I/O control for devices (Set for = '=')
2018-12-17T22:21:54.801772509Z 37 PC: 8c6e1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.803283445Z 44 PC: 8e344 | Get time 0x8e344: mov word ptr [0x3e], cx
0x8e348: mov word ptr [0x40], dx
0x8e34c: retf
0x8e34d: mov di, 0x52
0x8e350: push ds
0x8e351: pop es
0x8e352: mov cx, 0x25aa
0x8e355: sub cx, di
0x8e357: shr cx, 1
0x8e359: xor ax, ax
0x8e35b: cld
0x8e35c: rep stosd dword ptr es:[di], eax
0x8e35e: ret
0x8e35f: add byte ptr [bx + si], al
0x8e361: add byte ptr [bx + si], al
0x8e363: add byte ptr [bx + si], al
0x8e365: add byte ptr [bx + si], al
0x8e367: add byte ptr [bx + si], al
0x8e369: add byte ptr [bx + di], dl
0x8e36b: xchg ax, cx
2018-12-17T22:21:54.806137423Z 48 PC: 8d75f | Get DOS version
2018-12-17T22:21:54.807806318Z 61 PC: 8d611 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:54.814731194Z 63 PC: 8d6e4 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:54.824163376Z 62 PC: 8d661 | Close file
2018-12-17T22:21:54.826594347Z 26 PC: 8ccc7 | Set disk transfer address
2018-12-17T22:21:54.828294399Z 78 PC: 8ccd3 | Find first file
2018-12-17T22:21:54.835091985Z 26 PC: 8ccc7 | Set disk transfer address
2018-12-17T22:21:54.837694321Z 78 PC: 8ccd3 | Find first file
2018-12-17T22:21:54.843884818Z 26 PC: 8cceb | Set disk transfer address
2018-12-17T22:21:54.846371981Z 79 PC: 8ccf0 | Find next file
2018-12-17T22:21:54.849362889Z 48 PC: 8d75f | Get DOS version
2018-12-17T22:21:54.850633246Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.85201765Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.852931424Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:54.85376275Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:54.855350579Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.856352014Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.857560623Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:54.858353118Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:54.859815574Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.860809297Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.862445124Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.86341354Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.864349002Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:54.865749628Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:54.866595647Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:54.868135014Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:54.86896581Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:54.870721599Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:54.871626171Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:54.873354021Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:54.874375652Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:54.875262657Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:54.877387359Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:54.878535636Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:54.880188227Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:54.881091345Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:54.882755327Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:54.883687659Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:54.886680424Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:54.887903964Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:54.888674059Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:54.890022657Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:54.890848546Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:54.892443557Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:54.893299876Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.894649993Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.895448455Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:54.896457668Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:54.898396475Z 41 PC: 8cde3 | Parse filename
2018-12-17T22:21:54.899428035Z 41 PC: 8cdf1 | Parse filename
2018-12-17T22:21:54.901320777Z 75 PC: 8cdfc | Execute program
2018-12-17T22:21:54.911745564Z 53 PC: 92fea | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.913607698Z 53 PC: 92fea | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:54.914566239Z 53 PC: 92fea | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:54.91633609Z 53 PC: 92fea | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:54.917464135Z 53 PC: 92fea | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.919183772Z 53 PC: 92fea | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.920167066Z 53 PC: 92fea | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:54.921305587Z 53 PC: 92fea | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:54.922963712Z 53 PC: 92fea | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:54.923883195Z 53 PC: 92fea | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:54.925686716Z 53 PC: 92fea | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:54.926648887Z 53 PC: 92fea | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:54.928579825Z 53 PC: 92fea | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:54.929481621Z 53 PC: 92fea | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:54.931284996Z 53 PC: 92fea | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:54.93224056Z 53 PC: 92fea | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:54.933857064Z 53 PC: 92fea | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:54.934813318Z 53 PC: 92fea | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.935934519Z 53 PC: 92fea | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:54.937879495Z 37 PC: 92fff | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:54.938763886Z 37 PC: 93007 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:54.940327205Z 37 PC: 9300f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:54.941184532Z 37 PC: 93017 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:54.942992788Z 68 PC: 93b69 | I/O control for devices
2018-12-17T22:21:55.025212793Z 37 PC: 92811 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.028255068Z 44 PC: 94474 | Get time 0x94474: mov word ptr [0x3e], cx
0x94478: mov word ptr [0x40], dx
0x9447c: retf
0x9447d: mov di, 0x52
0x94480: push ds
0x94481: pop es
0x94482: mov cx, 0x25aa
0x94485: sub cx, di
0x94487: shr cx, 1
0x94489: xor ax, ax
0x9448b: cld
0x9448c: rep stosd dword ptr es:[di], eax
0x9448e: ret
0x9448f: add byte ptr [bx + si], al
0x94491: add byte ptr [bx + si], al
0x94493: add byte ptr [bx + si], al
0x94495: add byte ptr [bx + si], al
0x94497: add byte ptr [bx + si], al
0x94499: add byte ptr [si], ah
0x9449b: xchg ax, di
2018-12-17T22:21:55.031299312Z 48 PC: 9388f | Get DOS version
2018-12-17T22:21:55.033066893Z 61 PC: 93741 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:55.041522522Z 63 PC: 93814 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:55.049602715Z 62 PC: 93791 | Close file
2018-12-17T22:21:55.051949766Z 26 PC: 92df7 | Set disk transfer address
2018-12-17T22:21:55.052973969Z 78 PC: 92e03 | Find first file
2018-12-17T22:21:55.058827808Z 26 PC: 92df7 | Set disk transfer address
2018-12-17T22:21:55.060002695Z 78 PC: 92e03 | Find first file
2018-12-17T22:21:55.06427226Z 26 PC: 92e1b | Set disk transfer address
2018-12-17T22:21:55.065047264Z 79 PC: 92e20 | Find next file
2018-12-17T22:21:55.067549294Z 48 PC: 9388f | Get DOS version
2018-12-17T22:21:55.069069652Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.070164878Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.071288707Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.072391371Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.074206868Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.075343015Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.076972584Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.077832537Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.079464177Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.080367979Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.08178463Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.082713843Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.083988387Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.085641625Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.086562848Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.088192463Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.089087326Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.090817866Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.091688128Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.093389993Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.094320535Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.095906817Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.096947514Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.098028444Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.099786813Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.101877718Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.102836525Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.103856448Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.105456107Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.106937976Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.108512642Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.109435663Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.111045188Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.111956856Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.113628849Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.114562342Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.115957586Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.117030962Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.118043552Z 41 PC: 92f13 | Parse filename
2018-12-17T22:21:55.120001616Z 41 PC: 92f21 | Parse filename
2018-12-17T22:21:55.121044058Z 75 PC: 92f2c | Execute program
2018-12-17T22:21:55.13142274Z 53 PC: 9911a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.132562536Z 53 PC: 9911a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.133595154Z 53 PC: 9911a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.135318098Z 53 PC: 9911a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.136283709Z 53 PC: 9911a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.137616656Z 53 PC: 9911a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.138777831Z 53 PC: 9911a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.139678639Z 53 PC: 9911a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.141290762Z 53 PC: 9911a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.142200953Z 53 PC: 9911a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.143741253Z 53 PC: 9911a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.144627609Z 53 PC: 9911a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.145576173Z 53 PC: 9911a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.147092793Z 53 PC: 9911a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.147999452Z 53 PC: 9911a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.149362361Z 53 PC: 9911a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.150458173Z 53 PC: 9911a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.151344878Z 53 PC: 9911a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.153193573Z 53 PC: 9911a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.154170769Z 37 PC: 9912f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.155086986Z 37 PC: 99137 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.156573369Z 37 PC: 9913f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.1574186Z 37 PC: 99147 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.159328683Z 68 PC: 99c99 | I/O control for devices
2018-12-17T22:21:55.242286888Z 37 PC: 98941 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.244078254Z 44 PC: 9a5a4 | Get time 0x9a5a4: mov word ptr [0x3e], cx
0x9a5a8: mov word ptr [0x40], dx
0x9a5ac: retf
0x9a5ad: mov di, 0x52
0x9a5b0: push ds
0x9a5b1: pop es
0x9a5b2: mov cx, 0x25aa
0x9a5b5: sub cx, di
0x9a5b7: shr cx, 1
0x9a5b9: xor ax, ax
0x9a5bb: cld
0x9a5bc: rep stosd dword ptr es:[di], eax
0x9a5be: ret
0x9a5bf: add byte ptr [bx + si], al
0x9a5c1: add byte ptr [bx + si], al
0x9a5c3: add byte ptr [bx + si], al
0x9a5c5: add byte ptr [bx + si], al
0x9a5c7: add byte ptr [bx + si], al
0x9a5c9: add byte ptr [bx], dh
0x9a5cb: popf
2018-12-17T22:21:55.246955901Z 48 PC: 999bf | Get DOS version
2018-12-17T22:21:55.248873356Z 61 PC: 99871 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:55.255166403Z 63 PC: 99944 | Read file or device (Read 8001 bytes on handle 5)
2018-12-17T22:21:55.260282855Z 62 PC: 998c1 | Close file
2018-12-17T22:21:55.262953976Z 26 PC: 98f27 | Set disk transfer address
2018-12-17T22:21:55.263945243Z 78 PC: 98f33 | Find first file
2018-12-17T22:21:55.268941658Z 26 PC: 98f27 | Set disk transfer address
2018-12-17T22:21:55.269934468Z 78 PC: 98f33 | Find first file
2018-12-17T22:21:55.275354906Z 26 PC: 98f4b | Set disk transfer address
2018-12-17T22:21:55.276388508Z 79 PC: 98f50 | Find next file
2018-12-17T22:21:55.278597754Z 48 PC: 999bf | Get DOS version
2018-12-17T22:21:55.280661493Z 53 PC: 9908c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.281783715Z 37 PC: 99095 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.284028159Z 53 PC: 9908c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.285074657Z 37 PC: 99095 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.286986747Z 53 PC: 9908c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.287998395Z 37 PC: 99095 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.289785135Z 53 PC: 9908c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.290868777Z 37 PC: 99095 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.292197351Z 53 PC: 9908c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.294514039Z 37 PC: 99095 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.295794873Z 53 PC: 9908c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.30075269Z 37 PC: 99095 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.301929963Z 53 PC: 9908c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.30366235Z 37 PC: 99095 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.304895694Z 53 PC: 9908c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.305917282Z 37 PC: 99095 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.307852552Z 53 PC: 9908c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.3089586Z 37 PC: 99095 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.31051978Z 53 PC: 9908c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.311986649Z 37 PC: 99095 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.313028199Z 53 PC: 9908c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.31494761Z 37 PC: 99095 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.315942172Z 53 PC: 9908c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.317857337Z 37 PC: 99095 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.318880625Z 53 PC: 9908c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.320515488Z 37 PC: 99095 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.322031869Z 53 PC: 9908c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.323062566Z 37 PC: 99095 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.325196029Z 53 PC: 9908c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.326348579Z 37 PC: 99095 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.328095942Z 53 PC: 9908c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.329188925Z 37 PC: 99095 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.33025184Z 53 PC: 9908c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.331877649Z 37 PC: 99095 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.332857086Z 53 PC: 9908c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.334642256Z 37 PC: 99095 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.335527324Z 53 PC: 9908c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.337006816Z 37 PC: 99095 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.338190182Z 41 PC: 99043 | Parse filename
2018-12-17T22:21:55.339479955Z 41 PC: 99051 | Parse filename
2018-12-17T22:21:55.34164589Z 75 PC: 9905c | Execute program
2018-12-17T22:21:55.34797983Z 53 PC: 9908c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.349326238Z 37 PC: 99095 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.351456726Z 53 PC: 9908c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.35249108Z 37 PC: 99095 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.354378006Z 53 PC: 9908c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.35535236Z 37 PC: 99095 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.356802943Z 53 PC: 9908c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.358121447Z 37 PC: 99095 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.359083491Z 53 PC: 9908c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.360967877Z 37 PC: 99095 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.361979608Z 53 PC: 9908c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.363720676Z 37 PC: 99095 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.364735927Z 53 PC: 9908c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.365746925Z 37 PC: 99095 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.367397919Z 53 PC: 9908c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.368430502Z 37 PC: 99095 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.37028263Z 53 PC: 9908c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.371719802Z 37 PC: 99095 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.373920343Z 53 PC: 9908c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.375484454Z 37 PC: 99095 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.376877994Z 53 PC: 9908c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.379562258Z 37 PC: 99095 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.380910671Z 53 PC: 9908c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.383453566Z 37 PC: 99095 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.384854576Z 53 PC: 9908c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.387483432Z 37 PC: 99095 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.388912175Z 53 PC: 9908c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.390691174Z 37 PC: 99095 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.393266842Z 53 PC: 9908c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.394777129Z 37 PC: 99095 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.397380402Z 53 PC: 9908c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.398804394Z 37 PC: 99095 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.401441289Z 53 PC: 9908c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.402850042Z 37 PC: 99095 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.405460208Z 53 PC: 9908c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.406828102Z 37 PC: 99095 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.408338211Z 53 PC: 9908c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.410647003Z 37 PC: 99095 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.412097485Z 77 PC: 9907a | Get program return code
2018-12-17T22:21:55.414831637Z 37 PC: 99271 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.415898992Z 37 PC: 99271 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.417912486Z 37 PC: 99271 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.419201317Z 37 PC: 99271 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.421230558Z 37 PC: 99271 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.423482029Z 37 PC: 99271 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.424993687Z 37 PC: 99271 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.42711465Z 37 PC: 99271 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.428331983Z 37 PC: 99271 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.429790675Z 37 PC: 99271 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.432077566Z 37 PC: 99271 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.433238766Z 37 PC: 99271 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.435146147Z 37 PC: 99271 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.436923436Z 37 PC: 99271 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.438359177Z 37 PC: 99271 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.44079856Z 37 PC: 99271 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.442251355Z 37 PC: 99271 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.443331467Z 37 PC: 99271 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.445545433Z 37 PC: 99271 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.446693021Z 76 PC: 992b0 | Terminate with return code (Return code = '0')
2018-12-17T22:21:55.449554588Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.451967986Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.453072398Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.454181006Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.456404381Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.45760366Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.45867381Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.460917125Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.462821131Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.463936028Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.46635489Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.467462293Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.470453493Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.471500656Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.472648189Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.480951899Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.482280442Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.48491319Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.486233067Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.487825346Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.4897606Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.491063935Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.494291135Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.495514929Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.498223969Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.499526425Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.502021607Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.503103408Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.504057627Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.505523026Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.506777808Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.508661331Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.510103063Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.511499703Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.513262153Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.515046514Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.516401978Z 53 PC: 92f5c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.518281689Z 37 PC: 92f65 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.519797407Z 77 PC: 92f4a | Get program return code
2018-12-17T22:21:55.521454091Z 37 PC: 93141 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.52327211Z 37 PC: 93141 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.525012326Z 37 PC: 93141 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.526352769Z 37 PC: 93141 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.529365317Z 37 PC: 93141 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.530671944Z 37 PC: 93141 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.533393393Z 37 PC: 93141 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.534638897Z 37 PC: 93141 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.535506016Z 37 PC: 93141 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.538304274Z 37 PC: 93141 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.539676194Z 37 PC: 93141 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.542469771Z 37 PC: 93141 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.543800908Z 37 PC: 93141 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.546957488Z 37 PC: 93141 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.548409615Z 37 PC: 93141 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.550030204Z 37 PC: 93141 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.552746502Z 37 PC: 93141 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.553849047Z 37 PC: 93141 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.556979294Z 37 PC: 93141 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.558329135Z 76 PC: 93180 | Terminate with return code (Return code = '0')
2018-12-17T22:21:55.562404196Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.563727591Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.565231045Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.567812012Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.569099852Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.572141854Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.573441195Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.576195653Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.577508097Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.580492749Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.582018246Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.585144144Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.586571957Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.587959119Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.590846759Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.592424637Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.595404934Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.59778572Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.602155634Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.606190586Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.607995629Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.611592603Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.614535207Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.621257569Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.623187737Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.625086336Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.628786129Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.631005147Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.633220979Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.634663274Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.636180623Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.639450656Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.64120424Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.644660714Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.64634162Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.648580468Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.65277689Z 53 PC: 8ce2c | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.65491586Z 37 PC: 8ce35 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.659450005Z 77 PC: 8ce1a | Get program return code
2018-12-17T22:21:55.662541828Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.665577593Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.666629004Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.667889718Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.670158988Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.671423401Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.673463177Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.675071854Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.676615466Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.678007009Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.679693886Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.681419479Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.684578692Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.686153318Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.687926542Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.690371938Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.691809125Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.694807871Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.696184665Z 37 PC: 8d011 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.699129586Z 76 PC: 8d050 | Terminate with return code (Return code = '0')
2018-12-17T22:21:55.702344454Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.70378038Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:55.707077184Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.71111868Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:55.720283521Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.721891405Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:55.724944872Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.726525955Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:55.72801774Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.730995166Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:55.732464849Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.735406856Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:55.736836444Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.739655095Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:55.741551938Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.742997989Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:55.745850625Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.747298297Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:55.750526117Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.751991894Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:55.753625024Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.757008656Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:55.758512138Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.761347294Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:55.762758819Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.765578436Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:55.76699339Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.768430704Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:55.771220751Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.7726474Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:55.775435362Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.776865422Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:55.77963623Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.781096925Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:55.782589974Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.797867578Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:55.799925616Z 53 PC: 86cfc | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.802885341Z 37 PC: 86d05 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:55.806274491Z 44 PC: 88214 | Get time 0x88214: mov word ptr [0x3e], cx
0x88218: mov word ptr [0x40], dx
0x8821c: retf
0x8821d: mov di, 0x52
0x88220: push ds
0x88221: pop es
0x88222: mov cx, 0x25aa
0x88225: sub cx, di
0x88227: shr cx, 1
0x88229: xor ax, ax
0x8822b: cld
0x8822c: rep stosd dword ptr es:[di], eax
0x8822e: ret
0x8822f: add byte ptr [bx + si], al
0x88231: add byte ptr [bx + si], al
0x88233: add byte ptr [bx + si], al
0x88235: add byte ptr [bx + si], al
0x88237: add byte ptr [bx + si], al
0x88239: add dh, bh
0x8823b: mov bh, dh
2018-12-17T22:21:55.926470257Z 8 PC: 86463 | Console input without echo