Sample viewer

vx.netlux.org/Virus.DOS.HLLC.Cruz.8210

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:27:21.666170817Z 53 PC: 137fa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:21.668329845Z 53 PC: 137fa | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:21.669753675Z 53 PC: 137fa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:21.670957914Z 53 PC: 137fa | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:21.672979878Z 53 PC: 137fa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:21.674461618Z 53 PC: 137fa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:21.675871317Z 53 PC: 137fa | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:21.677292092Z 53 PC: 137fa | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:21.679125376Z 53 PC: 137fa | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:21.680234509Z 53 PC: 137fa | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:21.681331959Z 53 PC: 137fa | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:21.683560735Z 53 PC: 137fa | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:21.684650476Z 53 PC: 137fa | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:21.685790218Z 53 PC: 137fa | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:21.68969095Z 53 PC: 137fa | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:21.692202401Z 53 PC: 137fa | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:21.694504669Z 53 PC: 137fa | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:21.696741656Z 53 PC: 137fa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:21.699234751Z 53 PC: 137fa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:21.700401337Z 37 PC: 1380f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:21.701965577Z 37 PC: 13817 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:21.703075254Z 37 PC: 1381f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:21.704126231Z 37 PC: 13827 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:21.705998947Z 68 PC: 145c6 | I/O control for devices (Set for = '��ыϋޓ��_^����3ҋ��+��r�؀>��')
2018-12-17T22:27:21.707600371Z 42 PC: 13557 | Get date 0x13557: xor ah, ah
0x13559: les di, ptr [bp + 6]
0x1355c: stosw word ptr es:[di], ax
0x1355d: mov al, dl
0x1355f: les di, ptr [bp + 0xa]
0x13562: stosw word ptr es:[di], ax
0x13563: mov al, dh
0x13565: les di, ptr [bp + 0xe]
0x13568: stosw word ptr es:[di], ax
0x13569: xchg ax, cx
0x1356a: les di, ptr [bp + 0x12]
0x1356d: stosw word ptr es:[di], ax
0x1356e: pop bp
0x1356f: retf 0x10
0x13572: push bp
0x13573: mov bp, sp
0x13575: mov cx, word ptr [bp + 0xa]
0x13578: mov dh, byte ptr [bp + 8]
0x1357b: mov dl, byte ptr [bp + 6]
0x1357e: mov ah, 0x2b
2018-12-17T22:27:21.709170493Z 25 PC: 1416f | Get default drive
2018-12-17T22:27:21.710672195Z 71 PC: 14182 | Get current directory
2018-12-17T22:27:21.712574336Z 44 PC: 146fd | Get time 0x146fd: mov word ptr [0x3e], cx
0x14701: mov word ptr [0x40], dx
0x14705: retf
0x14706: call 0x1474d
0x14709: jb 0x1471a
0x1470b: mov cx, word ptr es:[di + 4]
0x1470f: cmp cx, 1
0x14712: je 0x1471a
0x14714: xor bx, bx
0x14716: push cs
0x14717: call 0x2427a
0x1471a: retf 4
0x1471d: call 0x1474d
0x14720: jb 0x14735
0x14722: mov ax, cx
0x14724: mov dx, bx
0x14726: mov cx, word ptr es:[di + 4]
0x1472a: cmp cx, 1
0x1472d: je 0x14735
0x1472f: xor bx, bx
2018-12-17T22:27:21.714124446Z 48 PC: 140e2 | Get DOS version
2018-12-17T22:27:21.715566733Z 61 PC: 13f20 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:21.720337137Z 66 PC: 14767 | Move file pointer
2018-12-17T22:27:21.721340806Z 66 PC: 14775 | Move file pointer
2018-12-17T22:27:21.722572807Z 66 PC: 14783 | Move file pointer
2018-12-17T22:27:21.724075919Z 63 PC: 13ff3 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:21.728979986Z 62 PC: 13f70 | Close file
2018-12-17T22:27:21.730894382Z 14 PC: 141c8 | Set default drive (Drive = 'A')
2018-12-17T22:27:21.732497086Z 25 PC: 141cc | Get default drive
2018-12-17T22:27:21.73337483Z 59 PC: 14236 | Change current directory
2018-12-17T22:27:21.736036384Z 26 PC: 1366f | Set disk transfer address
2018-12-17T22:27:21.737591401Z 78 PC: 1367b | Find first file
2018-12-17T22:27:21.741405384Z 26 PC: 13693 | Set disk transfer address
2018-12-17T22:27:21.742317142Z 79 PC: 13698 | Find next file
2018-12-17T22:27:21.744523792Z 26 PC: 13693 | Set disk transfer address
2018-12-17T22:27:21.745802869Z 79 PC: 13698 | Find next file
2018-12-17T22:27:21.747845791Z 26 PC: 13693 | Set disk transfer address
2018-12-17T22:27:21.74907166Z 79 PC: 13698 | Find next file
2018-12-17T22:27:21.750790894Z 26 PC: 13693 | Set disk transfer address
2018-12-17T22:27:21.751974144Z 79 PC: 13698 | Find next file
2018-12-17T22:27:21.75436487Z 26 PC: 13693 | Set disk transfer address
2018-12-17T22:27:21.755187284Z 79 PC: 13698 | Find next file
2018-12-17T22:27:21.756952829Z 26 PC: 13693 | Set disk transfer address
2018-12-17T22:27:21.758098727Z 79 PC: 13698 | Find next file
2018-12-17T22:27:21.759849566Z 26 PC: 13693 | Set disk transfer address
2018-12-17T22:27:21.760672549Z 79 PC: 13698 | Find next file
2018-12-17T22:27:21.762928766Z 26 PC: 13693 | Set disk transfer address
2018-12-17T22:27:21.763791041Z 79 PC: 13698 | Find next file
2018-12-17T22:27:21.765609749Z 26 PC: 13693 | Set disk transfer address
2018-12-17T22:27:21.766948812Z 79 PC: 13698 | Find next file
2018-12-17T22:27:21.768677935Z 26 PC: 13693 | Set disk transfer address
2018-12-17T22:27:21.769495043Z 79 PC: 13698 | Find next file
2018-12-17T22:27:21.771842237Z 26 PC: 13693 | Set disk transfer address
2018-12-17T22:27:21.772788908Z 79 PC: 13698 | Find next file
2018-12-17T22:27:21.774620805Z 26 PC: 13693 | Set disk transfer address
2018-12-17T22:27:21.776346848Z 79 PC: 13698 | Find next file
2018-12-17T22:27:21.77811507Z 26 PC: 13693 | Set disk transfer address
2018-12-17T22:27:21.778964527Z 79 PC: 13698 | Find next file
2018-12-17T22:27:21.781996954Z 26 PC: 13693 | Set disk transfer address
2018-12-17T22:27:21.782867229Z 79 PC: 13698 | Find next file
2018-12-17T22:27:21.784724119Z 26 PC: 13693 | Set disk transfer address
2018-12-17T22:27:21.786284164Z 79 PC: 13698 | Find next file
2018-12-17T22:27:21.788123338Z 14 PC: 141c8 | Set default drive (Drive = 'A')
2018-12-17T22:27:21.789072645Z 25 PC: 141cc | Get default drive
2018-12-17T22:27:21.790874137Z 59 PC: 14236 | Change current directory
2018-12-17T22:27:21.793601144Z 48 PC: 140e2 | Get DOS version
2018-12-17T22:27:21.795160969Z 48 PC: 140e2 | Get DOS version
2018-12-17T22:27:21.797538979Z 53 PC: 13770 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:21.799357991Z 37 PC: 13779 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:21.800493033Z 53 PC: 13770 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:21.802036682Z 37 PC: 13779 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:21.80326733Z 53 PC: 13770 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:21.804436134Z 37 PC: 13779 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:21.806225493Z 53 PC: 13770 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:21.807433646Z 37 PC: 13779 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:21.80859814Z 53 PC: 13770 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:21.810265591Z 37 PC: 13779 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:21.81130629Z 53 PC: 13770 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:21.812327658Z 37 PC: 13779 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:21.814332864Z 53 PC: 13770 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:21.815550558Z 37 PC: 13779 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:21.816582141Z 53 PC: 13770 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:21.820795706Z 37 PC: 13779 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:21.822215066Z 53 PC: 13770 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:21.82316806Z 37 PC: 13779 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:21.82458471Z 53 PC: 13770 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:21.8255671Z 37 PC: 13779 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:21.82650112Z 53 PC: 13770 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:21.827966212Z 37 PC: 13779 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:21.828985419Z 53 PC: 13770 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:21.830047382Z 37 PC: 13779 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:21.831450245Z 53 PC: 13770 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:21.832404163Z 37 PC: 13779 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:21.833470768Z 53 PC: 13770 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:21.834912101Z 37 PC: 13779 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:21.836058482Z 53 PC: 13770 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:21.836985569Z 37 PC: 13779 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:21.838369193Z 53 PC: 13770 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:21.839270051Z 37 PC: 13779 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:21.840170018Z 53 PC: 13770 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:21.84164325Z 37 PC: 13779 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:21.842567131Z 53 PC: 13770 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:21.843475253Z 37 PC: 13779 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:21.845016838Z 53 PC: 13770 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:21.845815534Z 37 PC: 13779 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:21.846594565Z 41 PC: 13727 | Parse filename
2018-12-17T22:27:21.848234927Z 41 PC: 13735 | Parse filename
2018-12-17T22:27:21.849456736Z 75 PC: 13740 | Execute program
2018-12-17T22:27:21.859187018Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:21.860169386Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:21.861415398Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:21.862479924Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:21.863657109Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:21.865150133Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:21.866185457Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:21.867968175Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:21.869115843Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:21.870130239Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:21.871409338Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:21.872697996Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:21.873830814Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:21.875064245Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:21.876437916Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:21.877551465Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:21.879434776Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:21.880713274Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:21.881886744Z 53 PC: 1be9a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:21.88349598Z 37 PC: 1beaf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:21.884784948Z 37 PC: 1beb7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:21.885827325Z 37 PC: 1bebf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:21.887365718Z 37 PC: 1bec7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:21.888745845Z 68 PC: 1cc66 | I/O control for devices (Set for = '')
2018-12-17T22:27:21.890937498Z 42 PC: 1bbf7 | Get date 0x1bbf7: xor ah, ah
0x1bbf9: les di, ptr [bp + 6]
0x1bbfc: stosw word ptr es:[di], ax
0x1bbfd: mov al, dl
0x1bbff: les di, ptr [bp + 0xa]
0x1bc02: stosw word ptr es:[di], ax
0x1bc03: mov al, dh
0x1bc05: les di, ptr [bp + 0xe]
0x1bc08: stosw word ptr es:[di], ax
0x1bc09: xchg ax, cx
0x1bc0a: les di, ptr [bp + 0x12]
0x1bc0d: stosw word ptr es:[di], ax
0x1bc0e: pop bp
0x1bc0f: retf 0x10
0x1bc12: push bp
0x1bc13: mov bp, sp
0x1bc15: mov cx, word ptr [bp + 0xa]
0x1bc18: mov dh, byte ptr [bp + 8]
0x1bc1b: mov dl, byte ptr [bp + 6]
0x1bc1e: mov ah, 0x2b
2018-12-17T22:27:21.893587136Z 25 PC: 1c80f | Get default drive
2018-12-17T22:27:21.895257594Z 71 PC: 1c822 | Get current directory
2018-12-17T22:27:21.897990493Z 44 PC: 1cd9d | Get time 0x1cd9d: mov word ptr [0x3e], cx
0x1cda1: mov word ptr [0x40], dx
0x1cda5: retf
0x1cda6: call 0x1cded
0x1cda9: jb 0x1cdba
0x1cdab: mov cx, word ptr es:[di + 4]
0x1cdaf: cmp cx, 1
0x1cdb2: je 0x1cdba
0x1cdb4: xor bx, bx
0x1cdb6: push cs
0x1cdb7: call 0x2c91a
0x1cdba: retf 4
0x1cdbd: call 0x1cded
0x1cdc0: jb 0x1cdd5
0x1cdc2: mov ax, cx
0x1cdc4: mov dx, bx
0x1cdc6: mov cx, word ptr es:[di + 4]
0x1cdca: cmp cx, 1
0x1cdcd: je 0x1cdd5
0x1cdcf: xor bx, bx
2018-12-17T22:27:21.900498299Z 48 PC: 1c782 | Get DOS version
2018-12-17T22:27:21.902015215Z 61 PC: 1c5c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:21.908449452Z 66 PC: 1ce07 | Move file pointer
2018-12-17T22:27:21.91016922Z 66 PC: 1ce15 | Move file pointer
2018-12-17T22:27:21.911451622Z 66 PC: 1ce23 | Move file pointer
2018-12-17T22:27:21.913049565Z 63 PC: 1c693 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:21.921481517Z 62 PC: 1c610 | Close file
2018-12-17T22:27:21.92469852Z 14 PC: 1c868 | Set default drive (Drive = 'A')
2018-12-17T22:27:21.926165937Z 25 PC: 1c86c | Get default drive
2018-12-17T22:27:21.928501875Z 59 PC: 1c8d6 | Change current directory
2018-12-17T22:27:21.932872326Z 26 PC: 1bd0f | Set disk transfer address
2018-12-17T22:27:21.934196483Z 78 PC: 1bd1b | Find first file
2018-12-17T22:27:21.941216905Z 26 PC: 1bd33 | Set disk transfer address
2018-12-17T22:27:21.942702908Z 79 PC: 1bd38 | Find next file
2018-12-17T22:27:21.9452936Z 26 PC: 1bd33 | Set disk transfer address
2018-12-17T22:27:21.947050483Z 79 PC: 1bd38 | Find next file
2018-12-17T22:27:21.949662635Z 26 PC: 1bd33 | Set disk transfer address
2018-12-17T22:27:21.950671179Z 79 PC: 1bd38 | Find next file
2018-12-17T22:27:21.953730635Z 26 PC: 1bd33 | Set disk transfer address
2018-12-17T22:27:21.954797348Z 79 PC: 1bd38 | Find next file
2018-12-17T22:27:21.957335236Z 26 PC: 1bd33 | Set disk transfer address
2018-12-17T22:27:21.959104758Z 79 PC: 1bd38 | Find next file
2018-12-17T22:27:21.961806599Z 26 PC: 1bd33 | Set disk transfer address
2018-12-17T22:27:21.962816957Z 79 PC: 1bd38 | Find next file
2018-12-17T22:27:21.966407146Z 26 PC: 1bd33 | Set disk transfer address
2018-12-17T22:27:21.967451383Z 79 PC: 1bd38 | Find next file
2018-12-17T22:27:21.970803243Z 26 PC: 1bd33 | Set disk transfer address
2018-12-17T22:27:21.972323475Z 79 PC: 1bd38 | Find next file
2018-12-17T22:27:21.975797709Z 26 PC: 1bd33 | Set disk transfer address
2018-12-17T22:27:21.977225811Z 79 PC: 1bd38 | Find next file
2018-12-17T22:27:21.981209756Z 26 PC: 1bd33 | Set disk transfer address
2018-12-17T22:27:21.982478327Z 79 PC: 1bd38 | Find next file
2018-12-17T22:27:21.985284225Z 26 PC: 1bd33 | Set disk transfer address
2018-12-17T22:27:21.987012319Z 79 PC: 1bd38 | Find next file
2018-12-17T22:27:21.98965696Z 26 PC: 1bd33 | Set disk transfer address
2018-12-17T22:27:21.991067692Z 79 PC: 1bd38 | Find next file
2018-12-17T22:27:21.994674441Z 26 PC: 1bd33 | Set disk transfer address
2018-12-17T22:27:21.996308962Z 79 PC: 1bd38 | Find next file
2018-12-17T22:27:21.999191878Z 26 PC: 1bd33 | Set disk transfer address
2018-12-17T22:27:22.000706277Z 79 PC: 1bd38 | Find next file
2018-12-17T22:27:22.004433793Z 26 PC: 1bd33 | Set disk transfer address
2018-12-17T22:27:22.005787464Z 79 PC: 1bd38 | Find next file
2018-12-17T22:27:22.008910776Z 14 PC: 1c868 | Set default drive (Drive = 'A')
2018-12-17T22:27:22.011272806Z 25 PC: 1c86c | Get default drive
2018-12-17T22:27:22.012637897Z 59 PC: 1c8d6 | Change current directory
2018-12-17T22:27:22.017168998Z 48 PC: 1c782 | Get DOS version
2018-12-17T22:27:22.019544883Z 48 PC: 1c782 | Get DOS version
2018-12-17T22:27:22.021724761Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.023301758Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.025475428Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:22.026859119Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:22.028385079Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:22.029837134Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:22.030915301Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:22.032478244Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:22.033655101Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.034734539Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.036495868Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.037852065Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.039185727Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:22.041488003Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:22.042945232Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:22.044318511Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:22.046430809Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:22.048110055Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:22.049445674Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:22.051572417Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:22.05325216Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:22.054639322Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:22.0567515Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:22.058465243Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:22.060709736Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:22.062858247Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:22.064036354Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:22.065197687Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:22.067394831Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:22.069149712Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:22.070087957Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:22.075222266Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:22.076955187Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:22.07839879Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:22.08055884Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.082358549Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.083758187Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:22.085970313Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:22.087875874Z 41 PC: 1bdc7 | Parse filename
2018-12-17T22:27:22.089550169Z 41 PC: 1bdd5 | Parse filename
2018-12-17T22:27:22.092016087Z 75 PC: 1bde0 | Execute program
2018-12-17T22:27:22.107346602Z 53 PC: 2453a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.108877162Z 53 PC: 2453a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:22.111236416Z 53 PC: 2453a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:22.112909876Z 53 PC: 2453a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:22.114405753Z 53 PC: 2453a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.116559288Z 53 PC: 2453a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.11840381Z 53 PC: 2453a | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:22.120063386Z 53 PC: 2453a | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:22.122479077Z 53 PC: 2453a | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:22.124403868Z 53 PC: 2453a | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:22.125981366Z 53 PC: 2453a | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:22.128376801Z 53 PC: 2453a | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:22.130298461Z 53 PC: 2453a | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:22.131871185Z 53 PC: 2453a | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:22.134235538Z 53 PC: 2453a | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:22.136072822Z 53 PC: 2453a | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:22.137598548Z 53 PC: 2453a | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:22.139902914Z 53 PC: 2453a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.141257423Z 53 PC: 2453a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:22.142191785Z 37 PC: 2454f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.143838732Z 37 PC: 24557 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.145147116Z 37 PC: 2455f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.146538417Z 37 PC: 24567 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.149101784Z 68 PC: 25306 | I/O control for devices (Set for = '')
2018-12-17T22:27:22.152796308Z 42 PC: 24297 | Get date 0x24297: xor ah, ah
0x24299: les di, ptr [bp + 6]
0x2429c: stosw word ptr es:[di], ax
0x2429d: mov al, dl
0x2429f: les di, ptr [bp + 0xa]
0x242a2: stosw word ptr es:[di], ax
0x242a3: mov al, dh
0x242a5: les di, ptr [bp + 0xe]
0x242a8: stosw word ptr es:[di], ax
0x242a9: xchg ax, cx
0x242aa: les di, ptr [bp + 0x12]
0x242ad: stosw word ptr es:[di], ax
0x242ae: pop bp
0x242af: retf 0x10
0x242b2: push bp
0x242b3: mov bp, sp
0x242b5: mov cx, word ptr [bp + 0xa]
0x242b8: mov dh, byte ptr [bp + 8]
0x242bb: mov dl, byte ptr [bp + 6]
0x242be: mov ah, 0x2b
2018-12-17T22:27:22.155354476Z 25 PC: 24eaf | Get default drive
2018-12-17T22:27:22.157526807Z 71 PC: 24ec2 | Get current directory
2018-12-17T22:27:22.160875228Z 44 PC: 2543d | Get time 0x2543d: mov word ptr [0x3e], cx
0x25441: mov word ptr [0x40], dx
0x25445: retf
0x25446: call 0x2548d
0x25449: jb 0x2545a
0x2544b: mov cx, word ptr es:[di + 4]
0x2544f: cmp cx, 1
0x25452: je 0x2545a
0x25454: xor bx, bx
0x25456: push cs
0x25457: call 0x34fba
0x2545a: retf 4
0x2545d: call 0x2548d
0x25460: jb 0x25475
0x25462: mov ax, cx
0x25464: mov dx, bx
0x25466: mov cx, word ptr es:[di + 4]
0x2546a: cmp cx, 1
0x2546d: je 0x25475
0x2546f: xor bx, bx
2018-12-17T22:27:22.16332821Z 48 PC: 24e22 | Get DOS version
2018-12-17T22:27:22.165931026Z 61 PC: 24c60 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:22.172815168Z 66 PC: 254a7 | Move file pointer
2018-12-17T22:27:22.174497866Z 66 PC: 254b5 | Move file pointer
2018-12-17T22:27:22.176993963Z 66 PC: 254c3 | Move file pointer
2018-12-17T22:27:22.179340303Z 63 PC: 24d33 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:22.193005453Z 62 PC: 24cb0 | Close file
2018-12-17T22:27:22.202613552Z 14 PC: 24f08 | Set default drive (Drive = 'A')
2018-12-17T22:27:22.203988048Z 25 PC: 24f0c | Get default drive
2018-12-17T22:27:22.205244471Z 59 PC: 24f76 | Change current directory
2018-12-17T22:27:22.210674665Z 26 PC: 243af | Set disk transfer address
2018-12-17T22:27:22.21178243Z 78 PC: 243bb | Find first file
2018-12-17T22:27:22.218040292Z 26 PC: 243d3 | Set disk transfer address
2018-12-17T22:27:22.220461725Z 79 PC: 243d8 | Find next file
2018-12-17T22:27:22.224083277Z 26 PC: 243d3 | Set disk transfer address
2018-12-17T22:27:22.225258106Z 79 PC: 243d8 | Find next file
2018-12-17T22:27:22.23737157Z 26 PC: 243d3 | Set disk transfer address
2018-12-17T22:27:22.238773265Z 79 PC: 243d8 | Find next file
2018-12-17T22:27:22.241819028Z 26 PC: 243d3 | Set disk transfer address
2018-12-17T22:27:22.244855574Z 79 PC: 243d8 | Find next file
2018-12-17T22:27:22.248478944Z 26 PC: 243d3 | Set disk transfer address
2018-12-17T22:27:22.249935233Z 79 PC: 243d8 | Find next file
2018-12-17T22:27:22.253742121Z 26 PC: 243d3 | Set disk transfer address
2018-12-17T22:27:22.255162295Z 79 PC: 243d8 | Find next file
2018-12-17T22:27:22.25783014Z 26 PC: 243d3 | Set disk transfer address
2018-12-17T22:27:22.25918916Z 79 PC: 243d8 | Find next file
2018-12-17T22:27:22.26147347Z 26 PC: 243d3 | Set disk transfer address
2018-12-17T22:27:22.262677777Z 79 PC: 243d8 | Find next file
2018-12-17T22:27:22.267111507Z 26 PC: 243d3 | Set disk transfer address
2018-12-17T22:27:22.268027636Z 79 PC: 243d8 | Find next file
2018-12-17T22:27:22.270421649Z 26 PC: 243d3 | Set disk transfer address
2018-12-17T22:27:22.271992202Z 79 PC: 243d8 | Find next file
2018-12-17T22:27:22.273881792Z 26 PC: 243d3 | Set disk transfer address
2018-12-17T22:27:22.275042454Z 79 PC: 243d8 | Find next file
2018-12-17T22:27:22.278838902Z 26 PC: 243d3 | Set disk transfer address
2018-12-17T22:27:22.279821431Z 79 PC: 243d8 | Find next file
2018-12-17T22:27:22.282180082Z 26 PC: 243d3 | Set disk transfer address
2018-12-17T22:27:22.283182084Z 79 PC: 243d8 | Find next file
2018-12-17T22:27:22.28503211Z 26 PC: 243d3 | Set disk transfer address
2018-12-17T22:27:22.286323635Z 79 PC: 243d8 | Find next file
2018-12-17T22:27:22.288085647Z 26 PC: 243d3 | Set disk transfer address
2018-12-17T22:27:22.289010109Z 79 PC: 243d8 | Find next file
2018-12-17T22:27:22.292069188Z 14 PC: 24f08 | Set default drive (Drive = 'A')
2018-12-17T22:27:22.293460734Z 25 PC: 24f0c | Get default drive
2018-12-17T22:27:22.294548323Z 59 PC: 24f76 | Change current directory
2018-12-17T22:27:22.297808596Z 48 PC: 24e22 | Get DOS version
2018-12-17T22:27:22.299108867Z 48 PC: 24e22 | Get DOS version
2018-12-17T22:27:22.30172807Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.303983583Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.305060171Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:22.307069301Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:22.308015499Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:22.30895427Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:22.310772895Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:22.311660272Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:22.312639698Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.313998299Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.3149186Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.316313192Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.317340408Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:22.318336469Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:22.31975118Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:22.320958115Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:22.321857167Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:22.323400714Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:22.324362936Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:22.325289444Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:22.326899276Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:22.32791084Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:22.329538328Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:22.330485165Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:22.331512699Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:22.333250378Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:22.33430026Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:22.335336611Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:22.336895745Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:22.338010125Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:22.339022503Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:22.340569716Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:22.341568935Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:22.342493036Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:22.343952981Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.345157594Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.346625526Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:22.347602245Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:22.348542146Z 41 PC: 24467 | Parse filename
2018-12-17T22:27:22.350158381Z 41 PC: 24475 | Parse filename
2018-12-17T22:27:22.35117951Z 75 PC: 24480 | Execute program
2018-12-17T22:27:22.360711945Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.364701934Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:22.366365815Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:22.367204811Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:22.368595863Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.369576289Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.371455741Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:22.372746659Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:22.374257229Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:22.376110981Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:22.377320793Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:22.378870603Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:22.380881827Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:22.382428762Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:22.383941421Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:22.385923462Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:22.387325824Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:22.389153163Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.390588115Z 53 PC: 2cbda | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:22.392032521Z 37 PC: 2cbef | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.393963302Z 37 PC: 2cbf7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.395414487Z 37 PC: 2cbff | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.396969163Z 37 PC: 2cc07 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.399122786Z 68 PC: 2d9a6 | I/O control for devices (Set for = '')
2018-12-17T22:27:22.401441221Z 42 PC: 2c937 | Get date 0x2c937: xor ah, ah
0x2c939: les di, ptr [bp + 6]
0x2c93c: stosw word ptr es:[di], ax
0x2c93d: mov al, dl
0x2c93f: les di, ptr [bp + 0xa]
0x2c942: stosw word ptr es:[di], ax
0x2c943: mov al, dh
0x2c945: les di, ptr [bp + 0xe]
0x2c948: stosw word ptr es:[di], ax
0x2c949: xchg ax, cx
0x2c94a: les di, ptr [bp + 0x12]
0x2c94d: stosw word ptr es:[di], ax
0x2c94e: pop bp
0x2c94f: retf 0x10
0x2c952: push bp
0x2c953: mov bp, sp
0x2c955: mov cx, word ptr [bp + 0xa]
0x2c958: mov dh, byte ptr [bp + 8]
0x2c95b: mov dl, byte ptr [bp + 6]
0x2c95e: mov ah, 0x2b
2018-12-17T22:27:22.40415635Z 25 PC: 2d54f | Get default drive
2018-12-17T22:27:22.406511082Z 71 PC: 2d562 | Get current directory
2018-12-17T22:27:22.409528592Z 44 PC: 2dadd | Get time 0x2dadd: mov word ptr [0x3e], cx
0x2dae1: mov word ptr [0x40], dx
0x2dae5: retf
0x2dae6: call 0x2db2d
0x2dae9: jb 0x2dafa
0x2daeb: mov cx, word ptr es:[di + 4]
0x2daef: cmp cx, 1
0x2daf2: je 0x2dafa
0x2daf4: xor bx, bx
0x2daf6: push cs
0x2daf7: call 0x3d65a
0x2dafa: retf 4
0x2dafd: call 0x2db2d
0x2db00: jb 0x2db15
0x2db02: mov ax, cx
0x2db04: mov dx, bx
0x2db06: mov cx, word ptr es:[di + 4]
0x2db0a: cmp cx, 1
0x2db0d: je 0x2db15
0x2db0f: xor bx, bx
2018-12-17T22:27:22.412790205Z 48 PC: 2d4c2 | Get DOS version
2018-12-17T22:27:22.414804599Z 61 PC: 2d300 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:22.421520394Z 66 PC: 2db47 | Move file pointer
2018-12-17T22:27:22.423827106Z 66 PC: 2db55 | Move file pointer
2018-12-17T22:27:22.425711116Z 66 PC: 2db63 | Move file pointer
2018-12-17T22:27:22.427582547Z 63 PC: 2d3d3 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:22.436074787Z 62 PC: 2d350 | Close file
2018-12-17T22:27:22.439582678Z 14 PC: 2d5a8 | Set default drive (Drive = 'A')
2018-12-17T22:27:22.440984036Z 25 PC: 2d5ac | Get default drive
2018-12-17T22:27:22.443241262Z 59 PC: 2d616 | Change current directory
2018-12-17T22:27:22.447505689Z 26 PC: 2ca4f | Set disk transfer address
2018-12-17T22:27:22.448761677Z 78 PC: 2ca5b | Find first file
2018-12-17T22:27:22.45558413Z 26 PC: 2ca73 | Set disk transfer address
2018-12-17T22:27:22.456836134Z 79 PC: 2ca78 | Find next file
2018-12-17T22:27:22.459618829Z 26 PC: 2ca73 | Set disk transfer address
2018-12-17T22:27:22.4619577Z 79 PC: 2ca78 | Find next file
2018-12-17T22:27:22.46472149Z 26 PC: 2ca73 | Set disk transfer address
2018-12-17T22:27:22.466158826Z 79 PC: 2ca78 | Find next file
2018-12-17T22:27:22.469752742Z 26 PC: 2ca73 | Set disk transfer address
2018-12-17T22:27:22.470989831Z 79 PC: 2ca78 | Find next file
2018-12-17T22:27:22.474536932Z 26 PC: 2ca73 | Set disk transfer address
2018-12-17T22:27:22.476099969Z 79 PC: 2ca78 | Find next file
2018-12-17T22:27:22.478847561Z 26 PC: 2ca73 | Set disk transfer address
2018-12-17T22:27:22.481502138Z 79 PC: 2ca78 | Find next file
2018-12-17T22:27:22.484096208Z 26 PC: 2ca73 | Set disk transfer address
2018-12-17T22:27:22.485087359Z 79 PC: 2ca78 | Find next file
2018-12-17T22:27:22.488803618Z 26 PC: 2ca73 | Set disk transfer address
2018-12-17T22:27:22.489852369Z 79 PC: 2ca78 | Find next file
2018-12-17T22:27:22.492371828Z 26 PC: 2ca73 | Set disk transfer address
2018-12-17T22:27:22.494178761Z 79 PC: 2ca78 | Find next file
2018-12-17T22:27:22.496950501Z 26 PC: 2ca73 | Set disk transfer address
2018-12-17T22:27:22.498242881Z 79 PC: 2ca78 | Find next file
2018-12-17T22:27:22.501587081Z 26 PC: 2ca73 | Set disk transfer address
2018-12-17T22:27:22.502867001Z 79 PC: 2ca78 | Find next file
2018-12-17T22:27:22.506421239Z 26 PC: 2ca73 | Set disk transfer address
2018-12-17T22:27:22.507833586Z 79 PC: 2ca78 | Find next file
2018-12-17T22:27:22.510647703Z 26 PC: 2ca73 | Set disk transfer address
2018-12-17T22:27:22.513155653Z 79 PC: 2ca78 | Find next file
2018-12-17T22:27:22.515711696Z 26 PC: 2ca73 | Set disk transfer address
2018-12-17T22:27:22.51670266Z 79 PC: 2ca78 | Find next file
2018-12-17T22:27:22.52012949Z 26 PC: 2ca73 | Set disk transfer address
2018-12-17T22:27:22.521232898Z 79 PC: 2ca78 | Find next file
2018-12-17T22:27:22.523767142Z 14 PC: 2d5a8 | Set default drive (Drive = 'A')
2018-12-17T22:27:22.525889827Z 25 PC: 2d5ac | Get default drive
2018-12-17T22:27:22.527233921Z 59 PC: 2d616 | Change current directory
2018-12-17T22:27:22.531204217Z 48 PC: 2d4c2 | Get DOS version
2018-12-17T22:27:22.533275061Z 48 PC: 2d4c2 | Get DOS version
2018-12-17T22:27:22.53502618Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.536293458Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.538093639Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:22.53946693Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:22.540809637Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:22.542992349Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:22.54427403Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:22.545844457Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:22.547134388Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.548445243Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.551410694Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.552708424Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.554007961Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:22.555946221Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:22.557273056Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:22.558592444Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:22.560428848Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:22.561763836Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:22.563300482Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:22.565023802Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:22.566359356Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:22.568369514Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:22.569728018Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:22.571092353Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:22.574008852Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:22.575429781Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:22.576762051Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:22.578841754Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:22.580480561Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:22.583076556Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:22.584614939Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:22.586273327Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:22.588183378Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:22.589339852Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:22.590412293Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.592391907Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.59348779Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:22.594587492Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:22.596768471Z 41 PC: 2cb07 | Parse filename
2018-12-17T22:27:22.598129576Z 41 PC: 2cb15 | Parse filename
2018-12-17T22:27:22.599421033Z 75 PC: 2cb20 | Execute program
2018-12-17T22:27:22.615581369Z 53 PC: 3527a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.617196851Z 53 PC: 3527a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:22.619774704Z 53 PC: 3527a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:22.621643957Z 53 PC: 3527a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:22.623291497Z 53 PC: 3527a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.625517966Z 53 PC: 3527a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.626751611Z 53 PC: 3527a | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:22.628220736Z 53 PC: 3527a | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:22.630782539Z 53 PC: 3527a | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:22.631967383Z 53 PC: 3527a | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:22.633085237Z 53 PC: 3527a | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:22.637258151Z 53 PC: 3527a | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:22.638810729Z 53 PC: 3527a | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:22.641073602Z 53 PC: 3527a | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:22.642712825Z 53 PC: 3527a | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:22.6441048Z 53 PC: 3527a | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:22.646513192Z 53 PC: 3527a | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:22.648581166Z 53 PC: 3527a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.650145051Z 53 PC: 3527a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:22.652455809Z 37 PC: 3528f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.653816814Z 37 PC: 35297 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.655526236Z 37 PC: 3529f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.6568219Z 37 PC: 352a7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.658559884Z 68 PC: 36046 | I/O control for devices (Set for = '')
2018-12-17T22:27:22.661559226Z 42 PC: 34fd7 | Get date 0x34fd7: xor ah, ah
0x34fd9: les di, ptr [bp + 6]
0x34fdc: stosw word ptr es:[di], ax
0x34fdd: mov al, dl
0x34fdf: les di, ptr [bp + 0xa]
0x34fe2: stosw word ptr es:[di], ax
0x34fe3: mov al, dh
0x34fe5: les di, ptr [bp + 0xe]
0x34fe8: stosw word ptr es:[di], ax
0x34fe9: xchg ax, cx
0x34fea: les di, ptr [bp + 0x12]
0x34fed: stosw word ptr es:[di], ax
0x34fee: pop bp
0x34fef: retf 0x10
0x34ff2: push bp
0x34ff3: mov bp, sp
0x34ff5: mov cx, word ptr [bp + 0xa]
0x34ff8: mov dh, byte ptr [bp + 8]
0x34ffb: mov dl, byte ptr [bp + 6]
0x34ffe: mov ah, 0x2b
2018-12-17T22:27:22.664370017Z 25 PC: 35bef | Get default drive
2018-12-17T22:27:22.665421162Z 71 PC: 35c02 | Get current directory
2018-12-17T22:27:22.668839319Z 44 PC: 3617d | Get time 0x3617d: mov word ptr [0x3e], cx
0x36181: mov word ptr [0x40], dx
0x36185: retf
0x36186: call 0x361cd
0x36189: jb 0x3619a
0x3618b: mov cx, word ptr es:[di + 4]
0x3618f: cmp cx, 1
0x36192: je 0x3619a
0x36194: xor bx, bx
0x36196: push cs
0x36197: call 0x45cfa
0x3619a: retf 4
0x3619d: call 0x361cd
0x361a0: jb 0x361b5
0x361a2: mov ax, cx
0x361a4: mov dx, bx
0x361a6: mov cx, word ptr es:[di + 4]
0x361aa: cmp cx, 1
0x361ad: je 0x361b5
0x361af: xor bx, bx
2018-12-17T22:27:22.671569042Z 48 PC: 35b62 | Get DOS version
2018-12-17T22:27:22.674444823Z 61 PC: 359a0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:22.680879977Z 66 PC: 361e7 | Move file pointer
2018-12-17T22:27:22.682115457Z 66 PC: 361f5 | Move file pointer
2018-12-17T22:27:22.689191263Z 66 PC: 36203 | Move file pointer
2018-12-17T22:27:22.691239787Z 63 PC: 35a73 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:22.699715629Z 62 PC: 359f0 | Close file
2018-12-17T22:27:22.703959167Z 14 PC: 35c48 | Set default drive (Drive = 'A')
2018-12-17T22:27:22.705753309Z 25 PC: 35c4c | Get default drive
2018-12-17T22:27:22.707863261Z 59 PC: 35cb6 | Change current directory
2018-12-17T22:27:22.712670175Z 26 PC: 350ef | Set disk transfer address
2018-12-17T22:27:22.714136098Z 78 PC: 350fb | Find first file
2018-12-17T22:27:22.720827887Z 26 PC: 35113 | Set disk transfer address
2018-12-17T22:27:22.722062188Z 79 PC: 35118 | Find next file
2018-12-17T22:27:22.72508198Z 26 PC: 35113 | Set disk transfer address
2018-12-17T22:27:22.727230668Z 79 PC: 35118 | Find next file
2018-12-17T22:27:22.729873571Z 26 PC: 35113 | Set disk transfer address
2018-12-17T22:27:22.733335158Z 79 PC: 35118 | Find next file
2018-12-17T22:27:22.735973237Z 26 PC: 35113 | Set disk transfer address
2018-12-17T22:27:22.736998148Z 79 PC: 35118 | Find next file
2018-12-17T22:27:22.741012037Z 26 PC: 35113 | Set disk transfer address
2018-12-17T22:27:22.742222992Z 79 PC: 35118 | Find next file
2018-12-17T22:27:22.744915897Z 26 PC: 35113 | Set disk transfer address
2018-12-17T22:27:22.74749747Z 79 PC: 35118 | Find next file
2018-12-17T22:27:22.750463171Z 26 PC: 35113 | Set disk transfer address
2018-12-17T22:27:22.751853259Z 79 PC: 35118 | Find next file
2018-12-17T22:27:22.755224509Z 26 PC: 35113 | Set disk transfer address
2018-12-17T22:27:22.756435767Z 79 PC: 35118 | Find next file
2018-12-17T22:27:22.761036557Z 26 PC: 35113 | Set disk transfer address
2018-12-17T22:27:22.762303856Z 79 PC: 35118 | Find next file
2018-12-17T22:27:22.765377807Z 26 PC: 35113 | Set disk transfer address
2018-12-17T22:27:22.767958949Z 79 PC: 35118 | Find next file
2018-12-17T22:27:22.770625364Z 26 PC: 35113 | Set disk transfer address
2018-12-17T22:27:22.77265983Z 79 PC: 35118 | Find next file
2018-12-17T22:27:22.775874728Z 26 PC: 35113 | Set disk transfer address
2018-12-17T22:27:22.77729166Z 79 PC: 35118 | Find next file
2018-12-17T22:27:22.781131176Z 26 PC: 35113 | Set disk transfer address
2018-12-17T22:27:22.782402168Z 79 PC: 35118 | Find next file
2018-12-17T22:27:22.785277577Z 26 PC: 35113 | Set disk transfer address
2018-12-17T22:27:22.788105196Z 79 PC: 35118 | Find next file
2018-12-17T22:27:22.79085773Z 26 PC: 35113 | Set disk transfer address
2018-12-17T22:27:22.793234401Z 79 PC: 35118 | Find next file
2018-12-17T22:27:22.796590864Z 14 PC: 35c48 | Set default drive (Drive = 'A')
2018-12-17T22:27:22.798064595Z 25 PC: 35c4c | Get default drive
2018-12-17T22:27:22.800437969Z 59 PC: 35cb6 | Change current directory
2018-12-17T22:27:22.804890793Z 48 PC: 35b62 | Get DOS version
2018-12-17T22:27:22.806548617Z 48 PC: 35b62 | Get DOS version
2018-12-17T22:27:22.809716067Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.811268013Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.813730423Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:22.815196263Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:22.816654697Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:22.819002779Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:22.82044673Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:22.822292601Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:22.824179185Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.825666986Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.827718002Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.829294646Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.83075746Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:22.832961632Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:22.834405712Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:22.837095029Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:22.838585505Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:22.840059218Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:22.842330339Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:22.843910853Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:22.845945854Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:22.847326683Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:22.848850617Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:22.851126019Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:22.852689969Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:22.85490442Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:22.856452481Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:22.858120056Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:22.859810543Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:22.86199128Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:22.864321387Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:22.86603723Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:22.867556758Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:22.86965486Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:22.870757267Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.872382711Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.873989916Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:22.87565199Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:22.878632132Z 41 PC: 351a7 | Parse filename
2018-12-17T22:27:22.880460441Z 41 PC: 351b5 | Parse filename
2018-12-17T22:27:22.883567152Z 75 PC: 351c0 | Execute program
2018-12-17T22:27:22.900450216Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.901742251Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:22.904054396Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:22.905780142Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:22.907628839Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.910241936Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.911868877Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:22.914475534Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:22.916436297Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:22.917970545Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:22.920574287Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:22.922016936Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:22.924423496Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:22.926273467Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:22.927693622Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:22.930138424Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:22.931467618Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:22.932965758Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.934740757Z 53 PC: 3d91a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:22.936223528Z 37 PC: 3d92f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:22.939609452Z 37 PC: 3d937 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:22.94125792Z 37 PC: 3d93f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:22.943418797Z 37 PC: 3d947 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:22.945454009Z 68 PC: 3e6e6 | I/O control for devices (Set for = '')
2018-12-17T22:27:22.948080636Z 42 PC: 3d677 | Get date 0x3d677: xor ah, ah
0x3d679: les di, ptr [bp + 6]
0x3d67c: stosw word ptr es:[di], ax
0x3d67d: mov al, dl
0x3d67f: les di, ptr [bp + 0xa]
0x3d682: stosw word ptr es:[di], ax
0x3d683: mov al, dh
0x3d685: les di, ptr [bp + 0xe]
0x3d688: stosw word ptr es:[di], ax
0x3d689: xchg ax, cx
0x3d68a: les di, ptr [bp + 0x12]
0x3d68d: stosw word ptr es:[di], ax
0x3d68e: pop bp
0x3d68f: retf 0x10
0x3d692: push bp
0x3d693: mov bp, sp
0x3d695: mov cx, word ptr [bp + 0xa]
0x3d698: mov dh, byte ptr [bp + 8]
0x3d69b: mov dl, byte ptr [bp + 6]
0x3d69e: mov ah, 0x2b
2018-12-17T22:27:22.951507485Z 25 PC: 3e28f | Get default drive
2018-12-17T22:27:22.953275763Z 71 PC: 3e2a2 | Get current directory
2018-12-17T22:27:22.957766341Z 44 PC: 3e81d | Get time 0x3e81d: mov word ptr [0x3e], cx
0x3e821: mov word ptr [0x40], dx
0x3e825: retf
0x3e826: call 0x3e86d
0x3e829: jb 0x3e83a
0x3e82b: mov cx, word ptr es:[di + 4]
0x3e82f: cmp cx, 1
0x3e832: je 0x3e83a
0x3e834: xor bx, bx
0x3e836: push cs
0x3e837: call 0x4e39a
0x3e83a: retf 4
0x3e83d: call 0x3e86d
0x3e840: jb 0x3e855
0x3e842: mov ax, cx
0x3e844: mov dx, bx
0x3e846: mov cx, word ptr es:[di + 4]
0x3e84a: cmp cx, 1
0x3e84d: je 0x3e855
0x3e84f: xor bx, bx
2018-12-17T22:27:22.960310513Z 48 PC: 3e202 | Get DOS version
2018-12-17T22:27:22.962888864Z 61 PC: 3e040 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:22.972949639Z 66 PC: 3e887 | Move file pointer
2018-12-17T22:27:22.974560385Z 66 PC: 3e895 | Move file pointer
2018-12-17T22:27:22.976510176Z 66 PC: 3e8a3 | Move file pointer
2018-12-17T22:27:22.978950955Z 63 PC: 3e113 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:22.986702804Z 62 PC: 3e090 | Close file
2018-12-17T22:27:22.990693576Z 14 PC: 3e2e8 | Set default drive (Drive = 'A')
2018-12-17T22:27:22.992301567Z 25 PC: 3e2ec | Get default drive
2018-12-17T22:27:22.993976359Z 59 PC: 3e356 | Change current directory
2018-12-17T22:27:22.999286427Z 26 PC: 3d78f | Set disk transfer address
2018-12-17T22:27:23.000714757Z 78 PC: 3d79b | Find first file
2018-12-17T22:27:23.00776258Z 26 PC: 3d7b3 | Set disk transfer address
2018-12-17T22:27:23.00926895Z 79 PC: 3d7b8 | Find next file
2018-12-17T22:27:23.012090678Z 26 PC: 3d7b3 | Set disk transfer address
2018-12-17T22:27:23.014635648Z 79 PC: 3d7b8 | Find next file
2018-12-17T22:27:23.01764186Z 26 PC: 3d7b3 | Set disk transfer address
2018-12-17T22:27:23.019942037Z 79 PC: 3d7b8 | Find next file
2018-12-17T22:27:23.023176818Z 26 PC: 3d7b3 | Set disk transfer address
2018-12-17T22:27:23.024551853Z 79 PC: 3d7b8 | Find next file
2018-12-17T22:27:23.028502096Z 26 PC: 3d7b3 | Set disk transfer address
2018-12-17T22:27:23.029864833Z 79 PC: 3d7b8 | Find next file
2018-12-17T22:27:23.033001548Z 26 PC: 3d7b3 | Set disk transfer address
2018-12-17T22:27:23.035329204Z 79 PC: 3d7b8 | Find next file
2018-12-17T22:27:23.038309051Z 26 PC: 3d7b3 | Set disk transfer address
2018-12-17T22:27:23.04052842Z 79 PC: 3d7b8 | Find next file
2018-12-17T22:27:23.044403858Z 26 PC: 3d7b3 | Set disk transfer address
2018-12-17T22:27:23.04569659Z 79 PC: 3d7b8 | Find next file
2018-12-17T22:27:23.049652308Z 26 PC: 3d7b3 | Set disk transfer address
2018-12-17T22:27:23.050953204Z 79 PC: 3d7b8 | Find next file
2018-12-17T22:27:23.054632381Z 26 PC: 3d7b3 | Set disk transfer address
2018-12-17T22:27:23.056275449Z 79 PC: 3d7b8 | Find next file
2018-12-17T22:27:23.059093715Z 26 PC: 3d7b3 | Set disk transfer address
2018-12-17T22:27:23.061325718Z 79 PC: 3d7b8 | Find next file
2018-12-17T22:27:23.071781369Z 26 PC: 3d7b3 | Set disk transfer address
2018-12-17T22:27:23.073448591Z 79 PC: 3d7b8 | Find next file
2018-12-17T22:27:23.077471573Z 26 PC: 3d7b3 | Set disk transfer address
2018-12-17T22:27:23.078707806Z 79 PC: 3d7b8 | Find next file
2018-12-17T22:27:23.082610687Z 26 PC: 3d7b3 | Set disk transfer address
2018-12-17T22:27:23.084024769Z 79 PC: 3d7b8 | Find next file
2018-12-17T22:27:23.086991875Z 26 PC: 3d7b3 | Set disk transfer address
2018-12-17T22:27:23.088857719Z 79 PC: 3d7b8 | Find next file
2018-12-17T22:27:23.091920208Z 14 PC: 3e2e8 | Set default drive (Drive = 'A')
2018-12-17T22:27:23.094343863Z 25 PC: 3e2ec | Get default drive
2018-12-17T22:27:23.095798543Z 59 PC: 3e356 | Change current directory
2018-12-17T22:27:23.100109926Z 48 PC: 3e202 | Get DOS version
2018-12-17T22:27:23.102262851Z 48 PC: 3e202 | Get DOS version
2018-12-17T22:27:23.104274758Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.10596034Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.106982096Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:23.108005609Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:23.109630687Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:23.110542277Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:23.112170695Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:23.113219527Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:23.114203169Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.11550978Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.116403282Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.118101383Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.119170708Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:23.120298404Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:23.12144657Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:23.122339872Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:23.123904465Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:23.124903811Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:23.12693336Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:23.127908036Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:23.128815409Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:23.130875219Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:23.131821112Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:23.133401763Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:23.134277852Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:23.135322424Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:23.136898369Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:23.137837868Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:23.139403777Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:23.140363473Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:23.141791618Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:23.142893367Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:23.143861747Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:23.145647571Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:23.146636536Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.148433304Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.149307516Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:23.1509802Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:23.154255185Z 41 PC: 3d847 | Parse filename
2018-12-17T22:27:23.155345549Z 41 PC: 3d855 | Parse filename
2018-12-17T22:27:23.158038982Z 75 PC: 3d860 | Execute program
2018-12-17T22:27:23.169710767Z 53 PC: 45fba | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.172695425Z 53 PC: 45fba | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:23.174177088Z 53 PC: 45fba | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:23.17560008Z 53 PC: 45fba | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:23.1776875Z 53 PC: 45fba | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.179023567Z 53 PC: 45fba | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.181441731Z 53 PC: 45fba | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:23.182958359Z 53 PC: 45fba | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:23.184449075Z 53 PC: 45fba | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:23.186228488Z 53 PC: 45fba | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:23.187755981Z 53 PC: 45fba | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:23.18977855Z 53 PC: 45fba | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:23.191130753Z 53 PC: 45fba | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:23.192552926Z 53 PC: 45fba | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:23.194313499Z 53 PC: 45fba | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:23.195621684Z 53 PC: 45fba | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:23.197894975Z 53 PC: 45fba | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:23.199002562Z 53 PC: 45fba | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.200548055Z 53 PC: 45fba | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:23.201979391Z 37 PC: 45fcf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.203201902Z 37 PC: 45fd7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.205162628Z 37 PC: 45fdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.206177774Z 37 PC: 45fe7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.208078847Z 68 PC: 46d86 | I/O control for devices (Set for = '')
2018-12-17T22:27:23.210807171Z 42 PC: 45d17 | Get date 0x45d17: xor ah, ah
0x45d19: les di, ptr [bp + 6]
0x45d1c: stosw word ptr es:[di], ax
0x45d1d: mov al, dl
0x45d1f: les di, ptr [bp + 0xa]
0x45d22: stosw word ptr es:[di], ax
0x45d23: mov al, dh
0x45d25: les di, ptr [bp + 0xe]
0x45d28: stosw word ptr es:[di], ax
0x45d29: xchg ax, cx
0x45d2a: les di, ptr [bp + 0x12]
0x45d2d: stosw word ptr es:[di], ax
0x45d2e: pop bp
0x45d2f: retf 0x10
0x45d32: push bp
0x45d33: mov bp, sp
0x45d35: mov cx, word ptr [bp + 0xa]
0x45d38: mov dh, byte ptr [bp + 8]
0x45d3b: mov dl, byte ptr [bp + 6]
0x45d3e: mov ah, 0x2b
2018-12-17T22:27:23.213016728Z 25 PC: 4692f | Get default drive
2018-12-17T22:27:23.214418561Z 71 PC: 46942 | Get current directory
2018-12-17T22:27:23.217418771Z 44 PC: 46ebd | Get time 0x46ebd: mov word ptr [0x3e], cx
0x46ec1: mov word ptr [0x40], dx
0x46ec5: retf
0x46ec6: call 0x46f0d
0x46ec9: jb 0x46eda
0x46ecb: mov cx, word ptr es:[di + 4]
0x46ecf: cmp cx, 1
0x46ed2: je 0x46eda
0x46ed4: xor bx, bx
0x46ed6: push cs
0x46ed7: call 0x56a3a
0x46eda: retf 4
0x46edd: call 0x46f0d
0x46ee0: jb 0x46ef5
0x46ee2: mov ax, cx
0x46ee4: mov dx, bx
0x46ee6: mov cx, word ptr es:[di + 4]
0x46eea: cmp cx, 1
0x46eed: je 0x46ef5
0x46eef: xor bx, bx
2018-12-17T22:27:23.220360476Z 48 PC: 468a2 | Get DOS version
2018-12-17T22:27:23.222268385Z 61 PC: 466e0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:23.230155282Z 66 PC: 46f27 | Move file pointer
2018-12-17T22:27:23.23216162Z 66 PC: 46f35 | Move file pointer
2018-12-17T22:27:23.233558009Z 66 PC: 46f43 | Move file pointer
2018-12-17T22:27:23.238272855Z 63 PC: 467b3 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:23.246111533Z 62 PC: 46730 | Close file
2018-12-17T22:27:23.24967286Z 14 PC: 46988 | Set default drive (Drive = 'A')
2018-12-17T22:27:23.251738151Z 25 PC: 4698c | Get default drive
2018-12-17T22:27:23.252899127Z 59 PC: 469f6 | Change current directory
2018-12-17T22:27:23.258361192Z 26 PC: 45e2f | Set disk transfer address
2018-12-17T22:27:23.259459345Z 78 PC: 45e3b | Find first file
2018-12-17T22:27:23.266193137Z 26 PC: 45e53 | Set disk transfer address
2018-12-17T22:27:23.267671908Z 79 PC: 45e58 | Find next file
2018-12-17T22:27:23.270801668Z 26 PC: 45e53 | Set disk transfer address
2018-12-17T22:27:23.273372106Z 79 PC: 45e58 | Find next file
2018-12-17T22:27:23.276175097Z 26 PC: 45e53 | Set disk transfer address
2018-12-17T22:27:23.278603193Z 79 PC: 45e58 | Find next file
2018-12-17T22:27:23.281476977Z 26 PC: 45e53 | Set disk transfer address
2018-12-17T22:27:23.282853539Z 79 PC: 45e58 | Find next file
2018-12-17T22:27:23.286444632Z 26 PC: 45e53 | Set disk transfer address
2018-12-17T22:27:23.287663467Z 79 PC: 45e58 | Find next file
2018-12-17T22:27:23.291961765Z 26 PC: 45e53 | Set disk transfer address
2018-12-17T22:27:23.29306036Z 79 PC: 45e58 | Find next file
2018-12-17T22:27:23.296375656Z 26 PC: 45e53 | Set disk transfer address
2018-12-17T22:27:23.299114517Z 79 PC: 45e58 | Find next file
2018-12-17T22:27:23.302221413Z 26 PC: 45e53 | Set disk transfer address
2018-12-17T22:27:23.305072212Z 79 PC: 45e58 | Find next file
2018-12-17T22:27:23.308223932Z 26 PC: 45e53 | Set disk transfer address
2018-12-17T22:27:23.3097176Z 79 PC: 45e58 | Find next file
2018-12-17T22:27:23.313356323Z 26 PC: 45e53 | Set disk transfer address
2018-12-17T22:27:23.314805832Z 79 PC: 45e58 | Find next file
2018-12-17T22:27:23.319914037Z 26 PC: 45e53 | Set disk transfer address
2018-12-17T22:27:23.321584796Z 79 PC: 45e58 | Find next file
2018-12-17T22:27:23.324970861Z 26 PC: 45e53 | Set disk transfer address
2018-12-17T22:27:23.327326887Z 79 PC: 45e58 | Find next file
2018-12-17T22:27:23.330353587Z 26 PC: 45e53 | Set disk transfer address
2018-12-17T22:27:23.33262321Z 79 PC: 45e58 | Find next file
2018-12-17T22:27:23.335557884Z 26 PC: 45e53 | Set disk transfer address
2018-12-17T22:27:23.337646242Z 79 PC: 45e58 | Find next file
2018-12-17T22:27:23.340714769Z 26 PC: 45e53 | Set disk transfer address
2018-12-17T22:27:23.34182882Z 79 PC: 45e58 | Find next file
2018-12-17T22:27:23.345948917Z 14 PC: 46988 | Set default drive (Drive = 'A')
2018-12-17T22:27:23.347575955Z 25 PC: 4698c | Get default drive
2018-12-17T22:27:23.349955344Z 59 PC: 469f6 | Change current directory
2018-12-17T22:27:23.354674906Z 48 PC: 468a2 | Get DOS version
2018-12-17T22:27:23.35626474Z 48 PC: 468a2 | Get DOS version
2018-12-17T22:27:23.359598471Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.361019318Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.363279847Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:23.365009306Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:23.366285584Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:23.368280607Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:23.369416461Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:23.371237471Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:23.372584052Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.373933462Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.375625812Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.376954055Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.379029205Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:23.380276893Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:23.384632755Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:23.385667803Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:23.387388006Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:23.390039521Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:23.391014315Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:23.393792112Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:23.397666221Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:23.399022051Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:23.401458931Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:23.402580321Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:23.404454554Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:23.405809346Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:23.406908463Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:23.408661518Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:23.410711817Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:23.412667431Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:23.413809197Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:23.415991017Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:23.417112034Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:23.418149173Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:23.419889462Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.420990756Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.423123412Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:23.424311435Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:23.4254494Z 41 PC: 45ee7 | Parse filename
2018-12-17T22:27:23.427591317Z 41 PC: 45ef5 | Parse filename
2018-12-17T22:27:23.428980947Z 75 PC: 45f00 | Execute program
2018-12-17T22:27:23.44443424Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.44564469Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:23.446683089Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:23.448178869Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:23.449525254Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.451647918Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.453011649Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:23.454801057Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:23.456314334Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:23.457642127Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:23.45936557Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:23.46058209Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:23.46259016Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:23.463769508Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:23.465993528Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:23.46986111Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:23.470974568Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:23.473181969Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.474354477Z 53 PC: 4e65a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:23.476627585Z 37 PC: 4e66f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.477717116Z 37 PC: 4e677 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.47873024Z 37 PC: 4e67f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.48082636Z 37 PC: 4e687 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.482601118Z 68 PC: 4f426 | I/O control for devices (Set for = '')
2018-12-17T22:27:23.486134598Z 42 PC: 4e3b7 | Get date 0x4e3b7: xor ah, ah
0x4e3b9: les di, ptr [bp + 6]
0x4e3bc: stosw word ptr es:[di], ax
0x4e3bd: mov al, dl
0x4e3bf: les di, ptr [bp + 0xa]
0x4e3c2: stosw word ptr es:[di], ax
0x4e3c3: mov al, dh
0x4e3c5: les di, ptr [bp + 0xe]
0x4e3c8: stosw word ptr es:[di], ax
0x4e3c9: xchg ax, cx
0x4e3ca: les di, ptr [bp + 0x12]
0x4e3cd: stosw word ptr es:[di], ax
0x4e3ce: pop bp
0x4e3cf: retf 0x10
0x4e3d2: push bp
0x4e3d3: mov bp, sp
0x4e3d5: mov cx, word ptr [bp + 0xa]
0x4e3d8: mov dh, byte ptr [bp + 8]
0x4e3db: mov dl, byte ptr [bp + 6]
0x4e3de: mov ah, 0x2b
2018-12-17T22:27:23.488459168Z 25 PC: 4efcf | Get default drive
2018-12-17T22:27:23.489638171Z 71 PC: 4efe2 | Get current directory
2018-12-17T22:27:23.493001448Z 44 PC: 4f55d | Get time 0x4f55d: mov word ptr [0x3e], cx
0x4f561: mov word ptr [0x40], dx
0x4f565: retf
0x4f566: call 0x4f5ad
0x4f569: jb 0x4f57a
0x4f56b: mov cx, word ptr es:[di + 4]
0x4f56f: cmp cx, 1
0x4f572: je 0x4f57a
0x4f574: xor bx, bx
0x4f576: push cs
0x4f577: call 0x5f0da
0x4f57a: retf 4
0x4f57d: call 0x4f5ad
0x4f580: jb 0x4f595
0x4f582: mov ax, cx
0x4f584: mov dx, bx
0x4f586: mov cx, word ptr es:[di + 4]
0x4f58a: cmp cx, 1
0x4f58d: je 0x4f595
0x4f58f: xor bx, bx
2018-12-17T22:27:23.4950857Z 48 PC: 4ef42 | Get DOS version
2018-12-17T22:27:23.497275168Z 61 PC: 4ed80 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:23.504440815Z 66 PC: 4f5c7 | Move file pointer
2018-12-17T22:27:23.505941334Z 66 PC: 4f5d5 | Move file pointer
2018-12-17T22:27:23.508660682Z 66 PC: 4f5e3 | Move file pointer
2018-12-17T22:27:23.510509837Z 63 PC: 4ee53 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:23.518545349Z 62 PC: 4edd0 | Close file
2018-12-17T22:27:23.521558217Z 14 PC: 4f028 | Set default drive (Drive = 'A')
2018-12-17T22:27:23.523423287Z 25 PC: 4f02c | Get default drive
2018-12-17T22:27:23.524820054Z 59 PC: 4f096 | Change current directory
2018-12-17T22:27:23.528913377Z 26 PC: 4e4cf | Set disk transfer address
2018-12-17T22:27:23.530854889Z 78 PC: 4e4db | Find first file
2018-12-17T22:27:23.536668811Z 26 PC: 4e4f3 | Set disk transfer address
2018-12-17T22:27:23.538920513Z 79 PC: 4e4f8 | Find next file
2018-12-17T22:27:23.541458926Z 26 PC: 4e4f3 | Set disk transfer address
2018-12-17T22:27:23.54263036Z 79 PC: 4e4f8 | Find next file
2018-12-17T22:27:23.546434193Z 26 PC: 4e4f3 | Set disk transfer address
2018-12-17T22:27:23.547514456Z 79 PC: 4e4f8 | Find next file
2018-12-17T22:27:23.550886121Z 26 PC: 4e4f3 | Set disk transfer address
2018-12-17T22:27:23.551978918Z 79 PC: 4e4f8 | Find next file
2018-12-17T22:27:23.554802525Z 26 PC: 4e4f3 | Set disk transfer address
2018-12-17T22:27:23.556590901Z 79 PC: 4e4f8 | Find next file
2018-12-17T22:27:23.559508548Z 26 PC: 4e4f3 | Set disk transfer address
2018-12-17T22:27:23.561403987Z 79 PC: 4e4f8 | Find next file
2018-12-17T22:27:23.564034149Z 26 PC: 4e4f3 | Set disk transfer address
2018-12-17T22:27:23.579644037Z 79 PC: 4e4f8 | Find next file
2018-12-17T22:27:23.582653114Z 26 PC: 4e4f3 | Set disk transfer address
2018-12-17T22:27:23.584338426Z 79 PC: 4e4f8 | Find next file
2018-12-17T22:27:23.587307787Z 26 PC: 4e4f3 | Set disk transfer address
2018-12-17T22:27:23.588369703Z 79 PC: 4e4f8 | Find next file
2018-12-17T22:27:23.591185846Z 26 PC: 4e4f3 | Set disk transfer address
2018-12-17T22:27:23.592250593Z 79 PC: 4e4f8 | Find next file
2018-12-17T22:27:23.596662765Z 26 PC: 4e4f3 | Set disk transfer address
2018-12-17T22:27:23.597925407Z 79 PC: 4e4f8 | Find next file
2018-12-17T22:27:23.601255442Z 26 PC: 4e4f3 | Set disk transfer address
2018-12-17T22:27:23.602262717Z 79 PC: 4e4f8 | Find next file
2018-12-17T22:27:23.605099478Z 26 PC: 4e4f3 | Set disk transfer address
2018-12-17T22:27:23.606516215Z 79 PC: 4e4f8 | Find next file
2018-12-17T22:27:23.609159568Z 26 PC: 4e4f3 | Set disk transfer address
2018-12-17T22:27:23.611273395Z 79 PC: 4e4f8 | Find next file
2018-12-17T22:27:23.61329133Z 26 PC: 4e4f3 | Set disk transfer address
2018-12-17T22:27:23.616249256Z 79 PC: 4e4f8 | Find next file
2018-12-17T22:27:23.618851839Z 14 PC: 4f028 | Set default drive (Drive = 'A')
2018-12-17T22:27:23.619930884Z 25 PC: 4f02c | Get default drive
2018-12-17T22:27:23.621036871Z 59 PC: 4f096 | Change current directory
2018-12-17T22:27:23.624934232Z 48 PC: 4ef42 | Get DOS version
2018-12-17T22:27:23.626676763Z 48 PC: 4ef42 | Get DOS version
2018-12-17T22:27:23.628413172Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.629906095Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.630822091Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:23.631865781Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:23.633157817Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:23.634166579Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:23.635528842Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:23.636408851Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:23.637923387Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.638918008Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.640614494Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.641649134Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.642459191Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:23.643877904Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:23.645279562Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:23.647277661Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:23.648359402Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:23.649969548Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:23.651134905Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:23.652915089Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:23.653991942Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:23.654924392Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:23.656043534Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:23.657182316Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:23.658830792Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:23.659854Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:23.661736765Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:23.663048426Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:23.664544293Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:23.665981754Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:23.667206046Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:23.668263918Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:23.669090913Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:23.670465081Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:23.671513231Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.673334112Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.674296398Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:23.676354257Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:23.677551783Z 41 PC: 4e587 | Parse filename
2018-12-17T22:27:23.678785368Z 41 PC: 4e595 | Parse filename
2018-12-17T22:27:23.680704252Z 75 PC: 4e5a0 | Execute program
2018-12-17T22:27:23.695613336Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.697322199Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:23.698411369Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:23.700184378Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:23.701529579Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.703149963Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.70463127Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:23.70569139Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:23.707360314Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:23.708401494Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:23.710351589Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:23.711373973Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:23.713221613Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:23.714294404Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:23.7165408Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:23.726608779Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:23.729565918Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:23.731244145Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.732250189Z 53 PC: 56cfa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:23.733954588Z 37 PC: 56d0f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.734900389Z 37 PC: 56d17 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.736220555Z 37 PC: 56d1f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.737344704Z 37 PC: 56d27 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.73890502Z 68 PC: 57ac6 | I/O control for devices (Set for = '')
2018-12-17T22:27:23.741819975Z 42 PC: 56a57 | Get date 0x56a57: xor ah, ah
0x56a59: les di, ptr [bp + 6]
0x56a5c: stosw word ptr es:[di], ax
0x56a5d: mov al, dl
0x56a5f: les di, ptr [bp + 0xa]
0x56a62: stosw word ptr es:[di], ax
0x56a63: mov al, dh
0x56a65: les di, ptr [bp + 0xe]
0x56a68: stosw word ptr es:[di], ax
0x56a69: xchg ax, cx
0x56a6a: les di, ptr [bp + 0x12]
0x56a6d: stosw word ptr es:[di], ax
0x56a6e: pop bp
0x56a6f: retf 0x10
0x56a72: push bp
0x56a73: mov bp, sp
0x56a75: mov cx, word ptr [bp + 0xa]
0x56a78: mov dh, byte ptr [bp + 8]
0x56a7b: mov dl, byte ptr [bp + 6]
0x56a7e: mov ah, 0x2b
2018-12-17T22:27:23.743947873Z 25 PC: 5766f | Get default drive
2018-12-17T22:27:23.74543967Z 71 PC: 57682 | Get current directory
2018-12-17T22:27:23.748663201Z 44 PC: 57bfd | Get time 0x57bfd: mov word ptr [0x3e], cx
0x57c01: mov word ptr [0x40], dx
0x57c05: retf
0x57c06: call 0x57c4d
0x57c09: jb 0x57c1a
0x57c0b: mov cx, word ptr es:[di + 4]
0x57c0f: cmp cx, 1
0x57c12: je 0x57c1a
0x57c14: xor bx, bx
0x57c16: push cs
0x57c17: call 0x6777a
0x57c1a: retf 4
0x57c1d: call 0x57c4d
0x57c20: jb 0x57c35
0x57c22: mov ax, cx
0x57c24: mov dx, bx
0x57c26: mov cx, word ptr es:[di + 4]
0x57c2a: cmp cx, 1
0x57c2d: je 0x57c35
0x57c2f: xor bx, bx
2018-12-17T22:27:23.751512027Z 48 PC: 575e2 | Get DOS version
2018-12-17T22:27:23.753998972Z 61 PC: 57420 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:23.760724386Z 66 PC: 57c67 | Move file pointer
2018-12-17T22:27:23.765904295Z 66 PC: 57c75 | Move file pointer
2018-12-17T22:27:23.767519848Z 66 PC: 57c83 | Move file pointer
2018-12-17T22:27:23.770334958Z 63 PC: 574f3 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:23.77542008Z 62 PC: 57470 | Close file
2018-12-17T22:27:23.781470737Z 14 PC: 576c8 | Set default drive (Drive = 'A')
2018-12-17T22:27:23.78244286Z 25 PC: 576cc | Get default drive
2018-12-17T22:27:23.784611308Z 59 PC: 57736 | Change current directory
2018-12-17T22:27:23.787388638Z 26 PC: 56b6f | Set disk transfer address
2018-12-17T22:27:23.788242376Z 78 PC: 56b7b | Find first file
2018-12-17T22:27:23.793033963Z 26 PC: 56b93 | Set disk transfer address
2018-12-17T22:27:23.794518166Z 79 PC: 56b98 | Find next file
2018-12-17T22:27:23.797428359Z 26 PC: 56b93 | Set disk transfer address
2018-12-17T22:27:23.798841323Z 79 PC: 56b98 | Find next file
2018-12-17T22:27:23.801346842Z 26 PC: 56b93 | Set disk transfer address
2018-12-17T22:27:23.802195604Z 79 PC: 56b98 | Find next file
2018-12-17T22:27:23.804641973Z 26 PC: 56b93 | Set disk transfer address
2018-12-17T22:27:23.806188221Z 79 PC: 56b98 | Find next file
2018-12-17T22:27:23.808115187Z 26 PC: 56b93 | Set disk transfer address
2018-12-17T22:27:23.809471435Z 79 PC: 56b98 | Find next file
2018-12-17T22:27:23.811388989Z 26 PC: 56b93 | Set disk transfer address
2018-12-17T22:27:23.812755582Z 79 PC: 56b98 | Find next file
2018-12-17T22:27:23.814662057Z 26 PC: 56b93 | Set disk transfer address
2018-12-17T22:27:23.816244738Z 79 PC: 56b98 | Find next file
2018-12-17T22:27:23.818069515Z 26 PC: 56b93 | Set disk transfer address
2018-12-17T22:27:23.818896094Z 79 PC: 56b98 | Find next file
2018-12-17T22:27:23.821010491Z 26 PC: 56b93 | Set disk transfer address
2018-12-17T22:27:23.821832181Z 79 PC: 56b98 | Find next file
2018-12-17T22:27:23.824181543Z 26 PC: 56b93 | Set disk transfer address
2018-12-17T22:27:23.824953328Z 79 PC: 56b98 | Find next file
2018-12-17T22:27:23.827376026Z 26 PC: 56b93 | Set disk transfer address
2018-12-17T22:27:23.828133959Z 79 PC: 56b98 | Find next file
2018-12-17T22:27:23.830122991Z 26 PC: 56b93 | Set disk transfer address
2018-12-17T22:27:23.831554012Z 79 PC: 56b98 | Find next file
2018-12-17T22:27:23.833489453Z 26 PC: 56b93 | Set disk transfer address
2018-12-17T22:27:23.835418583Z 79 PC: 56b98 | Find next file
2018-12-17T22:27:23.83724014Z 26 PC: 56b93 | Set disk transfer address
2018-12-17T22:27:23.838739855Z 79 PC: 56b98 | Find next file
2018-12-17T22:27:23.840703168Z 26 PC: 56b93 | Set disk transfer address
2018-12-17T22:27:23.841965302Z 79 PC: 56b98 | Find next file
2018-12-17T22:27:23.844044878Z 14 PC: 576c8 | Set default drive (Drive = 'A')
2018-12-17T22:27:23.845200849Z 25 PC: 576cc | Get default drive
2018-12-17T22:27:23.846546414Z 59 PC: 57736 | Change current directory
2018-12-17T22:27:23.849209727Z 48 PC: 575e2 | Get DOS version
2018-12-17T22:27:23.850759329Z 48 PC: 575e2 | Get DOS version
2018-12-17T22:27:23.852123435Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.853446148Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.854728871Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:23.855758282Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:23.857060535Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:23.857933125Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:23.85938152Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:23.860267179Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:23.861800621Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.862649636Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.864457699Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.865456568Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.866594421Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:23.867956189Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:23.868785898Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:23.870404056Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:23.871248363Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:23.872815758Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:23.873686795Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:23.874744094Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:23.876941802Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:23.878300272Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:23.879750412Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:23.880820823Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:23.882389928Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:23.883282047Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:23.884877994Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:23.885925351Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:23.887266649Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:23.88923896Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:23.890129141Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:23.891549406Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:23.892392259Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:23.894276813Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:23.896074284Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.897785792Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.899444511Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:23.900666589Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:23.903136641Z 41 PC: 56c27 | Parse filename
2018-12-17T22:27:23.904707907Z 41 PC: 56c35 | Parse filename
2018-12-17T22:27:23.906919126Z 75 PC: 56c40 | Execute program
2018-12-17T22:27:23.923438538Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.925740746Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:23.92682329Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:23.928104624Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:23.929396034Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.930484242Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.932421653Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:23.934316293Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:23.937309925Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:23.939302393Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:23.940434188Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:23.943059316Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:23.944461027Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:23.946768277Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:23.948516056Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:23.949840128Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:23.951480503Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:23.952431792Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.954206755Z 53 PC: 5f39a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:23.955299529Z 37 PC: 5f3af | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:23.957729511Z 37 PC: 5f3b7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:23.959205773Z 37 PC: 5f3bf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:23.960753189Z 37 PC: 5f3c7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:23.962383291Z 68 PC: 60166 | I/O control for devices (Set for = '')
2018-12-17T22:27:23.965704135Z 42 PC: 5f0f7 | Get date 0x5f0f7: xor ah, ah
0x5f0f9: les di, ptr [bp + 6]
0x5f0fc: stosw word ptr es:[di], ax
0x5f0fd: mov al, dl
0x5f0ff: les di, ptr [bp + 0xa]
0x5f102: stosw word ptr es:[di], ax
0x5f103: mov al, dh
0x5f105: les di, ptr [bp + 0xe]
0x5f108: stosw word ptr es:[di], ax
0x5f109: xchg ax, cx
0x5f10a: les di, ptr [bp + 0x12]
0x5f10d: stosw word ptr es:[di], ax
0x5f10e: pop bp
0x5f10f: retf 0x10
0x5f112: push bp
0x5f113: mov bp, sp
0x5f115: mov cx, word ptr [bp + 0xa]
0x5f118: mov dh, byte ptr [bp + 8]
0x5f11b: mov dl, byte ptr [bp + 6]
0x5f11e: mov ah, 0x2b
2018-12-17T22:27:23.968174959Z 25 PC: 5fd0f | Get default drive
2018-12-17T22:27:23.969644907Z 71 PC: 5fd22 | Get current directory
2018-12-17T22:27:23.973631292Z 44 PC: 6029d | Get time 0x6029d: mov word ptr [0x3e], cx
0x602a1: mov word ptr [0x40], dx
0x602a5: retf
0x602a6: call 0x602ed
0x602a9: jb 0x602ba
0x602ab: mov cx, word ptr es:[di + 4]
0x602af: cmp cx, 1
0x602b2: je 0x602ba
0x602b4: xor bx, bx
0x602b6: push cs
0x602b7: call 0x6fe1a
0x602ba: retf 4
0x602bd: call 0x602ed
0x602c0: jb 0x602d5
0x602c2: mov ax, cx
0x602c4: mov dx, bx
0x602c6: mov cx, word ptr es:[di + 4]
0x602ca: cmp cx, 1
0x602cd: je 0x602d5
0x602cf: xor bx, bx
2018-12-17T22:27:23.976596199Z 48 PC: 5fc82 | Get DOS version
2018-12-17T22:27:23.980697364Z 61 PC: 5fac0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:23.987521459Z 66 PC: 60307 | Move file pointer
2018-12-17T22:27:23.991037344Z 66 PC: 60315 | Move file pointer
2018-12-17T22:27:23.992346519Z 66 PC: 60323 | Move file pointer
2018-12-17T22:27:23.994871764Z 63 PC: 5fb93 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:24.003282924Z 62 PC: 5fb10 | Close file
2018-12-17T22:27:24.007722067Z 14 PC: 5fd68 | Set default drive (Drive = 'A')
2018-12-17T22:27:24.009037029Z 25 PC: 5fd6c | Get default drive
2018-12-17T22:27:24.010182105Z 59 PC: 5fdd6 | Change current directory
2018-12-17T22:27:24.016793073Z 26 PC: 5f20f | Set disk transfer address
2018-12-17T22:27:24.018508542Z 78 PC: 5f21b | Find first file
2018-12-17T22:27:24.025685439Z 26 PC: 5f233 | Set disk transfer address
2018-12-17T22:27:24.02676719Z 79 PC: 5f238 | Find next file
2018-12-17T22:27:24.030661311Z 26 PC: 5f233 | Set disk transfer address
2018-12-17T22:27:24.031762184Z 79 PC: 5f238 | Find next file
2018-12-17T22:27:24.035087173Z 26 PC: 5f233 | Set disk transfer address
2018-12-17T22:27:24.036262119Z 79 PC: 5f238 | Find next file
2018-12-17T22:27:24.039735038Z 26 PC: 5f233 | Set disk transfer address
2018-12-17T22:27:24.042942162Z 79 PC: 5f238 | Find next file
2018-12-17T22:27:24.046024588Z 26 PC: 5f233 | Set disk transfer address
2018-12-17T22:27:24.049000552Z 79 PC: 5f238 | Find next file
2018-12-17T22:27:24.051889867Z 26 PC: 5f233 | Set disk transfer address
2018-12-17T22:27:24.05479834Z 79 PC: 5f238 | Find next file
2018-12-17T22:27:24.057589287Z 26 PC: 5f233 | Set disk transfer address
2018-12-17T22:27:24.061079102Z 79 PC: 5f238 | Find next file
2018-12-17T22:27:24.063703281Z 26 PC: 5f233 | Set disk transfer address
2018-12-17T22:27:24.065842797Z 79 PC: 5f238 | Find next file
2018-12-17T22:27:24.069733488Z 26 PC: 5f233 | Set disk transfer address
2018-12-17T22:27:24.071244763Z 79 PC: 5f238 | Find next file
2018-12-17T22:27:24.075082651Z 26 PC: 5f233 | Set disk transfer address
2018-12-17T22:27:24.076335461Z 79 PC: 5f238 | Find next file
2018-12-17T22:27:24.080506543Z 26 PC: 5f233 | Set disk transfer address
2018-12-17T22:27:24.081814086Z 79 PC: 5f238 | Find next file
2018-12-17T22:27:24.085573943Z 26 PC: 5f233 | Set disk transfer address
2018-12-17T22:27:24.086815779Z 79 PC: 5f238 | Find next file
2018-12-17T22:27:24.09150142Z 26 PC: 5f233 | Set disk transfer address
2018-12-17T22:27:24.092937714Z 79 PC: 5f238 | Find next file
2018-12-17T22:27:24.09647945Z 26 PC: 5f233 | Set disk transfer address
2018-12-17T22:27:24.097517943Z 79 PC: 5f238 | Find next file
2018-12-17T22:27:24.099993119Z 26 PC: 5f233 | Set disk transfer address
2018-12-17T22:27:24.101567416Z 79 PC: 5f238 | Find next file
2018-12-17T22:27:24.104140153Z 14 PC: 5fd68 | Set default drive (Drive = 'A')
2018-12-17T22:27:24.106001437Z 25 PC: 5fd6c | Get default drive
2018-12-17T22:27:24.106953221Z 59 PC: 5fdd6 | Change current directory
2018-12-17T22:27:24.112032951Z 48 PC: 5fc82 | Get DOS version
2018-12-17T22:27:24.113188141Z 48 PC: 5fc82 | Get DOS version
2018-12-17T22:27:24.115018765Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:24.117027839Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:24.118306332Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:24.120425429Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:24.121770571Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:24.123572778Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:24.125098494Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:24.127022819Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:24.12839471Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:24.130422308Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:24.131405915Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:24.135399523Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:24.136909541Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:24.138759346Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:24.139824285Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:24.142028761Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:24.143601418Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:24.146007974Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:24.147406342Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:24.14876843Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:24.152992385Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:24.154304353Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:24.156689749Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:24.15800213Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:24.161928218Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:24.163275Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:24.165864129Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:24.166989429Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:24.168549504Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:24.169940343Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:24.171895167Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:24.173907036Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:24.174954823Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:24.177150585Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:24.178482394Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:24.181554452Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:24.182932023Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:24.185086201Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:24.186249431Z 41 PC: 5f2c7 | Parse filename
2018-12-17T22:27:24.188226217Z 41 PC: 5f2d5 | Parse filename
2018-12-17T22:27:24.189509771Z 75 PC: 5f2e0 | Execute program
2018-12-17T22:27:24.205006668Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:24.21838472Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:24.219971591Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:24.221022569Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:24.223323701Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:24.225352Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:24.227658599Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:24.229559768Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:24.230730535Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:24.233411734Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:24.234394795Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:24.236464957Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:24.238026825Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:24.23991365Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:24.241076472Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:24.243352148Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:24.24438857Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:24.246487803Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:24.247638313Z 53 PC: 67a3a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:24.24997688Z 37 PC: 67a4f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:24.25114442Z 37 PC: 67a57 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:24.25295234Z 37 PC: 67a5f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:24.254345811Z 37 PC: 67a67 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:24.256248357Z 68 PC: 68806 | I/O control for devices (Set for = '')
2018-12-17T22:27:24.258896525Z 42 PC: 67797 | Get date 0x67797: xor ah, ah
0x67799: les di, ptr [bp + 6]
0x6779c: stosw word ptr es:[di], ax
0x6779d: mov al, dl
0x6779f: les di, ptr [bp + 0xa]
0x677a2: stosw word ptr es:[di], ax
0x677a3: mov al, dh
0x677a5: les di, ptr [bp + 0xe]
0x677a8: stosw word ptr es:[di], ax
0x677a9: xchg ax, cx
0x677aa: les di, ptr [bp + 0x12]
0x677ad: stosw word ptr es:[di], ax
0x677ae: pop bp
0x677af: retf 0x10
0x677b2: push bp
0x677b3: mov bp, sp
0x677b5: mov cx, word ptr [bp + 0xa]
0x677b8: mov dh, byte ptr [bp + 8]
0x677bb: mov dl, byte ptr [bp + 6]
0x677be: mov ah, 0x2b
2018-12-17T22:27:24.262006667Z 25 PC: 683af | Get default drive
2018-12-17T22:27:24.264288614Z 71 PC: 683c2 | Get current directory
2018-12-17T22:27:24.267179715Z 44 PC: 6893d | Get time 0x6893d: mov word ptr [0x3e], cx
0x68941: mov word ptr [0x40], dx
0x68945: retf
0x68946: call 0x6898d
0x68949: jb 0x6895a
0x6894b: mov cx, word ptr es:[di + 4]
0x6894f: cmp cx, 1
0x68952: je 0x6895a
0x68954: xor bx, bx
0x68956: push cs
0x68957: call 0x784ba
0x6895a: retf 4
0x6895d: call 0x6898d
0x68960: jb 0x68975
0x68962: mov ax, cx
0x68964: mov dx, bx
0x68966: mov cx, word ptr es:[di + 4]
0x6896a: cmp cx, 1
0x6896d: je 0x68975
0x6896f: xor bx, bx
2018-12-17T22:27:24.270472545Z 48 PC: 68322 | Get DOS version
2018-12-17T22:27:24.271930566Z 61 PC: 68160 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:24.284209514Z 66 PC: 689a7 | Move file pointer
2018-12-17T22:27:24.285675659Z 66 PC: 689b5 | Move file pointer
2018-12-17T22:27:24.287820391Z 66 PC: 689c3 | Move file pointer
2018-12-17T22:27:24.289697043Z 63 PC: 68233 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:24.30008066Z 62 PC: 681b0 | Close file
2018-12-17T22:27:24.303249957Z 14 PC: 68408 | Set default drive (Drive = 'A')
2018-12-17T22:27:24.305322388Z 25 PC: 6840c | Get default drive
2018-12-17T22:27:24.306687332Z 59 PC: 68476 | Change current directory
2018-12-17T22:27:24.311848222Z 26 PC: 678af | Set disk transfer address
2018-12-17T22:27:24.313073184Z 78 PC: 678bb | Find first file
2018-12-17T22:27:24.319159352Z 26 PC: 678d3 | Set disk transfer address
2018-12-17T22:27:24.320713369Z 79 PC: 678d8 | Find next file
2018-12-17T22:27:24.323685732Z 26 PC: 678d3 | Set disk transfer address
2018-12-17T22:27:24.325772482Z 79 PC: 678d8 | Find next file
2018-12-17T22:27:24.328510761Z 26 PC: 678d3 | Set disk transfer address
2018-12-17T22:27:24.330690766Z 79 PC: 678d8 | Find next file
2018-12-17T22:27:24.333416238Z 26 PC: 678d3 | Set disk transfer address
2018-12-17T22:27:24.336073545Z 79 PC: 678d8 | Find next file
2018-12-17T22:27:24.338668174Z 26 PC: 678d3 | Set disk transfer address
2018-12-17T22:27:24.34063701Z 79 PC: 678d8 | Find next file
2018-12-17T22:27:24.344224963Z 26 PC: 678d3 | Set disk transfer address
2018-12-17T22:27:24.347146868Z 79 PC: 678d8 | Find next file
2018-12-17T22:27:24.350233236Z 26 PC: 678d3 | Set disk transfer address
2018-12-17T22:27:24.35359942Z 79 PC: 678d8 | Find next file
2018-12-17T22:27:24.356545837Z 26 PC: 678d3 | Set disk transfer address
2018-12-17T22:27:24.359649385Z 79 PC: 678d8 | Find next file
2018-12-17T22:27:24.362561373Z 26 PC: 678d3 | Set disk transfer address
2018-12-17T22:27:24.365305819Z 79 PC: 678d8 | Find next file
2018-12-17T22:27:24.375402104Z 26 PC: 678d3 | Set disk transfer address
2018-12-17T22:27:24.378393587Z 79 PC: 678d8 | Find next file
2018-12-17T22:27:24.381298589Z 26 PC: 678d3 | Set disk transfer address
2018-12-17T22:27:24.384213908Z 79 PC: 678d8 | Find next file
2018-12-17T22:27:24.387112124Z 26 PC: 678d3 | Set disk transfer address
2018-12-17T22:27:24.390101973Z 79 PC: 678d8 | Find next file
2018-12-17T22:27:24.392500752Z 26 PC: 678d3 | Set disk transfer address
2018-12-17T22:27:24.393848796Z 79 PC: 678d8 | Find next file
2018-12-17T22:27:24.396384244Z 26 PC: 678d3 | Set disk transfer address
2018-12-17T22:27:24.397560392Z 79 PC: 678d8 | Find next file
2018-12-17T22:27:24.40055097Z 26 PC: 678d3 | Set disk transfer address
2018-12-17T22:27:24.401874409Z 79 PC: 678d8 | Find next file
2018-12-17T22:27:24.405763935Z 14 PC: 68408 | Set default drive (Drive = 'A')
2018-12-17T22:27:24.4072453Z 25 PC: 6840c | Get default drive
2018-12-17T22:27:24.409260799Z 59 PC: 68476 | Change current directory
2018-12-17T22:27:24.413376293Z 48 PC: 68322 | Get DOS version
2018-12-17T22:27:24.415590243Z 48 PC: 68322 | Get DOS version
2018-12-17T22:27:24.417813851Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:24.419979158Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:24.421491354Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:24.423463101Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:24.424898492Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:24.427053017Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:24.428406873Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:24.430402702Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:24.431723765Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:24.433513702Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:24.434817747Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:24.437059033Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:24.439404373Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:24.441277262Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:24.442353355Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:24.454317073Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:24.455778109Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:24.458403255Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:24.459849394Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:24.462711779Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:24.464455229Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:24.466870469Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:24.467973563Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:24.470583479Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:24.471947622Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:24.47478333Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:24.476188535Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:24.478527093Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:24.479960115Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:24.481340119Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:24.482688795Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:24.483956856Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:24.486445267Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:24.487521696Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:24.489474651Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:24.490570167Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:24.492400777Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:24.493523279Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:24.495974643Z 41 PC: 67967 | Parse filename
2018-12-17T22:27:24.497303781Z 41 PC: 67975 | Parse filename
2018-12-17T22:27:24.499816401Z 75 PC: 67980 | Execute program
2018-12-17T22:27:24.516558502Z 53 PC: 700da | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:24.519339659Z 53 PC: 700da | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:24.521055791Z 53 PC: 700da | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:24.522559298Z 53 PC: 700da | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:24.524801404Z 53 PC: 700da | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:24.526532316Z 53 PC: 700da | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:24.529558255Z 53 PC: 700da | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:24.530909962Z 53 PC: 700da | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:24.534330172Z 53 PC: 700da | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:24.535729338Z 53 PC: 700da | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:24.548934951Z 53 PC: 700da | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:24.550404171Z 53 PC: 700da | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:24.553030579Z 53 PC: 700da | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:24.554477083Z 53 PC: 700da | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:24.556460885Z 53 PC: 700da | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:24.557673052Z 53 PC: 700da | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:24.55949977Z 53 PC: 700da | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:24.561223182Z 53 PC: 700da | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:24.562614729Z 53 PC: 700da | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:24.563688038Z 37 PC: 700ef | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:24.564682038Z 37 PC: 700f7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:24.566059119Z 37 PC: 700ff | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:24.567071754Z 37 PC: 70107 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:24.568741786Z 68 PC: 70ea6 | I/O control for devices (Set for = '')
2018-12-17T22:27:24.571173706Z 42 PC: 6fe37 | Get date 0x6fe37: xor ah, ah
0x6fe39: les di, ptr [bp + 6]
0x6fe3c: stosw word ptr es:[di], ax
0x6fe3d: mov al, dl
0x6fe3f: les di, ptr [bp + 0xa]
0x6fe42: stosw word ptr es:[di], ax
0x6fe43: mov al, dh
0x6fe45: les di, ptr [bp + 0xe]
0x6fe48: stosw word ptr es:[di], ax
0x6fe49: xchg ax, cx
0x6fe4a: les di, ptr [bp + 0x12]
0x6fe4d: stosw word ptr es:[di], ax
0x6fe4e: pop bp
0x6fe4f: retf 0x10
0x6fe52: push bp
0x6fe53: mov bp, sp
0x6fe55: mov cx, word ptr [bp + 0xa]
0x6fe58: mov dh, byte ptr [bp + 8]
0x6fe5b: mov dl, byte ptr [bp + 6]
0x6fe5e: mov ah, 0x2b
2018-12-17T22:27:24.574184281Z 25 PC: 70a4f | Get default drive
2018-12-17T22:27:24.575244151Z 71 PC: 70a62 | Get current directory
2018-12-17T22:27:24.578332118Z 44 PC: 70fdd | Get time 0x70fdd: mov word ptr [0x3e], cx
0x70fe1: mov word ptr [0x40], dx
0x70fe5: retf
0x70fe6: call 0x7102d
0x70fe9: jb 0x70ffa
0x70feb: mov cx, word ptr es:[di + 4]
0x70fef: cmp cx, 1
0x70ff2: je 0x70ffa
0x70ff4: xor bx, bx
0x70ff6: push cs
0x70ff7: call 0x80b5a
0x70ffa: retf 4
0x70ffd: call 0x7102d
0x71000: jb 0x71015
0x71002: mov ax, cx
0x71004: mov dx, bx
0x71006: mov cx, word ptr es:[di + 4]
0x7100a: cmp cx, 1
0x7100d: je 0x71015
0x7100f: xor bx, bx
2018-12-17T22:27:24.580601276Z 48 PC: 709c2 | Get DOS version
2018-12-17T22:27:24.585991868Z 61 PC: 70800 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:24.5937274Z 66 PC: 71047 | Move file pointer
2018-12-17T22:27:24.595298362Z 66 PC: 71055 | Move file pointer
2018-12-17T22:27:24.596707844Z 66 PC: 71063 | Move file pointer
2018-12-17T22:27:24.599242797Z 63 PC: 708d3 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:24.606590673Z 62 PC: 70850 | Close file
2018-12-17T22:27:24.61004348Z 14 PC: 70aa8 | Set default drive (Drive = 'A')
2018-12-17T22:27:24.611374596Z 25 PC: 70aac | Get default drive
2018-12-17T22:27:24.617006531Z 59 PC: 70b16 | Change current directory
2018-12-17T22:27:24.622133068Z 26 PC: 6ff4f | Set disk transfer address
2018-12-17T22:27:24.624148379Z 78 PC: 6ff5b | Find first file
2018-12-17T22:27:24.638427265Z 26 PC: 6ff73 | Set disk transfer address
2018-12-17T22:27:24.641092371Z 79 PC: 6ff78 | Find next file
2018-12-17T22:27:24.644035308Z 26 PC: 6ff73 | Set disk transfer address
2018-12-17T22:27:24.646065832Z 79 PC: 6ff78 | Find next file
2018-12-17T22:27:24.648929723Z 26 PC: 6ff73 | Set disk transfer address
2018-12-17T22:27:24.650144201Z 79 PC: 6ff78 | Find next file
2018-12-17T22:27:24.65475709Z 26 PC: 6ff73 | Set disk transfer address
2018-12-17T22:27:24.656925956Z 79 PC: 6ff78 | Find next file
2018-12-17T22:27:24.66184203Z 26 PC: 6ff73 | Set disk transfer address
2018-12-17T22:27:24.663066163Z 79 PC: 6ff78 | Find next file
2018-12-17T22:27:24.666972084Z 26 PC: 6ff73 | Set disk transfer address
2018-12-17T22:27:24.668039873Z 79 PC: 6ff78 | Find next file
2018-12-17T22:27:24.671736737Z 26 PC: 6ff73 | Set disk transfer address
2018-12-17T22:27:24.673097202Z 79 PC: 6ff78 | Find next file
2018-12-17T22:27:24.676435798Z 26 PC: 6ff73 | Set disk transfer address
2018-12-17T22:27:24.678104861Z 79 PC: 6ff78 | Find next file
2018-12-17T22:27:24.681271009Z 26 PC: 6ff73 | Set disk transfer address
2018-12-17T22:27:24.683858422Z 79 PC: 6ff78 | Find next file
2018-12-17T22:27:24.686748449Z 26 PC: 6ff73 | Set disk transfer address
2018-12-17T22:27:24.689424638Z 79 PC: 6ff78 | Find next file
2018-12-17T22:27:24.692427343Z 26 PC: 6ff73 | Set disk transfer address
2018-12-17T22:27:24.69477034Z 79 PC: 6ff78 | Find next file
2018-12-17T22:27:24.697473893Z 26 PC: 6ff73 | Set disk transfer address
2018-12-17T22:27:24.69984561Z 79 PC: 6ff78 | Find next file
2018-12-17T22:27:24.703017849Z 26 PC: 6ff73 | Set disk transfer address
2018-12-17T22:27:24.705813282Z 79 PC: 6ff78 | Find next file
2018-12-17T22:27:24.709476806Z 26 PC: 6ff73 | Set disk transfer address
2018-12-17T22:27:24.710785371Z 79 PC: 6ff78 | Find next file
2018-12-17T22:27:24.714642118Z 26 PC: 6ff73 | Set disk transfer address
2018-12-17T22:27:24.71578735Z 79 PC: 6ff78 | Find next file
2018-12-17T22:27:24.719756007Z 14 PC: 70aa8 | Set default drive (Drive = 'A')
2018-12-17T22:27:24.721711995Z 25 PC: 70aac | Get default drive
2018-12-17T22:27:24.724078838Z 59 PC: 70b16 | Change current directory
2018-12-17T22:27:24.728286507Z 48 PC: 709c2 | Get DOS version
2018-12-17T22:27:24.730913086Z 48 PC: 709c2 | Get DOS version
2018-12-17T22:27:24.733612933Z 53 PC: 70050 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:24.735954153Z 37 PC: 70059 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:24.737143704Z 53 PC: 70050 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:24.739724888Z 37 PC: 70059 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:24.740873891Z 53 PC: 70050 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:24.742836509Z 37 PC: 70059 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:24.74414393Z 53 PC: 70050 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:24.745506548Z 37 PC: 70059 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:24.747430905Z 53 PC: 70050 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:24.750093372Z 37 PC: 70059 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:24.751507247Z 53 PC: 70050 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:24.753551002Z 37 PC: 70059 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:24.754795083Z 53 PC: 70050 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:24.756615335Z 37 PC: 70059 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:24.757954571Z 53 PC: 70050 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:24.759235761Z 37 PC: 70059 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:24.761210322Z 53 PC: 70050 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:24.762474067Z 37 PC: 70059 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:24.764781301Z 53 PC: 70050 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:24.766127849Z 37 PC: 70059 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:24.767927058Z 53 PC: 70050 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:24.769237154Z 37 PC: 70059 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:24.771297375Z 53 PC: 70050 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:24.772830846Z 37 PC: 70059 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:24.774747013Z 53 PC: 70050 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:24.776023858Z 37 PC: 70059 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:24.777888084Z 53 PC: 70050 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:24.779235419Z 37 PC: 70059 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:24.7814891Z 53 PC: 70050 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:24.786189448Z 37 PC: 70059 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:24.787602841Z 53 PC: 70050 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:24.789310856Z 37 PC: 70059 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:24.791261393Z 53 PC: 70050 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:24.792726784Z 37 PC: 70059 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:24.794163694Z 53 PC: 70050 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:24.795490809Z 37 PC: 70059 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:24.798654284Z 53 PC: 70050 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:24.800186499Z 37 PC: 70059 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:24.801986876Z 41 PC: 70007 | Parse filename
2018-12-17T22:27:24.803553678Z 41 PC: 70015 | Parse filename
2018-12-17T22:27:24.805448294Z 75 PC: 70020 | Execute program
2018-12-17T22:27:24.82044571Z 53 PC: 7877a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:24.822931674Z 53 PC: 7877a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:24.824300965Z 53 PC: 7877a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:24.826723288Z 53 PC: 7877a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:24.828082084Z 53 PC: 7877a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:24.829904003Z 53 PC: 7877a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:24.831237025Z 53 PC: 7877a | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:24.832848354Z 53 PC: 7877a | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:24.834063961Z 53 PC: 7877a | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:24.835768089Z 53 PC: 7877a | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:24.836854253Z 53 PC: 7877a | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:24.83863979Z 53 PC: 7877a | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:24.840008963Z 53 PC: 7877a | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:24.841274147Z 53 PC: 7877a | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:24.842352819Z 53 PC: 7877a | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:24.844724236Z 53 PC: 7877a | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:24.845931081Z 53 PC: 7877a | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:24.847701088Z 53 PC: 7877a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:24.848948662Z 53 PC: 7877a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:24.849984856Z 37 PC: 7878f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:24.85073299Z 37 PC: 78797 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:24.85201344Z 37 PC: 7879f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:24.852896612Z 37 PC: 787a7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:24.854259609Z 68 PC: 79546 | I/O control for devices (Set for = '')
2018-12-17T22:27:24.855887136Z 42 PC: 784d7 | Get date 0x784d7: xor ah, ah
0x784d9: les di, ptr [bp + 6]
0x784dc: stosw word ptr es:[di], ax
0x784dd: mov al, dl
0x784df: les di, ptr [bp + 0xa]
0x784e2: stosw word ptr es:[di], ax
0x784e3: mov al, dh
0x784e5: les di, ptr [bp + 0xe]
0x784e8: stosw word ptr es:[di], ax
0x784e9: xchg ax, cx
0x784ea: les di, ptr [bp + 0x12]
0x784ed: stosw word ptr es:[di], ax
0x784ee: pop bp
0x784ef: retf 0x10
0x784f2: push bp
0x784f3: mov bp, sp
0x784f5: mov cx, word ptr [bp + 0xa]
0x784f8: mov dh, byte ptr [bp + 8]
0x784fb: mov dl, byte ptr [bp + 6]
0x784fe: mov ah, 0x2b
2018-12-17T22:27:24.858733569Z 25 PC: 790ef | Get default drive
2018-12-17T22:27:24.859947713Z 71 PC: 79102 | Get current directory
2018-12-17T22:27:24.86188059Z 44 PC: 7967d | Get time 0x7967d: mov word ptr [0x3e], cx
0x79681: mov word ptr [0x40], dx
0x79685: retf
0x79686: call 0x796cd
0x79689: jb 0x7969a
0x7968b: mov cx, word ptr es:[di + 4]
0x7968f: cmp cx, 1
0x79692: je 0x7969a
0x79694: xor bx, bx
0x79696: push cs
0x79697: call 0x891fa
0x7969a: retf 4
0x7969d: call 0x796cd
0x796a0: jb 0x796b5
0x796a2: mov ax, cx
0x796a4: mov dx, bx
0x796a6: mov cx, word ptr es:[di + 4]
0x796aa: cmp cx, 1
0x796ad: je 0x796b5
0x796af: xor bx, bx
2018-12-17T22:27:24.863789565Z 48 PC: 79062 | Get DOS version
2018-12-17T22:27:24.866061768Z 61 PC: 78ea0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:24.870770471Z 66 PC: 796e7 | Move file pointer
2018-12-17T22:27:24.877502993Z 66 PC: 796f5 | Move file pointer
2018-12-17T22:27:24.879209472Z 66 PC: 79703 | Move file pointer
2018-12-17T22:27:24.883835932Z 63 PC: 78f73 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:24.893738112Z 62 PC: 78ef0 | Close file
2018-12-17T22:27:24.897039725Z 14 PC: 79148 | Set default drive (Drive = 'A')
2018-12-17T22:27:24.89884648Z 25 PC: 7914c | Get default drive
2018-12-17T22:27:24.901847108Z 59 PC: 791b6 | Change current directory
2018-12-17T22:27:24.906061957Z 26 PC: 785ef | Set disk transfer address
2018-12-17T22:27:24.907172722Z 78 PC: 785fb | Find first file
2018-12-17T22:27:24.91589724Z 26 PC: 78613 | Set disk transfer address
2018-12-17T22:27:24.916905638Z 79 PC: 78618 | Find next file
2018-12-17T22:27:24.919074429Z 26 PC: 78613 | Set disk transfer address
2018-12-17T22:27:24.919987372Z 79 PC: 78618 | Find next file
2018-12-17T22:27:24.92255722Z 26 PC: 78613 | Set disk transfer address
2018-12-17T22:27:24.923978158Z 79 PC: 78618 | Find next file
2018-12-17T22:27:24.926870918Z 26 PC: 78613 | Set disk transfer address
2018-12-17T22:27:24.927737836Z 79 PC: 78618 | Find next file
2018-12-17T22:27:24.930566073Z 26 PC: 78613 | Set disk transfer address
2018-12-17T22:27:24.931388763Z 79 PC: 78618 | Find next file
2018-12-17T22:27:24.934125466Z 26 PC: 78613 | Set disk transfer address
2018-12-17T22:27:24.935001549Z 79 PC: 78618 | Find next file
2018-12-17T22:27:24.937450988Z 26 PC: 78613 | Set disk transfer address
2018-12-17T22:27:24.938266152Z 79 PC: 78618 | Find next file
2018-12-17T22:27:24.942777984Z 26 PC: 78613 | Set disk transfer address
2018-12-17T22:27:24.943808166Z 79 PC: 78618 | Find next file
2018-12-17T22:27:24.946167533Z 26 PC: 78613 | Set disk transfer address
2018-12-17T22:27:24.947545447Z 79 PC: 78618 | Find next file
2018-12-17T22:27:24.950384628Z 26 PC: 78613 | Set disk transfer address
2018-12-17T22:27:24.951385553Z 79 PC: 78618 | Find next file
2018-12-17T22:27:24.954091296Z 26 PC: 78613 | Set disk transfer address
2018-12-17T22:27:24.955071671Z 79 PC: 78618 | Find next file
2018-12-17T22:27:24.958866129Z 26 PC: 78613 | Set disk transfer address
2018-12-17T22:27:24.959847798Z 79 PC: 78618 | Find next file
2018-12-17T22:27:24.962834953Z 26 PC: 78613 | Set disk transfer address
2018-12-17T22:27:24.963857401Z 79 PC: 78618 | Find next file
2018-12-17T22:27:24.967212963Z 26 PC: 78613 | Set disk transfer address
2018-12-17T22:27:24.968203078Z 79 PC: 78618 | Find next file
2018-12-17T22:27:24.971482935Z 26 PC: 78613 | Set disk transfer address
2018-12-17T22:27:24.973156153Z 79 PC: 78618 | Find next file
2018-12-17T22:27:24.978232421Z 14 PC: 79148 | Set default drive (Drive = 'A')
2018-12-17T22:27:24.979914875Z 25 PC: 7914c | Get default drive
2018-12-17T22:27:24.985194245Z 59 PC: 791b6 | Change current directory
2018-12-17T22:27:24.991128069Z 48 PC: 79062 | Get DOS version
2018-12-17T22:27:24.99241008Z 48 PC: 79062 | Get DOS version
2018-12-17T22:27:24.994950296Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:24.99606863Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:24.997945753Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:24.999049805Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:24.99998547Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:25.001796143Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:25.002736504Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:25.004326532Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:25.005662841Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.006578233Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.008117749Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.009042893Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.010587286Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:25.011644158Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:25.013258906Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:25.014264092Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:25.015969347Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:25.017224037Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:25.020561834Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:25.022270469Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:25.02412671Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:25.026200108Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:25.02958372Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:25.031229444Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:25.034092499Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:25.035363514Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:25.037275888Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:25.038679026Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:25.040182655Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:25.041978812Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:25.043270501Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:25.045313404Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:25.046772639Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:25.047919953Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:25.050063302Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.051434245Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.054324713Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:25.055691985Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:25.05820525Z 41 PC: 786a7 | Parse filename
2018-12-17T22:27:25.059788307Z 41 PC: 786b5 | Parse filename
2018-12-17T22:27:25.062691922Z 75 PC: 786c0 | Execute program
2018-12-17T22:27:25.077760148Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:25.083114148Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:25.084591972Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:25.088688293Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:25.090465768Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.092526054Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.093609447Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:25.095442735Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:25.097519725Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:25.100491534Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:25.107907422Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:25.109521237Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:25.112472547Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:25.113782704Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:25.115999057Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:25.117957303Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:25.119945857Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:25.12137649Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.12399788Z 53 PC: 80e1a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:25.126611746Z 37 PC: 80e2f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:25.127980566Z 37 PC: 80e37 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.130565289Z 37 PC: 80e3f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.131693468Z 37 PC: 80e47 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.134362782Z 68 PC: 81be6 | I/O control for devices (Set for = '')
2018-12-17T22:27:25.136755299Z 42 PC: 80b77 | Get date 0x80b77: xor ah, ah
0x80b79: les di, ptr [bp + 6]
0x80b7c: stosw word ptr es:[di], ax
0x80b7d: mov al, dl
0x80b7f: les di, ptr [bp + 0xa]
0x80b82: stosw word ptr es:[di], ax
0x80b83: mov al, dh
0x80b85: les di, ptr [bp + 0xe]
0x80b88: stosw word ptr es:[di], ax
0x80b89: xchg ax, cx
0x80b8a: les di, ptr [bp + 0x12]
0x80b8d: stosw word ptr es:[di], ax
0x80b8e: pop bp
0x80b8f: retf 0x10
0x80b92: push bp
0x80b93: mov bp, sp
0x80b95: mov cx, word ptr [bp + 0xa]
0x80b98: mov dh, byte ptr [bp + 8]
0x80b9b: mov dl, byte ptr [bp + 6]
0x80b9e: mov ah, 0x2b
2018-12-17T22:27:25.140255664Z 25 PC: 8178f | Get default drive
2018-12-17T22:27:25.142522012Z 71 PC: 817a2 | Get current directory
2018-12-17T22:27:25.148355739Z 44 PC: 81d1d | Get time 0x81d1d: mov word ptr [0x3e], cx
0x81d21: mov word ptr [0x40], dx
0x81d25: retf
0x81d26: call 0x81d6d
0x81d29: jb 0x81d3a
0x81d2b: mov cx, word ptr es:[di + 4]
0x81d2f: cmp cx, 1
0x81d32: je 0x81d3a
0x81d34: xor bx, bx
0x81d36: push cs
0x81d37: call 0x9189a
0x81d3a: retf 4
0x81d3d: call 0x81d6d
0x81d40: jb 0x81d55
0x81d42: mov ax, cx
0x81d44: mov dx, bx
0x81d46: mov cx, word ptr es:[di + 4]
0x81d4a: cmp cx, 1
0x81d4d: je 0x81d55
0x81d4f: xor bx, bx
2018-12-17T22:27:25.151215542Z 48 PC: 81702 | Get DOS version
2018-12-17T22:27:25.153929859Z 61 PC: 81540 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:25.163054699Z 66 PC: 81d87 | Move file pointer
2018-12-17T22:27:25.164575073Z 66 PC: 81d95 | Move file pointer
2018-12-17T22:27:25.167212343Z 66 PC: 81da3 | Move file pointer
2018-12-17T22:27:25.169249024Z 63 PC: 81613 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:25.177729112Z 62 PC: 81590 | Close file
2018-12-17T22:27:25.181080345Z 14 PC: 817e8 | Set default drive (Drive = 'A')
2018-12-17T22:27:25.184102971Z 25 PC: 817ec | Get default drive
2018-12-17T22:27:25.185221534Z 59 PC: 81856 | Change current directory
2018-12-17T22:27:25.190581762Z 26 PC: 80c8f | Set disk transfer address
2018-12-17T22:27:25.191647567Z 78 PC: 80c9b | Find first file
2018-12-17T22:27:25.19917485Z 26 PC: 80cb3 | Set disk transfer address
2018-12-17T22:27:25.200236565Z 79 PC: 80cb8 | Find next file
2018-12-17T22:27:25.205206053Z 26 PC: 80cb3 | Set disk transfer address
2018-12-17T22:27:25.206673159Z 79 PC: 80cb8 | Find next file
2018-12-17T22:27:25.210712876Z 26 PC: 80cb3 | Set disk transfer address
2018-12-17T22:27:25.21209685Z 79 PC: 80cb8 | Find next file
2018-12-17T22:27:25.21643344Z 26 PC: 80cb3 | Set disk transfer address
2018-12-17T22:27:25.217821493Z 79 PC: 80cb8 | Find next file
2018-12-17T22:27:25.222127647Z 26 PC: 80cb3 | Set disk transfer address
2018-12-17T22:27:25.223488946Z 79 PC: 80cb8 | Find next file
2018-12-17T22:27:25.228124729Z 26 PC: 80cb3 | Set disk transfer address
2018-12-17T22:27:25.229490757Z 79 PC: 80cb8 | Find next file
2018-12-17T22:27:25.233675975Z 26 PC: 80cb3 | Set disk transfer address
2018-12-17T22:27:25.234721578Z 79 PC: 80cb8 | Find next file
2018-12-17T22:27:25.241823438Z 26 PC: 80cb3 | Set disk transfer address
2018-12-17T22:27:25.243103528Z 79 PC: 80cb8 | Find next file
2018-12-17T22:27:25.246985007Z 26 PC: 80cb3 | Set disk transfer address
2018-12-17T22:27:25.248180059Z 79 PC: 80cb8 | Find next file
2018-12-17T22:27:25.251614874Z 26 PC: 80cb3 | Set disk transfer address
2018-12-17T22:27:25.252877529Z 79 PC: 80cb8 | Find next file
2018-12-17T22:27:25.25601854Z 26 PC: 80cb3 | Set disk transfer address
2018-12-17T22:27:25.257246305Z 79 PC: 80cb8 | Find next file
2018-12-17T22:27:25.260035709Z 26 PC: 80cb3 | Set disk transfer address
2018-12-17T22:27:25.262593715Z 79 PC: 80cb8 | Find next file
2018-12-17T22:27:25.26522999Z 26 PC: 80cb3 | Set disk transfer address
2018-12-17T22:27:25.266717908Z 79 PC: 80cb8 | Find next file
2018-12-17T22:27:25.269799792Z 26 PC: 80cb3 | Set disk transfer address
2018-12-17T22:27:25.271082853Z 79 PC: 80cb8 | Find next file
2018-12-17T22:27:25.274693592Z 26 PC: 80cb3 | Set disk transfer address
2018-12-17T22:27:25.276668785Z 79 PC: 80cb8 | Find next file
2018-12-17T22:27:25.281891709Z 14 PC: 817e8 | Set default drive (Drive = 'A')
2018-12-17T22:27:25.283333144Z 25 PC: 817ec | Get default drive
2018-12-17T22:27:25.285600634Z 59 PC: 81856 | Change current directory
2018-12-17T22:27:25.29080026Z 48 PC: 81702 | Get DOS version
2018-12-17T22:27:25.292291501Z 48 PC: 81702 | Get DOS version
2018-12-17T22:27:25.295630889Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:25.29695104Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:25.29947078Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:25.300772819Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:25.302799507Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:25.303966261Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:25.305869671Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:25.306966393Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:25.309054233Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.310268305Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.316410908Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.317827217Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.319882145Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:25.321406214Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:25.323822509Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:25.325599734Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:25.326971255Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:25.329282138Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:25.33037808Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:25.33276031Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:25.333836613Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:25.336561975Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:25.337782191Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:25.339896567Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:25.341014574Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:25.34294933Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:25.344058546Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:25.345888869Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:25.347806315Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:25.349063523Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:25.35281918Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:25.354546297Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:25.356509362Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:25.357934778Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:25.359065105Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.361486016Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.363193654Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:25.365010662Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:25.366188909Z 41 PC: 80d47 | Parse filename
2018-12-17T22:27:25.368259598Z 41 PC: 80d55 | Parse filename
2018-12-17T22:27:25.36961724Z 75 PC: 80d60 | Execute program
2018-12-17T22:27:25.386399699Z 53 PC: 894ba | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:25.388293356Z 53 PC: 894ba | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:25.389892401Z 53 PC: 894ba | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:25.392632631Z 53 PC: 894ba | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:25.394889129Z 53 PC: 894ba | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.397015712Z 53 PC: 894ba | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.398402309Z 53 PC: 894ba | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:25.40111861Z 53 PC: 894ba | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:25.402310558Z 53 PC: 894ba | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:25.404526576Z 53 PC: 894ba | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:25.406028505Z 53 PC: 894ba | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:25.407385731Z 53 PC: 894ba | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:25.409698489Z 53 PC: 894ba | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:25.411026437Z 53 PC: 894ba | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:25.413459548Z 53 PC: 894ba | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:25.414759527Z 53 PC: 894ba | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:25.416017017Z 53 PC: 894ba | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:25.418679276Z 53 PC: 894ba | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.419920673Z 53 PC: 894ba | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:25.422382971Z 37 PC: 894cf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:25.423894846Z 37 PC: 894d7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.426072509Z 37 PC: 894df | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.427077768Z 37 PC: 894e7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.428471759Z 68 PC: 8a286 | I/O control for devices (Set for = '�u+���')
2018-12-17T22:27:25.431126573Z 42 PC: 89217 | Get date 0x89217: xor ah, ah
0x89219: les di, ptr [bp + 6]
0x8921c: stosw word ptr es:[di], ax
0x8921d: mov al, dl
0x8921f: les di, ptr [bp + 0xa]
0x89222: stosw word ptr es:[di], ax
0x89223: mov al, dh
0x89225: les di, ptr [bp + 0xe]
0x89228: stosw word ptr es:[di], ax
0x89229: xchg ax, cx
0x8922a: les di, ptr [bp + 0x12]
0x8922d: stosw word ptr es:[di], ax
0x8922e: pop bp
0x8922f: retf 0x10
0x89232: push bp
0x89233: mov bp, sp
0x89235: mov cx, word ptr [bp + 0xa]
0x89238: mov dh, byte ptr [bp + 8]
0x8923b: mov dl, byte ptr [bp + 6]
0x8923e: mov ah, 0x2b
2018-12-17T22:27:25.433836467Z 25 PC: 89e2f | Get default drive
2018-12-17T22:27:25.437809468Z 71 PC: 89e42 | Get current directory
2018-12-17T22:27:25.440893354Z 44 PC: 8a3bd | Get time 0x8a3bd: mov word ptr [0x3e], cx
0x8a3c1: mov word ptr [0x40], dx
0x8a3c5: retf
0x8a3c6: call 0x8a40d
0x8a3c9: jb 0x8a3da
0x8a3cb: mov cx, word ptr es:[di + 4]
0x8a3cf: cmp cx, 1
0x8a3d2: je 0x8a3da
0x8a3d4: xor bx, bx
0x8a3d6: push cs
0x8a3d7: call 0x99f3a
0x8a3da: retf 4
0x8a3dd: call 0x8a40d
0x8a3e0: jb 0x8a3f5
0x8a3e2: mov ax, cx
0x8a3e4: mov dx, bx
0x8a3e6: mov cx, word ptr es:[di + 4]
0x8a3ea: cmp cx, 1
0x8a3ed: je 0x8a3f5
0x8a3ef: xor bx, bx
2018-12-17T22:27:25.444006719Z 48 PC: 89da2 | Get DOS version
2018-12-17T22:27:25.44564663Z 61 PC: 89be0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:25.452994169Z 66 PC: 8a427 | Move file pointer
2018-12-17T22:27:25.454536579Z 66 PC: 8a435 | Move file pointer
2018-12-17T22:27:25.455774339Z 66 PC: 8a443 | Move file pointer
2018-12-17T22:27:25.458892058Z 63 PC: 89cb3 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:25.466722983Z 62 PC: 89c30 | Close file
2018-12-17T22:27:25.470748887Z 14 PC: 89e88 | Set default drive (Drive = 'A')
2018-12-17T22:27:25.471844352Z 25 PC: 89e8c | Get default drive
2018-12-17T22:27:25.473652982Z 59 PC: 89ef6 | Change current directory
2018-12-17T22:27:25.477724951Z 26 PC: 8932f | Set disk transfer address
2018-12-17T22:27:25.478751498Z 78 PC: 8933b | Find first file
2018-12-17T22:27:25.485393314Z 26 PC: 89353 | Set disk transfer address
2018-12-17T22:27:25.48627878Z 79 PC: 89358 | Find next file
2018-12-17T22:27:25.490886832Z 26 PC: 89353 | Set disk transfer address
2018-12-17T22:27:25.492326634Z 79 PC: 89358 | Find next file
2018-12-17T22:27:25.496687624Z 26 PC: 89353 | Set disk transfer address
2018-12-17T22:27:25.498027608Z 79 PC: 89358 | Find next file
2018-12-17T22:27:25.501633574Z 26 PC: 89353 | Set disk transfer address
2018-12-17T22:27:25.502849166Z 79 PC: 89358 | Find next file
2018-12-17T22:27:25.505499462Z 26 PC: 89353 | Set disk transfer address
2018-12-17T22:27:25.506595303Z 79 PC: 89358 | Find next file
2018-12-17T22:27:25.509228434Z 26 PC: 89353 | Set disk transfer address
2018-12-17T22:27:25.511453456Z 79 PC: 89358 | Find next file
2018-12-17T22:27:25.514392774Z 26 PC: 89353 | Set disk transfer address
2018-12-17T22:27:25.51659105Z 79 PC: 89358 | Find next file
2018-12-17T22:27:25.519329872Z 26 PC: 89353 | Set disk transfer address
2018-12-17T22:27:25.521759441Z 79 PC: 89358 | Find next file
2018-12-17T22:27:25.524537982Z 26 PC: 89353 | Set disk transfer address
2018-12-17T22:27:25.526374826Z 79 PC: 89358 | Find next file
2018-12-17T22:27:25.529379302Z 26 PC: 89353 | Set disk transfer address
2018-12-17T22:27:25.530693049Z 79 PC: 89358 | Find next file
2018-12-17T22:27:25.534304031Z 26 PC: 89353 | Set disk transfer address
2018-12-17T22:27:25.535369752Z 79 PC: 89358 | Find next file
2018-12-17T22:27:25.538662162Z 26 PC: 89353 | Set disk transfer address
2018-12-17T22:27:25.54014651Z 79 PC: 89358 | Find next file
2018-12-17T22:27:25.542862417Z 26 PC: 89353 | Set disk transfer address
2018-12-17T22:27:25.544651268Z 79 PC: 89358 | Find next file
2018-12-17T22:27:25.547517661Z 26 PC: 89353 | Set disk transfer address
2018-12-17T22:27:25.549852431Z 79 PC: 89358 | Find next file
2018-12-17T22:27:25.552543621Z 26 PC: 89353 | Set disk transfer address
2018-12-17T22:27:25.554907985Z 79 PC: 89358 | Find next file
2018-12-17T22:27:25.55772787Z 14 PC: 89e88 | Set default drive (Drive = 'A')
2018-12-17T22:27:25.559072306Z 25 PC: 89e8c | Get default drive
2018-12-17T22:27:25.560764571Z 59 PC: 89ef6 | Change current directory
2018-12-17T22:27:25.564896746Z 48 PC: 89da2 | Get DOS version
2018-12-17T22:27:25.566527732Z 48 PC: 89da2 | Get DOS version
2018-12-17T22:27:25.56859933Z 53 PC: 89430 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:25.569724355Z 37 PC: 89439 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:25.571620634Z 53 PC: 89430 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:25.57271007Z 37 PC: 89439 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:25.575154675Z 53 PC: 89430 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:25.57667653Z 37 PC: 89439 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:25.579842195Z 53 PC: 89430 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:25.581206043Z 37 PC: 89439 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:25.582269194Z 53 PC: 89430 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.584722971Z 37 PC: 89439 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.58598154Z 53 PC: 89430 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.588327496Z 37 PC: 89439 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.589629344Z 53 PC: 89430 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:25.593449378Z 37 PC: 89439 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:25.594529456Z 53 PC: 89430 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:25.601380368Z 37 PC: 89439 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:25.602720921Z 53 PC: 89430 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:25.605384818Z 37 PC: 89439 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:25.606667091Z 53 PC: 89430 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:25.607692222Z 37 PC: 89439 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:25.60923851Z 53 PC: 89430 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:25.610307144Z 37 PC: 89439 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:25.611600616Z 53 PC: 89430 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:25.612954472Z 37 PC: 89439 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:25.613993794Z 53 PC: 89430 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:25.623510046Z 37 PC: 89439 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:25.624576428Z 53 PC: 89430 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:25.626296746Z 37 PC: 89439 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:25.627389648Z 53 PC: 89430 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:25.628838054Z 37 PC: 89439 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:25.630743309Z 53 PC: 89430 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:25.632225601Z 37 PC: 89439 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:25.634290338Z 53 PC: 89430 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:25.635660706Z 37 PC: 89439 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:25.637524036Z 53 PC: 89430 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.638860235Z 37 PC: 89439 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.639993323Z 53 PC: 89430 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:25.642032385Z 37 PC: 89439 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:25.643234246Z 41 PC: 893e7 | Parse filename
2018-12-17T22:27:25.645465855Z 41 PC: 893f5 | Parse filename
2018-12-17T22:27:25.646809894Z 75 PC: 89400 | Execute program
2018-12-17T22:27:25.663954129Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:25.665567183Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:25.667133866Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:25.681930527Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:25.68401729Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.686290295Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.687423382Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:25.689739747Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:25.691075305Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:25.694005885Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:25.695124122Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:25.696607156Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:25.698150274Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:25.699423241Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:25.701913278Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:25.702988945Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:25.704512634Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:25.706009403Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.707185258Z 53 PC: 91b5a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:25.710889927Z 37 PC: 91b6f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:25.711938669Z 37 PC: 91b77 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.714398574Z 37 PC: 91b7f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.715513434Z 37 PC: 91b87 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.718029705Z 68 PC: 92926 | I/O control for devices
2018-12-17T22:27:25.720437984Z 42 PC: 918b7 | Get date 0x918b7: xor ah, ah
0x918b9: les di, ptr [bp + 6]
0x918bc: stosw word ptr es:[di], ax
0x918bd: mov al, dl
0x918bf: les di, ptr [bp + 0xa]
0x918c2: stosw word ptr es:[di], ax
0x918c3: mov al, dh
0x918c5: les di, ptr [bp + 0xe]
0x918c8: stosw word ptr es:[di], ax
0x918c9: xchg ax, cx
0x918ca: les di, ptr [bp + 0x12]
0x918cd: stosw word ptr es:[di], ax
0x918ce: pop bp
0x918cf: retf 0x10
0x918d2: push bp
0x918d3: mov bp, sp
0x918d5: mov cx, word ptr [bp + 0xa]
0x918d8: mov dh, byte ptr [bp + 8]
0x918db: mov dl, byte ptr [bp + 6]
0x918de: mov ah, 0x2b
2018-12-17T22:27:25.722756911Z 25 PC: 924cf | Get default drive
2018-12-17T22:27:25.724595568Z 71 PC: 924e2 | Get current directory
2018-12-17T22:27:25.727775961Z 44 PC: 92a5d | Get time 0x92a5d: mov word ptr [0x3e], cx
0x92a61: mov word ptr [0x40], dx
0x92a65: retf
0x92a66: call 0x92aad
0x92a69: jb 0x92a7a
0x92a6b: mov cx, word ptr es:[di + 4]
0x92a6f: cmp cx, 1
0x92a72: je 0x92a7a
0x92a74: xor bx, bx
0x92a76: push cs
0x92a77: call 0xa25da
0x92a7a: retf 4
0x92a7d: call 0x92aad
0x92a80: jb 0x92a95
0x92a82: mov ax, cx
0x92a84: mov dx, bx
0x92a86: mov cx, word ptr es:[di + 4]
0x92a8a: cmp cx, 1
0x92a8d: je 0x92a95
0x92a8f: xor bx, bx
2018-12-17T22:27:25.730740921Z 48 PC: 92442 | Get DOS version
2018-12-17T22:27:25.732185251Z 61 PC: 92280 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:25.738613072Z 66 PC: 92ac7 | Move file pointer
2018-12-17T22:27:25.740380717Z 66 PC: 92ad5 | Move file pointer
2018-12-17T22:27:25.74178059Z 66 PC: 92ae3 | Move file pointer
2018-12-17T22:27:25.744184145Z 63 PC: 92353 | Read file or device (Read 8210 bytes on handle 5)
2018-12-17T22:27:25.75146635Z 62 PC: 922d0 | Close file
2018-12-17T22:27:25.754380436Z 14 PC: 92528 | Set default drive (Drive = 'A')
2018-12-17T22:27:25.756415045Z 25 PC: 9252c | Get default drive
2018-12-17T22:27:25.757678046Z 59 PC: 92596 | Change current directory
2018-12-17T22:27:25.762959698Z 26 PC: 919cf | Set disk transfer address
2018-12-17T22:27:25.764065428Z 78 PC: 919db | Find first file
2018-12-17T22:27:25.769998061Z 26 PC: 919f3 | Set disk transfer address
2018-12-17T22:27:25.771090123Z 79 PC: 919f8 | Find next file
2018-12-17T22:27:25.774341873Z 26 PC: 919f3 | Set disk transfer address
2018-12-17T22:27:25.776776246Z 79 PC: 919f8 | Find next file
2018-12-17T22:27:25.779110655Z 26 PC: 919f3 | Set disk transfer address
2018-12-17T22:27:25.780417701Z 79 PC: 919f8 | Find next file
2018-12-17T22:27:25.784082393Z 26 PC: 919f3 | Set disk transfer address
2018-12-17T22:27:25.785335009Z 79 PC: 919f8 | Find next file
2018-12-17T22:27:25.788965561Z 26 PC: 919f3 | Set disk transfer address
2018-12-17T22:27:25.790125801Z 79 PC: 919f8 | Find next file
2018-12-17T22:27:25.793454348Z 26 PC: 919f3 | Set disk transfer address
2018-12-17T22:27:25.794416743Z 79 PC: 919f8 | Find next file
2018-12-17T22:27:25.801781543Z 26 PC: 919f3 | Set disk transfer address
2018-12-17T22:27:25.802947975Z 79 PC: 919f8 | Find next file
2018-12-17T22:27:25.806658679Z 26 PC: 919f3 | Set disk transfer address
2018-12-17T22:27:25.807708965Z 79 PC: 919f8 | Find next file
2018-12-17T22:27:25.810259284Z 26 PC: 919f3 | Set disk transfer address
2018-12-17T22:27:25.812549198Z 79 PC: 919f8 | Find next file
2018-12-17T22:27:25.81506278Z 26 PC: 919f3 | Set disk transfer address
2018-12-17T22:27:25.817129444Z 79 PC: 919f8 | Find next file
2018-12-17T22:27:25.819610388Z 26 PC: 919f3 | Set disk transfer address
2018-12-17T22:27:25.820630805Z 79 PC: 919f8 | Find next file
2018-12-17T22:27:25.823942259Z 26 PC: 919f3 | Set disk transfer address
2018-12-17T22:27:25.825288558Z 79 PC: 919f8 | Find next file
2018-12-17T22:27:25.829622073Z 26 PC: 919f3 | Set disk transfer address
2018-12-17T22:27:25.830998219Z 79 PC: 919f8 | Find next file
2018-12-17T22:27:25.835075505Z 26 PC: 919f3 | Set disk transfer address
2018-12-17T22:27:25.836420422Z 79 PC: 919f8 | Find next file
2018-12-17T22:27:25.839651973Z 26 PC: 919f3 | Set disk transfer address
2018-12-17T22:27:25.841306118Z 79 PC: 919f8 | Find next file
2018-12-17T22:27:25.844064719Z 14 PC: 92528 | Set default drive (Drive = 'A')
2018-12-17T22:27:25.846258081Z 25 PC: 9252c | Get default drive
2018-12-17T22:27:25.84747873Z 59 PC: 92596 | Change current directory
2018-12-17T22:27:25.85248559Z 48 PC: 92442 | Get DOS version
2018-12-17T22:27:25.853898212Z 48 PC: 92442 | Get DOS version
2018-12-17T22:27:25.856071853Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:25.858484746Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:25.8598582Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:25.862223682Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:25.864359824Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:25.866450964Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:25.868169528Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:25.869772945Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:25.871746523Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.874846733Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.877022416Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.8783324Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.87931939Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:25.880784236Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:25.882984013Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:25.884068438Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:25.885586681Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:25.88720754Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:25.888801171Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:25.891241876Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:25.89227817Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:25.897062899Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:25.898424947Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:25.899957243Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:25.902357238Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:25.903756545Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:25.90642491Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:25.907818484Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:25.910522737Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:25.911922168Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:25.913247038Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:25.915498298Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:25.916413168Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:25.918040072Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:25.91907904Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.920095625Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.921441836Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:25.922625487Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:25.923616025Z 41 PC: 91a87 | Parse filename
2018-12-17T22:27:25.925382399Z 41 PC: 91a95 | Parse filename
2018-12-17T22:27:25.926605246Z 75 PC: 91aa0 | Execute program
2018-12-17T22:27:25.942812196Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:25.944419826Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:25.947370447Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:25.948725137Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:25.95011333Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.952001666Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.953401689Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:25.956142244Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:25.957573713Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:25.960196397Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:25.961438643Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:25.962603614Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:25.964210184Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:25.96525678Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:25.967190716Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:25.968183516Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:25.969170186Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:25.970701535Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.971623059Z 53 PC: 9a1fa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:25.973086164Z 37 PC: 9a20f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:25.974152779Z 37 PC: 9a217 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:25.975005761Z 37 PC: 9a21f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:25.976994596Z 37 PC: 9a227 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:25.978225904Z 68 PC: 9afc6 | I/O control for devices
2018-12-17T22:27:25.980073178Z 42 PC: 99f57 | Get date 0x99f57: xor ah, ah
0x99f59: les di, ptr [bp + 6]
0x99f5c: stosw word ptr es:[di], ax
0x99f5d: mov al, dl
0x99f5f: les di, ptr [bp + 0xa]
0x99f62: stosw word ptr es:[di], ax
0x99f63: mov al, dh
0x99f65: les di, ptr [bp + 0xe]
0x99f68: stosw word ptr es:[di], ax
0x99f69: xchg ax, cx
0x99f6a: les di, ptr [bp + 0x12]
0x99f6d: stosw word ptr es:[di], ax
0x99f6e: pop bp
0x99f6f: retf 0x10
0x99f72: push bp
0x99f73: mov bp, sp
0x99f75: mov cx, word ptr [bp + 0xa]
0x99f78: mov dh, byte ptr [bp + 8]
0x99f7b: mov dl, byte ptr [bp + 6]
0x99f7e: mov ah, 0x2b
2018-12-17T22:27:25.982846143Z 25 PC: 9ab6f | Get default drive
2018-12-17T22:27:25.98375669Z 71 PC: 9ab82 | Get current directory
2018-12-17T22:27:25.986548624Z 44 PC: 9b0fd | Get time 0x9b0fd: mov word ptr [0x3e], cx
0x9b101: mov word ptr [0x40], dx
0x9b105: retf
0x9b106: call 0x9b14d
0x9b109: jb 0x9b11a
0x9b10b: mov cx, word ptr es:[di + 4]
0x9b10f: cmp cx, 1
0x9b112: je 0x9b11a
0x9b114: xor bx, bx
0x9b116: push cs
0x9b117: call 0xaac7a
0x9b11a: retf 4
0x9b11d: call 0x9b14d
0x9b120: jb 0x9b135
0x9b122: mov ax, cx
0x9b124: mov dx, bx
0x9b126: mov cx, word ptr es:[di + 4]
0x9b12a: cmp cx, 1
0x9b12d: je 0x9b135
0x9b12f: xor bx, bx
2018-12-17T22:27:25.988132868Z 48 PC: 9aae2 | Get DOS version
2018-12-17T22:27:25.990137411Z 61 PC: 9a920 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:27:25.994603383Z 66 PC: 9b167 | Move file pointer
2018-12-17T22:27:25.995709484Z 66 PC: 9b175 | Move file pointer
2018-12-17T22:27:25.997524011Z 66 PC: 9b183 | Move file pointer
2018-12-17T22:27:25.99882844Z 64 PC: 9a87b | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:26.000980199Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.001965396Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.003697169Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.004672005Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.005599912Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.007423082Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.00839796Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:26.010055277Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.010944736Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:26.011856228Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:26.013553543Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:26.01443195Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.015460122Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:26.016800666Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:26.017696086Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:26.019366195Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:26.020387916Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:26.021718989Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.022779275Z 37 PC: 9a351 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.02366753Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.025948765Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.027383515Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.028796759Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.030999613Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.032419619Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.034393267Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.035977452Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.037396295Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.039586637Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.041014765Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.042560732Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.044481189Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.045897887Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.048041029Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.050271045Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.053366594Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.055351527Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.057356907Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.059841026Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.06168337Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.064349604Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.066528232Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.069313195Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.072074211Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.074008427Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.076767333Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.078730781Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.081453237Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.083346101Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.085255242Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.087838532Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.089761455Z 6 PC: 9a3d8 | Direct console I/O
2018-12-17T22:27:26.094620952Z 76 PC: 9a390 | Terminate with return code (Return code = '203')
2018-12-17T22:27:26.097774819Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.099295618Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.101836695Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.103219022Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.104860114Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.106471565Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.107633311Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.109411965Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.110695103Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.111780763Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.11419792Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.115292748Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.117470952Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.119302888Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.120378639Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.122677314Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.123758259Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.125987493Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.127675394Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.129042186Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.131707949Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.133195973Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.13572139Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.137545752Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.139663912Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.144739329Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.145959811Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.147565191Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.150195749Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.151599637Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.154166376Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.156182725Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.157561494Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.160640378Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.162403323Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.163750288Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.16610539Z 53 PC: 91ad0 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.16959908Z 37 PC: 91ad9 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.173187599Z 64 PC: 921db | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:26.175239115Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.17663665Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.182031443Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.182996788Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.185692543Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.186726421Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.188906231Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:26.190023575Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.191315476Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:26.192786316Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:26.193834557Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:26.194879975Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.201610457Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:26.202716653Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:26.203733866Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:26.207546645Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:26.208574774Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:26.210479424Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.211949078Z 37 PC: 91cb1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.213320145Z 76 PC: 91cf0 | Terminate with return code (Return code = '0')
2018-12-17T22:27:26.217485105Z 53 PC: 89430 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.218852979Z 37 PC: 89439 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.220833682Z 53 PC: 89430 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.221834431Z 37 PC: 89439 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.223033124Z 53 PC: 89430 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.224823183Z 37 PC: 89439 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.226221344Z 53 PC: 89430 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.229045369Z 37 PC: 89439 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.230511109Z 53 PC: 89430 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.232875207Z 37 PC: 89439 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.234161519Z 53 PC: 89430 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.235253137Z 37 PC: 89439 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.23801941Z 53 PC: 89430 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.239145955Z 37 PC: 89439 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.241861561Z 53 PC: 89430 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.243157299Z 37 PC: 89439 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.245773023Z 53 PC: 89430 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.247048621Z 37 PC: 89439 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.248470863Z 53 PC: 89430 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.254207804Z 37 PC: 89439 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.255390659Z 53 PC: 89430 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.257395883Z 37 PC: 89439 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.258646726Z 53 PC: 89430 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.262042356Z 37 PC: 89439 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.263485133Z 53 PC: 89430 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.26489955Z 37 PC: 89439 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.26810692Z 53 PC: 89430 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.269490859Z 37 PC: 89439 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.27219075Z 53 PC: 89430 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.273778568Z 37 PC: 89439 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.275566026Z 53 PC: 89430 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.278088392Z 37 PC: 89439 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.279507064Z 53 PC: 89430 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.282238859Z 37 PC: 89439 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.283728372Z 53 PC: 89430 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.285521424Z 37 PC: 89439 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.288873602Z 53 PC: 89430 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.290374944Z 37 PC: 89439 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.293548338Z 64 PC: 89b3b | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:26.295502428Z 37 PC: 89611 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.299505754Z 37 PC: 89611 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.301171081Z 37 PC: 89611 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.303443613Z 37 PC: 89611 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.306198639Z 37 PC: 89611 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.307483698Z 37 PC: 89611 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.309211976Z 37 PC: 89611 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:26.310667456Z 37 PC: 89611 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.312829461Z 37 PC: 89611 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:26.314070014Z 37 PC: 89611 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:26.314944138Z 37 PC: 89611 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:26.316949552Z 37 PC: 89611 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.317824805Z 37 PC: 89611 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:26.319599005Z 37 PC: 89611 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:26.320592691Z 37 PC: 89611 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:26.321584943Z 37 PC: 89611 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:26.323292525Z 37 PC: 89611 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:26.32425005Z 37 PC: 89611 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.326322723Z 37 PC: 89611 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.32753272Z 76 PC: 89650 | Terminate with return code (Return code = '0')
2018-12-17T22:27:26.329576514Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.331333584Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.332295583Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.333423016Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.335640041Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.337072947Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.339945936Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.341414246Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.34290465Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.345454034Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.346915168Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.349263222Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.350560542Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.351981457Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.354959048Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.356380991Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.359696234Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.360966129Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.363071193Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.364165011Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.365012732Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.366778135Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.367794639Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.368873066Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.370651285Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.371573929Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.373338435Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.37426053Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.375998625Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.37692265Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.377824718Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.379451363Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.380357376Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.381274483Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.383041719Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.383941194Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.385600243Z 53 PC: 80d90 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.386574699Z 37 PC: 80d99 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.387626669Z 64 PC: 8149b | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:26.389729555Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.390634693Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.39241105Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.393327205Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.394205425Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.395873091Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.3967802Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:26.398483415Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.399366578Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:26.400262925Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:26.402187367Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:26.403170819Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.404752465Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:26.405659858Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:26.406538928Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:26.408227015Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:26.409222963Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:26.410390535Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.411631235Z 37 PC: 80f71 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.412527537Z 76 PC: 80fb0 | Terminate with return code (Return code = '0')
2018-12-17T22:27:26.415349008Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.41622492Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.417121177Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.418908197Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.419807077Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.42150927Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.422892365Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.423758014Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.425355283Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.426268938Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.427533067Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.428756137Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.429753365Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.431504725Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.432436748Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.433353198Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.434930376Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.435837956Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.436951902Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.438594839Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.439589357Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.44133575Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.442239938Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.443353805Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.444773009Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.445707309Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.447102246Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.448269513Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.449139058Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.450809737Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.451767137Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.452710067Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.454252596Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.455589105Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.456814381Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.458890202Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.459906059Z 53 PC: 786f0 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.461401658Z 37 PC: 786f9 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.462929832Z 64 PC: 78dfb | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:26.464530032Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.466440816Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.467591389Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.468551227Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.470197107Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.471166052Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.472975086Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:26.473987146Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.474940473Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:26.476742516Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:26.477714591Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:26.478683128Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.479969515Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:26.480946578Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:26.482674352Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:26.484101014Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:26.485220926Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:26.486547375Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.48763968Z 37 PC: 788d1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.489406515Z 76 PC: 78910 | Terminate with return code (Return code = '0')
2018-12-17T22:27:26.492188269Z 53 PC: 70050 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.49320863Z 37 PC: 70059 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.494926377Z 53 PC: 70050 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.495922606Z 37 PC: 70059 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.49694189Z 53 PC: 70050 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.498281432Z 37 PC: 70059 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.499230185Z 53 PC: 70050 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.500898788Z 37 PC: 70059 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.502015794Z 53 PC: 70050 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.502933509Z 37 PC: 70059 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.505021923Z 53 PC: 70050 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.506125582Z 37 PC: 70059 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.507074606Z 53 PC: 70050 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.508754452Z 37 PC: 70059 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.509725166Z 53 PC: 70050 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.51145974Z 37 PC: 70059 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.512453302Z 53 PC: 70050 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.513378018Z 37 PC: 70059 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.515084178Z 53 PC: 70050 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.516150574Z 37 PC: 70059 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.517193533Z 53 PC: 70050 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.518751918Z 37 PC: 70059 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.519757597Z 53 PC: 70050 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.5219212Z 37 PC: 70059 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.523076562Z 53 PC: 70050 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.524180706Z 37 PC: 70059 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.527127749Z 53 PC: 70050 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.528547807Z 37 PC: 70059 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.530253702Z 53 PC: 70050 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.531690546Z 37 PC: 70059 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.532969197Z 53 PC: 70050 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.534707971Z 37 PC: 70059 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.535753676Z 53 PC: 70050 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.536790251Z 37 PC: 70059 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.537991517Z 53 PC: 70050 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.53937053Z 37 PC: 70059 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.5404056Z 53 PC: 70050 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.542260857Z 37 PC: 70059 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.543523925Z 64 PC: 7075b | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:26.545058865Z 37 PC: 70231 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.546862991Z 37 PC: 70231 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.547842179Z 37 PC: 70231 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.549054305Z 37 PC: 70231 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.550489613Z 37 PC: 70231 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.551635058Z 37 PC: 70231 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.55385871Z 37 PC: 70231 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:26.555117734Z 37 PC: 70231 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.556498649Z 37 PC: 70231 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:26.558021558Z 37 PC: 70231 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:26.559540109Z 37 PC: 70231 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:26.561372641Z 37 PC: 70231 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.562998471Z 37 PC: 70231 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:26.564337175Z 37 PC: 70231 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:26.56669486Z 37 PC: 70231 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:26.567994197Z 37 PC: 70231 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:26.569228056Z 37 PC: 70231 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:26.570835081Z 37 PC: 70231 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.574117956Z 37 PC: 70231 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.575119426Z 76 PC: 70270 | Terminate with return code (Return code = '0')
2018-12-17T22:27:26.578096123Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.57952827Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.580481107Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.582001696Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.583117904Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.584126803Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.585277661Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.587021708Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.588009852Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.590021094Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.591052678Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.592063078Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.593886809Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.594968043Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.595955738Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.59784204Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.598867484Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.599893403Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.601266704Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.602255016Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.60367022Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.604788485Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.606080051Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.609218875Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.611000922Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.612052842Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.613690289Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.615191698Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.616566502Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.61807844Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.620802778Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.622309778Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.624147855Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.62567484Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.627180666Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.629010464Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.631055999Z 53 PC: 679b0 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.632585211Z 37 PC: 679b9 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.642199438Z 64 PC: 680bb | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:26.644321188Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.64582323Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.653266975Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.655330908Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.657165537Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.65998396Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.661509182Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:26.664639861Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.666074207Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:26.667975827Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:26.670875146Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:26.672097249Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.673820066Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:26.675565862Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:26.676922138Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:26.678766245Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:26.680860286Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:26.682212106Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.683935709Z 37 PC: 67b91 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.685194498Z 76 PC: 67bd0 | Terminate with return code (Return code = '0')
2018-12-17T22:27:26.688239587Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.68945646Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.690617979Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.69276016Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.694138643Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.696850813Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.69816074Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.699459103Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.701936469Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.703479393Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.704759879Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.706576711Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.707676029Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.708789729Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.710992706Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.712176893Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.71438781Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.71546694Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.716863499Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.719996011Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.721341116Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.723023223Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.725013643Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.726297618Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.728790193Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.730218995Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.731559151Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.734995974Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.736401631Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.737626062Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.739792851Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.741142392Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.742449954Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.745240509Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.746655655Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.747986431Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.750757737Z 53 PC: 5f310 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.752088166Z 37 PC: 5f319 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.75384108Z 64 PC: 5fa1b | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:26.75689602Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.758021829Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.759582359Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.76072767Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.762084381Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.763396195Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.765974111Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:26.767458731Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.770613816Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:26.772065273Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:26.774225049Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:26.776510938Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.777923843Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:26.779604212Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:26.782226286Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:26.783622463Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:26.786439445Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:26.787614203Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.788740143Z 37 PC: 5f4f1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.791180241Z 76 PC: 5f530 | Terminate with return code (Return code = '0')
2018-12-17T22:27:26.793979094Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.79534511Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.797629994Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.798658007Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.799884545Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.801798167Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.803026863Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.804730097Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.80645564Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.808084926Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.809687039Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.811496939Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.81257369Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.814069532Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.815568417Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.816650639Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.818331594Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.819728678Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.821211962Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.822930733Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.824369173Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.825613673Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.826960392Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.828058808Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.829100118Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.830429774Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.832311232Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.833346151Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.835034102Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.83610615Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.83708668Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.838939725Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.839922359Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.840907962Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.843689959Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.84504596Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.846407678Z 53 PC: 56c70 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.849261234Z 37 PC: 56c79 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.850886608Z 64 PC: 5737b | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:26.854080576Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.855666165Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.856996764Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.858578432Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.860251114Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.86207179Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.864520006Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:26.86598309Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.867210395Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:26.869065938Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:26.870375596Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:26.871666638Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.873066435Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:26.874595453Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:26.875951316Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:26.877511722Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:26.879695592Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:26.880988766Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.883292813Z 37 PC: 56e51 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.885584903Z 76 PC: 56e90 | Terminate with return code (Return code = '0')
2018-12-17T22:27:26.888983861Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.890995117Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.893718198Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.896411477Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.898043343Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.901401122Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.914427697Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.915715335Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:26.917558067Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.918825395Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:26.92154369Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.922841789Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:26.924064881Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.926738869Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:26.927952075Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.929230477Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:26.930512258Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.93326688Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:26.934499971Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.937025785Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:26.93849246Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.93971387Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:26.941167746Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.943532816Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:26.94526199Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.94812565Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:26.949347236Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.950845438Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:26.953212492Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.95468116Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:26.956083964Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.958360352Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:26.959556523Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.965780844Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:26.967401902Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.985829051Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:26.98866522Z 53 PC: 4e5d0 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.990249551Z 37 PC: 4e5d9 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:26.991949669Z 64 PC: 4ecdb | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:26.993938384Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:26.996472929Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:26.997749505Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:26.998992022Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.001649409Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.002852711Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.004100901Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:27.007270729Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.008783513Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:27.011435268Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:27.012933131Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:27.014289669Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.016263159Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:27.017316247Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:27.018287475Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:27.020724761Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:27.022016161Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:27.023384073Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.02601101Z 37 PC: 4e7b1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.027415168Z 76 PC: 4e7f0 | Terminate with return code (Return code = '0')
2018-12-17T22:27:27.030571376Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.033142831Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.034484957Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.035899784Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.038748616Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.040156941Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.041529132Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.049661704Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.051040808Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.053829237Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.055842345Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.057235108Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.059043187Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:27.06046297Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:27.061786297Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.063173027Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.065344297Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:27.066489881Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:27.06769661Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:27.069676418Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:27.070923193Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:27.072175806Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:27.074940707Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.076145492Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.077365579Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:27.080175881Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:27.081590426Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:27.083001391Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:27.085288574Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:27.087048625Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:27.08837436Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:27.089979144Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:27.09241942Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:27.093778026Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:27.096084412Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.097330938Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.098613504Z 53 PC: 45f30 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.101145727Z 37 PC: 45f39 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.102773504Z 64 PC: 4663b | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:27.104666149Z 37 PC: 46111 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.105999987Z 37 PC: 46111 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.108135807Z 37 PC: 46111 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.109444223Z 37 PC: 46111 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.111224807Z 37 PC: 46111 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.122089412Z 37 PC: 46111 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.123456464Z 37 PC: 46111 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:27.125064572Z 37 PC: 46111 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.127001953Z 37 PC: 46111 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:27.12845671Z 37 PC: 46111 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:27.130319256Z 37 PC: 46111 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:27.13180149Z 37 PC: 46111 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.133213202Z 37 PC: 46111 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:27.141667637Z 37 PC: 46111 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:27.143545133Z 37 PC: 46111 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:27.14498866Z 37 PC: 46111 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:27.14667255Z 37 PC: 46111 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:27.148557435Z 37 PC: 46111 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.149757578Z 37 PC: 46111 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.151981111Z 76 PC: 46150 | Terminate with return code (Return code = '0')
2018-12-17T22:27:27.155119509Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.156127578Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.158421064Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.164754359Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.166175202Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.168736662Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.170565221Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.171991348Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.173394054Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.176379323Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.177775344Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.180485947Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.182283563Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:27.183694184Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:27.185095934Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.187777302Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.189100647Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:27.191563708Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:27.199694398Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:27.201736658Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:27.204647151Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:27.205892442Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:27.206962866Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.209396567Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.210947606Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:27.212064461Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:27.21323897Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:27.215537164Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:27.216668834Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:27.219378973Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:27.220956175Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:27.223398348Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:27.226372096Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:27.227957052Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:27.229302249Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.231635895Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.233030921Z 53 PC: 3d890 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.234456647Z 37 PC: 3d899 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.237524207Z 64 PC: 3df9b | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:27.239448014Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.240800177Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.243192631Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.244298713Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.246376058Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.247524223Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.248626209Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:27.251523715Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.252886046Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:27.25399786Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:27.256404991Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:27.257780985Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.259139184Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:27.26167828Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:27.262784874Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:27.264028469Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:27.267066964Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:27.268484416Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.27102659Z 37 PC: 3da71 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.272792204Z 76 PC: 3dab0 | Terminate with return code (Return code = '0')
2018-12-17T22:27:27.275985082Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.277408437Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.279719191Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.28120728Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.283865091Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.285781745Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.287216878Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.288890533Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.291718294Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.293128272Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.29472883Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.297513911Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.298900056Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:27.300528627Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:27.303285553Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.304707452Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.30632104Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:27.309066035Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:27.310159369Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:27.311488823Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:27.313578871Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:27.314668906Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:27.317196045Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.319261893Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.320307336Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:27.321588131Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:27.32360857Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:27.324698398Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:27.325943172Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:27.328372713Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:27.329488059Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:27.332341076Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:27.333606185Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:27.334727761Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:27.337747776Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.338951817Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.340019762Z 53 PC: 351f0 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.342423318Z 37 PC: 351f9 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.344039665Z 64 PC: 358fb | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:27.346451162Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.347732194Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.350550348Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.351833878Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.354962219Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.356022464Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.357174593Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:27.360290836Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.361597049Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:27.362867863Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:27.365689951Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:27.366966172Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.368265085Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:27.371305584Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:27.372365721Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:27.374957013Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:27.376350427Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:27.377626376Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.380723904Z 37 PC: 353d1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.382384155Z 76 PC: 35410 | Terminate with return code (Return code = '0')
2018-12-17T22:27:27.386633927Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.388185983Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.390262878Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.391621456Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.392749286Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.393935102Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.396837681Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.398812485Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.400116971Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.402481226Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.403596316Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.404930814Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.406911479Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:27.40803721Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:27.409173541Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.412084548Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.413183025Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:27.414282536Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:27.416919243Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:27.418523934Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:27.420005763Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:27.423228906Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:27.424787263Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.425999231Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.42762555Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:27.42902241Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:27.430114208Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:27.431228625Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:27.433810353Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:27.434903547Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:27.436148009Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:27.438489076Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:27.439995423Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:27.441734252Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:27.443376646Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.445512362Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.446893802Z 53 PC: 2cb50 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.448835772Z 37 PC: 2cb59 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.450426486Z 64 PC: 2d25b | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:27.452674491Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.454452571Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.455817251Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.457203703Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.459898042Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.461236987Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.462539343Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:27.465189234Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.466448977Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:27.467809027Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:27.471315466Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:27.472587458Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.473870685Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:27.476710396Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:27.477975477Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:27.479229558Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:27.482343526Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:27.483637106Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.486501723Z 37 PC: 2cd31 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.488835752Z 76 PC: 2cd70 | Terminate with return code (Return code = '0')
2018-12-17T22:27:27.491884596Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.493406772Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.496051703Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.497340788Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.500120024Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.501472756Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.502727852Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.505936545Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.507356789Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.508787504Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.512003003Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.513349671Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.514648012Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:27.517627631Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:27.519004892Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.520382449Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.52364247Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:27.52496343Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:27.526254515Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:27.529120069Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:27.530904989Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:27.53232077Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:27.535326694Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.536643229Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.537934785Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:27.541089742Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:27.542823765Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:27.544295404Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:27.547306289Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:27.548647255Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:27.550105437Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:27.553083223Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:27.55440391Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:27.556805912Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:27.558665388Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.560318702Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.563690046Z 53 PC: 244b0 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.565142819Z 37 PC: 244b9 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.566559813Z 64 PC: 24bbb | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:27.570333156Z 37 PC: 24691 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.571619544Z 37 PC: 24691 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.572754844Z 37 PC: 24691 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.573999776Z 37 PC: 24691 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.576740761Z 37 PC: 24691 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.578385183Z 37 PC: 24691 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.580210539Z 37 PC: 24691 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:27.582194254Z 37 PC: 24691 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.583394079Z 37 PC: 24691 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:27.586193191Z 37 PC: 24691 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:27.587531694Z 37 PC: 24691 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:27.588811562Z 37 PC: 24691 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.590745283Z 37 PC: 24691 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:27.592529563Z 37 PC: 24691 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:27.593727727Z 37 PC: 24691 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:27.594895742Z 37 PC: 24691 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:27.597113671Z 37 PC: 24691 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:27.59842146Z 37 PC: 24691 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.599579456Z 37 PC: 24691 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.600722101Z 76 PC: 246d0 | Terminate with return code (Return code = '0')
2018-12-17T22:27:27.604770486Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.606281681Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.609365596Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.610533482Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.611631556Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.61299898Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.61495866Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.616254533Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.617526212Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.620557854Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.622027411Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.623489584Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.633836327Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:27.635620312Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:27.63915892Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.640615835Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.642023636Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:27.644750714Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:27.646247489Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:27.647826907Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:27.651479407Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:27.653063654Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:27.654593334Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.65769938Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.659225391Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:27.660916666Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:27.663953939Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:27.665408509Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:27.666602315Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:27.668908756Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:27.670241149Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:27.680442659Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:27.682338345Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:27.684578555Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:27.686085403Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.687641354Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.690775751Z 53 PC: 1be10 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.692310255Z 37 PC: 1be19 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.694025441Z 64 PC: 1c51b | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:27.697727656Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.699165794Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.700584605Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.703652506Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.704909915Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.706129361Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.709078476Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:27.710199652Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.711280756Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:27.713536685Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:27.714644234Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:27.723192159Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.727822282Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:27.729283836Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:27.730559797Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:27.733302738Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:27.734829894Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:27.736286479Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.739748661Z 37 PC: 1bff1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.741137827Z 76 PC: 1c030 | Terminate with return code (Return code = '0')
2018-12-17T22:27:27.744275838Z 53 PC: 13770 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.74758926Z 37 PC: 13779 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.74896199Z 53 PC: 13770 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.750157731Z 37 PC: 13779 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.765288489Z 53 PC: 13770 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.766945024Z 37 PC: 13779 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.768492895Z 53 PC: 13770 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.772186357Z 37 PC: 13779 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.773745937Z 53 PC: 13770 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.775295206Z 37 PC: 13779 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.778549291Z 53 PC: 13770 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.780229874Z 37 PC: 13779 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.78183045Z 53 PC: 13770 | Get interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:27.785552419Z 37 PC: 13779 | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T22:27:27.787047366Z 53 PC: 13770 | Get interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.788530872Z 37 PC: 13779 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.793230669Z 53 PC: 13770 | Get interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:27.805490394Z 37 PC: 13779 | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T22:27:27.806983904Z 53 PC: 13770 | Get interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:27.810142963Z 37 PC: 13779 | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T22:27:27.811636677Z 53 PC: 13770 | Get interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:27.81314746Z 37 PC: 13779 | Set interrupt vector (Interrupt = '248' AKA 'UNKNOWN!')
2018-12-17T22:27:27.816305525Z 53 PC: 13770 | Get interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.817825088Z 37 PC: 13779 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.819266198Z 53 PC: 13770 | Get interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:27.820942458Z 37 PC: 13779 | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T22:27:27.823648416Z 53 PC: 13770 | Get interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:27.825097543Z 37 PC: 13779 | Set interrupt vector (Interrupt = '251' AKA 'UNKNOWN!')
2018-12-17T22:27:27.826736497Z 53 PC: 13770 | Get interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:27.829641905Z 37 PC: 13779 | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T22:27:27.831065155Z 53 PC: 13770 | Get interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:27.832734798Z 37 PC: 13779 | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T22:27:27.834600166Z 53 PC: 13770 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:27.83597183Z 37 PC: 13779 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T22:27:27.837300234Z 53 PC: 13770 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.840694087Z 37 PC: 13779 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.842178737Z 53 PC: 13770 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.84370557Z 37 PC: 13779 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.849538237Z 64 PC: 13e7b | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:27:27.851512294Z 37 PC: 13951 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:27:27.852904993Z 37 PC: 13951 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:27:27.859338077Z 37 PC: 13951 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:27:27.861361934Z 37 PC: 13951 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:27.862890288Z 37 PC: 13951 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:27:27.866400814Z 37 PC: 13951 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:27.867833342Z 37 PC: 13951 | Set interrupt vector (Interrupt = '102' AKA 'Get or set code page')
2018-12-17T22:27:27.869241701Z 37 PC: 13951 | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T22:27:27.872431035Z 37 PC: 13951 | Set interrupt vector (Interrupt = '70' AKA 'Redirect handle')
2018-12-17T22:27:27.873564576Z 37 PC: 13951 | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T22:27:27.874879389Z 37 PC: 13951 | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T22:27:27.877786426Z 37 PC: 13951 | Set interrupt vector (Interrupt = '73' AKA 'Release memory')
2018-12-17T22:27:27.881662809Z 37 PC: 13951 | Set interrupt vector (Interrupt = '250' AKA 'UNKNOWN!')
2018-12-17T22:27:27.883174272Z 37 PC: 13951 | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T22:27:27.886586381Z 37 PC: 13951 | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T22:27:27.888086159Z 37 PC: 13951 | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T22:27:27.88963714Z 37 PC: 13951 | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T22:27:27.892849486Z 37 PC: 13951 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:27:27.894332769Z 37 PC: 13951 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:27:27.895844827Z 76 PC: 13990 | Terminate with return code (Return code = '0')