Sample viewer

vx.netlux.org/Virus.DOS.HLLC.Hebra.7413

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:35:43.556450565Z 53 PC: 1448a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:43.558408101Z 53 PC: 1448a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:43.559648636Z 53 PC: 1448a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:43.560870012Z 53 PC: 1448a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:43.565766757Z 53 PC: 1448a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:43.566913278Z 53 PC: 1448a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:43.56812224Z 53 PC: 1448a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:43.569705635Z 53 PC: 1448a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:43.57081917Z 53 PC: 1448a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:43.571907666Z 53 PC: 1448a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:43.577344417Z 53 PC: 1448a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:43.583848749Z 53 PC: 1448a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:43.585029553Z 53 PC: 1448a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:43.591213509Z 53 PC: 1448a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:43.592734141Z 53 PC: 1448a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:43.594220616Z 53 PC: 1448a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:43.596091234Z 53 PC: 1448a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:43.597883418Z 53 PC: 1448a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:43.599354896Z 53 PC: 1448a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:43.600817954Z 37 PC: 1449f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:43.605907675Z 37 PC: 144a7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:43.607278798Z 37 PC: 144af | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:43.608646826Z 37 PC: 144b7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:43.611341055Z 68 PC: 151e7 | I/O control for devices (Set for = '')
2018-12-17T22:35:43.685282743Z 37 PC: 13b61 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:43.686892453Z 25 PC: 14d9f | Get default drive
2018-12-17T22:35:43.688736779Z 71 PC: 14db2 | Get current directory
2018-12-17T22:35:43.691844135Z 14 PC: 14df8 | Set default drive (Drive = 'C')
2018-12-17T22:35:43.693022131Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.695193204Z 26 PC: 14233 | Set disk transfer address
2018-12-17T22:35:43.696311124Z 78 PC: 1423f | Find first file
2018-12-17T22:35:43.70175552Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.703822591Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.704954832Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.709492762Z 14 PC: 14df8 | Set default drive (Drive = 'D')
2018-12-17T22:35:43.711625815Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.713037987Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.714569747Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.716646424Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.725518559Z 14 PC: 14df8 | Set default drive (Drive = 'E')
2018-12-17T22:35:43.726795716Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.728523801Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.730252489Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.731660357Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.737077364Z 14 PC: 14df8 | Set default drive (Drive = 'F')
2018-12-17T22:35:43.738263103Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.739572629Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.741460299Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.742704275Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.747034359Z 14 PC: 14df8 | Set default drive (Drive = 'G')
2018-12-17T22:35:43.749246666Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.750603231Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.751868028Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.753789945Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.758445668Z 14 PC: 14df8 | Set default drive (Drive = 'H')
2018-12-17T22:35:43.760033875Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.761957302Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.763680506Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.764834166Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.770157601Z 14 PC: 14df8 | Set default drive (Drive = 'I')
2018-12-17T22:35:43.772188602Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.773924813Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.775855687Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.777924277Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.782560903Z 14 PC: 14df8 | Set default drive (Drive = 'J')
2018-12-17T22:35:43.784436701Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.789979689Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.791391021Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.794317449Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.802713912Z 14 PC: 14df8 | Set default drive (Drive = 'K')
2018-12-17T22:35:43.804007694Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.805306573Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.807119702Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.808167108Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.812262332Z 14 PC: 14df8 | Set default drive (Drive = 'L')
2018-12-17T22:35:43.813905798Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.815008828Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.816001512Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.817762047Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.822818768Z 14 PC: 14df8 | Set default drive (Drive = 'M')
2018-12-17T22:35:43.82391857Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.825898483Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.827346742Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.82850775Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.833994397Z 14 PC: 14df8 | Set default drive (Drive = 'N')
2018-12-17T22:35:43.835767126Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.837566722Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.840314213Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.841844711Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.8466203Z 14 PC: 14df8 | Set default drive (Drive = 'O')
2018-12-17T22:35:43.849435316Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.850905594Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.852461943Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.854841789Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.859049505Z 14 PC: 14df8 | Set default drive (Drive = 'P')
2018-12-17T22:35:43.860972282Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.863056128Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.864355095Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.865472317Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.872294615Z 14 PC: 14df8 | Set default drive (Drive = 'Q')
2018-12-17T22:35:43.87477615Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.876763538Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.878297931Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.880798677Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.88530839Z 14 PC: 14df8 | Set default drive (Drive = 'R')
2018-12-17T22:35:43.887237068Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.88983506Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.891351574Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.892726815Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.898232337Z 14 PC: 14df8 | Set default drive (Drive = 'S')
2018-12-17T22:35:43.899637677Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.901178088Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.903191345Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.904844799Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.908985614Z 14 PC: 14df8 | Set default drive (Drive = 'T')
2018-12-17T22:35:43.910927088Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.912155601Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.913366409Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.915959823Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.926436113Z 14 PC: 14df8 | Set default drive (Drive = 'U')
2018-12-17T22:35:43.935917825Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.937962735Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.939224683Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.942858357Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.954332758Z 14 PC: 14df8 | Set default drive (Drive = 'V')
2018-12-17T22:35:43.956013941Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.957250625Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.958447664Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.960156334Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.964278484Z 14 PC: 14df8 | Set default drive (Drive = 'W')
2018-12-17T22:35:43.965443672Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.967740149Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.968933007Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.970034624Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.975165627Z 14 PC: 14df8 | Set default drive (Drive = 'X')
2018-12-17T22:35:43.976326163Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.977517776Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.979543499Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.980593291Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.985009812Z 14 PC: 14df8 | Set default drive (Drive = 'Y')
2018-12-17T22:35:43.987340872Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.988827746Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:43.990523496Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:43.992835091Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:43.997741991Z 14 PC: 14df8 | Set default drive (Drive = 'Z')
2018-12-17T22:35:43.999366455Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:44.001627963Z 14 PC: 14df8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.00284457Z 25 PC: 14dfc | Get default drive
2018-12-17T22:35:44.004057652Z 59 PC: 14e66 | Change current directory
2018-12-17T22:35:44.008984101Z 54 PC: 1415c | Get free disk space
2018-12-17T22:35:44.01927504Z 26 PC: 14233 | Set disk transfer address
2018-12-17T22:35:44.020412109Z 78 PC: 1423f | Find first file
2018-12-17T22:35:44.026356952Z 25 PC: 14d9f | Get default drive
2018-12-17T22:35:44.027723819Z 71 PC: 14db2 | Get current directory
2018-12-17T22:35:44.031520044Z 26 PC: 14233 | Set disk transfer address
2018-12-17T22:35:44.033876887Z 78 PC: 1423f | Find first file
2018-12-17T22:35:44.040893738Z 67 PC: 14195 | Get or set file attributes
2018-12-17T22:35:44.046975817Z 26 PC: 14257 | Set disk transfer address
2018-12-17T22:35:44.048879964Z 79 PC: 1425c | Find next file
2018-12-17T22:35:44.052129972Z 67 PC: 14195 | Get or set file attributes
2018-12-17T22:35:44.05814864Z 26 PC: 14257 | Set disk transfer address
2018-12-17T22:35:44.060254339Z 79 PC: 1425c | Find next file
2018-12-17T22:35:44.063401946Z 67 PC: 14195 | Get or set file attributes
2018-12-17T22:35:44.069221099Z 26 PC: 14257 | Set disk transfer address
2018-12-17T22:35:44.071175984Z 79 PC: 1425c | Find next file
2018-12-17T22:35:44.074233088Z 67 PC: 14195 | Get or set file attributes
2018-12-17T22:35:44.080011464Z 26 PC: 14257 | Set disk transfer address
2018-12-17T22:35:44.081900861Z 79 PC: 1425c | Find next file
2018-12-17T22:35:44.084911902Z 67 PC: 14195 | Get or set file attributes
2018-12-17T22:35:44.090590055Z 26 PC: 14257 | Set disk transfer address
2018-12-17T22:35:44.095790621Z 79 PC: 1425c | Find next file
2018-12-17T22:35:44.099893118Z 67 PC: 14195 | Get or set file attributes
2018-12-17T22:35:44.106071066Z 26 PC: 14257 | Set disk transfer address
2018-12-17T22:35:44.108075571Z 79 PC: 1425c | Find next file
2018-12-17T22:35:44.111583261Z 67 PC: 14195 | Get or set file attributes
2018-12-17T22:35:44.117695312Z 26 PC: 14257 | Set disk transfer address
2018-12-17T22:35:44.119503874Z 79 PC: 1425c | Find next file
2018-12-17T22:35:44.122752484Z 67 PC: 14195 | Get or set file attributes
2018-12-17T22:35:44.128873517Z 26 PC: 14257 | Set disk transfer address
2018-12-17T22:35:44.131007755Z 79 PC: 1425c | Find next file
2018-12-17T22:35:44.134228311Z 67 PC: 14195 | Get or set file attributes
2018-12-17T22:35:44.140550544Z 26 PC: 14257 | Set disk transfer address
2018-12-17T22:35:44.142690107Z 79 PC: 1425c | Find next file
2018-12-17T22:35:44.145048041Z 44 PC: 1531e | Get time 0x1531e: mov word ptr [0x3e], cx
0x15322: mov word ptr [0x40], dx
0x15326: retf
0x15327: call 0x1536e
0x1532a: jb 0x1533b
0x1532c: mov cx, word ptr es:[di + 4]
0x15330: cmp cx, 1
0x15333: je 0x1533b
0x15335: xor bx, bx
0x15337: push cs
0x15338: call 0x24eaa
0x1533b: retf 4
0x1533e: call 0x1536e
0x15341: jb 0x15356
0x15343: mov ax, cx
0x15345: mov dx, bx
0x15347: mov cx, word ptr es:[di + 4]
0x1534b: cmp cx, 1
0x1534e: je 0x15356
0x15350: xor bx, bx
2018-12-17T22:35:44.147489503Z 26 PC: 14233 | Set disk transfer address
2018-12-17T22:35:44.149326257Z 78 PC: 1423f | Find first file
2018-12-17T22:35:44.151091082Z 48 PC: 14d12 | Get DOS version
2018-12-17T22:35:44.152520716Z 48 PC: 14d12 | Get DOS version
2018-12-17T22:35:44.155444513Z 67 PC: 14195 | Get or set file attributes
2018-12-17T22:35:44.160995514Z 67 PC: 141bc | Get or set file attributes
2018-12-17T22:35:44.189712016Z 61 PC: 14b50 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:44.197199874Z 87 PC: 141d6 | Get or set file date and time
2018-12-17T22:35:44.198937753Z 60 PC: 14b50 | Create or truncate file
2018-12-17T22:35:44.210192467Z 63 PC: 14c23 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:44.218846224Z 64 PC: 14c23 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:44.227783705Z 62 PC: 14ba0 | Close file
2018-12-17T22:35:44.23631628Z 62 PC: 14ba0 | Close file
2018-12-17T22:35:44.239950834Z 26 PC: 14233 | Set disk transfer address
2018-12-17T22:35:44.241398444Z 78 PC: 1423f | Find first file
2018-12-17T22:35:44.254312194Z 48 PC: 14d12 | Get DOS version
2018-12-17T22:35:44.257812333Z 61 PC: 14b50 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:44.265192807Z 61 PC: 14b50 | Open file (Filename = 'A:\TEST')
2018-12-17T22:35:44.272061754Z 64 PC: 14c23 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:44.281954479Z 67 PC: 141bc | Get or set file attributes
2018-12-17T22:35:44.292588534Z 87 PC: 14203 | Get or set file date and time
2018-12-17T22:35:44.294580299Z 62 PC: 14ba0 | Close file
2018-12-17T22:35:44.302767264Z 53 PC: 14406 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:44.304319966Z 37 PC: 1440f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:44.305818461Z 53 PC: 14406 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:44.308384054Z 37 PC: 1440f | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:44.309904584Z 53 PC: 14406 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:44.311355959Z 37 PC: 1440f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:44.313644331Z 53 PC: 14406 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:44.315038296Z 37 PC: 1440f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:44.316378677Z 53 PC: 14406 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:44.31831884Z 37 PC: 1440f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:44.319730813Z 53 PC: 14406 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:44.321153275Z 37 PC: 1440f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:44.322937254Z 53 PC: 14406 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:44.324341137Z 37 PC: 1440f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:44.325932485Z 53 PC: 14406 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:44.327576694Z 37 PC: 1440f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:44.329660583Z 53 PC: 14406 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:44.331566564Z 37 PC: 1440f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:44.332863856Z 53 PC: 14406 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:44.334261329Z 37 PC: 1440f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:44.336153448Z 53 PC: 14406 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:44.337579625Z 37 PC: 1440f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:44.338933651Z 53 PC: 14406 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:44.341574969Z 37 PC: 1440f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:44.342682348Z 53 PC: 14406 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:44.344469993Z 37 PC: 1440f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:44.346007155Z 53 PC: 14406 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:44.347133118Z 37 PC: 1440f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:44.348427162Z 53 PC: 14406 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:44.350379468Z 37 PC: 1440f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:44.351706585Z 53 PC: 14406 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:44.353087886Z 37 PC: 1440f | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:44.35482812Z 53 PC: 14406 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:44.356179622Z 37 PC: 1440f | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:44.357549952Z 53 PC: 14406 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:44.360070518Z 37 PC: 1440f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:44.361220611Z 53 PC: 14406 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:44.362340755Z 37 PC: 1440f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:44.364191182Z 48 PC: 14d12 | Get DOS version
2018-12-17T22:35:44.365533537Z 41 PC: 143bd | Parse filename
2018-12-17T22:35:44.366875662Z 41 PC: 143cb | Parse filename
2018-12-17T22:35:44.369022676Z 75 PC: 143d6 | Execute program
2018-12-17T22:35:44.38792017Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:44.389228959Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:44.391283224Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:44.392438783Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:44.393569347Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:44.396078437Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:44.397496513Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:44.398881679Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:44.40104054Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:44.402635683Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:44.404420311Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:44.406171866Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:44.407517019Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:44.40923183Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:44.410850434Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:44.411925992Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:44.413809245Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:44.415115242Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:44.416326551Z 53 PC: 1dc7a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:44.418296766Z 37 PC: 1dc8f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:44.419440285Z 37 PC: 1dc97 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:44.420602268Z 37 PC: 1dc9f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:44.423740063Z 37 PC: 1dca7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:44.425483864Z 68 PC: 1e9d7 | I/O control for devices (Set for = '')
2018-12-17T22:35:44.488858074Z 37 PC: 1d351 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:44.491548746Z 25 PC: 1e58f | Get default drive
2018-12-17T22:35:44.492779997Z 71 PC: 1e5a2 | Get current directory
2018-12-17T22:35:44.496130406Z 14 PC: 1e5e8 | Set default drive (Drive = 'C')
2018-12-17T22:35:44.498216821Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.499824674Z 26 PC: 1da23 | Set disk transfer address
2018-12-17T22:35:44.501174326Z 78 PC: 1da2f | Find first file
2018-12-17T22:35:44.507607055Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.50903973Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.510442336Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.514728489Z 14 PC: 1e5e8 | Set default drive (Drive = 'D')
2018-12-17T22:35:44.515991788Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.518518809Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.519861372Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.520851624Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.52546634Z 14 PC: 1e5e8 | Set default drive (Drive = 'E')
2018-12-17T22:35:44.52652515Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.527637493Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.529219827Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.53013645Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.534117371Z 14 PC: 1e5e8 | Set default drive (Drive = 'F')
2018-12-17T22:35:44.53565661Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.536760979Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.537939899Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.539305444Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.543351175Z 14 PC: 1e5e8 | Set default drive (Drive = 'G')
2018-12-17T22:35:44.544442151Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.546371783Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.547475041Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.548909353Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.553572915Z 14 PC: 1e5e8 | Set default drive (Drive = 'H')
2018-12-17T22:35:44.555384739Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.557039699Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.558202753Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.559270147Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.563970698Z 14 PC: 1e5e8 | Set default drive (Drive = 'I')
2018-12-17T22:35:44.565034419Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.566089497Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.567419638Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.568341989Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.572816217Z 14 PC: 1e5e8 | Set default drive (Drive = 'J')
2018-12-17T22:35:44.574126313Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.575433443Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.577132605Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.578096056Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.582155147Z 14 PC: 1e5e8 | Set default drive (Drive = 'K')
2018-12-17T22:35:44.583782027Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.584957965Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.586129181Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.588261142Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.593253587Z 14 PC: 1e5e8 | Set default drive (Drive = 'L')
2018-12-17T22:35:44.594543871Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.595961689Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.597095254Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.59905145Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.603220463Z 14 PC: 1e5e8 | Set default drive (Drive = 'M')
2018-12-17T22:35:44.604321003Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.605992543Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.607273341Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.608438361Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.613209818Z 14 PC: 1e5e8 | Set default drive (Drive = 'N')
2018-12-17T22:35:44.61428114Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.615806608Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.617362066Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.618545765Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.623719614Z 14 PC: 1e5e8 | Set default drive (Drive = 'O')
2018-12-17T22:35:44.624818045Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.625961767Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.627676745Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.628828182Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.635242727Z 14 PC: 1e5e8 | Set default drive (Drive = 'P')
2018-12-17T22:35:44.637028768Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.638272312Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.639986371Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.641514754Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.645956516Z 14 PC: 1e5e8 | Set default drive (Drive = 'Q')
2018-12-17T22:35:44.647797946Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.648931739Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.650079581Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.65248335Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.657699287Z 14 PC: 1e5e8 | Set default drive (Drive = 'R')
2018-12-17T22:35:44.659352583Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.661785178Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.66347921Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.665005084Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.670574886Z 14 PC: 1e5e8 | Set default drive (Drive = 'S')
2018-12-17T22:35:44.672540542Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.674894396Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.676468552Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.677726514Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.683400588Z 14 PC: 1e5e8 | Set default drive (Drive = 'T')
2018-12-17T22:35:44.684658054Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.686293006Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.688358135Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.689682718Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.694047777Z 14 PC: 1e5e8 | Set default drive (Drive = 'U')
2018-12-17T22:35:44.696606768Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.698231596Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.699766868Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.701987728Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.706605119Z 14 PC: 1e5e8 | Set default drive (Drive = 'V')
2018-12-17T22:35:44.708284688Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.710277795Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.711728502Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.713978572Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.71972539Z 14 PC: 1e5e8 | Set default drive (Drive = 'W')
2018-12-17T22:35:44.721146594Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.723459226Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.7249583Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.726325108Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.731943993Z 14 PC: 1e5e8 | Set default drive (Drive = 'X')
2018-12-17T22:35:44.733383837Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.73487952Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.737499748Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.738862046Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.743259247Z 14 PC: 1e5e8 | Set default drive (Drive = 'Y')
2018-12-17T22:35:44.745726473Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.747151709Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.748759607Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.750444032Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.755095292Z 14 PC: 1e5e8 | Set default drive (Drive = 'Z')
2018-12-17T22:35:44.757177579Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.758468123Z 14 PC: 1e5e8 | Set default drive (Drive = 'A')
2018-12-17T22:35:44.75965644Z 25 PC: 1e5ec | Get default drive
2018-12-17T22:35:44.761725524Z 59 PC: 1e656 | Change current directory
2018-12-17T22:35:44.765707563Z 54 PC: 1d94c | Get free disk space
2018-12-17T22:35:44.769749436Z 26 PC: 1da23 | Set disk transfer address
2018-12-17T22:35:44.771372125Z 78 PC: 1da2f | Find first file
2018-12-17T22:35:44.780894965Z 67 PC: 1d985 | Get or set file attributes
2018-12-17T22:35:44.787153141Z 67 PC: 1d9ac | Get or set file attributes
2018-12-17T22:35:45.77243572Z 61 PC: 1e340 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:35:45.779520209Z 66 PC: 1eb78 | Move file pointer
2018-12-17T22:35:45.78123659Z 66 PC: 1eb86 | Move file pointer
2018-12-17T22:35:45.783618392Z 66 PC: 1eb94 | Move file pointer
2018-12-17T22:35:45.785380209Z 66 PC: 1e472 | Move file pointer
2018-12-17T22:35:45.787317702Z 63 PC: 1e3d2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:45.82167593Z 62 PC: 1e390 | Close file
2018-12-17T22:35:45.824184762Z 67 PC: 1d9ac | Get or set file attributes
2018-12-17T22:35:45.836655547Z 67 PC: 1d985 | Get or set file attributes
2018-12-17T22:35:45.842576196Z 67 PC: 1d9ac | Get or set file attributes
2018-12-17T22:35:45.857040131Z 61 PC: 1e340 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:35:45.865103197Z 87 PC: 1d9c6 | Get or set file date and time
2018-12-17T22:35:45.867190021Z 60 PC: 1e340 | Create or truncate file
2018-12-17T22:35:45.879198794Z 63 PC: 1e413 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:45.887935012Z 64 PC: 1e413 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:45.898741399Z 87 PC: 1d9f3 | Get or set file date and time
2018-12-17T22:35:45.901826343Z 62 PC: 1e390 | Close file
2018-12-17T22:35:45.909595785Z 67 PC: 1d9ac | Get or set file attributes
2018-12-17T22:35:45.919524794Z 48 PC: 1e502 | Get DOS version
2018-12-17T22:35:45.921669586Z 61 PC: 1e340 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:45.928889743Z 63 PC: 1e413 | Read file or device (Read 7413 bytes on handle 6)
2018-12-17T22:35:45.937422997Z 66 PC: 1e472 | Move file pointer
2018-12-17T22:35:45.940746131Z 64 PC: 1e413 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:45.948803862Z 87 PC: 1d9f3 | Get or set file date and time
2018-12-17T22:35:45.950642219Z 62 PC: 1e390 | Close file
2018-12-17T22:35:45.958085218Z 62 PC: 1e390 | Close file
2018-12-17T22:35:45.960080817Z 67 PC: 1d9ac | Get or set file attributes
2018-12-17T22:35:45.970625192Z 25 PC: 1e58f | Get default drive
2018-12-17T22:35:45.973041776Z 71 PC: 1e5a2 | Get current directory
2018-12-17T22:35:45.976655668Z 26 PC: 1da23 | Set disk transfer address
2018-12-17T22:35:45.978103418Z 78 PC: 1da2f | Find first file
2018-12-17T22:35:45.985165823Z 67 PC: 1d985 | Get or set file attributes
2018-12-17T22:35:45.9913466Z 26 PC: 1da47 | Set disk transfer address
2018-12-17T22:35:45.993430618Z 79 PC: 1da4c | Find next file
2018-12-17T22:35:45.996516728Z 67 PC: 1d985 | Get or set file attributes
2018-12-17T22:35:46.002426125Z 26 PC: 1da47 | Set disk transfer address
2018-12-17T22:35:46.004923371Z 79 PC: 1da4c | Find next file
2018-12-17T22:35:46.009272558Z 67 PC: 1d985 | Get or set file attributes
2018-12-17T22:35:46.015048323Z 26 PC: 1da47 | Set disk transfer address
2018-12-17T22:35:46.017210928Z 79 PC: 1da4c | Find next file
2018-12-17T22:35:46.020060286Z 67 PC: 1d985 | Get or set file attributes
2018-12-17T22:35:46.025774696Z 26 PC: 1da47 | Set disk transfer address
2018-12-17T22:35:46.027938197Z 79 PC: 1da4c | Find next file
2018-12-17T22:35:46.03074861Z 67 PC: 1d985 | Get or set file attributes
2018-12-17T22:35:46.036748472Z 26 PC: 1da47 | Set disk transfer address
2018-12-17T22:35:46.03820586Z 79 PC: 1da4c | Find next file
2018-12-17T22:35:46.041053957Z 67 PC: 1d985 | Get or set file attributes
2018-12-17T22:35:46.048201672Z 26 PC: 1da47 | Set disk transfer address
2018-12-17T22:35:46.049329929Z 79 PC: 1da4c | Find next file
2018-12-17T22:35:46.052297557Z 67 PC: 1d985 | Get or set file attributes
2018-12-17T22:35:46.058680992Z 26 PC: 1da47 | Set disk transfer address
2018-12-17T22:35:46.059958633Z 79 PC: 1da4c | Find next file
2018-12-17T22:35:46.063022492Z 67 PC: 1d985 | Get or set file attributes
2018-12-17T22:35:46.069490839Z 26 PC: 1da47 | Set disk transfer address
2018-12-17T22:35:46.070768559Z 79 PC: 1da4c | Find next file
2018-12-17T22:35:46.073885056Z 67 PC: 1d985 | Get or set file attributes
2018-12-17T22:35:46.079784388Z 26 PC: 1da47 | Set disk transfer address
2018-12-17T22:35:46.080937691Z 79 PC: 1da4c | Find next file
2018-12-17T22:35:46.084196529Z 67 PC: 1d985 | Get or set file attributes
2018-12-17T22:35:46.089971048Z 26 PC: 1da47 | Set disk transfer address
2018-12-17T22:35:46.090921097Z 79 PC: 1da4c | Find next file
2018-12-17T22:35:46.094046813Z 44 PC: 1eb0e | Get time 0x1eb0e: mov word ptr [0x3e], cx
0x1eb12: mov word ptr [0x40], dx
0x1eb16: retf
0x1eb17: call 0x1eb5e
0x1eb1a: jb 0x1eb2b
0x1eb1c: mov cx, word ptr es:[di + 4]
0x1eb20: cmp cx, 1
0x1eb23: je 0x1eb2b
0x1eb25: xor bx, bx
0x1eb27: push cs
0x1eb28: call 0x2e69a
0x1eb2b: retf 4
0x1eb2e: call 0x1eb5e
0x1eb31: jb 0x1eb46
0x1eb33: mov ax, cx
0x1eb35: mov dx, bx
0x1eb37: mov cx, word ptr es:[di + 4]
0x1eb3b: cmp cx, 1
0x1eb3e: je 0x1eb46
0x1eb40: xor bx, bx
2018-12-17T22:35:46.096588073Z 26 PC: 1da23 | Set disk transfer address
2018-12-17T22:35:46.097793984Z 78 PC: 1da2f | Find first file
2018-12-17T22:35:46.10058225Z 48 PC: 1e502 | Get DOS version
2018-12-17T22:35:46.10222899Z 48 PC: 1e502 | Get DOS version
2018-12-17T22:35:46.103825619Z 67 PC: 1d985 | Get or set file attributes
2018-12-17T22:35:46.110004768Z 67 PC: 1d9ac | Get or set file attributes
2018-12-17T22:35:46.120357785Z 61 PC: 1e340 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:46.126870111Z 87 PC: 1d9c6 | Get or set file date and time
2018-12-17T22:35:46.128734089Z 60 PC: 1e340 | Create or truncate file
2018-12-17T22:35:46.141098474Z 63 PC: 1e413 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:46.149327138Z 64 PC: 1e413 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:46.158386785Z 62 PC: 1e390 | Close file
2018-12-17T22:35:46.166219516Z 62 PC: 1e390 | Close file
2018-12-17T22:35:46.16929774Z 26 PC: 1da23 | Set disk transfer address
2018-12-17T22:35:46.170422419Z 78 PC: 1da2f | Find first file
2018-12-17T22:35:46.180495871Z 48 PC: 1e502 | Get DOS version
2018-12-17T22:35:46.183076195Z 61 PC: 1e340 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:46.190177307Z 61 PC: 1e340 | Open file (Filename = 'A:\TEST')
2018-12-17T22:35:46.19724956Z 64 PC: 1e413 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:46.207298695Z 67 PC: 1d9ac | Get or set file attributes
2018-12-17T22:35:46.224053914Z 87 PC: 1d9f3 | Get or set file date and time
2018-12-17T22:35:46.22683294Z 62 PC: 1e390 | Close file
2018-12-17T22:35:46.233619658Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:46.234915335Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:46.236992515Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:46.238088275Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:46.239082496Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:46.240341631Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:46.242063182Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:46.243297986Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:46.244330672Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:46.245324478Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:46.246664025Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:46.247635066Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:46.248759291Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:46.250048011Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:46.250991308Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:46.252172871Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:46.253287903Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:46.254830722Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:46.256226408Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:46.257220609Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:46.258616631Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:46.264324321Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:46.265750057Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:46.267750344Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:46.26944526Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:46.271093751Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:46.279448672Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:46.281013028Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:46.292702037Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:46.294806097Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:46.296863635Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:46.299486888Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:46.30076774Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:46.301939033Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:46.303977729Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:46.305627067Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:46.308301402Z 53 PC: 1dbf6 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:46.309944831Z 37 PC: 1dbff | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:46.311585929Z 48 PC: 1e502 | Get DOS version
2018-12-17T22:35:46.314121562Z 41 PC: 1dbad | Parse filename
2018-12-17T22:35:46.315500079Z 41 PC: 1dbbb | Parse filename
2018-12-17T22:35:46.317345977Z 75 PC: 1dbc6 | Execute program
2018-12-17T22:35:46.336422825Z 53 PC: 2746a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:46.337622717Z 53 PC: 2746a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:46.340001268Z 53 PC: 2746a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:46.341408775Z 53 PC: 2746a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:46.34312037Z 53 PC: 2746a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:46.345300597Z 53 PC: 2746a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:46.346462831Z 53 PC: 2746a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:46.347865116Z 53 PC: 2746a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:46.350310287Z 53 PC: 2746a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:46.351824566Z 53 PC: 2746a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:46.354034285Z 53 PC: 2746a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:46.355720204Z 53 PC: 2746a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:46.357090044Z 53 PC: 2746a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:46.360213835Z 53 PC: 2746a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:46.361473418Z 53 PC: 2746a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:46.362759872Z 53 PC: 2746a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:46.36493066Z 53 PC: 2746a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:46.366040626Z 53 PC: 2746a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:46.367977608Z 53 PC: 2746a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:46.369955756Z 37 PC: 2747f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:46.371737359Z 37 PC: 27487 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:46.373646075Z 37 PC: 2748f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:46.374884621Z 37 PC: 27497 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:46.377858676Z 68 PC: 281c7 | I/O control for devices (Set for = '')
2018-12-17T22:35:46.472706589Z 37 PC: 26b41 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:46.47456468Z 25 PC: 27d7f | Get default drive
2018-12-17T22:35:46.476653007Z 71 PC: 27d92 | Get current directory
2018-12-17T22:35:46.479859826Z 14 PC: 27dd8 | Set default drive (Drive = 'C')
2018-12-17T22:35:46.483085912Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.484650241Z 26 PC: 27213 | Set disk transfer address
2018-12-17T22:35:46.485969525Z 78 PC: 2721f | Find first file
2018-12-17T22:35:46.492524427Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.49378426Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.494767844Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.498976562Z 14 PC: 27dd8 | Set default drive (Drive = 'D')
2018-12-17T22:35:46.500129991Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.501756889Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.503173962Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.504222704Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.509443607Z 14 PC: 27dd8 | Set default drive (Drive = 'E')
2018-12-17T22:35:46.510615592Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.513663927Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.524074501Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.525208932Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.530065563Z 14 PC: 27dd8 | Set default drive (Drive = 'F')
2018-12-17T22:35:46.531239467Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.533264345Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.534739249Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.536291136Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.541786035Z 14 PC: 27dd8 | Set default drive (Drive = 'G')
2018-12-17T22:35:46.542953306Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.544336106Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.54650284Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.547511178Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.552892706Z 14 PC: 27dd8 | Set default drive (Drive = 'H')
2018-12-17T22:35:46.554633548Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.556243946Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.558844704Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.56034694Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.566572067Z 14 PC: 27dd8 | Set default drive (Drive = 'I')
2018-12-17T22:35:46.568044502Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.569691202Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.571825335Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.572974187Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.577100994Z 14 PC: 27dd8 | Set default drive (Drive = 'J')
2018-12-17T22:35:46.579047833Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.58024351Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.582348548Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.583443591Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.587641236Z 14 PC: 27dd8 | Set default drive (Drive = 'K')
2018-12-17T22:35:46.590153733Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.591624184Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.593284088Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.595474554Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.599841286Z 14 PC: 27dd8 | Set default drive (Drive = 'L')
2018-12-17T22:35:46.601981567Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.603353688Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.605022204Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.607355132Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.611512823Z 14 PC: 27dd8 | Set default drive (Drive = 'M')
2018-12-17T22:35:46.613893183Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.615297963Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.616923862Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.619105509Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.623322818Z 14 PC: 27dd8 | Set default drive (Drive = 'N')
2018-12-17T22:35:46.625354886Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.626844726Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.628114437Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.629695325Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.633772477Z 14 PC: 27dd8 | Set default drive (Drive = 'O')
2018-12-17T22:35:46.63514052Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.636225415Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.637294481Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.638679355Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.642832769Z 14 PC: 27dd8 | Set default drive (Drive = 'P')
2018-12-17T22:35:46.64606806Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.647443097Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.64871269Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.65059319Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.654704425Z 14 PC: 27dd8 | Set default drive (Drive = 'Q')
2018-12-17T22:35:46.655920502Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.657772292Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.659938286Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.661706307Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.66677456Z 14 PC: 27dd8 | Set default drive (Drive = 'R')
2018-12-17T22:35:46.668085623Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.670008317Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.671566404Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.673576909Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.67781708Z 14 PC: 27dd8 | Set default drive (Drive = 'S')
2018-12-17T22:35:46.678988967Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.681134824Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.682313498Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.68402654Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.688051522Z 14 PC: 27dd8 | Set default drive (Drive = 'T')
2018-12-17T22:35:46.689097131Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.691127605Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.692214523Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.694429463Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.698432972Z 14 PC: 27dd8 | Set default drive (Drive = 'U')
2018-12-17T22:35:46.699437983Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.700936483Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.702072485Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.703825946Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.711798029Z 14 PC: 27dd8 | Set default drive (Drive = 'V')
2018-12-17T22:35:46.712926461Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.7150774Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.716411087Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.717475286Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.724982919Z 14 PC: 27dd8 | Set default drive (Drive = 'W')
2018-12-17T22:35:46.726408295Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.728542019Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.729836815Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.730942997Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.735496958Z 14 PC: 27dd8 | Set default drive (Drive = 'X')
2018-12-17T22:35:46.736674014Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.738444084Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.739587575Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.740558736Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.745190728Z 14 PC: 27dd8 | Set default drive (Drive = 'Y')
2018-12-17T22:35:46.746200554Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.748002138Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.749454418Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.750588565Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.75575333Z 14 PC: 27dd8 | Set default drive (Drive = 'Z')
2018-12-17T22:35:46.75676492Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.759206997Z 14 PC: 27dd8 | Set default drive (Drive = 'A')
2018-12-17T22:35:46.760370691Z 25 PC: 27ddc | Get default drive
2018-12-17T22:35:46.762205821Z 59 PC: 27e46 | Change current directory
2018-12-17T22:35:46.766355613Z 54 PC: 2713c | Get free disk space
2018-12-17T22:35:46.770620708Z 26 PC: 27213 | Set disk transfer address
2018-12-17T22:35:46.772522278Z 78 PC: 2721f | Find first file
2018-12-17T22:35:46.779029015Z 67 PC: 27175 | Get or set file attributes
2018-12-17T22:35:46.794165268Z 67 PC: 2719c | Get or set file attributes
2018-12-17T22:35:46.804568881Z 61 PC: 27b30 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:35:46.811810453Z 66 PC: 28368 | Move file pointer
2018-12-17T22:35:46.814216559Z 66 PC: 28376 | Move file pointer
2018-12-17T22:35:46.815816714Z 66 PC: 28384 | Move file pointer
2018-12-17T22:35:46.818655355Z 66 PC: 27c62 | Move file pointer
2018-12-17T22:35:46.82030816Z 63 PC: 27bc2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:46.826040705Z 62 PC: 27b80 | Close file
2018-12-17T22:35:46.828912666Z 67 PC: 2719c | Get or set file attributes
2018-12-17T22:35:46.839763971Z 25 PC: 27d7f | Get default drive
2018-12-17T22:35:46.84152801Z 71 PC: 27d92 | Get current directory
2018-12-17T22:35:46.84571691Z 26 PC: 27213 | Set disk transfer address
2018-12-17T22:35:46.847016221Z 78 PC: 2721f | Find first file
2018-12-17T22:35:46.853631804Z 67 PC: 27175 | Get or set file attributes
2018-12-17T22:35:46.859764893Z 26 PC: 27237 | Set disk transfer address
2018-12-17T22:35:46.861596071Z 79 PC: 2723c | Find next file
2018-12-17T22:35:46.864647292Z 67 PC: 27175 | Get or set file attributes
2018-12-17T22:35:46.870458168Z 26 PC: 27237 | Set disk transfer address
2018-12-17T22:35:46.872172795Z 79 PC: 2723c | Find next file
2018-12-17T22:35:46.875415349Z 67 PC: 27175 | Get or set file attributes
2018-12-17T22:35:46.881982551Z 26 PC: 27237 | Set disk transfer address
2018-12-17T22:35:46.883219072Z 79 PC: 2723c | Find next file
2018-12-17T22:35:46.886615639Z 67 PC: 27175 | Get or set file attributes
2018-12-17T22:35:46.8990434Z 26 PC: 27237 | Set disk transfer address
2018-12-17T22:35:46.900051477Z 79 PC: 2723c | Find next file
2018-12-17T22:35:46.903669416Z 67 PC: 27175 | Get or set file attributes
2018-12-17T22:35:46.910107986Z 26 PC: 27237 | Set disk transfer address
2018-12-17T22:35:46.912023933Z 79 PC: 2723c | Find next file
2018-12-17T22:35:46.914921201Z 67 PC: 27175 | Get or set file attributes
2018-12-17T22:35:46.920545127Z 26 PC: 27237 | Set disk transfer address
2018-12-17T22:35:46.922692085Z 79 PC: 2723c | Find next file
2018-12-17T22:35:46.925537965Z 67 PC: 27175 | Get or set file attributes
2018-12-17T22:35:46.932088706Z 26 PC: 27237 | Set disk transfer address
2018-12-17T22:35:46.933169664Z 79 PC: 2723c | Find next file
2018-12-17T22:35:46.936393252Z 67 PC: 27175 | Get or set file attributes
2018-12-17T22:35:46.943515566Z 26 PC: 27237 | Set disk transfer address
2018-12-17T22:35:46.94487765Z 79 PC: 2723c | Find next file
2018-12-17T22:35:46.950317475Z 67 PC: 27175 | Get or set file attributes
2018-12-17T22:35:46.957855494Z 26 PC: 27237 | Set disk transfer address
2018-12-17T22:35:46.959890118Z 79 PC: 2723c | Find next file
2018-12-17T22:35:46.964518847Z 67 PC: 27175 | Get or set file attributes
2018-12-17T22:35:46.970774456Z 26 PC: 27237 | Set disk transfer address
2018-12-17T22:35:46.973522901Z 79 PC: 2723c | Find next file
2018-12-17T22:35:46.976872571Z 44 PC: 282fe | Get time 0x282fe: mov word ptr [0x3e], cx
0x28302: mov word ptr [0x40], dx
0x28306: retf
0x28307: call 0x2834e
0x2830a: jb 0x2831b
0x2830c: mov cx, word ptr es:[di + 4]
0x28310: cmp cx, 1
0x28313: je 0x2831b
0x28315: xor bx, bx
0x28317: push cs
0x28318: call 0x37e8a
0x2831b: retf 4
0x2831e: call 0x2834e
0x28321: jb 0x28336
0x28323: mov ax, cx
0x28325: mov dx, bx
0x28327: mov cx, word ptr es:[di + 4]
0x2832b: cmp cx, 1
0x2832e: je 0x28336
0x28330: xor bx, bx
2018-12-17T22:35:46.979780704Z 26 PC: 27213 | Set disk transfer address
2018-12-17T22:35:46.982058864Z 78 PC: 2721f | Find first file
2018-12-17T22:35:46.984841848Z 48 PC: 27cf2 | Get DOS version
2018-12-17T22:35:46.986965059Z 48 PC: 27cf2 | Get DOS version
2018-12-17T22:35:46.988499629Z 67 PC: 27175 | Get or set file attributes
2018-12-17T22:35:46.994314185Z 67 PC: 2719c | Get or set file attributes
2018-12-17T22:35:47.004405934Z 61 PC: 27b30 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:47.010886419Z 87 PC: 271b6 | Get or set file date and time
2018-12-17T22:35:47.013527328Z 60 PC: 27b30 | Create or truncate file
2018-12-17T22:35:47.025604614Z 63 PC: 27c03 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:47.03402561Z 64 PC: 27c03 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:47.042831093Z 62 PC: 27b80 | Close file
2018-12-17T22:35:47.051225744Z 62 PC: 27b80 | Close file
2018-12-17T22:35:47.054124023Z 26 PC: 27213 | Set disk transfer address
2018-12-17T22:35:47.055236304Z 78 PC: 2721f | Find first file
2018-12-17T22:35:47.06473839Z 48 PC: 27cf2 | Get DOS version
2018-12-17T22:35:47.066741817Z 61 PC: 27b30 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:47.073797494Z 61 PC: 27b30 | Open file (Filename = 'A:\TEST')
2018-12-17T22:35:47.080641525Z 64 PC: 27c03 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:47.088889488Z 67 PC: 2719c | Get or set file attributes
2018-12-17T22:35:47.100313477Z 87 PC: 271e3 | Get or set file date and time
2018-12-17T22:35:47.101997764Z 62 PC: 27b80 | Close file
2018-12-17T22:35:47.113300162Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:47.117572234Z 37 PC: 273ef | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:47.119293714Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:47.121159447Z 37 PC: 273ef | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:47.122145514Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:47.123768776Z 37 PC: 273ef | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:47.124727884Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:47.125709494Z 37 PC: 273ef | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:47.126996104Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:47.128053837Z 37 PC: 273ef | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:47.129443125Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:47.130727415Z 37 PC: 273ef | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:47.132167953Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:47.133648338Z 37 PC: 273ef | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:47.135081995Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:47.136086426Z 37 PC: 273ef | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:47.137196479Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:47.138209943Z 37 PC: 273ef | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:47.139811433Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:47.140850316Z 37 PC: 273ef | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:47.142584542Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:47.143681296Z 37 PC: 273ef | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:47.144642686Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:47.148135192Z 37 PC: 273ef | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:47.150123263Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:47.152797847Z 37 PC: 273ef | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:47.154174076Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:47.155535381Z 37 PC: 273ef | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:47.166282913Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:47.167752591Z 37 PC: 273ef | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:47.170457034Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:47.171857718Z 37 PC: 273ef | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:47.174438726Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:47.175984219Z 37 PC: 273ef | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:47.177461841Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:47.180089337Z 37 PC: 273ef | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:47.181413217Z 53 PC: 273e6 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:47.183227149Z 37 PC: 273ef | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:47.185127501Z 48 PC: 27cf2 | Get DOS version
2018-12-17T22:35:47.187126235Z 41 PC: 2739d | Parse filename
2018-12-17T22:35:47.195189128Z 41 PC: 273ab | Parse filename
2018-12-17T22:35:47.196612929Z 75 PC: 273b6 | Execute program
2018-12-17T22:35:47.217400193Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:47.219219859Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:47.220640671Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:47.222607487Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:47.223837155Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:47.226148723Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:47.22735949Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:47.228541737Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:47.230554031Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:47.232180172Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:47.234447757Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:47.235604501Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:47.236638304Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:47.23791766Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:47.239055885Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:47.240913205Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:47.24210964Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:47.243851409Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:47.245808163Z 53 PC: 30c5a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:47.247293701Z 37 PC: 30c6f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:47.249003623Z 37 PC: 30c77 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:47.250118839Z 37 PC: 30c7f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:47.251964636Z 37 PC: 30c87 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:47.253613169Z 68 PC: 319b7 | I/O control for devices (Set for = '')
2018-12-17T22:35:47.347260246Z 37 PC: 30331 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:47.349622455Z 25 PC: 3156f | Get default drive
2018-12-17T22:35:47.351041037Z 71 PC: 31582 | Get current directory
2018-12-17T22:35:47.354941889Z 14 PC: 315c8 | Set default drive (Drive = 'C')
2018-12-17T22:35:47.356435832Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.359293717Z 26 PC: 30a03 | Set disk transfer address
2018-12-17T22:35:47.360863232Z 78 PC: 30a0f | Find first file
2018-12-17T22:35:47.366638687Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.368944418Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.370293091Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.374841907Z 14 PC: 315c8 | Set default drive (Drive = 'D')
2018-12-17T22:35:47.376395298Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.377721064Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.379683461Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.380606671Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.386111302Z 14 PC: 315c8 | Set default drive (Drive = 'E')
2018-12-17T22:35:47.387394962Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.389397587Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.391551239Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.392497569Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.397728758Z 14 PC: 315c8 | Set default drive (Drive = 'F')
2018-12-17T22:35:47.398864245Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.400873086Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.402261129Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.403844217Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.408396678Z 14 PC: 315c8 | Set default drive (Drive = 'G')
2018-12-17T22:35:47.409502089Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.411768407Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.412943575Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.414866935Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.419035168Z 14 PC: 315c8 | Set default drive (Drive = 'H')
2018-12-17T22:35:47.420110497Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.422469093Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.423702928Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.426250761Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.431096522Z 14 PC: 315c8 | Set default drive (Drive = 'I')
2018-12-17T22:35:47.43301759Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.43514339Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.436533823Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.445343029Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.465364282Z 14 PC: 315c8 | Set default drive (Drive = 'J')
2018-12-17T22:35:47.466983394Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.469977173Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.475908192Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.478656308Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.48288264Z 14 PC: 315c8 | Set default drive (Drive = 'K')
2018-12-17T22:35:47.485720072Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.487004989Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.488522527Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.491026518Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.495370718Z 14 PC: 315c8 | Set default drive (Drive = 'L')
2018-12-17T22:35:47.498102313Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.499656486Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.501641056Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.503132752Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.507616475Z 14 PC: 315c8 | Set default drive (Drive = 'M')
2018-12-17T22:35:47.510259241Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.511729042Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.514154297Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.515539693Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.522834945Z 14 PC: 315c8 | Set default drive (Drive = 'N')
2018-12-17T22:35:47.524895276Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.526151105Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.528675611Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.529825879Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.534173869Z 14 PC: 315c8 | Set default drive (Drive = 'O')
2018-12-17T22:35:47.536003397Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.537655725Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.539922849Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.54106786Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.546275054Z 14 PC: 315c8 | Set default drive (Drive = 'P')
2018-12-17T22:35:47.547709506Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.549904914Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.551347152Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.552605977Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.557169559Z 14 PC: 315c8 | Set default drive (Drive = 'Q')
2018-12-17T22:35:47.558322588Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.561154328Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.562600403Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.564951097Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.568985086Z 14 PC: 315c8 | Set default drive (Drive = 'R')
2018-12-17T22:35:47.570118126Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.572273629Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.582511681Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.585233418Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.589344752Z 14 PC: 315c8 | Set default drive (Drive = 'S')
2018-12-17T22:35:47.591810156Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.593374404Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.595555773Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.602552706Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.607066146Z 14 PC: 315c8 | Set default drive (Drive = 'T')
2018-12-17T22:35:47.609814738Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.61113066Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.614102619Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.615180515Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.619456316Z 14 PC: 315c8 | Set default drive (Drive = 'U')
2018-12-17T22:35:47.621045554Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.62271965Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.625053611Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.626565728Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.631685434Z 14 PC: 315c8 | Set default drive (Drive = 'V')
2018-12-17T22:35:47.63287917Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.634856323Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.641514745Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.642495544Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.647211385Z 14 PC: 315c8 | Set default drive (Drive = 'W')
2018-12-17T22:35:47.648600341Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.652143697Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.653703299Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.655726999Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.660467007Z 14 PC: 315c8 | Set default drive (Drive = 'X')
2018-12-17T22:35:47.661703177Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.663650475Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.664941991Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.678300593Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.682503862Z 14 PC: 315c8 | Set default drive (Drive = 'Y')
2018-12-17T22:35:47.684503094Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.685624476Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.686882556Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.688117465Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.69206438Z 14 PC: 315c8 | Set default drive (Drive = 'Z')
2018-12-17T22:35:47.693495639Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.694590212Z 14 PC: 315c8 | Set default drive (Drive = 'A')
2018-12-17T22:35:47.696087985Z 25 PC: 315cc | Get default drive
2018-12-17T22:35:47.697101107Z 59 PC: 31636 | Change current directory
2018-12-17T22:35:47.702262021Z 54 PC: 3092c | Get free disk space
2018-12-17T22:35:47.713744178Z 26 PC: 30a03 | Set disk transfer address
2018-12-17T22:35:47.715428763Z 78 PC: 30a0f | Find first file
2018-12-17T22:35:47.723550465Z 67 PC: 30965 | Get or set file attributes
2018-12-17T22:35:47.72980437Z 67 PC: 3098c | Get or set file attributes
2018-12-17T22:35:47.740158977Z 61 PC: 31320 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:35:47.746859283Z 66 PC: 31b58 | Move file pointer
2018-12-17T22:35:47.748850728Z 66 PC: 31b66 | Move file pointer
2018-12-17T22:35:47.750090595Z 66 PC: 31b74 | Move file pointer
2018-12-17T22:35:47.75177092Z 66 PC: 31452 | Move file pointer
2018-12-17T22:35:47.753099641Z 63 PC: 313b2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:47.756058994Z 62 PC: 31370 | Close file
2018-12-17T22:35:47.757907803Z 67 PC: 3098c | Get or set file attributes
2018-12-17T22:35:47.767405582Z 25 PC: 3156f | Get default drive
2018-12-17T22:35:47.768913413Z 71 PC: 31582 | Get current directory
2018-12-17T22:35:47.77193641Z 26 PC: 30a03 | Set disk transfer address
2018-12-17T22:35:47.773518994Z 78 PC: 30a0f | Find first file
2018-12-17T22:35:47.7803084Z 67 PC: 30965 | Get or set file attributes
2018-12-17T22:35:47.786401945Z 26 PC: 30a27 | Set disk transfer address
2018-12-17T22:35:47.78733109Z 79 PC: 30a2c | Find next file
2018-12-17T22:35:47.790049829Z 67 PC: 30965 | Get or set file attributes
2018-12-17T22:35:47.795863523Z 26 PC: 30a27 | Set disk transfer address
2018-12-17T22:35:47.796755455Z 79 PC: 30a2c | Find next file
2018-12-17T22:35:47.799799447Z 67 PC: 30965 | Get or set file attributes
2018-12-17T22:35:47.805317299Z 26 PC: 30a27 | Set disk transfer address
2018-12-17T22:35:47.806688533Z 79 PC: 30a2c | Find next file
2018-12-17T22:35:47.809452244Z 67 PC: 30965 | Get or set file attributes
2018-12-17T22:35:47.815044307Z 26 PC: 30a27 | Set disk transfer address
2018-12-17T22:35:47.815968257Z 79 PC: 30a2c | Find next file
2018-12-17T22:35:47.818636924Z 67 PC: 30965 | Get or set file attributes
2018-12-17T22:35:47.824271266Z 26 PC: 30a27 | Set disk transfer address
2018-12-17T22:35:47.825140437Z 79 PC: 30a2c | Find next file
2018-12-17T22:35:47.828096665Z 67 PC: 30965 | Get or set file attributes
2018-12-17T22:35:47.833662517Z 26 PC: 30a27 | Set disk transfer address
2018-12-17T22:35:47.835017553Z 79 PC: 30a2c | Find next file
2018-12-17T22:35:47.836831511Z 67 PC: 30965 | Get or set file attributes
2018-12-17T22:35:47.840521909Z 26 PC: 30a27 | Set disk transfer address
2018-12-17T22:35:47.848840217Z 79 PC: 30a2c | Find next file
2018-12-17T22:35:47.855910349Z 67 PC: 30965 | Get or set file attributes
2018-12-17T22:35:47.860212107Z 26 PC: 30a27 | Set disk transfer address
2018-12-17T22:35:47.861347517Z 79 PC: 30a2c | Find next file
2018-12-17T22:35:47.8645824Z 67 PC: 30965 | Get or set file attributes
2018-12-17T22:35:47.870107288Z 26 PC: 30a27 | Set disk transfer address
2018-12-17T22:35:47.87149426Z 79 PC: 30a2c | Find next file
2018-12-17T22:35:47.874220356Z 67 PC: 30965 | Get or set file attributes
2018-12-17T22:35:47.880013944Z 26 PC: 30a27 | Set disk transfer address
2018-12-17T22:35:47.881160483Z 79 PC: 30a2c | Find next file
2018-12-17T22:35:47.887356072Z 44 PC: 31aee | Get time 0x31aee: mov word ptr [0x3e], cx
0x31af2: mov word ptr [0x40], dx
0x31af6: retf
0x31af7: call 0x31b3e
0x31afa: jb 0x31b0b
0x31afc: mov cx, word ptr es:[di + 4]
0x31b00: cmp cx, 1
0x31b03: je 0x31b0b
0x31b05: xor bx, bx
0x31b07: push cs
0x31b08: call 0x4167a
0x31b0b: retf 4
0x31b0e: call 0x31b3e
0x31b11: jb 0x31b26
0x31b13: mov ax, cx
0x31b15: mov dx, bx
0x31b17: mov cx, word ptr es:[di + 4]
0x31b1b: cmp cx, 1
0x31b1e: je 0x31b26
0x31b20: xor bx, bx
2018-12-17T22:35:47.890127387Z 26 PC: 30a03 | Set disk transfer address
2018-12-17T22:35:47.891026468Z 78 PC: 30a0f | Find first file
2018-12-17T22:35:47.893392256Z 48 PC: 314e2 | Get DOS version
2018-12-17T22:35:47.894886402Z 48 PC: 314e2 | Get DOS version
2018-12-17T22:35:47.897282949Z 67 PC: 30965 | Get or set file attributes
2018-12-17T22:35:47.902971508Z 67 PC: 3098c | Get or set file attributes
2018-12-17T22:35:47.912733171Z 61 PC: 31320 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:47.920417246Z 87 PC: 309a6 | Get or set file date and time
2018-12-17T22:35:47.92199209Z 60 PC: 31320 | Create or truncate file
2018-12-17T22:35:47.93404295Z 63 PC: 313f3 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:47.9412769Z 64 PC: 313f3 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:47.949988787Z 62 PC: 31370 | Close file
2018-12-17T22:35:47.957985301Z 62 PC: 31370 | Close file
2018-12-17T22:35:47.960056377Z 26 PC: 30a03 | Set disk transfer address
2018-12-17T22:35:47.961249492Z 78 PC: 30a0f | Find first file
2018-12-17T22:35:47.970159738Z 48 PC: 314e2 | Get DOS version
2018-12-17T22:35:47.971792658Z 61 PC: 31320 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:47.978595716Z 61 PC: 31320 | Open file (Filename = 'A:\TEST')
2018-12-17T22:35:47.985960559Z 64 PC: 313f3 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:47.994158908Z 67 PC: 3098c | Get or set file attributes
2018-12-17T22:35:48.004470796Z 87 PC: 309d3 | Get or set file date and time
2018-12-17T22:35:48.005892964Z 62 PC: 31370 | Close file
2018-12-17T22:35:48.013852944Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:48.01490477Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:48.016202147Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:48.017440459Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:48.01883382Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:48.020734578Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:48.021827389Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:48.024016203Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:48.025053852Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:48.027347428Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:48.028612413Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:48.029743413Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:48.031246854Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:48.032562774Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:48.034601163Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:48.035632562Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:48.037295383Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:48.038656903Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:48.040910924Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:48.041899114Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:48.042883872Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:48.044318387Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:48.045263237Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:48.046702356Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:48.047876073Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:48.049659326Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:48.05062756Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:48.051871039Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:48.052991566Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:48.054231995Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:48.05557707Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:48.056877956Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:48.058517184Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:48.059892916Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:48.062342395Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:48.063686795Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:48.065699038Z 53 PC: 30bd6 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:48.066736119Z 37 PC: 30bdf | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:48.067901996Z 48 PC: 314e2 | Get DOS version
2018-12-17T22:35:48.06936487Z 41 PC: 30b8d | Parse filename
2018-12-17T22:35:48.070898154Z 41 PC: 30b9b | Parse filename
2018-12-17T22:35:48.072995951Z 75 PC: 30ba6 | Execute program
2018-12-17T22:35:48.090525108Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:48.092199839Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:48.093323953Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:48.095278466Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:48.096605389Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:48.098606409Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:48.099869476Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:48.101884723Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:48.103115393Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:48.104581484Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:48.106099153Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:48.107408812Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:48.109123386Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:48.1101113Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:48.111843437Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:48.112851307Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:48.114412403Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:48.1155062Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:48.117366139Z 53 PC: 3a44a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:48.118657489Z 37 PC: 3a45f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:48.119877197Z 37 PC: 3a467 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:48.120962177Z 37 PC: 3a46f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:48.121808389Z 37 PC: 3a477 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:48.123474808Z 68 PC: 3b1a7 | I/O control for devices (Set for = '')
2018-12-17T22:35:48.202114056Z 37 PC: 39b21 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:48.205208119Z 25 PC: 3ad5f | Get default drive
2018-12-17T22:35:48.206211957Z 71 PC: 3ad72 | Get current directory
2018-12-17T22:35:48.21051526Z 14 PC: 3adb8 | Set default drive (Drive = 'C')
2018-12-17T22:35:48.212039155Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.214352795Z 26 PC: 3a1f3 | Set disk transfer address
2018-12-17T22:35:48.215442668Z 78 PC: 3a1ff | Find first file
2018-12-17T22:35:48.222130582Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.223576352Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.224980093Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.229170128Z 14 PC: 3adb8 | Set default drive (Drive = 'D')
2018-12-17T22:35:48.230499758Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.232526294Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.233554741Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.235209408Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.239340294Z 14 PC: 3adb8 | Set default drive (Drive = 'E')
2018-12-17T22:35:48.241059291Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.242230589Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.243848538Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.244828048Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.249098305Z 14 PC: 3adb8 | Set default drive (Drive = 'F')
2018-12-17T22:35:48.250631823Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.251906123Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.254115075Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.255477964Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.260796179Z 14 PC: 3adb8 | Set default drive (Drive = 'G')
2018-12-17T22:35:48.262113236Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.26534294Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.266767565Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.269208259Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.273290805Z 14 PC: 3adb8 | Set default drive (Drive = 'H')
2018-12-17T22:35:48.274703388Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.278234997Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.279508153Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.281100629Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.28617061Z 14 PC: 3adb8 | Set default drive (Drive = 'I')
2018-12-17T22:35:48.287207255Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.28832384Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.289856854Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.290861988Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.295601367Z 14 PC: 3adb8 | Set default drive (Drive = 'J')
2018-12-17T22:35:48.2970326Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.299000297Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.300160765Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.302205397Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.306308803Z 14 PC: 3adb8 | Set default drive (Drive = 'K')
2018-12-17T22:35:48.308136948Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.309447796Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.311588286Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.312534816Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.317057671Z 14 PC: 3adb8 | Set default drive (Drive = 'L')
2018-12-17T22:35:48.318223267Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.319636455Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.321671341Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.322650571Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.327319963Z 14 PC: 3adb8 | Set default drive (Drive = 'M')
2018-12-17T22:35:48.328360964Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.330194143Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.331760109Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.333335187Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.33747476Z 14 PC: 3adb8 | Set default drive (Drive = 'N')
2018-12-17T22:35:48.339234101Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.340738303Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.342631779Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.343673067Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.348099937Z 14 PC: 3adb8 | Set default drive (Drive = 'O')
2018-12-17T22:35:48.349187296Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.350538184Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.352170232Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.35353768Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.358517522Z 14 PC: 3adb8 | Set default drive (Drive = 'P')
2018-12-17T22:35:48.35958194Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.361869355Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.363729347Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.365655248Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.369697413Z 14 PC: 3adb8 | Set default drive (Drive = 'Q')
2018-12-17T22:35:48.370771793Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.37287389Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.374351761Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.376784227Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.381241369Z 14 PC: 3adb8 | Set default drive (Drive = 'R')
2018-12-17T22:35:48.383118923Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.384312095Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.385994695Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.386985135Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.392224924Z 14 PC: 3adb8 | Set default drive (Drive = 'S')
2018-12-17T22:35:48.393381844Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.395275478Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.396630761Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.398244614Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.403066271Z 14 PC: 3adb8 | Set default drive (Drive = 'T')
2018-12-17T22:35:48.404198711Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.406129482Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.407580843Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.40974361Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.413742016Z 14 PC: 3adb8 | Set default drive (Drive = 'U')
2018-12-17T22:35:48.415466748Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.416840836Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.418896049Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.419871365Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.424575649Z 14 PC: 3adb8 | Set default drive (Drive = 'V')
2018-12-17T22:35:48.425900502Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.427606545Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.428646029Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.429804093Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.434541392Z 14 PC: 3adb8 | Set default drive (Drive = 'W')
2018-12-17T22:35:48.435607178Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.437822333Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.438909455Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.440861899Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.444865734Z 14 PC: 3adb8 | Set default drive (Drive = 'X')
2018-12-17T22:35:48.446558805Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.447685477Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.449769365Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.45125854Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.457194654Z 14 PC: 3adb8 | Set default drive (Drive = 'Y')
2018-12-17T22:35:48.458141067Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.459617599Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.460625671Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.46163763Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.464739041Z 14 PC: 3adb8 | Set default drive (Drive = 'Z')
2018-12-17T22:35:48.465723688Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.466965753Z 14 PC: 3adb8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.468676254Z 25 PC: 3adbc | Get default drive
2018-12-17T22:35:48.47772558Z 59 PC: 3ae26 | Change current directory
2018-12-17T22:35:48.480231893Z 54 PC: 3a11c | Get free disk space
2018-12-17T22:35:48.482992863Z 26 PC: 3a1f3 | Set disk transfer address
2018-12-17T22:35:48.483808978Z 78 PC: 3a1ff | Find first file
2018-12-17T22:35:48.488503455Z 67 PC: 3a155 | Get or set file attributes
2018-12-17T22:35:48.493302175Z 67 PC: 3a17c | Get or set file attributes
2018-12-17T22:35:48.50388613Z 61 PC: 3ab10 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:35:48.511063171Z 66 PC: 3b348 | Move file pointer
2018-12-17T22:35:48.51319916Z 66 PC: 3b356 | Move file pointer
2018-12-17T22:35:48.514483803Z 66 PC: 3b364 | Move file pointer
2018-12-17T22:35:48.516831688Z 66 PC: 3ac42 | Move file pointer
2018-12-17T22:35:48.518216547Z 63 PC: 3aba2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:48.521157689Z 62 PC: 3ab60 | Close file
2018-12-17T22:35:48.522837087Z 67 PC: 3a17c | Get or set file attributes
2018-12-17T22:35:48.533009102Z 25 PC: 3ad5f | Get default drive
2018-12-17T22:35:48.534185581Z 71 PC: 3ad72 | Get current directory
2018-12-17T22:35:48.537402298Z 26 PC: 3a1f3 | Set disk transfer address
2018-12-17T22:35:48.538704455Z 78 PC: 3a1ff | Find first file
2018-12-17T22:35:48.544663022Z 67 PC: 3a155 | Get or set file attributes
2018-12-17T22:35:48.549918114Z 26 PC: 3a217 | Set disk transfer address
2018-12-17T22:35:48.550921047Z 79 PC: 3a21c | Find next file
2018-12-17T22:35:48.554212901Z 67 PC: 3a155 | Get or set file attributes
2018-12-17T22:35:48.560548176Z 26 PC: 3a217 | Set disk transfer address
2018-12-17T22:35:48.562348232Z 79 PC: 3a21c | Find next file
2018-12-17T22:35:48.565612613Z 67 PC: 3a155 | Get or set file attributes
2018-12-17T22:35:48.571311341Z 26 PC: 3a217 | Set disk transfer address
2018-12-17T22:35:48.57255806Z 79 PC: 3a21c | Find next file
2018-12-17T22:35:48.575700025Z 67 PC: 3a155 | Get or set file attributes
2018-12-17T22:35:48.581413127Z 26 PC: 3a217 | Set disk transfer address
2018-12-17T22:35:48.582752815Z 79 PC: 3a21c | Find next file
2018-12-17T22:35:48.586601432Z 67 PC: 3a155 | Get or set file attributes
2018-12-17T22:35:48.59256085Z 26 PC: 3a217 | Set disk transfer address
2018-12-17T22:35:48.593765136Z 79 PC: 3a21c | Find next file
2018-12-17T22:35:48.596608795Z 67 PC: 3a155 | Get or set file attributes
2018-12-17T22:35:48.602491097Z 26 PC: 3a217 | Set disk transfer address
2018-12-17T22:35:48.603487146Z 79 PC: 3a21c | Find next file
2018-12-17T22:35:48.606461596Z 67 PC: 3a155 | Get or set file attributes
2018-12-17T22:35:48.612707418Z 26 PC: 3a217 | Set disk transfer address
2018-12-17T22:35:48.613683862Z 79 PC: 3a21c | Find next file
2018-12-17T22:35:48.616506963Z 67 PC: 3a155 | Get or set file attributes
2018-12-17T22:35:48.622674085Z 26 PC: 3a217 | Set disk transfer address
2018-12-17T22:35:48.62416472Z 79 PC: 3a21c | Find next file
2018-12-17T22:35:48.626836525Z 67 PC: 3a155 | Get or set file attributes
2018-12-17T22:35:48.633476939Z 26 PC: 3a217 | Set disk transfer address
2018-12-17T22:35:48.634508102Z 79 PC: 3a21c | Find next file
2018-12-17T22:35:48.637659279Z 67 PC: 3a155 | Get or set file attributes
2018-12-17T22:35:48.643466565Z 26 PC: 3a217 | Set disk transfer address
2018-12-17T22:35:48.644919708Z 79 PC: 3a21c | Find next file
2018-12-17T22:35:48.647288407Z 44 PC: 3b2de | Get time 0x3b2de: mov word ptr [0x3e], cx
0x3b2e2: mov word ptr [0x40], dx
0x3b2e6: retf
0x3b2e7: call 0x3b32e
0x3b2ea: jb 0x3b2fb
0x3b2ec: mov cx, word ptr es:[di + 4]
0x3b2f0: cmp cx, 1
0x3b2f3: je 0x3b2fb
0x3b2f5: xor bx, bx
0x3b2f7: push cs
0x3b2f8: call 0x4ae6a
0x3b2fb: retf 4
0x3b2fe: call 0x3b32e
0x3b301: jb 0x3b316
0x3b303: mov ax, cx
0x3b305: mov dx, bx
0x3b307: mov cx, word ptr es:[di + 4]
0x3b30b: cmp cx, 1
0x3b30e: je 0x3b316
0x3b310: xor bx, bx
2018-12-17T22:35:48.650134479Z 26 PC: 3a1f3 | Set disk transfer address
2018-12-17T22:35:48.651100035Z 78 PC: 3a1ff | Find first file
2018-12-17T22:35:48.653228201Z 48 PC: 3acd2 | Get DOS version
2018-12-17T22:35:48.654586406Z 48 PC: 3acd2 | Get DOS version
2018-12-17T22:35:48.656460366Z 67 PC: 3a155 | Get or set file attributes
2018-12-17T22:35:48.662520484Z 67 PC: 3a17c | Get or set file attributes
2018-12-17T22:35:48.673734729Z 61 PC: 3ab10 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:48.680367089Z 87 PC: 3a196 | Get or set file date and time
2018-12-17T22:35:48.682264482Z 60 PC: 3ab10 | Create or truncate file
2018-12-17T22:35:48.694575894Z 63 PC: 3abe3 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:48.70242713Z 64 PC: 3abe3 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:48.711043824Z 62 PC: 3ab60 | Close file
2018-12-17T22:35:48.718956247Z 62 PC: 3ab60 | Close file
2018-12-17T22:35:48.720786591Z 26 PC: 3a1f3 | Set disk transfer address
2018-12-17T22:35:48.721985823Z 78 PC: 3a1ff | Find first file
2018-12-17T22:35:48.730973149Z 48 PC: 3acd2 | Get DOS version
2018-12-17T22:35:48.732736913Z 61 PC: 3ab10 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:48.739481489Z 61 PC: 3ab10 | Open file (Filename = 'A:\TEST')
2018-12-17T22:35:48.74578791Z 64 PC: 3abe3 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:48.754269634Z 67 PC: 3a17c | Get or set file attributes
2018-12-17T22:35:48.764258216Z 87 PC: 3a1c3 | Get or set file date and time
2018-12-17T22:35:48.765619993Z 62 PC: 3ab60 | Close file
2018-12-17T22:35:48.772320797Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:48.773658332Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:48.774921127Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:48.776398887Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:48.778085066Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:48.779105145Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:48.780334545Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:48.781541527Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:48.782577803Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:48.784515006Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:48.785443576Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:48.786917485Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:48.788352441Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:48.790106709Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:48.791271382Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:48.79257473Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:48.793559658Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:48.79466657Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:48.795655011Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:48.796900252Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:48.798044517Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:48.799991319Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:48.80120798Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:48.803089724Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:48.804368705Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:48.806261478Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:48.807612536Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:48.809443647Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:48.810653311Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:48.812598943Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:48.813836065Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:48.816437969Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:48.817441652Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:48.818923292Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:48.81989833Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:48.820877347Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:48.822577767Z 53 PC: 3a3c6 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:48.823884911Z 37 PC: 3a3cf | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:48.829380004Z 48 PC: 3acd2 | Get DOS version
2018-12-17T22:35:48.830647273Z 41 PC: 3a37d | Parse filename
2018-12-17T22:35:48.832699329Z 41 PC: 3a38b | Parse filename
2018-12-17T22:35:48.833880885Z 75 PC: 3a396 | Execute program
2018-12-17T22:35:48.863484803Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:48.864642424Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:48.867124149Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:48.868743063Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:48.871534913Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:48.873033295Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:48.875007968Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:48.876371806Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:48.877582195Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:48.879131236Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:48.880333827Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:48.881526826Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:48.882548651Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:48.884158403Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:48.885198074Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:48.887310549Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:48.888651724Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:48.891285579Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:48.89242551Z 53 PC: 43c3a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:48.894044052Z 37 PC: 43c4f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:48.895062898Z 37 PC: 43c57 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:48.896960792Z 37 PC: 43c5f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:48.89803287Z 37 PC: 43c67 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:48.899784151Z 68 PC: 44997 | I/O control for devices (Set for = '')
2018-12-17T22:35:48.975054564Z 37 PC: 43311 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:48.9764867Z 25 PC: 4454f | Get default drive
2018-12-17T22:35:48.978124757Z 71 PC: 44562 | Get current directory
2018-12-17T22:35:48.981495999Z 14 PC: 445a8 | Set default drive (Drive = 'C')
2018-12-17T22:35:48.983453429Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:48.984647997Z 26 PC: 439e3 | Set disk transfer address
2018-12-17T22:35:48.986198663Z 78 PC: 439ef | Find first file
2018-12-17T22:35:48.991646083Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:48.993536245Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:48.994769346Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:48.99929415Z 14 PC: 445a8 | Set default drive (Drive = 'D')
2018-12-17T22:35:49.000489203Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.001582802Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.003506599Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.004458253Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.009283219Z 14 PC: 445a8 | Set default drive (Drive = 'E')
2018-12-17T22:35:49.010639955Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.012391585Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.013458137Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.014956572Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.01910359Z 14 PC: 445a8 | Set default drive (Drive = 'F')
2018-12-17T22:35:49.02024478Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.02159719Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.023247938Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.024148087Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.02811662Z 14 PC: 445a8 | Set default drive (Drive = 'G')
2018-12-17T22:35:49.029128418Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.030867174Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.032186758Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.0337999Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.037791082Z 14 PC: 445a8 | Set default drive (Drive = 'H')
2018-12-17T22:35:49.039260623Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.040553869Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.041845164Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.043017695Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.047276905Z 14 PC: 445a8 | Set default drive (Drive = 'I')
2018-12-17T22:35:49.048992622Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.050245551Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.051323631Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.05306423Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.057086489Z 14 PC: 445a8 | Set default drive (Drive = 'J')
2018-12-17T22:35:49.058212637Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.05949611Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.060654201Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.061613424Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.066010984Z 14 PC: 445a8 | Set default drive (Drive = 'K')
2018-12-17T22:35:49.067213364Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.068923976Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.070457828Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.071684869Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.075603834Z 14 PC: 445a8 | Set default drive (Drive = 'L')
2018-12-17T22:35:49.076976017Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.080423707Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.081586174Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.083113603Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.087219274Z 14 PC: 445a8 | Set default drive (Drive = 'M')
2018-12-17T22:35:49.088223905Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.090190911Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.091334016Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.093289921Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.097188474Z 14 PC: 445a8 | Set default drive (Drive = 'N')
2018-12-17T22:35:49.108416989Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.109713942Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.111066344Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.113631137Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.117658713Z 14 PC: 445a8 | Set default drive (Drive = 'O')
2018-12-17T22:35:49.119040194Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.120070416Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.121728867Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.122641869Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.127135244Z 14 PC: 445a8 | Set default drive (Drive = 'P')
2018-12-17T22:35:49.128129724Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.129593294Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.130655801Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.132095454Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.136027362Z 14 PC: 445a8 | Set default drive (Drive = 'Q')
2018-12-17T22:35:49.137141534Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.138193968Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.139185914Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.140161558Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.14480924Z 14 PC: 445a8 | Set default drive (Drive = 'R')
2018-12-17T22:35:49.146436581Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.147488844Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.14948784Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.150767656Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.15567366Z 14 PC: 445a8 | Set default drive (Drive = 'S')
2018-12-17T22:35:49.156693889Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.158149974Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.159400435Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.160379906Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.165176332Z 14 PC: 445a8 | Set default drive (Drive = 'T')
2018-12-17T22:35:49.166222955Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.168605769Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.170040899Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.172120526Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.176147374Z 14 PC: 445a8 | Set default drive (Drive = 'U')
2018-12-17T22:35:49.177563271Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.178643632Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.179698788Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.181429692Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.185529355Z 14 PC: 445a8 | Set default drive (Drive = 'V')
2018-12-17T22:35:49.186553948Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.188301907Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.189369123Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.190655171Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.194673263Z 14 PC: 445a8 | Set default drive (Drive = 'W')
2018-12-17T22:35:49.195746047Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.197464161Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.198933258Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.200872558Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.205584547Z 14 PC: 445a8 | Set default drive (Drive = 'X')
2018-12-17T22:35:49.207573189Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.208877755Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.210822233Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.211957257Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.216019044Z 14 PC: 445a8 | Set default drive (Drive = 'Y')
2018-12-17T22:35:49.217631667Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.218704593Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.219790638Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.220738971Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.224756441Z 14 PC: 445a8 | Set default drive (Drive = 'Z')
2018-12-17T22:35:49.225883484Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.227947151Z 14 PC: 445a8 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.229237179Z 25 PC: 445ac | Get default drive
2018-12-17T22:35:49.230158461Z 59 PC: 44616 | Change current directory
2018-12-17T22:35:49.23400617Z 54 PC: 4390c | Get free disk space
2018-12-17T22:35:49.237875826Z 26 PC: 439e3 | Set disk transfer address
2018-12-17T22:35:49.23944865Z 78 PC: 439ef | Find first file
2018-12-17T22:35:49.245823782Z 67 PC: 43945 | Get or set file attributes
2018-12-17T22:35:49.252043708Z 67 PC: 4396c | Get or set file attributes
2018-12-17T22:35:49.261566164Z 61 PC: 44300 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:35:49.268421371Z 66 PC: 44b38 | Move file pointer
2018-12-17T22:35:49.269646663Z 66 PC: 44b46 | Move file pointer
2018-12-17T22:35:49.270809134Z 66 PC: 44b54 | Move file pointer
2018-12-17T22:35:49.272635282Z 66 PC: 44432 | Move file pointer
2018-12-17T22:35:49.273873893Z 63 PC: 44392 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:49.276455783Z 62 PC: 44350 | Close file
2018-12-17T22:35:49.278158526Z 67 PC: 4396c | Get or set file attributes
2018-12-17T22:35:49.287481499Z 25 PC: 4454f | Get default drive
2018-12-17T22:35:49.288529153Z 71 PC: 44562 | Get current directory
2018-12-17T22:35:49.292336135Z 26 PC: 439e3 | Set disk transfer address
2018-12-17T22:35:49.293371529Z 78 PC: 439ef | Find first file
2018-12-17T22:35:49.299461184Z 67 PC: 43945 | Get or set file attributes
2018-12-17T22:35:49.305510826Z 26 PC: 43a07 | Set disk transfer address
2018-12-17T22:35:49.306444062Z 79 PC: 43a0c | Find next file
2018-12-17T22:35:49.309743333Z 67 PC: 43945 | Get or set file attributes
2018-12-17T22:35:49.315316897Z 26 PC: 43a07 | Set disk transfer address
2018-12-17T22:35:49.316519653Z 79 PC: 43a0c | Find next file
2018-12-17T22:35:49.319557921Z 67 PC: 43945 | Get or set file attributes
2018-12-17T22:35:49.325128073Z 26 PC: 43a07 | Set disk transfer address
2018-12-17T22:35:49.326891401Z 79 PC: 43a0c | Find next file
2018-12-17T22:35:49.329656645Z 67 PC: 43945 | Get or set file attributes
2018-12-17T22:35:49.335667315Z 26 PC: 43a07 | Set disk transfer address
2018-12-17T22:35:49.336540792Z 79 PC: 43a0c | Find next file
2018-12-17T22:35:49.339975872Z 67 PC: 43945 | Get or set file attributes
2018-12-17T22:35:49.346098969Z 26 PC: 43a07 | Set disk transfer address
2018-12-17T22:35:49.348223859Z 79 PC: 43a0c | Find next file
2018-12-17T22:35:49.351009308Z 67 PC: 43945 | Get or set file attributes
2018-12-17T22:35:49.356773653Z 26 PC: 43a07 | Set disk transfer address
2018-12-17T22:35:49.358330876Z 79 PC: 43a0c | Find next file
2018-12-17T22:35:49.361759528Z 67 PC: 43945 | Get or set file attributes
2018-12-17T22:35:49.368257654Z 26 PC: 43a07 | Set disk transfer address
2018-12-17T22:35:49.369189149Z 79 PC: 43a0c | Find next file
2018-12-17T22:35:49.372033996Z 67 PC: 43945 | Get or set file attributes
2018-12-17T22:35:49.377588735Z 26 PC: 43a07 | Set disk transfer address
2018-12-17T22:35:49.379049954Z 79 PC: 43a0c | Find next file
2018-12-17T22:35:49.38172663Z 67 PC: 43945 | Get or set file attributes
2018-12-17T22:35:49.387407335Z 26 PC: 43a07 | Set disk transfer address
2018-12-17T22:35:49.388333078Z 79 PC: 43a0c | Find next file
2018-12-17T22:35:49.39169086Z 67 PC: 43945 | Get or set file attributes
2018-12-17T22:35:49.397258226Z 26 PC: 43a07 | Set disk transfer address
2018-12-17T22:35:49.399519071Z 79 PC: 43a0c | Find next file
2018-12-17T22:35:49.401235194Z 44 PC: 44ace | Get time 0x44ace: mov word ptr [0x3e], cx
0x44ad2: mov word ptr [0x40], dx
0x44ad6: retf
0x44ad7: call 0x44b1e
0x44ada: jb 0x44aeb
0x44adc: mov cx, word ptr es:[di + 4]
0x44ae0: cmp cx, 1
0x44ae3: je 0x44aeb
0x44ae5: xor bx, bx
0x44ae7: push cs
0x44ae8: call 0x5465a
0x44aeb: retf 4
0x44aee: call 0x44b1e
0x44af1: jb 0x44b06
0x44af3: mov ax, cx
0x44af5: mov dx, bx
0x44af7: mov cx, word ptr es:[di + 4]
0x44afb: cmp cx, 1
0x44afe: je 0x44b06
0x44b00: xor bx, bx
2018-12-17T22:35:49.403515586Z 26 PC: 439e3 | Set disk transfer address
2018-12-17T22:35:49.404251259Z 78 PC: 439ef | Find first file
2018-12-17T22:35:49.40576428Z 48 PC: 444c2 | Get DOS version
2018-12-17T22:35:49.40691884Z 48 PC: 444c2 | Get DOS version
2018-12-17T22:35:49.407891599Z 67 PC: 43945 | Get or set file attributes
2018-12-17T22:35:49.41198801Z 67 PC: 4396c | Get or set file attributes
2018-12-17T22:35:49.420929926Z 61 PC: 44300 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:49.428348598Z 87 PC: 43986 | Get or set file date and time
2018-12-17T22:35:49.429885367Z 60 PC: 44300 | Create or truncate file
2018-12-17T22:35:49.44185397Z 63 PC: 443d3 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:49.449557657Z 64 PC: 443d3 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:49.458032317Z 62 PC: 44350 | Close file
2018-12-17T22:35:49.46602526Z 62 PC: 44350 | Close file
2018-12-17T22:35:49.4678463Z 26 PC: 439e3 | Set disk transfer address
2018-12-17T22:35:49.469434571Z 78 PC: 439ef | Find first file
2018-12-17T22:35:49.478156038Z 48 PC: 444c2 | Get DOS version
2018-12-17T22:35:49.480059417Z 61 PC: 44300 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:49.486749198Z 61 PC: 44300 | Open file (Filename = 'A:\TEST')
2018-12-17T22:35:49.493969648Z 64 PC: 443d3 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:49.502181244Z 67 PC: 4396c | Get or set file attributes
2018-12-17T22:35:49.512356686Z 87 PC: 439b3 | Get or set file date and time
2018-12-17T22:35:49.514112753Z 62 PC: 44350 | Close file
2018-12-17T22:35:49.520694581Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:49.522263124Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:49.523217326Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:49.524863605Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:49.525914438Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:49.527317818Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:49.52826055Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:49.529946605Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:49.530933771Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:49.532466321Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:49.533434761Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:49.535146363Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:49.536190686Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:49.537383967Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:49.538453274Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:49.53933299Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:49.540919142Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:49.541952778Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:49.543518823Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:49.544569116Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:49.546236478Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:49.547283832Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:49.548823344Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:49.54992922Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:49.551252777Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:49.552229565Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:49.553121748Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:49.554546218Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:49.555477643Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:49.556989478Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:49.557896861Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:49.559454765Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:49.560395808Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:49.5613631Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:49.562605689Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:49.563520293Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:49.56489224Z 53 PC: 43bb6 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:49.566300814Z 37 PC: 43bbf | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:49.568975079Z 48 PC: 444c2 | Get DOS version
2018-12-17T22:35:49.570633269Z 41 PC: 43b6d | Parse filename
2018-12-17T22:35:49.573072371Z 41 PC: 43b7b | Parse filename
2018-12-17T22:35:49.57433894Z 75 PC: 43b86 | Execute program
2018-12-17T22:35:49.591873796Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:49.593683556Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:49.594673636Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:49.596139962Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:49.597528037Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:49.598953024Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:49.599914693Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:49.600831447Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:49.601862956Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:49.602810246Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:49.603868318Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:49.604782414Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:49.606066654Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:49.607031477Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:49.607878014Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:49.609286679Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:49.610298463Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:49.611977432Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:49.612974506Z 53 PC: 4d42a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:49.614644281Z 37 PC: 4d43f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:49.615555565Z 37 PC: 4d447 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:49.616741603Z 37 PC: 4d44f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:49.617702097Z 37 PC: 4d457 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:49.619012372Z 68 PC: 4e187 | I/O control for devices (Set for = '')
2018-12-17T22:35:49.676631712Z 37 PC: 4cb01 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:49.677978289Z 25 PC: 4dd3f | Get default drive
2018-12-17T22:35:49.679085663Z 71 PC: 4dd52 | Get current directory
2018-12-17T22:35:49.682216803Z 14 PC: 4dd98 | Set default drive (Drive = 'C')
2018-12-17T22:35:49.683467081Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.685565899Z 26 PC: 4d1d3 | Set disk transfer address
2018-12-17T22:35:49.686688982Z 78 PC: 4d1df | Find first file
2018-12-17T22:35:49.69203958Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.693077546Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.694547286Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.69853577Z 14 PC: 4dd98 | Set default drive (Drive = 'D')
2018-12-17T22:35:49.699841937Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.700918661Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.701978706Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.704002669Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.707985895Z 14 PC: 4dd98 | Set default drive (Drive = 'E')
2018-12-17T22:35:49.709140371Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.710184648Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.711230867Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.71278526Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.716665468Z 14 PC: 4dd98 | Set default drive (Drive = 'F')
2018-12-17T22:35:49.71841179Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.719479285Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.720749697Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.721692312Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.725897098Z 14 PC: 4dd98 | Set default drive (Drive = 'G')
2018-12-17T22:35:49.727836611Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.729181731Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.730497376Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.732981884Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.737251918Z 14 PC: 4dd98 | Set default drive (Drive = 'H')
2018-12-17T22:35:49.739425082Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.740490594Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.742373577Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.743578832Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.748266788Z 14 PC: 4dd98 | Set default drive (Drive = 'I')
2018-12-17T22:35:49.749564709Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.751511456Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.752551731Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.753922174Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.757927753Z 14 PC: 4dd98 | Set default drive (Drive = 'J')
2018-12-17T22:35:49.758943981Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.761239875Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.762423167Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.764604503Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.768609306Z 14 PC: 4dd98 | Set default drive (Drive = 'K')
2018-12-17T22:35:49.770633682Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.771988991Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.773292878Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.774519953Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.778968802Z 14 PC: 4dd98 | Set default drive (Drive = 'L')
2018-12-17T22:35:49.780652854Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.781813529Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.783916897Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.78511771Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.790431259Z 14 PC: 4dd98 | Set default drive (Drive = 'M')
2018-12-17T22:35:49.791553261Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.792974045Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.795167054Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.796429175Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.802643326Z 14 PC: 4dd98 | Set default drive (Drive = 'N')
2018-12-17T22:35:49.803975288Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.81122342Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.812608187Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.814956023Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.819294842Z 14 PC: 4dd98 | Set default drive (Drive = 'O')
2018-12-17T22:35:49.8214533Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.822863875Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.824235773Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.825672989Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.829635432Z 14 PC: 4dd98 | Set default drive (Drive = 'P')
2018-12-17T22:35:49.831297857Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.832551312Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.833892222Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.836313027Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.840482652Z 14 PC: 4dd98 | Set default drive (Drive = 'Q')
2018-12-17T22:35:49.842028008Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.843579339Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.844972698Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.847219151Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.851300921Z 14 PC: 4dd98 | Set default drive (Drive = 'R')
2018-12-17T22:35:49.854126424Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.855255962Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.856624326Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.858237197Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.862536108Z 14 PC: 4dd98 | Set default drive (Drive = 'S')
2018-12-17T22:35:49.865090766Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.866193514Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.868440281Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.869669377Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.875411308Z 14 PC: 4dd98 | Set default drive (Drive = 'T')
2018-12-17T22:35:49.876708598Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.878584332Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.879738617Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.881220646Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.886722275Z 14 PC: 4dd98 | Set default drive (Drive = 'U')
2018-12-17T22:35:49.887816703Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.901543289Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.902705969Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.904032489Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.910400062Z 14 PC: 4dd98 | Set default drive (Drive = 'V')
2018-12-17T22:35:49.911469087Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.913660879Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.915256046Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.920093382Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.924620477Z 14 PC: 4dd98 | Set default drive (Drive = 'W')
2018-12-17T22:35:49.927446093Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.928841845Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.930983445Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.932022484Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.936352098Z 14 PC: 4dd98 | Set default drive (Drive = 'X')
2018-12-17T22:35:49.937457899Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.938547776Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.940307081Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.941278342Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.945918744Z 14 PC: 4dd98 | Set default drive (Drive = 'Y')
2018-12-17T22:35:49.946941057Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.947986383Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.949100729Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.949848193Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.952942667Z 14 PC: 4dd98 | Set default drive (Drive = 'Z')
2018-12-17T22:35:49.953787102Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.95506679Z 14 PC: 4dd98 | Set default drive (Drive = 'A')
2018-12-17T22:35:49.956285945Z 25 PC: 4dd9c | Get default drive
2018-12-17T22:35:49.957093499Z 59 PC: 4de06 | Change current directory
2018-12-17T22:35:49.960803904Z 54 PC: 4d0fc | Get free disk space
2018-12-17T22:35:49.964830395Z 26 PC: 4d1d3 | Set disk transfer address
2018-12-17T22:35:49.966026982Z 78 PC: 4d1df | Find first file
2018-12-17T22:35:49.972546007Z 67 PC: 4d135 | Get or set file attributes
2018-12-17T22:35:49.97910264Z 67 PC: 4d15c | Get or set file attributes
2018-12-17T22:35:49.989969123Z 61 PC: 4daf0 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:35:49.996675914Z 66 PC: 4e328 | Move file pointer
2018-12-17T22:35:49.998490798Z 66 PC: 4e336 | Move file pointer
2018-12-17T22:35:49.999943588Z 66 PC: 4e344 | Move file pointer
2018-12-17T22:35:50.001286141Z 66 PC: 4dc22 | Move file pointer
2018-12-17T22:35:50.003454455Z 63 PC: 4db82 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:50.006042668Z 62 PC: 4db40 | Close file
2018-12-17T22:35:50.007930417Z 67 PC: 4d15c | Get or set file attributes
2018-12-17T22:35:50.017512283Z 25 PC: 4dd3f | Get default drive
2018-12-17T22:35:50.01847447Z 71 PC: 4dd52 | Get current directory
2018-12-17T22:35:50.022093916Z 26 PC: 4d1d3 | Set disk transfer address
2018-12-17T22:35:50.023316288Z 78 PC: 4d1df | Find first file
2018-12-17T22:35:50.029978581Z 67 PC: 4d135 | Get or set file attributes
2018-12-17T22:35:50.035541324Z 26 PC: 4d1f7 | Set disk transfer address
2018-12-17T22:35:50.036415079Z 79 PC: 4d1fc | Find next file
2018-12-17T22:35:50.039610694Z 67 PC: 4d135 | Get or set file attributes
2018-12-17T22:35:50.04508693Z 26 PC: 4d1f7 | Set disk transfer address
2018-12-17T22:35:50.046874353Z 79 PC: 4d1fc | Find next file
2018-12-17T22:35:50.049601807Z 67 PC: 4d135 | Get or set file attributes
2018-12-17T22:35:50.05505382Z 26 PC: 4d1f7 | Set disk transfer address
2018-12-17T22:35:50.056642938Z 79 PC: 4d1fc | Find next file
2018-12-17T22:35:50.059412289Z 67 PC: 4d135 | Get or set file attributes
2018-12-17T22:35:50.065185281Z 26 PC: 4d1f7 | Set disk transfer address
2018-12-17T22:35:50.066277485Z 79 PC: 4d1fc | Find next file
2018-12-17T22:35:50.069156165Z 67 PC: 4d135 | Get or set file attributes
2018-12-17T22:35:50.075168333Z 26 PC: 4d1f7 | Set disk transfer address
2018-12-17T22:35:50.076153221Z 79 PC: 4d1fc | Find next file
2018-12-17T22:35:50.079335343Z 67 PC: 4d135 | Get or set file attributes
2018-12-17T22:35:50.084821939Z 26 PC: 4d1f7 | Set disk transfer address
2018-12-17T22:35:50.086136756Z 79 PC: 4d1fc | Find next file
2018-12-17T22:35:50.090278679Z 67 PC: 4d135 | Get or set file attributes
2018-12-17T22:35:50.095954176Z 26 PC: 4d1f7 | Set disk transfer address
2018-12-17T22:35:50.097696949Z 79 PC: 4d1fc | Find next file
2018-12-17T22:35:50.101010273Z 67 PC: 4d135 | Get or set file attributes
2018-12-17T22:35:50.107302298Z 26 PC: 4d1f7 | Set disk transfer address
2018-12-17T22:35:50.109096751Z 79 PC: 4d1fc | Find next file
2018-12-17T22:35:50.112284206Z 67 PC: 4d135 | Get or set file attributes
2018-12-17T22:35:50.119839103Z 26 PC: 4d1f7 | Set disk transfer address
2018-12-17T22:35:50.121981064Z 79 PC: 4d1fc | Find next file
2018-12-17T22:35:50.126644535Z 67 PC: 4d135 | Get or set file attributes
2018-12-17T22:35:50.13241737Z 26 PC: 4d1f7 | Set disk transfer address
2018-12-17T22:35:50.134143428Z 79 PC: 4d1fc | Find next file
2018-12-17T22:35:50.135854262Z 44 PC: 4e2be | Get time 0x4e2be: mov word ptr [0x3e], cx
0x4e2c2: mov word ptr [0x40], dx
0x4e2c6: retf
0x4e2c7: call 0x4e30e
0x4e2ca: jb 0x4e2db
0x4e2cc: mov cx, word ptr es:[di + 4]
0x4e2d0: cmp cx, 1
0x4e2d3: je 0x4e2db
0x4e2d5: xor bx, bx
0x4e2d7: push cs
0x4e2d8: call 0x5de4a
0x4e2db: retf 4
0x4e2de: call 0x4e30e
0x4e2e1: jb 0x4e2f6
0x4e2e3: mov ax, cx
0x4e2e5: mov dx, bx
0x4e2e7: mov cx, word ptr es:[di + 4]
0x4e2eb: cmp cx, 1
0x4e2ee: je 0x4e2f6
0x4e2f0: xor bx, bx
2018-12-17T22:35:50.137624828Z 26 PC: 4d1d3 | Set disk transfer address
2018-12-17T22:35:50.138618629Z 78 PC: 4d1df | Find first file
2018-12-17T22:35:50.139884966Z 48 PC: 4dcb2 | Get DOS version
2018-12-17T22:35:50.141233333Z 48 PC: 4dcb2 | Get DOS version
2018-12-17T22:35:50.142339545Z 67 PC: 4d135 | Get or set file attributes
2018-12-17T22:35:50.14698272Z 67 PC: 4d15c | Get or set file attributes
2018-12-17T22:35:50.157234092Z 61 PC: 4daf0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:50.164310017Z 87 PC: 4d176 | Get or set file date and time
2018-12-17T22:35:50.166041861Z 60 PC: 4daf0 | Create or truncate file
2018-12-17T22:35:50.178788206Z 63 PC: 4dbc3 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:50.187197538Z 64 PC: 4dbc3 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:50.196582247Z 62 PC: 4db40 | Close file
2018-12-17T22:35:50.203952075Z 62 PC: 4db40 | Close file
2018-12-17T22:35:50.205913881Z 26 PC: 4d1d3 | Set disk transfer address
2018-12-17T22:35:50.207117444Z 78 PC: 4d1df | Find first file
2018-12-17T22:35:50.216268946Z 48 PC: 4dcb2 | Get DOS version
2018-12-17T22:35:50.217638618Z 61 PC: 4daf0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:50.224756078Z 61 PC: 4daf0 | Open file (Filename = 'A:\TEST')
2018-12-17T22:35:50.231591228Z 64 PC: 4dbc3 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:50.240617747Z 67 PC: 4d15c | Get or set file attributes
2018-12-17T22:35:50.252627934Z 87 PC: 4d1a3 | Get or set file date and time
2018-12-17T22:35:50.253878022Z 62 PC: 4db40 | Close file
2018-12-17T22:35:50.258589771Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:50.259758922Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:50.260824062Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:50.263117464Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:50.265145572Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:50.267257258Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:50.268673436Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:50.270029633Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:50.271757963Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:50.272852613Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:50.273966538Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:50.275917015Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:50.277050618Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:50.279292754Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:50.280390528Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:50.281989868Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:50.286299053Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:50.294754424Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:50.296683583Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:50.297764645Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:50.299507904Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:50.300732296Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:50.304962069Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:50.308562254Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:50.309799475Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:50.311292146Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:50.313348841Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:50.31470864Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:50.316323695Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:50.317556748Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:50.318533932Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:50.320401656Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:50.32139419Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:50.322785436Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:50.32406439Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:50.325185251Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:50.326558078Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:50.327692495Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:50.32888925Z 48 PC: 4dcb2 | Get DOS version
2018-12-17T22:35:50.330552276Z 41 PC: 4d35d | Parse filename
2018-12-17T22:35:50.331863707Z 41 PC: 4d36b | Parse filename
2018-12-17T22:35:50.333312535Z 75 PC: 4d376 | Execute program
2018-12-17T22:35:50.355169058Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:50.3563032Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:50.357471299Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:50.35888402Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:50.360713674Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:50.362506254Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:50.363530052Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:50.364750056Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:50.36600118Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:50.367041777Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:50.368870271Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:50.37039824Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:50.372314169Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:50.373911745Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:50.37543283Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:50.377268567Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:50.378325052Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:50.379545145Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:50.38126847Z 53 PC: 56c1a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:50.382486633Z 37 PC: 56c2f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:50.384303041Z 37 PC: 56c37 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:50.385306865Z 37 PC: 56c3f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:50.386650307Z 37 PC: 56c47 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:50.387821706Z 68 PC: 57977 | I/O control for devices (Set for = '')
2018-12-17T22:35:50.451542796Z 37 PC: 562f1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:50.454015253Z 25 PC: 5752f | Get default drive
2018-12-17T22:35:50.455195394Z 71 PC: 57542 | Get current directory
2018-12-17T22:35:50.458715716Z 14 PC: 57588 | Set default drive (Drive = 'C')
2018-12-17T22:35:50.461204048Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.463243116Z 26 PC: 569c3 | Set disk transfer address
2018-12-17T22:35:50.465238836Z 78 PC: 569cf | Find first file
2018-12-17T22:35:50.470971342Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.472628375Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.474835935Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.479044495Z 14 PC: 57588 | Set default drive (Drive = 'D')
2018-12-17T22:35:50.482128001Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.48361511Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.485763604Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.487061143Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.491499789Z 14 PC: 57588 | Set default drive (Drive = 'E')
2018-12-17T22:35:50.493968965Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.495862532Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.498147591Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.49951359Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.503856384Z 14 PC: 57588 | Set default drive (Drive = 'F')
2018-12-17T22:35:50.505350292Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.506401195Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.507764416Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.508736997Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.512756773Z 14 PC: 57588 | Set default drive (Drive = 'G')
2018-12-17T22:35:50.514853306Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.515972376Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.517253832Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.518345979Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.522347268Z 14 PC: 57588 | Set default drive (Drive = 'H')
2018-12-17T22:35:50.524643164Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.525759811Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.52717342Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.528358611Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.532309768Z 14 PC: 57588 | Set default drive (Drive = 'I')
2018-12-17T22:35:50.53372227Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.534883966Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.535935451Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.537253027Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.541309003Z 14 PC: 57588 | Set default drive (Drive = 'J')
2018-12-17T22:35:50.542309072Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.543871751Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.545193822Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.546198042Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.550482791Z 14 PC: 57588 | Set default drive (Drive = 'K')
2018-12-17T22:35:50.551847908Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.553274123Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.554582343Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.555511373Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.559708008Z 14 PC: 57588 | Set default drive (Drive = 'L')
2018-12-17T22:35:50.56066633Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.562326589Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.56360192Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.564996741Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.568958069Z 14 PC: 57588 | Set default drive (Drive = 'M')
2018-12-17T22:35:50.569945574Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.57465186Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.575947369Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.577135236Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.581970354Z 14 PC: 57588 | Set default drive (Drive = 'N')
2018-12-17T22:35:50.583036517Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.58638927Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.587565835Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.591190868Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.595311642Z 14 PC: 57588 | Set default drive (Drive = 'O')
2018-12-17T22:35:50.596392418Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.5991681Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.600628324Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.603490407Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.60769754Z 14 PC: 57588 | Set default drive (Drive = 'P')
2018-12-17T22:35:50.609083935Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.610822305Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.612257015Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.616854922Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.621005825Z 14 PC: 57588 | Set default drive (Drive = 'Q')
2018-12-17T22:35:50.622504788Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.624398206Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.625537932Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.626496539Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.631155216Z 14 PC: 57588 | Set default drive (Drive = 'R')
2018-12-17T22:35:50.63239474Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.633741297Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.639913595Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.640987791Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.645979481Z 14 PC: 57588 | Set default drive (Drive = 'S')
2018-12-17T22:35:50.647655862Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.649178899Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.652201582Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.653567679Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.658189888Z 14 PC: 57588 | Set default drive (Drive = 'T')
2018-12-17T22:35:50.659889948Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.661441368Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.663322794Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.664685341Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.668596793Z 14 PC: 57588 | Set default drive (Drive = 'U')
2018-12-17T22:35:50.670394246Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.678467416Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.679866949Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.680845382Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.686534696Z 14 PC: 57588 | Set default drive (Drive = 'V')
2018-12-17T22:35:50.688698755Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.690815253Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.692340516Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.694189759Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.698598427Z 14 PC: 57588 | Set default drive (Drive = 'W')
2018-12-17T22:35:50.69996953Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.701854874Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.703232535Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.704230138Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.708795382Z 14 PC: 57588 | Set default drive (Drive = 'X')
2018-12-17T22:35:50.710251678Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.711679777Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.713964134Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.715076463Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.719577505Z 14 PC: 57588 | Set default drive (Drive = 'Y')
2018-12-17T22:35:50.721389487Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.722825329Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.725116855Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.726426097Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.7309212Z 14 PC: 57588 | Set default drive (Drive = 'Z')
2018-12-17T22:35:50.733430557Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.734843993Z 14 PC: 57588 | Set default drive (Drive = 'A')
2018-12-17T22:35:50.737476991Z 25 PC: 5758c | Get default drive
2018-12-17T22:35:50.738631645Z 59 PC: 575f6 | Change current directory
2018-12-17T22:35:50.743681149Z 54 PC: 568ec | Get free disk space
2018-12-17T22:35:50.747609123Z 26 PC: 569c3 | Set disk transfer address
2018-12-17T22:35:50.748501874Z 78 PC: 569cf | Find first file
2018-12-17T22:35:50.755618556Z 67 PC: 56925 | Get or set file attributes
2018-12-17T22:35:50.761613741Z 67 PC: 5694c | Get or set file attributes
2018-12-17T22:35:50.772722046Z 61 PC: 572e0 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:35:50.78011418Z 66 PC: 57b18 | Move file pointer
2018-12-17T22:35:50.781936029Z 66 PC: 57b26 | Move file pointer
2018-12-17T22:35:50.783668347Z 66 PC: 57b34 | Move file pointer
2018-12-17T22:35:50.785952905Z 66 PC: 57412 | Move file pointer
2018-12-17T22:35:50.787501253Z 63 PC: 57372 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:50.790113478Z 62 PC: 57330 | Close file
2018-12-17T22:35:50.793176262Z 67 PC: 5694c | Get or set file attributes
2018-12-17T22:35:50.807770145Z 25 PC: 5752f | Get default drive
2018-12-17T22:35:50.809303007Z 71 PC: 57542 | Get current directory
2018-12-17T22:35:50.814243306Z 26 PC: 569c3 | Set disk transfer address
2018-12-17T22:35:50.816081296Z 78 PC: 569cf | Find first file
2018-12-17T22:35:50.822405442Z 67 PC: 56925 | Get or set file attributes
2018-12-17T22:35:50.828630687Z 26 PC: 569e7 | Set disk transfer address
2018-12-17T22:35:50.829594938Z 79 PC: 569ec | Find next file
2018-12-17T22:35:50.832319882Z 67 PC: 56925 | Get or set file attributes
2018-12-17T22:35:50.838977612Z 26 PC: 569e7 | Set disk transfer address
2018-12-17T22:35:50.84017093Z 79 PC: 569ec | Find next file
2018-12-17T22:35:50.843102058Z 67 PC: 56925 | Get or set file attributes
2018-12-17T22:35:50.849743456Z 26 PC: 569e7 | Set disk transfer address
2018-12-17T22:35:50.85122169Z 79 PC: 569ec | Find next file
2018-12-17T22:35:50.854188377Z 67 PC: 56925 | Get or set file attributes
2018-12-17T22:35:50.86044098Z 26 PC: 569e7 | Set disk transfer address
2018-12-17T22:35:50.861447487Z 79 PC: 569ec | Find next file
2018-12-17T22:35:50.865353228Z 67 PC: 56925 | Get or set file attributes
2018-12-17T22:35:50.871002744Z 26 PC: 569e7 | Set disk transfer address
2018-12-17T22:35:50.873375537Z 79 PC: 569ec | Find next file
2018-12-17T22:35:50.876395292Z 67 PC: 56925 | Get or set file attributes
2018-12-17T22:35:50.882009729Z 26 PC: 569e7 | Set disk transfer address
2018-12-17T22:35:50.884633109Z 79 PC: 569ec | Find next file
2018-12-17T22:35:50.887487294Z 67 PC: 56925 | Get or set file attributes
2018-12-17T22:35:50.89496056Z 26 PC: 569e7 | Set disk transfer address
2018-12-17T22:35:50.896330047Z 79 PC: 569ec | Find next file
2018-12-17T22:35:50.904627942Z 67 PC: 56925 | Get or set file attributes
2018-12-17T22:35:50.911690096Z 26 PC: 569e7 | Set disk transfer address
2018-12-17T22:35:50.912824299Z 79 PC: 569ec | Find next file
2018-12-17T22:35:50.917363595Z 67 PC: 56925 | Get or set file attributes
2018-12-17T22:35:50.923328458Z 26 PC: 569e7 | Set disk transfer address
2018-12-17T22:35:50.924493374Z 79 PC: 569ec | Find next file
2018-12-17T22:35:50.927919459Z 67 PC: 56925 | Get or set file attributes
2018-12-17T22:35:50.933866911Z 26 PC: 569e7 | Set disk transfer address
2018-12-17T22:35:50.934915285Z 79 PC: 569ec | Find next file
2018-12-17T22:35:50.93655729Z 44 PC: 57aae | Get time 0x57aae: mov word ptr [0x3e], cx
0x57ab2: mov word ptr [0x40], dx
0x57ab6: retf
0x57ab7: call 0x57afe
0x57aba: jb 0x57acb
0x57abc: mov cx, word ptr es:[di + 4]
0x57ac0: cmp cx, 1
0x57ac3: je 0x57acb
0x57ac5: xor bx, bx
0x57ac7: push cs
0x57ac8: call 0x6763a
0x57acb: retf 4
0x57ace: call 0x57afe
0x57ad1: jb 0x57ae6
0x57ad3: mov ax, cx
0x57ad5: mov dx, bx
0x57ad7: mov cx, word ptr es:[di + 4]
0x57adb: cmp cx, 1
0x57ade: je 0x57ae6
0x57ae0: xor bx, bx
2018-12-17T22:35:50.939026837Z 26 PC: 569c3 | Set disk transfer address
2018-12-17T22:35:50.940351793Z 78 PC: 569cf | Find first file
2018-12-17T22:35:50.942849042Z 48 PC: 574a2 | Get DOS version
2018-12-17T22:35:50.94446869Z 48 PC: 574a2 | Get DOS version
2018-12-17T22:35:50.946834931Z 67 PC: 56925 | Get or set file attributes
2018-12-17T22:35:50.952522114Z 67 PC: 5694c | Get or set file attributes
2018-12-17T22:35:50.963698247Z 61 PC: 572e0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:50.970401713Z 87 PC: 56966 | Get or set file date and time
2018-12-17T22:35:50.972163599Z 60 PC: 572e0 | Create or truncate file
2018-12-17T22:35:50.98592131Z 63 PC: 573b3 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:50.993496757Z 64 PC: 573b3 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:51.004027208Z 62 PC: 57330 | Close file
2018-12-17T22:35:51.012064789Z 62 PC: 57330 | Close file
2018-12-17T22:35:51.014218137Z 26 PC: 569c3 | Set disk transfer address
2018-12-17T22:35:51.017481615Z 78 PC: 569cf | Find first file
2018-12-17T22:35:51.026723407Z 48 PC: 574a2 | Get DOS version
2018-12-17T22:35:51.028573468Z 61 PC: 572e0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:51.035709824Z 61 PC: 572e0 | Open file (Filename = 'A:\TEST')
2018-12-17T22:35:51.042399075Z 64 PC: 573b3 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:51.052610022Z 67 PC: 5694c | Get or set file attributes
2018-12-17T22:35:51.064088118Z 87 PC: 56993 | Get or set file date and time
2018-12-17T22:35:51.065345509Z 62 PC: 57330 | Close file
2018-12-17T22:35:51.074540126Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:51.076099926Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:51.078676527Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:51.07985696Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:51.080970351Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:51.087781401Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:51.089333008Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:51.092222336Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:51.09355036Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:51.094738943Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:51.096923419Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:51.098494401Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:51.099682903Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:51.103593129Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:51.104830551Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:51.107570073Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:51.108757465Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:51.113356279Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:51.114562538Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:51.115806535Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:51.118299883Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:51.119612815Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:51.121218675Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:51.122434997Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:51.123493391Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:51.125744961Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:51.12682997Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:51.127979956Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:51.129784286Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:51.131085644Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:51.132514933Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:51.134305104Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:51.135251359Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:51.136780209Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:51.137936426Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:51.138955149Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:51.140837205Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:51.142014658Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:51.143297118Z 48 PC: 574a2 | Get DOS version
2018-12-17T22:35:51.146119655Z 41 PC: 56b4d | Parse filename
2018-12-17T22:35:51.147359389Z 41 PC: 56b5b | Parse filename
2018-12-17T22:35:51.14908092Z 75 PC: 56b66 | Execute program
2018-12-17T22:35:51.167803774Z 53 PC: 6040a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:51.168879755Z 53 PC: 6040a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:51.170538002Z 53 PC: 6040a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:51.171634319Z 53 PC: 6040a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:51.172967904Z 53 PC: 6040a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:51.175140945Z 53 PC: 6040a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:51.176028334Z 53 PC: 6040a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:51.177034645Z 53 PC: 6040a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:51.17885071Z 53 PC: 6040a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:51.179895468Z 53 PC: 6040a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:51.183313643Z 53 PC: 6040a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:51.18468068Z 53 PC: 6040a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:51.186057036Z 53 PC: 6040a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:51.1879207Z 53 PC: 6040a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:51.1894056Z 53 PC: 6040a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:51.191835859Z 53 PC: 6040a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:51.193163503Z 53 PC: 6040a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:51.19442018Z 53 PC: 6040a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:51.196855457Z 53 PC: 6040a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:51.198173933Z 37 PC: 6041f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:51.200806527Z 37 PC: 60427 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:51.201844939Z 37 PC: 6042f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:51.203093183Z 37 PC: 60437 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:51.205399569Z 68 PC: 61167 | I/O control for devices (Set for = '')
2018-12-17T22:35:51.274336063Z 37 PC: 5fae1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:51.277868309Z 25 PC: 60d1f | Get default drive
2018-12-17T22:35:51.279211215Z 71 PC: 60d32 | Get current directory
2018-12-17T22:35:51.282509993Z 14 PC: 60d78 | Set default drive (Drive = 'C')
2018-12-17T22:35:51.285756345Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.287337082Z 26 PC: 601b3 | Set disk transfer address
2018-12-17T22:35:51.289992277Z 78 PC: 601bf | Find first file
2018-12-17T22:35:51.296111985Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.297757862Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.300262962Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.304660265Z 14 PC: 60d78 | Set default drive (Drive = 'D')
2018-12-17T22:35:51.308181065Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.309766216Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.311691279Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.313322109Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.318495208Z 14 PC: 60d78 | Set default drive (Drive = 'E')
2018-12-17T22:35:51.320533688Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.32252445Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.32407785Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.325987535Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.330865853Z 14 PC: 60d78 | Set default drive (Drive = 'F')
2018-12-17T22:35:51.332643489Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.335604742Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.337262476Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.338762751Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.344721074Z 14 PC: 60d78 | Set default drive (Drive = 'G')
2018-12-17T22:35:51.346108213Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.348691972Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.349981316Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.351399907Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.356117026Z 14 PC: 60d78 | Set default drive (Drive = 'H')
2018-12-17T22:35:51.35748091Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.359334546Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.360829904Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.362142223Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.367940739Z 14 PC: 60d78 | Set default drive (Drive = 'I')
2018-12-17T22:35:51.369180991Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.370158059Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.372501125Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.37387962Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.378398356Z 14 PC: 60d78 | Set default drive (Drive = 'J')
2018-12-17T22:35:51.38032636Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.382508455Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.384576252Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.385621693Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.389710716Z 14 PC: 60d78 | Set default drive (Drive = 'K')
2018-12-17T22:35:51.391351214Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.392433526Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.39363786Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.394857613Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.398736798Z 14 PC: 60d78 | Set default drive (Drive = 'L')
2018-12-17T22:35:51.400496357Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.401595002Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.402631649Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.404348648Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.408333625Z 14 PC: 60d78 | Set default drive (Drive = 'M')
2018-12-17T22:35:51.410064957Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.411172101Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.41226264Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.414154161Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.418010562Z 14 PC: 60d78 | Set default drive (Drive = 'N')
2018-12-17T22:35:51.41946535Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.420649805Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.421583683Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.422971518Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.426956428Z 14 PC: 60d78 | Set default drive (Drive = 'O')
2018-12-17T22:35:51.427846564Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.429657078Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.430686093Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.43148421Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.436684166Z 14 PC: 60d78 | Set default drive (Drive = 'P')
2018-12-17T22:35:51.43767438Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.439399885Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.440456378Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.441279806Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.446145686Z 14 PC: 60d78 | Set default drive (Drive = 'Q')
2018-12-17T22:35:51.447018233Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.448602403Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.449810579Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.45083465Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.456358342Z 14 PC: 60d78 | Set default drive (Drive = 'R')
2018-12-17T22:35:51.457505979Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.458604117Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.460214735Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.462723893Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.466720147Z 14 PC: 60d78 | Set default drive (Drive = 'S')
2018-12-17T22:35:51.467927596Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.469100213Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.470188063Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.471741283Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.475870873Z 14 PC: 60d78 | Set default drive (Drive = 'T')
2018-12-17T22:35:51.476856852Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.478283512Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.479493364Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.480418164Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.485722812Z 14 PC: 60d78 | Set default drive (Drive = 'U')
2018-12-17T22:35:51.486901177Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.488069588Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.489913943Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.490925998Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.497570701Z 14 PC: 60d78 | Set default drive (Drive = 'V')
2018-12-17T22:35:51.499008032Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.500453702Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.503285884Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.504608652Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.509199575Z 14 PC: 60d78 | Set default drive (Drive = 'W')
2018-12-17T22:35:51.510381389Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.511631507Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.513875667Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.51507422Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.519207667Z 14 PC: 60d78 | Set default drive (Drive = 'X')
2018-12-17T22:35:51.520947397Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.522382644Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.523774812Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.525625994Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.529751335Z 14 PC: 60d78 | Set default drive (Drive = 'Y')
2018-12-17T22:35:51.532312636Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.533659001Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.535048324Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.537538205Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.541631846Z 14 PC: 60d78 | Set default drive (Drive = 'Z')
2018-12-17T22:35:51.545720278Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.548138017Z 14 PC: 60d78 | Set default drive (Drive = 'A')
2018-12-17T22:35:51.549335284Z 25 PC: 60d7c | Get default drive
2018-12-17T22:35:51.55176458Z 59 PC: 60de6 | Change current directory
2018-12-17T22:35:51.55698571Z 54 PC: 600dc | Get free disk space
2018-12-17T22:35:51.561633754Z 26 PC: 601b3 | Set disk transfer address
2018-12-17T22:35:51.563082494Z 78 PC: 601bf | Find first file
2018-12-17T22:35:51.569737053Z 67 PC: 60115 | Get or set file attributes
2018-12-17T22:35:51.575542476Z 67 PC: 6013c | Get or set file attributes
2018-12-17T22:35:51.58518806Z 61 PC: 60ad0 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:35:51.592208399Z 66 PC: 61308 | Move file pointer
2018-12-17T22:35:51.59363454Z 66 PC: 61316 | Move file pointer
2018-12-17T22:35:51.596264729Z 66 PC: 61324 | Move file pointer
2018-12-17T22:35:51.598474563Z 66 PC: 60c02 | Move file pointer
2018-12-17T22:35:51.600216164Z 63 PC: 60b62 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:51.604514197Z 62 PC: 60b20 | Close file
2018-12-17T22:35:51.606497623Z 67 PC: 6013c | Get or set file attributes
2018-12-17T22:35:51.617252174Z 25 PC: 60d1f | Get default drive
2018-12-17T22:35:51.618752711Z 71 PC: 60d32 | Get current directory
2018-12-17T22:35:51.622049351Z 26 PC: 601b3 | Set disk transfer address
2018-12-17T22:35:51.623480428Z 78 PC: 601bf | Find first file
2018-12-17T22:35:51.631098763Z 67 PC: 60115 | Get or set file attributes
2018-12-17T22:35:51.637041174Z 26 PC: 601d7 | Set disk transfer address
2018-12-17T22:35:51.639052575Z 79 PC: 601dc | Find next file
2018-12-17T22:35:51.642324971Z 67 PC: 60115 | Get or set file attributes
2018-12-17T22:35:51.648259602Z 26 PC: 601d7 | Set disk transfer address
2018-12-17T22:35:51.650459667Z 79 PC: 601dc | Find next file
2018-12-17T22:35:51.653691437Z 67 PC: 60115 | Get or set file attributes
2018-12-17T22:35:51.659784189Z 26 PC: 601d7 | Set disk transfer address
2018-12-17T22:35:51.662222311Z 79 PC: 601dc | Find next file
2018-12-17T22:35:51.665276807Z 67 PC: 60115 | Get or set file attributes
2018-12-17T22:35:51.671110779Z 26 PC: 601d7 | Set disk transfer address
2018-12-17T22:35:51.673327159Z 79 PC: 601dc | Find next file
2018-12-17T22:35:51.676797983Z 67 PC: 60115 | Get or set file attributes
2018-12-17T22:35:51.682957268Z 26 PC: 601d7 | Set disk transfer address
2018-12-17T22:35:51.68565853Z 79 PC: 601dc | Find next file
2018-12-17T22:35:51.689998389Z 67 PC: 60115 | Get or set file attributes
2018-12-17T22:35:51.696194299Z 26 PC: 601d7 | Set disk transfer address
2018-12-17T22:35:51.697498231Z 79 PC: 601dc | Find next file
2018-12-17T22:35:51.701313634Z 67 PC: 60115 | Get or set file attributes
2018-12-17T22:35:51.707022951Z 26 PC: 601d7 | Set disk transfer address
2018-12-17T22:35:51.709070732Z 79 PC: 601dc | Find next file
2018-12-17T22:35:51.711855518Z 67 PC: 60115 | Get or set file attributes
2018-12-17T22:35:51.718071225Z 26 PC: 601d7 | Set disk transfer address
2018-12-17T22:35:51.720542862Z 79 PC: 601dc | Find next file
2018-12-17T22:35:51.724070281Z 67 PC: 60115 | Get or set file attributes
2018-12-17T22:35:51.730068719Z 26 PC: 601d7 | Set disk transfer address
2018-12-17T22:35:51.7325952Z 79 PC: 601dc | Find next file
2018-12-17T22:35:51.736270428Z 67 PC: 60115 | Get or set file attributes
2018-12-17T22:35:51.742670756Z 26 PC: 601d7 | Set disk transfer address
2018-12-17T22:35:51.744937023Z 79 PC: 601dc | Find next file
2018-12-17T22:35:51.747423167Z 44 PC: 6129e | Get time 0x6129e: mov word ptr [0x3e], cx
0x612a2: mov word ptr [0x40], dx
0x612a6: retf
0x612a7: call 0x612ee
0x612aa: jb 0x612bb
0x612ac: mov cx, word ptr es:[di + 4]
0x612b0: cmp cx, 1
0x612b3: je 0x612bb
0x612b5: xor bx, bx
0x612b7: push cs
0x612b8: call 0x70e2a
0x612bb: retf 4
0x612be: call 0x612ee
0x612c1: jb 0x612d6
0x612c3: mov ax, cx
0x612c5: mov dx, bx
0x612c7: mov cx, word ptr es:[di + 4]
0x612cb: cmp cx, 1
0x612ce: je 0x612d6
0x612d0: xor bx, bx
2018-12-17T22:35:51.750202869Z 26 PC: 601b3 | Set disk transfer address
2018-12-17T22:35:51.751265331Z 78 PC: 601bf | Find first file
2018-12-17T22:35:51.753005984Z 48 PC: 60c92 | Get DOS version
2018-12-17T22:35:51.755247103Z 48 PC: 60c92 | Get DOS version
2018-12-17T22:35:51.756819761Z 67 PC: 60115 | Get or set file attributes
2018-12-17T22:35:51.763623733Z 67 PC: 6013c | Get or set file attributes
2018-12-17T22:35:51.775279792Z 61 PC: 60ad0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:51.781992261Z 87 PC: 60156 | Get or set file date and time
2018-12-17T22:35:51.783938866Z 60 PC: 60ad0 | Create or truncate file
2018-12-17T22:35:51.797437576Z 63 PC: 60ba3 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:51.805152297Z 64 PC: 60ba3 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:51.814433785Z 62 PC: 60b20 | Close file
2018-12-17T22:35:51.823557392Z 62 PC: 60b20 | Close file
2018-12-17T22:35:51.826189669Z 26 PC: 601b3 | Set disk transfer address
2018-12-17T22:35:51.827391348Z 78 PC: 601bf | Find first file
2018-12-17T22:35:51.83671491Z 48 PC: 60c92 | Get DOS version
2018-12-17T22:35:51.838184317Z 61 PC: 60ad0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:51.846835811Z 61 PC: 60ad0 | Open file (Filename = 'A:\TEST')
2018-12-17T22:35:51.853181145Z 64 PC: 60ba3 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:51.861523279Z 67 PC: 6013c | Get or set file attributes
2018-12-17T22:35:51.885234942Z 87 PC: 60183 | Get or set file date and time
2018-12-17T22:35:51.886990805Z 62 PC: 60b20 | Close file
2018-12-17T22:35:51.893972458Z 53 PC: 60386 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:51.896305304Z 37 PC: 6038f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:51.897652672Z 53 PC: 60386 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:51.899277106Z 37 PC: 6038f | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:51.900678628Z 53 PC: 60386 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:51.902583363Z 37 PC: 6038f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:51.904221562Z 53 PC: 60386 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:51.906071229Z 37 PC: 6038f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:51.907452686Z 53 PC: 60386 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:51.908734226Z 37 PC: 6038f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:51.911196364Z 53 PC: 60386 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:51.913629232Z 37 PC: 6038f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:51.914998975Z 53 PC: 60386 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:51.916672482Z 37 PC: 6038f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:51.918900678Z 53 PC: 60386 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:51.920324603Z 37 PC: 6038f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:51.92354085Z 53 PC: 60386 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:51.924719841Z 37 PC: 6038f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:51.925862989Z 53 PC: 60386 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:51.933261383Z 37 PC: 6038f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:51.934300294Z 53 PC: 60386 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:51.935328896Z 37 PC: 6038f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:51.938060032Z 53 PC: 60386 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:51.939054045Z 37 PC: 6038f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:51.940020605Z 53 PC: 60386 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:51.942190493Z 37 PC: 6038f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:51.943355294Z 53 PC: 60386 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:51.950991128Z 37 PC: 6038f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:51.95235436Z 53 PC: 60386 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:51.953391762Z 37 PC: 6038f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:51.954811176Z 53 PC: 60386 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:51.956851519Z 37 PC: 6038f | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:51.958175046Z 53 PC: 60386 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:51.960575998Z 37 PC: 6038f | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:51.962033319Z 53 PC: 60386 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:51.963415947Z 37 PC: 6038f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:51.966001497Z 53 PC: 60386 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:51.967597287Z 37 PC: 6038f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:51.969281712Z 48 PC: 60c92 | Get DOS version
2018-12-17T22:35:51.971538615Z 41 PC: 6033d | Parse filename
2018-12-17T22:35:51.973160584Z 41 PC: 6034b | Parse filename
2018-12-17T22:35:51.977993094Z 75 PC: 60356 | Execute program
2018-12-17T22:35:51.998575784Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:51.999647397Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:52.002329811Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:52.00384934Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:52.005690931Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:52.008289733Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:52.009699Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:52.010736882Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:52.015674684Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:52.016730691Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:52.017750992Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:52.019274039Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:52.020970226Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:52.023086456Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:52.024076708Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:52.025130565Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:52.026942939Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:52.027979862Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:52.02898869Z 53 PC: 69bfa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:52.037624862Z 37 PC: 69c0f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:52.038673255Z 37 PC: 69c17 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:52.039723479Z 37 PC: 69c1f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:52.041713524Z 37 PC: 69c27 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:52.043549579Z 68 PC: 6a957 | I/O control for devices (Set for = '')
2018-12-17T22:35:52.1481561Z 37 PC: 692d1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:52.150841341Z 25 PC: 6a50f | Get default drive
2018-12-17T22:35:52.152029158Z 71 PC: 6a522 | Get current directory
2018-12-17T22:35:52.155081333Z 14 PC: 6a568 | Set default drive (Drive = 'C')
2018-12-17T22:35:52.156565925Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.15779289Z 26 PC: 699a3 | Set disk transfer address
2018-12-17T22:35:52.159899303Z 78 PC: 699af | Find first file
2018-12-17T22:35:52.16536371Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.166444811Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.169371897Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.173437562Z 14 PC: 6a568 | Set default drive (Drive = 'D')
2018-12-17T22:35:52.174488522Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.176326611Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.177427987Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.178366567Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.183363405Z 14 PC: 6a568 | Set default drive (Drive = 'E')
2018-12-17T22:35:52.184424428Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.185986196Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.187076307Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.188380093Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.192413678Z 14 PC: 6a568 | Set default drive (Drive = 'F')
2018-12-17T22:35:52.193928725Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.195258144Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.201083245Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.202645077Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.207075188Z 14 PC: 6a568 | Set default drive (Drive = 'G')
2018-12-17T22:35:52.210023092Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.211248871Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.212473527Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.214909363Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.219033152Z 14 PC: 6a568 | Set default drive (Drive = 'H')
2018-12-17T22:35:52.220499329Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.22158Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.222680204Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.223647825Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.227959701Z 14 PC: 6a568 | Set default drive (Drive = 'I')
2018-12-17T22:35:52.228962125Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.230529888Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.231625768Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.232446855Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.237152454Z 14 PC: 6a568 | Set default drive (Drive = 'J')
2018-12-17T22:35:52.23828442Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.239355697Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.240642618Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.241604236Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.245745247Z 14 PC: 6a568 | Set default drive (Drive = 'K')
2018-12-17T22:35:52.246954168Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.24804633Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.249063076Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.250022953Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.254058503Z 14 PC: 6a568 | Set default drive (Drive = 'L')
2018-12-17T22:35:52.255026693Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.256124461Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.257157149Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.257968004Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.262216904Z 14 PC: 6a568 | Set default drive (Drive = 'M')
2018-12-17T22:35:52.263531653Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.264822099Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.266143889Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.267157717Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.271113835Z 14 PC: 6a568 | Set default drive (Drive = 'N')
2018-12-17T22:35:52.272067217Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.273288915Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.274513685Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.276231254Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.280272187Z 14 PC: 6a568 | Set default drive (Drive = 'O')
2018-12-17T22:35:52.281267163Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.282921184Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.284036002Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.284845991Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.28958831Z 14 PC: 6a568 | Set default drive (Drive = 'P')
2018-12-17T22:35:52.29060488Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.291640331Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.293257479Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.294228375Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.298161774Z 14 PC: 6a568 | Set default drive (Drive = 'Q')
2018-12-17T22:35:52.299840306Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.300898787Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.301922399Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.303541259Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.307456386Z 14 PC: 6a568 | Set default drive (Drive = 'R')
2018-12-17T22:35:52.308809312Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.310656754Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.311720796Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.312507934Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.317275769Z 14 PC: 6a568 | Set default drive (Drive = 'S')
2018-12-17T22:35:52.318333549Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.319819849Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.32092655Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.32191589Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.325933565Z 14 PC: 6a568 | Set default drive (Drive = 'T')
2018-12-17T22:35:52.327442448Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.328494597Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.329951777Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.331017586Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.334997366Z 14 PC: 6a568 | Set default drive (Drive = 'U')
2018-12-17T22:35:52.335862452Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.337511668Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.338429158Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.339591606Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.343894411Z 14 PC: 6a568 | Set default drive (Drive = 'V')
2018-12-17T22:35:52.34468629Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.345881205Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.347096127Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.347885323Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.351731825Z 14 PC: 6a568 | Set default drive (Drive = 'W')
2018-12-17T22:35:52.353408803Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.354513998Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.35589068Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.357817041Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.361815908Z 14 PC: 6a568 | Set default drive (Drive = 'X')
2018-12-17T22:35:52.363282551Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.364477334Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.365508863Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.366419941Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.370983988Z 14 PC: 6a568 | Set default drive (Drive = 'Y')
2018-12-17T22:35:52.371967394Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.372904974Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.374302648Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.37530297Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.379747162Z 14 PC: 6a568 | Set default drive (Drive = 'Z')
2018-12-17T22:35:52.380937567Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.382463409Z 14 PC: 6a568 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.383541109Z 25 PC: 6a56c | Get default drive
2018-12-17T22:35:52.384901942Z 59 PC: 6a5d6 | Change current directory
2018-12-17T22:35:52.389401482Z 54 PC: 698cc | Get free disk space
2018-12-17T22:35:52.393292066Z 26 PC: 699a3 | Set disk transfer address
2018-12-17T22:35:52.394838582Z 78 PC: 699af | Find first file
2018-12-17T22:35:52.401364407Z 67 PC: 69905 | Get or set file attributes
2018-12-17T22:35:52.407123156Z 67 PC: 6992c | Get or set file attributes
2018-12-17T22:35:52.4169329Z 61 PC: 6a2c0 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:35:52.423765835Z 66 PC: 6aaf8 | Move file pointer
2018-12-17T22:35:52.424954688Z 66 PC: 6ab06 | Move file pointer
2018-12-17T22:35:52.426135556Z 66 PC: 6ab14 | Move file pointer
2018-12-17T22:35:52.427966764Z 66 PC: 6a3f2 | Move file pointer
2018-12-17T22:35:52.429422989Z 63 PC: 6a352 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:52.431838072Z 62 PC: 6a310 | Close file
2018-12-17T22:35:52.433771461Z 67 PC: 6992c | Get or set file attributes
2018-12-17T22:35:52.443080084Z 25 PC: 6a50f | Get default drive
2018-12-17T22:35:52.443973904Z 71 PC: 6a522 | Get current directory
2018-12-17T22:35:52.447020705Z 26 PC: 699a3 | Set disk transfer address
2018-12-17T22:35:52.448763888Z 78 PC: 699af | Find first file
2018-12-17T22:35:52.455426696Z 67 PC: 69905 | Get or set file attributes
2018-12-17T22:35:52.461286599Z 26 PC: 699c7 | Set disk transfer address
2018-12-17T22:35:52.462417323Z 79 PC: 699cc | Find next file
2018-12-17T22:35:52.465389022Z 67 PC: 69905 | Get or set file attributes
2018-12-17T22:35:52.470998288Z 26 PC: 699c7 | Set disk transfer address
2018-12-17T22:35:52.472610155Z 79 PC: 699cc | Find next file
2018-12-17T22:35:52.475803107Z 67 PC: 69905 | Get or set file attributes
2018-12-17T22:35:52.481814165Z 26 PC: 699c7 | Set disk transfer address
2018-12-17T22:35:52.483603484Z 79 PC: 699cc | Find next file
2018-12-17T22:35:52.486648829Z 67 PC: 69905 | Get or set file attributes
2018-12-17T22:35:52.492377919Z 26 PC: 699c7 | Set disk transfer address
2018-12-17T22:35:52.493335175Z 79 PC: 699cc | Find next file
2018-12-17T22:35:52.497021527Z 67 PC: 69905 | Get or set file attributes
2018-12-17T22:35:52.502613317Z 26 PC: 699c7 | Set disk transfer address
2018-12-17T22:35:52.505099086Z 79 PC: 699cc | Find next file
2018-12-17T22:35:52.508075557Z 67 PC: 69905 | Get or set file attributes
2018-12-17T22:35:52.513619031Z 26 PC: 699c7 | Set disk transfer address
2018-12-17T22:35:52.515645701Z 79 PC: 699cc | Find next file
2018-12-17T22:35:52.518567171Z 67 PC: 69905 | Get or set file attributes
2018-12-17T22:35:52.524861811Z 26 PC: 699c7 | Set disk transfer address
2018-12-17T22:35:52.526272522Z 79 PC: 699cc | Find next file
2018-12-17T22:35:52.529008801Z 67 PC: 69905 | Get or set file attributes
2018-12-17T22:35:52.534484273Z 26 PC: 699c7 | Set disk transfer address
2018-12-17T22:35:52.535405959Z 79 PC: 699cc | Find next file
2018-12-17T22:35:52.538438171Z 67 PC: 69905 | Get or set file attributes
2018-12-17T22:35:52.544163052Z 26 PC: 699c7 | Set disk transfer address
2018-12-17T22:35:52.546629178Z 79 PC: 699cc | Find next file
2018-12-17T22:35:52.550629636Z 67 PC: 69905 | Get or set file attributes
2018-12-17T22:35:52.556296865Z 26 PC: 699c7 | Set disk transfer address
2018-12-17T22:35:52.557449484Z 79 PC: 699cc | Find next file
2018-12-17T22:35:52.56220186Z 44 PC: 6aa8e | Get time 0x6aa8e: mov word ptr [0x3e], cx
0x6aa92: mov word ptr [0x40], dx
0x6aa96: retf
0x6aa97: call 0x6aade
0x6aa9a: jb 0x6aaab
0x6aa9c: mov cx, word ptr es:[di + 4]
0x6aaa0: cmp cx, 1
0x6aaa3: je 0x6aaab
0x6aaa5: xor bx, bx
0x6aaa7: push cs
0x6aaa8: call 0x7a61a
0x6aaab: retf 4
0x6aaae: call 0x6aade
0x6aab1: jb 0x6aac6
0x6aab3: mov ax, cx
0x6aab5: mov dx, bx
0x6aab7: mov cx, word ptr es:[di + 4]
0x6aabb: cmp cx, 1
0x6aabe: je 0x6aac6
0x6aac0: xor bx, bx
2018-12-17T22:35:52.564845719Z 26 PC: 699a3 | Set disk transfer address
2018-12-17T22:35:52.566622584Z 78 PC: 699af | Find first file
2018-12-17T22:35:52.568840233Z 48 PC: 6a482 | Get DOS version
2018-12-17T22:35:52.570760215Z 48 PC: 6a482 | Get DOS version
2018-12-17T22:35:52.573611551Z 67 PC: 69905 | Get or set file attributes
2018-12-17T22:35:52.580228716Z 67 PC: 6992c | Get or set file attributes
2018-12-17T22:35:52.591387266Z 61 PC: 6a2c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:52.59904393Z 87 PC: 69946 | Get or set file date and time
2018-12-17T22:35:52.600831962Z 60 PC: 6a2c0 | Create or truncate file
2018-12-17T22:35:52.612835518Z 63 PC: 6a393 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:52.620876059Z 64 PC: 6a393 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:52.631599292Z 62 PC: 6a310 | Close file
2018-12-17T22:35:52.640450595Z 62 PC: 6a310 | Close file
2018-12-17T22:35:52.643042318Z 26 PC: 699a3 | Set disk transfer address
2018-12-17T22:35:52.646678183Z 78 PC: 699af | Find first file
2018-12-17T22:35:52.656951173Z 48 PC: 6a482 | Get DOS version
2018-12-17T22:35:52.660263714Z 61 PC: 6a2c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:52.668045382Z 61 PC: 6a2c0 | Open file (Filename = 'A:\TEST')
2018-12-17T22:35:52.674556526Z 64 PC: 6a393 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:52.685086412Z 67 PC: 6992c | Get or set file attributes
2018-12-17T22:35:52.695387026Z 87 PC: 69973 | Get or set file date and time
2018-12-17T22:35:52.696878159Z 62 PC: 6a310 | Close file
2018-12-17T22:35:52.710260882Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:52.711671845Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:52.713038459Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:52.715848056Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:52.717133461Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:52.718442535Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:52.720787445Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:52.721985744Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:52.724941966Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:52.726308923Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:52.727624403Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:52.730506478Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:52.73161666Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:52.732675871Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:52.734573588Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:52.735654774Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:52.736684149Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:52.737986137Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:52.740008197Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:52.741123779Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:52.7436408Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:52.745469957Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:52.746564653Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:52.748840484Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:52.74986319Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:52.750913164Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:52.752404671Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:52.754043491Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:52.755079963Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:52.756129901Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:52.758038313Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:52.759464374Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:52.760825927Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:52.763423274Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:52.764418304Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:52.765491143Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:52.767013364Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:52.768096003Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:52.769114896Z 48 PC: 6a482 | Get DOS version
2018-12-17T22:35:52.770481486Z 41 PC: 69b2d | Parse filename
2018-12-17T22:35:52.772881074Z 41 PC: 69b3b | Parse filename
2018-12-17T22:35:52.77414679Z 75 PC: 69b46 | Execute program
2018-12-17T22:35:52.791837201Z 53 PC: 733ea | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:52.793701992Z 53 PC: 733ea | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:52.795670541Z 53 PC: 733ea | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:52.797045559Z 53 PC: 733ea | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:52.801345853Z 53 PC: 733ea | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:52.802495676Z 53 PC: 733ea | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:52.804471499Z 53 PC: 733ea | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:52.805512412Z 53 PC: 733ea | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:52.806552138Z 53 PC: 733ea | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:52.807573429Z 53 PC: 733ea | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:52.809168392Z 53 PC: 733ea | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:52.810199716Z 53 PC: 733ea | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:52.811192086Z 53 PC: 733ea | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:52.813022511Z 53 PC: 733ea | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:52.814147739Z 53 PC: 733ea | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:52.815160216Z 53 PC: 733ea | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:52.816819039Z 53 PC: 733ea | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:52.817816309Z 53 PC: 733ea | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:52.818836426Z 53 PC: 733ea | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:52.820108686Z 37 PC: 733ff | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:52.821590738Z 37 PC: 73407 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:52.822605339Z 37 PC: 7340f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:52.823710903Z 37 PC: 73417 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:52.825117466Z 68 PC: 74147 | I/O control for devices (Set for = '')
2018-12-17T22:35:52.845389365Z 37 PC: 72ac1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:52.847573613Z 25 PC: 73cff | Get default drive
2018-12-17T22:35:52.849397249Z 71 PC: 73d12 | Get current directory
2018-12-17T22:35:52.852477783Z 14 PC: 73d58 | Set default drive (Drive = 'C')
2018-12-17T22:35:52.853724365Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.855198946Z 26 PC: 73193 | Set disk transfer address
2018-12-17T22:35:52.856134118Z 78 PC: 7319f | Find first file
2018-12-17T22:35:52.861834304Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.867012567Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.868468832Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:52.87420859Z 14 PC: 73d58 | Set default drive (Drive = 'D')
2018-12-17T22:35:52.875531165Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.876791778Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.879254965Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.880918855Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:52.885086667Z 14 PC: 73d58 | Set default drive (Drive = 'E')
2018-12-17T22:35:52.886280633Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.889161949Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.890350781Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.891715469Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:52.897023592Z 14 PC: 73d58 | Set default drive (Drive = 'F')
2018-12-17T22:35:52.898147124Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.899953056Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.902376744Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.903231716Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:52.907885072Z 14 PC: 73d58 | Set default drive (Drive = 'G')
2018-12-17T22:35:52.911016378Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.912172618Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.914075201Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.915515104Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:52.919570668Z 14 PC: 73d58 | Set default drive (Drive = 'H')
2018-12-17T22:35:52.921465028Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.924722753Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.926032199Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.927083078Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:52.933450481Z 14 PC: 73d58 | Set default drive (Drive = 'I')
2018-12-17T22:35:52.934673845Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.935976378Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.938245861Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.93976411Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:52.944241498Z 14 PC: 73d58 | Set default drive (Drive = 'J')
2018-12-17T22:35:52.946011011Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.947220024Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.948310191Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.949273316Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:52.954281348Z 14 PC: 73d58 | Set default drive (Drive = 'K')
2018-12-17T22:35:52.955443638Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.956615823Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.959483665Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.960521993Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:52.964576489Z 14 PC: 73d58 | Set default drive (Drive = 'L')
2018-12-17T22:35:52.967322502Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.96843946Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.969528126Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.971036769Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:52.975272184Z 14 PC: 73d58 | Set default drive (Drive = 'M')
2018-12-17T22:35:52.976467612Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.977788694Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.980800719Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.982051695Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:52.986458261Z 14 PC: 73d58 | Set default drive (Drive = 'N')
2018-12-17T22:35:52.9894018Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.991197588Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:52.992763331Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:52.995209471Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:52.999701553Z 14 PC: 73d58 | Set default drive (Drive = 'O')
2018-12-17T22:35:53.001195262Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.003965347Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.005526147Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.006939643Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:53.012585634Z 14 PC: 73d58 | Set default drive (Drive = 'P')
2018-12-17T22:35:53.014735194Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.016172568Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.019179791Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.020492821Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:53.024905446Z 14 PC: 73d58 | Set default drive (Drive = 'Q')
2018-12-17T22:35:53.027929264Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.029408945Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.030846757Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.033543145Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:53.038238463Z 14 PC: 73d58 | Set default drive (Drive = 'R')
2018-12-17T22:35:53.039755415Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.042402351Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.043903184Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.045265339Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:53.050971378Z 14 PC: 73d58 | Set default drive (Drive = 'S')
2018-12-17T22:35:53.052516Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.053987583Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.056618594Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.057790268Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:53.062102536Z 14 PC: 73d58 | Set default drive (Drive = 'T')
2018-12-17T22:35:53.063344412Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.066227534Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.0696136Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.071547113Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:53.078434452Z 14 PC: 73d58 | Set default drive (Drive = 'U')
2018-12-17T22:35:53.079671554Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.081016479Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.08406108Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.08518824Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:53.08983099Z 14 PC: 73d58 | Set default drive (Drive = 'V')
2018-12-17T22:35:53.092269661Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.0935667Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.096732761Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.098048317Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:53.1021562Z 14 PC: 73d58 | Set default drive (Drive = 'W')
2018-12-17T22:35:53.103646322Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.10514756Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.10625223Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.107236333Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:53.112699395Z 14 PC: 73d58 | Set default drive (Drive = 'X')
2018-12-17T22:35:53.113795254Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.114865397Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.116538064Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.117947222Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:53.122482051Z 14 PC: 73d58 | Set default drive (Drive = 'Y')
2018-12-17T22:35:53.125328817Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.127066307Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.12857454Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.129965269Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:53.134589761Z 14 PC: 73d58 | Set default drive (Drive = 'Z')
2018-12-17T22:35:53.135856052Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.137067127Z 14 PC: 73d58 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.138967514Z 25 PC: 73d5c | Get default drive
2018-12-17T22:35:53.140027207Z 59 PC: 73dc6 | Change current directory
2018-12-17T22:35:53.143894504Z 54 PC: 730bc | Get free disk space
2018-12-17T22:35:53.148023455Z 26 PC: 73193 | Set disk transfer address
2018-12-17T22:35:53.149023166Z 78 PC: 7319f | Find first file
2018-12-17T22:35:53.155694739Z 67 PC: 730f5 | Get or set file attributes
2018-12-17T22:35:53.161911994Z 67 PC: 7311c | Get or set file attributes
2018-12-17T22:35:53.171729321Z 61 PC: 73ab0 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:35:53.179403419Z 66 PC: 742e8 | Move file pointer
2018-12-17T22:35:53.1818236Z 66 PC: 742f6 | Move file pointer
2018-12-17T22:35:53.183212408Z 66 PC: 74304 | Move file pointer
2018-12-17T22:35:53.184663826Z 66 PC: 73be2 | Move file pointer
2018-12-17T22:35:53.187845123Z 63 PC: 73b42 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:53.19042303Z 62 PC: 73b00 | Close file
2018-12-17T22:35:53.192052883Z 67 PC: 7311c | Get or set file attributes
2018-12-17T22:35:53.205195349Z 25 PC: 73cff | Get default drive
2018-12-17T22:35:53.206282301Z 71 PC: 73d12 | Get current directory
2018-12-17T22:35:53.209350305Z 26 PC: 73193 | Set disk transfer address
2018-12-17T22:35:53.210722207Z 78 PC: 7319f | Find first file
2018-12-17T22:35:53.216901894Z 67 PC: 730f5 | Get or set file attributes
2018-12-17T22:35:53.222797328Z 26 PC: 731b7 | Set disk transfer address
2018-12-17T22:35:53.224874057Z 79 PC: 731bc | Find next file
2018-12-17T22:35:53.228073573Z 67 PC: 730f5 | Get or set file attributes
2018-12-17T22:35:53.233968815Z 26 PC: 731b7 | Set disk transfer address
2018-12-17T22:35:53.237457596Z 79 PC: 731bc | Find next file
2018-12-17T22:35:53.240679279Z 67 PC: 730f5 | Get or set file attributes
2018-12-17T22:35:53.246687442Z 26 PC: 731b7 | Set disk transfer address
2018-12-17T22:35:53.248323527Z 79 PC: 731bc | Find next file
2018-12-17T22:35:53.254196045Z 67 PC: 730f5 | Get or set file attributes
2018-12-17T22:35:53.261084103Z 26 PC: 731b7 | Set disk transfer address
2018-12-17T22:35:53.262141412Z 79 PC: 731bc | Find next file
2018-12-17T22:35:53.265276944Z 67 PC: 730f5 | Get or set file attributes
2018-12-17T22:35:53.271521724Z 26 PC: 731b7 | Set disk transfer address
2018-12-17T22:35:53.272937644Z 79 PC: 731bc | Find next file
2018-12-17T22:35:53.278055037Z 67 PC: 730f5 | Get or set file attributes
2018-12-17T22:35:53.284126121Z 26 PC: 731b7 | Set disk transfer address
2018-12-17T22:35:53.285489894Z 79 PC: 731bc | Find next file
2018-12-17T22:35:53.290377589Z 67 PC: 730f5 | Get or set file attributes
2018-12-17T22:35:53.296387333Z 26 PC: 731b7 | Set disk transfer address
2018-12-17T22:35:53.297611666Z 79 PC: 731bc | Find next file
2018-12-17T22:35:53.302276345Z 67 PC: 730f5 | Get or set file attributes
2018-12-17T22:35:53.308149037Z 26 PC: 731b7 | Set disk transfer address
2018-12-17T22:35:53.309291971Z 79 PC: 731bc | Find next file
2018-12-17T22:35:53.313067588Z 67 PC: 730f5 | Get or set file attributes
2018-12-17T22:35:53.318723481Z 26 PC: 731b7 | Set disk transfer address
2018-12-17T22:35:53.319762653Z 79 PC: 731bc | Find next file
2018-12-17T22:35:53.322801333Z 67 PC: 730f5 | Get or set file attributes
2018-12-17T22:35:53.32918933Z 26 PC: 731b7 | Set disk transfer address
2018-12-17T22:35:53.33013298Z 79 PC: 731bc | Find next file
2018-12-17T22:35:53.332662273Z 44 PC: 7427e | Get time 0x7427e: mov word ptr [0x3e], cx
0x74282: mov word ptr [0x40], dx
0x74286: retf
0x74287: call 0x742ce
0x7428a: jb 0x7429b
0x7428c: mov cx, word ptr es:[di + 4]
0x74290: cmp cx, 1
0x74293: je 0x7429b
0x74295: xor bx, bx
0x74297: push cs
0x74298: call 0x83e0a
0x7429b: retf 4
0x7429e: call 0x742ce
0x742a1: jb 0x742b6
0x742a3: mov ax, cx
0x742a5: mov dx, bx
0x742a7: mov cx, word ptr es:[di + 4]
0x742ab: cmp cx, 1
0x742ae: je 0x742b6
0x742b0: xor bx, bx
2018-12-17T22:35:53.335473564Z 26 PC: 73193 | Set disk transfer address
2018-12-17T22:35:53.336415882Z 78 PC: 7319f | Find first file
2018-12-17T22:35:53.338038512Z 48 PC: 73c72 | Get DOS version
2018-12-17T22:35:53.339344017Z 48 PC: 73c72 | Get DOS version
2018-12-17T22:35:53.340900488Z 67 PC: 730f5 | Get or set file attributes
2018-12-17T22:35:53.346668502Z 67 PC: 7311c | Get or set file attributes
2018-12-17T22:35:53.356509518Z 61 PC: 73ab0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:53.36346204Z 87 PC: 73136 | Get or set file date and time
2018-12-17T22:35:53.366407291Z 60 PC: 73ab0 | Create or truncate file
2018-12-17T22:35:53.378491052Z 63 PC: 73b83 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:53.386184815Z 64 PC: 73b83 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:53.396035542Z 62 PC: 73b00 | Close file
2018-12-17T22:35:53.402227704Z 62 PC: 73b00 | Close file
2018-12-17T22:35:53.404021557Z 26 PC: 73193 | Set disk transfer address
2018-12-17T22:35:53.405794823Z 78 PC: 7319f | Find first file
2018-12-17T22:35:53.411765568Z 48 PC: 73c72 | Get DOS version
2018-12-17T22:35:53.413205224Z 61 PC: 73ab0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:53.423829126Z 61 PC: 73ab0 | Open file (Filename = 'A:\TEST')
2018-12-17T22:35:53.428769687Z 64 PC: 73b83 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:53.437759597Z 67 PC: 7311c | Get or set file attributes
2018-12-17T22:35:53.444477674Z 87 PC: 73163 | Get or set file date and time
2018-12-17T22:35:53.44627663Z 62 PC: 73b00 | Close file
2018-12-17T22:35:53.45358666Z 53 PC: 73366 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:53.454549341Z 37 PC: 7336f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:53.461148223Z 53 PC: 73366 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:53.462381221Z 37 PC: 7336f | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:53.464317427Z 53 PC: 73366 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:53.466122958Z 37 PC: 7336f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:53.468889108Z 53 PC: 73366 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:53.470186776Z 37 PC: 7336f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:53.471279785Z 53 PC: 73366 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:53.474077604Z 37 PC: 7336f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:53.475499711Z 53 PC: 73366 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:53.476921267Z 37 PC: 7336f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:53.479599533Z 53 PC: 73366 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:53.481013005Z 37 PC: 7336f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:53.482428832Z 53 PC: 73366 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:53.484396844Z 37 PC: 7336f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:53.485986126Z 53 PC: 73366 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:53.487337446Z 37 PC: 7336f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:53.488872334Z 53 PC: 73366 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:53.491031587Z 37 PC: 7336f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:53.492899917Z 53 PC: 73366 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:53.494432671Z 37 PC: 7336f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:53.495836493Z 53 PC: 73366 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:53.498796927Z 37 PC: 7336f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:53.499964398Z 53 PC: 73366 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:53.501075031Z 37 PC: 7336f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:53.503652653Z 53 PC: 73366 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:53.505049793Z 37 PC: 7336f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:53.506151657Z 53 PC: 73366 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:53.507388503Z 37 PC: 7336f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:53.5104531Z 53 PC: 73366 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:53.511845534Z 37 PC: 7336f | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:53.512945606Z 53 PC: 73366 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:53.515791282Z 37 PC: 7336f | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:53.516969322Z 53 PC: 73366 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:53.518185589Z 37 PC: 7336f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:53.520618163Z 53 PC: 73366 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:53.52230331Z 37 PC: 7336f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:53.523410799Z 48 PC: 73c72 | Get DOS version
2018-12-17T22:35:53.524774496Z 41 PC: 7331d | Parse filename
2018-12-17T22:35:53.527852055Z 41 PC: 7332b | Parse filename
2018-12-17T22:35:53.529385658Z 75 PC: 73336 | Execute program
2018-12-17T22:35:53.547860963Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:53.550748375Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:53.552176848Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:53.553552519Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:53.556966421Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:53.558170858Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:53.559338462Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:53.561769948Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:53.562882809Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:53.563961561Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:53.565381552Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:53.567060342Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:53.568700848Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:53.56963723Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:53.571601765Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:53.572542896Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:53.573443684Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:53.575293744Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:53.576421024Z 53 PC: 7cbda | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:53.577242611Z 37 PC: 7cbef | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:53.578050592Z 37 PC: 7cbf7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:53.581458649Z 37 PC: 7cbff | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:53.582244205Z 37 PC: 7cc07 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:53.583514569Z 68 PC: 7d937 | I/O control for devices (Set for = '')
2018-12-17T22:35:53.685952608Z 37 PC: 7c2b1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:53.687785131Z 25 PC: 7d4ef | Get default drive
2018-12-17T22:35:53.689380157Z 71 PC: 7d502 | Get current directory
2018-12-17T22:35:53.694795442Z 14 PC: 7d548 | Set default drive (Drive = 'C')
2018-12-17T22:35:53.696125458Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.698964314Z 26 PC: 7c983 | Set disk transfer address
2018-12-17T22:35:53.7013724Z 78 PC: 7c98f | Find first file
2018-12-17T22:35:53.706848404Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.708247604Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.709776173Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.715449426Z 14 PC: 7d548 | Set default drive (Drive = 'D')
2018-12-17T22:35:53.716868808Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.718335408Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.72108352Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.722405987Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.726710883Z 14 PC: 7d548 | Set default drive (Drive = 'E')
2018-12-17T22:35:53.728292778Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.730097465Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.731339632Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.732386381Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.737451586Z 14 PC: 7d548 | Set default drive (Drive = 'F')
2018-12-17T22:35:53.738614564Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.739770283Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.741353677Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.742523911Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.746645786Z 14 PC: 7d548 | Set default drive (Drive = 'G')
2018-12-17T22:35:53.74792616Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.749619492Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.750786765Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.751839932Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.760048998Z 14 PC: 7d548 | Set default drive (Drive = 'H')
2018-12-17T22:35:53.761877754Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.763725267Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.764909131Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.765973355Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.77217327Z 14 PC: 7d548 | Set default drive (Drive = 'I')
2018-12-17T22:35:53.773523777Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.774963623Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.777582358Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.779427984Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.783841641Z 14 PC: 7d548 | Set default drive (Drive = 'J')
2018-12-17T22:35:53.79136009Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.792965088Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.794338767Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.79767503Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.802381597Z 14 PC: 7d548 | Set default drive (Drive = 'K')
2018-12-17T22:35:53.803910122Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.805874105Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.807615095Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.808725841Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.813229495Z 14 PC: 7d548 | Set default drive (Drive = 'L')
2018-12-17T22:35:53.81657873Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.817852451Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.819081046Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.822593126Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.827013479Z 14 PC: 7d548 | Set default drive (Drive = 'M')
2018-12-17T22:35:53.828205065Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.830036905Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.831941352Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.833006291Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.837130936Z 14 PC: 7d548 | Set default drive (Drive = 'N')
2018-12-17T22:35:53.839948071Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.84114585Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.842333917Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.844791791Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.849256503Z 14 PC: 7d548 | Set default drive (Drive = 'O')
2018-12-17T22:35:53.850730348Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.852341085Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.855574548Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.857142516Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.861876091Z 14 PC: 7d548 | Set default drive (Drive = 'P')
2018-12-17T22:35:53.865097698Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.866699667Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.868415788Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.870550998Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.875148774Z 14 PC: 7d548 | Set default drive (Drive = 'Q')
2018-12-17T22:35:53.877589046Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.879263322Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.882154466Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.883657202Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.888244057Z 14 PC: 7d548 | Set default drive (Drive = 'R')
2018-12-17T22:35:53.890988926Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.89254977Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.894095264Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.895980938Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.900566668Z 14 PC: 7d548 | Set default drive (Drive = 'S')
2018-12-17T22:35:53.901997937Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.903501054Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.906425341Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.907723943Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.912137087Z 14 PC: 7d548 | Set default drive (Drive = 'T')
2018-12-17T22:35:53.916211954Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.917973993Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.919502199Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.921053108Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.927274983Z 14 PC: 7d548 | Set default drive (Drive = 'U')
2018-12-17T22:35:53.928751822Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.930263013Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.932255274Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.933621479Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.938100557Z 14 PC: 7d548 | Set default drive (Drive = 'V')
2018-12-17T22:35:53.939509649Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.941417166Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.942668656Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.943911381Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.94800006Z 14 PC: 7d548 | Set default drive (Drive = 'W')
2018-12-17T22:35:53.949600106Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.95074379Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.951920166Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.953131256Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.957724186Z 14 PC: 7d548 | Set default drive (Drive = 'X')
2018-12-17T22:35:53.958864343Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.960038236Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.961168224Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.963739324Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.968500164Z 14 PC: 7d548 | Set default drive (Drive = 'Y')
2018-12-17T22:35:53.969695691Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.97223974Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.973315042Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.974506343Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.980512879Z 14 PC: 7d548 | Set default drive (Drive = 'Z')
2018-12-17T22:35:53.98174905Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.98300554Z 14 PC: 7d548 | Set default drive (Drive = 'A')
2018-12-17T22:35:53.984547082Z 25 PC: 7d54c | Get default drive
2018-12-17T22:35:53.995412786Z 59 PC: 7d5b6 | Change current directory
2018-12-17T22:35:53.999439067Z 54 PC: 7c8ac | Get free disk space
2018-12-17T22:35:54.00979997Z 26 PC: 7c983 | Set disk transfer address
2018-12-17T22:35:54.01447961Z 78 PC: 7c98f | Find first file
2018-12-17T22:35:54.021546966Z 67 PC: 7c8e5 | Get or set file attributes
2018-12-17T22:35:54.027612921Z 67 PC: 7c90c | Get or set file attributes
2018-12-17T22:35:54.039761928Z 61 PC: 7d2a0 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:35:54.048418563Z 66 PC: 7dad8 | Move file pointer
2018-12-17T22:35:54.050299801Z 66 PC: 7dae6 | Move file pointer
2018-12-17T22:35:54.053723785Z 66 PC: 7daf4 | Move file pointer
2018-12-17T22:35:54.05605708Z 66 PC: 7d3d2 | Move file pointer
2018-12-17T22:35:54.057834309Z 63 PC: 7d332 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:54.060594859Z 62 PC: 7d2f0 | Close file
2018-12-17T22:35:54.064376193Z 67 PC: 7c90c | Get or set file attributes
2018-12-17T22:35:54.074073393Z 25 PC: 7d4ef | Get default drive
2018-12-17T22:35:54.075425786Z 71 PC: 7d502 | Get current directory
2018-12-17T22:35:54.080312582Z 26 PC: 7c983 | Set disk transfer address
2018-12-17T22:35:54.081796653Z 78 PC: 7c98f | Find first file
2018-12-17T22:35:54.088316443Z 67 PC: 7c8e5 | Get or set file attributes
2018-12-17T22:35:54.094833264Z 26 PC: 7c9a7 | Set disk transfer address
2018-12-17T22:35:54.096762403Z 79 PC: 7c9ac | Find next file
2018-12-17T22:35:54.100084806Z 67 PC: 7c8e5 | Get or set file attributes
2018-12-17T22:35:54.106134168Z 26 PC: 7c9a7 | Set disk transfer address
2018-12-17T22:35:54.10747429Z 79 PC: 7c9ac | Find next file
2018-12-17T22:35:54.111192204Z 67 PC: 7c8e5 | Get or set file attributes
2018-12-17T22:35:54.11768512Z 26 PC: 7c9a7 | Set disk transfer address
2018-12-17T22:35:54.118722692Z 79 PC: 7c9ac | Find next file
2018-12-17T22:35:54.121714673Z 67 PC: 7c8e5 | Get or set file attributes
2018-12-17T22:35:54.129014604Z 26 PC: 7c9a7 | Set disk transfer address
2018-12-17T22:35:54.130132279Z 79 PC: 7c9ac | Find next file
2018-12-17T22:35:54.133497391Z 67 PC: 7c8e5 | Get or set file attributes
2018-12-17T22:35:54.139293414Z 26 PC: 7c9a7 | Set disk transfer address
2018-12-17T22:35:54.141772983Z 79 PC: 7c9ac | Find next file
2018-12-17T22:35:54.144648793Z 67 PC: 7c8e5 | Get or set file attributes
2018-12-17T22:35:54.151019382Z 26 PC: 7c9a7 | Set disk transfer address
2018-12-17T22:35:54.152228599Z 79 PC: 7c9ac | Find next file
2018-12-17T22:35:54.157037779Z 67 PC: 7c8e5 | Get or set file attributes
2018-12-17T22:35:54.163152268Z 26 PC: 7c9a7 | Set disk transfer address
2018-12-17T22:35:54.164339781Z 79 PC: 7c9ac | Find next file
2018-12-17T22:35:54.169601088Z 67 PC: 7c8e5 | Get or set file attributes
2018-12-17T22:35:54.175744872Z 26 PC: 7c9a7 | Set disk transfer address
2018-12-17T22:35:54.17695729Z 79 PC: 7c9ac | Find next file
2018-12-17T22:35:54.18208942Z 67 PC: 7c8e5 | Get or set file attributes
2018-12-17T22:35:54.188525722Z 26 PC: 7c9a7 | Set disk transfer address
2018-12-17T22:35:54.190311226Z 79 PC: 7c9ac | Find next file
2018-12-17T22:35:54.193528675Z 67 PC: 7c8e5 | Get or set file attributes
2018-12-17T22:35:54.200655813Z 26 PC: 7c9a7 | Set disk transfer address
2018-12-17T22:35:54.202095325Z 79 PC: 7c9ac | Find next file
2018-12-17T22:35:54.208509312Z 44 PC: 7da6e | Get time 0x7da6e: mov word ptr [0x3e], cx
0x7da72: mov word ptr [0x40], dx
0x7da76: retf
0x7da77: call 0x7dabe
0x7da7a: jb 0x7da8b
0x7da7c: mov cx, word ptr es:[di + 4]
0x7da80: cmp cx, 1
0x7da83: je 0x7da8b
0x7da85: xor bx, bx
0x7da87: push cs
0x7da88: call 0x8d5fa
0x7da8b: retf 4
0x7da8e: call 0x7dabe
0x7da91: jb 0x7daa6
0x7da93: mov ax, cx
0x7da95: mov dx, bx
0x7da97: mov cx, word ptr es:[di + 4]
0x7da9b: cmp cx, 1
0x7da9e: je 0x7daa6
0x7daa0: xor bx, bx
2018-12-17T22:35:54.212678656Z 26 PC: 7c983 | Set disk transfer address
2018-12-17T22:35:54.213986198Z 78 PC: 7c98f | Find first file
2018-12-17T22:35:54.215967536Z 48 PC: 7d462 | Get DOS version
2018-12-17T22:35:54.219131483Z 48 PC: 7d462 | Get DOS version
2018-12-17T22:35:54.22094861Z 67 PC: 7c8e5 | Get or set file attributes
2018-12-17T22:35:54.224642066Z 67 PC: 7c90c | Get or set file attributes
2018-12-17T22:35:54.230924486Z 61 PC: 7d2a0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:54.235852579Z 87 PC: 7c926 | Get or set file date and time
2018-12-17T22:35:54.238611711Z 60 PC: 7d2a0 | Create or truncate file
2018-12-17T22:35:54.252191823Z 63 PC: 7d373 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:54.261339505Z 64 PC: 7d373 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:54.272930486Z 62 PC: 7d2f0 | Close file
2018-12-17T22:35:54.281753971Z 62 PC: 7d2f0 | Close file
2018-12-17T22:35:54.283837798Z 26 PC: 7c983 | Set disk transfer address
2018-12-17T22:35:54.286939327Z 78 PC: 7c98f | Find first file
2018-12-17T22:35:54.297115138Z 48 PC: 7d462 | Get DOS version
2018-12-17T22:35:54.298573175Z 61 PC: 7d2a0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:54.307986882Z 61 PC: 7d2a0 | Open file (Filename = 'A:\TEST')
2018-12-17T22:35:54.314912303Z 64 PC: 7d373 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:54.323788763Z 67 PC: 7c90c | Get or set file attributes
2018-12-17T22:35:54.334753971Z 87 PC: 7c953 | Get or set file date and time
2018-12-17T22:35:54.336395387Z 62 PC: 7d2f0 | Close file
2018-12-17T22:35:54.344691151Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:54.34584407Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:54.346843108Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:54.348117263Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:54.349261884Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:54.350476932Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:54.351683875Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:54.353355275Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:54.354590053Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:54.355679359Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:54.356695115Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:54.358289495Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:54.359324623Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:54.36043167Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:54.361768731Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:54.362953129Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:54.364153454Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:54.365262158Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:54.366107583Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:54.36708952Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:54.368290729Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:54.369218769Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:54.37013764Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:54.371969143Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:54.372787224Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:54.373620122Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:54.376026875Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:54.376965226Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:54.377798408Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:54.378613596Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:54.380392727Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:54.381222828Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:54.38202168Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:54.383977103Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:54.384781305Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:54.385694217Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:54.387116512Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:54.389000053Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:54.390192276Z 48 PC: 7d462 | Get DOS version
2018-12-17T22:35:54.391453471Z 41 PC: 7cb0d | Parse filename
2018-12-17T22:35:54.392717434Z 41 PC: 7cb1b | Parse filename
2018-12-17T22:35:54.39383304Z 75 PC: 7cb26 | Execute program
2018-12-17T22:35:54.404902059Z 53 PC: 863ca | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:54.406458185Z 53 PC: 863ca | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:54.407583374Z 53 PC: 863ca | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:54.408731065Z 53 PC: 863ca | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:54.409969433Z 53 PC: 863ca | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:54.410757297Z 53 PC: 863ca | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:54.412174859Z 53 PC: 863ca | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:54.41311269Z 53 PC: 863ca | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:54.414110058Z 53 PC: 863ca | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:54.415427355Z 53 PC: 863ca | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:54.41726028Z 53 PC: 863ca | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:54.418173179Z 53 PC: 863ca | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:54.419108043Z 53 PC: 863ca | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:54.419842507Z 53 PC: 863ca | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:54.420939662Z 53 PC: 863ca | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:54.421947665Z 53 PC: 863ca | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:54.423729173Z 53 PC: 863ca | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:54.426708295Z 53 PC: 863ca | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:54.427769957Z 53 PC: 863ca | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:54.428762782Z 37 PC: 863df | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:54.430701648Z 37 PC: 863e7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:54.431552366Z 37 PC: 863ef | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:54.432397925Z 37 PC: 863f7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:54.433446691Z 68 PC: 87127 | I/O control for devices (Set for = '�t ���r&�G@t�����B�B�BB�B�Z[XP�d+h�`�T�X�>d�lj>�3��>�����')
2018-12-17T22:35:54.505491343Z 37 PC: 85aa1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:54.506690411Z 25 PC: 86cdf | Get default drive
2018-12-17T22:35:54.507632758Z 71 PC: 86cf2 | Get current directory
2018-12-17T22:35:54.509942829Z 14 PC: 86d38 | Set default drive (Drive = 'C')
2018-12-17T22:35:54.512899039Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.514049536Z 26 PC: 86173 | Set disk transfer address
2018-12-17T22:35:54.515022301Z 78 PC: 8617f | Find first file
2018-12-17T22:35:54.51894549Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.520440249Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.521467786Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.525554762Z 14 PC: 86d38 | Set default drive (Drive = 'D')
2018-12-17T22:35:54.527052056Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.528245877Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.529286851Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.530186006Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.534614669Z 14 PC: 86d38 | Set default drive (Drive = 'E')
2018-12-17T22:35:54.53590651Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.537095824Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.538140123Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.539470452Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.543563252Z 14 PC: 86d38 | Set default drive (Drive = 'F')
2018-12-17T22:35:54.544575846Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.545622525Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.547038407Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.548652787Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.552593619Z 14 PC: 86d38 | Set default drive (Drive = 'G')
2018-12-17T22:35:54.553579421Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.555558938Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.556579962Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.557475133Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.561753614Z 14 PC: 86d38 | Set default drive (Drive = 'H')
2018-12-17T22:35:54.562770784Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.563831783Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.564842802Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.56686604Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.570978325Z 14 PC: 86d38 | Set default drive (Drive = 'I')
2018-12-17T22:35:54.572294385Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.57358608Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.575628094Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.57656934Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.580543781Z 14 PC: 86d38 | Set default drive (Drive = 'J')
2018-12-17T22:35:54.582336573Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.583436318Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.584516584Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.585486805Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.589578661Z 14 PC: 86d38 | Set default drive (Drive = 'K')
2018-12-17T22:35:54.59189904Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.593120465Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.594866708Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.595941116Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.600146982Z 14 PC: 86d38 | Set default drive (Drive = 'L')
2018-12-17T22:35:54.601558821Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.604644148Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.606018987Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.607245794Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.614381186Z 14 PC: 86d38 | Set default drive (Drive = 'M')
2018-12-17T22:35:54.615954175Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.617580491Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.620990773Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.629351534Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.634712649Z 14 PC: 86d38 | Set default drive (Drive = 'N')
2018-12-17T22:35:54.636437681Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.639369234Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.641042186Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.642551942Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.648280782Z 14 PC: 86d38 | Set default drive (Drive = 'O')
2018-12-17T22:35:54.649409618Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.650551292Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.651839753Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.653403241Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.657611853Z 14 PC: 86d38 | Set default drive (Drive = 'P')
2018-12-17T22:35:54.658656266Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.660770288Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.661976482Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.663111741Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.668005849Z 14 PC: 86d38 | Set default drive (Drive = 'Q')
2018-12-17T22:35:54.670447011Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.672053236Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.673688899Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.676539656Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.680714571Z 14 PC: 86d38 | Set default drive (Drive = 'R')
2018-12-17T22:35:54.682334109Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.685363281Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.687052399Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.688671263Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.691996501Z 14 PC: 86d38 | Set default drive (Drive = 'S')
2018-12-17T22:35:54.69404742Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.695095205Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.696186383Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.70081042Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.705341215Z 14 PC: 86d38 | Set default drive (Drive = 'T')
2018-12-17T22:35:54.70674311Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.710119027Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.711732184Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.712765529Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.716876981Z 14 PC: 86d38 | Set default drive (Drive = 'U')
2018-12-17T22:35:54.718848259Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.720627076Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.722327921Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.725762932Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.731079985Z 14 PC: 86d38 | Set default drive (Drive = 'V')
2018-12-17T22:35:54.73285976Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.737290644Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.739218693Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.74055604Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.745088897Z 14 PC: 86d38 | Set default drive (Drive = 'W')
2018-12-17T22:35:54.748195673Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.749746835Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.750961187Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.753694813Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.756417702Z 14 PC: 86d38 | Set default drive (Drive = 'X')
2018-12-17T22:35:54.757924416Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.761439556Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.762970068Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.764308297Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.768942992Z 14 PC: 86d38 | Set default drive (Drive = 'Y')
2018-12-17T22:35:54.77198547Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.773461474Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.774949651Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.778159033Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.782617162Z 14 PC: 86d38 | Set default drive (Drive = 'Z')
2018-12-17T22:35:54.78418748Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.78793365Z 14 PC: 86d38 | Set default drive (Drive = 'A')
2018-12-17T22:35:54.789436177Z 25 PC: 86d3c | Get default drive
2018-12-17T22:35:54.790771465Z 59 PC: 86da6 | Change current directory
2018-12-17T22:35:54.796739314Z 54 PC: 8609c | Get free disk space
2018-12-17T22:35:54.801155434Z 26 PC: 86173 | Set disk transfer address
2018-12-17T22:35:54.802537588Z 78 PC: 8617f | Find first file
2018-12-17T22:35:54.809848681Z 67 PC: 860d5 | Get or set file attributes
2018-12-17T22:35:54.818010329Z 67 PC: 860fc | Get or set file attributes
2018-12-17T22:35:54.828314036Z 61 PC: 86a90 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:35:54.835420179Z 66 PC: 872c8 | Move file pointer
2018-12-17T22:35:54.838383997Z 66 PC: 872d6 | Move file pointer
2018-12-17T22:35:54.840041641Z 66 PC: 872e4 | Move file pointer
2018-12-17T22:35:54.841830627Z 66 PC: 86bc2 | Move file pointer
2018-12-17T22:35:54.84380999Z 63 PC: 86b22 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:54.847743508Z 62 PC: 86ae0 | Close file
2018-12-17T22:35:54.849742799Z 67 PC: 860fc | Get or set file attributes
2018-12-17T22:35:54.859511425Z 25 PC: 86cdf | Get default drive
2018-12-17T22:35:54.862187936Z 71 PC: 86cf2 | Get current directory
2018-12-17T22:35:54.865305359Z 26 PC: 86173 | Set disk transfer address
2018-12-17T22:35:54.866395305Z 78 PC: 8617f | Find first file
2018-12-17T22:35:54.873116354Z 67 PC: 860d5 | Get or set file attributes
2018-12-17T22:35:54.878735858Z 26 PC: 86197 | Set disk transfer address
2018-12-17T22:35:54.879826952Z 79 PC: 8619c | Find next file
2018-12-17T22:35:54.88271902Z 67 PC: 860d5 | Get or set file attributes
2018-12-17T22:35:54.889188584Z 26 PC: 86197 | Set disk transfer address
2018-12-17T22:35:54.890440994Z 79 PC: 8619c | Find next file
2018-12-17T22:35:54.893339296Z 67 PC: 860d5 | Get or set file attributes
2018-12-17T22:35:54.898948821Z 26 PC: 86197 | Set disk transfer address
2018-12-17T22:35:54.901090011Z 79 PC: 8619c | Find next file
2018-12-17T22:35:54.903979886Z 67 PC: 860d5 | Get or set file attributes
2018-12-17T22:35:54.909543844Z 26 PC: 86197 | Set disk transfer address
2018-12-17T22:35:54.910481358Z 79 PC: 8619c | Find next file
2018-12-17T22:35:54.913920003Z 67 PC: 860d5 | Get or set file attributes
2018-12-17T22:35:54.919521806Z 26 PC: 86197 | Set disk transfer address
2018-12-17T22:35:54.920968331Z 79 PC: 8619c | Find next file
2018-12-17T22:35:54.924025512Z 67 PC: 860d5 | Get or set file attributes
2018-12-17T22:35:54.931076686Z 26 PC: 86197 | Set disk transfer address
2018-12-17T22:35:54.932011409Z 79 PC: 8619c | Find next file
2018-12-17T22:35:54.934761538Z 67 PC: 860d5 | Get or set file attributes
2018-12-17T22:35:54.940321565Z 26 PC: 86197 | Set disk transfer address
2018-12-17T22:35:54.9417207Z 79 PC: 8619c | Find next file
2018-12-17T22:35:54.944702119Z 67 PC: 860d5 | Get or set file attributes
2018-12-17T22:35:54.950347102Z 26 PC: 86197 | Set disk transfer address
2018-12-17T22:35:54.951641929Z 79 PC: 8619c | Find next file
2018-12-17T22:35:54.957646533Z 67 PC: 860d5 | Get or set file attributes
2018-12-17T22:35:54.963853152Z 26 PC: 86197 | Set disk transfer address
2018-12-17T22:35:54.964864204Z 79 PC: 8619c | Find next file
2018-12-17T22:35:54.968831305Z 67 PC: 860d5 | Get or set file attributes
2018-12-17T22:35:54.974451448Z 26 PC: 86197 | Set disk transfer address
2018-12-17T22:35:54.975513982Z 79 PC: 8619c | Find next file
2018-12-17T22:35:54.977870417Z 44 PC: 8725e | Get time 0x8725e: mov word ptr [0x3e], cx
0x87262: mov word ptr [0x40], dx
0x87266: retf
0x87267: call 0x872ae
0x8726a: jb 0x8727b
0x8726c: mov cx, word ptr es:[di + 4]
0x87270: cmp cx, 1
0x87273: je 0x8727b
0x87275: xor bx, bx
0x87277: push cs
0x87278: call 0x96dea
0x8727b: retf 4
0x8727e: call 0x872ae
0x87281: jb 0x87296
0x87283: mov ax, cx
0x87285: mov dx, bx
0x87287: mov cx, word ptr es:[di + 4]
0x8728b: cmp cx, 1
0x8728e: je 0x87296
0x87290: xor bx, bx
2018-12-17T22:35:54.981063709Z 26 PC: 86173 | Set disk transfer address
2018-12-17T22:35:54.982070386Z 78 PC: 8617f | Find first file
2018-12-17T22:35:54.983678762Z 48 PC: 86c52 | Get DOS version
2018-12-17T22:35:54.985760653Z 48 PC: 86c52 | Get DOS version
2018-12-17T22:35:54.987062121Z 67 PC: 860d5 | Get or set file attributes
2018-12-17T22:35:54.992643237Z 67 PC: 860fc | Get or set file attributes
2018-12-17T22:35:55.002458999Z 61 PC: 86a90 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:55.010950412Z 87 PC: 86116 | Get or set file date and time
2018-12-17T22:35:55.012541696Z 60 PC: 86a90 | Create or truncate file
2018-12-17T22:35:55.024465265Z 63 PC: 86b63 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:55.032275393Z 64 PC: 86b63 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:55.049277175Z 62 PC: 86ae0 | Close file
2018-12-17T22:35:55.057190705Z 62 PC: 86ae0 | Close file
2018-12-17T22:35:55.059201727Z 26 PC: 86173 | Set disk transfer address
2018-12-17T22:35:55.060392354Z 78 PC: 8617f | Find first file
2018-12-17T22:35:55.069612775Z 48 PC: 86c52 | Get DOS version
2018-12-17T22:35:55.071070649Z 61 PC: 86a90 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:55.077909973Z 61 PC: 86a90 | Open file (Filename = 'A:\TEST')
2018-12-17T22:35:55.084433428Z 64 PC: 86b63 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:55.093181691Z 67 PC: 860fc | Get or set file attributes
2018-12-17T22:35:55.103804929Z 87 PC: 86143 | Get or set file date and time
2018-12-17T22:35:55.105254977Z 62 PC: 86ae0 | Close file
2018-12-17T22:35:55.114521951Z 53 PC: 86346 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:55.116022644Z 37 PC: 8634f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:55.117461935Z 53 PC: 86346 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:55.118730215Z 37 PC: 8634f | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:55.121671695Z 53 PC: 86346 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:55.123410766Z 37 PC: 8634f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:55.124969944Z 53 PC: 86346 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:55.128363806Z 37 PC: 8634f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:55.129941533Z 53 PC: 86346 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:55.131263356Z 37 PC: 8634f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:55.132832609Z 53 PC: 86346 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:55.136087597Z 37 PC: 8634f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:55.137184657Z 53 PC: 86346 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:55.13827609Z 37 PC: 8634f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:55.140198405Z 53 PC: 86346 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:55.142348602Z 37 PC: 8634f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:55.14392964Z 53 PC: 86346 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:55.145205083Z 37 PC: 8634f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:55.146663991Z 53 PC: 86346 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:55.148095701Z 37 PC: 8634f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:55.149079258Z 53 PC: 86346 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:55.150366941Z 37 PC: 8634f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:55.152341301Z 53 PC: 86346 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:55.154113793Z 37 PC: 8634f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:55.155256899Z 53 PC: 86346 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:55.156444187Z 37 PC: 8634f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:55.157935325Z 53 PC: 86346 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:55.159244221Z 37 PC: 8634f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:55.160420934Z 53 PC: 86346 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:55.162059977Z 37 PC: 8634f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:55.164138933Z 53 PC: 86346 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:55.165364839Z 37 PC: 8634f | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:55.166340081Z 53 PC: 86346 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:55.168249652Z 37 PC: 8634f | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:55.171266262Z 53 PC: 86346 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:55.172982584Z 37 PC: 8634f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:55.174394813Z 53 PC: 86346 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:55.177324124Z 37 PC: 8634f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:55.180697843Z 48 PC: 86c52 | Get DOS version
2018-12-17T22:35:55.182333888Z 41 PC: 862fd | Parse filename
2018-12-17T22:35:55.184093312Z 41 PC: 8630b | Parse filename
2018-12-17T22:35:55.187142424Z 75 PC: 86316 | Execute program
2018-12-17T22:35:55.205343906Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:55.206393383Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:55.208725534Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:55.210032775Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:55.21094782Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:55.212032503Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:55.214220129Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:55.224129115Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:55.225484376Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:55.227880529Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:55.229218639Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:55.23026903Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:55.231257009Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:55.233947696Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:55.234932335Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:55.236023248Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:55.237131773Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:55.238317026Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:55.239328073Z 53 PC: 8fbba | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:55.240376716Z 37 PC: 8fbcf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:55.243410309Z 37 PC: 8fbd7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:55.244548164Z 37 PC: 8fbdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:55.245508512Z 37 PC: 8fbe7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:55.246841674Z 68 PC: 90917 | I/O control for devices (Set for = 'P����')
2018-12-17T22:35:55.34088438Z 37 PC: 8f291 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:55.342388123Z 25 PC: 904cf | Get default drive
2018-12-17T22:35:55.343363361Z 71 PC: 904e2 | Get current directory
2018-12-17T22:35:55.346678664Z 14 PC: 90528 | Set default drive (Drive = 'C')
2018-12-17T22:35:55.348222348Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.349430811Z 26 PC: 8f963 | Set disk transfer address
2018-12-17T22:35:55.350455769Z 78 PC: 8f96f | Find first file
2018-12-17T22:35:55.356992389Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.358663643Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.359633547Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.363624301Z 14 PC: 90528 | Set default drive (Drive = 'D')
2018-12-17T22:35:55.365789524Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.367217622Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.368400768Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.369385937Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.373895085Z 14 PC: 90528 | Set default drive (Drive = 'E')
2018-12-17T22:35:55.374974896Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.376053203Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.377211512Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.379201698Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.383260404Z 14 PC: 90528 | Set default drive (Drive = 'F')
2018-12-17T22:35:55.38518043Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.386393761Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.388312665Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.389746839Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.393809494Z 14 PC: 90528 | Set default drive (Drive = 'G')
2018-12-17T22:35:55.394910053Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.396265532Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.398644408Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.400184749Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.40473227Z 14 PC: 90528 | Set default drive (Drive = 'H')
2018-12-17T22:35:55.408143104Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.409750932Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.411291391Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.414528427Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.418687868Z 14 PC: 90528 | Set default drive (Drive = 'I')
2018-12-17T22:35:55.420443206Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.421764383Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.424064106Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.425154892Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.429214218Z 14 PC: 90528 | Set default drive (Drive = 'J')
2018-12-17T22:35:55.430764062Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.431953983Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.433113432Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.434135683Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.43833116Z 14 PC: 90528 | Set default drive (Drive = 'K')
2018-12-17T22:35:55.439693754Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.440753436Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.44181517Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.442737871Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.446878988Z 14 PC: 90528 | Set default drive (Drive = 'L')
2018-12-17T22:35:55.447868274Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.448948864Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.45044109Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.451701313Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.455721279Z 14 PC: 90528 | Set default drive (Drive = 'M')
2018-12-17T22:35:55.45712137Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.458700171Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.46186565Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.463190356Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.467488568Z 14 PC: 90528 | Set default drive (Drive = 'N')
2018-12-17T22:35:55.469036701Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.475203123Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.476352204Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.477361481Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.482014859Z 14 PC: 90528 | Set default drive (Drive = 'O')
2018-12-17T22:35:55.483416768Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.484562983Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.485675267Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.486837691Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.491531249Z 14 PC: 90528 | Set default drive (Drive = 'P')
2018-12-17T22:35:55.492559161Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.493657505Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.495542147Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.496625103Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.500600907Z 14 PC: 90528 | Set default drive (Drive = 'Q')
2018-12-17T22:35:55.501620772Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.503646136Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.504778057Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.505814285Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.510561432Z 14 PC: 90528 | Set default drive (Drive = 'R')
2018-12-17T22:35:55.512908715Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.514005134Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.515081463Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.516173766Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.52025284Z 14 PC: 90528 | Set default drive (Drive = 'S')
2018-12-17T22:35:55.521272861Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.522355874Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.52424037Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.525264015Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.529163977Z 14 PC: 90528 | Set default drive (Drive = 'T')
2018-12-17T22:35:55.53016794Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.531985585Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.533086227Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.534018613Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.545290866Z 14 PC: 90528 | Set default drive (Drive = 'U')
2018-12-17T22:35:55.547730036Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.548880664Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.550163148Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.552167165Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.558900777Z 14 PC: 90528 | Set default drive (Drive = 'V')
2018-12-17T22:35:55.560422076Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.561608612Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.562904354Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.564371922Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.567037727Z 14 PC: 90528 | Set default drive (Drive = 'W')
2018-12-17T22:35:55.568615601Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.573267371Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.574538417Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.575682117Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.579423721Z 14 PC: 90528 | Set default drive (Drive = 'X')
2018-12-17T22:35:55.581005903Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.582071539Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.582960147Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.583731799Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.588132837Z 14 PC: 90528 | Set default drive (Drive = 'Y')
2018-12-17T22:35:55.589054873Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.589885275Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.590928598Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.592724248Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.596022179Z 14 PC: 90528 | Set default drive (Drive = 'Z')
2018-12-17T22:35:55.597091179Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.598141943Z 14 PC: 90528 | Set default drive (Drive = 'A')
2018-12-17T22:35:55.601295501Z 25 PC: 9052c | Get default drive
2018-12-17T22:35:55.602308601Z 59 PC: 90596 | Change current directory
2018-12-17T22:35:55.60678306Z 54 PC: 8f88c | Get free disk space
2018-12-17T22:35:55.610976307Z 26 PC: 8f963 | Set disk transfer address
2018-12-17T22:35:55.614325596Z 78 PC: 8f96f | Find first file
2018-12-17T22:35:55.618920739Z 25 PC: 904cf | Get default drive
2018-12-17T22:35:55.620250582Z 71 PC: 904e2 | Get current directory
2018-12-17T22:35:55.625183264Z 26 PC: 8f963 | Set disk transfer address
2018-12-17T22:35:55.626313272Z 78 PC: 8f96f | Find first file
2018-12-17T22:35:55.631575821Z 67 PC: 8f8c5 | Get or set file attributes
2018-12-17T22:35:55.636456616Z 26 PC: 8f987 | Set disk transfer address
2018-12-17T22:35:55.638470049Z 79 PC: 8f98c | Find next file
2018-12-17T22:35:55.640623063Z 67 PC: 8f8c5 | Get or set file attributes
2018-12-17T22:35:55.644202327Z 26 PC: 8f987 | Set disk transfer address
2018-12-17T22:35:55.645033623Z 79 PC: 8f98c | Find next file
2018-12-17T22:35:55.647568376Z 67 PC: 8f8c5 | Get or set file attributes
2018-12-17T22:35:55.651233911Z 26 PC: 8f987 | Set disk transfer address
2018-12-17T22:35:55.652342829Z 79 PC: 8f98c | Find next file
2018-12-17T22:35:55.654695382Z 67 PC: 8f8c5 | Get or set file attributes
2018-12-17T22:35:55.659371933Z 26 PC: 8f987 | Set disk transfer address
2018-12-17T22:35:55.661419663Z 79 PC: 8f98c | Find next file
2018-12-17T22:35:55.664129369Z 67 PC: 8f8c5 | Get or set file attributes
2018-12-17T22:35:55.669051576Z 26 PC: 8f987 | Set disk transfer address
2018-12-17T22:35:55.669926055Z 79 PC: 8f98c | Find next file
2018-12-17T22:35:55.674279728Z 67 PC: 8f8c5 | Get or set file attributes
2018-12-17T22:35:55.677992526Z 26 PC: 8f987 | Set disk transfer address
2018-12-17T22:35:55.678766146Z 79 PC: 8f98c | Find next file
2018-12-17T22:35:55.680946297Z 67 PC: 8f8c5 | Get or set file attributes
2018-12-17T22:35:55.685088683Z 26 PC: 8f987 | Set disk transfer address
2018-12-17T22:35:55.686180769Z 79 PC: 8f98c | Find next file
2018-12-17T22:35:55.688754418Z 67 PC: 8f8c5 | Get or set file attributes
2018-12-17T22:35:55.694024597Z 26 PC: 8f987 | Set disk transfer address
2018-12-17T22:35:55.695247983Z 79 PC: 8f98c | Find next file
2018-12-17T22:35:55.699865742Z 67 PC: 8f8c5 | Get or set file attributes
2018-12-17T22:35:55.705256343Z 26 PC: 8f987 | Set disk transfer address
2018-12-17T22:35:55.706382571Z 79 PC: 8f98c | Find next file
2018-12-17T22:35:55.710783554Z 67 PC: 8f8c5 | Get or set file attributes
2018-12-17T22:35:55.717423666Z 26 PC: 8f987 | Set disk transfer address
2018-12-17T22:35:55.718679166Z 79 PC: 8f98c | Find next file
2018-12-17T22:35:55.721432657Z 44 PC: 90a4e | Get time 0x90a4e: mov word ptr [0x3e], cx
0x90a52: mov word ptr [0x40], dx
0x90a56: retf
0x90a57: call 0x90a9e
0x90a5a: jb 0x90a6b
0x90a5c: mov cx, word ptr es:[di + 4]
0x90a60: cmp cx, 1
0x90a63: je 0x90a6b
0x90a65: xor bx, bx
0x90a67: push cs
0x90a68: call 0xa05da
0x90a6b: retf 4
0x90a6e: call 0x90a9e
0x90a71: jb 0x90a86
0x90a73: mov ax, cx
0x90a75: mov dx, bx
0x90a77: mov cx, word ptr es:[di + 4]
0x90a7b: cmp cx, 1
0x90a7e: je 0x90a86
0x90a80: xor bx, bx
2018-12-17T22:35:55.724020227Z 26 PC: 8f963 | Set disk transfer address
2018-12-17T22:35:55.727334419Z 78 PC: 8f96f | Find first file
2018-12-17T22:35:55.729099531Z 48 PC: 90442 | Get DOS version
2018-12-17T22:35:55.73047891Z 48 PC: 90442 | Get DOS version
2018-12-17T22:35:55.732774014Z 67 PC: 8f8c5 | Get or set file attributes
2018-12-17T22:35:55.738345979Z 67 PC: 8f8ec | Get or set file attributes
2018-12-17T22:35:55.921512602Z 61 PC: 90280 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:55.928026369Z 87 PC: 8f906 | Get or set file date and time
2018-12-17T22:35:55.931241042Z 60 PC: 90280 | Create or truncate file
2018-12-17T22:35:56.154585217Z 63 PC: 90353 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:56.165365667Z 64 PC: 90353 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:56.189144405Z 62 PC: 902d0 | Close file
2018-12-17T22:35:56.225577906Z 62 PC: 902d0 | Close file
2018-12-17T22:35:56.227184272Z 26 PC: 8f963 | Set disk transfer address
2018-12-17T22:35:56.228163662Z 78 PC: 8f96f | Find first file
2018-12-17T22:35:56.234512777Z 48 PC: 90442 | Get DOS version
2018-12-17T22:35:56.237449269Z 61 PC: 90280 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:56.244301233Z 61 PC: 90280 | Open file (Filename = 'A:\TEST')
2018-12-17T22:35:56.25064832Z 64 PC: 90353 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:56.261567922Z 67 PC: 8f8ec | Get or set file attributes
2018-12-17T22:35:56.282126956Z 87 PC: 8f933 | Get or set file date and time
2018-12-17T22:35:56.283213025Z 62 PC: 902d0 | Close file
2018-12-17T22:35:56.288403124Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:56.289479443Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:56.292890073Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:56.294178631Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:56.295570607Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:56.297009442Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:56.298485685Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:56.299546456Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:56.300517426Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:56.30159633Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:56.303463628Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:56.304587711Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:56.305680019Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:56.306978147Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:56.308264112Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:56.309300461Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:56.310257292Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:56.311285751Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:56.313870251Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:56.31487569Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:56.315843721Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:56.317227182Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:56.318668549Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:56.319674106Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:56.32063096Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:56.322016258Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:56.323104304Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:56.324126227Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:56.3258192Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:56.326810821Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:56.328898653Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:56.32991745Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:56.330847908Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:56.332016474Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:56.33389829Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:56.334900228Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:56.335960145Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:56.337321345Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:56.338796773Z 48 PC: 90442 | Get DOS version
2018-12-17T22:35:56.340085078Z 41 PC: 8faed | Parse filename
2018-12-17T22:35:56.341301156Z 41 PC: 8fafb | Parse filename
2018-12-17T22:35:56.342833597Z 75 PC: 8fb06 | Execute program
2018-12-17T22:35:56.353474646Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:56.354569067Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:56.355568449Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:56.357220228Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:56.359426706Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:56.360471785Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:56.361422006Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:56.362773986Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:56.364543111Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:56.365529017Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:56.366465974Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:56.368449507Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:56.369404727Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:56.37034081Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:56.371406574Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:56.374420385Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:56.375698112Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:56.377265452Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:56.378124692Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:56.379882015Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:56.380940854Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:56.382017927Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:56.383073431Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:56.384410744Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:56.385398673Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:56.386372409Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:56.387306908Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:56.388332256Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:56.391380989Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:56.392428809Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:56.393546302Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:56.394725155Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:56.396001544Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:56.396860657Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:56.397954478Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:56.399084836Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:56.400368858Z 53 PC: 8fb36 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:56.401330894Z 37 PC: 8fb3f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:56.402592267Z 61 PC: 90280 | Open file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:56.409291891Z 48 PC: 90442 | Get DOS version
2018-12-17T22:35:56.410743806Z 67 PC: 8f8ec | Get or set file attributes
2018-12-17T22:35:56.429740802Z 61 PC: 90280 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:56.436179406Z 63 PC: 90353 | Read file or device (Read 7413 bytes on handle 5)
2018-12-17T22:35:56.443536121Z 64 PC: 90353 | Write file or device (Write 7413 bytes on handle 6)
2018-12-17T22:35:56.462580754Z 87 PC: 8f933 | Get or set file date and time
2018-12-17T22:35:56.464001543Z 62 PC: 902d0 | Close file
2018-12-17T22:35:56.48028553Z 62 PC: 902d0 | Close file
2018-12-17T22:35:56.483949923Z 65 PC: 903c9 | Delete file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:56.516889658Z 25 PC: 904cf | Get default drive
2018-12-17T22:35:56.518364793Z 71 PC: 904e2 | Get current directory
2018-12-17T22:35:56.521914779Z 26 PC: 8f963 | Set disk transfer address
2018-12-17T22:35:56.525098685Z 78 PC: 8f96f | Find first file
2018-12-17T22:35:56.536583974Z 25 PC: 904cf | Get default drive
2018-12-17T22:35:56.537907158Z 71 PC: 904e2 | Get current directory
2018-12-17T22:35:56.541586372Z 67 PC: 8f8c5 | Get or set file attributes
2018-12-17T22:35:56.548822969Z 67 PC: 8f8ec | Get or set file attributes
2018-12-17T22:35:56.583075862Z 61 PC: 90280 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:56.590584066Z 66 PC: 90ab8 | Move file pointer
2018-12-17T22:35:56.592531914Z 66 PC: 90ac6 | Move file pointer
2018-12-17T22:35:56.595484828Z 66 PC: 90ad4 | Move file pointer
2018-12-17T22:35:56.596884911Z 66 PC: 903b2 | Move file pointer
2018-12-17T22:35:56.598224886Z 63 PC: 90312 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:56.604737597Z 62 PC: 902d0 | Close file
2018-12-17T22:35:56.60850788Z 67 PC: 8f8ec | Get or set file attributes
2018-12-17T22:35:56.656450318Z 26 PC: 8f987 | Set disk transfer address
2018-12-17T22:35:56.657872759Z 79 PC: 8f98c | Find next file
2018-12-17T22:35:56.665184488Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:56.668708703Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:56.669945166Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:56.671074865Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:56.672146719Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:56.674083296Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:56.675290766Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:56.676383409Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:56.677486226Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:56.678568198Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:56.681247889Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:56.682313591Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:56.683350413Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:56.684398787Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:56.687540508Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:56.688775923Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:56.690041094Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:56.691600154Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:56.692832137Z 37 PC: 8fd11 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:56.693889023Z 76 PC: 8fd50 | Terminate with return code (Return code = '0')
2018-12-17T22:35:56.696364878Z 53 PC: 86346 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:56.697181229Z 37 PC: 8634f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:56.698789271Z 53 PC: 86346 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:56.699625809Z 37 PC: 8634f | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:56.70041306Z 53 PC: 86346 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:56.701245032Z 37 PC: 8634f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:56.702846735Z 53 PC: 86346 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:56.703698747Z 37 PC: 8634f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:56.704698629Z 53 PC: 86346 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:56.70598443Z 37 PC: 8634f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:56.707622275Z 53 PC: 86346 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:56.708444518Z 37 PC: 8634f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:56.709533411Z 53 PC: 86346 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:56.710745595Z 37 PC: 8634f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:56.712087857Z 53 PC: 86346 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:56.713025156Z 37 PC: 8634f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:56.714022289Z 53 PC: 86346 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:56.715109801Z 37 PC: 8634f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:56.716481606Z 53 PC: 86346 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:56.717492682Z 37 PC: 8634f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:56.718432891Z 53 PC: 86346 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:56.719662911Z 37 PC: 8634f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:56.721572939Z 53 PC: 86346 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:56.722538779Z 37 PC: 8634f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:56.723498865Z 53 PC: 86346 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:56.724781836Z 37 PC: 8634f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:56.725757025Z 53 PC: 86346 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:56.726738111Z 37 PC: 8634f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:56.727675144Z 53 PC: 86346 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:56.728636153Z 37 PC: 8634f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:56.730007678Z 53 PC: 86346 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:56.731192684Z 37 PC: 8634f | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:56.732138972Z 53 PC: 86346 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:56.733139449Z 37 PC: 8634f | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:56.734788659Z 53 PC: 86346 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:56.735773087Z 37 PC: 8634f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:56.736663786Z 53 PC: 86346 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:56.737675261Z 37 PC: 8634f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:56.73934261Z 61 PC: 86a90 | Open file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:56.745481826Z 48 PC: 86c52 | Get DOS version
2018-12-17T22:35:56.746767382Z 67 PC: 860fc | Get or set file attributes
2018-12-17T22:35:56.809367817Z 61 PC: 86a90 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:56.816096207Z 64 PC: 86b63 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:56.869312821Z 87 PC: 86143 | Get or set file date and time
2018-12-17T22:35:56.87084982Z 62 PC: 86ae0 | Close file
2018-12-17T22:35:56.931408666Z 65 PC: 86bd9 | Delete file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:56.937573002Z 25 PC: 86cdf | Get default drive
2018-12-17T22:35:56.940022434Z 71 PC: 86cf2 | Get current directory
2018-12-17T22:35:56.943432794Z 26 PC: 86173 | Set disk transfer address
2018-12-17T22:35:56.944779512Z 78 PC: 8617f | Find first file
2018-12-17T22:35:56.956321086Z 25 PC: 86cdf | Get default drive
2018-12-17T22:35:56.957724086Z 71 PC: 86cf2 | Get current directory
2018-12-17T22:35:56.966340353Z 67 PC: 860d5 | Get or set file attributes
2018-12-17T22:35:56.974845782Z 67 PC: 860fc | Get or set file attributes
2018-12-17T22:35:57.064259772Z 61 PC: 86a90 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:57.071201844Z 66 PC: 872c8 | Move file pointer
2018-12-17T22:35:57.072442046Z 66 PC: 872d6 | Move file pointer
2018-12-17T22:35:57.073688015Z 66 PC: 872e4 | Move file pointer
2018-12-17T22:35:57.075267632Z 66 PC: 86bc2 | Move file pointer
2018-12-17T22:35:57.0771259Z 63 PC: 86b22 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:57.083772272Z 62 PC: 86ae0 | Close file
2018-12-17T22:35:57.085574285Z 67 PC: 860fc | Get or set file attributes
2018-12-17T22:35:57.176792768Z 26 PC: 86197 | Set disk transfer address
2018-12-17T22:35:57.180108607Z 79 PC: 8619c | Find next file
2018-12-17T22:35:57.186945943Z 37 PC: 86521 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:57.188079449Z 37 PC: 86521 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:57.191816243Z 37 PC: 86521 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:57.193046196Z 37 PC: 86521 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:57.19478402Z 37 PC: 86521 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:57.196841438Z 37 PC: 86521 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:57.198691844Z 37 PC: 86521 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:57.200289574Z 37 PC: 86521 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:57.201499327Z 37 PC: 86521 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:57.202714081Z 37 PC: 86521 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:57.20426189Z 37 PC: 86521 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:57.209427142Z 37 PC: 86521 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:57.210571581Z 37 PC: 86521 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:57.21206077Z 37 PC: 86521 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:57.213213108Z 37 PC: 86521 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:57.214832053Z 37 PC: 86521 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:57.217277934Z 37 PC: 86521 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:57.218636966Z 37 PC: 86521 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:57.220088569Z 37 PC: 86521 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:57.221475781Z 76 PC: 86560 | Terminate with return code (Return code = '0')
2018-12-17T22:35:57.224814074Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:57.225764096Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:57.227622646Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:57.228610033Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:57.23065565Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:57.231503563Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:57.232608983Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:57.234011092Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:57.235526474Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:57.236519811Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:57.237692312Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:57.239079778Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:57.240832215Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:57.241820434Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:57.242664574Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:57.243590248Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:57.24521826Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:57.246199861Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:57.247186595Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:57.247995449Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:57.249484954Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:57.251024836Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:57.252060043Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:57.252977715Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:57.253973288Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:57.255929847Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:57.256710241Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:57.257904515Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:57.258847282Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:57.260763307Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:57.261606971Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:57.262339268Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:57.263256722Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:57.265028697Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:57.269499792Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:57.270574303Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:57.27165134Z 53 PC: 7cb56 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:57.272852342Z 37 PC: 7cb5f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:57.274024795Z 61 PC: 7d2a0 | Open file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:57.278216263Z 48 PC: 7d462 | Get DOS version
2018-12-17T22:35:57.279234974Z 67 PC: 7c90c | Get or set file attributes
2018-12-17T22:35:57.285970833Z 61 PC: 7d2a0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:57.291952715Z 64 PC: 7d373 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:57.298445478Z 87 PC: 7c953 | Get or set file date and time
2018-12-17T22:35:57.300372302Z 62 PC: 7d2f0 | Close file
2018-12-17T22:35:57.30771757Z 65 PC: 7d3e9 | Delete file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:57.315306623Z 25 PC: 7d4ef | Get default drive
2018-12-17T22:35:57.316300848Z 71 PC: 7d502 | Get current directory
2018-12-17T22:35:57.319440734Z 26 PC: 7c983 | Set disk transfer address
2018-12-17T22:35:57.320994472Z 78 PC: 7c98f | Find first file
2018-12-17T22:35:57.326305238Z 25 PC: 7d4ef | Get default drive
2018-12-17T22:35:57.327338115Z 71 PC: 7d502 | Get current directory
2018-12-17T22:35:57.329549514Z 67 PC: 7c8e5 | Get or set file attributes
2018-12-17T22:35:57.338913956Z 67 PC: 7c90c | Get or set file attributes
2018-12-17T22:35:57.358673189Z 61 PC: 7d2a0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:57.3658059Z 66 PC: 7dad8 | Move file pointer
2018-12-17T22:35:57.367018282Z 66 PC: 7dae6 | Move file pointer
2018-12-17T22:35:57.368684276Z 66 PC: 7daf4 | Move file pointer
2018-12-17T22:35:57.370173005Z 66 PC: 7d3d2 | Move file pointer
2018-12-17T22:35:57.372400782Z 63 PC: 7d332 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:57.377729784Z 62 PC: 7d2f0 | Close file
2018-12-17T22:35:57.379547627Z 67 PC: 7c90c | Get or set file attributes
2018-12-17T22:35:57.389660976Z 26 PC: 7c9a7 | Set disk transfer address
2018-12-17T22:35:57.391714585Z 79 PC: 7c9ac | Find next file
2018-12-17T22:35:57.398138628Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:57.399320553Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:57.40065179Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:57.402270708Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:57.405446598Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:57.406792566Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:57.408211399Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:57.411527387Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:57.412873765Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:57.414223746Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:57.415695574Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:57.419228766Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:57.420633153Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:57.422125568Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:57.423509219Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:57.427221768Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:57.428582233Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:57.429988622Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:57.431375489Z 37 PC: 7cd31 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:57.434333304Z 76 PC: 7cd70 | Terminate with return code (Return code = '0')
2018-12-17T22:35:57.437302261Z 53 PC: 73366 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:57.438637697Z 37 PC: 7336f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:57.439914575Z 53 PC: 73366 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:57.442641983Z 37 PC: 7336f | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:57.443671501Z 53 PC: 73366 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:57.444669951Z 37 PC: 7336f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:57.445711237Z 53 PC: 73366 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:57.447958474Z 37 PC: 7336f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:57.449282703Z 53 PC: 73366 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:57.450726552Z 37 PC: 7336f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:57.452941662Z 53 PC: 73366 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:57.456212348Z 37 PC: 7336f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:57.457581634Z 53 PC: 73366 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:57.472618093Z 37 PC: 7336f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:57.474235024Z 53 PC: 73366 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:57.477688967Z 37 PC: 7336f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:57.479489741Z 53 PC: 73366 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:57.481789117Z 37 PC: 7336f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:57.483955305Z 53 PC: 73366 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:57.486948244Z 37 PC: 7336f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:57.488460898Z 53 PC: 73366 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:57.49034372Z 37 PC: 7336f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:57.493528964Z 53 PC: 73366 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:57.495036577Z 37 PC: 7336f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:57.49654792Z 53 PC: 73366 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:57.498094794Z 37 PC: 7336f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:57.50113676Z 53 PC: 73366 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:57.502415186Z 37 PC: 7336f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:57.503499037Z 53 PC: 73366 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:57.504495378Z 37 PC: 7336f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:57.506468365Z 53 PC: 73366 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:57.507705713Z 37 PC: 7336f | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:57.508770409Z 53 PC: 73366 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:57.509802974Z 37 PC: 7336f | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:57.51228196Z 53 PC: 73366 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:57.513403808Z 37 PC: 7336f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:57.514364219Z 53 PC: 73366 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:57.515389949Z 37 PC: 7336f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:57.517208117Z 61 PC: 73ab0 | Open file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:57.524170813Z 48 PC: 73c72 | Get DOS version
2018-12-17T22:35:57.525768684Z 67 PC: 7311c | Get or set file attributes
2018-12-17T22:35:57.535658047Z 61 PC: 73ab0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:57.543312474Z 64 PC: 73b83 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:57.553283478Z 87 PC: 73163 | Get or set file date and time
2018-12-17T22:35:57.554724915Z 62 PC: 73b00 | Close file
2018-12-17T22:35:57.559752734Z 65 PC: 73bf9 | Delete file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:57.566493101Z 25 PC: 73cff | Get default drive
2018-12-17T22:35:57.569519062Z 71 PC: 73d12 | Get current directory
2018-12-17T22:35:57.572872107Z 26 PC: 73193 | Set disk transfer address
2018-12-17T22:35:57.574193984Z 78 PC: 7319f | Find first file
2018-12-17T22:35:57.580527959Z 25 PC: 73cff | Get default drive
2018-12-17T22:35:57.583275618Z 71 PC: 73d12 | Get current directory
2018-12-17T22:35:57.591347394Z 67 PC: 730f5 | Get or set file attributes
2018-12-17T22:35:57.597749037Z 67 PC: 7311c | Get or set file attributes
2018-12-17T22:35:57.605580852Z 61 PC: 73ab0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:57.610633336Z 66 PC: 742e8 | Move file pointer
2018-12-17T22:35:57.611702058Z 66 PC: 742f6 | Move file pointer
2018-12-17T22:35:57.612722145Z 66 PC: 74304 | Move file pointer
2018-12-17T22:35:57.614173196Z 66 PC: 73be2 | Move file pointer
2018-12-17T22:35:57.615748482Z 63 PC: 73b42 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:57.626250143Z 62 PC: 73b00 | Close file
2018-12-17T22:35:57.627830999Z 67 PC: 7311c | Get or set file attributes
2018-12-17T22:35:57.634805864Z 26 PC: 731b7 | Set disk transfer address
2018-12-17T22:35:57.636007677Z 79 PC: 731bc | Find next file
2018-12-17T22:35:57.643903472Z 37 PC: 73541 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:57.645002917Z 37 PC: 73541 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:57.646079375Z 37 PC: 73541 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:57.64714272Z 37 PC: 73541 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:57.648877109Z 37 PC: 73541 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:57.6504753Z 37 PC: 73541 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:57.651845658Z 37 PC: 73541 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:57.65286129Z 37 PC: 73541 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:57.654616674Z 37 PC: 73541 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:57.655954502Z 37 PC: 73541 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:57.657226334Z 37 PC: 73541 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:57.658359452Z 37 PC: 73541 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:57.659553442Z 37 PC: 73541 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:57.6616606Z 37 PC: 73541 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:57.662806142Z 37 PC: 73541 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:57.664165545Z 37 PC: 73541 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:57.665308064Z 37 PC: 73541 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:57.66715999Z 37 PC: 73541 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:57.668286855Z 37 PC: 73541 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:57.669407871Z 76 PC: 73580 | Terminate with return code (Return code = '0')
2018-12-17T22:35:57.672361481Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:57.67359044Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:57.675134788Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:57.676414859Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:57.677423322Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:57.67841187Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:57.679390397Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:57.681376433Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:57.682387983Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:57.683474673Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:57.68446449Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:57.686251821Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:57.687243065Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:57.688385288Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:57.689443931Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:57.690866936Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:57.691874411Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:57.692902339Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:57.694004929Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:57.695418393Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:57.697024045Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:57.698136467Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:57.699232519Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:57.700323626Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:57.70210839Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:57.703877039Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:57.705029126Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:57.706147789Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:57.707180681Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:57.709534799Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:57.710588822Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:57.711719279Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:57.712959285Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:57.714221872Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:57.716305484Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:57.717695891Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:57.718773954Z 53 PC: 69b76 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:57.719790241Z 37 PC: 69b7f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:57.721843312Z 61 PC: 6a2c0 | Open file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:57.726715967Z 48 PC: 6a482 | Get DOS version
2018-12-17T22:35:57.727776954Z 67 PC: 6992c | Get or set file attributes
2018-12-17T22:35:57.734946374Z 61 PC: 6a2c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:57.740006311Z 64 PC: 6a393 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:57.748873716Z 87 PC: 69973 | Get or set file date and time
2018-12-17T22:35:57.750348203Z 62 PC: 6a310 | Close file
2018-12-17T22:35:57.75788281Z 65 PC: 6a409 | Delete file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:57.764201545Z 25 PC: 6a50f | Get default drive
2018-12-17T22:35:57.766012208Z 71 PC: 6a522 | Get current directory
2018-12-17T22:35:57.770417955Z 26 PC: 699a3 | Set disk transfer address
2018-12-17T22:35:57.771438352Z 78 PC: 699af | Find first file
2018-12-17T22:35:57.782492097Z 25 PC: 6a50f | Get default drive
2018-12-17T22:35:57.783768531Z 71 PC: 6a522 | Get current directory
2018-12-17T22:35:57.787181606Z 67 PC: 69905 | Get or set file attributes
2018-12-17T22:35:57.792697037Z 67 PC: 6992c | Get or set file attributes
2018-12-17T22:35:57.802213006Z 61 PC: 6a2c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:57.80861599Z 66 PC: 6aaf8 | Move file pointer
2018-12-17T22:35:57.812951053Z 66 PC: 6ab06 | Move file pointer
2018-12-17T22:35:57.814340152Z 66 PC: 6ab14 | Move file pointer
2018-12-17T22:35:57.81601586Z 66 PC: 6a3f2 | Move file pointer
2018-12-17T22:35:57.817497165Z 63 PC: 6a352 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:57.825331528Z 62 PC: 6a310 | Close file
2018-12-17T22:35:57.827157678Z 67 PC: 6992c | Get or set file attributes
2018-12-17T22:35:57.839336117Z 26 PC: 699c7 | Set disk transfer address
2018-12-17T22:35:57.840452515Z 79 PC: 699cc | Find next file
2018-12-17T22:35:57.84751038Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:57.849379595Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:57.850502208Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:57.851477861Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:57.852480258Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:57.853746685Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:57.854698498Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:57.855876839Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:57.85703316Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:57.858452844Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:57.859477149Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:57.860444198Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:57.861486979Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:57.863028151Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:57.863989956Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:57.864931027Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:57.865909357Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:57.867126647Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:57.86832617Z 37 PC: 69d51 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:57.869433267Z 76 PC: 69d90 | Terminate with return code (Return code = '0')
2018-12-17T22:35:57.872360201Z 53 PC: 60386 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:57.87338981Z 37 PC: 6038f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:57.875232801Z 53 PC: 60386 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:57.876255316Z 37 PC: 6038f | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:57.877222593Z 53 PC: 60386 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:57.878199407Z 37 PC: 6038f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:57.879268394Z 53 PC: 60386 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:57.880678698Z 37 PC: 6038f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:57.881960752Z 53 PC: 60386 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:57.88317121Z 37 PC: 6038f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:57.884553835Z 53 PC: 60386 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:57.887536197Z 37 PC: 6038f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:57.88857263Z 53 PC: 60386 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:57.890039966Z 37 PC: 6038f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:57.891277799Z 53 PC: 60386 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:57.892925909Z 37 PC: 6038f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:57.894343896Z 53 PC: 60386 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:57.895761615Z 37 PC: 6038f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:57.897172151Z 53 PC: 60386 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:57.899229523Z 37 PC: 6038f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:57.90058961Z 53 PC: 60386 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:57.903318006Z 37 PC: 6038f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:57.904647413Z 53 PC: 60386 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:57.906123636Z 37 PC: 6038f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:57.908739762Z 53 PC: 60386 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:57.909840842Z 37 PC: 6038f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:57.910894758Z 53 PC: 60386 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:57.911961919Z 37 PC: 6038f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:57.913522746Z 53 PC: 60386 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:57.914876905Z 37 PC: 6038f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:57.915964521Z 53 PC: 60386 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:57.917020912Z 37 PC: 6038f | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:57.918075398Z 53 PC: 60386 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:57.91951559Z 37 PC: 6038f | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:57.920706481Z 53 PC: 60386 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:57.921736634Z 37 PC: 6038f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:57.922821994Z 53 PC: 60386 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:57.923818812Z 37 PC: 6038f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:57.926726108Z 61 PC: 60ad0 | Open file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:57.933133915Z 48 PC: 60c92 | Get DOS version
2018-12-17T22:35:57.934648149Z 67 PC: 6013c | Get or set file attributes
2018-12-17T22:35:57.945085223Z 61 PC: 60ad0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:57.951966497Z 64 PC: 60ba3 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:57.960516316Z 87 PC: 60183 | Get or set file date and time
2018-12-17T22:35:57.962151778Z 62 PC: 60b20 | Close file
2018-12-17T22:35:57.969634452Z 65 PC: 60c19 | Delete file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:57.975854271Z 25 PC: 60d1f | Get default drive
2018-12-17T22:35:57.979288796Z 71 PC: 60d32 | Get current directory
2018-12-17T22:35:57.982340941Z 26 PC: 601b3 | Set disk transfer address
2018-12-17T22:35:57.983302539Z 78 PC: 601bf | Find first file
2018-12-17T22:35:57.994318805Z 25 PC: 60d1f | Get default drive
2018-12-17T22:35:57.996052204Z 71 PC: 60d32 | Get current directory
2018-12-17T22:35:58.004424913Z 67 PC: 60115 | Get or set file attributes
2018-12-17T22:35:58.013192888Z 67 PC: 6013c | Get or set file attributes
2018-12-17T22:35:58.022787208Z 61 PC: 60ad0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:58.029727112Z 66 PC: 61308 | Move file pointer
2018-12-17T22:35:58.032008275Z 66 PC: 61316 | Move file pointer
2018-12-17T22:35:58.034314724Z 66 PC: 61324 | Move file pointer
2018-12-17T22:35:58.036133476Z 66 PC: 60c02 | Move file pointer
2018-12-17T22:35:58.037856606Z 63 PC: 60b62 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:58.044865156Z 62 PC: 60b20 | Close file
2018-12-17T22:35:58.047286973Z 67 PC: 6013c | Get or set file attributes
2018-12-17T22:35:58.057659593Z 26 PC: 601d7 | Set disk transfer address
2018-12-17T22:35:58.059184874Z 79 PC: 601dc | Find next file
2018-12-17T22:35:58.066109907Z 37 PC: 60561 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:58.067589205Z 37 PC: 60561 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:58.069587318Z 37 PC: 60561 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:58.070639769Z 37 PC: 60561 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:58.071661862Z 37 PC: 60561 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:58.07266725Z 37 PC: 60561 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:58.074795087Z 37 PC: 60561 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:58.077079297Z 37 PC: 60561 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:58.078687666Z 37 PC: 60561 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:58.079794599Z 37 PC: 60561 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:58.081455032Z 37 PC: 60561 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:58.084216662Z 37 PC: 60561 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:58.085553849Z 37 PC: 60561 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:58.086887284Z 37 PC: 60561 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:58.088169331Z 37 PC: 60561 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:58.092713067Z 37 PC: 60561 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:58.093875686Z 37 PC: 60561 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:58.094854902Z 37 PC: 60561 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:58.095817431Z 37 PC: 60561 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:58.097891313Z 76 PC: 605a0 | Terminate with return code (Return code = '0')
2018-12-17T22:35:58.100722718Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:58.101754022Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:58.102730667Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:58.104323693Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:58.105818866Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:58.1071316Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:58.108423431Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:58.109747928Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:58.111916026Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:58.11288394Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:58.113877533Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:58.115185951Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:58.119103992Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:58.120348186Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:58.121688863Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:58.122998331Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:58.124717037Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:58.126956144Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:58.128359088Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:58.129790792Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:58.131206385Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:58.132936594Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:58.134089618Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:58.13534657Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:58.136329917Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:58.137349701Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:58.139216963Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:58.140373639Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:58.141549579Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:58.142426508Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:58.144396736Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:58.145281285Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:58.146057559Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:58.14738112Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:58.149211658Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:58.150885606Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:58.151841538Z 53 PC: 56b96 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:58.152724809Z 37 PC: 56b9f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:58.154296549Z 61 PC: 572e0 | Open file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:58.160816274Z 48 PC: 574a2 | Get DOS version
2018-12-17T22:35:58.16211457Z 67 PC: 5694c | Get or set file attributes
2018-12-17T22:35:58.171721852Z 61 PC: 572e0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:58.178833385Z 64 PC: 573b3 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:58.187514526Z 87 PC: 56993 | Get or set file date and time
2018-12-17T22:35:58.189516078Z 62 PC: 57330 | Close file
2018-12-17T22:35:58.195174793Z 65 PC: 57429 | Delete file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:58.201342334Z 25 PC: 5752f | Get default drive
2018-12-17T22:35:58.202322747Z 71 PC: 57542 | Get current directory
2018-12-17T22:35:58.205675935Z 26 PC: 569c3 | Set disk transfer address
2018-12-17T22:35:58.208710295Z 78 PC: 569cf | Find first file
2018-12-17T22:35:58.21465316Z 25 PC: 5752f | Get default drive
2018-12-17T22:35:58.215558094Z 71 PC: 57542 | Get current directory
2018-12-17T22:35:58.223295402Z 67 PC: 56925 | Get or set file attributes
2018-12-17T22:35:58.234950809Z 67 PC: 5694c | Get or set file attributes
2018-12-17T22:35:58.24477119Z 61 PC: 572e0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:58.251053665Z 66 PC: 57b18 | Move file pointer
2018-12-17T22:35:58.252378205Z 66 PC: 57b26 | Move file pointer
2018-12-17T22:35:58.25573538Z 66 PC: 57b34 | Move file pointer
2018-12-17T22:35:58.257092503Z 66 PC: 57412 | Move file pointer
2018-12-17T22:35:58.258328532Z 63 PC: 57372 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:58.26481903Z 62 PC: 57330 | Close file
2018-12-17T22:35:58.267594064Z 67 PC: 5694c | Get or set file attributes
2018-12-17T22:35:58.278157871Z 26 PC: 569e7 | Set disk transfer address
2018-12-17T22:35:58.279461606Z 79 PC: 569ec | Find next file
2018-12-17T22:35:58.286060019Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:58.28742165Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:58.290613025Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:58.29193162Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:58.293244807Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:58.294574822Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:58.296928536Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:58.29804228Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:58.299106292Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:58.300147585Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:58.301522086Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:58.302689037Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:58.303777984Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:58.305504531Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:58.306930756Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:58.308991987Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:58.310606888Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:58.312036097Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:58.313509495Z 37 PC: 56d71 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:58.315017857Z 76 PC: 56db0 | Terminate with return code (Return code = '0')
2018-12-17T22:35:58.320556214Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:58.322088152Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:58.323549288Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:58.325031779Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:58.328129349Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:58.330155652Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:58.331571386Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:58.332777294Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:58.333758644Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:58.335903668Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:58.33709347Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:58.338417243Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:58.339684011Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:58.341575587Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:58.342946293Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:58.344099287Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:58.345168785Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:58.346402694Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:58.349527882Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:58.35078976Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:58.351786364Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:58.352851509Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:58.354976417Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:58.356002395Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:58.356970522Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:58.35801322Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:58.360133956Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:58.361512162Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:35:58.362583573Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:58.36377668Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:35:58.365036517Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:58.366547372Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:35:58.367569468Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:58.368716047Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:35:58.369624879Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:58.371150665Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:35:58.372285345Z 53 PC: 4d3a6 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:58.373314061Z 37 PC: 4d3af | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:35:58.374625474Z 61 PC: 4daf0 | Open file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:58.381036243Z 48 PC: 4dcb2 | Get DOS version
2018-12-17T22:35:58.382908535Z 67 PC: 4d15c | Get or set file attributes
2018-12-17T22:35:58.393260826Z 61 PC: 4daf0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:58.400085819Z 64 PC: 4dbc3 | Write file or device (Write 7413 bytes on handle 5)
2018-12-17T22:35:58.4108978Z 87 PC: 4d1a3 | Get or set file date and time
2018-12-17T22:35:58.41250603Z 62 PC: 4db40 | Close file
2018-12-17T22:35:58.421183837Z 65 PC: 4dc39 | Delete file (Filename = 'A:\TEMP.INV')
2018-12-17T22:35:58.427392988Z 25 PC: 4dd3f | Get default drive
2018-12-17T22:35:58.428486686Z 71 PC: 4dd52 | Get current directory
2018-12-17T22:35:58.431588336Z 26 PC: 4d1d3 | Set disk transfer address
2018-12-17T22:35:58.433549693Z 78 PC: 4d1df | Find first file
2018-12-17T22:35:58.439567138Z 25 PC: 4dd3f | Get default drive
2018-12-17T22:35:58.440710924Z 71 PC: 4dd52 | Get current directory
2018-12-17T22:35:58.448636787Z 67 PC: 4d135 | Get or set file attributes
2018-12-17T22:35:58.459275881Z 67 PC: 4d15c | Get or set file attributes
2018-12-17T22:35:58.471727534Z 61 PC: 4daf0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:35:58.478437444Z 66 PC: 4e328 | Move file pointer
2018-12-17T22:35:58.479700953Z 66 PC: 4e336 | Move file pointer
2018-12-17T22:35:58.480952062Z 66 PC: 4e344 | Move file pointer
2018-12-17T22:35:58.482951386Z 66 PC: 4dc22 | Move file pointer
2018-12-17T22:35:58.484308699Z 63 PC: 4db82 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:35:58.49083966Z 62 PC: 4db40 | Close file
2018-12-17T22:35:58.492489489Z 67 PC: 4d15c | Get or set file attributes
2018-12-17T22:35:58.502245288Z 26 PC: 4d1f7 | Set disk transfer address
2018-12-17T22:35:58.503550467Z 79 PC: 4d1fc | Find next file
2018-12-17T22:35:58.509935799Z 37 PC: 4d581 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:35:58.510943276Z 37 PC: 4d581 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:35:58.511959744Z 37 PC: 4d581 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:35:58.512961291Z 37 PC: 4d581 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:58.514225239Z 37 PC: 4d581 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:35:58.515707Z 37 PC: 4d581 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:58.5169628Z 37 PC: 4d581 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:35:58.517965009Z 37 PC: 4d581 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:35:58.518920813Z 37 PC: 4d581 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:35:58.520145783Z 37 PC: 4d581 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:35:58.521376091Z 37 PC: 4d581 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:35:58.522339965Z 37 PC: 4d581 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:35:58.523295297Z 37 PC: 4d581 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:35:58.524279Z 37 PC: 4d581 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')