Sample viewer

vx.netlux.org/Virus.DOS.HLLC.Evenbeep.d

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:41:38.689291973Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:38.691377728Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:38.692410176Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:38.693440227Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:38.695386932Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:38.696518988Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:38.697546152Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:38.698980118Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:38.699990642Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:38.700974846Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:38.702507169Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:38.703673317Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:38.70495843Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:38.706674073Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:38.707744584Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:38.708717073Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:38.710340454Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:38.711724828Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:38.712906988Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:38.71472577Z 37 PC: 130b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:38.715884788Z 37 PC: 130bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:38.716888545Z 37 PC: 130c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:38.718145783Z 37 PC: 130cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:38.722116784Z 68 PC: 1343f | I/O control for devices (Set for = '')
2018-12-17T22:41:38.723672751Z 25 PC: 12fa9 | Get default drive
2018-12-17T22:41:38.724742553Z 71 PC: 12fc8 | Get current directory
2018-12-17T22:41:38.728622355Z 48 PC: 13a28 | Get DOS version
2018-12-17T22:41:38.730218443Z 61 PC: 13874 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:41:38.736939779Z 63 PC: 13947 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:38.744781016Z 62 PC: 138c4 | Close file
2018-12-17T22:41:38.750913768Z 44 PC: 137f5 | Get time 0x137f5: mov word ptr [0x3e], cx
0x137f9: mov word ptr [0x40], dx
0x137fd: retf
0x137fe: mov bx, sp
0x13800: push ds
0x13801: les di, ptr ss:[bx + 8]
0x13805: lds si, ptr ss:[bx + 4]
0x13809: cld
0x1380a: xor ax, ax
0x1380c: stosw word ptr es:[di], ax
0x1380d: mov ax, 0xd7b0
0x13810: stosw word ptr es:[di], ax
0x13811: xor ax, ax
0x13813: mov cx, 0x16
0x13816: rep stosd dword ptr es:[di], eax
0x13818: lodsb al, byte ptr [si]
0x13819: cmp al, 0x4f
0x1381b: jbe 0x1381f
0x1381d: mov al, 0x4f
0x1381f: mov cl, al
2018-12-17T22:41:38.753569247Z 26 PC: 12e8b | Set disk transfer address
2018-12-17T22:41:38.75590723Z 78 PC: 12e97 | Find first file
2018-12-17T22:41:38.764735038Z 26 PC: 12e8b | Set disk transfer address
2018-12-17T22:41:38.7663932Z 78 PC: 12e97 | Find first file
2018-12-17T22:41:38.774129818Z 60 PC: 13874 | Create or truncate file
2018-12-17T22:41:38.793237042Z 64 PC: 13947 | Write file or device (Write 7410 bytes on handle 5)
2018-12-17T22:41:38.802256244Z 87 PC: 12e5b | Get or set file date and time
2018-12-17T22:41:38.80443114Z 62 PC: 138c4 | Close file
2018-12-17T22:41:38.812179874Z 26 PC: 12eaf | Set disk transfer address
2018-12-17T22:41:38.813299338Z 79 PC: 12eb4 | Find next file
2018-12-17T22:41:38.820242434Z 26 PC: 12e8b | Set disk transfer address
2018-12-17T22:41:38.822238229Z 78 PC: 12e97 | Find first file
2018-12-17T22:41:38.828141223Z 48 PC: 13a28 | Get DOS version
2018-12-17T22:41:38.829893903Z 48 PC: 13a28 | Get DOS version
2018-12-17T22:41:38.833633316Z 41 PC: 12f42 | Parse filename
2018-12-17T22:41:38.835035803Z 41 PC: 12f50 | Parse filename
2018-12-17T22:41:38.836460348Z 75 PC: 12f5b | Execute program
2018-12-17T22:41:38.853263215Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:38.854859284Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:38.856842014Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:38.859588033Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:38.861178561Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:38.862650894Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:38.864757417Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:38.866117474Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:38.867294949Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:38.870776326Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:38.872178211Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:38.873369959Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:38.875633025Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:38.876756702Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:38.877813079Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:38.879602172Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:38.880750321Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:38.8818813Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:38.883405938Z 53 PC: 18ea2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:38.884581606Z 37 PC: 18eb7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:38.887257413Z 37 PC: 18ebf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:38.889525269Z 37 PC: 18ec7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:38.891054131Z 37 PC: 18ecf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:38.89293859Z 68 PC: 1923f | I/O control for devices (Set for = '')
2018-12-17T22:41:38.895751108Z 25 PC: 18da9 | Get default drive
2018-12-17T22:41:38.896926617Z 71 PC: 18dc8 | Get current directory
2018-12-17T22:41:38.900459587Z 48 PC: 19828 | Get DOS version
2018-12-17T22:41:38.902561328Z 61 PC: 19674 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:38.909403915Z 63 PC: 19747 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:38.917154043Z 62 PC: 196c4 | Close file
2018-12-17T22:41:38.921610704Z 44 PC: 195f5 | Get time 0x195f5: mov word ptr [0x3e], cx
0x195f9: mov word ptr [0x40], dx
0x195fd: retf
0x195fe: mov bx, sp
0x19600: push ds
0x19601: les di, ptr ss:[bx + 8]
0x19605: lds si, ptr ss:[bx + 4]
0x19609: cld
0x1960a: xor ax, ax
0x1960c: stosw word ptr es:[di], ax
0x1960d: mov ax, 0xd7b0
0x19610: stosw word ptr es:[di], ax
0x19611: xor ax, ax
0x19613: mov cx, 0x16
0x19616: rep stosd dword ptr es:[di], eax
0x19618: lodsb al, byte ptr [si]
0x19619: cmp al, 0x4f
0x1961b: jbe 0x1961f
0x1961d: mov al, 0x4f
0x1961f: mov cl, al
2018-12-17T22:41:38.924817307Z 26 PC: 18c8b | Set disk transfer address
2018-12-17T22:41:38.926027976Z 78 PC: 18c97 | Find first file
2018-12-17T22:41:38.933603818Z 26 PC: 18c8b | Set disk transfer address
2018-12-17T22:41:38.934874083Z 78 PC: 18c97 | Find first file
2018-12-17T22:41:38.9423584Z 26 PC: 18caf | Set disk transfer address
2018-12-17T22:41:38.944718354Z 79 PC: 18cb4 | Find next file
2018-12-17T22:41:38.947548075Z 26 PC: 18c8b | Set disk transfer address
2018-12-17T22:41:38.948602146Z 78 PC: 18c97 | Find first file
2018-12-17T22:41:38.956405121Z 48 PC: 19828 | Get DOS version
2018-12-17T22:41:38.957792421Z 48 PC: 19828 | Get DOS version
2018-12-17T22:41:38.959449403Z 41 PC: 18d42 | Parse filename
2018-12-17T22:41:38.96100338Z 41 PC: 18d50 | Parse filename
2018-12-17T22:41:38.963657908Z 75 PC: 18d5b | Execute program
2018-12-17T22:41:38.978274178Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:38.979447778Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:38.981703228Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:38.982883487Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:38.985858443Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:38.989838075Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:38.99123348Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:38.992803898Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:38.995400605Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:38.996692167Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:38.997814796Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:39.000309006Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:39.001478909Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:39.002638756Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:39.004735992Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:39.00591861Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:39.007070588Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:39.009113245Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.0102441Z 53 PC: 1eca2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:39.011359818Z 37 PC: 1ecb7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.013382479Z 37 PC: 1ecbf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.014530648Z 37 PC: 1ecc7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.015580341Z 37 PC: 1eccf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.017985706Z 68 PC: 1f03f | I/O control for devices (Set for = '')
2018-12-17T22:41:39.019595139Z 25 PC: 1eba9 | Get default drive
2018-12-17T22:41:39.020686352Z 71 PC: 1ebc8 | Get current directory
2018-12-17T22:41:39.025144089Z 48 PC: 1f628 | Get DOS version
2018-12-17T22:41:39.026786916Z 61 PC: 1f474 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:39.033744592Z 63 PC: 1f547 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:39.042250916Z 62 PC: 1f4c4 | Close file
2018-12-17T22:41:39.044074843Z 44 PC: 1f3f5 | Get time 0x1f3f5: mov word ptr [0x3e], cx
0x1f3f9: mov word ptr [0x40], dx
0x1f3fd: retf
0x1f3fe: mov bx, sp
0x1f400: push ds
0x1f401: les di, ptr ss:[bx + 8]
0x1f405: lds si, ptr ss:[bx + 4]
0x1f409: cld
0x1f40a: xor ax, ax
0x1f40c: stosw word ptr es:[di], ax
0x1f40d: mov ax, 0xd7b0
0x1f410: stosw word ptr es:[di], ax
0x1f411: xor ax, ax
0x1f413: mov cx, 0x16
0x1f416: rep stosd dword ptr es:[di], eax
0x1f418: lodsb al, byte ptr [si]
0x1f419: cmp al, 0x4f
0x1f41b: jbe 0x1f41f
0x1f41d: mov al, 0x4f
0x1f41f: mov cl, al
2018-12-17T22:41:39.046607499Z 26 PC: 1ea8b | Set disk transfer address
2018-12-17T22:41:39.048339575Z 78 PC: 1ea97 | Find first file
2018-12-17T22:41:39.05507299Z 26 PC: 1ea8b | Set disk transfer address
2018-12-17T22:41:39.056115275Z 78 PC: 1ea97 | Find first file
2018-12-17T22:41:39.062497963Z 26 PC: 1eaaf | Set disk transfer address
2018-12-17T22:41:39.064129292Z 79 PC: 1eab4 | Find next file
2018-12-17T22:41:39.067190919Z 26 PC: 1ea8b | Set disk transfer address
2018-12-17T22:41:39.069148342Z 78 PC: 1ea97 | Find first file
2018-12-17T22:41:39.075074499Z 48 PC: 1f628 | Get DOS version
2018-12-17T22:41:39.077029281Z 48 PC: 1f628 | Get DOS version
2018-12-17T22:41:39.079351002Z 41 PC: 1eb42 | Parse filename
2018-12-17T22:41:39.080707161Z 41 PC: 1eb50 | Parse filename
2018-12-17T22:41:39.082032485Z 75 PC: 1eb5b | Execute program
2018-12-17T22:41:39.096654866Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.098515894Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:39.099612127Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:39.1006984Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:39.102696464Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.103780235Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.10484835Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:39.10691663Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:39.108427306Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:39.109512453Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:39.111630629Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:39.112703348Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:39.113750278Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:39.115758527Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:39.116830501Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:39.117908437Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:39.12029426Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:39.121436356Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.122502373Z 53 PC: 24aa2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:39.12490569Z 37 PC: 24ab7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.125967973Z 37 PC: 24abf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.127025186Z 37 PC: 24ac7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.129467839Z 37 PC: 24acf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.131132321Z 68 PC: 24e3f | I/O control for devices (Set for = '')
2018-12-17T22:41:39.132906468Z 25 PC: 249a9 | Get default drive
2018-12-17T22:41:39.135105507Z 71 PC: 249c8 | Get current directory
2018-12-17T22:41:39.138310994Z 48 PC: 25428 | Get DOS version
2018-12-17T22:41:39.140029433Z 61 PC: 25274 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:39.147998587Z 63 PC: 25347 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:39.155515391Z 62 PC: 252c4 | Close file
2018-12-17T22:41:39.157677501Z 44 PC: 251f5 | Get time 0x251f5: mov word ptr [0x3e], cx
0x251f9: mov word ptr [0x40], dx
0x251fd: retf
0x251fe: mov bx, sp
0x25200: push ds
0x25201: les di, ptr ss:[bx + 8]
0x25205: lds si, ptr ss:[bx + 4]
0x25209: cld
0x2520a: xor ax, ax
0x2520c: stosw word ptr es:[di], ax
0x2520d: mov ax, 0xd7b0
0x25210: stosw word ptr es:[di], ax
0x25211: xor ax, ax
0x25213: mov cx, 0x16
0x25216: rep stosd dword ptr es:[di], eax
0x25218: lodsb al, byte ptr [si]
0x25219: cmp al, 0x4f
0x2521b: jbe 0x2521f
0x2521d: mov al, 0x4f
0x2521f: mov cl, al
2018-12-17T22:41:39.16227009Z 26 PC: 2488b | Set disk transfer address
2018-12-17T22:41:39.163697322Z 78 PC: 24897 | Find first file
2018-12-17T22:41:39.171614885Z 26 PC: 2488b | Set disk transfer address
2018-12-17T22:41:39.174569239Z 78 PC: 24897 | Find first file
2018-12-17T22:41:39.182171114Z 26 PC: 248af | Set disk transfer address
2018-12-17T22:41:39.183037646Z 79 PC: 248b4 | Find next file
2018-12-17T22:41:39.185971335Z 26 PC: 2488b | Set disk transfer address
2018-12-17T22:41:39.187052594Z 78 PC: 24897 | Find first file
2018-12-17T22:41:39.19358115Z 48 PC: 25428 | Get DOS version
2018-12-17T22:41:39.195679533Z 48 PC: 25428 | Get DOS version
2018-12-17T22:41:39.197759203Z 41 PC: 24942 | Parse filename
2018-12-17T22:41:39.19937601Z 41 PC: 24950 | Parse filename
2018-12-17T22:41:39.201273212Z 75 PC: 2495b | Execute program
2018-12-17T22:41:39.215968067Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.217054092Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:39.218815319Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:39.219862362Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:39.22107021Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.222912947Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.224004411Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:39.225014524Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:39.226665391Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:39.227799249Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:39.22898339Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:39.230654464Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:39.231734632Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:39.232771625Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:39.234270262Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:39.235466542Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:39.237685849Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:39.239195546Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.240241022Z 53 PC: 2a8a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:39.241510979Z 37 PC: 2a8b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.242667762Z 37 PC: 2a8bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.243789212Z 37 PC: 2a8c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.246008708Z 37 PC: 2a8cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.247259088Z 68 PC: 2ac3f | I/O control for devices (Set for = '')
2018-12-17T22:41:39.248650369Z 25 PC: 2a7a9 | Get default drive
2018-12-17T22:41:39.250320849Z 71 PC: 2a7c8 | Get current directory
2018-12-17T22:41:39.253299519Z 48 PC: 2b228 | Get DOS version
2018-12-17T22:41:39.254488169Z 61 PC: 2b074 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:39.259325348Z 63 PC: 2b147 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:39.264010629Z 62 PC: 2b0c4 | Close file
2018-12-17T22:41:39.265567029Z 44 PC: 2aff5 | Get time 0x2aff5: mov word ptr [0x3e], cx
0x2aff9: mov word ptr [0x40], dx
0x2affd: retf
0x2affe: mov bx, sp
0x2b000: push ds
0x2b001: les di, ptr ss:[bx + 8]
0x2b005: lds si, ptr ss:[bx + 4]
0x2b009: cld
0x2b00a: xor ax, ax
0x2b00c: stosw word ptr es:[di], ax
0x2b00d: mov ax, 0xd7b0
0x2b010: stosw word ptr es:[di], ax
0x2b011: xor ax, ax
0x2b013: mov cx, 0x16
0x2b016: rep stosd dword ptr es:[di], eax
0x2b018: lodsb al, byte ptr [si]
0x2b019: cmp al, 0x4f
0x2b01b: jbe 0x2b01f
0x2b01d: mov al, 0x4f
0x2b01f: mov cl, al
2018-12-17T22:41:39.273562602Z 26 PC: 2a68b | Set disk transfer address
2018-12-17T22:41:39.282620357Z 78 PC: 2a697 | Find first file
2018-12-17T22:41:39.289738308Z 26 PC: 2a68b | Set disk transfer address
2018-12-17T22:41:39.292170477Z 78 PC: 2a697 | Find first file
2018-12-17T22:41:39.299015176Z 26 PC: 2a6af | Set disk transfer address
2018-12-17T22:41:39.300410412Z 79 PC: 2a6b4 | Find next file
2018-12-17T22:41:39.304474173Z 26 PC: 2a68b | Set disk transfer address
2018-12-17T22:41:39.306315532Z 78 PC: 2a697 | Find first file
2018-12-17T22:41:39.312616838Z 48 PC: 2b228 | Get DOS version
2018-12-17T22:41:39.315130072Z 48 PC: 2b228 | Get DOS version
2018-12-17T22:41:39.317931656Z 41 PC: 2a742 | Parse filename
2018-12-17T22:41:39.31902995Z 41 PC: 2a750 | Parse filename
2018-12-17T22:41:39.320593996Z 75 PC: 2a75b | Execute program
2018-12-17T22:41:39.331871739Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.332897663Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:39.334588478Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:39.335645125Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:39.33673744Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.33808629Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.339129089Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:39.340171142Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:39.341871566Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:39.343048438Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:39.344041419Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:39.345748357Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:39.346752741Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:39.347789808Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:39.349327968Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:39.350295056Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:39.351223815Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:39.352690097Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.354005258Z 53 PC: 306a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:39.355019211Z 37 PC: 306b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.356453343Z 37 PC: 306bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.35798946Z 37 PC: 306c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.359538779Z 37 PC: 306cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.361033715Z 68 PC: 30a3f | I/O control for devices (Set for = '')
2018-12-17T22:41:39.362243348Z 25 PC: 305a9 | Get default drive
2018-12-17T22:41:39.363349183Z 71 PC: 305c8 | Get current directory
2018-12-17T22:41:39.365714996Z 48 PC: 31028 | Get DOS version
2018-12-17T22:41:39.366819242Z 61 PC: 30e74 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:39.372448613Z 63 PC: 30f47 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:39.377030227Z 62 PC: 30ec4 | Close file
2018-12-17T22:41:39.378181977Z 44 PC: 30df5 | Get time 0x30df5: mov word ptr [0x3e], cx
0x30df9: mov word ptr [0x40], dx
0x30dfd: retf
0x30dfe: mov bx, sp
0x30e00: push ds
0x30e01: les di, ptr ss:[bx + 8]
0x30e05: lds si, ptr ss:[bx + 4]
0x30e09: cld
0x30e0a: xor ax, ax
0x30e0c: stosw word ptr es:[di], ax
0x30e0d: mov ax, 0xd7b0
0x30e10: stosw word ptr es:[di], ax
0x30e11: xor ax, ax
0x30e13: mov cx, 0x16
0x30e16: rep stosd dword ptr es:[di], eax
0x30e18: lodsb al, byte ptr [si]
0x30e19: cmp al, 0x4f
0x30e1b: jbe 0x30e1f
0x30e1d: mov al, 0x4f
0x30e1f: mov cl, al
2018-12-17T22:41:39.381318113Z 26 PC: 3048b | Set disk transfer address
2018-12-17T22:41:39.38222644Z 78 PC: 30497 | Find first file
2018-12-17T22:41:39.386458824Z 26 PC: 3048b | Set disk transfer address
2018-12-17T22:41:39.387986648Z 78 PC: 30497 | Find first file
2018-12-17T22:41:39.391799024Z 26 PC: 304af | Set disk transfer address
2018-12-17T22:41:39.392871165Z 79 PC: 304b4 | Find next file
2018-12-17T22:41:39.39545552Z 26 PC: 3048b | Set disk transfer address
2018-12-17T22:41:39.396362439Z 78 PC: 30497 | Find first file
2018-12-17T22:41:39.403980452Z 48 PC: 31028 | Get DOS version
2018-12-17T22:41:39.40567132Z 48 PC: 31028 | Get DOS version
2018-12-17T22:41:39.407047484Z 41 PC: 30542 | Parse filename
2018-12-17T22:41:39.408159487Z 41 PC: 30550 | Parse filename
2018-12-17T22:41:39.409924963Z 75 PC: 3055b | Execute program
2018-12-17T22:41:39.419398877Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.421851167Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:39.425172057Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:39.426298364Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:39.428554652Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.429867672Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.433878181Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:39.436223449Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:39.443947429Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:39.444915503Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:39.446607078Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:39.447573911Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:39.448582496Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:39.450107822Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:39.451059767Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:39.452134987Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:39.453685932Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:39.454639331Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.455717439Z 53 PC: 364a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:39.457152356Z 37 PC: 364b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.458061545Z 37 PC: 364bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.459429762Z 37 PC: 364c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.46032264Z 37 PC: 364cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.46151065Z 68 PC: 3683f | I/O control for devices (Set for = '')
2018-12-17T22:41:39.463252717Z 25 PC: 363a9 | Get default drive
2018-12-17T22:41:39.464100745Z 71 PC: 363c8 | Get current directory
2018-12-17T22:41:39.466231377Z 48 PC: 36e28 | Get DOS version
2018-12-17T22:41:39.467914418Z 61 PC: 36c74 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:39.472119508Z 63 PC: 36d47 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:39.476721916Z 62 PC: 36cc4 | Close file
2018-12-17T22:41:39.479227369Z 44 PC: 36bf5 | Get time 0x36bf5: mov word ptr [0x3e], cx
0x36bf9: mov word ptr [0x40], dx
0x36bfd: retf
0x36bfe: mov bx, sp
0x36c00: push ds
0x36c01: les di, ptr ss:[bx + 8]
0x36c05: lds si, ptr ss:[bx + 4]
0x36c09: cld
0x36c0a: xor ax, ax
0x36c0c: stosw word ptr es:[di], ax
0x36c0d: mov ax, 0xd7b0
0x36c10: stosw word ptr es:[di], ax
0x36c11: xor ax, ax
0x36c13: mov cx, 0x16
0x36c16: rep stosd dword ptr es:[di], eax
0x36c18: lodsb al, byte ptr [si]
0x36c19: cmp al, 0x4f
0x36c1b: jbe 0x36c1f
0x36c1d: mov al, 0x4f
0x36c1f: mov cl, al
2018-12-17T22:41:39.481286516Z 26 PC: 3628b | Set disk transfer address
2018-12-17T22:41:39.48346159Z 78 PC: 36297 | Find first file
2018-12-17T22:41:39.490284777Z 26 PC: 3628b | Set disk transfer address
2018-12-17T22:41:39.491161419Z 78 PC: 36297 | Find first file
2018-12-17T22:41:39.497971215Z 26 PC: 362af | Set disk transfer address
2018-12-17T22:41:39.499555646Z 79 PC: 362b4 | Find next file
2018-12-17T22:41:39.502272307Z 26 PC: 3628b | Set disk transfer address
2018-12-17T22:41:39.504402251Z 78 PC: 36297 | Find first file
2018-12-17T22:41:39.510902708Z 48 PC: 36e28 | Get DOS version
2018-12-17T22:41:39.512434579Z 48 PC: 36e28 | Get DOS version
2018-12-17T22:41:39.515019586Z 41 PC: 36342 | Parse filename
2018-12-17T22:41:39.516954131Z 41 PC: 36350 | Parse filename
2018-12-17T22:41:39.518270376Z 75 PC: 3635b | Execute program
2018-12-17T22:41:39.532735254Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.547005935Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:39.548461251Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:39.550377311Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:39.551468106Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.552772644Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.555090663Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:39.556418853Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:39.558740871Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:39.56006566Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:39.561396111Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:39.56367498Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:39.565018303Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:39.566389733Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:39.56866378Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:39.569990318Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:39.571293446Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:39.573482364Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.576985422Z 53 PC: 3c2a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:39.578403861Z 37 PC: 3c2b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.580623467Z 37 PC: 3c2bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.581894064Z 37 PC: 3c2c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.583162864Z 37 PC: 3c2cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.585737318Z 68 PC: 3c63f | I/O control for devices (Set for = '')
2018-12-17T22:41:39.587501109Z 25 PC: 3c1a9 | Get default drive
2018-12-17T22:41:39.588740085Z 71 PC: 3c1c8 | Get current directory
2018-12-17T22:41:39.592833377Z 48 PC: 3cc28 | Get DOS version
2018-12-17T22:41:39.594406689Z 61 PC: 3ca74 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:39.60126719Z 63 PC: 3cb47 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:39.609254787Z 62 PC: 3cac4 | Close file
2018-12-17T22:41:39.611270915Z 44 PC: 3c9f5 | Get time 0x3c9f5: mov word ptr [0x3e], cx
0x3c9f9: mov word ptr [0x40], dx
0x3c9fd: retf
0x3c9fe: mov bx, sp
0x3ca00: push ds
0x3ca01: les di, ptr ss:[bx + 8]
0x3ca05: lds si, ptr ss:[bx + 4]
0x3ca09: cld
0x3ca0a: xor ax, ax
0x3ca0c: stosw word ptr es:[di], ax
0x3ca0d: mov ax, 0xd7b0
0x3ca10: stosw word ptr es:[di], ax
0x3ca11: xor ax, ax
0x3ca13: mov cx, 0x16
0x3ca16: rep stosd dword ptr es:[di], eax
0x3ca18: lodsb al, byte ptr [si]
0x3ca19: cmp al, 0x4f
0x3ca1b: jbe 0x3ca1f
0x3ca1d: mov al, 0x4f
0x3ca1f: mov cl, al
2018-12-17T22:41:39.614661802Z 26 PC: 3c08b | Set disk transfer address
2018-12-17T22:41:39.616223691Z 78 PC: 3c097 | Find first file
2018-12-17T22:41:39.622896941Z 26 PC: 3c08b | Set disk transfer address
2018-12-17T22:41:39.624887915Z 78 PC: 3c097 | Find first file
2018-12-17T22:41:39.631704147Z 26 PC: 3c0af | Set disk transfer address
2018-12-17T22:41:39.63293914Z 79 PC: 3c0b4 | Find next file
2018-12-17T22:41:39.636704666Z 26 PC: 3c08b | Set disk transfer address
2018-12-17T22:41:39.638123735Z 78 PC: 3c097 | Find first file
2018-12-17T22:41:39.644064139Z 48 PC: 3cc28 | Get DOS version
2018-12-17T22:41:39.646381507Z 48 PC: 3cc28 | Get DOS version
2018-12-17T22:41:39.648461407Z 41 PC: 3c142 | Parse filename
2018-12-17T22:41:39.650037046Z 41 PC: 3c150 | Parse filename
2018-12-17T22:41:39.652440795Z 75 PC: 3c15b | Execute program
2018-12-17T22:41:39.666680178Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.668047772Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:39.670274653Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:39.671604022Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:39.672929824Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.675119474Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.676440813Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:39.677910932Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:39.679514249Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:39.680830696Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:39.682723122Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:39.684004498Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:39.685323888Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:39.687228077Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:39.688551003Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:39.689896024Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:39.691778857Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:39.693093585Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.694610536Z 53 PC: 420a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:39.696072111Z 37 PC: 420b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.697073796Z 37 PC: 420bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.699039162Z 37 PC: 420c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.700455774Z 37 PC: 420cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.702082587Z 68 PC: 4243f | I/O control for devices (Set for = '')
2018-12-17T22:41:39.704368485Z 25 PC: 41fa9 | Get default drive
2018-12-17T22:41:39.705355062Z 71 PC: 41fc8 | Get current directory
2018-12-17T22:41:39.708968678Z 48 PC: 42a28 | Get DOS version
2018-12-17T22:41:39.711333927Z 61 PC: 42874 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:39.718100231Z 63 PC: 42947 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:39.7252595Z 62 PC: 428c4 | Close file
2018-12-17T22:41:39.727770598Z 44 PC: 427f5 | Get time 0x427f5: mov word ptr [0x3e], cx
0x427f9: mov word ptr [0x40], dx
0x427fd: retf
0x427fe: mov bx, sp
0x42800: push ds
0x42801: les di, ptr ss:[bx + 8]
0x42805: lds si, ptr ss:[bx + 4]
0x42809: cld
0x4280a: xor ax, ax
0x4280c: stosw word ptr es:[di], ax
0x4280d: mov ax, 0xd7b0
0x42810: stosw word ptr es:[di], ax
0x42811: xor ax, ax
0x42813: mov cx, 0x16
0x42816: rep stosd dword ptr es:[di], eax
0x42818: lodsb al, byte ptr [si]
0x42819: cmp al, 0x4f
0x4281b: jbe 0x4281f
0x4281d: mov al, 0x4f
0x4281f: mov cl, al
2018-12-17T22:41:39.730275103Z 26 PC: 41e8b | Set disk transfer address
2018-12-17T22:41:39.731456684Z 78 PC: 41e97 | Find first file
2018-12-17T22:41:39.738716807Z 26 PC: 41e8b | Set disk transfer address
2018-12-17T22:41:39.739950019Z 78 PC: 41e97 | Find first file
2018-12-17T22:41:39.746698743Z 26 PC: 41eaf | Set disk transfer address
2018-12-17T22:41:39.748240207Z 79 PC: 41eb4 | Find next file
2018-12-17T22:41:39.751181558Z 26 PC: 41e8b | Set disk transfer address
2018-12-17T22:41:39.753221062Z 78 PC: 41e97 | Find first file
2018-12-17T22:41:39.759515084Z 48 PC: 42a28 | Get DOS version
2018-12-17T22:41:39.76095977Z 48 PC: 42a28 | Get DOS version
2018-12-17T22:41:39.763577875Z 41 PC: 41f42 | Parse filename
2018-12-17T22:41:39.765475387Z 41 PC: 41f50 | Parse filename
2018-12-17T22:41:39.767010693Z 75 PC: 41f5b | Execute program
2018-12-17T22:41:39.782350654Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.784002663Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:39.785343939Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:39.787647134Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:39.788960892Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.790298244Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.792571695Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:39.793901058Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:39.795226302Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:39.797474869Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:39.798752818Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:39.800237316Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:39.802307606Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:39.803559632Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:39.805562239Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:39.807119902Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:39.808387097Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:39.810373481Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.811911879Z 53 PC: 47ea2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:39.813183471Z 37 PC: 47eb7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.815130697Z 37 PC: 47ebf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.816621283Z 37 PC: 47ec7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.817825257Z 37 PC: 47ecf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.820170675Z 68 PC: 4823f | I/O control for devices (Set for = '')
2018-12-17T22:41:39.822180946Z 25 PC: 47da9 | Get default drive
2018-12-17T22:41:39.823363944Z 71 PC: 47dc8 | Get current directory
2018-12-17T22:41:39.827396624Z 48 PC: 48828 | Get DOS version
2018-12-17T22:41:39.828919065Z 61 PC: 48674 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:39.835577535Z 63 PC: 48747 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:39.843497577Z 62 PC: 486c4 | Close file
2018-12-17T22:41:39.845363468Z 44 PC: 485f5 | Get time 0x485f5: mov word ptr [0x3e], cx
0x485f9: mov word ptr [0x40], dx
0x485fd: retf
0x485fe: mov bx, sp
0x48600: push ds
0x48601: les di, ptr ss:[bx + 8]
0x48605: lds si, ptr ss:[bx + 4]
0x48609: cld
0x4860a: xor ax, ax
0x4860c: stosw word ptr es:[di], ax
0x4860d: mov ax, 0xd7b0
0x48610: stosw word ptr es:[di], ax
0x48611: xor ax, ax
0x48613: mov cx, 0x16
0x48616: rep stosd dword ptr es:[di], eax
0x48618: lodsb al, byte ptr [si]
0x48619: cmp al, 0x4f
0x4861b: jbe 0x4861f
0x4861d: mov al, 0x4f
0x4861f: mov cl, al
2018-12-17T22:41:39.847977089Z 26 PC: 47c8b | Set disk transfer address
2018-12-17T22:41:39.850086074Z 78 PC: 47c97 | Find first file
2018-12-17T22:41:39.856681571Z 26 PC: 47c8b | Set disk transfer address
2018-12-17T22:41:39.858811233Z 78 PC: 47c97 | Find first file
2018-12-17T22:41:39.865498215Z 26 PC: 47caf | Set disk transfer address
2018-12-17T22:41:39.866670188Z 79 PC: 47cb4 | Find next file
2018-12-17T22:41:39.870271991Z 26 PC: 47c8b | Set disk transfer address
2018-12-17T22:41:39.871741022Z 78 PC: 47c97 | Find first file
2018-12-17T22:41:39.877599403Z 48 PC: 48828 | Get DOS version
2018-12-17T22:41:39.879747021Z 48 PC: 48828 | Get DOS version
2018-12-17T22:41:39.881828442Z 41 PC: 47d42 | Parse filename
2018-12-17T22:41:39.883327291Z 41 PC: 47d50 | Parse filename
2018-12-17T22:41:39.885586615Z 75 PC: 47d5b | Execute program
2018-12-17T22:41:39.899924991Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.90121447Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:39.903435579Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:39.904945738Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:39.906453959Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.908784578Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.910125382Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:39.911443662Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:39.91370875Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:39.915007744Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:39.916515695Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:39.918615888Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:39.919928187Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:39.921970884Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:39.923599201Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:39.924906439Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:39.926974645Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:39.928570505Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.929886549Z 53 PC: 4dca2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:39.931954167Z 37 PC: 4dcb7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:39.933524313Z 37 PC: 4dcbf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:39.934758099Z 37 PC: 4dcc7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:39.936768061Z 37 PC: 4dccf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:39.939536911Z 68 PC: 4e03f | I/O control for devices (Set for = '')
2018-12-17T22:41:39.941316714Z 25 PC: 4dba9 | Get default drive
2018-12-17T22:41:39.943483667Z 71 PC: 4dbc8 | Get current directory
2018-12-17T22:41:39.950796571Z 48 PC: 4e628 | Get DOS version
2018-12-17T22:41:39.952180594Z 61 PC: 4e474 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:39.959668846Z 63 PC: 4e547 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:39.966532676Z 62 PC: 4e4c4 | Close file
2018-12-17T22:41:39.968229229Z 44 PC: 4e3f5 | Get time 0x4e3f5: mov word ptr [0x3e], cx
0x4e3f9: mov word ptr [0x40], dx
0x4e3fd: retf
0x4e3fe: mov bx, sp
0x4e400: push ds
0x4e401: les di, ptr ss:[bx + 8]
0x4e405: lds si, ptr ss:[bx + 4]
0x4e409: cld
0x4e40a: xor ax, ax
0x4e40c: stosw word ptr es:[di], ax
0x4e40d: mov ax, 0xd7b0
0x4e410: stosw word ptr es:[di], ax
0x4e411: xor ax, ax
0x4e413: mov cx, 0x16
0x4e416: rep stosd dword ptr es:[di], eax
0x4e418: lodsb al, byte ptr [si]
0x4e419: cmp al, 0x4f
0x4e41b: jbe 0x4e41f
0x4e41d: mov al, 0x4f
0x4e41f: mov cl, al
2018-12-17T22:41:39.970953974Z 26 PC: 4da8b | Set disk transfer address
2018-12-17T22:41:39.972222825Z 78 PC: 4da97 | Find first file
2018-12-17T22:41:39.979070035Z 26 PC: 4da8b | Set disk transfer address
2018-12-17T22:41:39.980608429Z 78 PC: 4da97 | Find first file
2018-12-17T22:41:39.986590504Z 26 PC: 4daaf | Set disk transfer address
2018-12-17T22:41:39.988604625Z 79 PC: 4dab4 | Find next file
2018-12-17T22:41:39.992100062Z 26 PC: 4da8b | Set disk transfer address
2018-12-17T22:41:39.993362123Z 78 PC: 4da97 | Find first file
2018-12-17T22:41:39.999880869Z 48 PC: 4e628 | Get DOS version
2018-12-17T22:41:40.001376796Z 48 PC: 4e628 | Get DOS version
2018-12-17T22:41:40.003238397Z 41 PC: 4db42 | Parse filename
2018-12-17T22:41:40.005219676Z 41 PC: 4db50 | Parse filename
2018-12-17T22:41:40.006781474Z 75 PC: 4db5b | Execute program
2018-12-17T22:41:40.021693881Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.023159211Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:40.024487591Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:40.026377979Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:40.027684805Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.028946504Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.030650499Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:40.03192988Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:40.033610006Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:40.034779645Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:40.036021919Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:40.038098939Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:40.039526042Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:40.040825483Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:40.042900488Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:40.044191639Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:40.04551685Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:40.047628148Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.048940043Z 53 PC: 53aa2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:40.051007867Z 37 PC: 53ab7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.052402118Z 37 PC: 53abf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.053640101Z 37 PC: 53ac7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.055468619Z 37 PC: 53acf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.057121866Z 68 PC: 53e3f | I/O control for devices (Set for = '')
2018-12-17T22:41:40.058859764Z 25 PC: 539a9 | Get default drive
2018-12-17T22:41:40.060862604Z 71 PC: 539c8 | Get current directory
2018-12-17T22:41:40.063981787Z 48 PC: 54428 | Get DOS version
2018-12-17T22:41:40.065530461Z 61 PC: 54274 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:40.072577954Z 63 PC: 54347 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:40.079955095Z 62 PC: 542c4 | Close file
2018-12-17T22:41:40.082592859Z 44 PC: 541f5 | Get time 0x541f5: mov word ptr [0x3e], cx
0x541f9: mov word ptr [0x40], dx
0x541fd: retf
0x541fe: mov bx, sp
0x54200: push ds
0x54201: les di, ptr ss:[bx + 8]
0x54205: lds si, ptr ss:[bx + 4]
0x54209: cld
0x5420a: xor ax, ax
0x5420c: stosw word ptr es:[di], ax
0x5420d: mov ax, 0xd7b0
0x54210: stosw word ptr es:[di], ax
0x54211: xor ax, ax
0x54213: mov cx, 0x16
0x54216: rep stosd dword ptr es:[di], eax
0x54218: lodsb al, byte ptr [si]
0x54219: cmp al, 0x4f
0x5421b: jbe 0x5421f
0x5421d: mov al, 0x4f
0x5421f: mov cl, al
2018-12-17T22:41:40.08599616Z 26 PC: 5388b | Set disk transfer address
2018-12-17T22:41:40.08721991Z 78 PC: 53897 | Find first file
2018-12-17T22:41:40.094641777Z 26 PC: 5388b | Set disk transfer address
2018-12-17T22:41:40.096034581Z 78 PC: 53897 | Find first file
2018-12-17T22:41:40.101963283Z 26 PC: 538af | Set disk transfer address
2018-12-17T22:41:40.10396978Z 79 PC: 538b4 | Find next file
2018-12-17T22:41:40.106901301Z 26 PC: 5388b | Set disk transfer address
2018-12-17T22:41:40.108125774Z 78 PC: 53897 | Find first file
2018-12-17T22:41:40.114848445Z 48 PC: 54428 | Get DOS version
2018-12-17T22:41:40.116343178Z 48 PC: 54428 | Get DOS version
2018-12-17T22:41:40.118510954Z 41 PC: 53942 | Parse filename
2018-12-17T22:41:40.12010238Z 41 PC: 53950 | Parse filename
2018-12-17T22:41:40.121608848Z 75 PC: 5395b | Execute program
2018-12-17T22:41:40.136492131Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.137835048Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:40.139298178Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:40.14129162Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:40.142543545Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.144637818Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.145874533Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:40.1470441Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:40.149534505Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:40.150842547Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:40.152088Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:40.154273868Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:40.158346059Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:40.159707215Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:40.162095944Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:40.16331743Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:40.165678207Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:40.167076989Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.16828702Z 53 PC: 598a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:40.172030779Z 37 PC: 598b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.179615332Z 37 PC: 598bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.181202322Z 37 PC: 598c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.186542172Z 37 PC: 598cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.188208512Z 68 PC: 59c3f | I/O control for devices (Set for = '')
2018-12-17T22:41:40.190922546Z 25 PC: 597a9 | Get default drive
2018-12-17T22:41:40.19215877Z 71 PC: 597c8 | Get current directory
2018-12-17T22:41:40.195526726Z 48 PC: 5a228 | Get DOS version
2018-12-17T22:41:40.197847717Z 61 PC: 5a074 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:40.204873708Z 63 PC: 5a147 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:40.213359026Z 62 PC: 5a0c4 | Close file
2018-12-17T22:41:40.215725472Z 44 PC: 59ff5 | Get time 0x59ff5: mov word ptr [0x3e], cx
0x59ff9: mov word ptr [0x40], dx
0x59ffd: retf
0x59ffe: mov bx, sp
0x5a000: push ds
0x5a001: les di, ptr ss:[bx + 8]
0x5a005: lds si, ptr ss:[bx + 4]
0x5a009: cld
0x5a00a: xor ax, ax
0x5a00c: stosw word ptr es:[di], ax
0x5a00d: mov ax, 0xd7b0
0x5a010: stosw word ptr es:[di], ax
0x5a011: xor ax, ax
0x5a013: mov cx, 0x16
0x5a016: rep stosd dword ptr es:[di], eax
0x5a018: lodsb al, byte ptr [si]
0x5a019: cmp al, 0x4f
0x5a01b: jbe 0x5a01f
0x5a01d: mov al, 0x4f
0x5a01f: mov cl, al
2018-12-17T22:41:40.218697806Z 26 PC: 5968b | Set disk transfer address
2018-12-17T22:41:40.220731887Z 78 PC: 59697 | Find first file
2018-12-17T22:41:40.228268444Z 26 PC: 5968b | Set disk transfer address
2018-12-17T22:41:40.230473333Z 78 PC: 59697 | Find first file
2018-12-17T22:41:40.236857188Z 26 PC: 596af | Set disk transfer address
2018-12-17T22:41:40.238380074Z 79 PC: 596b4 | Find next file
2018-12-17T22:41:40.242740023Z 26 PC: 5968b | Set disk transfer address
2018-12-17T22:41:40.244266432Z 78 PC: 59697 | Find first file
2018-12-17T22:41:40.251022144Z 48 PC: 5a228 | Get DOS version
2018-12-17T22:41:40.253646595Z 48 PC: 5a228 | Get DOS version
2018-12-17T22:41:40.255768617Z 41 PC: 59742 | Parse filename
2018-12-17T22:41:40.25846611Z 41 PC: 59750 | Parse filename
2018-12-17T22:41:40.260271452Z 75 PC: 5975b | Execute program
2018-12-17T22:41:40.276195053Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.277780384Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:40.279289607Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:40.281583962Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:40.28311666Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.284620699Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.287063846Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:40.28857945Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:40.290441377Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:40.29231733Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:40.293663769Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:40.295411466Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:40.296625314Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:40.298406991Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:40.299826521Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:40.301153158Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:40.303043275Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:40.304325126Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.306004122Z 53 PC: 5f6a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:40.307574533Z 37 PC: 5f6b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.308618264Z 37 PC: 5f6bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.311132232Z 37 PC: 5f6c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.312166768Z 37 PC: 5f6cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.314715766Z 68 PC: 5fa3f | I/O control for devices (Set for = '')
2018-12-17T22:41:40.31625831Z 25 PC: 5f5a9 | Get default drive
2018-12-17T22:41:40.317413195Z 71 PC: 5f5c8 | Get current directory
2018-12-17T22:41:40.321320853Z 48 PC: 60028 | Get DOS version
2018-12-17T22:41:40.323012121Z 61 PC: 5fe74 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:40.329461444Z 63 PC: 5ff47 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:40.337340245Z 62 PC: 5fec4 | Close file
2018-12-17T22:41:40.341116016Z 44 PC: 5fdf5 | Get time 0x5fdf5: mov word ptr [0x3e], cx
0x5fdf9: mov word ptr [0x40], dx
0x5fdfd: retf
0x5fdfe: mov bx, sp
0x5fe00: push ds
0x5fe01: les di, ptr ss:[bx + 8]
0x5fe05: lds si, ptr ss:[bx + 4]
0x5fe09: cld
0x5fe0a: xor ax, ax
0x5fe0c: stosw word ptr es:[di], ax
0x5fe0d: mov ax, 0xd7b0
0x5fe10: stosw word ptr es:[di], ax
0x5fe11: xor ax, ax
0x5fe13: mov cx, 0x16
0x5fe16: rep stosd dword ptr es:[di], eax
0x5fe18: lodsb al, byte ptr [si]
0x5fe19: cmp al, 0x4f
0x5fe1b: jbe 0x5fe1f
0x5fe1d: mov al, 0x4f
0x5fe1f: mov cl, al
2018-12-17T22:41:40.3447566Z 26 PC: 5f48b | Set disk transfer address
2018-12-17T22:41:40.345761294Z 78 PC: 5f497 | Find first file
2018-12-17T22:41:40.352353651Z 26 PC: 5f48b | Set disk transfer address
2018-12-17T22:41:40.354987124Z 78 PC: 5f497 | Find first file
2018-12-17T22:41:40.36080758Z 26 PC: 5f4af | Set disk transfer address
2018-12-17T22:41:40.361815226Z 79 PC: 5f4b4 | Find next file
2018-12-17T22:41:40.365578309Z 26 PC: 5f48b | Set disk transfer address
2018-12-17T22:41:40.366587389Z 78 PC: 5f497 | Find first file
2018-12-17T22:41:40.373615646Z 48 PC: 60028 | Get DOS version
2018-12-17T22:41:40.37487204Z 48 PC: 60028 | Get DOS version
2018-12-17T22:41:40.376488349Z 41 PC: 5f542 | Parse filename
2018-12-17T22:41:40.379140108Z 41 PC: 5f550 | Parse filename
2018-12-17T22:41:40.380481117Z 75 PC: 5f55b | Execute program
2018-12-17T22:41:40.395921958Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.397825396Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:40.399533648Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:40.401759559Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:40.402929584Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.404071594Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.405508618Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:40.406782457Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:40.408381901Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:40.40979397Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:40.410875462Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:40.413248495Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:40.41463353Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:40.41677463Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:40.418368909Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:40.419995922Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:40.423295263Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:40.424796341Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.426823949Z 53 PC: 654a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:40.428455198Z 37 PC: 654b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.429993141Z 37 PC: 654bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.432447301Z 37 PC: 654c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.434059482Z 37 PC: 654cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.436510718Z 68 PC: 6583f | I/O control for devices (Set for = '')
2018-12-17T22:41:40.439072554Z 25 PC: 653a9 | Get default drive
2018-12-17T22:41:40.44052481Z 71 PC: 653c8 | Get current directory
2018-12-17T22:41:40.444722731Z 48 PC: 65e28 | Get DOS version
2018-12-17T22:41:40.446364195Z 61 PC: 65c74 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:40.453531008Z 63 PC: 65d47 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:40.461181746Z 62 PC: 65cc4 | Close file
2018-12-17T22:41:40.463413375Z 44 PC: 65bf5 | Get time 0x65bf5: mov word ptr [0x3e], cx
0x65bf9: mov word ptr [0x40], dx
0x65bfd: retf
0x65bfe: mov bx, sp
0x65c00: push ds
0x65c01: les di, ptr ss:[bx + 8]
0x65c05: lds si, ptr ss:[bx + 4]
0x65c09: cld
0x65c0a: xor ax, ax
0x65c0c: stosw word ptr es:[di], ax
0x65c0d: mov ax, 0xd7b0
0x65c10: stosw word ptr es:[di], ax
0x65c11: xor ax, ax
0x65c13: mov cx, 0x16
0x65c16: rep stosd dword ptr es:[di], eax
0x65c18: lodsb al, byte ptr [si]
0x65c19: cmp al, 0x4f
0x65c1b: jbe 0x65c1f
0x65c1d: mov al, 0x4f
0x65c1f: mov cl, al
2018-12-17T22:41:40.466672359Z 26 PC: 6528b | Set disk transfer address
2018-12-17T22:41:40.46876806Z 78 PC: 65297 | Find first file
2018-12-17T22:41:40.476694534Z 26 PC: 6528b | Set disk transfer address
2018-12-17T22:41:40.478151194Z 78 PC: 65297 | Find first file
2018-12-17T22:41:40.485050947Z 26 PC: 652af | Set disk transfer address
2018-12-17T22:41:40.487107277Z 79 PC: 652b4 | Find next file
2018-12-17T22:41:40.490225561Z 26 PC: 6528b | Set disk transfer address
2018-12-17T22:41:40.491889854Z 78 PC: 65297 | Find first file
2018-12-17T22:41:40.49613961Z 48 PC: 65e28 | Get DOS version
2018-12-17T22:41:40.497171402Z 48 PC: 65e28 | Get DOS version
2018-12-17T22:41:40.499559363Z 41 PC: 65342 | Parse filename
2018-12-17T22:41:40.500705258Z 41 PC: 65350 | Parse filename
2018-12-17T22:41:40.501987833Z 75 PC: 6535b | Execute program
2018-12-17T22:41:40.512674604Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.514059031Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:40.515883093Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:40.516945681Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:40.51797691Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.519451084Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.520676799Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:40.522751895Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:40.523952451Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:40.525014373Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:40.526248242Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:40.527138289Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:40.528569337Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:40.529490485Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:40.53041094Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:40.531609332Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:40.532519102Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:40.534193674Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.535069673Z 53 PC: 6b2a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:40.535948806Z 37 PC: 6b2b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.537282229Z 37 PC: 6b2bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.538152445Z 37 PC: 6b2c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.539553929Z 37 PC: 6b2cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.540663382Z 68 PC: 6b63f | I/O control for devices (Set for = '')
2018-12-17T22:41:40.542287062Z 25 PC: 6b1a9 | Get default drive
2018-12-17T22:41:40.544423313Z 71 PC: 6b1c8 | Get current directory
2018-12-17T22:41:40.547722703Z 48 PC: 6bc28 | Get DOS version
2018-12-17T22:41:40.550146428Z 61 PC: 6ba74 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:40.557578429Z 63 PC: 6bb47 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:40.565365089Z 62 PC: 6bac4 | Close file
2018-12-17T22:41:40.567906147Z 44 PC: 6b9f5 | Get time 0x6b9f5: mov word ptr [0x3e], cx
0x6b9f9: mov word ptr [0x40], dx
0x6b9fd: retf
0x6b9fe: mov bx, sp
0x6ba00: push ds
0x6ba01: les di, ptr ss:[bx + 8]
0x6ba05: lds si, ptr ss:[bx + 4]
0x6ba09: cld
0x6ba0a: xor ax, ax
0x6ba0c: stosw word ptr es:[di], ax
0x6ba0d: mov ax, 0xd7b0
0x6ba10: stosw word ptr es:[di], ax
0x6ba11: xor ax, ax
0x6ba13: mov cx, 0x16
0x6ba16: rep stosd dword ptr es:[di], eax
0x6ba18: lodsb al, byte ptr [si]
0x6ba19: cmp al, 0x4f
0x6ba1b: jbe 0x6ba1f
0x6ba1d: mov al, 0x4f
0x6ba1f: mov cl, al
2018-12-17T22:41:40.570699274Z 26 PC: 6b08b | Set disk transfer address
2018-12-17T22:41:40.572974585Z 78 PC: 6b097 | Find first file
2018-12-17T22:41:40.580647951Z 26 PC: 6b08b | Set disk transfer address
2018-12-17T22:41:40.581980257Z 78 PC: 6b097 | Find first file
2018-12-17T22:41:40.589127774Z 26 PC: 6b0af | Set disk transfer address
2018-12-17T22:41:40.590442935Z 79 PC: 6b0b4 | Find next file
2018-12-17T22:41:40.594463236Z 26 PC: 6b08b | Set disk transfer address
2018-12-17T22:41:40.595929508Z 78 PC: 6b097 | Find first file
2018-12-17T22:41:40.602137595Z 48 PC: 6bc28 | Get DOS version
2018-12-17T22:41:40.604646335Z 48 PC: 6bc28 | Get DOS version
2018-12-17T22:41:40.606825942Z 41 PC: 6b142 | Parse filename
2018-12-17T22:41:40.608444889Z 41 PC: 6b150 | Parse filename
2018-12-17T22:41:40.611044703Z 75 PC: 6b15b | Execute program
2018-12-17T22:41:40.625624131Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.627997682Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:40.629588217Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:40.630992877Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:40.633252871Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.634656126Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.636925487Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:40.63853167Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:40.640310354Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:40.642651488Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:40.644049497Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:40.646320681Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:40.648360865Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:40.649764875Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:40.652114376Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:40.65366508Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:40.655052645Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:40.657404024Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.659522701Z 53 PC: 710a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:40.661828219Z 37 PC: 710b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.663309159Z 37 PC: 710bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.664626996Z 37 PC: 710c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.666877349Z 37 PC: 710cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.668601525Z 68 PC: 7143f | I/O control for devices (Set for = '')
2018-12-17T22:41:40.67065957Z 25 PC: 70fa9 | Get default drive
2018-12-17T22:41:40.672777729Z 71 PC: 70fc8 | Get current directory
2018-12-17T22:41:40.676128552Z 48 PC: 71a28 | Get DOS version
2018-12-17T22:41:40.678657925Z 61 PC: 71874 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:40.685814398Z 63 PC: 71947 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:40.693125112Z 62 PC: 718c4 | Close file
2018-12-17T22:41:40.69569657Z 44 PC: 717f5 | Get time 0x717f5: mov word ptr [0x3e], cx
0x717f9: mov word ptr [0x40], dx
0x717fd: retf
0x717fe: mov bx, sp
0x71800: push ds
0x71801: les di, ptr ss:[bx + 8]
0x71805: lds si, ptr ss:[bx + 4]
0x71809: cld
0x7180a: xor ax, ax
0x7180c: stosw word ptr es:[di], ax
0x7180d: mov ax, 0xd7b0
0x71810: stosw word ptr es:[di], ax
0x71811: xor ax, ax
0x71813: mov cx, 0x16
0x71816: rep stosd dword ptr es:[di], eax
0x71818: lodsb al, byte ptr [si]
0x71819: cmp al, 0x4f
0x7181b: jbe 0x7181f
0x7181d: mov al, 0x4f
0x7181f: mov cl, al
2018-12-17T22:41:40.698495153Z 26 PC: 70e8b | Set disk transfer address
2018-12-17T22:41:40.700499388Z 78 PC: 70e97 | Find first file
2018-12-17T22:41:40.707249163Z 26 PC: 70e8b | Set disk transfer address
2018-12-17T22:41:40.708753376Z 78 PC: 70e97 | Find first file
2018-12-17T22:41:40.715801578Z 26 PC: 70eaf | Set disk transfer address
2018-12-17T22:41:40.717128576Z 79 PC: 70eb4 | Find next file
2018-12-17T22:41:40.720764959Z 26 PC: 70e8b | Set disk transfer address
2018-12-17T22:41:40.722498961Z 78 PC: 70e97 | Find first file
2018-12-17T22:41:40.729846362Z 48 PC: 71a28 | Get DOS version
2018-12-17T22:41:40.731408997Z 48 PC: 71a28 | Get DOS version
2018-12-17T22:41:40.73336979Z 41 PC: 70f42 | Parse filename
2018-12-17T22:41:40.736638798Z 41 PC: 70f50 | Parse filename
2018-12-17T22:41:40.738233202Z 75 PC: 70f5b | Execute program
2018-12-17T22:41:40.753695764Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.755078762Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:40.756557154Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:40.759049318Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:40.760484178Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.762612367Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.764058086Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:40.765284952Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:40.767422273Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:40.768845239Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:40.771107229Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:40.772489155Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:40.774078143Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:40.775783567Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:40.77694184Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:40.779022573Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:40.780172344Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:40.781937123Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.783292829Z 53 PC: 76ea2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:40.784673879Z 37 PC: 76eb7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.798190185Z 37 PC: 76ebf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.805499126Z 37 PC: 76ec7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.807603257Z 37 PC: 76ecf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.809122387Z 68 PC: 7723f | I/O control for devices (Set for = '')
2018-12-17T22:41:40.811655599Z 25 PC: 76da9 | Get default drive
2018-12-17T22:41:40.812799502Z 71 PC: 76dc8 | Get current directory
2018-12-17T22:41:40.815845609Z 48 PC: 77828 | Get DOS version
2018-12-17T22:41:40.825611857Z 61 PC: 77674 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:40.832982903Z 63 PC: 77747 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:40.841619305Z 62 PC: 776c4 | Close file
2018-12-17T22:41:40.84383984Z 44 PC: 775f5 | Get time 0x775f5: mov word ptr [0x3e], cx
0x775f9: mov word ptr [0x40], dx
0x775fd: retf
0x775fe: mov bx, sp
0x77600: push ds
0x77601: les di, ptr ss:[bx + 8]
0x77605: lds si, ptr ss:[bx + 4]
0x77609: cld
0x7760a: xor ax, ax
0x7760c: stosw word ptr es:[di], ax
0x7760d: mov ax, 0xd7b0
0x77610: stosw word ptr es:[di], ax
0x77611: xor ax, ax
0x77613: mov cx, 0x16
0x77616: rep stosd dword ptr es:[di], eax
0x77618: lodsb al, byte ptr [si]
0x77619: cmp al, 0x4f
0x7761b: jbe 0x7761f
0x7761d: mov al, 0x4f
0x7761f: mov cl, al
2018-12-17T22:41:40.84671436Z 26 PC: 76c8b | Set disk transfer address
2018-12-17T22:41:40.849049373Z 78 PC: 76c97 | Find first file
2018-12-17T22:41:40.855969099Z 26 PC: 76c8b | Set disk transfer address
2018-12-17T22:41:40.857657049Z 78 PC: 76c97 | Find first file
2018-12-17T22:41:40.86426512Z 26 PC: 76caf | Set disk transfer address
2018-12-17T22:41:40.865607881Z 79 PC: 76cb4 | Find next file
2018-12-17T22:41:40.869342639Z 26 PC: 76c8b | Set disk transfer address
2018-12-17T22:41:40.870669316Z 78 PC: 76c97 | Find first file
2018-12-17T22:41:40.877995547Z 48 PC: 77828 | Get DOS version
2018-12-17T22:41:40.879405864Z 48 PC: 77828 | Get DOS version
2018-12-17T22:41:40.881995423Z 41 PC: 76d42 | Parse filename
2018-12-17T22:41:40.883890268Z 41 PC: 76d50 | Parse filename
2018-12-17T22:41:40.885493251Z 75 PC: 76d5b | Execute program
2018-12-17T22:41:40.902061453Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.903507717Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:40.905870067Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:40.907440203Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:40.908866147Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.911256497Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.912656185Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:40.914402556Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:40.916108695Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:40.917962772Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:40.920361998Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:40.92177771Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:40.924014904Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:40.925317609Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:40.926580505Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:40.928647552Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:40.930111661Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:40.932274611Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.933708922Z 53 PC: 7cca2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:40.936060398Z 37 PC: 7ccb7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:40.937535041Z 37 PC: 7ccbf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:40.938875127Z 37 PC: 7ccc7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:40.941392986Z 37 PC: 7cccf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:40.943154485Z 68 PC: 7d03f | I/O control for devices (Set for = '')
2018-12-17T22:41:40.945497161Z 25 PC: 7cba9 | Get default drive
2018-12-17T22:41:40.947068679Z 71 PC: 7cbc8 | Get current directory
2018-12-17T22:41:40.950383655Z 48 PC: 7d628 | Get DOS version
2018-12-17T22:41:40.95298973Z 61 PC: 7d474 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:40.959959458Z 63 PC: 7d547 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:40.968206072Z 62 PC: 7d4c4 | Close file
2018-12-17T22:41:40.970924622Z 44 PC: 7d3f5 | Get time 0x7d3f5: mov word ptr [0x3e], cx
0x7d3f9: mov word ptr [0x40], dx
0x7d3fd: retf
0x7d3fe: mov bx, sp
0x7d400: push ds
0x7d401: les di, ptr ss:[bx + 8]
0x7d405: lds si, ptr ss:[bx + 4]
0x7d409: cld
0x7d40a: xor ax, ax
0x7d40c: stosw word ptr es:[di], ax
0x7d40d: mov ax, 0xd7b0
0x7d410: stosw word ptr es:[di], ax
0x7d411: xor ax, ax
0x7d413: mov cx, 0x16
0x7d416: rep stosd dword ptr es:[di], eax
0x7d418: lodsb al, byte ptr [si]
0x7d419: cmp al, 0x4f
0x7d41b: jbe 0x7d41f
0x7d41d: mov al, 0x4f
0x7d41f: mov cl, al
2018-12-17T22:41:40.973732289Z 26 PC: 7ca8b | Set disk transfer address
2018-12-17T22:41:40.975690832Z 78 PC: 7ca97 | Find first file
2018-12-17T22:41:40.983325543Z 26 PC: 7ca8b | Set disk transfer address
2018-12-17T22:41:40.985458386Z 78 PC: 7ca97 | Find first file
2018-12-17T22:41:40.991660051Z 26 PC: 7caaf | Set disk transfer address
2018-12-17T22:41:40.992987818Z 79 PC: 7cab4 | Find next file
2018-12-17T22:41:40.997062324Z 26 PC: 7ca8b | Set disk transfer address
2018-12-17T22:41:40.99838441Z 78 PC: 7ca97 | Find first file
2018-12-17T22:41:41.005474237Z 48 PC: 7d628 | Get DOS version
2018-12-17T22:41:41.006994139Z 48 PC: 7d628 | Get DOS version
2018-12-17T22:41:41.009151941Z 41 PC: 7cb42 | Parse filename
2018-12-17T22:41:41.01174584Z 41 PC: 7cb50 | Parse filename
2018-12-17T22:41:41.013367498Z 75 PC: 7cb5b | Execute program
2018-12-17T22:41:41.028949449Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.031551746Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:41.03287132Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:41.034717787Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:41.03582053Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.038107314Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.039238387Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:41.040521836Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:41.042306301Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:41.043402643Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:41.045435819Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:41.047095275Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:41.048380809Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:41.050411865Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:41.051502787Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:41.054473523Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:41.056702483Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:41.058037041Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.060641807Z 53 PC: 82aa2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:41.061970692Z 37 PC: 82ab7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.064389708Z 37 PC: 82abf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.065465511Z 37 PC: 82ac7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.068526504Z 37 PC: 82acf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.07107704Z 68 PC: 82e3f | I/O control for devices (Set for = '��ɀ�Wum��뽀�Iu �U'rB��뮀�Wu8�F'r3�')
2018-12-17T22:41:41.072981591Z 25 PC: 829a9 | Get default drive
2018-12-17T22:41:41.07501189Z 71 PC: 829c8 | Get current directory
2018-12-17T22:41:41.078409721Z 48 PC: 83428 | Get DOS version
2018-12-17T22:41:41.081268738Z 61 PC: 83274 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:41.088763885Z 63 PC: 83347 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:41.096158811Z 62 PC: 832c4 | Close file
2018-12-17T22:41:41.099368141Z 44 PC: 831f5 | Get time 0x831f5: mov word ptr [0x3e], cx
0x831f9: mov word ptr [0x40], dx
0x831fd: retf
0x831fe: mov bx, sp
0x83200: push ds
0x83201: les di, ptr ss:[bx + 8]
0x83205: lds si, ptr ss:[bx + 4]
0x83209: cld
0x8320a: xor ax, ax
0x8320c: stosw word ptr es:[di], ax
0x8320d: mov ax, 0xd7b0
0x83210: stosw word ptr es:[di], ax
0x83211: xor ax, ax
0x83213: mov cx, 0x16
0x83216: rep stosd dword ptr es:[di], eax
0x83218: lodsb al, byte ptr [si]
0x83219: cmp al, 0x4f
0x8321b: jbe 0x8321f
0x8321d: mov al, 0x4f
0x8321f: mov cl, al
2018-12-17T22:41:41.102167181Z 26 PC: 8288b | Set disk transfer address
2018-12-17T22:41:41.104412777Z 78 PC: 82897 | Find first file
2018-12-17T22:41:41.111716313Z 26 PC: 8288b | Set disk transfer address
2018-12-17T22:41:41.113037148Z 78 PC: 82897 | Find first file
2018-12-17T22:41:41.120405763Z 26 PC: 828af | Set disk transfer address
2018-12-17T22:41:41.121735828Z 79 PC: 828b4 | Find next file
2018-12-17T22:41:41.125803951Z 26 PC: 8288b | Set disk transfer address
2018-12-17T22:41:41.127467799Z 78 PC: 82897 | Find first file
2018-12-17T22:41:41.133617853Z 48 PC: 83428 | Get DOS version
2018-12-17T22:41:41.136846073Z 48 PC: 83428 | Get DOS version
2018-12-17T22:41:41.138804745Z 41 PC: 82942 | Parse filename
2018-12-17T22:41:41.141371552Z 41 PC: 82950 | Parse filename
2018-12-17T22:41:41.144056191Z 75 PC: 8295b | Execute program
2018-12-17T22:41:41.159127556Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.161800445Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:41.163237472Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:41.165996058Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:41.167741429Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.169158206Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.171729805Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:41.173175344Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:41.175507453Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:41.177325261Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:41.178738431Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:41.181302706Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:41.182648111Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:41.184862042Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:41.186525262Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:41.187862289Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:41.190376244Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:41.191744586Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.193983358Z 53 PC: 888a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:41.195633795Z 37 PC: 888b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.196908109Z 37 PC: 888bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.199312569Z 37 PC: 888c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.200589123Z 37 PC: 888cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.203166402Z 68 PC: 88c3f | I/O control for devices (Set for = 'G�=')
2018-12-17T22:41:41.205278083Z 25 PC: 887a9 | Get default drive
2018-12-17T22:41:41.206554634Z 71 PC: 887c8 | Get current directory
2018-12-17T22:41:41.210984895Z 48 PC: 89228 | Get DOS version
2018-12-17T22:41:41.212601808Z 61 PC: 89074 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:41.220369584Z 63 PC: 89147 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:41.228327883Z 62 PC: 890c4 | Close file
2018-12-17T22:41:41.230289264Z 44 PC: 88ff5 | Get time 0x88ff5: mov word ptr [0x3e], cx
0x88ff9: mov word ptr [0x40], dx
0x88ffd: retf
0x88ffe: mov bx, sp
0x89000: push ds
0x89001: les di, ptr ss:[bx + 8]
0x89005: lds si, ptr ss:[bx + 4]
0x89009: cld
0x8900a: xor ax, ax
0x8900c: stosw word ptr es:[di], ax
0x8900d: mov ax, 0xd7b0
0x89010: stosw word ptr es:[di], ax
0x89011: xor ax, ax
0x89013: mov cx, 0x16
0x89016: rep stosd dword ptr es:[di], eax
0x89018: lodsb al, byte ptr [si]
0x89019: cmp al, 0x4f
0x8901b: jbe 0x8901f
0x8901d: mov al, 0x4f
0x8901f: mov cl, al
2018-12-17T22:41:41.234603316Z 26 PC: 8868b | Set disk transfer address
2018-12-17T22:41:41.235873846Z 78 PC: 88697 | Find first file
2018-12-17T22:41:41.243589536Z 26 PC: 8868b | Set disk transfer address
2018-12-17T22:41:41.245166485Z 78 PC: 88697 | Find first file
2018-12-17T22:41:41.251675989Z 26 PC: 886af | Set disk transfer address
2018-12-17T22:41:41.254062654Z 79 PC: 886b4 | Find next file
2018-12-17T22:41:41.257080717Z 26 PC: 8868b | Set disk transfer address
2018-12-17T22:41:41.25923918Z 78 PC: 88697 | Find first file
2018-12-17T22:41:41.265684527Z 48 PC: 89228 | Get DOS version
2018-12-17T22:41:41.267170062Z 48 PC: 89228 | Get DOS version
2018-12-17T22:41:41.270190872Z 41 PC: 88742 | Parse filename
2018-12-17T22:41:41.271775773Z 41 PC: 88750 | Parse filename
2018-12-17T22:41:41.27424455Z 75 PC: 8875b | Execute program
2018-12-17T22:41:41.289188763Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.290330519Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:41.292593804Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:41.293749262Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:41.295632823Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.297738253Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.29927683Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:41.301560279Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:41.302893391Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:41.305337133Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:41.30667768Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:41.308885403Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:41.310549068Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:41.311886031Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:41.314330611Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:41.315664697Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:41.31791251Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:41.319543884Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.321060984Z 53 PC: 8e6a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:41.323321511Z 37 PC: 8e6b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.325073414Z 37 PC: 8e6bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.327443804Z 37 PC: 8e6c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.328725315Z 37 PC: 8e6cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.33130193Z 68 PC: 8ea3f | I/O control for devices
2018-12-17T22:41:41.333426916Z 25 PC: 8e5a9 | Get default drive
2018-12-17T22:41:41.334684179Z 71 PC: 8e5c8 | Get current directory
2018-12-17T22:41:41.339023557Z 48 PC: 8f028 | Get DOS version
2018-12-17T22:41:41.340621735Z 61 PC: 8ee74 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:41.348391016Z 63 PC: 8ef47 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:41.356600077Z 62 PC: 8eec4 | Close file
2018-12-17T22:41:41.358760891Z 44 PC: 8edf5 | Get time 0x8edf5: mov word ptr [0x3e], cx
0x8edf9: mov word ptr [0x40], dx
0x8edfd: retf
0x8edfe: mov bx, sp
0x8ee00: push ds
0x8ee01: les di, ptr ss:[bx + 8]
0x8ee05: lds si, ptr ss:[bx + 4]
0x8ee09: cld
0x8ee0a: xor ax, ax
0x8ee0c: stosw word ptr es:[di], ax
0x8ee0d: mov ax, 0xd7b0
0x8ee10: stosw word ptr es:[di], ax
0x8ee11: xor ax, ax
0x8ee13: mov cx, 0x16
0x8ee16: rep stosd dword ptr es:[di], eax
0x8ee18: lodsb al, byte ptr [si]
0x8ee19: cmp al, 0x4f
0x8ee1b: jbe 0x8ee1f
0x8ee1d: mov al, 0x4f
0x8ee1f: mov cl, al
2018-12-17T22:41:41.362441604Z 26 PC: 8e48b | Set disk transfer address
2018-12-17T22:41:41.363700301Z 78 PC: 8e497 | Find first file
2018-12-17T22:41:41.371744218Z 26 PC: 8e48b | Set disk transfer address
2018-12-17T22:41:41.373032887Z 78 PC: 8e497 | Find first file
2018-12-17T22:41:41.380752299Z 26 PC: 8e4af | Set disk transfer address
2018-12-17T22:41:41.382368363Z 79 PC: 8e4b4 | Find next file
2018-12-17T22:41:41.385395503Z 26 PC: 8e48b | Set disk transfer address
2018-12-17T22:41:41.387759531Z 78 PC: 8e497 | Find first file
2018-12-17T22:41:41.393856729Z 48 PC: 8f028 | Get DOS version
2018-12-17T22:41:41.39633002Z 48 PC: 8f028 | Get DOS version
2018-12-17T22:41:41.398548503Z 41 PC: 8e542 | Parse filename
2018-12-17T22:41:41.400331652Z 41 PC: 8e550 | Parse filename
2018-12-17T22:41:41.402851245Z 75 PC: 8e55b | Execute program
2018-12-17T22:41:41.417674891Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.419982216Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:41.422013302Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:41.424408095Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:41.42608048Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.427573413Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.429764222Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:41.431205335Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:41.433683259Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:41.435102379Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:41.437604925Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:41.438969198Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:41.440319511Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:41.442817453Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:41.444150402Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:41.446473287Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:41.448188767Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:41.449737929Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.451721417Z 53 PC: 944a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:41.453144214Z 37 PC: 944b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.455284647Z 37 PC: 944bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.456463637Z 37 PC: 944c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.458561317Z 37 PC: 944cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.460124411Z 68 PC: 9483f | I/O control for devices
2018-12-17T22:41:41.462160878Z 25 PC: 943a9 | Get default drive
2018-12-17T22:41:41.464761835Z 71 PC: 943c8 | Get current directory
2018-12-17T22:41:41.468755907Z 48 PC: 94e28 | Get DOS version
2018-12-17T22:41:41.471724443Z 61 PC: 94c74 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:41.478722511Z 63 PC: 94d47 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:41.487021541Z 62 PC: 94cc4 | Close file
2018-12-17T22:41:41.489895419Z 44 PC: 94bf5 | Get time 0x94bf5: mov word ptr [0x3e], cx
0x94bf9: mov word ptr [0x40], dx
0x94bfd: retf
0x94bfe: mov bx, sp
0x94c00: push ds
0x94c01: les di, ptr ss:[bx + 8]
0x94c05: lds si, ptr ss:[bx + 4]
0x94c09: cld
0x94c0a: xor ax, ax
0x94c0c: stosw word ptr es:[di], ax
0x94c0d: mov ax, 0xd7b0
0x94c10: stosw word ptr es:[di], ax
0x94c11: xor ax, ax
0x94c13: mov cx, 0x16
0x94c16: rep stosd dword ptr es:[di], eax
0x94c18: lodsb al, byte ptr [si]
0x94c19: cmp al, 0x4f
0x94c1b: jbe 0x94c1f
0x94c1d: mov al, 0x4f
0x94c1f: mov cl, al
2018-12-17T22:41:41.492721732Z 26 PC: 9428b | Set disk transfer address
2018-12-17T22:41:41.495306036Z 78 PC: 94297 | Find first file
2018-12-17T22:41:41.502688442Z 26 PC: 9428b | Set disk transfer address
2018-12-17T22:41:41.50503383Z 78 PC: 94297 | Find first file
2018-12-17T22:41:41.511634199Z 26 PC: 942af | Set disk transfer address
2018-12-17T22:41:41.513146749Z 79 PC: 942b4 | Find next file
2018-12-17T22:41:41.517273453Z 26 PC: 9428b | Set disk transfer address
2018-12-17T22:41:41.518598712Z 78 PC: 94297 | Find first file
2018-12-17T22:41:41.525963468Z 48 PC: 94e28 | Get DOS version
2018-12-17T22:41:41.527509907Z 48 PC: 94e28 | Get DOS version
2018-12-17T22:41:41.530480582Z 41 PC: 94342 | Parse filename
2018-12-17T22:41:41.532492781Z 41 PC: 94350 | Parse filename
2018-12-17T22:41:41.534125167Z 75 PC: 9435b | Execute program
2018-12-17T22:41:41.550388271Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.551810353Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:41.554236564Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:41.556035363Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:41.558342824Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.560111111Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.561531492Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:41.563818894Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:41.565170666Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:41.567046139Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:41.56840453Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:41.569969765Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:41.572037122Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:41.573266135Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:41.57520692Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:41.576602308Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:41.579002061Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:41.580958144Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.582611408Z 53 PC: 9a2a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:41.583913793Z 37 PC: 9a2b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.585201949Z 37 PC: 9a2bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.586796112Z 37 PC: 9a2c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.588118243Z 37 PC: 9a2cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.590453239Z 68 PC: 9a63f | I/O control for devices
2018-12-17T22:41:41.592297303Z 25 PC: 9a1a9 | Get default drive
2018-12-17T22:41:41.594283151Z 71 PC: 9a1c8 | Get current directory
2018-12-17T22:41:41.597322862Z 48 PC: 9ac28 | Get DOS version
2018-12-17T22:41:41.5996639Z 61 PC: 9aa74 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:41.606977431Z 63 PC: 9ab47 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:41.614314524Z 62 PC: 9aac4 | Close file
2018-12-17T22:41:41.617530164Z 44 PC: 9a9f5 | Get time 0x9a9f5: mov word ptr [0x3e], cx
0x9a9f9: mov word ptr [0x40], dx
0x9a9fd: retf
0x9a9fe: mov bx, sp
0x9aa00: push ds
0x9aa01: les di, ptr ss:[bx + 8]
0x9aa05: lds si, ptr ss:[bx + 4]
0x9aa09: cld
0x9aa0a: xor ax, ax
0x9aa0c: stosw word ptr es:[di], ax
0x9aa0d: mov ax, 0xd7b0
0x9aa10: stosw word ptr es:[di], ax
0x9aa11: xor ax, ax
0x9aa13: mov cx, 0x16
0x9aa16: rep stosd dword ptr es:[di], eax
0x9aa18: lodsb al, byte ptr [si]
0x9aa19: cmp al, 0x4f
0x9aa1b: jbe 0x9aa1f
0x9aa1d: mov al, 0x4f
0x9aa1f: mov cl, al
2018-12-17T22:41:41.620911426Z 26 PC: 9a08b | Set disk transfer address
2018-12-17T22:41:41.62324642Z 78 PC: 9a097 | Find first file
2018-12-17T22:41:41.630457804Z 26 PC: 9a08b | Set disk transfer address
2018-12-17T22:41:41.632655563Z 78 PC: 9a097 | Find first file
2018-12-17T22:41:41.639142489Z 26 PC: 9a0af | Set disk transfer address
2018-12-17T22:41:41.640435665Z 79 PC: 9a0b4 | Find next file
2018-12-17T22:41:41.644675362Z 26 PC: 9a08b | Set disk transfer address
2018-12-17T22:41:41.645987934Z 78 PC: 9a097 | Find first file
2018-12-17T22:41:41.653050961Z 48 PC: 9ac28 | Get DOS version
2018-12-17T22:41:41.655361502Z 48 PC: 9ac28 | Get DOS version
2018-12-17T22:41:41.657491653Z 41 PC: 9a142 | Parse filename
2018-12-17T22:41:41.660134918Z 41 PC: 9a150 | Parse filename
2018-12-17T22:41:41.661757786Z 75 PC: 9a15b | Execute program
2018-12-17T22:41:41.672803878Z 44 PC: 99fff | Get time 0x99fff: test cl, 1
0x9a002: jne 0x9a00a
0x9a004: mov ah, 2
0x9a006: mov dl, 7
0x9a008: int 0x21
0x9a00a: mov sp, bp
0x9a00c: pop bp
0x9a00d: xor ax, ax
0x9a00f: lcall 0x9a25:0xe9
0x9a014: add byte ptr [bx + si], al
0x9a016: add byte ptr [bx + si], al
0x9a018: add byte ptr [bx + si], al
0x9a01a: add byte ptr [bx + si], al
0x9a01c: add byte ptr [bx + si], al
0x9a01e: add byte ptr [bx + si], al
0x9a020: push bp
0x9a021: mov bp, sp
0x9a023: les di, ptr [bp + 0xa]
0x9a026: mov bx, word ptr es:[di]
0x9a029: mov ax, 0x5700
2018-12-17T22:41:41.675376591Z 64 PC: 9a742 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:41.678206631Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.679918973Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:41.681294154Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:41.683827623Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:41.685183788Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.68749985Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.68921831Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:41.691439809Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:41.693151335Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:41.694211808Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:41.696277037Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:41.698339246Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:41.700550571Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:41.70218465Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:41.703655668Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:41.705975957Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:41.707259023Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:41.709688939Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.7110037Z 37 PC: 9a3b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:41.713193514Z 76 PC: 9a3f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:41.716625727Z 44 PC: 941ff | Get time 0x941ff: test cl, 1
0x94202: jne 0x9420a
0x94204: mov ah, 2
0x94206: mov dl, 7
0x94208: int 0x21
0x9420a: mov sp, bp
0x9420c: pop bp
0x9420d: xor ax, ax
0x9420f: lcall 0x9445:0xe9
0x94214: add byte ptr [bx + si], al
0x94216: add byte ptr [bx + si], al
0x94218: add byte ptr [bx + si], al
0x9421a: add byte ptr [bx + si], al
0x9421c: add byte ptr [bx + si], al
0x9421e: add byte ptr [bx + si], al
0x94220: push bp
0x94221: mov bp, sp
0x94223: les di, ptr [bp + 0xa]
0x94226: mov bx, word ptr es:[di]
0x94229: mov ax, 0x5700
2018-12-17T22:41:41.719132433Z 64 PC: 94942 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:41.721999391Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.723291401Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:41.725559035Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:41.727214035Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:41.729481463Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.730990147Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.732321981Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:41.734068718Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:41.735425245Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:41.738169094Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:41.739489737Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:41.741738468Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:41.743184564Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:41.744476063Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:41.747208892Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:41.748507159Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:41.750830405Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:41.752297031Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.753866698Z 37 PC: 945b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:41.755595888Z 76 PC: 945f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:41.758756692Z 44 PC: 8e3ff | Get time 0x8e3ff: test cl, 1
0x8e402: jne 0x8e40a
0x8e404: mov ah, 2
0x8e406: mov dl, 7
0x8e408: int 0x21
0x8e40a: mov sp, bp
0x8e40c: pop bp
0x8e40d: xor ax, ax
0x8e40f: lcall 0x8e65:0xe9
0x8e414: add byte ptr [bx + si], al
0x8e416: add byte ptr [bx + si], al
0x8e418: add byte ptr [bx + si], al
0x8e41a: add byte ptr [bx + si], al
0x8e41c: add byte ptr [bx + si], al
0x8e41e: add byte ptr [bx + si], al
0x8e420: push bp
0x8e421: mov bp, sp
0x8e423: les di, ptr [bp + 0xa]
0x8e426: mov bx, word ptr es:[di]
0x8e429: mov ax, 0x5700
2018-12-17T22:41:41.762370588Z 64 PC: 8eb42 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:41.76430036Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.766352018Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:41.768020803Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:41.769244551Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:41.771056147Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.772377808Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.774529542Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:41.77579852Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:41.778396237Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:41.779710365Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:41.782006313Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:41.797661203Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:41.800643805Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:41.801846165Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:41.802856639Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:41.804344901Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:41.805385231Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:41.807129834Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.808404931Z 37 PC: 8e7b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:41.810088342Z 76 PC: 8e7f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:41.812962338Z 44 PC: 885ff | Get time 0x885ff: test cl, 1
0x88602: jne 0x8860a
0x88604: mov ah, 2
0x88606: mov dl, 7
0x88608: int 0x21
0x8860a: mov sp, bp
0x8860c: pop bp
0x8860d: xor ax, ax
0x8860f: lcall 0x8885:0xe9
0x88614: add byte ptr [bx + si], al
0x88616: add byte ptr [bx + si], al
0x88618: add byte ptr [bx + si], al
0x8861a: add byte ptr [bx + si], al
0x8861c: add byte ptr [bx + si], al
0x8861e: add byte ptr [bx + si], al
0x88620: push bp
0x88621: mov bp, sp
0x88623: les di, ptr [bp + 0xa]
0x88626: mov bx, word ptr es:[di]
0x88629: mov ax, 0x5700
2018-12-17T22:41:41.816510885Z 64 PC: 88d42 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:41.818247029Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.820675739Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:41.821826229Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:41.823197294Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:41.825775737Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.826818533Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.829554676Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:41.830949508Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:41.833077752Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:41.834380587Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:41.835859303Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:41.837933545Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:41.839098112Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:41.841439726Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:41.842759921Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:41.845281829Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:41.846569532Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:41.849035046Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.850216012Z 37 PC: 889b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:41.85234391Z 76 PC: 889f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:41.855267696Z 44 PC: 827ff | Get time 0x827ff: test cl, 1
0x82802: jne 0x8280a
0x82804: mov ah, 2
0x82806: mov dl, 7
0x82808: int 0x21
0x8280a: mov sp, bp
0x8280c: pop bp
0x8280d: xor ax, ax
0x8280f: lcall 0x82a5:0xe9
0x82814: add byte ptr [bx + si], al
0x82816: add byte ptr [bx + si], al
0x82818: add byte ptr [bx + si], al
0x8281a: add byte ptr [bx + si], al
0x8281c: add byte ptr [bx + si], al
0x8281e: add byte ptr [bx + si], al
0x82820: push bp
0x82821: mov bp, sp
0x82823: les di, ptr [bp + 0xa]
0x82826: mov bx, word ptr es:[di]
0x82829: mov ax, 0x5700
2018-12-17T22:41:41.857762763Z 64 PC: 82f42 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:41.860305274Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.861377526Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:41.863760201Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:41.86480506Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:41.867137547Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.868205385Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.86956407Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:41.87121101Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:41.872740746Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:41.874389179Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:41.875429125Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:41.876984436Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:41.878073043Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:41.879823435Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:41.880899636Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:41.883047775Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:41.884185732Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:41.885433054Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.887348179Z 37 PC: 82bb6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:41.888415995Z 76 PC: 82bf5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:41.892264537Z 44 PC: 7c9ff | Get time 0x7c9ff: test cl, 1
0x7ca02: jne 0x7ca0a
0x7ca04: mov ah, 2
0x7ca06: mov dl, 7
0x7ca08: int 0x21
0x7ca0a: mov sp, bp
0x7ca0c: pop bp
0x7ca0d: xor ax, ax
0x7ca0f: lcall 0x7cc5:0xe9
0x7ca14: add byte ptr [bx + si], al
0x7ca16: add byte ptr [bx + si], al
0x7ca18: add byte ptr [bx + si], al
0x7ca1a: add byte ptr [bx + si], al
0x7ca1c: add byte ptr [bx + si], al
0x7ca1e: add byte ptr [bx + si], al
0x7ca20: push bp
0x7ca21: mov bp, sp
0x7ca23: les di, ptr [bp + 0xa]
0x7ca26: mov bx, word ptr es:[di]
0x7ca29: mov ax, 0x5700
2018-12-17T22:41:41.895181951Z 64 PC: 7d142 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:41.897868838Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.899201429Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:41.901710148Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:41.903470924Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:41.905741546Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.908041844Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.909546361Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:41.911736274Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:41.913025982Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:41.91551663Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:41.916780137Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:41.919120834Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:41.920116537Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:41.921915761Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:41.922971448Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:41.924839462Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:41.926108486Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:41.928135469Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.929521011Z 37 PC: 7cdb6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:41.930939183Z 76 PC: 7cdf5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:41.934915298Z 44 PC: 76bff | Get time 0x76bff: test cl, 1
0x76c02: jne 0x76c0a
0x76c04: mov ah, 2
0x76c06: mov dl, 7
0x76c08: int 0x21
0x76c0a: mov sp, bp
0x76c0c: pop bp
0x76c0d: xor ax, ax
0x76c0f: lcall 0x76e5:0xe9
0x76c14: add byte ptr [bx + si], al
0x76c16: add byte ptr [bx + si], al
0x76c18: add byte ptr [bx + si], al
0x76c1a: add byte ptr [bx + si], al
0x76c1c: add byte ptr [bx + si], al
0x76c1e: add byte ptr [bx + si], al
0x76c20: push bp
0x76c21: mov bp, sp
0x76c23: les di, ptr [bp + 0xa]
0x76c26: mov bx, word ptr es:[di]
0x76c29: mov ax, 0x5700
2018-12-17T22:41:41.937401154Z 64 PC: 77342 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:41.940814151Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.942418127Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:41.945156085Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:41.946737834Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:41.949483374Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.951384495Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.953159445Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:41.955768992Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:41.957021Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:41.95932135Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:41.960493659Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:41.961749659Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:41.963501319Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:41.964447176Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:41.968264448Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:41.969387368Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:41.971745484Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:41.973243233Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:41.975406862Z 37 PC: 76fb6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:41.976436603Z 76 PC: 76ff5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:41.980818658Z 44 PC: 70dff | Get time 0x70dff: test cl, 1
0x70e02: jne 0x70e0a
0x70e04: mov ah, 2
0x70e06: mov dl, 7
0x70e08: int 0x21
0x70e0a: mov sp, bp
0x70e0c: pop bp
0x70e0d: xor ax, ax
0x70e0f: lcall 0x7105:0xe9
0x70e14: add byte ptr [bx + si], al
0x70e16: add byte ptr [bx + si], al
0x70e18: add byte ptr [bx + si], al
0x70e1a: add byte ptr [bx + si], al
0x70e1c: add byte ptr [bx + si], al
0x70e1e: add byte ptr [bx + si], al
0x70e20: push bp
0x70e21: mov bp, sp
0x70e23: les di, ptr [bp + 0xa]
0x70e26: mov bx, word ptr es:[di]
0x70e29: mov ax, 0x5700
2018-12-17T22:41:41.983715055Z 64 PC: 71542 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:41.986075304Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:41.987860642Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:41.990024089Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:41.991983383Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:41.993319678Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:41.996756678Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:41.997852073Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:41.999739114Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.000824585Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.003181029Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.004381149Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.006405506Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.007581558Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.010964902Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.012072905Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.014176156Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.016100813Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.017631094Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.019186961Z 37 PC: 711b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.020471597Z 76 PC: 711f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.022816598Z 44 PC: 6afff | Get time 0x6afff: test cl, 1
0x6b002: jne 0x6b00a
0x6b004: mov ah, 2
0x6b006: mov dl, 7
0x6b008: int 0x21
0x6b00a: mov sp, bp
0x6b00c: pop bp
0x6b00d: xor ax, ax
0x6b00f: lcall 0x6b25:0xe9
0x6b014: add byte ptr [bx + si], al
0x6b016: add byte ptr [bx + si], al
0x6b018: add byte ptr [bx + si], al
0x6b01a: add byte ptr [bx + si], al
0x6b01c: add byte ptr [bx + si], al
0x6b01e: add byte ptr [bx + si], al
0x6b020: push bp
0x6b021: mov bp, sp
0x6b023: les di, ptr [bp + 0xa]
0x6b026: mov bx, word ptr es:[di]
0x6b029: mov ax, 0x5700
2018-12-17T22:41:42.024447796Z 64 PC: 6b742 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.026139937Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.027097195Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.028297123Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.029226827Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.030461281Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.031635439Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.032731957Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.033813245Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.034966037Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.036099335Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.037750141Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.039285291Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.04037857Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.041689594Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.042924827Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.04408133Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.045608179Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.046729774Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.048331866Z 37 PC: 6b3b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.049743832Z 76 PC: 6b3f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.052932946Z 44 PC: 651ff | Get time 0x651ff: test cl, 1
0x65202: jne 0x6520a
0x65204: mov ah, 2
0x65206: mov dl, 7
0x65208: int 0x21
0x6520a: mov sp, bp
0x6520c: pop bp
0x6520d: xor ax, ax
0x6520f: lcall 0x6545:0xe9
0x65214: add byte ptr [bx + si], al
0x65216: add byte ptr [bx + si], al
0x65218: add byte ptr [bx + si], al
0x6521a: add byte ptr [bx + si], al
0x6521c: add byte ptr [bx + si], al
0x6521e: add byte ptr [bx + si], al
0x65220: push bp
0x65221: mov bp, sp
0x65223: les di, ptr [bp + 0xa]
0x65226: mov bx, word ptr es:[di]
0x65229: mov ax, 0x5700
2018-12-17T22:41:42.055261604Z 64 PC: 65942 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.057333615Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.058334569Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.060016616Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.060969434Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.062404127Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.063619712Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.065049366Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.066453238Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.068181156Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.069272056Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.071687571Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.073216318Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.075679093Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.07706179Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.079641747Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.081015075Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.083605201Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.084581819Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.088267093Z 37 PC: 655b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.089916681Z 76 PC: 655f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.093428861Z 44 PC: 5f3ff | Get time 0x5f3ff: test cl, 1
0x5f402: jne 0x5f40a
0x5f404: mov ah, 2
0x5f406: mov dl, 7
0x5f408: int 0x21
0x5f40a: mov sp, bp
0x5f40c: pop bp
0x5f40d: xor ax, ax
0x5f40f: lcall 0x5f65:0xe9
0x5f414: add byte ptr [bx + si], al
0x5f416: add byte ptr [bx + si], al
0x5f418: add byte ptr [bx + si], al
0x5f41a: add byte ptr [bx + si], al
0x5f41c: add byte ptr [bx + si], al
0x5f41e: add byte ptr [bx + si], al
0x5f420: push bp
0x5f421: mov bp, sp
0x5f423: les di, ptr [bp + 0xa]
0x5f426: mov bx, word ptr es:[di]
0x5f429: mov ax, 0x5700
2018-12-17T22:41:42.09585445Z 64 PC: 5fb42 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.097788604Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.098879965Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.099757964Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.101020913Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.101869133Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.103192679Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.104099451Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.105479193Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.106306216Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.107657366Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.108484879Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.109940161Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.110781026Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.112533995Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.113916861Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.115294732Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.116430676Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.118020775Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.118987571Z 37 PC: 5f7b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.120491306Z 76 PC: 5f7f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.122794325Z 44 PC: 595ff | Get time 0x595ff: test cl, 1
0x59602: jne 0x5960a
0x59604: mov ah, 2
0x59606: mov dl, 7
0x59608: int 0x21
0x5960a: mov sp, bp
0x5960c: pop bp
0x5960d: xor ax, ax
0x5960f: lcall 0x5985:0xe9
0x59614: add byte ptr [bx + si], al
0x59616: add byte ptr [bx + si], al
0x59618: add byte ptr [bx + si], al
0x5961a: add byte ptr [bx + si], al
0x5961c: add byte ptr [bx + si], al
0x5961e: add byte ptr [bx + si], al
0x59620: push bp
0x59621: mov bp, sp
0x59623: les di, ptr [bp + 0xa]
0x59626: mov bx, word ptr es:[di]
0x59629: mov ax, 0x5700
2018-12-17T22:41:42.125321409Z 64 PC: 59d42 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.126776587Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.128503435Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.129533091Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.131391486Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.132727942Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.13486088Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.135897849Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.137445632Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.13831729Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.140533706Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.141727095Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.143273718Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.144273322Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.1457289Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.146604588Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.148432118Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.14939331Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.150656928Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.151929197Z 37 PC: 599b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.153828452Z 76 PC: 599f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.155865602Z 44 PC: 537ff | Get time 0x537ff: test cl, 1
0x53802: jne 0x5380a
0x53804: mov ah, 2
0x53806: mov dl, 7
0x53808: int 0x21
0x5380a: mov sp, bp
0x5380c: pop bp
0x5380d: xor ax, ax
0x5380f: lcall 0x53a5:0xe9
0x53814: add byte ptr [bx + si], al
0x53816: add byte ptr [bx + si], al
0x53818: add byte ptr [bx + si], al
0x5381a: add byte ptr [bx + si], al
0x5381c: add byte ptr [bx + si], al
0x5381e: add byte ptr [bx + si], al
0x53820: push bp
0x53821: mov bp, sp
0x53823: les di, ptr [bp + 0xa]
0x53826: mov bx, word ptr es:[di]
0x53829: mov ax, 0x5700
2018-12-17T22:41:42.15831141Z 64 PC: 53f42 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.159832884Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.161357774Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.162235899Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.163949702Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.164831696Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.166593207Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.167429934Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.168808633Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.169672781Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.171190638Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.172127182Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.173626788Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.174641918Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.17628172Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.177210158Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.179140775Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.180406104Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.181912121Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.1828237Z 37 PC: 53bb6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.184334688Z 76 PC: 53bf5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.186304446Z 44 PC: 4d9ff | Get time 0x4d9ff: test cl, 1
0x4da02: jne 0x4da0a
0x4da04: mov ah, 2
0x4da06: mov dl, 7
0x4da08: int 0x21
0x4da0a: mov sp, bp
0x4da0c: pop bp
0x4da0d: xor ax, ax
0x4da0f: lcall 0x4dc5:0xe9
0x4da14: add byte ptr [bx + si], al
0x4da16: add byte ptr [bx + si], al
0x4da18: add byte ptr [bx + si], al
0x4da1a: add byte ptr [bx + si], al
0x4da1c: add byte ptr [bx + si], al
0x4da1e: add byte ptr [bx + si], al
0x4da20: push bp
0x4da21: mov bp, sp
0x4da23: les di, ptr [bp + 0xa]
0x4da26: mov bx, word ptr es:[di]
0x4da29: mov ax, 0x5700
2018-12-17T22:41:42.188728948Z 64 PC: 4e142 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.190040986Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.191638163Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.192481682Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.194128359Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.195102156Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.1965522Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.197616483Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.199059591Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.199972107Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.20168135Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.202592219Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.204247542Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.205188905Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.206581812Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.207464406Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.208944076Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.210042064Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.211695092Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.212692937Z 37 PC: 4ddb6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.214345393Z 76 PC: 4ddf5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.216812999Z 44 PC: 47bff | Get time 0x47bff: test cl, 1
0x47c02: jne 0x47c0a
0x47c04: mov ah, 2
0x47c06: mov dl, 7
0x47c08: int 0x21
0x47c0a: mov sp, bp
0x47c0c: pop bp
0x47c0d: xor ax, ax
0x47c0f: lcall 0x47e5:0xe9
0x47c14: add byte ptr [bx + si], al
0x47c16: add byte ptr [bx + si], al
0x47c18: add byte ptr [bx + si], al
0x47c1a: add byte ptr [bx + si], al
0x47c1c: add byte ptr [bx + si], al
0x47c1e: add byte ptr [bx + si], al
0x47c20: push bp
0x47c21: mov bp, sp
0x47c23: les di, ptr [bp + 0xa]
0x47c26: mov bx, word ptr es:[di]
0x47c29: mov ax, 0x5700
2018-12-17T22:41:42.226791512Z 64 PC: 48342 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.228878904Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.230338022Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.231757734Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.233533024Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.235029853Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.237415002Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.238647353Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.243225766Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.244150675Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.245596197Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.246421589Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.248313882Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.250408484Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.252361288Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.253373499Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.255104715Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.25647117Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.25826037Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.259346558Z 37 PC: 47fb6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.261200595Z 76 PC: 47ff5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.263432246Z 44 PC: 41dff | Get time 0x41dff: test cl, 1
0x41e02: jne 0x41e0a
0x41e04: mov ah, 2
0x41e06: mov dl, 7
0x41e08: int 0x21
0x41e0a: mov sp, bp
0x41e0c: pop bp
0x41e0d: xor ax, ax
0x41e0f: lcall 0x4205:0xe9
0x41e14: add byte ptr [bx + si], al
0x41e16: add byte ptr [bx + si], al
0x41e18: add byte ptr [bx + si], al
0x41e1a: add byte ptr [bx + si], al
0x41e1c: add byte ptr [bx + si], al
0x41e1e: add byte ptr [bx + si], al
0x41e20: push bp
0x41e21: mov bp, sp
0x41e23: les di, ptr [bp + 0xa]
0x41e26: mov bx, word ptr es:[di]
0x41e29: mov ax, 0x5700
2018-12-17T22:41:42.265595296Z 64 PC: 42542 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.266834379Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.268366001Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.269230578Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.270653838Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.271511732Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.272879642Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.273686973Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.275266276Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.276454398Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.278176388Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.279378256Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.281455236Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.282306029Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.283620072Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.284515751Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.285954751Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.286854803Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.2882769Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.28933572Z 37 PC: 421b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.290925931Z 76 PC: 421f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.293603814Z 44 PC: 3bfff | Get time 0x3bfff: test cl, 1
0x3c002: jne 0x3c00a
0x3c004: mov ah, 2
0x3c006: mov dl, 7
0x3c008: int 0x21
0x3c00a: mov sp, bp
0x3c00c: pop bp
0x3c00d: xor ax, ax
0x3c00f: lcall 0x3c25:0xe9
0x3c014: add byte ptr [bx + si], al
0x3c016: add byte ptr [bx + si], al
0x3c018: add byte ptr [bx + si], al
0x3c01a: add byte ptr [bx + si], al
0x3c01c: add byte ptr [bx + si], al
0x3c01e: add byte ptr [bx + si], al
0x3c020: push bp
0x3c021: mov bp, sp
0x3c023: les di, ptr [bp + 0xa]
0x3c026: mov bx, word ptr es:[di]
0x3c029: mov ax, 0x5700
2018-12-17T22:41:42.296112914Z 64 PC: 3c742 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.29758497Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.299191643Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.300056452Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.301502396Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.302397828Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.303752614Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.304611341Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.305939959Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.30711453Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.309453386Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.31056071Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.312366478Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.314081617Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.323755996Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.325203703Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.327244626Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.328740699Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.330592607Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.331950865Z 37 PC: 3c3b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.334392476Z 76 PC: 3c3f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.337526544Z 44 PC: 361ff | Get time 0x361ff: test cl, 1
0x36202: jne 0x3620a
0x36204: mov ah, 2
0x36206: mov dl, 7
0x36208: int 0x21
0x3620a: mov sp, bp
0x3620c: pop bp
0x3620d: xor ax, ax
0x3620f: lcall 0x3645:0xe9
0x36214: add byte ptr [bx + si], al
0x36216: add byte ptr [bx + si], al
0x36218: add byte ptr [bx + si], al
0x3621a: add byte ptr [bx + si], al
0x3621c: add byte ptr [bx + si], al
0x3621e: add byte ptr [bx + si], al
0x36220: push bp
0x36221: mov bp, sp
0x36223: les di, ptr [bp + 0xa]
0x36226: mov bx, word ptr es:[di]
0x36229: mov ax, 0x5700
2018-12-17T22:41:42.341129036Z 64 PC: 36942 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.343053179Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.345024139Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.346377803Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.348606317Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.349965083Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.351955662Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.353307828Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.355056201Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.356383626Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.357947845Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.359152962Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.360181141Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.362700639Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.364038823Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.366202799Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.367235655Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.369587026Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.370914514Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.373255143Z 37 PC: 365b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.374645358Z 76 PC: 365f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.37798615Z 44 PC: 303ff | Get time 0x303ff: test cl, 1
0x30402: jne 0x3040a
0x30404: mov ah, 2
0x30406: mov dl, 7
0x30408: int 0x21
0x3040a: mov sp, bp
0x3040c: pop bp
0x3040d: xor ax, ax
0x3040f: lcall 0x3065:0xe9
0x30414: add byte ptr [bx + si], al
0x30416: add byte ptr [bx + si], al
0x30418: add byte ptr [bx + si], al
0x3041a: add byte ptr [bx + si], al
0x3041c: add byte ptr [bx + si], al
0x3041e: add byte ptr [bx + si], al
0x30420: push bp
0x30421: mov bp, sp
0x30423: les di, ptr [bp + 0xa]
0x30426: mov bx, word ptr es:[di]
0x30429: mov ax, 0x5700
2018-12-17T22:41:42.380893946Z 64 PC: 30b42 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.382980539Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.384583368Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.385893856Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.388091654Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.389440354Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.391323344Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.39246961Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.394597472Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.395702543Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.397218659Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.39838923Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.399440109Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.401041785Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.402336953Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.403856627Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.405408094Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.406751149Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.408549212Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.409855313Z 37 PC: 307b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.412458011Z 76 PC: 307f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.415614197Z 44 PC: 2a5ff | Get time 0x2a5ff: test cl, 1
0x2a602: jne 0x2a60a
0x2a604: mov ah, 2
0x2a606: mov dl, 7
0x2a608: int 0x21
0x2a60a: mov sp, bp
0x2a60c: pop bp
0x2a60d: xor ax, ax
0x2a60f: lcall 0x2a85:0xe9
0x2a614: add byte ptr [bx + si], al
0x2a616: add byte ptr [bx + si], al
0x2a618: add byte ptr [bx + si], al
0x2a61a: add byte ptr [bx + si], al
0x2a61c: add byte ptr [bx + si], al
0x2a61e: add byte ptr [bx + si], al
0x2a620: push bp
0x2a621: mov bp, sp
0x2a623: les di, ptr [bp + 0xa]
0x2a626: mov bx, word ptr es:[di]
0x2a629: mov ax, 0x5700
2018-12-17T22:41:42.419263508Z 64 PC: 2ad42 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.421296718Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.422886454Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.424198891Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.426364052Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.427549166Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.429214681Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.431103652Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.432603709Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.434742064Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.437043321Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.438577392Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.43988972Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.441808587Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.443899716Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.445847376Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.446800389Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.448620828Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.449722989Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.450764932Z 37 PC: 2a9b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.45348259Z 76 PC: 2a9f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.45715165Z 44 PC: 247ff | Get time 0x247ff: test cl, 1
0x24802: jne 0x2480a
0x24804: mov ah, 2
0x24806: mov dl, 7
0x24808: int 0x21
0x2480a: mov sp, bp
0x2480c: pop bp
0x2480d: xor ax, ax
0x2480f: lcall 0x24a5:0xe9
0x24814: add byte ptr [bx + si], al
0x24816: add byte ptr [bx + si], al
0x24818: add byte ptr [bx + si], al
0x2481a: add byte ptr [bx + si], al
0x2481c: add byte ptr [bx + si], al
0x2481e: add byte ptr [bx + si], al
0x24820: push bp
0x24821: mov bp, sp
0x24823: les di, ptr [bp + 0xa]
0x24826: mov bx, word ptr es:[di]
0x24829: mov ax, 0x5700
2018-12-17T22:41:42.461124338Z 64 PC: 24f42 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.464348111Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.46616319Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.467539779Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.469402093Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.470554619Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.472927129Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.475820643Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.477058018Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.478290375Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.480881497Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.482657671Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.485548208Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.486548459Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.488480426Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.489551529Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.491933765Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.493149002Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.494667771Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.495686369Z 37 PC: 24bb6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.498423143Z 76 PC: 24bf5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.501184876Z 44 PC: 1e9ff | Get time 0x1e9ff: test cl, 1
0x1ea02: jne 0x1ea0a
0x1ea04: mov ah, 2
0x1ea06: mov dl, 7
0x1ea08: int 0x21
0x1ea0a: mov sp, bp
0x1ea0c: pop bp
0x1ea0d: xor ax, ax
0x1ea0f: lcall 0x1ec5:0xe9
0x1ea14: add byte ptr [bx + si], al
0x1ea16: add byte ptr [bx + si], al
0x1ea18: add byte ptr [bx + si], al
0x1ea1a: add byte ptr [bx + si], al
0x1ea1c: add byte ptr [bx + si], al
0x1ea1e: add byte ptr [bx + si], al
0x1ea20: push bp
0x1ea21: mov bp, sp
0x1ea23: les di, ptr [bp + 0xa]
0x1ea26: mov bx, word ptr es:[di]
0x1ea29: mov ax, 0x5700
2018-12-17T22:41:42.504493872Z 64 PC: 1f142 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.506357544Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.508674018Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.509969636Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.5121578Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.513484469Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.515971673Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.517373589Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.519201414Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.520649157Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.522736485Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.523957124Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.525849985Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.527281801Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.528571438Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.530746195Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.531846352Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.534060328Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.535161335Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.537389489Z 37 PC: 1edb6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.538513102Z 76 PC: 1edf5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.542958027Z 44 PC: 18bff | Get time 0x18bff: test cl, 1
0x18c02: jne 0x18c0a
0x18c04: mov ah, 2
0x18c06: mov dl, 7
0x18c08: int 0x21
0x18c0a: mov sp, bp
0x18c0c: pop bp
0x18c0d: xor ax, ax
0x18c0f: lcall 0x18e5:0xe9
0x18c14: add byte ptr [bx + si], al
0x18c16: add byte ptr [bx + si], al
0x18c18: add byte ptr [bx + si], al
0x18c1a: add byte ptr [bx + si], al
0x18c1c: add byte ptr [bx + si], al
0x18c1e: add byte ptr [bx + si], al
0x18c20: push bp
0x18c21: mov bp, sp
0x18c23: les di, ptr [bp + 0xa]
0x18c26: mov bx, word ptr es:[di]
0x18c29: mov ax, 0x5700
2018-12-17T22:41:42.545355902Z 64 PC: 19342 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.548525849Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.549937879Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.551945483Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.553051943Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.555260046Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.556581497Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.558794768Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.559861432Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.562649142Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.56371538Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.566048275Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.567567771Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.569778716Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.570953455Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.574896724Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.57592515Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.578100212Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.579159622Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.581318323Z 37 PC: 18fb6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.582441813Z 76 PC: 18ff5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:42.585356379Z 44 PC: 12dff | Get time 0x12dff: test cl, 1
0x12e02: jne 0x12e0a
0x12e04: mov ah, 2
0x12e06: mov dl, 7
0x12e08: int 0x21
0x12e0a: mov sp, bp
0x12e0c: pop bp
0x12e0d: xor ax, ax
0x12e0f: lcall 0x1305:0xe9
0x12e14: add byte ptr [bx + si], al
0x12e16: add byte ptr [bx + si], al
0x12e18: add byte ptr [bx + si], al
0x12e1a: add byte ptr [bx + si], al
0x12e1c: add byte ptr [bx + si], al
0x12e1e: add byte ptr [bx + si], al
0x12e20: push bp
0x12e21: mov bp, sp
0x12e23: les di, ptr [bp + 0xa]
0x12e26: mov bx, word ptr es:[di]
0x12e29: mov ax, 0x5700
2018-12-17T22:41:42.588855798Z 64 PC: 13542 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:42.591315549Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:42.593308925Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:42.595060531Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:42.597365545Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:42.598394472Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:42.601042299Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:42.602062511Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:42.605497884Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:42.606925496Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:42.608833119Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:42.609906733Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:42.611957622Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:42.612993518Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:42.614556208Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:42.61567587Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:42.616761463Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:42.618210725Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:42.619202346Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:42.620833221Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:42.621818182Z 76 PC: 131f5 | Terminate with return code (Return code = '0')