Sample viewer

vx.netlux.org/Virus.DOS.HLLC.Evenbeep.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:41:46.942091075Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:46.944517422Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:46.95029838Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:46.951907673Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:46.953230176Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:46.955280958Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:46.956431239Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:46.957577201Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:46.959411967Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:46.960755651Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:46.962143287Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:46.963895668Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:46.965122453Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:46.966326113Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:46.968690735Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:46.970159093Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:46.971590411Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:46.973305913Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:46.975841996Z 53 PC: 130a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:46.977264538Z 37 PC: 130b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:46.97851122Z 37 PC: 130bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:46.981350071Z 37 PC: 130c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:46.983662805Z 37 PC: 130cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:46.986944749Z 68 PC: 1343f | I/O control for devices (Set for = '')
2018-12-17T22:41:46.990433371Z 25 PC: 12fa9 | Get default drive
2018-12-17T22:41:46.991759983Z 71 PC: 12fc8 | Get current directory
2018-12-17T22:41:46.995589436Z 48 PC: 13a28 | Get DOS version
2018-12-17T22:41:46.998159303Z 61 PC: 13874 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:41:47.005505991Z 63 PC: 13947 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:47.017267882Z 62 PC: 138c4 | Close file
2018-12-17T22:41:47.020066849Z 44 PC: 137f5 | Get time 0x137f5: mov word ptr [0x3e], cx
0x137f9: mov word ptr [0x40], dx
0x137fd: retf
0x137fe: mov bx, sp
0x13800: push ds
0x13801: les di, ptr ss:[bx + 8]
0x13805: lds si, ptr ss:[bx + 4]
0x13809: cld
0x1380a: xor ax, ax
0x1380c: stosw word ptr es:[di], ax
0x1380d: mov ax, 0xd7b0
0x13810: stosw word ptr es:[di], ax
0x13811: xor ax, ax
0x13813: mov cx, 0x16
0x13816: rep stosd dword ptr es:[di], eax
0x13818: lodsb al, byte ptr [si]
0x13819: cmp al, 0x4f
0x1381b: jbe 0x1381f
0x1381d: mov al, 0x4f
0x1381f: mov cl, al
2018-12-17T22:41:47.022931129Z 26 PC: 12e8b | Set disk transfer address
2018-12-17T22:41:47.024595625Z 78 PC: 12e97 | Find first file
2018-12-17T22:41:47.03299443Z 26 PC: 12e8b | Set disk transfer address
2018-12-17T22:41:47.034332834Z 78 PC: 12e97 | Find first file
2018-12-17T22:41:47.04063984Z 60 PC: 13874 | Create or truncate file
2018-12-17T22:41:47.059762405Z 64 PC: 13947 | Write file or device (Write 6724 bytes on handle 5)
2018-12-17T22:41:47.069186376Z 87 PC: 12e5b | Get or set file date and time
2018-12-17T22:41:47.070971228Z 62 PC: 138c4 | Close file
2018-12-17T22:41:47.080549267Z 26 PC: 12eaf | Set disk transfer address
2018-12-17T22:41:47.081931784Z 79 PC: 12eb4 | Find next file
2018-12-17T22:41:47.08912317Z 26 PC: 12e8b | Set disk transfer address
2018-12-17T22:41:47.09077898Z 78 PC: 12e97 | Find first file
2018-12-17T22:41:47.098039016Z 48 PC: 13a28 | Get DOS version
2018-12-17T22:41:47.099609426Z 48 PC: 13a28 | Get DOS version
2018-12-17T22:41:47.101662893Z 41 PC: 12f42 | Parse filename
2018-12-17T22:41:47.1033918Z 41 PC: 12f50 | Parse filename
2018-12-17T22:41:47.104901346Z 75 PC: 12f5b | Execute program
2018-12-17T22:41:47.120656266Z 53 PC: 19562 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:47.123140041Z 53 PC: 19562 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:47.124522588Z 53 PC: 19562 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:47.125917287Z 53 PC: 19562 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:47.12803776Z 53 PC: 19562 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:47.129384269Z 53 PC: 19562 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:47.130708646Z 53 PC: 19562 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:47.13299473Z 53 PC: 19562 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:47.134344455Z 53 PC: 19562 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:47.135661108Z 53 PC: 19562 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:47.137199728Z 53 PC: 19562 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:47.139700996Z 53 PC: 19562 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:47.141298136Z 53 PC: 19562 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:47.142674341Z 53 PC: 19562 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:47.144893238Z 53 PC: 19562 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:47.146596547Z 53 PC: 19562 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:47.148255022Z 53 PC: 19562 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:47.150781367Z 53 PC: 19562 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:47.152228104Z 53 PC: 19562 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:47.153786631Z 37 PC: 19577 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:47.155985872Z 37 PC: 1957f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:47.157549599Z 37 PC: 19587 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:47.159064645Z 37 PC: 1958f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:47.162095357Z 68 PC: 198ff | I/O control for devices (Set for = '')
2018-12-17T22:41:47.164175113Z 25 PC: 19469 | Get default drive
2018-12-17T22:41:47.165618344Z 71 PC: 19488 | Get current directory
2018-12-17T22:41:47.17004641Z 48 PC: 19ee8 | Get DOS version
2018-12-17T22:41:47.172092273Z 61 PC: 19d34 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:47.179340367Z 63 PC: 19e07 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:47.187297852Z 62 PC: 19d84 | Close file
2018-12-17T22:41:47.19156156Z 44 PC: 19cb5 | Get time 0x19cb5: mov word ptr [0x3e], cx
0x19cb9: mov word ptr [0x40], dx
0x19cbd: retf
0x19cbe: mov bx, sp
0x19cc0: push ds
0x19cc1: les di, ptr ss:[bx + 8]
0x19cc5: lds si, ptr ss:[bx + 4]
0x19cc9: cld
0x19cca: xor ax, ax
0x19ccc: stosw word ptr es:[di], ax
0x19ccd: mov ax, 0xd7b0
0x19cd0: stosw word ptr es:[di], ax
0x19cd1: xor ax, ax
0x19cd3: mov cx, 0x16
0x19cd6: rep stosd dword ptr es:[di], eax
0x19cd8: lodsb al, byte ptr [si]
0x19cd9: cmp al, 0x4f
0x19cdb: jbe 0x19cdf
0x19cdd: mov al, 0x4f
0x19cdf: mov cl, al
2018-12-17T22:41:47.194657265Z 26 PC: 1934b | Set disk transfer address
2018-12-17T22:41:47.196105274Z 78 PC: 19357 | Find first file
2018-12-17T22:41:47.204088378Z 26 PC: 1934b | Set disk transfer address
2018-12-17T22:41:47.205470073Z 78 PC: 19357 | Find first file
2018-12-17T22:41:47.212717546Z 26 PC: 1936f | Set disk transfer address
2018-12-17T22:41:47.215170252Z 79 PC: 19374 | Find next file
2018-12-17T22:41:47.218505156Z 26 PC: 1934b | Set disk transfer address
2018-12-17T22:41:47.219918811Z 78 PC: 19357 | Find first file
2018-12-17T22:41:47.226901916Z 48 PC: 19ee8 | Get DOS version
2018-12-17T22:41:47.228497273Z 48 PC: 19ee8 | Get DOS version
2018-12-17T22:41:47.230533778Z 41 PC: 19402 | Parse filename
2018-12-17T22:41:47.23318637Z 41 PC: 19410 | Parse filename
2018-12-17T22:41:47.23504459Z 75 PC: 1941b | Execute program
2018-12-17T22:41:47.25192254Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:47.253946061Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:47.255587414Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:47.256996841Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:47.258310518Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:47.259769178Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:47.260817496Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:47.262164206Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:47.264149234Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:47.265314533Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:47.26644178Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:47.268123258Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:47.269207394Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:47.270305957Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:47.271845038Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:47.272973758Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:47.274123648Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:47.275846945Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:47.27696806Z 53 PC: 1fa22 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:47.278119533Z 37 PC: 1fa37 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:47.279715921Z 37 PC: 1fa3f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:47.280831928Z 37 PC: 1fa47 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:47.281904021Z 37 PC: 1fa4f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:47.283930668Z 68 PC: 1fdbf | I/O control for devices (Set for = '')
2018-12-17T22:41:47.285428Z 25 PC: 1f929 | Get default drive
2018-12-17T22:41:47.286508239Z 71 PC: 1f948 | Get current directory
2018-12-17T22:41:47.289207498Z 48 PC: 203a8 | Get DOS version
2018-12-17T22:41:47.290891151Z 61 PC: 201f4 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:47.29680606Z 63 PC: 202c7 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:47.303830193Z 62 PC: 20244 | Close file
2018-12-17T22:41:47.306193702Z 44 PC: 20175 | Get time 0x20175: mov word ptr [0x3e], cx
0x20179: mov word ptr [0x40], dx
0x2017d: retf
0x2017e: mov bx, sp
0x20180: push ds
0x20181: les di, ptr ss:[bx + 8]
0x20185: lds si, ptr ss:[bx + 4]
0x20189: cld
0x2018a: xor ax, ax
0x2018c: stosw word ptr es:[di], ax
0x2018d: mov ax, 0xd7b0
0x20190: stosw word ptr es:[di], ax
0x20191: xor ax, ax
0x20193: mov cx, 0x16
0x20196: rep stosd dword ptr es:[di], eax
0x20198: lodsb al, byte ptr [si]
0x20199: cmp al, 0x4f
0x2019b: jbe 0x2019f
0x2019d: mov al, 0x4f
0x2019f: mov cl, al
2018-12-17T22:41:47.309148852Z 26 PC: 1f80b | Set disk transfer address
2018-12-17T22:41:47.310302169Z 78 PC: 1f817 | Find first file
2018-12-17T22:41:47.317887115Z 26 PC: 1f80b | Set disk transfer address
2018-12-17T22:41:47.319371934Z 78 PC: 1f817 | Find first file
2018-12-17T22:41:47.325421876Z 26 PC: 1f82f | Set disk transfer address
2018-12-17T22:41:47.32762257Z 79 PC: 1f834 | Find next file
2018-12-17T22:41:47.330815587Z 26 PC: 1f80b | Set disk transfer address
2018-12-17T22:41:47.33226577Z 78 PC: 1f817 | Find first file
2018-12-17T22:41:47.339534302Z 48 PC: 203a8 | Get DOS version
2018-12-17T22:41:47.341681876Z 48 PC: 203a8 | Get DOS version
2018-12-17T22:41:47.344432121Z 41 PC: 1f8c2 | Parse filename
2018-12-17T22:41:47.347041021Z 41 PC: 1f8d0 | Parse filename
2018-12-17T22:41:47.348853084Z 75 PC: 1f8db | Execute program
2018-12-17T22:41:47.365025761Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:47.367722185Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:47.369077991Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:47.370371801Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:47.372665179Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:47.374224888Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:47.375798844Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:47.377570942Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:47.379401641Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:47.380653552Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:47.381977128Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:47.384844904Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:47.386373535Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:47.387745352Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:47.389601288Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:47.390894477Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:47.392162058Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:47.394113243Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:47.39585274Z 53 PC: 25ee2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:47.397499101Z 37 PC: 25ef7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:47.400172092Z 37 PC: 25eff | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:47.401437409Z 37 PC: 25f07 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:47.402739314Z 37 PC: 25f0f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:47.405249999Z 68 PC: 2627f | I/O control for devices (Set for = '')
2018-12-17T22:41:47.407544599Z 25 PC: 25de9 | Get default drive
2018-12-17T22:41:47.409055056Z 71 PC: 25e08 | Get current directory
2018-12-17T22:41:47.413471601Z 48 PC: 26868 | Get DOS version
2018-12-17T22:41:47.415010311Z 61 PC: 266b4 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:47.426735173Z 63 PC: 26787 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:47.435985377Z 62 PC: 26704 | Close file
2018-12-17T22:41:47.438229982Z 44 PC: 26635 | Get time 0x26635: mov word ptr [0x3e], cx
0x26639: mov word ptr [0x40], dx
0x2663d: retf
0x2663e: mov bx, sp
0x26640: push ds
0x26641: les di, ptr ss:[bx + 8]
0x26645: lds si, ptr ss:[bx + 4]
0x26649: cld
0x2664a: xor ax, ax
0x2664c: stosw word ptr es:[di], ax
0x2664d: mov ax, 0xd7b0
0x26650: stosw word ptr es:[di], ax
0x26651: xor ax, ax
0x26653: mov cx, 0x16
0x26656: rep stosd dword ptr es:[di], eax
0x26658: lodsb al, byte ptr [si]
0x26659: cmp al, 0x4f
0x2665b: jbe 0x2665f
0x2665d: mov al, 0x4f
0x2665f: mov cl, al
2018-12-17T22:41:47.441848578Z 26 PC: 25ccb | Set disk transfer address
2018-12-17T22:41:47.444152546Z 78 PC: 25cd7 | Find first file
2018-12-17T22:41:47.451712144Z 26 PC: 25ccb | Set disk transfer address
2018-12-17T22:41:47.453214065Z 78 PC: 25cd7 | Find first file
2018-12-17T22:41:47.460575121Z 26 PC: 25cef | Set disk transfer address
2018-12-17T22:41:47.462083173Z 79 PC: 25cf4 | Find next file
2018-12-17T22:41:47.465862833Z 26 PC: 25ccb | Set disk transfer address
2018-12-17T22:41:47.467893657Z 78 PC: 25cd7 | Find first file
2018-12-17T22:41:47.47456666Z 48 PC: 26868 | Get DOS version
2018-12-17T22:41:47.475921013Z 48 PC: 26868 | Get DOS version
2018-12-17T22:41:47.478532368Z 41 PC: 25d82 | Parse filename
2018-12-17T22:41:47.480151239Z 41 PC: 25d90 | Parse filename
2018-12-17T22:41:47.481701561Z 75 PC: 25d9b | Execute program
2018-12-17T22:41:47.497587808Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:47.499509187Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:47.50080439Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:47.502991668Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:47.504534786Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:47.506052847Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:47.508957543Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:47.510443113Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:47.511918544Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:47.514324312Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:47.515710386Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:47.516993977Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:47.518680875Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:47.520457441Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:47.521885994Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:47.523515505Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:47.526090622Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:47.52770812Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:47.529308786Z 53 PC: 2c3a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:47.531872982Z 37 PC: 2c3b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:47.533409939Z 37 PC: 2c3bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:47.534941726Z 37 PC: 2c3c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:47.537418598Z 37 PC: 2c3cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:47.539406792Z 68 PC: 2c73f | I/O control for devices (Set for = '')
2018-12-17T22:41:47.541461872Z 25 PC: 2c2a9 | Get default drive
2018-12-17T22:41:47.543958481Z 71 PC: 2c2c8 | Get current directory
2018-12-17T22:41:47.547804845Z 48 PC: 2cd28 | Get DOS version
2018-12-17T22:41:47.54975086Z 61 PC: 2cb74 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:47.558293866Z 63 PC: 2cc47 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:47.56602189Z 62 PC: 2cbc4 | Close file
2018-12-17T22:41:47.568147182Z 44 PC: 2caf5 | Get time 0x2caf5: mov word ptr [0x3e], cx
0x2caf9: mov word ptr [0x40], dx
0x2cafd: retf
0x2cafe: mov bx, sp
0x2cb00: push ds
0x2cb01: les di, ptr ss:[bx + 8]
0x2cb05: lds si, ptr ss:[bx + 4]
0x2cb09: cld
0x2cb0a: xor ax, ax
0x2cb0c: stosw word ptr es:[di], ax
0x2cb0d: mov ax, 0xd7b0
0x2cb10: stosw word ptr es:[di], ax
0x2cb11: xor ax, ax
0x2cb13: mov cx, 0x16
0x2cb16: rep stosd dword ptr es:[di], eax
0x2cb18: lodsb al, byte ptr [si]
0x2cb19: cmp al, 0x4f
0x2cb1b: jbe 0x2cb1f
0x2cb1d: mov al, 0x4f
0x2cb1f: mov cl, al
2018-12-17T22:41:47.572002263Z 26 PC: 2c18b | Set disk transfer address
2018-12-17T22:41:47.573370714Z 78 PC: 2c197 | Find first file
2018-12-17T22:41:47.579800219Z 26 PC: 2c18b | Set disk transfer address
2018-12-17T22:41:47.581745643Z 78 PC: 2c197 | Find first file
2018-12-17T22:41:47.586592476Z 26 PC: 2c1af | Set disk transfer address
2018-12-17T22:41:47.587806987Z 79 PC: 2c1b4 | Find next file
2018-12-17T22:41:47.591009262Z 26 PC: 2c18b | Set disk transfer address
2018-12-17T22:41:47.592569793Z 78 PC: 2c197 | Find first file
2018-12-17T22:41:47.597736367Z 48 PC: 2cd28 | Get DOS version
2018-12-17T22:41:47.599711697Z 48 PC: 2cd28 | Get DOS version
2018-12-17T22:41:47.601564747Z 41 PC: 2c242 | Parse filename
2018-12-17T22:41:47.602836806Z 41 PC: 2c250 | Parse filename
2018-12-17T22:41:47.604676041Z 75 PC: 2c25b | Execute program
2018-12-17T22:41:47.615682082Z 53 PC: 32862 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:47.617075941Z 53 PC: 32862 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:47.618937517Z 53 PC: 32862 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:47.620132732Z 53 PC: 32862 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:47.621294303Z 53 PC: 32862 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:47.623252992Z 53 PC: 32862 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:47.624438599Z 53 PC: 32862 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:47.625555367Z 53 PC: 32862 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:47.627295104Z 53 PC: 32862 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:47.62845896Z 53 PC: 32862 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:47.62961968Z 53 PC: 32862 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:47.631860949Z 53 PC: 32862 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:47.632965925Z 53 PC: 32862 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:47.634134299Z 53 PC: 32862 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:47.635952233Z 53 PC: 32862 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:47.637076625Z 53 PC: 32862 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:47.638222748Z 53 PC: 32862 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:47.640142113Z 53 PC: 32862 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:47.641676906Z 53 PC: 32862 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:47.643123783Z 37 PC: 32877 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:47.645591909Z 37 PC: 3287f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:47.64661461Z 37 PC: 32887 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:47.647521894Z 37 PC: 3288f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:47.649264837Z 68 PC: 32bff | I/O control for devices (Set for = '')
2018-12-17T22:41:47.650607139Z 25 PC: 32769 | Get default drive
2018-12-17T22:41:47.651382986Z 71 PC: 32788 | Get current directory
2018-12-17T22:41:47.654196721Z 48 PC: 331e8 | Get DOS version
2018-12-17T22:41:47.655357771Z 61 PC: 33034 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:47.660413707Z 63 PC: 33107 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:47.666553218Z 62 PC: 33084 | Close file
2018-12-17T22:41:47.667974638Z 44 PC: 32fb5 | Get time 0x32fb5: mov word ptr [0x3e], cx
0x32fb9: mov word ptr [0x40], dx
0x32fbd: retf
0x32fbe: mov bx, sp
0x32fc0: push ds
0x32fc1: les di, ptr ss:[bx + 8]
0x32fc5: lds si, ptr ss:[bx + 4]
0x32fc9: cld
0x32fca: xor ax, ax
0x32fcc: stosw word ptr es:[di], ax
0x32fcd: mov ax, 0xd7b0
0x32fd0: stosw word ptr es:[di], ax
0x32fd1: xor ax, ax
0x32fd3: mov cx, 0x16
0x32fd6: rep stosd dword ptr es:[di], eax
0x32fd8: lodsb al, byte ptr [si]
0x32fd9: cmp al, 0x4f
0x32fdb: jbe 0x32fdf
0x32fdd: mov al, 0x4f
0x32fdf: mov cl, al
2018-12-17T22:41:47.670151397Z 26 PC: 3264b | Set disk transfer address
2018-12-17T22:41:47.671935878Z 78 PC: 32657 | Find first file
2018-12-17T22:41:47.679479617Z 26 PC: 3264b | Set disk transfer address
2018-12-17T22:41:47.680615611Z 78 PC: 32657 | Find first file
2018-12-17T22:41:47.688013034Z 26 PC: 3266f | Set disk transfer address
2018-12-17T22:41:47.689178624Z 79 PC: 32674 | Find next file
2018-12-17T22:41:47.692152479Z 26 PC: 3264b | Set disk transfer address
2018-12-17T22:41:47.694076152Z 78 PC: 32657 | Find first file
2018-12-17T22:41:47.700472946Z 48 PC: 331e8 | Get DOS version
2018-12-17T22:41:47.702078532Z 48 PC: 331e8 | Get DOS version
2018-12-17T22:41:47.704703502Z 41 PC: 32702 | Parse filename
2018-12-17T22:41:47.70643282Z 41 PC: 32710 | Parse filename
2018-12-17T22:41:47.708019049Z 75 PC: 3271b | Execute program
2018-12-17T22:41:47.724132494Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:47.725367504Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:47.72660068Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:47.72830463Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:47.729898032Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:47.731413759Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:47.733621877Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:47.734770534Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:47.73591298Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:47.737141968Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:47.738451848Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:47.740110724Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:47.741787123Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:47.742955527Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:47.744319318Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:47.745866324Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:47.747652148Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:47.748991273Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:47.750702508Z 53 PC: 38d22 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:47.751867686Z 37 PC: 38d37 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:47.75314233Z 37 PC: 38d3f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:47.754882438Z 37 PC: 38d47 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:47.755967707Z 37 PC: 38d4f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:47.758454146Z 68 PC: 390bf | I/O control for devices (Set for = '')
2018-12-17T22:41:47.760830089Z 25 PC: 38c29 | Get default drive
2018-12-17T22:41:47.761915839Z 71 PC: 38c48 | Get current directory
2018-12-17T22:41:47.765221557Z 48 PC: 396a8 | Get DOS version
2018-12-17T22:41:47.766916741Z 61 PC: 394f4 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:47.774600603Z 63 PC: 395c7 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:47.78256995Z 62 PC: 39544 | Close file
2018-12-17T22:41:47.784645759Z 44 PC: 39475 | Get time 0x39475: mov word ptr [0x3e], cx
0x39479: mov word ptr [0x40], dx
0x3947d: retf
0x3947e: mov bx, sp
0x39480: push ds
0x39481: les di, ptr ss:[bx + 8]
0x39485: lds si, ptr ss:[bx + 4]
0x39489: cld
0x3948a: xor ax, ax
0x3948c: stosw word ptr es:[di], ax
0x3948d: mov ax, 0xd7b0
0x39490: stosw word ptr es:[di], ax
0x39491: xor ax, ax
0x39493: mov cx, 0x16
0x39496: rep stosd dword ptr es:[di], eax
0x39498: lodsb al, byte ptr [si]
0x39499: cmp al, 0x4f
0x3949b: jbe 0x3949f
0x3949d: mov al, 0x4f
0x3949f: mov cl, al
2018-12-17T22:41:47.787411685Z 26 PC: 38b0b | Set disk transfer address
2018-12-17T22:41:47.788994277Z 78 PC: 38b17 | Find first file
2018-12-17T22:41:47.796052183Z 26 PC: 38b0b | Set disk transfer address
2018-12-17T22:41:47.797121111Z 78 PC: 38b17 | Find first file
2018-12-17T22:41:47.804152277Z 26 PC: 38b2f | Set disk transfer address
2018-12-17T22:41:47.805880823Z 79 PC: 38b34 | Find next file
2018-12-17T22:41:47.808832948Z 26 PC: 38b0b | Set disk transfer address
2018-12-17T22:41:47.811049861Z 78 PC: 38b17 | Find first file
2018-12-17T22:41:47.817898094Z 48 PC: 396a8 | Get DOS version
2018-12-17T22:41:47.819413159Z 48 PC: 396a8 | Get DOS version
2018-12-17T22:41:47.822168124Z 41 PC: 38bc2 | Parse filename
2018-12-17T22:41:47.823828783Z 41 PC: 38bd0 | Parse filename
2018-12-17T22:41:47.825423549Z 75 PC: 38bdb | Execute program
2018-12-17T22:41:47.841901708Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:47.843132349Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:47.844402104Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:47.84723243Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:47.848644231Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:47.850201105Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:47.852474986Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:47.853919689Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:47.855215694Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:47.85780133Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:47.859146787Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:47.860497174Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:47.862548887Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:47.863879787Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:47.865208202Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:47.867212176Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:47.868552754Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:47.86990332Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:47.871780656Z 53 PC: 3f1e2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:47.873184813Z 37 PC: 3f1f7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:47.874652871Z 37 PC: 3f1ff | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:47.876672053Z 37 PC: 3f207 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:47.878255307Z 37 PC: 3f20f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:47.880289217Z 68 PC: 3f57f | I/O control for devices (Set for = '')
2018-12-17T22:41:47.882941508Z 25 PC: 3f0e9 | Get default drive
2018-12-17T22:41:47.884008202Z 71 PC: 3f108 | Get current directory
2018-12-17T22:41:47.887419278Z 48 PC: 3fb68 | Get DOS version
2018-12-17T22:41:47.900349654Z 61 PC: 3f9b4 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:47.906797234Z 63 PC: 3fa87 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:47.915059432Z 62 PC: 3fa04 | Close file
2018-12-17T22:41:47.916784171Z 44 PC: 3f935 | Get time 0x3f935: mov word ptr [0x3e], cx
0x3f939: mov word ptr [0x40], dx
0x3f93d: retf
0x3f93e: mov bx, sp
0x3f940: push ds
0x3f941: les di, ptr ss:[bx + 8]
0x3f945: lds si, ptr ss:[bx + 4]
0x3f949: cld
0x3f94a: xor ax, ax
0x3f94c: stosw word ptr es:[di], ax
0x3f94d: mov ax, 0xd7b0
0x3f950: stosw word ptr es:[di], ax
0x3f951: xor ax, ax
0x3f953: mov cx, 0x16
0x3f956: rep stosd dword ptr es:[di], eax
0x3f958: lodsb al, byte ptr [si]
0x3f959: cmp al, 0x4f
0x3f95b: jbe 0x3f95f
0x3f95d: mov al, 0x4f
0x3f95f: mov cl, al
2018-12-17T22:41:47.919202884Z 26 PC: 3efcb | Set disk transfer address
2018-12-17T22:41:47.921179808Z 78 PC: 3efd7 | Find first file
2018-12-17T22:41:47.928525043Z 26 PC: 3efcb | Set disk transfer address
2018-12-17T22:41:47.929575586Z 78 PC: 3efd7 | Find first file
2018-12-17T22:41:47.936183578Z 26 PC: 3efef | Set disk transfer address
2018-12-17T22:41:47.93721255Z 79 PC: 3eff4 | Find next file
2018-12-17T22:41:47.939983384Z 26 PC: 3efcb | Set disk transfer address
2018-12-17T22:41:47.941601844Z 78 PC: 3efd7 | Find first file
2018-12-17T22:41:47.960145272Z 48 PC: 3fb68 | Get DOS version
2018-12-17T22:41:47.961686547Z 48 PC: 3fb68 | Get DOS version
2018-12-17T22:41:47.964658349Z 41 PC: 3f082 | Parse filename
2018-12-17T22:41:47.966532148Z 41 PC: 3f090 | Parse filename
2018-12-17T22:41:47.968392763Z 75 PC: 3f09b | Execute program
2018-12-17T22:41:47.984775593Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:47.986677004Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:47.988281377Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:47.990776443Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:47.992194627Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:47.994279303Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:47.996536312Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:47.998088557Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:47.999625935Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:48.001720709Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:48.003147509Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:48.00449493Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:48.006889307Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:48.008213825Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:48.009646475Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:48.012414925Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:48.013776082Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:48.015300715Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.018812591Z 53 PC: 456a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:48.020193615Z 37 PC: 456b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.022128639Z 37 PC: 456bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.023708266Z 37 PC: 456c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.024826837Z 37 PC: 456cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.027725802Z 68 PC: 45a3f | I/O control for devices (Set for = '')
2018-12-17T22:41:48.029521735Z 25 PC: 455a9 | Get default drive
2018-12-17T22:41:48.03080763Z 71 PC: 455c8 | Get current directory
2018-12-17T22:41:48.034427248Z 48 PC: 46028 | Get DOS version
2018-12-17T22:41:48.035916375Z 61 PC: 45e74 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:48.042862061Z 63 PC: 45f47 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:48.051240237Z 62 PC: 45ec4 | Close file
2018-12-17T22:41:48.053067028Z 44 PC: 45df5 | Get time 0x45df5: mov word ptr [0x3e], cx
0x45df9: mov word ptr [0x40], dx
0x45dfd: retf
0x45dfe: mov bx, sp
0x45e00: push ds
0x45e01: les di, ptr ss:[bx + 8]
0x45e05: lds si, ptr ss:[bx + 4]
0x45e09: cld
0x45e0a: xor ax, ax
0x45e0c: stosw word ptr es:[di], ax
0x45e0d: mov ax, 0xd7b0
0x45e10: stosw word ptr es:[di], ax
0x45e11: xor ax, ax
0x45e13: mov cx, 0x16
0x45e16: rep stosd dword ptr es:[di], eax
0x45e18: lodsb al, byte ptr [si]
0x45e19: cmp al, 0x4f
0x45e1b: jbe 0x45e1f
0x45e1d: mov al, 0x4f
0x45e1f: mov cl, al
2018-12-17T22:41:48.055690675Z 26 PC: 4548b | Set disk transfer address
2018-12-17T22:41:48.058053754Z 78 PC: 45497 | Find first file
2018-12-17T22:41:48.065082555Z 26 PC: 4548b | Set disk transfer address
2018-12-17T22:41:48.066523983Z 78 PC: 45497 | Find first file
2018-12-17T22:41:48.073172239Z 26 PC: 454af | Set disk transfer address
2018-12-17T22:41:48.074364759Z 79 PC: 454b4 | Find next file
2018-12-17T22:41:48.07757571Z 26 PC: 4548b | Set disk transfer address
2018-12-17T22:41:48.095441345Z 78 PC: 45497 | Find first file
2018-12-17T22:41:48.101723895Z 48 PC: 46028 | Get DOS version
2018-12-17T22:41:48.103915902Z 48 PC: 46028 | Get DOS version
2018-12-17T22:41:48.105665307Z 41 PC: 45542 | Parse filename
2018-12-17T22:41:48.107125109Z 41 PC: 45550 | Parse filename
2018-12-17T22:41:48.109086563Z 75 PC: 4555b | Execute program
2018-12-17T22:41:48.12400344Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.125128563Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:48.126945817Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:48.128455783Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:48.129463656Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.131640634Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.132761199Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:48.133939302Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:48.135499903Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:48.136638622Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:48.137963019Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:48.139581118Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:48.14071095Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:48.142416734Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:48.143588074Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:48.14474119Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:48.146805708Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:48.14799402Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.149179687Z 53 PC: 4bb62 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:48.150730249Z 37 PC: 4bb77 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.151851665Z 37 PC: 4bb7f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.153167436Z 37 PC: 4bb87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.155350146Z 37 PC: 4bb8f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.15686968Z 68 PC: 4beff | I/O control for devices (Set for = '')
2018-12-17T22:41:48.159623332Z 25 PC: 4ba69 | Get default drive
2018-12-17T22:41:48.161003474Z 71 PC: 4ba88 | Get current directory
2018-12-17T22:41:48.164369897Z 48 PC: 4c4e8 | Get DOS version
2018-12-17T22:41:48.167119391Z 61 PC: 4c334 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:48.174327619Z 63 PC: 4c407 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:48.181976896Z 62 PC: 4c384 | Close file
2018-12-17T22:41:48.184451694Z 44 PC: 4c2b5 | Get time 0x4c2b5: mov word ptr [0x3e], cx
0x4c2b9: mov word ptr [0x40], dx
0x4c2bd: retf
0x4c2be: mov bx, sp
0x4c2c0: push ds
0x4c2c1: les di, ptr ss:[bx + 8]
0x4c2c5: lds si, ptr ss:[bx + 4]
0x4c2c9: cld
0x4c2ca: xor ax, ax
0x4c2cc: stosw word ptr es:[di], ax
0x4c2cd: mov ax, 0xd7b0
0x4c2d0: stosw word ptr es:[di], ax
0x4c2d1: xor ax, ax
0x4c2d3: mov cx, 0x16
0x4c2d6: rep stosd dword ptr es:[di], eax
0x4c2d8: lodsb al, byte ptr [si]
0x4c2d9: cmp al, 0x4f
0x4c2db: jbe 0x4c2df
0x4c2dd: mov al, 0x4f
0x4c2df: mov cl, al
2018-12-17T22:41:48.187399451Z 26 PC: 4b94b | Set disk transfer address
2018-12-17T22:41:48.188690335Z 78 PC: 4b957 | Find first file
2018-12-17T22:41:48.197011965Z 26 PC: 4b94b | Set disk transfer address
2018-12-17T22:41:48.202863405Z 78 PC: 4b957 | Find first file
2018-12-17T22:41:48.209475814Z 26 PC: 4b96f | Set disk transfer address
2018-12-17T22:41:48.21195981Z 79 PC: 4b974 | Find next file
2018-12-17T22:41:48.21496313Z 26 PC: 4b94b | Set disk transfer address
2018-12-17T22:41:48.21634211Z 78 PC: 4b957 | Find first file
2018-12-17T22:41:48.223042696Z 48 PC: 4c4e8 | Get DOS version
2018-12-17T22:41:48.224389004Z 48 PC: 4c4e8 | Get DOS version
2018-12-17T22:41:48.227614472Z 41 PC: 4ba02 | Parse filename
2018-12-17T22:41:48.229266265Z 41 PC: 4ba10 | Parse filename
2018-12-17T22:41:48.230691832Z 75 PC: 4ba1b | Execute program
2018-12-17T22:41:48.246539076Z 53 PC: 52022 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.248087024Z 53 PC: 52022 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:48.249268673Z 53 PC: 52022 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:48.251392181Z 53 PC: 52022 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:48.252633353Z 53 PC: 52022 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.254029014Z 53 PC: 52022 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.256866683Z 53 PC: 52022 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:48.258703413Z 53 PC: 52022 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:48.260095508Z 53 PC: 52022 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:48.262767216Z 53 PC: 52022 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:48.264049124Z 53 PC: 52022 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:48.265310613Z 53 PC: 52022 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:48.267662941Z 53 PC: 52022 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:48.269125799Z 53 PC: 52022 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:48.270485843Z 53 PC: 52022 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:48.272479087Z 53 PC: 52022 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:48.274485465Z 53 PC: 52022 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:48.27674554Z 53 PC: 52022 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.278728895Z 53 PC: 52022 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:48.280149163Z 37 PC: 52037 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.281982116Z 37 PC: 5203f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.283410779Z 37 PC: 52047 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.284728303Z 37 PC: 5204f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.28754864Z 68 PC: 523bf | I/O control for devices (Set for = '')
2018-12-17T22:41:48.289648394Z 25 PC: 51f29 | Get default drive
2018-12-17T22:41:48.291008699Z 71 PC: 51f48 | Get current directory
2018-12-17T22:41:48.295634537Z 48 PC: 529a8 | Get DOS version
2018-12-17T22:41:48.297219113Z 61 PC: 527f4 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:48.304307206Z 63 PC: 528c7 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:48.316008965Z 62 PC: 52844 | Close file
2018-12-17T22:41:48.318677006Z 44 PC: 52775 | Get time 0x52775: mov word ptr [0x3e], cx
0x52779: mov word ptr [0x40], dx
0x5277d: retf
0x5277e: mov bx, sp
0x52780: push ds
0x52781: les di, ptr ss:[bx + 8]
0x52785: lds si, ptr ss:[bx + 4]
0x52789: cld
0x5278a: xor ax, ax
0x5278c: stosw word ptr es:[di], ax
0x5278d: mov ax, 0xd7b0
0x52790: stosw word ptr es:[di], ax
0x52791: xor ax, ax
0x52793: mov cx, 0x16
0x52796: rep stosd dword ptr es:[di], eax
0x52798: lodsb al, byte ptr [si]
0x52799: cmp al, 0x4f
0x5279b: jbe 0x5279f
0x5279d: mov al, 0x4f
0x5279f: mov cl, al
2018-12-17T22:41:48.32201235Z 26 PC: 51e0b | Set disk transfer address
2018-12-17T22:41:48.323169834Z 78 PC: 51e17 | Find first file
2018-12-17T22:41:48.330644352Z 26 PC: 51e0b | Set disk transfer address
2018-12-17T22:41:48.333027188Z 78 PC: 51e17 | Find first file
2018-12-17T22:41:48.339157212Z 26 PC: 51e2f | Set disk transfer address
2018-12-17T22:41:48.34023739Z 79 PC: 51e34 | Find next file
2018-12-17T22:41:48.343755147Z 26 PC: 51e0b | Set disk transfer address
2018-12-17T22:41:48.344832952Z 78 PC: 51e17 | Find first file
2018-12-17T22:41:48.350937828Z 48 PC: 529a8 | Get DOS version
2018-12-17T22:41:48.35297283Z 48 PC: 529a8 | Get DOS version
2018-12-17T22:41:48.354696968Z 41 PC: 51ec2 | Parse filename
2018-12-17T22:41:48.356090255Z 41 PC: 51ed0 | Parse filename
2018-12-17T22:41:48.358117122Z 75 PC: 51edb | Execute program
2018-12-17T22:41:48.373385149Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.375065835Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:48.376246212Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:48.377380252Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:48.379126131Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.38026995Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.381410382Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:48.383112819Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:48.384274661Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:48.385427246Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:48.386834038Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:48.387963119Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:48.39024775Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:48.39137679Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:48.39246271Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:48.394016237Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:48.395149366Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:48.396135017Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.397615899Z 53 PC: 584e2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:48.398790104Z 37 PC: 584f7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.399759725Z 37 PC: 584ff | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.401046642Z 37 PC: 58507 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.402143161Z 37 PC: 5850f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.404023874Z 68 PC: 5887f | I/O control for devices (Set for = '')
2018-12-17T22:41:48.405737142Z 25 PC: 583e9 | Get default drive
2018-12-17T22:41:48.406833892Z 71 PC: 58408 | Get current directory
2018-12-17T22:41:48.410512491Z 48 PC: 58e68 | Get DOS version
2018-12-17T22:41:48.41189102Z 61 PC: 58cb4 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:48.418900716Z 63 PC: 58d87 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:48.428517878Z 62 PC: 58d04 | Close file
2018-12-17T22:41:48.430712701Z 44 PC: 58c35 | Get time 0x58c35: mov word ptr [0x3e], cx
0x58c39: mov word ptr [0x40], dx
0x58c3d: retf
0x58c3e: mov bx, sp
0x58c40: push ds
0x58c41: les di, ptr ss:[bx + 8]
0x58c45: lds si, ptr ss:[bx + 4]
0x58c49: cld
0x58c4a: xor ax, ax
0x58c4c: stosw word ptr es:[di], ax
0x58c4d: mov ax, 0xd7b0
0x58c50: stosw word ptr es:[di], ax
0x58c51: xor ax, ax
0x58c53: mov cx, 0x16
0x58c56: rep stosd dword ptr es:[di], eax
0x58c58: lodsb al, byte ptr [si]
0x58c59: cmp al, 0x4f
0x58c5b: jbe 0x58c5f
0x58c5d: mov al, 0x4f
0x58c5f: mov cl, al
2018-12-17T22:41:48.433700412Z 26 PC: 582cb | Set disk transfer address
2018-12-17T22:41:48.43606304Z 78 PC: 582d7 | Find first file
2018-12-17T22:41:48.443271088Z 26 PC: 582cb | Set disk transfer address
2018-12-17T22:41:48.444664225Z 78 PC: 582d7 | Find first file
2018-12-17T22:41:48.45146087Z 26 PC: 582ef | Set disk transfer address
2018-12-17T22:41:48.452563722Z 79 PC: 582f4 | Find next file
2018-12-17T22:41:48.466481431Z 26 PC: 582cb | Set disk transfer address
2018-12-17T22:41:48.468889605Z 78 PC: 582d7 | Find first file
2018-12-17T22:41:48.475102794Z 48 PC: 58e68 | Get DOS version
2018-12-17T22:41:48.477075339Z 48 PC: 58e68 | Get DOS version
2018-12-17T22:41:48.478846295Z 41 PC: 58382 | Parse filename
2018-12-17T22:41:48.480386298Z 41 PC: 58390 | Parse filename
2018-12-17T22:41:48.482537779Z 75 PC: 5839b | Execute program
2018-12-17T22:41:48.498072496Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.499732624Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:48.501598899Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:48.502863955Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:48.504656963Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.505865853Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.50708848Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:48.509022101Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:48.510232715Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:48.511278349Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:48.512936113Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:48.514108635Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:48.515244048Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:48.517282967Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:48.518456381Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:48.519857953Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:48.521134922Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:48.522335707Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.524079172Z 53 PC: 5e9a2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:48.525242096Z 37 PC: 5e9b7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.526440407Z 37 PC: 5e9bf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.527612047Z 37 PC: 5e9c7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.528627284Z 37 PC: 5e9cf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.530924729Z 68 PC: 5ed3f | I/O control for devices (Set for = '')
2018-12-17T22:41:48.53383211Z 25 PC: 5e8a9 | Get default drive
2018-12-17T22:41:48.534972421Z 71 PC: 5e8c8 | Get current directory
2018-12-17T22:41:48.539943408Z 48 PC: 5f328 | Get DOS version
2018-12-17T22:41:48.541310556Z 61 PC: 5f174 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:48.548742534Z 63 PC: 5f247 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:48.560882075Z 62 PC: 5f1c4 | Close file
2018-12-17T22:41:48.563199828Z 44 PC: 5f0f5 | Get time 0x5f0f5: mov word ptr [0x3e], cx
0x5f0f9: mov word ptr [0x40], dx
0x5f0fd: retf
0x5f0fe: mov bx, sp
0x5f100: push ds
0x5f101: les di, ptr ss:[bx + 8]
0x5f105: lds si, ptr ss:[bx + 4]
0x5f109: cld
0x5f10a: xor ax, ax
0x5f10c: stosw word ptr es:[di], ax
0x5f10d: mov ax, 0xd7b0
0x5f110: stosw word ptr es:[di], ax
0x5f111: xor ax, ax
0x5f113: mov cx, 0x16
0x5f116: rep stosd dword ptr es:[di], eax
0x5f118: lodsb al, byte ptr [si]
0x5f119: cmp al, 0x4f
0x5f11b: jbe 0x5f11f
0x5f11d: mov al, 0x4f
0x5f11f: mov cl, al
2018-12-17T22:41:48.566456835Z 26 PC: 5e78b | Set disk transfer address
2018-12-17T22:41:48.56801408Z 78 PC: 5e797 | Find first file
2018-12-17T22:41:48.575217629Z 26 PC: 5e78b | Set disk transfer address
2018-12-17T22:41:48.577972153Z 78 PC: 5e797 | Find first file
2018-12-17T22:41:48.584413471Z 26 PC: 5e7af | Set disk transfer address
2018-12-17T22:41:48.585590492Z 79 PC: 5e7b4 | Find next file
2018-12-17T22:41:48.589738042Z 26 PC: 5e78b | Set disk transfer address
2018-12-17T22:41:48.590921916Z 78 PC: 5e797 | Find first file
2018-12-17T22:41:48.597780307Z 48 PC: 5f328 | Get DOS version
2018-12-17T22:41:48.599897603Z 48 PC: 5f328 | Get DOS version
2018-12-17T22:41:48.601568992Z 41 PC: 5e842 | Parse filename
2018-12-17T22:41:48.603694254Z 41 PC: 5e850 | Parse filename
2018-12-17T22:41:48.604945164Z 75 PC: 5e85b | Execute program
2018-12-17T22:41:48.616124711Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.618209326Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:48.619392799Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:48.62058564Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:48.622644877Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.623799075Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.625832253Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:48.627013923Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:48.628198077Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:48.629996365Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:48.63108012Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:48.632402374Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:48.634569214Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:48.635654883Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:48.636988177Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:48.638954169Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:48.640356413Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:48.642927422Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.644241199Z 53 PC: 64e62 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:48.645164253Z 37 PC: 64e77 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.64696766Z 37 PC: 64e7f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.648105828Z 37 PC: 64e87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.650303005Z 37 PC: 64e8f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.652239021Z 68 PC: 651ff | I/O control for devices (Set for = '')
2018-12-17T22:41:48.653655952Z 25 PC: 64d69 | Get default drive
2018-12-17T22:41:48.655858158Z 71 PC: 64d88 | Get current directory
2018-12-17T22:41:48.658647407Z 48 PC: 657e8 | Get DOS version
2018-12-17T22:41:48.660310601Z 61 PC: 65634 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:48.666237202Z 63 PC: 65707 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:48.672040833Z 62 PC: 65684 | Close file
2018-12-17T22:41:48.674223863Z 44 PC: 655b5 | Get time 0x655b5: mov word ptr [0x3e], cx
0x655b9: mov word ptr [0x40], dx
0x655bd: retf
0x655be: mov bx, sp
0x655c0: push ds
0x655c1: les di, ptr ss:[bx + 8]
0x655c5: lds si, ptr ss:[bx + 4]
0x655c9: cld
0x655ca: xor ax, ax
0x655cc: stosw word ptr es:[di], ax
0x655cd: mov ax, 0xd7b0
0x655d0: stosw word ptr es:[di], ax
0x655d1: xor ax, ax
0x655d3: mov cx, 0x16
0x655d6: rep stosd dword ptr es:[di], eax
0x655d8: lodsb al, byte ptr [si]
0x655d9: cmp al, 0x4f
0x655db: jbe 0x655df
0x655dd: mov al, 0x4f
0x655df: mov cl, al
2018-12-17T22:41:48.676419938Z 26 PC: 64c4b | Set disk transfer address
2018-12-17T22:41:48.677380542Z 78 PC: 64c57 | Find first file
2018-12-17T22:41:48.683638535Z 26 PC: 64c4b | Set disk transfer address
2018-12-17T22:41:48.684789848Z 78 PC: 64c57 | Find first file
2018-12-17T22:41:48.6928788Z 26 PC: 64c6f | Set disk transfer address
2018-12-17T22:41:48.694165387Z 79 PC: 64c74 | Find next file
2018-12-17T22:41:48.698571693Z 26 PC: 64c4b | Set disk transfer address
2018-12-17T22:41:48.700828021Z 78 PC: 64c57 | Find first file
2018-12-17T22:41:48.712673158Z 48 PC: 657e8 | Get DOS version
2018-12-17T22:41:48.714129594Z 48 PC: 657e8 | Get DOS version
2018-12-17T22:41:48.717791401Z 41 PC: 64d02 | Parse filename
2018-12-17T22:41:48.719831453Z 41 PC: 64d10 | Parse filename
2018-12-17T22:41:48.721454361Z 75 PC: 64d1b | Execute program
2018-12-17T22:41:48.737489358Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.738787035Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:48.741083629Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:48.742253085Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:48.743493004Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.74574326Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.747206118Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:48.749881072Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:48.751508118Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:48.752807528Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:48.755008152Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:48.756335094Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:48.757578349Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:48.759696938Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:48.760927229Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:48.762141038Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:48.764346411Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:48.765521277Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.767648773Z 53 PC: 6b322 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:48.768892148Z 37 PC: 6b337 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.77001106Z 37 PC: 6b33f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.772384558Z 37 PC: 6b347 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.7734879Z 37 PC: 6b34f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.77503161Z 68 PC: 6b6bf | I/O control for devices (Set for = '')
2018-12-17T22:41:48.777587851Z 25 PC: 6b229 | Get default drive
2018-12-17T22:41:48.77871598Z 71 PC: 6b248 | Get current directory
2018-12-17T22:41:48.783223025Z 48 PC: 6bca8 | Get DOS version
2018-12-17T22:41:48.784972912Z 61 PC: 6baf4 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:48.791813359Z 63 PC: 6bbc7 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:48.800317882Z 62 PC: 6bb44 | Close file
2018-12-17T22:41:48.80241984Z 44 PC: 6ba75 | Get time 0x6ba75: mov word ptr [0x3e], cx
0x6ba79: mov word ptr [0x40], dx
0x6ba7d: retf
0x6ba7e: mov bx, sp
0x6ba80: push ds
0x6ba81: les di, ptr ss:[bx + 8]
0x6ba85: lds si, ptr ss:[bx + 4]
0x6ba89: cld
0x6ba8a: xor ax, ax
0x6ba8c: stosw word ptr es:[di], ax
0x6ba8d: mov ax, 0xd7b0
0x6ba90: stosw word ptr es:[di], ax
0x6ba91: xor ax, ax
0x6ba93: mov cx, 0x16
0x6ba96: rep stosd dword ptr es:[di], eax
0x6ba98: lodsb al, byte ptr [si]
0x6ba99: cmp al, 0x4f
0x6ba9b: jbe 0x6ba9f
0x6ba9d: mov al, 0x4f
0x6ba9f: mov cl, al
2018-12-17T22:41:48.806055919Z 26 PC: 6b10b | Set disk transfer address
2018-12-17T22:41:48.807221368Z 78 PC: 6b117 | Find first file
2018-12-17T22:41:48.81396779Z 26 PC: 6b10b | Set disk transfer address
2018-12-17T22:41:48.815822393Z 78 PC: 6b117 | Find first file
2018-12-17T22:41:48.82263608Z 26 PC: 6b12f | Set disk transfer address
2018-12-17T22:41:48.823684399Z 79 PC: 6b134 | Find next file
2018-12-17T22:41:48.826753263Z 26 PC: 6b10b | Set disk transfer address
2018-12-17T22:41:48.82802912Z 78 PC: 6b117 | Find first file
2018-12-17T22:41:48.83504178Z 48 PC: 6bca8 | Get DOS version
2018-12-17T22:41:48.836359375Z 48 PC: 6bca8 | Get DOS version
2018-12-17T22:41:48.838117588Z 41 PC: 6b1c2 | Parse filename
2018-12-17T22:41:48.839889455Z 41 PC: 6b1d0 | Parse filename
2018-12-17T22:41:48.841292981Z 75 PC: 6b1db | Execute program
2018-12-17T22:41:48.857623594Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.858907876Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:48.860285654Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:48.863986645Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:48.865137897Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.867059667Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.870367579Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:48.87276372Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:48.875198733Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:48.876314378Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:48.877409555Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:48.882771026Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:48.884075165Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:48.885487979Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:48.887446046Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:48.888541414Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:48.890253639Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:48.892071995Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.896250222Z 53 PC: 717e2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:48.897484701Z 37 PC: 717f7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.898554931Z 37 PC: 717ff | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.900612566Z 37 PC: 71807 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.903047308Z 37 PC: 7180f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.904936126Z 68 PC: 71b7f | I/O control for devices (Set for = '')
2018-12-17T22:41:48.907749901Z 25 PC: 716e9 | Get default drive
2018-12-17T22:41:48.909209132Z 71 PC: 71708 | Get current directory
2018-12-17T22:41:48.913453783Z 48 PC: 72168 | Get DOS version
2018-12-17T22:41:48.915141834Z 61 PC: 71fb4 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:48.922423772Z 63 PC: 72087 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:48.930844147Z 62 PC: 72004 | Close file
2018-12-17T22:41:48.932575528Z 44 PC: 71f35 | Get time 0x71f35: mov word ptr [0x3e], cx
0x71f39: mov word ptr [0x40], dx
0x71f3d: retf
0x71f3e: mov bx, sp
0x71f40: push ds
0x71f41: les di, ptr ss:[bx + 8]
0x71f45: lds si, ptr ss:[bx + 4]
0x71f49: cld
0x71f4a: xor ax, ax
0x71f4c: stosw word ptr es:[di], ax
0x71f4d: mov ax, 0xd7b0
0x71f50: stosw word ptr es:[di], ax
0x71f51: xor ax, ax
0x71f53: mov cx, 0x16
0x71f56: rep stosd dword ptr es:[di], eax
0x71f58: lodsb al, byte ptr [si]
0x71f59: cmp al, 0x4f
0x71f5b: jbe 0x71f5f
0x71f5d: mov al, 0x4f
0x71f5f: mov cl, al
2018-12-17T22:41:48.935685349Z 26 PC: 715cb | Set disk transfer address
2018-12-17T22:41:48.93691056Z 78 PC: 715d7 | Find first file
2018-12-17T22:41:48.943479839Z 26 PC: 715cb | Set disk transfer address
2018-12-17T22:41:48.946830231Z 78 PC: 715d7 | Find first file
2018-12-17T22:41:48.952731856Z 26 PC: 715ef | Set disk transfer address
2018-12-17T22:41:48.954747471Z 79 PC: 715f4 | Find next file
2018-12-17T22:41:48.95836712Z 26 PC: 715cb | Set disk transfer address
2018-12-17T22:41:48.959407233Z 78 PC: 715d7 | Find first file
2018-12-17T22:41:48.966268681Z 48 PC: 72168 | Get DOS version
2018-12-17T22:41:48.96759913Z 48 PC: 72168 | Get DOS version
2018-12-17T22:41:48.969286188Z 41 PC: 71682 | Parse filename
2018-12-17T22:41:48.970786095Z 41 PC: 71690 | Parse filename
2018-12-17T22:41:48.972134959Z 75 PC: 7169b | Execute program
2018-12-17T22:41:48.987967595Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.989319234Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:48.990596012Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:48.992096781Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:48.993307304Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.995544296Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.997038072Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:48.998397315Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.00199391Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.003244619Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.004614291Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.006712121Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.007982067Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.010117107Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.011278107Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.012432525Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.013674127Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.014828065Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.017074845Z 53 PC: 77ca2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.018289827Z 37 PC: 77cb7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.019394722Z 37 PC: 77cbf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.021113299Z 37 PC: 77cc7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.022211041Z 37 PC: 77ccf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.024659079Z 68 PC: 7803f | I/O control for devices (Set for = '')
2018-12-17T22:41:49.026345697Z 25 PC: 77ba9 | Get default drive
2018-12-17T22:41:49.027396791Z 71 PC: 77bc8 | Get current directory
2018-12-17T22:41:49.030648138Z 48 PC: 78628 | Get DOS version
2018-12-17T22:41:49.032167071Z 61 PC: 78474 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:49.040853165Z 63 PC: 78547 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:49.048216605Z 62 PC: 784c4 | Close file
2018-12-17T22:41:49.050015003Z 44 PC: 783f5 | Get time 0x783f5: mov word ptr [0x3e], cx
0x783f9: mov word ptr [0x40], dx
0x783fd: retf
0x783fe: mov bx, sp
0x78400: push ds
0x78401: les di, ptr ss:[bx + 8]
0x78405: lds si, ptr ss:[bx + 4]
0x78409: cld
0x7840a: xor ax, ax
0x7840c: stosw word ptr es:[di], ax
0x7840d: mov ax, 0xd7b0
0x78410: stosw word ptr es:[di], ax
0x78411: xor ax, ax
0x78413: mov cx, 0x16
0x78416: rep stosd dword ptr es:[di], eax
0x78418: lodsb al, byte ptr [si]
0x78419: cmp al, 0x4f
0x7841b: jbe 0x7841f
0x7841d: mov al, 0x4f
0x7841f: mov cl, al
2018-12-17T22:41:49.053661923Z 26 PC: 77a8b | Set disk transfer address
2018-12-17T22:41:49.055064637Z 78 PC: 77a97 | Find first file
2018-12-17T22:41:49.063464393Z 26 PC: 77a8b | Set disk transfer address
2018-12-17T22:41:49.064989838Z 78 PC: 77a97 | Find first file
2018-12-17T22:41:49.071346989Z 26 PC: 77aaf | Set disk transfer address
2018-12-17T22:41:49.073933737Z 79 PC: 77ab4 | Find next file
2018-12-17T22:41:49.077059948Z 26 PC: 77a8b | Set disk transfer address
2018-12-17T22:41:49.07913714Z 78 PC: 77a97 | Find first file
2018-12-17T22:41:49.085663447Z 48 PC: 78628 | Get DOS version
2018-12-17T22:41:49.093653634Z 48 PC: 78628 | Get DOS version
2018-12-17T22:41:49.096730634Z 41 PC: 77b42 | Parse filename
2018-12-17T22:41:49.098378098Z 41 PC: 77b50 | Parse filename
2018-12-17T22:41:49.100133405Z 75 PC: 77b5b | Execute program
2018-12-17T22:41:49.115100937Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.116342609Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.118253308Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.137691185Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.139720116Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.142025887Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.143723195Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.155428801Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.156733271Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.158017563Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.161007318Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.162331225Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.164864513Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.166154365Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.167410595Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.169794743Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.171043979Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.17348881Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.175286006Z 53 PC: 7e162 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.176586629Z 37 PC: 7e177 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.178485155Z 37 PC: 7e17f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.179951048Z 37 PC: 7e187 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.181365885Z 37 PC: 7e18f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.183610291Z 68 PC: 7e4ff | I/O control for devices (Set for = '')
2018-12-17T22:41:49.18543059Z 25 PC: 7e069 | Get default drive
2018-12-17T22:41:49.18717685Z 71 PC: 7e088 | Get current directory
2018-12-17T22:41:49.190342175Z 48 PC: 7eae8 | Get DOS version
2018-12-17T22:41:49.192122819Z 61 PC: 7e934 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:49.199548947Z 63 PC: 7ea07 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:49.2094699Z 62 PC: 7e984 | Close file
2018-12-17T22:41:49.216280301Z 44 PC: 7e8b5 | Get time 0x7e8b5: mov word ptr [0x3e], cx
0x7e8b9: mov word ptr [0x40], dx
0x7e8bd: retf
0x7e8be: mov bx, sp
0x7e8c0: push ds
0x7e8c1: les di, ptr ss:[bx + 8]
0x7e8c5: lds si, ptr ss:[bx + 4]
0x7e8c9: cld
0x7e8ca: xor ax, ax
0x7e8cc: stosw word ptr es:[di], ax
0x7e8cd: mov ax, 0xd7b0
0x7e8d0: stosw word ptr es:[di], ax
0x7e8d1: xor ax, ax
0x7e8d3: mov cx, 0x16
0x7e8d6: rep stosd dword ptr es:[di], eax
0x7e8d8: lodsb al, byte ptr [si]
0x7e8d9: cmp al, 0x4f
0x7e8db: jbe 0x7e8df
0x7e8dd: mov al, 0x4f
0x7e8df: mov cl, al
2018-12-17T22:41:49.219094798Z 26 PC: 7df4b | Set disk transfer address
2018-12-17T22:41:49.220283631Z 78 PC: 7df57 | Find first file
2018-12-17T22:41:49.229182414Z 26 PC: 7df4b | Set disk transfer address
2018-12-17T22:41:49.230445076Z 78 PC: 7df57 | Find first file
2018-12-17T22:41:49.242467036Z 26 PC: 7df6f | Set disk transfer address
2018-12-17T22:41:49.243979987Z 79 PC: 7df74 | Find next file
2018-12-17T22:41:49.246902957Z 26 PC: 7df4b | Set disk transfer address
2018-12-17T22:41:49.248944642Z 78 PC: 7df57 | Find first file
2018-12-17T22:41:49.255320146Z 48 PC: 7eae8 | Get DOS version
2018-12-17T22:41:49.257693023Z 48 PC: 7eae8 | Get DOS version
2018-12-17T22:41:49.259581069Z 41 PC: 7e002 | Parse filename
2018-12-17T22:41:49.261297954Z 41 PC: 7e010 | Parse filename
2018-12-17T22:41:49.26346831Z 75 PC: 7e01b | Execute program
2018-12-17T22:41:49.278204979Z 53 PC: 84622 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.280313849Z 53 PC: 84622 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.281479969Z 53 PC: 84622 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.283093961Z 53 PC: 84622 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.284778445Z 53 PC: 84622 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.286539693Z 53 PC: 84622 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.288632152Z 53 PC: 84622 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.289882761Z 53 PC: 84622 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.291036829Z 53 PC: 84622 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.293171488Z 53 PC: 84622 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.295007477Z 53 PC: 84622 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.297680247Z 53 PC: 84622 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.299479677Z 53 PC: 84622 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.302618452Z 53 PC: 84622 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.303926008Z 53 PC: 84622 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.30542838Z 53 PC: 84622 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.307922504Z 53 PC: 84622 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.309554819Z 53 PC: 84622 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.3122862Z 53 PC: 84622 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.314284463Z 37 PC: 84637 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.315363349Z 37 PC: 8463f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.317832757Z 37 PC: 84647 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.32470811Z 37 PC: 8464f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.326744435Z 68 PC: 849bf | I/O control for devices (Set for = '9')
2018-12-17T22:41:49.328544766Z 25 PC: 84529 | Get default drive
2018-12-17T22:41:49.329693935Z 71 PC: 84548 | Get current directory
2018-12-17T22:41:49.333829261Z 48 PC: 84fa8 | Get DOS version
2018-12-17T22:41:49.335301256Z 61 PC: 84df4 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:49.342928442Z 63 PC: 84ec7 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:49.350782283Z 62 PC: 84e44 | Close file
2018-12-17T22:41:49.352556665Z 44 PC: 84d75 | Get time 0x84d75: mov word ptr [0x3e], cx
0x84d79: mov word ptr [0x40], dx
0x84d7d: retf
0x84d7e: mov bx, sp
0x84d80: push ds
0x84d81: les di, ptr ss:[bx + 8]
0x84d85: lds si, ptr ss:[bx + 4]
0x84d89: cld
0x84d8a: xor ax, ax
0x84d8c: stosw word ptr es:[di], ax
0x84d8d: mov ax, 0xd7b0
0x84d90: stosw word ptr es:[di], ax
0x84d91: xor ax, ax
0x84d93: mov cx, 0x16
0x84d96: rep stosd dword ptr es:[di], eax
0x84d98: lodsb al, byte ptr [si]
0x84d99: cmp al, 0x4f
0x84d9b: jbe 0x84d9f
0x84d9d: mov al, 0x4f
0x84d9f: mov cl, al
2018-12-17T22:41:49.355268088Z 26 PC: 8440b | Set disk transfer address
2018-12-17T22:41:49.356349389Z 78 PC: 84417 | Find first file
2018-12-17T22:41:49.367531982Z 26 PC: 8440b | Set disk transfer address
2018-12-17T22:41:49.368605819Z 78 PC: 84417 | Find first file
2018-12-17T22:41:49.374620867Z 26 PC: 8442f | Set disk transfer address
2018-12-17T22:41:49.376261899Z 79 PC: 84434 | Find next file
2018-12-17T22:41:49.379359266Z 26 PC: 8440b | Set disk transfer address
2018-12-17T22:41:49.381851838Z 78 PC: 84417 | Find first file
2018-12-17T22:41:49.38855088Z 48 PC: 84fa8 | Get DOS version
2018-12-17T22:41:49.390034817Z 48 PC: 84fa8 | Get DOS version
2018-12-17T22:41:49.391894049Z 41 PC: 844c2 | Parse filename
2018-12-17T22:41:49.393345916Z 41 PC: 844d0 | Parse filename
2018-12-17T22:41:49.395751273Z 75 PC: 844db | Execute program
2018-12-17T22:41:49.410499103Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.411906757Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.414121417Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.415689482Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.418918717Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.420436968Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.423065335Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.424571964Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.426085317Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.428695129Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.430193102Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.432908782Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.434192313Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.435342784Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.437532577Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.438706853Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.440985883Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.442567343Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.443591106Z 53 PC: 8aae2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.445418789Z 37 PC: 8aaf7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.446371228Z 37 PC: 8aaff | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.447819719Z 37 PC: 8ab07 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.448942898Z 37 PC: 8ab0f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.450415634Z 68 PC: 8ae7f | I/O control for devices (Set for = 'v�%��%�')
2018-12-17T22:41:49.452568307Z 25 PC: 8a9e9 | Get default drive
2018-12-17T22:41:49.45384228Z 71 PC: 8aa08 | Get current directory
2018-12-17T22:41:49.458448922Z 48 PC: 8b468 | Get DOS version
2018-12-17T22:41:49.459988384Z 61 PC: 8b2b4 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:49.468081253Z 63 PC: 8b387 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:49.475872417Z 62 PC: 8b304 | Close file
2018-12-17T22:41:49.477628525Z 44 PC: 8b235 | Get time 0x8b235: mov word ptr [0x3e], cx
0x8b239: mov word ptr [0x40], dx
0x8b23d: retf
0x8b23e: mov bx, sp
0x8b240: push ds
0x8b241: les di, ptr ss:[bx + 8]
0x8b245: lds si, ptr ss:[bx + 4]
0x8b249: cld
0x8b24a: xor ax, ax
0x8b24c: stosw word ptr es:[di], ax
0x8b24d: mov ax, 0xd7b0
0x8b250: stosw word ptr es:[di], ax
0x8b251: xor ax, ax
0x8b253: mov cx, 0x16
0x8b256: rep stosd dword ptr es:[di], eax
0x8b258: lodsb al, byte ptr [si]
0x8b259: cmp al, 0x4f
0x8b25b: jbe 0x8b25f
0x8b25d: mov al, 0x4f
0x8b25f: mov cl, al
2018-12-17T22:41:49.481522459Z 26 PC: 8a8cb | Set disk transfer address
2018-12-17T22:41:49.483231308Z 78 PC: 8a8d7 | Find first file
2018-12-17T22:41:49.491371728Z 26 PC: 8a8cb | Set disk transfer address
2018-12-17T22:41:49.492447849Z 78 PC: 8a8d7 | Find first file
2018-12-17T22:41:49.498534531Z 26 PC: 8a8ef | Set disk transfer address
2018-12-17T22:41:49.500724965Z 79 PC: 8a8f4 | Find next file
2018-12-17T22:41:49.504039821Z 26 PC: 8a8cb | Set disk transfer address
2018-12-17T22:41:49.506602744Z 78 PC: 8a8d7 | Find first file
2018-12-17T22:41:49.513045755Z 48 PC: 8b468 | Get DOS version
2018-12-17T22:41:49.516409413Z 48 PC: 8b468 | Get DOS version
2018-12-17T22:41:49.519275406Z 41 PC: 8a982 | Parse filename
2018-12-17T22:41:49.521710319Z 41 PC: 8a990 | Parse filename
2018-12-17T22:41:49.524272291Z 75 PC: 8a99b | Execute program
2018-12-17T22:41:49.540416824Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.542392895Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.543669703Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.544874196Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.546570802Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.548373859Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.550818159Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.552035877Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.555146689Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.556492507Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.557637658Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.559756578Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.561350622Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.56391599Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.566335865Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.567841814Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.590451589Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.592217025Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.595012425Z 53 PC: 90fa2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.59663876Z 37 PC: 90fb7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.598250367Z 37 PC: 90fbf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.599841606Z 37 PC: 90fc7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.602365216Z 37 PC: 90fcf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.606397839Z 68 PC: 9133f | I/O control for devices (Set for = '')
2018-12-17T22:41:49.608252864Z 25 PC: 90ea9 | Get default drive
2018-12-17T22:41:49.610404735Z 71 PC: 90ec8 | Get current directory
2018-12-17T22:41:49.613280947Z 48 PC: 91928 | Get DOS version
2018-12-17T22:41:49.614558517Z 61 PC: 91774 | Open file (Filename = 'A:\TEST.exe')
2018-12-17T22:41:49.622014951Z 63 PC: 91847 | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:41:49.628083689Z 62 PC: 917c4 | Close file
2018-12-17T22:41:49.63035769Z 44 PC: 916f5 | Get time 0x916f5: mov word ptr [0x3e], cx
0x916f9: mov word ptr [0x40], dx
0x916fd: retf
0x916fe: mov bx, sp
0x91700: push ds
0x91701: les di, ptr ss:[bx + 8]
0x91705: lds si, ptr ss:[bx + 4]
0x91709: cld
0x9170a: xor ax, ax
0x9170c: stosw word ptr es:[di], ax
0x9170d: mov ax, 0xd7b0
0x91710: stosw word ptr es:[di], ax
0x91711: xor ax, ax
0x91713: mov cx, 0x16
0x91716: rep stosd dword ptr es:[di], eax
0x91718: lodsb al, byte ptr [si]
0x91719: cmp al, 0x4f
0x9171b: jbe 0x9171f
0x9171d: mov al, 0x4f
0x9171f: mov cl, al
2018-12-17T22:41:49.632935162Z 26 PC: 90d8b | Set disk transfer address
2018-12-17T22:41:49.634129274Z 78 PC: 90d97 | Find first file
2018-12-17T22:41:49.639792491Z 26 PC: 90d8b | Set disk transfer address
2018-12-17T22:41:49.640725623Z 78 PC: 90d97 | Find first file
2018-12-17T22:41:49.646494158Z 26 PC: 90daf | Set disk transfer address
2018-12-17T22:41:49.647931017Z 79 PC: 90db4 | Find next file
2018-12-17T22:41:49.651197943Z 26 PC: 90d8b | Set disk transfer address
2018-12-17T22:41:49.653127968Z 78 PC: 90d97 | Find first file
2018-12-17T22:41:49.658286356Z 48 PC: 91928 | Get DOS version
2018-12-17T22:41:49.661513798Z 48 PC: 91928 | Get DOS version
2018-12-17T22:41:49.663375294Z 41 PC: 90e42 | Parse filename
2018-12-17T22:41:49.665038267Z 41 PC: 90e50 | Parse filename
2018-12-17T22:41:49.667467019Z 75 PC: 90e5b | Execute program
2018-12-17T22:41:49.67911657Z 44 PC: 90cff | Get time 0x90cff: test cl, 1
0x90d02: jne 0x90d0a
0x90d04: mov ah, 2
0x90d06: mov dl, 7
0x90d08: int 0x21
0x90d0a: mov sp, bp
0x90d0c: pop bp
0x90d0d: xor ax, ax
0x90d0f: lcall 0x90f5:0xe9
0x90d14: add byte ptr [bx + si], al
0x90d16: add byte ptr [bx + si], al
0x90d18: add byte ptr [bx + si], al
0x90d1a: add byte ptr [bx + si], al
0x90d1c: add byte ptr [bx + si], al
0x90d1e: add byte ptr [bx + si], al
0x90d20: push bp
0x90d21: mov bp, sp
0x90d23: les di, ptr [bp + 0xa]
0x90d26: mov bx, word ptr es:[di]
0x90d29: mov ax, 0x5700
2018-12-17T22:41:49.683964475Z 64 PC: 91442 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:49.685636796Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.687761056Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.689153952Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.690375606Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.693124509Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.694669952Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.697126235Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.700052942Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.701640303Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.703785683Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.705251075Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.719263283Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.72074172Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.723485613Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.724778251Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.726111756Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.728370177Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.729739409Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.734223221Z 37 PC: 910b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.736143888Z 76 PC: 910f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:49.740134403Z 44 PC: 8a83f | Get time 0x8a83f: test cl, 1
0x8a842: jne 0x8a84a
0x8a844: mov ah, 2
0x8a846: mov dl, 7
0x8a848: int 0x21
0x8a84a: mov sp, bp
0x8a84c: pop bp
0x8a84d: xor ax, ax
0x8a84f: lcall 0x8aa9:0xe9
0x8a854: add byte ptr [bx + si], al
0x8a856: add byte ptr [bx + si], al
0x8a858: add byte ptr [bx + si], al
0x8a85a: add byte ptr [bx + si], al
0x8a85c: add byte ptr [bx + si], al
0x8a85e: add byte ptr [bx + si], al
0x8a860: push bp
0x8a861: mov bp, sp
0x8a863: les di, ptr [bp + 0xa]
0x8a866: mov bx, word ptr es:[di]
0x8a869: mov ax, 0x5700
2018-12-17T22:41:49.743961451Z 64 PC: 8af82 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:49.745726255Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.748957745Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.75085069Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.753027629Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.754961281Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.756559112Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.759847468Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.761909491Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.765633585Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.766858095Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.768262663Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.770398866Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.771565416Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.774311514Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.775662111Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.778204807Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.779826342Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.78090609Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.782775862Z 37 PC: 8abf6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.783849458Z 76 PC: 8ac35 | Terminate with return code (Return code = '0')
2018-12-17T22:41:49.788153723Z 44 PC: 8437f | Get time 0x8437f: test cl, 1
0x84382: jne 0x8438a
0x84384: mov ah, 2
0x84386: mov dl, 7
0x84388: int 0x21
0x8438a: mov sp, bp
0x8438c: pop bp
0x8438d: xor ax, ax
0x8438f: lcall 0x845d:0xe9
0x84394: add byte ptr [bx + si], al
0x84396: add byte ptr [bx + si], al
0x84398: add byte ptr [bx + si], al
0x8439a: add byte ptr [bx + si], al
0x8439c: add byte ptr [bx + si], al
0x8439e: add byte ptr [bx + si], al
0x843a0: push bp
0x843a1: mov bp, sp
0x843a3: les di, ptr [bp + 0xa]
0x843a6: mov bx, word ptr es:[di]
0x843a9: mov ax, 0x5700
2018-12-17T22:41:49.791334377Z 64 PC: 84ac2 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:49.793869308Z 37 PC: 84736 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.796167715Z 37 PC: 84736 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.797930426Z 37 PC: 84736 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.800948093Z 37 PC: 84736 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.804329504Z 37 PC: 84736 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.806968751Z 37 PC: 84736 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.808773621Z 37 PC: 84736 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.810859809Z 37 PC: 84736 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.814550341Z 37 PC: 84736 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.815633385Z 37 PC: 84736 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.818515307Z 37 PC: 84736 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.820448509Z 37 PC: 84736 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.824502673Z 37 PC: 84736 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.826341817Z 37 PC: 84736 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.827671895Z 37 PC: 84736 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.829864043Z 37 PC: 84736 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.831850544Z 37 PC: 84736 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.834103235Z 37 PC: 84736 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.835544602Z 37 PC: 84736 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.836891742Z 76 PC: 84775 | Terminate with return code (Return code = '0')
2018-12-17T22:41:49.840801175Z 44 PC: 7debf | Get time 0x7debf: test cl, 1
0x7dec2: jne 0x7deca
0x7dec4: mov ah, 2
0x7dec6: mov dl, 7
0x7dec8: int 0x21
0x7deca: mov sp, bp
0x7decc: pop bp
0x7decd: xor ax, ax
0x7decf: lcall 0x7e11:0xe9
0x7ded4: add byte ptr [bx + si], al
0x7ded6: add byte ptr [bx + si], al
0x7ded8: add byte ptr [bx + si], al
0x7deda: add byte ptr [bx + si], al
0x7dedc: add byte ptr [bx + si], al
0x7dede: add byte ptr [bx + si], al
0x7dee0: push bp
0x7dee1: mov bp, sp
0x7dee3: les di, ptr [bp + 0xa]
0x7dee6: mov bx, word ptr es:[di]
0x7dee9: mov ax, 0x5700
2018-12-17T22:41:49.843387533Z 64 PC: 7e602 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:49.846229059Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.84757633Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.856193655Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.857874242Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.859413933Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.86272379Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.864233165Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.866942303Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.868997974Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.871558323Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.872947332Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.874345578Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.876443088Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.877919651Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.880149188Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.88155607Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.882869608Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.884525788Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.885930807Z 37 PC: 7e276 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.888241647Z 76 PC: 7e2b5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:49.891677671Z 44 PC: 779ff | Get time 0x779ff: test cl, 1
0x77a02: jne 0x77a0a
0x77a04: mov ah, 2
0x77a06: mov dl, 7
0x77a08: int 0x21
0x77a0a: mov sp, bp
0x77a0c: pop bp
0x77a0d: xor ax, ax
0x77a0f: lcall 0x77c5:0xe9
0x77a14: add byte ptr [bx + si], al
0x77a16: add byte ptr [bx + si], al
0x77a18: add byte ptr [bx + si], al
0x77a1a: add byte ptr [bx + si], al
0x77a1c: add byte ptr [bx + si], al
0x77a1e: add byte ptr [bx + si], al
0x77a20: push bp
0x77a21: mov bp, sp
0x77a23: les di, ptr [bp + 0xa]
0x77a26: mov bx, word ptr es:[di]
0x77a29: mov ax, 0x5700
2018-12-17T22:41:49.895779926Z 64 PC: 78142 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:49.897682839Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.906160353Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.908457296Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.909690262Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.912275748Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.913424005Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.915684981Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.916975555Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.918236213Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.920058135Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.921313693Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.924169226Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.925446976Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.927665102Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.929008135Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.930218098Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.932496076Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.933725515Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.935908746Z 37 PC: 77db6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.937186796Z 76 PC: 77df5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:49.94101696Z 44 PC: 7153f | Get time 0x7153f: test cl, 1
0x71542: jne 0x7154a
0x71544: mov ah, 2
0x71546: mov dl, 7
0x71548: int 0x21
0x7154a: mov sp, bp
0x7154c: pop bp
0x7154d: xor ax, ax
0x7154f: lcall 0x7179:0xe9
0x71554: add byte ptr [bx + si], al
0x71556: add byte ptr [bx + si], al
0x71558: add byte ptr [bx + si], al
0x7155a: add byte ptr [bx + si], al
0x7155c: add byte ptr [bx + si], al
0x7155e: add byte ptr [bx + si], al
0x71560: push bp
0x71561: mov bp, sp
0x71563: les di, ptr [bp + 0xa]
0x71566: mov bx, word ptr es:[di]
0x71569: mov ax, 0x5700
2018-12-17T22:41:49.943814675Z 64 PC: 71c82 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:49.945897036Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.948455952Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.949878294Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.952282218Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.95365707Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.955196111Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.957400622Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.958752771Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.961123975Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.962482486Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.965459748Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.967152738Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.968568286Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.970863788Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.972063642Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.974118511Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.97532668Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.977483621Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.978665751Z 37 PC: 718f6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.979771047Z 76 PC: 71935 | Terminate with return code (Return code = '0')
2018-12-17T22:41:49.984011412Z 44 PC: 6b07f | Get time 0x6b07f: test cl, 1
0x6b082: jne 0x6b08a
0x6b084: mov ah, 2
0x6b086: mov dl, 7
0x6b088: int 0x21
0x6b08a: mov sp, bp
0x6b08c: pop bp
0x6b08d: xor ax, ax
0x6b08f: lcall 0x6b2d:0xe9
0x6b094: add byte ptr [bx + si], al
0x6b096: add byte ptr [bx + si], al
0x6b098: add byte ptr [bx + si], al
0x6b09a: add byte ptr [bx + si], al
0x6b09c: add byte ptr [bx + si], al
0x6b09e: add byte ptr [bx + si], al
0x6b0a0: push bp
0x6b0a1: mov bp, sp
0x6b0a3: les di, ptr [bp + 0xa]
0x6b0a6: mov bx, word ptr es:[di]
0x6b0a9: mov ax, 0x5700
2018-12-17T22:41:49.986585777Z 64 PC: 6b7c2 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:49.989133382Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.990352852Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.992305791Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.993609509Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.99489302Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.996582753Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.997857127Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.999889364Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:50.00141518Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:50.003924673Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:50.005984431Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:50.008238946Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:50.009913161Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:50.011479132Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:50.014644346Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:50.016550006Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:50.019431919Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:50.02183347Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:50.024824858Z 37 PC: 6b436 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:50.027297422Z 76 PC: 6b475 | Terminate with return code (Return code = '0')
2018-12-17T22:41:50.031139508Z 44 PC: 64bbf | Get time 0x64bbf: test cl, 1
0x64bc2: jne 0x64bca
0x64bc4: mov ah, 2
0x64bc6: mov dl, 7
0x64bc8: int 0x21
0x64bca: mov sp, bp
0x64bcc: pop bp
0x64bcd: xor ax, ax
0x64bcf: lcall 0x64e1:0xe9
0x64bd4: add byte ptr [bx + si], al
0x64bd6: add byte ptr [bx + si], al
0x64bd8: add byte ptr [bx + si], al
0x64bda: add byte ptr [bx + si], al
0x64bdc: add byte ptr [bx + si], al
0x64bde: add byte ptr [bx + si], al
0x64be0: push bp
0x64be1: mov bp, sp
0x64be3: les di, ptr [bp + 0xa]
0x64be6: mov bx, word ptr es:[di]
0x64be9: mov ax, 0x5700
2018-12-17T22:41:50.034768534Z 64 PC: 65302 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:50.036815168Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:50.03918035Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:50.041861696Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:50.047281706Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:50.048523037Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:50.052615814Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:50.054633304Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:50.055926182Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:50.058138978Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:50.05925784Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:50.06045579Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:50.06217047Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:50.063950634Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:50.065963514Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:50.068470773Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:50.070385279Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:50.071835443Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:50.074449873Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:50.075692327Z 37 PC: 64f76 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:50.07695067Z 76 PC: 64fb5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:50.081223405Z 44 PC: 5e6ff | Get time 0x5e6ff: test cl, 1
0x5e702: jne 0x5e70a
0x5e704: mov ah, 2
0x5e706: mov dl, 7
0x5e708: int 0x21
0x5e70a: mov sp, bp
0x5e70c: pop bp
0x5e70d: xor ax, ax
0x5e70f: lcall 0x5e95:0xe9
0x5e714: add byte ptr [bx + si], al
0x5e716: add byte ptr [bx + si], al
0x5e718: add byte ptr [bx + si], al
0x5e71a: add byte ptr [bx + si], al
0x5e71c: add byte ptr [bx + si], al
0x5e71e: add byte ptr [bx + si], al
0x5e720: push bp
0x5e721: mov bp, sp
0x5e723: les di, ptr [bp + 0xa]
0x5e726: mov bx, word ptr es:[di]
0x5e729: mov ax, 0x5700
2018-12-17T22:41:50.083739631Z 64 PC: 5ee42 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:50.086226582Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:50.090507983Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:50.092934491Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:50.094623012Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:50.097360774Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:50.098475318Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:50.099478412Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:50.101479891Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:50.102459291Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:50.103720229Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:50.104784798Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:50.10596229Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:50.107377578Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:50.10838465Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:50.109904534Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:50.111268225Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:50.1132942Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:50.114256177Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:50.116427976Z 37 PC: 5eab6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:50.117729852Z 76 PC: 5eaf5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:50.120255695Z 44 PC: 5823f | Get time 0x5823f: test cl, 1
0x58242: jne 0x5824a
0x58244: mov ah, 2
0x58246: mov dl, 7
0x58248: int 0x21
0x5824a: mov sp, bp
0x5824c: pop bp
0x5824d: xor ax, ax
0x5824f: lcall 0x5849:0xe9
0x58254: add byte ptr [bx + si], al
0x58256: add byte ptr [bx + si], al
0x58258: add byte ptr [bx + si], al
0x5825a: add byte ptr [bx + si], al
0x5825c: add byte ptr [bx + si], al
0x5825e: add byte ptr [bx + si], al
0x58260: push bp
0x58261: mov bp, sp
0x58263: les di, ptr [bp + 0xa]
0x58266: mov bx, word ptr es:[di]
0x58269: mov ax, 0x5700
2018-12-17T22:41:50.122829259Z 64 PC: 58982 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:50.126485747Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:50.128803119Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:50.130109813Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:50.132515602Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:50.133959815Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:50.136673241Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:50.138839901Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:50.142775923Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:50.144152549Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:50.145586963Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:50.147486019Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:50.148789678Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:50.151221014Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:50.152652694Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:50.155444848Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:50.156859725Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:50.159549898Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:50.160941001Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:50.162348083Z 37 PC: 585f6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:50.164400828Z 76 PC: 58635 | Terminate with return code (Return code = '0')
2018-12-17T22:41:50.167599807Z 44 PC: 51d7f | Get time 0x51d7f: test cl, 1
0x51d82: jne 0x51d8a
0x51d84: mov ah, 2
0x51d86: mov dl, 7
0x51d88: int 0x21
0x51d8a: mov sp, bp
0x51d8c: pop bp
0x51d8d: xor ax, ax
0x51d8f: lcall 0x51fd:0xe9
0x51d94: add byte ptr [bx + si], al
0x51d96: add byte ptr [bx + si], al
0x51d98: add byte ptr [bx + si], al
0x51d9a: add byte ptr [bx + si], al
0x51d9c: add byte ptr [bx + si], al
0x51d9e: add byte ptr [bx + si], al
0x51da0: push bp
0x51da1: mov bp, sp
0x51da3: les di, ptr [bp + 0xa]
0x51da6: mov bx, word ptr es:[di]
0x51da9: mov ax, 0x5700
2018-12-17T22:41:50.171569643Z 64 PC: 524c2 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:50.173684145Z 37 PC: 52136 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:50.176295259Z 37 PC: 52136 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:50.177750783Z 37 PC: 52136 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:50.180408104Z 37 PC: 52136 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:50.18211005Z 37 PC: 52136 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:50.185442449Z 37 PC: 52136 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:50.18675795Z 37 PC: 52136 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:50.188035219Z 37 PC: 52136 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:50.189908948Z 37 PC: 52136 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:50.19132084Z 37 PC: 52136 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:50.193459727Z 37 PC: 52136 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:50.195838304Z 37 PC: 52136 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:50.197250487Z 37 PC: 52136 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:50.199527443Z 37 PC: 52136 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:50.200803871Z 37 PC: 52136 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:50.203469287Z 37 PC: 52136 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:50.204789977Z 37 PC: 52136 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:50.207489397Z 37 PC: 52136 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:50.208727162Z 37 PC: 52136 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:50.211475754Z 76 PC: 52175 | Terminate with return code (Return code = '0')
2018-12-17T22:41:50.214472253Z 44 PC: 4b8bf | Get time 0x4b8bf: test cl, 1
0x4b8c2: jne 0x4b8ca
0x4b8c4: mov ah, 2
0x4b8c6: mov dl, 7
0x4b8c8: int 0x21
0x4b8ca: mov sp, bp
0x4b8cc: pop bp
0x4b8cd: xor ax, ax
0x4b8cf: lcall 0x4bb1:0xe9
0x4b8d4: add byte ptr [bx + si], al
0x4b8d6: add byte ptr [bx + si], al
0x4b8d8: add byte ptr [bx + si], al
0x4b8da: add byte ptr [bx + si], al
0x4b8dc: add byte ptr [bx + si], al
0x4b8de: add byte ptr [bx + si], al
0x4b8e0: push bp
0x4b8e1: mov bp, sp
0x4b8e3: les di, ptr [bp + 0xa]
0x4b8e6: mov bx, word ptr es:[di]
0x4b8e9: mov ax, 0x5700
2018-12-17T22:41:50.217756742Z 64 PC: 4c002 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:50.219877495Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:50.221120419Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:50.223365706Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:50.224932339Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:50.227849658Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:50.229657574Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:50.232472371Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:50.233921933Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:50.23665193Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:50.237970507Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:50.239279796Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:50.24124626Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:50.242800338Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:50.245761229Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:50.247307323Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:50.250513806Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:50.251886625Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:50.254584031Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:50.256010119Z 37 PC: 4bc76 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:50.257491832Z 76 PC: 4bcb5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:50.261759969Z 44 PC: 453ff | Get time 0x453ff: test cl, 1
0x45402: jne 0x4540a
0x45404: mov ah, 2
0x45406: mov dl, 7
0x45408: int 0x21
0x4540a: mov sp, bp
0x4540c: pop bp
0x4540d: xor ax, ax
0x4540f: lcall 0x4565:0xe9
0x45414: add byte ptr [bx + si], al
0x45416: add byte ptr [bx + si], al
0x45418: add byte ptr [bx + si], al
0x4541a: add byte ptr [bx + si], al
0x4541c: add byte ptr [bx + si], al
0x4541e: add byte ptr [bx + si], al
0x45420: push bp
0x45421: mov bp, sp
0x45423: les di, ptr [bp + 0xa]
0x45426: mov bx, word ptr es:[di]
0x45429: mov ax, 0x5700
2018-12-17T22:41:50.264392022Z 64 PC: 45b42 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:50.267985321Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:50.269225731Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:50.278411012Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:50.279846298Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:50.282598918Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:50.283990552Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:50.285887364Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:50.287413841Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:50.29021411Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:50.291605885Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:50.292975207Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:50.295155913Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:50.29635266Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:50.298407259Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:50.299825253Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:50.301891002Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:50.304026353Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:50.306145163Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:50.307408385Z 37 PC: 457b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:50.309851353Z 76 PC: 457f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:50.313079707Z 44 PC: 3ef3f | Get time 0x3ef3f: test cl, 1
0x3ef42: jne 0x3ef4a
0x3ef44: mov ah, 2
0x3ef46: mov dl, 7
0x3ef48: int 0x21
0x3ef4a: mov sp, bp
0x3ef4c: pop bp
0x3ef4d: xor ax, ax
0x3ef4f: lcall 0x3f19:0xe9
0x3ef54: add byte ptr [bx + si], al
0x3ef56: add byte ptr [bx + si], al
0x3ef58: add byte ptr [bx + si], al
0x3ef5a: add byte ptr [bx + si], al
0x3ef5c: add byte ptr [bx + si], al
0x3ef5e: add byte ptr [bx + si], al
0x3ef60: push bp
0x3ef61: mov bp, sp
0x3ef63: les di, ptr [bp + 0xa]
0x3ef66: mov bx, word ptr es:[di]
0x3ef69: mov ax, 0x5700
2018-12-17T22:41:50.316750601Z 64 PC: 3f682 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:50.318681177Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:50.320994282Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:50.322295897Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:50.32369793Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:50.325903873Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:50.327093788Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:50.329391093Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:50.331121493Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:50.333613053Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:50.334901042Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:50.336689861Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:50.337938567Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:50.341339835Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:50.343362554Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:50.345224401Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:50.348415094Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:50.350045727Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:50.353273739Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:50.354958533Z 37 PC: 3f2f6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:50.358078373Z 76 PC: 3f335 | Terminate with return code (Return code = '0')
2018-12-17T22:41:50.361757012Z 44 PC: 38a7f | Get time 0x38a7f: test cl, 1
0x38a82: jne 0x38a8a
0x38a84: mov ah, 2
0x38a86: mov dl, 7
0x38a88: int 0x21
0x38a8a: mov sp, bp
0x38a8c: pop bp
0x38a8d: xor ax, ax
0x38a8f: lcall 0x38cd:0xe9
0x38a94: add byte ptr [bx + si], al
0x38a96: add byte ptr [bx + si], al
0x38a98: add byte ptr [bx + si], al
0x38a9a: add byte ptr [bx + si], al
0x38a9c: add byte ptr [bx + si], al
0x38a9e: add byte ptr [bx + si], al
0x38aa0: push bp
0x38aa1: mov bp, sp
0x38aa3: les di, ptr [bp + 0xa]
0x38aa6: mov bx, word ptr es:[di]
0x38aa9: mov ax, 0x5700
2018-12-17T22:41:50.366054534Z 64 PC: 391c2 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:50.36832578Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:50.370907209Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:50.37262227Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:50.374008263Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:50.375853669Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:50.377103667Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:50.379805922Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:50.381643884Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:50.38476148Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:50.386149046Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:50.388731315Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:50.390600666Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:50.393036632Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:50.394902867Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:50.396638356Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:50.398853296Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:50.400373842Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:50.403346766Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:50.404797661Z 37 PC: 38e36 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:50.407104985Z 76 PC: 38e75 | Terminate with return code (Return code = '0')
2018-12-17T22:41:50.41085085Z 44 PC: 325bf | Get time 0x325bf: test cl, 1
0x325c2: jne 0x325ca
0x325c4: mov ah, 2
0x325c6: mov dl, 7
0x325c8: int 0x21
0x325ca: mov sp, bp
0x325cc: pop bp
0x325cd: xor ax, ax
0x325cf: lcall 0x3281:0xe9
0x325d4: add byte ptr [bx + si], al
0x325d6: add byte ptr [bx + si], al
0x325d8: add byte ptr [bx + si], al
0x325da: add byte ptr [bx + si], al
0x325dc: add byte ptr [bx + si], al
0x325de: add byte ptr [bx + si], al
0x325e0: push bp
0x325e1: mov bp, sp
0x325e3: les di, ptr [bp + 0xa]
0x325e6: mov bx, word ptr es:[di]
0x325e9: mov ax, 0x5700
2018-12-17T22:41:50.419619039Z 64 PC: 32d02 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:50.422288964Z 37 PC: 32976 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:50.424667661Z 37 PC: 32976 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:50.430454249Z 37 PC: 32976 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:50.433205496Z 37 PC: 32976 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:50.435085237Z 37 PC: 32976 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:50.439840709Z 37 PC: 32976 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:50.441346036Z 37 PC: 32976 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:50.443640095Z 37 PC: 32976 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:50.445995008Z 37 PC: 32976 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:50.447601405Z 37 PC: 32976 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:50.449530218Z 37 PC: 32976 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:50.450784133Z 37 PC: 32976 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:50.453027136Z 37 PC: 32976 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:50.45477552Z 37 PC: 32976 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:50.457598472Z 37 PC: 32976 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:50.459564785Z 37 PC: 32976 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:50.462041707Z 37 PC: 32976 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:50.464025904Z 37 PC: 32976 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:50.465671084Z 37 PC: 32976 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:50.467848784Z 76 PC: 329b5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:50.471165263Z 44 PC: 2c0ff | Get time 0x2c0ff: test cl, 1
0x2c102: jne 0x2c10a
0x2c104: mov ah, 2
0x2c106: mov dl, 7
0x2c108: int 0x21
0x2c10a: mov sp, bp
0x2c10c: pop bp
0x2c10d: xor ax, ax
0x2c10f: lcall 0x2c35:0xe9
0x2c114: add byte ptr [bx + si], al
0x2c116: add byte ptr [bx + si], al
0x2c118: add byte ptr [bx + si], al
0x2c11a: add byte ptr [bx + si], al
0x2c11c: add byte ptr [bx + si], al
0x2c11e: add byte ptr [bx + si], al
0x2c120: push bp
0x2c121: mov bp, sp
0x2c123: les di, ptr [bp + 0xa]
0x2c126: mov bx, word ptr es:[di]
0x2c129: mov ax, 0x5700
2018-12-17T22:41:50.474993944Z 64 PC: 2c842 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:50.477269437Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:50.480189722Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:50.481973012Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:50.484316894Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:50.485735789Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:50.486973955Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:50.489019206Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:50.490500919Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:50.493233932Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:50.49472873Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:50.497465489Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:50.498969094Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:50.501024975Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:50.502432088Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:50.50379625Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:50.506652424Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:50.508126012Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:50.510880636Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:50.512397665Z 37 PC: 2c4b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:50.515098908Z 76 PC: 2c4f5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:50.518747802Z 44 PC: 25c3f | Get time 0x25c3f: test cl, 1
0x25c42: jne 0x25c4a
0x25c44: mov ah, 2
0x25c46: mov dl, 7
0x25c48: int 0x21
0x25c4a: mov sp, bp
0x25c4c: pop bp
0x25c4d: xor ax, ax
0x25c4f: lcall 0x25e9:0xe9
0x25c54: add byte ptr [bx + si], al
0x25c56: add byte ptr [bx + si], al
0x25c58: add byte ptr [bx + si], al
0x25c5a: add byte ptr [bx + si], al
0x25c5c: add byte ptr [bx + si], al
0x25c5e: add byte ptr [bx + si], al
0x25c60: push bp
0x25c61: mov bp, sp
0x25c63: les di, ptr [bp + 0xa]
0x25c66: mov bx, word ptr es:[di]
0x25c69: mov ax, 0x5700
2018-12-17T22:41:50.523422542Z 64 PC: 26382 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:50.525832348Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:50.528831632Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:50.530628637Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:50.533891705Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:50.535782927Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:50.539960263Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:50.541618287Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:50.544479451Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:50.546243114Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:50.548884935Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:50.550865746Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:50.552437859Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:50.555360047Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:50.556946947Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:50.559912367Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:50.561471205Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:50.564772897Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:50.56632961Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:50.569251207Z 37 PC: 25ff6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:50.570857074Z 76 PC: 26035 | Terminate with return code (Return code = '0')
2018-12-17T22:41:50.575736388Z 44 PC: 1f77f | Get time 0x1f77f: test cl, 1
0x1f782: jne 0x1f78a
0x1f784: mov ah, 2
0x1f786: mov dl, 7
0x1f788: int 0x21
0x1f78a: mov sp, bp
0x1f78c: pop bp
0x1f78d: xor ax, ax
0x1f78f: lcall 0x1f9d:0xe9
0x1f794: add byte ptr [bx + si], al
0x1f796: add byte ptr [bx + si], al
0x1f798: add byte ptr [bx + si], al
0x1f79a: add byte ptr [bx + si], al
0x1f79c: add byte ptr [bx + si], al
0x1f79e: add byte ptr [bx + si], al
0x1f7a0: push bp
0x1f7a1: mov bp, sp
0x1f7a3: les di, ptr [bp + 0xa]
0x1f7a6: mov bx, word ptr es:[di]
0x1f7a9: mov ax, 0x5700
2018-12-17T22:41:50.587135067Z 64 PC: 1fec2 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:50.590075149Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:50.591871072Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:50.593219705Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:50.595705804Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:50.597014272Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:50.59956878Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:50.600919357Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:50.60337025Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:50.604695449Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:50.606945395Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:50.608636812Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:50.609978071Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:50.612445074Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:50.613766265Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:50.61622304Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:50.617567976Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:50.619967663Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:50.621264729Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:50.62350141Z 37 PC: 1fb36 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:50.625148604Z 76 PC: 1fb75 | Terminate with return code (Return code = '0')
2018-12-17T22:41:50.628143388Z 44 PC: 192bf | Get time 0x192bf: test cl, 1
0x192c2: jne 0x192ca
0x192c4: mov ah, 2
0x192c6: mov dl, 7
0x192c8: int 0x21
0x192ca: mov sp, bp
0x192cc: pop bp
0x192cd: xor ax, ax
0x192cf: lcall 0x1951:0xe9
0x192d4: add byte ptr [bx + si], al
0x192d6: add byte ptr [bx + si], al
0x192d8: add byte ptr [bx + si], al
0x192da: add byte ptr [bx + si], al
0x192dc: add byte ptr [bx + si], al
0x192de: add byte ptr [bx + si], al
0x192e0: push bp
0x192e1: mov bp, sp
0x192e3: les di, ptr [bp + 0xa]
0x192e6: mov bx, word ptr es:[di]
0x192e9: mov ax, 0x5700
2018-12-17T22:41:50.631713474Z 64 PC: 19a02 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:50.633524515Z 37 PC: 19676 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:50.635983724Z 37 PC: 19676 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:50.637833949Z 37 PC: 19676 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:50.640084706Z 37 PC: 19676 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:50.641794869Z 37 PC: 19676 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:50.643907116Z 37 PC: 19676 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:50.645178003Z 37 PC: 19676 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:50.64979281Z 37 PC: 19676 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:50.650972636Z 37 PC: 19676 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:50.653580164Z 37 PC: 19676 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:50.655022202Z 37 PC: 19676 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:50.657158264Z 37 PC: 19676 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:50.658333591Z 37 PC: 19676 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:50.660642448Z 37 PC: 19676 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:50.661788701Z 37 PC: 19676 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:50.663017569Z 37 PC: 19676 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:50.664760713Z 37 PC: 19676 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:50.66586678Z 37 PC: 19676 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:50.667748995Z 37 PC: 19676 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:50.668868939Z 76 PC: 196b5 | Terminate with return code (Return code = '0')
2018-12-17T22:41:50.673112699Z 44 PC: 12dff | Get time 0x12dff: test cl, 1
0x12e02: jne 0x12e0a
0x12e04: mov ah, 2
0x12e06: mov dl, 7
0x12e08: int 0x21
0x12e0a: mov sp, bp
0x12e0c: pop bp
0x12e0d: xor ax, ax
0x12e0f: lcall 0x1305:0xe9
0x12e14: add byte ptr [bx + si], al
0x12e16: add byte ptr [bx + si], al
0x12e18: add byte ptr [bx + si], al
0x12e1a: add byte ptr [bx + si], al
0x12e1c: add byte ptr [bx + si], al
0x12e1e: add byte ptr [bx + si], al
0x12e20: push bp
0x12e21: mov bp, sp
0x12e23: les di, ptr [bp + 0xa]
0x12e26: mov bx, word ptr es:[di]
0x12e29: mov ax, 0x5700
2018-12-17T22:41:50.675590964Z 64 PC: 13542 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:41:50.67839994Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:50.679594073Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:50.6817806Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:50.683423626Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:50.686040501Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:50.687241847Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:50.689632077Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:50.690823314Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:50.697329945Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:50.699029867Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:50.702054728Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:50.703873655Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:50.706795292Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:50.708009813Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:50.709558692Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:50.711171251Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:50.712603381Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:50.71455709Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:50.71594124Z 37 PC: 131b6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:50.717887024Z 76 PC: 131f5 | Terminate with return code (Return code = '0')