Figured out why. Turned out that after leaving Norton everything worked allright.
So I went and re-worked the code (adding appropriate error messages). The entire thing weighs in at 2019 bytes now, 1394 without the chunks responsible for error reporting.
I might actually expand this thing to allow control of most DosBox settings.