Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Sector.8640

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:53:31.434462519Z 53 PC: 13bca | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:53:31.436730269Z 53 PC: 13bca | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:53:31.438290139Z 53 PC: 13bca | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:53:31.439878853Z 53 PC: 13bca | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:53:31.442174505Z 53 PC: 13bca | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:53:31.448843142Z 53 PC: 13bca | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:53:31.450533487Z 53 PC: 13bca | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:53:31.452108195Z 53 PC: 13bca | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:53:31.454170038Z 53 PC: 13bca | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:53:31.455296134Z 53 PC: 13bca | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:53:31.456427579Z 53 PC: 13bca | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:53:31.458365068Z 53 PC: 13bca | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:53:31.459540116Z 53 PC: 13bca | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:53:31.46051117Z 53 PC: 13bca | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:53:31.46215121Z 53 PC: 13bca | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:53:31.463243322Z 53 PC: 13bca | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:53:31.464401637Z 53 PC: 13bca | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:53:31.4661862Z 53 PC: 13bca | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:53:31.467186058Z 53 PC: 13bca | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:53:31.468207797Z 37 PC: 13bdf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:53:31.470118286Z 37 PC: 13be7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:53:31.471171144Z 37 PC: 13bef | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:53:31.472193784Z 37 PC: 13bf7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:53:31.47391082Z 68 PC: 1472c | I/O control for devices (Set for = '')
2018-12-17T22:53:31.478459053Z 48 PC: 14452 | Get DOS version
2018-12-17T22:53:31.480258774Z 48 PC: 14452 | Get DOS version
2018-12-17T22:53:31.48279052Z 61 PC: 14290 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:31.488261166Z 63 PC: 14363 | Read file or device (Read 8640 bytes on handle 5)
2018-12-17T22:53:31.494485418Z 62 PC: 142e0 | Close file
2018-12-17T22:53:31.496888863Z 26 PC: 1394f | Set disk transfer address
2018-12-17T22:53:31.498806054Z 78 PC: 1395b | Find first file
2018-12-17T22:53:31.503959204Z 42 PC: 13837 | Get date 0x13837: xor ah, ah
0x13839: les di, ptr [bp + 6]
0x1383c: stosw word ptr es:[di], ax
0x1383d: mov al, dl
0x1383f: les di, ptr [bp + 0xa]
0x13842: stosw word ptr es:[di], ax
0x13843: mov al, dh
0x13845: les di, ptr [bp + 0xe]
0x13848: stosw word ptr es:[di], ax
0x13849: xchg ax, cx
0x1384a: les di, ptr [bp + 0x12]
0x1384d: stosw word ptr es:[di], ax
0x1384e: pop bp
0x1384f: retf 0x10
0x13852: push bp
0x13853: mov bp, sp
0x13855: mov cx, word ptr [bp + 0xa]
0x13858: mov dh, byte ptr [bp + 8]
0x1385b: mov dl, byte ptr [bp + 6]
0x1385e: mov ah, 0x2b
2018-12-17T22:53:31.506205574Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.509936091Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.512920758Z 42 PC: 13837 | Get date 0x13837: xor ah, ah
0x13839: les di, ptr [bp + 6]
0x1383c: stosw word ptr es:[di], ax
0x1383d: mov al, dl
0x1383f: les di, ptr [bp + 0xa]
0x13842: stosw word ptr es:[di], ax
0x13843: mov al, dh
0x13845: les di, ptr [bp + 0xe]
0x13848: stosw word ptr es:[di], ax
0x13849: xchg ax, cx
0x1384a: les di, ptr [bp + 0x12]
0x1384d: stosw word ptr es:[di], ax
0x1384e: pop bp
0x1384f: retf 0x10
0x13852: push bp
0x13853: mov bp, sp
0x13855: mov cx, word ptr [bp + 0xa]
0x13858: mov dh, byte ptr [bp + 8]
0x1385b: mov dl, byte ptr [bp + 6]
0x1385e: mov ah, 0x2b
2018-12-17T22:53:31.516064503Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.518323085Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.522208995Z 42 PC: 13837 | Get date 0x13837: xor ah, ah
0x13839: les di, ptr [bp + 6]
0x1383c: stosw word ptr es:[di], ax
0x1383d: mov al, dl
0x1383f: les di, ptr [bp + 0xa]
0x13842: stosw word ptr es:[di], ax
0x13843: mov al, dh
0x13845: les di, ptr [bp + 0xe]
0x13848: stosw word ptr es:[di], ax
0x13849: xchg ax, cx
0x1384a: les di, ptr [bp + 0x12]
0x1384d: stosw word ptr es:[di], ax
0x1384e: pop bp
0x1384f: retf 0x10
0x13852: push bp
0x13853: mov bp, sp
0x13855: mov cx, word ptr [bp + 0xa]
0x13858: mov dh, byte ptr [bp + 8]
0x1385b: mov dl, byte ptr [bp + 6]
0x1385e: mov ah, 0x2b
2018-12-17T22:53:31.525139219Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.526952886Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.534648912Z 42 PC: 13837 | Get date 0x13837: xor ah, ah
0x13839: les di, ptr [bp + 6]
0x1383c: stosw word ptr es:[di], ax
0x1383d: mov al, dl
0x1383f: les di, ptr [bp + 0xa]
0x13842: stosw word ptr es:[di], ax
0x13843: mov al, dh
0x13845: les di, ptr [bp + 0xe]
0x13848: stosw word ptr es:[di], ax
0x13849: xchg ax, cx
0x1384a: les di, ptr [bp + 0x12]
0x1384d: stosw word ptr es:[di], ax
0x1384e: pop bp
0x1384f: retf 0x10
0x13852: push bp
0x13853: mov bp, sp
0x13855: mov cx, word ptr [bp + 0xa]
0x13858: mov dh, byte ptr [bp + 8]
0x1385b: mov dl, byte ptr [bp + 6]
0x1385e: mov ah, 0x2b
2018-12-17T22:53:31.53914638Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.541708282Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.546440341Z 42 PC: 13837 | Get date 0x13837: xor ah, ah
0x13839: les di, ptr [bp + 6]
0x1383c: stosw word ptr es:[di], ax
0x1383d: mov al, dl
0x1383f: les di, ptr [bp + 0xa]
0x13842: stosw word ptr es:[di], ax
0x13843: mov al, dh
0x13845: les di, ptr [bp + 0xe]
0x13848: stosw word ptr es:[di], ax
0x13849: xchg ax, cx
0x1384a: les di, ptr [bp + 0x12]
0x1384d: stosw word ptr es:[di], ax
0x1384e: pop bp
0x1384f: retf 0x10
0x13852: push bp
0x13853: mov bp, sp
0x13855: mov cx, word ptr [bp + 0xa]
0x13858: mov dh, byte ptr [bp + 8]
0x1385b: mov dl, byte ptr [bp + 6]
0x1385e: mov ah, 0x2b
2018-12-17T22:53:31.55046435Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.552770673Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.556829407Z 42 PC: 13837 | Get date 0x13837: xor ah, ah
0x13839: les di, ptr [bp + 6]
0x1383c: stosw word ptr es:[di], ax
0x1383d: mov al, dl
0x1383f: les di, ptr [bp + 0xa]
0x13842: stosw word ptr es:[di], ax
0x13843: mov al, dh
0x13845: les di, ptr [bp + 0xe]
0x13848: stosw word ptr es:[di], ax
0x13849: xchg ax, cx
0x1384a: les di, ptr [bp + 0x12]
0x1384d: stosw word ptr es:[di], ax
0x1384e: pop bp
0x1384f: retf 0x10
0x13852: push bp
0x13853: mov bp, sp
0x13855: mov cx, word ptr [bp + 0xa]
0x13858: mov dh, byte ptr [bp + 8]
0x1385b: mov dl, byte ptr [bp + 6]
0x1385e: mov ah, 0x2b
2018-12-17T22:53:31.567393601Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.56942133Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.574009519Z 42 PC: 13837 | Get date 0x13837: xor ah, ah
0x13839: les di, ptr [bp + 6]
0x1383c: stosw word ptr es:[di], ax
0x1383d: mov al, dl
0x1383f: les di, ptr [bp + 0xa]
0x13842: stosw word ptr es:[di], ax
0x13843: mov al, dh
0x13845: les di, ptr [bp + 0xe]
0x13848: stosw word ptr es:[di], ax
0x13849: xchg ax, cx
0x1384a: les di, ptr [bp + 0x12]
0x1384d: stosw word ptr es:[di], ax
0x1384e: pop bp
0x1384f: retf 0x10
0x13852: push bp
0x13853: mov bp, sp
0x13855: mov cx, word ptr [bp + 0xa]
0x13858: mov dh, byte ptr [bp + 8]
0x1385b: mov dl, byte ptr [bp + 6]
0x1385e: mov ah, 0x2b
2018-12-17T22:53:31.57689574Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.579240364Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.582998554Z 42 PC: 13837 | Get date 0x13837: xor ah, ah
0x13839: les di, ptr [bp + 6]
0x1383c: stosw word ptr es:[di], ax
0x1383d: mov al, dl
0x1383f: les di, ptr [bp + 0xa]
0x13842: stosw word ptr es:[di], ax
0x13843: mov al, dh
0x13845: les di, ptr [bp + 0xe]
0x13848: stosw word ptr es:[di], ax
0x13849: xchg ax, cx
0x1384a: les di, ptr [bp + 0x12]
0x1384d: stosw word ptr es:[di], ax
0x1384e: pop bp
0x1384f: retf 0x10
0x13852: push bp
0x13853: mov bp, sp
0x13855: mov cx, word ptr [bp + 0xa]
0x13858: mov dh, byte ptr [bp + 8]
0x1385b: mov dl, byte ptr [bp + 6]
0x1385e: mov ah, 0x2b
2018-12-17T22:53:31.586518075Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.587981534Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.592911674Z 42 PC: 13837 | Get date 0x13837: xor ah, ah
0x13839: les di, ptr [bp + 6]
0x1383c: stosw word ptr es:[di], ax
0x1383d: mov al, dl
0x1383f: les di, ptr [bp + 0xa]
0x13842: stosw word ptr es:[di], ax
0x13843: mov al, dh
0x13845: les di, ptr [bp + 0xe]
0x13848: stosw word ptr es:[di], ax
0x13849: xchg ax, cx
0x1384a: les di, ptr [bp + 0x12]
0x1384d: stosw word ptr es:[di], ax
0x1384e: pop bp
0x1384f: retf 0x10
0x13852: push bp
0x13853: mov bp, sp
0x13855: mov cx, word ptr [bp + 0xa]
0x13858: mov dh, byte ptr [bp + 8]
0x1385b: mov dl, byte ptr [bp + 6]
0x1385e: mov ah, 0x2b
2018-12-17T22:53:31.596107558Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.597630148Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.602331048Z 42 PC: 13837 | Get date 0x13837: xor ah, ah
0x13839: les di, ptr [bp + 6]
0x1383c: stosw word ptr es:[di], ax
0x1383d: mov al, dl
0x1383f: les di, ptr [bp + 0xa]
0x13842: stosw word ptr es:[di], ax
0x13843: mov al, dh
0x13845: les di, ptr [bp + 0xe]
0x13848: stosw word ptr es:[di], ax
0x13849: xchg ax, cx
0x1384a: les di, ptr [bp + 0x12]
0x1384d: stosw word ptr es:[di], ax
0x1384e: pop bp
0x1384f: retf 0x10
0x13852: push bp
0x13853: mov bp, sp
0x13855: mov cx, word ptr [bp + 0xa]
0x13858: mov dh, byte ptr [bp + 8]
0x1385b: mov dl, byte ptr [bp + 6]
0x1385e: mov ah, 0x2b
2018-12-17T22:53:31.605210517Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.606413337Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.610579312Z 42 PC: 13837 | Get date 0x13837: xor ah, ah
0x13839: les di, ptr [bp + 6]
0x1383c: stosw word ptr es:[di], ax
0x1383d: mov al, dl
0x1383f: les di, ptr [bp + 0xa]
0x13842: stosw word ptr es:[di], ax
0x13843: mov al, dh
0x13845: les di, ptr [bp + 0xe]
0x13848: stosw word ptr es:[di], ax
0x13849: xchg ax, cx
0x1384a: les di, ptr [bp + 0x12]
0x1384d: stosw word ptr es:[di], ax
0x1384e: pop bp
0x1384f: retf 0x10
0x13852: push bp
0x13853: mov bp, sp
0x13855: mov cx, word ptr [bp + 0xa]
0x13858: mov dh, byte ptr [bp + 8]
0x1385b: mov dl, byte ptr [bp + 6]
0x1385e: mov ah, 0x2b
2018-12-17T22:53:31.613681269Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.615165527Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.619664478Z 42 PC: 13837 | Get date 0x13837: xor ah, ah
0x13839: les di, ptr [bp + 6]
0x1383c: stosw word ptr es:[di], ax
0x1383d: mov al, dl
0x1383f: les di, ptr [bp + 0xa]
0x13842: stosw word ptr es:[di], ax
0x13843: mov al, dh
0x13845: les di, ptr [bp + 0xe]
0x13848: stosw word ptr es:[di], ax
0x13849: xchg ax, cx
0x1384a: les di, ptr [bp + 0x12]
0x1384d: stosw word ptr es:[di], ax
0x1384e: pop bp
0x1384f: retf 0x10
0x13852: push bp
0x13853: mov bp, sp
0x13855: mov cx, word ptr [bp + 0xa]
0x13858: mov dh, byte ptr [bp + 8]
0x1385b: mov dl, byte ptr [bp + 6]
0x1385e: mov ah, 0x2b
2018-12-17T22:53:31.622576187Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.623733802Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.628155257Z 42 PC: 13837 | Get date 0x13837: xor ah, ah
0x13839: les di, ptr [bp + 6]
0x1383c: stosw word ptr es:[di], ax
0x1383d: mov al, dl
0x1383f: les di, ptr [bp + 0xa]
0x13842: stosw word ptr es:[di], ax
0x13843: mov al, dh
0x13845: les di, ptr [bp + 0xe]
0x13848: stosw word ptr es:[di], ax
0x13849: xchg ax, cx
0x1384a: les di, ptr [bp + 0x12]
0x1384d: stosw word ptr es:[di], ax
0x1384e: pop bp
0x1384f: retf 0x10
0x13852: push bp
0x13853: mov bp, sp
0x13855: mov cx, word ptr [bp + 0xa]
0x13858: mov dh, byte ptr [bp + 8]
0x1385b: mov dl, byte ptr [bp + 6]
0x1385e: mov ah, 0x2b
2018-12-17T22:53:31.631402848Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.632918715Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.636714695Z 42 PC: 13837 | Get date 0x13837: xor ah, ah
0x13839: les di, ptr [bp + 6]
0x1383c: stosw word ptr es:[di], ax
0x1383d: mov al, dl
0x1383f: les di, ptr [bp + 0xa]
0x13842: stosw word ptr es:[di], ax
0x13843: mov al, dh
0x13845: les di, ptr [bp + 0xe]
0x13848: stosw word ptr es:[di], ax
0x13849: xchg ax, cx
0x1384a: les di, ptr [bp + 0x12]
0x1384d: stosw word ptr es:[di], ax
0x1384e: pop bp
0x1384f: retf 0x10
0x13852: push bp
0x13853: mov bp, sp
0x13855: mov cx, word ptr [bp + 0xa]
0x13858: mov dh, byte ptr [bp + 8]
0x1385b: mov dl, byte ptr [bp + 6]
0x1385e: mov ah, 0x2b
2018-12-17T22:53:31.640453208Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.641631361Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.645471234Z 67 PC: 138d8 | Get or set file attributes
2018-12-17T22:53:31.664443312Z 61 PC: 14290 | Open file (Filename = '\TEST.EXE')
2018-12-17T22:53:31.672361495Z 63 PC: 14363 | Read file or device (Read 8640 bytes on handle 5)
2018-12-17T22:53:31.680632462Z 66 PC: 143c2 | Move file pointer
2018-12-17T22:53:31.68319229Z 64 PC: 14363 | Write file or device (Write 8640 bytes on handle 5)
2018-12-17T22:53:31.692361113Z 66 PC: 143c2 | Move file pointer
2018-12-17T22:53:31.694317758Z 64 PC: 14363 | Write file or device (Write 8640 bytes on handle 5)
2018-12-17T22:53:31.705680573Z 62 PC: 142e0 | Close file
2018-12-17T22:53:31.714676451Z 61 PC: 14290 | Open file (Filename = '\TEST.EXE')
2018-12-17T22:53:31.722854733Z 87 PC: 1391f | Get or set file date and time
2018-12-17T22:53:31.72497672Z 67 PC: 138d8 | Get or set file attributes
2018-12-17T22:53:31.7344157Z 62 PC: 142e0 | Close file
2018-12-17T22:53:31.740880734Z 42 PC: 13837 | Get date 0x13837: xor ah, ah
0x13839: les di, ptr [bp + 6]
0x1383c: stosw word ptr es:[di], ax
0x1383d: mov al, dl
0x1383f: les di, ptr [bp + 0xa]
0x13842: stosw word ptr es:[di], ax
0x13843: mov al, dh
0x13845: les di, ptr [bp + 0xe]
0x13848: stosw word ptr es:[di], ax
0x13849: xchg ax, cx
0x1384a: les di, ptr [bp + 0x12]
0x1384d: stosw word ptr es:[di], ax
0x1384e: pop bp
0x1384f: retf 0x10
0x13852: push bp
0x13853: mov bp, sp
0x13855: mov cx, word ptr [bp + 0xa]
0x13858: mov dh, byte ptr [bp + 8]
0x1385b: mov dl, byte ptr [bp + 6]
0x1385e: mov ah, 0x2b
2018-12-17T22:53:31.744046631Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.74599489Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.749180695Z 26 PC: 1394f | Set disk transfer address
2018-12-17T22:53:31.751529827Z 78 PC: 1395b | Find first file
2018-12-17T22:53:31.758830611Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.759997944Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.762805468Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.764748237Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.767865262Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.769218704Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.774291814Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.775857385Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.779559429Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.781895387Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.785437681Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.786631333Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.789870437Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.791112671Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.794141861Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.796437223Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.800597548Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.802103607Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.805198801Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.807677126Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.810790525Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.812271626Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.817664387Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.819280743Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.82214895Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.823957938Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.826942324Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.82816441Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.831487031Z 26 PC: 13973 | Set disk transfer address
2018-12-17T22:53:31.832826417Z 79 PC: 13978 | Find next file
2018-12-17T22:53:31.835925218Z 48 PC: 14452 | Get DOS version
2018-12-17T22:53:31.838649225Z 26 PC: 1394f | Set disk transfer address
2018-12-17T22:53:31.839935551Z 78 PC: 1395b | Find first file
2018-12-17T22:53:31.844627885Z 48 PC: 14452 | Get DOS version
2018-12-17T22:53:31.846698014Z 67 PC: 138d8 | Get or set file attributes
2018-12-17T22:53:32.039655401Z 61 PC: 14290 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:32.047375081Z 66 PC: 143c2 | Move file pointer
2018-12-17T22:53:32.049871851Z 63 PC: 14363 | Read file or device (Read 8640 bytes on handle 5)
2018-12-17T22:53:32.060408995Z 66 PC: 143c2 | Move file pointer
2018-12-17T22:53:32.062431534Z 64 PC: 142c1 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:53:32.086881431Z 66 PC: 143c2 | Move file pointer
2018-12-17T22:53:32.089070664Z 64 PC: 14363 | Write file or device (Write 8640 bytes on handle 5)
2018-12-17T22:53:32.16310416Z 87 PC: 1391f | Get or set file date and time
2018-12-17T22:53:32.166537058Z 62 PC: 142e0 | Close file
2018-12-17T22:53:32.174807054Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:53:32.175958707Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:53:32.177055918Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:53:32.179517211Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:53:32.180893436Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:53:32.182405637Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:53:32.185008536Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:53:32.186409488Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:53:32.188339243Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:53:32.191276771Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:53:32.193060451Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:53:32.194872665Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:53:32.19768063Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:53:32.201912509Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:53:32.20361132Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:53:32.206577181Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:53:32.208237279Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:53:32.209903088Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:53:32.213059408Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:53:32.215239423Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:53:32.21693624Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:53:32.219532787Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:53:32.22134425Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:53:32.223124664Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:53:32.226066771Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:53:32.22783928Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:53:32.229524596Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:53:32.232306081Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:53:32.234124527Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:53:32.235843936Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:53:32.237520937Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:53:32.240292232Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:53:32.241966758Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:53:32.243684124Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:53:32.246291171Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:53:32.24799973Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:53:32.249678403Z 53 PC: 13b3a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:53:32.252400256Z 37 PC: 13b43 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:53:32.254743127Z 41 PC: 13af1 | Parse filename
2018-12-17T22:53:32.256731633Z 41 PC: 13aff | Parse filename
2018-12-17T22:53:32.259501336Z 75 PC: 13b0a | Execute program
2018-12-17T22:53:32.283617606Z 80 PC: 1b3b9 | Set current PSP
2018-12-17T22:53:32.285007086Z 48 PC: 1b3be | Get DOS version
2018-12-17T22:53:32.288120204Z 99 PC: 21ba0 | Get DBCS lead byte table pointer
2018-12-17T22:53:32.291125048Z 101 PC: 1b444 | Get extended country info
2018-12-17T22:53:32.292904571Z 99 PC: 1b44a | Get DBCS lead byte table pointer
2018-12-17T22:53:32.295561091Z 74 PC: 1b4ac | Reallocate memory
2018-12-17T22:53:32.297706902Z 25 PC: 1b4e3 | Get default drive
2018-12-17T22:53:32.299194386Z 37 PC: 1afa3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:53:32.302448689Z 37 PC: 1afaa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:53:32.303925172Z 37 PC: 1afb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:53:32.309448377Z 74 PC: 1a14c | Reallocate memory
2018-12-17T22:53:32.312027071Z 72 PC: 1a18d | Allocate memory
2018-12-17T22:53:32.314612397Z 72 PC: 1a1c5 | Allocate memory
2018-12-17T22:53:32.316979373Z 72 PC: 1a1cd | Allocate memory