Sample viewer

vx.netlux.org/Virus.DOS.VCL.2805

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:53:40.694423364Z 47 PC: 12a86 | Get disk transfer address
2018-12-17T22:53:40.696274742Z 26 PC: 12a8e | Set disk transfer address
2018-12-17T22:53:40.698573029Z 71 PC: 12c4d | Get current directory
2018-12-17T22:53:40.70198581Z 59 PC: 12c55 | Change current directory
2018-12-17T22:53:40.706592443Z 47 PC: 12c6a | Get disk transfer address
2018-12-17T22:53:40.709485267Z 26 PC: 12c78 | Set disk transfer address
2018-12-17T22:53:40.710936944Z 78 PC: 12c83 | Find first file
2018-12-17T22:53:40.722376663Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.726546024Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.729801459Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.732975591Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.736817579Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.740830767Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.744868842Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.748563773Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.752364442Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.755240495Z 47 PC: 12ccf | Get disk transfer address
2018-12-17T22:53:40.756907686Z 26 PC: 12cde | Set disk transfer address
2018-12-17T22:53:40.76238787Z 78 PC: 12ce6 | Find first file
2018-12-17T22:53:40.770018534Z 47 PC: 12cfe | Get disk transfer address
2018-12-17T22:53:40.771780514Z 61 PC: 12d17 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:53:40.780539447Z 63 PC: 12d23 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:53:40.787974433Z 66 PC: 12d2b | Move file pointer
2018-12-17T22:53:40.789958049Z 62 PC: 12d30 | Close file
2018-12-17T22:53:40.792344041Z 67 PC: 12d50 | Get or set file attributes
2018-12-17T22:53:40.811470809Z 61 PC: 12d55 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:53:40.819529336Z 64 PC: 12d61 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:53:40.822823935Z 66 PC: 12d69 | Move file pointer
2018-12-17T22:53:40.826783162Z 64 PC: 13569 | Write file or device (Write 2805 bytes on handle 5)
2018-12-17T22:53:40.836735206Z 87 PC: 12d79 | Get or set file date and time
2018-12-17T22:53:40.838673176Z 62 PC: 12d7d | Close file
2018-12-17T22:53:40.848910717Z 67 PC: 12d8a | Get or set file attributes
2018-12-17T22:53:40.859797166Z 26 PC: 12cf8 | Set disk transfer address
2018-12-17T22:53:40.861184101Z 26 PC: 12cbb | Set disk transfer address
2018-12-17T22:53:40.864618022Z 59 PC: 12c5f | Change current directory
2018-12-17T22:53:40.867420847Z 71 PC: 12c4d | Get current directory
2018-12-17T22:53:40.871067607Z 59 PC: 12c55 | Change current directory
2018-12-17T22:53:40.87717006Z 47 PC: 12c6a | Get disk transfer address
2018-12-17T22:53:40.878844575Z 26 PC: 12c78 | Set disk transfer address
2018-12-17T22:53:40.880443658Z 78 PC: 12c83 | Find first file
2018-12-17T22:53:40.887674371Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.890735391Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.894177747Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.897984808Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.901256484Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.904305912Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.907343628Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.910816321Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.913810375Z 79 PC: 12cab | Find next file
2018-12-17T22:53:40.916575109Z 47 PC: 12ccf | Get disk transfer address
2018-12-17T22:53:40.919703896Z 26 PC: 12cde | Set disk transfer address
2018-12-17T22:53:40.921060424Z 78 PC: 12ce6 | Find first file
2018-12-17T22:53:40.927381908Z 47 PC: 12cfe | Get disk transfer address
2018-12-17T22:53:40.929612117Z 61 PC: 12d17 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:53:40.936627225Z 63 PC: 12d23 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:53:40.943599101Z 66 PC: 12d2b | Move file pointer
2018-12-17T22:53:40.946173847Z 62 PC: 12d30 | Close file
2018-12-17T22:53:40.948329958Z 79 PC: 12ce6 | Find next file
2018-12-17T22:53:40.951280039Z 47 PC: 12cfe | Get disk transfer address
2018-12-17T22:53:40.953677653Z 61 PC: 12d17 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:53:40.961607178Z 63 PC: 12d23 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:53:40.969200922Z 66 PC: 12d2b | Move file pointer
2018-12-17T22:53:40.972133781Z 62 PC: 12d30 | Close file
2018-12-17T22:53:40.974578163Z 67 PC: 12d50 | Get or set file attributes
2018-12-17T22:53:40.985679205Z 61 PC: 12d55 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:53:40.993907822Z 64 PC: 12d61 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:53:40.998265818Z 66 PC: 12d69 | Move file pointer
2018-12-17T22:53:41.000871282Z 64 PC: 13569 | Write file or device (Write 2805 bytes on handle 5)
2018-12-17T22:53:41.010764035Z 87 PC: 12d79 | Get or set file date and time
2018-12-17T22:53:41.013347538Z 62 PC: 12d7d | Close file
2018-12-17T22:53:41.021959615Z 67 PC: 12d8a | Get or set file attributes
2018-12-17T22:53:41.032731108Z 26 PC: 12cf8 | Set disk transfer address
2018-12-17T22:53:41.035070333Z 26 PC: 12cbb | Set disk transfer address
2018-12-17T22:53:41.036385193Z 59 PC: 12c5f | Change current directory
2018-12-17T22:53:41.038342249Z 42 PC: 12d9b | Get date 0x12d9b: mov al, dl
0x12d9d: cwde
0x12d9e: ret
0x12d9f: mov ah, 0x2c
0x12da1: int 0x21
0x12da3: mov al, ch
0x12da5: cwde
0x12da6: ret
0x12da7: mov ah, 0x2c
0x12da9: int 0x21
0x12dab: mov al, cl
0x12dad: cwde
0x12dae: ret
0x12daf: int 0x12
0x12db1: ret
0x12db2: mov ah, 0x2c
0x12db4: int 0x21
0x12db6: mov al, dh
0x12db8: cwde
0x12db9: ret
2018-12-17T22:53:41.040858375Z 44 PC: 12da3 | Get time 0x12da3: mov al, ch
0x12da5: cwde
0x12da6: ret
0x12da7: mov ah, 0x2c
0x12da9: int 0x21
0x12dab: mov al, cl
0x12dad: cwde
0x12dae: ret
0x12daf: int 0x12
0x12db1: ret
0x12db2: mov ah, 0x2c
0x12db4: int 0x21
0x12db6: mov al, dh
0x12db8: cwde
0x12db9: ret
0x12dba: mov al, byte ptr [di + 0x433]
0x12dbe: cwde
0x12dbf: ret
0x12dc0: inc bx
0x12dc1: cmp bl, byte ptr [si + 0x44]
2018-12-17T22:53:41.043638147Z 44 PC: 12dab | Get time 0x12dab: mov al, cl
0x12dad: cwde
0x12dae: ret
0x12daf: int 0x12
0x12db1: ret
0x12db2: mov ah, 0x2c
0x12db4: int 0x21
0x12db6: mov al, dh
0x12db8: cwde
0x12db9: ret
0x12dba: mov al, byte ptr [di + 0x433]
0x12dbe: cwde
0x12dbf: ret
0x12dc0: inc bx
0x12dc1: cmp bl, byte ptr [si + 0x44]
0x12dc4: dec di
0x12dc5: push bx
0x12dc6: pop sp
0x12dc7: sub ch, byte ptr [0x2a]
0x12dcb: and byte ptr [bx + si], ah
2018-12-17T22:53:41.04593418Z 44 PC: 12db6 | Get time 0x12db6: mov al, dh
0x12db8: cwde
0x12db9: ret
0x12dba: mov al, byte ptr [di + 0x433]
0x12dbe: cwde
0x12dbf: ret
0x12dc0: inc bx
0x12dc1: cmp bl, byte ptr [si + 0x44]
0x12dc4: dec di
0x12dc5: push bx
0x12dc6: pop sp
0x12dc7: sub ch, byte ptr [0x2a]
0x12dcb: and byte ptr [bx + si], ah
0x12dcd: and byte ptr [bx + si], ah
0x12dcf: and byte ptr [bx + si], ah
0x12dd1: and byte ptr [bx + si], ah
0x12dd3: and byte ptr [bx + si], ah
0x12dd5: and byte ptr [bx + si], ah
0x12dd7: and byte ptr [bx + si], ah
0x12dd9: and byte ptr [bx + si], ah
2018-12-17T22:53:41.048132749Z 44 PC: 12db6 | Get time 0x12db6: mov al, dh
0x12db8: cwde
0x12db9: ret
0x12dba: mov al, byte ptr [di + 0x433]
0x12dbe: cwde
0x12dbf: ret
0x12dc0: inc bx
0x12dc1: cmp bl, byte ptr [si + 0x44]
0x12dc4: dec di
0x12dc5: push bx
0x12dc6: pop sp
0x12dc7: sub ch, byte ptr [0x2a]
0x12dcb: and byte ptr [bx + si], ah
0x12dcd: and byte ptr [bx + si], ah
0x12dcf: and byte ptr [bx + si], ah
0x12dd1: and byte ptr [bx + si], ah
0x12dd3: and byte ptr [bx + si], ah
0x12dd5: and byte ptr [bx + si], ah
0x12dd7: and byte ptr [bx + si], ah
0x12dd9: and byte ptr [bx + si], ah
2018-12-17T22:53:41.051386Z 42 PC: 12d9b | Get date 0x12d9b: mov al, dl
0x12d9d: cwde
0x12d9e: ret
0x12d9f: mov ah, 0x2c
0x12da1: int 0x21
0x12da3: mov al, ch
0x12da5: cwde
0x12da6: ret
0x12da7: mov ah, 0x2c
0x12da9: int 0x21
0x12dab: mov al, cl
0x12dad: cwde
0x12dae: ret
0x12daf: int 0x12
0x12db1: ret
0x12db2: mov ah, 0x2c
0x12db4: int 0x21
0x12db6: mov al, dh
0x12db8: cwde
0x12db9: ret
2018-12-17T22:53:41.053766572Z 42 PC: 12d9b | Get date 0x12d9b: mov al, dl
0x12d9d: cwde
0x12d9e: ret
0x12d9f: mov ah, 0x2c
0x12da1: int 0x21
0x12da3: mov al, ch
0x12da5: cwde
0x12da6: ret
0x12da7: mov ah, 0x2c
0x12da9: int 0x21
0x12dab: mov al, cl
0x12dad: cwde
0x12dae: ret
0x12daf: int 0x12
0x12db1: ret
0x12db2: mov ah, 0x2c
0x12db4: int 0x21
0x12db6: mov al, dh
0x12db8: cwde
0x12db9: ret
2018-12-17T22:53:41.055986752Z 44 PC: 12dab | Get time 0x12dab: mov al, cl
0x12dad: cwde
0x12dae: ret
0x12daf: int 0x12
0x12db1: ret
0x12db2: mov ah, 0x2c
0x12db4: int 0x21
0x12db6: mov al, dh
0x12db8: cwde
0x12db9: ret
0x12dba: mov al, byte ptr [di + 0x433]
0x12dbe: cwde
0x12dbf: ret
0x12dc0: inc bx
0x12dc1: cmp bl, byte ptr [si + 0x44]
0x12dc4: dec di
0x12dc5: push bx
0x12dc6: pop sp
0x12dc7: sub ch, byte ptr [0x2a]
0x12dcb: and byte ptr [bx + si], ah
2018-12-17T22:53:41.05949906Z 44 PC: 12da3 | Get time 0x12da3: mov al, ch
0x12da5: cwde
0x12da6: ret
0x12da7: mov ah, 0x2c
0x12da9: int 0x21
0x12dab: mov al, cl
0x12dad: cwde
0x12dae: ret
0x12daf: int 0x12
0x12db1: ret
0x12db2: mov ah, 0x2c
0x12db4: int 0x21
0x12db6: mov al, dh
0x12db8: cwde
0x12db9: ret
0x12dba: mov al, byte ptr [di + 0x433]
0x12dbe: cwde
0x12dbf: ret
0x12dc0: inc bx
0x12dc1: cmp bl, byte ptr [si + 0x44]
2018-12-17T22:53:41.06290635Z 44 PC: 12db6 | Get time 0x12db6: mov al, dh
0x12db8: cwde
0x12db9: ret
0x12dba: mov al, byte ptr [di + 0x433]
0x12dbe: cwde
0x12dbf: ret
0x12dc0: inc bx
0x12dc1: cmp bl, byte ptr [si + 0x44]
0x12dc4: dec di
0x12dc5: push bx
0x12dc6: pop sp
0x12dc7: sub ch, byte ptr [0x2a]
0x12dcb: and byte ptr [bx + si], ah
0x12dcd: and byte ptr [bx + si], ah
0x12dcf: and byte ptr [bx + si], ah
0x12dd1: and byte ptr [bx + si], ah
0x12dd3: and byte ptr [bx + si], ah
0x12dd5: and byte ptr [bx + si], ah
0x12dd7: and byte ptr [bx + si], ah
0x12dd9: and byte ptr [bx + si], ah
2018-12-17T22:53:41.065611732Z 44 PC: 12da3 | Get time 0x12da3: mov al, ch
0x12da5: cwde
0x12da6: ret
0x12da7: mov ah, 0x2c
0x12da9: int 0x21
0x12dab: mov al, cl
0x12dad: cwde
0x12dae: ret
0x12daf: int 0x12
0x12db1: ret
0x12db2: mov ah, 0x2c
0x12db4: int 0x21
0x12db6: mov al, dh
0x12db8: cwde
0x12db9: ret
0x12dba: mov al, byte ptr [di + 0x433]
0x12dbe: cwde
0x12dbf: ret
0x12dc0: inc bx
0x12dc1: cmp bl, byte ptr [si + 0x44]
2018-12-17T22:53:41.069145069Z 44 PC: 12db6 | Get time 0x12db6: mov al, dh
0x12db8: cwde
0x12db9: ret
0x12dba: mov al, byte ptr [di + 0x433]
0x12dbe: cwde
0x12dbf: ret
0x12dc0: inc bx
0x12dc1: cmp bl, byte ptr [si + 0x44]
0x12dc4: dec di
0x12dc5: push bx
0x12dc6: pop sp
0x12dc7: sub ch, byte ptr [0x2a]
0x12dcb: and byte ptr [bx + si], ah
0x12dcd: and byte ptr [bx + si], ah
0x12dcf: and byte ptr [bx + si], ah
0x12dd1: and byte ptr [bx + si], ah
0x12dd3: and byte ptr [bx + si], ah
0x12dd5: and byte ptr [bx + si], ah
0x12dd7: and byte ptr [bx + si], ah
0x12dd9: and byte ptr [bx + si], ah
2018-12-17T22:53:41.072155053Z 44 PC: 12db6 | Get time 0x12db6: mov al, dh
0x12db8: cwde
0x12db9: ret
0x12dba: mov al, byte ptr [di + 0x433]
0x12dbe: cwde
0x12dbf: ret
0x12dc0: inc bx
0x12dc1: cmp bl, byte ptr [si + 0x44]
0x12dc4: dec di
0x12dc5: push bx
0x12dc6: pop sp
0x12dc7: sub ch, byte ptr [0x2a]
0x12dcb: and byte ptr [bx + si], ah
0x12dcd: and byte ptr [bx + si], ah
0x12dcf: and byte ptr [bx + si], ah
0x12dd1: and byte ptr [bx + si], ah
0x12dd3: and byte ptr [bx + si], ah
0x12dd5: and byte ptr [bx + si], ah
0x12dd7: and byte ptr [bx + si], ah
0x12dd9: and byte ptr [bx + si], ah
2018-12-17T22:53:43.256945013Z 72 PC: 8f1b9 | Allocate memory
2018-12-17T22:53:43.259887751Z 72 PC: 8f1bd | Allocate memory
2018-12-17T22:53:43.262891844Z 99 PC: 90858 | Get DBCS lead byte table pointer
2018-12-17T22:53:43.266285158Z 61 PC: 91f88 | Open file (Filename = 'C:\WINDOWS\HIMEM.SYS')
2018-12-17T22:53:43.27791855Z 66 PC: 91f95 | Move file pointer
2018-12-17T22:53:43.28043135Z 62 PC: 91fc1 | Close file
2018-12-17T22:53:43.283105033Z 75 PC: 91fe0 | Execute program
2018-12-17T22:53:43.300121767Z 98 PC: 916f1 | Get current PSP
2018-12-17T22:53:43.302647842Z 9 PC: c605 | Display string (String= '6��r�&;] u')
2018-12-17T22:53:43.307531406Z 48 PC: c609 | Get DOS version
2018-12-17T22:53:43.311125287Z 9 PC: c382 | Display string (String= ' Installed A20 handler number ')
2018-12-17T22:53:43.314849933Z 2 PC: c38c | Character output (Char = '32')
2018-12-17T22:53:43.317505421Z 2 PC: c3a7 | Character output (Char = '2e')
2018-12-17T22:53:43.3215136Z 9 PC: c6d9 | Display string (String= '�����VH�VD���V@��������������_���Ku��t1��������D�����t �� ��������a1��Z�����W���� ������5���|�����(���������Nj�(��������p�^')
2018-12-17T22:53:43.327124019Z 9 PC: c6e0 | Display string (String= '�5���|�����(���������Nj�(��������p�^')
2018-12-17T22:53:43.332718778Z 61 PC: 91f88 | Open file (Filename = 'C:\WINDOWS\SMARTDRV.EXE')
2018-12-17T22:53:43.343759918Z 66 PC: 91f95 | Move file pointer
2018-12-17T22:53:43.346355413Z 62 PC: 91fc1 | Close file
2018-12-17T22:53:43.348290197Z 75 PC: 91fe0 | Execute program
2018-12-17T22:53:43.369109585Z 98 PC: 916f1 | Get current PSP
2018-12-17T22:53:43.374068109Z 82 PC: 13d46 | Get DOS internal pointers (SYSVARS)
2018-12-17T22:53:43.37626732Z 53 PC: 13ac3 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:53:43.378153984Z 37 PC: 13ad6 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:53:43.380171925Z 53 PC: 13ae0 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T22:53:43.396871714Z 37 PC: 13af3 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T22:53:43.399043443Z 9 PC: 13a0d | Display string (Could not find end pointer)
2018-12-17T22:53:43.407465544Z 62 PC: 8f8eb | Close file
2018-12-17T22:53:43.410703476Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.41264897Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.414452658Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.417380198Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.422537826Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.424614817Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.427456686Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.429389296Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.43134003Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.433502122Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.435800128Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.437712119Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.439582773Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.442188998Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.444692742Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.446638627Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.4494458Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.451319519Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.45323633Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.455769819Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.457667524Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.459548778Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.462144063Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.4639741Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.466696784Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.469487978Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.471354884Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.473214728Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.475906033Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.477620464Z 62 PC: 8f8f2 | Close file
2018-12-17T22:53:43.479213005Z 61 PC: 8f8ff | Open file (Filename = '')
2018-12-17T22:53:43.485288518Z 62 PC: 8f90e | Close file
2018-12-17T22:53:43.487568841Z 69 PC: 8f915 | Duplicate handle
2018-12-17T22:53:43.490459511Z 69 PC: 8f919 | Duplicate handle
2018-12-17T22:53:43.493098488Z 61 PC: 9387b | Open file (Filename = '')
2018-12-17T22:53:43.498999623Z 68 PC: 9386b | I/O control for devices (Set for = '')
2018-12-17T22:53:43.501049123Z 61 PC: 9387b | Open file (Filename = '')
2018-12-17T22:53:43.507377099Z 68 PC: 9386b | I/O control for devices (Set for = '')
2018-12-17T22:53:43.509913123Z 74 PC: 8f9c4 | Reallocate memory
2018-12-17T22:53:43.511956081Z 72 PC: 8f9e0 | Allocate memory
2018-12-17T22:53:43.515154448Z 72 PC: 8f9e4 | Allocate memory
2018-12-17T22:53:43.517351486Z 74 PC: 8f9fb | Reallocate memory
2018-12-17T22:53:43.519376409Z 72 PC: 8fa02 | Allocate memory
2018-12-17T22:53:43.522715832Z 72 PC: 8fa06 | Allocate memory
2018-12-17T22:53:43.524578381Z 73 PC: 8fa11 | Release memory
2018-12-17T22:53:43.526283293Z 73 PC: 8efea | Release memory
2018-12-17T22:53:43.5288315Z 74 PC: 8f003 | Reallocate memory
2018-12-17T22:53:43.530643684Z 72 PC: 8f054 | Allocate memory
2018-12-17T22:53:43.532715676Z 72 PC: 8f058 | Allocate memory
2018-12-17T22:53:43.535347459Z 73 PC: 8f060 | Release memory
2018-12-17T22:53:43.537120309Z 61 PC: 8f080 | Open file (Filename = '')
2018-12-17T22:53:43.547226904Z 63 PC: 8f095 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:53:43.555075086Z 66 PC: 8f0ad | Move file pointer
2018-12-17T22:53:43.556966158Z 62 PC: 8f0d1 | Close file
2018-12-17T22:53:43.559258724Z 75 PC: 8f0f2 | Execute program
2018-12-17T22:53:43.586803956Z 80 PC: 12be9 | Set current PSP
2018-12-17T22:53:43.588540267Z 48 PC: 12bee | Get DOS version
2018-12-17T22:53:43.59071905Z 99 PC: 193d0 | Get DBCS lead byte table pointer
2018-12-17T22:53:43.593770522Z 101 PC: 12c74 | Get extended country info
2018-12-17T22:53:43.596634642Z 99 PC: 12c7a | Get DBCS lead byte table pointer
2018-12-17T22:53:43.598535863Z 74 PC: 12cdc | Reallocate memory
2018-12-17T22:53:43.600702864Z 72 PC: 1355d | Allocate memory
2018-12-17T22:53:43.604506348Z 25 PC: 13596 | Get default drive
2018-12-17T22:53:43.606265563Z 71 PC: 135ad | Get current directory
2018-12-17T22:53:43.611146882Z 59 PC: 135ba | Change current directory
2018-12-17T22:53:43.618326409Z 59 PC: 135c8 | Change current directory
2018-12-17T22:53:43.625637762Z 59 PC: 135d3 | Change current directory
2018-12-17T22:53:43.629677611Z 25 PC: 12d13 | Get default drive
2018-12-17T22:53:43.6323814Z 37 PC: 127d3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:53:43.634346772Z 37 PC: 127da | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:53:43.636134179Z 37 PC: 127e1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:53:43.639954665Z 80 PC: 1301d | Set current PSP
2018-12-17T22:53:43.641461396Z 37 PC: 13041 | Set interrupt vector (Interrupt = '46' AKA 'Set verify flag')
2018-12-17T22:53:43.643426617Z 53 PC: 13362 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T22:53:43.646234591Z 37 PC: 13383 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T22:53:43.648505657Z 51 PC: 13417 | Get or set Ctrl-Break
2018-12-17T22:53:43.651037583Z 72 PC: 130ec | Allocate memory
2018-12-17T22:53:43.65432576Z 61 PC: 131b2 | Open file (Filename = '')
2018-12-17T22:53:43.662532345Z 62 PC: 131ba | Close file
2018-12-17T22:53:43.665064762Z 51 PC: 1344c | Get or set Ctrl-Break
2018-12-17T22:53:43.668368077Z 74 PC: 1197c | Reallocate memory
2018-12-17T22:53:43.670508879Z 72 PC: 11991 | Allocate memory
2018-12-17T22:53:43.67283096Z 73 PC: 119b2 | Release memory
2018-12-17T22:53:43.676852675Z 72 PC: 119bd | Allocate memory
2018-12-17T22:53:43.679102161Z 73 PC: 119df | Release memory
2018-12-17T22:53:43.681169053Z 72 PC: 119f5 | Allocate memory
2018-12-17T22:53:43.683540187Z 72 PC: 119fd | Allocate memory