Sample viewer

vx.netlux.org/Virus.DOS.Flowers.1688

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:19:31.553681999Z 74 PC: 12a54 | Reallocate memory
2018-12-17T22:19:31.555610944Z 48 PC: 12ab6 | Get DOS version
2018-12-17T22:19:31.557859396Z 42 PC: 9f9a5 | Get date 0x9f9a5: cmp al, 1
0x9f9a7: jne 0x9f9f5
0x9f9a9: mov ah, 0x2c
0x9f9ab: int 0x21
0x9f9ad: cmp cx, 0x31e
0x9f9b1: jne 0x9f9f5
0x9f9b3: mov ah, 9
0x9f9b5: lea dx, word ptr [0x136]
0x9f9b9: int 0x21
0x9f9bb: mov cx, 0x80
0x9f9be: mov al, 0
0x9f9c0: out 0x70, al
0x9f9c2: push ax
0x9f9c3: in al, 0x71
0x9f9c5: not ax
0x9f9c7: out 0x71, al
0x9f9c9: pop ax
0x9f9ca: inc al
0x9f9cc: loop 0x9f9c0
0x9f9ce: xor ax, ax
2018-12-17T22:19:31.560308786Z 44 PC: 9f9ad | Get time 0x9f9ad: cmp cx, 0x31e
0x9f9b1: jne 0x9f9f5
0x9f9b3: mov ah, 9
0x9f9b5: lea dx, word ptr [0x136]
0x9f9b9: int 0x21
0x9f9bb: mov cx, 0x80
0x9f9be: mov al, 0
0x9f9c0: out 0x70, al
0x9f9c2: push ax
0x9f9c3: in al, 0x71
0x9f9c5: not ax
0x9f9c7: out 0x71, al
0x9f9c9: pop ax
0x9f9ca: inc al
0x9f9cc: loop 0x9f9c0
0x9f9ce: xor ax, ax
0x9f9d0: mov dl, 0x80
0x9f9d2: int 0x13
0x9f9d4: mov ax, 0x201
0x9f9d7: mov bx, 0x200
2018-12-17T22:19:31.562754549Z 61 PC: 9f65f | Open file (Filename = 'C:\COMMAND.COM')
2018-12-17T22:19:31.570304504Z 66 PC: 9f677 | Move file pointer
2018-12-17T22:19:31.571972667Z 63 PC: 9f686 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:19:31.575361562Z 62 PC: 9f68a | Close file
2018-12-17T22:19:31.577969077Z 37 PC: 9fabb | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:31.579872247Z 61 PC: 9faee | Open file (Filename = 'C:\COMMAND.COM')
2018-12-17T22:19:31.602857415Z 87 PC: 9faf5 | Get or set file date and time
2018-12-17T22:19:31.60495156Z 62 PC: 9fb03 | Close file
2018-12-17T22:19:31.60758079Z 67 PC: 9fb0b | Get or set file attributes
2018-12-17T22:19:31.613456616Z 67 PC: 9fb1b | Get or set file attributes
2018-12-17T22:19:31.971023279Z 61 PC: 9f6a3 | Open file (Filename = 'C:\COMMAND.COM')
2018-12-17T22:19:31.979925926Z 63 PC: 9f6b9 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:19:31.983325905Z 66 PC: 9f6c2 | Move file pointer
2018-12-17T22:19:31.985401607Z 66 PC: 9f6f2 | Move file pointer
2018-12-17T22:19:31.988468014Z 64 PC: 9f6fc | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:19:31.99191123Z 66 PC: 9f716 | Move file pointer
2018-12-17T22:19:31.993998291Z 64 PC: 9f721 | Write file or device (Write 1688 bytes on handle 5)
2018-12-17T22:19:32.006051368Z 62 PC: 9f72a | Close file
2018-12-17T22:19:32.015310372Z 61 PC: 9fb24 | Open file (Filename = 'C:\COMMAND.COM')
2018-12-17T22:19:32.024086055Z 87 PC: 9fb3d | Get or set file date and time
2018-12-17T22:19:32.026789244Z 62 PC: 9fb41 | Close file
2018-12-17T22:19:32.03364026Z 67 PC: 9fb4e | Get or set file attributes
2018-12-17T22:19:32.04360082Z 37 PC: 9fae4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:32.045281812Z 53 PC: 9faa5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:32.048185169Z 61 PC: 9f65f | Open file (Filename = 'A:\QBASIC.EXE')
2018-12-17T22:19:32.055659908Z 37 PC: 9fabb | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:32.057453248Z 61 PC: 9faee | Open file (Filename = 'A:\QBASIC.EXE')
2018-12-17T22:19:32.065565441Z 87 PC: 9faf5 | Get or set file date and time
2018-12-17T22:19:32.067374834Z 62 PC: 9fb03 | Close file
2018-12-17T22:19:32.069533311Z 67 PC: 9fb0b | Get or set file attributes
2018-12-17T22:19:32.077158075Z 67 PC: 9fb1b | Get or set file attributes
2018-12-17T22:19:32.083967476Z 61 PC: 9f73b | Open file (Filename = 'A:\QBASIC.EXE')
2018-12-17T22:19:32.091998339Z 61 PC: 9fb24 | Open file (Filename = 'A:\QBASIC.EXE')
2018-12-17T22:19:32.100062388Z 87 PC: 9fb3d | Get or set file date and time
2018-12-17T22:19:32.10220479Z 62 PC: 9fb41 | Close file
2018-12-17T22:19:32.104223126Z 67 PC: 9fb4e | Get or set file attributes
2018-12-17T22:19:32.110257799Z 37 PC: 9fae4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:32.112110668Z 75 PC: 12af4 | Execute program
2018-12-17T22:19:32.119460181Z 42 PC: 9f9a5 | Get date 0x9f9a5: cmp al, 1
0x9f9a7: jne 0x9f9f5
0x9f9a9: mov ah, 0x2c
0x9f9ab: int 0x21
0x9f9ad: cmp cx, 0x31e
0x9f9b1: jne 0x9f9f5
0x9f9b3: mov ah, 9
0x9f9b5: lea dx, word ptr [0x136]
0x9f9b9: int 0x21
0x9f9bb: mov cx, 0x80
0x9f9be: mov al, 0
0x9f9c0: out 0x70, al
0x9f9c2: push ax
0x9f9c3: in al, 0x71
0x9f9c5: not ax
0x9f9c7: out 0x71, al
0x9f9c9: pop ax
0x9f9ca: inc al
0x9f9cc: loop 0x9f9c0
0x9f9ce: xor ax, ax
2018-12-17T22:19:32.122943874Z 44 PC: 9f9ad | Get time 0x9f9ad: cmp cx, 0x31e
0x9f9b1: jne 0x9f9f5
0x9f9b3: mov ah, 9
0x9f9b5: lea dx, word ptr [0x136]
0x9f9b9: int 0x21
0x9f9bb: mov cx, 0x80
0x9f9be: mov al, 0
0x9f9c0: out 0x70, al
0x9f9c2: push ax
0x9f9c3: in al, 0x71
0x9f9c5: not ax
0x9f9c7: out 0x71, al
0x9f9c9: pop ax
0x9f9ca: inc al
0x9f9cc: loop 0x9f9c0
0x9f9ce: xor ax, ax
0x9f9d0: mov dl, 0x80
0x9f9d2: int 0x13
0x9f9d4: mov ax, 0x201
0x9f9d7: mov bx, 0x200
2018-12-17T22:19:32.125950044Z 61 PC: 9f65f | Open file (Filename = 'C:\COMMAND.COM')
2018-12-17T22:19:32.133600835Z 66 PC: 9f677 | Move file pointer
2018-12-17T22:19:32.135563875Z 63 PC: 9f686 | Read file or device (Read 2 bytes on handle 2)
2018-12-17T22:19:32.140184851Z 62 PC: 9f68a | Close file
2018-12-17T22:19:32.142554972Z 53 PC: 9faa5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:32.144444126Z 61 PC: 9f65f | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:19:32.152789518Z 37 PC: 9fabb | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:32.154447592Z 61 PC: 9faee | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:19:32.170592836Z 87 PC: 9faf5 | Get or set file date and time
2018-12-17T22:19:32.173649641Z 62 PC: 9fb03 | Close file
2018-12-17T22:19:32.176013177Z 67 PC: 9fb0b | Get or set file attributes
2018-12-17T22:19:32.183749706Z 67 PC: 9fb1b | Get or set file attributes
2018-12-17T22:19:32.191423014Z 61 PC: 9f73b | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:19:32.199418104Z 61 PC: 9fb24 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:19:32.206612633Z 87 PC: 9fb3d | Get or set file date and time
2018-12-17T22:19:32.208456301Z 62 PC: 9fb41 | Close file
2018-12-17T22:19:32.211147155Z 67 PC: 9fb4e | Get or set file attributes
2018-12-17T22:19:32.221236632Z 37 PC: 9fae4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:32.223160281Z 75 PC: 12af4 | Execute program
2018-12-17T22:19:32.232986139Z 42 PC: 9f9a5 | Get date 0x9f9a5: cmp al, 1
0x9f9a7: jne 0x9f9f5
0x9f9a9: mov ah, 0x2c
0x9f9ab: int 0x21
0x9f9ad: cmp cx, 0x31e
0x9f9b1: jne 0x9f9f5
0x9f9b3: mov ah, 9
0x9f9b5: lea dx, word ptr [0x136]
0x9f9b9: int 0x21
0x9f9bb: mov cx, 0x80
0x9f9be: mov al, 0
0x9f9c0: out 0x70, al
0x9f9c2: push ax
0x9f9c3: in al, 0x71
0x9f9c5: not ax
0x9f9c7: out 0x71, al
0x9f9c9: pop ax
0x9f9ca: inc al
0x9f9cc: loop 0x9f9c0
0x9f9ce: xor ax, ax
2018-12-17T22:19:32.236084902Z 44 PC: 9f9ad | Get time 0x9f9ad: cmp cx, 0x31e
0x9f9b1: jne 0x9f9f5
0x9f9b3: mov ah, 9
0x9f9b5: lea dx, word ptr [0x136]
0x9f9b9: int 0x21
0x9f9bb: mov cx, 0x80
0x9f9be: mov al, 0
0x9f9c0: out 0x70, al
0x9f9c2: push ax
0x9f9c3: in al, 0x71
0x9f9c5: not ax
0x9f9c7: out 0x71, al
0x9f9c9: pop ax
0x9f9ca: inc al
0x9f9cc: loop 0x9f9c0
0x9f9ce: xor ax, ax
0x9f9d0: mov dl, 0x80
0x9f9d2: int 0x13
0x9f9d4: mov ax, 0x201
0x9f9d7: mov bx, 0x200
2018-12-17T22:19:32.239457047Z 61 PC: 9f65f | Open file (Filename = 'C:\COMMAND.COM')
2018-12-17T22:19:32.2477933Z 66 PC: 9f677 | Move file pointer
2018-12-17T22:19:32.249970926Z 63 PC: 9f686 | Read file or device (Read 2 bytes on handle 2)
2018-12-17T22:19:32.253782297Z 62 PC: 9f68a | Close file
2018-12-17T22:19:32.257058186Z 53 PC: 9faa5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:32.260061054Z 61 PC: 9f65f | Open file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T22:19:32.271490625Z 66 PC: 9f677 | Move file pointer
2018-12-17T22:19:32.273768024Z 63 PC: 9f686 | Read file or device (Read 2 bytes on handle 2)
2018-12-17T22:19:32.281259404Z 62 PC: 9f68a | Close file
2018-12-17T22:19:32.283790424Z 37 PC: 9fabb | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:32.285607225Z 61 PC: 9faee | Open file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T22:19:32.294682505Z 87 PC: 9faf5 | Get or set file date and time
2018-12-17T22:19:32.296723623Z 62 PC: 9fb03 | Close file
2018-12-17T22:19:32.300086441Z 67 PC: 9fb0b | Get or set file attributes
2018-12-17T22:19:32.307975409Z 67 PC: 9fb1b | Get or set file attributes
2018-12-17T22:19:32.319348451Z 61 PC: 9f73b | Open file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T22:19:32.32820354Z 63 PC: 9f74d | Read file or device (Read 24 bytes on handle 2)
2018-12-17T22:19:32.335763012Z 66 PC: 9f756 | Move file pointer
2018-12-17T22:19:32.338252396Z 66 PC: 9f7cc | Move file pointer
2018-12-17T22:19:32.340313672Z 64 PC: 9f7d6 | Write file or device (Write 24 bytes on handle 2)
2018-12-17T22:19:32.344633153Z 66 PC: 9f7ed | Move file pointer
2018-12-17T22:19:32.347056544Z 64 PC: 9f7f8 | Write file or device (Write 1688 bytes on handle 2)
2018-12-17T22:19:32.356255679Z 62 PC: 9f7fc | Close file
2018-12-17T22:19:32.367453419Z 61 PC: 9fb24 | Open file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T22:19:32.376017422Z 87 PC: 9fb3d | Get or set file date and time
2018-12-17T22:19:32.378316168Z 62 PC: 9fb41 | Close file
2018-12-17T22:19:32.385530307Z 67 PC: 9fb4e | Get or set file attributes
2018-12-17T22:19:32.397562403Z 37 PC: 9fae4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:32.399539956Z 75 PC: 12af4 | Execute program
2018-12-17T22:19:32.51443394Z 48 PC: 38db4 | Get DOS version
2018-12-17T22:19:32.517441933Z 74 PC: 38e04 | Reallocate memory
2018-12-17T22:19:32.520305504Z 48 PC: 38e68 | Get DOS version
2018-12-17T22:19:32.522066897Z 53 PC: 38e70 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:19:32.524399799Z 37 PC: 38e82 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:19:32.52587363Z 53 PC: 3fb6f | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:19:32.527356603Z 53 PC: 3fb6f | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:19:32.529697068Z 53 PC: 3fb6f | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:19:32.531561753Z 53 PC: 3fb6f | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:19:32.533379407Z 53 PC: 3fb6f | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:19:32.535751558Z 53 PC: 3fb6f | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:19:32.537745812Z 53 PC: 3fb6f | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:19:32.539634044Z 53 PC: 3fb6f | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:19:32.542256049Z 53 PC: 3fb6f | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:19:32.543968893Z 53 PC: 3fb6f | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:19:32.545716165Z 53 PC: 3fb6f | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:19:32.547956316Z 37 PC: 3fb9e | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:19:32.549972628Z 37 PC: 3fb9e | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:19:32.551851761Z 37 PC: 3fb9e | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:19:32.553908469Z 37 PC: 3fb9e | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:19:32.557042004Z 37 PC: 3fb9e | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:19:32.558361859Z 37 PC: 3fb9e | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:19:32.559609132Z 37 PC: 3fb9e | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:19:32.561627273Z 37 PC: 3fb9e | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:19:32.562801828Z 37 PC: 3fba5 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:19:32.563926052Z 37 PC: 3fbaa | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:19:32.565876972Z 68 PC: 38f13 | I/O control for devices (Set for = '��r��R')
2018-12-17T22:19:32.567415462Z 68 PC: 38f13 | I/O control for devices (Set for = '@�')
2018-12-17T22:19:32.568849737Z 68 PC: 38f13 | I/O control for devices (Set for = 'B�N;�tC��vb�F u\� �W� ��� ')
2018-12-17T22:19:32.57099908Z 68 PC: 38f13 | I/O control for devices (Set for = 'B�N;�tC��vb�F u\� �W� ��� ')
2018-12-17T22:19:32.575570479Z 68 PC: 38f13 | I/O control for devices (Set for = '� �W� ��� ')
2018-12-17T22:19:32.5785644Z 53 PC: 29ea3 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:19:32.581094007Z 37 PC: 29eb5 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:19:32.583101372Z 53 PC: 2f8ee | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:19:32.585128586Z 53 PC: 2f8fb | Get interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:19:32.587664578Z 53 PC: 2f908 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:32.58898877Z 37 PC: 2f91d | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:19:32.590318974Z 37 PC: 2f925 | Set interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:19:32.592144183Z 37 PC: 2f92d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:32.594085065Z 53 PC: 33650 | Get interrupt vector (Interrupt = '239' AKA 'UNKNOWN!')
2018-12-17T22:19:32.596211654Z 53 PC: 3365d | Get interrupt vector (Interrupt = '240' AKA 'UNKNOWN!')
2018-12-17T22:19:32.59872943Z 53 PC: 3366c | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:19:32.599958988Z 37 PC: 33679 | Set interrupt vector (Interrupt = '239' AKA 'UNKNOWN!')
2018-12-17T22:19:32.601046505Z 53 PC: 33680 | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:19:32.603347364Z 37 PC: 3368d | Set interrupt vector (Interrupt = '240' AKA 'UNKNOWN!')
2018-12-17T22:19:32.605081242Z 53 PC: 33699 | Get interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:19:32.61267079Z 48 PC: 3375e | Get DOS version
2018-12-17T22:19:32.615425279Z 74 PC: 3440b | Reallocate memory
2018-12-17T22:19:32.618003758Z 74 PC: 3440b | Reallocate memory
2018-12-17T22:19:32.619957167Z 68 PC: 33565 | I/O control for devices (Set for = 'pt������n~�:4*P')
2018-12-17T22:19:32.622062863Z 68 PC: 33565 | I/O control for devices (Set for = '')
2018-12-17T22:19:32.624760558Z 51 PC: 33583 | Get or set Ctrl-Break
2018-12-17T22:19:32.626075635Z 51 PC: 3358f | Get or set Ctrl-Break
2018-12-17T22:19:32.627625439Z 72 PC: 33bc6 | Allocate memory
2018-12-17T22:19:32.630974804Z 74 PC: 3440b | Reallocate memory
2018-12-17T22:19:32.632920652Z 72 PC: 33bc6 | Allocate memory
2018-12-17T22:19:32.635020704Z 37 PC: 2ef71 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:19:32.648651408Z 48 PC: 23cdf | Get DOS version
2018-12-17T22:19:32.650522749Z 61 PC: 23aec | Open file (Filename = 'C:\DOS\qbasic.ini')
2018-12-17T22:19:32.661993682Z 63 PC: 23aec | Read file or device (Read 120 bytes on handle 2)
2018-12-17T22:19:32.669547579Z 63 PC: 23aec | Read file or device (Read 2 bytes on handle 2)
2018-12-17T22:19:32.672784219Z 63 PC: 23aec | Read file or device (Read 1 bytes on handle 2)
2018-12-17T22:19:32.676090905Z 63 PC: 23aec | Read file or device (Read 2 bytes on handle 2)
2018-12-17T22:19:32.68003919Z 63 PC: 23aec | Read file or device (Read 1 bytes on handle 2)
2018-12-17T22:19:32.683353259Z 63 PC: 23aec | Read file or device (Read 2 bytes on handle 2)
2018-12-17T22:19:32.686621793Z 63 PC: 23aec | Read file or device (Read 1 bytes on handle 2)
2018-12-17T22:19:32.690989659Z 63 PC: 23aec | Read file or device (Read 2 bytes on handle 2)
2018-12-17T22:19:32.695293921Z 63 PC: 23aec | Read file or device (Read 1 bytes on handle 2)
2018-12-17T22:19:32.6986105Z 62 PC: 23aec | Close file
2018-12-17T22:19:32.701698817Z 53 PC: 2f1fa | Get interrupt vector (Interrupt = '239' AKA 'UNKNOWN!')
2018-12-17T22:19:32.703462202Z 37 PC: 2f207 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:19:32.709538086Z 53 PC: 4c428 | Get interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-17T22:19:32.712161039Z 37 PC: 4c434 | Set interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-17T22:19:32.718450663Z 53 PC: 41ea5 | Get interrupt vector (Interrupt = '51' AKA 'Get or set Ctrl-Break')
2018-12-17T22:19:32.726404176Z 37 PC: 2ef71 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:19:32.729976158Z 53 PC: 2f1fa | Get interrupt vector (Interrupt = '239' AKA 'UNKNOWN!')
2018-12-17T22:19:32.73173505Z 37 PC: 2f207 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:19:32.734369835Z 53 PC: 41ea5 | Get interrupt vector (Interrupt = '51' AKA 'Get or set Ctrl-Break')
2018-12-17T22:19:32.737128058Z 53 PC: 4cd19 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:19:32.738729017Z 37 PC: 4cd2c | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:19:32.741441437Z 53 PC: 4cd19 | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:19:32.744178665Z 37 PC: 4cd2c | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:19:32.746000192Z 53 PC: 4cd19 | Get interrupt vector (Interrupt = '22' AKA 'Create or truncate file')
2018-12-17T22:19:32.747790175Z 37 PC: 4cd2c | Set interrupt vector (Interrupt = '22' AKA 'Create or truncate file')
2018-12-17T22:19:32.750188045Z 53 PC: 4cd19 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:19:32.751566124Z 37 PC: 4cd2c | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:19:32.752918388Z 48 PC: 4ccda | Get DOS version
2018-12-17T22:19:32.755440782Z 53 PC: 4ccf8 | Get interrupt vector (Interrupt = '21' AKA 'Sequential write')
2018-12-17T22:19:32.756859008Z 37 PC: 4cd0d | Set interrupt vector (Interrupt = '21' AKA 'Sequential write')