Sample viewer

vx.netlux.org/Trojan.DOS.Dopewar.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:49:39.778076791Z 48 PC: 18f6c | Get DOS version
2018-12-17T22:49:39.78030112Z 74 PC: 18fbc | Reallocate memory
2018-12-17T22:49:39.782311437Z 48 PC: 19020 | Get DOS version
2018-12-17T22:49:39.783461958Z 53 PC: 19028 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:49:39.786077162Z 37 PC: 1903a | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:49:39.787823162Z 53 PC: 1be22 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:49:39.790410032Z 37 PC: 1be32 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:49:39.797726879Z 53 PC: 1be37 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:49:39.799064572Z 37 PC: 1be47 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:49:39.800337634Z 53 PC: 19b76 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:49:39.802484598Z 53 PC: 19b76 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:49:39.803748452Z 53 PC: 19b76 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:49:39.804985276Z 53 PC: 19b76 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:49:39.807550285Z 53 PC: 19b76 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:49:39.809150992Z 53 PC: 19b76 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:49:39.810596809Z 53 PC: 19b76 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:49:39.812326258Z 53 PC: 19b76 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:49:39.814403641Z 53 PC: 19b76 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:49:39.815741595Z 53 PC: 19b76 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:49:39.817136936Z 53 PC: 19b76 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:49:39.819552374Z 37 PC: 19ba5 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:49:39.821625569Z 37 PC: 19ba5 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:49:39.824083768Z 37 PC: 19ba5 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:49:39.82683118Z 37 PC: 19ba5 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:49:39.8296364Z 37 PC: 19ba5 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:49:39.831199647Z 37 PC: 19ba5 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:49:39.833636014Z 37 PC: 19ba5 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:49:39.83560327Z 37 PC: 19ba5 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:49:39.837321609Z 37 PC: 19bac | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:49:39.839342866Z 37 PC: 19bb1 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:49:39.84202748Z 68 PC: 190cb | I/O control for devices (Set for = '�Āu� �')
2018-12-17T22:49:39.843712496Z 68 PC: 190cb | I/O control for devices (Set for = 'w! ')
2018-12-17T22:49:39.845667278Z 68 PC: 190cb | I/O control for devices (Set for = '�놋Ƌ߹')
2018-12-17T22:49:39.849389822Z 68 PC: 190cb | I/O control for devices (Set for = '��+�|���������=C')
2018-12-17T22:49:39.850951276Z 68 PC: 190cb | I/O control for devices (Set for = '��+�|���������=C')
2018-12-17T22:49:39.852985949Z 53 PC: 161a8 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:49:39.855577137Z 53 PC: 161b5 | Get interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:49:39.858558719Z 53 PC: 161c2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:49:39.860040322Z 37 PC: 161d7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:49:39.864640966Z 37 PC: 161df | Set interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:49:39.866126247Z 37 PC: 161e7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:49:39.867579828Z 53 PC: 16c66 | Get interrupt vector (Interrupt = '239' AKA 'UNKNOWN!')
2018-12-17T22:49:39.869755486Z 53 PC: 16c73 | Get interrupt vector (Interrupt = '240' AKA 'UNKNOWN!')
2018-12-17T22:49:39.871284268Z 53 PC: 16c82 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:49:39.872907387Z 37 PC: 16c8f | Set interrupt vector (Interrupt = '239' AKA 'UNKNOWN!')
2018-12-17T22:49:39.875369774Z 53 PC: 16c96 | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:49:39.876995198Z 37 PC: 16ca3 | Set interrupt vector (Interrupt = '240' AKA 'UNKNOWN!')
2018-12-17T22:49:39.878606325Z 53 PC: 16caf | Get interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:49:39.887456242Z 48 PC: 16d71 | Get DOS version
2018-12-17T22:49:39.888923779Z 74 PC: 14c03 | Reallocate memory
2018-12-17T22:49:39.890865647Z 74 PC: 14c03 | Reallocate memory
2018-12-17T22:49:39.893179053Z 68 PC: 1611e | I/O control for devices (Set for = 'dity...u be the judge! :P')
2018-12-17T22:49:39.895157821Z 68 PC: 1611e | I/O control for devices (Set for = '')
2018-12-17T22:49:39.896519179Z 51 PC: 1613c | Get or set Ctrl-Break
2018-12-17T22:49:39.90206592Z 51 PC: 16148 | Get or set Ctrl-Break
2018-12-17T22:49:39.903262688Z 72 PC: 13006 | Allocate memory
2018-12-17T22:49:39.905457292Z 74 PC: 14c03 | Reallocate memory
2018-12-17T22:49:39.90804841Z 72 PC: 13006 | Allocate memory
2018-12-17T22:49:39.910734707Z 37 PC: 13f2d | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:49:39.915421272Z 61 PC: 13762 | Open file (Filename = 'C:\AUTOEXEC.BAT')
2018-12-17T22:49:39.923230704Z 68 PC: 136bb | I/O control for devices (Set for = 'Worm, Or just plain stupidity...u be the judge! :P')
2018-12-17T22:49:39.925928583Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.928062572Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.931620456Z 63 PC: 1355e | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:49:39.935562202Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.937820274Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.940721445Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.943154015Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.945705719Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.948886616Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.951807674Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.954427065Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.957219141Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.959492552Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.961567149Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.964294694Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.96618197Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.968174413Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.970324352Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.972942952Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.975122848Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.977835935Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.980239861Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.982454392Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.984626924Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.987153621Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.989293391Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.991366005Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.994212323Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.996292641Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:39.998373521Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.001390208Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.003453124Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.006826893Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.01046626Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.012535508Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.014454563Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.017090486Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.01936588Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.02116472Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.023981703Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.025799137Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.027574923Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.030417344Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.032205664Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.034019181Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.036673377Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.03832493Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.039908926Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.042154966Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.044012125Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.045862161Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.048698219Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.050556861Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.053175381Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.055807837Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.057708498Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.05961544Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.062107402Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.0638943Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.065708718Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.068428568Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.070230674Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.072149129Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.074579935Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.076387101Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.078243839Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.080643578Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.082442467Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.08435462Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.086678416Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.088599856Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.090989996Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.093479524Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.095482427Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.101154864Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.104403998Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.106333774Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.108277345Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.110530829Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.112592463Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.114699762Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.117123896Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.118892128Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.120722728Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.123383827Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.125274179Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.128014728Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.131184823Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.13333847Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.135369756Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.137650752Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.139500146Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.141650436Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.144200597Z 63 PC: 1355e | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:49:40.147089936Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.150579151Z 64 PC: 13584 | Write file or device (Write 77 bytes on handle 5)
2018-12-17T22:49:40.154592762Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.156390509Z 62 PC: 13595 | Close file
2018-12-17T22:49:40.496753347Z 61 PC: 13762 | Open file (Filename = 'C:\CONFIG.SYS')
2018-12-17T22:49:40.505481315Z 68 PC: 136bb | I/O control for devices (Set for = 'Worm, Or just plain stupidity...u be the judge! :P')
2018-12-17T22:49:40.507912803Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.510019791Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.5138196Z 63 PC: 1355e | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:49:40.522961376Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.525841467Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.528843908Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.531300443Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.533604181Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.536519619Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.539066393Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.541289991Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.544674189Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.546870977Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.549106276Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.552303553Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.554927844Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.557104523Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.560192625Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.562738388Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.564837812Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.567555628Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.569874535Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.571900131Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.574400448Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.576543695Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.578756743Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.581189303Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.583860852Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.586908458Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.58881485Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.590761918Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.593533776Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.598080939Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.600113147Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.602842895Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.60480394Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.606726392Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.609814373Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.611751633Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.614524072Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.617243351Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.619011182Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.620620546Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.622981321Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.624532425Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.626181293Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.628666783Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.630504355Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.632193378Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.63469611Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.636507504Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.641952884Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.644779645Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.646732985Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.648638806Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.651290377Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.653017983Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.654936959Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.657394766Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.659379595Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.661663657Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.663766407Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.665370671Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.667180942Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.669238318Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.67091066Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.672707646Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.674908521Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.676788653Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.678928163Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.681409264Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.682994482Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.685637117Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.704171379Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.705895599Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.707824042Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.709777382Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.711407404Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.713529451Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.716176865Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.718139572Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.720287137Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.723364829Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.725367161Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.72779913Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.730298196Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.732218644Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.734861519Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.736518412Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.738317682Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.741182655Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.743091231Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.7448367Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.747322741Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.748987168Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.750593356Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.754851155Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.756496336Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.758058782Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.760416501Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.761949071Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.763469317Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.765961679Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.767649581Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.769237053Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.771828051Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.773584561Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.775325702Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.776904228Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.778429454Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.784028974Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.785633068Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.787167731Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.789772865Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.79147301Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.793009105Z 63 PC: 1355e | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:49:40.795504203Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.798241225Z 64 PC: 13584 | Write file or device (Write 109 bytes on handle 5)
2018-12-17T22:49:40.801132357Z 66 PC: 13337 | Move file pointer
2018-12-17T22:49:40.803770163Z 62 PC: 13595 | Close file
2018-12-17T22:49:40.818502112Z 73 PC: 13006 | Release memory
2018-12-17T22:49:40.820834705Z 74 PC: 14c03 | Reallocate memory
2018-12-17T22:49:40.823595532Z 51 PC: 16153 | Get or set Ctrl-Break
2018-12-17T22:49:40.82466438Z 37 PC: 163d5 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:49:40.826785395Z 37 PC: 163df | Set interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:49:40.828718687Z 37 PC: 163e9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:49:40.830130569Z 53 PC: 14630 | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:49:40.831743029Z 53 PC: 1463d | Get interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:49:40.833149872Z 53 PC: 1464a | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:49:40.834620285Z 37 PC: 14665 | Set interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:49:40.845589954Z 53 PC: 1466d | Get interrupt vector (Interrupt = '239' AKA 'UNKNOWN!')
2018-12-17T22:49:40.846836095Z 37 PC: 1467a | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:49:40.848012876Z 53 PC: 14681 | Get interrupt vector (Interrupt = '240' AKA 'UNKNOWN!')
2018-12-17T22:49:40.850133721Z 37 PC: 1468e | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:49:40.851307917Z 37 PC: 14698 | Set interrupt vector (Interrupt = '239' AKA 'UNKNOWN!')
2018-12-17T22:49:40.852473467Z 37 PC: 146a3 | Set interrupt vector (Interrupt = '240' AKA 'UNKNOWN!')
2018-12-17T22:49:40.854528187Z 37 PC: 19bc1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:49:40.856082407Z 37 PC: 19bc1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:49:40.857436672Z 37 PC: 19bc1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:49:40.859855827Z 37 PC: 19bc1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:49:40.860999225Z 37 PC: 19bc1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:49:40.863102446Z 37 PC: 19bc1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:49:40.864272795Z 37 PC: 19bc1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:49:40.865401005Z 37 PC: 19bc1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:49:40.867531157Z 37 PC: 19bc1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:49:40.868829596Z 37 PC: 19bc1 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:49:40.870083432Z 37 PC: 19bc1 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:49:40.872337467Z 37 PC: 1be56 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:49:40.873613364Z 37 PC: 1917c | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:49:40.875764596Z 41 PC: 18e67 | Parse filename
2018-12-17T22:49:40.878109161Z 41 PC: 18e69 | Parse filename
2018-12-17T22:49:40.879577229Z 41 PC: 18e6e | Parse filename
2018-12-17T22:49:40.881030349Z 75 PC: 18e84 | Execute program
2018-12-17T22:49:40.905411977Z 80 PC: 1f0f9 | Set current PSP
2018-12-17T22:49:40.906265069Z 48 PC: 1f0fe | Get DOS version
2018-12-17T22:49:40.908002313Z 99 PC: 258e0 | Get DBCS lead byte table pointer
2018-12-17T22:49:40.911519271Z 101 PC: 1f184 | Get extended country info
2018-12-17T22:49:40.912788525Z 99 PC: 1f18a | Get DBCS lead byte table pointer
2018-12-17T22:49:40.915112742Z 74 PC: 1f1ec | Reallocate memory
2018-12-17T22:49:40.91665503Z 25 PC: 1f223 | Get default drive
2018-12-17T22:49:40.917899448Z 37 PC: 1ece3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:49:40.921112224Z 37 PC: 1ecea | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:49:40.922820954Z 37 PC: 1ecf1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:49:40.927388656Z 74 PC: 1de8c | Reallocate memory
2018-12-17T22:49:40.932480572Z 72 PC: 1decd | Allocate memory
2018-12-17T22:49:40.934456665Z 72 PC: 1df05 | Allocate memory
2018-12-17T22:49:40.936493422Z 72 PC: 1df0d | Allocate memory