{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":12943,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:36:58.808343791Z | 26 | PC: 12aba | Set disk transfer address |
| 2018-12-25T12:36:58.810342937Z | 71 | PC: 12ac4 | Get current directory |
| 2018-12-25T12:36:58.814424855Z | 53 | PC: 12ac9 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:36:58.815477535Z | 37 | PC: 12add | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:36:58.81675372Z | 42 | PC: 12ae3 | Get date 0x12ae3: cmp dh, 7 0x12ae6: je 0x12aeb 0x12ae8: jmp 0x12b88 0x12aeb: cmp dl, 3 0x12aee: je 0x12af3 0x12af0: jmp 0x12b88 0x12af3: mov ax, 0x201 0x12af6: mov cx, 1 0x12af9: xor dx, dx 0x12afb: lea bx, word ptr [bp + 0x507] 0x12aff: int 0x13 0x12b01: mov ah, 0x3c 0x12b03: xor cx, cx 0x12b05: lea dx, word ptr [bp + 0x20b] 0x12b09: int 0x21 0x12b0b: jb 0x12b2b 0x12b0d: xchg ax, bx 0x12b0e: mov ah, 0x40 0x12b10: mov cx, 0x200 0x12b13: lea dx, word ptr [bp + 0x507] |
| 2018-12-25T12:36:58.824152026Z | 78 | PC: 12bc5 | Find first file |
| 2018-12-25T12:36:58.831226554Z | 67 | PC: 12cfd | Get or set file attributes |
| 2018-12-25T12:36:58.83763693Z | 67 | PC: 12d22 | Get or set file attributes |
| 2018-12-25T12:36:58.855914881Z | 61 | PC: 12d32 | Open file (Filename = 'TEST.EXE') |
| 2018-12-25T12:36:58.86904393Z | 63 | PC: 12d50 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T12:36:58.883971566Z | 66 | PC: 12c67 | Move file pointer |
| 2018-12-25T12:36:58.886656425Z | 66 | PC: 12c67 | Move file pointer (See above) |
| 2018-12-25T12:36:58.888254067Z | 64 | PC: 12df8 | Write file or device (Write 26 bytes on handle 5) |
| 2018-12-25T12:36:58.89122602Z | 66 | PC: 12c67 | Move file pointer (See above) |
| 2018-12-25T12:36:58.893615702Z | 44 | PC: 12e0d | Get time 0x12e0d: mov byte ptr [bp + 0x420], dl 0x12e11: call 0x12e36 0x12e14: call 0x12e4d 0x12e17: mov cx, 0x41f 0x12e1a: mov ah, 0x40 0x12e1c: lea dx, word ptr [bp + 4] 0x12e20: int 0x21 0x12e22: call 0x12e4d 0x12e25: call 0x12e36 0x12e28: pop ax 0x12e29: mov byte ptr [bp + 0x217], al 0x12e2d: call 0x22b9c 0x12e30: call 0x22baa 0x12e33: jmp 0x12be1 0x12e36: cld 0x12e37: push cs 0x12e38: pop es 0x12e39: mov ah, byte ptr [bp + 0x420] 0x12e3d: mov cx, 0x39f 0x12e40: lea si, word ptr [bp + 0x32] |
| 2018-12-25T12:36:58.896809897Z | 64 | PC: 12e22 | Write file or device (Write 1055 bytes on handle 5) |
| 2018-12-25T12:36:58.907530064Z | 87 | PC: 12ba9 | Get or set file date and time |
| 2018-12-25T12:36:58.909527234Z | 62 | PC: 12bae | Close file |
| 2018-12-25T12:36:58.919055211Z | 67 | PC: 12bbb | Get or set file attributes |
| 2018-12-25T12:36:58.930154573Z | 59 | PC: 12be9 | Change current directory |
| 2018-12-25T12:36:58.934737229Z | 78 | PC: 12bc5 | Find first file (See above) |
| 2018-12-25T12:36:58.942707833Z | 67 | PC: 12cfd | Get or set file attributes (See above) |
| 2018-12-25T12:36:58.949004446Z | 67 | PC: 12d22 | Get or set file attributes (See above) |
| 2018-12-25T12:36:58.959841987Z | 61 | PC: 12d32 | Open file (See above) |
| 2018-12-25T12:36:58.968460166Z | 66 | PC: 12c67 | Move file pointer (See above) |
| 2018-12-25T12:36:58.970957924Z | 66 | PC: 12c83 | Move file pointer |
| 2018-12-25T12:36:58.973644409Z | 63 | PC: 12c8e | Read file or device (Read 1 bytes on handle 5) |
| 2018-12-25T12:36:58.981534137Z | 66 | PC: 12c67 | Move file pointer (See above) |
| 2018-12-25T12:36:58.983251978Z | 63 | PC: 12cb1 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-25T12:36:58.985902584Z | 66 | PC: 12c67 | Move file pointer (See above) |
| 2018-12-25T12:36:58.988008273Z | 66 | PC: 12c67 | Move file pointer (See above) |
| 2018-12-25T12:36:58.989443072Z | 64 | PC: 12cda | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T12:36:58.992332713Z | 66 | PC: 12c67 | Move file pointer (See above) |
| 2018-12-25T12:36:58.993826912Z | 44 | PC: 12e0d | Get time (See above) |
| 2018-12-25T12:36:58.998920319Z | 64 | PC: 12e22 | Write file or device (See above) |
| 2018-12-25T12:36:59.009817112Z | 87 | PC: 12ba9 | Get or set file date and time (See above) |
| 2018-12-25T12:36:59.012767306Z | 62 | PC: 12bae | Close file (See above) |
| 2018-12-25T12:36:59.025045212Z | 67 | PC: 12bbb | Get or set file attributes (See above) |
| 2018-12-25T12:36:59.037532804Z | 59 | PC: 12be9 | Change current directory (See above) |
| 2018-12-25T12:36:59.042236536Z | 37 | PC: 12bfd | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:36:59.044939999Z | 26 | PC: 12c19 | Set disk transfer address |
| 2018-12-25T12:36:59.046563191Z | 76 | PC: 12a44 | Terminate with return code (Return code = '164') |
{"DateBased":true,"Day":1,"Month":7,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":12943,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:36:58.979430593Z | 26 | PC: 12aba | Set disk transfer address |
| 2018-12-25T12:36:58.981184896Z | 71 | PC: 12ac4 | Get current directory |
| 2018-12-25T12:36:58.984666006Z | 53 | PC: 12ac9 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:36:58.986105737Z | 37 | PC: 12add | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:36:58.98753397Z | 42 | PC: 12ae3 | Get date 0x12ae3: cmp dh, 7 0x12ae6: je 0x12aeb 0x12ae8: jmp 0x12b88 0x12aeb: cmp dl, 3 0x12aee: je 0x12af3 0x12af0: jmp 0x12b88 0x12af3: mov ax, 0x201 0x12af6: mov cx, 1 0x12af9: xor dx, dx 0x12afb: lea bx, word ptr [bp + 0x507] 0x12aff: int 0x13 0x12b01: mov ah, 0x3c 0x12b03: xor cx, cx 0x12b05: lea dx, word ptr [bp + 0x20b] 0x12b09: int 0x21 0x12b0b: jb 0x12b2b 0x12b0d: xchg ax, bx 0x12b0e: mov ah, 0x40 0x12b10: mov cx, 0x200 0x12b13: lea dx, word ptr [bp + 0x507] |
| 2018-12-25T12:36:58.992449966Z | 78 | PC: 12bc5 | Find first file |
| 2018-12-25T12:36:58.99915628Z | 67 | PC: 12cfd | Get or set file attributes |
| 2018-12-25T12:36:59.005266142Z | 67 | PC: 12d22 | Get or set file attributes |
| 2018-12-25T12:36:59.022173924Z | 61 | PC: 12d32 | Open file (Filename = 'TEST.EXE') |
| 2018-12-25T12:36:59.029413977Z | 63 | PC: 12d50 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T12:36:59.033744622Z | 66 | PC: 12c67 | Move file pointer |
| 2018-12-25T12:36:59.036823064Z | 66 | PC: 12c67 | Move file pointer (See above) |
| 2018-12-25T12:36:59.038223351Z | 64 | PC: 12df8 | Write file or device (Write 26 bytes on handle 5) |
| 2018-12-25T12:36:59.040377242Z | 66 | PC: 12c67 | Move file pointer (See above) |
| 2018-12-25T12:36:59.041961611Z | 44 | PC: 12e0d | Get time 0x12e0d: mov byte ptr [bp + 0x420], dl 0x12e11: call 0x12e36 0x12e14: call 0x12e4d 0x12e17: mov cx, 0x41f 0x12e1a: mov ah, 0x40 0x12e1c: lea dx, word ptr [bp + 4] 0x12e20: int 0x21 0x12e22: call 0x12e4d 0x12e25: call 0x12e36 0x12e28: pop ax 0x12e29: mov byte ptr [bp + 0x217], al 0x12e2d: call 0x22b9c 0x12e30: call 0x22baa 0x12e33: jmp 0x12be1 0x12e36: cld 0x12e37: push cs 0x12e38: pop es 0x12e39: mov ah, byte ptr [bp + 0x420] 0x12e3d: mov cx, 0x39f 0x12e40: lea si, word ptr [bp + 0x32] |
| 2018-12-25T12:36:59.044559664Z | 64 | PC: 12e22 | Write file or device (Write 1055 bytes on handle 5) |
| 2018-12-25T12:36:59.051070025Z | 87 | PC: 12ba9 | Get or set file date and time |
| 2018-12-25T12:36:59.053123405Z | 62 | PC: 12bae | Close file |
| 2018-12-25T12:36:59.06065318Z | 67 | PC: 12bbb | Get or set file attributes |
| 2018-12-25T12:36:59.072099132Z | 59 | PC: 12be9 | Change current directory |
| 2018-12-25T12:36:59.07715831Z | 78 | PC: 12bc5 | Find first file (See above) |
| 2018-12-25T12:36:59.084917964Z | 67 | PC: 12cfd | Get or set file attributes (See above) |
| 2018-12-25T12:36:59.100970507Z | 67 | PC: 12d22 | Get or set file attributes (See above) |
| 2018-12-25T12:36:59.112302518Z | 61 | PC: 12d32 | Open file (See above) |
| 2018-12-25T12:36:59.120219333Z | 66 | PC: 12c67 | Move file pointer (See above) |
| 2018-12-25T12:36:59.121903092Z | 66 | PC: 12c83 | Move file pointer |
| 2018-12-25T12:36:59.123499775Z | 63 | PC: 12c8e | Read file or device (Read 1 bytes on handle 5) |
| 2018-12-25T12:36:59.13170284Z | 66 | PC: 12c67 | Move file pointer (See above) |
| 2018-12-25T12:36:59.133409543Z | 63 | PC: 12cb1 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-25T12:36:59.13636891Z | 66 | PC: 12c67 | Move file pointer (See above) |
| 2018-12-25T12:36:59.152357516Z | 66 | PC: 12c67 | Move file pointer (See above) |
| 2018-12-25T12:36:59.153922675Z | 64 | PC: 12cda | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T12:36:59.156798542Z | 66 | PC: 12c67 | Move file pointer (See above) |
| 2018-12-25T12:36:59.158825523Z | 44 | PC: 12e0d | Get time (See above) |
| 2018-12-25T12:36:59.162258997Z | 64 | PC: 12e22 | Write file or device (See above) |
| 2018-12-25T12:36:59.172359187Z | 87 | PC: 12ba9 | Get or set file date and time (See above) |
| 2018-12-25T12:36:59.174908477Z | 62 | PC: 12bae | Close file (See above) |
| 2018-12-25T12:36:59.184280693Z | 67 | PC: 12bbb | Get or set file attributes (See above) |
| 2018-12-25T12:36:59.195562346Z | 59 | PC: 12be9 | Change current directory (See above) |
| 2018-12-25T12:36:59.200642804Z | 37 | PC: 12bfd | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:36:59.202229792Z | 26 | PC: 12c19 | Set disk transfer address |
| 2018-12-25T12:36:59.206425395Z | 76 | PC: 12a44 | Terminate with return code (Return code = '164') |
{"DateBased":true,"Day":3,"Month":7,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":12943,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:36:58.982621564Z | 26 | PC: 12aba | Set disk transfer address |
| 2018-12-25T12:36:58.984632283Z | 71 | PC: 12ac4 | Get current directory |
| 2018-12-25T12:36:58.987405552Z | 53 | PC: 12ac9 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:36:58.988473327Z | 37 | PC: 12add | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:36:58.990463634Z | 42 | PC: 12ae3 | Get date 0x12ae3: cmp dh, 7 0x12ae6: je 0x12aeb 0x12ae8: jmp 0x12b88 0x12aeb: cmp dl, 3 0x12aee: je 0x12af3 0x12af0: jmp 0x12b88 0x12af3: mov ax, 0x201 0x12af6: mov cx, 1 0x12af9: xor dx, dx 0x12afb: lea bx, word ptr [bp + 0x507] 0x12aff: int 0x13 0x12b01: mov ah, 0x3c 0x12b03: xor cx, cx 0x12b05: lea dx, word ptr [bp + 0x20b] 0x12b09: int 0x21 0x12b0b: jb 0x12b2b 0x12b0d: xchg ax, bx 0x12b0e: mov ah, 0x40 0x12b10: mov cx, 0x200 0x12b13: lea dx, word ptr [bp + 0x507] |
| 2018-12-25T12:36:58.994438479Z | 60 | PC: 12b0b | Create or truncate file |
| 2018-12-25T12:36:59.011374362Z | 64 | PC: 12b19 | Write file or device (Write 512 bytes on handle 5) |
| 2018-12-25T12:36:59.019893565Z | 62 | PC: 12b1d | Close file |
| 2018-12-25T12:37:01.172331856Z | 72 | PC: 8f1b9 | Allocate memory |
| 2018-12-25T12:37:01.174431639Z | 72 | PC: 8f1bd | Allocate memory |
| 2018-12-25T12:37:01.176989731Z | 99 | PC: 90858 | Get DBCS lead byte table pointer |
| 2018-12-25T12:37:01.180551364Z | 61 | PC: 91f88 | Open file (Filename = 'C:\WINDOWS\HIMEM.SYS') |
| 2018-12-25T12:37:01.190904767Z | 66 | PC: 91f95 | Move file pointer |
| 2018-12-25T12:37:01.192691472Z | 62 | PC: 91fc1 | Close file |
| 2018-12-25T12:37:01.195534785Z | 75 | PC: 91fe0 | Execute program |
| 2018-12-25T12:37:01.210672711Z | 98 | PC: 916f1 | Get current PSP |
| 2018-12-25T12:37:01.212131091Z | 9 | PC: c605 | Display string (String= ' 6� � r�&;] u') |
| 2018-12-25T12:37:01.216763397Z | 48 | PC: c609 | Get DOS version |
| 2018-12-25T12:37:01.21985111Z | 9 | PC: c382 | Display string (String= ' Installed A20 handler number ') |
| 2018-12-25T12:37:01.222131551Z | 2 | PC: c38c | Character output (Char = '32') |
| 2018-12-25T12:37:01.238651769Z | 2 | PC: c3a7 | Character output (Char = '2e') |
| 2018-12-25T12:37:01.242368386Z | 9 | PC: c6d9 | Display string (String= '���� �VH�VD���V@������� �� ���� �_���Ku��t1��� ���� �D�����t �� ��������a 1��Z � �� � �W���� ����� �5 � ��|�����(���������Nj�(������� �p�^') |
| 2018-12-25T12:37:01.24639375Z | 9 | PC: c6e0 | Display string (String= ' �5 � ��|�����(���������Nj�(������� �p�^') |
| 2018-12-25T12:37:01.252496283Z | 61 | PC: 91f88 | Open file (See above) |
| 2018-12-25T12:37:01.271738021Z | 66 | PC: 91f95 | Move file pointer (See above) |
| 2018-12-25T12:37:01.273178788Z | 62 | PC: 91fc1 | Close file (See above) |
| 2018-12-25T12:37:01.276242464Z | 75 | PC: 91fe0 | Execute program (See above) |
| 2018-12-25T12:37:01.292106091Z | 98 | PC: 916f1 | Get current PSP (See above) |
| 2018-12-25T12:37:01.294515528Z | 82 | PC: 13d46 | Get DOS internal pointers (SYSVARS) |
| 2018-12-25T12:37:01.295769841Z | 53 | PC: 13ac3 | Get interrupt vector (Interrupt = '19' AKA 'Delete file') |
| 2018-12-25T12:37:01.296809224Z | 37 | PC: 13ad6 | Set interrupt vector (Interrupt = '19' AKA 'Delete file') |
| 2018-12-25T12:37:01.297657274Z | 53 | PC: 13ae0 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address') |
| 2018-12-25T12:37:01.298731781Z | 37 | PC: 13af3 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address') |
| 2018-12-25T12:37:01.299993229Z | 9 | PC: 13a0d | Display string (Could not find end pointer) |
| 2018-12-25T12:37:01.304484082Z | 62 | PC: 8f8eb | Close file |
| 2018-12-25T12:37:01.306279333Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-25T12:37:01.308296999Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.309578104Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.311221912Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.313927635Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.316343387Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.318744057Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.321145204Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.324356496Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.326404224Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.331616861Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.333801717Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.335593697Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.345862899Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.347375165Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.348889535Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.350619287Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.352003454Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.363592492Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.365303308Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.366754602Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.368186768Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.369863995Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.371197448Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.372532066Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.374257394Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.375758148Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.377213975Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.379267415Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.385122488Z | 62 | PC: 8f8f2 | Close file (See above) |
| 2018-12-25T12:37:01.386795102Z | 61 | PC: 8f8ff | Open file (Filename = '') |
| 2018-12-25T12:37:01.392069257Z | 62 | PC: 8f90e | Close file |
| 2018-12-25T12:37:01.393968548Z | 69 | PC: 8f915 | Duplicate handle |
| 2018-12-25T12:37:01.395717346Z | 69 | PC: 8f919 | Duplicate handle |
| 2018-12-25T12:37:01.406359487Z | 61 | PC: 9387b | Open file (Filename = '') |
| 2018-12-25T12:37:01.411633559Z | 68 | PC: 9386b | I/O control for devices (Set for = '') |
| 2018-12-25T12:37:01.413170302Z | 61 | PC: 9387b | Open file (See above) |
| 2018-12-25T12:37:01.418821991Z | 68 | PC: 9386b | I/O control for devices (See above) |
| 2018-12-25T12:37:01.420673682Z | 74 | PC: 8f9c4 | Reallocate memory |
| 2018-12-25T12:37:01.422207587Z | 72 | PC: 8f9e0 | Allocate memory |
| 2018-12-25T12:37:01.424930912Z | 72 | PC: 8f9e4 | Allocate memory |
| 2018-12-25T12:37:01.426950474Z | 74 | PC: 8f9fb | Reallocate memory |
| 2018-12-25T12:37:01.428465229Z | 72 | PC: 8fa02 | Allocate memory |
| 2018-12-25T12:37:01.431011703Z | 72 | PC: 8fa06 | Allocate memory |
| 2018-12-25T12:37:01.432940955Z | 73 | PC: 8fa11 | Release memory |
| 2018-12-25T12:37:01.434613046Z | 73 | PC: 8efea | Release memory |
| 2018-12-25T12:37:01.4367779Z | 74 | PC: 8f003 | Reallocate memory |
| 2018-12-25T12:37:01.438807971Z | 72 | PC: 8f054 | Allocate memory |
| 2018-12-25T12:37:01.440611408Z | 72 | PC: 8f058 | Allocate memory |
| 2018-12-25T12:37:01.442453726Z | 73 | PC: 8f060 | Release memory |
| 2018-12-25T12:37:01.44479065Z | 61 | PC: 8f080 | Open file (Filename = '') |
| 2018-12-25T12:37:01.453511858Z | 63 | PC: 8f095 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-25T12:37:01.458750139Z | 66 | PC: 8f0ad | Move file pointer |
| 2018-12-25T12:37:01.460588656Z | 62 | PC: 8f0d1 | Close file |
| 2018-12-25T12:37:01.462246119Z | 75 | PC: 8f0f2 | Execute program |
| 2018-12-25T12:37:01.482773777Z | 80 | PC: 12be9 | Set current PSP |
| 2018-12-25T12:37:01.484489302Z | 48 | PC: 12bee | Get DOS version |
| 2018-12-25T12:37:01.485922735Z | 99 | PC: 193d0 | Get DBCS lead byte table pointer |
| 2018-12-25T12:37:01.488296495Z | 101 | PC: 12c74 | Get extended country info |
| 2018-12-25T12:37:01.490239712Z | 99 | PC: 12c7a | Get DBCS lead byte table pointer |
| 2018-12-25T12:37:01.498878637Z | 74 | PC: 12cdc | Reallocate memory |
| 2018-12-25T12:37:01.50054493Z | 72 | PC: 1355d | Allocate memory |
| 2018-12-25T12:37:01.50364133Z | 25 | PC: 13596 | Get default drive |
| 2018-12-25T12:37:01.50511985Z | 71 | PC: 135ad | Get current directory |
| 2018-12-25T12:37:01.507914536Z | 59 | PC: 135ba | Change current directory |
| 2018-12-25T12:37:01.514424102Z | 59 | PC: 135c8 | Change current directory |
| 2018-12-25T12:37:01.520252181Z | 59 | PC: 135d3 | Change current directory |
| 2018-12-25T12:37:01.523942953Z | 25 | PC: 12d13 | Get default drive |
| 2018-12-25T12:37:01.526164864Z | 37 | PC: 127d3 | Set interrupt vector (Interrupt = '34' AKA 'Random write') |
| 2018-12-25T12:37:01.527741449Z | 37 | PC: 127da | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-25T12:37:01.529089669Z | 37 | PC: 127e1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:37:01.532119066Z | 80 | PC: 1301d | Set current PSP |
| 2018-12-25T12:37:01.546836382Z | 37 | PC: 13041 | Set interrupt vector (Interrupt = '46' AKA 'Set verify flag') |
| 2018-12-25T12:37:01.549124898Z | 53 | PC: 13362 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address') |
| 2018-12-25T12:37:01.550876056Z | 37 | PC: 13383 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address') |
| 2018-12-25T12:37:01.552351047Z | 51 | PC: 13417 | Get or set Ctrl-Break |
| 2018-12-25T12:37:01.554196858Z | 72 | PC: 130ec | Allocate memory |
| 2018-12-25T12:37:01.556836351Z | 61 | PC: 131b2 | Open file (Filename = '') |
| 2018-12-25T12:37:01.574111904Z | 62 | PC: 131ba | Close file |
| 2018-12-25T12:37:01.576457604Z | 51 | PC: 1344c | Get or set Ctrl-Break |
| 2018-12-25T12:37:01.578454946Z | 74 | PC: 1197c | Reallocate memory |
| 2018-12-25T12:37:01.580788756Z | 72 | PC: 11991 | Allocate memory |
| 2018-12-25T12:37:01.582594052Z | 73 | PC: 119b2 | Release memory |
| 2018-12-25T12:37:01.584779601Z | 72 | PC: 119bd | Allocate memory |
| 2018-12-25T12:37:01.586878291Z | 73 | PC: 119df | Release memory |
| 2018-12-25T12:37:01.588308603Z | 72 | PC: 119f5 | Allocate memory |
| 2018-12-25T12:37:01.590838639Z | 72 | PC: 119fd | Allocate memory |